`, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter

\n Clicked\n setCount((c) => c + 1)}\n class=\"bg-blue-500 hover:bg-blue-600 text-white font-medium px-4 py-2 rounded-lg transition-colors cursor-pointer\"\n >\n {count}\n \n times\n

\n );\n}\n","label",[160,161,69],"frontend","components","pulls","branches","forks","envVars",{"_169":26,"_171":26},"connections",{"_169":26,"_170":26},"count","unfilledCount","emptyCount",{"_32":496,"_13":160,"_67":459,"_42":-5,"_34":35,"_153":39,"_154":89,"_36":497,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":498,"_17":499},{"_32":492,"_13":161,"_67":152,"_42":459,"_34":35,"_153":39,"_154":89,"_36":493,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":494,"_17":495},{"_32":484,"_13":485,"_67":486,"_42":152,"_34":35,"_153":487,"_154":89,"_36":488,"_38":462,"_70":71,"_156":489,"_72":24,"_158":-5,"_219":490,"_17":491},{"_32":151,"_13":69,"_67":68,"_42":152,"_34":35,"_153":39,"_154":89,"_36":481,"_38":26,"_70":71,"_156":157,"_72":24,"_158":-5,"_219":482,"_17":483},{"_32":474,"_13":475,"_67":476,"_42":459,"_34":35,"_153":39,"_154":89,"_36":477,"_38":26,"_70":21,"_156":478,"_72":24,"_158":-5,"_219":479,"_17":480},{"_32":466,"_13":467,"_67":468,"_42":459,"_34":35,"_153":469,"_154":89,"_36":470,"_38":39,"_70":71,"_156":471,"_72":24,"_158":-5,"_219":472,"_17":473},{"_32":456,"_13":457,"_67":458,"_42":459,"_34":35,"_153":460,"_154":89,"_36":461,"_38":462,"_70":71,"_156":463,"_72":24,"_158":-5,"_219":464,"_17":465},{"_32":452,"_13":443,"_67":437,"_42":-5,"_34":35,"_153":438,"_154":89,"_36":453,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":454,"_17":455},{"_32":444,"_13":445,"_67":446,"_42":437,"_34":35,"_153":447,"_154":89,"_36":448,"_38":26,"_70":71,"_156":449,"_72":24,"_158":-5,"_219":450,"_17":451},{"_32":434,"_13":435,"_67":436,"_42":437,"_34":35,"_153":438,"_154":89,"_36":439,"_38":26,"_70":21,"_156":440,"_72":24,"_158":-5,"_219":441,"_17":442},{"_32":429,"_13":253,"_67":256,"_42":-5,"_34":35,"_153":430,"_154":89,"_36":431,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":432,"_17":433},{"_32":424,"_13":423,"_67":417,"_42":256,"_34":35,"_153":425,"_154":89,"_36":426,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":427,"_17":428},{"_32":415,"_13":245,"_67":416,"_42":417,"_34":35,"_153":418,"_154":89,"_36":419,"_38":39,"_70":21,"_156":420,"_72":24,"_158":-5,"_219":421,"_17":422},{"_32":410,"_13":409,"_67":403,"_42":256,"_34":35,"_153":411,"_154":89,"_36":412,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":413,"_17":414},{"_32":401,"_13":245,"_67":402,"_42":403,"_34":35,"_153":404,"_154":89,"_36":405,"_38":26,"_70":21,"_156":406,"_72":24,"_158":-5,"_219":407,"_17":408},{"_32":396,"_13":395,"_67":389,"_42":256,"_34":35,"_153":397,"_154":89,"_36":398,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":399,"_17":400},{"_32":387,"_13":245,"_67":388,"_42":389,"_34":35,"_153":390,"_154":89,"_36":391,"_38":26,"_70":21,"_156":392,"_72":24,"_158":-5,"_219":393,"_17":394},{"_32":382,"_13":381,"_67":375,"_42":256,"_34":35,"_153":383,"_154":89,"_36":384,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":385,"_17":386},{"_32":373,"_13":245,"_67":374,"_42":375,"_34":35,"_153":376,"_154":89,"_36":377,"_38":26,"_70":21,"_156":378,"_72":24,"_158":-5,"_219":379,"_17":380},{"_32":368,"_13":367,"_67":361,"_42":256,"_34":35,"_153":369,"_154":89,"_36":370,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":371,"_17":372},{"_32":359,"_13":245,"_67":360,"_42":361,"_34":35,"_153":362,"_154":89,"_36":363,"_38":26,"_70":21,"_156":364,"_72":24,"_158":-5,"_219":365,"_17":366},{"_32":355,"_13":354,"_67":348,"_42":256,"_34":35,"_153":349,"_154":89,"_36":356,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":357,"_17":358},{"_32":346,"_13":245,"_67":347,"_42":348,"_34":35,"_153":349,"_154":89,"_36":350,"_38":26,"_70":21,"_156":351,"_72":24,"_158":-5,"_219":352,"_17":353},{"_32":341,"_13":340,"_67":334,"_42":256,"_34":35,"_153":342,"_154":89,"_36":343,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":344,"_17":345},{"_32":332,"_13":245,"_67":333,"_42":334,"_34":35,"_153":335,"_154":89,"_36":336,"_38":26,"_70":21,"_156":337,"_72":24,"_158":-5,"_219":338,"_17":339},{"_32":327,"_13":326,"_67":320,"_42":256,"_34":35,"_153":328,"_154":89,"_36":329,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