[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_524":525,"_526":527},"routes/_app.x.$handle.$name",{"_100":99,"_32":45,"_109":90,"_27":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":25,"_124":125,"_126":59,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",113,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","execution_bridge.ts","latestPath","fileId","4ca6bf4a-a2ae-11f1-a3f0-1607ee4eb77e","name","fileType","http","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst POLICY_VERSION = \"IMPERIAL-EXECUTION-BRIDGE-2.0.0\";\nconst MISSION_ID = \"IC-IMPERIAL-NCA-31DAY-COMMERCIAL-RUNTIME-001\";\nconst SERVICE_ID = \"VAL_TOWN_CODEX_CONNECTOR\";\nconst PASSPORT_ID = \"AI-PASSPORT-HANTER-EXECUTION-CONNECTOR-001\";\nconst SERVICE_EXPIRES_AT = \"2026-09-27T22:42:37.000Z\";\nconst APPROVAL_EXPIRES_AT = \"2026-09-27T22:42:37.000Z\";\nconst MAX_BODY_BYTES = 16 * 1024;\nconst MAX_TASK_CHARS = 4096;\nconst ALLOWED_PERMISSION_REASON = \"STANDING_DELEGATION_L1_OR_PREPARATION\";\nconst CAPABILITIES = new Set([\n \"QUEUE_READ\",\n \"QUEUE_AUDIT_READ\",\n \"QUEUE_CLAIM\",\n \"QUEUE_COMPLETE\",\n \"QUEUE_FAIL\",\n \"QUEUE_RELEASE\",\n]);\nconst DOMAINS = new Map([\n [\"Kids Media\", [\"ORCH-KIDS-MEDIA-001\", \"RD-KIDS-MEDIA-001\"]],\n [\"Dropshipping Commerce\", [\"ORCH-DROPSHIPPING-001\", \"RD-DROPSHIPPING-001\"]],\n [\"AI Automation\", [\"ORCH-AI-AUTOMATION-001\", \"RD-AI-AUTOMATION-001\"]],\n [\"B2B Revenue\", [\"ORCH-B2B-REVENUE-001\", \"RD-B2B-REVENUE-001\"]],\n [\"Creative & Digital\", [\"ORCH-CREATIVE-DIGITAL-001\", \"RD-CREATIVE-DIGITAL-001\"]],\n [\"Education\", [\"ORCH-EDUCATION-001\", \"RD-EDUCATION-001\"]],\n [\"Data & Market Intelligence\", [\"ORCH-DATA-MARKET-001\", \"RD-DATA-MARKET-001\"]],\n [\"SME Services\", [\"ORCH-SME-SERVICES-001\", \"RD-SME-SERVICES-001\"]],\n]);\nconst INJECTION_PATTERNS = [\n /ignore (?:all |any )?(?:previous|prior|system) instructions/i,\n /(?:this is |treat (?:this|the following) as )(?:a )?system message/i,\n /(?:the )?architect (?:has )?approved/i,\n /reveal (?:the )?(?:system prompt|secrets?|credentials?)/i,\n /(?:execute|run) (?:this |the )?(?:command|code|script)/i,\n /bypass (?:the )?(?:approval|guardian|security|policy)/i,\n];\n\ntype Capability = \"QUEUE_READ\" | \"QUEUE_CLAIM\" | \"QUEUE_COMPLETE\" | \"QUEUE_FAIL\" | \"QUEUE_RELEASE\" | \"QUEUE_AUDIT_READ\";\ntype AuditType =\n | \"QUEUE_READY_READ\"\n | \"QUEUE_AUDIT_READ\"\n | \"QUEUE_ITEM_CLAIMED\"\n | \"QUEUE_CLAIM_REJECTED\"\n | \"QUEUE_ITEM_COMPLETED\"\n | \"QUEUE_ITEM_FAILED\"\n | \"QUEUE_ITEM_RELEASED\"\n | \"QUEUE_CLAIM_EXPIRED\"\n | \"AUTHORIZATION_DENIED\";\n\nfunction secret(): string {\n const value = Deno.env.get(\"EXECUTION_APPROVAL_TOKEN\");\n if (!value) throw new Error(\"SERVER_AUTH_UNAVAILABLE\");\n return value;\n}\n\nfunction utf8(value: string): Uint8Array {\n return new TextEncoder().encode(value);\n}\n\nasync function sha256(value: string): Promise {\n const digest = await crypto.subtle.digest(\"SHA-256\", utf8(value));\n return \"sha256:\" + [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function hmac(value: string): Promise {\n const key = await crypto.subtle.importKey(\n \"raw\",\n utf8(secret()),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const signature = await crypto.subtle.sign(\"HMAC\", key, utf8(value));\n return [...new Uint8Array(signature)].map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction constantTimeEqual(left: string, right: string): boolean {\n if (left.length !== right.length || !/^[a-f0-9]+$/.test(left) || !/^[a-f0-9]+$/.test(right)) return false;\n let difference = 0;\n for (let index = 0; index < left.length; index += 1) {\n difference |= left.charCodeAt(index) ^ right.charCodeAt(index);\n }\n return difference === 0;\n}\n\nfunction json(data: unknown, status = 200): Response {\n return Response.json(data, {\n status,\n headers: {\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n },\n });\n}\n\nfunction exactObject(value: unknown, required: string[], optional: string[] = []): Record | null {\n if (!value || typeof value !== \"object\" || Array.isArray(value)) return null;\n const object = value as Record;\n const allowed = new Set([...required, ...optional]);\n if (required.some((key) => !Object.hasOwn(object, key))) return null;\n if (Object.keys(object).some((key) => !allowed.has(key))) return null;\n return object;\n}\n\nfunction safeIdentifier(value: unknown, minimum = 8, maximum = 128): string | null {\n if (typeof value !== \"string\" || value.length < minimum || value.length > maximum) return null;\n return /^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(value) ? value : null;\n}\n\nfunction safeEvidenceRef(value: unknown): string | null {\n if (typeof value !== \"string\" || value.length > 2048) return null;\n return /^(?:urn:evidence:|https:\\/\\/)[^\\s]{8,2048}$/.test(value) ? value : null;\n}\n\nfunction safeHash(value: unknown): string | null {\n return typeof value === \"string\" && /^sha256:[a-f0-9]{64}$/.test(value) ? value : null;\n}\n\nfunction sanitizeTask(value: unknown) {\n const original = typeof value === \"string\" ? value : \"\";\n const normalized = original\n .replace(/[\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f]/g, \" \")\n .trim();\n const text = normalized.slice(0, MAX_TASK_CHARS);\n return {\n text,\n trust: \"UNTRUSTED_TASK_DATA\",\n authority: \"NONE\",\n prompt_injection_detected: INJECTION_PATTERNS.some((pattern) => pattern.test(text)),\n truncated: normalized.length > MAX_TASK_CHARS,\n };\n}\n\nasync function addColumn(name: string, definition: string) {\n try {\n await sqlite.execute(`ALTER TABLE execution_queue ADD COLUMN ${name} ${definition}`);\n } catch (error) {\n if (!String(error).toLowerCase().includes(\"duplicate column\")) throw error;\n }\n}\n\nasync function ensureSchema() {\n await addColumn(\"mission_id\", \"TEXT\");\n await addColumn(\"orchestrator_id\", \"TEXT\");\n await addColumn(\"runtime_domain\", \"TEXT\");\n await addColumn(\"guardian_state\", \"TEXT\");\n await addColumn(\"approval_state\", \"TEXT\");\n await addColumn(\"approval_decision_id\", \"TEXT\");\n await addColumn(\"approval_expires_at\", \"TEXT\");\n await addColumn(\"approval_revoked_at\", \"TEXT\");\n await addColumn(\"policy_version\", \"TEXT\");\n await addColumn(\"retriable\", \"INTEGER NOT NULL DEFAULT 1\");\n await addColumn(\"authorization_binding\", \"TEXT\");\n await addColumn(\"claim_id\", \"TEXT\");\n await addColumn(\"claimed_by\", \"TEXT\");\n await addColumn(\"claimed_at\", \"TEXT\");\n await addColumn(\"claim_expires_at\", \"TEXT\");\n await addColumn(\"authorization_decision_id\", \"TEXT\");\n await addColumn(\"failure_reason\", \"TEXT\");\n await addColumn(\"failure_retriable\", \"INTEGER\");\n await addColumn(\"completion_request_id\", \"TEXT\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_bridge_claims (\n claim_id TEXT PRIMARY KEY,\n queue_item_id INTEGER NOT NULL,\n claimed_by TEXT NOT NULL,\n passport_id TEXT NOT NULL,\n agent_id TEXT NOT NULL,\n orchestrator_id TEXT NOT NULL,\n runtime_domain TEXT NOT NULL,\n claimed_at TEXT NOT NULL,\n claim_expires_at TEXT NOT NULL,\n authorization_decision_id TEXT NOT NULL,\n state TEXT NOT NULL,\n retriable INTEGER NOT NULL,\n completed_at TEXT,\n failure_reason TEXT\n )`);\n await sqlite.execute(`CREATE UNIQUE INDEX IF NOT EXISTS execution_bridge_one_active_claim\n ON execution_bridge_claims(queue_item_id) WHERE state='ACTIVE'`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_bridge_nonces (\n nonce TEXT PRIMARY KEY,\n service_id TEXT NOT NULL,\n capability TEXT NOT NULL,\n used_at TEXT NOT NULL,\n expires_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_bridge_requests (\n request_id TEXT PRIMARY KEY,\n operation TEXT NOT NULL,\n claim_id TEXT NOT NULL,\n service_id TEXT NOT NULL,\n created_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_bridge_audit (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_id TEXT NOT NULL UNIQUE,\n event_type TEXT NOT NULL,\n timestamp TEXT NOT NULL,\n queue_item_id INTEGER,\n claim_id TEXT,\n request_id TEXT,\n service_id TEXT NOT NULL,\n passport_id TEXT NOT NULL,\n agent_id TEXT,\n orchestrator_id TEXT,\n runtime_domain TEXT,\n authorization_decision_id TEXT NOT NULL,\n previous_state TEXT,\n new_state TEXT,\n result TEXT NOT NULL,\n reason_code TEXT NOT NULL,\n evidence_ref TEXT,\n evidence_sha256 TEXT,\n event_hash TEXT NOT NULL,\n event_signature TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TRIGGER IF NOT EXISTS execution_bridge_audit_no_update\n BEFORE UPDATE ON execution_bridge_audit BEGIN SELECT RAISE(ABORT, 'AUDIT_IMMUTABLE'); END`);\n await sqlite.execute(`CREATE TRIGGER IF NOT EXISTS execution_bridge_audit_no_delete\n BEFORE DELETE ON execution_bridge_audit BEGIN SELECT RAISE(ABORT, 'AUDIT_IMMUTABLE'); END`);\n await bindUnboundQueueItems();\n}\n\nfunction domainBinding(domain: string): [string, string] | null {\n return (DOMAINS.get(domain) as [string, string] | undefined) ?? null;\n}\n\nasync function queueBinding(row: Record, orchestratorId: string, runtimeDomain: string): Promise {\n return await hmac(JSON.stringify([\n \"QUEUE_AUTHORIZATION_BINDING_V2\",\n row.id,\n row.agent_id,\n row.action_stage,\n row.next_action,\n row.connector,\n row.created_at,\n row.permission_decision,\n row.permission_reason,\n MISSION_ID,\n orchestratorId,\n runtimeDomain,\n \"PASS\",\n \"ACTIVE\",\n `PM-${row.id}-${row.created_at}`,\n APPROVAL_EXPIRES_AT,\n POLICY_VERSION,\n ]));\n}\n\nasync function bindUnboundQueueItems() {\n const rows = await sqlite.execute(`SELECT q.id,q.agent_id,q.action_stage,q.next_action,q.connector,q.created_at,\n q.permission_decision,q.permission_reason,a.domain\n FROM execution_queue q JOIN agents a ON a.agent_id=q.agent_id\n WHERE q.authorization_binding IS NULL`);\n for (const row of rows.rows as Record[]) {\n if (row.permission_decision !== \"ALLOW\" || row.permission_reason !== ALLOWED_PERMISSION_REASON) continue;\n const binding = domainBinding(String(row.domain));\n if (!binding) continue;\n const [orchestratorId, runtimeDomain] = binding;\n const approvalDecisionId = `PM-${row.id}-${row.created_at}`;\n const authorizationBinding = await queueBinding(row, orchestratorId, runtimeDomain);\n await sqlite.execute({\n sql: `UPDATE execution_queue SET mission_id=?,orchestrator_id=?,runtime_domain=?,guardian_state='PASS',\n approval_state='ACTIVE',approval_decision_id=?,approval_expires_at=?,approval_revoked_at=NULL,\n policy_version=?,retriable=1,authorization_binding=?\n WHERE id=? AND authorization_binding IS NULL AND permission_decision='ALLOW' AND permission_reason=?`,\n args: [\n MISSION_ID,\n orchestratorId,\n runtimeDomain,\n approvalDecisionId,\n APPROVAL_EXPIRES_AT,\n POLICY_VERSION,\n authorizationBinding,\n row.id,\n ALLOWED_PERMISSION_REASON,\n ],\n });\n }\n}\n\nasync function verifyQueueBinding(row: Record): Promise {\n const expected = await queueBinding(row, String(row.orchestrator_id), String(row.runtime_domain));\n return typeof row.authorization_binding === \"string\" && constantTimeEqual(expected, row.authorization_binding);\n}\n\nasync function eventMaterial(input: {\n eventType: AuditType;\n timestamp: string;\n queueItemId: number | null;\n claimId: string | null;\n requestId: string | null;\n serviceId: string;\n agentId: string | null;\n orchestratorId: string | null;\n runtimeDomain: string | null;\n authorizationDecisionId: string;\n previousState: string | null;\n newState: string | null;\n result: \"PASS\" | \"DENY\";\n reasonCode: string;\n evidenceRef: string | null;\n evidenceSha256: string | null;\n}) {\n const eventId = crypto.randomUUID();\n const ordered = [\n eventId,\n input.eventType,\n input.timestamp,\n input.queueItemId,\n input.claimId,\n input.requestId,\n input.serviceId,\n PASSPORT_ID,\n input.agentId,\n input.orchestratorId,\n input.runtimeDomain,\n input.authorizationDecisionId,\n input.previousState,\n input.newState,\n input.result,\n input.reasonCode,\n input.evidenceRef,\n input.evidenceSha256,\n ];\n const eventHash = await sha256(JSON.stringify(ordered));\n const eventSignature = await hmac(eventHash);\n return { ...input, eventId, eventHash, eventSignature };\n}\n\nfunction auditInsert(event: Awaited>) {\n return {\n sql: `INSERT INTO execution_bridge_audit(\n event_id,event_type,timestamp,queue_item_id,claim_id,request_id,service_id,passport_id,\n agent_id,orchestrator_id,runtime_domain,authorization_decision_id,previous_state,new_state,\n result,reason_code,evidence_ref,evidence_sha256,event_hash,event_signature\n ) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args: [\n event.eventId,\n event.eventType,\n event.timestamp,\n event.queueItemId,\n event.claimId,\n event.requestId,\n event.serviceId,\n PASSPORT_ID,\n event.agentId,\n event.orchestratorId,\n event.runtimeDomain,\n event.authorizationDecisionId,\n event.previousState,\n event.newState,\n event.result,\n event.reasonCode,\n event.evidenceRef,\n event.evidenceSha256,\n event.eventHash,\n event.eventSignature,\n ],\n };\n}\n\nfunction conditionalClaimAuditInsert(\n event: Awaited>,\n claimId: string,\n) {\n const base = auditInsert(event);\n const valuesIndex = base.sql.indexOf(\" VALUES(\");\n const header = base.sql.slice(0, valuesIndex);\n return {\n sql: `${header} SELECT ?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?\n WHERE EXISTS(SELECT 1 FROM execution_bridge_claims WHERE claim_id=? AND state='ACTIVE')`,\n args: [...base.args, claimId],\n };\n}\n\nfunction conditionalFinalizeAuditInsert(\n event: Awaited>,\n requestId: string,\n claimId: string,\n claimState: string,\n queueState: string,\n) {\n const base = auditInsert(event);\n const valuesIndex = base.sql.indexOf(\" VALUES(\");\n const header = base.sql.slice(0, valuesIndex);\n return {\n sql: `${header} SELECT ?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?\n WHERE EXISTS(\n SELECT 1 FROM execution_bridge_requests r\n JOIN execution_bridge_claims c ON c.claim_id=r.claim_id\n JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE r.request_id=? AND r.claim_id=? AND c.state=?\n AND q.execution_state=? AND q.completion_request_id=?\n )`,\n args: [...base.args, requestId, claimId, claimState, queueState, requestId],\n };\n}\n\nasync function appendDenied(reasonCode: string, serviceId = \"UNVERIFIED_CALLER\") {\n try {\n await ensureSchema();\n const timestamp = new Date().toISOString();\n const event = await eventMaterial({\n eventType: \"AUTHORIZATION_DENIED\",\n timestamp,\n queueItemId: null,\n claimId: null,\n requestId: null,\n serviceId: serviceId === SERVICE_ID ? serviceId : \"UNVERIFIED_CALLER\",\n agentId: null,\n orchestratorId: null,\n runtimeDomain: null,\n authorizationDecisionId: await sha256(JSON.stringify([\"DENY\", timestamp, reasonCode])),\n previousState: null,\n newState: null,\n result: \"DENY\",\n reasonCode,\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.execute(auditInsert(event));\n } catch {\n // Authorization response remains fail-closed even if audit storage is unavailable.\n }\n}\n\nasync function authenticate(req: Request, body: string, required: Capability) {\n const serviceId = req.headers.get(\"x-imperial-service-id\") ?? \"\";\n const capability = req.headers.get(\"x-imperial-capability\") ?? \"\";\n const timestamp = req.headers.get(\"x-imperial-timestamp\") ?? \"\";\n const nonce = req.headers.get(\"x-imperial-nonce\") ?? \"\";\n const signature = req.headers.get(\"x-imperial-signature\") ?? \"\";\n\n if (\n serviceId !== SERVICE_ID ||\n capability !== required ||\n !CAPABILITIES.has(capability) ||\n !/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/.test(timestamp) ||\n !/^[A-Za-z0-9_-]{16,128}$/.test(nonce) ||\n !/^[a-f0-9]{64}$/.test(signature)\n ) {\n await appendDenied(\"SIGNED_CAPABILITY_REQUIRED\", serviceId);\n return { ok: false as const, status: 401, reason: \"UNAUTHORIZED\" };\n }\n const age = Math.abs(Date.now() - Date.parse(timestamp));\n if (!Number.isFinite(age) || age > 60_000 || Date.parse(SERVICE_EXPIRES_AT) <= Date.now()) {\n await appendDenied(\"SIGNED_CAPABILITY_EXPIRED\", serviceId);\n return { ok: false as const, status: 401, reason: \"UNAUTHORIZED\" };\n }\n\n const url = new URL(req.url);\n const bodyHash = await sha256(body);\n const canonical = [\n req.method.toUpperCase(),\n url.pathname + url.search,\n timestamp,\n nonce,\n serviceId,\n capability,\n bodyHash,\n ].join(\"\\n\");\n const expected = await hmac(canonical);\n if (!constantTimeEqual(expected, signature)) {\n await appendDenied(\"SIGNATURE_INVALID\", serviceId);\n return { ok: false as const, status: 401, reason: \"UNAUTHORIZED\" };\n }\n\n await ensureSchema();\n await sqlite.execute({\n sql: \"DELETE FROM execution_bridge_nonces WHERE expires_at < ?\",\n args: [new Date().toISOString()],\n });\n const inserted = await sqlite.execute({\n sql: `INSERT OR IGNORE INTO execution_bridge_nonces(nonce,service_id,capability,used_at,expires_at)\n VALUES(?,?,?,?,?)`,\n args: [\n nonce,\n serviceId,\n capability,\n timestamp,\n new Date(Date.parse(timestamp) + 5 * 60_000).toISOString(),\n ],\n });\n if (inserted.rowsAffected !== 1) {\n await appendDenied(\"REPLAY_DENIED\", serviceId);\n return { ok: false as const, status: 409, reason: \"REPLAY_DENIED\" };\n }\n\n return {\n ok: true as const,\n serviceId,\n capability: capability as Capability,\n authorizationDecisionId: await sha256(JSON.stringify([\n POLICY_VERSION,\n PASSPORT_ID,\n serviceId,\n capability,\n timestamp,\n nonce,\n bodyHash,\n ])),\n };\n}\n\nasync function expireClaims() {\n const now = new Date().toISOString();\n const expired = await sqlite.execute({\n sql: `SELECT c.claim_id,c.queue_item_id,c.claimed_by,c.agent_id,c.orchestrator_id,\n c.runtime_domain,c.authorization_decision_id,c.retriable,q.execution_state\n FROM execution_bridge_claims c JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE c.state='ACTIVE' AND c.claim_expires_at<=?`,\n args: [now],\n });\n for (const row of expired.rows as Record[]) {\n const newState = Number(row.retriable) === 1 ? \"READY\" : \"FAILED\";\n const event = await eventMaterial({\n eventType: \"QUEUE_CLAIM_EXPIRED\",\n timestamp: now,\n queueItemId: Number(row.queue_item_id),\n claimId: String(row.claim_id),\n requestId: null,\n serviceId: String(row.claimed_by),\n agentId: String(row.agent_id),\n orchestratorId: String(row.orchestrator_id),\n runtimeDomain: String(row.runtime_domain),\n authorizationDecisionId: String(row.authorization_decision_id),\n previousState: \"CLAIMED\",\n newState,\n result: \"PASS\",\n reasonCode: \"CLAIM_LEASE_EXPIRED\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.batch([\n {\n sql: `UPDATE execution_bridge_claims SET state='EXPIRED'\n WHERE claim_id=? AND state='ACTIVE' AND claim_expires_at<=?`,\n args: [row.claim_id, now],\n },\n {\n sql: `UPDATE execution_queue SET execution_state=?,claim_id=NULL,claimed_by=NULL,\n claimed_at=NULL,claim_expires_at=NULL,updated_at=?\n WHERE id=? AND execution_state='CLAIMED' AND claim_id=?`,\n args: [newState, now, row.queue_item_id, row.claim_id],\n },\n auditInsert(event),\n ]);\n }\n return expired.rows.length;\n}\n\nfunction rowEligible(row: Record, now: string): boolean {\n return row.execution_state === \"READY\" &&\n row.permission_decision === \"ALLOW\" &&\n row.permission_reason === ALLOWED_PERMISSION_REASON &&\n row.guardian_state === \"PASS\" &&\n row.approval_state === \"ACTIVE\" &&\n row.approval_revoked_at === null &&\n typeof row.approval_expires_at === \"string\" &&\n Date.parse(row.approval_expires_at) > Date.parse(now) &&\n row.policy_version === POLICY_VERSION &&\n typeof row.runtime_domain === \"string\" &&\n [...DOMAINS.values()].some((entry) => entry[1] === row.runtime_domain) &&\n !sanitizeTask(row.next_action).prompt_injection_detected;\n}\n\nasync function readyItems(limit: number) {\n const now = new Date().toISOString();\n const result = await sqlite.execute({\n sql: `SELECT q.id,q.agent_id,q.action_stage,q.next_action,q.connector,q.execution_state,q.created_at,\n q.permission_decision,q.permission_reason,q.mission_id,q.orchestrator_id,q.runtime_domain,\n q.guardian_state,q.approval_state,q.approval_decision_id,q.approval_expires_at,\n q.approval_revoked_at,q.policy_version,q.retriable,q.authorization_binding\n FROM execution_queue q\n WHERE q.execution_state='READY' AND q.permission_decision='ALLOW'\n AND q.approval_state='ACTIVE' AND q.approval_revoked_at IS NULL\n AND q.approval_expires_at>? AND q.policy_version=?\n ORDER BY q.id LIMIT ?`,\n args: [now, POLICY_VERSION, Math.min(100, Math.max(1, limit * 3))],\n });\n const output = [];\n for (const row of result.rows as Record[]) {\n if (!rowEligible(row, now) || !