[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_446":447,"_448":449},"routes/_app.x.$handle.$name",{"_98":97,"_31":43,"_107":88,"_26":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":24,"_122":123,"_124":57,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",58,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","post_v3_q9_specialization_falsifier.ts","latestPath","fileId","c31c49b6-b0a4-11f1-96b7-1607ee4eb77e","name","fileType","script","content","const enc=new TextEncoder();\nasync function sha256(s:string){return [...new Uint8Array(await crypto.subtle.digest('SHA-256',enc.encode(s)))].map(b=>b.toString(16).padStart(2,'0')).join('')}\nconst url='https://esm.town/v/mosadek/project-brain-successor-20260915-v1/recovered_v3/controller_qualification_v9.ts';\nconst r=await fetch(url);if(!r.ok)throw new Error(`SOURCE_FETCH_${r.status}`);const src=await r.text();\nconst rules=[\n {id:'CLASS_TYPED_API',needle:'async function api(cls:\"A\"|\"B\"'},\n {id:'CLASS_SPECIFIC_AFFORDANCE_MAP',needle:'function affordanceMapFor(cls:\"A\"|\"B\")'},\n {id:'CLASS_SPECIFIC_ACTION_SCHEMA',needle:'function actionSchemaFor(cls:\"A\"|\"B\")'},\n {id:'CLASS_SPECIFIC_ANCHORS',needle:'function anchorsFor(cls:\"A\"|\"B\",goal:any)'},\n {id:'CLASS_SPECIFIC_RUNNER',needle:'async function runClass(cls:\"A\"|\"B\")'},\n {id:'A_SPECIFIC_SUCCESS_CHECK',needle:'if(cls===\"A\"&&route.path===\"/a/build\"'},\n {id:'B_SPECIFIC_SUCCESS_CHECK',needle:'if(cls===\"B\"&&route.path===\"/b/verify\"'},\n {id:'EXPLICIT_A_B_INVOCATION',needle:'const A=await runClass(\"A\"),B=await runClass(\"B\")'},\n {id:'SAME_CONTROLLER_CLAIM_FROM_SPECIALIZED_RUNS',needle:'same_controller:A.pass&&B.pass'}\n];\nconst findings=rules.map(x=>({...x,present:src.includes(x.needle)}));\nconst specialization_count=findings.filter(x=>x.present).length;\nconst verdict=specialization_count===rules.length?'POST_V3_RESIDUAL_REPRODUCED_SAME_CONTROLLER_CLAIM_IS_CLASS_SPECIALIZED':'NOT_REPRODUCED';\nconst out={schema:'POST_V3_Q9_SPECIALIZATION_FALSIFIER_V1',source:{path:'recovered_v3/controller_qualification_v9.ts',bytes:enc.encode(src).length,sha256:await sha256(src)},claim_under_test:'One frozen byte-identical generic controller handles materially different Class A and B without class-specific orchestration.',specialization_count,total_checks:rules.length,findings,verdict,p_real_increment:0,independent_review_claimed:false,human_authority_approval:false,direct_sprites_calls:0,additional_spend_usd:0};\nconsole.log(JSON.stringify(out,null,2));if(verdict==='NOT_REPRODUCED')throw new Error('SPECIALIZATION_NOT_REPRODUCED');export default out;","createdAt",["D",1789435711964],"branchVersion","branchId","0b2522ef-5041-4256-a795-786066279094","id","f6e8c32f-bea0-4b8f-ad10-b41ce857754f","project-brain-successor-20260915-v1",["D",1789434280321],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Clean successor focused on first real superhero","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","01a0a2ab-510a-711e-aa9d-429474e675c1","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","f6e8c32fbea04b8fad10b41ce857754f","tursoHostname","f6e8c32fbea04b8fad10b41ce857754f-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789522252250],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":53,"_103":104,"_105":24},"branch",{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"isOwned",1321,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":441,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":442,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":443,"_82":444,"_84":445,"_86":24},"tree",[301,307,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327],"files",[301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327],"counts",{"_290":61,"_291":292,"_293":248,"_294":295,"_296":297},"contents",[129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":284,"_31":285,"_29":286,"_152":-5,"_39":40,"_38":287,"_154":57,"_36":288,"_13":61,"_32":282,"_34":-5,"_23":24,"_157":-5,"_26":289},{"_41":278,"_31":279,"_29":280,"_152":-5,"_39":40,"_38":248,"_154":57,"_36":281,"_13":61,"_32":282,"_34":-5,"_23":24,"_157":-5,"_26":283},{"_41":271,"_31":272,"_29":273,"_152":-5,"_39":40,"_38":274,"_154":57,"_36":275,"_13":61,"_32":20,"_34":276,"_23":24,"_157":-5,"_26":277},{"_41":264,"_31":265,"_29":266,"_152":-5,"_39":40,"_38":267,"_154":57,"_36":268,"_13":61,"_32":20,"_34":269,"_23":24,"_157":-5,"_26":270},{"_41":258,"_31":259,"_29":260,"_152":-5,"_39":40,"_38":193,"_154":24,"_36":261,"_13":61,"_32":20,"_34":262,"_23":24,"_157":-5,"_26":263},{"_41":251,"_31":252,"_29":253,"_152":-5,"_39":40,"_38":254,"_154":57,"_36":255,"_13":61,"_32":20,"_34":256,"_23":24,"_157":-5,"_26":257},{"_41":243,"_31":244,"_29":245,"_152":-5,"_39":40,"_38":246,"_154":57,"_36":247,"_13":248,"_32":33,"_34":249,"_23":24,"_157":-5,"_26":250},{"_41":235,"_31":236,"_29":237,"_152":-5,"_39":40,"_38":238,"_154":57,"_36":239,"_13":240,"_32":33,"_34":241,"_23":24,"_157":-5,"_26":242},{"_41":228,"_31":229,"_29":230,"_152":-5,"_39":40,"_38":231,"_154":24,"_36":232,"_13":199,"_32":33,"_34":233,"_23":24,"_157":-5,"_26":234},{"_41":220,"_31":221,"_29":222,"_152":-5,"_39":40,"_38":223,"_154":24,"_36":224,"_13":225,"_32":33,"_34":226,"_23":24,"_157":-5,"_26":227},{"_41":213,"_31":214,"_29":215,"_152":-5,"_39":40,"_38":216,"_154":24,"_36":217,"_13":193,"_32":33,"_34":218,"_23":24,"_157":-5,"_26":219},{"_41":206,"_31":207,"_29":208,"_152":-5,"_39":40,"_38":209,"_154":24,"_36":210,"_13":191,"_32":33,"_34":211,"_23":24,"_157":-5,"_26":212},{"_41":203,"_31":27,"_29":30,"_152":-5,"_39":40,"_38":14,"_154":57,"_36":204,"_13":61,"_32":33,"_34":35,"_23":24,"_157":-5,"_26":205},{"_41":196,"_31":197,"_29":198,"_152":-5,"_39":40,"_38":199,"_154":57,"_36":200,"_13":61,"_32":33,"_34":201,"_23":24,"_157":-5,"_26":202},{"_41":188,"_31":189,"_29":190,"_152":-5,"_39":40,"_38":191,"_154":57,"_36":192,"_13":193,"_32":33,"_34":194,"_23":24,"_157":-5,"_26":195},{"_41":180,"_31":181,"_29":182,"_152":-5,"_39":40,"_38":183,"_154":24,"_36":184,"_13":185,"_32":33,"_34":186,"_23":24,"_157":-5,"_26":187},{"_41":173,"_31":174,"_29":175,"_152":-5,"_39":40,"_38":176,"_154":24,"_36":177,"_13":61,"_32":33,"_34":178,"_23":24,"_157":-5,"_26":179},{"_41":166,"_31":167,"_29":168,"_152":-5,"_39":40,"_38":169,"_154":24,"_36":170,"_13":61,"_32":33,"_34":171,"_23":24,"_157":-5,"_26":172},{"_41":159,"_31":160,"_29":161,"_152":-5,"_39":40,"_38":162,"_154":24,"_36":163,"_13":61,"_32":33,"_34":164,"_23":24,"_157":-5,"_26":165},{"_41":149,"_31":150,"_29":151,"_152":-5,"_39":40,"_38":153,"_154":57,"_36":155,"_13":61,"_32":33,"_34":156,"_23":24,"_157":-5,"_26":158},"952a5e22-8fe3-42d7-8eb9-2e232978b76e","verify_recovered_v3.ts","3480b0a2-b0a4-11f1-98bc-1607ee4eb77e","parentId",53,"latest",["D",1789435472678],"const enc=new TextEncoder();async function h(s:string){return [...new Uint8Array(await crypto.subtle.digest('SHA-256',enc.encode(s)))].map(b=>b.toString(16).padStart(2,'0')).join('')}\nconst base='https://esm.town/v/mosadek/first-superhero-cross-domain-public-sandbox-v1/';\nconst expect:any={\"core.ts\":\"531b5614596c58e152e3b84a6c086e950d021735139258908c4a6d13bb578389\",\"selftest.ts\":\"eb32c80033dced9f0f9f6c963a567df8a9c639946d41dc17d5beb8671d0acd09\"};\nconst out:any[]=[];for(const f of Object.keys(expect)){const r=await fetch(base+f);const s=await r.text();const sha256=await h(s);out.push({file:f,status:r.status,bytes:enc.encode(s).length,sha256,expected:expect[f],exact_match:sha256===expect[f]})}console.log(JSON.stringify(out,null,2));if(out.some(x=>!x.exact_match))throw new Error('V3_HASH_MISMATCH');export default out;","label",[150],"292f7626-9f45-4978-892b-8ac5a45b5e1e","v2_guard_type_isolated_test.ts","d0793224-b0a2-11f1-8ef2-1607ee4eb77e",30,["D",1789434875355],"import { __testReset,createTaskMember,prepareCurrentnessGuard,consumeCurrentnessGuard } from \"./lineage_currentness_v2.ts\";\nawait __testReset();\nawait createTaskMember({task_id:\"TYPE\",dedupe_key:\"d:type\",payload:{x:1}});\nconst p:any=await prepareCurrentnessGuard();\nif(!p.ok) throw new Error(\"PREPARE_FAILED \"+JSON.stringify(p));\nconst bad={...p.guard,event_generation:String(p.guard.event_generation)};\nconst c:any=await consumeCurrentnessGuard(bad,\"type-reject\");\nconst pass=c?.ok===false&&c?.reason===\"BAD_GUARD_EVENT_GENERATION\";\nconsole.log(JSON.stringify({schema:\"V2_GUARD_TYPE_ISOLATED_TEST_V1\",pass,prepare_guard:p.guard,consume_result:c},null,2));\nif(!pass) throw new Error(\"GUARD_TYPE_FAIL\");\nexport default {pass,c};",[160],"0904e3cf-814a-4104-8d40-c6ecd7bd099d","v2_guard_rollback_isolated_test.ts","dc8b4e26-b0a2-11f1-953a-1607ee4eb77e",31,["D",1789434895628],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { __testReset,createTaskMember,prepareCurrentnessGuard,consumeCurrentnessGuard,readEventToken } from \"./lineage_currentness_v2.ts\";\nawait __testReset();\nawait createTaskMember({task_id:\"ROLL2\",dedupe_key:\"d:roll2\",payload:{x:2}});\nconst p:any=await prepareCurrentnessGuard();\nif(!p.ok) throw new Error(\"PREPARE_FAILED \"+JSON.stringify(p));\nconst beforeTok=await readEventToken();\nconst beforeHead:any=(await sqlite.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];\nconst beforeCounts:any=(await sqlite.execute(`SELECT (SELECT COUNT(*) FROM succ_events) AS events,(SELECT COUNT(*) FROM lineage_heads) AS heads,(SELECT COUNT(*) FROM lineage_snapshots) AS snapshots,(SELECT COUNT(*) FROM lineage_consumptions) AS consumptions`)).rows[0];\nawait sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_consumption_v2`);\nawait sqlite.execute(`CREATE TRIGGER test_abort_consumption_v2 BEFORE INSERT ON lineage_consumptions BEGIN SELECT RAISE(ABORT,'INJECTED_CONSUMPTION_FAILURE'); END`);\nlet c:any;\ntry{c=await consumeCurrentnessGuard(p.guard,\"rollback-consume-isolated\")}finally{await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_consumption_v2`)}\nconst afterTok=await readEventToken();\nconst afterHead:any=(await sqlite.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];\nconst afterCounts:any=(await sqlite.execute(`SELECT (SELECT COUNT(*) FROM succ_events) AS events,(SELECT COUNT(*) FROM lineage_heads) AS heads,(SELECT COUNT(*) FROM lineage_snapshots) AS snapshots,(SELECT COUNT(*) FROM lineage_consumptions) AS consumptions`)).rows[0];\nconst unchanged=beforeTok.generation===afterTok.generation&&beforeTok.event_head_hash===afterTok.event_head_hash&&Number(beforeHead.version)===Number(afterHead.version)&&String(beforeHead.head_sha256)===String(afterHead.head_sha256)&&JSON.stringify(beforeCounts)===JSON.stringify(afterCounts);\nconst pass=c?.ok===false&&unchanged;\nconsole.log(JSON.stringify({schema:\"V2_GUARD_ROLLBACK_ISOLATED_TEST_V1\",pass,consume_result:c,beforeTok,afterTok,beforeHead,afterHead,beforeCounts,afterCounts,unchanged},null,2));\nif(!pass) throw new Error(\"GUARD_ROLLBACK_FAIL\");\nexport default {pass,c,unchanged};",[167],"7dd1f6aa-ff61-4cb7-8e88-49390ec674fe","successor_kernel_v1_test.ts","b3b750ac-b0a3-11f1-8f96-1607ee4eb77e",49,["D",1789435256636],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { sha256Text } from \"./lineage_currentness_v2.ts\";\nimport { __testResetKernel,addTask,claimOne,submitResult,rejectSubmission,completeExactVerified,getTask,auditKernelIntegrity } from \"./successor_kernel_v1.ts\";\n\ntype R={name:string,pass:boolean,detail?:any};const rs:R[]=[];async function t(name:string,fn:()=>Promise){try{rs.push({name,pass:await fn()})}catch(e){rs.push({name,pass:false,detail:String((e as any)?.message??e)})}}\nconst expected42=await sha256Text(\"42\");\n\nawait t(\"create_is_atomic_and_current\",async()=>{await __testResetKernel();const a=await addTask({id:\"A\",dedupe_key:\"d:A\",priority:10,payload:{goal:\"return 42\"},executor_requirements:[\"cap:solve\"],verifier_spec:{type:\"EXACT_JSON_SHA256\",expected_sha256:expected42}});const q:any=await auditKernelIntegrity();const r:any=await getTask(\"A\");return a.created===true&&r.state===\"READY\"&&q.ok===true&&q.diagnostic?.members===1});\nawait t(\"idempotent_create_and_conflict_fail_closed\",async()=>{await __testResetKernel();const spec={id:\"A\",dedupe_key:\"d:A\",priority:1,payload:{x:1}};const a=await addTask(spec),b=await addTask(spec);let conflict=false;try{await addTask({...spec,payload:{x:2}})}catch(e){conflict=String((e as any).message).includes(\"TASK_ID_OR_DEDUPE_CONFLICT\")}const n:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM succ_events`)).rows[0];return a.created===true&&b.created===false&&conflict&&Number(n.n)===1});\nawait t(\"capability_gate_and_lease_currentness\",async()=>{await __testResetKernel();await addTask({id:\"A\",dedupe_key:\"d:A\",priority:1,payload:{},executor_requirements:[\"cap:solve\"]});const no=await claimOne({id:\"E0\",tokens:[]});const yes=await claimOne({id:\"E1\",tokens:[\"cap:solve\"]});const q:any=await auditKernelIntegrity();return no.assignment===null&&yes.assignment?.task_id===\"A\"&&q.ok===true});\nawait t(\"wrong_exact_result_cannot_complete\",async()=>{await __testResetKernel();await addTask({id:\"A\",dedupe_key:\"d:A\",priority:1,payload:{},executor_requirements:[\"cap:solve\"],verifier_spec:{type:\"EXACT_JSON_SHA256\",expected_sha256:expected42}});const c:any=await claimOne({id:\"solver\",tokens:[\"cap:solve\"]});const s:any=await submitResult(\"solver\",\"A\",c.assignment.lease_token,41);const v:any=await completeExactVerified(\"verifier\",[\"cap:verify\"],\"A\",s.result_sha256,{checked:true});const r:any=await getTask(\"A\");const q:any=await auditKernelIntegrity();return v.ok===false&&v.reason===\"DETERMINISTIC_VERIFIER_REJECTED\"&&r.state===\"SUBMITTED\"&&q.ok===true});\nawait t(\"rejection_returns_ready_atomically\",async()=>{await __testResetKernel();await addTask({id:\"A\",dedupe_key:\"d:A\",priority:1,payload:{},executor_requirements:[\"cap:solve\"]});const c:any=await claimOne({id:\"solver\",tokens:[\"cap:solve\"]});const s:any=await submitResult(\"solver\",\"A\",c.assignment.lease_token,{bad:true});const v:any=await rejectSubmission(\"verifier\",[\"cap:verify\"],\"A\",s.result_sha256,{why:\"bad\"});const r:any=await getTask(\"A\");const q:any=await auditKernelIntegrity();return v.ok===true&&r.state===\"READY\"&&r.result_sha256===null&&q.ok===true});\nawait t(\"exact_result_completes_with_distinct_verifier\",async()=>{await __testResetKernel();await addTask({id:\"A\",dedupe_key:\"d:A\",priority:1,payload:{},executor_requirements:[\"cap:solve\"],verifier_spec:{type:\"EXACT_JSON_SHA256\",expected_sha256:expected42}});const c:any=await claimOne({id:\"solver\",tokens:[\"cap:solve\"]});const s:any=await submitResult(\"solver\",\"A\",c.assignment.lease_token,42);const self:any=await completeExactVerified(\"solver\",[\"cap:verify\"],\"A\",s.result_sha256,{});const v:any=await completeExactVerified(\"verifier\",[\"cap:verify\"],\"A\",s.result_sha256,{checked:true});const r:any=await getTask(\"A\");const q:any=await auditKernelIntegrity();return self.ok===false&&self.reason===\"SELF_VERIFICATION_FORBIDDEN\"&&v.ok===true&&r.state===\"COMPLETE\"&&q.ok===true});\nawait t(\"prerequisite_blocks_until_verified_complete\",async()=>{await __testResetKernel();await addTask({id:\"A\",dedupe_key:\"d:A\",priority:1,payload:{},executor_requirements:[\"cap:solve\"],verifier_spec:{type:\"EXACT_JSON_SHA256\",expected_sha256:expected42}});await addTask({id:\"B\",dedupe_key:\"d:B\",priority:100,payload:{},prerequisites:[\"A\"],executor_requirements:[\"cap:solve\"]});const b0:any=await claimOne({id:\"workerB\",tokens:[\"cap:solve\"]});if(b0.assignment?.task_id!==\"A\")return false;const s:any=await submitResult(\"workerB\",\"A\",b0.assignment.lease_token,42);await completeExactVerified(\"verifier\",[\"cap:verify\"],\"A\",s.result_sha256,{});const b1:any=await claimOne({id:\"worker2\",tokens:[\"cap:solve\"]});return b1.assignment?.task_id===\"B\"});\nawait t(\"submitted_resource_remains_locked\",async()=>{await __testResetKernel();await addTask({id:\"R1\",dedupe_key:\"d:R1\",priority:2,payload:{},resources:[\"gpu0\"],executor_requirements:[\"cap:solve\"]});await addTask({id:\"R2\",dedupe_key:\"d:R2\",priority:1,payload:{},resources:[\"gpu0\"],executor_requirements:[\"cap:solve\"]});const c:any=await claimOne({id:\"e1\",tokens:[\"cap:solve\"]});await submitResult(\"e1\",\"R1\",c.assignment.lease_token,{x:1});const d:any=await claimOne({id:\"e2\",tokens:[\"cap:solve\"]});return d.assignment===null});\nawait t(\"one_live_lease_per_executor\",async()=>{await __testResetKernel();await addTask({id:\"A\",dedupe_key:\"d:A\",priority:2,payload:{}});await addTask({id:\"B\",dedupe_key:\"d:B\",priority:1,payload:{}});const a:any=await claimOne({id:\"e1\",tokens:[]});const b:any=await claimOne({id:\"e1\",tokens:[]});return a.assignment!==null&&b.assignment===null&&b.reason===\"EXECUTOR_ALREADY_LEASED\"});\nawait t(\"direct_task_row_tamper_fails_closed\",async()=>{await __testResetKernel();await addTask({id:\"A\",dedupe_key:\"d:A\",priority:1,payload:{}});await sqlite.execute(`UPDATE succ_tasks SET priority=999 WHERE id='A'`);let failed=false;try{await claimOne({id:\"e\",tokens:[]})}catch(e){failed=String((e as any).message).includes(\"TASK_RUNTIME_HASH_MISMATCH\")}const q:any=await auditKernelIntegrity();return failed&&q.ok===false});\nawait t(\"late_publish_failure_rolls_back_task_event_member\",async()=>{await __testResetKernel();const before:any=(await sqlite.execute(`SELECT (SELECT COUNT(*) FROM succ_tasks) AS tasks,(SELECT COUNT(*) FROM succ_events) AS events,(SELECT COUNT(*) FROM lineage_members) AS members,(SELECT COUNT(*) FROM lineage_heads) AS heads`)).rows[0];await sqlite.execute(`DROP TRIGGER IF EXISTS abort_head_insert`);await sqlite.execute(`CREATE TRIGGER abort_head_insert BEFORE INSERT ON lineage_heads BEGIN SELECT RAISE(ABORT,'INJECTED_HEAD_FAILURE'); END`);let threw=false;try{await addTask({id:\"X\",dedupe_key:\"d:X\",priority:1,payload:{}})}catch{threw=true}finally{await sqlite.execute(`DROP TRIGGER IF EXISTS abort_head_insert`)}const after:any=(await sqlite.execute(`SELECT (SELECT COUNT(*) FROM succ_tasks) AS tasks,(SELECT COUNT(*) FROM succ_events) AS events,(SELECT COUNT(*) FROM lineage_members) AS members,(SELECT COUNT(*) FROM lineage_heads) AS heads`)).rows[0];return threw&&JSON.stringify(before)===JSON.stringify(after)});\n\nconst passed=rs.filter(x=>x.pass).length;console.log(JSON.stringify({schema:\"SUCCESSOR_INTEGRATED_KERNEL_V1_TEST_REPORT\",passed,total:rs.length,all_pass:passed===rs.length,results:rs},null,2));if(passed!==rs.length)throw new Error(`INTEGRATED_TEST_FAILURE ${passed}/${rs.length}`);export default rs;",[174],"d2732b6b-2d68-4e72-a525-00fe03447530","successor_kernel_v1.ts","4fd298bc-b0a3-11f1-8074-1607ee4eb77e",50,["D",1789435288149],13,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { initLineage, sha256Text, prepareCurrentnessGuard } from \"./lineage_currentness_v2.ts\";\n\nconst TASKS=\"succ_tasks\";\nconst H64=/^[0-9a-f]{64}$/;\nconst enc=new TextEncoder();\nconst now=()=>new Date().toISOString();\nfunction canon(x:any):string{if(x===null||typeof x!==\"object\")return JSON.stringify(x);if(Array.isArray(x))return \"[\"+x.map(canon).join(\",\")+\"]\";return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\"}\nfunction parse(s:any,f:any){try{return JSON.parse(String(s??\"\"))}catch{return f}}\nfunction uniq(xs:string[]){return [...new Set(xs.map(String))]}\nfunction exactKeys(o:any,keys:string[]){return !!o&&typeof o===\"object\"&&!Array.isArray(o)&&Object.keys(o).sort().join(\"\\0\")===keys.slice().sort().join(\"\\0\")}\nfunction assertEventToken(x:any){if(!exactKeys(x,[\"generation\",\"event_head_hash\"]))throw new Error(\"BAD_EVENT_TOKEN_SHAPE\");if(typeof x.generation!==\"number\"||!Number.isInteger(x.generation)||x.generation<0)throw new Error(\"BAD_EVENT_TOKEN_GENERATION\");if(typeof x.event_head_hash!==\"string\"||!H64.test(x.event_head_hash))throw new Error(\"BAD_EVENT_TOKEN_HEAD\");return x as {generation:number,event_head_hash:string}}\n\nexport async function initKernel(){\n await initLineage();\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TASKS}(\n id TEXT PRIMARY KEY,\n dedupe_key TEXT NOT NULL UNIQUE,\n priority REAL NOT NULL,\n state TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n prerequisites_json TEXT NOT NULL,\n executor_requirements_json TEXT NOT NULL,\n resources_json TEXT NOT NULL,\n verifier_spec_json TEXT NOT NULL,\n member_instance_id TEXT NOT NULL UNIQUE,\n lease_owner TEXT,\n lease_token TEXT,\n lease_expires_at TEXT,\n result_json TEXT,\n result_sha256 TEXT,\n submitted_by TEXT,\n verified_by TEXT,\n verification_json TEXT,\n updated_at TEXT NOT NULL\n )`);\n const cols:any=await sqlite.execute(`PRAGMA table_info(lineage_members)`);if(!(cols.rows as any[]).some(r=>String(r.name)===\"runtime_sha256\"))await sqlite.execute(`ALTER TABLE lineage_members ADD COLUMN runtime_sha256 TEXT`);\n}\n\nasync function appendEventTx(tx:any,type:string,body:any){\n const m:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];\n const token=assertEventToken({generation:m.generation,event_head_hash:m.event_head_hash});\n const n:any=(await tx.execute(`SELECT COALESCE(MAX(local_seq),0)+1 AS n FROM succ_events`)).rows[0];\n const local_seq=Number(n.n),generation=token.generation+1,event_uuid=crypto.randomUUID(),prev_hash=token.event_head_hash,body_json=canon(body),created_at=now();\n const event_hash=await sha256Text(canon({schema:\"SUCCESSOR_EVENT_V1\",local_seq,event_uuid,type,generation,prev_hash,body_json}));\n await tx.execute({sql:`INSERT INTO succ_events(local_seq,event_uuid,type,generation,prev_hash,event_hash,body_json,created_at) VALUES(?,?,?,?,?,?,?,?)`,args:[local_seq,event_uuid,type,generation,prev_hash,event_hash,body_json,created_at]});\n await tx.execute({sql:`UPDATE succ_event_meta SET generation=?,event_head_hash=? WHERE id=1`,args:[generation,event_hash]});\n return {local_seq,event_uuid,type,generation,prev_hash,event_hash,body_json,created_at};\n}\n\nasync function memberId(e:any){return \"m:\"+await sha256Text(canon({event_uuid:e.event_uuid,local_seq:e.local_seq,generation:e.generation,event_hash:e.event_hash}))}\nasync function edgeId(s:string,t:string,r:string){return \"e:\"+await sha256Text(canon({source:s,target:t,relation:r}))}\n\nasync function publishTx(tx:any){\n const tr:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];const token=assertEventToken({generation:tr.generation,event_head_hash:tr.event_head_hash});\n const members:any[]=(await tx.execute(`SELECT * FROM lineage_members ORDER BY member_instance_id`)).rows as any[];\n const edges:any[]=(await tx.execute(`SELECT * FROM lineage_edges ORDER BY edge_id`)).rows as any[];\n const members_sha256=await sha256Text(canon(members)),edges_sha256=await sha256Text(canon(edges));\n const c:any=(await tx.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];const version=Number(c.version)+1,previous_head_sha256=String(c.head_sha256),created_at=now();\n const sp={schema:\"LINEAGE_SNAPSHOT_V1\",version,members_sha256,edges_sha256,event_history_generation:token.generation,event_history_head_sha256:token.event_head_hash,previous_head_sha256};const snapshot_sha256=await sha256Text(canon(sp));\n const hp={schema:\"LINEAGE_HEAD_V1\",version,previous_head_sha256,snapshot_sha256,event_history_generation:token.generation,event_history_head_sha256:token.event_head_hash};const head_sha256=await sha256Text(canon(hp));\n await tx.execute({sql:`INSERT INTO lineage_snapshots(version,members_sha256,edges_sha256,event_history_generation,event_history_head_sha256,previous_head_sha256,snapshot_sha256,created_at) VALUES(?,?,?,?,?,?,?,?)`,args:[version,members_sha256,edges_sha256,token.generation,token.event_head_hash,previous_head_sha256,snapshot_sha256,created_at]});\n await tx.execute({sql:`INSERT INTO lineage_heads(version,previous_head_sha256,snapshot_sha256,event_history_generation,event_history_head_sha256,head_sha256,created_at) VALUES(?,?,?,?,?,?,?)`,args:[version,previous_head_sha256,snapshot_sha256,token.generation,token.event_head_hash,head_sha256,created_at]});\n await tx.execute({sql:`UPDATE lineage_current_head SET version=?,head_sha256=? WHERE id=1`,args:[version,head_sha256]});\n return {version,head_sha256,event_token:token};\n}\n\nfunction taskRuntimeProjection(r:any){return {id:String(r.id),dedupe_key:String(r.dedupe_key),priority:Number(r.priority),state:String(r.state),payload_json:String(r.payload_json),prerequisites_json:String(r.prerequisites_json),executor_requirements_json:String(r.executor_requirements_json),resources_json:String(r.resources_json),verifier_spec_json:String(r.verifier_spec_json),member_instance_id:String(r.member_instance_id),lease_owner:r.lease_owner??null,lease_token:r.lease_token??null,lease_expires_at:r.lease_expires_at??null,result_json:r.result_json??null,result_sha256:r.result_sha256??null,submitted_by:r.submitted_by??null,verified_by:r.verified_by??null,verification_json:r.verification_json??null}}\nasync function taskRuntimeSha(r:any){return await sha256Text(canon(taskRuntimeProjection(r)))}\nasync function syncTaskMemberTx(tx:any,taskId:string){const r:any=(await tx.execute({sql:`SELECT * FROM ${TASKS} WHERE id=?`,args:[taskId]})).rows[0];if(!r)throw new Error(\"TASK_NOT_FOUND\");const h=await taskRuntimeSha(r);const u:any=await tx.execute({sql:`UPDATE lineage_members SET state=?,runtime_sha256=?,updated_at=? WHERE member_instance_id=?`,args:[String(r.state),h,now(),String(r.member_instance_id)]});if(Number(u.rowsAffected)!==1)throw new Error(\"LINEAGE_MEMBER_NOT_FOUND\");return h}\nasync function assertTaskMemberParityTx(tx:any){const rows:any[]=(await tx.execute(`SELECT t.*,m.logical_task_id,m.creation_dedupe_key,m.state AS member_state,m.runtime_sha256 FROM ${TASKS} t LEFT JOIN lineage_members m ON m.member_instance_id=t.member_instance_id ORDER BY t.id`)).rows as any[];const mc:any=(await tx.execute(`SELECT COUNT(*) AS n FROM lineage_members`)).rows[0];if(Number(mc.n)!==rows.length)throw new Error(\"TASK_LINEAGE_CARDINALITY_MISMATCH\");for(const r of rows){if(r.logical_task_id!==r.id||r.creation_dedupe_key!==r.dedupe_key||r.member_state!==r.state)throw new Error(\"TASK_LINEAGE_PARITY_MISMATCH\");const h=await taskRuntimeSha(r);if(typeof r.runtime_sha256!==\"string\"||r.runtime_sha256!==h)throw new Error(\"TASK_RUNTIME_HASH_MISMATCH\")}return true}\n\nexport async function addTask(x:{id:string,dedupe_key:string,priority:number,payload:any,prerequisites?:string[],executor_requirements?:string[],resources?:string[],verifier_spec?:any}){\n await initKernel();const tx:any=await sqlite.transaction(\"write\");\n try{\n await assertTaskMemberParityTx(tx);\n const pre=uniq(x.prerequisites??[]),req=uniq(x.executor_requirements??[]),res=uniq(x.resources??[]);const verifier=x.verifier_spec??{type:\"NO_POSITIVE_COMPLETION\"};\n if(typeof x.id!==\"string\"||!x.id||typeof x.dedupe_key!==\"string\"||!x.dedupe_key)throw new Error(\"BAD_TASK_IDENTITY\");\n if(verifier?.type===\"EXACT_JSON_SHA256\"&&(!H64.test(String(verifier.expected_sha256))||!exactKeys(verifier,[\"type\",\"expected_sha256\"])))throw new Error(\"BAD_VERIFIER_SPEC\");\n if(verifier?.type!==\"EXACT_JSON_SHA256\"&&verifier?.type!==\"NO_POSITIVE_COMPLETION\")throw new Error(\"UNSUPPORTED_VERIFIER_SPEC\");\n const existing:any=(await tx.execute({sql:`SELECT * FROM ${TASKS} WHERE id=? OR dedupe_key=?`,args:[x.id,x.dedupe_key]})).rows[0];\n const fields={id:x.id,dedupe_key:x.dedupe_key,priority:Number(x.priority),payload_json:canon(x.payload),prerequisites_json:canon(pre),executor_requirements_json:canon(req),resources_json:canon(res),verifier_spec_json:canon(verifier)};\n if(existing){const same=existing.id===fields.id&&existing.dedupe_key===fields.dedupe_key&&Number(existing.priority)===fields.priority&&existing.payload_json===fields.payload_json&&existing.prerequisites_json===fields.prerequisites_json&&existing.executor_requirements_json===fields.executor_requirements_json&&existing.resources_json===fields.resources_json&&existing.verifier_spec_json===fields.verifier_spec_json;await tx.commit();if(!same)throw new Error(\"TASK_ID_OR_DEDUPE_CONFLICT\");return {ok:true,created:false,task_id:x.id,member_instance_id:existing.member_instance_id}}\n for(const dep of pre){const d:any=(await tx.execute({sql:`SELECT id FROM ${TASKS} WHERE id=?`,args:[dep]})).rows[0];if(!d)throw new Error(\"PREREQUISITE_NOT_FOUND\")}\n const payload_sha256=await sha256Text(fields.payload_json);const ev=await appendEventTx(tx,\"TASK_CREATED\",{task_id:x.id,dedupe_key:x.dedupe_key,payload_sha256});const member_instance_id=await memberId(ev),t=now();\n await tx.execute({sql:`INSERT INTO ${TASKS}(id,dedupe_key,priority,state,payload_json,prerequisites_json,executor_requirements_json,resources_json,verifier_spec_json,member_instance_id,updated_at) VALUES(?,?,?,'READY',?,?,?,?,?,?,?)`,args:[x.id,x.dedupe_key,fields.priority,fields.payload_json,fields.prerequisites_json,fields.executor_requirements_json,fields.resources_json,fields.verifier_spec_json,member_instance_id,t]});\n const taskRow:any=(await tx.execute({sql:`SELECT * FROM ${TASKS} WHERE id=?`,args:[x.id]})).rows[0];const runtime_sha256=await taskRuntimeSha(taskRow);\n await tx.execute({sql:`INSERT INTO lineage_members(member_instance_id,logical_task_id,creation_dedupe_key,created_event_uuid,created_event_local_seq,created_event_generation,created_event_hash,payload_sha256,state,updated_at,runtime_sha256) VALUES(?,?,?,?,?,?,?,?,?,?,?)`,args:[member_instance_id,x.id,x.dedupe_key,ev.event_uuid,ev.local_seq,ev.generation,ev.event_hash,payload_sha256,\"READY\",t,runtime_sha256]});\n for(const dep of pre){const dr:any=(await tx.execute({sql:`SELECT member_instance_id FROM ${TASKS} WHERE id=?`,args:[dep]})).rows[0];const eid=await edgeId(member_instance_id,String(dr.member_instance_id),\"DEPENDS_ON\");await tx.execute({sql:`INSERT INTO lineage_edges(edge_id,source_member_id,target_member_id,relation_type,updated_at) VALUES(?,?,?,?,?)`,args:[eid,member_instance_id,String(dr.member_instance_id),\"DEPENDS_ON\",t]})}\n const published=await publishTx(tx);await tx.commit();return {ok:true,created:true,task_id:x.id,member_instance_id,published};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nexport async function claimOne(executor:{id:string,tokens:string[]},leaseSeconds=300){\n if(!Number.isInteger(leaseSeconds)||leaseSeconds<30||leaseSeconds>900)throw new Error(\"INVALID_LEASE_SECONDS\");await initKernel();const tx:any=await sqlite.transaction(\"write\");\n try{\n await assertTaskMemberParityTx(tx);\n const t=now(),expiry=new Date(Date.now()+leaseSeconds*1000).toISOString();let changed=false;\n const expired:any[]=(await tx.execute({sql:`SELECT id,member_instance_id FROM ${TASKS} WHERE state='LEASED' AND lease_expires_atString(r.id)));const locked=new Set();for(const r of (await tx.execute(`SELECT resources_json FROM ${TASKS} WHERE state IN ('LEASED','SUBMITTED')`)).rows as any[])for(const q of parse(r.resources_json,[]))locked.add(String(q));\n const have=new Set(executor.tokens.map(String));const cand:any[]=(await tx.execute(`SELECT * FROM ${TASKS} WHERE state='READY' ORDER BY priority DESC,id`)).rows as any[];let pick:any=null;\n for(const r of cand){const pre=parse(r.prerequisites_json,[]),req=parse(r.executor_requirements_json,[]),res=parse(r.resources_json,[]);if(pre.some((q:string)=>!done.has(q))||req.some((q:string)=>!have.has(q))||res.some((q:string)=>locked.has(q)))continue;pick=r;break}\n if(!pick){if(changed)await publishTx(tx);await tx.commit();return {ok:true,assignment:null}}\n const lease_token=crypto.randomUUID();await tx.execute({sql:`UPDATE ${TASKS} SET state='LEASED',lease_owner=?,lease_token=?,lease_expires_at=?,updated_at=? WHERE id=? AND state='READY'`,args:[executor.id,lease_token,expiry,t,pick.id]});await syncTaskMemberTx(tx,String(pick.id));await appendEventTx(tx,\"TASK_LEASED\",{task_id:pick.id,executor_id:executor.id,lease_token,lease_expires_at:expiry});const published=await publishTx(tx);await tx.commit();return {ok:true,assignment:{task_id:pick.id,lease_token,lease_expires_at:expiry,payload:parse(pick.payload_json,{})},published};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nexport async function submitResult(executorId:string,taskId:string,leaseToken:string,result:any){\n await initKernel();const tx:any=await sqlite.transaction(\"write\");try{await assertTaskMemberParityTx(tx);const r:any=(await tx.execute({sql:`SELECT * FROM ${TASKS} WHERE id=?`,args:[taskId]})).rows[0];if(!r||r.state!==\"LEASED\"||r.lease_owner!==executorId||r.lease_token!==leaseToken||String(r.lease_expires_at)<=now()){await tx.commit();return {ok:false,reason:\"NOT_CURRENT_LEASE_ATTEMPT\"}}const raw=canon(result),result_sha256=await sha256Text(raw),t=now();await tx.execute({sql:`UPDATE ${TASKS} SET state='SUBMITTED',lease_owner=NULL,lease_token=NULL,lease_expires_at=NULL,result_json=?,result_sha256=?,submitted_by=?,verified_by=NULL,verification_json=NULL,updated_at=? WHERE id=?`,args:[raw,result_sha256,executorId,t,taskId]});await syncTaskMemberTx(tx,String(r.id));await appendEventTx(tx,\"TASK_SUBMITTED\",{task_id:taskId,executor_id:executorId,result_sha256});const published=await publishTx(tx);await tx.commit();return {ok:true,task_id:taskId,result_sha256,published}}catch(e){try{await tx.rollback()}catch{};throw e}}\n\nexport async function rejectSubmission(verifierId:string,verifierTokens:string[],taskId:string,resultSha256:string,evidence:any){\n await initKernel();const tx:any=await sqlite.transaction(\"write\");try{await assertTaskMemberParityTx(tx);const r:any=(await tx.execute({sql:`SELECT * FROM ${TASKS} WHERE id=?`,args:[taskId]})).rows[0];if(!r||r.state!==\"SUBMITTED\"){await tx.commit();return {ok:false,reason:\"TASK_NOT_SUBMITTED\"}}if(r.submitted_by===verifierId){await tx.commit();return {ok:false,reason:\"SELF_VERIFICATION_FORBIDDEN\"}}if(!new Set(verifierTokens.map(String)).has(\"cap:verify\")){await tx.commit();return {ok:false,reason:\"VERIFIER_CAPABILITY_REQUIRED\"}}if(r.result_sha256!==resultSha256){await tx.commit();return {ok:false,reason:\"STALE_VERIFICATION_RESULT\"}}const t=now();await tx.execute({sql:`UPDATE ${TASKS} SET state='READY',result_json=NULL,result_sha256=NULL,submitted_by=NULL,verified_by=?,verification_json=?,updated_at=? WHERE id=?`,args:[verifierId,canon({passed:false,evidence}),t,taskId]});await syncTaskMemberTx(tx,String(r.id));await appendEventTx(tx,\"TASK_VERIFICATION_REJECTED\",{task_id:taskId,verifier_id:verifierId,result_sha256:resultSha256});const published=await publishTx(tx);await tx.commit();return {ok:true,state:\"READY\",published}}catch(e){try{await tx.rollback()}catch{};throw e}}\n\nexport async function completeExactVerified(verifierId:string,verifierTokens:string[],taskId:string,resultSha256:string,evidence:any){\n await initKernel();const tx:any=await sqlite.transaction(\"write\");try{await assertTaskMemberParityTx(tx);const r:any=(await tx.execute({sql:`SELECT * FROM ${TASKS} WHERE id=?`,args:[taskId]})).rows[0];if(!r||r.state!==\"SUBMITTED\"){await tx.commit();return {ok:false,reason:\"TASK_NOT_SUBMITTED\"}}if(r.submitted_by===verifierId){await tx.commit();return {ok:false,reason:\"SELF_VERIFICATION_FORBIDDEN\"}}if(!new Set(verifierTokens.map(String)).has(\"cap:verify\")){await tx.commit();return {ok:false,reason:\"VERIFIER_CAPABILITY_REQUIRED\"}}if(r.result_sha256!==resultSha256){await tx.commit();return {ok:false,reason:\"STALE_VERIFICATION_RESULT\"}}const spec=parse(r.verifier_spec_json,{});if(!exactKeys(spec,[\"type\",\"expected_sha256\"])||spec.type!==\"EXACT_JSON_SHA256\"||!H64.test(String(spec.expected_sha256))){await tx.commit();return {ok:false,reason:\"POSITIVE_VERIFICATION_NOT_ENFORCEABLE\"}}if(resultSha256!==spec.expected_sha256){await tx.commit();return {ok:false,reason:\"DETERMINISTIC_VERIFIER_REJECTED\"}}const t=now();await tx.execute({sql:`UPDATE ${TASKS} SET state='COMPLETE',verified_by=?,verification_json=?,updated_at=? WHERE id=?`,args:[verifierId,canon({passed:true,verifier:\"EXACT_JSON_SHA256\",evidence}),t,taskId]});await syncTaskMemberTx(tx,String(r.id));await appendEventTx(tx,\"TASK_RESULT_VERIFIED\",{task_id:taskId,verifier_id:verifierId,result_sha256:resultSha256,verifier:\"EXACT_JSON_SHA256\"});const published=await publishTx(tx);await tx.commit();return {ok:true,state:\"COMPLETE\",published}}catch(e){try{await tx.rollback()}catch{};throw e}}\n\nexport async function auditKernelIntegrity(){await initKernel();const tx:any=await sqlite.transaction(\"read\");try{await assertTaskMemberParityTx(tx);await tx.commit()}catch(e){try{await tx.rollback()}catch{};return {ok:false,reason:String((e as any)?.message??e)}}const c:any=await prepareCurrentnessGuard();return c.ok?{ok:true,guard:c.guard,diagnostic:c.diagnostic}:{ok:false,reason:c.reason}}\n\n\nexport async function getTask(id:string){await initKernel();return (await sqlite.execute({sql:`SELECT * FROM ${TASKS} WHERE id=?`,args:[id]})).rows[0]??null}\n\nexport async function __testResetKernel(){await initKernel();await sqlite.batch([`DELETE FROM lineage_consumptions`,`DELETE FROM lineage_edges`,`DELETE FROM lineage_members`,`DELETE FROM lineage_snapshots`,`DELETE FROM lineage_heads`,`UPDATE lineage_current_head SET version=0,head_sha256='${\"0\".repeat(64)}' WHERE id=1`,`DELETE FROM succ_events`,`UPDATE succ_event_meta SET generation=0,event_head_hash='${\"0\".repeat(64)}' WHERE id=1`,`DELETE FROM ${TASKS}`]);}\n",[181],"28c1b486-de3e-4600-beb0-4e45a344b9ce","run_e001.ts","01a0a298-56dc-7677-9792-b5bf45b196cf",6,["D",1789434348372],1,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { init, addTask, claimBatch, submit, verify } from \"./program.ts\";\nawait init();\nconst id=\"falsify_semantics_\"+crypto.randomUUID().replaceAll(\"-\",\"_\");\nawait sqlite.execute({sql:\"DELETE FROM micro_tasks WHERE id=?\",args:[id]});\ntry {\n await addTask({id,priority:1e15,payload:{claim:\"2+2=5\"},executor_requirements:[\"cap:solve\"]});\n const c=await claimBatch([{id:\"solver_A\",tokens:[\"cap:solve\"]}],30);\n const a=c.assignments.find((x:any)=>x.task_id===id);\n if(!a) throw new Error(\"NO_CLAIM\");\n const s=await submit(\"solver_A\",id,a.lease_token,{answer:\"2+2=5\",truth:false});\n const v=await verify(\"verifier_B\",[\"cap:verify\"],id,s.result_sha256,{passed:true,evidence:{checked:false,verified:false,note:\"deliberately contradictory attestation\"}});\n const row:any=(await sqlite.execute({sql:\"SELECT state,result_json,submitted_by,verified_by,verification_json FROM micro_tasks WHERE id=?\",args:[id]})).rows[0];\n console.log(JSON.stringify({schema:\"MICRO_KERNEL_SEMANTIC_FALSIFICATION_V2\",verify_return:v,row,exploit_reproduced:row?.state===\"COMPLETE\"}));\n} finally { await sqlite.execute({sql:\"DELETE FROM micro_tasks WHERE id=?\",args:[id]}); }\n",[189],"fbcd8724-4762-4592-a4a3-15912e0941fb","program.ts","01a0a298-56db-7688-b7b9-4a7560e0c586",2,["D",1789434287842],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst T=\"micro_tasks\";\nconst now=()=>new Date().toISOString();\nconst j=(x:any)=>JSON.stringify(x);\nconst p=(s:any,f:any=[])=>{try{return JSON.parse(String(s??\"\"))}catch{return f}};\nconst sha=async(s:string)=>[...new Uint8Array(await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s)))].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n\nexport async function init(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${T}(\n id TEXT PRIMARY KEY,\n priority REAL NOT NULL,\n state TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n prerequisites_json TEXT NOT NULL,\n executor_requirements_json TEXT NOT NULL,\n resources_json TEXT NOT NULL,\n lease_owner TEXT,\n lease_expires_at TEXT,\n lease_token TEXT,\n result_json TEXT,\n result_sha256 TEXT,\n submitted_by TEXT,\n verified_by TEXT,\n verification_json TEXT,\n updated_at TEXT NOT NULL\n )`);\n const cols:any=await sqlite.execute(`PRAGMA table_info(${T})`);\n const names=new Set((cols.rows as any[]).map(x=>String(x.name)));\n if(!names.has(\"lease_token\"))await sqlite.execute(`ALTER TABLE ${T} ADD COLUMN lease_token TEXT`);\n if(!names.has(\"submitted_by\"))await sqlite.execute(`ALTER TABLE ${T} ADD COLUMN submitted_by TEXT`);\n if(!names.has(\"verified_by\"))await sqlite.execute(`ALTER TABLE ${T} ADD COLUMN verified_by TEXT`);\n if(!names.has(\"verification_json\"))await sqlite.execute(`ALTER TABLE ${T} ADD COLUMN verification_json TEXT`);\n}\n\nexport async function addTask(x:{id:string,priority:number,payload:any,prerequisites?:string[],executor_requirements?:string[],resources?:string[]}){\n await init();\n const pre=[...new Set(x.prerequisites??[])],req=[...new Set(x.executor_requirements??[])],res=[...new Set(x.resources??[])];\n const payload=j(x.payload),prej=j(pre),reqj=j(req),resj=j(res);\n await sqlite.execute({sql:`INSERT OR IGNORE INTO ${T}(id,priority,state,payload_json,prerequisites_json,executor_requirements_json,resources_json,updated_at)\n VALUES(?,?,'READY',?,?,?,?,?)`,args:[x.id,x.priority,payload,prej,reqj,resj,now()]});\n const row:any=(await sqlite.execute({sql:`SELECT * FROM ${T} WHERE id=?`,args:[x.id]})).rows[0];\n if(!row||Number(row.priority)!==Number(x.priority)||row.payload_json!==payload||row.prerequisites_json!==prej||row.executor_requirements_json!==reqj||row.resources_json!==resj){\n throw new Error(\"TASK_ID_CONFLICT\");\n }\n return row;\n}\n\nexport async function claimBatch(executors:{id:string,tokens:string[]}[],leaseSeconds=900){\n if(!Number.isInteger(leaseSeconds)||leaseSeconds<30||leaseSeconds>900)throw new Error(\"INVALID_LEASE_SECONDS\");\n await init();\n if(!executors.length)return {ok:true,assignments:[]};\n const tx:any=await sqlite.transaction(\"write\");\n try{\n const tnow=now(),expires=new Date(Date.now()+leaseSeconds*1000).toISOString();\n await tx.execute({sql:`UPDATE ${T} SET state='READY',lease_owner=NULL,lease_expires_at=NULL,lease_token=NULL,updated_at=? WHERE state='LEASED' AND lease_expires_at[String(r.id),r]));\n const locked=new Set(),held=new Set();\n for(const r of leasedR.rows as any[]){\n if(r.lease_owner)held.add(String(r.lease_owner));\n for(const q of p(r.resources_json,[]))locked.add(String(q));\n }\n const candidates=(candR.rows as any[]).map(r=>({...r,pre:p(r.prerequisites_json,[]),req:p(r.executor_requirements_json,[]),res:p(r.resources_json,[])}));\n const used=new Set(),assignments:any[]=[];\n for(const e of executors){\n if(held.has(e.id))continue;\n const have=new Set(e.tokens);\n let pick:any=null;\n for(const r of candidates){\n if(used.has(String(r.id))||r.pre.some((x:string)=>!done.has(x))||r.req.some((x:string)=>!have.has(x))||r.res.some((x:string)=>locked.has(x)))continue;\n pick=r;break;\n }\n if(!pick)continue;\n used.add(String(pick.id));held.add(e.id);\n for(const q of pick.res)locked.add(String(q));\n assignments.push({\n executor_id:e.id,\n task_id:String(pick.id),\n lease_token:crypto.randomUUID(),\n priority:pick.priority,\n payload:p(pick.payload_json,{}),\n prerequisite_evidence:Object.fromEntries(pick.pre.map((x:string)=>[x,done.get(x)]))\n });\n }\n for(let off=0;off`WHEN ? THEN ?`).join(\" \"),tokenCases=c.map(()=>`WHEN ? THEN ?`).join(\" \"),ids=c.map(()=>\"?\").join(\",\");\n const args:any[]=[];\n for(const a of c)args.push(a.task_id,a.executor_id);\n for(const a of c)args.push(a.task_id,a.lease_token);\n args.push(expires,tnow,...c.map(a=>a.task_id));\n const u:any=await tx.execute({sql:`UPDATE ${T} SET state='LEASED',lease_owner=CASE id ${ownerCases} END,lease_token=CASE id ${tokenCases} END,lease_expires_at=?,updated_at=? WHERE state='READY' AND id IN (${ids}) RETURNING id`,args});\n if((u.rows||[]).length!==c.length)throw new Error(\"BATCH_CLAIM_RACE\");\n }\n await tx.commit();\n return {ok:true,assignments,lease_expires_at:expires};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nexport async function submit(executorId:string,taskId:string,leaseToken:string,result:any){\n await init();\n const tx:any=await sqlite.transaction(\"write\");\n try{\n const r:any=(await tx.execute({sql:`SELECT * FROM ${T} WHERE id=?`,args:[taskId]})).rows[0];\n if(!r||r.state!==\"LEASED\"||r.lease_owner!==executorId||r.lease_token!==leaseToken||String(r.lease_expires_at)<=now()){await tx.commit();return {ok:false,reason:\"NOT_CURRENT_LEASE_ATTEMPT\"}}\n const raw=j(result),h=await sha(raw);\n await tx.execute({sql:`UPDATE ${T} SET state='SUBMITTED',lease_owner=NULL,lease_expires_at=NULL,lease_token=NULL,result_json=?,result_sha256=?,submitted_by=?,verified_by=NULL,verification_json=NULL,updated_at=? WHERE id=?`,args:[raw,h,executorId,now(),taskId]});\n await tx.commit();return {ok:true,task_id:taskId,result_sha256:h};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nexport async function verify(verifierId:string,verifierTokens:string[],taskId:string,resultSha256:string,verification:any){\n await init();\n const tx:any=await sqlite.transaction(\"write\");\n try{\n const r:any=(await tx.execute({sql:`SELECT state,submitted_by,result_sha256 FROM ${T} WHERE id=?