[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_107":108,"_109":110},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","cleitoncosta","name","currentness-attestor","path","immunefi-first-dollar-watch.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":42,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/cleitoncosta/currentness-attestor/code/immunefi-first-dollar-watch.ts","extension","id","f50b4e99-c04a-42c3-ba53-7efe0ae6b11a","fileId","f8b4e13c-aa96-11f1-a569-1607ee4eb77e","parentId","branchId","85bfc61c-5aa3-47ce-bf09-4994778cb3c8","branchVersion",151,"latest",true,"createdAt",["D",1788770633101],"version",8,"fileType","interval","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\ntype Target = {\n slug: string;\n name: string;\n priority: number;\n baselineMinWebUsd: number;\n baselineMaxWebUsd: number;\n expectedSignals: string[];\n};\n\nconst TARGETS: Target[] = [\n { slug: \"blockpinetwork\", name: \"BlockPI Network\", priority: 1, baselineMinWebUsd: 1000, baselineMaxWebUsd: 5000, expectedSignals: [\"BlockPI\", \"USDC\"] },\n { slug: \"termstructurelabs\", name: \"TermMax\", priority: 2, baselineMinWebUsd: 500, baselineMaxWebUsd: 10000, expectedSignals: [\"TermMax\", \"USDC\"] },\n { slug: \"pancakeswap\", name: \"PancakeSwap\", priority: 3, baselineMinWebUsd: 1500, baselineMaxWebUsd: 7500, expectedSignals: [\"PancakeSwap\"] },\n { slug: \"gmx\", name: \"GMX\", priority: 4, baselineMinWebUsd: 10000, baselineMaxWebUsd: 50000, expectedSignals: [\"GMX\"] },\n { slug: \"lido\", name: \"Lido\", priority: 5, baselineMinWebUsd: 500, baselineMaxWebUsd: 100000, expectedSignals: [\"Lido\"] },\n];\n\nconst BASE = \"https://immunefi.com/bug-bounty\";\nconst UA = \"Mozilla/5.0 (compatible; FirstDollarOpportunityMonitor/1.0; +https://www.val.town/)\";\n\nfunction cleanHtml(html: string): string {\n return html\n .replace(/]*>[\\s\\S]*?<\\/script>/gi, \" \")\n .replace(/]*>[\\s\\S]*?<\\/style>/gi, \" \")\n .replace(/<[^>]+>/g, \" \")\n .replace(/ /gi, \" \")\n .replace(/&/gi, \"&\")\n .replace(/'|'/gi, \"'\")\n .replace(/"/gi, '\"')\n .replace(/\\s+/g, \" \")\n .trim();\n}\n\nasync function sha256(input: string): Promise {\n const bytes = new TextEncoder().encode(input);\n const digest = await crypto.subtle.digest(\"SHA-256\", bytes);\n return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function fetchText(url: string): Promise<{ ok: boolean; status: number; text: string; etag: string | null; error: string | null }> {\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), 12000);\n try {\n const r = await fetch(url, {\n headers: { accept: \"text/html,application/xhtml+xml\", \"user-agent\": UA },\n redirect: \"follow\",\n signal: controller.signal,\n });\n const raw = await r.text();\n return { ok: r.ok, status: r.status, text: cleanHtml(raw), etag: r.headers.get(\"etag\"), error: r.ok ? null : `HTTP ${r.status}` };\n } catch (e) {\n return { ok: false, status: 0, text: \"\", etag: null, error: e instanceof Error ? e.message : String(e) };\n } finally {\n clearTimeout(timer);\n }\n}\n\nfunction extractLastUpdated(text: string): string | null {\n const m = text.match(/Last Updated\\s*([0-3]?\\d\\s+[A-Za-z]+\\s+20\\d{2})/i);\n return m?.[1] ?? null;\n}\n\nfunction extractMoneySignals(text: string): string[] {\n const hits = text.match(/(?:US\\$|\\$)\\s*[0-9][0-9,.]*(?:(?:\\s*)(?:K|M|B)\\b|\\s+(?:million|thousand)\\b)?/gi) ?? [];\n return [...new Set(hits.map((v) => v.replace(/\\s+/g, \"\").toUpperCase()))].sort();\n}\n\nfunction moneyToUsd(value: string): number | null {\n const m = value.replace(/^US\\$/i, \"$\").match(/^\\$([0-9][0-9,.]