(await verifyQueueBinding(row))) continue;\n output.push({\n queue_item_id: Number(row.id),\n mission_id: String(row.mission_id),\n agent_id: String(row.agent_id),\n orchestrator_id: String(row.orchestrator_id),\n runtime_domain: String(row.runtime_domain),\n task_type: String(row.connector),\n sanitized_task_payload: sanitizeTask(row.next_action),\n approval_decision_id: String(row.approval_decision_id),\n approval_state: String(row.approval_state),\n created_at: String(row.created_at),\n expires_at: String(row.approval_expires_at),\n policy_version: String(row.policy_version),\n evidence_refs: [],\n });\n if (output.length >= limit) break;\n }\n return output;\n}\n\nasync function readBody(req: Request): Promise {\n const length = Number(req.headers.get(\"content-length\") ?? \"0\");\n if (Number.isFinite(length) && length > MAX_BODY_BYTES) return null;\n const text = await req.text();\n return utf8(text).byteLength <= MAX_BODY_BYTES ? text : null;\n}\n\nasync function handleReady(req: Request, body: string) {\n const auth = await authenticate(req, body, \"QUEUE_READ\");\n if (!auth.ok) return json({ error: auth.reason }, auth.status);\n await expireClaims();\n const url = new URL(req.url);\n const requested = Number(url.searchParams.get(\"limit\") ?? \"20\");\n const limit = Number.isInteger(requested) ? Math.min(100, Math.max(1, requested)) : 20;\n const items = await readyItems(limit);\n const timestamp = new Date().toISOString();\n const event = await eventMaterial({\n eventType: \"QUEUE_READY_READ\",\n timestamp,\n queueItemId: null,\n claimId: null,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: null,\n orchestratorId: null,\n runtimeDomain: null,\n authorizationDecisionId: auth.authorizationDecisionId,\n previousState: null,\n newState: null,\n result: \"PASS\",\n reasonCode: \"AUTHORIZED_FILTERED_READ\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.execute(auditInsert(event));\n return json({\n bridge: POLICY_VERSION,\n caller: auth.serviceId,\n passport_id: PASSPORT_ID,\n secret_exposed: false,\n count: items.length,\n items,\n });\n}\n\nasync function getQueueRow(id: number) {\n const result = await sqlite.execute({\n sql: `SELECT q.id,q.agent_id,q.action_stage,q.next_action,q.connector,q.execution_state,q.created_at,\n q.permission_decision,q.permission_reason,q.mission_id,q.orchestrator_id,q.runtime_domain,\n q.guardian_state,q.approval_state,q.approval_decision_id,q.approval_expires_at,\n q.approval_revoked_at,q.policy_version,q.retriable,q.authorization_binding,q.claim_id\n FROM execution_queue q WHERE q.id=?`,\n args: [id],\n });\n return (result.rows[0] as Record | undefined) ?? null;\n}\n\nasync function handleClaim(req: Request, body: string) {\n const auth = await authenticate(req, body, \"QUEUE_CLAIM\");\n if (!auth.ok) return json({ error: auth.reason }, auth.status);\n await expireClaims();\n const parsed = JSON.parse(body || \"{}\");\n const input = exactObject(parsed, [\"queue_item_id\"], [\"lease_seconds\"]);\n const queueItemId = Number(input?.queue_item_id);\n const leaseSeconds = Number(input?.lease_seconds ?? 300);\n if (!input || !Number.isInteger(queueItemId) || !Number.isInteger(leaseSeconds) || leaseSeconds < 30 || leaseSeconds > 900) {\n return json({ error: \"MALFORMED_CLAIM_REQUEST\" }, 400);\n }\n\n const row = await getQueueRow(queueItemId);\n const now = new Date().toISOString();\n if (!row || !rowEligible(row, now) || !(await verifyQueueBinding(row))) {\n const event = await eventMaterial({\n eventType: \"QUEUE_CLAIM_REJECTED\",\n timestamp: now,\n queueItemId,\n claimId: null,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: row ? String(row.agent_id) : null,\n orchestratorId: row ? String(row.orchestrator_id) : null,\n runtimeDomain: row ? String(row.runtime_domain) : null,\n authorizationDecisionId: auth.authorizationDecisionId,\n previousState: row ? String(row.execution_state) : null,\n newState: row ? String(row.execution_state) : null,\n result: \"DENY\",\n reasonCode: \"ITEM_NOT_EXECUTABLE\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.execute(auditInsert(event));\n return json({ claimed: false, error: \"ITEM_NOT_EXECUTABLE\" }, 409);\n }\n\n const claimId = crypto.randomUUID();\n const expiresAt = new Date(Date.now() + leaseSeconds * 1000).toISOString();\n const authorizationDecisionId = await sha256(JSON.stringify([\n auth.authorizationDecisionId,\n queueItemId,\n row.agent_id,\n row.runtime_domain,\n row.approval_decision_id,\n claimId,\n now,\n expiresAt,\n ]));\n const event = await eventMaterial({\n eventType: \"QUEUE_ITEM_CLAIMED\",\n timestamp: now,\n queueItemId,\n claimId,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: String(row.agent_id),\n orchestratorId: String(row.orchestrator_id),\n runtimeDomain: String(row.runtime_domain),\n authorizationDecisionId,\n previousState: \"READY\",\n newState: \"CLAIMED\",\n result: \"PASS\",\n reasonCode: \"ATOMIC_COMPARE_AND_SET\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n\n try {\n await sqlite.batch([\n {\n sql: `INSERT INTO execution_bridge_claims(\n claim_id,queue_item_id,claimed_by,passport_id,agent_id,orchestrator_id,runtime_domain,\n claimed_at,claim_expires_at,authorization_decision_id,state,retriable\n )\n SELECT ?,q.id,?,?,?,?,?,?,?,?,?,q.retriable\n FROM execution_queue q\n WHERE q.id=? AND q.execution_state='READY' AND q.permission_decision='ALLOW'\n AND q.guardian_state='PASS' AND q.approval_state='ACTIVE'\n AND q.approval_revoked_at IS NULL AND q.approval_expires_at>?\n AND q.policy_version=? AND q.authorization_binding=?`,\n args: [\n claimId,\n auth.serviceId,\n PASSPORT_ID,\n row.agent_id,\n row.orchestrator_id,\n row.runtime_domain,\n now,\n expiresAt,\n authorizationDecisionId,\n \"ACTIVE\",\n queueItemId,\n now,\n POLICY_VERSION,\n row.authorization_binding,\n ],\n },\n {\n sql: `UPDATE execution_queue SET execution_state='CLAIMED',claim_id=?,claimed_by=?,\n claimed_at=?,claim_expires_at=?,authorization_decision_id=?,updated_at=?\n WHERE id=? AND execution_state='READY'\n AND EXISTS(SELECT 1 FROM execution_bridge_claims c WHERE c.claim_id=? AND c.state='ACTIVE')`,\n args: [claimId, auth.serviceId, now, expiresAt, authorizationDecisionId, now, queueItemId, claimId],\n },\n conditionalClaimAuditInsert(event, claimId),\n ]);\n } catch {\n const rejected = await eventMaterial({\n eventType: \"QUEUE_CLAIM_REJECTED\",\n timestamp: new Date().toISOString(),\n queueItemId,\n claimId: null,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: String(row.agent_id),\n orchestratorId: String(row.orchestrator_id),\n runtimeDomain: String(row.runtime_domain),\n authorizationDecisionId,\n previousState: \"READY\",\n newState: \"READY\",\n result: \"DENY\",\n reasonCode: \"CONCURRENT_OR_DUPLICATE_CLAIM\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.execute(auditInsert(rejected));\n return json({ claimed: false, error: \"ALREADY_CLAIMED\" }, 409);\n }\n\n const claimed = await sqlite.execute({\n sql: \"SELECT claim_id FROM execution_bridge_claims WHERE claim_id=? AND state='ACTIVE'\",\n args: [claimId],\n });\n if (!claimed.rows.length) return json({ claimed: false, error: \"ALREADY_CLAIMED\" }, 409);\n\n return json({\n claimed: true,\n secret_exposed: false,\n claim: {\n claim_id: claimId,\n queue_item_id: queueItemId,\n claimed_by: auth.serviceId,\n agent_id: String(row.agent_id),\n orchestrator_id: String(row.orchestrator_id),\n runtime_domain: String(row.runtime_domain),\n claimed_at: now,\n claim_expires_at: expiresAt,\n authorization_decision_id: authorizationDecisionId,\n task_type: String(row.connector),\n sanitized_task_payload: sanitizeTask(row.next_action),\n },\n }, 201);\n}\n\nasync function getClaim(claimId: string) {\n const result = await sqlite.execute({\n sql: `SELECT c.*,q.execution_state,q.permission_decision,q.permission_reason,q.guardian_state,\n q.approval_state,q.approval_expires_at,q.approval_revoked_at,q.policy_version,\n q.authorization_binding,q.next_action\n FROM execution_bridge_claims c JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE c.claim_id=?`,\n args: [claimId],\n });\n return (result.rows[0] as Record | undefined) ?? null;\n}\n\nfunction activeClaim(row: Record, serviceId: string, now: string): boolean {\n return row.state === \"ACTIVE\" &&\n row.execution_state === \"CLAIMED\" &&\n row.claimed_by === serviceId &&\n row.permission_decision === \"ALLOW\" &&\n row.permission_reason === ALLOWED_PERMISSION_REASON &&\n row.guardian_state === \"PASS\" &&\n row.approval_state === \"ACTIVE\" &&\n row.approval_revoked_at === null &&\n typeof row.approval_expires_at === \"string\" &&\n Date.parse(row.approval_expires_at) > Date.parse(now) &&\n typeof row.claim_expires_at === \"string\" &&\n Date.parse(row.claim_expires_at) > Date.parse(now) &&\n row.policy_version === POLICY_VERSION;\n}\n\nasync function handleFinalize(req: Request, body: string, operation: \"complete\" | \"fail\" | \"release\") {\n const capability = ({\n complete: \"QUEUE_COMPLETE\",\n fail: \"QUEUE_FAIL\",\n release: \"QUEUE_RELEASE\",\n } as const)[operation];\n const auth = await authenticate(req, body, capability);\n if (!auth.ok) return json({ error: auth.reason }, auth.status);\n\n const parsed = JSON.parse(body || \"{}\");\n const required = operation === \"release\"\n ? [\"claim_id\", \"request_id\", \"reason\"]\n : operation === \"fail\"\n ? [\"claim_id\", \"request_id\", \"evidence_ref\", \"evidence_sha256\", \"failure_reason\", \"retriable\"]\n : [\"claim_id\", \"request_id\", \"evidence_ref\", \"evidence_sha256\"];\n const input = exactObject(parsed, required);\n if (!input) return json({ error: \"MALFORMED_FINALIZE_REQUEST\" }, 400);\n const claimId = safeIdentifier(input.claim_id);\n const requestId = safeIdentifier(input.request_id);\n const evidenceRef = operation === \"release\" ? null : safeEvidenceRef(input.evidence_ref);\n const evidenceSha256 = operation === \"release\" ? null : safeHash(input.evidence_sha256);\n const failureReason = operation === \"fail\"\n ? (typeof input.failure_reason === \"string\" && /^[A-Z0-9_:-]{3,128}$/.test(input.failure_reason) ? input.failure_reason : null)\n : null;\n const releaseReason = operation === \"release\"\n ? (typeof input.reason === \"string\" && /^[A-Z0-9_:-]{3,128}$/.test(input.reason) ? input.reason : null)\n : null;\n const retriable = operation === \"fail\" && typeof input.retriable === \"boolean\" ? input.retriable : false;\n if (!claimId || !requestId || (operation !== \"release\" && (!evidenceRef || !evidenceSha256)) ||\n (operation === \"fail\" && !failureReason) || (operation === \"release\" && !releaseReason)) {\n return json({ error: \"FINALIZE_FIELDS_INVALID\" }, 400);\n }\n\n await expireClaims();\n const claim = await getClaim(claimId);\n const now = new Date().toISOString();\n if (!claim || !activeClaim(claim, auth.serviceId, now) ||\n (operation === \"release\" && Number(claim.retriable) !== 1)) {\n return json({ updated: false, error: \"ACTIVE_AUTHORIZED_CLAIM_REQUIRED\" }, 409);\n }\n\n const queueItemId = Number(claim.queue_item_id);\n const newState = operation === \"complete\" ? \"COMPLETED\" : operation === \"fail\" ? \"FAILED\" : \"READY\";\n const claimState = operation === \"complete\" ? \"COMPLETED\" : operation === \"fail\" ? \"FAILED\" : \"RELEASED\";\n const eventType: AuditType = operation === \"complete\"\n ? \"QUEUE_ITEM_COMPLETED\"\n : operation === \"fail\"\n ? \"QUEUE_ITEM_FAILED\"\n : \"QUEUE_ITEM_RELEASED\";\n const reasonCode = operation === \"complete\" ? \"COMPLETION_EVIDENCE_PERSISTED\" : operation === \"fail\"\n ? failureReason!\n : releaseReason!;\n const event = await eventMaterial({\n eventType,\n timestamp: now,\n queueItemId,\n claimId,\n requestId,\n serviceId: auth.serviceId,\n agentId: String(claim.agent_id),\n orchestratorId: String(claim.orchestrator_id),\n runtimeDomain: String(claim.runtime_domain),\n authorizationDecisionId: String(claim.authorization_decision_id),\n previousState: \"CLAIMED\",\n newState,\n result: \"PASS\",\n reasonCode,\n evidenceRef,\n evidenceSha256,\n });\n\n const batch = [\n {\n sql: `INSERT INTO execution_bridge_requests(request_id,operation,claim_id,service_id,created_at)\n SELECT ?,?,?,?,? WHERE EXISTS(\n SELECT 1 FROM execution_bridge_claims c\n JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE c.claim_id=? AND c.state='ACTIVE' AND c.claimed_by=?\n AND c.claim_expires_at>? AND q.execution_state='CLAIMED' AND q.claim_id=?\n )`,\n args: [\n requestId,\n operation.toUpperCase(),\n claimId,\n auth.serviceId,\n now,\n claimId,\n auth.serviceId,\n now,\n claimId,\n ],\n },\n {\n sql: `UPDATE execution_bridge_claims SET state=?,completed_at=?,failure_reason=?\n WHERE claim_id=? AND state='ACTIVE' AND claimed_by=? AND claim_expires_at>?\n AND EXISTS(SELECT 1 FROM execution_bridge_requests WHERE request_id=? AND claim_id=?)`,\n args: [claimState, now, failureReason, claimId, auth.serviceId, now, requestId, claimId],\n },\n {\n sql: `UPDATE execution_queue SET execution_state=?,evidence_ref=?,updated_at=?,\n failure_reason=?,failure_retriable=?,completion_request_id=?,\n claim_id=CASE WHEN ?='READY' THEN NULL ELSE claim_id END,\n claimed_by=CASE WHEN ?='READY' THEN NULL ELSE claimed_by END,\n claimed_at=CASE WHEN ?='READY' THEN NULL ELSE claimed_at END,\n claim_expires_at=CASE WHEN ?='READY' THEN NULL ELSE claim_expires_at END\n WHERE id=? AND execution_state='CLAIMED' AND claim_id=?\n AND EXISTS(SELECT 1 FROM execution_bridge_requests WHERE request_id=?)`,\n args: [\n newState,\n evidenceRef,\n now,\n failureReason,\n operation === \"fail\" ? (retriable ? 1 : 0) : null,\n requestId,\n newState,\n newState,\n newState,\n newState,\n queueItemId,\n claimId,\n requestId,\n ],\n },\n ];\n if (operation === \"complete\") {\n batch.push({\n sql: `UPDATE agent_progress SET\n stage_index=CASE WHEN stage_index<7 THEN stage_index+1 ELSE 0 END,\n stage_state='WAITING_FOR_EVIDENCE',\n evidence_count=evidence_count+1,\n last_evidence_ref=?,\n last_advanced_at=?\n WHERE agent_id=? AND EXISTS(\n SELECT 1 FROM execution_queue q\n WHERE q.id=? AND q.execution_state='COMPLETED' AND q.completion_request_id=?\n )`,\n args: [evidenceRef, now, claim.agent_id, queueItemId, requestId],\n });\n }\n batch.push(conditionalFinalizeAuditInsert(event, requestId, claimId, claimState, newState));\n\n try {\n await sqlite.batch(batch);\n } catch {\n return json({ updated: false, error: \"REPLAY_OR_STATE_CONFLICT\" }, 409);\n }\n\n const finalized = await sqlite.execute({\n sql: `SELECT r.request_id FROM execution_bridge_requests r\n JOIN execution_bridge_claims c ON c.claim_id=r.claim_id\n JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE r.request_id=? AND r.claim_id=? AND c.state=?\n AND q.execution_state=? AND q.completion_request_id=?`,\n args: [requestId, claimId, claimState, newState, requestId],\n });\n if (!finalized.rows.length) {\n return json({ updated: false, error: \"REPLAY_OR_STATE_CONFLICT\" }, 409);\n }\n\n return json({\n updated: true,\n operation: operation.toUpperCase(),\n queue_item_id: queueItemId,\n claim_id: claimId,\n state: newState,\n agent_progress_updated: operation === \"complete\",\n secret_exposed: false,\n audit_event_id: event.eventId,\n audit_event_hash: event.eventHash,\n });\n}\n\nasync function handleAuditRead(req: Request, body: string) {\n const auth = await authenticate(req, body, \"QUEUE_AUDIT_READ\");\n if (!auth.ok) return json({ error: auth.reason }, auth.status);\n await expireClaims();\n const url = new URL(req.url);\n const rawIds = url.searchParams.get(\"queue_item_ids\") ?? \"\";\n const rawParts = rawIds.split(\",\");\n const ids = [...new Set(rawParts.map((value) => Number(value.trim())).filter((value) => Number.isInteger(value) && value > 0))];\n const requestedLimit = Number(url.searchParams.get(\"limit\") ?? \"100\");\n const limit = Number.isInteger(requestedLimit) ? Math.min(200, Math.max(1, requestedLimit)) : 100;\n if (\n !ids.length ||\n ids.length > 20 ||\n ids.join(\",\") !== rawParts.map((value) => String(Number(value.trim()))).join(\",\")\n ) {\n return json({ error: \"VALID_QUEUE_ITEM_IDS_REQUIRED\" }, 400);\n }\n\n const placeholders = ids.map(() => \"?\").join(\",\");\n const now = new Date().toISOString();\n const candidates = await sqlite.execute({\n sql: `SELECT id,agent_id,action_stage,next_action,connector,execution_state,created_at,updated_at,\n evidence_ref,permission_decision,permission_reason,mission_id,orchestrator_id,runtime_domain,\n guardian_state,approval_state,approval_decision_id,approval_expires_at,approval_revoked_at,\n policy_version,retriable,authorization_binding,claim_id,claimed_by,claimed_at,claim_expires_at,\n completion_request_id,failure_reason,failure_retriable\n FROM execution_queue\n WHERE id IN (${placeholders}) AND permission_decision='ALLOW'\n AND guardian_state='PASS' AND approval_state='ACTIVE'\n AND approval_revoked_at IS NULL AND approval_expires_at>? AND policy_version=?\n ORDER BY id`,\n args: [...ids, now, POLICY_VERSION],\n });\n const visibleRows: Record[] = [];\n for (const row of candidates.rows as Record[]) {\n if (await verifyQueueBinding(row)) visibleRows.push(row);\n }\n if (!visibleRows.length) {\n await appendDenied(\"AUDIT_ITEM_SCOPE_DENIED\", auth.serviceId);\n return json({ error: \"NO_AUTHORIZED_AUDIT_RECORDS\" }, 404);\n }\n\n const visibleIds = visibleRows.map((row) => Number(row.id));\n const visiblePlaceholders = visibleIds.map(() => \"?\").join(\",\");\n const claims = await sqlite.execute({\n sql: `SELECT claim_id,queue_item_id,claimed_by,passport_id,agent_id,orchestrator_id,runtime_domain,\n claimed_at,claim_expires_at,state,retriable,completed_at,failure_reason\n FROM execution_bridge_claims\n WHERE queue_item_id IN (${visiblePlaceholders})\n ORDER BY queue_item_id,claimed_at`,\n args: visibleIds,\n });\n const events = await sqlite.execute({\n sql: `SELECT event_id,event_type,timestamp,queue_item_id,claim_id,request_id,service_id,passport_id,\n agent_id,orchestrator_id,runtime_domain,authorization_decision_id,previous_state,new_state,result,\n reason_code,evidence_ref,evidence_sha256,event_hash\n FROM execution_bridge_audit\n WHERE queue_item_id IN (${visiblePlaceholders})\n ORDER BY id DESC LIMIT ?`,\n args: [...visibleIds, limit],\n });\n\n const auditEvent = await eventMaterial({\n eventType: \"QUEUE_AUDIT_READ\",\n timestamp: now,\n queueItemId: null,\n claimId: null,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: null,\n orchestratorId: null,\n runtimeDomain: null,\n authorizationDecisionId: auth.authorizationDecisionId,\n previousState: null,\n newState: null,\n result: \"PASS\",\n reasonCode: \"AUTHORIZED_SCOPED_AUDIT_READ\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.execute(auditInsert(auditEvent));\n return json({\n bridge: POLICY_VERSION,\n caller: auth.serviceId,\n passport_id: PASSPORT_ID,\n secret_exposed: false,\n authorized_queue_item_ids: visibleIds,\n queue_rows: visibleRows.map((row) => ({\n queue_item_id: Number(row.id),\n agent_id: String(row.agent_id),\n orchestrator_id: String(row.orchestrator_id),\n runtime_domain: String(row.runtime_domain),\n execution_state: String(row.execution_state),\n evidence_ref: row.evidence_ref,\n claim_id: row.claim_id,\n claimed_by: row.claimed_by,\n claimed_at: row.claimed_at,\n claim_expires_at: row.claim_expires_at,\n completion_request_id: row.completion_request_id,\n failure_reason: row.failure_reason,\n failure_retriable: row.failure_retriable,\n updated_at: row.updated_at,\n })),\n claims: claims.rows,\n events: events.rows,\n audit_read_event_id: auditEvent.eventId,\n audit_read_event_hash: auditEvent.eventHash,\n });\n}\n\nfunction legacyAuthorized(req: Request): boolean {\n const value = req.headers.get(\"authorization\");\n if (!value?.startsWith(\"Bearer \")) return false;\n return constantTimeEqual(value.slice(7), secret());\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/health\") {\n return json({\n service: \"IMPERIAL_EXECUTION_BRIDGE\",\n version: POLICY_VERSION,\n status: \"UP\",\n secret_configured: Boolean(Deno.env.get(\"EXECUTION_APPROVAL_TOKEN\")),\n secret_exposed: false,\n });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/readiness\") {\n try {\n await ensureSchema();\n return json({ service: \"IMPERIAL_EXECUTION_BRIDGE\", ready: true, policy: POLICY_VERSION });\n } catch {\n return json({ service: \"IMPERIAL_EXECUTION_BRIDGE\", ready: false, error: \"STORAGE_UNAVAILABLE\" }, 503);\n }\n }\n\n const legacy = new Set([\"/queue\", \"/ready\", \"/claim\", \"/complete\", \"/status\"]);\n if (legacy.has(url.pathname)) {\n if (!legacyAuthorized(req)) return json({ error: \"UNAUTHORIZED\" }, 401);\n return json({ error: \"LEGACY_ENDPOINT_DISABLED_USE_GOVERNED_CAPABILITY\" }, 410);\n }\n\n const body = await readBody(req);\n if (body === null) return json({ error: \"PAYLOAD_TOO_LARGE\" }, 413);\n\n try {\n if (req.method === \"GET\" && url.pathname === \"/execution-bridge/ready\") {\n return await handleReady(req, body);\n }\n if (req.method === \"GET\" && url.pathname === \"/execution-bridge/audit\") {\n return await handleAuditRead(req, body);\n }\n if (req.method === \"POST\" && url.pathname === \"/execution-bridge/claim\") {\n return await handleClaim(req, body);\n }\n if (req.method === \"POST\" && url.pathname === \"/execution-bridge/complete\") {\n return await handleFinalize(req, body, \"complete\");\n }\n if (req.method === \"POST\" && url.pathname === \"/execution-bridge/fail\") {\n return await handleFinalize(req, body, \"fail\");\n }\n if (req.method === \"POST\" && url.pathname === \"/execution-bridge/release\") {\n return await handleFinalize(req, body, \"release\");\n }\n return json({ error: \"NOT_FOUND\" }, 404);\n } catch (error) {\n const code = String(error).includes(\"SERVER_AUTH_UNAVAILABLE\")\n ? \"SERVER_AUTH_UNAVAILABLE\"\n : String(error).includes(\"JSON\")\n ? \"MALFORMED_JSON\"\n : \"INTERNAL_ERROR\";\n return json({ error: code }, code === \"SERVER_AUTH_UNAVAILABLE\" ? 