":330,"_17":331},{"_32":318,"_13":245,"_67":319,"_42":320,"_34":35,"_153":321,"_154":89,"_36":322,"_38":26,"_70":21,"_156":323,"_72":24,"_158":-5,"_219":324,"_17":325},{"_32":313,"_13":312,"_67":306,"_42":256,"_34":35,"_153":314,"_154":89,"_36":315,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":316,"_17":317},{"_32":304,"_13":245,"_67":305,"_42":306,"_34":35,"_153":307,"_154":89,"_36":308,"_38":26,"_70":21,"_156":309,"_72":24,"_158":-5,"_219":310,"_17":311},{"_32":299,"_13":298,"_67":292,"_42":256,"_34":35,"_153":300,"_154":89,"_36":301,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":302,"_17":303},{"_32":290,"_13":245,"_67":291,"_42":292,"_34":35,"_153":293,"_154":89,"_36":294,"_38":26,"_70":21,"_156":295,"_72":24,"_158":-5,"_219":296,"_17":297},{"_32":285,"_13":284,"_67":278,"_42":256,"_34":35,"_153":286,"_154":89,"_36":287,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":288,"_17":289},{"_32":276,"_13":245,"_67":277,"_42":278,"_34":35,"_153":279,"_154":89,"_36":280,"_38":26,"_70":21,"_156":281,"_72":24,"_158":-5,"_219":282,"_17":283},{"_32":271,"_13":270,"_67":264,"_42":256,"_34":35,"_153":272,"_154":89,"_36":273,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":274,"_17":275},{"_32":262,"_13":245,"_67":263,"_42":264,"_34":35,"_153":265,"_154":89,"_36":266,"_38":39,"_70":21,"_156":267,"_72":24,"_158":-5,"_219":268,"_17":269},{"_32":255,"_13":254,"_67":247,"_42":256,"_34":35,"_153":257,"_154":89,"_36":258,"_38":26,"_70":259,"_156":-5,"_72":24,"_158":-5,"_219":260,"_17":261},{"_32":244,"_13":245,"_67":246,"_42":247,"_34":35,"_153":248,"_154":89,"_36":249,"_38":26,"_70":21,"_156":250,"_72":24,"_158":-5,"_219":251,"_17":252},{"_32":237,"_13":238,"_67":239,"_42":-5,"_34":35,"_153":39,"_154":89,"_36":240,"_38":26,"_70":21,"_156":241,"_72":24,"_158":-5,"_219":242,"_17":243},{"_32":230,"_13":231,"_67":232,"_42":-5,"_34":35,"_153":39,"_154":89,"_36":233,"_38":26,"_70":21,"_156":234,"_72":24,"_158":-5,"_219":235,"_17":236},{"_32":222,"_13":223,"_67":224,"_42":-5,"_34":35,"_153":225,"_154":89,"_36":226,"_38":26,"_70":71,"_156":227,"_72":24,"_158":-5,"_219":228,"_17":229},{"_32":213,"_13":214,"_67":87,"_42":-5,"_34":35,"_153":115,"_154":89,"_36":215,"_38":216,"_70":217,"_156":218,"_72":24,"_158":14,"_219":220,"_17":221},"f4e989ac-b52b-4a10-9ef7-698c593d8f54","index.ts",["D",1789074870084],6,"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { Hono } from \"npm:hono@4.9.5\";\nimport { Root } from \"./frontend/root.tsx\";\nimport { commandStatus, submitCommand, transitionCommand } from \"./lib/command_bus.ts\";\nimport {\n boundedText,\n githubFailureState,\n isAgentId,\n isRepoAllowed,\n normalizeRepo,\n parseRepoAllowlist,\n providerSemantic,\n safeEqual,\n} from \"./lib/policy.mjs\";\n\nconst app = new Hono();\nconst MISSION_ID = \"IC-AG-GENERAL-AGENT-PLATFORM-001\";\nconst CANONICAL_REPO = \"oromaskevic23-cmd/CYBER-HAK-Public\";\nconst RECOVERY_STATUS_URL = \"https://oromaskevic23--6796d66aa32f11f1bd771607ee4eb77e.web.val.run\";\nconst PROVIDERS = [\n { id: \"provider-1\", name: \"Val Town\", node: \"hanter-bridge-node-1\", endpoint: \"https://oromaskevic23--46761dd0a2bf11f18ae41607ee4eb77e.web.val.run/health\", present: true },\n { id: \"provider-2\", name: \"Netlify\", node: \"hanter-bridge-node-2\", endpoint: \"https://hanter-bridge-node-2.netlify.app/health\", present: true },\n { id: \"provider-3\", name: \"Supabase\", node: \"hanter-bridge-node-3\", endpoint: \"https://flqxwhibxnyujynmopmr.supabase.co/functions/v1/hanter-bridge-node-3\", present: true },\n];\n\nconst DIRECTORS = [\n { id: \"ORCH-KIDS-MEDIA-001\", name: \"Lucas Bennett\", agents: 8, domain: \"Kids Media\" },\n { id: \"ORCH-DROPSHIPPING-001\", name: \"Mason Reed\", agents: 16, domain: \"Dropshipping Commerce\" },\n { id: \"ORCH-AI-AUTOMATION-001\", name: \"Ethan Cole\", agents: 13, domain: \"AI Automation\" },\n { id: \"ORCH-B2B-REVENUE-001\", name: \"Sophia Laurent\", agents: 13, domain: \"B2B Revenue\" },\n { id: \"ORCH-CREATIVE-DIGITAL-001\", name: \"Adrian Wolfe\", agents: 13, domain: \"Creative & Digital\" },\n { id: \"ORCH-EDUCATION-001\", name: \"Amelia Grant\", agents: 13, domain: \"Education\" },\n { id: \"ORCH-DATA-MARKET-001\", name: \"Victor Hayes\", agents: 12, domain: \"Data & Market Intelligence\" },\n { id: \"ORCH-SME-SERVICES-001\", name: \"Olivia Morgan\", agents: 12, domain: \"SME Services\" },\n];\n\nconst ROSTER = (() => {\n let n = 1;\n return DIRECTORS.flatMap((director) => Array.from({ length: director.agents }, () => ({\n agent_id: `NCA-${String(n++).padStart(3, \"0\")}`,\n director_id: director.id,\n director: director.name,\n department: director.domain,\n current_mission: MISSION_ID,\n current_task: null,\n checkpoint: \"AG-M1-GOVERNED-INTEGRATION\",\n runtime_state: \"RECOVERY_RUNTIME_REPORTED\",\n skill_bindings: [\"AG Builder 1.1.0\"],\n evidence_count: 0,\n heartbeat: null,\n orion_state: \"ADVISORY_ONLY\",\n truth_boundary: \"ASSIGNMENT_NOT_EXECUTION_EVIDENCE\",\n })));\n})();\n\nawait sqlite.batch([\n { sql: \"CREATE TABLE IF NOT EXISTS ag_crm_organizations (id TEXT PRIMARY KEY,name TEXT NOT NULL,website TEXT,owner_agent_id TEXT,evidence_ref TEXT,created_at TEXT NOT NULL,updated_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_crm_contacts (id TEXT PRIMARY KEY,organization_id TEXT,name TEXT NOT NULL,email TEXT,source TEXT NOT NULL,status TEXT NOT NULL,owner_agent_id TEXT,evidence_ref TEXT,created_at TEXT NOT NULL,updated_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_crm_leads (id TEXT PRIMARY KEY,title TEXT NOT NULL,stage TEXT NOT NULL,owner_agent_id TEXT,evidence_ref TEXT,created_at TEXT NOT NULL,updated_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_crm_opportunities (id TEXT PRIMARY KEY,title TEXT NOT NULL,stage TEXT NOT NULL,value_usd REAL,probability INTEGER NOT NULL,owner_agent_id TEXT,evidence_ref TEXT,created_at TEXT NOT NULL,updated_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_crm_activities (id TEXT PRIMARY KEY,kind TEXT NOT NULL,subject TEXT NOT NULL,related_type TEXT,related_id TEXT,owner_agent_id TEXT,evidence_ref TEXT,created_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_crm_tasks (id TEXT PRIMARY KEY,title TEXT NOT NULL,status TEXT NOT NULL,due_at TEXT,owner_agent_id TEXT,evidence_ref TEXT,created_at TEXT NOT NULL,updated_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_crm_notes (id TEXT PRIMARY KEY,body TEXT NOT NULL,related_type TEXT,related_id TEXT,owner_agent_id TEXT,evidence_ref TEXT,created_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_missions (id TEXT PRIMARY KEY,title TEXT NOT NULL,status TEXT NOT NULL,director_id TEXT,task_graph_json TEXT NOT NULL,evidence_ref TEXT,approval_state TEXT NOT NULL,created_at TEXT NOT NULL,updated_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_audit_v2 (id INTEGER PRIMARY KEY AUTOINCREMENT,event_type TEXT NOT NULL,subject_id TEXT,detail_json TEXT NOT NULL,created_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_idempotency (key TEXT PRIMARY KEY,request_hash TEXT NOT NULL,response_json TEXT,created_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_skill_bindings (agent_id TEXT NOT NULL,skill_id TEXT NOT NULL,skill_version TEXT NOT NULL,state TEXT NOT NULL,PRIMARY KEY(agent_id,skill_id))\" },\n]);\nfor (const agent of ROSTER) await sqlite.execute({ sql: \"INSERT OR IGNORE INTO ag_skill_bindings(agent_id,skill_id,skill_version,state) VALUES(?,?,?,?)\", args: [agent.agent_id, \"ag-builder\", \"1.1.0\", \"ACTIVE_BOUNDED\"] });\n\napp.use(\"*\", async (c, next) => {\n await next();\n c.header(\"X-Content-Type-Options\", \"nosniff\");\n c.header(\"X-Frame-Options\", \"DENY\");\n c.header(\"Referrer-Policy\", \"no-referrer\");\n c.header(\"Permissions-Policy\", \"camera=(), microphone=(), geolocation=(), payment=()\");\n c.header(\"Content-Security-Policy\", \"default-src 'self'; script-src 'self' https://cdn.twind.style https://esm.town https://esm.sh; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data:; frame-ancestors 'none'; base-uri 'none'; form-action 'self'\");\n if (c.req.path.startsWith(\"/api/\")) c.header(\"Cache-Control\", \"no-store\");\n});\n\nfunction requireAdmin(c: any) {\n const configured = Deno.env.get(\"AG_ADMIN_TOKEN\");\n if (!configured) return c.json({ ok: false, status: \"BLOCKED\", error: \"AG_ADMIN_TOKEN_NOT_CONFIGURED\" }, 503);\n const provided = c.req.header(\"authorization\")?.replace(/^Bearer\\s+/i, \"\") ?? \"\";\n if (!safeEqual(provided, configured)) return c.json({ ok: false, status: \"BLOCKED\", error: \"UNAUTHORIZED\" }, 401);\n const origin = c.req.header(\"origin\");\n if (origin && origin !