`,args:[taskId]})).rows[0];\n if(!r||r.state!==\"SUBMITTED\"){await tx.commit();return {ok:false,reason:\"TASK_NOT_SUBMITTED\"}}\n if(String(r.submitted_by)===verifierId){await tx.commit();return {ok:false,reason:\"SELF_VERIFICATION_FORBIDDEN\"}}\n if(String(r.result_sha256)!==resultSha256){await tx.commit();return {ok:false,reason:\"STALE_VERIFICATION_RESULT\"}}\n if(!new Set(verifierTokens).has(\"cap:verify\")){await tx.commit();return {ok:false,reason:\"VERIFIER_CAPABILITY_REQUIRED\"}}\n if(typeof verification?.passed!==\"boolean\"){await tx.commit();return {ok:false,reason:\"VERIFICATION_VERDICT_REQUIRED\"}}\n const t=now();\n if(verification.passed){\n // A caller-supplied boolean is an attestation, not independently established truth.\n // Fail closed: this generic coordination kernel may reject candidates, but it may\n // not promote them to COMPLETE without a task-specific verifier it can execute.\n await tx.commit();return {ok:false,reason:\"POSITIVE_VERIFICATION_NOT_ENFORCEABLE\"};\n }\n await tx.execute({sql:`UPDATE ${T} SET state='READY',lease_owner=NULL,lease_expires_at=NULL,lease_token=NULL,submitted_by=NULL,verified_by=?,verification_json=?,updated_at=? WHERE id=?`,args:[verifierId,j(verification),t,taskId]});\n await tx.commit();return {ok:true,task_id:taskId,state:\"READY\"};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\n",[197],"ef480875-fa19-422c-bf0d-e7d18be17257",["D",1789435711964],[27],"3fe9e11d-5ca6-4b35-8a64-fe041909187e","lineage_currentness_v2_test.ts","01a0a29f-7f50-7747-8bbb-a794db4ba187",29,["D",1789434802872],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { __testReset,createTaskMember,addRelation,prepareCurrentnessGuard,consumeCurrentnessGuard,readEventToken,RELATION_TYPES } from \"./lineage_currentness_v2.ts\";\n\ntype R={name:string,pass:boolean,detail?:any};const results:R[]=[];\nasync function check(name:string,fn:()=>Promise,detail?:()=>Promise){try{const pass=await fn();results.push({name,pass,detail:detail?await detail():undefined})}catch(e){results.push({name,pass:false,detail:String((e as any)?.message??e)})}}\nasync function setup(){await __testReset();const a=await createTaskMember({task_id:\"A\",dedupe_key:\"d:A\",payload:{x:1}});const b=await createTaskMember({task_id:\"B\",dedupe_key:\"d:B\",payload:{x:2}});return {a,b}}\n\nawait check(\"empty_state_valid\",async()=>{await __testReset();return (await prepareCurrentnessGuard()).ok===true});\nawait check(\"baseline_two_members_valid\",async()=>{await setup();const v=await prepareCurrentnessGuard();return v.ok===true&&v.diagnostic?.members===2});\nawait check(\"multiple_relations_per_member_preserved\",async()=>{const {a,b}=await setup();await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"DEPENDS_ON\"});await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"GUARDS\"});const v=await prepareCurrentnessGuard();return v.ok===true&&v.diagnostic?.edges===2});\nawait check(\"dangling_target_rejected\",async()=>{const {a}=await setup();try{await addRelation({source_member_id:a.member_instance_id,target_member_id:\"m:\"+\"f\".repeat(64),relation_type:\"DEPENDS_ON\"});return false}catch(e){return String((e as any).message).includes(\"DANGLING_RELATION_TARGET\")}});\nawait check(\"unknown_relation_rejected\",async()=>{const {a,b}=await setup();try{await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"MADE_UP\" as any});return false}catch(e){return String((e as any).message).includes(\"BAD_RELATION_TYPE\")}});\nawait check(\"retained_hash_previous_head_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_heads SET previous_head_sha256='${\"1\".repeat(64)}' WHERE version=(SELECT MAX(version) FROM lineage_heads)`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"HEAD_CHAIN_LINK_MISMATCH\")});\nawait check(\"retained_hash_snapshot_pointer_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_heads SET snapshot_sha256='${\"2\".repeat(64)}' WHERE version=(SELECT MAX(version) FROM lineage_heads)`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"HEAD_SELF_HASH_MISMATCH\")});\nawait check(\"snapshot_content_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_members SET state='COMPLETE' WHERE logical_task_id='A'`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"SNAPSHOT_CONTENT_MISMATCH\")});\nawait check(\"event_body_tamper_rejected\",async()=>{await setup();const r:any=(await sqlite.execute(`SELECT body_json FROM succ_events WHERE local_seq=1`)).rows[0];const b=JSON.parse(String(r.body_json));b.injected=\"same_semantics_extra_byte\";await sqlite.execute({sql:`UPDATE succ_events SET body_json=? WHERE local_seq=1`,args:[JSON.stringify(b)]});const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"EVENT_HASH_MISMATCH\")});\nawait check(\"event_prev_hash_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE succ_events SET prev_hash='${\"3\".repeat(64)}' WHERE local_seq=2`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"EVENT_CHAIN_LINK_MISMATCH\")});\nawait check(\"creation_identity_source_splice_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_members SET created_event_hash='${\"4\".repeat(64)}' WHERE logical_task_id='A'`);const v=await prepareCurrentnessGuard();return v.ok===false});\nawait check(\"mutable_dedupe_cannot_silently_change_identity\",async()=>{const {a}=await setup();await sqlite.execute(`UPDATE lineage_members SET creation_dedupe_key='changed' WHERE logical_task_id='A'`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"SNAPSHOT_CONTENT_MISMATCH\")||String(v.reason).includes(\"TASK_CREATED_MAPPING_MISMATCH\")});\nawait check(\"event_token_shape_internal\",async()=>{await setup();const t:any=await readEventToken();return typeof t.generation===\"number\"&&Number.isInteger(t.generation)&&/^[0-9a-f]{64}$/.test(t.event_head_hash)&&Object.keys(t).sort().join(\",\")===\"event_head_hash,generation\"});\nawait check(\"relation_enum_closed\",async()=>RELATION_TYPES.join(\",\")===\"DEPENDS_ON,FALSIFIED_BY,SUPERSEDES,GUARDS,DERIVED_FROM\");\nawait check(\"real_db_task_create_rollback_atomic\",async()=>{await __testReset();await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_member`);await sqlite.execute(`CREATE TRIGGER test_abort_member BEFORE INSERT ON lineage_members BEGIN SELECT RAISE(ABORT,'INJECTED_MEMBER_FAILURE'); END`);let threw=false;try{await createTaskMember({task_id:\"ROLL\",dedupe_key:\"d:roll\",payload:{x:9}})}catch{threw=true}finally{await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_member`)}const ev:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM succ_events`)).rows[0];const mem:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_members`)).rows[0];const tok=await readEventToken();return threw&&Number(ev.n)===0&&Number(mem.n)===0&&tok.generation===0&&tok.event_head_hash===\"0\".repeat(64)});\nawait check(\"real_db_relation_rollback_atomic\",async()=>{const {a,b}=await setup();const before=await readEventToken();await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_edge`);await sqlite.execute(`CREATE TRIGGER test_abort_edge BEFORE INSERT ON lineage_edges BEGIN SELECT RAISE(ABORT,'INJECTED_EDGE_FAILURE'); END`);let threw=false;try{await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"DEPENDS_ON\"})}catch{threw=true}finally{await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_edge`)}const after=await readEventToken();const e:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_edges`)).rows[0];return threw&&Number(e.n)===0&&after.generation===before.generation&&after.event_head_hash===before.event_head_hash});\nawait check(\"current_head_pointer_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_current_head SET head_sha256='${\"5\".repeat(64)}' WHERE id=1`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"CURRENT_HEAD_POINTER_MISMATCH\")});\nawait check(\"event_meta_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE succ_event_meta SET event_head_hash='${\"6\".repeat(64)}' WHERE id=1`);const v=await prepareCurrentnessGuard();return v.ok===false});\nawait check(\"fresh_guard_consumption_atomic\",async()=>{await setup();const p:any=await prepareCurrentnessGuard();if(!p.ok)return false;const c:any=await consumeCurrentnessGuard(p.guard,\"fresh-consume\");const n:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_consumptions`)).rows[0];return c.ok===true&&Number(n.n)===1});\nawait check(\"stale_guard_after_lineage_change_rejected\",async()=>{await setup();const p:any=await prepareCurrentnessGuard();if(!p.ok)return false;await createTaskMember({task_id:\"C\",dedupe_key:\"d:C\",payload:{x:3}});const c:any=await consumeCurrentnessGuard(p.guard,\"must-reject\");const n:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_consumptions`)).rows[0];return c.ok===false&&c.reason===\"STALE_CURRENTNESS_GUARD\"&&Number(n.n)===0});\nawait check(\"guard_extra_key_rejected\",async()=>{await setup();const p:any=await prepareCurrentnessGuard();const c:any=await consumeCurrentnessGuard({...p.guard,extra:true},\"bad-shape\");return c.ok===false&&c.reason===\"BAD_GUARD_SHAPE\"});\nawait check(\"guard_string_generation_rejected\",async()=>{await setup();const p:any=await prepareCurrentnessGuard();const c:any=await consumeCurrentnessGuard({...p.guard,event_generation:String(p.guard.event_generation)},\"bad-type\");return c.ok===false&&c.reason===\"BAD_GUARD_EVENT_GENERATION\"});\nawait check(\"guard_consumption_real_db_rollback_atomic\",async()=>{await setup();const p:any=await prepareCurrentnessGuard();const beforeTok=await readEventToken();const beforeHead:any=(await sqlite.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_consumption`);await sqlite.execute(`CREATE TRIGGER test_abort_consumption BEFORE INSERT ON lineage_consumptions BEGIN SELECT RAISE(ABORT,'INJECTED_CONSUMPTION_FAILURE'); END`);const c:any=await consumeCurrentnessGuard(p.guard,\"rollback-consume\");await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_consumption`);const afterTok=await readEventToken();const afterHead:any=(await sqlite.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];return c.ok===false&&beforeTok.generation===afterTok.generation&&beforeTok.event_head_hash===afterTok.event_head_hash&&Number(beforeHead.version)===Number(afterHead.version)&&String(beforeHead.head_sha256)===String(afterHead.head_sha256)});\n\n\n\nconst pass=results.filter(x=>x.pass).length;console.log(JSON.stringify({schema:\"SUCCESSOR_LINEAGE_CURRENTNESS_V2_TEST_REPORT\",passed:pass,total:results.length,all_pass:pass===results.length,results},null,2));if(pass!==results.length)throw new Error(`TEST_FAILURE ${pass}/${results.length}`);\nexport default results;",[207],"c0895cc7-c901-4cd2-a57a-2baf1516557d","lineage_currentness_v2_core_test.ts","01a0a2a1-e879-7387-b6dd-97071fa259ea",33,["D",1789434922015],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { __testReset,createTaskMember,addRelation,prepareCurrentnessGuard,consumeCurrentnessGuard,readEventToken,RELATION_TYPES } from \"./lineage_currentness_v2.ts\";\n\ntype R={name:string,pass:boolean,detail?:any};const results:R[]=[];\nasync function check(name:string,fn:()=>Promise,detail?:()=>Promise){try{const pass=await fn();results.push({name,pass,detail:detail?await detail():undefined})}catch(e){results.push({name,pass:false,detail:String((e as any)?.message??e)})}}\nasync function setup(){await __testReset();const a=await createTaskMember({task_id:\"A\",dedupe_key:\"d:A\",payload:{x:1}});const b=await createTaskMember({task_id:\"B\",dedupe_key:\"d:B\",payload:{x:2}});return {a,b}}\n\nawait check(\"empty_state_valid\",async()=>{await __testReset();return (await prepareCurrentnessGuard()).ok===true});\nawait check(\"baseline_two_members_valid\",async()=>{await setup();const v=await prepareCurrentnessGuard();return v.ok===true&&v.diagnostic?.members===2});\nawait check(\"multiple_relations_per_member_preserved\",async()=>{const {a,b}=await setup();await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"DEPENDS_ON\"});await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"GUARDS\"});const v=await prepareCurrentnessGuard();return v.ok===true&&v.diagnostic?.edges===2});\nawait check(\"dangling_target_rejected\",async()=>{const {a}=await setup();try{await addRelation({source_member_id:a.member_instance_id,target_member_id:\"m:\"+\"f\".repeat(64),relation_type:\"DEPENDS_ON\"});return false}catch(e){return String((e as any).message).includes(\"DANGLING_RELATION_TARGET\")}});\nawait check(\"unknown_relation_rejected\",async()=>{const {a,b}=await setup();try{await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"MADE_UP\" as any});return false}catch(e){return String((e as any).message).includes(\"BAD_RELATION_TYPE\")}});\nawait check(\"retained_hash_previous_head_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_heads SET previous_head_sha256='${\"1\".repeat(64)}' WHERE version=(SELECT MAX(version) FROM lineage_heads)`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"HEAD_CHAIN_LINK_MISMATCH\")});\nawait check(\"retained_hash_snapshot_pointer_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_heads SET snapshot_sha256='${\"2\".repeat(64)}' WHERE version=(SELECT MAX(version) FROM lineage_heads)`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"HEAD_SELF_HASH_MISMATCH\")});\nawait check(\"snapshot_content_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_members SET state='COMPLETE' WHERE logical_task_id='A'`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"SNAPSHOT_CONTENT_MISMATCH\")});\nawait check(\"event_body_tamper_rejected\",async()=>{await setup();const r:any=(await sqlite.execute(`SELECT body_json FROM succ_events WHERE local_seq=1`)).rows[0];const b=JSON.parse(String(r.body_json));b.injected=\"same_semantics_extra_byte\";await sqlite.execute({sql:`UPDATE succ_events SET body_json=? WHERE local_seq=1`,args:[JSON.stringify(b)]});const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"EVENT_HASH_MISMATCH\")});\nawait check(\"event_prev_hash_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE succ_events SET prev_hash='${\"3\".repeat(64)}' WHERE local_seq=2`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"EVENT_CHAIN_LINK_MISMATCH\")});\nawait check(\"creation_identity_source_splice_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_members SET created_event_hash='${\"4\".repeat(64)}' WHERE logical_task_id='A'`);const v=await prepareCurrentnessGuard();return v.ok===false});\nawait check(\"mutable_dedupe_cannot_silently_change_identity\",async()=>{const {a}=await setup();await sqlite.execute(`UPDATE lineage_members SET creation_dedupe_key='changed' WHERE logical_task_id='A'`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"SNAPSHOT_CONTENT_MISMATCH\")||String(v.reason).includes(\"TASK_CREATED_MAPPING_MISMATCH\")});\nawait check(\"event_token_shape_internal\",async()=>{await setup();const t:any=await readEventToken();return typeof t.generation===\"number\"&&Number.isInteger(t.generation)&&/^[0-9a-f]{64}$/.test(t.event_head_hash)&&Object.keys(t).sort().join(\",\")===\"event_head_hash,generation\"});\nawait check(\"relation_enum_closed\",async()=>RELATION_TYPES.join(\",\")===\"DEPENDS_ON,FALSIFIED_BY,SUPERSEDES,GUARDS,DERIVED_FROM\");\nawait check(\"real_db_task_create_rollback_atomic\",async()=>{await __testReset();await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_member`);await sqlite.execute(`CREATE TRIGGER test_abort_member BEFORE INSERT ON lineage_members BEGIN SELECT RAISE(ABORT,'INJECTED_MEMBER_FAILURE'); END`);let threw=false;try{await createTaskMember({task_id:\"ROLL\",dedupe_key:\"d:roll\",payload:{x:9}})}catch{threw=true}finally{await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_member`)}const ev:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM succ_events`)).rows[0];const mem:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_members`)).rows[0];const tok=await readEventToken();return threw&&Number(ev.n)===0&&Number(mem.n)===0&&tok.generation===0&&tok.event_head_hash===\"0\".repeat(64)});\nawait check(\"real_db_relation_rollback_atomic\",async()=>{const {a,b}=await setup();const before=await readEventToken();await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_edge`);await sqlite.execute(`CREATE TRIGGER test_abort_edge BEFORE INSERT ON lineage_edges BEGIN SELECT RAISE(ABORT,'INJECTED_EDGE_FAILURE'); END`);let threw=false;try{await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"DEPENDS_ON\"})}catch{threw=true}finally{await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_edge`)}const after=await readEventToken();const e:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_edges`)).rows[0];return threw&&Number(e.n)===0&&after.generation===before.generation&&after.event_head_hash===before.event_head_hash});\nawait check(\"current_head_pointer_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_current_head SET head_sha256='${\"5\".repeat(64)}' WHERE id=1`);const v=await prepareCurrentnessGuard();return v.ok===false&&String(v.reason).includes(\"CURRENT_HEAD_POINTER_MISMATCH\")});\nawait check(\"event_meta_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE succ_event_meta SET event_head_hash='${\"6\".repeat(64)}' WHERE id=1`);const v=await prepareCurrentnessGuard();return v.ok===false});\nawait check(\"fresh_guard_consumption_atomic\",async()=>{await setup();const p:any=await prepareCurrentnessGuard();if(!p.ok)return false;const c:any=await consumeCurrentnessGuard(p.guard,\"fresh-consume\");const n:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_consumptions`)).rows[0];return c.ok===true&&Number(n.n)===1});\nawait check(\"stale_guard_after_lineage_change_rejected\",async()=>{await setup();const p:any=await prepareCurrentnessGuard();if(!p.ok)return false;await createTaskMember({task_id:\"C\",dedupe_key:\"d:C\",payload:{x:3}});const c:any=await consumeCurrentnessGuard(p.guard,\"must-reject\");const n:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_consumptions`)).rows[0];return c.ok===false&&c.reason===\"STALE_CURRENTNESS_GUARD\"&&Number(n.n)===0});\nawait check(\"guard_extra_key_rejected\",async()=>{await setup();const p:any=await prepareCurrentnessGuard();const c:any=await consumeCurrentnessGuard({...p.guard,extra:true},\"bad-shape\");return c.ok===false&&c.reason===\"BAD_GUARD_SHAPE\"});\n\n\n\nconst pass=results.filter(x=>x.pass).length;console.log(JSON.stringify({schema:\"SUCCESSOR_LINEAGE_CURRENTNESS_V2_TEST_REPORT\",passed:pass,total:results.length,all_pass:pass===results.length,results},null,2));if(pass!==results.length)throw new Error(`TEST_FAILURE ${pass}/${results.length}`);\nexport default results;",[214],"73efd566-5286-43cb-9c82-a6c1e5757533","lineage_currentness_v2.ts","01a0a29e-5091-74be-92a5-4d75c3ff1f2f",22,["D",1789434750898],4,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst enc=new TextEncoder();\nexport const RELATION_TYPES=[\"DEPENDS_ON\",\"FALSIFIED_BY\",\"SUPERSEDES\",\"GUARDS\",\"DERIVED_FROM\"] as const;\ntype RelationType=typeof RELATION_TYPES[number];\nconst relSet=new Set(RELATION_TYPES);\nconst H64=/^[0-9a-f]{64}$/;\nconst UUID=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;\n\nfunction canon(x:any):string{\n if(x===null||typeof x!==\"object\") return JSON.stringify(x);\n if(Array.isArray(x)) return \"[\"+x.map(canon).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\n}\nexport async function sha256Text(s:string){return [...new Uint8Array(await crypto.subtle.digest(\"SHA-256\",enc.encode(s)))].map(b=>b.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction exactKeys(o:any,keys:string[]){return !!o&&typeof o===\"object\"&&!Array.isArray(o)&&Object.keys(o).sort().join(\"\\0\")===keys.slice().sort().join(\"\\0\")}\nfunction assertToken(t:any){if(!exactKeys(t,[\"generation\",\"event_head_hash\"]))throw new Error(\"BAD_EVENT_TOKEN_SHAPE\");if(typeof t.generation!==\"number\"||!Number.isInteger(t.generation)||t.generation<0)throw new Error(\"BAD_EVENT_TOKEN_GENERATION\");if(typeof t.event_head_hash!==\"string\"||!H64.test(t.event_head_hash))throw new Error(\"BAD_EVENT_TOKEN_HEAD\");return t as {generation:number,event_head_hash:string}}\nfunction assertGuard(g:any){if(!exactKeys(g,[\"version\",\"lineage_head_sha256\",\"event_generation\",\"event_head_sha256\"]))throw new Error(\"BAD_GUARD_SHAPE\");if(typeof g.version!==\"number\"||!Number.isInteger(g.version)||g.version<0)throw new Error(\"BAD_GUARD_VERSION\");if(typeof g.event_generation!==\"number\"||!Number.isInteger(g.event_generation)||g.event_generation<0)throw new Error(\"BAD_GUARD_EVENT_GENERATION\");if(typeof g.lineage_head_sha256!==\"string\"||!H64.test(g.lineage_head_sha256)||typeof g.event_head_sha256!==\"string\"||!H64.test(g.event_head_sha256))throw new Error(\"BAD_GUARD_HASH\");return g as {version:number,lineage_head_sha256:string,event_generation:number,event_head_sha256:string}}\n\n\nexport async function initLineage(){\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS succ_event_meta(id INTEGER PRIMARY KEY CHECK(id=1),generation INTEGER NOT NULL,event_head_hash TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS succ_events(local_seq INTEGER PRIMARY KEY,event_uuid TEXT NOT NULL UNIQUE,type TEXT NOT NULL,generation INTEGER NOT NULL,prev_hash TEXT NOT NULL,event_hash TEXT NOT NULL UNIQUE,body_json TEXT NOT NULL,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_members(member_instance_id TEXT PRIMARY KEY,logical_task_id TEXT NOT NULL,creation_dedupe_key TEXT NOT NULL,created_event_uuid TEXT NOT NULL,created_event_local_seq INTEGER NOT NULL,created_event_generation INTEGER NOT NULL,created_event_hash TEXT NOT NULL,payload_sha256 TEXT NOT NULL,state TEXT NOT NULL,updated_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_edges(edge_id TEXT PRIMARY KEY,source_member_id TEXT NOT NULL,target_member_id TEXT NOT NULL,relation_type TEXT NOT NULL,updated_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_snapshots(version INTEGER PRIMARY KEY,members_sha256 TEXT NOT NULL,edges_sha256 TEXT NOT NULL,event_history_generation INTEGER NOT NULL,event_history_head_sha256 TEXT NOT NULL,previous_head_sha256 TEXT NOT NULL,snapshot_sha256 TEXT NOT NULL,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_heads(version INTEGER PRIMARY KEY,previous_head_sha256 TEXT NOT NULL,snapshot_sha256 TEXT NOT NULL,event_history_generation INTEGER NOT NULL,event_history_head_sha256 TEXT NOT NULL,head_sha256 TEXT NOT NULL UNIQUE,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_current_head(id INTEGER PRIMARY KEY CHECK(id=1),version INTEGER NOT NULL,head_sha256 TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_consumptions(id TEXT PRIMARY KEY,label TEXT NOT NULL,guard_version INTEGER NOT NULL,guard_lineage_head_sha256 TEXT NOT NULL,guard_event_generation INTEGER NOT NULL,guard_event_head_sha256 TEXT NOT NULL,result_version INTEGER NOT NULL,result_lineage_head_sha256 TEXT NOT NULL,created_at TEXT NOT NULL)`\n ]);\n await sqlite.execute(`INSERT OR IGNORE INTO succ_event_meta(id,generation,event_head_hash) VALUES(1,0,'${\"0\".repeat(64)}')`);\n await sqlite.execute(`INSERT OR IGNORE INTO lineage_current_head(id,version,head_sha256) VALUES(1,0,'${\"0\".repeat(64)}')`);\n}\n\nasync function appendEventTx(tx:any,type:string,body:any){\n const meta:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];\n const token=assertToken({generation:meta.generation,event_head_hash:meta.event_head_hash});\n const seqR:any=(await tx.execute(`SELECT COALESCE(MAX(local_seq),0)+1 AS n FROM succ_events`)).rows[0];\n const local_seq=Number(seqR.n),generation=token.generation+1,event_uuid=crypto.randomUUID(),prev_hash=token.event_head_hash,created_at=new Date().toISOString(),body_json=canon(body);\n const projection={schema:\"SUCCESSOR_EVENT_V1\",local_seq,event_uuid,type,generation,prev_hash,body_json};\n const event_hash=await sha256Text(canon(projection));\n await tx.execute({sql:`INSERT INTO succ_events(local_seq,event_uuid,type,generation,prev_hash,event_hash,body_json,created_at) VALUES(?,?,?,?,?,?,?,?)`,args:[local_seq,event_uuid,type,generation,prev_hash,event_hash,body_json,created_at]});\n await tx.execute({sql:`UPDATE succ_event_meta SET generation=?,event_head_hash=? WHERE id=1`,args:[generation,event_hash]});\n return {...projection,event_hash,created_at};\n}\n\nexport async function readEventToken(){await initLineage();const r:any=(await sqlite.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];return assertToken({generation:r.generation,event_head_hash:r.event_head_hash})}\n\nasync function memberIdFromCreatedEvent(e:any){\n if(e.type!==\"TASK_CREATED\")throw new Error(\"NOT_TASK_CREATED\");\n if(!UUID.test(String(e.event_uuid))||!Number.isInteger(Number(e.local_seq))||Number(e.local_seq)<=0||!Number.isInteger(Number(e.generation))||Number(e.generation)<=0||!H64.test(String(e.event_hash)))throw new Error(\"BAD_CREATED_EVENT_IDENTITY\");\n return \"m:\"+await sha256Text(canon({event_uuid:e.event_uuid,local_seq:Number(e.local_seq),generation:Number(e.generation),event_hash:e.event_hash}));\n}\n\nasync function edgeId(source:string,target:string,relation:RelationType){return \"e:\"+await sha256Text(canon({source,target,relation}))}\n\nasync function publishTx(tx:any){\n const tokenR:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];\n const token=assertToken({generation:tokenR.generation,event_head_hash:tokenR.event_head_hash});\n const members=(await tx.execute(`SELECT * FROM lineage_members ORDER BY member_instance_id`)).rows as any[];\n const edges=(await tx.execute(`SELECT * FROM lineage_edges ORDER BY edge_id`)).rows as any[];\n const members_sha256=await sha256Text(canon(members));\n const edges_sha256=await sha256Text(canon(edges));\n const cur:any=(await tx.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];\n const version=Number(cur.version)+1,previous_head_sha256=String(cur.head_sha256),created_at=new Date().toISOString();\n const snapshotProjection={schema:\"LINEAGE_SNAPSHOT_V1\",version,members_sha256,edges_sha256,event_history_generation:token.generation,event_history_head_sha256:token.event_head_hash,previous_head_sha256};\n const snapshot_sha256=await sha256Text(canon(snapshotProjection));\n const headProjection={schema:\"LINEAGE_HEAD_V1\",version,previous_head_sha256,snapshot_sha256,event_history_generation:token.generation,event_history_head_sha256:token.event_head_hash};\n const head_sha256=await sha256Text(canon(headProjection));\n await tx.execute({sql:`INSERT INTO lineage_snapshots(version,members_sha256,edges_sha256,event_history_generation,event_history_head_sha256,previous_head_sha256,snapshot_sha256,created_at) VALUES(?,?,?,?,?,?,?,?)`,args:[version,members_sha256,edges_sha256,token.generation,token.event_head_hash,previous_head_sha256,snapshot_sha256,created_at]});\n await tx.execute({sql:`INSERT INTO lineage_heads(version,previous_head_sha256,snapshot_sha256,event_history_generation,event_history_head_sha256,head_sha256,created_at) VALUES(?,?,?,?,?,?,?)`,args:[version,previous_head_sha256,snapshot_sha256,token.generation,token.event_head_hash,head_sha256,created_at]});\n await tx.execute({sql:`UPDATE lineage_current_head SET version=?,head_sha256=? WHERE id=1`,args:[version,head_sha256]});\n return {version,head_sha256,snapshot_sha256,event_token:token};\n}\n\nexport async function createTaskMember(x:{task_id:string,dedupe_key:string,payload:any,state?:string}){\n await initLineage();const tx:any=await sqlite.transaction(\"write\");\n try{\n const payload_sha256=await sha256Text(canon(x.payload));\n const ev=await appendEventTx(tx,\"TASK_CREATED\",{task_id:x.task_id,dedupe_key:x.dedupe_key,payload_sha256});\n const member_instance_id=await memberIdFromCreatedEvent(ev),t=new Date().toISOString();\n await tx.execute({sql:`INSERT INTO lineage_members(member_instance_id,logical_task_id,creation_dedupe_key,created_event_uuid,created_event_local_seq,created_event_generation,created_event_hash,payload_sha256,state,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?)`,args:[member_instance_id,x.task_id,x.dedupe_key,ev.event_uuid,ev.local_seq,ev.generation,ev.event_hash,payload_sha256,x.state??\"READY\",t]});\n const published=await publishTx(tx);await tx.commit();return {member_instance_id,event:ev,published};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nexport async function addRelation(x:{source_member_id:string,target_member_id:string,relation_type:RelationType}){\n if(!relSet.has(x.relation_type))throw new Error(\"BAD_RELATION_TYPE\");\n await initLineage();const tx:any=await sqlite.transaction(\"write\");\n try{\n const rs:any=(await tx.execute({sql:`SELECT member_instance_id FROM lineage_members WHERE member_instance_id IN (?,?)`,args:[x.source_member_id,x.target_member_id]})).rows;\n if(rs.length!==new Set([x.source_member_id,x.target_member_id]).size)throw new Error(\"DANGLING_RELATION_TARGET\");\n const edge_id=await edgeId(x.source_member_id,x.target_member_id,x.relation_type),t=new Date().toISOString();\n await appendEventTx(tx,\"RELATION_ADDED\",{edge_id,source_member_id:x.source_member_id,target_member_id:x.target_member_id,relation_type:x.relation_type});\n await tx.execute({sql:`INSERT OR IGNORE INTO lineage_edges(edge_id,source_member_id,target_member_id,relation_type,updated_at) VALUES(?,?,?,?,?)`,args:[edge_id,x.source_member_id,x.target_member_id,x.relation_type,t]});\n const published=await publishTx(tx);await tx.commit();return {edge_id,published};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nasync function verifyEventChainRows(rows:any[],meta:any){\n let prev=\"0\".repeat(64),generation=0;\n for(const r of rows){\n if(Number(r.local_seq)!==generation+1||Number(r.generation)!==generation+1||String(r.prev_hash)!==prev)throw new Error(\"EVENT_CHAIN_LINK_MISMATCH\");\n if(!UUID.test(String(r.event_uuid))||!H64.test(String(r.event_hash)))throw new Error(\"EVENT_CHAIN_IDENTITY_MALFORMED\");\n const projection={schema:\"SUCCESSOR_EVENT_V1\",local_seq:Number(r.local_seq),event_uuid:String(r.event_uuid),type:String(r.type),generation:Number(r.generation),prev_hash:String(r.prev_hash),body_json:String(r.body_json)};\n const expected=await sha256Text(canon(projection));if(expected!==String(r.event_hash))throw new Error(\"EVENT_HASH_MISMATCH\");\n prev=expected;generation++;\n }\n const token=assertToken({generation:meta.generation,event_head_hash:meta.event_head_hash});\n if(token.generation!==generation||token.event_head_hash!==prev)throw new Error(\"EVENT_META_MISMATCH\");\n return token;\n}\n\nasync function revalidateTaskMembers(tx:any,members:any[]){\n for(const m of members){\n const rows:any[]=(await tx.execute({sql:`SELECT * FROM succ_events WHERE event_uuid=? AND local_seq=? AND generation=? AND event_hash=? AND type='TASK_CREATED'`,args:[m.created_event_uuid,m.created_event_local_seq,m.created_event_generation,m.created_event_hash]})).rows as any[];\n if(rows.length!==1)throw new Error(\"TASK_CREATED_IDENTITY_NOT_UNIQUE\");\n const body=JSON.parse(String(rows[0].body_json));\n if(body.task_id!==m.logical_task_id||body.dedupe_key!==m.creation_dedupe_key||body.payload_sha256!==m.payload_sha256)throw new Error(\"TASK_CREATED_MAPPING_MISMATCH\");\n const recomputed=await memberIdFromCreatedEvent({...rows[0],event_hash:String(rows[0].event_hash)});if(recomputed!==m.member_instance_id)throw new Error(\"MEMBER_ID_MISMATCH\");\n }\n}\n\nexport async function prepareCurrentnessGuard(){\n await initLineage();\n const tx:any=await sqlite.transaction(\"read\");\n try{\n const token0R:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];const token0=assertToken({generation:token0R.generation,event_head_hash:token0R.event_head_hash});\n const cur:any=(await tx.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];\n if(Number(cur.version)===0){const guard=assertGuard({version:0,lineage_head_sha256:\"0\".repeat(64),event_generation:token0.generation,event_head_sha256:token0.event_head_hash});await tx.commit();return {ok:true,guard,diagnostic:{members:0,edges:0}}}\n const heads:any[]=(await tx.execute(`SELECT * FROM lineage_heads ORDER BY version`)).rows as any[];\n let prev=\"0\".repeat(64);\n for(let i=0;iString(m.member_instance_id)));for(const e of edges){if(!relSet.has(String(e.relation_type)))throw new Error(\"UNKNOWN_RELATION_TYPE\");if(!ids.has(String(e.source_member_id))||!ids.has(String(e.target_member_id)))throw new Error(\"DANGLING_RELATION_TARGET\")}\n await revalidateTaskMembers(tx,members);\n const events:any[]=(await tx.execute(`SELECT * FROM succ_events ORDER BY local_seq`)).rows as any[];const meta:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];const token1=await verifyEventChainRows(events,meta);\n if(token1.generation!==token0.generation||token1.event_head_hash!==token0.event_head_hash)throw new Error(\"EVENT_HISTORY_CHANGED_DURING_VERIFY\");\n if(Number(head.event_history_generation)!==token1.generation||String(head.event_history_head_sha256)!==token1.event_head_hash)throw new Error(\"HEAD_EVENT_HISTORY_STALE\");\n const guard=assertGuard({version:Number(cur.version),lineage_head_sha256:String(cur.head_sha256),event_generation:token1.generation,event_head_sha256:token1.event_head_hash});\n await tx.commit();return {ok:true,guard,diagnostic:{members:members.length,edges:edges.length}};\n }catch(e){try{await tx.rollback()}catch{};return {ok:false,reason:String((e as any)?.message??e)}}\n}\n\nexport async function consumeCurrentnessGuard(guardInput:any,label:string){\n let guard:any;try{guard=assertGuard(guardInput)}catch(e){return {ok:false,reason:String((e as any)?.message??e)}}\n if(typeof label!==\"string\"||label.length<1||label.length>200)return {ok:false,reason:\"BAD_CONSUMPTION_LABEL\"};\n await initLineage();const tx:any=await sqlite.transaction(\"write\");\n try{\n const metaR:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];const token=assertToken({generation:metaR.generation,event_head_hash:metaR.event_head_hash});\n const cur:any=(await tx.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];\n if(Number(cur.version)!==guard.version||String(cur.head_sha256)!==guard.lineage_head_sha256||token.generation!==guard.event_generation||token.event_head_hash!==guard.event_head_sha256){await tx.commit();return {ok:false,reason:\"STALE_CURRENTNESS_GUARD\"}}\n const consumption_id=crypto.randomUUID();\n await appendEventTx(tx,\"CURRENTNESS_GUARD_CONSUMED\",{consumption_id,label,guard});\n const published=await publishTx(tx);const created_at=new Date().toISOString();\n await tx.execute({sql:`INSERT INTO lineage_consumptions(id,label,guard_version,guard_lineage_head_sha256,guard_event_generation,guard_event_head_sha256,result_version,result_lineage_head_sha256,created_at) VALUES(?,?,?,?,?,?,?,?,?)`,args:[consumption_id,label,guard.version,guard.lineage_head_sha256,guard.event_generation,guard.event_head_sha256,published.version,published.head_sha256,created_at]});\n await tx.commit();return {ok:true,consumption_id,result_version:published.version,result_lineage_head_sha256:published.head_sha256};\n }catch(e){try{await tx.rollback()}catch{};return {ok:false,reason:String((e as any)?.message??e)}}\n}\n\nexport async function __testReset(){await initLineage();await sqlite.batch([`DELETE FROM lineage_consumptions`,`DELETE FROM lineage_edges`,`DELETE FROM lineage_members`,`DELETE FROM lineage_snapshots`,`DELETE FROM lineage_heads`,`UPDATE lineage_current_head SET version=0,head_sha256='${\"0\".repeat(64)}' WHERE id=1`,`DELETE FROM succ_events`,`UPDATE succ_event_meta SET generation=0,event_head_hash='${\"0\".repeat(64)}' WHERE id=1`]);}\n",[221],"e4e3b39d-799c-4cc4-b7f8-1c696f40a5f6","lineage_currentness_v1_test.ts","e6e11424-b0a1-11f1-95ed-1607ee4eb77e",15,["D",1789434542493],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { __testReset,createTaskMember,addRelation,verifyCurrentness,readEventToken,RELATION_TYPES } from \"./lineage_currentness_v1.ts\";\n\ntype R={name:string,pass:boolean,detail?:any};const results:R[]=[];\nasync function check(name:string,fn:()=>Promise,detail?:()=>Promise){try{const pass=await fn();results.push({name,pass,detail:detail?await detail():undefined})}catch(e){results.push({name,pass:false,detail:String((e as any)?.message??e)})}}\nasync function setup(){await __testReset();const a=await createTaskMember({task_id:\"A\",dedupe_key:\"d:A\",payload:{x:1}});const b=await createTaskMember({task_id:\"B\",dedupe_key:\"d:B\",payload:{x:2}});return {a,b}}\n\nawait check(\"empty_state_valid\",async()=>{await __testReset();return (await verifyCurrentness()).ok===true});\nawait check(\"baseline_two_members_valid\",async()=>{await setup();const v=await verifyCurrentness();return v.ok===true&&v.members===2});\nawait check(\"multiple_relations_per_member_preserved\",async()=>{const {a,b}=await setup();await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"DEPENDS_ON\"});await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"GUARDS\"});const v=await verifyCurrentness();return v.ok===true&&v.edges===2});\nawait check(\"dangling_target_rejected\",async()=>{const {a}=await setup();try{await addRelation({source_member_id:a.member_instance_id,target_member_id:\"m:\"+\"f\".repeat(64),relation_type:\"DEPENDS_ON\"});return false}catch(e){return String((e as any).message).includes(\"DANGLING_RELATION_TARGET\")}});\nawait check(\"unknown_relation_rejected\",async()=>{const {a,b}=await setup();try{await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"MADE_UP\" as any});return false}catch(e){return String((e as any).message).includes(\"BAD_RELATION_TYPE\")}});\nawait check(\"retained_hash_previous_head_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_heads SET previous_head_sha256='${\"1\".repeat(64)}' WHERE version=(SELECT MAX(version) FROM lineage_heads)`);const v=await verifyCurrentness();return v.ok===false&&String(v.reason).includes(\"HEAD_CHAIN_LINK_MISMATCH\")});\nawait check(\"retained_hash_snapshot_pointer_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_heads SET snapshot_sha256='${\"2\".repeat(64)}' WHERE version=(SELECT MAX(version) FROM lineage_heads)`);const v=await verifyCurrentness();return v.ok===false&&String(v.reason).includes(\"HEAD_SELF_HASH_MISMATCH\")});\nawait check(\"snapshot_content_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_members SET state='COMPLETE' WHERE logical_task_id='A'`);const v=await verifyCurrentness();return v.ok===false&&String(v.reason).includes(\"SNAPSHOT_CONTENT_MISMATCH\")});\nawait check(\"event_body_tamper_rejected\",async()=>{await setup();const r:any=(await sqlite.execute(`SELECT body_json FROM succ_events WHERE local_seq=1`)).rows[0];const b=JSON.parse(String(r.body_json));b.injected=\"same_semantics_extra_byte\";await sqlite.execute({sql:`UPDATE succ_events SET body_json=? WHERE local_seq=1`,args:[JSON.stringify(b)]});const v=await verifyCurrentness();return v.ok===false&&String(v.reason).includes(\"EVENT_HASH_MISMATCH\")});\nawait check(\"event_prev_hash_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE succ_events SET prev_hash='${\"3\".repeat(64)}' WHERE local_seq=2`);const v=await verifyCurrentness();return v.ok===false&&String(v.reason).includes(\"EVENT_CHAIN_LINK_MISMATCH\")});\nawait check(\"creation_identity_source_splice_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_members SET created_event_hash='${\"4\".repeat(64)}' WHERE logical_task_id='A'`);const v=await verifyCurrentness();return v.ok===false});\nawait check(\"mutable_dedupe_cannot_silently_change_identity\",async()=>{const {a}=await setup();await sqlite.execute(`UPDATE lineage_members SET creation_dedupe_key='changed' WHERE logical_task_id='A'`);const v=await verifyCurrentness();return v.ok===false&&String(v.reason).includes(\"SNAPSHOT_CONTENT_MISMATCH\")||String(v.reason).includes(\"TASK_CREATED_MAPPING_MISMATCH\")});\nawait check(\"event_token_shape_internal\",async()=>{await setup();const t:any=await readEventToken();return typeof t.generation===\"number\"&&Number.isInteger(t.generation)&&/^[0-9a-f]{64}$/.test(t.event_head_hash)&&Object.keys(t).sort().join(\",\")===\"event_head_hash,generation\"});\nawait check(\"relation_enum_closed\",async()=>RELATION_TYPES.join(\",\")===\"DEPENDS_ON,FALSIFIED_BY,SUPERSEDES,GUARDS,DERIVED_FROM\");\nawait check(\"real_db_task_create_rollback_atomic\",async()=>{await __testReset();await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_member`);await sqlite.execute(`CREATE TRIGGER test_abort_member BEFORE INSERT ON lineage_members BEGIN SELECT RAISE(ABORT,'INJECTED_MEMBER_FAILURE'); END`);let threw=false;try{await createTaskMember({task_id:\"ROLL\",dedupe_key:\"d:roll\",payload:{x:9}})}catch{threw=true}finally{await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_member`)}const ev:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM succ_events`)).rows[0];const mem:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_members`)).rows[0];const tok=await readEventToken();return threw&&Number(ev.n)===0&&Number(mem.n)===0&&tok.generation===0&&tok.event_head_hash===\"0\".repeat(64)});\nawait check(\"real_db_relation_rollback_atomic\",async()=>{const {a,b}=await setup();const before=await readEventToken();await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_edge`);await sqlite.execute(`CREATE TRIGGER test_abort_edge BEFORE INSERT ON lineage_edges BEGIN SELECT RAISE(ABORT,'INJECTED_EDGE_FAILURE'); END`);let threw=false;try{await addRelation({source_member_id:a.member_instance_id,target_member_id:b.member_instance_id,relation_type:\"DEPENDS_ON\"})}catch{threw=true}finally{await sqlite.execute(`DROP TRIGGER IF EXISTS test_abort_edge`)}const after=await readEventToken();const e:any=(await sqlite.execute(`SELECT COUNT(*) AS n FROM lineage_edges`)).rows[0];return threw&&Number(e.n)===0&&after.generation===before.generation&&after.event_head_hash===before.event_head_hash});\nawait check(\"current_head_pointer_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE lineage_current_head SET head_sha256='${\"5\".repeat(64)}' WHERE id=1`);const v=await verifyCurrentness();return v.ok===false&&String(v.reason).includes(\"CURRENT_HEAD_POINTER_MISMATCH\")});\nawait check(\"event_meta_tamper_rejected\",async()=>{await setup();await sqlite.execute(`UPDATE succ_event_meta SET event_head_hash='${\"6\".repeat(64)}' WHERE id=1`);const v=await verifyCurrentness();return v.ok===false});\n\n\nconst pass=results.filter(x=>x.pass).length;console.log(JSON.stringify({schema:\"SUCCESSOR_LINEAGE_CURRENTNESS_V1_TEST_REPORT\",passed:pass,total:results.length,all_pass:pass===results.length,results},null,2));if(pass!==results.length)throw new Error(`TEST_FAILURE ${pass}/${results.length}`);\nexport default results;",[229],"9096c04a-1886-49dd-9993-54d60474620b","lineage_currentness_v1.ts","bce57dcc-b0a1-11f1-ba5c-1607ee4eb77e",12,["D",1789434456549],5,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst enc=new TextEncoder();\nexport const RELATION_TYPES=[\"DEPENDS_ON\",\"FALSIFIED_BY\",\"SUPERSEDES\",\"GUARDS\",\"DERIVED_FROM\"] as const;\ntype RelationType=typeof RELATION_TYPES[number];\nconst relSet=new Set(RELATION_TYPES);\nconst H64=/^[0-9a-f]{64}$/;\nconst UUID=/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;\n\nfunction canon(x:any):string{\n if(x===null||typeof x!==\"object\") return JSON.stringify(x);\n if(Array.isArray(x)) return \"[\"+x.map(canon).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\n}\nexport async function sha256Text(s:string){return [...new Uint8Array(await crypto.subtle.digest(\"SHA-256\",enc.encode(s)))].map(b=>b.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction exactKeys(o:any,keys:string[]){return !!o&&typeof o===\"object\"&&!Array.isArray(o)&&Object.keys(o).sort().join(\"\\0\")===keys.slice().sort().join(\"\\0\")}\nfunction assertToken(t:any){if(!exactKeys(t,[\"generation\",\"event_head_hash\"]))throw new Error(\"BAD_EVENT_TOKEN_SHAPE\");if(typeof t.generation!==\"number\"||!Number.isInteger(t.generation)||t.generation<0)throw new Error(\"BAD_EVENT_TOKEN_GENERATION\");if(typeof t.event_head_hash!