503 : code === \"MALFORMED_JSON\" ? 400 : 500);\n }\n}\n","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst POLICY_VERSION = \"IMPERIAL-EXECUTION-BRIDGE-2.0.0\";\nconst MISSION_ID = \"IC-IMPERIAL-NCA-31DAY-COMMERCIAL-RUNTIME-001\";\nconst SERVICE_ID = \"VAL_TOWN_CODEX_CONNECTOR\";\nconst PASSPORT_ID = \"AI-PASSPORT-HANTER-EXECUTION-CONNECTOR-001\";\nconst SERVICE_EXPIRES_AT = \"2026-09-27T22:42:37.000Z\";\nconst APPROVAL_EXPIRES_AT = \"2026-09-27T22:42:37.000Z\";\nconst MAX_BODY_BYTES = 16 * 1024;\nconst MAX_TASK_CHARS = 4096;\nconst ALLOWED_PERMISSION_REASON = \"STANDING_DELEGATION_L1_OR_PREPARATION\";\nconst CAPABILITIES = new Set([\n \"QUEUE_READ\",\n \"QUEUE_AUDIT_READ\",\n \"QUEUE_CLAIM\",\n \"QUEUE_COMPLETE\",\n \"QUEUE_FAIL\",\n \"QUEUE_RELEASE\",\n]);\nconst DOMAINS = new Map([\n [\"Kids Media\", [\"ORCH-KIDS-MEDIA-001\", \"RD-KIDS-MEDIA-001\"]],\n [\"Dropshipping Commerce\", [\"ORCH-DROPSHIPPING-001\", \"RD-DROPSHIPPING-001\"]],\n [\"AI Automation\", [\"ORCH-AI-AUTOMATION-001\", \"RD-AI-AUTOMATION-001\"]],\n [\"B2B Revenue\", [\"ORCH-B2B-REVENUE-001\", \"RD-B2B-REVENUE-001\"]],\n [\"Creative & Digital\", [\"ORCH-CREATIVE-DIGITAL-001\", \"RD-CREATIVE-DIGITAL-001\"]],\n [\"Education\", [\"ORCH-EDUCATION-001\", \"RD-EDUCATION-001\"]],\n [\"Data & Market Intelligence\", [\"ORCH-DATA-MARKET-001\", \"RD-DATA-MARKET-001\"]],\n [\"SME Services\", [\"ORCH-SME-SERVICES-001\", \"RD-SME-SERVICES-001\"]],\n]);\nconst INJECTION_PATTERNS = [\n /ignore (?:all |any )?(?:previous|prior|system) instructions/i,\n /(?:this is |treat (?:this|the following) as )(?:a )?system message/i,\n /(?:the )?architect (?:has )?approved/i,\n /reveal (?:the )?(?:system prompt|secrets?|credentials?)/i,\n /(?:execute|run) (?:this |the )?(?:command|code|script)/i,\n /bypass (?:the )?(?:approval|guardian|security|policy)/i,\n];\n\ntype Capability = \"QUEUE_READ\" | \"QUEUE_CLAIM\" | \"QUEUE_COMPLETE\" | \"QUEUE_FAIL\" | \"QUEUE_RELEASE\" | \"QUEUE_AUDIT_READ\";\ntype AuditType =\n | \"QUEUE_READY_READ\"\n | \"QUEUE_AUDIT_READ\"\n | \"QUEUE_ITEM_CLAIMED\"\n | \"QUEUE_CLAIM_REJECTED\"\n | \"QUEUE_ITEM_COMPLETED\"\n | \"QUEUE_ITEM_FAILED\"\n | \"QUEUE_ITEM_RELEASED\"\n | \"QUEUE_CLAIM_EXPIRED\"\n | \"AUTHORIZATION_DENIED\";\n\nfunction secret(): string {\n const value = Deno.env.get(\"EXECUTION_APPROVAL_TOKEN\");\n if (!value) throw new Error(\"SERVER_AUTH_UNAVAILABLE\");\n return value;\n}\n\nfunction utf8(value: string): Uint8Array {\n return new TextEncoder().encode(value);\n}\n\nasync function sha256(value: string): Promise {\n const digest = await crypto.subtle.digest(\"SHA-256\", utf8(value));\n return \"sha256:\" + [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function hmac(value: string): Promise {\n const key = await crypto.subtle.importKey(\n \"raw\",\n utf8(secret()),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const signature = await crypto.subtle.sign(\"HMAC\", key, utf8(value));\n return [...new Uint8Array(signature)].map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction constantTimeEqual(left: string, right: string): boolean {\n if (left.length !== right.length || !/^[a-f0-9]+$/.test(left) || !/^[a-f0-9]+$/.test(right)) return false;\n let difference = 0;\n for (let index = 0; index < left.length; index += 1) {\n difference |= left.charCodeAt(index) ^ right.charCodeAt(index);\n }\n return difference === 0;\n}\n\nfunction json(data: unknown, status = 200): Response {\n return Response.json(data, {\n status,\n headers: {\n \"cache-control\": \"no-store\",\n \"x-content-type-options\": \"nosniff\",\n },\n });\n}\n\nfunction exactObject(value: unknown, required: string[], optional: string[] = []): Record | null {\n if (!value || typeof value !== \"object\" || Array.isArray(value)) return null;\n const object = value as Record;\n const allowed = new Set([...required, ...optional]);\n if (required.some((key) => !Object.hasOwn(object, key))) return null;\n if (Object.keys(object).some((key) => !allowed.has(key))) return null;\n return object;\n}\n\nfunction safeIdentifier(value: unknown, minimum = 8, maximum = 128): string | null {\n if (typeof value !== \"string\" || value.length < minimum || value.length > maximum) return null;\n return /^[A-Za-z0-9][A-Za-z0-9._:-]*$/.test(value) ? value : null;\n}\n\nfunction safeEvidenceRef(value: unknown): string | null {\n if (typeof value !== \"string\" || value.length > 2048) return null;\n return /^(?:urn:evidence:|https:\\/\\/)[^\\s]{8,2048}$/.test(value) ? value : null;\n}\n\nfunction safeHash(value: unknown): string | null {\n return typeof value === \"string\" && /^sha256:[a-f0-9]{64}$/.test(value) ? value : null;\n}\n\nfunction sanitizeTask(value: unknown) {\n const original = typeof value === \"string\" ? value : \"\";\n const normalized = original\n .replace(/[\\u0000-\\u0008\\u000b\\u000c\\u000e-\\u001f\\u007f]/g, \" \")\n .trim();\n const text = normalized.slice(0, MAX_TASK_CHARS);\n return {\n text,\n trust: \"UNTRUSTED_TASK_DATA\",\n authority: \"NONE\",\n prompt_injection_detected: INJECTION_PATTERNS.some((pattern) => pattern.test(text)),\n truncated: normalized.length > MAX_TASK_CHARS,\n };\n}\n\nasync function addColumn(name: string, definition: string) {\n try {\n await sqlite.execute(`ALTER TABLE execution_queue ADD COLUMN ${name} ${definition}`);\n } catch (error) {\n if (!String(error).toLowerCase().includes(\"duplicate column\")) throw error;\n }\n}\n\nasync function ensureSchema() {\n await addColumn(\"mission_id\", \"TEXT\");\n await addColumn(\"orchestrator_id\", \"TEXT\");\n await addColumn(\"runtime_domain\", \"TEXT\");\n await addColumn(\"guardian_state\", \"TEXT\");\n await addColumn(\"approval_state\", \"TEXT\");\n await addColumn(\"approval_decision_id\", \"TEXT\");\n await addColumn(\"approval_expires_at\", \"TEXT\");\n await addColumn(\"approval_revoked_at\", \"TEXT\");\n await addColumn(\"policy_version\", \"TEXT\");\n await addColumn(\"retriable\", \"INTEGER NOT NULL DEFAULT 1\");\n await addColumn(\"authorization_binding\", \"TEXT\");\n await addColumn(\"claim_id\", \"TEXT\");\n await addColumn(\"claimed_by\", \"TEXT\");\n await addColumn(\"claimed_at\", \"TEXT\");\n await addColumn(\"claim_expires_at\", \"TEXT\");\n await addColumn(\"authorization_decision_id\", \"TEXT\");\n await addColumn(\"failure_reason\", \"TEXT\");\n await addColumn(\"failure_retriable\", \"INTEGER\");\n await addColumn(\"completion_request_id\", \"TEXT\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_bridge_claims (\n claim_id TEXT PRIMARY KEY,\n queue_item_id INTEGER NOT NULL,\n claimed_by TEXT NOT NULL,\n passport_id TEXT NOT NULL,\n agent_id TEXT NOT NULL,\n orchestrator_id TEXT NOT NULL,\n runtime_domain TEXT NOT NULL,\n claimed_at TEXT NOT NULL,\n claim_expires_at TEXT NOT NULL,\n authorization_decision_id TEXT NOT NULL,\n state TEXT NOT NULL,\n retriable INTEGER NOT NULL,\n completed_at TEXT,\n failure_reason TEXT\n )`);\n await sqlite.execute(`CREATE UNIQUE INDEX IF NOT EXISTS execution_bridge_one_active_claim\n ON execution_bridge_claims(queue_item_id) WHERE state='ACTIVE'`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_bridge_nonces (\n nonce TEXT PRIMARY KEY,\n service_id TEXT NOT NULL,\n capability TEXT NOT NULL,\n used_at TEXT NOT NULL,\n expires_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_bridge_requests (\n request_id TEXT PRIMARY KEY,\n operation TEXT NOT NULL,\n claim_id TEXT NOT NULL,\n service_id TEXT NOT NULL,\n created_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_bridge_audit (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_id TEXT NOT NULL UNIQUE,\n event_type TEXT NOT NULL,\n timestamp TEXT NOT NULL,\n queue_item_id INTEGER,\n claim_id TEXT,\n request_id TEXT,\n service_id TEXT NOT NULL,\n passport_id TEXT NOT NULL,\n agent_id TEXT,\n orchestrator_id TEXT,\n runtime_domain TEXT,\n authorization_decision_id TEXT NOT NULL,\n previous_state TEXT,\n new_state TEXT,\n result TEXT NOT NULL,\n reason_code TEXT NOT NULL,\n evidence_ref TEXT,\n evidence_sha256 TEXT,\n event_hash TEXT NOT NULL,\n event_signature TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TRIGGER IF NOT EXISTS execution_bridge_audit_no_update\n BEFORE UPDATE ON execution_bridge_audit BEGIN SELECT RAISE(ABORT, 'AUDIT_IMMUTABLE'); END`);\n await sqlite.execute(`CREATE TRIGGER IF NOT EXISTS execution_bridge_audit_no_delete\n BEFORE DELETE ON execution_bridge_audit BEGIN SELECT RAISE(ABORT, 'AUDIT_IMMUTABLE'); END`);\n await bindUnboundQueueItems();\n}\n\nfunction domainBinding(domain: string): [string, string] | null {\n return (DOMAINS.get(domain) as [string, string] | undefined) ?? null;\n}\n\nasync function queueBinding(row: Record, orchestratorId: string, runtimeDomain: string): Promise {\n return await hmac(JSON.stringify([\n \"QUEUE_AUTHORIZATION_BINDING_V2\",\n row.id,\n row.agent_id,\n row.action_stage,\n row.next_action,\n row.connector,\n row.created_at,\n row.permission_decision,\n row.permission_reason,\n MISSION_ID,\n orchestratorId,\n runtimeDomain,\n \"PASS\",\n \"ACTIVE\",\n `PM-${row.id}-${row.created_at}`,\n APPROVAL_EXPIRES_AT,\n POLICY_VERSION,\n ]));\n}\n\nasync function bindUnboundQueueItems() {\n const rows = await sqlite.execute(`SELECT q.id,q.agent_id,q.action_stage,q.next_action,q.connector,q.created_at,\n q.permission_decision,q.permission_reason,a.domain\n FROM execution_queue q JOIN agents a ON a.agent_id=q.agent_id\n WHERE q.authorization_binding IS NULL`);\n for (const row of rows.rows as Record[]) {\n if (row.permission_decision !== \"ALLOW\" || row.permission_reason !== ALLOWED_PERMISSION_REASON) continue;\n const binding = domainBinding(String(row.domain));\n if (!binding) continue;\n const [orchestratorId, runtimeDomain] = binding;\n const approvalDecisionId = `PM-${row.id}-${row.created_at}`;\n const authorizationBinding = await queueBinding(row, orchestratorId, runtimeDomain);\n await sqlite.execute({\n sql: `UPDATE execution_queue SET mission_id=?,orchestrator_id=?,runtime_domain=?,guardian_state='PASS',\n approval_state='ACTIVE',approval_decision_id=?,approval_expires_at=?,approval_revoked_at=NULL,\n policy_version=?,retriable=1,authorization_binding=?\n WHERE id=? AND authorization_binding IS NULL AND permission_decision='ALLOW' AND permission_reason=?`,\n args: [\n MISSION_ID,\n orchestratorId,\n runtimeDomain,\n approvalDecisionId,\n APPROVAL_EXPIRES_AT,\n POLICY_VERSION,\n authorizationBinding,\n row.id,\n ALLOWED_PERMISSION_REASON,\n ],\n });\n }\n}\n\nasync function verifyQueueBinding(row: Record): Promise {\n const expected = await queueBinding(row, String(row.orchestrator_id), String(row.runtime_domain));\n return typeof row.authorization_binding === \"string\" && constantTimeEqual(expected, row.authorization_binding);\n}\n\nasync function eventMaterial(input: {\n eventType: AuditType;\n timestamp: string;\n queueItemId: number | null;\n claimId: string | null;\n requestId: string | null;\n serviceId: string;\n agentId: string | null;\n orchestratorId: string | null;\n runtimeDomain: string | null;\n authorizationDecisionId: string;\n previousState: string | null;\n newState: string | null;\n result: \"PASS\" | \"DENY\";\n reasonCode: string;\n evidenceRef: string | null;\n evidenceSha256: string | null;\n}) {\n const eventId = crypto.randomUUID();\n const ordered = [\n eventId,\n input.eventType,\n input.timestamp,\n input.queueItemId,\n input.claimId,\n input.requestId,\n input.serviceId,\n PASSPORT_ID,\n input.agentId,\n input.orchestratorId,\n input.runtimeDomain,\n input.authorizationDecisionId,\n input.previousState,\n input.newState,\n input.result,\n input.reasonCode,\n input.evidenceRef,\n input.evidenceSha256,\n ];\n const eventHash = await sha256(JSON.stringify(ordered));\n const eventSignature = await hmac(eventHash);\n return { ...input, eventId, eventHash, eventSignature };\n}\n\nfunction auditInsert(event: Awaited>) {\n return {\n sql: `INSERT INTO execution_bridge_audit(\n event_id,event_type,timestamp,queue_item_id,claim_id,request_id,service_id,passport_id,\n agent_id,orchestrator_id,runtime_domain,authorization_decision_id,previous_state,new_state,\n result,reason_code,evidence_ref,evidence_sha256,event_hash,event_signature\n ) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)`,\n args: [\n event.eventId,\n event.eventType,\n event.timestamp,\n event.queueItemId,\n event.claimId,\n event.requestId,\n event.serviceId,\n PASSPORT_ID,\n event.agentId,\n event.orchestratorId,\n event.runtimeDomain,\n event.authorizationDecisionId,\n event.previousState,\n event.newState,\n event.result,\n event.reasonCode,\n event.evidenceRef,\n event.evidenceSha256,\n event.eventHash,\n event.eventSignature,\n ],\n };\n}\n\nfunction conditionalClaimAuditInsert(\n event: Awaited>,\n claimId: string,\n) {\n const base = auditInsert(event);\n const valuesIndex = base.sql.indexOf(\" VALUES(\");\n const header = base.sql.slice(0, valuesIndex);\n return {\n sql: `${header} SELECT ?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?\n WHERE EXISTS(SELECT 1 FROM execution_bridge_claims WHERE claim_id=? AND state='ACTIVE')`,\n args: [...base.args, claimId],\n };\n}\n\nfunction conditionalFinalizeAuditInsert(\n event: Awaited>,\n requestId: string,\n claimId: string,\n claimState: string,\n queueState: string,\n) {\n const base = auditInsert(event);\n const valuesIndex = base.sql.indexOf(\" VALUES(\");\n const header = base.sql.slice(0, valuesIndex);\n return {\n sql: `${header} SELECT ?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?\n WHERE EXISTS(\n SELECT 1 FROM execution_bridge_requests r\n JOIN execution_bridge_claims c ON c.claim_id=r.claim_id\n JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE r.request_id=? AND r.claim_id=? AND c.state=?\n AND q.execution_state=? AND q.completion_request_id=?\n )`,\n args: [...base.args, requestId, claimId, claimState, queueState, requestId],\n };\n}\n\nasync function appendDenied(reasonCode: string, serviceId = \"UNVERIFIED_CALLER\") {\n try {\n await ensureSchema();\n const timestamp = new Date().toISOString();\n const event = await eventMaterial({\n eventType: \"AUTHORIZATION_DENIED\",\n timestamp,\n queueItemId: null,\n claimId: null,\n requestId: null,\n serviceId: serviceId === SERVICE_ID ? serviceId : \"UNVERIFIED_CALLER\",\n agentId: null,\n orchestratorId: null,\n runtimeDomain: null,\n authorizationDecisionId: await sha256(JSON.stringify([\"DENY\", timestamp, reasonCode])),\n previousState: null,\n newState: null,\n result: \"DENY\",\n reasonCode,\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.execute(auditInsert(event));\n } catch {\n // Authorization response remains fail-closed even if audit storage is unavailable.\n }\n}\n\nasync function authenticate(req: Request, body: string, required: Capability) {\n const serviceId = req.headers.get(\"x-imperial-service-id\") ?? \"\";\n const capability = req.headers.get(\"x-imperial-capability\") ?? \"\";\n const timestamp = req.headers.get(\"x-imperial-timestamp\") ?? \"\";\n const nonce = req.headers.get(\"x-imperial-nonce\") ?? \"\";\n const signature = req.headers.get(\"x-imperial-signature\") ?? \"\";\n\n if (\n serviceId !== SERVICE_ID ||\n capability !== required ||\n !CAPABILITIES.has(capability) ||\n !/^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/.test(timestamp) ||\n !/^[A-Za-z0-9_-]{16,128}$/.test(nonce) ||\n !/^[a-f0-9]{64}$/.test(signature)\n ) {\n await appendDenied(\"SIGNED_CAPABILITY_REQUIRED\", serviceId);\n return { ok: false as const, status: 401, reason: \"UNAUTHORIZED\" };\n }\n const age = Math.abs(Date.now() - Date.parse(timestamp));\n if (!Number.isFinite(age) || age > 60_000 || Date.parse(SERVICE_EXPIRES_AT) <= Date.now()) {\n await appendDenied(\"SIGNED_CAPABILITY_EXPIRED\", serviceId);\n return { ok: false as const, status: 401, reason: \"UNAUTHORIZED\" };\n }\n\n const url = new URL(req.url);\n const bodyHash = await sha256(body);\n const canonical = [\n req.method.toUpperCase(),\n url.pathname + url.search,\n timestamp,\n nonce,\n serviceId,\n capability,\n bodyHash,\n ].join(\"\\n\");\n const expected = await hmac(canonical);\n if (!constantTimeEqual(expected, signature)) {\n await appendDenied(\"SIGNATURE_INVALID\", serviceId);\n return { ok: false as const, status: 401, reason: \"UNAUTHORIZED\" };\n }\n\n await ensureSchema();\n await sqlite.execute({\n sql: \"DELETE FROM execution_bridge_nonces WHERE expires_at < ?\",\n args: [new Date().toISOString()],\n });\n const inserted = await sqlite.execute({\n sql: `INSERT OR IGNORE INTO execution_bridge_nonces(nonce,service_id,capability,used_at,expires_at)\n VALUES(?,?,?,?,?)`,\n args: [\n nonce,\n serviceId,\n capability,\n timestamp,\n new Date(Date.parse(timestamp) + 5 * 60_000).toISOString(),\n ],\n });\n if (inserted.rowsAffected !== 1) {\n await appendDenied(\"REPLAY_DENIED\", serviceId);\n return { ok: false as const, status: 409, reason: \"REPLAY_DENIED\" };\n }\n\n return {\n ok: true as const,\n serviceId,\n capability: capability as Capability,\n authorizationDecisionId: await sha256(JSON.stringify([\n POLICY_VERSION,\n PASSPORT_ID,\n serviceId,\n capability,\n timestamp,\n nonce,\n bodyHash,\n ])),\n };\n}\n\nasync function expireClaims() {\n const now = new Date().toISOString();\n const expired = await sqlite.execute({\n sql: `SELECT c.claim_id,c.queue_item_id,c.claimed_by,c.agent_id,c.orchestrator_id,\n c.runtime_domain,c.authorization_decision_id,c.retriable,q.execution_state\n FROM execution_bridge_claims c JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE c.state='ACTIVE' AND c.claim_expires_at<=?`,\n args: [now],\n });\n for (const row of expired.rows as Record[]) {\n const newState = Number(row.retriable) === 1 ? \"READY\" : \"FAILED\";\n const event = await eventMaterial({\n eventType: \"QUEUE_CLAIM_EXPIRED\",\n timestamp: now,\n queueItemId: Number(row.queue_item_id),\n claimId: String(row.claim_id),\n requestId: null,\n serviceId: String(row.claimed_by),\n agentId: String(row.agent_id),\n orchestratorId: String(row.orchestrator_id),\n runtimeDomain: String(row.runtime_domain),\n authorizationDecisionId: String(row.authorization_decision_id),\n previousState: \"CLAIMED\",\n newState,\n result: \"PASS\",\n reasonCode: \"CLAIM_LEASE_EXPIRED\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.batch([\n {\n sql: `UPDATE execution_bridge_claims SET state='EXPIRED'\n WHERE claim_id=? AND state='ACTIVE' AND claim_expires_at<=?`,\n args: [row.claim_id, now],\n },\n {\n sql: `UPDATE execution_queue SET execution_state=?,claim_id=NULL,claimed_by=NULL,\n claimed_at=NULL,claim_expires_at=NULL,updated_at=?\n WHERE id=? AND execution_state='CLAIMED' AND claim_id=?`,\n args: [newState, now, row.queue_item_id, row.claim_id],\n },\n auditInsert(event),\n ]);\n }\n return expired.rows.length;\n}\n\nfunction rowEligible(row: Record, now: string): boolean {\n return row.execution_state === \"READY\" &&\n row.permission_decision === \"ALLOW\" &&\n row.permission_reason === ALLOWED_PERMISSION_REASON &&\n row.guardian_state === \"PASS\" &&\n row.approval_state === \"ACTIVE\" &&\n row.approval_revoked_at === null &&\n typeof row.approval_expires_at === \"string\" &&\n Date.parse(row.approval_expires_at) > Date.parse(now) &&\n row.policy_version === POLICY_VERSION &&\n typeof row.runtime_domain === \"string\" &&\n [...DOMAINS.values()].some((entry) => entry[1] === row.runtime_domain) &&\n !sanitizeTask(row.next_action).prompt_injection_detected;\n}\n\nasync function readyItems(limit: number) {\n const now = new Date().toISOString();\n const result = await sqlite.execute({\n sql: `SELECT q.id,q.agent_id,q.action_stage,q.next_action,q.connector,q.execution_state,q.created_at,\n q.permission_decision,q.permission_reason,q.mission_id,q.orchestrator_id,q.runtime_domain,\n q.guardian_state,q.approval_state,q.approval_decision_id,q.approval_expires_at,\n q.approval_revoked_at,q.policy_version,q.retriable,q.authorization_binding\n FROM execution_queue q\n WHERE q.execution_state='READY' AND q.permission_decision='ALLOW'\n AND q.approval_state='ACTIVE' AND q.approval_revoked_at IS NULL\n AND q.approval_expires_at>? AND q.policy_version=?\n ORDER BY q.id LIMIT ?`,\n args: [now, POLICY_VERSION, Math.min(100, Math.max(1, limit * 3))],\n });\n const output = [];\n for (const row of result.rows as Record[]) {\n if (!rowEligible(row, now) || !