== new URL(c.req.url).origin) return c.json({ ok: false, status: \"BLOCKED\", error: \"ORIGIN_DENIED\" }, 403);\n return null;\n}\n\nasync function parseMutation(c: any) {\n if (!/^application\\/json(?:;|$)/i.test(c.req.header(\"content-type\") ?? \"\")) return { error: c.json({ ok: false, error: \"JSON_CONTENT_TYPE_REQUIRED\" }, 415) };\n const length = Number(c.req.header(\"content-length\") ?? 0);\n if (length > 32768) return { error: c.json({ ok: false, error: \"BODY_TOO_LARGE\" }, 413) };\n const key = c.req.header(\"idempotency-key\");\n if (!key || !/^[A-Za-z0-9._:-]{8,128}$/.test(key)) return { error: c.json({ ok: false, error: \"VALID_IDEMPOTENCY_KEY_REQUIRED\" }, 400) };\n try { return { body: await c.req.json(), key }; } catch { return { error: c.json({ ok: false, error: \"MALFORMED_JSON\" }, 400) }; }\n}\n\nasync function fetchJson(url: string, headers: Record = {}, timeoutMs = 5000) {\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), timeoutMs);\n try {\n const response = await fetch(url, { headers, redirect: \"error\", signal: controller.signal });\n const text = (await response.text()).slice(0, 1000000);\n let body: any = null;\n try { body = text ? JSON.parse(text) : null; } catch { body = { parse_error: true }; }\n return { ok: response.ok, status: response.status, body };\n } finally { clearTimeout(timer); }\n}\n\nlet providerCache: { at: number; value: any[] } | null = null;\nasync function providerHealth() {\n if (providerCache && Date.now() - providerCache.at < 30000) return providerCache.value;\n const checkedAt = new Date().toISOString();\n const value = await Promise.all(PROVIDERS.map(async (provider) => {\n try {\n const result = await fetchJson(provider.endpoint, {}, 4500);\n return { ...provider, http_status: result.status, response: result.body, checked_at: checkedAt, ...providerSemantic(result.ok, result.body, provider.node), side_effect_boundary: \"DENIED\", evidence_reference: `${provider.endpoint} @ ${checkedAt}` };\n } catch (error) {\n return { ...provider, http_status: null, response: null, checked_at: checkedAt, health_state: \"NOT_VERIFIED\", readiness_state: \"NOT_VERIFIED\", authority_state: \"NONE\", boundary_valid: false, side_effect_boundary: \"DENIED\", error: error instanceof Error ? error.name : \"FETCH_FAILED\", evidence_reference: `${provider.endpoint} @ ${checkedAt}` };\n }\n }));\n providerCache = { at: Date.now(), value };\n return value;\n}\n\nlet githubCache: { at: number; repo: string; value: any } | null = null;\nasync function githubStatus(requestedRepo?: string | null) {\n const token = Deno.env.get(\"GITHUB_TOKEN\");\n const configuredRepo = normalizeRepo(Deno.env.get(\"AG_GITHUB_REPO\") ?? CANONICAL_REPO);\n const allowlist = parseRepoAllowlist(Deno.env.get(\"AG_GITHUB_REPO_ALLOWLIST\") ?? \"\");\n const repo = normalizeRepo(requestedRepo ?? configuredRepo);\n if (!repo) return { state: \"REPO_NOT_FOUND\", connected: false, verified_at: new Date().toISOString() };\n if (!token) return { state: \"NOT_CONNECTED\", connected: false, repo, reason: \"GITHUB_CREDENTIAL_NOT_CONFIGURED\", verified_at: new Date().toISOString() };\n if (!isRepoAllowed(repo, allowlist)) return { state: \"ACCESS_DENIED\", connected: false, repo, reason: \"REPOSITORY_NOT_ALLOWLISTED\", verified_at: new Date().toISOString() };\n if (githubCache && githubCache.repo === repo && Date.now() - githubCache.at < 30000) return githubCache.value;\n const headers = { Authorization: `Bearer ${token}`, Accept: \"application/vnd.github+json\", \"User-Agent\": \"AG-Command-Center\" };\n const base = `https://api.github.com/repos/${repo}`;\n try {\n const metadata = await fetchJson(base, headers, 6500);\n if (!metadata.ok) return { state: githubFailureState(metadata.status), connected: false, repo, http_status: metadata.status, verified_at: new Date().toISOString() };\n const [branches, commits, pulls, issues, runs] = await Promise.all([\n fetchJson(`${base}/branches?per_page=100`, headers), fetchJson(`${base}/commits?per_page=1`, headers),\n fetchJson(`${base}/pulls?state=open&per_page=20`, headers), fetchJson(`${base}/issues?state=open&per_page=20`, headers),\n fetchJson(`${base}/actions/runs?per_page=10`, headers),\n ]);\n const latest = Array.isArray(commits.body) ? commits.body[0] : null;\n const value = {\n state: \"CONNECTED\", connected: true, repo: metadata.body.full_name, private: Boolean(metadata.body.private),\n default_branch: metadata.body.default_branch, latest_commit: latest ? { sha: latest.sha, message: latest.commit?.message, url: latest.html_url } : null,\n branches: Array.isArray(branches.body) ? branches.body.map((x: any) => ({ name: x.name, protected: x.protected })) : [],\n pull_requests: Array.isArray(pulls.body) ? pulls.body.map((x: any) => ({ number: x.number, title: x.title, state: x.state, url: x.html_url })) : [],\n issues: Array.isArray(issues.body) ? issues.body.filter((x: any) => !x.pull_request).map((x: any) => ({ number: x.number, title: x.title, state: x.state, url: x.html_url })) : [],\n actions: runs.ok ? (runs.body.workflow_runs ?? []).map((x: any) => ({ id: x.id, name: x.name, status: x.status, conclusion: x.conclusion, url: x.html_url })) : [],\n capability_status: { metadata: metadata.status, branches: branches.status, commits: commits.status, pull_requests: pulls.status, issues: issues.status, actions: runs.status },\n verified_at: new Date().toISOString(), credential_exposed: false,\n };\n githubCache = { at: Date.now(), repo, value };\n return value;\n } catch (error) {\n if (githubCache && githubCache.repo === repo && Date.now() - githubCache.at < 300000) return { ...githubCache.value, state: \"STALE\", connected: false, stale_since: new Date(githubCache.at).toISOString() };\n return { state: \"STALE\", connected: false, repo, reason: error instanceof Error ? error.name : \"FETCH_FAILED\", verified_at: new Date().toISOString() };\n }\n}\n\nasync function recoveryStatus() {\n try { const value = await fetchJson(RECOVERY_STATUS_URL, {}, 5000); return { status: value.ok ? \"PASS\" : \"NOT_VERIFIED\", http_status: value.status, evidence: value.body, verified_at: new Date().toISOString() }; }\n catch (error) { return { status: \"NOT_VERIFIED\", http_status: null, error: error instanceof Error ? error.name : \"FETCH_FAILED\", verified_at: new Date().toISOString() }; }\n}\n\napp.get(\"/\", (c) => c.html(Root()));\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.get(\"/api/health\", (c) => c.json({ ok: true, status: \"PASS\", product: \"AG\", component: \"ag-command-center\", mission_id: MISSION_ID, checkpoint: \"AG-M1-GOVERNED-INTEGRATION\", production: false, timestamp: new Date().toISOString() }));\napp.get(\"/api/command-bus/:commandId\", async (c) => {\n const command = await commandStatus(c.req.param(\"commandId\"));\n return command ? c.json({ ok: true, command }) : c.json({ ok: false, error: \"COMMAND_NOT_FOUND\" }, 404);\n});\napp.post(\"/api/command-bus\", async (c) => {\n const denied = requireAdmin(c); if (denied) return denied;\n const parsed = await parseMutation(c); if (parsed.error) return parsed.error;\n const body:any = parsed.body;\n try {\n const result = await submitCommand({ command_id: String(body.command_id ?? parsed.key), mission_id: String(body.mission_id ?? \"\"), actor: \"ARCHITECT\", priority: Number(body.priority ?? 50), assigned_agent: body.assigned_agent ?? null, runtime_domain: String(body.runtime_domain ?? \"CONTROL\"), payload: body.payload ?? {} });\n return c.json({ ok: true, result }, result.duplicate ? 200 : 201);\n } catch (error) { return c.json({ ok: false, error: error instanceof Error ? error.message : \"COMMAND_SUBMIT_FAILED\" }, 409); }\n});\napp.post(\"/api/command-bus/:commandId/transition\", async (c) => {\n const denied = requireAdmin(c); if (denied) return denied;\n const parsed = await parseMutation(c); if (parsed.error) return parsed.error;\n const body:any = parsed.body;\n try { return c.json({ ok: true, result: await transitionCommand(c.req.param(\"commandId\"), String(body.to_state) as any, String(body.actor ?? \"HANTER\"), body.evidence ?? {}) }); }\n catch (error) { return c.json({ ok: false, error: error instanceof Error ? error.message : \"COMMAND_TRANSITION_FAILED\" }, 409); }\n});\n\napp.get(\"/api/providers\", async (c) => c.json({ logical_hanter_instances: 1, canonical_state_authority: \"RECOVERY_RUNTIME_UNTIL_ORIGINAL_RESTORED\", rules: { stale_after_seconds: 90, retry: \"EXPONENTIAL_BACKOFF_WITH_JITTER\", idempotency: \"REQUIRED_FOR_MUTATIONS\", replay_protection: \"SIGNED_ENVELOPE_NONCE_AND_EXPIRY_REQUIRED\", split_brain: \"FAIL_CLOSED\", failover: \"HEALTHY_IS_NOT_AUTHORITY\" }, providers: await