*)(K|M|B|MILLION|THOUSAND)?$/i);\n if (!m) return null;\n const n = Number(m[1].replace(/,/g, \"\"));\n if (!Number.isFinite(n)) return null;\n const suffix = (m[2] ?? \"\").toUpperCase();\n const mult = suffix === \"K\" || suffix === \"THOUSAND\" ? 1e3 : suffix === \"M\" || suffix === \"MILLION\" ? 1e6 : suffix === \"B\" ? 1e9 : 1;\n return n * mult;\n}\n\nfunction extractMaxBounty(text: string): string | null {\n const direct = text.match(/Max Bounty[^$]{0,80}(?:US\\$|\\$)\\s*([0-9][0-9,.]*(?:(?:\\s*)(?:K|M|B)\\b|\\s+(?:million|thousand)\\b)?)/i);\n if (direct) return \"$\" + direct[1].replace(/\\s+/g, \"\");\n const money = extractMoneySignals(text)\n .map((raw) => ({ raw, usd: moneyToUsd(raw) }))\n .filter((x): x is { raw: string; usd: number } => x.usd !== null)\n .sort((a, b) => b.usd - a.usd);\n return money[0]?.raw ?? null;\n}\n\nfunction extractScopeUrls(text: string): string[] {\n const hits = text.match(/https?:\\/\\/[^\\s)\\]}>'\\\"]+/gi) ?? [];\n return [...new Set(hits.map((v) => v.replace(/[.,;:]+$/g, \"\")).filter((v) => !/immunefi\\.com/i.test(v)))].sort();\n}\n\nfunction detectKyc(text: string): \"not_required\" | \"required\" | \"unverified\" {\n if (/KYC\\s*(?:is\\s*)?not required/i.test(text) || /does not require KYC/i.test(text)) return \"not_required\";\n if (/KYC\\s*(?:is\\s*)?required/i.test(text) || /requires KYC/i.test(text)) return \"required\";\n return \"unverified\";\n}\n\nfunction detectPoc(text: string): \"required\" | \"not_required\" | \"unverified\" {\n if (/PoC[^.]{0,80}(?:always\\s+)?required/i.test(text) || /Proof of Concept[^.]{0,80}required/i.test(text)) return \"required\";\n if (/PoC[^.]{0,80}not required/i.test(text)) return \"not_required\";\n return \"unverified\";\n}\n\nfunction daysSince(dateText: string | null): number | null {\n if (!dateText) return null;\n const t = Date.parse(`${dateText} 00:00:00 UTC`);\n if (!Number.isFinite(t)) return null;\n return Math.max(0, Math.floor((Date.now() - t) / 86400000));\n}\n\nfunction firstDollarScore(target: Target, infoOk: boolean, scopeOk: boolean, kyc: string, lastUpdated: string | null, signalsOk: boolean): number {\n // Preserve the user-approved attack order as the champion baseline. Live signals may\n // adjust confidence, but should not casually reorder it without a material change.\n let score = 200 - target.priority * 30;\n if (infoOk) score += 12;\n if (scopeOk) score += 8;\n if (kyc === \"not_required\") score += 20;\n if (kyc === \"required\") score -= 35;\n if (target.baselineMinWebUsd <= 500) score += 16;\n else if (target.baselineMinWebUsd <= 1000) score += 20;\n else if (target.baselineMinWebUsd <= 1500) score += 10;\n const age = daysSince(lastUpdated);\n if (age !== null && age <= 30) score += 15;\n else if (age !== null && age <= 90) score += 8;\n if (!signalsOk) score -= 25;\n return score;\n}\n\nasync function ensureSchema() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS immunefi_program_watch (\n slug TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n priority INTEGER NOT NULL,\n info_url TEXT NOT NULL,\n scope_url TEXT NOT NULL,\n content_hash TEXT,\n last_updated_text TEXT,\n max_bounty_text TEXT,\n kyc_status TEXT NOT NULL,\n poc_status TEXT NOT NULL,\n baseline_min_web_usd REAL NOT NULL,\n baseline_max_web_usd REAL NOT NULL,\n first_dollar_score INTEGER NOT NULL,\n signals_ok INTEGER NOT NULL,\n info_http_status INTEGER NOT NULL,\n scope_http_status INTEGER NOT NULL,\n first_seen_at TEXT NOT NULL,\n last_seen_at TEXT NOT NULL,\n last_changed_at TEXT NOT NULL,\n change_count INTEGER NOT NULL DEFAULT 0,\n