(await verifyQueueBinding(row))) continue;\n output.push({\n queue_item_id: Number(row.id),\n mission_id: String(row.mission_id),\n agent_id: String(row.agent_id),\n orchestrator_id: String(row.orchestrator_id),\n runtime_domain: String(row.runtime_domain),\n task_type: String(row.connector),\n sanitized_task_payload: sanitizeTask(row.next_action),\n approval_decision_id: String(row.approval_decision_id),\n approval_state: String(row.approval_state),\n created_at: String(row.created_at),\n expires_at: String(row.approval_expires_at),\n policy_version: String(row.policy_version),\n evidence_refs: [],\n });\n if (output.length >= limit) break;\n }\n return output;\n}\n\nasync function readBody(req: Request): Promise {\n const length = Number(req.headers.get(\"content-length\") ?? \"0\");\n if (Number.isFinite(length) && length > MAX_BODY_BYTES) return null;\n const text = await req.text();\n return utf8(text).byteLength <= MAX_BODY_BYTES ? text : null;\n}\n\nasync function handleReady(req: Request, body: string) {\n const auth = await authenticate(req, body, \"QUEUE_READ\");\n if (!auth.ok) return json({ error: auth.reason }, auth.status);\n await expireClaims();\n const url = new URL(req.url);\n const requested = Number(url.searchParams.get(\"limit\") ?? \"20\");\n const limit = Number.isInteger(requested) ? Math.min(100, Math.max(1, requested)) : 20;\n const items = await readyItems(limit);\n const timestamp = new Date().toISOString();\n const event = await eventMaterial({\n eventType: \"QUEUE_READY_READ\",\n timestamp,\n queueItemId: null,\n claimId: null,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: null,\n orchestratorId: null,\n runtimeDomain: null,\n authorizationDecisionId: auth.authorizationDecisionId,\n previousState: null,\n newState: null,\n result: \"PASS\",\n reasonCode: \"AUTHORIZED_FILTERED_READ\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.execute(auditInsert(event));\n return json({\n bridge: POLICY_VERSION,\n caller: auth.serviceId,\n passport_id: PASSPORT_ID,\n secret_exposed: false,\n count: items.length,\n items,\n });\n}\n\nasync function getQueueRow(id: number) {\n const result = await sqlite.execute({\n sql: `SELECT q.id,q.agent_id,q.action_stage,q.next_action,q.connector,q.execution_state,q.created_at,\n q.permission_decision,q.permission_reason,q.mission_id,q.orchestrator_id,q.runtime_domain,\n q.guardian_state,q.approval_state,q.approval_decision_id,q.approval_expires_at,\n q.approval_revoked_at,q.policy_version,q.retriable,q.authorization_binding,q.claim_id\n FROM execution_queue q WHERE q.id=?`,\n args: [id],\n });\n return (result.rows[0] as Record | undefined) ?? null;\n}\n\nasync function handleClaim(req: Request, body: string) {\n const auth = await authenticate(req, body, \"QUEUE_CLAIM\");\n if (!auth.ok) return json({ error: auth.reason }, auth.status);\n await expireClaims();\n const parsed = JSON.parse(body || \"{}\");\n const input = exactObject(parsed, [\"queue_item_id\"], [\"lease_seconds\"]);\n const queueItemId = Number(input?.queue_item_id);\n const leaseSeconds = Number(input?.lease_seconds ?? 300);\n if (!input || !Number.isInteger(queueItemId) || !Number.isInteger(leaseSeconds) || leaseSeconds < 30 || leaseSeconds > 900) {\n return json({ error: \"MALFORMED_CLAIM_REQUEST\" }, 400);\n }\n\n const row = await getQueueRow(queueItemId);\n const now = new Date().toISOString();\n if (!row || !rowEligible(row, now) || !(await verifyQueueBinding(row))) {\n const event = await eventMaterial({\n eventType: \"QUEUE_CLAIM_REJECTED\",\n timestamp: now,\n queueItemId,\n claimId: null,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: row ? String(row.agent_id) : null,\n orchestratorId: row ? String(row.orchestrator_id) : null,\n runtimeDomain: row ? String(row.runtime_domain) : null,\n authorizationDecisionId: auth.authorizationDecisionId,\n previousState: row ? String(row.execution_state) : null,\n newState: row ? String(row.execution_state) : null,\n result: \"DENY\",\n reasonCode: \"ITEM_NOT_EXECUTABLE\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.execute(auditInsert(event));\n return json({ claimed: false, error: \"ITEM_NOT_EXECUTABLE\" }, 409);\n }\n\n const claimId = crypto.randomUUID();\n const expiresAt = new Date(Date.now() + leaseSeconds * 1000).toISOString();\n const authorizationDecisionId = await sha256(JSON.stringify([\n auth.authorizationDecisionId,\n queueItemId,\n row.agent_id,\n row.runtime_domain,\n row.approval_decision_id,\n claimId,\n now,\n expiresAt,\n ]));\n const event = await eventMaterial({\n eventType: \"QUEUE_ITEM_CLAIMED\",\n timestamp: now,\n queueItemId,\n claimId,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: String(row.agent_id),\n orchestratorId: String(row.orchestrator_id),\n runtimeDomain: String(row.runtime_domain),\n authorizationDecisionId,\n previousState: \"READY\",\n newState: \"CLAIMED\",\n result: \"PASS\",\n reasonCode: \"ATOMIC_COMPARE_AND_SET\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n\n try {\n await sqlite.batch([\n {\n sql: `INSERT INTO execution_bridge_claims(\n claim_id,queue_item_id,claimed_by,passport_id,agent_id,orchestrator_id,runtime_domain,\n claimed_at,claim_expires_at,authorization_decision_id,state,retriable\n )\n SELECT ?,q.id,?,?,?,?,?,?,?,?,?,q.retriable\n FROM execution_queue q\n WHERE q.id=? AND q.execution_state='READY' AND q.permission_decision='ALLOW'\n AND q.guardian_state='PASS' AND q.approval_state='ACTIVE'\n AND q.approval_revoked_at IS NULL AND q.approval_expires_at>?\n AND q.policy_version=? AND q.authorization_binding=?`,\n args: [\n claimId,\n auth.serviceId,\n PASSPORT_ID,\n row.agent_id,\n row.orchestrator_id,\n row.runtime_domain,\n now,\n expiresAt,\n authorizationDecisionId,\n \"ACTIVE\",\n queueItemId,\n now,\n POLICY_VERSION,\n row.authorization_binding,\n ],\n },\n {\n sql: `UPDATE execution_queue SET execution_state='CLAIMED',claim_id=?,claimed_by=?,\n claimed_at=?,claim_expires_at=?,authorization_decision_id=?,updated_at=?\n WHERE id=? AND execution_state='READY'\n AND EXISTS(SELECT 1 FROM execution_bridge_claims c WHERE c.claim_id=? AND c.state='ACTIVE')`,\n args: [claimId, auth.serviceId, now, expiresAt, authorizationDecisionId, now, queueItemId, claimId],\n },\n conditionalClaimAuditInsert(event, claimId),\n ]);\n } catch {\n const rejected = await eventMaterial({\n eventType: \"QUEUE_CLAIM_REJECTED\",\n timestamp: new Date().toISOString(),\n queueItemId,\n claimId: null,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: String(row.agent_id),\n orchestratorId: String(row.orchestrator_id),\n runtimeDomain: String(row.runtime_domain),\n authorizationDecisionId,\n previousState: \"READY\",\n newState: \"READY\",\n result: \"DENY\",\n reasonCode: \"CONCURRENT_OR_DUPLICATE_CLAIM\",\n evidenceRef: null,\n evidenceSha256: null,\n });\n await sqlite.execute(auditInsert(rejected));\n return json({ claimed: false, error: \"ALREADY_CLAIMED\" }, 409);\n }\n\n const claimed = await sqlite.execute({\n sql: \"SELECT claim_id FROM execution_bridge_claims WHERE claim_id=? AND state='ACTIVE'\",\n args: [claimId],\n });\n if (!claimed.rows.length) return json({ claimed: false, error: \"ALREADY_CLAIMED\" }, 409);\n\n return json({\n claimed: true,\n secret_exposed: false,\n claim: {\n claim_id: claimId,\n queue_item_id: queueItemId,\n claimed_by: auth.serviceId,\n agent_id: String(row.agent_id),\n orchestrator_id: String(row.orchestrator_id),\n runtime_domain: String(row.runtime_domain),\n claimed_at: now,\n claim_expires_at: expiresAt,\n authorization_decision_id: authorizationDecisionId,\n task_type: String(row.connector),\n sanitized_task_payload: sanitizeTask(row.next_action),\n },\n }, 201);\n}\n\nasync function getClaim(claimId: string) {\n const result = await sqlite.execute({\n sql: `SELECT c.*,q.execution_state,q.permission_decision,q.permission_reason,q.guardian_state,\n q.approval_state,q.approval_expires_at,q.approval_revoked_at,q.policy_version,\n q.authorization_binding,q.next_action\n FROM execution_bridge_claims c JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE c.claim_id=?`,\n args: [claimId],\n });\n return (result.rows[0] as Record | undefined) ?? null;\n}\n\nfunction activeClaim(row: Record, serviceId: string, now: string): boolean {\n return row.state === \"ACTIVE\" &&\n row.execution_state === \"CLAIMED\" &&\n row.claimed_by === serviceId &&\n row.permission_decision === \"ALLOW\" &&\n row.permission_reason === ALLOWED_PERMISSION_REASON &&\n row.guardian_state === \"PASS\" &&\n row.approval_state === \"ACTIVE\" &&\n row.approval_revoked_at === null &&\n typeof row.approval_expires_at === \"string\" &&\n Date.parse(row.approval_expires_at) > Date.parse(now) &&\n typeof row.claim_expires_at === \"string\" &&\n Date.parse(row.claim_expires_at) > Date.parse(now) &&\n row.policy_version === POLICY_VERSION;\n}\n\nasync function handleFinalize(req: Request, body: string, operation: \"complete\" | \"fail\" | \"release\") {\n const capability = ({\n complete: \"QUEUE_COMPLETE\",\n fail: \"QUEUE_FAIL\",\n release: \"QUEUE_RELEASE\",\n } as const)[operation];\n const auth = await authenticate(req, body, capability);\n if (!auth.ok) return json({ error: auth.reason }, auth.status);\n\n const parsed = JSON.parse(body || \"{}\");\n const required = operation === \"release\"\n ? [\"claim_id\", \"request_id\", \"reason\"]\n : operation === \"fail\"\n ? [\"claim_id\", \"request_id\", \"evidence_ref\", \"evidence_sha256\", \"failure_reason\", \"retriable\"]\n : [\"claim_id\", \"request_id\", \"evidence_ref\", \"evidence_sha256\"];\n const input = exactObject(parsed, required);\n if (!input) return json({ error: \"MALFORMED_FINALIZE_REQUEST\" }, 400);\n const claimId = safeIdentifier(input.claim_id);\n const requestId = safeIdentifier(input.request_id);\n const evidenceRef = operation === \"release\" ? null : safeEvidenceRef(input.evidence_ref);\n const evidenceSha256 = operation === \"release\" ? null : safeHash(input.evidence_sha256);\n const failureReason = operation === \"fail\"\n ? (typeof input.failure_reason === \"string\" && /^[A-Z0-9_:-]{3,128}$/.test(input.failure_reason) ? input.failure_reason : null)\n : null;\n const releaseReason = operation === \"release\"\n ? (typeof input.reason === \"string\" && /^[A-Z0-9_:-]{3,128}$/.test(input.reason) ? input.reason : null)\n : null;\n const retriable = operation === \"fail\" && typeof input.retriable === \"boolean\" ? input.retriable : false;\n if (!claimId || !requestId || (operation !== \"release\" && (!evidenceRef || !evidenceSha256)) ||\n (operation === \"fail\" && !failureReason) || (operation === \"release\" && !releaseReason)) {\n return json({ error: \"FINALIZE_FIELDS_INVALID\" }, 400);\n }\n\n await expireClaims();\n const claim = await getClaim(claimId);\n const now = new Date().toISOString();\n if (!claim || !activeClaim(claim, auth.serviceId, now) ||\n (operation === \"release\" && Number(claim.retriable) !== 1)) {\n return json({ updated: false, error: \"ACTIVE_AUTHORIZED_CLAIM_REQUIRED\" }, 409);\n }\n\n const queueItemId = Number(claim.queue_item_id);\n const newState = operation === \"complete\" ? \"COMPLETED\" : operation === \"fail\" ? \"FAILED\" : \"READY\";\n const claimState = operation === \"complete\" ? \"COMPLETED\" : operation === \"fail\" ? \"FAILED\" : \"RELEASED\";\n const eventType: AuditType = operation === \"complete\"\n ? \"QUEUE_ITEM_COMPLETED\"\n : operation === \"fail\"\n ? \"QUEUE_ITEM_FAILED\"\n : \"QUEUE_ITEM_RELEASED\";\n const reasonCode = operation === \"complete\" ? \"COMPLETION_EVIDENCE_PERSISTED\" : operation === \"fail\"\n ? failureReason!\n : releaseReason!;\n const event = await eventMaterial({\n eventType,\n timestamp: now,\n queueItemId,\n claimId,\n requestId,\n serviceId: auth.serviceId,\n agentId: String(claim.agent_id),\n orchestratorId: String(claim.orchestrator_id),\n runtimeDomain: String(claim.runtime_domain),\n authorizationDecisionId: String(claim.authorization_decision_id),\n previousState: \"CLAIMED\",\n newState,\n result: \"PASS\",\n reasonCode,\n evidenceRef,\n evidenceSha256,\n });\n\n const batch = [\n {\n sql: `INSERT INTO execution_bridge_requests(request_id,operation,claim_id,service_id,created_at)\n SELECT ?,?,?,?,? WHERE EXISTS(\n SELECT 1 FROM execution_bridge_claims c\n JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE c.claim_id=? AND c.state='ACTIVE' AND c.claimed_by=?\n AND c.claim_expires_at>? AND q.execution_state='CLAIMED' AND q.claim_id=?\n )`,\n args: [\n requestId,\n operation.toUpperCase(),\n claimId,\n auth.serviceId,\n now,\n claimId,\n auth.serviceId,\n now,\n claimId,\n ],\n },\n {\n sql: `UPDATE execution_bridge_claims SET state=?,completed_at=?,failure_reason=?\n WHERE claim_id=? AND state='ACTIVE' AND claimed_by=? AND claim_expires_at>?\n AND EXISTS(SELECT 1 FROM execution_bridge_requests WHERE request_id=? AND claim_id=?)`,\n args: [claimState, now, failureReason, claimId, auth.serviceId, now, requestId, claimId],\n },\n {\n sql: `UPDATE execution_queue SET execution_state=?,evidence_ref=?,updated_at=?,\n failure_reason=?,failure_retriable=?,completion_request_id=?,\n claim_id=CASE WHEN ?='READY' THEN NULL ELSE claim_id END,\n claimed_by=CASE WHEN ?='READY' THEN NULL ELSE claimed_by END,\n claimed_at=CASE WHEN ?='READY' THEN NULL ELSE claimed_at END,\n claim_expires_at=CASE WHEN ?='READY' THEN NULL ELSE claim_expires_at END\n WHERE id=? AND execution_state='CLAIMED' AND claim_id=?\n AND EXISTS(SELECT 1 FROM execution_bridge_requests WHERE request_id=?)`,\n args: [\n newState,\n evidenceRef,\n now,\n failureReason,\n operation === \"fail\" ? (retriable ? 1 : 0) : null,\n requestId,\n newState,\n newState,\n newState,\n newState,\n queueItemId,\n claimId,\n requestId,\n ],\n },\n ];\n if (operation === \"complete\") {\n batch.push({\n sql: `UPDATE agent_progress SET\n stage_index=CASE WHEN stage_index<7 THEN stage_index+1 ELSE 0 END,\n stage_state='WAITING_FOR_EVIDENCE',\n evidence_count=evidence_count+1,\n last_evidence_ref=?,\n last_advanced_at=?\n WHERE agent_id=? AND EXISTS(\n SELECT 1 FROM execution_queue q\n WHERE q.id=? AND q.execution_state='COMPLETED' AND q.completion_request_id=?\n )`,\n args: [evidenceRef, now, claim.agent_id, queueItemId, requestId],\n });\n }\n batch.push(conditionalFinalizeAuditInsert(event, requestId, claimId, claimState, newState));\n\n try {\n await sqlite.batch(batch);\n } catch {\n return json({ updated: false, error: \"REPLAY_OR_STATE_CONFLICT\" }, 409);\n }\n\n const finalized = await sqlite.execute({\n sql: `SELECT r.request_id FROM execution_bridge_requests r\n JOIN execution_bridge_claims c ON c.claim_id=r.claim_id\n JOIN execution_queue q ON q.id=c.queue_item_id\n WHERE r.request_id=? AND r.claim_id=? AND c.state=?\n AND q.execution_state=? AND q.completion_request_id=?`,\n args: [requestId, claimId, claimState, newState, requestId],\n });\n if (!finalized.rows.length) {\n return json({ updated: false, error: \"REPLAY_OR_STATE_CONFLICT\" }, 409);\n }\n\n return json({\n updated: true,\n operation: operation.toUpperCase(),\n queue_item_id: queueItemId,\n claim_id: claimId,\n state: newState,\n agent_progress_updated: operation === \"complete\",\n secret_exposed: false,\n audit_event_id: event.eventId,\n audit_event_hash: event.eventHash,\n });\n}\n\nasync function handleAuditRead(req: Request, body: string) {\n const auth = await authenticate(req, body, \"QUEUE_AUDIT_READ\");\n if (!auth.ok) return json({ error: auth.reason }, auth.status);\n await expireClaims();\n const url = new URL(req.url);\n const rawIds = url.searchParams.get(\"queue_item_ids\") ?? \"\";\n const rawParts = rawIds.split(\",\");\n const ids = [...new Set(rawParts.map((value) => Number(value.trim())).filter((value) => Number.isInteger(value) && value > 0))];\n const requestedLimit = Number(url.searchParams.get(\"limit\") ?? \"100\");\n const limit = Number.isInteger(requestedLimit) ? Math.min(200, Math.max(1, requestedLimit)) : 100;\n if (\n !ids.length ||\n ids.length > 20 ||\n ids.join(\",\") !== rawParts.map((value) => String(Number(value.trim()))).join(\",\")\n ) {\n return json({ error: \"VALID_QUEUE_ITEM_IDS_REQUIRED\" }, 400);\n }\n\n const placeholders = ids.map(() => \"?\").join(\",\");\n const now = new Date().toISOString();\n const candidates = await sqlite.execute({\n sql: `SELECT id,agent_id,action_stage,next_action,connector,execution_state,created_at,updated_at,\n evidence_ref,permission_decision,permission_reason,mission_id,orchestrator_id,runtime_domain,\n guardian_state,approval_state,approval_decision_id,approval_expires_at,approval_revoked_at,\n policy_version,retriable,authorization_binding,claim_id,claimed_by,claimed_at,claim_expires_at,\n completion_request_id,failure_reason,failure_retriable\n FROM execution_queue\n WHERE id IN (${placeholders}) AND permission_decision='ALLOW'\n AND guardian_state='PASS' AND approval_state='ACTIVE'\n AND approval_revoked_at IS NULL AND approval_expires_at>? AND policy_version=?\n ORDER BY id`,\n args: [...ids, now, POLICY_VERSION],\n });\n const visibleRows: Record[] = [];\n for (const row of candidates.rows as Record[]) {\n if (await verifyQueueBinding(row)) visibleRows.push(row);\n }\n if (!visibleRows.length) {\n await appendDenied(\"AUDIT_ITEM_SCOPE_DENIED\", auth.serviceId);\n return json({ error: \"NO_AUTHORIZED_AUDIT_RECORDS\" }, 404);\n }\n\n const visibleIds = visibleRows.map((row) => Number(row.id));\n const visiblePlaceholders = visibleIds.map(() => \"?\").join(\",\");\n const claims = await sqlite.execute({\n sql: `SELECT claim_id,queue_item_id,claimed_by,passport_id,agent_id,orchestrator_id,runtime_domain,\n claimed_at,claim_expires_at,state,retriable,completed_at,failure_reason\n FROM execution_bridge_claims\n WHERE queue_item_id IN (${visiblePlaceholders})\n ORDER BY queue_item_id,claimed_at`,\n args: visibleIds,\n });\n const events = await sqlite.execute({\n sql: `SELECT event_id,event_type,timestamp,queue_item_id,claim_id,request_id,service_id,passport_id,\n agent_id,orchestrator_id,runtime_domain,authorization_decision_id,previous_state,new_state,result,\n reason_code,evidence_ref,evidence_sha256,event_hash\n FROM execution_bridge_audit\n WHERE queue_item_id IN (${visiblePlaceholders})\n ORDER BY id DESC LIMIT ?`,\n args: [...visibleIds, limit],\n });\n\n const auditEvents = [];\n for (const row of visibleRows) {\n auditEvents.push(await eventMaterial({\n eventType: \"QUEUE_AUDIT_READ\",\n timestamp: now,\n queueItemId: Number(row.id),\n claimId: null,\n requestId: null,\n serviceId: auth.serviceId,\n agentId: String(row.agent_id),\n orchestratorId: String(row.orchestrator_id),\n runtimeDomain: String(row.runtime_domain),\n authorizationDecisionId: auth.authorizationDecisionId,\n previousState: String(row.execution_state),\n newState: String(row.execution_state),\n result: \"PASS\",\n reasonCode: \"AUTHORIZED_SCOPED_AUDIT_READ\",\n evidenceRef: typeof row.evidence_ref === \"string\" ? row.evidence_ref : null,\n evidenceSha256: null,\n }));\n }\n await sqlite.batch(auditEvents.map((event) => auditInsert(event)));\n return json({\n bridge: POLICY_VERSION,\n caller: auth.serviceId,\n passport_id: PASSPORT_ID,\n secret_exposed: false,\n authorized_queue_item_ids: visibleIds,\n queue_rows: visibleRows.map((row) => ({\n queue_item_id: Number(row.id),\n agent_id: String(row.agent_id),\n orchestrator_id: String(row.orchestrator_id),\n runtime_domain: String(row.runtime_domain),\n execution_state: String(row.execution_state),\n evidence_ref: row.evidence_ref,\n claim_id: row.claim_id,\n claimed_by: row.claimed_by,\n claimed_at: row.claimed_at,\n claim_expires_at: row.claim_expires_at,\n completion_request_id: row.completion_request_id,\n failure_reason: row.failure_reason,\n failure_retriable: row.failure_retriable,\n updated_at: row.updated_at,\n })),\n claims: claims.rows,\n events: events.rows,\n audit_read_event_id: auditEvent.eventId,\n audit_read_event_hash: auditEvent.eventHash,\n });\n}\n\nfunction legacyAuthorized(req: Request): boolean {\n const value = req.headers.get(\"authorization\");\n if (!value?.startsWith(\"Bearer \")) return false;\n return constantTimeEqual(value.slice(7), secret());\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/health\") {\n return json({\n service: \"IMPERIAL_EXECUTION_BRIDGE\",\n version: POLICY_VERSION,\n status: \"UP\",\n secret_configured: Boolean(Deno.env.get(\"EXECUTION_APPROVAL_TOKEN\")),\n secret_exposed: false,\n });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/readiness\") {\n try {\n await ensureSchema();\n return json({ service: \"IMPERIAL_EXECUTION_BRIDGE\", ready: true, policy: POLICY_VERSION });\n } catch {\n return json({ service: \"IMPERIAL_EXECUTION_BRIDGE\", ready: false, error: \"STORAGE_UNAVAILABLE\" }, 503);\n }\n }\n\n const legacy = new Set([\"/queue\", \"/ready\", \"/claim\", \"/complete\", \"/status\"]);\n if (legacy.has(url.pathname)) {\n if (!legacyAuthorized(req)) return json({ error: \"UNAUTHORIZED\" }, 401);\n return json({ error: \"LEGACY_ENDPOINT_DISABLED_USE_GOVERNED_CAPABILITY\" }, 410);\n }\n\n const body = await readBody(req);\n if (body === null) return json({ error: \"PAYLOAD_TOO_LARGE\" }, 413);\n\n try {\n if (req.method === \"GET\" && url.pathname === \"/execution-bridge/ready\") {\n return await handleReady(req, body);\n }\n if (req.method === \"GET\" && url.pathname === \"/execution-bridge/audit\") {\n return await handleAuditRead(req, body);\n }\n if (req.method === \"POST\" && url.pathname === \"/execution-bridge/claim\") {\n return await handleClaim(req, body);\n }\n if (req.method === \"POST\" && url.pathname === \"/execution-bridge/complete\") {\n return await handleFinalize(req, body, \"complete\");\n }\n if (req.method === \"POST\" && url.pathname === \"/execution-bridge/fail\") {\n return await handleFinalize(req, body, \"fail\");\n }\n if (req.method === \"POST\" && url.pathname === \"/execution-bridge/release\") {\n return await handleFinalize(req, body, \"release\");\n }\n return json({ error: \"NOT_FOUND\" }, 404);\n } catch (error) {\n const code = String(error).includes(\"SERVER_AUTH_UNAVAILABLE\")\n ? \"SERVER_AUTH_UNAVAILABLE\"\n : String(error).includes(\"JSON\")\n ? \"MALFORMED_JSON\"\n : \"INTERNAL_ERROR\";\n return json({ error: code }, code === \"SERVER_AUTH_UNAVAILABLE\" ? 