providerHealth() }));\napp.get(\"/api/runtime/recovery\", async (c) => c.json(await recoveryStatus()));\napp.get(\"/api/agents\", (c) => c.json({ count: ROSTER.length, directors: DIRECTORS.length, agents: ROSTER }));\napp.get(\"/api/missions\", async (c) => c.json({ missions: (await sqlite.execute(\"SELECT * FROM ag_missions ORDER BY updated_at DESC LIMIT 100\")).rows }));\napp.get(\"/api/orion\", async (c) => { const runtime = await recoveryStatus(); return c.json({ role: \"ADVISORY_COORDINATION_ONLY\", authority: \"NONE\", always_on_required: true, runtime }); });\napp.get(\"/api/skills/ag-builder\", async (c) => { const result = await sqlite.execute(\"SELECT state,COUNT(*) count FROM ag_skill_bindings WHERE skill_id='ag-builder' GROUP BY state\"); return c.json({ file: \"skills/ag-builder/SKILL.md\", version: \"1.1.0\", binding_target: 100, bindings: result.rows, governance: \"SKILL_DOES_NOT_GRANT_AUTHORITY\", discoverability: \"SOURCE_PRESENT_AND_AG_RUNTIME_REGISTRY_BOUND\" }); });\napp.get(\"/api/security\", (c) => c.json({ policy: \"DENY_BY_DEFAULT\", chain: [\"AI Passport\", \"Enterprise IMPERIAL Skills\", \"Guardian Core\", \"Approval Gateway\", \"Runtime Domain\", \"Audit Ledger\"], laws: [\"Identity != Authority\", \"Capability != Approval\", \"Intelligence != Privilege\"], cyber_hak: { repository: CANONICAL_REPO, role: \"DEFENSIVE_GOVERNED_CAPABILITY_LAYER\", autonomous_offensive_activity: \"DENIED\", execution_authority: \"NONE\", credential_authority: \"NONE\", financial_authority: \"NONE\" } }));\napp.get(\"/api/github/status\", async (c) => c.json(await githubStatus(c.req.query(\"repo\"))));\n\napp.get(\"/api/crm\", async (c) => {\n const names = [\"organizations\", \"contacts\", \"leads\", \"opportunities\", \"activities\", \"tasks\", \"notes\"];\n const entries = await Promise.all(names.map(async (name) => [name, (await sqlite.execute(`SELECT * FROM ag_crm_${name} ORDER BY created_at DESC LIMIT 100`)).rows]));\n return c.json({ entities: Object.fromEntries(entries), pipeline_stages: [\"NEW\", \"QUALIFY\", \"DISCOVERY\", \"PROPOSAL\", \"NEGOTIATION\", \"WON_EVIDENCED\", \"LOST\"], revenue_claimed_usd: 0, truth_boundary: \"NO_PAYMENT_EVIDENCE_NO_REVENUE\" });\n});\n\napp.post(\"/api/crm/:entity\", async (c) => {\n const denied = requireAdmin(c); if (denied) return denied;\n const parsed = await parseMutation(c); if (parsed.error) return parsed.error;\n const entity = c.req.param(\"entity\");\n const body: any = parsed.body;\n const owner = body.owner_agent_id == null ? null : (isAgentId(body.owner_agent_id) ? body.owner_agent_id : undefined);\n if (owner === undefined) return c.json({ ok: false, error: \"INVALID_OWNER_AGENT_ID\" }, 400);\n const now = new Date().toISOString(); const id = crypto.randomUUID();\n const title = boundedText(body.title ?? body.name ?? body.subject, 240, true);\n if (!title) return c.json({ ok: false, error: \"TITLE_OR_NAME_REQUIRED\" }, 400);\n const statements: Record = {\n organizations: { sql: \"INSERT INTO ag_crm_organizations VALUES(?,?,?,?,?,?,?)\", args: [id, title, boundedText(body.website, 500), owner, boundedText(body.evidence_ref, 500), now, now] },\n contacts: { sql: \"INSERT INTO ag_crm_contacts VALUES(?,?,?,?,?,?,?,?,?,?,?)\", args: [id, body.organization_id ?? null, title, boundedText(body.email, 320), boundedText(body.source, 80) || \"manual\", boundedText(body.status, 40) || \"NEW\", owner, boundedText(body.evidence_ref, 500), now, now] },\n leads: { sql: \"INSERT INTO ag_crm_leads VALUES(?,?,?,?,?,?,?)\", args: [id, title, boundedText(body.stage, 40) || \"NEW\", owner, boundedText(body.evidence_ref, 500), now, now] },\n opportunities: { sql: \"INSERT INTO ag_crm_opportunities VALUES(?,?,?,?,?,?,?,?,?)\", args: [id, title, boundedText(body.stage, 40) || \"QUALIFY\", Number.isFinite(body.value_usd) ? body.value_usd : null, Number.isInteger(body.probability) && body.probability >= 0 && body.probability <= 100 ? body.probability : 0, owner, boundedText(body.evidence_ref, 500), now, now] },\n activities: { sql: \"INSERT INTO ag_crm_activities VALUES(?,?,?,?,?,?,?,?,?)\", args: [id, boundedText(body.kind, 60) || \"NOTE\", title, boundedText(body.related_type, 60), body.related_id ?? null, owner, boundedText(body.evidence_ref, 500), now] },\n tasks: { sql: \"INSERT INTO ag_crm_tasks VALUES(?,?,?,?,?,?,?,?)