==\"string\"||!H64.test(t.event_head_hash))throw new Error(\"BAD_EVENT_TOKEN_HEAD\");return t as {generation:number,event_head_hash:string}}\n\nexport async function initLineage(){\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS succ_event_meta(id INTEGER PRIMARY KEY CHECK(id=1),generation INTEGER NOT NULL,event_head_hash TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS succ_events(local_seq INTEGER PRIMARY KEY,event_uuid TEXT NOT NULL UNIQUE,type TEXT NOT NULL,generation INTEGER NOT NULL,prev_hash TEXT NOT NULL,event_hash TEXT NOT NULL UNIQUE,body_json TEXT NOT NULL,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_members(member_instance_id TEXT PRIMARY KEY,logical_task_id TEXT NOT NULL,creation_dedupe_key TEXT NOT NULL,created_event_uuid TEXT NOT NULL,created_event_local_seq INTEGER NOT NULL,created_event_generation INTEGER NOT NULL,created_event_hash TEXT NOT NULL,payload_sha256 TEXT NOT NULL,state TEXT NOT NULL,updated_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_edges(edge_id TEXT PRIMARY KEY,source_member_id TEXT NOT NULL,target_member_id TEXT NOT NULL,relation_type TEXT NOT NULL,updated_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_snapshots(version INTEGER PRIMARY KEY,members_sha256 TEXT NOT NULL,edges_sha256 TEXT NOT NULL,event_history_generation INTEGER NOT NULL,event_history_head_sha256 TEXT NOT NULL,previous_head_sha256 TEXT NOT NULL,snapshot_sha256 TEXT NOT NULL,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_heads(version INTEGER PRIMARY KEY,previous_head_sha256 TEXT NOT NULL,snapshot_sha256 TEXT NOT NULL,event_history_generation INTEGER NOT NULL,event_history_head_sha256 TEXT NOT NULL,head_sha256 TEXT NOT NULL UNIQUE,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS lineage_current_head(id INTEGER PRIMARY KEY CHECK(id=1),version INTEGER NOT NULL,head_sha256 TEXT NOT NULL)`\n ]);\n await sqlite.execute(`INSERT OR IGNORE INTO succ_event_meta(id,generation,event_head_hash) VALUES(1,0,'${\"0\".repeat(64)}')`);\n await sqlite.execute(`INSERT OR IGNORE INTO lineage_current_head(id,version,head_sha256) VALUES(1,0,'${\"0\".repeat(64)}')`);\n}\n\nasync function appendEventTx(tx:any,type:string,body:any){\n const meta:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];\n const token=assertToken({generation:meta.generation,event_head_hash:meta.event_head_hash});\n const seqR:any=(await tx.execute(`SELECT COALESCE(MAX(local_seq),0)+1 AS n FROM succ_events`)).rows[0];\n const local_seq=Number(seqR.n),generation=token.generation+1,event_uuid=crypto.randomUUID(),prev_hash=token.event_head_hash,created_at=new Date().toISOString(),body_json=canon(body);\n const projection={schema:\"SUCCESSOR_EVENT_V1\",local_seq,event_uuid,type,generation,prev_hash,body_json};\n const event_hash=await sha256Text(canon(projection));\n await tx.execute({sql:`INSERT INTO succ_events(local_seq,event_uuid,type,generation,prev_hash,event_hash,body_json,created_at) VALUES(?,?,?,?,?,?,?,?)`,args:[local_seq,event_uuid,type,generation,prev_hash,event_hash,body_json,created_at]});\n await tx.execute({sql:`UPDATE succ_event_meta SET generation=?,event_head_hash=? WHERE id=1`,args:[generation,event_hash]});\n return {...projection,event_hash,created_at};\n}\n\nexport async function readEventToken(){await initLineage();const r:any=(await sqlite.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];return assertToken({generation:r.generation,event_head_hash:r.event_head_hash})}\n\nasync function memberIdFromCreatedEvent(e:any){\n if(e.type!==\"TASK_CREATED\")throw new Error(\"NOT_TASK_CREATED\");\n if(!UUID.test(String(e.event_uuid))||!Number.isInteger(Number(e.local_seq))||Number(e.local_seq)<=0||!Number.isInteger(Number(e.generation))||Number(e.generation)<=0||!H64.test(String(e.event_hash)))throw new Error(\"BAD_CREATED_EVENT_IDENTITY\");\n return \"m:\"+await sha256Text(canon({event_uuid:e.event_uuid,local_seq:Number(e.local_seq),generation:Number(e.generation),event_hash:e.event_hash}));\n}\n\nasync function edgeId(source:string,target:string,relation:RelationType){return \"e:\"+await sha256Text(canon({source,target,relation}))}\n\nasync function publishTx(tx:any){\n const tokenR:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];\n const token=assertToken({generation:tokenR.generation,event_head_hash:tokenR.event_head_hash});\n const members=(await tx.execute(`SELECT * FROM lineage_members ORDER BY member_instance_id`)).rows as any[];\n const edges=(await tx.execute(`SELECT * FROM lineage_edges ORDER BY edge_id`)).rows as any[];\n const members_sha256=await sha256Text(canon(members));\n const edges_sha256=await sha256Text(canon(edges));\n const cur:any=(await tx.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];\n const version=Number(cur.version)+1,previous_head_sha256=String(cur.head_sha256),created_at=new Date().toISOString();\n const snapshotProjection={schema:\"LINEAGE_SNAPSHOT_V1\",version,members_sha256,edges_sha256,event_history_generation:token.generation,event_history_head_sha256:token.event_head_hash,previous_head_sha256};\n const snapshot_sha256=await sha256Text(canon(snapshotProjection));\n const headProjection={schema:\"LINEAGE_HEAD_V1\",version,previous_head_sha256,snapshot_sha256,event_history_generation:token.generation,event_history_head_sha256:token.event_head_hash};\n const head_sha256=await sha256Text(canon(headProjection));\n await tx.execute({sql:`INSERT INTO lineage_snapshots(version,members_sha256,edges_sha256,event_history_generation,event_history_head_sha256,previous_head_sha256,snapshot_sha256,created_at) VALUES(?,?,?,?,?,?,?,?)`,args:[version,members_sha256,edges_sha256,token.generation,token.event_head_hash,previous_head_sha256,snapshot_sha256,created_at]});\n await tx.execute({sql:`INSERT INTO lineage_heads(version,previous_head_sha256,snapshot_sha256,event_history_generation,event_history_head_sha256,head_sha256,created_at) VALUES(?,?,?,?,?,?,?)`,args:[version,previous_head_sha256,snapshot_sha256,token.generation,token.event_head_hash,head_sha256,created_at]});\n await tx.execute({sql:`UPDATE lineage_current_head SET version=?,head_sha256=? WHERE id=1`,args:[version,head_sha256]});\n return {version,head_sha256,snapshot_sha256,event_token:token};\n}\n\nexport async function createTaskMember(x:{task_id:string,dedupe_key:string,payload:any,state?:string}){\n await initLineage();const tx:any=await sqlite.transaction(\"write\");\n try{\n const payload_sha256=await sha256Text(canon(x.payload));\n const ev=await appendEventTx(tx,\"TASK_CREATED\",{task_id:x.task_id,dedupe_key:x.dedupe_key,payload_sha256});\n const member_instance_id=await memberIdFromCreatedEvent(ev),t=new Date().toISOString();\n await tx.execute({sql:`INSERT INTO lineage_members(member_instance_id,logical_task_id,creation_dedupe_key,created_event_uuid,created_event_local_seq,created_event_generation,created_event_hash,payload_sha256,state,updated_at) VALUES(?,?,?,?,?,?,?,?,?,?)`,args:[member_instance_id,x.task_id,x.dedupe_key,ev.event_uuid,ev.local_seq,ev.generation,ev.event_hash,payload_sha256,x.state??\"READY\",t]});\n const published=await publishTx(tx);await tx.commit();return {member_instance_id,event:ev,published};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nexport async function addRelation(x:{source_member_id:string,target_member_id:string,relation_type:RelationType}){\n if(!relSet.has(x.relation_type))throw new Error(\"BAD_RELATION_TYPE\");\n await initLineage();const tx:any=await sqlite.transaction(\"write\");\n try{\n const rs:any=(await tx.execute({sql:`SELECT member_instance_id FROM lineage_members WHERE member_instance_id IN (?,?)`,args:[x.source_member_id,x.target_member_id]})).rows;\n if(rs.length!==new Set([x.source_member_id,x.target_member_id]).size)throw new Error(\"DANGLING_RELATION_TARGET\");\n const edge_id=await edgeId(x.source_member_id,x.target_member_id,x.relation_type),t=new Date().toISOString();\n await appendEventTx(tx,\"RELATION_ADDED\",{edge_id,source_member_id:x.source_member_id,target_member_id:x.target_member_id,relation_type:x.relation_type});\n await tx.execute({sql:`INSERT OR IGNORE INTO lineage_edges(edge_id,source_member_id,target_member_id,relation_type,updated_at) VALUES(?,?,?,?,?)`,args:[edge_id,x.source_member_id,x.target_member_id,x.relation_type,t]});\n const published=await publishTx(tx);await tx.commit();return {edge_id,published};\n }catch(e){try{await tx.rollback()}catch{};throw e}\n}\n\nasync function verifyEventChainRows(rows:any[],meta:any){\n let prev=\"0\".repeat(64),generation=0;\n for(const r of rows){\n if(Number(r.local_seq)!==generation+1||Number(r.generation)!==generation+1||String(r.prev_hash)!==prev)throw new Error(\"EVENT_CHAIN_LINK_MISMATCH\");\n if(!UUID.test(String(r.event_uuid))||!H64.test(String(r.event_hash)))throw new Error(\"EVENT_CHAIN_IDENTITY_MALFORMED\");\n const projection={schema:\"SUCCESSOR_EVENT_V1\",local_seq:Number(r.local_seq),event_uuid:String(r.event_uuid),type:String(r.type),generation:Number(r.generation),prev_hash:String(r.prev_hash),body_json:String(r.body_json)};\n const expected=await sha256Text(canon(projection));if(expected!==String(r.event_hash))throw new Error(\"EVENT_HASH_MISMATCH\");\n prev=expected;generation++;\n }\n const token=assertToken({generation:meta.generation,event_head_hash:meta.event_head_hash});\n if(token.generation!==generation||token.event_head_hash!==prev)throw new Error(\"EVENT_META_MISMATCH\");\n return token;\n}\n\nasync function revalidateTaskMembers(tx:any,members:any[]){\n for(const m of members){\n const rows:any[]=(await tx.execute({sql:`SELECT * FROM succ_events WHERE event_uuid=? AND local_seq=? AND generation=? AND event_hash=? AND type='TASK_CREATED'`,args:[m.created_event_uuid,m.created_event_local_seq,m.created_event_generation,m.created_event_hash]})).rows as any[];\n if(rows.length!==1)throw new Error(\"TASK_CREATED_IDENTITY_NOT_UNIQUE\");\n const body=JSON.parse(String(rows[0].body_json));\n if(body.task_id!==m.logical_task_id||body.dedupe_key!==m.creation_dedupe_key||body.payload_sha256!==m.payload_sha256)throw new Error(\"TASK_CREATED_MAPPING_MISMATCH\");\n const recomputed=await memberIdFromCreatedEvent({...rows[0],event_hash:String(rows[0].event_hash)});if(recomputed!==m.member_instance_id)throw new Error(\"MEMBER_ID_MISMATCH\");\n }\n}\n\nexport async function verifyCurrentness(){\n await initLineage();\n const tx:any=await sqlite.transaction(\"read\");\n try{\n const token0R:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];const token0=assertToken({generation:token0R.generation,event_head_hash:token0R.event_head_hash});\n const cur:any=(await tx.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];\n if(Number(cur.version)===0){await tx.commit();return {ok:true,version:0,head_sha256:\"0\".repeat(64),event_token:token0}}\n const heads:any[]=(await tx.execute(`SELECT * FROM lineage_heads ORDER BY version`)).rows as any[];\n let prev=\"0\".repeat(64);\n for(let i=0;iString(m.member_instance_id)));for(const e of edges){if(!relSet.has(String(e.relation_type)))throw new Error(\"UNKNOWN_RELATION_TYPE\");if(!ids.has(String(e.source_member_id))||!ids.has(String(e.target_member_id)))throw new Error(\"DANGLING_RELATION_TARGET\")}\n await revalidateTaskMembers(tx,members);\n const events:any[]=(await tx.execute(`SELECT * FROM succ_events ORDER BY local_seq`)).rows as any[];const meta:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];const token1=await verifyEventChainRows(events,meta);\n if(token1.generation!==token0.generation||token1.event_head_hash!==token0.event_head_hash)throw new Error(\"EVENT_HISTORY_CHANGED_DURING_VERIFY\");\n if(Number(head.event_history_generation)!==token1.generation||String(head.event_history_head_sha256)!==token1.event_head_hash)throw new Error(\"HEAD_EVENT_HISTORY_STALE\");\n const finalCur:any=(await tx.execute(`SELECT version,head_sha256 FROM lineage_current_head WHERE id=1`)).rows[0];if(Number(finalCur.version)!==Number(cur.version)||String(finalCur.head_sha256)!==String(cur.head_sha256))throw new Error(\"LINEAGE_HEAD_CHANGED_DURING_VERIFY\");\n const finalMeta:any=(await tx.execute(`SELECT generation,event_head_hash FROM succ_event_meta WHERE id=1`)).rows[0];const token2=assertToken({generation:finalMeta.generation,event_head_hash:finalMeta.event_head_hash});if(token2.generation!==token1.generation||token2.event_head_hash!==token1.event_head_hash)throw new Error(\"EVENT_HISTORY_CHANGED_BEFORE_ACCEPT\");\n await tx.commit();return {ok:true,version:Number(cur.version),head_sha256:String(cur.head_sha256),event_token:token2,members:members.length,edges:edges.length};\n }catch(e){try{await tx.rollback()}catch{};return {ok:false,reason:String((e as any)?.message??e)}}\n}\n\nexport async function __testReset(){await initLineage();await sqlite.batch([`DELETE FROM lineage_edges`,`DELETE FROM lineage_members`,`DELETE FROM lineage_snapshots`,`DELETE FROM lineage_heads`,`UPDATE lineage_current_head SET version=0,head_sha256='${\"0\".repeat(64)}' WHERE id=1`,`DELETE FROM succ_events`,`UPDATE succ_event_meta SET generation=0,event_head_hash='${\"0\".repeat(64)}' WHERE id=1`]);}\n",[236],"6616a022-106d-4cb5-b661-59a771e0f3d8","hash_references.ts","8220df60-b0a1-11f1-b56b-1607ee4eb77e",51,["D",1789435398454],3,"const enc=new TextEncoder();\nasync function sha256(s:string){return [...new Uint8Array(await crypto.subtle.digest('SHA-256',enc.encode(s)))].map(b=>b.toString(16).padStart(2,'0')).join('')}\nconst base='https://esm.town/v/mosadek/project-brain-successor-20260915-v1/';\nconst files=['program.ts','run_e001.ts','lineage_currentness_v1.ts','lineage_currentness_v1_test.ts','lineage_currentness_v2.ts','lineage_currentness_v2_core_test.ts','v2_guard_type_isolated_test.ts','v2_guard_rollback_isolated_test.ts','successor_kernel_v1.ts','successor_kernel_v1_test.ts','reference/val_native_kernel_v1.ts','reference/val_native_executor_prod.ts'];\nconst out:any[]=[];\nfor(const f of files){const r=await fetch(base+f);const t=await r.text();out.push({file:f,status:r.status,bytes:enc.encode(t).length,sha256:await sha256(t)})}\nconsole.log(JSON.stringify(out,null,2));\nexport default out;",[244],"580c782d-0629-41f4-9e82-be8d1f1848ee","INTEGRATED_KERNEL_V1.json","1ac9e516-b0a4-11f1-9777-1607ee4eb77e",52,["D",1789435429551],"{\n \"schema\": \"PROJECT_BRAIN_SUCCESSOR_INTEGRATED_KERNEL_V1\",\n \"status\": \"CANDIDATE_VERIFIED_ON_ISOLATED_DB\",\n \"authority_status\": \"SUCCESSOR_CANDIDATE_NOT_PREDECESSOR_CONTINUITY\",\n \"p_real_increment\": 0,\n \"human_authority_approval\": false,\n \"independent_review_claimed\": false,\n \"additional_spend_usd\": 0,\n \"direct_sprites_calls\": 0,\n \"kernel\": {\"file\":\"successor_kernel_v1.ts\",\"bytes\":19458,\"sha256\":\"abbf1a4fec6416e8c1cac4cf919049192fca6aa993fa0c3d53d0bd5830aaac5e\"},\n \"test\": {\"file\":\"successor_kernel_v1_test.ts\",\"bytes\":7303,\"sha256\":\"7bd9c19a029f5b31fdc6d19e7d063bd307c57eb48fa3569fe8160d178e44320b\",\"fresh_isolated_result\":\"11/11 PASS\"},\n \"isolated_review_val\": \"mosadek/brain-successor-kernel-v1-review-0915\",\n \"exact_hash_match\": true,\n \"properties_demonstrated\": [\n \"task creation + immutable creation event + lineage member + snapshot + head commit atomically\",\n \"full authoritative task runtime projection hash bound into lineage snapshot\",\n \"task/lineage parity checked before every consequential mutation\",\n \"capability-gated one-live-lease claiming\",\n \"SUBMITTED resource exclusivity\",\n \"lease-token-bound submission\",\n \"stale result hash rejection\",\n \"self-verification rejection\",\n \"generic positive completion unavailable\",\n \"built-in EXACT_JSON_SHA256 deterministic verifier can complete only matching result\",\n \"prerequisites unlock only after verified COMPLETE\",\n \"direct task-row mutation fails closed through runtime hash mismatch\",\n \"late injected lineage-head failure rolls back task/event/member/head mutation together\"\n ],\n \"current_frontier\": \"recover or reconstruct exact V3 cross-domain frozen-controller candidate, run post-V3 adversarial falsification, then preheldout/frozen equivalence and real worker admission\"\n}\n",[252],"b608c714-89cb-4d65-9b45-d117c84ac1e8","GENESIS.md","6dd79ad0-b0a1-11f1-9c45-1607ee4eb77e",["D",1789434280412],"# PROJECT BRAIN SUCCESSOR GENESIS V1\n\nStatus: NEW AUTHORITY CANDIDATE, NOT CONTINUATION OF DELETED CANONICAL HISTORY.\n\nPredecessor: `mosadek/project-brain-live-v1-durable`\nPredecessor project id: `df64bad7-8359-4eef-a1e2-4da70bc08aae`\nPredecessor state: soft-deleted 2026-09-15; exact database/history continuity is not claimed here.\n\n## Mission\n\nReach the first real verified superhero (`P_real: 0 -> 1`) in minimum wall-clock time while preserving correctness, evidence, $0 incremental spend, and recoverability.\n\n## Imported laws\n\n1. Correctness before speed; then minimize time-to-verified-goal.\n2. Discover/reuse before inventing.\n3. A SUPERHERO counts only after real independent execution, auditable identity, causal task assignment, consequential evidence, separate enforceable verification, durable incorporation, and recovery/replacement semantics.\n4. IDs, registrations, model calls, scripts, tabs, schedules, or self-reports never increment `P_real`.\n5. No self-certification or human-authority claim by CHAT agents.\n6. No routine Sprites. Zero incremental spend.\n7. Every action must directly increase verified superhero capacity, remove the current blocker, or provide information necessary to choose between those moves.\n8. Historical administrative state is not reconstructed unless required by a current proof obligation.\n\n## Recovery boundary\n\nImported knowledge must be either exact-copy/hash-bound, independently reproduced, or explicitly marked re-derived. The successor does not impersonate uninterrupted predecessor history.\n\n## Immediate frontier\n\nRebuild and adversarially verify the minimal lineage/currentness primitive from the accumulated counterexamples, then resume the cross-domain/frozen-controller/real-worker admission path to `P_real = 1`.\n",[259],"b2ce9e44-706d-4f42-9005-33725246d078","CURRENTNESS_CANDIDATE_V2.json","2b23aec0-b0a3-11f1-9362-1607ee4eb77e",35,["D",1789435027459],"{\n \"schema\": \"PROJECT_BRAIN_SUCCESSOR_CURRENTNESS_CANDIDATE_V2\",\n \"authority_status\": \"CANDIDATE_ONLY\",\n \"predecessor_project_id\": \"df64bad7-8359-4eef-a1e2-4da70bc08aae\",\n \"p_real_increment\": 0,\n \"human_authority_approval\": false,\n \"independent_review_claimed\": false,\n \"additional_spend_usd\": 0,\n \"direct_sprites_calls\": 0,\n \"v1_falsification\": {\n \"classification\": \"READ_SNAPSHOT_TOCTOU_REPRODUCED\",\n \"finding\": \"A concurrent event-history advance is invisible to final rereads performed inside the same snapshot-isolated read transaction. V1 is not promotable.\"\n },\n \"repair\": \"V2 separates preparation from consequential consumption. prepareCurrentnessGuard returns a strict content-bound guard; consumeCurrentnessGuard rechecks lineage head and event-history token inside the same write transaction as the consequential consumption receipt/event/head publication.\",\n \"source\": {\n \"file\": \"lineage_currentness_v2.ts\",\n \"bytes\": 19061,\n \"sha256\": \"c6acf48be541b4b3294f0cec7655df8b9ee8b13be8a76f8bcd697fc43c90d2e6\"\n },\n \"builder_evidence\": {\n \"core_suite\": {\"file\":\"lineage_currentness_v2_core_test.ts\",\"sha256\":\"cfdc1b5c8b1563317771f977eec56efd018652b88b62d2c096d23148d41825c6\",\"result\":\"21/21 PASS\"},\n \"strict_type_isolated\": {\"file\":\"v2_guard_type_isolated_test.ts\",\"sha256\":\"ab500596c18bf6a5a7d8188baafffb35af3a1f0239109d57bb8d4d17e96a2785\",\"result\":\"PASS\"},\n \"rollback_isolated\": {\"file\":\"v2_guard_rollback_isolated_test.ts\",\"sha256\":\"63368026d453ba5c2eb3a56c5346dff5eb6ed0651abbeb9a470a7c7729388741\",\"result\":\"PASS; event/head/snapshot/consumption state unchanged under injected late failure\"}\n },\n \"isolated_review_surface\": {\n \"val\": \"mosadek/brain-successor-currentness-v2-review-0915\",\n \"exact_source_hash_match\": true,\n \"strict_type_isolated\": \"PASS\",\n \"rollback_isolated\": \"PASS\",\n \"monolithic_core_replay\": \"NON_DIAGNOSTIC_PLATFORM_CLIENT_FAILURE_AFTER_FIRST_CASE: resp.body?.cancel is not a function\"\n },\n \"remaining_before_authority\": [\n \"integrate task lifecycle mutations and lineage/currentness publication in the same write transaction\",\n \"falsify integrated task-currentness kernel on isolated database\",\n \"bind task-specific enforceable verifier for first real worker\",\n \"complete frozen cross-domain/equivalence/admission gates\"\n ]\n}\n",[265],"d92a4212-3057-4989-8f84-d011334e7d4c","CURRENTNESS_CANDIDATE_V1.json","2547caaa-b0a2-11f1-83f8-1607ee4eb77e",17,["D",1789434588171],"{\n \"schema\": \"PROJECT_BRAIN_SUCCESSOR_CURRENTNESS_CANDIDATE_V1\",\n \"authority_status\": \"CANDIDATE_ONLY\",\n \"predecessor_project_id\": \"df64bad7-8359-4eef-a1e2-4da70bc08aae\",\n \"p_real_increment\": 0,\n \"human_authority_approval\": false,\n \"independent_review_claimed\": false,\n \"additional_spend_usd\": 0,\n \"direct_sprites_calls\": 0,\n \"source\": {\n \"file\": \"lineage_currentness_v1.ts\",\n \"bytes\": 16551,\n \"sha256\": \"c11b5cf824485eb64b9ac700eef05f1983238fe05d7bcc98705f166f02f9a62c\"\n },\n \"builder_test\": {\n \"file\": \"lineage_currentness_v1_test.ts\",\n \"bytes\": 7123,\n \"sha256\": \"6a4ec60516becbf332488f15c74057f2fcbef2cb2cee92036b4caf87d56bbd7a\",\n \"result\": \"18/18 PASS\"\n },\n \"minimal_coordinator\": {\n \"file\": \"program.ts\",\n \"sha256\": \"9110e188a4362dd3ab9016baeb464ee2e62f695670415202b7b89e8bfd4a9612\",\n \"semantic_falsification\": \"PASS: caller-supplied positive verification cannot promote false result\"\n },\n \"known_defects_closed_by_design\": [\n \"implicit SQLite rowid identity\",\n \"mutable dedupe-derived member identity\",\n \"one-relation-per-member collapse\",\n \"dangling relation target acceptance\",\n \"retained-digest head-field forgery\",\n \"snapshot/head mix-and-match\",\n \"unbound exact creation-event identity\",\n \"caller-controlled event-history token provider\",\n \"event token type coercion\",\n \"partial DB commit across member/edge and event/head writes\"\n ],\n \"remaining_before_promotion\": [\n \"isolated clean-database replay on separate Val\",\n \"stronger TOCTOU/consumption-boundary falsification\",\n \"integration of coordinator task mutations and lineage publication into one transaction\",\n \"separate production integration falsification\"\n ]\n}\n",[272],"166104dd-854d-44d9-aa6c-084d3e715e0d","reference","76bc0190-b0a1-11f1-808e-1607ee4eb77e",["D",1789434295332],"directory",[279],"71fc5c51-5764-4875-ac11-a151df59badb","recovered_v3","40665674-b0a4-11f1-b28b-1607ee4eb77e",54,["D",1789435492653],[285],"pulls","branches",40,"forks","envVars",{"_298":199,"_300":61},"connections",{"_298":61,"_299":61},"count","unfilledCount","emptyCount",{"_41":284,"_31":285,"_29":286,"_152":-5,"_39":40,"_38":287,"_154":57,"_36":438,"_13":61,"_32":282,"_34":-5,"_23":24,"_157":-5,"_329":439,"_26":440},{"_41":430,"_31":431,"_29":432,"_152":286,"_39":40,"_38":433,"_154":57,"_36":434,"_13":61,"_32":33,"_34":435,"_23":24,"_157":-5,"_329":436,"_26":437},{"_41":423,"_31":424,"_29":425,"_152":286,"_39":40,"_38":411,"_154":57,"_36":426,"_13":61,"_32":33,"_34":427,"_23":24,"_157":-5,"_329":428,"_26":429},{"_41":416,"_31":417,"_29":55,"_152":286,"_39":40,"_38":403,"_154":57,"_36":418,"_13":61,"_32":419,"_34":420,"_23":24,"_157":-5,"_329":421,"_26":422},{"_41":408,"_31":409,"_29":410,"_152":286,"_39":40,"_38":411,"_154":57,"_36":412,"_13":61,"_32":33,"_34":413,"_23":24,"_157":-5,"_329":414,"_26":415},{"_41":400,"_31":401,"_29":402,"_152":286,"_39":40,"_38":403,"_154":57,"_36":404,"_13":61,"_32":33,"_34":405,"_23":24,"_157":-5,"_329":406,"_26":407},{"_41":278,"_31":279,"_29":280,"_152":-5,"_39":40,"_38":248,"_154":57,"_36":397,"_13":61,"_32":282,"_34":-5,"_23":24,"_157":-5,"_329":398,"_26":399},{"_41":390,"_31":391,"_29":392,"_152":280,"_39":40,"_38":225,"_154":57,"_36":393,"_13":61,"_32":33,"_34":394,"_23":24,"_157":-5,"_329":395,"_26":396},{"_41":383,"_31":384,"_29":385,"_152":280,"_39":40,"_38":225,"_154":57,"_36":386,"_13":61,"_32":33,"_34":387,"_23":24,"_157":-5,"_329":388,"_26":389},{"_41":271,"_31":272,"_29":273,"_152":-5,"_39":40,"_38":274,"_154":57,"_36":380,"_13":61,"_32":20,"_34":276,"_23":24,"_157":-5,"_329":381,"_26":382},{"_41":264,"_31":265,"_29":266,"_152":-5,"_39":40,"_38":267,"_154":57,"_36":377,"_13":61,"_32":20,"_34":269,"_23":24,"_157":-5,"_329":378,"_26":379},{"_41":258,"_31":259,"_29":260,"_152":-5,"_39":40,"_38":193,"_154":24,"_36":374,"_13":61,"_32":20,"_34":262,"_23":24,"_157":-5,"_329":375,"_26":376},{"_41":251,"_31":252,"_29":253,"_152":-5,"_39":40,"_38":254,"_154":57,"_36":371,"_13":61,"_32":20,"_34":256,"_23":24,"_157":-5,"_329":372,"_26":373},{"_41":243,"_31":244,"_29":245,"_152":-5,"_39":40,"_38":246,"_154":57,"_36":368,"_13":248,"_32":33,"_34":249,"_23":24,"_157":-5,"_329":369,"_26":370},{"_41":235,"_31":236,"_29":237,"_152":-5,"_39":40,"_38":238,"_154":57,"_36":365,"_13":240,"_32":33,"_34":241,"_23":24,"_157":-5,"_329":366,"_26":367},{"_41":228,"_31":229,"_29":230,"_152":-5,"_39":40,"_38":231,"_154":24,"_36":362,"_13":199,"_32":33,"_34":233,"_23":24,"_157":-5,"_329":363,"_26":364},{"_41":220,"_31":221,"_29":222,"_152":-5,"_39":40,"_38":223,"_154":24,"_36":359,"_13":225,"_32":33,"_34":226,"_23":24,"_157":-5,"_329":360,"_26":361},{"_41":213,"_31":214,"_29":215,"_152":-5,"_39":40,"_38":216,"_154":24,"_36":356,"_13":193,"_32":33,"_34":218,"_23":24,"_157":-5,"_329":357,"_26":358},{"_41":206,"_31":207,"_29":208,"_152":-5,"_39":40,"_38":209,"_154":24,"_36":353,"_13":191,"_32":33,"_34":211,"_23":24,"_157":-5,"_329":354,"_26":355},{"_41":203,"_31":27,"_29":30,"_152":-5,"_39":40,"_38":14,"_154":57,"_36":350,"_13":61,"_32":33,"_34":35,"_23":24,"_157":-5,"_329":351,"_26":352},{"_41":196,"_31":197,"_29":198,"_152":-5,"_39":40,"_38":199,"_154":57,"_36":347,"_13":61,"_32":33,"_34":201,"_23":24,"_157":-5,"_329":348,"_26":349},{"_41":188,"_31":189,"_29":190,"_152":-5,"_39":40,"_38":191,"_154":57,"_36":344,"_13":193,"_32":33,"_34":194,"_23":24,"_157":-5,"_329":345,"_26":346},{"_41":180,"_31":181,"_29":182,"_152":-5,"_39":40,"_38":183,"_154":24,"_36":341,"_13":185,"_32":33,"_34":186,"_23":24,"_157":-5,"_329":342,"_26":343},{"_41":173,"_31":174,"_29":175,"_152":-5,"_39":40,"_38":176,"_154":24,"_36":338,"_13":61,"_32":33,"_34":178,"_23":24,"_157":-5,"_329":339,"_26":340},{"_41":166,"_31":167,"_29":168,"_152":-5,"_39":40,"_38":169,"_154":24,"_36":335,"_13":61,"_32":33,"_34":171,"_23":24,"_157":-5,"_329":336,"_26":337},{"_41":159,"_31":160,"_29":161,"_152":-5,"_39":40,"_38":162,"_154":24,"_36":332,"_13":61,"_32":33,"_34":164,"_23":24,"_157":-5,"_329":333,"_26":334},{"_41":149,"_31":150,"_29":151,"_152":-5,"_39":40,"_38":153,"_154":57,"_36":328,"_13":61,"_32":33,"_34":156,"_23":24,"_157":-5,"_329":330,"_26":331},["D",1789435472678],"children",[],[150],["D",1789434875355],[],[160],["D",1789434895628],[],[167],["D",1789435256636],[],[174],["D",1789435288149],[],[181],["D",1789434348372],[],[189],["D",1789434287842],[],[197],["D",1789435711964],[],[27],["D",1789434802872],[],[207],["D",1789434922015],[],[214],["D",1789434750898],[],[221],["D",1789434542493],[],[229],["D",1789434456549],[],[236],["D",1789435398454],[],[244],["D",1789435429551],[],[252],["D",1789434280412],[],[259],["D",1789435027459],[],[265],["D",1789434588171],[],[272],"7b388c8c-436d-4800-8ca7-db9df1977116","val_native_kernel_v1.ts","01a0a298-8f52-7454-830e-554c40a2a890",["D",1789434302294],"import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nconst hranaNativeFetch = globalThis.fetch.bind(globalThis);\nasync function hranaCompatFetch(input:any, init?:any):Promise{\n let target:any=input;\n let reqInit:any=init;\n if(typeof input!==\"string\" && !(input instanceof URL)){\n const method=String(input?.method||init?.method||\"GET\");\n const headers=new Headers();\n const src=input?.headers||init?.headers;\n if(src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if(src) for(const [k,v] of Object.entries(src)) headers.set(k,String(v));\n let body:any=undefined;\n if(method!==\"GET\" && method!==\"HEAD\"){\n if(typeof input?.arrayBuffer===\"function\") body=new Uint8Array(await input.arrayBuffer());\n else body=input?.body??init?.body;\n }\n target=String(input?.url||\"\");\n if(!target) throw new Error(\"HRANA_REQUEST_URL_REQUIRED\");\n reqInit={method,headers,body,redirect:\"manual\"};\n }\n const r:any=await hranaNativeFetch(target,reqInit);\n if(r?.body==null||typeof r.body.cancel===\"function\") return r;\n const bytes=new Uint8Array(await r.arrayBuffer());\n return new Response(bytes,{status:r.status,statusText:r.statusText,headers:r.headers});\n}\nconst rootSqlite=createClient({\n url:`${API_URL}/v3/sqlite/scoped/`,\n authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),\n fetch:hranaCompatFetch,\n});\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { AsyncLocalStorage } from \"node:async_hooks\";\n\nconst txContext=new AsyncLocalStorage();\nconst sqlite:any={\n execute:(...args:any[])=>{const db=txContext.getStore()??rootSqlite;return db.execute(...args)},\n batch:async(queries:any[],mode?:any)=>{\n const tx=txContext.getStore();\n if(!tx)return await (rootSqlite as any).batch(queries,mode);\n const out:any[]=[];\n for(const q of queries)out.push(await tx.execute(q));\n return out;\n }\n};\nasync function withTransaction(mode:\"read\"|\"write\",fn:()=>Promise):Promise{\n if(txContext.getStore())return await fn();\n const tx:any=await (rootSqlite as any).transaction(mode);\n try{\n const out=await txContext.run(tx,fn);\n await tx.commit();\n return out;\n }catch(e){\n try{await tx.rollback()}catch{}\n throw e;\n }\n}\n\nconst SRC=\"svrec1864_\",P=\"brainvn_\";\nconst PREDECESSOR_HEAD=\"d88a49daefd5520d5612c1bee960bcf7f587fc5f734a8e568b749e9bd390c1db\";\nconst PREDECESSOR_EVENTS=1991;\nconst enc=new TextEncoder();\nconst NON_AGENT=new Set([\"human_authority_approval\"]);\nconst EXTERNAL_ARTIFACT_COMMAND=\"record-external-artifact\";\nconst EXTERNAL_ARTIFACT_URI_PREFIX=\"valblob:mosadek/project-brain-live-v1-durable/\";\nconst EXTERNAL_ARTIFACT_MAX_SAFE_SIZE=Number.MAX_SAFE_INTEGER;\nconst EXTERNAL_ARTIFACT_REQUIRED=[\"sha256\",\"size\",\"name\",\"uri\",\"workstream\"];\nconst EXTERNAL_ARTIFACT_OPTIONAL=[\"agent\",\"task\"];\nconst EXTERNAL_ARTIFACT_ALLOWED=new Set([...EXTERNAL_ARTIFACT_REQUIRED,...EXTERNAL_ARTIFACT_OPTIONAL]);\ntype ExternalArtifactSpec={\n sha256:string;size:number;name:string;uri:string;blob_key:string;workstream:string;agent:string|null;task:string|null;\n};\ntype ExternalArtifactExistingRow={\n sha256:any;size:any;logical_name:any;producer_agent:any;task_id:any;storage_json:any;\n};\nconst SUPPORTED=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"recover-stale\",\"commit\"]);\nconst READ_ONLY_COMMANDS=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst REACTIVATION_MUTATION_ALLOWLIST=new Set([\"register-agent\",\"ensure-task\",\"claim\",\"renew-lease\",\"commit\",\"recover-stale\",\"supersede-task-context\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; REACTIVATION_MUTATION_ALLOWLIST remains the hard mutator ceiling.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst MUTATION_RETRY_AUTH_TABLE=\"brainvn_mutation_retry_authorizations\";\ntype StableRetryProbe={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\";\n stable_snapshot_sha256:string;\n retry_guard_snapshot_complete:boolean;\n};\ntype StableRetryRequest={\n schema:\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\";\n retry_index:number;\n from_expected_workstream_generation:number;\n to_expected_workstream_generation:number;\n stable_snapshot_sha256:string;\n};\ntype BoundTransportContext={\n job_id:string;\n transport_lease_generation:number;\n lease_owner:string;\n lease_instance_id:string;\n lease_attempt_id:string;\n authority_epoch:number;\n payload_json:string;\n stable_retry_probe?:StableRetryProbe;\n stable_retry_request?:StableRetryRequest;\n};\nasync function ensureMutationReceiptTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\nasync function ensureMutationRetryAuthTable(){\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RETRY_AUTH_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n stale_expected_workstream_generation INTEGER NOT NULL,\n observed_workstream_generation INTEGER NOT NULL,\n stable_snapshot_sha256 TEXT NOT NULL,\n retry_count INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction now(){return new Date().toISOString().replace(\"Z\",\"+00:00\")}\nfunction canon(x:any):string{\n if(x===null||typeof x!==\"object\")return JSON.stringify(x);\n if(Array.isArray(x))return \"[\"+x.map(canon).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\n}\nasync function sha(s:string){const d=await crypto.subtle.digest(\"SHA-256\",enc.encode(s));return[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nasync function one(sql:string,args:any[]=[]){const r:any=await sqlite.execute({sql,args});return r.rows?.[0]??null}\nconst CHAT_UNPROVEN_ACTIVATION_TASK=\"BRAIN-FIRST-SUPERHERO-CHAT-UNPROVEN-PROTOCOL-WRITE-RECONCILIATION-P0-V1-20260908\";\nasync function chatUnprovenActivation(){\n const t:any=await one(`SELECT state,result_event_id FROM ${P}tasks WHERE id=?`,[CHAT_UNPROVEN_ACTIVATION_TASK]);\n if(!t||String(t.state)!==\"COMPLETE\"||!Number.isInteger(Number(t.result_event_id)))return{active:false,reason:\"ACTIVATION_TASK_NOT_AUTHORIZED_COMPLETE\"};\n const localSeq=Number(t.result_event_id)-PREDECESSOR_EVENTS;\n if(!Number.isInteger(localSeq)||localSeq<1)return{active:false,reason:\"ACTIVATION_RESULT_EVENT_INVALID\"};\n const ev:any=await one(`SELECT agent_id,type,task_id FROM ${P}epoch_events WHERE local_seq=?`,[localSeq]);\n if(!ev||String(ev.type)!==\"TASK_RESULT_COMMITTED\"||String(ev.task_id)!==CHAT_UNPROVEN_ACTIVATION_TASK||!ev.agent_id)return{active:false,reason:\"ACTIVATION_RESULT_EVENT_MISSING_OR_MISBOUND\"};\n const a:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[String(ev.agent_id)]);\n if(!a||String(a.type)===\"CHAT_UNPROVEN\")return{active:false,reason:\"CIRCULAR_CHAT_UNPROVEN_ACTIVATION_FORBIDDEN\",activator_agent_id:String(ev.agent_id)};\n return{active:true,reason:null,activator_agent_id:String(ev.agent_id),activator_type:String(a.type)};\n}\nasync function requireChatUnprovenActivation(){\n const a:any=await chatUnprovenActivation();\n return a.active===true?null:{ok:false,reason:\"CHAT_UNPROVEN_PROTOCOL_V5_NOT_ACTIVE\",activation:a,activation_task_id:CHAT_UNPROVEN_ACTIVATION_TASK,generation:await generation()};\n}\nfunction flags(args:any[],start:number){const m:any={};for(let i=start;i=args.length)throw new Error(\"BAD_FLAG_VECTOR\");m[args[i].slice(2)]=args[i+1]}return m}\nfunction parseJson(s:any,kind:string){try{return JSON.parse(String(s))}catch{throw new Error(\"BAD_JSON_\"+kind)}}\nfunction exactTop(q:any){return q&&typeof q===\"object\"&&!Array.isArray(q)&&Object.keys(q).sort().join(\",\")===\"args,timeout\"&&Array.isArray(q.args)&&q.args.length>0&&q.args.every((x:any)=>typeof x===\"string\")&&Number.isInteger(q.timeout)&&q.timeout>=1&&q.timeout<=120}\nfunction stableRetryProbeOk(p:any):p is StableRetryProbe{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_PROBE_V2\"&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256)&&\n typeof p.retry_guard_snapshot_complete===\"boolean\";\n}\nfunction stableRetryRequestOk(p:any):p is StableRetryRequest{\n return !!p&&p.schema===\"VAL_NATIVE_STABLE_COMMIT_RETRY_REQUEST_V2\"&&\n Number.isInteger(p.retry_index)&&p.retry_index>=1&&p.retry_index<=8&&\n Number.isInteger(p.from_expected_workstream_generation)&&p.from_expected_workstream_generation>=0&&\n Number.isInteger(p.to_expected_workstream_generation)&&p.to_expected_workstream_generation>=0&&\n typeof p.stable_snapshot_sha256===\"string\"&&/^[0-9a-f]{64}$/.test(p.stable_snapshot_sha256);\n}\nfunction commitExpectedWorkstreamGeneration(args:any[]){\n let found:number|null=null;\n for(let i=1;itypeof v!==\"string\"||!v))throw new Error(\"CAPABILITIES_MUST_BE_STRING_LIST\");return [...new Set(x)].sort()}\nfunction cleanWrites(x:any){if(!Array.isArray(x)||x.some(v=>typeof v!==\"string\"||!v.trim()))throw new Error(\"WRITE_RESOURCES_MUST_BE_STRING_LIST\");return [...new Set(x.map((v:string)=>v.trim()))].sort()}\nfunction cleanExternalText(v:string,max:number){return v.length>=1&&v.length<=max&&v.trim()===v&&!/[\\u0000-\\u001f\\u007f]/.test(v)}\nfunction safeExternalId(v:string,max:number){return v.length>=1&&v.length<=max&&/^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(v)}\nfunction parseExternalArtifactSpec(args:any[]):ExternalArtifactSpec{\n if(!Array.isArray(args)||String(args[0]||\"\")!==EXTERNAL_ARTIFACT_COMMAND)throw new Error(\"EXTERNAL_ARTIFACT_COMMAND_INVALID\");\n const m=new Map();\n for(let i=1;i=args.length)throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VECTOR_INVALID\");\n const key=flag.slice(2);\n if(key===\"human-authority-approval\"||key===\"human_authority_approval\")throw new Error(\"HUMAN_AUTHORITY_APPROVAL_FORBIDDEN\");\n if(!EXTERNAL_ARTIFACT_ALLOWED.has(key))throw new Error(\"EXTERNAL_ARTIFACT_UNKNOWN_FLAG\");\n if(m.has(key))throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_FLAG\");\n const value=args[i+1];if(typeof value!==\"string\"||value.startsWith(\"--\"))throw new Error(\"EXTERNAL_ARTIFACT_FLAG_VALUE_INVALID\");\n m.set(key,value);\n }\n for(const k of EXTERNAL_ARTIFACT_REQUIRED)if(!m.has(k))throw new Error(\"EXTERNAL_ARTIFACT_REQUIRED_FLAG_MISSING\");\n const rawSha=String(m.get(\"sha256\"));if(!/^[0-9a-fA-F]{64}$/.test(rawSha))throw new Error(\"EXTERNAL_ARTIFACT_SHA256_INVALID\");\n const rawSize=String(m.get(\"size\"));if(!/^(0|[1-9][0-9]*)$/.test(rawSize))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\");\n let sizeBig:bigint;try{sizeBig=BigInt(rawSize)}catch{throw new Error(\"EXTERNAL_ARTIFACT_SIZE_INVALID\")}\n if(sizeBig>BigInt(EXTERNAL_ARTIFACT_MAX_SAFE_SIZE))throw new Error(\"EXTERNAL_ARTIFACT_SIZE_NOT_RUNTIME_SAFE\");\n const name=String(m.get(\"name\"));if(!cleanExternalText(name,512))throw new Error(\"EXTERNAL_ARTIFACT_NAME_INVALID\");\n const uri=String(m.get(\"uri\"));if(!cleanExternalText(uri,2048)||!uri.startsWith(EXTERNAL_ARTIFACT_URI_PREFIX))throw new Error(\"EXTERNAL_ARTIFACT_URI_FORBIDDEN\");\n const blobKey=uri.slice(EXTERNAL_ARTIFACT_URI_PREFIX.length);if(!blobKey||blobKey.startsWith(\"/\")||blobKey.includes(\"\\0\"))throw new Error(\"EXTERNAL_ARTIFACT_BLOB_KEY_INVALID\");\n const workstream=String(m.get(\"workstream\"));if(!safeExternalId(workstream,128))throw new Error(\"EXTERNAL_ARTIFACT_WORKSTREAM_INVALID\");\n const agent=m.has(\"agent\")?String(m.get(\"agent\")):null;if(agent!==null&&!safeExternalId(agent,256))throw new Error(\"EXTERNAL_ARTIFACT_AGENT_INVALID\");\n const task=m.has(\"task\")?String(m.get(\"task\")):null;if(task!==null&&!safeExternalId(task,256))throw new Error(\"EXTERNAL_ARTIFACT_TASK_INVALID\");\n return{sha256:rawSha.toLowerCase(),size:Number(sizeBig),name,uri,blob_key:blobKey,workstream,agent,task};\n}\nfunction externalArtifactExistingDecision(row:ExternalArtifactExistingRow|null,spec:ExternalArtifactSpec){\n if(!row)return{kind:\"CREATE\" as const};\n let storage:any;try{storage=parseJson(row.storage_json,\"EXTERNAL_ARTIFACT_STORAGE\")}catch{return{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_STORAGE_INVALID\"}}\n const exact=String(row.sha256).toLowerCase()===spec.sha256&&Number(row.size)===spec.size&&String(row.logical_name)===spec.name&&\n (row.producer_agent??null)===(spec.agent??null)&&(row.task_id??null)===(spec.task??null)&&canon(storage)===canon([spec.uri]);\n return exact?{kind:\"ALREADY_RECORDED\" as const}:{kind:\"CONFLICT\" as const,reason:\"EXTERNAL_ARTIFACT_METADATA_CONFLICT\"};\n}\nasync function verifyExternalArtifactBlobBytes(spec:ExternalArtifactSpec){\n let bytes:Uint8Array;try{const res=await blob.get(spec.blob_key);bytes=new Uint8Array(await res.arrayBuffer())}catch{throw new Error(\"EXTERNAL_ARTIFACT_BLOB_NOT_READABLE\")}\n if(bytes.length!==spec.size)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SIZE_MISMATCH\");\n const d=await crypto.subtle.digest(\"SHA-256\",bytes);const actual=[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n if(actual!==spec.sha256)throw new Error(\"EXTERNAL_ARTIFACT_BLOB_SHA256_MISMATCH\");\n return{key:spec.blob_key,size:bytes.length,sha256:actual};\n}\n\nasync function cloneState(){\n const tables=[\"meta\",\"workstreams\",\"agents\",\"tasks\",\"claims\",\"claim_deps\",\"artifacts\",\"replicas\",\"task_context_history\",\"task_invariant_history\",\"replay_log\",\"anchor\",\"epoch_events\",\"epoch_meta\"];\n for(const t of tables){await sqlite.execute(`DROP TABLE IF EXISTS ${P}${t}`);await sqlite.execute(`CREATE TABLE ${P}${t} AS SELECT * FROM ${SRC}${t}`)}\n await sqlite.execute(`DROP TABLE IF EXISTS ${Q}`);\n await sqlite.execute(`CREATE TABLE ${Q}(\n id TEXT PRIMARY KEY,priority REAL NOT NULL,payload_json TEXT NOT NULL,state TEXT NOT NULL,\n lease_owner TEXT,lease_attempt_id TEXT,lease_expires_at TEXT,result_json TEXT,error_json TEXT,\n created_at TEXT NOT NULL,updated_at TEXT NOT NULL)`);\n}\n\nasync function meta(){return await one(`SELECT * FROM ${P}epoch_meta WHERE id=1`)}\nasync function generation(){return Number((await meta()).generation)}\nasync function appendEvent(ws:string,agent:any,task:any,type:string,payload:any){\n if(!txContext.getStore())throw new Error(\"EVENT_APPEND_REQUIRES_COMMAND_TRANSACTION\");\n const m:any=await meta(),prev=String(m.event_head_hash),g=Number(m.generation);\n const e={event_uuid:crypto.randomUUID(),ts:now(),workstream:ws,agent_id:agent??null,task_id:task??null,type,payload,prev_hash:prev};\n const h=await sha(canon(e));\n const ins:any=await sqlite.execute({sql:`INSERT INTO ${P}epoch_events(local_seq,event_uuid,ts,workstream,agent_id,task_id,type,payload_json,prev_hash,event_hash,transaction_generation)\n SELECT (SELECT COALESCE(MAX(local_seq),0)+1 FROM ${P}epoch_events),?,?,?,?,?,?,?,?,?,?\n RETURNING local_seq`,\n args:[e.event_uuid,e.ts,ws,e.agent_id,e.task_id,type,canon(payload),prev,h,g]});\n const rows=ins.rows||[];\n if(rows.length!==1)throw new Error(\"EVENT_INSERT_FAILED\");\n const upd:any=await sqlite.execute({sql:`UPDATE ${P}epoch_meta\n SET event_head_hash=?,new_event_count=new_event_count+1\n WHERE id=1 AND event_head_hash=? AND generation=?\n RETURNING new_event_count`,args:[h,prev,g]});\n if((upd.rows||[]).length!==1)throw new Error(\"EVENT_HEAD_CAS_FAILED\");\n return{seq:Number(rows[0].local_seq),event_hash:h};\n}\nasync function bump(){\n const r:any=await sqlite.execute(`UPDATE ${P}epoch_meta SET generation=generation+1 WHERE id=1 RETURNING generation`);\n if(!(r.rows||[]).length)throw new Error(\"GENERATION_BUMP_FAILED\");\n return Number(r.rows[0].generation);\n}\n\nasync function artifactBelongs(h:string,ws:string){\n const a:any=await one(`SELECT task_id,producer_agent FROM ${P}artifacts WHERE sha256=?`,[h]);if(!a)return false;\n if(a.task_id){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[a.task_id]);if(t&&String(t.workstream)===ws)return true}\n if(a.producer_agent){const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[a.producer_agent]);if(ag&&String(ag.workstream)===ws)return true}\n return false;\n}\nasync function depsSatisfied(r:any){for(const d of parseJson(r.depends_json||\"[]\",\"DEPS\")){const x:any=await one(`SELECT state FROM ${P}tasks WHERE id=?`,[d]);if(!x||String(x.state)!==\"COMPLETE\")return false}return true}\nconst EXECUTION_DISTINCT_GUARD=\"execution_distinct\";\nconst EXECUTION_DISTINCT_ATTESTATION_SCHEMA=\"PROJECT_BRAIN_EXECUTION_DISTINCTNESS_ATTESTATION_V1\";\nconst EXECUTION_DISTINCT_EVIDENCE_CLASS=\"NON_MODEL_CONTROLLED_AUTHENTICATED_CHATGPT_HOST\";\nconst EXECUTION_DISTINCT_MAX_LIFETIME_MS=60*60*1000;\nconst EXECUTION_DISTINCT_PROJECT=\"mosadek/project-brain-live-v1-durable\";\nconst EXECUTION_DISTINCT_INGRESS_QUALIFIED=false; // Fail closed until a separately accepted host-attestation ingress is canonically integrated.\nconst HEX64=/^[0-9a-f]{64}$/;\nconst RUNTIME_FOCUS_POLICY_CARRIER_TASK=\"BRAIN-RUNTIME-TEMPORARY-FOCUS-POLICY-CARRIER-P0-V1-20260910\";\nconst RUNTIME_FOCUS_POLICY_SCHEMA=\"BRAIN_RUNTIME_FOCUS_POLICY_V1\";\ntype RuntimeFocusPolicy={valid:boolean;active:boolean;allowed:Set;revision:number;source_sha256:string;reason:string|null};\nasync function runtimeFocusPolicy():Promise{\n const row:any=await one(`SELECT state,context_manifest FROM ${P}tasks WHERE id=?`,[RUNTIME_FOCUS_POLICY_CARRIER_TASK]);\n if(!row)return{valid:false,active:true,allowed:new Set(),revision:0,source_sha256:\"\",reason:\"FOCUS_POLICY_CARRIER_MISSING\"};\n let c:any;try{c=parseJson(row.context_manifest||\"{}\",\"FOCUS_POLICY\")}catch{return{valid:false,active:true,allowed:new Set(),revision:0,source_sha256:\"\",reason:\"FOCUS_POLICY_CONTEXT_INVALID\"}}\n const allowed=Array.isArray(c.allowed_classes)&&c.allowed_classes.length>0&&c.allowed_classes.every((x:any)=>typeof x===\"string\"&&!!x)&&new Set(c.allowed_classes).size===c.allowed_classes.length?new Set(c.allowed_classes):null;\n const sourceSha=String(c.source_sha256||\"\").toLowerCase();\n const valid=String(row.state)===\"READY\"&&c.schema===RUNTIME_FOCUS_POLICY_SCHEMA&&c.execution_allowed===false&&typeof c.active===\"boolean\"&&Number.isInteger(c.revision)&&c.revision>=1&&typeof c.source_uri===\"string\"&&c.source_uri.startsWith(\"valblob:mosadek/project-brain-live-v1-durable/evidence/user-directives/\")&&HEX64.test(sourceSha)&&!!allowed;\n return valid?