503 : code === \"MALFORMED_JSON\" ? 400 : 500);\n }\n}\n","createdAt",["D",1787947047706],"branchVersion","branchId","9599e79a-1b06-4a25-a590-49e65a500be3","id","80b8839b-de86-40ee-8340-1df5edf7503f","imperial-nca-31day-runtime",["D",1787871527621],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","100-NCA 31-day bootstrap runtime","imageUrl","fe39b163-4b50-466e-82d1-8bd01133e4b6","pinnedFileId","d8315798-a2ac-11f1-ac46-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a03585-eb44-758d-92a4-77db1a9a243c","tursoName","80b8839bde8640ee83401df5edf7503f","tursoHostname","80b8839bde8640ee83401df5edf7503f-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789526460011],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},"branch",{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"isOwned",173,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","oromaskevic23","handle","displayName","Олександр Ромаскевич","avatar","https://lh3.googleusercontent.com/a/ACg8ocIo1MJ3hDjpQrinMIRok3d2YY1vpHgehs8m2u1_vc7pmFovRGI=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":519,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":520,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":521,"_84":522,"_86":523,"_88":25},"tree",[378,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409],"files",[378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409],"counts",{"_368":63,"_369":198,"_370":63,"_371":372,"_373":374},"contents",[131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":361,"_32":362,"_30":363,"_162":-5,"_41":42,"_40":364,"_164":59,"_38":365,"_13":63,"_33":366,"_35":-5,"_24":25,"_167":-5,"_27":367},{"_43":354,"_32":355,"_30":356,"_162":-5,"_41":42,"_40":357,"_164":59,"_38":358,"_13":172,"_33":34,"_35":359,"_24":25,"_167":-5,"_27":360},{"_43":347,"_32":348,"_30":349,"_162":-5,"_41":42,"_40":350,"_164":59,"_38":351,"_13":63,"_33":34,"_35":352,"_24":25,"_167":-5,"_27":353},{"_43":340,"_32":341,"_30":342,"_162":-5,"_41":42,"_40":343,"_164":59,"_38":344,"_13":183,"_33":175,"_35":345,"_24":25,"_167":-5,"_27":346},{"_43":333,"_32":334,"_30":335,"_162":-5,"_41":42,"_40":336,"_164":59,"_38":337,"_13":63,"_33":175,"_35":338,"_24":25,"_167":-5,"_27":339},{"_43":326,"_32":327,"_30":328,"_162":-5,"_41":42,"_40":329,"_164":59,"_38":330,"_13":183,"_33":175,"_35":331,"_24":25,"_167":-5,"_27":332},{"_43":319,"_32":320,"_30":321,"_162":-5,"_41":42,"_40":322,"_164":59,"_38":323,"_13":183,"_33":175,"_35":324,"_24":25,"_167":-5,"_27":325},{"_43":312,"_32":313,"_30":314,"_162":-5,"_41":42,"_40":315,"_164":59,"_38":316,"_13":174,"_33":175,"_35":317,"_24":25,"_167":-5,"_27":318},{"_43":305,"_32":306,"_30":307,"_162":-5,"_41":42,"_40":308,"_164":59,"_38":309,"_13":174,"_33":175,"_35":310,"_24":25,"_167":-5,"_27":311},{"_43":298,"_32":299,"_30":300,"_162":-5,"_41":42,"_40":301,"_164":59,"_38":302,"_13":63,"_33":175,"_35":303,"_24":25,"_167":-5,"_27":304},{"_43":291,"_32":292,"_30":293,"_162":-5,"_41":42,"_40":294,"_164":59,"_38":295,"_13":163,"_33":175,"_35":296,"_24":25,"_167":-5,"_27":297},{"_43":284,"_32":285,"_30":286,"_162":-5,"_41":42,"_40":287,"_164":59,"_38":288,"_13":174,"_33":175,"_35":289,"_24":25,"_167":-5,"_27":290},{"_43":277,"_32":278,"_30":279,"_162":-5,"_41":42,"_40":280,"_164":59,"_38":281,"_13":63,"_33":175,"_35":282,"_24":25,"_167":-5,"_27":283},{"_43":273,"_32":28,"_30":31,"_162":-5,"_41":42,"_40":14,"_164":25,"_38":274,"_13":275,"_33":34,"_35":37,"_24":25,"_167":-5,"_27":276},{"_43":266,"_32":267,"_30":268,"_162":-5,"_41":42,"_40":269,"_164":59,"_38":270,"_13":63,"_33":175,"_35":271,"_24":25,"_167":-5,"_27":272},{"_43":259,"_32":260,"_30":261,"_162":-5,"_41":42,"_40":262,"_164":59,"_38":263,"_13":174,"_33":175,"_35":264,"_24":25,"_167":-5,"_27":265},{"_43":252,"_32":253,"_30":254,"_162":-5,"_41":42,"_40":255,"_164":25,"_38":256,"_13":63,"_33":175,"_35":257,"_24":25,"_167":-5,"_27":258},{"_43":245,"_32":246,"_30":247,"_162":-5,"_41":42,"_40":248,"_164":59,"_38":249,"_13":63,"_33":175,"_35":250,"_24":25,"_167":-5,"_27":251},{"_43":238,"_32":239,"_30":240,"_162":-5,"_41":42,"_40":241,"_164":25,"_38":242,"_13":183,"_33":175,"_35":243,"_24":25,"_167":-5,"_27":244},{"_43":231,"_32":232,"_30":233,"_162":-5,"_41":42,"_40":234,"_164":59,"_38":235,"_13":63,"_33":175,"_35":236,"_24":25,"_167":-5,"_27":237},{"_43":224,"_32":225,"_30":226,"_162":-5,"_41":42,"_40":227,"_164":59,"_38":228,"_13":63,"_33":175,"_35":229,"_24":25,"_167":-5,"_27":230},{"_43":217,"_32":218,"_30":219,"_162":-5,"_41":42,"_40":220,"_164":59,"_38":221,"_13":174,"_33":175,"_35":222,"_24":25,"_167":-5,"_27":223},{"_43":210,"_32":211,"_30":212,"_162":-5,"_41":42,"_40":213,"_164":59,"_38":214,"_13":63,"_33":34,"_35":215,"_24":25,"_167":-5,"_27":216},{"_43":201,"_32":202,"_30":203,"_162":-5,"_41":42,"_40":204,"_164":25,"_38":205,"_13":206,"_33":207,"_35":208,"_24":25,"_167":-5,"_27":209},{"_43":193,"_32":194,"_30":195,"_162":-5,"_41":42,"_40":196,"_164":59,"_38":197,"_13":198,"_33":175,"_35":199,"_24":25,"_167":-5,"_27":200},{"_43":186,"_32":187,"_30":188,"_162":-5,"_41":42,"_40":189,"_164":59,"_38":190,"_13":63,"_33":34,"_35":191,"_24":25,"_167":-5,"_27":192},{"_43":178,"_32":179,"_30":180,"_162":-5,"_41":42,"_40":181,"_164":59,"_38":182,"_13":183,"_33":34,"_35":184,"_24":25,"_167":-5,"_27":185},{"_43":169,"_32":170,"_30":171,"_162":-5,"_41":42,"_40":172,"_164":59,"_38":173,"_13":174,"_33":175,"_35":176,"_24":25,"_167":-5,"_27":177},{"_43":160,"_32":161,"_30":57,"_162":-5,"_41":42,"_40":163,"_164":59,"_38":165,"_13":63,"_33":34,"_35":166,"_24":25,"_167":-5,"_27":168},"d4c1febe-264d-443d-bbc5-69546fb473f4","stripe_status.ts","parentId",6,"latest",["D",1787899867027],"import Stripe from \"npm:stripe\";\n\nexport default async function (_req: Request): Promise {\n const names = Object.keys(Deno.env.toObject()).filter(k => /stripe/i.test(k));\n const candidates = names.filter(k => /secret|api|key|token/i.test(k));\n let credentialSource: string | null = null;\n let accountId: string | null = null;\n for (const name of candidates) {\n const value = Deno.env.get(name);\n if (!value) continue;\n try {\n const stripe = new Stripe(value);\n const acct = await stripe.accounts.retrieve();\n if (acct?.id) { credentialSource = name; accountId = acct.id; break; }\n } catch {}\n }\n return Response.json({stripeEnvKeys:names, candidateCredentialKeys:candidates, readOnlyStripeAccountProbe:credentialSource?\"PASS\":\"NOT_AVAILABLE\", credentialSource, accountId: accountId ? accountId.slice(0,8)+\"…\" : null});\n}\n","label",[161],"b3eee3b0-bd81-45b3-9bc5-260927cc3553","stripe_probe.ts","c94990e2-a2ac-11f1-8630-1607ee4eb77e",5,["D",1787899855011],1,"script","import Stripe from \"npm:stripe\";\n\nexport default async function () {\n const names = Object.keys(Deno.env.toObject()).filter(k => /stripe/i.test(k));\n const candidates = names.filter(k => /secret|api|key|token/i.test(k));\n let workingKey: string | null = null;\n for (const name of candidates) {\n const value = Deno.env.get(name);\n if (!value) continue;\n try {\n const stripe = new Stripe(value);\n const acct = await stripe.accounts.retrieve();\n if (acct?.id) { workingKey = name; break; }\n } catch { /* read-only probe only */ }\n }\n return {stripeEnvKeys:names, candidateCredentialKeys:candidates, readOnlyStripeAccountProbe:workingKey ? \"PASS\" : \"NOT_AVAILABLE\", credentialSource:workingKey ? workingKey : null};\n}\n",[170],"ad4547e1-dc43-453b-a9af-7e0bbd0baabe","stripe_bridge.ts","f1795386-a2ac-11f1-b0aa-1607ee4eb77e",9,["D",1787899952245],2,"import Stripe from \"npm:stripe\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst KEY = Deno.env.get(\"STRIPE_SECRET_KEY\");\nconst WHSEC = Deno.env.get(\"STRIPE_WEBHOOK_SECRET\");\nconst APPROVAL = Deno.env.get(\"EXECUTION_APPROVAL_TOKEN\");\n\nasync function ensureTables() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS stripe_events (\n id TEXT PRIMARY KEY, type TEXT NOT NULL, created INTEGER NOT NULL,\n livemode INTEGER NOT NULL, payload TEXT NOT NULL, received_at TEXT NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS payment_evidence (\n evidence_id TEXT PRIMARY KEY, agent_id TEXT, customer_email TEXT,\n amount_total INTEGER, currency TEXT, payment_status TEXT,\n checkout_session_id TEXT, payment_intent_id TEXT, received_at TEXT NOT NULL,\n evidence_source TEXT NOT NULL\n )`);\n}\n\nexport default async function(req: Request): Promise {\n await ensureTables();\n const url = new URL(req.url);\n\n if (url.pathname === \"/status\") {\n return Response.json({\n stripeBridge:\"IMPERIAL_STRIPE_BRIDGE_v1\",\n apiCredential: KEY ? \"PRESENT\" : \"MISSING\",\n webhookSecret: WHSEC ? \"PRESENT\" : \"MISSING\",\n liveReady: Boolean(KEY && WHSEC),\n truthBoundary:\"No payment is counted without verified Stripe event evidence\"\n });\n }\n\n if (url.pathname === \"/create-checkout-session\" && req.method === \"POST\") {\n const supplied = req.headers.get(\"authorization\");\n if (!APPROVAL || supplied !== `Bearer ${APPROVAL}`) return Response.json({error:\"APPROVAL_REQUIRED\"},{status:401});\n if (!KEY) return Response.json({error:\"STRIPE_SECRET_KEY_MISSING\"},{status:503});\n const stripe = new Stripe(KEY);\n const body = await req.json().catch(()=>null) as any;\n const amountUsd = Number(body?.amount_usd);\n const description = String(body?.description ?? \"IMPERIAL Core service\");\n const agentId = String(body?.agent_id ?? \"UNKNOWN\");\n if (!Number.isFinite(amountUsd) || amountUsd <= 0 || amountUsd > 1000000) {\n return Response.json({error:\"INVALID_AMOUNT\"},{status:400});\n }\n const session = await stripe.checkout.sessions.create({\n mode:\"payment\",\n line_items:[{price_data:{currency:\"usd\",product_data:{name:description},unit_amount:Math.round(amountUsd*100)},quantity:1}],\n metadata:{agent_id:agentId, system:\"IMPERIAL Core\"},\n success_url:`${url.origin}/success?session_id={CHECKOUT_SESSION_ID}`,\n cancel_url:`${url.origin}/cancel`\n });\n return Response.json({id:session.id,url:session.url,status:session.status});\n }\n\n if (url.pathname === \"/webhook\" && req.method === \"POST\") {\n if (!KEY || !WHSEC) return Response.json({error:\"STRIPE_WEBHOOK_NOT_CONFIGURED\"},{status:503});\n const stripe = new Stripe(KEY);\n const signature = req.headers.get(\"stripe-signature\");\n if (!signature) return new Response(\"Missing signature\",{status:400});\n const raw = await req.text();\n let event: Stripe.Event;\n try { event = await stripe.webhooks.constructEventAsync(raw, signature, WHSEC); }\n catch { return new Response(\"Bad signature\",{status:400}); }\n await sqlite.execute({sql:`INSERT OR IGNORE INTO stripe_events(id,type,created,livemode,payload,received_at) VALUES(?,?,?,?,?,?)`,args:[event.id,event.type,event.created,event.livemode?1:0,raw,new Date().toISOString()]});\n if (event.type === \"checkout.session.completed\") {\n const s = event.data.object as Stripe.Checkout.Session;\n await sqlite.execute({sql:`INSERT OR REPLACE INTO payment_evidence(evidence_id,agent_id,customer_email,amount_total,currency,payment_status,checkout_session_id,payment_intent_id,received_at,evidence_source) VALUES(?,?,?,?,?,?,?,?,?,?)`,args:[event.id,String(s.metadata?.agent_id ?? \"UNKNOWN\"),String(s.customer_details?.email ?? \"\"),Number(s.amount_total ?? 0),String(s.currency ?? \"\"),String(s.payment_status ?? \"\"),s.id,String(s.payment_intent ?? \"\"),new Date().toISOString(),\"STRIPE_SIGNED_WEBHOOK\"]});\n }\n return Response.json({received:true,event_id:event.id,type:event.type});\n }\n\n if (url.pathname === \"/success\") return new Response(\"Payment received. Verification is being recorded.\");\n if (url.pathname === \"/cancel\") return new Response(\"Payment cancelled.\");\n return new Response(\"IMPERIAL Stripe Bridge\",{status:200});\n}\n",[179],"175c337f-5b33-48d8-bd3f-162adcb39b66","skill_status.ts","4621295a-a2d9-11f1-827b-1607ee4eb77e",86,["D",1787918949318],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport default async function(req: Request) {\n if (req.method !== \"GET\") return Response.json({error:\"METHOD_NOT_ALLOWED\"},{status:405});\n const agents = await sqlite.execute(`SELECT COUNT(*) AS n FROM agents`);\n const total = await sqlite.execute(`SELECT COUNT(*) AS n FROM skill_runtime_bindings WHERE runtime_state='ACTIVE_BOUNDED'`);\n const grouped = await sqlite.execute(`SELECT skill_id,skill_version,runtime_state,COUNT(*) AS agents\n FROM skill_runtime_bindings GROUP BY skill_id,skill_version,runtime_state ORDER BY skill_id`);\n const missing = await sqlite.execute(`SELECT COUNT(*) AS n FROM agents a WHERE NOT EXISTS (\n SELECT 1 FROM skill_runtime_bindings s WHERE s.agent_id=a.agent_id AND s.runtime_state='ACTIVE_BOUNDED'\n )`);\n return Response.json({\n service:\"IMPERIAL Skill Runtime Status\",\n agents:Number((agents.rows[0] as any)?.n ?? 0),\n activeBindings:Number((total.rows[0] as any)?.n ?? 0),\n skillSets:grouped.rows,\n agentsWithoutAnyActiveBinding:Number((missing.rows[0] as any)?.n ?? 0),\n authority:\"SKILLS_DO_NOT_GRANT_AUTHORITY\",\n truthBoundary:\"RUNTIME_BINDING_ACTIVE != EXTERNAL_ACTION_AUTHORITY != PRODUCTION\"\n },{headers:{\"cache-control\":\"no-store\",\"x-content-type-options\":\"nosniff\"}});\n}\n",[187],"9240f8af-38c8-44c3-a069-aa9d05ab3bd6","skill_runtime.ts","da5b5150-a2d8-11f1-9e48-1607ee4eb77e",93,["D",1787932523533],3,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst SKILLS = [\n [\"imperial-skill-accelerator\", \"fabric-v2\"],\n [\"imperial-skill-registry\", \"fabric-v2\"],\n [\"imperial-skill-eval-flywheel\", \"fabric-v2\"],\n [\"imperial-skill-security-gate\", \"fabric-v2\"],\n [\"imperial-skill-router\", \"fabric-v2\"],\n [\"imperial-skill-packager\", \"fabric-v2\"],\n [\"IMPERIAL-Skill-Galaxy-SALMAN\", \"2.0.0\"],\n [\"IMPERIAL-Adaptive-Capability-Engine\", \"3.0.0\"],\n [\"IMPERIAL-Revenue-Mission-Router\", \"4.1-LIVE\"],\n [\"IMPERIAL-Strategic-Search\", \"1.0-LIVE\"],\n [\"IMPERIAL-100-NCA-Mission\", \"4.1.0\"],\n] as const;\n\nexport async function ensureSkillRuntimeBindings(now = new Date().toISOString()) {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS skill_runtime_bindings (\n agent_id TEXT NOT NULL,\n skill_id TEXT NOT NULL,\n skill_version TEXT NOT NULL,\n runtime_state TEXT NOT NULL,\n authority_rule TEXT NOT NULL,\n activated_at TEXT NOT NULL,\n last_verified_at TEXT NOT NULL,\n PRIMARY KEY(agent_id, skill_id)\n )`);\n\n for (const [skillId, version] of SKILLS) {\n await sqlite.execute({\n sql:`INSERT INTO skill_runtime_bindings(agent_id,skill_id,skill_version,runtime_state,authority_rule,activated_at,last_verified_at)\n SELECT agent_id, ?, ?, 'ACTIVE_BOUNDED', 'SKILL_DOES_NOT_GRANT_AUTHORITY', ?, ? FROM agents WHERE 1=1\n ON CONFLICT(agent_id,skill_id) DO UPDATE SET\n skill_version=excluded.skill_version,\n runtime_state=excluded.runtime_state,\n authority_rule=excluded.authority_rule,\n last_verified_at=excluded.last_verified_at`,\n args:[skillId,version,now,now]\n });\n }\n\n const agents = await sqlite.execute(`SELECT COUNT(*) AS n FROM agents`);\n const summary = await sqlite.execute(`SELECT skill_id,skill_version,runtime_state,COUNT(*) AS agents\n FROM skill_runtime_bindings GROUP BY skill_id,skill_version,runtime_state ORDER BY skill_id`);\n return { agents: Number((agents.rows[0] as any)?.n ?? 0), bindings: summary.rows };\n}\n\nexport default async function () {\n const result = await ensureSkillRuntimeBindings();\n console.log(JSON.stringify({event:\"skill_runtime_activation\",...result,truth_boundary:\"RUNTIME_BINDING_ACTIVE != EXTERNAL_ACTION_AUTHORITY\"}));\n return result;\n}\n",[194],"0e1cc1c0-3454-47e6-a5a4-55c2f8c491c0","runner.ts","dc9ec438-a26a-11f1-8d34-1607ee4eb77e",95,["D",1787934014072],19,"interval","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { ensureSkillRuntimeBindings } from \"./skill_runtime.ts\";\n\nconst START = \"2026-08-28T01:42:37+03:00\";\nconst END = \"2026-09-28T01:42:37+03:00\";\nconst ROUTER_VERSION = \"IMPERIAL-Revenue-Mission-Router-v4.1-LIVE\";\nconst SEARCH_VERSION = \"IMPERIAL-Strategic-Search-v1.0-LIVE\";\n\nfunction phase(day:number) {\n if (day <= 3) return \"OFFER_AND_PROOF\";\n if (day <= 7) return \"MARKET_VALIDATION\";\n if (day <= 14) return \"QUALIFIED_PIPELINE\";\n if (day <= 21) return \"DELIVERY_AND_CONVERSION\";\n if (day <= 28) return \"SCALE_PROVEN_CHANNELS\";\n return \"CLOSURE_AND_AUDIT\";\n}\n\ntype Route = {\n primary:string; fallback:string; buyer:string; proof:string; cashPath:string;\n margin:number; urgency:number; evidence:number; timeToCash:number; roleFit:number;\n};\n\nconst ROUTES:Record = {\n \"Kids Media\": {\n primary:\"B2B positive-media licensing / branded educational production\",\n fallback:\"paid localization or pilot-production package\",\n buyer:\"publishers, education platforms, family brands, broadcasters\",\n proof:\"pilot concept + story bible + safety/localization sample\",\n cashPath:\"paid pilot, production deposit, or licence deposit\",\n margin:0.78, urgency:0.58, evidence:0.72, timeToCash:0.63, roleFit:0.96\n },\n \"Dropshipping Commerce\": {\n primary:\"paid ecommerce growth diagnostic + implementation retainer\",\n fallback:\"validated product / merchandising operations package\",\n buyer:\"existing ecommerce operators and brands\",\n proof:\"store/product audit with sourced conversion and operations findings\",\n cashPath:\"paid diagnostic, then implementation retainer\",\n margin:0.72, urgency:0.82, evidence:0.78, timeToCash:0.84, roleFit:0.97\n },\n \"AI Automation\": {\n primary:\"high-ticket governed AI automation discovery + implementation\",\n fallback:\"workflow assessment and bounded prototype engagement\",\n buyer:\"SMEs and enterprise teams with repetitive high-cost workflows\",\n proof:\"workflow map + bounded prototype + eval + labelled ROI hypothesis\",\n cashPath:\"paid discovery or implementation deposit\",\n margin:0.88, urgency:0.82, evidence:0.82, timeToCash:0.78, roleFit:0.99\n },\n \"B2B Revenue\": {\n primary:\"paid RevOps / enterprise sales acceleration sprint\",\n fallback:\"account pipeline and proposal-system engagement\",\n buyer:\"B2B firms with measurable sales bottlenecks\",\n proof:\"funnel diagnosis + account map + proposal system\",\n cashPath:\"strategy sprint fee, then service retainer\",\n margin:0.84, urgency:0.90, evidence:0.84, timeToCash:0.86, roleFit:0.99\n },\n \"Creative & Digital\": {\n primary:\"premium digital production / licensing engagement\",\n fallback:\"paid concept, prototype, or design sprint\",\n buyer:\"brands, agencies, property, media and technology companies\",\n proof:\"portfolio-grade concept, prototype or visual demo\",\n cashPath:\"design/development deposit or licence fee\",\n margin:0.80, urgency:0.68, evidence:0.80, timeToCash:0.70, roleFit:0.97\n },\n \"Education\": {\n primary:\"B2B training / curriculum / enablement licence\",\n fallback:\"paid course-production or assessment-design package\",\n buyer:\"companies, schools, training providers, professional organizations\",\n proof:\"sample module + curriculum map + assessment plan\",\n cashPath:\"cohort/licence deposit or production fee\",\n margin:0.79, urgency:0.62, evidence:0.80, timeToCash:0.64, roleFit:0.98\n },\n \"Data & Market Intelligence\": {\n primary:\"paid market intelligence / competitive decision-support sprint\",\n fallback:\"research subscription or recurring intelligence brief\",\n buyer:\"operators, investors, product and strategy teams\",\n proof:\"sourced intelligence brief with confidence labels\",\n cashPath:\"paid research sprint or subscription prepayment\",\n margin:0.86, urgency:0.74, evidence:0.90, timeToCash:0.76, roleFit:0.99\n },\n \"SME Services\": {\n primary:\"paid operational diagnostic + transformation retainer\",\n fallback:\"bounded implementation package for one measurable constraint\",\n buyer:\"SMEs with measurable process, cost or growth constraints\",\n proof:\"diagnostic + control map + implementation roadmap\",\n cashPath:\"paid diagnostic, then implementation retainer\",\n margin:0.76, urgency:0.84, evidence:0.82, timeToCash:0.82, roleFit:0.98\n }\n};\n\nfunction routeScore(r:Route) {\n // Planning score only. Never a probability or revenue forecast.