[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_103":104,"_105":106},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","mosadek","name","brain-intentic-canary-v1","path","intentic_adapter.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":-5,"_58":42,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/mosadek/brain-intentic-canary-v1/code/intentic_adapter.ts","extension","id","6cbb4b04-1446-48ab-adda-0f8632d008c0","fileId","78becd34-adf8-11f1-b980-1607ee4eb77e","parentId","branchId","2f9d80b1-c9d7-4e62-b389-487800adf356","branchVersion",14,"latest",true,"createdAt",["D",1789148941751],"version",4,"fileType","script","content","// CANDIDATE ONLY. Isolated from canonical Brain production executors.\n// No credentials are stored by this module; the raw Intentic editor token exists only in call memory.\n\nexport const INTENTIC_CANDIDATE_REV = \"intentic-worker-candidate-v1-20260911-r2\";\nexport const KILO_GATEWAY_BASE_URL = \"https://api.kilo.ai/api/gateway\";\nexport const KILO_FREE_MODEL = \"kilo-auto/free\";\nexport const DEFAULT_INTENTIC_PROVIDER = \"endpoint/kilo-free\";\nexport const DEFAULT_SAFE_TOOLS = [\"Glob\", \"Read\", \"Grep\"] as const;\n\nconst CONVERSATION_ID = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/u;\nconst INTENTIC_TOKEN = /^ict_[A-Za-z0-9_-]{43}$/u;\nconst PENDING_CARD_FIELDS = [\n \"plan\", \"question\", \"permission\", \"browserHelp\", \"terminalHelp\",\n \"capabilityOffer\", \"paymentOffer\", \"credentialOffer\",\n] as const;\n\ntype FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise;\n\nexport type CostEvidence = \"OBSERVED_ZERO\" | \"UNOBSERVED\";\nexport type CanaryStatus = \"VERIFIED_ZERO_MODEL_COST_COMPLETE\" | \"COMPLETE_COST_UNOBSERVED\";\n\nexport interface IntenticCanaryInput {\n sandboxUrl: string;\n token: string;\n task: string;\n conversationId: string;\n provider?: string;\n model?: string;\n allowedTools?: string[];\n timeoutMs?: number;\n pollMs?: number;\n}\n\nexport interface IntenticCanaryReceipt {\n rev: string;\n status: CanaryStatus;\n costEvidence: CostEvidence;\n sandboxOrigin: string;\n conversationId: string;\n sessionId: string;\n runId: string;\n provider: string;\n model: string;\n requestSha256: string;\n transcriptSha256: string;\n startedAt: string;\n completedAt: string;\n elapsedMs: number;\n reportedDurationMs: number | null;\n reportedCostUsd: number | null;\n assistantText: string;\n}\n\nfunction fail(code: string, detail: string): never {\n throw new Error(`${code}: ${detail}`);\n}\n\nexport function normalizeIntenticEndpoint(raw: string): { ok: true; url: string } | { ok: false; reason: string } {\n try {\n const u = new URL(raw);\n if (u.protocol !== \"https:\") return { ok: false, reason: \"HTTPS_REQUIRED\" };\n if (!u.hostname.endsWith(\".intentic.dev\")) return { ok: false, reason: \"HOST_NOT_INTENTIC\" };\n if (u.username || u.password || u.search || u.hash) return { ok: false, reason: \"ENDPOINT_NOT_CANONICAL\" };\n if (u.pathname !== \"/\" && u.pathname !== \"\") return { ok: false, reason: \"ENDPOINT_PATH_FORBIDDEN\" };\n return { ok: true, url: u.origin };\n } catch {\n return { ok: false, reason: \"INVALID_URL\" };\n }\n}\n\nexport function admitIntenticBatch(input: {\n sandboxUrl: string;\n token: string;\n monthlyAllowanceMinutes: number;\n usedMinutes: number | null;\n estimatedWorkMinutes: number;\n idleTailMinutes?: number;\n}): any {\n const endpoint = normalizeIntenticEndpoint(input.sandboxUrl);\n if (!endpoint.ok) return { ok: false, reason: endpoint.reason };\n if (!INTENTIC_TOKEN.test(input.token)) return { ok: false, reason: \"CONTROL_TOKEN_INVALID\" };\n if (!Number.isFinite(input.monthlyAllowanceMinutes) || input.monthlyAllowanceMinutes <= 0) return { ok: false, reason: \"ALLOWANCE_INVALID\" };\n if (input.usedMinutes === null || !Number.isFinite(input.usedMinutes)) return { ok: false, reason: \"USAGE_UNKNOWN\" };\n if (input.usedMinutes < 0 || input.usedMinutes > input.monthlyAllowanceMinutes) return { ok: false, reason: \"USAGE_INVALID\" };\n if (!Number.isFinite(input.estimatedWorkMinutes) || input.estimatedWorkMinutes <= 0) return { ok: false, reason: \"WORK_ESTIMATE_INVALID\" };\n const idleTailMinutes = input.idleTailMinutes ?? 20;\n if (!Number.isFinite(idleTailMinutes) || idleTailMinutes < 0) return { ok: false, reason: \"IDLE_TAIL_INVALID\" };\n const reservedMinutes = Math.ceil(input.estimatedWorkMinutes) + Math.ceil(idleTailMinutes);\n const remainingMinutes = input.monthlyAllowanceMinutes - input.usedMinutes;\n if (reservedMinutes > remainingMinutes) return { ok: false, reason: \"INSUFFICIENT_HOSTED_MINUTES\", reservedMinutes, remainingMinutes };\n return { ok: true, reservedMinutes, remainingMinutes, endpoint: endpoint.url };\n}\n\nfunction validate(input: IntenticCanaryInput) {\n const endpoint = normalizeIntenticEndpoint(input.sandboxUrl);\n if (!endpoint.ok) fail(endpoint.reason, input.sandboxUrl);\n if (!INTENTIC_TOKEN.test(input.token)) fail(\"CONTROL_TOKEN_INVALID\", \"expected raw ict_ token shape\");\n if (!CONVERSATION_ID.test(input.conversationId)) fail(\"INVALID_CONVERSATION_ID\", \"does not match Intentic grammar\");\n if (!input.task.trim() || input.task.length > 20_000) fail(\"INVALID_TASK\", \"task must be 1..20000 chars\");\n const provider = input.provider ?? DEFAULT_INTENTIC_PROVIDER;\n if (!/^endpoint\\/[A-Za-z0-9._-]+$/u.test(provider)) fail(\"INVALID_PROVIDER\", \"canary permits endpoint/ only\");\n const model = input.model ?? KILO_FREE_MODEL;\n if (model !== KILO_FREE_MODEL && model !== \"openrouter/free\" && !model.endsWith(\":free\")) fail(\"NONFREE_MODEL_REFUSED\", model);\n const allowedTools = input.allowedTools ?? [...DEFAULT_SAFE_TOOLS];\n if (allowedTools.length === 0 || allowedTools.length > 16 || allowedTools.some((x) => !/^[A-Za-z0-9._:-]{1,64}$/u.test(x))) {\n fail(\"INVALID_TOOL_ALLOWLIST\", \"bounded explicit tool list required\");\n }\n const timeoutMs = input.timeoutMs ?? 8 * 60_000;\n const pollMs = input.pollMs ?? 2_000;\n if (timeoutMs < 10_000 || timeoutMs > 15 * 60_000) fail(\"INVALID_TIMEOUT\", \"10s..15m only\");\n if (pollMs < 250 || pollMs > 10_000) fail(\"INVALID_POLL\", \"250ms..10s only\");\n return { endpoint: endpoint.url, provider, model, allowedTools, timeoutMs, pollMs };\n}\n\nfunction stable(value: unknown): string {\n if (Array.isArray(value)) return `[${value.map(stable).join(\",\")}]`;\n if (value && typeof value === \"object\") {\n return `{${Object.entries(value as Record).sort(([a], [b]) => a.localeCompare(b)).map(([k, v]) => `${JSON.stringify(k)}:${stable(v)}`).join(\",\")}}`;\n }\n return JSON.stringify(value);\n}\n\nasync function sha256(value: unknown): Promise {\n const bytes = new TextEncoder().encode(typeof value === \"string\" ? value : stable(value));\n const digest = await crypto.subtle.digest(\"SHA-256\", bytes);\n return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function getJson(fetcher: FetchLike, url: string, init: RequestInit): Promise {\n const response = await fetcher(url, init);\n const text = await response.text();\n if (!response.ok) fail(\"HTTP_ERROR\", `${response.status} ${url}: ${text.slice(0, 500)}`);\n try { return JSON.parse(text); } catch { fail(\"SHAPE_ERROR\", `non-JSON response from ${url}`); }\n}\n\nfunction hasPendingDecision(row: any): boolean {\n return PENDING_CARD_FIELDS.some((field) => row?.