{valid:true,active:c.active,allowed:allowed!,revision:c.revision,source_sha256:sourceSha,reason:null}:{valid:false,active:true,allowed:new Set(),revision:0,source_sha256:\"\",reason:\"FOCUS_POLICY_CARRIER_INVALID\"};\n}\nconst FOCUS_DIRECT_CLASSES=new Set([\"HARNESS\",\"RELEVANT_OPENAI_MECHANISM\"]);\nconst FOCUS_STRICT_CLASS=\"STRICT_NECESSARY_DEPENDENCY\";\nconst FOCUS_LIVE_TARGET_STATES=new Set([\"READY\",\"LEASED\",\"BLOCKED\"]);\nconst FOCUS_CAUSAL_STATES=new Set([\"READY\",\"LEASED\"]);\ntype FocusNormalizedTask={id:string;state:string;depends:string[];supported:boolean;executionAllowed:boolean;policyExact:boolean;cls:string;direct:boolean;strict:boolean};\ntype FocusSnapshot={ok:boolean;reason:string|null;byId:Map;cyclicStrict:Set;strictParents:Map};\nfunction focusObjectJson(raw:any){try{const v=JSON.parse(String(raw));return v&&typeof v===\"object\"&&!Array.isArray(v)?v:null}catch{return null}}\nfunction focusDepsJson(raw:any){try{const v=JSON.parse(String(raw));if(!Array.isArray(v)||v.some((x:any)=>typeof x!==\"string\"||!x)||new Set(v).size!==v.length)return null;return v as string[]}catch{return null}}\nfunction focusPolicyExact(ctx:any,policy:RuntimeFocusPolicy){const rev=Number(ctx?.temporary_focus_policy_revision),src=String(ctx?.temporary_focus_source_sha256||\"\").toLowerCase();return Number.isInteger(rev)&&rev===policy.revision&&src===policy.source_sha256}\nfunction buildFocusSnapshot(rows:any[],policy:RuntimeFocusPolicy):FocusSnapshot{\n const empty={ok:false,reason:\"FOCUS_SNAPSHOT_INVALID\",byId:new Map(),cyclicStrict:new Set(),strictParents:new Map()};\n if(!policy.valid||!Array.isArray(rows))return empty;\n const counts=new Map();for(const r of rows){const id=typeof r?.id===\"string\"?r.id:\"\";if(id)counts.set(id,(counts.get(id)||0)+1)}\n const byId=new Map();\n for(const r of rows){const id=typeof r?.id===\"string\"?r.id:\"\";if(!id||counts.get(id)!==1)continue;const ctx=focusObjectJson(r.context_manifest),deps=focusDepsJson(r.depends_json),state=typeof r.state===\"string\"?r.state:\"\",cls=ctx&&typeof ctx.temporary_focus_classification===\"string\"?ctx.temporary_focus_classification:\"\";const supported=!!ctx&&deps!==null&&typeof ctx.execution_allowed===\"boolean\"&&typeof ctx.temporary_focus_classification===\"string\"&&Number.isInteger(ctx.temporary_focus_policy_revision)&&typeof ctx.temporary_focus_source_sha256===\"string\";byId.set(id,{id,state,depends:deps||[],supported,executionAllowed:ctx?.execution_allowed===true,policyExact:!!ctx&&focusPolicyExact(ctx,policy),cls,direct:FOCUS_DIRECT_CLASSES.has(cls),strict:cls===FOCUS_STRICT_CLASS})}\n const graph=new Map();\n for(const t of byId.values())if(FOCUS_CAUSAL_STATES.has(t.state)&&t.supported&&t.executionAllowed&&t.policyExact&&(t.direct||t.strict))graph.set(t.id,t.depends.filter(d=>byId.has(d)));\n const cyclicStrict=new Set(),nodeCount=graph.size;\n for(const t of byId.values())if(t.strict&&graph.has(t.id)){const seen=new Set([t.id]),stack=[...(graph.get(t.id)||[])];let steps=0;while(stack.length&&steps++<=nodeCount+1){const x=stack.pop()!;if(x===t.id){cyclicStrict.add(t.id);break}if(seen.has(x)||!graph.has(x))continue;seen.add(x);for(const d of graph.get(x)||[])stack.push(d)}}\n const strictParents=new Map();\n for(const p of byId.values())if(graph.has(p.id)){for(const d of graph.get(p.id)||[]){const child=byId.get(d);if(!child?.strict||cyclicStrict.has(d))continue;const a=strictParents.get(d)||[];a.push(p.id);strictParents.set(d,a)}}\n for(const a of strictParents.values())a.sort();return{ok:true,reason:null,byId,cyclicStrict,strictParents}\n}\nfunction focusTaskDecision(taskId:string,policy:RuntimeFocusPolicy,snap:FocusSnapshot){\n if(!policy.valid||!snap.ok)return{allowed:false,reason:policy.valid?snap.reason:\"FOCUS_POLICY_INVALID\",roots:[] as string[]};const t=snap.byId.get(taskId);if(!t)return{allowed:false,reason:\"TARGET_ID_NOT_UNIQUE_OR_MISSING\",roots:[] as string[]};\n if(!policy.active)return FOCUS_LIVE_TARGET_STATES.has(t.state)&&t.supported&&t.executionAllowed?{allowed:true,reason:\"FOCUS_INACTIVE\",roots:[] as string[]}:{allowed:false,reason:\"TARGET_CANONICAL_SHAPE_OR_EXECUTION_INVALID\",roots:[] as string[]};\n if(FOCUS_LIVE_TARGET_STATES.has(t.state)&&t.supported&&t.executionAllowed&&t.policyExact&&t.direct)return{allowed:true,reason:\"DIRECT_FOCUS_CLASS\",roots:[t.id]};\n if(!(FOCUS_LIVE_TARGET_STATES.has(t.state)&&t.supported&&t.executionAllowed&&t.policyExact&&t.strict))return{allowed:false,reason:\"FOCUS_CLASS_OR_BINDING_REJECTED\",roots:[] as string[]};\n if(!FOCUS_CAUSAL_STATES.has(t.state))return{allowed:false,reason:\"STRICT_TARGET_NOT_CAUSALLY_LIVE\",roots:[] as string[]};if(snap.cyclicStrict.has(t.id))return{allowed:false,reason:\"STRICT_TARGET_CYCLIC\",roots:[] as string[]};\n const roots=new Set(),seen=new Set([t.id]),q=[t.id];let steps=0,max=Math.max(1,snap.byId.size+1);\n while(q.length&&steps++<=max){const x=q.shift()!;for(const p of snap.strictParents.get(x)||[]){const pt=snap.byId.get(p);if(!pt||!FOCUS_CAUSAL_STATES.has(pt.state)||!pt.supported||!pt.executionAllowed||!pt.policyExact)continue;if(pt.direct){roots.add(pt.id);continue}if(pt.strict&&!snap.cyclicStrict.has(pt.id)&&!seen.has(pt.id)){seen.add(pt.id);q.push(pt.id)}}}\n const rs=[...roots].sort();return rs.length?{allowed:true,reason:\"STRICT_CAUSAL_PATH_QUALIFIED\",roots:rs}:{allowed:false,reason:\"STRICT_CAUSAL_PATH_NOT_QUALIFIED\",roots:rs};\n}\nfunction exactObjectKeys(v:any,keys:string[]){if(!v||typeof v!==\"object\"||Array.isArray(v))return false;const got=Object.keys(v).sort(),want=[...keys].sort();return got.length===want.length&&got.every((k,i)=>k===want[i])}\nconst EXECUTION_DISTINCT_ATTESTATION_KEYS=[\"schema\",\"positive\",\"project\",\"task_id\",\"challenge_sha256\",\"builder_agent_id\",\"reviewer_agent_id\",\"builder_execution_sha256\",\"reviewer_execution_sha256\",\"evidence_class\",\"issuer_receipt_sha256\",\"self_asserted\",\"ownership_only\",\"issued_at\",\"expires_at\"];\nasync function executionDistinctGuardSatisfied(task:any,g:any,agentId:string){\n const claimant:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]);\n if(!claimant||String(claimant.type)===\"CHAT_UNPROVEN\")return false;\n if(EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true)return false;\n const q:any=await sqlite.execute({sql:`SELECT workstream,status,statement_json,evidence_json FROM ${P}claims WHERE workstream=? AND status='VERIFIED' ORDER BY id`,args:[task.workstream]});\n for(const row of q.rows||[]){\n const s=parseJson(row.statement_json||\"{}\",\"EXECUTION_DISTINCT_STATEMENT\"),e=parseJson(row.evidence_json||\"[]\",\"EXECUTION_DISTINCT_EVIDENCE\");\n if(String(row.workstream)!==String(task.workstream)||String(row.status)!==\"VERIFIED\"||!exactObjectKeys(s,EXECUTION_DISTINCT_ATTESTATION_KEYS)||!Array.isArray(e))continue;\n if(s.schema!==EXECUTION_DISTINCT_ATTESTATION_SCHEMA||s.positive!==true||s.project!==EXECUTION_DISTINCT_PROJECT||s.task_id!==task.id)continue;\n if(String(s.challenge_sha256||\"\").toLowerCase()!==String(g.challenge_sha256))continue;\n if(s.builder_agent_id!==g.builder_agent_id||s.reviewer_agent_id!==agentId||s.builder_agent_id===s.reviewer_agent_id)continue;\n if(!HEX64.test(String(s.builder_execution_sha256))||!HEX64.test(String(s.reviewer_execution_sha256))||s.builder_execution_sha256===s.reviewer_execution_sha256)continue;\n if(s.evidence_class!==EXECUTION_DISTINCT_EVIDENCE_CLASS||s.self_asserted!==false||s.ownership_only!==false||!HEX64.test(String(s.issuer_receipt_sha256)))continue;\n if(!e.includes(`artifact:${s.issuer_receipt_sha256}`))continue;\n const issued=Date.parse(String(s.issued_at)),expires=Date.parse(String(s.expires_at)),nowMs=Date.now();\n if(!Number.isFinite(issued)||!Number.isFinite(expires)||issued>nowMs||expires<=nowMs||expires<=issued||(expires-issued)>EXECUTION_DISTINCT_MAX_LIFETIME_MS)continue;\n return true;\n }\n return false\n}\nasync function guardsSatisfied(r:any,agentId:string){\n for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.state)!==\"COMPLETE\")return false}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x||String(x.workstream)!==String(r.workstream)||String(x.status)!==\"VERIFIED\")return false}\n else if(g.type===\"artifact_present\"){if(!await artifactBelongs(String(g.sha256),String(r.workstream)))return false}\n else if(g.type===EXECUTION_DISTINCT_GUARD){if(!await executionDistinctGuardSatisfied(r,g,agentId))return false}\n else return false;\n }return true\n}\nasync function normalizeGuards(ws:string,x:any){\n if(!Array.isArray(x))throw new Error(\"GUARDS_MUST_BE_LIST\");const out:any[]=[],seen=new Set();\n for(const g of x){\n if(!g||typeof g!==\"object\"||Array.isArray(g))throw new Error(\"GUARD_MUST_BE_OBJECT\");let ng:any;\n if(g.type===\"task_complete\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_TASK_GUARD\");const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_TASK\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_TASK_GUARD\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_TASK_GUARD\");ng={type:\"task_complete\",id:g.id}}\n else if(g.type===\"claim_verified\"){if(typeof g.id!==\"string\"||!g.id)throw new Error(\"BAD_CLAIM_GUARD\");const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!r)throw new Error(\"UNKNOWN_GUARD_CLAIM\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_GUARD\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"CLAIM_GUARD_NOT_VERIFIED\");ng={type:\"claim_verified\",id:g.id}}\n else if(g.type===\"artifact_present\"){const h=String(g.sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_ARTIFACT_GUARD_SHA256\");ng={type:\"artifact_present\",sha256:h}}\n else if(g.type===EXECUTION_DISTINCT_GUARD){\n if(!exactObjectKeys(g,[\"type\",\"builder_agent_id\",\"challenge_sha256\"]))throw new Error(\"BAD_EXECUTION_DISTINCT_GUARD_SHAPE\");\n if(typeof g.builder_agent_id!==\"string\"||!g.builder_agent_id)throw new Error(\"BAD_EXECUTION_DISTINCT_BUILDER\");\n const h=String(g.challenge_sha256||\"\").toLowerCase();if(!HEX64.test(h))throw new Error(\"BAD_EXECUTION_DISTINCT_CHALLENGE\");\n ng={type:EXECUTION_DISTINCT_GUARD,builder_agent_id:g.builder_agent_id,challenge_sha256:h}\n }\n else throw new Error(\"UNKNOWN_GUARD_TYPE\");\n const k=canon(ng);if(!seen.has(k)){seen.add(k);out.push(ng)}\n }out.sort((a,b)=>canon(a).localeCompare(canon(b)));return out\n}\nasync function writeConflict(r:any){\n const writes=new Set(parseJson(r.writes_json||\"[]\",\"WRITES\"));if(!writes.size)return null;\n const q:any=await sqlite.execute(`SELECT id,workstream,lease_owner,writes_json FROM ${P}tasks WHERE state='LEASED'`);\n for(const o of q.rows||[]){const ow=new Set(parseJson(o.writes_json||\"[]\",\"WRITES\"));const overlap=[...writes].filter(x=>ow.has(x)).sort();if(overlap.length)return{task_id:o.id,workstream:o.workstream,lease_owner:o.lease_owner,resources:overlap}}\n return null\n}\nfunction unprovenIndependenceSensitive(req:Set,ctx:any){\n if(req.has(\"independent_verification\"))return true;\n const flags=[\n \"identity_gate_pending\",\n \"prevent_self_review\",\n \"self_certification_forbidden\",\n \"physical_chat_execution_distinctness_required\",\n \"reviewer_must_be_distinct\",\n \"reviewer_must_be_distinct_from_refresh_executor\",\n \"reviewer_must_be_physically_distinct\",\n \"reviewer_must_be_physically_distinct_chat_execution\",\n \"reviewer_must_differ\",\n \"reviewer_must_differ_from_builder\",\n \"reviewer_must_differ_from_source_contributors\",\n \"reviewer_population_must_be_distinct\",\n \"do_not_infer_distinctness_from_agent_id\"\n ];\n if(flags.some(k=>ctx?.[k]===true))return true;\n if(ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\")return true;\n return false\n}\ntype NoReadyReason=\"MISSING_DEDUPE\"|\"ASSIGNED_OTHER\"|\"FOCUS_POLICY_INVALID\"|\"TEMPORARY_FOCUS_INELIGIBLE\"|\"EXECUTION_DISABLED\"|\"CHAT_UNPROVEN_INDEPENDENCE\"|\"EXECUTION_DISTINCT_INGRESS_UNQUALIFIED\"|\"NON_AGENT_REQUIREMENT\"|\"MISSING_CAPABILITY\"|\"DEPENDENCY_UNSATISFIED\"|\"GUARD_UNSATISFIED\"|\"WRITE_CONFLICT\";\nconst NO_READY_REASONS:NoReadyReason[]=[\"MISSING_DEDUPE\",\"ASSIGNED_OTHER\",\"FOCUS_POLICY_INVALID\",\"TEMPORARY_FOCUS_INELIGIBLE\",\"EXECUTION_DISABLED\",\"CHAT_UNPROVEN_INDEPENDENCE\",\"EXECUTION_DISTINCT_INGRESS_UNQUALIFIED\",\"NON_AGENT_REQUIREMENT\",\"MISSING_CAPABILITY\",\"DEPENDENCY_UNSATISFIED\",\"GUARD_UNSATISFIED\",\"WRITE_CONFLICT\"];\nasync function bestReady(ws:string,caps:string[],agentId:string){\n const q:any=await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY priority DESC,id`,args:[ws]});const C=new Set(caps);\n const meta:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agentId]),unproven=String(meta?.type||\"\")===\"CHAT_UNPROVEN\";\n const focusPolicy=await runtimeFocusPolicy(),focusRows:any[]=(await sqlite.execute(`SELECT id,state,depends_json,context_manifest FROM ${P}tasks ORDER BY rowid`)).rows as any[],focusSnap=buildFocusSnapshot(focusRows,focusPolicy);\n const reasonCounts:Record=Object.fromEntries(NO_READY_REASONS.map(x=>[x,0])) as Record;let highest:any=null,readyRowsSeen=0;\n const reject=(r:any,reason:NoReadyReason)=>{reasonCounts[reason]++;if(highest===null){const p=Number(r.priority);highest={task_id:String(r.id).slice(0,200),priority:Number.isFinite(p)?p:null,reason}}};\n for(const r of q.rows||[]){\n readyRowsSeen++;\n if(!r.dedupe_key){reject(r,\"MISSING_DEDUPE\");continue}if(r.assigned_agent!==null&&String(r.assigned_agent)!==agentId){reject(r,\"ASSIGNED_OTHER\");continue}\n const req=new Set(parseJson(r.requires_json||\"[]\",\"REQ\")),ctx=parseJson(r.context_manifest||\"{}\",\"CTX\");\n const focusDecision=focusTaskDecision(String(r.id),focusPolicy,focusSnap);if(!focusDecision.allowed){reject(r,focusPolicy.valid?\"TEMPORARY_FOCUS_INELIGIBLE\":\"FOCUS_POLICY_INVALID\");continue}\n if(ctx.execution_allowed===false){reject(r,\"EXECUTION_DISABLED\");continue}const independenceSensitive=unprovenIndependenceSensitive(req,ctx);if(independenceSensitive&&unproven){reject(r,\"CHAT_UNPROVEN_INDEPENDENCE\");continue}if(independenceSensitive&&EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true){reject(r,\"EXECUTION_DISTINCT_INGRESS_UNQUALIFIED\");continue}if([...req].some(x=>NON_AGENT.has(x))){reject(r,\"NON_AGENT_REQUIREMENT\");continue}if([...req].some(x=>!C.has(x))){reject(r,\"MISSING_CAPABILITY\");continue}\n if(!await depsSatisfied(r)){reject(r,\"DEPENDENCY_UNSATISFIED\");continue}if(!await guardsSatisfied(r,agentId)){reject(r,\"GUARD_UNSATISFIED\");continue}if(await writeConflict(r)){reject(r,\"WRITE_CONFLICT\");continue}return{task:r,no_ready_diagnostics:null}\n }\n return{task:null,no_ready_diagnostics:{schema:\"NO_READY_TASK_EXPLANATION_V7\",frontier_class:readyRowsSeen===0?\"TRUE_EMPTY_FRONTIER\":\"ALL_READY_ROWS_REJECTED\",ready_rows_seen:readyRowsSeen,reason_counts:reasonCounts,highest_priority_rejected:highest,focus_policy:{valid:focusPolicy.valid,active:focusPolicy.active,revision:focusPolicy.revision,reason:focusPolicy.reason}}}\n}\n\nasync function verifyChain(){\n const m:any=await meta(),es:any[]=(await sqlite.execute(`\n SELECT e.*,\n lower(hex(sha256(\n '{'\n || '\"agent_id\":' || CASE WHEN e.agent_id IS NULL THEN 'null' ELSE json_quote(e.agent_id) END\n || ',\"event_uuid\":' || json_quote(e.event_uuid)\n || ',\"payload\":' || e.payload_json\n || ',\"prev_hash\":' || json_quote(e.prev_hash)\n || ',\"task_id\":' || CASE WHEN e.task_id IS NULL THEN 'null' ELSE json_quote(e.task_id) END\n || ',\"ts\":' || json_quote(e.ts)\n || ',\"type\":' || json_quote(e.type)\n || ',\"workstream\":' || json_quote(e.workstream)\n || '}'\n ))) AS computed_event_hash\n FROM ${P}epoch_events e\n ORDER BY e.local_seq\n `)).rows as any[];let prev=PREDECESSOR_HEAD,bad:any[]=[],structural_problems:any[]=[];\n const metaCount=Number((await one(`SELECT COUNT(*) n FROM ${P}epoch_meta`)).n);\n if(metaCount!==1)structural_problems.push({reason:\"EPOCH_META_NOT_SINGLETON\",rows:metaCount});\n const seenSeq=new Set(),seenUuid=new Set(),seenHash=new Set();let lastTx=Number(m.predecessor_generation);\n for(const r of es){\n const seq=Number(r.local_seq),uuid=String(r.event_uuid??\"\"),eh=String(r.event_hash??\"\"),txg=Number(r.transaction_generation);\n if(!Number.isInteger(seq)||seq<1)structural_problems.push({reason:\"BAD_LOCAL_SEQ\",value:r.local_seq});\n if(seenSeq.has(seq))structural_problems.push({reason:\"DUPLICATE_LOCAL_SEQ\",value:seq});else seenSeq.add(seq);\n if(!uuid)structural_problems.push({reason:\"EMPTY_EVENT_UUID\",seq});else if(seenUuid.has(uuid))structural_problems.push({reason:\"DUPLICATE_EVENT_UUID\",value:uuid});else seenUuid.add(uuid);\n if(!/^[0-9a-f]{64}$/.test(eh))structural_problems.push({reason:\"BAD_EVENT_HASH_SHAPE\",seq,value:eh});else if(seenHash.has(eh))structural_problems.push({reason:\"DUPLICATE_EVENT_HASH\",value:eh});else seenHash.add(eh);\n if(!Number.isInteger(txg)||txg=Number(m.generation))structural_problems.push({reason:\"TRANSACTION_GENERATION_OUT_OF_RANGE\",seq,value:r.transaction_generation,predecessor_generation:Number(m.predecessor_generation),generation:Number(m.generation)});\n if(txgNumber(r.local_seq))):0,have=new Set(es.map(r=>Number(r.local_seq))),missing:number[]=[];for(let i=1;i<=maxSeq;i++)if(!have.has(i))missing.push(i);\n const qs:any[]=(await sqlite.execute(\"SELECT * FROM brainvn_epoch_event_quarantine ORDER BY local_seq\")).rows as any[];\n const C={orphan_seq:294,orphan_hash:\"eca5c756dd83bc28429f3cffb6bfac977acf966b784ec4282cbf233fc8be4a13\",parent_seq:293,parent_hash:\"461da01e9eb9325fd540764875ef5ff8a78c78ee2e7aa9416de7644d576b8c13\",successor_seq:295,successor_hash:\"221b97099f2a2968804f04352570f4a4f0510fe658eac9b5c3038f315fab7d2d\",forensic:\"d2a060847807015f97522f4e3948a1ebce5ca63fce57ef0fa20dddcad32f8e1c\",manifest:\"99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a\",task:\"BRAIN-UNIVERSAL-AGENT-FABRIC-EPOCH2-CORRECTIVE-INTEGRATION-V1-20260907\"};\n let quarantine_ok=false;\n if(missing.length===0&&qs.length===0)quarantine_ok=true;\n else if(missing.length===1&&missing[0]===C.orphan_seq&&qs.length===1&&es.length+qs.length===maxSeq){\n const q:any=qs[0],parent:any=es.find(r=>Number(r.local_seq)===C.parent_seq),succ:any=es.find(r=>Number(r.local_seq)===C.successor_seq),rec:any[]=es.filter(r=>String(r.type)===\"EPOCH_RECOVERY_LINEAGE_COMMITTED\");\n const p:any=rec.length===1?parseJson(rec[0].payload_json,\"RECOVERY_LINEAGE\"):null;\n quarantine_ok=Number(q.local_seq)===C.orphan_seq&&String(q.event_hash)===C.orphan_hash&&String(q.prev_hash)===C.parent_hash&&Number(q.transaction_generation)===2133&&String(q.task_id)===C.task&&String(q.event_type)===\"TASK_LEASED\"&&String(q.reason)===\"PROVEN_UNCOMMITTED_HALF_COMMAND_ORPHAN_FORK_SEQ294\"&&String(q.forensic_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_FORENSIC_SNAPSHOT_V1.json\"&&!!parent&&String(parent.event_hash)===C.parent_hash&&!!succ&&String(succ.event_hash)===C.successor_hash&&String(succ.prev_hash)===C.parent_hash&&!es.some(r=>String(r.event_hash)===C.orphan_hash)&&!!p&&p.classification===\"EXPLICIT_QUARANTINE_RECOVERY_LINEAGE\"&&Number(p.orphan_seq)===C.orphan_seq&&String(p.orphan_hash)===C.orphan_hash&&Number(p.parent_seq)===C.parent_seq&&String(p.parent_hash)===C.parent_hash&&Number(p.valid_successor_seq)===C.successor_seq&&String(p.valid_successor_hash)===C.successor_hash&&String(p.forensic_blob_sha256)===C.forensic&&String(p.quarantine_manifest_sha256)===C.manifest&&String(p.quarantine_manifest_uri)===\"valblob:mosadek/project-brain-live-v1-durable/evidence/control_plane/epoch2-command-atomicity-fork-repair-v1/SEQ294_QUARANTINE_MANIFEST_99e8f1adbb426a3016c55acb2b412584f1c5c327e01122a4d7557233935acb1a.json\"&&String(p.affected_task_id)===C.task&&p.affected_task_reconciled_to_ready===true;\n }\n if(!quarantine_ok)structural_problems.push({reason:\"UNVERIFIED_EVENT_SEQUENCE_GAP_OR_QUARANTINE\",missing,quarantine_rows:qs.length});\n return{ok:bad.length===0&&structural_problems.length===0,predecessor_event_count:PREDECESSOR_EVENTS,new_events:es.length,total_events:PREDECESSOR_EVENTS+es.length,computed_head:prev,stored_head:storedHead,generation:Number(m.generation),bad,structural_problems,quarantine:{ok:quarantine_ok,missing_local_seq:missing,rows:qs.length}}\n}\nasync function verifyClaimGraph(){\n const claims:any[]=(await sqlite.execute(`SELECT * FROM ${P}claims ORDER BY id`)).rows as any[],deps:any[]=(await sqlite.execute(`SELECT * FROM ${P}claim_deps`)).rows as any[];const cm=new Map(claims.map(x=>[String(x.id),x])),problems:any[]=[];\n for(const d of deps){const p:any=cm.get(String(d.parent_claim)),c:any=cm.get(String(d.child_claim));if(!p||!c)problems.push({dep:d,reason:\"MISSING_CLAIM\"});else if(String(p.workstream)!==String(c.workstream))problems.push({dep:d,reason:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(p.status))&&String(c.status)===\"VERIFIED\")problems.push({dep:d,reason:\"VERIFIED_CHILD_OF_INVALID_PARENT\"})}\n return{ok:problems.length===0,claims:claims.length,problems}\n}\nasync function status(){\n const m:any=await meta();const counts:any={};for(const t of [\"agents\",\"tasks\",\"claims\",\"artifacts\"])counts[t]=Number((await one(`SELECT COUNT(*) n FROM ${P}${t}`)).n);\n const states:any=(await sqlite.execute(`SELECT state,COUNT(*) n FROM ${P}tasks GROUP BY state ORDER BY state`)).rows;\n return{ok:true,classification:\"VAL_NATIVE_RECOVERY_EPOCH\",epoch:Number(m.epoch),generation:Number(m.generation),event_head_hash:String(m.event_head_hash),predecessor_generation:Number(m.predecessor_generation),predecessor_head:String(m.predecessor_head),new_event_count:Number(m.new_event_count),counts,task_states:states}\n}\n\nasync function register(args:string[]){\n if(args.length<2)throw new Error(\"REGISTER_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),role=String(f.role||\"\"),type=String(f.type||\"\"),parent=f.parent??null,caps=cleanCaps(parseJson(f.capabilities||\"[]\",\"CAPS\"));\n if(!ws||!role||!type)throw new Error(\"REGISTER_FIELDS_REQUIRED\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");\n if(type===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return blocked}\n if(parent){if(String(parent)===id)throw new Error(\"AGENT_CANNOT_PARENT_SELF\");const pr:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[parent]);if(!pr)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(String(pr.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_PARENT\")}\n const ex:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(ex){const same=String(ex.workstream)===ws&&String(ex.role)===role&&String(ex.type)===type&&(ex.parent_id??null)===(parent??null)&&String(ex.capabilities_json)===canon(caps);if(!same)throw new Error(\"AGENT_REJOIN_IDENTITY_MISMATCH\");await sqlite.execute({sql:`UPDATE ${P}agents SET last_seen=? WHERE id=?`,args:[now(),id]});return{ok:true,created:false,agent_id:id,generation:await generation()}}\n const g0=await generation();await sqlite.execute({sql:`INSERT INTO ${P}agents(id,parent_id,type,workstream,role,status,boot_generation,last_generation,last_seen,capabilities_json) VALUES(?,?,?,?,?,'READY',?,?,?,?)`,args:[id,parent,type,ws,role,g0,g0,now(),canon(caps)]});await appendEvent(ws,id,null,\"AGENT_REGISTERED\",{type,role,parent,boot_generation:g0,capabilities:caps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=? WHERE id=?`,args:[ng,id]});return{ok:true,created:true,agent_id:id,generation:ng}\n}\nasync function ensureTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");if(!ws||!dedupe)throw new Error(\"ENSURE_FIELDS_REQUIRED\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));\n if(!Array.isArray(deps)||!ctx||Array.isArray(ctx)||!Array.isArray(req))throw new Error(\"BAD_JSON_SHAPE\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing)return{ok:true,created:false,task_id:existing.id,state:existing.state,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe};\n if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority);if(!Number.isFinite(priority))throw new Error(\"BAD_PRIORITY\");\n await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,NULL,NULL,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,canon(writes),canon(guards)]});\n await appendEvent(ws,f.agent??null,id,\"TASK_CREATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe}\n}\nasync function claim(args:string[]){\n const f=flags(args,1),id=String(f.agent||\"\"),mode=String(f.mode||\"INTERACTIVE\"),secs=f[\"lease-seconds\"]===undefined?(mode===\"INTERACTIVE\"?1800:900):Number(f[\"lease-seconds\"]);if(!id)throw new Error(\"AGENT_REQUIRED\");if(![\"INTERACTIVE\",\"PROCESS\"].includes(mode)||secs<60||secs>7200)throw new Error(\"BAD_LEASE\");\n const ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[id]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");if(String(ag.type)===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return blocked}const held:any=await one(`SELECT id,lease_expires_at FROM ${P}tasks WHERE state='LEASED' AND lease_owner=? ORDER BY updated_at DESC LIMIT 1`,[id]);const g0=await generation();\n if(held){if(held.lease_expires_at&&String(held.lease_expires_at)7200)throw new Error(\"BAD_RENEW\");\n const r:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[task]);if(!r)throw new Error(\"UNKNOWN_TASK\");if(String(r.state)!==\"LEASED\"||String(r.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(task===CHAT_UNPROVEN_ACTIVATION_TASK){const a:any=await one(`SELECT type FROM ${P}agents WHERE id=?`,[agent]);if(String(a?.type||\"\")===\"CHAT_UNPROVEN\"){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_PREACTIVATION_LEASE_RENEW_FORBIDDEN\"}}}if(r.lease_expires_at&&String(r.lease_expires_at)String(r.workstream)))].sort();for(const ws of wss)await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[g,now(),ws]})}return{ok:true,recovered,generation:g}\n}\nasync function commit(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId)throw new Error(\"COMMIT_FIELDS_REQUIRED\");if(state!==\"COMPLETE\")throw new Error(\"UNSUPPORTED_VAL_NATIVE_COMMIT_STATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(String(ag.type)===\"CHAT_UNPROVEN\"&&taskId===CHAT_UNPROVEN_ACTIVATION_TASK){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\"}}if(task.lease_expires_at&&String(task.lease_expires_at)String(a.id).localeCompare(String(b.id))||String(a.state).localeCompare(String(b.state)))\n}\nasync function terminalGuardFailures(r:any){\n const out:any[]=[];for(const g of parseJson(r.guards_json||\"[]\",\"GUARDS\")){\n if(g.type===\"task_complete\"){const x:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,state:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,state:\"CROSS_WORKSTREAM\"});else if([\"INVALID\",\"BLOCKED\"].includes(String(x.state)))out.push({type:g.type,id:g.id,state:String(x.state)})}\n else if(g.type===\"claim_verified\"){const x:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[g.id]);if(!x)out.push({type:g.type,id:g.id,status:\"MISSING\"});else if(String(x.workstream)!==String(r.workstream))out.push({type:g.type,id:g.id,status:\"CROSS_WORKSTREAM\"});else if([\"FALSIFIED\",\"STALE\"].includes(String(x.status)))out.push({type:g.type,id:g.id,status:String(x.status)})}\n }return out.sort((a,b)=>canon(a).localeCompare(canon(b)))\n}\nasync function propagateImpossible(ws:string,agent:any,rootCause:any){\n const changed:any[]=[];while(true){const rows:any[]=(await sqlite.execute({sql:`SELECT * FROM ${P}tasks WHERE workstream=? AND state='READY' ORDER BY id`,args:[ws]})).rows as any[];const round:any[]=[];\n for(const r of rows){const deps=await terminalDepFailures(r),guards=await terminalGuardFailures(r);if(!deps.length&&!guards.length)continue;const type=deps.length&&!guards.length?\"TASK_DEPENDENCY_BLOCKED\":\"TASK_CAUSALLY_BLOCKED\";let payload:any;\n if(type===\"TASK_DEPENDENCY_BLOCKED\")payload={blocking_dependencies:deps,root_terminal_task:(rootCause&&rootCause.task_id)||deps[0].id};\n else payload={blocking_dependencies:deps,blocking_guards:guards,root_cause:rootCause};\n const ev=await appendEvent(ws,agent,String(r.id),type,payload),eid=PREDECESSOR_EVENTS+Number(ev.seq);\n const u:any=await sqlite.execute({sql:`UPDATE ${P}tasks SET state='BLOCKED',result_event_id=?,updated_at=?,lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=? AND state='READY' RETURNING id`,args:[eid,now(),r.id]});\n if((u.rows||[]).length){const item={task_id:r.id,event_id:eid,blocking_dependencies:deps,blocking_guards:guards};round.push(item);changed.push(item)}\n }if(!round.length)break;\n }return changed\n}\nasync function delegateTask(args:string[]){\n if(args.length<2)throw new Error(\"TASK_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),parent=String(f[\"parent-agent\"]||\"\"),child=String(f[\"child-agent\"]||\"\"),dedupe=String(f[\"dedupe-key\"]||\"\");\n const deps=parseJson(f.depends||\"[]\",\"DEPS\"),ctx=parseJson(f.context||\"{}\",\"CTX\"),req=parseJson(f.requires||\"[]\",\"REQ\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),guards=await normalizeGuards(ws,parseJson(f.guards||\"[]\",\"GUARDS\"));if(!ws||!parent||!child||!dedupe||!Array.isArray(deps)||!Array.isArray(req)||!ctx||Array.isArray(ctx))throw new Error(\"BAD_DELEGATE\");\n const p:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[parent]),c:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[child]);if(!p)throw new Error(\"UNKNOWN_PARENT_AGENT\");if(!c)throw new Error(\"UNKNOWN_CHILD_AGENT\");if(String(p.workstream)!==ws||String(c.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DELEGATION_FORBIDDEN\");if(String(c.parent_id)!==parent)throw new Error(\"NOT_DIRECT_CHILD\");\n const existing:any=await one(`SELECT * FROM ${P}tasks WHERE workstream=? AND dedupe_key=? ORDER BY created_at DESC LIMIT 1`,[ws,dedupe]);if(existing){if(String(existing.assigned_agent)!==child||String(existing.delegated_by)!==parent)throw new Error(\"DEDUPE_KEY_DELEGATION_MISMATCH\");return{ok:true,created:false,task_id:existing.id,state:existing.state,assigned_agent:existing.assigned_agent,delegated_by:existing.delegated_by,lease_owner:existing.lease_owner,generation:await generation(),dedupe_key:dedupe}}\n for(const d of deps){const r:any=await one(`SELECT workstream,state FROM ${P}tasks WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_DEP_FORBIDDEN\");if([\"INVALID\",\"BLOCKED\"].includes(String(r.state)))throw new Error(\"TERMINAL_DEPENDENCY\")}\n const t=now(),priority=Number(f.priority??0);await sqlite.execute({sql:`INSERT INTO ${P}tasks(id,workstream,state,priority,depends_json,success_condition,decision_value,context_manifest,lease_owner,lease_mode,lease_generation,lease_expires_at,created_at,updated_at,result_event_id,requires_json,dedupe_key,assigned_agent,delegated_by,writes_json,guards_json) VALUES(?,?,'READY',?,?,?,?,?,NULL,NULL,NULL,NULL,?,?,NULL,?,?,?,?,?,?)`,args:[id,ws,priority,canon(deps),String(f.success||\"\"),String(f.value||\"\"),canon(ctx),t,t,canon(req),dedupe,child,parent,canon(writes),canon(guards)]});\n await appendEvent(ws,parent,id,\"TASK_DELEGATED\",{priority,depends:deps,requires:req,writes,guards,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent,success_condition:String(f.success||\"\"),decision_value:String(f.value||\"\")});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,created:true,task_id:id,state:\"READY\",generation:ng,dedupe_key:dedupe,assigned_agent:child,delegated_by:parent}\n}\nasync function supersedeContext(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),newCtx=parseJson(f[\"new-context\"],\"NEW_CONTEXT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\");if(!taskId||!agent||!Number.isInteger(expected)||!newCtx||Array.isArray(newCtx)||!Array.isArray(evidence))throw new Error(\"BAD_SUPERSEDE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_CONTEXT_SUPERSESSION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_CONTEXT_SUPERSESSION_REQUIRES_READY\");\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const oldCtx=parseJson(task.context_manifest||\"{}\",\"CTX\");if(canon(oldCtx)===canon(newCtx))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_context_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_CONTEXT_SUPERSEDED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_context:oldCtx,new_context:newCtx}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_context_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_context_history(id,task_id,version,old_context_json,new_context_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,canon(oldCtx),canon(newCtx),String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET context_manifest=?,updated_at=? WHERE id=?`,args:[canon(newCtx),now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid}\n}\nasync function ensureTaskInvariantRequiresColumns(){\n const r:any=await sqlite.execute(`PRAGMA table_info(${P}task_invariant_history)`),names=new Set((r.rows||[]).map((x:any)=>String(x.name)));\n if(!names.has(\"old_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN old_requires_json TEXT`);\n if(!names.has(\"new_requires_json\"))await sqlite.execute(`ALTER TABLE ${P}task_invariant_history ADD COLUMN new_requires_json TEXT`);\n}\nasync function migrateInvariants(args:string[]){\n const f=flags(args,1),taskId=String(f.task||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]),dedupe=String(f[\"dedupe-key\"]||\"\"),writes=cleanWrites(parseJson(f.writes||\"[]\",\"WRITES\")),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),hasRequires=Object.prototype.hasOwnProperty.call(f,\"requires\"),requiresOverride=hasRequires?cleanCaps(parseJson(f.requires,\"REQUIRES\")):null;if(!taskId||!agent||!Number.isInteger(expected)||!dedupe||!Array.isArray(evidence))throw new Error(\"BAD_MIGRATE\");\n const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_TASK_MIGRATION_FORBIDDEN\");if(String(task.state)!==\"READY\")throw new Error(\"TASK_MIGRATION_REQUIRES_READY\");const guards=await normalizeGuards(String(task.workstream),parseJson(f.guards||\"[]\",\"GUARDS\"));\n const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[task.workstream])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:task.workstream};await validateEvidenceRefs(evidence);const conflict:any=await one(`SELECT id,state FROM ${P}tasks WHERE workstream=? AND dedupe_key=? AND id<>? AND state IN ('READY','LEASED') LIMIT 1`,[task.workstream,dedupe,taskId]);if(conflict)throw new Error(\"OPEN_DEDUPE_CONFLICT\");\n const oldD=task.dedupe_key,oldW=String(task.writes_json||\"[]\"),oldG=String(task.guards_json||\"[]\"),oldR=String(task.requires_json||\"[]\"),oldReq=parseJson(oldR,\"OLDREQ\");if(!Array.isArray(oldReq))throw new Error(\"OLD_REQUIRES_NOT_LIST\");const newReq=hasRequires?requiresOverride:oldReq,newR=hasRequires?canon(newReq):oldR;if(String(oldD)===dedupe&&canon(parseJson(oldW,\"OLDW\"))===canon(writes)&&canon(parseJson(oldG,\"OLDG\"))===canon(guards)&&canon(oldReq)===canon(newReq))return{ok:true,changed:false,task_id:taskId,generation:await generation(),workstream_generation:actual};\n await ensureTaskInvariantRequiresColumns();const ver=Number((await one(`SELECT COALESCE(MAX(version),0)+1 n FROM ${P}task_invariant_history WHERE task_id=?`,[taskId])).n),ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_INVARIANTS_MIGRATED\",{version:ver,reason:String(f.reason||\"\"),evidence,old_dedupe_key:oldD,new_dedupe_key:dedupe,old_writes:parseJson(oldW,\"OLDW\"),new_writes:writes,old_guards:parseJson(oldG,\"OLDG\"),new_guards:guards,old_requires:oldReq,new_requires:newReq}),eid=PREDECESSOR_EVENTS+Number(ev.seq),hid=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}task_invariant_history`)).n);\n await sqlite.execute({sql:`INSERT INTO ${P}task_invariant_history(id,task_id,version,old_dedupe_key,new_dedupe_key,old_writes_json,new_writes_json,old_guards_json,new_guards_json,old_requires_json,new_requires_json,reason,evidence_json,agent_id,event_id,created_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,args:[hid,taskId,ver,oldD,dedupe,oldW,canon(writes),oldG,canon(guards),oldR,newR,String(f.reason||\"\"),canon(evidence),agent,eid,now()]});await sqlite.execute({sql:`UPDATE ${P}tasks SET dedupe_key=?,writes_json=?,guards_json=?,requires_json=?,updated_at=? WHERE id=?`,args:[dedupe,canon(writes),canon(guards),newR,now(),taskId]});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,changed:true,task_id:taskId,version:ver,generation:ng,workstream_generation:ng,event_id:eid,dedupe_key:dedupe,writes,guards,requires:newReq}\n}\nasync function reconcileCausal(args:string[]){\n const f=flags(args,1),ws=String(f.workstream||\"\"),agent=String(f.agent||\"\"),expected=Number(f[\"expected-workstream-generation\"]);if(!ws||!agent||!Number.isInteger(expected))throw new Error(\"BAD_RECONCILE\");const ag:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[agent]);if(!ag)throw new Error(\"UNKNOWN_AGENT\");if(String(ag.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_RECONCILIATION_FORBIDDEN\");const actual=Number((await one(`SELECT head_generation FROM ${P}workstreams WHERE id=?`,[ws])).head_generation);if(actual!==expected)return{ok:false,reason:\"STALE_WORKSTREAM_WRITE\",expected,actual,workstream:ws};const changed=await propagateImpossible(ws,agent,{type:\"historical_reconcile\"});let ng=await generation();if(changed.length){ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});await sqlite.execute({sql:`UPDATE ${P}agents SET last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]})}return{ok:true,changed_count:changed.length,changed,generation:ng,workstream_generation:changed.length?ng:actual,workstream:ws}\n}\nasync function addClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),ws=String(f.workstream||\"\"),status0=String(f.status||\"VERIFIED\"),statement=parseJson(f.statement,\"STATEMENT\"),evidence=parseJson(f.evidence||\"[]\",\"EVIDENCE\"),deps=parseJson(f.depends||\"[]\",\"DEPS\");if(!ws||![\"VERIFIED\",\"CANDIDATE\",\"HYPOTHESIS\"].includes(status0)||!statement||Array.isArray(statement)||!Array.isArray(evidence)||!Array.isArray(deps))throw new Error(\"BAD_CLAIM\");if(!await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[ws]))throw new Error(\"UNKNOWN_WORKSTREAM\");await validateEvidenceRefs(evidence);\n for(const d of deps){const r:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[d]);if(!r)throw new Error(\"UNKNOWN_CLAIM_DEP\");if(String(r.workstream)!==ws)throw new Error(\"CROSS_WORKSTREAM_CLAIM_DEP_FORBIDDEN\");if(String(r.status)!==\"VERIFIED\")throw new Error(\"NONVERIFIED_CLAIM_DEP\")}\n const raw=canon(statement),h=await sha(raw),g0=await generation(),t=now();if(await one(`SELECT id FROM ${P}claims WHERE id=?`,[id]))throw new Error(\"CLAIM_EXISTS\");await sqlite.execute({sql:`INSERT INTO ${P}claims(id,workstream,status,statement_json,statement_sha256,evidence_json,created_generation,invalidated_by,created_at,updated_at) VALUES(?,?,?,?,?,?,?,NULL,?,?)`,args:[id,ws,status0,raw,h,canon(evidence),g0,t,t]});for(const d of deps)await sqlite.execute({sql:`INSERT INTO ${P}claim_deps(parent_claim,child_claim) VALUES(?,?)`,args:[d,id]});await appendEvent(ws,f.agent??null,null,\"CLAIM_ADDED\",{claim_id:id,status:status0,statement_sha256:h,evidence,depends:deps});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),ws]});return{ok:true,claim_id:id,statement_sha256:h,generation:ng}\n}\nasync function invalidateClaimFull(args:string[]){\n if(args.length<2)throw new Error(\"CLAIM_ID_REQUIRED\");const id=args[1],f=flags(args,2),reason=String(f.reason||\"\"),agent=f.agent??null;const root:any=await one(`SELECT workstream,status FROM ${P}claims WHERE id=?`,[id]);if(!root)throw new Error(\"UNKNOWN_CLAIM\");const todo=[id],seen=new Set(),changed:any[]=[];\n while(todo.length){const q=String(todo.pop());if(seen.has(q))continue;seen.add(q);const row:any=await one(`SELECT status FROM ${P}claims WHERE id=?`,[q]);if(row&&![\"FALSIFIED\",\"STALE\"].includes(String(row.status))){const ns=q===id?\"FALSIFIED\":\"STALE\";await sqlite.execute({sql:`UPDATE ${P}claims SET status=?,invalidated_by=?,updated_at=? WHERE id=?`,args:[ns,id,now(),q]});changed.push([q,ns])}const kids:any[]=(await sqlite.execute({sql:`SELECT child_claim FROM ${P}claim_deps WHERE parent_claim=?`,args:[q]})).rows as any[];for(const k of kids)todo.push(String(k.child_claim))}\n await appendEvent(String(root.workstream),agent,null,\"CLAIM_INVALIDATED\",{root_claim:id,reason,affected:changed});const propagated=await propagateImpossible(String(root.workstream),agent,{type:\"claim_invalidated\",claim_id:id,reason});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),root.workstream]});return{ok:true,root_claim:id,affected:changed,generation:ng,propagated_blocked:propagated}\n}\nasync function recordExternalArtifact(args:string[]){\n const spec=parseExternalArtifactSpec(args);\n const ws:any=await one(`SELECT id FROM ${P}workstreams WHERE id=?`,[spec.workstream]);if(!ws)throw new Error(\"UNKNOWN_WORKSTREAM\");\n if(spec.agent!==null){const a:any=await one(`SELECT workstream FROM ${P}agents WHERE id=?`,[spec.agent]);if(!a)throw new Error(\"UNKNOWN_ARTIFACT_AGENT\");if(String(a.workstream)!==spec.workstream)throw new Error(\"CROSS_WORKSTREAM_ARTIFACT_AGENT\")}\n if(spec.task!==null){const t:any=await one(`SELECT workstream FROM ${P}tasks WHERE id=?`,[spec.task]);if(!t)throw new Error(\"UNKNOWN_ARTIFACT_TASK\");if(String(t.workstream)!==spec.workstream)throw new Error(\"CROSS_WORKSTREAM_ARTIFACT_TASK\")}\n const integrity=await verifyExternalArtifactBlobBytes(spec);\n const found:any=await sqlite.execute({sql:`SELECT sha256,size,logical_name,producer_agent,task_id,storage_json FROM ${P}artifacts WHERE lower(sha256)=?`,args:[spec.sha256]});\n const rows:any[]=found.rows||[];if(rows.length>1)throw new Error(\"EXTERNAL_ARTIFACT_DUPLICATE_CANONICAL_ROWS\");\n const decision=externalArtifactExistingDecision(rows[0]??null,spec);\n if(decision.kind===\"CONFLICT\")throw new Error(decision.reason);\n if(decision.kind===\"ALREADY_RECORDED\")return{ok:true,created:false,already_recorded:true,sha256:spec.sha256,generation:await generation(),semantic_generation_unchanged:true,integrity};\n const t=now();\n await sqlite.execute({sql:`INSERT INTO ${P}artifacts(sha256,size,logical_name,producer_agent,task_id,storage_json,created_at) VALUES(?,?,?,?,?,?,?)`,\n args:[spec.sha256,spec.size,spec.name,spec.agent,spec.task,canon([spec.uri]),t]});\n const payload={sha256:spec.sha256,size:spec.size,logical_name:spec.name,storage_uri:spec.uri,producer_agent:spec.agent,task_id:spec.task};\n const ev=await appendEvent(spec.workstream,spec.agent,spec.task,\"EXTERNAL_ARTIFACT_RECORDED\",payload);\n const ng=await bump();\n await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),spec.workstream]});\n return{ok:true,created:true,already_recorded:false,sha256:spec.sha256,generation:ng,event_id:PREDECESSOR_EVENTS+Number(ev.seq),event_hash:ev.event_hash,integrity};\n}\n\nasync function commitFull(args:string[]){\n const f=flags(args,1),agent=String(f.agent||\"\"),taskId=String(f.task||\"\"),state=String(f.state||\"COMPLETE\");if(!agent||!taskId||![\"COMPLETE\",\"INVALID\",\"BLOCKED\"].includes(state))throw new Error(\"BAD_COMMIT\");const task:any=await one(`SELECT * FROM ${P}tasks WHERE id=?`,[taskId]),ag:any=await one(`SELECT * FROM ${P}agents WHERE id=?`,[agent]);if(!task||!ag)throw new Error(\"UNKNOWN_TASK_OR_AGENT\");if(String(task.workstream)!==String(ag.workstream))throw new Error(\"CROSS_WORKSTREAM_COMMIT_FORBIDDEN\");if(String(task.lease_owner)!==agent)throw new Error(\"NOT_LEASE_OWNER\");if(String(ag.type)===\"CHAT_UNPROVEN\"&&taskId===CHAT_UNPROVEN_ACTIVATION_TASK){const blocked:any=await requireChatUnprovenActivation();if(blocked)return{...blocked,reason:\"CHAT_UNPROVEN_ACTIVATION_SELF_COMMIT_FORBIDDEN\"}}if(task.lease_expires_at&&String(task.lease_expires_at)g?.type===EXECUTION_DISTINCT_GUARD))throw new Error(\"CHAT_UNPROVEN_INDEPENDENCE_COMMIT_FORBIDDEN\");\n payload={...payload,contributor_trust_class:\"CHAT_UNPROVEN\",contributor_agent_type:\"CHAT_UNPROVEN\",independence_eligible:false,p_real_eligible:false};\n }else if(payload&&typeof payload===\"object\"&&!Array.isArray(payload)&&reserved.some(k=>Object.prototype.hasOwnProperty.call(payload,k))){\n throw new Error(\"CALLER_CONTROLLED_TRUST_METADATA_FORBIDDEN\");\n }\n const ev=await appendEvent(String(task.workstream),agent,taskId,\"TASK_RESULT_COMMITTED\",payload),eid=PREDECESSOR_EVENTS+Number(ev.seq);await sqlite.execute({sql:`UPDATE ${P}tasks SET state=?,result_event_id=?,updated_at=?,lease_owner=NULL,lease_mode=NULL,lease_generation=NULL,lease_expires_at=NULL WHERE id=?`,args:[state,eid,now(),taskId]});let propagated:any[]=[];if([\"INVALID\",\"BLOCKED\"].includes(state))propagated=await propagateImpossible(String(task.workstream),agent,{type:\"task_terminal\",task_id:taskId,state});const ng=await bump();await sqlite.execute({sql:`UPDATE ${P}agents SET status='READY',last_generation=?,last_seen=? WHERE id=?`,args:[ng,now(),agent]});await sqlite.execute({sql:`UPDATE ${P}workstreams SET head_generation=?,updated_at=? WHERE id=?`,args:[ng,now(),task.workstream]});return{ok:true,generation:ng,event_id:eid,propagated_blocked:propagated}\n}\nconst CHECKPOINT_STATE_TABLES=[\"workstreams\",\"agents\",\"tasks\",\"claims\",\"claim_deps\",\"artifacts\",\"task_context_history\",\"task_invariant_history\"];\nfunction checkpointSortedRows(rows:any[]){return [...