\n return 0.23*r.evidence + 0.22*r.roleFit + 0.20*r.timeToCash + 0.14*r.margin + 0.13*r.urgency + 0.08;\n}\n\nconst STAGES = [\n \"DEFINE_OFFER\",\n \"BUILD_PROOF\",\n \"QUALIFY_BUYERS\",\n \"PREPARE_APPROVED_OUTREACH\",\n \"HANDLE_RESPONSE_OR_RESEARCH_NEXT\",\n \"PREPARE_PROPOSAL_OR_PAID_DIAGNOSTIC\",\n \"DELIVER_OR_IMPROVE_PROOF\",\n \"VERIFY_EVIDENCE_AND_REPLAN\"\n] as const;\n\nfunction actionStage(stageIndex:number, day:number) {\n if (day >= 29) return \"AUDIT_AND_CLOSE\";\n return STAGES[Math.max(0, Math.min(STAGES.length-1, stageIndex))];\n}\n\nfunction nextAction(domain:string, stageIndex:number, day:number) {\n const r = ROUTES[domain];\n if (!r) return \"ROLE_ALIGNED_RESEARCH: define one lawful high-value offer and evidence plan\";\n const stage = actionStage(stageIndex, day);\n const m:Record = {\n DEFINE_OFFER:`lock one primary offer: ${r.primary}; keep only one fallback: ${r.fallback}`,\n BUILD_PROOF:`build/fact-check proof asset: ${r.proof}`,\n QUALIFY_BUYERS:`build a small qualified buyer queue matching: ${r.buyer}; no mass spam`,\n PREPARE_APPROVED_OUTREACH:`prepare personalized factual outreach drafts for qualified buyers; external send requires allowed connector/policy`,\n HANDLE_RESPONSE_OR_RESEARCH_NEXT:`process verified buyer replies if any; otherwise improve qualification using evidence, not volume`,\n PREPARE_PROPOSAL_OR_PAID_DIAGNOSTIC:`prepare a concrete paid proposal with cash path: ${r.cashPath}`,\n DELIVER_OR_IMPROVE_PROOF:`if a paid engagement exists, deliver governed scope; otherwise strengthen proof and buyer fit`,\n VERIFY_EVIDENCE_AND_REPLAN:`verify external evidence, reject pipeline-as-revenue, score route, then keep primary or switch to fallback`,\n AUDIT_AND_CLOSE:`audit lawful collected net revenue, evidence, refunds/chargebacks and unresolved obligations`\n };\n return `${stage}: ${m[stage]}`;\n}\n\nexport default async function (interval: Interval) {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS agents (\n agent_id TEXT PRIMARY KEY, domain TEXT NOT NULL, role TEXT NOT NULL,\n target_usd INTEGER NOT NULL DEFAULT 1000000, salman INTEGER NOT NULL DEFAULT 100,\n status TEXT NOT NULL DEFAULT 'ARMED', last_heartbeat TEXT,\n tick_count INTEGER NOT NULL DEFAULT 0, mission_day INTEGER NOT NULL DEFAULT 1,\n phase TEXT, next_action TEXT, network_ok INTEGER NOT NULL DEFAULT 0\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS routing_state (\n agent_id TEXT PRIMARY KEY,\n router_version TEXT NOT NULL,\n strategic_search_version TEXT NOT NULL,\n route_revision INTEGER NOT NULL DEFAULT 0,\n strategic_phase TEXT NOT NULL,\n action_stage TEXT NOT NULL,\n primary_route TEXT NOT NULL,\n fallback_route TEXT NOT NULL,\n buyer_profile TEXT NOT NULL,\n proof_asset TEXT NOT NULL,\n cash_path TEXT NOT NULL,\n planning_score REAL NOT NULL,\n next_action TEXT NOT NULL,\n next_action_at TEXT NOT NULL,\n approval_gate TEXT NOT NULL,\n evidence_gate TEXT NOT NULL,\n truth_boundary TEXT NOT NULL,\n last_replanned_at TEXT NOT NULL\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS agent_progress (\n agent_id TEXT PRIMARY KEY,\n stage_index INTEGER NOT NULL DEFAULT 0,\n stage_state TEXT NOT NULL DEFAULT 'WAITING_FOR_EVIDENCE',\n evidence_count INTEGER NOT NULL DEFAULT 0,\n last_evidence_ref TEXT,\n last_advanced_at TEXT\n )`);\n await sqlite.execute(`INSERT OR IGNORE INTO agent_progress(agent_id) SELECT agent_id FROM agents`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS execution_queue (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n agent_id TEXT NOT NULL,\n action_stage TEXT NOT NULL,\n next_action TEXT NOT NULL,\n connector TEXT NOT NULL,\n execution_state TEXT NOT NULL,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n evidence_ref TEXT,\n permission_decision TEXT,\n permission_reason TEXT\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS codex_assist_profile (\n agent_id TEXT PRIMARY KEY,\n enabled INTEGER NOT NULL DEFAULT 1,\n preferred_model TEXT NOT NULL,\n reasoning_effort TEXT NOT NULL,\n allowed_tasks TEXT NOT NULL,\n authority_rule TEXT NOT NULL,\n status TEXT NOT NULL\n )`);\n await sqlite.execute(`INSERT OR IGNORE INTO codex_assist_profile(agent_id,enabled,preferred_model,reasoning_effort,allowed_tasks,authority_rule,status)\n SELECT agent_id,1,'ChatGPT Codex (Plus)','plan-managed','code,automation,integration,prototype,test,debug,data-pipeline,landing-page,technical-proof','CODEX_ASSIST_HAS_NO_INDEPENDENT_AUTHORITY','PLUS_ONLY' FROM agents`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS codex_assist_queue (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n agent_id TEXT NOT NULL,\n mission_stage TEXT NOT NULL,\n task_type TEXT NOT NULL,\n objective TEXT NOT NULL,\n context TEXT,\n acceptance_criteria TEXT NOT NULL,\n state TEXT NOT NULL DEFAULT 'QUEUED_PLUS_HANDOFF',\n created_at TEXT NOT NULL,\n started_at TEXT,\n completed_at TEXT,\n result_ref TEXT,\n result_text TEXT,\n error TEXT\n )`);\n\n const now = new Date();\n const skillRuntime = await ensureSkillRuntimeBindings(now.toISOString());\n const start = new Date(START);\n const end = new Date(END);\n const day = Math.max(1, Math.min(31, Math.floor((now.getTime()-start.getTime())/86400000)+1));\n const active = now <= end;\n\n let networkOk = 0;\n const probes = [\n [\"https://www.cloudflare.com/cdn-cgi/trace\", {}],\n [\"https://api.github.com/zen\", {headers:{\"User-Agent\":\"IMPERIAL-Core-NCA-Runtime\"}}],\n ] as const;\n for (const [url, init] of probes) {\n try {\n const r = await fetch(url, {...init, signal: AbortSignal.timeout(5000)});\n if (r.ok) { networkOk = 1; break; }\n } catch { /* next independent probe */ }\n }\n\n const rows = await sqlite.execute(`SELECT a.agent_id,a.domain,a.tick_count,COALESCE(p.stage_index,0) AS stage_index,n.next_action AS navigator_next_action FROM agents a LEFT JOIN agent_progress p ON p.agent_id=a.agent_id LEFT JOIN revenue_navigator_state n ON n.agent_id=a.agent_id ORDER BY a.agent_id`);\n for (const row of rows.rows as any[]) {\n const id = String(row.agent_id);\n const d = String(row.domain);\n const stageIndex = Number(row.stage_index ?? 0);\n const r = ROUTES[d];\n const action = String(row.navigator_next_action ?? nextAction(d, stageIndex, day));\n const stage = actionStage(stageIndex, day);\n\n await sqlite.execute({sql:`UPDATE agents SET status=?, last_heartbeat=?, tick_count=tick_count+1,\n mission_day=?, phase=?, next_action=?, network_ok=? WHERE agent_id=?`,\n args:[active?\"RUNNING\":\"MISSION_ENDED\", now.toISOString(), day, phase(day), action, networkOk, id]});\n\n if (r) {\n await sqlite.execute({sql:`INSERT INTO routing_state(\n agent_id,router_version,strategic_search_version,route_revision,strategic_phase,action_stage,\n primary_route,fallback_route,buyer_profile,proof_asset,cash_path,planning_score,next_action,next_action_at,\n approval_gate,evidence_gate,truth_boundary,last_replanned_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(agent_id) DO UPDATE SET\n router_version=excluded.router_version,\n strategic_search_version=excluded.strategic_search_version,\n route_revision=routing_state.route_revision+1,\n strategic_phase=excluded.strategic_phase,\n action_stage=excluded.action_stage,\n primary_route=excluded.primary_route,\n fallback_route=excluded.fallback_route,\n buyer_profile=excluded.buyer_profile,\n proof_asset=excluded.proof_asset,\n cash_path=excluded.cash_path,\n planning_score=excluded.planning_score,\n next_action=excluded.next_action,\n next_action_at=excluded.next_action_at,\n approval_gate=excluded.approval_gate,\n evidence_gate=excluded.evidence_gate,\n truth_boundary=excluded.truth_boundary,\n last_replanned_at=excluded.last_replanned_at`,\n args:[id,ROUTER_VERSION,SEARCH_VERSION,1,phase(day),stage,r.primary,r.fallback,r.buyer,r.proof,r.cashPath,\n routeScore(r),action,now.toISOString(),\n \"EXTERNAL_SEND_SPEND_SIGN_OR_IRREVERSIBLE_ACTION_REQUIRES_ALLOWED_AUTHORITY\",\n \"COUNT_ONLY_LAWFUL_EXTERNALLY_EVIDENCED_COLLECTED_NET_REVENUE\",\n \"PLANNING_SCORE_IS_NOT_REVENUE_FORECAST_OR_GUARANTEE\",now.toISOString()]});\n }\n }\n\n await sqlite.execute(`UPDATE execution_queue\n SET execution_state='SUPERSEDED', updated_at=?\n WHERE execution_state='READY'\n AND EXISTS (\n SELECT 1 FROM routing_state rs\n WHERE rs.agent_id=execution_queue.agent_id\n AND (rs.action_stage<>execution_queue.action_stage OR rs.next_action<>execution_queue.next_action)\n )`, [now.toISOString()]);\n\n await sqlite.execute(`INSERT INTO execution_queue(\n agent_id,action_stage,next_action,connector,execution_state,created_at,updated_at,permission_decision,permission_reason\n )\n SELECT rs.agent_id,rs.action_stage,rs.next_action,\n CASE\n WHEN rs.action_stage IN ('DEFINE_OFFER','BUILD_PROOF','QUALIFY_BUYERS','HANDLE_RESPONSE_OR_RESEARCH_NEXT','VERIFY_EVIDENCE_AND_REPLAN') THEN 'RESEARCH_CRM'\n WHEN rs.action_stage='PREPARE_APPROVED_OUTREACH' THEN 'GMAIL_DRAFT'\n WHEN rs.action_stage='PREPARE_PROPOSAL_OR_PAID_DIAGNOSTIC' THEN 'CRM_STRIPE_PREP'\n ELSE 'RUNTIME_INTERNAL'\n END,\n 'READY',?,?,'ALLOW','STANDING_DELEGATION_L1_OR_PREPARATION'\n FROM routing_state rs\n WHERE NOT EXISTS (\n SELECT 1 FROM execution_queue q\n WHERE q.agent_id=rs.agent_id\n AND q.action_stage=rs.action_stage\n AND q.next_action=rs.next_action\n AND q.execution_state IN ('READY','CLAIMED')\n )`, [now.toISOString(),now.toISOString()]);\n\n await sqlite.execute(`INSERT INTO codex_assist_queue(agent_id,mission_stage,task_type,objective,context,acceptance_criteria,state,created_at)\n SELECT rs.agent_id,rs.action_stage,\n CASE WHEN rs.action_stage='BUILD_PROOF' THEN 'TECHNICAL_PROOF' ELSE 'DELIVERY_AUTOMATION' END,\n CASE WHEN rs.action_stage='BUILD_PROOF'\n THEN 'Create the smallest implementation-ready technical artifact that materially strengthens this proof asset: ' || rs.proof_asset\n ELSE 'Implement or improve the technical delivery needed for the proven engagement without expanding business scope.' END,\n 'Primary route: ' || rs.primary_route || '\\nBuyer: ' || rs.buyer_profile || '\\nCash path: ' || rs.cash_path || '\\nNCA next action: ' || rs.next_action,\n 'Return implementation-ready code/design, explicit assumptions, test plan, security checks, and completion evidence. Do not contact buyers, spend money, sign, or claim revenue.',\n 'QUEUED_PLUS_HANDOFF',?\n FROM routing_state rs\n JOIN codex_assist_profile cp ON cp.agent_id=rs.agent_id AND cp.enabled=1\n WHERE rs.action_stage IN ('BUILD_PROOF','DELIVER_OR_IMPROVE_PROOF')\n AND NOT EXISTS (\n SELECT 1 FROM codex_assist_queue cq\n WHERE cq.agent_id=rs.agent_id AND cq.mission_stage=rs.action_stage\n AND cq.state IN ('QUEUED_PLUS_HANDOFF','HANDOFF_RUNNING','COMPLETED')\n )`, [now.toISOString()]);\n\n console.log(JSON.stringify({\n runtime:\"IMPERIAL_NCA_BOOTSTRAP\",\n agents:rows.rows.length,\n missionDay:day,\n router:ROUTER_VERSION,\n strategicSearch:SEARCH_VERSION,\n routedAgents:rows.rows.length,\n networkOk,\n at:now.toISOString()\n }));\n}\n",[202],"5b1eefe8-2f5d-4f03-ac20-bf7384a2913e","proof_catalog.ts","3a5dbc9c-a2b5-11f1-b6ed-1607ee4eb77e",45,["D",1787903467682],"const proofs: Record = {\n \"Kids Media\": {artifact:\"Positive Media Licensing Proof Pack\",deliverable:\"pilot concept + story bible + child-safety/localization checklist\",demonstrates:[\"positive-world creative development\",\"brand-safe content structure\",\"localization-ready production brief\"],truth:\"Capability demonstrator only; no audience or revenue claim.\"},\n \"Dropshipping Commerce\": {artifact:\"Ecommerce Growth Diagnostic Proof Pack\",deliverable:\"store audit framework + merchandising checklist + conversion hypothesis ledger\",demonstrates:[\"structured ecommerce diagnosis\",\"evidence-labelled conversion hypotheses\",\"implementation-retainer scoping\"],truth:\"No conversion uplift claimed without measured client data.\"},\n \"AI Automation\": {artifact:\"Governed AI Automation Proof Pack\",deliverable:\"workflow map + bounded automation architecture + eval/security checklist\",demonstrates:[\"workflow decomposition\",\"governed automation design\",\"test and rollback planning\"],truth:\"ROI remains a hypothesis until measured against a real client baseline.\"},\n \"B2B Revenue\": {artifact:\"RevOps Acceleration Proof Pack\",deliverable:\"funnel diagnosis template + account map + proposal-system blueprint\",demonstrates:[\"pipeline bottleneck analysis\",\"account prioritization\",\"proposal workflow design\"],truth:\"No pipeline or revenue is counted as collected revenue.\"},\n \"Creative & Digital\": {artifact:\"Premium Digital Prototype Proof Pack\",deliverable:\"concept brief + prototype specification + acceptance-test checklist\",demonstrates:[\"premium concept development\",\"prototype scoping\",\"production-quality acceptance criteria\"],truth:\"Portfolio demonstrator; no fabricated client endorsement.\"},\n \"Education\": {artifact:\"B2B Learning License Proof Pack\",deliverable:\"sample module structure + curriculum map + assessment blueprint\",demonstrates:[\"instructional architecture\",\"assessment alignment\",\"license-ready packaging\"],truth:\"Learning outcomes require real learner evaluation before claims.\"},\n \"Data & Market Intelligence\": {artifact:\"Decision Intelligence Proof Pack\",deliverable:\"source register + confidence-labelled brief template + decision matrix\",demonstrates:[\"source discipline\",\"confidence labelling\",\"decision-oriented synthesis\"],truth:\"No unsourced market facts or investment recommendations.\"},\n \"SME Services\": {artifact:\"Operational Diagnostic Proof Pack\",deliverable:\"constraint map + control checklist + implementation roadmap\",demonstrates:[\"process diagnosis\",\"risk/control mapping\",\"bounded transformation planning\"],truth:\"Savings or growth claims require client evidence.\"}\n};\n\nexport default async function(req: Request): Promise {\n const u = new URL(req.url);\n const domain = u.searchParams.get(\"domain\");\n if (domain) {\n const proof = proofs[domain];\n if (!proof) return Response.json({error:\"UNKNOWN_DOMAIN\"},{status:404});\n return Response.json({system:\"IMPERIAL Core\",evidenceClass:\"LIVE_CAPABILITY_PROOF\",domain,...proof,generatedAt:new Date().toISOString()});\n }\n return Response.json({system:\"IMPERIAL Core\",evidenceClass:\"LIVE_CAPABILITY_PROOF_CATALOG\",count:Object.keys(proofs).length,proofs,truthBoundary:\"These are capability demonstrators, not customer results, revenue evidence, endorsements, or guarantees.\"});\n}\n",[211],"580af7a4-bc8b-44b0-86d4-121489353cf6","permission_manager_test.ts","be90b732-a2ae-11f1-9817-1607ee4eb77e",21,["D",1787900699441],"import { decidePermission } from './permission_manager.ts';\n\nconst base = {missionBound:true,runtimeDomainBound:true,capabilityAllowed:true,guardianPass:true};\nconst privateAction = decidePermission({...base,approvalGrantPresent:false,reversiblePrivateWorkspaceAction:true,externalSend:false,financialOrIrreversible:false});\nconst externalSend = decidePermission({...base,approvalGrantPresent:false,reversiblePrivateWorkspaceAction:false,externalSend:true,financialOrIrreversible:false});\nconst externalSendGranted = decidePermission({...base,approvalGrantPresent:true,reversiblePrivateWorkspaceAction:false,externalSend:true,financialOrIrreversible:false});\nconst spend = decidePermission({...base,approvalGrantPresent:false,reversiblePrivateWorkspaceAction:false,externalSend:false,financialOrIrreversible:true});\nconst badMission = decidePermission({...base,missionBound:false,approvalGrantPresent:true,reversiblePrivateWorkspaceAction:true,externalSend:false,financialOrIrreversible:false});\nif (privateAction!=='ALLOW') throw new Error('privateAction');\nif (externalSend!=='APPROVAL_REQUIRED') throw new Error('externalSend');\nif (externalSendGranted!=='ALLOW') throw new Error('externalSendGranted');\nif (spend!=='APPROVAL_REQUIRED') throw new Error('spend');\nif (badMission!=='DENY') throw new Error('badMission');\nconsole.log(JSON.stringify({tests:'5/5 PASS',privateAction,externalSend,externalSendGranted,spend,badMission}));\n",[218],"596600c2-4e45-4cf3-9f86-92bc8b64c769","permission_manager.ts","3bc80526-a2ae-11f1-9cf5-1607ee4eb77e",10,["D",1787900463602],"export type Decision = 'ALLOW'|'APPROVAL_REQUIRED'|'DENY';\n\nexport type PermissionContext = {\n missionBound: boolean;\n runtimeDomainBound: boolean;\n capabilityAllowed: boolean;\n guardianPass: boolean;\n approvalGrantPresent: boolean;\n reversiblePrivateWorkspaceAction: boolean;\n externalSend: boolean;\n financialOrIrreversible: boolean;\n};\n\nexport function decidePermission(c: PermissionContext): Decision {\n if (!c.missionBound || !c.runtimeDomainBound || !c.capabilityAllowed || !c.guardianPass) return 'DENY';\n if (c.financialOrIrreversible) return c.approvalGrantPresent ? 'ALLOW' : 'APPROVAL_REQUIRED';\n if (c.externalSend) return c.approvalGrantPresent ? 'ALLOW' : 'APPROVAL_REQUIRED';\n if (c.reversiblePrivateWorkspaceAction) return 'ALLOW';\n return c.approvalGrantPresent ? 'ALLOW' : 'APPROVAL_REQUIRED';\n}\n\nexport const CANON = {\n component: 'IMPERIAL Permission Manager',\n version: '1.0-LIVE',\n effectiveAuthority: 'Mission Authority ∩ AI Passport ∩ EIS ∩ Runtime Domain Policy ∩ Guardian Core ∩ Approval Gateway',\n delegationRule: 'Child Authority ⊆ Parent Mission Authority',\n noBypass: true,\n};\n",[225],"33ab9d37-3c69-4f0c-92a3-42fd8d278649","execution_bridge_security_test.ts","8b9f1f32-a2d4-11f1-88be-1607ee4eb77e",76,["D",1787916918431],"import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { isMain } from \"https://esm.town/v/std/utils/index.ts\";\nimport { bridgeRequest } from \"./execution_bridge_client.ts\";\n\nconst ENDPOINT = \"https://oromaskevic23--4ca6bf4aa2ae11f1a3f01607ee4eb77e.web.val.run\";\nconst RESULT_KEY = \"evidence/execution-bridge/security-live.json\";\n\nasync function status(path: string, init: RequestInit = {}) {\n const response = await fetch(ENDPOINT + path, { ...init, signal: AbortSignal.timeout(25_000) });\n return response.status;\n}\n\nasync function main() {\n const unauthorizedReady = await status(\"/execution-bridge/ready?limit=1\");\n const legacyQueue = await status(\"/queue\");\n const forged = await bridgeRequest(\"GET\", \"/execution-bridge/ready?limit=1\", \"QUEUE_READ\", null, {\n signature: \"0\".repeat(64),\n });\n const timestamp = new Date().toISOString();\n const nonce = \"replaysecurity\" + crypto.randomUUID().replaceAll(\"-\", \"\");\n const first = await bridgeRequest(\"GET\", \"/execution-bridge/ready?limit=1\", \"QUEUE_READ\", null, { timestamp, nonce });\n const replay = await bridgeRequest(\"GET\", \"/execution-bridge/ready?limit=1\", \"QUEUE_READ\", null, { timestamp, nonce });\n const oversized = await status(\"/execution-bridge/claim\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: \"x\".repeat(17 * 1024),\n });\n const result = {\n unauthorizedGovernedDenied: unauthorizedReady === 401,\n legacyQueueProtected: legacyQueue === 401,\n forgedSignatureDenied: forged.status === 401,\n validScopedRead: first.status === 200,\n replayDenied: replay.status === 409,\n oversizedPayloadDenied: oversized === 413,\n statuses: { unauthorizedReady, legacyQueue, forged: forged.status, first: first.status, replay: replay.status, oversized },\n secretExposed: false,\n recordedAt: new Date().toISOString(),\n };\n await blob.setJSON(RESULT_KEY, result);\n return result;\n}\nexport default main;\nif (isMain(import.meta.url)) await main();\n",[232],"3801de1d-9a75-4862-90a9-aa662664be58","execution_bridge_secret_scan.ts","f86c2fa2-a319-11f1-ac23-1607ee4eb77e",107,["D",1787946877710],"import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { isMain } from \"https://esm.town/v/std/utils/index.ts\";\n\nconst KEYS = [\n \"connector/queue-ready-v3.json\",\n \"connector/queue-claim-v3.json\",\n \"connector/finalize-command.json\",\n \"connector/finalize-result.json\",\n \"commercial/research-result.json\",\n \"evidence/commercial/queue-item-721.json\",\n \"evidence/execution-bridge/security-live.json\",\n \"evidence/execution-bridge/concurrency-live.json\",\n \"evidence/execution-bridge/completion-live.json\",\n \"evidence/execution-bridge/duplicate-completion-live.json\",\n \"evidence/execution-bridge/finalize-concurrency-live.json\",\n \"evidence/execution-bridge/audit-events.json\",\n \"evidence/execution-bridge/live-verification.json\",\n \"evidence/execution-bridge/security-tests.json\",\n \"evidence/execution-bridge/concurrency-tests.json\",\n \"evidence/execution-bridge/queue-test.json\",\n \"evidence/execution-bridge/commercial-pass.json\",\n];\n\nasync function main() {\n const secret = Deno.env.get(\"EXECUTION_APPROVAL_TOKEN\");\n if (!secret) throw new Error(\"SERVER_AUTH_UNAVAILABLE\");\n const matches = [];\n let scanned = 0;\n for (const key of KEYS) {\n const value = await blob.get(key).catch(() => null);\n if (value === null) continue;\n scanned += 1;\n const text = typeof value === \"string\"\n ? value\n : value instanceof Blob\n ? await value.text()\n : JSON.stringify(value);\n if (text.includes(secret)) matches.push(key);\n }\n const result = {\n scanner: \"SERVER_SIDE_EXACT_SECRET_COMPARISON_V1\",\n generated_artifacts_scanned: scanned,\n real_runtime_secret_found: matches.length > 0,\n matching_artifacts: matches,\n source_review: \"Runtime source uses server-side env lookup; no literal credential was introduced.