last_error TEXT\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS immunefi_program_changes (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n slug TEXT NOT NULL,\n detected_at TEXT NOT NULL,\n previous_hash TEXT,\n new_hash TEXT NOT NULL,\n last_updated_text TEXT,\n max_bounty_text TEXT,\n kyc_status TEXT NOT NULL,\n poc_status TEXT NOT NULL,\n first_dollar_score INTEGER NOT NULL,\n note TEXT\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS immunefi_watch_runs (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n fetched_at TEXT NOT NULL,\n targets INTEGER NOT NULL,\n ok_targets INTEGER NOT NULL,\n changed_targets INTEGER NOT NULL,\n unverified_targets INTEGER NOT NULL,\n top_slug TEXT,\n top_score INTEGER\n )`);\n}\n\nexport default async function (_interval?: { lastRunAt?: Date }) {\n await ensureSchema();\n const now = new Date().toISOString();\n const results: any[] = [];\n\n for (const target of TARGETS) {\n const infoUrl = `${BASE}/${target.slug}/information/`;\n const scopeUrl = `${BASE}/${target.slug}/scope/`;\n const [info, scope] = await Promise.all([fetchText(infoUrl), fetchText(scopeUrl)]);\n const combined = `${info.text}\\n${scope.text}`;\n const lastUpdated = extractLastUpdated(info.text);\n const maxBounty = extractMaxBounty(info.text);\n const kyc = detectKyc(info.text);\n const poc = detectPoc(info.text);\n const moneySignals = extractMoneySignals(combined);\n const scopeUrls = extractScopeUrls(scope.text);\n const signalsOk = target.expectedSignals.every((s) => combined.toLowerCase().includes(s.toLowerCase()));\n // Hash only stable, security-relevant/public-program semantics. Hashing full Next.js HTML\n // produced false positives because hydration/runtime fragments can differ between requests.\n const fingerprint = JSON.stringify({ version: 2, slug: target.slug, lastUpdated, maxBounty, kyc, poc, moneySignals, scopeUrls, signalsOk });\n const hash = await sha256(fingerprint);\n const score = firstDollarScore(target, info.ok, scope.ok, kyc, lastUpdated, signalsOk);\n const errors = [info.error && `info:${info.error}`, scope.error && `scope:${scope.error}`].filter(Boolean).join(\"; \") || null;\n\n const prev = await sqlite.execute({ sql: \"SELECT content_hash, change_count FROM immunefi_program_watch WHERE slug = ?\", args: [target.slug] });\n const row = prev.rows?.[0] as any | undefined;\n const changed = !!row && row.content_hash !== hash;\n const firstSeen = row ? null : now;\n const changeCount = Number(row?.change_count ?? 0) + (changed ? 1 : 0);\n\n await sqlite.execute({\n sql: `INSERT INTO immunefi_program_watch(\n slug,name,priority,info_url,scope_url,content_hash,last_updated_text,max_bounty_text,kyc_status,poc_status,\n baseline_min_web_usd,baseline_max_web_usd,first_dollar_score,signals_ok,info_http_status,scope_http_status,\n first_seen_at,last_seen_at,last_changed_at,change_count,last_error\n ) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(slug) DO UPDATE SET\n name=excluded.name,priority=excluded.priority,info_url=excluded.info_url,scope_url=excluded.scope_url,\n content_hash=excluded.content_hash,last_updated_text=excluded.last_updated_text,max_bounty_text=excluded.max_bounty_text,\n kyc_status=excluded.kyc_status,poc_status=excluded.poc_status,baseline_min_web_usd=excluded.baseline_min_web_usd,\n baseline_max_web_usd=excluded.baseline_max_web_usd,first_dollar_score=excluded.first_dollar_score,\n signals_ok=excluded.signals_ok,info_http_status=excluded.info_http_status,scope_http_status=excluded.scope_http_status,\n last_seen_at=excluded.last_seen_at,last_changed_at=CASE WHEN