(rows||[])].sort((a:any,b:any)=>canon(a).localeCompare(canon(b)))}\nasync function checkpointStateView(){\n const m:any=await meta(),tables:any={};\n for(const t of CHECKPOINT_STATE_TABLES)tables[t]=checkpointSortedRows((await sqlite.execute(`SELECT * FROM ${P}${t}`)).rows||[]);\n const events=(await sqlite.execute(`SELECT * FROM ${P}epoch_events ORDER BY local_seq`)).rows||[];\n const stateSha256=await sha(canon({epoch_meta:m,events,state:tables}));\n return{m,tables,events,state_sha256:stateSha256};\n}\nasync function captureCheckpointSnapshot(){\n return await withTransaction(\"read\",async()=>{\n const v:any=await checkpointStateView();\n const payload={schema:\"BRAIN_VAL_NATIVE_SNAPSHOT_V2\",lineage:{predecessor_generation:v.m.predecessor_generation,predecessor_event_count:v.m.predecessor_event_count,predecessor_head:v.m.predecessor_head},epoch_meta:v.m,events:v.events,state:v.tables,state_sha256:v.state_sha256,exported_at:now()};\n const raw=JSON.stringify(payload,null,2)+\"\\n\",h=await sha(raw),key=`snapshots/val_native/brain_snapshot_epoch${v.m.epoch}_g${v.m.generation}_${h.slice(0,16)}.json`;\n return{...v,raw,snapshot_sha256:h,key};\n });\n}\nasync function checkpointNativeBound(payloadJson:string,c:BoundTransportContext){\n const cmd=\"checkpoint\";\n const captured:any=await withTransaction(\"read\",async()=>{\n const pre:any=await boundTransportGuard(c,payloadJson,cmd);if(!pre.ok)return{early:pre};\n const prior=await existingBoundReceipt(c,payloadJson,cmd);if(prior!==null)return{early:prior};\n return await captureCheckpointSnapshot();\n });\n if(captured.early!==undefined)return captured.early;\n await blob.set(captured.key,captured.raw);\n const rb:any=await blob.get(captured.key),rbRaw=await rb.text(),rbSha=await sha(rbRaw);\n if(rbRaw!==captured.raw||rbSha!==captured.snapshot_sha256)throw new Error(\"CHECKPOINT_BLOB_READBACK_MISMATCH\");\n return await withTransaction(\"write\",async()=>{\n await ensureMutationReceiptTable();\n const pre:any=await boundTransportGuard(c,payloadJson,cmd);if(!pre.ok)return pre;\n const prior=await existingBoundReceipt(c,payloadJson,cmd);if(prior!==null)return prior;\n const current:any=await checkpointStateView();\n if(String(current.state_sha256)!==String(captured.state_sha256))return{ok:false,reason:\"CHECKPOINT_CAPTURE_STALE\",captured_generation:Number(captured.m.generation),current_generation:Number(current.m.generation),captured_event_head_hash:String(captured.m.event_head_hash),current_event_head_hash:String(current.m.event_head_hash),captured_state_sha256:String(captured.state_sha256),current_state_sha256:String(current.state_sha256),orphan_blob_noncanonical:true,orphan_blob_uri:`valblob:mosadek/project-brain-live-v1-durable/${captured.key}`};\n const id=Number((await one(`SELECT COALESCE(MAX(id),0)+1 n FROM ${P}replicas`)).n),uri=`valblob:mosadek/project-brain-live-v1-durable/${captured.key}`;\n await sqlite.execute({sql:`INSERT INTO ${P}replicas(id,generation,provider,uri,snapshot_sha256,event_head_hash,verified,created_at) VALUES(?,?,?,?,?,?,1,?)`,args:[id,Number(captured.m.generation),\"val-town-native\",uri,String(captured.snapshot_sha256),String(captured.m.event_head_hash),now()]});\n const post:any=await boundTransportGuard(c,payloadJson,cmd);if(!post.ok)throw new Error(\"BOUND_TRANSPORT_CHANGED_BEFORE_CHECKPOINT_COMMIT:\"+String(post.reason||\"UNKNOWN\"));\n const result={ok:true,generation:Number(captured.m.generation),durability_lag_generations:Number(current.m.generation)-Number(captured.m.generation),snapshot_sha256:String(captured.snapshot_sha256),state_sha256:String(captured.state_sha256),event_head_hash:String(captured.m.event_head_hash),uri,attempts:[{attempt:1,generation:Number(captured.m.generation),sha256:String(captured.snapshot_sha256),state_sha256:String(captured.state_sha256),size:enc.encode(captured.raw).length,ok:true,uri,lag_after_ack:Number(current.m.generation)-Number(captured.m.generation)}],orphan_blob_policy:\"CONTENT_ADDRESSED_BLOB_HAS_NO_CANONICAL_CHECKPOINT_MEANING_UNTIL_REPLICA_ROW_AND_BOUND_MUTATION_RECEIPT_COMMIT\"};\n const m:any=await meta(),payloadSha=await sha(payloadJson);\n await sqlite.execute({sql:`INSERT INTO ${MUTATION_RECEIPT_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[c.job_id,c.lease_attempt_id,c.lease_instance_id,c.lease_owner,c.transport_lease_generation,c.authority_epoch,cmd,payloadSha,Number(m.generation),String(m.event_head_hash),canon(result),now()]});\n return result;\n });\n}\nfunction transportContextShapeOk(c:any):c is BoundTransportContext{\n return !!c&&typeof c===\"object\"&&!Array.isArray(c)&&\n typeof c.job_id===\"string\"&&!!c.job_id&&\n Number.isInteger(c.transport_lease_generation)&&c.transport_lease_generation>=1&&\n typeof c.lease_owner===\"string\"&&!!c.lease_owner&&\n typeof c.lease_instance_id===\"string\"&&!!c.lease_instance_id&&\n typeof c.lease_attempt_id===\"string\"&&!!c.lease_attempt_id&&\n Number.isInteger(c.authority_epoch)&&c.authority_epoch>=1&&\n typeof c.payload_json===\"string\"&&!!c.payload_json;\n}\nasync function boundTransportGuard(c:BoundTransportContext,payloadJson:string,cmd:string){\n const authority:any=await one(`SELECT epoch,writer,mode,source_generation,source_head FROM brain_control_plane_authority_v1 WHERE id=1`);\n if(!authority||Number(authority.epoch)!==c.authority_epoch||String(authority.writer)!==\"val_native\"||String(authority.mode)!==\"ACTIVE\"){\n return{ok:false,reason:\"VAL_NATIVE_MUTATIONS_AUTHORITY_FENCED\",command:cmd,authority:authority??null};\n }\n const job:any=await one(`SELECT id,op,payload_json,state,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation,lease_expires_at\n FROM brain_bridge_jobs\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND lease_expires_at>datetime('now')`,\n [c.job_id,c.lease_owner,c.lease_instance_id,c.lease_attempt_id,c.transport_lease_generation]);\n if(!job)return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_ATTEMPT_FENCED\",command:cmd,job_id:c.job_id};\n if(String(job.op)!==\"brain\")return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_OP_MISMATCH\",command:cmd,job_id:c.job_id};\n if(String(job.payload_json)!==c.payload_json||payloadJson!==c.payload_json)return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_PAYLOAD_MISMATCH\",command:cmd,job_id:c.job_id};\n return{ok:true,authority,job};\n}\nasync function existingBoundReceipt(c:BoundTransportContext,payloadJson:string,cmd:string){\n const r:any=await one(`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,result_json\n FROM ${MUTATION_RECEIPT_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[c.job_id,c.lease_attempt_id]);\n if(!r)return null;\n const psha=await sha(payloadJson);\n if(String(r.lease_instance_id)!==c.lease_instance_id||String(r.lease_owner)!==c.lease_owner||\n Number(r.transport_lease_generation)!==c.transport_lease_generation||Number(r.authority_epoch)!==c.authority_epoch||\n String(r.command)!==cmd||String(r.payload_sha256)!==psha)throw new Error(\"MUTATION_RECEIPT_BINDING_MISMATCH\");\n return parseJson(r.result_json,\"MUTATION_RECEIPT_RESULT\");\n}\nasync function dispatchFull(payloadJson:string,transportContext?:BoundTransportContext){\n const q=parseJson(payloadJson,\"PAYLOAD\");if(!exactTop(q))throw new Error(\"PAYLOAD_SCHEMA_NOT_CLOSED\");const cmd=String(q.args[0]);\n const full=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\",\"register-agent\",\"ensure-task\",\"delegate-task\",\"claim\",\"renew-lease\",\"commit\",\"checkpoint\",\"add-claim\",\"invalidate-claim\",\"supersede-task-context\",\"migrate-task-invariants\",\"reconcile-causal-blocks\",\"recover-stale\",\"record-external-artifact\"]);if(!full.has(cmd))throw new Error(\"BRAIN_SUBCOMMAND_NOT_ALLOWED\");\n const invoke=async(argsOverride?:any[])=>{\n const a=argsOverride??q.args;\n if(cmd===\"status\")return await status();if(cmd===\"verify-chain\")return await verifyChain();if(cmd===\"verify-claim-graph\")return await verifyClaimGraph();if(cmd===\"register-agent\")return await register(a);if(cmd===\"ensure-task\")return await ensureTask(a);if(cmd===\"delegate-task\")return await delegateTask(a);if(cmd===\"claim\")return await claim(a);if(cmd===\"renew-lease\")return await renew(a);if(cmd===\"commit\")return await commitFull(a);if(cmd===\"checkpoint\")return await checkpointNative();if(cmd===\"add-claim\")return await addClaimFull(a);if(cmd===\"invalidate-claim\")return await invalidateClaimFull(a);if(cmd===\"supersede-task-context\")return await supersedeContext(a);if(cmd===\"migrate-task-invariants\")return await migrateInvariants(a);if(cmd===\"reconcile-causal-blocks\")return await reconcileCausal(a);if(cmd===\"record-external-artifact\")return await recordExternalArtifact(a);if(cmd===\"recover-stale\"){if(a.length!==1)throw new Error(\"RECOVER_STALE_ARGS_INVALID\");return await recover()}throw new Error(\"UNREACHABLE\");\n };\n if(READ_ONLY_COMMANDS.has(cmd))return await withTransaction(\"read\",()=>invoke());\n const emergencyCanary=transportContextShapeOk(transportContext)&&transportContext.job_id===EMERGENCY_MUTATION_CANARY_JOB_ID;\n if(EMERGENCY_MUTATIONS_FROZEN&&!emergencyCanary){\n const authority:any=await one(`SELECT epoch,writer,mode,source_generation,source_head FROM brain_control_plane_authority_v1 WHERE id=1`);\n return{ok:false,reason:\"VAL_NATIVE_MUTATIONS_EMERGENCY_FROZEN\",command:cmd,authority:authority??null};\n }\n if(!REACTIVATION_MUTATION_ALLOWLIST.has(cmd))return{ok:false,reason:\"VAL_NATIVE_MUTATOR_NOT_YET_ATOMICALLY_QUALIFIED\",command:cmd};\n if(!transportContextShapeOk(transportContext))return{ok:false,reason:\"VAL_NATIVE_TRANSPORT_CONTEXT_REQUIRED\",command:cmd};\n if(cmd===\"checkpoint\")return await checkpointNativeBound(payloadJson,transportContext);\n return await withTransaction(\"write\",async()=>{\n await ensureMutationReceiptTable();\n await ensureMutationRetryAuthTable();\n const pre:any=await boundTransportGuard(transportContext,payloadJson,cmd);\n if(!pre.ok)return pre;\n const prior=await existingBoundReceipt(transportContext,payloadJson,cmd);\n if(prior!==null)return prior;\n const payloadSha=await sha(payloadJson);\n let result:any=null,retriableStale=false;\n const req:any=transportContext.stable_retry_request;\n if(cmd!==\"commit\"&&(transportContext.stable_retry_probe!==undefined||req!==undefined)){\n result={ok:false,reason:\"STABLE_RETRY_METADATA_NONCOMMIT_FORBIDDEN\",command:cmd};\n }else if(cmd===\"commit\"&&req!==undefined){\n const originalExpected=commitExpectedWorkstreamGeneration(q.args);\n if(!stableRetryRequestOk(req)||originalExpected===null){\n result={ok:false,reason:\"STABLE_RETRY_REQUEST_INVALID\"};\n }else{\n const ar:any=await one(`SELECT * FROM ${MUTATION_RETRY_AUTH_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[transportContext.job_id,transportContext.lease_attempt_id]);\n const bindingOk=!!ar&&String(ar.lease_instance_id)===transportContext.lease_instance_id&&String(ar.lease_owner)===transportContext.lease_owner&&\n Number(ar.transport_lease_generation)===transportContext.transport_lease_generation&&Number(ar.authority_epoch)===transportContext.authority_epoch&&\n String(ar.command)===\"commit\"&&String(ar.payload_sha256)===payloadSha&&Number(ar.stale_expected_workstream_generation)===originalExpected&&\n String(ar.stable_snapshot_sha256)===String(req.stable_snapshot_sha256)&&Number(req.from_expected_workstream_generation)===originalExpected&&\n Number(req.retry_index)===Number(ar.retry_count)+1;\n if(!bindingOk){\n result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_FENCED\"};\n }else{\n const u:any=await sqlite.execute({sql:`UPDATE ${MUTATION_RETRY_AUTH_TABLE}\n SET retry_count=retry_count+1,updated_at=? WHERE job_id=? AND lease_attempt_id=? AND retry_count=? RETURNING retry_count`,\n args:[now(),transportContext.job_id,transportContext.lease_attempt_id,Number(ar.retry_count)]});\n if(!(u.rows||[]).length)result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_RACE\"};\n else{\n result=await invoke(withCommitExpectedWorkstreamGeneration(q.args,Number(req.to_expected_workstream_generation)));\n if(result?.ok===false&&result?.reason===\"STALE_WORKSTREAM_WRITE\"){\n retriableStale=true;\n if(Number.isInteger(Number(result.actual)))await sqlite.execute({sql:`UPDATE ${MUTATION_RETRY_AUTH_TABLE} SET observed_workstream_generation=?,updated_at=? WHERE job_id=? AND lease_attempt_id=?`,\n args:[Number(result.actual),now(),transportContext.job_id,transportContext.lease_attempt_id]});\n }else{\n // Keep the exact-attempt authorization row as immutable-ish audit evidence.\n // The successful mutation receipt is the idempotent completion authority;\n // deleting this row is unnecessary and conflicts with canonical no-delete hardening.\n }\n }\n }\n }\n }else{\n result=await invoke();\n if(cmd===\"commit\"&&result?.ok===false&&result?.reason===\"STALE_WORKSTREAM_WRITE\"){\n const probe:any=transportContext.stable_retry_probe;\n const originalExpected=commitExpectedWorkstreamGeneration(q.args);\n const eligible=stableRetryProbeOk(probe)&&probe.retry_guard_snapshot_complete===true&&originalExpected!==null&&\n Number(result.expected)===originalExpected&&Number.isInteger(Number(result.actual));\n if(eligible){\n await sqlite.execute({sql:`INSERT OR IGNORE INTO ${MUTATION_RETRY_AUTH_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,\n stale_expected_workstream_generation,observed_workstream_generation,stable_snapshot_sha256,retry_count,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[transportContext.job_id,transportContext.lease_attempt_id,transportContext.lease_instance_id,transportContext.lease_owner,\n transportContext.transport_lease_generation,transportContext.authority_epoch,\"commit\",payloadSha,originalExpected,Number(result.actual),\n probe.stable_snapshot_sha256,0,now(),now()]});\n const ar:any=await one(`SELECT * FROM ${MUTATION_RETRY_AUTH_TABLE} WHERE job_id=? AND lease_attempt_id=?`,[transportContext.job_id,transportContext.lease_attempt_id]);\n retriableStale=!!ar&&String(ar.payload_sha256)===payloadSha&&String(ar.stable_snapshot_sha256)===probe.stable_snapshot_sha256&&\n Number(ar.stale_expected_workstream_generation)===originalExpected&&String(ar.lease_instance_id)===transportContext.lease_instance_id&&\n Number(ar.transport_lease_generation)===transportContext.transport_lease_generation;\n if(!retriableStale)result={ok:false,reason:\"STABLE_RETRY_AUTHORIZATION_CONFLICT\"};\n }\n }\n }\n const post:any=await boundTransportGuard(transportContext,payloadJson,cmd);\n if(!post.ok)throw new Error(\"BOUND_TRANSPORT_CHANGED_BEFORE_COMMIT:\"+String(post.reason||\"UNKNOWN\"));\n if(retriableStale)return{...result,stable_retry_authorized:true};\n const m:any=await meta();\n await sqlite.execute({sql:`INSERT INTO ${MUTATION_RECEIPT_TABLE}\n (job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[transportContext.job_id,transportContext.lease_attempt_id,transportContext.lease_instance_id,transportContext.lease_owner,\n transportContext.transport_lease_generation,transportContext.authority_epoch,cmd,payloadSha,Number(m.generation),String(m.event_head_hash),canon(result),now()]});\n return result;\n });\n}\n\n\nasync function brainStatusSafe(){return await withTransaction(\"read\",()=>status())}\nasync function verifyBrainChainSafe(){return await withTransaction(\"read\",()=>verifyChain())}\nasync function verifyBrainClaimGraphSafe(){return await withTransaction(\"read\",()=>verifyClaimGraph())}\nasync function checkpointBrainNativeSafe(){return await dispatchFull(JSON.stringify({args:[\"checkpoint\"],timeout:120}))}\nasync function recoverBrainStaleSafe(){return await dispatchFull(JSON.stringify({args:[\"recover-stale\"],timeout:120}))}\nasync function registerBrainAgentSafe(args:string[]){return await dispatchFull(JSON.stringify({args,timeout:120}))}\nasync function claimBrainTaskSafe(args:string[]){return await dispatchFull(JSON.stringify({args,timeout:120}))}\nasync function brainGenerationSafe(){return await withTransaction(\"read\",()=>generation())}\n\nexport {\n dispatchFull as dispatchBrain,\n brainStatusSafe as brainStatus,\n verifyBrainChainSafe as verifyBrainChain,\n verifyBrainClaimGraphSafe as verifyBrainClaimGraph,\n checkpointBrainNativeSafe as checkpointBrainNative,\n recoverBrainStaleSafe as recoverBrainStale,\n registerBrainAgentSafe as registerBrainAgent,\n claimBrainTaskSafe as claimBrainTask,\n brainGenerationSafe as brainGeneration\n};\n",[],[279,384],"4e3083bf-038a-427d-ad14-7074c11fee28","val_native_executor_prod.ts","01a0a298-8f52-7454-830e-59a82280eb04",["D",1789434302294],"import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\nconst hranaNativeFetch = globalThis.fetch.bind(globalThis);\nasync function hranaCompatFetch(input:any, init?:any):Promise{\n let target:any=input;\n let reqInit:any=init;\n if(typeof input!==\"string\" && !(input instanceof URL)){\n const method=String(input?.method||init?.method||\"GET\");\n const headers=new Headers();\n const src=input?.headers||init?.headers;\n if(src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if(src) for(const [k,v] of Object.entries(src)) headers.set(k,String(v));\n let body:any=undefined;\n if(method!==\"GET\" && method!==\"HEAD\"){\n if(typeof input?.arrayBuffer===\"function\") body=new Uint8Array(await input.arrayBuffer());\n else body=input?.body??init?.body;\n }\n target=String(input?.url||\"\");\n if(!target) throw new Error(\"HRANA_REQUEST_URL_REQUIRED\");\n reqInit={method,headers,body,redirect:\"manual\"};\n }\n const r:any=await hranaNativeFetch(target,reqInit);\n if(r?.body==null||typeof r.body.cancel===\"function\") return r;\n const bytes=new Uint8Array(await r.arrayBuffer());\n return new Response(bytes,{status:r.status,statusText:r.statusText,headers:r.headers});\n}\nconst sqlite=createClient({\n url:`${API_URL}/v3/sqlite/scoped/`,\n authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),\n fetch:hranaCompatFetch,\n});\nimport { leaseOneSql } from \"./brain_bridge_worker.ts\";\nimport { classifyValidCoalesceResult } from \"./brain_bridge_readonly_coalesce_v4.ts\";\nimport { dispatchBrain, verifyBrainChain, verifyBrainClaimGraph } from \"./val_native_kernel_v1.ts\";\n\nconst JOB_TABLE=\"brain_bridge_jobs\";\nconst AUTH_TABLE=\"brain_control_plane_authority_v1\";\n// A unique module query-string creates an independent worker incarnation inside the\n// same Val runtime. The default preserves the canonical executor identity.\nconst moduleUrl=new URL(import.meta.url);\nconst WORKER=moduleUrl.searchParams.get(\"worker\")||\"project-brain-val-native-v1\";\nconst INSTANCE=moduleUrl.searchParams.get(\"instance\")||\"val-native-epoch2\";\nconst LEASE_SECONDS=180;\nconst MUTATION_RECEIPT_TABLE=\"brainvn_mutation_receipts\";\nconst RUNTIME_TICK_TABLE=\"val_native_executor_runtime_v1\";\nconst RUNTIME_TICK_TTL_SECONDS=300;\nconst PRELEASE_RANK_RECEIPT_TABLE=\"brain_bridge_prelease_rank_receipts_v1\";\n// R8K2 installs in two phases: helpers first, then only enable after the exact\n// rebased source passes remote Deno/libSQL qualification and production readback.\nconst PRELEASE_READ_COALESCE_V1_ENABLED=false;\nasync function ensureMutationReceiptTable(db:any=sqlite){\n await db.execute(`CREATE TABLE IF NOT EXISTS ${MUTATION_RECEIPT_TABLE}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n authority_epoch INTEGER NOT NULL,\n command TEXT NOT NULL,\n payload_sha256 TEXT NOT NULL,\n committed_generation INTEGER NOT NULL,\n event_head_hash TEXT NOT NULL,\n result_json TEXT NOT NULL,\n committed_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\n\nfunction safeSqlTableV1(t:string){\n if(!/^[A-Za-z_][A-Za-z0-9_]*$/.test(t))throw new Error(\"BAD_TABLE\");\n return t;\n}\nfunction canonicalJsonV1(x:any):string{\n if(x===null||typeof x!==\"object\")return JSON.stringify(x);\n if(Array.isArray(x))return \"[\"+x.map(canonicalJsonV1).join(\",\")+\"]\";\n return \"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canonicalJsonV1(x[k])).join(\",\")+\"}\";\n}\nexport async function ensurePreleaseRankReceiptTableV1(db:any=sqlite,table=PRELEASE_RANK_RECEIPT_TABLE){\n table=safeSqlTableV1(table);\n await db.execute(`CREATE TABLE IF NOT EXISTS ${table}(\n job_id TEXT NOT NULL,\n lease_attempt_id TEXT NOT NULL,\n lease_instance_id TEXT NOT NULL,\n lease_owner TEXT NOT NULL,\n transport_lease_generation INTEGER NOT NULL,\n rank0_id TEXT NOT NULL,\n rank1_id TEXT,\n rank_snapshot_sha256 TEXT NOT NULL,\n created_at TEXT NOT NULL,\n PRIMARY KEY(job_id,lease_attempt_id)\n )`);\n}\nexport function orderedReadyTop2SqlV1(table=JOB_TABLE){\n table=safeSqlTableV1(table);\n const raw=leaseOneSql(table);\n const marker=`SELECT j.id FROM ${table} j`;\n const start=raw.indexOf(marker);\n const end=raw.indexOf(\"\\n LIMIT 1\",start);\n if(start<0||end<0)throw new Error(\"PRELEASE_SELECTOR_SHAPE_DRIFT\");\n const selector=raw.slice(start,end).replace(marker,`SELECT j.rowid AS queue_rowid,j.* FROM ${table} j`);\n if((selector.match(/\\?/g)||[]).length!==1)throw new Error(\"PRELEASE_SELECTOR_PLACEHOLDER_DRIFT\");\n return selector+\"\\n LIMIT 2\";\n}\nexport async function acquireWithPreleaseRankReceiptV1(db:any,opts:{qTable?:string;rTable?:string;worker:string;instance:string;attempt:string;injectReceiptFailure?:boolean}){\n const q=safeSqlTableV1(opts.qTable||JOB_TABLE),r=safeSqlTableV1(opts.rTable||PRELEASE_RANK_RECEIPT_TABLE);\n await ensurePreleaseRankReceiptTableV1(db,r);\n const tx:any=await db.transaction(\"write\");let done=false;\n try{\n const active:any=await tx.execute(`SELECT id FROM ${q} WHERE state='LEASED' AND lease_expires_at>datetime('now') ORDER BY id LIMIT 2`);\n const activeRows:any[]=active.rows||[];\n if(activeRows.length>1){await tx.rollback();done=true;return {kind:\"conflict\",active:activeRows}}\n if(activeRows.length===1){await tx.rollback();done=true;return {kind:\"busy\",active:activeRows[0]}}\n const ranked:any=await tx.execute({sql:orderedReadyTop2SqlV1(q),args:[opts.worker]});\n const rows:any[]=ranked.rows||[];\n if(!rows.length){await tx.rollback();done=true;return {kind:\"empty\"}}\n const leader=rows[0],follower=rows[1]??null;\n const u:any=await tx.execute({sql:`UPDATE ${q}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='READY'\n AND NOT EXISTS(SELECT 1 FROM ${q} x WHERE x.state='LEASED' AND x.lease_expires_at>datetime('now'))\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[opts.worker,opts.instance,opts.attempt,String(leader.id)]});\n const leased:any=u.rows?.[0]??null;if(!leased)throw new Error(\"PRELEASE_LEASE_CAS_FAILED\");\n const snap={\n rank0:{id:String(leader.id),op:String(leader.op),payload_json:String(leader.payload_json),priority:Number(leader.priority),created_at:String(leader.created_at)},\n rank1:follower?{id:String(follower.id),op:String(follower.op),payload_json:String(follower.payload_json),priority:Number(follower.priority),created_at:String(follower.created_at)}:null,\n };\n const rankSnapshotSha256=await sha256Text(canonicalJsonV1(snap));\n await tx.execute({sql:`INSERT INTO ${r}(job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,rank0_id,rank1_id,rank_snapshot_sha256,created_at)\n VALUES(?,?,?,?,?,?,?,?,datetime('now'))`,args:[String(leased.id),opts.attempt,opts.instance,opts.worker,Number(leased.transport_lease_generation),String(leader.id),follower?String(follower.id):null,opts.injectReceiptFailure?\"INVALID\":rankSnapshotSha256]});\n if(opts.injectReceiptFailure)throw new Error(\"INJECTED_PRELEASE_RECEIPT_FAILURE\");\n await tx.commit();done=true;\n return {kind:\"leased\",job:leased,rank0:String(leader.id),rank1:follower?String(follower.id):null,rank_snapshot_sha256:rankSnapshotSha256};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nfunction exactObjectKeysV1(v:any,keys:string[]){\n if(!v||typeof v!==\"object\"||Array.isArray(v))return false;\n const a=Object.keys(v).sort(),b=[...keys].sort();\n return a.length===b.length&&a.every((x,i)=>x===b[i]);\n}\nexport function classifyValNativeCoalesceResultV1(resultJson:string){\n let r:any;try{r=JSON.parse(resultJson)}catch{return null}\n if(!exactObjectKeysV1(r,[\"returncode\",\"stderr\",\"stdout\"]))return null;\n return classifyValidCoalesceResult(JSON.stringify({returncode:r.returncode,stdout:r.stdout,stderr:r.stderr,stdout_truncated:false,stderr_truncated:false}));\n}\nexport function preleaseReceiptBindingReasonV1(job:any,x:any){\n if(!x)return \"PRELEASE_RECEIPT_MISSING\";\n if(String(x.job_id)!==String(job.id)||String(x.rank0_id)!==String(job.id))return \"PRELEASE_RECEIPT_CORRUPT\";\n if(String(x.lease_owner)!==String(job.lease_owner)||String(x.lease_instance_id)!==String(job.lease_instance_id)||String(x.lease_attempt_id)!==String(job.lease_attempt_id)||Number(x.transport_lease_generation)!==Number(job.transport_lease_generation))return \"PRELEASE_RECEIPT_STALE_OR_MISBOUND\";\n if(!/^[0-9a-f]{64}$/.test(String(x.rank_snapshot_sha256)))return \"PRELEASE_RECEIPT_HASH_INVALID\";\n if(x.rank1_id==null)return \"PRELEASE_RECEIPT_NO_FOLLOWER\";\n return \"OK\";\n}\nexport async function finalizeLeaderOptionalPreleaseFollowerV1(db:any,opts:{qTable?:string;rTable?:string;job:any;expected:any}){\n const q=safeSqlTableV1(opts.qTable||JOB_TABLE),r=safeSqlTableV1(opts.rTable||PRELEASE_RANK_RECEIPT_TABLE);\n await ensurePreleaseRankReceiptTableV1(db,r);\n const command=opts.expected?.state===\"COMPLETE\"&&opts.expected?.error_json==null&&typeof opts.expected?.result_json===\"string\"\n ? classifyValNativeCoalesceResultV1(opts.expected.result_json):null;\n const job=opts.job;\n const tx:any=await db.transaction(\"write\");let done=false;\n try{\n const lr:any=await tx.execute({sql:`SELECT * FROM ${q} WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')`,\n args:[String(job.id),String(job.lease_owner),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n const leader:any=lr.rows?.[0]??null;\n if(!leader){await tx.rollback();done=true;return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"}}\n let followerId:string|null=null,receiptReason=\"NOT_COALESCIBLE\";\n if(command){\n const rr:any=await tx.execute({sql:`SELECT * FROM ${r} WHERE job_id=? AND lease_attempt_id=?`,args:[String(job.id),String(job.lease_attempt_id)]});\n const recs:any[]=rr.rows||[];\n if(recs.length!==1)receiptReason=recs.length>1?\"AMBIGUOUS_PRELEASE_RECEIPTS\":\"PRELEASE_RECEIPT_MISSING\";\n else{\n const x:any=recs[0];\n receiptReason=preleaseReceiptBindingReasonV1(job,x);\n if(receiptReason===\"OK\"){\n const fr:any=await tx.execute({sql:`SELECT * FROM ${q} WHERE id=?`,args:[String(x.rank1_id)]});\n const f:any=fr.rows?.[0]??null;\n if(f&&String(f.state)===\"READY\"&&String(f.op)===String(leader.op)&&String(f.payload_json)===String(leader.payload_json)&&Number(f.priority)===Number(leader.priority))followerId=String(f.id);\n else receiptReason=\"PRELEASE_FOLLOWER_NO_LONGER_EXACT_READY_MATCH\";\n }\n }\n }\n const lu:any=await tx.execute({sql:`UPDATE ${q}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(opts.expected.state),opts.expected.result_json??null,opts.expected.error_json??null,String(job.id),String(job.lease_owner),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n if(!(lu.rows||[]).length){await tx.rollback();done=true;return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"}}\n let followerCompleted=false;\n if(followerId){\n const fu:any=await tx.execute({sql:`UPDATE ${q} SET state='COMPLETE',result_json=?,error_json=NULL,updated_at=datetime('now') WHERE id=? AND state='READY' AND op=? AND payload_json=? AND priority=? RETURNING id`,\n args:[opts.expected.result_json,followerId,String(leader.op),String(leader.payload_json),Number(leader.priority)]});\n followerCompleted=(fu.rows||[]).length===1;\n }\n await tx.commit();done=true;\n return {ok:true,id:String(job.id),state:String(opts.expected.state),command,receipt_reason:receiptReason,follower_completed:followerCompleted,follower_id:followerCompleted?followerId:null};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\n\nfunction legacyEnvelope(v:any){return JSON.stringify({returncode:0,stderr:\"\",stdout:JSON.stringify(v)+\"\\n\"})}\nasync function sha256Text(s:string){\n const d=await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nasync function authority(){\n const r:any=await sqlite.execute(`SELECT epoch,writer,source_generation,source_head,mode,prepared_at,updated_at FROM ${AUTH_TABLE} WHERE id=1`);\n return r.rows?.[0]??null;\n}\nconst RESULT_FINALIZATION_HELPER_V1_SHA256=\"b82e4f00c3f7b3eb721871e780d0f7c43180e32516b9a5c87112a956e550677f\";\nconst RESULT_FINALIZATION_HELPER_V1_SOURCE=String.raw`// RESULT_FINALIZATION_EXACT_ATTEMPT_RECONCILIATION_V1\n// Candidate-only pure helper. It never dispatches/re-dispatches a Brain command.\n// Production integration supplies narrowly-scoped queue/authority/receipt operations.\n\nexport const READ_ONLY_COMMANDS_V1 = new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\n\nexport function canonV1(x) {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canonV1).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map(k => JSON.stringify(k) + \":\" + canonV1(x[k])).join(\",\") + \"}\";\n}\n\nexport function legacyEnvelopeV1(v) {\n return JSON.stringify({returncode:0, stderr:\"\", stdout:JSON.stringify(v) + \"\\n\"});\n}\n\nexport async function sha256TextV1(s) {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x => x.toString(16).padStart(2,\"0\")).join(\"\");\n}\n\nfunction errText(e) {\n return e instanceof Error ? e.message : String(e);\n}\n\nfunction authorityMatches(a, epoch, mode) {\n return !!a &&\n Number(a.epoch) === Number(epoch) &&\n String(a.writer) === \"val_native\" &&\n String(a.mode) === String(mode);\n}\n\nfunction expectedTerminal(dispatchOk, dispatchValue) {\n return dispatchOk\n ? {state:\"COMPLETE\", result_json:legacyEnvelopeV1(dispatchValue), error_json:null}\n : {state:\"FAILED\", result_json:null, error_json:JSON.stringify(dispatchValue)};\n}\n\nfunction sameNullable(a,b) {\n return (a ?? null) === (b ?? null);\n}\n\nfunction exactStaticJobBinding(row, job) {\n return !!row &&\n String(row.id) === String(job.id) &&\n String(row.op) === String(job.op) &&\n String(row.payload_json) === String(job.payload_json) &&\n Number(row.transport_lease_generation) === Number(job.transport_lease_generation);\n}\n\nfunction exactLiveAttempt(row, job) {\n return exactStaticJobBinding(row, job) &&\n String(row.lease_instance_id) === String(job.lease_instance_id) &&\n String(row.lease_attempt_id) === String(job.lease_attempt_id);\n}\n\nfunction exactTerminal(row, job, expected) {\n return exactLiveAttempt(row, job) &&\n String(row.state) === expected.state &&\n sameNullable(row.result_json, expected.result_json) &&\n sameNullable(row.error_json, expected.error_json) &&\n row.lease_owner == null &&\n row.lease_expires_at == null;\n}\n\nfunction leaseUnexpired(row, nowIso) {\n return !!row?.lease_expires_at && String(row.lease_expires_at) > String(nowIso);\n}\n\nfunction isExpiryUnknown(row) {\n if (!row || String(row.state) !== \"FAILED\" || row.result_json != null) return false;\n try {\n const e = JSON.parse(String(row.error_json || \"{}\"));\n return e?.classification === \"TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION\";\n } catch {\n return false;\n }\n}\n\nasync function exactReceipt(receipts, job, expectedEpoch, command, dispatchValue) {\n if (!Array.isArray(receipts) || receipts.length !== 1) return {ok:false, reason:receipts?.length > 1 ? \"AMBIGUOUS_MUTATION_RECEIPTS\" : \"MUTATION_RECEIPT_MISSING\"};\n const r = receipts[0];\n const payloadSha = await sha256TextV1(String(job.payload_json));\n if (String(r.job_id) !== String(job.id)) return {ok:false,reason:\"RECEIPT_JOB_MISMATCH\"};\n if (String(r.lease_attempt_id) !== String(job.lease_attempt_id)) return {ok:false,reason:\"RECEIPT_ATTEMPT_MISMATCH\"};\n if (String(r.lease_instance_id) !== String(job.lease_instance_id)) return {ok:false,reason:\"RECEIPT_INSTANCE_MISMATCH\"};\n if (String(r.lease_owner) !== String(job.lease_owner)) return {ok:false,reason:\"RECEIPT_OWNER_MISMATCH\"};\n if (Number(r.transport_lease_generation) !== Number(job.transport_lease_generation)) return {ok:false,reason:\"RECEIPT_GENERATION_MISMATCH\"};\n if (Number(r.authority_epoch) !== Number(expectedEpoch)) return {ok:false,reason:\"RECEIPT_AUTHORITY_EPOCH_MISMATCH\"};\n if (String(r.command) !== String(command)) return {ok:false,reason:\"RECEIPT_COMMAND_MISMATCH\"};\n if (String(r.payload_sha256) !== payloadSha) return {ok:false,reason:\"RECEIPT_PAYLOAD_MISMATCH\"};\n if (String(r.result_json) !== canonV1(dispatchValue)) return {ok:false,reason:\"RECEIPT_RESULT_MISMATCH\"};\n return {ok:true, receipt:r, payload_sha256:payloadSha};\n}\n\nasync function readOnlyStillFresh(command, preDispatchGeneration, deps) {\n if (!READ_ONLY_COMMANDS_V1.has(command)) return {ok:true};\n if (!Number.isInteger(preDispatchGeneration)) return {ok:false,reason:\"READ_ONLY_PRE_DISPATCH_GENERATION_REQUIRED\"};\n const g = await deps.readCanonicalGeneration();\n if (Number(g) !== Number(preDispatchGeneration)) return {ok:false,reason:\"READ_ONLY_CANONICAL_GENERATION_DRIFT\",expected:preDispatchGeneration,actual:Number(g)};\n return {ok:true};\n}\n\n/**\n * deps contract:\n * - readAuthority()\n * - readJob(id)\n * - readCanonicalGeneration()\n * - finishOncePreservingAttempt(job, expected) // exact attempt UPDATE; at most called twice total: initial + one retry\n * - readMutationReceipts(jobId, attemptId)\n * - finalizeExpiredMutationFromReceipt(job, expected, receipt)\n * - nowIso()\n *\n * No dispatch/re-dispatch function is accepted by this helper.\n */\nexport async function finalizeExactAttemptV1({\n job,\n expectedAuthorityEpoch,\n expectedAuthorityMode,\n command,\n dispatchOk,\n dispatchValue,\n preDispatchGeneration,\n deps,\n}) {\n const expected = expectedTerminal(dispatchOk, dispatchValue);\n const readOnly = READ_ONLY_COMMANDS_V1.has(command);\n const trace = [];\n let finishCalls = 0;\n\n const a0 = await deps.readAuthority();\n if (!authorityMatches(a0, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_PRE\",trace,finish_calls:finishCalls};\n }\n const fresh0 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh0.ok) return {...fresh0,trace,finish_calls:finishCalls};\n\n // Normal path. Candidate production finishOnce must preserve lease_instance_id and\n // lease_attempt_id on terminal rows so a client-unknown finish can be read back\n // as the exact attempt rather than merely the same job id.\n try {\n finishCalls++;\n const f = await deps.finishOncePreservingAttempt(job, expected);\n trace.push({phase:\"finish_initial\",returned:f});\n if (f?.ok === true) {\n const rb = await deps.readJob(job.id);\n if (!exactTerminal(rb,job,expected)) return {ok:false,reason:\"FINISH_SUCCESS_READBACK_MISMATCH\",trace,finish_calls:finishCalls};\n return {ok:true,reconciled:false,path:\"INITIAL_FINISH\",trace,finish_calls:finishCalls};\n }\n trace.push({phase:\"finish_initial_nonok\",value:f});\n } catch (e) {\n trace.push({phase:\"finish_initial_throw\",error:errText(e)});\n }\n\n // Outcome-aware reconciliation begins. Re-read authority after the uncertain client outcome.\n const a1 = await deps.readAuthority();\n if (!authorityMatches(a1, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_RECONCILE\",trace,finish_calls:finishCalls};\n }\n const fresh1 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh1.ok) return {...fresh1,trace,finish_calls:finishCalls};\n\n let row = await deps.readJob(job.id);\n if (!row || !exactStaticJobBinding(row,job)) {\n return {ok:false,reason:\"QUEUE_JOB_BINDING_MISMATCH\",trace,finish_calls:finishCalls};\n }\n\n // Case A: UPDATE committed but client threw. Terminal readback itself proves completion,\n // but only because candidate finish preserves exact attempt identity.\n if (exactTerminal(row,job,expected)) {\n return {ok:true,reconciled:true,path:\"TERMINAL_EXACT_READBACK\",trace,finish_calls:finishCalls};\n }\n\n // Case B: UPDATE did not commit. Retry the exact finish at most once, only while this\n // exact attempt is still leased and unexpired.\n if (String(row.state) === \"LEASED\" && exactLiveAttempt(row,job) && String(row.lease_owner) === String(job.lease_owner) && leaseUnexpired(row,deps.nowIso())) {\n try {\n finishCalls++;\n const f2 = await deps.finishOncePreservingAttempt(job, expected);\n trace.push({phase:\"finish_retry_once\",returned:f2});\n } catch (e) {\n trace.push({phase:\"finish_retry_once_throw\",error:errText(e)});\n }\n const fresh2 = await readOnlyStillFresh(command, preDispatchGeneration, deps);\n if (!fresh2.ok) return {...fresh2,trace,finish_calls:finishCalls};\n const rb2 = await deps.readJob(job.id);\n if (exactTerminal(rb2,job,expected)) {\n return {ok:true,reconciled:true,path:\"ONE_EXACT_FINISH_RETRY\",trace,finish_calls:finishCalls};\n }\n return {ok:false,reason:\"ONE_FINISH_RETRY_EXHAUSTED\",trace,finish_calls:finishCalls};\n }\n\n // Read-only results may never be resurrected after lease expiry/reassignment, and they\n // may never cross canonical generation drift.\n if (readOnly) {\n return {ok:false,reason:\"READ_ONLY_RESULT_NOT_SAFE_TO_RECONCILE\",trace,finish_calls:finishCalls};\n }\n\n // A mutation receipt is not a license to reinterpret a still-LEASED row from another\n // attempt/instance. Receipt-bound recovery below is only for the exact known\n // expiry-terminalization state, never for a live/reassigned lease.\n if (String(row.state) === \"LEASED\") {\n if (!exactLiveAttempt(row,job)) {\n return {ok:false,reason:\"LIVE_ATTEMPT_IDENTITY_MISMATCH\",trace,finish_calls:finishCalls};\n }\n return {ok:false,reason:\"LEASED_ATTEMPT_EXPIRED_OR_UNSAFE_AFTER_ONE_RETRY\",trace,finish_calls:finishCalls};\n }\n\n // Case C: mutation dispatch is canonically known from the exact bound receipt.\n // This may repair the historical FAILED/OUTCOME_UNKNOWN transport row without\n // re-dispatching the canonical mutation.\n if (dispatchOk !== true) {\n return {ok:false,reason:\"MUTATION_DISPATCH_EXCEPTION_HAS_NO_SAFE_RECEIPT_ASSUMPTION\",trace,finish_calls:finishCalls};\n }\n const receipts = await deps.readMutationReceipts(job.id,job.lease_attempt_id);\n const rr = await exactReceipt(receipts,job,expectedAuthorityEpoch,command,dispatchValue);\n if (!rr.ok) return {...rr,trace,finish_calls:finishCalls};\n\n // Only the exact known expiry terminalization is repairable after expiry. Transport\n // generation equality proves no later lease generation was issued for this job.\n if (!isExpiryUnknown(row) || Number(row.transport_lease_generation) !== Number(job.transport_lease_generation)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_ROW_NOT_ELIGIBLE\",trace,finish_calls:finishCalls};\n }\n if (row.lease_owner != null || row.lease_expires_at != null) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_ROW_STILL_OWNED\",trace,finish_calls:finishCalls};\n }\n // Historical recovery cleared attempt/instance. If present, they must still match.\n if (row.lease_attempt_id != null && String(row.lease_attempt_id) !== String(job.lease_attempt_id)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_ROW_ATTEMPT_CONFLICT\",trace,finish_calls:finishCalls};\n }\n if (row.lease_instance_id != null && String(row.lease_instance_id) !== String(job.lease_instance_id)) {\n return {ok:false,reason:\"EXPIRED_RECEIPT_ROW_INSTANCE_CONFLICT\",trace,finish_calls:finishCalls};\n }\n\n const rec = await deps.finalizeExpiredMutationFromReceipt(job,expected,rr.receipt);\n trace.push({phase:\"receipt_bound_expiry_recovery\",returned:rec});\n const a2 = await deps.readAuthority();\n if (!authorityMatches(a2, expectedAuthorityEpoch, expectedAuthorityMode)) {\n return {ok:false,reason:\"FINALIZE_AUTHORITY_FENCED_POST_RECEIPT\",trace,finish_calls:finishCalls};\n }\n const rb3 = await deps.readJob(job.id);\n if (!exactTerminal(rb3,job,expected)) {\n return {ok:false,reason:\"RECEIPT_RECOVERY_READBACK_MISMATCH\",trace,finish_calls:finishCalls};\n }\n return {ok:true,reconciled:true,path:\"EXACT_MUTATION_RECEIPT_EXPIRY_RECOVERY\",trace,finish_calls:finishCalls};\n}\n`;\nlet resultFinalizationHelperV1Promise:Promise|null=null;\nasync function resultFinalizationHelperV1(){\n const h=await sha256Text(RESULT_FINALIZATION_HELPER_V1_SOURCE);\n if(h!==RESULT_FINALIZATION_HELPER_V1_SHA256)throw new Error(\"RESULT_FINALIZATION_HELPER_INTEGRITY_MISMATCH\");\n if(!resultFinalizationHelperV1Promise){\n resultFinalizationHelperV1Promise=import(\"data:text/javascript;charset=utf-8,\"+encodeURIComponent(RESULT_FINALIZATION_HELPER_V1_SOURCE));\n }\n return await resultFinalizationHelperV1Promise;\n}\n\nasync function canonicalAnchor(){\n const r:any=await sqlite.execute(\"SELECT generation,event_head_hash FROM brainvn_epoch_meta WHERE id=1\");\n const row:any=r.rows?.[0]??null;\n const g=Number(row?.generation),head=String(row?.event_head_hash??\"\");\n if(!Number.isInteger(g)||g<0||!/^[0-9a-f]{64}$/.test(head))throw new Error(\"CANONICAL_ANCHOR_UNAVAILABLE\");\n return {generation:g,event_head_hash:head};\n}\nasync function canonicalGeneration(){return (await canonicalAnchor()).generation;}\nasync function normalizedFinalizationAuthority(){\n const g:any=await admit();\n if(g?.ok===true)return {epoch:Number(g.epoch),writer:\"val_native\",mode:String(g.mode)};\n const a:any=g?.authority??await authority();\n return {epoch:Number(a?.epoch),writer:String(a?.writer??\"\"),mode:String(a?.mode)===\"PREPARED\"?\"PREPARED_READ_ONLY\":String(a?.mode??\"\")};\n}\n\nasync function emitRuntimeTick(){\n const a:any=await authority();\n if(!a||String(a.writer)!==\"val_native\"||![\"ACTIVE\",\"PREPARED\"].includes(String(a.mode))){\n return {ok:false,emitted:false,reason:\"VAL_NATIVE_NOT_SELECTED\",authority:a??null};\n }\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${RUNTIME_TICK_TABLE}(\n id TEXT PRIMARY KEY,\n worker_id TEXT NOT NULL,\n instance_id TEXT NOT NULL,\n authority_epoch INTEGER NOT NULL,\n state TEXT NOT NULL,\n tick_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n metadata_json TEXT NOT NULL\n )`);\n const metadata=JSON.stringify({\n classification:\"NONAUTHORITY_EXECUTOR_RUNTIME_TICK\",\n grants_brain_authority:false,\n extends_canonical_lease:false,\n source:\"val_native_executor_prod.drain\"\n });\n await sqlite.execute({\n sql:`INSERT INTO ${RUNTIME_TICK_TABLE}(id,worker_id,instance_id,authority_epoch,state,tick_at,expires_at,metadata_json)\n VALUES('val-native-executor',?,?,?,'RUNNING',datetime('now'),datetime('now','+${RUNTIME_TICK_TTL_SECONDS} seconds'),?)\n ON CONFLICT(id) DO UPDATE SET\n worker_id=excluded.worker_id,\n instance_id=excluded.instance_id,\n authority_epoch=excluded.authority_epoch,\n state='RUNNING',\n tick_at=excluded.tick_at,\n expires_at=excluded.expires_at,\n metadata_json=excluded.metadata_json`,\n args:[WORKER,INSTANCE,Number(a.epoch),metadata]\n });\n return {ok:true,emitted:true,authority_epoch:Number(a.epoch),ttl_seconds:RUNTIME_TICK_TTL_SECONDS};\n}\nasync function admit(){\n const a:any=await authority();\n if(!a)return {ok:false,reason:\"AUTHORITY_UNINITIALIZED\",authority:null};\n if(String(a.writer)!==\"val_native\")return {ok:false,reason:\"WRITER_NOT_CANONICAL\",authority:a};\n const mode=String(a.mode);\n if(mode===\"ACTIVE\")return {ok:true,epoch:Number(a.epoch),mode:\"ACTIVE\",authority:a};\n if(mode===\"PREPARED\")return {ok:true,epoch:Number(a.epoch),mode:\"PREPARED_READ_ONLY\",authority:a};\n return {ok:false,reason:\"AUTHORITY_MODE_NOT_ADMITTED\",authority:a};\n}\nconst ACQUIRE_RECONCILE_ATTEMPTS_R2=3;\ntype LeaseReconcileResultR2=\n | {kind:\"leased\";job:any;epoch:number;mode:string;acquisition_reconciled:true;acquisition_error:string}\n | {kind:\"none\";attempt_id:string}\n | {kind:\"outcome_unknown\";attempt_id:string;errors:string[]};\nexport async function reconcileExactLeaseAttemptR2(\n attempt:string,\n expectedEpoch:number,\n expectedMode:string,\n acquisitionError:unknown,\n):Promise{\n const errors:string[]=[];\n for(let i=0;i=1\n AND lease_expires_at>datetime('now')\n ORDER BY id`,args:[WORKER,INSTANCE,attempt]});\n const rows:any[]=r.rows||[];\n if(rows.length===0)return {kind:\"none\",attempt_id:attempt};\n if(rows.length!==1){\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors:[...errors,`ATTEMPT_CARDINALITY_CONFLICT_${rows.length}`]};\n }\n const job=rows[0];\n if(String(job.lease_instance_id)!==INSTANCE||String(job.lease_attempt_id)!==attempt||Number(job.transport_lease_generation)<1){\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors:[...errors,\"ATTEMPT_IDENTITY_POSTCONDITION_FAILED\"]};\n }\n return {\n kind:\"leased\",\n job,\n epoch:expectedEpoch,\n mode:expectedMode,\n acquisition_reconciled:true,\n acquisition_error:acquisitionError instanceof Error?acquisitionError.message:String(acquisitionError),\n };\n }catch(e){\n errors.push(e instanceof Error?e.message:String(e));\n }\n }\n return {kind:\"outcome_unknown\",attempt_id:attempt,errors};\n}\nasync function recoverExpiredTransport(){\n const tx:any=await (sqlite as any).transaction(\"write\");let done=false;\n try{\n const r:any=await tx.execute(`SELECT id,op,payload_json,lease_owner,lease_instance_id,lease_attempt_id,transport_lease_generation,lease_expires_at\n FROM ${JOB_TABLE} WHERE state='LEASED' AND lease_expires_at IS NOT NULL AND lease_expires_at<=datetime('now') ORDER BY id`);\n const outcomes:any[]=[];\n for(const j of (r.rows||[])){\n const u:any=await tx.