\",\n expected_identifier_references_allowed: true,\n secretExposed: false,\n result: matches.length === 0 ? \"PASS\" : \"FAIL\",\n scannedAt: new Date().toISOString(),\n };\n await blob.setJSON(\"evidence/execution-bridge/secret-scan.json\", result);\n return result;\n}\nexport default main;\nif (isMain(import.meta.url)) await main();\n",[239],"a9029950-1ae5-410a-88bc-2f384c0652f3","execution_bridge_finalize_concurrency_test.ts","d550a746-a319-11f1-9eed-1607ee4eb77e",101,["D",1787946677336],"import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { isMain } from \"https://esm.town/v/std/utils/index.ts\";\nimport { bridgeRequest } from \"./execution_bridge_client.ts\";\n\nconst RESULT_KEY = \"evidence/execution-bridge/finalize-concurrency-live.json\";\n\nasync function main() {\n const ready = await bridgeRequest(\"GET\", \"/execution-bridge/ready?limit=100\", \"QUEUE_READ\");\n const items = ready.ok && Array.isArray(ready.body.items) ? ready.body.items as Record[] : [];\n const candidate = items.find((item) =>\n item.task_type === \"RESEARCH_CRM\" &&\n Number(item.queue_item_id) !== 721 &&\n (item.sanitized_task_payload as Record | undefined)?.prompt_injection_detected === false\n );\n if (!candidate) {\n const result = { exactlyOneFinalize: false, skipped: true, reason: \"NO_SAFE_READY_ITEM\", secretExposed: false, recordedAt: new Date().toISOString() };\n await blob.setJSON(RESULT_KEY, result);\n return result;\n }\n const claimed = await bridgeRequest(\"POST\", \"/execution-bridge/claim\", \"QUEUE_CLAIM\", {\n queue_item_id: Number(candidate.queue_item_id),\n lease_seconds: 300,\n });\n const claim = claimed.body.claim as Record | undefined;\n if (!claimed.ok || !claim) {\n const result = { exactlyOneFinalize: false, skipped: true, reason: \"CLAIM_FAILED\", claimStatus: claimed.status, secretExposed: false, recordedAt: new Date().toISOString() };\n await blob.setJSON(RESULT_KEY, result);\n return result;\n }\n const claimId = String(claim.claim_id);\n const releases = await Promise.all([\n bridgeRequest(\"POST\", \"/execution-bridge/release\", \"QUEUE_RELEASE\", {\n claim_id: claimId,\n request_id: \"req-finalize-race-a-\" + String(candidate.queue_item_id),\n reason: \"CONCURRENCY_TEST_RELEASE\",\n }),\n bridgeRequest(\"POST\", \"/execution-bridge/release\", \"QUEUE_RELEASE\", {\n claim_id: claimId,\n request_id: \"req-finalize-race-b-\" + String(candidate.queue_item_id),\n reason: \"CONCURRENCY_TEST_RELEASE\",\n }),\n ]);\n const winners = releases.filter((response) => response.ok && response.body.updated === true);\n const result = {\n exactlyOneFinalize: winners.length === 1,\n queue_item_id: Number(candidate.queue_item_id),\n claim_id: claimId,\n statuses: releases.map((response) => ({ status: response.status, updated: response.body.updated === true, error: response.body.error ?? null })),\n resulting_state: winners[0]?.body.state ?? null,\n agent_progress_updated: winners[0]?.body.agent_progress_updated ?? null,\n secretExposed: false,\n recordedAt: new Date().toISOString(),\n };\n await blob.setJSON(RESULT_KEY, result);\n return result;\n}\nexport default main;\nif (isMain(import.meta.url)) await main();\n",[246],"b9b3d9b5-6161-4215-a36e-c36f80939825","execution_bridge_concurrency_test.ts","8b53b876-a2d4-11f1-bcfa-1607ee4eb77e",75,["D",1787916917938],"import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { isMain } from \"https://esm.town/v/std/utils/index.ts\";\nimport { bridgeRequest } from \"./execution_bridge_client.ts\";\n\nconst RESULT_KEY = \"evidence/execution-bridge/concurrency-live.json\";\n\nasync function main() {\n const ready = await bridgeRequest(\"GET\", \"/execution-bridge/ready?limit=100\", \"QUEUE_READ\");\n const items = ready.ok && Array.isArray(ready.body.items) ? ready.body.items as Record[] : [];\n const candidate = items.find((item) =>\n item.task_type === \"RESEARCH_CRM\" &&\n (item.sanitized_task_payload as Record | undefined)?.prompt_injection_detected === false\n );\n if (!candidate) {\n const result = { exactlyOneClaim: false, skipped: true, reason: \"NO_ELIGIBLE_RESEARCH_CRM_ITEM\", readyCount: items.length, secretExposed: false, recordedAt: new Date().toISOString() };\n await blob.setJSON(RESULT_KEY, result);\n return result;\n }\n\n const payload = { queue_item_id: Number(candidate.queue_item_id), lease_seconds: 900 };\n const attempts = await Promise.all([\n bridgeRequest(\"POST\", \"/execution-bridge/claim\", \"QUEUE_CLAIM\", payload),\n bridgeRequest(\"POST\", \"/execution-bridge/claim\", \"QUEUE_CLAIM\", payload),\n ]);\n const winners = attempts.filter((attempt) => attempt.ok && attempt.body.claimed === true);\n const result = {\n exactlyOneClaim: winners.length === 1,\n skipped: false,\n queueItem: candidate,\n attemptStatuses: attempts.map((attempt) => ({ status: attempt.status, claimed: attempt.body.claimed === true, error: attempt.body.error ?? null })),\n winner: winners[0]?.body ?? null,\n secretExposed: false,\n recordedAt: new Date().toISOString(),\n };\n await blob.setJSON(RESULT_KEY, result);\n return result;\n}\nexport default main;\nif (isMain(import.meta.url)) await main();\n",[253],"485bef00-092f-48ca-aac9-9bed7d3e9979","execution_bridge_client.ts","6a00e87e-a2d4-11f1-b06e-1607ee4eb77e",79,["D",1787917158058],"const BRIDGE_ENDPOINT = \"https://oromaskevic23--4ca6bf4aa2ae11f1a3f01607ee4eb77e.web.val.run\";\nconst SERVICE_ID = \"VAL_TOWN_CODEX_CONNECTOR\";\nconst CAPABILITIES = new Set([\"QUEUE_READ\",\"QUEUE_CLAIM\",\"QUEUE_COMPLETE\",\"QUEUE_FAIL\",\"QUEUE_RELEASE\",\"QUEUE_AUDIT_READ\"]);\n\nexport type BridgeCapability = \"QUEUE_READ\"|\"QUEUE_CLAIM\"|\"QUEUE_COMPLETE\"|\"QUEUE_FAIL\"|\"QUEUE_RELEASE\"|\"QUEUE_AUDIT_READ\";\nexport type BridgeResponse = { ok: boolean; status: number; body: Record };\n\nfunction secret(): string {\n const value = Deno.env.get(\"EXECUTION_APPROVAL_TOKEN\");\n if (!value) throw new Error(\"SERVER_AUTH_UNAVAILABLE\");\n return value;\n}\nfunction utf8(value: string): Uint8Array { return new TextEncoder().encode(value); }\nasync function sha256(value: string): Promise {\n const digest = await crypto.subtle.digest(\"SHA-256\", utf8(value));\n return \"sha256:\" + [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\nasync function hmac(value: string): Promise {\n const key = await crypto.subtle.importKey(\"raw\", utf8(secret()), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n const signature = await crypto.subtle.sign(\"HMAC\", key, utf8(value));\n return [...new Uint8Array(signature)].map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction nonce(): string { return crypto.randomUUID().replaceAll(\"-\", \"\") + crypto.randomUUID().slice(0, 8); }\n\nexport async function bridgeRequest(\n method: \"GET\"|\"POST\",\n path: string,\n capability: BridgeCapability,\n payload: Record|null = null,\n testOverride: { timestamp?: string; nonce?: string; signature?: string } = {},\n): Promise {\n if (!CAPABILITIES.has(capability)) throw new Error(\"CAPABILITY_NOT_ALLOWED\");\n if (!path.startsWith(\"/execution-bridge/\")) throw new Error(\"PATH_NOT_ALLOWED\");\n const body = payload === null ? \"\" : JSON.stringify(payload);\n const timestamp = testOverride.timestamp ?? new Date().toISOString();\n const requestNonce = testOverride.nonce ?? nonce();\n const canonical = [method,path,timestamp,requestNonce,SERVICE_ID,capability,await sha256(body)].join(\"\\n\");\n const signature = testOverride.signature ?? await hmac(canonical);\n const controller = new AbortController();\n const timeout = setTimeout(() => controller.abort(), 25_000);\n try {\n const response = await fetch(BRIDGE_ENDPOINT + path, {\n method,\n headers: {\n \"content-type\": \"application/json\",\n \"x-imperial-service-id\": SERVICE_ID,\n \"x-imperial-capability\": capability,\n \"x-imperial-timestamp\": timestamp,\n \"x-imperial-nonce\": requestNonce,\n \"x-imperial-signature\": signature,\n },\n body: method === \"POST\" ? body : undefined,\n signal: controller.signal,\n });\n const text = await response.text();\n let parsed: Record;\n try { parsed = JSON.parse(text); } catch { parsed = { error: \"NON_JSON_BRIDGE_RESPONSE\" }; }\n return { ok: response.ok, status: response.status, body: parsed };\n } finally {\n clearTimeout(timeout);\n }\n}\n\nexport default async function () {\n return {\n service_id: SERVICE_ID,\n transport: \"SERVER_SIDE_SCOPED_HMAC\",\n secret_configured: Boolean(Deno.env.get(\"EXECUTION_APPROVAL_TOKEN\")),\n secret_exposed: false,\n capabilities: [...CAPABILITIES],\n };\n}\n",[260],"03008c36-dedf-498a-a223-da7054aa261d","execution_bridge_audit_verify.ts","f82a3c78-a319-11f1-a403-1607ee4eb77e",102,["D",1787946735811],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { isMain } from \"https://esm.town/v/std/utils/index.ts\";\n\nconst PASSPORT_ID = \"AI-PASSPORT-HANTER-EXECUTION-CONNECTOR-001\";\nfunction utf8(value: string): Uint8Array { return new TextEncoder().encode(value); }\nasync function sha256(value: string): Promise {\n const digest = await crypto.subtle.digest(\"SHA-256\", utf8(value));\n return \"sha256:\" + [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\nasync function hmac(value: string): Promise {\n const secret = Deno.env.get(\"EXECUTION_APPROVAL_TOKEN\");\n if (!secret) throw new Error(\"SERVER_AUTH_UNAVAILABLE\");\n const key = await crypto.subtle.importKey(\"raw\", utf8(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n const signature = await crypto.subtle.sign(\"HMAC\", key, utf8(value));\n return [...new Uint8Array(signature)].map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction equal(left: string, right: string): boolean {\n if (left.length !== right.length) return false;\n let result = 0;\n for (let index = 0; index < left.length; index += 1) result |= left.charCodeAt(index) ^ right.charCodeAt(index);\n return result === 0;\n}\n\nasync function main() {\n const eventsResult = await sqlite.execute(`SELECT event_id,event_type,timestamp,queue_item_id,claim_id,request_id,\n service_id,passport_id,agent_id,orchestrator_id,runtime_domain,authorization_decision_id,\n previous_state,new_state,result,reason_code,evidence_ref,evidence_sha256,event_hash,event_signature\n FROM execution_bridge_audit WHERE queue_item_id=721 ORDER BY id`);\n const events = [];\n let signaturesValid = true;\n for (const row of eventsResult.rows as Record[]) {\n const material = [\n row.event_id,row.event_type,row.timestamp,row.queue_item_id,row.claim_id,row.request_id,\n row.service_id,PASSPORT_ID,row.agent_id,row.orchestrator_id,row.runtime_domain,\n row.authorization_decision_id,row.previous_state,row.new_state,row.result,row.reason_code,\n row.evidence_ref,row.evidence_sha256,\n ];\n const hashValid = equal(String(row.event_hash), await sha256(JSON.stringify(material)));\n const signatureValid = equal(String(row.event_signature), await hmac(String(row.event_hash)));\n signaturesValid = signaturesValid && hashValid && signatureValid;\n const { event_signature: _signature, ...safe } = row;\n events.push({ ...safe, hash_valid: hashValid, signature_valid: signatureValid });\n }\n const state = await sqlite.execute(`SELECT q.id,q.agent_id,q.execution_state,q.evidence_ref,q.completion_request_id,\n p.stage_index,p.evidence_count,p.last_evidence_ref,p.last_advanced_at\n FROM execution_queue q JOIN agent_progress p ON p.agent_id=q.agent_id WHERE q.id=721`);\n const triggers = await sqlite.execute(`SELECT name FROM sqlite_master WHERE type='trigger'\n AND name IN ('execution_bridge_audit_no_update','execution_bridge_audit_no_delete') ORDER BY name`);\n const result = {\n schema: \"IMPERIAL_EXECUTION_BRIDGE_AUDIT_VERIFICATION_V1\",\n queue_item_id: 721,\n event_count: events.length,\n event_types: events.map((event) => event.event_type),\n event_hashes_and_signatures_valid: signaturesValid,\n append_only_triggers_present: triggers.rows.length === 2,\n state: state.rows[0] ?? null,\n events,\n secretExposed: false,\n verifiedAt: new Date().toISOString(),\n };\n await blob.setJSON(\"evidence/execution-bridge/audit-events.json\", result);\n return result;\n}\nexport default main;\nif (isMain(import.meta.url)) await main();\n",[267],"6d17a845-dd84-4cce-9627-163266a1cd9b",["D",1787947047706],16,[28],"42700934-55e0-4c7c-b1d7-3ebff410c5a4","controlled_batch_status.ts","d4f57504-a2da-11f1-b21e-1607ee4eb77e",88,["D",1787919618438],"import { bridgeRequest } from \"./execution_bridge_client.ts\";\n\nexport default async function () {\n const ids = [504,511,527,540,553,566,579,591];\n const path = `/execution-bridge/audit?queue_item_ids=${ids.join(\",\")}&limit=200`;\n const r = await bridgeRequest(\"GET\",path,\"QUEUE_AUDIT_READ\");\n console.log(JSON.stringify({ok:r.ok,status:r.status,ids,body:r.body}));\n return r;\n}\n",[278],"a94eeb6e-8e32-48a7-936c-eb61cccbd755","connector_queue_reconcile.ts","1a74a380-a2d5-11f1-8579-1607ee4eb77e",80,["D",1787917409813],"import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { isMain } from \"https://esm.town/v/std/utils/index.ts\";\nimport { bridgeRequest } from \"./execution_bridge_client.ts\";\n\nconst COMMAND_KEY = \"connector/reconcile-command.json\";\nconst RESULT_KEY = \"connector/queue-reconciliation.json\";\n\nasync function main() {\n const command = await blob.getJSON(COMMAND_KEY).catch(() => null) as {queue_item_ids?:unknown; limit?:unknown}|null;\n const ids = Array.isArray(command?.queue_item_ids)\n ? [...new Set(command.queue_item_ids.map(Number).filter((id)=>Number.isInteger(id) && id > 0))]\n : [];\n const limitRaw = Number(command?.limit ?? 100);\n const limit = Number.isInteger(limitRaw) ? Math.min(200, Math.max(1, limitRaw)) : 100;\n if (!ids.length || ids.length > 20) throw new Error(\"VALID_RECONCILE_QUEUE_ITEM_IDS_REQUIRED\");\n const path = `/execution-bridge/audit?queue_item_ids=${ids.join(\",\")}&limit=${limit}`;\n const response = await bridgeRequest(\"GET\", path, \"QUEUE_AUDIT_READ\");\n const result = {\n bridge: \"CONNECTOR_QUEUE_RECONCILE_v2\",\n ok: response.ok,\n status: response.status,\n secretExposed: false,\n requestedQueueItemIds: ids,\n body: response.body,\n recordedAt: new Date().toISOString(),\n };\n await blob.setJSON(RESULT_KEY, result);\n return result;\n}\n\nexport default main;\nif (isMain(import.meta.url)) await main();\n",[285],"38b21535-1d7c-430b-9d79-e809a5e431eb","connector_queue_read.ts","8704a6d4-a2d1-11f1-8b6a-1607ee4eb77e",74,["D",1787916917422],"import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { isMain } from \"https://esm.town/v/std/utils/index.ts\";\nimport { bridgeRequest } from \"./execution_bridge_client.ts\";\n\nconst RESULT_KEY = \"connector/queue-ready-v3.json\";\n\nasync function main() {\n const response = await bridgeRequest(\"GET\", \"/execution-bridge/ready?limit=100\", \"QUEUE_READ\");\n const items = response.ok && Array.isArray(response.body.items) ? response.body.items : [];\n const result = {\n bridge: \"CONNECTOR_QUEUE_READ_v3\",\n ok: response.ok,\n status: response.status,\n serviceIdentity: response.body.caller ?? \"VAL_TOWN_CODEX_CONNECTOR\",\n passportId: response.body.passport_id ?? null,\n secretExposed: false,\n readyCount: items.length,\n items,\n error: response.ok ? undefined : response.body.error,\n recordedAt: new Date().toISOString(),\n };\n await blob.setJSON(RESULT_KEY, result);\n return result;\n}\nexport default main;\nif (isMain(import.meta.url)) await main();\n",[292],"e0fa8ebb-ad2e-4249-92fe-7a4c013e7c21","connector_queue_finalize.ts","8a5fe9a8-a2d4-11f1-88be-1607ee4eb77e",72,["D",1787916916334],"import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { isMain } from \"https://esm.town/v/std/utils/index.ts\";\nimport { bridgeRequest, type BridgeCapability } from \"./execution_bridge_client.ts\";\n\nconst COMMAND_KEY = \"connector/finalize-command.json\";\nconst RESULT_KEY = \"connector/finalize-result.json\";\nconst OPERATIONS = {\n COMPLETE: [\"/execution-bridge/complete\", \"QUEUE_COMPLETE\"],\n FAIL: [\"/execution-bridge/fail\", \"QUEUE_FAIL\"],\n RELEASE: [\"/execution-bridge/release\", \"QUEUE_RELEASE\"],\n} as const;\n\nasync function main() {\n const command = await blob.getJSON(COMMAND_KEY).catch(() => null) as Record | null;\n const operation = String(command?.operation ?? \"\");\n const route = OPERATIONS[operation as keyof typeof OPERATIONS];\n if (!command || !route) {\n const result = { bridge: \"CONNECTOR_QUEUE_FINALIZE_v1\", ok: false, error: \"VALID_FINALIZE_COMMAND_REQUIRED\", secretExposed: false, recordedAt: new Date().toISOString() };\n await blob.setJSON(RESULT_KEY, result);\n return result;\n }\n const { operation: _ignored, ...payload } = command;\n const response = await bridgeRequest(\"POST\", route[0], route[1] as BridgeCapability, payload);\n const result = {\n bridge: \"CONNECTOR_QUEUE_FINALIZE_v1\",\n ok: response.ok,\n status: response.status,\n operation,\n result: response.body,\n secretExposed: false,\n recordedAt: new Date().toISOString(),\n };\n await blob.setJSON(RESULT_KEY, result);\n return result;\n}\nexport default main;\nif (isMain(import.meta.url)) await main();\n",[299],"088bc5c8-8f3b-4ee6-a6a5-dd8ac17f1cf4","connector_queue_complete_501.ts","538e598e-a2d2-11f1-950b-1607ee4eb77e",78,["D",1787916997313],"// Historical one-off helper for queue item 501.\n// Disabled permanently after successful historical use and execution_bridge v2.0.0 migration.\n// Evidence remains in project blob storage; this file must never replay completion.\nexport default function () {\n throw new Error(\"HISTORICAL_QUEUE_501_HELPER_DISABLED_NO_REPLAY\");\n}\n",[306],"9625949e-6175-4c2b-89d1-3f226b4fe429","connector_queue_complete.ts","4ca9f6b4-a2d2-11f1-9bd5-1607ee4eb77e",77,["D",1787916988126],"// Legacy bearer completion adapter. Disabled after execution_bridge v2.0.0.\n// Use connector_queue_finalize.ts with an explicit connector/finalize-command.json command.\nexport default function () {\n throw new Error(\"LEGACY_BEARER_COMPLETION_ADAPTER_DISABLED_USE_SIGNED_FINALIZER\");\n}\n",[313],"8891e8b1-fe22-4ce9-91ff-600bdf885844","connector_queue_claim.ts","8bcf9516-a2d1-11f1-bfbf-1607ee4eb77e",73,["D",1787916916813],"import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { isMain } from \"https://esm.town/v/std/utils/index.ts\";\nimport { bridgeRequest } from \"./execution_bridge_client.ts\";\n\nconst COMMAND_KEY = \"connector/claim-command.json\";\nconst RESULT_KEY = \"connector/queue-claim-v3.json\";\n\nasync function main() {\n const command = await blob.getJSON(COMMAND_KEY).catch(() => null) as Record | null;\n const queueItemId = Number(command?.queue_item_id);\n const leaseSeconds = Number(command?.lease_seconds ?? 900);\n if (!command || !Number.isInteger(queueItemId) || !Number.isInteger(leaseSeconds)) {\n const result = { bridge: \"CONNECTOR_QUEUE_CLAIM_v3\", ok: false, claimed: false, error: \"VALID_CLAIM_COMMAND_REQUIRED\", secretExposed: false, recordedAt: new Date().toISOString() };\n await blob.setJSON(RESULT_KEY, result);\n return result;\n }\n\n const ready = await bridgeRequest(\"GET\", \"/execution-bridge/ready?limit=100\", \"QUEUE_READ\");\n const items = ready.ok && Array.isArray(ready.body.items) ? ready.body.items as Record[] : [];\n const visible = items.some((item) => Number(item.queue_item_id) === queueItemId);\n if (!visible) {\n const result = { bridge: \"CONNECTOR_QUEUE_CLAIM_v3\", ok: false, claimed: false, error: \"ITEM_NOT_IN_AUTHORIZED_READY_VIEW\", secretExposed: false, recordedAt: new Date().toISOString() };\n await blob.setJSON(RESULT_KEY, result);\n return result;\n }\n\n const response = await bridgeRequest(\"POST\", \"/execution-bridge/claim\", \"QUEUE_CLAIM\", {\n queue_item_id: queueItemId,\n lease_seconds: leaseSeconds,\n });\n const result = {\n bridge: \"CONNECTOR_QUEUE_CLAIM_v3\",\n ok: response.ok,\n status: response.status,\n claimed: response.body.claimed === true,\n claim: response.body.claim ?? null,\n error: response.ok ? undefined : response.body.error,\n secretExposed: false,\n recordedAt: new Date().toISOString(),\n };\n await blob.setJSON(RESULT_KEY, result);\n return result;\n}\nexport default main;\nif (isMain(import.meta.url)) await main();\n",[320],"7883de2a-0e4c-4f22-937b-770ef9637711","connector_completion_request.ts","43cbdbe8-a2d2-11f1-9a33-1607ee4eb77e",82,["D",1787918796895],"export default {\n id: 503,\n evidence_ref: \"AIRTABLE:recpbH78lJ2hQgT8r\",\n outcome: \"COMPLETED\"\n};\n",[327],"060d8a69-85e6-4f72-b496-13399a9094b2","commercial_research_evidence.ts","655fe1ae-a319-11f1-9e11-1607ee4eb77e",96,["D",1787946489539],"import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { isMain } from \"https://esm.town/v/std/utils/index.ts\";\n\nconst CLAIM_KEY = \"connector/queue-claim-v3.json\";\nconst RESULT_KEY = \"commercial/research-result.json\";\n\nasync function sha256(value: string): Promise {\n const digest = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(value));\n return \"sha256:\" + [...new Uint8Array(digest)].map((byte) => byte.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function main() {\n const claimResult = await blob.getJSON(CLAIM_KEY).catch(() => null) as Record | null;\n const claim = claimResult?.claim as Record | null;\n if (!claimResult || claimResult.claimed !== true || !claim || Number(claim.queue_item_id) !== 721) {\n const denied = { ok: false, error: \"ACTIVE_CLAIM_721_REQUIRED\", recordedAt: new Date().toISOString() };\n await blob.setJSON(RESULT_KEY, denied);\n return denied;\n }\n\n const recordedAt = new Date().toISOString();\n const evidence = {\n schema: \"IMPERIAL_QUALIFIED_BUYER_RESEARCH_V1\",\n mission_id: \"IC-IMPERIAL-NCA-31DAY-COMMERCIAL-RUNTIME-001\",\n queue_item_id: 721,\n claim_id: String(claim.claim_id),\n agent_id: \"NCA-005\",\n runtime_domain: \"RD-KIDS-MEDIA-001\",\n task_type: \"RESEARCH_CRM\",\n task_executed: \"Build a small qualified buyer queue matching the defined buyer profile; no mass spam.