immunefi_program_watch.content_hash <> excluded.content_hash THEN excluded.last_seen_at ELSE immunefi_program_watch.last_changed_at END,\n change_count=excluded.change_count,last_error=excluded.last_error`,\n args: [target.slug,target.name,target.priority,infoUrl,scopeUrl,hash,lastUpdated,maxBounty,kyc,poc,target.baselineMinWebUsd,target.baselineMaxWebUsd,score,signalsOk?1:0,info.status,scope.status,firstSeen ?? now,now,now,changeCount,errors],\n });\n\n if (!row || changed) {\n await sqlite.execute({\n sql: \"INSERT INTO immunefi_program_changes(slug,detected_at,previous_hash,new_hash,last_updated_text,max_bounty_text,kyc_status,poc_status,first_dollar_score,note) VALUES(?,?,?,?,?,?,?,?,?,?)\",\n args: [target.slug,now,row?.content_hash ?? null,hash,lastUpdated,maxBounty,kyc,poc,score,!row ? \"baseline_created\" : \"public_program_page_changed\"],\n });\n }\n\n results.push({ slug: target.slug, name: target.name, score, changed, info_status: info.status, scope_status: scope.status, last_updated: lastUpdated, max_bounty: maxBounty, kyc, poc, signals_ok: signalsOk, money_signals: moneySignals.slice(0, 20), scope_urls: scopeUrls.slice(0, 20), error: errors });\n }\n\n results.sort((a, b) => b.score - a.score);\n const okTargets = results.filter((r) => r.info_status >= 200 && r.info_status < 300 && r.scope_status >= 200 && r.scope_status < 300).length;\n const changedTargets = results.filter((r) => r.changed).length;\n const unverifiedTargets = results.filter((r) => r.kyc === \"unverified\" || r.poc === \"unverified\" || !r.signals_ok).length;\n await sqlite.execute({\n sql: \"INSERT INTO immunefi_watch_runs(fetched_at,targets,ok_targets,changed_targets,unverified_targets,top_slug,top_score) VALUES(?,?,?,?,?,?,?)\",\n args: [now,results.length,okTargets,changedTargets,unverifiedTargets,results[0]?.slug ?? null,results[0]?.score ?? null],\n });\n\n const status = okTargets === TARGETS.length && unverifiedTargets === 0 ? \"PASS\" : okTargets > 0 ? \"PARTIAL\" : \"FAIL\";\n const output = { status, fetched_at: now, safety: \"PUBLIC_METADATA_ONLY_NO_TARGET_SCANNING_NO_SUBMISSION\", ok_targets: okTargets, changed_targets: changedTargets, unverified_targets: unverifiedTargets, top: results.slice(0, 5), all: results };\n console.log(JSON.stringify(output, null, 2));\n return output;\n}\n","deleted",false,"label",[14],"29d89160-b2c5-4968-aef7-006c8b40fa1e",["D",1788735288858],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Live docs-vs-runtime evidence API","imageUrl","userId","6cc24525-830b-4db3-9c9c-fd19fb50e91f","pinnedFileId","01a078ee-7696-7756-bb0b-01e476076611","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0773d-9d6b-7580-a53a-683363c351c8","tursoName","29d89160b2c54968aef7006c8b40fa1e","tursoHostname","29d89160b2c54968aef7006c8b40fa1e-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789522252250],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_106":102},"org",{"_9":10,"_99":100,"_101":102,"_55":56,"_103":104,"_105":42},"branch",{"_35":89,"_11":90,"_22":28,"_91":45,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":12,"_98":10},"isOwned",152,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Cleiton Costa","avatar","https://lh3.googleusercontent.com/a/ACg8ocIgWisWQiXts_2fy5iRiRgl8A6c7Ef94eqE3ur-4mlyUrpCBmQ=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_140":141,"_142":143,"_144":145,"_146":42,"_147":42,"_148":42,"_149":32,"_150":-5,"_151":-7,"_152":-7,"_153":63,"_154":42,"_155":42,"_156":-5,"_157":42,"_158":42,"_159":42,"_160":-5},"ENV",{"_111":112,"_113":114,"_115":90,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]