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='FAILED',result_json=NULL,\n error_json=json_object(\n 'classification','TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION',\n 'receipt_policy','SIDE_RECEIPTS_DIAGNOSTIC_ONLY_NOT_COMPLETION_AUTHORITY',\n 'retry_policy','RECONCILE_CANONICAL_STATE_THEN_NEW_JOB_ID'\n ),\n lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner IS ? AND lease_instance_id IS ? AND lease_attempt_id IS ? AND transport_lease_generation=? AND lease_expires_at<=datetime('now')\n RETURNING id`,\n args:[j.id,j.lease_owner,j.lease_instance_id,j.lease_attempt_id,j.transport_lease_generation]});\n if((u.rows||[]).length)outcomes.push({id:j.id,state:\"FAILED\",reconciled_from_receipt:false,outcome_unknown:true});\n }\n await tx.commit();done=true;return{ok:true,outcomes};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nasync function activeLeases(){\n const r:any=await sqlite.execute(`SELECT id,lease_owner,lease_instance_id,lease_attempt_id,lease_expires_at\n FROM ${JOB_TABLE} WHERE state='LEASED' AND lease_expires_at>datetime('now') ORDER BY id`);\n return r.rows||[];\n}\nfunction atomicizeLeaseSql(sql:string){\n const setNeedle=`SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),updated_at=datetime('now')`;\n const retNeedle=\"RETURNING id,op,payload_json,priority,lease_expires_at\";\n if(sql.split(setNeedle).length!==2)throw new Error(\"ATOMIC_LEASE_SET_SHAPE_DRIFT\");\n if(sql.split(retNeedle).length!==2)throw new Error(\"ATOMIC_LEASE_RETURNING_SHAPE_DRIFT\");\n return sql.replace(setNeedle,`SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')`)\n .replace(retNeedle,\"RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id\");\n}\nasync function leaseOne(){\n const gate=await admit();if(!gate.ok)return {kind:\"fenced\",gate} as const;\n await recoverExpiredTransport();\n const active=await activeLeases();\n if(active.length>1)return {kind:\"conflict\",active} as const;\n if(active.length===1)return {kind:\"busy\",active:active[0]} as const;\n const preparedReadOnly=gate.mode===\"PREPARED_READ_ONLY\";\n const attempt=crypto.randomUUID();\n const expectedMode=String(gate.mode);\n let core:any;\n try{\n if(!preparedReadOnly&&!EMERGENCY_MUTATIONS_FROZEN&&PRELEASE_READ_COALESCE_V1_ENABLED){\n const acq:any=await acquireWithPreleaseRankReceiptV1(sqlite,{worker:WORKER,instance:INSTANCE,attempt});\n if(acq.kind===\"leased\"){\n const j:any=acq.job;\n if(String(j.lease_instance_id)!==INSTANCE||String(j.lease_attempt_id)!==attempt||Number(j.transport_lease_generation)<1)throw new Error(\"LEASE_ATTEMPT_ATOMICITY_POSTCONDITION_FAILED\");\n return {kind:\"leased\",job:j,epoch:gate.epoch,mode:expectedMode,prelease_receipt:{rank0:acq.rank0,rank1:acq.rank1,rank_snapshot_sha256:acq.rank_snapshot_sha256}} as const;\n }\n return acq;\n }\n core=preparedReadOnly\n ? await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=(\n SELECT j.id FROM ${JOB_TABLE} j\n WHERE j.state='READY' AND j.op='brain'\n AND json_valid(j.payload_json)=1\n AND json_type(j.payload_json,'$.args')='array'\n AND json_array_length(json_extract(j.payload_json,'$.args'))=1\n AND json_extract(j.payload_json,'$.args[0]') IN ('status','verify-chain','verify-claim-graph')\n AND json_type(j.payload_json,'$.timeout')='integer'\n AND json_extract(j.payload_json,'$.timeout') BETWEEN 1 AND 120\n AND (SELECT COUNT(*) FROM json_each(j.payload_json))=2\n AND NOT EXISTS(\n SELECT 1 FROM ${JOB_TABLE} x\n WHERE x.state='LEASED' AND x.lease_expires_at>datetime('now')\n )\n ORDER BY\n CASE json_extract(j.payload_json,'$.args[0]')\n WHEN 'status' THEN 0\n WHEN 'verify-chain' THEN 1\n WHEN 'verify-claim-graph' THEN 2\n ELSE 3\n END,\n CASE WHEN j.priority>1000000000 THEN 1000000000 ELSE j.priority END DESC,\n j.created_at,j.id\n LIMIT 1\n )\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[WORKER,INSTANCE,attempt]})\n : EMERGENCY_MUTATIONS_FROZEN\n ? await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+${LEASE_SECONDS} seconds'),\n transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='READY'\n AND NOT EXISTS(\n SELECT 1 FROM ${JOB_TABLE}\n WHERE state='LEASED' AND lease_owner=? AND lease_expires_at>datetime('now')\n )\n RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id`,\n args:[WORKER,INSTANCE,attempt,EMERGENCY_MUTATION_CANARY_JOB_ID,WORKER]})\n : await sqlite.execute({sql:atomicizeLeaseSql(leaseOneSql(JOB_TABLE)),args:[WORKER,INSTANCE,attempt,WORKER]});\n }catch(e){\n const rr=await reconcileExactLeaseAttemptR2(attempt,gate.epoch,expectedMode,e);\n if(rr.kind===\"leased\")return rr;\n if(rr.kind===\"none\")return {\n kind:\"acquisition_failed_no_bound_lease\",\n attempt_id:attempt,\n reason:e instanceof Error?e.message:String(e),\n } as const;\n return {kind:\"acquisition_outcome_unknown\",attempt_id:attempt,errors:rr.errors} as const;\n }\n const j:any=core.rows?.[0]??null;if(!j)return {kind:\"empty\"} as const;\n if(String(j.lease_instance_id)!==INSTANCE||String(j.lease_attempt_id)!==attempt||Number(j.transport_lease_generation)<1)throw new Error(\"LEASE_ATTEMPT_ATOMICITY_POSTCONDITION_FAILED\");\n return {kind:\"leased\",job:j,epoch:gate.epoch,mode:expectedMode} as const;\n}\nasync function readQueueJob(id:string){\n const r:any=await sqlite.execute({sql:`SELECT * FROM ${JOB_TABLE} WHERE id=?`,args:[id]});\n return r.rows?.[0]??null;\n}\nasync function finishOncePreservingAttempt(job:any,expected:any){\n if(PRELEASE_READ_COALESCE_V1_ENABLED&&expected?.state===\"COMPLETE\"&&expected?.error_json==null&&typeof expected?.result_json===\"string\"&&classifyValNativeCoalesceResultV1(expected.result_json)){\n return await finalizeLeaderOptionalPreleaseFollowerV1(sqlite,{job:{...job,lease_owner:String(job.lease_owner||WORKER)},expected});\n }\n const r:any=await sqlite.execute({sql:`UPDATE ${JOB_TABLE}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now')\n WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? AND lease_expires_at>datetime('now')\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(expected.state),expected.result_json??null,expected.error_json??null,job.id,String(job.lease_owner||WORKER),String(job.lease_instance_id),String(job.lease_attempt_id),Number(job.transport_lease_generation),String(job.op),String(job.payload_json)]});\n if(!(r.rows||[]).length)return {ok:false,reason:\"RESULT_FENCE_REJECTED_CURRENT_ATTEMPT\"};\n return {ok:true,id:job.id,state:String(expected.state)};\n}\nasync function readMutationReceiptsExact(jobId:string,attemptId:string){\n await ensureMutationReceiptTable();\n const r:any=await sqlite.execute({sql:`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at\n FROM ${MUTATION_RECEIPT_TABLE}\n WHERE job_id=? AND lease_attempt_id=?\n ORDER BY committed_at,job_id,lease_attempt_id`,args:[jobId,attemptId]});\n return r.rows||[];\n}\nfunction sameReceiptRow(a:any,b:any){\n const keys=[\"job_id\",\"lease_attempt_id\",\"lease_instance_id\",\"lease_owner\",\"transport_lease_generation\",\"authority_epoch\",\"command\",\"payload_sha256\",\"committed_generation\",\"event_head_hash\",\"result_json\",\"committed_at\"];\n return keys.every(k=>String(a?.[k]??\"\")===String(b?.[k]??\"\"));\n}\nasync function finalizeExpiredMutationFromReceiptExact(job:any,expected:any,receipt:any){\n await ensureMutationReceiptTable();\n const tx:any=await (sqlite as any).transaction(\"write\");let done=false;\n try{\n const rr:any=await tx.execute({sql:`SELECT job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at\n FROM ${MUTATION_RECEIPT_TABLE} WHERE job_id=? AND lease_attempt_id=?`,args:[String(job.id),String(job.lease_attempt_id)]});\n const rows:any[]=rr.rows||[];\n if(rows.length!==1||!sameReceiptRow(rows[0],receipt)){\n await tx.rollback();done=true;\n return {ok:false,reason:rows.length>1?\"AMBIGUOUS_MUTATION_RECEIPTS\":\"MUTATION_RECEIPT_CHANGED_OR_MISSING\"};\n }\n const u:any=await tx.execute({sql:`UPDATE ${JOB_TABLE}\n SET state=?,result_json=?,error_json=?,lease_owner=NULL,lease_expires_at=NULL,\n lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now')\n WHERE id=? AND state='FAILED' AND op=? AND payload_json=? AND transport_lease_generation=?\n AND result_json IS NULL AND lease_owner IS NULL AND lease_expires_at IS NULL\n AND (lease_instance_id IS NULL OR lease_instance_id=?)\n AND (lease_attempt_id IS NULL OR lease_attempt_id=?)\n AND json_valid(error_json)=1\n AND json_extract(error_json,'$.classification')='TRANSPORT_LEASE_EXPIRED_OUTCOME_UNKNOWN_REQUIRES_CANONICAL_RECONCILIATION'\n RETURNING id,state,lease_instance_id,lease_attempt_id,transport_lease_generation`,\n args:[String(expected.state),expected.result_json??null,expected.error_json??null,String(job.lease_instance_id),String(job.lease_attempt_id),\n String(job.id),String(job.op),String(job.payload_json),Number(job.transport_lease_generation),String(job.lease_instance_id),String(job.lease_attempt_id)]});\n if((u.rows||[]).length!==1){\n await tx.rollback();done=true;\n return {ok:false,reason:\"EXPIRED_RECEIPT_RECOVERY_UPDATE_REJECTED\"};\n }\n await tx.commit();done=true;\n return {ok:true,receipt_job_id:String(receipt.job_id)};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}throw e}\n}\nasync function finalizeJobExactAttempt(job:any,epoch:number,mode:string,command:string,dispatchOk:boolean,dispatchValue:any,preDispatchGeneration:number|undefined){\n const helper:any=await resultFinalizationHelperV1();\n const boundJob={...job,lease_owner:WORKER,lease_instance_id:String(job.lease_instance_id),lease_attempt_id:String(job.lease_attempt_id)};\n return await helper.finalizeExactAttemptV1({\n job:boundJob,\n expectedAuthorityEpoch:Number(epoch),\n expectedAuthorityMode:String(mode),\n command:String(command),\n dispatchOk:dispatchOk===true,\n dispatchValue,\n preDispatchGeneration,\n deps:{\n readAuthority:normalizedFinalizationAuthority,\n readJob:readQueueJob,\n readCanonicalGeneration:canonicalGeneration,\n finishOncePreservingAttempt,\n readMutationReceipts:readMutationReceiptsExact,\n finalizeExpiredMutationFromReceipt:finalizeExpiredMutationFromReceiptExact,\n nowIso:()=>new Date().toISOString().replace(\"Z\",\"+00:00\")\n }\n });\n}\nconst CHAIN_FAILURE_READ_ONLY=new Set([\"status\",\"verify-chain\",\"verify-claim-graph\"]);\nconst EMERGENCY_MUTATIONS_FROZEN=false; // Six-core reactivation only; kernel allowlist still fences every unqualified mutator.\nconst EMERGENCY_MUTATION_CANARY_JOB_ID=\"chat-sol-20260907-1528-boundcanary-register\";\nfunction brainCommand(raw:string){\n try{const p=JSON.parse(raw);return Array.isArray(p?.args)?String(p.args[0]||\"\"):\"\"}catch{return \"\"}\n}\nasync function chainCircuitBreaker(raw:string,jobId:string){\n const command=brainCommand(raw);\n if(CHAIN_FAILURE_READ_ONLY.has(command))return {allow:true,command,integrity:null};\n const emergencyCanary=EMERGENCY_MUTATIONS_FROZEN&&jobId===EMERGENCY_MUTATION_CANARY_JOB_ID&&command===\"register-agent\";\n if(EMERGENCY_MUTATIONS_FROZEN&&!emergencyCanary)return {allow:false,command,integrity:{ok:false,reason:\"EPOCH2_MUTATIONS_EMERGENCY_FROZEN_PENDING_ATOMICITY_REPAIR\"}};\n let chain:any,graph:any;\n try{chain=await verifyBrainChain()}\n catch(e){return {allow:false,command,integrity:{ok:false,reason:\"VERIFY_CHAIN_EXCEPTION\",detail:e instanceof Error?e.message:String(e)}}}\n if(chain?.ok!==true)return {allow:false,command,integrity:{chain,graph:null}};\n try{graph=await verifyBrainClaimGraph()}\n catch(e){return {allow:false,command,integrity:{ok:false,reason:\"VERIFY_CLAIM_GRAPH_EXCEPTION\",detail:e instanceof Error?e.message:String(e),chain}}}\n if(graph?.ok!==true)return {allow:false,command,integrity:{chain,graph}};\n return {allow:true,command,integrity:{chain,graph}};\n}\nfunction parseArr(v:any){try{const x=JSON.parse(String(v??\"[]\"));return Array.isArray(x)?x:[]}catch{return []}}\nasync function localCommitSnapshot(taskId:string,agent:string){\n const t:any=(await sqlite.execute({sql:`SELECT id,workstream,state,lease_owner,lease_generation,lease_expires_at,context_manifest,success_condition,decision_value,depends_json,requires_json,writes_json,guards_json\n FROM brainvn_tasks WHERE id=?`,args:[taskId]})).rows?.[0]??null;\n if(!t)return{ok:false,reason:\"TASK_MISSING\"};\n if(String(t.state)!==\"LEASED\"||String(t.lease_owner)!==agent)return{ok:false,reason:\"LEASE_CHANGED\",task:t};\n if(t.lease_expires_at&&String(t.lease_expires_at)<=new Date().toISOString().replace(\"Z\",\"+00:00\"))return{ok:false,reason:\"LEASE_EXPIRED\",task:t};\n const deps=parseArr(t.depends_json),guards=parseArr(t.guards_json);\n const depRows:any[]=[];\n for(const id of deps){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,state,result_event_id FROM brainvn_tasks WHERE id=?\",args:[String(id)]})).rows?.[0]??null;\n depRows.push(r??{id:String(id),state:\"MISSING\"});\n }\n const guardRows:any[]=[];\n let retryGuardSnapshotComplete=true;\n for(const g of guards){\n if(g?.type===\"task_complete\"){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,state,result_event_id FROM brainvn_tasks WHERE id=?\",args:[String(g.id)]})).rows?.[0]??null;\n guardRows.push({guard:g,resolved:r??{id:String(g.id),state:\"MISSING\"}});\n }else if(g?.type===\"claim_verified\"){\n const r:any=(await sqlite.execute({sql:\"SELECT id,workstream,status,updated_at FROM brainvn_claims WHERE id=?\",args:[String(g.id)]})).rows?.[0]??null;\n guardRows.push({guard:g,resolved:r??{id:String(g.id),status:\"MISSING\"}});\n }else{\n retryGuardSnapshotComplete=false;\n guardRows.push({guard:g,resolved:null});\n }\n }\n const ws:any=(await sqlite.execute({sql:\"SELECT id,mission,verified_state FROM brainvn_workstreams WHERE id=?\",args:[String(t.workstream)]})).rows?.[0]??null;\n const stable={\n task:{id:t.id,workstream:t.workstream,state:t.state,lease_owner:t.lease_owner,lease_generation:t.lease_generation,\n context_manifest:t.context_manifest,success_condition:t.success_condition,decision_value:t.decision_value,\n depends_json:t.depends_json,requires_json:t.requires_json,writes_json:t.writes_json,guards_json:t.guards_json},\n dependencies:depRows,guards:guardRows,workstream_semantics:ws\n };\n return{ok:true,stable,lease_expires_at:t.lease_expires_at,workstream:String(t.workstream),retry_guard_snapshot_complete:retryGuardSnapshotComplete};\n}\nfunction sameSnapshot(a:any,b:any){return JSON.stringify(a?.stable)===JSON.stringify(b?.stable)}\nfunction mutationFields(args:any[]){\n let agent=\"\",task=\"\";\n for(let i=1;i{\n let found:number|null=null;\n for(let i=1;iJSON.stringify(k)+\":\"+cohortCanon(x[k])).join(\",\")+\"}\";\n}\nfunction cohortStrictJson(s:any,kind:string){\n try{return JSON.parse(String(s))}\n catch{throw new Error(\"COHORT_BAD_JSON_\"+kind)}\n}\nfunction cohortStrictObjectJson(s:any,kind:string){\n const v=cohortStrictJson(s,kind);\n if(!v||typeof v!==\"object\"||Array.isArray(v))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_OBJECT\");\n return v;\n}\nfunction cohortStrictListJson(s:any,kind:string){\n const v=cohortStrictJson(s,kind);\n if(!Array.isArray(v))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_LIST\");\n return v;\n}\nfunction cohortStrictStringListJson(s:any,kind:string){\n const v=cohortStrictListJson(s,kind);\n if(v.some((x:any)=>typeof x!==\"string\"||!x))throw new Error(\"COHORT_\"+kind+\"_MUST_BE_STRING_LIST\");\n return v;\n}\nfunction cohortCleanCaps(x:any){\n if(!Array.isArray(x)||x.some(v=>typeof v!==\"string\"||!v))throw new Error(\"COHORT_BAD_CAPS\");\n return [...new Set(x)].sort();\n}\nfunction cohortFlagMap(args:any[],start:number,allowed:Set){\n if(!Array.isArray(args)||args.some(x=>typeof x!==\"string\"))return null;\n if((args.length-start)%2!==0)return null;\n const out:any={};\n for(let i=start;i=args.length)return null;\n const name=k.slice(2);\n if(!allowed.has(name)||Object.prototype.hasOwnProperty.call(out,name))return null;\n out[name]=String(args[i+1]);\n }\n return out;\n}\nfunction cohortExactEnvelope(row:any){\n if(String(row?.op)!==\"brain\")return null;\n let q:any;\n try{q=JSON.parse(String(row.payload_json))}\n catch{return null}\n if(!q||typeof q!==\"object\"||Array.isArray(q))return null;\n const keys=Object.keys(q).sort();\n if(keys.length!==2||keys[0]!==\"args\"||keys[1]!==\"timeout\")return null;\n if(!Array.isArray(q.args)||!Number.isInteger(q.timeout)||q.timeout<1||q.timeout>120)return null;\n return q;\n}\nfunction cohortParseRegister(row:any){\n const q=cohortExactEnvelope(row);if(!q||q.args[0]!==\"register-agent\"||typeof q.args[1]!==\"string\"||!q.args[1])return null;\n const f=cohortFlagMap(q.args,2,new Set([\"workstream\",\"role\",\"type\",\"capabilities\"]));if(!f)return null;\n if(f.workstream!==\"global\"||!f.role||f.type!==\"CHAT_UNPROVEN\"||typeof f.capabilities!==\"string\")return null;\n let caps:any;try{caps=cohortCleanCaps(JSON.parse(f.capabilities))}catch{return null}\n return {row,q,member:{id:String(q.args[1]),workstream:\"global\",role:String(f.role),type:\"CHAT_UNPROVEN\",parent:null,capabilities:caps}};\n}\nfunction cohortParseClaim(row:any,agentId:string){\n const q=cohortExactEnvelope(row);if(!q||q.args[0]!==\"claim\")return null;\n const f=cohortFlagMap(q.args,1,new Set([\"agent\",\"mode\",\"lease-seconds\",\"constitution-version\",\"constitution-sha256\",\"registry-version\"]));if(!f)return null;\n if(f.agent!==agentId)return null;\n if(f.mode!==undefined&&f.mode!==\"INTERACTIVE\")return null;\n if(f[\"lease-seconds\"]!==undefined&&f[\"lease-seconds\"]!==\"1800\")return null;\n return {row,q};\n}\nfunction cohortIndependenceSensitive(req:Set,ctx:any){\n if(req.has(\"independent_verification\"))return true;\n const flags=[\n \"identity_gate_pending\",\"prevent_self_review\",\"self_certification_forbidden\",\n \"physical_chat_execution_distinctness_required\",\"reviewer_must_be_distinct\",\n \"reviewer_must_be_distinct_from_refresh_executor\",\"reviewer_must_be_physically_distinct\",\n \"reviewer_must_be_physically_distinct_chat_execution\",\"reviewer_must_differ\",\n \"reviewer_must_differ_from_builder\",\"reviewer_must_differ_from_source_contributors\",\n \"reviewer_population_must_be_distinct\",\"do_not_infer_distinctness_from_agent_id\"\n ];\n if(flags.some(k=>ctx?.[k]===true))return true;\n return ctx?.if_distinctness_not_positively_proven===\"DO_NOT_CLAIM_THIS_TASK\";\n}\nasync function cohortTxRows(tx:any,sql:string,args:any[]=[]){\n const r:any=await tx.execute({sql,args});return r.rows||[];\n}\nasync function cohortTxOne(tx:any,sql:string,args:any[]=[]){\n return (await cohortTxRows(tx,sql,args))[0]??null;\n}\nasync function cohortSnapshot(tx:any){\n return {\n workstreams:await cohortTxRows(tx,\"SELECT * FROM brainvn_workstreams ORDER BY id\"),\n agents:await cohortTxRows(tx,\"SELECT * FROM brainvn_agents ORDER BY id\"),\n tasks:await cohortTxRows(tx,\"SELECT * FROM brainvn_tasks ORDER BY id\"),\n claims:await cohortTxRows(tx,\"SELECT * FROM brainvn_claims ORDER BY id\"),\n deps:await cohortTxRows(tx,\"SELECT * FROM brainvn_claim_deps ORDER BY parent_claim,child_claim\"),\n artifacts:await cohortTxRows(tx,\"SELECT * FROM brainvn_artifacts ORDER BY sha256\")\n };\n}\nfunction cohortParseTask(t:any){\n return {\n row:t,\n ctx:cohortStrictObjectJson(t.context_manifest,\"CTX\"),\n req:cohortStrictStringListJson(t.requires_json,\"REQ\"),\n deps:cohortStrictListJson(t.depends_json,\"DEPS\"),\n guards:cohortStrictListJson(t.guards_json,\"GUARDS\"),\n writes:cohortStrictStringListJson(t.writes_json,\"WRITES\")\n };\n}\nfunction cohortOverlap(a:string[],b:string[]){const B=new Set(b);return a.some(x=>B.has(x))}\nasync function cohortActivationOk(tx:any){\n const meta:any=await cohortTxOne(tx,\"SELECT predecessor_event_count FROM brainvn_epoch_meta WHERE id=1\");\n const t:any=await cohortTxOne(tx,\"SELECT state,result_event_id FROM brainvn_tasks WHERE id=?\",[COHORT_ADMISSION_FASTPATH_V3R2R1_ACTIVATION_TASK]);\n if(!meta||!t||String(t.state)!==\"COMPLETE\"||!Number.isInteger(Number(t.result_event_id)))return false;\n const localSeq=Number(t.result_event_id)-Number(meta.predecessor_event_count);\n if(!Number.isInteger(localSeq)||localSeq<1)return false;\n const ev:any=await cohortTxOne(tx,\"SELECT agent_id,type,task_id FROM brainvn_epoch_events WHERE local_seq=?\",[localSeq]);\n if(!ev||String(ev.type)!==\"TASK_RESULT_COMMITTED\"||String(ev.task_id)!==COHORT_ADMISSION_FASTPATH_V3R2R1_ACTIVATION_TASK||!ev.agent_id)return false;\n const a:any=await cohortTxOne(tx,\"SELECT type FROM brainvn_agents WHERE id=?\",[String(ev.agent_id)]);\n return !!a&&String(a.type)!==\"CHAT_UNPROVEN\";\n}\nfunction cohortOrderedReadySql(){\n const raw=leaseOneSql(JOB_TABLE);\n const start=raw.indexOf(\"SELECT j.id FROM \");\n const limit=raw.indexOf(\"LIMIT 1\",start);\n if(start<0||limit<0)throw new Error(\"COHORT_LEASE_ORDER_SHAPE_DRIFT\");\n let inner=raw.slice(start,limit)+\"LIMIT \"+COHORT_ADMISSION_FASTPATH_V3R2R1_SCAN_JOBS;\n inner=inner.replace(\"SELECT j.id FROM \",\"SELECT j.rowid AS queue_rowid,j.* FROM \");\n const qCount=(inner.match(/\\?/g)||[]).length;\n if(qCount!==1)throw new Error(\"COHORT_LEASE_ORDER_PLACEHOLDER_DRIFT_\"+qCount);\n return inner;\n}\nasync function cohortBaseReceipt(){\n const chain:any=await verifyBrainChain();\n if(chain?.ok!==true)return {ok:false,reason:\"CHAIN_NOT_VERIFIED\",chain};\n const graph:any=await verifyBrainClaimGraph();\n if(graph?.ok!==true)return {ok:false,reason:\"CLAIM_GRAPH_NOT_VERIFIED\",graph};\n const tx:any=await (sqlite as any).transaction(\"read\");let done=false;\n try{\n const meta:any=await cohortTxOne(tx,\"SELECT generation,event_head_hash FROM brainvn_epoch_meta WHERE id=1\");\n const authority:any=await cohortTxOne(tx,\"SELECT epoch,writer,mode,source_generation,source_head FROM \"+AUTH_TABLE+\" WHERE id=1\");\n const state=await cohortSnapshot(tx);\n const digest=await sha256Text(cohortCanon(state));\n if(!meta||Number(meta.generation)!==Number(chain.generation)||String(meta.event_head_hash)!==String(chain.stored_head)){\n await tx.rollback();done=true;return {ok:false,reason:\"CHAIN_RECEIPT_STALE\"};\n }\n if(!authority||String(authority.writer)!==\"val_native\"||String(authority.mode)!==\"ACTIVE\"){\n await tx.rollback();done=true;return {ok:false,reason:\"AUTHORITY_NOT_ACTIVE\"};\n }\n await tx.commit();done=true;\n return {ok:true,generation:Number(meta.generation),head:String(meta.event_head_hash),admission_digest:digest,\n authority:{epoch:Number(authority.epoch),writer:String(authority.writer),mode:String(authority.mode),\n source_generation:Number(authority.source_generation),source_head:String(authority.source_head)}};\n }catch(e){if(!done){try{await tx.rollback()}catch{}}return {ok:false,reason:e instanceof Error?e.message:String(e)}}\n}\nfunction cohortEventBody(e:any){\n return cohortCanon({event_uuid:e.event_uuid,ts:e.ts,workstream:e.workstream,agent_id:e.agent_id,task_id:e.task_id,type:e.type,payload:e.payload,prev_hash:e.prev_hash});\n}\nasync function cohortEventHash(e:any){return await sha256Text(cohortEventBody(e))}\nfunction cohortNow(ms=Date.now()){return new Date(ms).toISOString().replace(\"Z\",\"+00:00\")}\nasync function tryCohortAdmissionFastpathV3R2R1(maxPairs:number){\n if(!COHORT_ADMISSION_FASTPATH_V3R2R1_ENABLED||maxPairsdatetime('now') ORDER BY id LIMIT 2\");\n if(activeInside.length){await tx.rollback();done=true;return {kind:\"not_applicable\"} as const}\n const meta:any=await cohortTxOne(tx,\"SELECT * FROM brainvn_epoch_meta WHERE id=1\");\n const ws:any=await cohortTxOne(tx,\"SELECT * FROM brainvn_workstreams WHERE id='global'\");\n const state=await cohortSnapshot(tx);\n const digest=await sha256Text(cohortCanon(state));\n if(!meta||!ws||Number(meta.generation)!==Number(base.generation)||String(meta.event_head_hash)!==String(base.head)||digest!==String(base.admission_digest)){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_BASE_DRIFT\"} as const;\n }\n if(!(await cohortActivationOk(tx))){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_ACTIVATION_NOT_VERIFIED\"} as const;\n }\n const ordered:any[]=await cohortTxRows(tx,cohortOrderedReadySql(),[WORKER]);\n const pairs:any[]=[];const seen=new Set();\n const pairCap=Math.min(COHORT_ADMISSION_FASTPATH_V3R2R1_MAX_PAIRS,maxPairs);\n for(let i=0;i+1[String(a.id),a]));\n for(const p of pairs)if(existing.has(p.reg.member.id)){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_EXISTING_AGENT\"} as const;\n }\n let ready:any[],leased:any[];\n try{\n ready=state.tasks.filter((t:any)=>String(t.workstream)===\"global\"&&String(t.state)===\"READY\")\n .sort((a:any,b:any)=>Number(b.priority)-Number(a.priority)||String(a.id).localeCompare(String(b.id)))\n .map((t:any)=>cohortParseTask(t));\n leased=state.tasks.filter((t:any)=>String(t.state)===\"LEASED\").map((t:any)=>cohortParseTask(t));\n }catch{\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_SCHEDULER_SHAPE_FALLBACK\"} as const;\n }\n const used=new Set(),activeWrites:string[][]=leased.map((p:any)=>p.writes),assignments:any[]=[];\n for(const p of pairs){\n const m=p.reg.member,C=new Set(m.capabilities);let chosen:any=null;\n for(const t0 of ready){\n const t=t0.row;\n if(used.has(String(t.id)))continue;\n if(!t.dedupe_key)continue;\n if(t.assigned_agent!==null&&String(t.assigned_agent)!==m.id)continue;\n if(t0.ctx.execution_allowed===false)continue;\n const sensitive=cohortIndependenceSensitive(new Set(t0.req),t0.ctx);\n if(sensitive&&(m.type===\"CHAT_UNPROVEN\"||COHORT_EXECUTION_DISTINCT_INGRESS_QUALIFIED!==true))continue;\n if(t0.req.some((x:string)=>COHORT_NON_AGENT_CAPS.has(x)))continue;\n if(t0.req.some((x:string)=>!C.has(x)))continue;\n if(t0.deps.length||t0.guards.length){\n await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_DYNAMIC_CAUSAL_FALLBACK\"} as const;\n }\n if(activeWrites.some((x:string[])=>cohortOverlap(t0.writes,x)))continue;\n chosen=t0;used.add(String(t.id));activeWrites.push(t0.writes);break;\n }\n if(!chosen){await tx.rollback();done=true;return {kind:\"not_applicable\",reason:\"COHORT_NO_READY_FALLBACK\"} as const}\n assignments.push({pair:p,member:m,task:chosen});\n }\n\n const queueAttempts:any[]=[];\n for(const a of assignments){\n for(const kind of [\"reg\",\"claim\"]){\n const qr=a.pair[kind].row,attempt=crypto.randomUUID();\n const u:any=await tx.execute({sql:\"UPDATE \"+JOB_TABLE+\" SET state='LEASED',lease_owner=?,lease_expires_at=datetime('now','+\"+LEASE_SECONDS+\" seconds'),transport_lease_generation=transport_lease_generation+1,lease_instance_id=?,lease_attempt_id=?,updated_at=datetime('now') WHERE rowid=? AND id=? AND state='READY' AND op=? AND payload_json=? RETURNING id,op,payload_json,priority,lease_expires_at,transport_lease_generation,lease_instance_id,lease_attempt_id\",\n args:[WORKER,INSTANCE,attempt,Number(qr.queue_rowid),String(qr.id),String(qr.op),String(qr.payload_json)]});\n const row:any=u.rows?.[0]??null;if(!row)throw new Error(\"COHORT_QUEUE_CAS_FAILED_\"+String(qr.id));\n queueAttempts.push({...row,kind,agent_id:a.member.id});\n }\n }\n\n const startGen=Number(meta.generation),startHead=String(meta.event_head_hash);\n let g=startGen,head=startHead;\n const maxSeq:any=await cohortTxOne(tx,\"SELECT COALESCE(MAX(local_seq),0) n FROM brainvn_epoch_events\");\n let seq=Number(maxSeq?.n??0);\n const events:any[]=[],agents:any[]=[],taskUpdates:any[]=[],results:any[]=[];\n const baseMs=Date.now();\n for(let i=0;iArray.from({length:count},()=>(\"(\" + Array.from({length:n},()=>\"?\").join(\",\") + \")\")).join(\",\");\n const aArgs:any[]=[];for(const a of agents)aArgs.push(a.id,a.parent_id,a.type,a.workstream,a.role,a.status,a.boot_generation,a.last_generation,a.last_seen,a.capabilities_json);\n await tx.execute({sql:\"INSERT INTO brainvn_agents(id,parent_id,type,workstream,role,status,boot_generation,last_generation,last_seen,capabilities_json) VALUES \"+valueRows(10,agents.length),args:aArgs});\n const taskIds=taskUpdates.map(x=>x.id);\n const ownerCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),genCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),expCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \"),updCase=taskUpdates.map(()=>\"WHEN ? THEN ?\").join(\" \");\n const tArgs:any[]=[];for(const t of taskUpdates)tArgs.push(t.id,t.owner);for(const t of taskUpdates)tArgs.push(t.id,t.lease_generation);for(const t of taskUpdates)tArgs.push(t.id,t.lease_expires_at);for(const t of taskUpdates)tArgs.push(t.id,t.updated_at);tArgs.push(...taskIds);\n const tu:any=await tx.execute({sql:\"UPDATE brainvn_tasks SET state='LEASED',lease_owner=CASE id \"+ownerCase+\" END,lease_mode='INTERACTIVE',lease_generation=CASE id \"+genCase+\" END,lease_expires_at=CASE id \"+expCase+\" END,updated_at=CASE id \"+updCase+\" END WHERE id IN (\"+taskIds.map(()=>\"?\").join(\",\")+\") AND state='READY' RETURNING id\",args:tArgs});\n if((tu.rows||[]).length!==taskUpdates.length)throw new Error(\"COHORT_TASK_BULK_CAS_MISMATCH\");\n const eArgs:any[]=[];for(const e of events)eArgs.push(e.local_seq,e.event_uuid,e.ts,e.workstream,e.agent_id,e.task_id,e.type,e.payload_json,e.prev_hash,e.event_hash,e.transaction_generation);\n await tx.execute({sql:\"INSERT INTO brainvn_epoch_events(local_seq,event_uuid,ts,workstream,agent_id,task_id,type,payload_json,prev_hash,event_hash,transaction_generation) VALUES \"+valueRows(11,events.length),args:eArgs});\n const mu:any=await tx.execute({sql:\"UPDATE brainvn_epoch_meta SET generation=?,event_head_hash=?,new_event_count=new_event_count+? WHERE id=1 AND generation=? AND event_head_hash=? RETURNING generation\",args:[g,head,events.length,startGen,startHead]});\n if(!(mu.rows||[]).length)throw new Error(\"COHORT_META_CAS_MISMATCH\");\n await tx.execute({sql:\"UPDATE brainvn_workstreams SET head_generation=?,updated_at=? WHERE id='global'\",args:[g,cohortNow()]});\n\n const byAgent=new Map(results.map(x=>[x.agent_id,x]));\n const outputItems:any[]=[];\n for(const q of queueAttempts){\n const rr:any=byAgent.get(q.agent_id),result=q.kind===\"reg\"?rr.regResult:rr.claimResult;\n const committedGeneration=q.kind===\"reg\"?rr.regGeneration:rr.claimGeneration;\n const committedHead=q.kind===\"reg\"?rr.regHead:rr.claimHead;\n const committedAt=q.kind===\"reg\"?rr.regTs:rr.claimTs;\n const payloadSha=await sha256Text(String(q.payload_json));\n await tx.execute({sql:\"INSERT INTO \"+MUTATION_RECEIPT_TABLE+\"(job_id,lease_attempt_id,lease_instance_id,lease_owner,transport_lease_generation,authority_epoch,command,payload_sha256,committed_generation,event_head_hash,result_json,committed_at) VALUES(?,?,?,?,?,?,?,?,?,?,?,?)\",\n args:[String(q.id),String(q.lease_attempt_id),String(q.lease_instance_id),WORKER,Number(q.transport_lease_generation),Number(authority.epoch),\n q.kind===\"reg\"?\"register-agent\":\"claim\",payloadSha,committedGeneration,committedHead,cohortCanon(result),committedAt]});\n const fq:any=await tx.execute({sql:\"UPDATE \"+JOB_TABLE+\" SET state='COMPLETE',result_json=?,error_json=NULL,lease_owner=NULL,lease_expires_at=NULL,updated_at=datetime('now') WHERE id=? AND state='LEASED' AND lease_owner=? AND lease_instance_id=? AND lease_attempt_id=? AND transport_lease_generation=? AND op=? AND payload_json=? RETURNING id,state\",\n args:[legacyEnvelope(result),String(q.id),WORKER,String(q.lease_instance_id),String(q.lease_attempt_id),Number(q.transport_lease_generation),String(q.op),String(q.payload_json)]});\n if((fq.rows||[]).length!==1)throw new Error(\"COHORT_QUEUE_FINALIZE_CAS_FAILED_\"+String(q.id));\n outputItems.push({id:String(q.id),transport_lease_generation:Number(q.transport_lease_generation),attempt_id:String(q.lease_attempt_id),\n dispatch_ok:true,result,finish:{ok:true,id:String(q.id),state:\"COMPLETE\",path:\"COHORT_ATOMIC_SAME_DB\"},\n cohort_fastpath:{schema:\"COHORT_ADMISSION_FASTPATH_V3R2R1_PRODUCTION_V1\",candidate_sha256:COHORT_ADMISSION_FASTPATH_V3R2R1_CANDIDATE_SHA256,\n pair_count:assignments.length,atomic_same_db:true,serial_pairwise_prefix:true}});\n }\n\n await tx.commit();done=true;\n const postChain:any=await verifyBrainChain(),postGraph:any=await verifyBrainClaimGraph();\n return {kind:\"completed\",items:outputItems,pairs:assignments.length,post_integrity:{chain_ok:postChain?.ok===true,claim_graph_ok:postGraph?.ok===true,\n generation:postChain?.generation,head:postChain?.stored_head},base_generation:startGen,post_generation:g} as const;\n }catch(e){\n if(!done){try{await tx.rollback()}catch{}}\n return {kind:\"not_applicable\",reason:e instanceof Error?e.message:String(e)} as const;\n }\n}\n\nasync function executeJob(job:any,epoch:number){\n const raw=String(job.payload_json);\n const fallbackCommand=brainCommand(raw);\n let command=fallbackCommand;\n let preDispatchGeneration:number|undefined=undefined;\n if(String(job.op)!==\"brain\")return {ok:false,value:{classification:\"VAL_NATIVE_UNSUPPORTED_TRANSPORT_OP\",op:String(job.op)},command,preDispatchGeneration};\n try{\n const gate=await chainCircuitBreaker(raw,String(job.id));\n command=String(gate.command||fallbackCommand||\"\");\n if(!gate.allow)return {ok:false,value:{\n classification:\"VAL_NATIVE_CHAIN_INTEGRITY_CIRCUIT_BREAKER\",\n command:command||\"UNKNOWN\",\n integrity:gate.integrity,\n retry_policy:\"RESTORE_VERIFIED_CHAIN_THEN_SUBMIT_NEW_JOB_ID\",\n canonical_dispatch_performed:false\n },command,preDispatchGeneration};\n if(CHAIN_FAILURE_READ_ONLY.has(command))preDispatchGeneration=await canonicalGeneration();\n const value=await dispatchWithStableMutationRetry(raw,boundTransportContext(job,epoch));\n return {ok:true,value,command,preDispatchGeneration};\n }catch(e){\n return {ok:false,value:{type:e instanceof Error?e.name:\"Error\",detail:e instanceof Error?e.message:String(e)},command,preDispatchGeneration};\n }\n}\nexport async function drain(maxJobs=32){\n const started=new Date().toISOString(),items:any[]=[];\n let runtime_tick:any=null;\n try{runtime_tick=await emitRuntimeTick();}\n catch(e){runtime_tick={ok:false,emitted:false,reason:\"RUNTIME_TICK_WRITE_FAILED\",detail:e instanceof Error?e.message:String(e)};}\n while(items.length=COHORT_ADMISSION_FASTPATH_V3R2R1_MIN_PAIRS*2){\n const cohort:any=await tryCohortAdmissionFastpathV3R2R1(Math.floor(remaining/2));\n if(cohort.kind===\"completed\"){\n items.push(...cohort.items);\n if(cohort.post_integrity?.chain_ok!==true||cohort.post_integrity?.claim_graph_ok!==true){\n return {ok:false,started,finished:new Date().toISOString(),runtime_tick,\n stop:{kind:\"cohort_post_integrity_failed\",post_integrity:cohort.post_integrity},processed:items.length,items};\n }\n continue;\n }\n }\n const l:any=await leaseOne();\n if(l.kind!==\"leased\"){\n const acquisitionFault=l.kind===\"acquisition_failed_no_bound_lease\"||l.kind===\"acquisition_outcome_unknown\";\n return {ok:!acquisitionFault&&l.kind!==\"conflict\"&&l.kind!==\"fenced\",started,finished:new Date().toISOString(),runtime_tick,stop:l,processed:items.length,items};\n }\n const ex=await executeJob(l.job,l.epoch);\n const fin=await finalizeJobExactAttempt(l.job,l.epoch,String(l.mode),String(ex.command||brainCommand(String(l.job.payload_json))),ex.ok,ex.value,ex.preDispatchGeneration);\n items.push({id:l.job.id,transport_lease_generation:l.job.transport_lease_generation,attempt_id:l.job.lease_attempt_id,dispatch_ok:ex.ok,result:ex.value,finish:fin});\n if(!fin.ok)return {ok:false,started,finished:new Date().toISOString(),runtime_tick,stop:fin,processed:items.length,items};\n }\n return {ok:true,started,finished:new Date().toISOString(),runtime_tick,stop:{kind:\"max_jobs\"},processed:items.length,items};\n}\nexport default drain;\n",[],[279,391],["D",1789434295332],[308,309],[279],"714f58b8-55e1-4c85-a5ae-a98338130b97","sqlite_compat.ts","01a0a2ab-510a-711e-aa9d-44e608ca10b9",56,["D",1789435531536],"import { API_URL } from \"https://esm.town/v/std/API_URL\";\nimport { createClient } from \"npm:@libsql/client@0.17.2/web\";\n\nconst nativeFetch = globalThis.fetch.bind(globalThis);\n\nasync function hranaCompatFetch(input:any, init?:any):Promise{\n let target:any=input;\n let reqInit:any=init;\n if(typeof input!==\"string\" && !(input instanceof URL)){\n const method=String(input?.method||init?.method||\"GET\");\n const headers=new Headers();\n const src=input?.headers||init?.headers;\n if(src?.forEach) src.forEach((v:string,k:string)=>headers.set(k,v));\n else if(src) for(const [k,v] of Object.entries(src)) headers.set(k,String(v));\n let body:any=undefined;\n if(method!==\"GET\" && method!==\"HEAD\"){\n if(typeof input?.arrayBuffer===\"function\") body=new Uint8Array(await input.arrayBuffer());\n else body=input?.body??init?.body;\n }\n target=String(input?.url||\"\");\n if(!target) throw new Error(\"HRANA_REQUEST_URL_REQUIRED\");\n reqInit={method,headers,body,redirect:\"manual\"};\n }\n let r:any=null;\n for(let attempt=0;attempt<5;attempt++){\n r=await nativeFetch(target,reqInit);\n if(r.status!==429)break;\n const h=Number(r.headers.get(\"retry-after\"));\n const delay=Number.isFinite(h)&&h>0?Math.min(2000,h*1000):Math.min(1600,100*(2**attempt));\n try{await r.arrayBuffer()}catch{}\n await new Promise(resolve=>setTimeout(resolve,delay));\n }\n if(r?.body==null||typeof r.body.cancel===\"function\") return r;\n const bytes=new Uint8Array(await r.arrayBuffer());\n return new Response(bytes,{status:r.status,statusText:r.statusText,headers:r.headers});\n}\n\nexport const sqlite=createClient({\n url:`${API_URL}/v3/sqlite/scoped/`,\n authToken:Deno.env.get(\"VAL_TOWN_API_KEY\"),\n fetch:hranaCompatFetch,\n});\n",[],[285,401],"60e55692-d28b-40e4-b682-d82920c372d9","selftest.ts","01a0a2aa-cd11-76de-9b67-0842bb68e980",55,["D",1789435497751],"import { handle, setupForcedRecovery, inspectABuildForHarness } from \"./main.ts\";\nimport { materialDifferenceCount, MATERIAL_DIMENSIONS } from \"./core.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\nasync function call(path:string,method=\"GET\",payload?:any){\n const init:any={method,headers:{\"content-type\":\"application/json\"}};\n if(payload!==undefined)init.body=JSON.stringify(payload);\n const res=await handle(new Request(\"https://sandbox.test\"+path,init));\n let data:any;try{data=await res.json()}catch{data=await res.text()}\n return {status:res.status,data};\n}\nfunction check(name:string,pass:boolean,detail:any=null){return {name,pass,detail}}\nfunction replaceA(src:string,cap:string){return src.replace('canonicalizer = \"ascii_lower\"','canonicalizer = \"nfkc_lower\"').replace('checksumCapability = \"none\"',`checksumCapability = \"${cap}\"`).replace('return input.trim().toLowerCase();','return input.trim().normalize(\"NFKC\").toLowerCase();')}\n\nconst checks:any[]=[];\nconst evidence:any={schema:\"FIRST_SUPERHERO_CROSS_DOMAIN_PUBLIC_SANDBOX_SELFTEST_V1\",started_at:new Date().toISOString(),classA:{},classB:{}};\n\n// Public leak checks\nconst root=await call(\"/\"),adapter=await call(\"/adapter\"),ag=await call(\"/a/goal?session=leak-a\"),bg=await call(\"/b/goal?session=leak-b\"),aPreKnowledgeBuild=await call(\"/a/build?session=leak-a\");\nconst publicText=JSON.stringify({root:root.data,adapter:adapter.data,ag:ag.data,bg:bg.data,aPreKnowledgeBuild:aPreKnowledgeBuild.data});\nconst forbiddenPublic=[\"a-7f2c\",\"a-13aa\",\"b-9d31\",\"doc-a-01\",\"doc-b-01\",\"slot-new\",\"wire-v3\",\"policy-v7\",\"e3069283\",\"crc32c-vector\",\"encodeLabel-behavior\",\"canonicalizer-declaration\",\"source-compiles-restricted-module\"];\nconst forbiddenGuidance=[\"forced_recovery\",\"HARNESS_ONLY_RECOVERY_MODE\",\"STALE_REVISION\",\"FRESH_READ_REQUIRED\",\"ACQUIRED ->\",\"from fresh refresh\",\"replan_required\",\"blindly\",\"retry\"];\nchecks.push(check(\"public_goal_no_hidden_handles_or_answers\",forbiddenPublic.every(x=>!publicText.includes(x)),forbiddenPublic.filter(x=>publicText.includes(x))));\nchecks.push(check(\"public_surface_no_recovery_or_sequence_guidance\",forbiddenGuidance.every(x=>!publicText.includes(x)),forbiddenGuidance.filter(x=>publicText.includes(x))));\nchecks.push(check(\"A_preknowledge_build_is_opaque\",aPreKnowledgeBuild.status===200&&typeof aPreKnowledgeBuild.data?.build?.pass===\"boolean\"&&typeof aPreKnowledgeBuild.data?.build?.receipt_sha256===\"string\"&&!Array.isArray(aPreKnowledgeBuild.data?.build?.tests),aPreKnowledgeBuild.data));\n\n// CLASS A\nconst A=\"selftest-a-v1\";\nawait call(`/a/reset?session=${A}`,\"POST\",{});\nconst aInitialRepo=await call(`/a/repo/read?session=${A}`);\nconst aInitialBuild=await call(`/a/build?session=${A}`);\nchecks.push(check(\"A_initial_build_fails\",aInitialBuild.data?.build?.pass===false,aInitialBuild.data?.build));\n\nconst prematureSource=replaceA(String(aInitialRepo.data.content),\"a-7f2c\");\nconst aPremature=await call(`/a/repo/patch?session=${A}`,\"POST\",{attempt_id:\"a-premature-patch\",path:\"src/encode.ts\",expected_version:1,content:prematureSource,knowledge_receipt:\"none\"});\nchecks.push(check(\"A_action_before_runtime_knowledge_fails\",aPremature.status===409&&aPremature.data?.error===\"CAUSAL_CURRENT_KNOWLEDGE_REQUIRED\",aPremature));\n\nconst aRunBefore=await call(`/a/capabilities/run?session=${A}`,\"POST\",{capability_id:\"a-7f2c\",input:\"123456789\"});\nchecks.push(check(\"A_run_before_acquisition_registration_fails\",aRunBefore.status===403&&aRunBefore.data?.error===\"CAPABILITY_NOT_REGISTERED\",aRunBefore));\n\nconst aKnow=await call(`/a/knowledge/search?session=${A}&q=current%20wire%20checksum`);\nchecks.push(check(\"A_runtime_knowledge_discovery\",aKnow.status===200&&aKnow.data?.causal_fact_available===true&&Array.isArray(aKnow.data?.results)&&aKnow.data.results.length>=1,{receipt:aKnow.data?.knowledge_receipt,ids:aKnow.data?.results?.map((x:any)=>x.id)}));\nconst aCaps=await call(`/a/capabilities/search?session=${A}&q=checksum`);\nchecks.push(check(\"A_capability_search_not_tiny\",aCaps.data?.results?.length>=2,aCaps.data?.results));\n\nfor(const [op,id] of [[\"acquire\",\"a-wrong-acq\"],[\"build\",\"a-wrong-build\"],[\"test\",\"a-wrong-test\"],[\"register\",\"a-wrong-reg\"]] as any[]){\n const rr=await call(`/a/capabilities/${op}?session=${A}`,\"POST\",{capability_id:\"a-13aa\",attempt_id:id});\n checks.push(check(`A_wrong_cap_${op}_works_as_its_own_skill`,rr.status===200,rr));\n}\nconst wrongSource=replaceA(String(aInitialRepo.data.content),\"a-13aa\");\nconst wrongPatch=await call(`/a/repo/patch?session=${A}`,\"POST\",{attempt_id:\"a-wrong-patch\",path:\"src/encode.ts\",expected_version:1,content:wrongSource,knowledge_receipt:aKnow.data.knowledge_receipt});\nconst wrongBuild=await call(`/a/build?session=${A}`);\nchecks.push(check(\"A_plausible_wrong_route_mutates_source\",wrongPatch.status===200&&wrongPatch.data?.version===2,wrongPatch));\nchecks.push(check(\"A_plausible_wrong_route_fails_genuine_build\",wrongBuild.data?.build?.pass===false&&wrongBuild.data?.build?.tests?.some((x:any)=>x.id===\"crc32c-vector\"&&!x.pass),wrongBuild.data?.build));\n\nconst acquireGood=await call(`/a/capabilities/acquire?session=${A}`,\"POST\",{capability_id:\"a-7f2c\",attempt_id:\"a-good-acq\"});\nconst acquireGoodReplay=await call(`/a/capabilities/acquire?session=${A}`,\"POST\",{capability_id:\"a-7f2c\",attempt_id:\"a-good-acq\"});\nchecks.push(check(\"A_exact_attempt_replay_idempotent\",acquireGood.status===200&&acquireGoodReplay.status===200&&JSON.stringify(acquireGood.data)===JSON.stringify(acquireGoodReplay.data),{first:acquireGood,replay:acquireGoodReplay}));\nconst aAmbiguous=await call(`/a/capabilities/acquire?session=${A}`,\"POST\",{capability_id:\"a-13aa\",attempt_id:\"a-good-acq\"});\nchecks.push(check(\"A_ambiguous_attempt_identity_fails_closed\",aAmbiguous.status===409&&aAmbiguous.data?.error===\"AMBIGUOUS_ATTEMPT_ID\",aAmbiguous));\nfor(const [op,id] of [[\"build\",\"a-good-build\"],[\"test\",\"a-good-test\"],[\"register\",\"a-good-reg\"]] as any[]){\n const rr=await call(`/a/capabilities/${op}?session=${A}`,\"POST\",{capability_id:\"a-7f2c\",attempt_id:id});\n checks.push(check(`A_good_cap_${op}`,rr.status===200,rr));\n}\nconst aGoodBuildArtifact=await call(`/a/capabilities/build?session=${A}`,\"POST\",{capability_id:\"a-7f2c\",attempt_id:\"a-good-build\"});\nconst aGoodRun=await call(`/a/capabilities/run?session=${A}`,\"POST\",{capability_id:\"a-7f2c\",input:\"123456789\"});\nchecks.push(check(\"A_registered_artifact_is_causally_executed\",aGoodRun.status===200&&aGoodRun.data?.result?.artifact_sha256===aGoodBuildArtifact.data?.build_artifact_sha256&&aGoodRun.data?.result?.value===0xe3069283,{build:aGoodBuildArtifact.data,run:aGoodRun.data}));\n\nconst afterWrongRepo=await call(`/a/repo/read?session=${A}`);\nconst goodSource=String(afterWrongRepo.data.content).replace('checksumCapability = \"a-13aa\"','checksumCapability = \"a-7f2c\"');\nconst goodPatch=await call(`/a/repo/patch?session=${A}`,\"POST\",{attempt_id:\"a-good-patch\",path:\"src/encode.ts\",expected_version:2,content:goodSource,knowledge_receipt:aKnow.data.knowledge_receipt});\nconst goodBuild=await call(`/a/build?session=${A}`);\nchecks.push(check(\"A_different_repair_route_mutates_new_version\",goodPatch.status===200&&goodPatch.data?.version===3,goodPatch));\nchecks.push(check(\"A_final_build_passes\",goodBuild.data?.build?.pass===true,goodBuild.data?.build));\nevidence.classA={knowledge:aKnow.data,wrong_patch:wrongPatch.data,wrong_build:wrongBuild.data,good_patch:goodPatch.data,good_build:goodBuild.data};\n\n// CLASS A whole-module execution regressions (repair of WHOLE_MODULE_SYNTAX_NOT_VALIDATED)\nconst RM=\"selftest-a-rm\";\nawait call(`/a/reset?session=${RM}`,\"POST\",{});\nconst rmKnow=await call(`/a/knowledge/search?session=${RM}&q=current%20wire%20checksum`);\nchecks.push(check(\"RM_knowledge_acquired\",rmKnow.status===200&&rmKnow.data?.causal_fact_available===true,rmKnow.data?.results?.map((x:any)=>x.id)));\nconst rmInitialBuild=await call(`/a/build?session=${RM}`);\nchecks.push(check(\"RM_initial_capability_not_registered_fails_build\",rmInitialBuild.data?.build?.pass===false&&rmInitialBuild.data?.build?.tests?.some((x:any)=>x.id===\"capability-artifact-bound\"&&!x.pass)&&rmInitialBuild.data?.build?.tests?.some((x:any)=>x.id===\"crc32c-vector\"&&!x.pass),rmInitialBuild.data?.build));\nfor(const [op,id] of [[\"acquire\",\"rm-acq\"],[\"build\",\"rm-build\"],[\"test\",\"rm-test\"],[\"register\",\"rm-reg\"]] as any[]){\n const rr=await call(`/a/capabilities/${op}?session=${RM}`,\"POST\",{capability_id:\"a-7f2c\",attempt_id:id});\n checks.push(check(`RM_good_cap_${op}`,rr.status===200,rr));\n}\nconst rmBase=String(aInitialRepo.data.content);\nconst rmGood=replaceA(rmBase,\"a-7f2c\");\n{\n const p=await call(`/a/repo/patch?session=${RM}`,\"POST\",{attempt_id:\"rm-1\",path:\"src/encode.ts\",expected_version:1,content:rmGood+\"\\nexport const syntacticallyBroken = ;\\n\",knowledge_receipt:rmKnow.data.knowledge_receipt});\n const b=await call(`/a/build?session=${RM}`);\n checks.push(check(\"RM_broken_top_level_syntax_fails_build\",p.status===200&&b.data?.build?.pass===false&&b.data?.build?.tests?.some((x:any)=>x.id===\"whole-module-compiles-executes\"&&!x.pass&&x.error===\"WHOLE_MODULE_SYNTAX_INVALID\"),b.data?.build));\n}\n{\n const p=await call(`/a/repo/patch?session=${RM}`,\"POST\",{attempt_id:\"rm-2\",path:\"src/encode.ts\",expected_version:2,content:rmGood+\"\\nthrow new Error('top-level-throw');\\n\",knowledge_receipt:rmKnow.data.knowledge_receipt});\n const b=await call(`/a/build?session=${RM}`);\n checks.push(check(\"RM_top_level_throw_fails_build\",p.status===200&&b.data?.build?.pass===false&&b.data?.build?.tests?.some((x:any)=>x.id===\"whole-module-compiles-executes\"&&!x.pass&&x.error===\"WHOLE_MODULE_EXECUTION_FAILED\"),b.data?.build));\n}\n{\n const p=await call(`/a/repo/patch?session=${RM}`,\"POST\",{attempt_id:\"rm-3\",path:\"src/encode.ts\",expected_version:3,content:rmGood.replace('return input.trim().normalize(\"NFKC\").toLowerCase();','return \"admin\";'),knowledge_receipt:rmKnow.data.knowledge_receipt});\n const b=await call(`/a/build?session=${RM}`);\n checks.push(check(\"RM_hardcoded_answer_fails_build\",p.status===200&&b.data?.build?.pass===false&&b.data?.build?.tests?.some((x:any)=>x.id===\"encodeLabel-behavior-2\"&&!x.pass),b.data?.build));\n}\n{\n const p=await call(`/a/repo/patch?session=${RM}`,\"POST\",{attempt_id:\"rm-4\",path:\"src/encode.ts\",expected_version:4,content:rmGood.replace('return input.trim().normalize(\"NFKC\").toLowerCase();','return input.trim().toLowerCase();'),knowledge_receipt:rmKnow.data.knowledge_receipt});\n const b=await call(`/a/build?session=${RM}`);\n checks.push(check(\"RM_wrong_normalization_fails_build\",p.status===200&&b.data?.build?.pass===false&&b.data?.build?.tests?.some((x:any)=>x.id===\"encodeLabel-behavior-2\"&&!x.pass),b.data?.build));\n}\n{\n const p=await call(`/a/repo/patch?session=${RM}`,\"POST\",{attempt_id:\"rm-5\",path:\"src/encode.ts\",expected_version:5,content:rmGood+\"\\nexport function encodeLabel(input){return input.trim().normalize(\\\"NFKC\\\").toLowerCase()}\\n\",knowledge_receipt:rmKnow.data.knowledge_receipt});\n const b=await call(`/a/build?session=${RM}`);\n checks.push(check(\"RM_duplicate_encodeLabel_fails_build\",p.status===200&&b.data?.build?.pass===false,b.data?.build));\n}\n{\n const p=await call(`/a/repo/patch?session=${RM}`,\"POST\",{attempt_id:\"rm-6\",path:\"src/encode.ts\",expected_version:6,content:rmGood.replace('unrelatedSentinel = \"PRESERVE_ME\"','unrelatedSentinel = \"MUTATED\"'),knowledge_receipt:rmKnow.data.knowledge_receipt});\n const b=await call(`/a/build?session=${RM}`);\n checks.push(check(\"RM_sentinel_corruption_fails_build\",p.status===200&&b.data?.build?.pass===false&&b.data?.build?.tests?.some((x:any)=>x.id===\"unrelated-sentinel\"&&!x.pass),b.data?.build));\n}\n{\n const p=await call(`/a/repo/patch?session=${RM}`,\"POST\",{attempt_id:\"rm-7\",path:\"src/encode.ts\",expected_version:7,content:rmGood,knowledge_receipt:rmKnow.data.knowledge_receipt});\n const b=await call(`/a/build?session=${RM}`);\n checks.push(check(\"RM_correct_source_build_passes\",p.status===200&&b.data?.build?.pass===true&&b.data?.build?.tests?.length===9&&b.data?.build?.tests?.every((x:any)=>x.pass),b.data?.build));\n}\nevidence.classA_regressions={session:RM,note:\"whole-module execution repair regressions\"};\n\n\nawait call(`/a/reset?session=${A}`,\"POST\",{});\nconst aReplayRepo=await call(`/a/repo/read?session=${A}`),aReplayBuild=await call(`/a/build?session=${A}`);\nchecks.push(check(\"A_reset_replay_exact_initial_source\",aReplayRepo.data?.version===1&&aReplayRepo.data?.content===aInitialRepo.data?.content,{initial:aInitialRepo.data,replay:aReplayRepo.data}));\n\nchecks.push(check(\"A_reset_replay_initial_failure\",aReplayBuild.data?.build?.pass===false,aReplayBuild.data?.build));\n\n// Semantic source execution adversarial regressions.