\", args: [id, title, boundedText(body.status, 40) || \"OPEN\", body.due_at ?? null, owner, boundedText(body.evidence_ref, 500), now, now] },\n notes: { sql: \"INSERT INTO ag_crm_notes VALUES(?,?,?,?,?,?,?)\", args: [id, boundedText(body.body, 8000, true), boundedText(body.related_type, 60), body.related_id ?? null, owner, boundedText(body.evidence_ref, 500), now] },\n };\n const statement = statements[entity]; if (!statement || statement.args.includes(null) && entity === \"notes\" && !statement.args[1]) return c.json({ ok: false, error: \"ENTITY_OR_INPUT_INVALID\" }, 400);\n const requestHash = Array.from(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(JSON.stringify(body))))).map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n const existing = await sqlite.execute({ sql: \"SELECT request_hash,response_json FROM ag_idempotency WHERE key=?\", args: [parsed.key] });\n if (existing.rows.length) return (existing.rows[0] as any).request_hash === requestHash ? c.json(JSON.parse(String((existing.rows[0] as any).response_json))) : c.json({ ok: false, error: \"IDEMPOTENCY_KEY_CONFLICT\" }, 409);\n const response = { ok: true, entity, id, created_at: now };\n await sqlite.batch([statement, { sql: \"INSERT INTO ag_audit_v2(event_type,subject_id,detail_json,created_at) VALUES(?,?,?,?)\", args: [\"CRM_ENTITY_CREATED\", id, JSON.stringify({ entity, owner, evidence_ref: body.evidence_ref ?? null }), now] }, { sql: \"INSERT INTO ag_idempotency(key,request_hash,response_json,created_at) VALUES(?,?,?,?)\", args: [parsed.key, requestHash, JSON.stringify(response), now] }]);\n return c.json(response, 201);\n});\n\napp.get(\"/api/overview\", async (c) => {\n const crm = await sqlite.execute(\"SELECT (SELECT COUNT(*) FROM ag_crm_contacts) contacts,(SELECT COUNT(*) FROM ag_crm_organizations) organizations,(SELECT COUNT(*) FROM ag_crm_leads) leads,(SELECT COUNT(*) FROM ag_crm_opportunities) opportunities,(SELECT COUNT(*) FROM ag_crm_opportunities WHERE evidence_ref IS NOT NULL AND evidence_ref<>'') evidenced_opportunities\");\n const [providers, github, runtime] = await Promise.all([providerHealth(), githubStatus(), recoveryStatus()]);\n return c.json({ product: \"AG\", mode: \"RIGHT_HAND_MODE\", mission: { id: MISSION_ID, status: \"ACTIVE_BUILD\", checkpoint: \"AG-M1-GOVERNED-INTEGRATION\" }, hanter: { role: \"SINGLE_AI_COMMAND_CENTER_DEPUTY\", global_orchestrator: false, production: false }, fleet: { registered_agents: ROSTER.length, directors: DIRECTORS.length, roster_type: \"CANONICAL_ASSIGNMENT\", live_execution_claimed: false }, directors: DIRECTORS, orion: { role: \"ADVISORY_COORDINATION_ONLY\", always_on_required: true, status: runtime.status }, governance: [\"AI Passport\", \"Enterprise IMPERIAL Skills\", \"Guardian Core\", \"Approval Gateway\", \"Runtime Domain\", \"Audit Ledger\"], providers, crm: { ...(crm.rows[0] as any), revenue_claimed_usd: 0 }, github });\n});\n\napp.notFound((c) => c.json({ ok: false, status: \"BLOCKED\", error: \"ROUTE_NOT_FOUND\" }, 404));\napp.onError((error, c) => { console.error(\"AG_REQUEST_FAILED\", error instanceof Error ? error.name : \"UNKNOWN\"); return c.json({ ok: false, status: \"BLOCKED\", error: \"INTERNAL_ERROR\" }, 500); });\nexport default app.fetch;\n","children",[],[214],"53a5e604-fb31-435a-90ff-12772bb95284","command_bus_test.ts","89dd9380-ad5c-11f1-9e38-1607ee4eb77e",41,["D",1789074838663],"// IMPERIAL Core Command Bus runtime verification\n// Author & Chief Architect: Alexander Romaskevich / RomaskevicH\nimport { submitCommand,transitionCommand,commandStatus } from './lib/command_bus.ts';\n\nconst id=`IC-COMMAND-BUS-TEST-${Date.now()}`;\nconst mission='IC-IMPERIAL-CORE-24H-FULL-ACTIVATION-001';\nconst first=await submitCommand({command_id:id,mission_id:mission,actor:'ARCHITECT',priority:100,assigned_agent:'IMPERIAL-ADRIAN-WALKER-NCA-001',runtime_domain:'DEVELOPMENT',payload:{test:'safe-command-bus'}});\nconst duplicate=await submitCommand({command_id:id,mission_id:mission,actor:'ARCHITECT',priority:100,assigned_agent:'IMPERIAL-ADRIAN-WALKER-NCA-001',runtime_domain:'DEVELOPMENT',payload:{test:'safe-command-bus'}});\nlet conflictDenied=false; try{await submitCommand({command_id:id,mission_id:mission,actor:'ARCHITECT',payload:{test:'different'}});}catch(e){conflictDenied=String((e as Error).message)==='IDEMPOTENCY_CONFLICT';}\nlet