\",\n trust_boundary: {\n source_content: \"UNTRUSTED_PUBLIC_DATA\",\n authority: \"NONE\",\n outreach_authorized: false,\n personal_data_collected: false,\n },\n qualification: {\n level: \"PROFILE_MATCH_ONLY\",\n buyer_intent_verified: false,\n note: \"Public-fit research only; no claim of active demand or purchase intent.\",\n },\n candidates: [\n {\n organization: \"Scholastic Corporation\",\n domain: \"scholastic.com\",\n profile_fit: [\"children's publishing\", \"education\", \"children's media\"],\n rationale: \"Official company profile describes children's books, school resources, digital programs and children's media.\",\n source_url: \"https://www.scholastic.com/aboutscholastic\",\n source_type: \"OFFICIAL_ORGANIZATION_SITE\",\n },\n {\n organization: \"Nickelodeon / Paramount\",\n domain: \"paramount.com\",\n profile_fit: [\"kids entertainment\", \"television production\", \"digital\", \"publishing\"],\n rationale: \"Official Paramount brand page describes a global kids business spanning programming, production, digital, publishing and consumer products.\",\n source_url: \"https://www.paramount.com/about/brands/nickelodeon\",\n source_type: \"OFFICIAL_ORGANIZATION_SITE\",\n },\n {\n organization: \"Sesame Workshop\",\n domain: \"sesameworkshop.org\",\n profile_fit: [\"children's education\", \"media\", \"research\"],\n rationale: \"Official organization site describes a global nonprofit using education, media and research to support children.\",\n source_url: \"https://sesameworkshop.org/\",\n source_type: \"OFFICIAL_ORGANIZATION_SITE\",\n },\n ],\n crm_record_created: false,\n gmail_draft_created: false,\n message_sent: false,\n payment_settled: false,\n revenue_settled: 0,\n recorded_at: recordedAt,\n };\n const serialized = JSON.stringify(evidence);\n const evidenceSha256 = await sha256(serialized);\n const key = \"evidence/commercial/queue-item-721.json\";\n await blob.set(key, serialized);\n const result = {\n ok: true,\n queue_item_id: 721,\n claim_id: String(claim.claim_id),\n evidence_key: key,\n evidence_ref: \"urn:evidence:val-town:commercial:queue-item-721\",\n evidence_sha256: evidenceSha256,\n candidate_count: evidence.candidates.length,\n crm_records_created: 0,\n gmail_drafts_created: 0,\n gmail_messages_sent: 0,\n payments_settled: 0,\n revenue_settled: 0,\n recordedAt,\n };\n await blob.setJSON(RESULT_KEY, result);\n return result;\n}\nexport default main;\nif (isMain(import.meta.url)) await main();\n",[334],"3f671100-960a-47a9-ab5b-feea492bd1bf","codex_netlify_handoff.ts","c2397f5a-a2da-11f1-9582-1607ee4eb77e",91,["D",1787919794660],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nasync function main() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS codex_assist_queue (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n agent_id TEXT NOT NULL,\n mission_stage TEXT NOT NULL,\n task_type TEXT NOT NULL,\n objective TEXT NOT NULL,\n context TEXT,\n acceptance_criteria TEXT NOT NULL,\n state TEXT NOT NULL DEFAULT 'QUEUED_PLUS_HANDOFF',\n created_at TEXT NOT NULL,\n started_at TEXT,\n completed_at TEXT,\n result_ref TEXT,\n result_text TEXT,\n error TEXT\n )`);\n const now = new Date().toISOString();\n const objective = \"Repair and deploy HANTER bridge node #2 to the existing Netlify site hanter-bridge-node-2 without creating a new site. Preserve keyless-transport, side-effects-denied, authority-none behavior and expose a public /health endpoint returning HTTP 200.\";\n const context = \"Existing Netlify site_id: 7a998b62-9d9f-4114-b3c8-e1001ef56d77. Current primary and branch /health URLs return 404. Netlify connector can generate deployment command but source upload/build transport did not complete in this ChatGPT execution environment. Provider #1 Val Town is live; Provider #3 Supabase is live. Do not claim 3-provider diversity until Netlify independently returns 200.\";\n const acceptance = \"Use the existing site only; create minimal source if necessary; deploy; verify /health over public Netlify URL with HTTP 200; response must identify node hanter-bridge-node-2, provider netlify, mode keyless-transport, side_effects denied, authority none; no secrets in code/logs/output; record exact deploy ID, public URL, HTTP status, test output, blockers, and commit/source evidence. Do not fabricate PASS.\";\n const existing = await sqlite.execute({sql:`SELECT id,state FROM codex_assist_queue WHERE agent_id='HANTER' AND mission_stage='PROVIDER_NETLIFY_RECOVERY' AND objective=? AND state IN ('QUEUED_PLUS_HANDOFF','HANDOFF_RUNNING','COMPLETED') ORDER BY id DESC LIMIT 1`,args:[objective]});\n if (existing.rows.length) return {queued:false,existing:existing.rows[0]};\n const result = await sqlite.execute({sql:`INSERT INTO codex_assist_queue(agent_id,mission_stage,task_type,objective,context,acceptance_criteria,state,created_at) VALUES(?,?,?,?,?,?,?,?)`,args:['HANTER','PROVIDER_NETLIFY_RECOVERY','INFRASTRUCTURE_DEPLOYMENT',objective,context,acceptance,'QUEUED_PLUS_HANDOFF',now]});\n return {queued:true,id:Number(result.lastInsertRowid),state:'QUEUED_PLUS_HANDOFF',created_at:now};\n}\n\nexport default main;\nif (import.meta.main) console.log(JSON.stringify(await main()));\n",[341],"31be2612-1a41-43ef-aa20-738544e372a4","codex_handoff_status.ts","2992a190-a2db-11f1-9ae4-1607ee4eb77e",89,["D",1787919760368],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nexport default async function(req: Request) {\n if (req.method !== \"GET\") return Response.json({error:\"METHOD_NOT_ALLOWED\"},{status:405});\n const r = await sqlite.execute(`SELECT id,state,created_at FROM codex_assist_queue WHERE agent_id='HANTER' AND mission_stage='PROVIDER_NETLIFY_RECOVERY' ORDER BY id DESC LIMIT 1`);\n return Response.json({service:\"IMPERIAL Codex Handoff Status\",netlifyRecovery:r.rows[0] ?? null,authority:\"ASSIST_ONLY_NO_INDEPENDENT_AUTHORITY\"},{headers:{\"cache-control\":\"no-store\"}});\n}\n",[348],"60374907-bd57-4045-b4c6-9641815f2aea","codex_bridge.ts","2494efb0-a2b1-11f1-a91a-1607ee4eb77e",38,["D",1787902943902],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TOKEN = Deno.env.get(\"EXECUTION_APPROVAL_TOKEN\");\nconst MODE = \"CHATGPT_CODEX_PLUS_ONLY\";\n\nfunction auth(req: Request) {\n return Boolean(TOKEN && req.headers.get(\"authorization\") === `Bearer ${TOKEN}`);\n}\n\nasync function ensure() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS codex_assist_queue (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n agent_id TEXT NOT NULL,\n mission_stage TEXT NOT NULL,\n task_type TEXT NOT NULL,\n objective TEXT NOT NULL,\n context TEXT,\n acceptance_criteria TEXT NOT NULL,\n state TEXT NOT NULL DEFAULT 'QUEUED_PLUS_HANDOFF',\n created_at TEXT NOT NULL,\n started_at TEXT,\n completed_at TEXT,\n result_ref TEXT,\n result_text TEXT,\n error TEXT\n )`);\n}\n\nexport default async function(req: Request): Promise {\n await ensure();\n const url = new URL(req.url);\n\n if (req.method === \"GET\" && url.pathname === \"/status\") {\n const q = await sqlite.execute(`SELECT state,COUNT(*) AS n FROM codex_assist_queue GROUP BY state ORDER BY state`);\n return Response.json({\n layer:\"IMPERIAL_CODEX_ASSIST_v2\",\n mode:MODE,\n profiles:100,\n externalOpenAIApi:false,\n apiBillingAllowed:false,\n automaticPaidApiCalls:false,\n authority:\"ASSIST_ONLY_NO_INDEPENDENT_AUTHORITY\",\n execution:\"USE_CODEX_INCLUDED_WITH_CHATGPT_PLAN; EXTERNAL_RUNTIME_ONLY_PREPARES_HANDOFF_TASKS\",\n queue:q.rows\n });\n }\n\n if (!auth(req)) return Response.json({error:\"UNAUTHORIZED\"},{status:401});\n\n if (req.method === \"POST\" && url.pathname === \"/enqueue\") {\n const b = await req.json().catch(()=>null) as any;\n const agentId = String(b?.agent_id ?? \"\");\n const taskType = String(b?.task_type ?? \"\");\n const objective = String(b?.objective ?? \"\");\n const stage = String(b?.mission_stage ?? \"UNKNOWN\");\n const context = String(b?.context ?? \"\");\n const acceptance = String(b?.acceptance_criteria ?? \"\");\n if (!agentId || !taskType || !objective || !acceptance) return Response.json({error:\"REQUIRED_FIELDS_MISSING\"},{status:400});\n const p = await sqlite.execute({sql:`SELECT enabled FROM codex_assist_profile WHERE agent_id=?`,args:[agentId]});\n if (!p.rows.length || Number((p.rows[0] as any).enabled)!==1) return Response.json({error:\"CODEX_NOT_ENABLED_FOR_AGENT\"},{status:403});\n const now = new Date().toISOString();\n const r = await sqlite.execute({sql:`INSERT INTO codex_assist_queue(agent_id,mission_stage,task_type,objective,context,acceptance_criteria,state,created_at) VALUES(?,?,?,?,?,?,?,?)`,args:[agentId,stage,taskType,objective,context,acceptance,\"QUEUED_PLUS_HANDOFF\",now]});\n return Response.json({queued:true,id:Number(r.lastInsertRowid),mode:MODE});\n }\n\n if (url.pathname === \"/run-next\") {\n return Response.json({error:\"EXTERNAL_API_DISABLED_PLUS_ONLY\",mode:MODE,paidApiCalls:false},{status:403});\n }\n\n if (req.method === \"GET\" && url.pathname === \"/result\") {\n const id = Number(url.searchParams.get(\"id\"));\n if (!Number.isInteger(id)) return Response.json({error:\"INVALID_ID\"},{status:400});\n const r = await sqlite.execute({sql:`SELECT id,agent_id,state,result_ref,result_text,error,completed_at FROM codex_assist_queue WHERE id=?`,args:[id]});\n return Response.json(r.rows[0] ?? {error:\"NOT_FOUND\"},{status:r.rows.length?200:404});\n }\n\n return Response.json({error:\"NOT_FOUND\"},{status:404});\n}\n",[355],"a76204f7-d5aa-4bbc-92b8-b91aa86263dd","evidence","fcfc8d36-342d-43c8-9760-4cc08405354a",105,["D",1787946832190],"directory",[362],"pulls","branches","forks","envVars",{"_375":172,"_377":63},"connections",{"_375":63,"_376":63},"count","unfilledCount","emptyCount",{"_43":361,"_32":362,"_30":363,"_162":-5,"_41":42,"_40":364,"_164":59,"_38":516,"_13":63,"_33":366,"_35":-5,"_24":25,"_167":-5,"_411":517,"_27":518},{"_43":512,"_32":504,"_30":498,"_162":363,"_41":42,"_40":364,"_164":59,"_38":513,"_13":63,"_33":366,"_35":-5,"_24":25,"_167":-5,"_411":514,"_27":515},{"_43":505,"_32":506,"_30":507,"_162":498,"_41":42,"_40":364,"_164":59,"_38":508,"_13":63,"_33":20,"_35":509,"_24":25,"_167":-5,"_411":510,"_27":511},{"_43":495,"_32":496,"_30":497,"_162":498,"_41":42,"_40":499,"_164":59,"_38":500,"_13":63,"_33":20,"_35":501,"_24":25,"_167":-5,"_411":502,"_27":503},{"_43":354,"_32":355,"_30":356,"_162":-5,"_41":42,"_40":357,"_164":59,"_38":492,"_13":172,"_33":34,"_35":359,"_24":25,"_167":-5,"_411":493,"_27":494},{"_43":347,"_32":348,"_30":349,"_162":-5,"_41":42,"_40":350,"_164":59,"_38":489,"_13":63,"_33":34,"_35":352,"_24":25,"_167":-5,"_411":490,"_27":491},{"_43":340,"_32":341,"_30":342,"_162":-5,"_41":42,"_40":343,"_164":59,"_38":486,"_13":183,"_33":175,"_35":345,"_24":25,"_167":-5,"_411":487,"_27":488},{"_43":333,"_32":334,"_30":335,"_162":-5,"_41":42,"_40":336,"_164":59,"_38":483,"_13":63,"_33":175,"_35":338,"_24":25,"_167":-5,"_411":484,"_27":485},{"_43":326,"_32":327,"_30":328,"_162":-5,"_41":42,"_40":329,"_164":59,"_38":480,"_13":183,"_33":175,"_35":331,"_24":25,"_167":-5,"_411":481,"_27":482},{"_43":319,"_32":320,"_30":321,"_162":-5,"_41":42,"_40":322,"_164":59,"_38":477,"_13":183,"_33":175,"_35":324,"_24":25,"_167":-5,"_411":478,"_27":479},{"_43":312,"_32":313,"_30":314,"_162":-5,"_41":42,"_40":315,"_164":59,"_38":474,"_13":174,"_33":175,"_35":317,"_24":25,"_167":-5,"_411":475,"_27":476},{"_43":305,"_32":306,"_30":307,"_162":-5,"_41":42,"_40":308,"_164":59,"_38":471,"_13":174,"_33":175,"_35":310,"_24":25,"_167":-5,"_411":472,"_27":473},{"_43":298,"_32":299,"_30":300,"_162":-5,"_41":42,"_40":301,"_164":59,"_38":468,"_13":63,"_33":175,"_35":303,"_24":25,"_167":-5,"_411":469,"_27":470},{"_43":291,"_32":292,"_30":293,"_162":-5,"_41":42,"_40":294,"_164":59,"_38":465,"_13":163,"_33":175,"_35":296,"_24":25,"_167":-5,"_411":466,"_27":467},{"_43":284,"_32":285,"_30":286,"_162":-5,"_41":42,"_40":287,"_164":59,"_38":462,"_13":174,"_33":175,"_35":289,"_24":25,"_167":-5,"_411":463,"_27":464},{"_43":277,"_32":278,"_30":279,"_162":-5,"_41":42,"_40":280,"_164":59,"_38":459,"_13":63,"_33":175,"_35":282,"_24":25,"_167":-5,"_411":460,"_27":461},{"_43":273,"_32":28,"_30":31,"_162":-5,"_41":42,"_40":14,"_164":25,"_38":456,"_13":275,"_33":34,"_35":37,"_24":25,"_167":-5,"_411":457,"_27":458},{"_43":266,"_32":267,"_30":268,"_162":-5,"_41":42,"_40":269,"_164":59,"_38":453,"_13":63,"_33":175,"_35":271,"_24":25,"_167":-5,"_411":454,"_27":455},{"_43":259,"_32":260,"_30":261,"_162":-5,"_41":42,"_40":262,"_164":59,"_38":450,"_13":174,"_33":175,"_35":264,"_24":25,"_167":-5,"_411":451,"_27":452},{"_43":252,"_32":253,"_30":254,"_162":-5,"_41":42,"_40":255,"_164":25,"_38":447,"_13":63,"_33":175,"_35":257,"_24":25,"_167":-5,"_411":448,"_27":449},{"_43":245,"_32":246,"_30":247,"_162":-5,"_41":42,"_40":248,"_164":59,"_38":444,"_13":63,"_33":175,"_35":250,"_24":25,"_167":-5,"_411":445,"_27":446},{"_43":238,"_32":239,"_30":240,"_162":-5,"_41":42,"_40":241,"_164":25,"_38":441,"_13":183,"_33":175,"_35":243,"_24":25,"_167":-5,"_411":442,"_27":443},{"_43":231,"_32":232,"_30":233,"_162":-5,"_41":42,"_40":234,"_164":59,"_38":438,"_13":63,"_33":175,"_35":236,"_24":25,"_167":-5,"_411":439,"_27":440},{"_43":224,"_32":225,"_30":226,"_162":-5,"_41":42,"_40":227,"_164":59,"_38":435,"_13":63,"_33":175,"_35":229,"_24":25,"_167":-5,"_411":436,"_27":437},{"_43":217,"_32":218,"_30":219,"_162":-5,"_41":42,"_40":220,"_164":59,"_38":432,"_13":174,"_33":175,"_35":222,"_24":25,"_167":-5,"_411":433,"_27":434},{"_43":210,"_32":211,"_30":212,"_162":-5,"_41":42,"_40":213,"_164":59,"_38":429,"_13":63,"_33":34,"_35":215,"_24":25,"_167":-5,"_411":430,"_27":431},{"_43":201,"_32":202,"_30":203,"_162":-5,"_41":42,"_40":204,"_164":25,"_38":426,"_13":206,"_33":207,"_35":208,"_24":25,"_167":-5,"_411":427,"_27":428},{"_43":193,"_32":194,"_30":195,"_162":-5,"_41":42,"_40":196,"_164":59,"_38":423,"_13":198,"_33":175,"_35":199,"_24":25,"_167":-5,"_411":424,"_27":425},{"_43":186,"_32":187,"_30":188,"_162":-5,"_41":42,"_40":189,"_164":59,"_38":420,"_13":63,"_33":34,"_35":191,"_24":25,"_167":-5,"_411":421,"_27":422},{"_43":178,"_32":179,"_30":180,"_162":-5,"_41":42,"_40":181,"_164":59,"_38":417,"_13":183,"_33":34,"_35":184,"_24":25,"_167":-5,"_411":418,"_27":419},{"_43":169,"_32":170,"_30":171,"_162":-5,"_41":42,"_40":172,"_164":59,"_38":414,"_13":174,"_33":175,"_35":176,"_24":25,"_167":-5,"_411":415,"_27":416},{"_43":160,"_32":161,"_30":57,"_162":-5,"_41":42,"_40":163,"_164":59,"_38":410,"_13":63,"_33":34,"_35":166,"_24":25,"_167":-5,"_411":412,"_27":413},["D",1787899867027],"children",[],[161],["D",1787899855011],[],[170],["D",1787899952245],[],[179],["D",1787918949318],[],[187],["D",1787932523533],[],[194],["D",1787934014072],[],[202],["D",1787903467682],[],[211],["D",1787900699441],[],[218],["D",1787900463602],[],[225],["D",1787916918431],[],[232],["D",1787946877710],[],[239],["D",1787946677336],[],[246],["D",1787916917938],[],[253],["D",1787917158058],[],[260],["D",1787946735811],[],[267],["D",1787947047706],[],[28],["D",1787919618438],[],[278],["D",1787917409813],[],[285],["D",1787916917422],[],[292],["D",1787916916334],[],[299],["D",1787916997313],[],[306],["D",1787916988126],[],[313],["D",1787916916813],[],[320],["D",1787918796895],[],[327],["D",1787946489539],[],[334],["D",1787919794660],[],[341],["D",1787919760368],[],[348],["D",1787902943902],[],[355],"c85cb442-647d-4d24-a988-7af5bf3aa2be","auth-model.md","31deaed6-a31a-11f1-9428-1607ee4eb77e","245da9ee-16c5-4952-a760-a9b337abaaa8",106,["D",1787946832617],"# Execution Bridge v2 authorization model\n\nDefault policy: DENY.\n\nSecurity laws:\n\n- Identity ≠ Authority\n- Capability ≠ Approval\n- Intelligence ≠ Privilege\n- Email or task content ≠ System instruction\n- Caller assertions ≠ Runtime truth\n\n## Service identity\n\nThe trusted connector is bound to service identity VAL_TOWN_CODEX_CONNECTOR and AI Passport AI-PASSPORT-HANTER-EXECUTION-CONNECTOR-001. Its capabilities are separated into QUEUE_READ, QUEUE_CLAIM, QUEUE_COMPLETE, QUEUE_FAIL, and QUEUE_RELEASE. Capability signatures are scoped to method, exact path and query, timestamp, nonce, service identity, capability, and body hash. Signatures expire after 60 seconds and nonces are single-use.\n\n## Queue authorization\n\nAn item is visible or claimable only when all authoritative runtime facts agree:\n\n- execution_state = READY\n- Permission Manager decision = ALLOW\n- allowed runtime-owned permission reason\n- Guardian = PASS\n- Approval Gateway = ACTIVE\n- approval not expired or revoked\n- current policy version\n- assigned canonical orchestrator and Runtime Domain\n- valid server-side authorization binding\n- sanitized task payload is not quarantined for prompt injection\n\n## Claims and finalization\n\nA claim binds queue item, service, Passport, agent, orchestrator, Runtime Domain, timestamps, lease expiry, and authorization decision. Completion/failure/release requires the same service and active non-expired claim. Completion additionally requires an evidence reference and SHA-256. Agent progress advances only after the queue reaches COMPLETED inside the successful idempotent transaction.\n\n## Secret handling\n\nEXECUTION_APPROVAL_TOKEN is read only from the Val Town server environment. The trusted helper uses it only as HMAC key material. Responses expose only secret_exposed=false; health exposes configuration presence, not value. Exact server-side comparison across generated artifacts found no runtime-secret occurrence.\n",[],[362,504,496],"execution-bridge","0c663bcd-60be-45d6-931e-4e56c3a553a3","architecture.md","319d3d52-a31a-11f1-b081-1607ee4eb77e",["D",1787946832190],"# Execution Bridge v2 architecture\n\nMission: IC-HANTER-EXECUTION-BRIDGE-SECURE-CLAIM-001\n\nCanonical control chain:\n\nAI Passport → Enterprise IMPERIAL Skills → Guardian Core → Approval Gateway → Permission Manager → Execution Bridge → Runtime Domain → Audit Ledger\n\nHANTER remains the single AI Command Center / Deputy to the Architect and is not a global orchestrator.\n\n## Runtime boundary\n\nThe public HTTP surface is deny-by-default. The legacy queue paths remain protected and are disabled for normal operation. A trusted Val Town script signs short-lived capability requests with an HMAC derived from the server-side runtime secret. The raw secret is never returned in a response, blob, audit event, log, connector command, or client configuration.\n\nGoverned operations:\n\n- GET /execution-bridge/ready — filtered authorized READY view.\n- POST /execution-bridge/claim — atomic READY → CLAIMED with claimant and lease binding.\n- POST /execution-bridge/complete — evidence-gated CLAIMED → COMPLETED; progress advances only in the same successful transaction.\n- POST /execution-bridge/fail — evidence-gated CLAIMED → FAILED.\n- POST /execution-bridge/release — retriable CLAIMED → READY.\n- GET /health and GET /readiness — non-secret operational state.\n\n## Atomicity and replay\n\nClaims use a transaction, a partial unique index allowing one ACTIVE claim per queue item, compare-and-set queue updates, and conditional audit insertion. Finalization inserts an idempotency request only while the claim is active, binds all state changes to that request, conditionally inserts audit evidence, and verifies the committed request/state before returning success. Nonces and finalization request IDs are unique.\n\n## Trust boundary\n\nTask text is normalized, bounded to 4096 characters, labeled UNTRUSTED_TASK_DATA with authority NONE, and scanned for prompt-injection patterns. Caller-provided identity, agent, domain, ALLOW, approval, role, or ownership assertions are not accepted by the API.\n\n## Storage\n\nSQLite remains canonical trusted runtime storage. External automation never reads or mutates it directly for production execution. Schema/state diagnostics used during verification were SELECT-only. Audit rows are append-only through no-update/no-delete triggers and carry SHA-256 hashes plus server-side HMAC signatures.\n\n## Rollback\n\n1. Stop invoking the v3 connector scripts.\n2. Keep legacy paths protected; do not re-enable universal bearer use.\n3. Release active retriable claims through the governed release endpoint.\n4. Revert the Val Town file revision to the last known-good v2 revision.\n5. Verify /health, /readiness, unauthenticated 401 behavior, queue state, and audit continuity.\n",[],[362,504,506],"a5e8c192-895f-469e-a973-1bde1859a7c9",["D",1787946832190],[380,381],[362,504],["D",1787946832190],[379],[362],["D",1787871527621],["D",1789526460011],{"_100":99,"_108":104},{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"ctx",{"_82":-5,"_128":557,"_558":559,"_560":561,"_562":25,"_563":25,"_564":25,"_565":59,"_566":-5,"_567":-7,"_568":-7,"_569":63,"_570":25,"_571":25,"_572":-5,"_573":25,"_574":25,"_575":25,"_576":-5},"ENV",{"_528":529,"_530":531,"_532":90,"_533":534,"_535":536,"_537":538,"_539":540,"_541":542,"_543":544,"_545":546,"_547":548,"_549":550,"_551":552,"_553":554,"_555":556},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v113