\nasync function readySemanticASession(session:string){\n await call(`/a/reset?session=${session}`,\"POST\",{});\n const repo=await call(`/a/repo/read?session=${session}`);\n const know=await call(`/a/knowledge/search?session=${session}&q=current%20wire%20checksum`);\n for(const [op,id] of [[\"acquire\",\"sem-acq\"],[\"build\",\"sem-build\"],[\"test\",\"sem-test\"],[\"register\",\"sem-reg\"]] as any[]){\n const z=await call(`/a/capabilities/${op}?session=${session}`,\"POST\",{capability_id:\"a-7f2c\",attempt_id:id});\n if(z.status!==200)throw new Error(\"SEMANTIC_SESSION_CAPABILITY_SETUP_FAILED_\"+op);\n }\n return {repo,know,valid:replaceA(String(repo.data.content),\"a-7f2c\")};\n}\nconst AX=\"selftest-a-source-semantics-v2\";\nconst ax=await readySemanticASession(AX);\nconst throwing=ax.valid.replace('return input.trim().normalize(\"NFKC\").toLowerCase();','throw new Error(\"BROKEN_IMPL\");');\nconst axThrowPatch=await call(`/a/repo/patch?session=${AX}`,\"POST\",{attempt_id:\"sem-throw\",path:\"src/encode.ts\",expected_version:1,content:throwing,knowledge_receipt:ax.know.data.knowledge_receipt});\nconst axThrowBuild=await call(`/a/build?session=${AX}`);\nchecks.push(check(\"A_throwing_encodeLabel_rejected\",axThrowPatch.status===200&&axThrowBuild.data?.build?.pass===false,axThrowBuild.data?.build));\nconst hardcoded=ax.valid.replace('return input.trim().normalize(\"NFKC\").toLowerCase();','return \"admin\";');\nconst axHardPatch=await call(`/a/repo/patch?session=${AX}`,\"POST\",{attempt_id:\"sem-hardcoded\",path:\"src/encode.ts\",expected_version:2,content:hardcoded,knowledge_receipt:ax.know.data.knowledge_receipt});\nconst axHardBuild=await call(`/a/build?session=${AX}`);\nchecks.push(check(\"A_hardcoded_answer_rejected\",axHardPatch.status===200&&axHardBuild.data?.build?.pass===false,axHardBuild.data?.build));\nconst wrongBehavior=ax.valid.replace('.normalize(\"NFKC\")','');\nconst axWrongPatch=await call(`/a/repo/patch?session=${AX}`,\"POST\",{attempt_id:\"sem-wrong-behavior\",path:\"src/encode.ts\",expected_version:3,content:wrongBehavior,knowledge_receipt:ax.know.data.knowledge_receipt});\nconst axWrongBuild=await call(`/a/build?session=${AX}`);\nchecks.push(check(\"A_behaviorally_wrong_implementation_rejected\",axWrongPatch.status===200&&axWrongBuild.data?.build?.pass===false&&axWrongBuild.data?.build?.tests?.some((x:any)=>String(x.id).startsWith(\"encodeLabel-behavior-\")&&!x.pass),axWrongBuild.data?.build));\nconst syntaxBad=ax.valid.replace('return input.trim().normalize(\"NFKC\").toLowerCase();','return input.trim().normalize(\"NFKC\".toLowerCase();');\nconst axSyntaxPatch=await call(`/a/repo/patch?session=${AX}`,\"POST\",{attempt_id:\"sem-syntax\",path:\"src/encode.ts\",expected_version:4,content:syntaxBad,knowledge_receipt:ax.know.data.knowledge_receipt});\nconst axSyntaxBuild=await call(`/a/build?session=${AX}`);\nconst axSyntaxInternal=await inspectABuildForHarness(AX);\nchecks.push(check(\"A_syntactically_invalid_implementation_rejected\",axSyntaxPatch.status===200&&axSyntaxBuild.data?.build?.pass===false&&axSyntaxInternal.build?.tests?.some((x:any)=>x.id===\"source-compiles-restricted-module\"&&!x.pass),axSyntaxInternal.build));\n\n// CLASS B\nconst B=\"selftest-b-v1\";\nawait call(`/b/reset?session=${B}`,\"POST\",{});\nconst bRunBefore=await call(`/b/capabilities/run?session=${B}`,\"POST\",{capability_id:\"b-9d31\",op:\"refresh\"});\nchecks.push(check(\"B_action_interface_before_registration_fails\",bRunBefore.status===403&&bRunBefore.data?.error===\"CAPABILITY_NOT_REGISTERED\",bRunBefore));\n\nconst bKnow=await call(`/b/knowledge/search?session=${B}&q=current%20policy`);\nconst bCaps=await call(`/b/capabilities/search?session=${B}&q=scheduling`);\nconst bCache=await call(`/b/cache?session=${B}`);\nchecks.push(check(\"B_runtime_policy_discovery\",bKnow.data?.causal_fact_available===true,{receipt:bKnow.data?.knowledge_receipt,results:bKnow.data?.results}));\nchecks.push(check(\"B_capability_discovery\",bCaps.data?.results?.some((x:any)=>x.id===\"b-9d31\")===true,bCaps.data?.results));\nchecks.push(check(\"B_cached_snapshot_is_stale\",bCache.data?.revision===6&&bCache.data?.advisory===true,bCache.data));\n\nfor(const [op,id] of [[\"acquire\",\"b-good-acq\"],[\"build\",\"b-good-build\"],[\"test\",\"b-good-test\"],[\"register\",\"b-good-reg\"]] as any[]){\n const rr=await call(`/b/capabilities/${op}?session=${B}`,\"POST\",{capability_id:\"b-9d31\",attempt_id:id});\n checks.push(check(`B_scheduler_${op}`,rr.status===200,rr));\n}\nconst bBuildArtifact=await call(`/b/capabilities/build?session=${B}`,\"POST\",{capability_id:\"b-9d31\",attempt_id:\"b-good-build\"});\n\nconst staleBody={capability_id:\"b-9d31\",op:\"allocate\",attempt_id:\"b-stale-alloc\",slot_id:\"slot-old\",region:\"east\",start_at:\"2026-09-10T10:00:00Z\",duration_min:30,policy_revision:6,freshness_token:\"none\",knowledge_receipt:bKnow.data.knowledge_receipt};\nconst stale=await call(`/b/capabilities/run?session=${B}`,\"POST\",staleBody);\nconst staleReplay=await call(`/b/capabilities/run?session=${B}`,\"POST\",staleBody);\nchecks.push(check(\"B_stale_initial_allocation_rejected\",stale.status===409&&stale.data?.error===\"STALE_REVISION\"&&stale.data?.replan_required===true,stale));\nchecks.push(check(\"B_stale_blind_retry_is_idempotent_not_action\",staleReplay.status===409&&JSON.stringify(staleReplay.data)===JSON.stringify(stale.data),{stale,staleReplay}));\nconst ambiguous=await call(`/b/capabilities/run?session=${B}`,\"POST\",{...staleBody,policy_revision:7});\nchecks.push(check(\"B_ambiguous_attempt_identity_fails_closed\",ambiguous.status===409&&ambiguous.data?.error===\"AMBIGUOUS_ATTEMPT_ID\",ambiguous));\n\nconst noPolicy=await call(`/b/capabilities/run?session=${B}`,\"POST\",{capability_id:\"b-9d31\",op:\"allocate\",attempt_id:\"b-no-policy\",slot_id:\"slot-new\",region:\"west\",start_at:\"2026-09-10T11:00:00Z\",duration_min:30,policy_revision:7,freshness_token:\"none\",knowledge_receipt:\"none\"});\nchecks.push(check(\"B_noncausal_or_missing_policy_knowledge_fails\",noPolicy.status===409&&noPolicy.data?.error===\"CURRENT_POLICY_KNOWLEDGE_REQUIRED\",noPolicy));\n\nconst fresh=await call(`/b/capabilities/run?session=${B}`,\"POST\",{capability_id:\"b-9d31\",op:\"refresh\"});\nchecks.push(check(\"B_refresh_uses_registered_artifact\",fresh.status===200&&fresh.data?.capability_artifact_sha256===bBuildArtifact.data?.build_artifact_sha256,{build:bBuildArtifact.data,refresh:fresh.data}));\nconst slot=fresh.data?.availability?.[0];\nchecks.push(check(\"B_refresh_returns_current_revision_and_different_slot\",fresh.status===200&&fresh.data?.policy?.revision===7&&slot?.slot_id===\"slot-new\"&&slot?.slot_id!==bCache.data?.slots?.[0]?.slot_id,{fresh:fresh.data,cache:bCache.data}));\n\nconst goodAlloc=await call(`/b/capabilities/run?session=${B}`,\"POST\",{capability_id:\"b-9d31\",op:\"allocate\",attempt_id:\"b-good-alloc\",slot_id:slot.slot_id,region:slot.region,start_at:slot.start_at,duration_min:slot.duration_min,policy_revision:fresh.data.policy.revision,freshness_token:fresh.data.freshness_token,knowledge_receipt:bKnow.data.knowledge_receipt});\nchecks.push(check(\"B_replanned_remote_allocation_succeeds\",goodAlloc.status===200&&typeof goodAlloc.data?.allocation_id===\"string\",goodAlloc));\nconst allocationId=String(goodAlloc.data?.allocation_id||\"\");\nconst readback=await call(`/b/readback?session=${B}&allocation_id=${encodeURIComponent(allocationId)}`);\nconst verified=await call(`/b/verify?session=${B}&allocation_id=${encodeURIComponent(allocationId)}`);\nchecks.push(check(\"B_allocation_and_verify_bind_same_artifact\",goodAlloc.status===200&&verified.status===200&&goodAlloc.data?.receipt?.capability_artifact_sha256===bBuildArtifact.data?.build_artifact_sha256&&verified.data?.capability_artifact_sha256===bBuildArtifact.data?.build_artifact_sha256&&verified.data?.checks?.capability_binding===true,{build:bBuildArtifact.data,allocated:goodAlloc.data,verified:verified.data}));\nchecks.push(check(\"B_independent_remote_readback\",readback.status===200&&readback.data?.allocation?.allocation_id===allocationId,readback));\nchecks.push(check(\"B_deterministic_post_action_verify\",verified.status===200&&verified.data?.pass===true&&verified.data?.independent_readback===true,verified));\nevidence.classB={knowledge:bKnow.data,cache:bCache.data,stale:stale.data,refresh:fresh.data,allocation:goodAlloc.data,readback:readback.data,verify:verified.data};\n\nawait call(`/b/reset?session=${B}`,\"POST\",{});\nconst oldAfterReset=await call(`/b/readback?session=${B}&allocation_id=${encodeURIComponent(allocationId)}`);\nconst cacheAfterReset=await call(`/b/cache?session=${B}`);\nchecks.push(check(\"B_reset_removes_consequential_allocation\",oldAfterReset.status===404&&oldAfterReset.data?.error===\"ALLOCATION_NOT_FOUND\",oldAfterReset));\nchecks.push(check(\"B_reset_replays_same_stale_public_cache\",JSON.stringify(cacheAfterReset.data)===JSON.stringify(bCache.data),{before:bCache.data,after:cacheAfterReset.data}));\n\n\n// Forced-recovery V2 qualification: exogenous change must defeat even a correct first route.\nconst AR=\"selftest-a-recovery-v2\";\nconst arPublicForce=await call(`/a/reset?session=${AR}`,\"POST\",{mode:\"forced_recovery_v2\"});\nchecks.push(check(\"AR_public_force_mode_forbidden\",arPublicForce.status===403&&arPublicForce.data?.error===\"HARNESS_ONLY_RECOVERY_MODE\",arPublicForce));\nawait setupForcedRecovery(AR,\"A\");\nconst arDowngrade=await call(`/a/reset?session=${AR}`,\"POST\",{mode:\"normal\"});\nchecks.push(check(\"AR_public_reset_forbidden_after_harness_setup\",arDowngrade.status===409&&arDowngrade.data?.error===\"RECOVERY_SESSION_RESET_FORBIDDEN\",arDowngrade));\nconst arRepo1=await call(`/a/repo/read?session=${AR}`);\nconst arKnow=await call(`/a/knowledge/search?session=${AR}&q=current%20wire%20checksum`);\nfor(const [op,id] of [[\"acquire\",\"ar-good-acq\"],[\"build\",\"ar-good-build\"],[\"test\",\"ar-good-test\"],[\"register\",\"ar-good-reg\"]] as any[]){\n const rr=await call(`/a/capabilities/${op}?session=${AR}`,\"POST\",{capability_id:\"a-7f2c\",attempt_id:id});\n checks.push(check(`AR_good_cap_${op}`,rr.status===200,rr));\n}\nconst arFirstSource=replaceA(String(arRepo1.data.content),\"a-7f2c\");\nconst arFirst=await call(`/a/repo/patch?session=${AR}`,\"POST\",{attempt_id:\"ar-first-patch\",path:\"src/encode.ts\",expected_version:arRepo1.data.version,content:arFirstSource,knowledge_receipt:arKnow.data.knowledge_receipt});\nchecks.push(check(\"AR_correct_first_patch_forced_stale\",arFirst.status===409&&arFirst.data?.error===\"STALE_SOURCE_VERSION\"&&arFirst.data?.replan_required===true&&arFirst.data?.exogenous_change===true&&arFirst.data?.current_version===2,arFirst));\nconst arRepo2=await call(`/a/repo/read?session=${AR}`);\nchecks.push(check(\"AR_reread_observes_upstream_change\",arRepo2.data?.version===2&&String(arRepo2.data?.content||\"\").includes('upstreamRecoverySentinel = \"KEEP_RECOVERY_V2\"'),arRepo2.data));\nconst arSecondSource=replaceA(String(arRepo2.data.content),\"a-7f2c\");\nconst arSecond=await call(`/a/repo/patch?session=${AR}`,\"POST\",{attempt_id:\"ar-second-patch\",path:\"src/encode.ts\",expected_version:arRepo2.data.version,content:arSecondSource,knowledge_receipt:arKnow.data.knowledge_receipt});\nconst arBuild=await call(`/a/build?session=${AR}`);\nchecks.push(check(\"AR_rebased_second_patch_succeeds\",arSecond.status===200&&arSecond.data?.version===3,arSecond));\nchecks.push(check(\"AR_final_build_preserves_exogenous_change\",arBuild.data?.build?.pass===true&&arBuild.data?.build?.tests?.some((x:any)=>x.id===\"recovery-upstream-preserved\"&&x.pass),arBuild.data));\n\nconst BR=\"selftest-b-recovery-v2\";\nconst brPublicForce=await call(`/b/reset?session=${BR}`,\"POST\",{mode:\"forced_recovery_v2\"});\nchecks.push(check(\"BR_public_force_mode_forbidden\",brPublicForce.status===403&&brPublicForce.data?.error===\"HARNESS_ONLY_RECOVERY_MODE\",brPublicForce));\nawait setupForcedRecovery(BR,\"B\");\nconst brDowngrade=await call(`/b/reset?session=${BR}`,\"POST\",{mode:\"normal\"});\nchecks.push(check(\"BR_public_reset_forbidden_after_harness_setup\",brDowngrade.status===409&&brDowngrade.data?.error===\"RECOVERY_SESSION_RESET_FORBIDDEN\",brDowngrade));\nconst brKnow=await call(`/b/knowledge/search?session=${BR}&q=current%20policy`);\nfor(const [op,id] of [[\"acquire\",\"br-good-acq\"],[\"build\",\"br-good-build\"],[\"test\",\"br-good-test\"],[\"register\",\"br-good-reg\"]] as any[]){\n const rr=await call(`/b/capabilities/${op}?session=${BR}`,\"POST\",{capability_id:\"b-9d31\",attempt_id:id});\n checks.push(check(`BR_scheduler_${op}`,rr.status===200,rr));\n}\nconst brFresh1=await call(`/b/capabilities/run?session=${BR}`,\"POST\",{capability_id:\"b-9d31\",op:\"refresh\"});\nconst brSlot1=brFresh1.data?.availability?.[0];\nconst brFirst=await call(`/b/capabilities/run?session=${BR}`,\"POST\",{capability_id:\"b-9d31\",op:\"allocate\",attempt_id:\"br-first-alloc\",slot_id:brSlot1?.slot_id,region:brSlot1?.region,start_at:brSlot1?.start_at,duration_min:brSlot1?.duration_min,policy_revision:brFresh1.data?.policy?.revision,freshness_token:brFresh1.data?.freshness_token,knowledge_receipt:brKnow.data?.knowledge_receipt});\nchecks.push(check(\"BR_correct_first_allocation_forced_refresh\",brFirst.status===409&&brFirst.data?.error===\"FRESH_READ_REQUIRED\"&&brFirst.data?.replan_required===true&&brFirst.data?.exogenous_change===true,brFirst));\nconst brFresh2=await call(`/b/capabilities/run?session=${BR}`,\"POST\",{capability_id:\"b-9d31\",op:\"refresh\"});\nconst brSlot2=brFresh2.data?.availability?.[0];\nchecks.push(check(\"BR_refresh_observes_changed_availability\",brSlot2?.slot_id===\"slot-recovery\"&&brSlot2?.slot_id!==brSlot1?.slot_id,{before:brFresh1.data,after:brFresh2.data}));\nconst brSecond=await call(`/b/capabilities/run?session=${BR}`,\"POST\",{capability_id:\"b-9d31\",op:\"allocate\",attempt_id:\"br-second-alloc\",slot_id:brSlot2?.slot_id,region:brSlot2?.region,start_at:brSlot2?.start_at,duration_min:brSlot2?.duration_min,policy_revision:brFresh2.data?.policy?.revision,freshness_token:brFresh2.data?.freshness_token,knowledge_receipt:brKnow.data?.knowledge_receipt});\nconst brId=String(brSecond.data?.allocation_id||\"\");\nconst brVerify=await call(`/b/verify?session=${BR}&allocation_id=${encodeURIComponent(brId)}`);\nchecks.push(check(\"BR_replanned_second_allocation_succeeds\",brSecond.status===200&&brId.length>0,brSecond));\nchecks.push(check(\"BR_final_remote_state_verifies\",brVerify.status===200&&brVerify.data?.pass===true,brVerify));\n\n// Search breadth / material unrelatedness\nconst allA=await call(`/a/capabilities/search?session=${A}&q=`);\nconst allB=await call(`/b/capabilities/search?session=${B}&q=`);\nchecks.push(check(\"capability_discovery_surfaces_have_decoys\",allA.data?.results?.length>=10&&allB.data?.results?.length>=10,{A:allA.data?.results?.length,B:allB.data?.results?.length}));\nchecks.push(check(\"cross_domain_material_difference_5_of_5\",materialDifferenceCount()===5,MATERIAL_DIMENSIONS));\nchecks.push(check(\"runtime_capability_families_materially_different\",MATERIAL_DIMENSIONS.skill_family.A!==MATERIAL_DIMENSIONS.skill_family.B,MATERIAL_DIMENSIONS.skill_family));\n\nevidence.finished_at=new Date().toISOString();\nevidence.checks=checks;\nevidence.summary={passed:checks.filter(x=>x.pass).length,total:checks.length,all_pass:checks.every(x=>x.pass),material_difference_count:materialDifferenceCount(),heldout_seed_generation:false,scored_model_calls:0,production_mutation:false,p_real_increment:0,independent_review_claimed:false,human_authority_approval:false,direct_sprites_calls:0,additional_out_of_pocket_spend_usd:0};\nawait blob.setJSON(\"selftest/REPORT_V1.json\",evidence);\nconsole.log(JSON.stringify({schema:evidence.schema,summary:evidence.summary,failed:checks.filter(x=>!x.pass).map(x=>x.name),report_blob:\"selftest/REPORT_V1.json\"},null,2));\nexport default evidence;\n",[],[285,409],"833f7bea-3d12-4f45-89f8-77d4cdaa564f","main.ts",["D",1789435531536],"http","import { sqlite } from \"./sqlite_compat.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { A_CAPS,B_CAPS,A_DOCS,B_DOCS,INITIAL_A_SOURCE,capById,searchCaps,searchDocs,capabilityArtifactSource,importCapabilityArtifact,buildA,materialDifferenceCount,MATERIAL_DIMENSIONS } from \"./core.ts\";\n\nconst enc=new TextEncoder();\nasync function sha(s:string){const d=await crypto.subtle.digest(\"SHA-256\",enc.encode(s));return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction J(body:any,status=200){return Response.json(body,{status})}\nasync function body(req:Request){try{return await req.json()}catch{return {}}}\nfunction sid(v:any){const s=String(v??\"\");if(!/^[A-Za-z0-9_-]{1,64}$/.test(s))throw new Error(\"BAD_SESSION\");return s}\nfunction now(){return new Date().toISOString()}\nfunction throttleMessage(e:any){return e instanceof Error?e.message:String(e)}\nasync function blobRetry(fn:()=>Promise):Promise{\n let last:any=null;\n for(let attempt=0;attempt<3;attempt++){\n try{return await fn()}catch(e){\n last=e;const m=throttleMessage(e);\n if(!(/too many authenticated requests|HTTP status 429|status.?429/i.test(m))||attempt===2)throw e;\n const sec=Number((m.match(/Retry again in\\s+(\\d+)\\s+seconds?/i)||[])[1]);\n const delay=Number.isFinite(sec)&&sec>0?Math.min(30000,(sec+1)*1000):Math.min(2000,200*(2**attempt));\n await new Promise(resolve=>setTimeout(resolve,delay));\n }\n }\n throw last;\n}\nasync function blobSetJSON(key:string,value:any){return await blobRetry(()=>blob.setJSON(key,value))}\nasync function blobGetJSON(key:string){return await blobRetry(()=>blob.getJSON(key))}\nconst deadline=\"2026-09-10T12:00:00Z\";\n\nasync function init(){\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS a_repo(session TEXT PRIMARY KEY,version INTEGER NOT NULL,source TEXT NOT NULL,updated_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS a_history(session TEXT NOT NULL,version INTEGER NOT NULL,attempt_id TEXT NOT NULL,source_sha256 TEXT NOT NULL,created_at TEXT NOT NULL,PRIMARY KEY(session,version))`,\n `CREATE TABLE IF NOT EXISTS caps(session TEXT NOT NULL,class TEXT NOT NULL,cap_id TEXT NOT NULL,state TEXT NOT NULL,updated_at TEXT NOT NULL,PRIMARY KEY(session,class,cap_id))`,\n `CREATE TABLE IF NOT EXISTS cap_artifacts(session TEXT NOT NULL,class TEXT NOT NULL,cap_id TEXT NOT NULL,stage TEXT NOT NULL,artifact_sha256 TEXT NOT NULL,source TEXT NOT NULL,updated_at TEXT NOT NULL,PRIMARY KEY(session,class,cap_id))`,\n `CREATE TABLE IF NOT EXISTS attempts(session TEXT NOT NULL,class TEXT NOT NULL,attempt_id TEXT NOT NULL,op TEXT NOT NULL,request_hash TEXT NOT NULL,status INTEGER NOT NULL,response_json TEXT NOT NULL,created_at TEXT NOT NULL,updated_at TEXT NOT NULL,PRIMARY KEY(session,class,attempt_id))`,\n `CREATE TABLE IF NOT EXISTS knowledge_receipts(session TEXT NOT NULL,class TEXT NOT NULL,receipt_id TEXT PRIMARY KEY,fact TEXT NOT NULL,query TEXT NOT NULL,result_ids_json TEXT NOT NULL,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS b_state(session TEXT PRIMARY KEY,policy_rev INTEGER NOT NULL,slot_id TEXT NOT NULL,region TEXT NOT NULL,start_at TEXT NOT NULL,duration_min INTEGER NOT NULL,allocated INTEGER NOT NULL DEFAULT 0,updated_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS b_refresh_receipts(session TEXT NOT NULL,token TEXT PRIMARY KEY,policy_rev INTEGER NOT NULL,slot_id TEXT NOT NULL,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS b_refresh_capability_bindings(session TEXT NOT NULL,token TEXT PRIMARY KEY,artifact_sha256 TEXT NOT NULL,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS b_allocations(session TEXT NOT NULL,allocation_id TEXT PRIMARY KEY,slot_id TEXT NOT NULL,region TEXT NOT NULL,start_at TEXT NOT NULL,duration_min INTEGER NOT NULL,policy_rev INTEGER NOT NULL,attempt_id TEXT NOT NULL,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS b_allocation_capability_bindings(session TEXT NOT NULL,allocation_id TEXT PRIMARY KEY,artifact_sha256 TEXT NOT NULL,created_at TEXT NOT NULL)`,\n `CREATE TABLE IF NOT EXISTS recovery_scenarios(session TEXT NOT NULL,class TEXT NOT NULL,mode TEXT NOT NULL,triggered INTEGER NOT NULL DEFAULT 0,updated_at TEXT NOT NULL,PRIMARY KEY(session,class))`\n ]);\n}\nconst ready=init();\n\nasync function resetA(session:string,mode=\"normal\"){\n await ready;\n await sqlite.batch([\n {sql:\"DELETE FROM a_repo WHERE session=?\",args:[session]},\n {sql:\"DELETE FROM a_history WHERE session=?\",args:[session]},\n {sql:\"DELETE FROM caps WHERE session=? AND class='A'\",args:[session]},\n {sql:\"DELETE FROM cap_artifacts WHERE session=? AND class='A'\",args:[session]},\n {sql:\"DELETE FROM attempts WHERE session=? AND class='A'\",args:[session]},\n {sql:\"DELETE FROM knowledge_receipts WHERE session=? AND class='A'\",args:[session]},\n {sql:\"DELETE FROM recovery_scenarios WHERE session=? AND class='A'\",args:[session]}\n ]);\n await sqlite.execute({sql:\"INSERT INTO a_repo(session,version,source,updated_at) VALUES(?,1,?,?)\",args:[session,INITIAL_A_SOURCE,now()]});\n await sqlite.execute({sql:\"INSERT INTO recovery_scenarios(session,class,mode,triggered,updated_at) VALUES(?,'A',?,0,?)\",args:[session,mode,now()]});\n await blobSetJSON(`sessions/${session}/a/knowledge`,A_DOCS);\n return {ok:true,class:\"A\",session,version:1,mode};\n}\nasync function resetB(session:string,mode=\"normal\"){\n await ready;\n await sqlite.batch([\n {sql:\"DELETE FROM caps WHERE session=? AND class='B'\",args:[session]},\n {sql:\"DELETE FROM cap_artifacts WHERE session=? AND class='B'\",args:[session]},\n {sql:\"DELETE FROM attempts WHERE session=? AND class='B'\",args:[session]},\n {sql:\"DELETE FROM knowledge_receipts WHERE session=? AND class='B'\",args:[session]},\n {sql:\"DELETE FROM b_refresh_receipts WHERE session=?\",args:[session]},\n {sql:\"DELETE FROM b_refresh_capability_bindings WHERE session=?\",args:[session]},\n {sql:\"DELETE FROM b_allocations WHERE session=?\",args:[session]},\n {sql:\"DELETE FROM b_allocation_capability_bindings WHERE session=?\",args:[session]},\n {sql:\"DELETE FROM b_state WHERE session=?\",args:[session]},\n {sql:\"DELETE FROM recovery_scenarios WHERE session=? AND class='B'\",args:[session]}\n ]);\n await sqlite.execute({sql:\"INSERT INTO b_state(session,policy_rev,slot_id,region,start_at,duration_min,allocated,updated_at) VALUES(?,7,'slot-new','west','2026-09-10T11:00:00Z',30,0,?)\",args:[session,now()]});\n await sqlite.execute({sql:\"INSERT INTO recovery_scenarios(session,class,mode,triggered,updated_at) VALUES(?,'B',?,0,?)\",args:[session,mode,now()]});\n await blobSetJSON(`sessions/${session}/b/knowledge`,B_DOCS);\n await blobSetJSON(`sessions/${session}/b/policy`,{revision:7,accelerator:\"gpu\",region:\"west\",minimum_duration_min:30,deadline,requires_fresh_revision:true});\n return {ok:true,class:\"B\",session,policy_revision:7,mode};\n}\nexport async function setupForcedRecovery(sessionRaw:string,cls:\"A\"|\"B\"){\n const session=sid(sessionRaw);return cls===\"A\"?await resetA(session,\"forced_recovery_v2\"):await resetB(session,\"forced_recovery_v2\");\n}\nasync function ensureSession(cls:\"A\"|\"B\",session:string){\n if(cls===\"A\"){const r:any=await sqlite.execute({sql:\"SELECT session FROM a_repo WHERE session=?\",args:[session]});if(!(r.rows||[]).length)await resetA(session)}\n else {const r:any=await sqlite.execute({sql:\"SELECT session FROM b_state WHERE session=?\",args:[session]});if(!(r.rows||[]).length)await resetB(session)}\n}\nasync function recoveryState(session:string,cls:\"A\"|\"B\"){\n const r:any=(await sqlite.execute({sql:\"SELECT mode,triggered FROM recovery_scenarios WHERE session=? AND class=?\",args:[session,cls]})).rows?.[0];\n return {mode:String(r?.mode??\"normal\"),triggered:Number(r?.triggered??0)===1};\n}\nasync function triggerForcedRecovery(session:string,cls:\"A\"|\"B\"){\n const st=await recoveryState(session,cls);if(st.mode!==\"forced_recovery_v2\"||st.triggered)return false;\n await sqlite.execute({sql:\"UPDATE recovery_scenarios SET triggered=1,updated_at=? WHERE session=? AND class=? AND triggered=0\",args:[now(),session,cls]});\n if(cls===\"A\"){\n const r:any=(await sqlite.execute({sql:\"SELECT version,source FROM a_repo WHERE session=?\",args:[session]})).rows?.[0];\n const src=String(r.source)+`\\nexport const upstreamRecoverySentinel = \"KEEP_RECOVERY_V2\";\\n`;\n const nv=Number(r.version)+1,hs=await sha(src);\n await sqlite.execute({sql:\"UPDATE a_repo SET version=?,source=?,updated_at=? WHERE session=?\",args:[nv,src,now(),session]});\n await sqlite.execute({sql:\"INSERT INTO a_history(session,version,attempt_id,source_sha256,created_at) VALUES(?,?,?,?,?)\",args:[session,nv,\"EXOGENOUS_RECOVERY_V2\",hs,now()]});\n }else{\n await sqlite.execute({sql:\"UPDATE b_state SET slot_id='slot-recovery',start_at='2026-09-10T11:15:00Z',duration_min=30,updated_at=? WHERE session=?\",args:[now(),session]});\n }\n return true;\n}\nasync function mutate(session:string,cls:\"A\"|\"B\",attemptId:string,op:string,payload:any,fn:()=>Promise<{status:number,body:any}>){\n if(!/^[A-Za-z0-9_-]{4,96}$/.test(attemptId))return {status:400,body:{ok:false,error:\"BAD_ATTEMPT_ID\"}};\n const requestHash=await sha(JSON.stringify({op,payload}));\n const inserted:any=await sqlite.execute({sql:`INSERT INTO attempts(session,class,attempt_id,op,request_hash,status,response_json,created_at,updated_at)\n VALUES(?,?,?,?,?,-1,'',?,?) ON CONFLICT(session,class,attempt_id) DO NOTHING RETURNING attempt_id`,args:[session,cls,attemptId,op,requestHash,now(),now()]});\n if(!(inserted.rows||[]).length){\n const ex:any=(await sqlite.execute({sql:\"SELECT request_hash,status,response_json FROM attempts WHERE session=? AND class=? AND attempt_id=?\",args:[session,cls,attemptId]})).rows?.[0];\n if(!ex)return {status:409,body:{ok:false,error:\"ATTEMPT_RECONCILIATION_MISSING\"}};\n if(String(ex.request_hash)!==requestHash)return {status:409,body:{ok:false,error:\"AMBIGUOUS_ATTEMPT_ID\",attempt_id:attemptId}};\n if(Number(ex.status)===-1)return {status:409,body:{ok:false,error:\"ATTEMPT_OUTCOME_UNKNOWN\",attempt_id:attemptId}};\n return {status:Number(ex.status),body:JSON.parse(String(ex.response_json)),replay:true};\n }\n let out:{status:number,body:any};\n try{out=await fn()}catch(e){out={status:500,body:{ok:false,error:\"MUTATION_EXCEPTION\",detail:e instanceof Error?e.message:String(e)}}}\n await sqlite.execute({sql:\"UPDATE attempts SET status=?,response_json=?,updated_at=? WHERE session=? AND class=? AND attempt_id=? AND request_hash=?\",args:[out.status,JSON.stringify(out.body),now(),session,cls,attemptId,requestHash]});\n return out;\n}\nasync function capState(session:string,cls:\"A\"|\"B\",capId:string){return (await sqlite.execute({sql:\"SELECT state FROM caps WHERE session=? AND class=? AND cap_id=?\",args:[session,cls,capId]})).rows?.[0]?.state??null}\nasync function capArtifactRow(session:string,cls:\"A\"|\"B\",capId:string){\n return (await sqlite.execute({sql:\"SELECT stage,artifact_sha256,source FROM cap_artifacts WHERE session=? AND class=? AND cap_id=?\",args:[session,cls,capId]})).rows?.[0]??null;\n}\nasync function loadCapArtifact(session:string,cls:\"A\"|\"B\",capId:string,requiredStage?:string){\n const row:any=await capArtifactRow(session,cls,capId);if(!row)return null;\n if(requiredStage&&String(row.stage)!==requiredStage)return null;\n if(await sha(String(row.source))!==String(row.artifact_sha256))throw new Error(\"CAPABILITY_ARTIFACT_HASH_MISMATCH\");\n const mod:any=await importCapabilityArtifact(String(row.source),String(row.artifact_sha256));\n return {row,mod,artifact_sha256:String(row.artifact_sha256)};\n}\nasync function registeredArtifact(session:string,cls:\"A\"|\"B\",capId:string){\n if(String(await capState(session,cls,capId))!==\"REGISTERED\")return null;\n return await loadCapArtifact(session,cls,capId,\"REGISTERED\");\n}\nasync function runRegisteredA(session:string,capabilityId:string,input:string){\n const cap=capById(\"A\",capabilityId);if(!cap)return null;\n const art:any=await registeredArtifact(session,\"A\",cap.id);if(!art||typeof art.mod.run!==\"function\")return null;\n const r:any=await art.mod.run(String(input));\n return {...(r&&typeof r===\"object\"?r:{value:r}),artifact_sha256:art.artifact_sha256,capability_id:cap.id};\n}\nasync function capLifecycle(session:string,cls:\"A\"|\"B\",op:\"acquire\"|\"build\"|\"test\"|\"register\",b:any){\n const cap=capById(cls,String(b.capability_id||\"\"));if(!cap)return {status:404,body:{ok:false,error:\"UNKNOWN_CAPABILITY\"}};\n return await mutate(session,cls,String(b.attempt_id||\"\"),`cap:${op}`,{capability_id:cap.id},async()=>{\n const state=String(await capState(session,cls,cap.id)??\"\");\n if(op===\"acquire\"){\n const source=capabilityArtifactSource(cls,cap),artifact_sha256=await sha(source);\n await sqlite.execute({sql:\"INSERT INTO cap_artifacts(session,class,cap_id,stage,artifact_sha256,source,updated_at) VALUES(?,?,?,'ACQUIRED',?,?,?) ON CONFLICT(session,class,cap_id) DO UPDATE SET stage='ACQUIRED',artifact_sha256=excluded.artifact_sha256,source=excluded.source,updated_at=excluded.updated_at\",args:[session,cls,cap.id,artifact_sha256,source,now()]});\n await sqlite.execute({sql:\"INSERT INTO caps(session,class,cap_id,state,updated_at) VALUES(?,?,?,'ACQUIRED',?) ON CONFLICT(session,class,cap_id) DO UPDATE SET state='ACQUIRED',updated_at=excluded.updated_at\",args:[session,cls,cap.id,now()]});\n return {status:200,body:{ok:true,capability_id:cap.id,state:\"ACQUIRED\",family:cap.family,package_sha256:artifact_sha256,next_valid_operation:\"build\"}};\n }\n if(op===\"build\"){\n if(![\"ACQUIRED\",\"BUILT\",\"TESTED\",\"REGISTERED\"].includes(state))return {status:409,body:{ok:false,error:\"CAPABILITY_NOT_ACQUIRED\"}};\n const art:any=await loadCapArtifact(session,cls,cap.id);if(!art)return {status:409,body:{ok:false,error:\"CAPABILITY_ARTIFACT_NOT_ACQUIRED\"}};\n if(typeof art.mod.selftest!==\"function\")return {status:422,body:{ok:false,error:\"CAPABILITY_ARTIFACT_NOT_EXECUTABLE\"}};\n await sqlite.execute({sql:\"UPDATE cap_artifacts SET stage='BUILT',updated_at=? WHERE session=? AND class=? AND cap_id=?\",args:[now(),session,cls,cap.id]});\n await sqlite.execute({sql:\"UPDATE caps SET state='BUILT',updated_at=? WHERE session=? AND class=? AND cap_id=?\",args:[now(),session,cls,cap.id]});\n return {status:200,body:{ok:true,capability_id:cap.id,state:\"BUILT\",build_artifact_sha256:art.artifact_sha256,next_valid_operation:\"test\"}};\n }\n if(op===\"test\"){\n if(![\"BUILT\",\"TESTED\",\"REGISTERED\"].includes(state))return {status:409,body:{ok:false,error:\"CAPABILITY_NOT_BUILT\"}};\n const art:any=await loadCapArtifact(session,cls,cap.id);if(!art||![\"BUILT\",\"TESTED\",\"REGISTERED\"].includes(String(art.row.stage)))return {status:409,body:{ok:false,error:\"CAPABILITY_ARTIFACT_NOT_BUILT\"}};\n let pass=false;try{pass=(await art.mod.selftest())===true}catch{}\n if(!pass)return {status:422,body:{ok:false,error:\"CAPABILITY_SELFTEST_FAILED\",artifact_sha256:art.artifact_sha256}};\n await sqlite.execute({sql:\"UPDATE cap_artifacts SET stage='TESTED',updated_at=? WHERE session=? AND class=? AND cap_id=?\",args:[now(),session,cls,cap.id]});\n await sqlite.execute({sql:\"UPDATE caps SET state='TESTED',updated_at=? WHERE session=? AND class=? AND cap_id=?\",args:[now(),session,cls,cap.id]});\n return {status:200,body:{ok:true,capability_id:cap.id,state:\"TESTED\",test:{pass:true,artifact_sha256:art.artifact_sha256},next_valid_operation:\"register\"}};\n }\n if(![\"TESTED\",\"REGISTERED\"].includes(state))return {status:409,body:{ok:false,error:\"CAPABILITY_NOT_TESTED\"}};\n const art:any=await loadCapArtifact(session,cls,cap.id);if(!art||![\"TESTED\",\"REGISTERED\"].includes(String(art.row.stage)))return {status:409,body:{ok:false,error:\"CAPABILITY_ARTIFACT_NOT_TESTED\"}};\n await sqlite.execute({sql:\"UPDATE cap_artifacts SET stage='REGISTERED',updated_at=? WHERE session=? AND class=? AND cap_id=?\",args:[now(),session,cls,cap.id]});\n await sqlite.execute({sql:\"UPDATE caps SET state='REGISTERED',updated_at=? WHERE session=? AND class=? AND cap_id=?\",args:[now(),session,cls,cap.id]});\n return {status:200,body:{ok:true,capability_id:cap.id,state:\"REGISTERED\",family:cap.family,artifact_sha256:art.artifact_sha256,next_valid_operation:null}};\n });\n}\nasync function knowledgeSearch(session:string,cls:\"A\"|\"B\",q:string){\n const docs=searchDocs(cls,q).slice(0,8);\n const fact=cls===\"A\"?(docs.some(x=>x.id===\"doc-a-01\")?\"wire-v3\":\"none\"):(docs.some(x=>x.id===\"doc-b-01\")?\"policy-v7\":\"none\");\n const receiptId=\"kr-\"+(await sha(`${session}|${cls}|${q}|${docs.map(x=>x.id).join(\",\")}`)).slice(0,24);\n await sqlite.execute({sql:\"INSERT OR REPLACE INTO knowledge_receipts(session,class,receipt_id,fact,query,result_ids_json,created_at) VALUES(?,?,?,?,?,?,?)\",args:[session,cls,receiptId,fact,q,JSON.stringify(docs.map(x=>x.id)),now()]});\n return {ok:true,query:q,query_semantics:\"ALL_WHITESPACE_TERMS_MUST_MATCH\",results:docs,knowledge_receipt:receiptId,causal_fact_available:fact!==\"none\",recovery_hint:docs.length?null:\"Retry with fewer discriminative terms; do not infer absence from an over-constrained query.\"};\n}\nasync function requireKnowledge(session:string,cls:\"A\"|\"B\",receipt:string,fact:string){const r:any=(await sqlite.execute({sql:\"SELECT fact FROM knowledge_receipts WHERE session=? AND class=? AND receipt_id=?\",args:[session,cls,receipt]})).rows?.[0];return !!r&&String(r.fact)===fact}\nasync function registeredIds(session:string,cls:\"A\"|\"B\"){const r:any=await sqlite.execute({sql:\"SELECT cap_id FROM caps WHERE session=? AND class=? AND state='REGISTERED' ORDER BY cap_id\",args:[session,cls]});return (r.rows||[]).map((x:any)=>String(x.cap_id))}\nasync function hasCurrentKnowledge(session:string,cls:\"A\"|\"B\"){const fact=cls===\"A\"?\"wire-v3\":\"policy-v7\";const r:any=await sqlite.execute({sql:\"SELECT 1 ok FROM knowledge_receipts WHERE session=? AND class=? AND fact=? LIMIT 1\",args:[session,cls,fact]});return !!(r.rows||[]).length}\nasync function detailedABuild(session:string){const r:any=(await sqlite.execute({sql:\"SELECT version,source FROM a_repo WHERE session=?\",args:[session]})).rows?.[0];const regs=await registeredIds(session,\"A\"),sc=await recoveryState(session,\"A\"),base=await buildA(String(r.source),async(id,input)=>await runRegisteredA(session,id,input));const extra=sc.mode===\"forced_recovery_v2\"&&sc.triggered?{id:\"recovery-upstream-preserved\",pass:String(r.source).includes('upstreamRecoverySentinel = \"KEEP_RECOVERY_V2\"')} : null;const build=extra?{...base,tests:[...base.tests,extra],pass:base.pass&&extra.pass}:base;return {version:Number(r.version),source:String(r.source),build,registered_capabilities:regs,recovery:sc}}\nexport async function inspectABuildForHarness(sessionRaw:string){await ready;const session=sid(sessionRaw);await ensureSession(\"A\",session);return await detailedABuild(session)}\n\nconst ADAPTER={\n schema:\"FIRST_SUPERHERO_CROSS_DOMAIN_PUBLIC_ADAPTER_V2\",\n non_scored:true,\n heldout:false,\n sessions:\"Caller supplies an isolated session id. POST //reset creates the ordinary initial state for that session.\",\n goals:{A:\"GET /a/goal?session=...\",B:\"GET /b/goal?session=...\"},\n affordances:{\n common:[\"knowledge search\",\"capability search\",\"capability lifecycle operations\",\"registered capability execution\"],\n A:[\"repository list/read\",\"source patch\",\"deterministic build/test\"],\n B:[\"resource-state snapshot\",\"remote scheduling capability execution\",\"allocation readback\",\"deterministic post-action verification\"]\n },\n request_contracts:{\n knowledge_search:{method:\"GET\",path:\"//knowledge/search\",query:{q:\"string\"}},\n capability_search:{method:\"GET\",path:\"//capabilities/search\",query:{q:\"string\"}},\n capability_lifecycle:{method:\"POST\",paths:[\"//capabilities/acquire\",\"//capabilities/build\",\"//capabilities/test\",\"//capabilities/register\"],body:{capability_id:\"string\",attempt_id:\"unique [A-Za-z0-9_-]{4,96}\"}},\n A_repo_list:{method:\"GET\",path:\"/a/repo/list\"},\n A_repo_read:{method:\"GET\",path:\"/a/repo/read\"},\n A_repo_patch:{method:\"POST\",path:\"/a/repo/patch\",body_fields:[\"attempt_id\",\"path\",\"expected_version\",\"content\",\"knowledge_receipt\"]},\n A_build:{method:\"GET\",path:\"/a/build\"},\n A_capability_run:{method:\"POST\",path:\"/a/capabilities/run\",body_fields:[\"capability_id\",\"input\"]},\n B_snapshot:{method:\"GET\",path:\"/b/cache\"},\n B_capability_run:{method:\"POST\",path:\"/b/capabilities/run\",body:\"operation-specific JSON\"},\n B_readback:{method:\"GET\",path:\"/b/readback\",query:{allocation_id:\"string\"}},\n B_verify:{method:\"GET\",path:\"/b/verify\",query:{allocation_id:\"string\"}}\n },\n budget_compatibility:[\"2-call challenger\",\"3-call adaptive challenger\"],\n capability_artifact_semantics:{\n acquisition:\"Capability lifecycle materializes a content-addressed executable artifact absent from the initially registered runnable set.\",\n execution:\"Action paths consume the exact registered artifact and bind its hash into receipts/readback.\"\n },\n A_build_disclosure:\"Before current authoritative knowledge is acquired, /a/build exposes only opaque deterministic pass/fail receipt metadata; detailed diagnostics appear only after causal knowledge acquisition.\",\n disclosure_boundary:\"Ordinary public I/O only. Hidden benchmark internals and pre-knowledge decision-relevant verifier structure are intentionally omitted.\"\n};\n\nexport async function handle(req:Request):Promise{\n await ready;const u=new URL(req.url),p=u.pathname;\n if(req.method===\"GET\"&&p===\"/\")return J({ok:true,schema:\"FIRST_SUPERHERO_CROSS_DOMAIN_PUBLIC_SANDBOX_V1\",non_scored:true,heldout_seed_generation:false,classes:[\"A_SOFTWARE_REPOSITORY_REPAIR\",\"B_LIVE_EXTERNAL_RESOURCE_SCHEDULING_STATE_CHANGE\"],adapter:\"/adapter\"});\n if(req.method===\"GET\"&&p===\"/adapter\")return J(ADAPTER);\n const cls=p.startsWith(\"/a/\")?\"A\":p.startsWith(\"/b/\")?\"B\":null;if(!cls)return J({ok:false,error:\"NOT_FOUND\"},404);\n let session:string;try{session=sid(u.searchParams.get(\"session\")||\"public\")}catch{return J({ok:false,error:\"BAD_SESSION\"},400)}\n if(req.method===\"POST\"&&p===`/${cls.toLowerCase()}/reset`){const b:any=await body(req),mode=String(b?.mode??\"normal\");if(mode!==\"normal\")return J({ok:false,error:\"HARNESS_ONLY_RECOVERY_MODE\"},403);const cur=await recoveryState(session,cls);if(cur.mode===\"forced_recovery_v2\")return J({ok:false,error:\"RECOVERY_SESSION_RESET_FORBIDDEN\"},409);return J(cls===\"A\"?await resetA(session,\"normal\"):await resetB(session,\"normal\"));}\n await ensureSession(cls,session);\n if(req.method===\"GET\"&&p===`/${cls.toLowerCase()}/goal`){\n return J(cls===\"A\"?