authorityDenied=false; try{await submitCommand({command_id:`${id}-X`,mission_id:mission,actor:'UNKNOWN',payload:{}});}catch(e){authorityDenied=String((e as Error).message)==='AUTHORITY_DENIED';}\nawait transitionCommand(id,'POLICY_ALLOWED','GUARDIAN',{decision:'ALLOW',financial_authority:false});\nawait transitionCommand(id,'ASSIGNED','HANTER',{assigned_agent:'IMPERIAL-ADRIAN-WALKER-NCA-001'});\nawait transitionCommand(id,'EXECUTING','IMPERIAL-ADRIAN-WALKER-NCA-001',{execution:'SIMULATED_SAFE_TEST'});\nawait transitionCommand(id,'VERIFYING','IMPERIAL-LUCAS-BENNETT-NCA-002',{review:'INDEPENDENT_TEST_PATH'});\nawait transitionCommand(id,'COMPLETED','IMPERIAL-LUCAS-BENNETT-NCA-002',{result:'PASS',external_side_effects:false});\nlet invalidTransitionDenied=false; try{await transitionCommand(id,'EXECUTING','HANTER',{});}catch(e){invalidTransitionDenied=String((e as Error).message).startsWith('INVALID_TRANSITION_');}\nconst status=await commandStatus(id);\nconsole.log(JSON.stringify({status:'PASS',first_received:first.state==='RECEIVED',duplicate_suppressed:duplicate.duplicate===true,idempotency_conflict_denied:conflictDenied,unauthorized_actor_denied:authorityDenied,final_state:(status as any)?.state,invalid_terminal_transition_denied:invalidTransitionDenied,mission_id:mission,truth_boundary:'Command bus state machine/idempotency/audit path runtime-tested locally; external NCA tool execution not claimed.'}));\n",[],[223],"c248b291-25c7-4a77-ba0b-0b333cbab467","README.md","01a04c05-88bb-772a-8ca1-8d527cb36132",["D",1787981826165],"# React + Hono Starter\n\nA minimal starter template for building client-side React apps with a Hono\nbackend on Val Town. Click **Remix** to get your own copy.\n\n## Picking a starter\n\n| Starter | When to pick it |\n| --- | --- |\n| [`basic-html-starter`](https://www.val.town/x/templates/basic-html-starter) | Static HTML pages. Sprinkle of vanilla JS. No server-side rendering. |\n| [`hono-jsx-starter`](https://www.val.town/x/templates/hono-jsx-starter) | Dynamic server-rendered HTML with JSX. API routes. No React, no SPA. |\n| **[`react-hono-starter`](https://www.val.town/x/templates/react-hono-starter)** *(you're here)* | Client-side React SPA with a Hono API backend. |\n\n**Want to build UI?** Start writing React components in\n[`frontend/components/`](/frontend/components/). Import them into `App.tsx` and\nyou're good to go. Styling is [Twind](https://twind.style/) — just use Tailwind\nutility classes, zero config.\n\n**Want to add an API?** Add routes in [`index.ts`](/index.ts) (there's a\ncommented-out example). Fetch them from your React components.\n\n## Architecture\n\n```mermaid\ngraph LR\n Browser -->|\"GET /\"| Hono[\"index.ts
(Hono server)\"]\n Hono -->|serves| HTML[\"root.tsx\"]\n HTML -->|loads| Entry[\"index.tsx\"]\n Entry -->|renders| App[\"App.tsx\"]\n App -->|renders| Counter[\"Counter.tsx\"]\n```\n\n## File structure\n\n```\nindex.ts ← Hono backend (serves frontend + API routes)\nfrontend/\n root.tsx ← HTML shell (stamps immutable asset URLs)\n index.tsx ← React entrypoint (mounts )\n favicon.svg ← App icon\n components/\n App.tsx ← Root component (layout + view source link)\n Counter.tsx ← Example component with state\n```\n\n## How it works\n\n1. **`index.ts`** is the HTTP entrypoint — a Hono server that serves the\n frontend and any API routes you add.\n2. **`frontend/root.tsx`** is the HTML shell — it loads Twind and stamps\n immutable asset URLs for the favicon and React entrypoint.\n3. **`frontend/index.tsx`** mounts the React app.\n4. **`frontend/components/App.tsx`** is the root layout — add new components\n alongside it.\n5. **`frontend/components/Counter.tsx`** is an example stateful component —\n replace it with your own!\n\n## Next steps\n\n- Add API routes in `index.ts`\n- Add new components in `frontend/components/`\n- Add a SQLite database — see the\n [React Hono Example](https://www.val.town/x/stevekrouse/reactHonoExample) for\n a full-stack example with database, queries, and shared types\n\nTemplate updates and upgrade paths for existing remixes: [CHANGELOG.md](/CHANGELOG.md)\n",[],[231],"533e079a-a773-4761-bff1-01388a09ecfe","CHANGELOG.md","01a04c05-88bb-772a-8ca1-885b686d698f",["D",1787981826165],"# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

History · Counter.tsx