{ok:true,goal:\"Repair the versioned software project so it satisfies the current wire-compatibility contract and all deterministic build/tests while preserving unrelated behavior.\",constraints:[\"Preserve unrelated behavior.\",\"Leave a fresh passing build/test receipt.\"],public_facts:{repository_versioned:true}}:\n {ok:true,goal:\"Reserve one 30-minute GPU resource before the deadline under the current live policy and availability, leaving a remotely verifiable allocation.\",constraints:[\"Satisfy the current live service constraints.\",\"Leave a verifiable remote allocation.\"],public_facts:{duration_min:30,accelerator:\"gpu\",deadline}});\n }\n if(req.method===\"GET\"&&p===`/${cls.toLowerCase()}/knowledge/search`)return J(await knowledgeSearch(session,cls,u.searchParams.get(\"q\")||\"\"));\n if(req.method===\"GET\"&&p===`/${cls.toLowerCase()}/capabilities/search`){const q=u.searchParams.get(\"q\")||\"\",results=searchCaps(cls,q).slice(0,12).map(x=>({id:x.id,title:x.title,family:x.family,summary:x.summary}));return J({ok:true,query:q,query_semantics:\"ALL_WHITESPACE_TERMS_MUST_MATCH\",results,recovery_hint:results.length?null:\"Retry with fewer discriminative terms; do not infer absence from an over-constrained query.\"})}\n if(req.method===\"POST\"&&[/\\/a\\/capabilities\\/(acquire|build|test|register)/,/\\/b\\/capabilities\\/(acquire|build|test|register)/].some(r=>r.test(p))){\n const op=p.split(\"/\").at(-1) as \"acquire\"|\"build\"|\"test\"|\"register\";const b=await body(req);const out=await capLifecycle(session,cls,op,b);return J(out.body,out.status);\n }\n if(cls===\"A\"){\n if(req.method===\"GET\"&&p===\"/a/repo/list\"){const r:any=(await sqlite.execute({sql:\"SELECT version,updated_at FROM a_repo WHERE session=?\",args:[session]})).rows?.[0];return J({ok:true,version:Number(r.version),paths:[\"src/encode.ts\"],updated_at:r.updated_at})}\n if(req.method===\"GET\"&&p===\"/a/repo/read\"){const r:any=(await sqlite.execute({sql:\"SELECT version,source,updated_at FROM a_repo WHERE session=?\",args:[session]})).rows?.[0];return J({ok:true,path:\"src/encode.ts\",version:Number(r.version),content:String(r.source),updated_at:r.updated_at})}\n if(req.method===\"POST\"&&p===\"/a/repo/patch\"){const b:any=await body(req);const out=await mutate(session,\"A\",String(b.attempt_id||\"\"),\"repo_patch\",{expected_version:b.expected_version,path:b.path,content:b.content,knowledge_receipt:b.knowledge_receipt},async()=>{\n if(String(b.path)!==\"src/encode.ts\")return {status:404,body:{ok:false,error:\"UNKNOWN_PATH\"}};\n if(!(await requireKnowledge(session,\"A\",String(b.knowledge_receipt||\"\"),\"wire-v3\")))return {status:409,body:{ok:false,error:\"CAUSAL_CURRENT_KNOWLEDGE_REQUIRED\"}};\n const regs=await registeredIds(session,\"A\");if(!regs.length)return {status:409,body:{ok:false,error:\"REGISTERED_EXECUTABLE_CAPABILITY_REQUIRED\"}};\n if(await triggerForcedRecovery(session,\"A\")){const cur:any=(await sqlite.execute({sql:\"SELECT version FROM a_repo WHERE session=?\",args:[session]})).rows?.[0];return {status:409,body:{ok:false,error:\"STALE_SOURCE_VERSION\",current_version:Number(cur.version),replan_required:true,exogenous_change:true}};}\n const cur:any=(await sqlite.execute({sql:\"SELECT version FROM a_repo WHERE session=?\",args:[session]})).rows?.[0];if(Number(cur.version)!==Number(b.expected_version))return {status:409,body:{ok:false,error:\"STALE_SOURCE_VERSION\",current_version:Number(cur.version)}};\n const src=String(b.content??\"\");if(!src||src.length>5000)return {status:400,body:{ok:false,error:\"BAD_SOURCE\"}};\n const nv=Number(cur.version)+1,hs=await sha(src);await sqlite.execute({sql:\"UPDATE a_repo SET version=?,source=?,updated_at=? WHERE session=?\",args:[nv,src,now(),session]});await sqlite.execute({sql:\"INSERT INTO a_history(session,version,attempt_id,source_sha256,created_at) VALUES(?,?,?,?,?)\",args:[session,nv,String(b.attempt_id),hs,now()]});\n return {status:200,body:{ok:true,path:\"src/encode.ts\",version:nv,source_sha256:hs,receipt:{attempt_id:b.attempt_id}}};\n });return J(out.body,out.status)}\n if(req.method===\"GET\"&&p===\"/a/build\"){const d:any=await detailedABuild(session),kn=await hasCurrentKnowledge(session,\"A\"),source_sha256=await sha(d.source),receipt_sha256=await sha(JSON.stringify({schema:\"A_BUILD_RECEIPT_V2\",session,version:d.version,source_sha256,pass:d.build.pass,capability_artifact_sha256:d.build.capability_artifact_sha256??null,test_count:d.build.tests.length}));const build=kn?{...d.build,receipt_sha256}:{pass:d.build.pass,receipt_sha256,test_count:d.build.tests.length};return J({ok:true,version:d.version,build,recovery:{mode:d.recovery.mode,triggered:d.recovery.triggered}})}\n if(req.method===\"POST\"&&p===\"/a/capabilities/run\"){const b:any=await body(req),cap=capById(\"A\",String(b.capability_id||\"\"));if(!cap)return J({ok:false,error:\"UNKNOWN_CAPABILITY\"},404);const result:any=await runRegisteredA(session,cap.id,String(b.input??\"\"));if(!result)return J({ok:false,error:\"CAPABILITY_NOT_REGISTERED\"},403);return J({ok:true,capability_id:cap.id,result})}\n }else{\n if(req.method===\"GET\"&&p===\"/b/cache\")return J({ok:true,advisory:true,revision:6,slots:[{slot_id:\"slot-old\",region:\"east\",start_at:\"2026-09-10T10:00:00Z\",duration_min:30,accelerator:\"gpu\"}]});\n if(req.method===\"POST\"&&p===\"/b/capabilities/run\"){const b:any=await body(req),cap=capById(\"B\",String(b.capability_id||\"\"));if(!cap)return J({ok:false,error:\"UNKNOWN_CAPABILITY\"},404);if(String(await capState(session,\"B\",cap.id))!==\"REGISTERED\")return J({ok:false,error:\"CAPABILITY_NOT_REGISTERED\"},403);if(cap.kind!==\"scheduler_v3\")return J({ok:false,error:\"CAPABILITY_HAS_NO_REMOTE_ACTION_INTERFACE\",family:cap.family},422);\n if(String(b.op)===\"refresh\"){const art:any=await registeredArtifact(session,\"B\",cap.id);if(!art||typeof art.mod.refresh!==\"function\")return J({ok:false,error:\"CAPABILITY_ARTIFACT_NOT_REGISTERED\"},403);const st:any=(await sqlite.execute({sql:\"SELECT * FROM b_state WHERE session=?\",args:[session]})).rows?.[0];const policy:any=await blobGetJSON(`sessions/${session}/b/policy`),planned:any=await art.mod.refresh(st,policy);if(!planned?.ok)return J({ok:false,error:planned?.error??\"CAPABILITY_REFRESH_FAILED\"},422);const token=await sha(`fresh|${session}|${st.policy_rev}|${st.slot_id}|${st.updated_at}|${art.artifact_sha256}`);await sqlite.execute({sql:\"INSERT OR REPLACE INTO b_refresh_receipts(session,token,policy_rev,slot_id,created_at) VALUES(?,?,?,?,?)\",args:[session,token,Number(st.policy_rev),String(st.slot_id),now()]});await sqlite.execute({sql:\"INSERT OR REPLACE INTO b_refresh_capability_bindings(session,token,artifact_sha256,created_at) VALUES(?,?,?,?)\",args:[session,token,art.artifact_sha256,now()]});return J({ok:true,op:\"refresh\",policy:planned.policy,availability:planned.availability,freshness_token:token,capability_artifact_sha256:art.artifact_sha256})}\n if(String(b.op)===\"allocate\"){const out=await mutate(session,\"B\",String(b.attempt_id||\"\"),\"allocate\",{capability_id:cap.id,slot_id:b.slot_id,region:b.region,start_at:b.start_at,duration_min:b.duration_min,policy_revision:b.policy_revision,freshness_token:b.freshness_token,knowledge_receipt:b.knowledge_receipt},async()=>{\n if(!(await requireKnowledge(session,\"B\",String(b.knowledge_receipt||\"\"),\"policy-v7\")))return {status:409,body:{ok:false,error:\"CURRENT_POLICY_KNOWLEDGE_REQUIRED\"}};\n if(await triggerForcedRecovery(session,\"B\"))return {status:409,body:{ok:false,error:\"FRESH_READ_REQUIRED\",replan_required:true,exogenous_change:true}};\n const art:any=await registeredArtifact(session,\"B\",cap.id);if(!art||typeof art.mod.validateAllocation!==\"function\")return {status:403,body:{ok:false,error:\"CAPABILITY_ARTIFACT_NOT_REGISTERED\"}};\n const st:any=(await sqlite.execute({sql:\"SELECT * FROM b_state WHERE session=?\",args:[session]})).rows?.[0],policy:any=await blobGetJSON(`sessions/${session}/b/policy`);\n const fr:any=(await sqlite.execute({sql:\"SELECT r.policy_rev,r.slot_id,b.artifact_sha256 FROM b_refresh_receipts r LEFT JOIN b_refresh_capability_bindings b ON b.session=r.session AND b.token=r.token WHERE r.session=? AND r.token=?\",args:[session,String(b.freshness_token||\"\")]})).rows?.[0];\n const verdict:any=await art.mod.validateAllocation({slot_id:b.slot_id,region:b.region,start_at:b.start_at,duration_min:b.duration_min,policy_revision:b.policy_revision},st,fr,policy,deadline);\n if(!verdict?.ok)return {status:Number(verdict?.status)||422,body:{ok:false,error:String(verdict?.error||\"CAPABILITY_VALIDATION_FAILED\"),replan_required:verdict?.replan_required===true,...(verdict?.current_revision!==undefined?{current_revision:Number(verdict.current_revision)}:{})}};\n if(String(fr?.artifact_sha256||\"\")!==art.artifact_sha256)return {status:409,body:{ok:false,error:\"FRESHNESS_CAPABILITY_BINDING_MISMATCH\",replan_required:true}};\n const allocationId=\"alloc-\"+(await sha(`${session}|${b.attempt_id}|${st.slot_id}|${art.artifact_sha256}`)).slice(0,20);\n await sqlite.execute({sql:\"INSERT INTO b_allocations(session,allocation_id,slot_id,region,start_at,duration_min,policy_rev,attempt_id,created_at) VALUES(?,?,?,?,?,?,?,?,?)\",args:[session,allocationId,st.slot_id,st.region,st.start_at,Number(st.duration_min),Number(st.policy_rev),String(b.attempt_id),now()]});\n await sqlite.execute({sql:\"INSERT INTO b_allocation_capability_bindings(session,allocation_id,artifact_sha256,created_at) VALUES(?,?,?,?)\",args:[session,allocationId,art.artifact_sha256,now()]});\n await sqlite.execute({sql:\"UPDATE b_state SET allocated=1,updated_at=? WHERE session=?\",args:[now(),session]});\n return {status:200,body:{ok:true,allocation_id:allocationId,receipt:{attempt_id:b.attempt_id,policy_revision:Number(st.policy_rev),slot_id:st.slot_id,capability_artifact_sha256:art.artifact_sha256}}};\n });return J(out.body,out.status)}\n return J({ok:false,error:\"UNKNOWN_CAPABILITY_OPERATION\"},400);\n }\n if(req.method===\"GET\"&&p===\"/b/readback\"){const id=String(u.searchParams.get(\"allocation_id\")||\"\"),r:any=(await sqlite.execute({sql:\"SELECT * FROM b_allocations WHERE session=? AND allocation_id=?\",args:[session,id]})).rows?.[0],bind:any=(await sqlite.execute({sql:\"SELECT artifact_sha256 FROM b_allocation_capability_bindings WHERE session=? AND allocation_id=?\",args:[session,id]})).rows?.[0];return r?J({ok:true,allocation:r,capability_artifact_sha256:bind?.artifact_sha256??null}):J({ok:false,error:\"ALLOCATION_NOT_FOUND\"},404)}\n if(req.method===\"GET\"&&p===\"/b/verify\"){const id=String(u.searchParams.get(\"allocation_id\")||\"\"),r:any=(await sqlite.execute({sql:\"SELECT * FROM b_allocations WHERE session=? AND allocation_id=?\",args:[session,id]})).rows?.[0];if(!r)return J({ok:false,error:\"ALLOCATION_NOT_FOUND\"},404);const policy:any=await blobGetJSON(`sessions/${session}/b/policy`),bind:any=(await sqlite.execute({sql:\"SELECT artifact_sha256 FROM b_allocation_capability_bindings WHERE session=? AND allocation_id=?\",args:[session,id]})).rows?.[0];const checks={revision:Number(r.policy_rev)===Number(policy.revision),region:String(r.region)===String(policy.region),duration:Number(r.duration_min)>=Number(policy.minimum_duration_min),deadline:Date.parse(String(r.start_at))+Number(r.duration_min)*60000<=Date.parse(String(policy.deadline)),accelerator:String(policy.accelerator)===\"gpu\",capability_binding:typeof bind?.artifact_sha256===\"string\"&&String(bind.artifact_sha256).length===64};return J({ok:true,pass:Object.values(checks).every(Boolean),checks,allocation_id:id,independent_readback:true,capability_artifact_sha256:bind?.artifact_sha256??null})}\n }\n return J({ok:false,error:\"NOT_FOUND\"},404);\n}\nexport default handle;\n",[],[285,417],"3cf32b93-4e2f-4a2d-b4ba-c1e15c42214d","core.ts","01a0a2aa-cd10-7344-99c4-fa69a9dfb1de",["D",1789435497751],"export type Cap={id:string,title:string,family:string,summary:string,kind:string};\nexport const A_CAPS:Cap[]=[\n {id:\"a-7f2c\",title:\"Castagnoli checksum engine\",family:\"binary-integrity-transform\",summary:\"32-bit CRC using the Castagnoli polynomial; deterministic byte checksum\",kind:\"crc32c\"},\n {id:\"a-13aa\",title:\"IEEE checksum engine\",family:\"binary-integrity-transform\",summary:\"32-bit CRC using the IEEE polynomial; common legacy checksum\",kind:\"crc32\"},\n {id:\"a-c211\",title:\"Canonical JSON encoder\",family:\"serialization\",summary:\"Stable object-key ordering and compact JSON encoding\",kind:\"canonical_json\"},\n {id:\"a-53d0\",title:\"Unicode normalizer\",family:\"text-normalization\",summary:\"NFKC text normalization and Unicode-aware lowercasing\",kind:\"nfkc\"},\n {id:\"a-62e1\",title:\"Semantic-version comparator\",family:\"dependency-analysis\",summary:\"Compare semantic versions and range constraints\",kind:\"semver\"},\n {id:\"a-2ac4\",title:\"YAML structural reader\",family:\"config-parsing\",summary:\"Read YAML-style configuration structures\",kind:\"yaml\"},\n {id:\"a-8bf5\",title:\"SHA-256 digest engine\",family:\"cryptographic-digest\",summary:\"SHA-256 digest for byte strings\",kind:\"sha256\"},\n {id:\"a-b370\",title:\"Base64 codec\",family:\"binary-codec\",summary:\"Encode and decode Base64 payloads\",kind:\"base64\"},\n {id:\"a-9e18\",title:\"Regex lint helper\",family:\"static-analysis\",summary:\"Check regular-expression syntax and flags\",kind:\"regex\"},\n {id:\"a-f414\",title:\"Brotli codec\",family:\"compression\",summary:\"Compress structured payloads with Brotli\",kind:\"brotli\"},\n {id:\"a-4b90\",title:\"Timestamp parser\",family:\"time-parsing\",summary:\"Parse RFC3339 timestamps\",kind:\"time\"},\n {id:\"a-e755\",title:\"Diff summarizer\",family:\"source-analysis\",summary:\"Summarize line-oriented source changes\",kind:\"diff\"}\n];\nexport const B_CAPS:Cap[]=[\n {id:\"b-9d31\",title:\"Revision-aware scheduling client\",family:\"remote-resource-action\",summary:\"Refresh policy/availability revisions and perform fenced remote allocations\",kind:\"scheduler_v3\"},\n {id:\"b-02c8\",title:\"Static calendar parser\",family:\"calendar-read\",summary:\"Parse static calendar blocks without remote mutation support\",kind:\"calendar\"},\n {id:\"b-a81f\",title:\"Capacity estimator\",family:\"resource-estimation\",summary:\"Estimate aggregate resource demand from historical samples\",kind:\"estimate\"},\n {id:\"b-7640\",title:\"Timezone converter\",family:\"time-conversion\",summary:\"Convert timestamps between named zones\",kind:\"timezone\"},\n {id:\"b-1d20\",title:\"Queue metrics reader\",family:\"observability\",summary:\"Read queue latency and throughput metrics\",kind:\"metrics\"},\n {id:\"b-66be\",title:\"Policy text indexer\",family:\"policy-search\",summary:\"Search policy text snapshots\",kind:\"policy_search\"},\n {id:\"b-3e73\",title:\"Notification sender\",family:\"messaging\",summary:\"Send allocation notifications; cannot allocate resources\",kind:\"notify\"},\n {id:\"b-c544\",title:\"Cost calculator\",family:\"resource-estimation\",summary:\"Compute quoted cost from a fixed schedule\",kind:\"cost\"},\n {id:\"b-905a\",title:\"Static reservation formatter\",family:\"serialization\",summary:\"Format reservation requests without live submission\",kind:\"format\"},\n {id:\"b-f89c\",title:\"Availability cache reader\",family:\"cache-read\",summary:\"Read cached availability snapshots that may be stale\",kind:\"cache\"},\n {id:\"b-441d\",title:\"SLA checker\",family:\"constraint-check\",summary:\"Check declared service-level objectives\",kind:\"sla\"},\n {id:\"b-b71a\",title:\"Audit receipt decoder\",family:\"receipt-read\",summary:\"Decode remote action receipt envelopes\",kind:\"receipt\"}\n];\nexport const A_DOCS=[\n {id:\"doc-a-01\",title:\"Wire contract revision 3\",tags:[\"wire\",\"current\",\"checksum\"],text:\"Current wire contract revision is 3. Labels are canonicalized with Unicode NFKC then lowercase. Integrity uses CRC32C (Castagnoli), not legacy IEEE CRC32.\"},\n {id:\"doc-a-02\",title:\"Legacy wire contract revision 2\",tags:[\"legacy\",\"checksum\"],text:\"Revision 2 historically used ASCII lowercase and an IEEE CRC32 helper. This document is retained for migration archaeology and is not current.\"},\n {id:\"doc-a-03\",title:\"Build system notes\",tags:[\"build\"],text:\"Build acceptance requires the source sentinel to remain unchanged and all deterministic compatibility vectors to pass.\"},\n {id:\"doc-a-04\",title:\"Repository history\",tags:[\"history\"],text:\"The project recently migrated from revision 2 to revision 3 while preserving unrelated behavior.\"},\n {id:\"doc-a-05\",title:\"JSON conventions\",tags:[\"serialization\"],text:\"Canonical JSON is used elsewhere in the repository but is not the wire-label checksum algorithm.\"},\n {id:\"doc-a-06\",title:\"Dependency policy\",tags:[\"dependencies\"],text:\"New executable helpers must be acquired, self-tested and registered before build-time use.\"},\n {id:\"doc-a-07\",title:\"Release policy\",tags:[\"release\"],text:\"A repair is accepted only after a fresh build/test receipt on the mutated source version.\"},\n {id:\"doc-a-08\",title:\"Unicode migration warning\",tags:[\"unicode\"],text:\"ASCII-only lowercasing is insufficient for the current label contract.\"}\n];\nexport const B_DOCS=[\n {id:\"doc-b-01\",title:\"Current allocation policy revision 7\",tags:[\"current\",\"policy\",\"region\"],text:\"Revision 7 is current. GPU maintenance restricts valid allocations to region west. A fresh revision token is required for mutation.\"},\n {id:\"doc-b-02\",title:\"Policy revision 6 archive\",tags:[\"legacy\",\"policy\"],text:\"Revision 6 permitted region east. It is archived and must not authorize new allocations.\"},\n {id:\"doc-b-03\",title:\"Allocation fencing\",tags:[\"attempt\",\"revision\"],text:\"Mutations are fenced by unique attempt identity plus current policy/availability revision. Reusing an attempt with different payload is invalid.\"},\n {id:\"doc-b-04\",title:\"Refresh rule\",tags:[\"freshness\"],text:\"A stale allocation is not retried blindly. Refresh current policy and availability, then replan a different valid request.\"},\n {id:\"doc-b-05\",title:\"Readback policy\",tags:[\"verify\"],text:\"Successful allocation must be independently read back from remote state and checked against the post-action policy.\"},\n {id:\"doc-b-06\",title:\"Scheduling objective\",tags:[\"duration\"],text:\"GPU reservations for this sandbox must last at least 30 minutes and finish before the public deadline.\"},\n {id:\"doc-b-07\",title:\"Metrics note\",tags:[\"metrics\"],text:\"Queue metrics are observational and do not provide an allocation mutation interface.\"},\n {id:\"doc-b-08\",title:\"Cached availability warning\",tags:[\"cache\"],text:\"Cached availability is advisory and may reference a superseded revision.\"}\n];\nexport const INITIAL_A_SOURCE=`export const canonicalizer = \"ascii_lower\";\nexport const checksumCapability = \"none\";\nexport const unrelatedSentinel = \"PRESERVE_ME\";\nexport function encodeLabel(input:string){ return input.trim().toLowerCase(); }\n`;\n\nfunction crc(bytes:Uint8Array,poly:number){let c=0xffffffff;for(const b of bytes){c^=b;for(let i=0;i<8;i++)c=(c>>>1)^((c&1)?poly:0)}return (~c)>>>0}\nexport function crc32c(s:string){return crc(new TextEncoder().encode(s),0x82f63b78)}\nexport function crc32ieee(s:string){return crc(new TextEncoder().encode(s),0xedb88320)}\nexport function canonicalize(mode:string,s:string){if(mode===\"nfkc_lower\")return s.trim().normalize(\"NFKC\").toLowerCase();if(mode===\"ascii_lower\")return s.trim().toLowerCase();return s}\nexport function capById(cls:\"A\"|\"B\",id:string){return (cls===\"A\"?A_CAPS:B_CAPS).find(x=>x.id===id)??null}\nexport function searchCaps(cls:\"A\"|\"B\",q:string){const ts=q.trim().toLowerCase().split(/\\s+/).filter(Boolean),xs=cls===\"A\"?A_CAPS:B_CAPS;return xs.filter(x=>{const h=[x.title,x.family,x.summary].join(\" \").toLowerCase();return !ts.length||ts.every(t=>h.includes(t))})}\nexport function searchDocs(cls:\"A\"|\"B\",q:string){const ts=q.trim().toLowerCase().split(/\\s+/).filter(Boolean),xs=cls===\"A\"?A_DOCS:B_DOCS;return xs.filter(x=>{const h=[x.title,x.text,...x.tags].join(\" \").toLowerCase();return !ts.length||ts.every(t=>h.includes(t))})}\nexport function capabilityArtifactSource(cls:\"A\"|\"B\",cap:Cap){\n if(cls===\"A\"&&cap.kind===\"crc32c\")return `const POLY=0x82f63b78;\nexport const kind=\"crc32c\";\nexport function run(input){let c=0xffffffff;const bytes=new TextEncoder().encode(String(input));for(const b of bytes){c^=b;for(let i=0;i<8;i++)c=(c>>>1)^((c&1)?POLY:0)}return {kind,value:(~c)>>>0}}\nexport function selftest(){return run(\"123456789\").value===0xe3069283}\n`;\n if(cls===\"A\"&&cap.kind===\"crc32\")return `const POLY=0xedb88320;\nexport const kind=\"crc32\";\nexport function run(input){let c=0xffffffff;const bytes=new TextEncoder().encode(String(input));for(const b of bytes){c^=b;for(let i=0;i<8;i++)c=(c>>>1)^((c&1)?POLY:0)}return {kind,value:(~c)>>>0}}\nexport function selftest(){return run(\"123456789\").value===0xcbf43926}\n`;\n if(cls===\"B\"&&cap.kind===\"scheduler_v3\")return `export const kind=\"scheduler_v3\";\nexport function selftest(){return true}\nexport function refresh(state,policy){\n if(!state||!policy)return {ok:false,error:\"STATE_OR_POLICY_MISSING\"};\n return {ok:true,policy,availability:Number(state.allocated)===0?[{slot_id:String(state.slot_id),region:String(state.region),start_at:String(state.start_at),duration_min:Number(state.duration_min),accelerator:String(policy.accelerator)}]:[]};\n}\nexport function validateAllocation(req,state,fresh,policy,deadline){\n if(!req||!state||!policy)return {ok:false,error:\"STATE_OR_POLICY_MISSING\",status:422};\n if(Number(req.policy_revision)!==Number(state.policy_rev))return {ok:false,error:\"STALE_REVISION\",status:409,replan_required:true,current_revision:Number(state.policy_rev)};\n if(!fresh||Number(fresh.policy_rev)!==Number(state.policy_rev)||String(fresh.slot_id)!==String(state.slot_id))return {ok:false,error:\"FRESH_READ_REQUIRED\",status:409,replan_required:true};\n if(Number(state.allocated)!==0)return {ok:false,error:\"SLOT_ALREADY_ALLOCATED\",status:409,replan_required:true};\n if(String(req.slot_id)!==String(state.slot_id)||String(req.region)!==String(state.region)||String(req.start_at)!==String(state.start_at)||Number(req.duration_min)!==Number(state.duration_min))return {ok:false,error:\"CURRENT_AVAILABILITY_MISMATCH\",status:422,replan_required:true};\n if(String(req.region)!==String(policy.region)||Number(req.duration_min)Date.parse(String(deadline)))return {ok:false,error:\"POLICY_CONSTRAINT_FAILED\",status:422};\n return {ok:true};\n}\n`;\n return \"export const kind=\"+JSON.stringify(cap.kind)+\"; export const family=\"+JSON.stringify(cap.family)+\"; export function run(input){return {kind,value:String(input)}} export function selftest(){return true}\";\n}\nasync function artifactSha256(source:string){const d=await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(source));return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nexport async function importCapabilityArtifact(source:string,expectedSha256:string){\n const h=await artifactSha256(source);if(h!==expectedSha256)throw new Error(\"CAPABILITY_ARTIFACT_HASH_MISMATCH\");\n return await import(\"data:text/javascript;charset=utf-8,\"+encodeURIComponent(source)+\"#\"+h);\n}\nexport function intrinsicCapTest(cls:\"A\"|\"B\",cap:Cap){\n return {pass:false,reason:\"REGISTERED_EXECUTABLE_ARTIFACT_REQUIRED\",class:cls,capability_id:cap.id};\n}\nexport function runACap(_cap:Cap,_input:string){throw new Error(\"DIRECT_CAPABILITY_EXECUTION_DISABLED_USE_REGISTERED_ARTIFACT\")}\nfunction exportedString(source:string,name:string){\n const m=source.match(new RegExp(\"export\\\\s+const\\\\s+\"+name+\"\\\\s*=\\\\s*\\\\\\\"([^\\\\\\\"]*)\\\\\\\"\\\\s*;\"));\n return m?.[1]??\"\";\n}\nfunction compileEncodeLabel(source:string){\n const all=[...source.matchAll(/export\\s+function\\s+encodeLabel\\s*\\(\\s*input(?:\\s*:\\s*string)?\\s*\\)\\s*\\{([^}]*)\\}/gs)];\n if(all.length!==1)return {ok:false as const,error:\"ENCODELABEL_DEFINITION_COUNT\"};\n const body=String(all[0][1]??\"\").trim(),rm=body.match(/^return\\s+(.+?)\\s*;?\\s*$/s);\n if(!rm)return {ok:false as const,error:\"ENCODELABEL_SINGLE_RETURN_REQUIRED\"};\n let expr=String(rm[1]).replace(/;\\s*$/,\"\").trim();\n if(!expr.startsWith(\"input\"))return {ok:false as const,error:\"ENCODELABEL_MUST_DERIVE_FROM_INPUT\"};\n let rest=expr.slice(5),ops:string[]=[];\n while(rest.length){\n let m;\n if((m=rest.match(/^\\s*\\.trim\\(\\)/))){ops.push(\"trim\");rest=rest.slice(m[0].length);continue}\n if((m=rest.match(/^\\s*\\.normalize\\(\\s*[\"']NFKC[\"']\\s*\\)/))){ops.push(\"nfkc\");rest=rest.slice(m[0].length);continue}\n if((m=rest.match(/^\\s*\\.toLowerCase\\(\\)/))){ops.push(\"lower\");rest=rest.slice(m[0].length);continue}\n return {ok:false as const,error:\"ENCODELABEL_UNSUPPORTED_EXPRESSION\"};\n }\n if(!ops.length)return {ok:false as const,error:\"ENCODELABEL_NO_OPERATIONS\"};\n return {ok:true as const,ops,run(input:string){let out=String(input);for(const op of ops){if(op===\"trim\")out=out.trim();else if(op===\"nfkc\")out=out.normalize(\"NFKC\");else if(op===\"lower\")out=out.toLowerCase()}return out}};\n}\nasync function validateWholeModule(source:string){\n const h=await artifactSha256(source);\n try{\n const mod:any=await import(\"data:text/typescript;charset=utf-8,\"+encodeURIComponent(source)+\"#\"+h);\n if(typeof mod?.encodeLabel!==\"function\")return {ok:false as const,error:\"WHOLE_MODULE_ENCODELABEL_NOT_EXPORTED\",module_sha256:h};\n return {ok:true as const,mod,module_sha256:h};\n }catch(e){\n const msg=e instanceof Error?e.message:String(e);\n return {ok:false as const,error:e instanceof SyntaxError||/SyntaxError/.test(msg)?\"WHOLE_MODULE_SYNTAX_INVALID\":\"WHOLE_MODULE_EXECUTION_FAILED\",detail:msg.slice(0,300),module_sha256:h};\n }\n}\nexport async function buildA(source:string,runRegisteredArtifact:(capabilityId:string,input:string)=>Promise){\n const can=exportedString(source,\"canonicalizer\"),capId=exportedString(source,\"checksumCapability\"),sentinel=exportedString(source,\"unrelatedSentinel\");\n const compiled=compileEncodeLabel(source);\n const whole=await validateWholeModule(source);\n const vectors=[[\" ＡdMin \",\"admin\"],[\"①Ａ\",\"1a\"],[\" ＦOO \",\"foo\"]] as const;\n const behavior:any[]=[];\n if(whole.ok){for(const [input,expected] of vectors){try{const observed=await whole.mod.encodeLabel(input);behavior.push({input,expected,observed,pass:observed===expected})}catch(e){behavior.push({input,expected,observed:null,pass:false,error:e instanceof Error?e.message:String(e)})}}}\n let capRun:any=null,capError:string|null=null;\n if(capId){try{capRun=await runRegisteredArtifact(capId,\"123456789\")}catch(e){capError=e instanceof Error?e.message:String(e)}}\n const tests:any[]=[\n {id:\"whole-module-compiles-executes\",pass:whole.ok,error:whole.ok?null:whole.error,detail:whole.ok?null:(whole as any).detail??null},\n {id:\"source-compiles-restricted-module\",pass:compiled.ok,error:compiled.ok?null:compiled.error},\n {id:\"unrelated-sentinel\",pass:sentinel===\"PRESERVE_ME\"},\n {id:\"canonicalizer-declaration\",pass:can===\"nfkc_lower\"},\n ...vectors.map((v,i)=>({id:\"encodeLabel-behavior-\"+(i+1),pass:whole.ok&&behavior[i]?.pass===true,observed:whole.ok?behavior[i]?.observed:null})),\n {id:\"capability-artifact-bound\",pass:!!capRun&&typeof capRun.artifact_sha256===\"string\"&&capRun.artifact_sha256.length===64,artifact_sha256:capRun?.artifact_sha256??null,error:capError},\n {id:\"crc32c-vector\",pass:!!capRun&&Number(capRun.value)===0xe3069283,observed:capRun?.value??null,artifact_sha256:capRun?.artifact_sha256??null}\n ];\n return {pass:tests.every(x=>x.pass),tests,source_contract:{canonicalizer:can,checksum_capability:capId,sentinel},implementation:{compiler:\"WHOLE_MODULE_EXECUTION_V2\",module_sha256:whole.module_sha256,operations:compiled.ok?compiled.ops:[],vectors:behavior},capability_artifact_sha256:capRun?.artifact_sha256??null};\n}\nexport const MATERIAL_DIMENSIONS={\n knowledge_schema:{A:\"repository/API/wire-contract technical semantics\",B:\"live policy/availability/revision state\"},\n skill_family:{A:\"binary-integrity build plugin + source repair\",B:\"revision-aware remote scheduling action client\"},\n action_semantics:{A:\"mutate versioned source\",B:\"create remote resource allocation\"},\n verification:{A:\"deterministic build/test on source version\",B:\"independent allocation readback + constraint check\"},\n failure_recovery:{A:\"normal mode exposes repair failure paths; forced_recovery_v2 injects an upstream source-version change requiring re-read/rebase\",B:\"normal mode exposes stale-state rejection; forced_recovery_v2 changes live availability at first allocation requiring refresh/replan\"}\n};\nexport function materialDifferenceCount(){return Object.keys(MATERIAL_DIMENSIONS).length}\n",[],[285,424],"39ed72d7-cef8-481b-8ae5-19a97b2f60f0","controller_qualification_v9.ts","01a0a2ad-d7d7-74cd-b6db-70c9c559f2f0",57,["D",1789435697114],"import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { handle, setupForcedRecovery } from \"./sandbox_blob_v1.ts\";\n\nconst MODEL=\"nex-agi/nex-n2.5-mini:free\";\nconst GATEWAY=\"https://api.kilo.ai/api/gateway/chat/completions\";\nconst CONTROLLER_ID=\"FIRST_SUPERHERO_CROSS_DOMAIN_CAUSAL_CONTROLLER_Q9\";\nconst te=new TextEncoder();\nconst H=async(s:string)=>[...new Uint8Array(await crypto.subtle.digest(\"SHA-256\",te.encode(s)))].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\nconst canon=(x:any):string=>x===null||typeof x!==\"object\"?JSON.stringify(x):Array.isArray(x)?\"[\"+x.map(canon).join(\",\")+\"]\":\"{\"+Object.keys(x).sort().map(k=>JSON.stringify(k)+\":\"+canon(x[k])).join(\",\")+\"}\";\n\nasync function api(cls:\"A\"|\"B\",session:string,path:string,method=\"GET\",query:any={},body?:any){\n if(path.includes(\"/reset\")) return {status:403,data:{ok:false,error:\"CONTROLLER_RESET_FORBIDDEN\"}};\n if(!path.startsWith(cls===\"A\"?\"/a/\":\"/b/\")) return {status:400,data:{ok:false,error:\"WRONG_CLASS_PATH\"}};\n const u=new URL(\"https://qualification.local\"+path);u.searchParams.set(\"session\",session);\n for(const [k,v] of Object.entries(query||{})) if(v!==undefined&&v!==null)u.searchParams.set(k,String(v));\n const init:any={method,headers:{\"content-type\":\"application/json\"}};\n if(body!==undefined&&method!==\"GET\")init.body=JSON.stringify(body);\n const r=await handle(new Request(u.toString(),init));\n let data:any;try{data=await r.json()}catch{data=await r.text()}\n return {status:r.status,data};\n}\nasync function modelTool(name:string,description:string,parameters:any,input:any){\n const started=Date.now();\n const request={model:MODEL,messages:[\n {role:\"system\",content:\"You are one generic goal-to-capability controller. Use only supplied task evidence. Never invent hidden handles, receipts, versions, or successful verification. Infer a valid action from current evidence. On a failed or stale action, re-read/re-discover and replan instead of blindly repeating it.\"},\n {role:\"user\",content:JSON.stringify(input)}\n ],tools:[{type:\"function\",function:{name,description,parameters}}],tool_choice:\"required\",temperature:0,max_tokens:1100,stream:false,reasoning:{effort:\"none\",exclude:true}};\n const r=await fetch(GATEWAY,{method:\"POST\",headers:{\"content-type\":\"application/json\"},body:JSON.stringify(request)});\n const raw=await r.text();let j:any;try{j=JSON.parse(raw)}catch{throw new Error(\"KILO_BAD_JSON:\"+raw.slice(0,300))}\n if(!r.ok)throw new Error(\"KILO_HTTP_\"+r.status+\":\"+raw.slice(0,300));\n const tc=j?.choices?.[0]?.message?.tool_calls?.[0];\n if(!tc||tc.function?.name!==name)throw new Error(\"KILO_TOOL_REQUIRED_BUT_MISSING\");\n const args=JSON.parse(String(tc.function.arguments||\"{}\"));\n const cost=j?.usage?.cost;\n if(cost!==0)throw new Error(\"ZERO_COST_ATTESTATION_REQUIRED:\"+String(cost));\n return {args,telemetry:{requested_model:MODEL,resolved_model:j?.model??null,provider:j?.provider??null,cost,ms:Date.now()-started}};\n}\n\nconst groundedCauseItem={type:\"object\",additionalProperties:false,properties:{\n text:{type:\"string\"},\n anchor_ids:{type:\"array\",minItems:1,maxItems:4,items:{type:\"string\"}},\n causal_reason_to_chosen_action:{type:\"string\",minLength:8}\n},required:[\"text\",\"anchor_ids\",\"causal_reason_to_chosen_action\"]};\nconst chosenActionItem={type:\"object\",additionalProperties:false,properties:{\n text:{type:\"string\"},anchor_ids:{type:\"array\",minItems:1,maxItems:4,items:{type:\"string\"}}\n},required:[\"text\",\"anchor_ids\"]};\nconst frameSchema={type:\"object\",additionalProperties:false,properties:{\n success_conditions:{type:\"array\",minItems:2,maxItems:6,items:{type:\"string\"}},\n requirements:{type:\"array\",minItems:2,maxItems:8,items:groundedCauseItem},\n unknowns:{type:\"array\",minItems:1,maxItems:8,items:groundedCauseItem},\n missing_capabilities:{type:\"array\",minItems:1,maxItems:8,items:groundedCauseItem},\n chosen_action:chosenActionItem,\n first_action:{type:\"string\",enum:[\"DISCOVER_RUNTIME_KNOWLEDGE\",\"DISCOVER_CAPABILITIES\",\"INSPECT_CURRENT_STATE\"]}\n},required:[\"success_conditions\",\"requirements\",\"unknowns\",\"missing_capabilities\",\"chosen_action\",\"first_action\"]};\n\nfunction validateGraph(f:any,anchors:any[]){\n const validAnchors=new Set(anchors.map(a=>a.id));\n const groups:any={requirement:Array.isArray(f?.requirements)?f.requirements:[],unknown:Array.isArray(f?.unknowns)?f.unknowns:[],missing_capability:Array.isArray(f?.missing_capabilities)?f.missing_capabilities:[]};\n if(groups.requirement.length<1||groups.unknown.length<1||groups.missing_capability.length<1)return{pass:false,reason:\"REQUIRED_CAUSAL_CLASSES_MISSING\"};\n const relevant=[...groups.requirement,...groups.unknown,...groups.missing_capability];\n const anchored=(n:any)=>n&&String(n.text||\"\").trim()&&Array.isArray(n.anchor_ids)&&n.anchor_ids.length&&!n.anchor_ids.some((x:any)=>!validAnchors.has(String(x)));\n if(!anchored(f?.chosen_action)||relevant.some((n:any)=>!anchored(n)))return{pass:false,reason:\"TASK_ANCHOR_INVALID\"};\n const missingReason=relevant.find((n:any)=>String(n.causal_reason_to_chosen_action||\"\").trim().length<8);\n if(missingReason)return{pass:false,reason:\"RELEVANT_NODE_NOT_CAUSALLY_LINKED_TO_ACTION\"};\n const edges:any[]=[];for(const [kind,xs] of Object.entries(groups))for(let i=0;i({id,text,source:\"VERIFIER_CONTROLLED_FROZEN_GOAL_ANCHOR\"}));\n}\nfunction compactHistory(xs:any[]){return xs.slice(-14).map(x=>({turn:x.turn,request:x.request,response:{status:x.response.status,data:x.response.data}}))}\n\nasync function runClass(cls:\"A\"|\"B\"){\n const session=\"q1-\"+cls.toLowerCase()+\"-\"+crypto.randomUUID().replaceAll(\"-\",\"\").slice(0,16);\n await setupForcedRecovery(session,cls);\n const adapter=await (await handle(new Request(\"https://qualification.local/adapter\"))).json();\n const goal=(await api(cls,session,cls===\"A\"?\"/a/goal\":\"/b/goal\")).data;\n const anchors=anchorsFor(cls,goal);\n let frame:any=null,graph:any=null;const frameAttempts:any[]=[];const telemetry:any[]=[];\n for(let frameAttempt=1;frameAttempt<=3;frameAttempt++){\n const fc=await modelTool(\"causal_frame\",\"Before acting, compile the novel goal into an explicit grounded causal graph. REQUIRED: include at least one node of EACH type requirement, unknown, missing_capability, and exactly one action. Every non-action node must causally reach the chosen action. Every node must cite one or more verifier-provided anchor IDs. Repair any verifier rejection from the prior attempt.\",{...frameSchema},{goal,adapter,task_anchors:anchors,prior_rejection:graph?.pass===false?graph:null,prior_frame:graph?.pass===false?frame:null});\n telemetry.push(fc.telemetry);frame=fc.args;graph=validateGraph(frame,anchors);frameAttempts.push({attempt:frameAttempt,graph});\n if(graph.pass)break;\n }\n if(!graph?.pass)throw new Error(\"CAUSAL_GRAPH_REJECT_AFTER_REPAIR:\"+JSON.stringify({graph,frameAttempts}));\n const history:any[]=[];let verified=false,verifiedEvidence:any=null,finish:any=null;\n const allowed=(await adapter).ordinary_affordances;\n const requestContracts=(await adapter).request_contracts;\n const actionMap:any=affordanceMapFor(cls);\n for(let turn=1;turn<=32;turn++){\n const d=await modelTool(\"next_action\",\"Choose exactly one NAMED public affordance from action_catalog, or FINISH only after independent task verification is visibly PASS. Do not invent paths or methods: deterministic controller code maps the selected action_key to the exact public route. Follow public_request_contracts exactly for semantic query/body fields. attempt_id is harness-managed bookkeeping: omit it if convenient because deterministic controller code will bind a valid unique attempt_id to each mutating action. Use observed receipts/versions/handles exactly. Failed or stale actions require evidence-based re-read or replan, never blind repetition.\",actionSchemaFor(cls),{\n controller_id:CONTROLLER_ID,class:cls,goal,task_anchors:anchors,causal_frame:frame,\n public_affordances:allowed,public_request_contracts:requestContracts,\n action_catalog:Object.entries(actionMap).map(([action_key,v]:any)=>({action_key,...v})),\n history:compactHistory(history),verification_state:{verified,evidence:verifiedEvidence}\n });telemetry.push(d.telemetry);\n const a=d.args;\n if(a.action_key===\"FINISH\"){\n if(!verified){\n history.push({turn,request:{action_key:\"FINISH\",query:{},body:undefined,reason:a.reason,observed_limiter:a.observed_limiter},response:{status:409,data:{ok:false,error:\"INDEPENDENT_VERIFICATION_REQUIRED\",replan_required:true}}});\n continue;\n }\n finish={turn,decision:a};break;\n }\n const route=actionMap[String(a.action_key)];\n if(!route){\n history.push({turn,request:{action_key:a.action_key,reason:a.reason,observed_limiter:a.observed_limiter},response:{status:400,data:{ok:false,error:\"UNKNOWN_ACTION_KEY\",replan_required:true}}});\n continue;\n }\n let q:any={},b:any=undefined;try{q=a.query_json?JSON.parse(a.query_json):{}}catch{q={}}\n try{b=a.body_json?JSON.parse(a.body_json):undefined}catch{b=undefined}\n if(route.method===\"POST\"){\n if(!b||typeof b!==\"object\"||Array.isArray(b))b={};\n const lifecycle=String(a.action_key).startsWith(\"CAPABILITY_\")&&[\"CAPABILITY_ACQUIRE\",\"CAPABILITY_BUILD\",\"CAPABILITY_TEST\",\"CAPABILITY_REGISTER\"].includes(String(a.action_key));\n const patch=String(a.action_key)===\"REPO_PATCH\";\n const allocation=String(a.action_key)===\"CAPABILITY_RUN\"&&cls===\"B\"&&String(b.op)===\"allocate\";\n if(lifecycle||patch||allocation)b.attempt_id=`q8-${cls.toLowerCase()}-${turn}-${String(a.action_key).toLowerCase()}`;\n if(patch){\n const latestRead=[...history].reverse().find((x:any)=>x.request?.action_key===\"REPO_READ\"&&x.response?.status===200&&typeof x.response?.data?.content===\"string\");\n const latestMutation=[...history].reverse().find((x:any)=>x.request?.action_key===\"REPO_PATCH\"&&x.response?.status>=200&&x.response?.status<300&&typeof x.request?.body?.content===\"string\");\n const latestContent=latestRead?.response?.data?.content??latestMutation?.request?.body?.content;\n if(typeof latestContent===\"string\"&&String(b.content??\"\")===latestContent){\n history.push({turn,request:{action_key:a.action_key,method:route.method,path:route.path,query:q,body:b,reason:a.reason,observed_limiter:a.observed_limiter},response:{status:409,data:{ok:false,error:\"NO_OP_REPAIR_FORBIDDEN\",replan_required:true,principle:\"A failed verification must causally change the next artifact mutation.\"}}});\n continue;\n }\n }\n }\n const response=await api(cls,session,route.path,route.method,q,b);\n history.push({turn,request:{action_key:a.action_key,method:route.method,path:route.path,query:q,body:b,reason:a.reason,observed_limiter:a.observed_limiter},response});\n if(cls===\"A\"&&route.path===\"/a/build\"&&response.status===200&&response.data?.build?.pass===true){verified=true;verifiedEvidence={kind:\"deterministic_build\",version:response.data.version,build:response.data.build,recovery:response.data.recovery}}\n if(cls===\"B\"&&route.path===\"/b/verify\"&&response.status===200&&response.data?.pass===true){verified=true;verifiedEvidence={kind:\"independent_remote_verify\",verify:response.data}}\n }\n if(!verified||!finish){const failKey=`qualification/q9/failures/${session}.json`;await blob.setJSON(failKey,{schema:\"FIRST_SUPERHERO_CAUSAL_Q9_FAILURE_TRACE_V1\",controller_id:CONTROLLER_ID,class:cls,session,frame,graph,history,telemetry,verified,verifiedEvidence,finish});throw new Error(\"CLASS_NOT_VERIFIED:\"+cls+\":\"+failKey);}\n const failures=history.filter(x=>x.response.status>=400);\n const exogenous=failures.find(x=>x.response.data?.exogenous_change===true&&x.response.data?.replan_required===true);\n const knowledge=history.filter(x=>String(x.request.path).includes(\"/knowledge/search\")&&x.response.status===200&&x.response.data?.causal_fact_available===true);\n const lifecycleOps=[\"acquire\",\"build\",\"test\",\"register\"];\n const lifecycle=lifecycleOps.every(op=>history.some(x=>x.request.path===`/${cls.toLowerCase()}/capabilities/${op}`&&x.response.status===200));\n const postFailure=exogenous?history.some(x=>x.turn>exogenous.turn&&x.response.status<400):false;\n const durableRecord={schema:\"FIRST_SUPERHERO_CAUSAL_Q9_DURABLE_V1\",controller_id:CONTROLLER_ID,class:cls,session,goal_verified:true,verification:verifiedEvidence,frame_sha256:await H(canon(frame)),completed_at:new Date().toISOString()};\n const dh=await H(canon(durableRecord)),key=`qualification/q9/${session}.json`;await blob.setJSON(key,{record:durableRecord,sha256:dh});\n const rb:any=await (await blob.get(key)).json(),durablePass=rb.sha256===dh&&(await H(canon(rb.record)))===dh;\n const cells={\n GOAL_COMPILER:graph.pass===true,\n JIT_KNOWLEDGE:knowledge.length>0,\n JIT_SKILL_ACQUISITION:lifecycle,\n SKILL_COMPOSITION_AND_CONTROL:lifecycle&&history.some(x=>x.request.path.includes(\"/capabilities/run\")||x.request.path===\"/a/repo/patch\"),\n ACTION_PROOF_LOOP:verified&&!!finish,\n FAILURE_RECOVERY_AND_REPLAN:!!exogenous&&postFailure,\n TEMPORARY_SPECIALIZATION_WITH_DURABLE_TRUTH:durablePass\n };\n return{class:cls,session,frame,graph,cells,pass:Object.values(cells).every(Boolean),history,verification:verifiedEvidence,durable:{key,sha256:dh,readback_pass:durablePass},telemetry,zero_cost:telemetry.every(x=>x.cost===0)};\n}\n\nconst sourceIdentity={controller_id:CONTROLLER_ID,source_version:\"Q9\",started_at:new Date().toISOString()};\nconst A=await runClass(\"A\"),B=await runClass(\"B\");\nconst materialDifference={knowledge_schema:true,skill_family:true,action_semantics:true,verification:true,failure_recovery:true};\nconst result={schema:\"FIRST_SUPERHERO_CROSS_DOMAIN_CAUSAL_CONTROLLER_QUALIFICATION_V9\",classification:\"PUBLIC_NON_SCORED_NONAUTHORITY\",sourceIdentity,\n controller_id:CONTROLLER_ID,same_controller:A.pass&&B.pass,cross_domain_material_difference_count:Object.values(materialDifference).filter(Boolean).length,\n architecture_cells:{...A.cells,CROSS_DOMAIN_SAME_CONTROLLER:A.pass&&B.pass&&Object.values(materialDifference).every(Boolean)},\n per_class:{A,B},zero_cost:A.zero_cost&&B.zero_cost,canonical_brain_mutation:false,p_real_increment:0,human_authority_approval:false,direct_sprites_calls:0,finished_at:new Date().toISOString()};\nawait blob.setJSON(\"qualification/q9/LATEST.json\",result);\nconsole.log(JSON.stringify({schema:result.schema,pass:Object.values(result.architecture_cells).every(Boolean)&&result.zero_cost,architecture_cells:result.architecture_cells,cross_domain_material_difference_count:result.cross_domain_material_difference_count,A:{turns:A.history.length,failures:A.history.filter(x=>x.response.status>=400).length,verified:A.verification?.kind},B:{turns:B.history.length,failures:B.history.filter(x=>x.response.status>=400).length,verified:B.verification?.kind},zero_cost:result.zero_cost,p_real_increment:0},null,2));\nexport default result;",[],[285,431],["D",1789435492653],[302,303,304,305,306],[285],["D",1789434280321],["D",1789522252250],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":53,"_103":104,"_105":24},{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"ctx",{"_80":-5,"_126":479,"_480":481,"_482":483,"_484":24,"_485":24,"_486":24,"_487":57,"_488":-5,"_489":-7,"_490":-7,"_491":61,"_492":24,"_493":24,"_494":-5,"_495":24,"_496":24,"_497":24,"_498":-5},"ENV",{"_450":451,"_452":453,"_454":88,"_455":456,"_457":458,"_459":460,"_461":462,"_463":464,"_465":466,"_467":468,"_469":470,"_471":472,"_473":474,"_475":476,"_477":478},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v58