[field]?.status === \"pending\");\n}\n\nfunction terminalAssistant(messages: any[]): any | undefined {\n for (let i = messages.length - 1; i >= 0; i--) {\n const row = messages[i];\n if (row?.role === \"assistant\" && row?.usage && !hasPendingDecision(row)) return row;\n }\n return undefined;\n}\n\nexport async function runIntenticCanary(input: IntenticCanaryInput, fetcher: FetchLike = fetch): Promise {\n const cfg = validate(input);\n const nonce = crypto.randomUUID();\n const marker = `BRAIN_CANARY_RECEIPT_ID=${input.conversationId};NONCE=${nonce}`;\n const prompt = `${marker}\\n\\n${input.task}`;\n const body = {\n prompt,\n title: input.conversationId,\n conversationId: input.conversationId,\n isolated: true,\n unattended: true,\n agent: cfg.provider,\n harness: \"claude-code\",\n model: cfg.model,\n autoLand: false,\n permissionMode: \"acceptEdits\",\n allowedTools: cfg.allowedTools,\n tierHold: true,\n fast: false,\n };\n const requestSha256 = await sha256(body);\n const headers = { \"x-intentic-control\": input.token, \"content-type\": \"application/json\", accept: \"application/json\" };\n const started = Date.now();\n const ack = await getJson(fetcher, `${cfg.endpoint}/agent`, { method: \"POST\", headers, body: JSON.stringify(body) });\n if (typeof ack?.run !== \"string\" || !/^run_[A-Za-z0-9_-]{4,128}$/u.test(ack.run)) fail(\"RUN_ACK_INVALID\", \"POST /agent returned malformed run id\");\n\n const deadline = started + cfg.timeoutMs;\n let sessionId: string | undefined;\n let transcript: any | undefined;\n let terminal: any | undefined;\n while (Date.now() < deadline) {\n const list = await getJson(fetcher, `${cfg.endpoint}/sessions?query=${encodeURIComponent(input.conversationId)}`, { method: \"GET\", headers });\n if (!Array.isArray(list?.sessions)) fail(\"SHAPE_ERROR\", \"GET /sessions missing sessions array\");\n const exact = list.sessions.filter((s: any) => s?.title === input.conversationId && typeof s?.id === \"string\");\n if (exact.length > 1) fail(\"AMBIGUOUS_SESSION\", \"multiple exact-title sessions\");\n if (exact.length === 1) {\n sessionId = exact[0].id;\n transcript = await getJson(fetcher, `${cfg.endpoint}/sessions/${encodeURIComponent(sessionId)}`, { method: \"GET\", headers });\n if (!Array.isArray(transcript?.messages)) fail(\"SHAPE_ERROR\", \"session transcript missing messages\");\n const bound = transcript.messages.some((row: any) => row?.role === \"user\" && typeof row?.text === \"string\" && row.text.includes(marker));\n if (bound) {\n terminal = terminalAssistant(transcript.messages);\n if (terminal) break;\n }\n }\n await new Promise((resolve) => setTimeout(resolve, cfg.pollMs));\n }\n if (!sessionId || !transcript || !terminal) fail(\"CANARY_TIMEOUT\", \"no source-bound terminal transcript before deadline\");\n if (transcript.messages.some(hasPendingDecision)) fail(\"PENDING_DECISION\", \"unresolved human decision in transcript\");\n\n const reportedCostUsd = typeof terminal.usage?.costUsd === \"number\" ? terminal.usage.costUsd : null;\n if (reportedCostUsd !== null && reportedCostUsd > 0) fail(\"NONZERO_MODEL_COST\", `reported ${reportedCostUsd}`);\n const costEvidence: CostEvidence = reportedCostUsd === 0 ? \"OBSERVED_ZERO\" : \"UNOBSERVED\";\n const status: CanaryStatus = costEvidence === \"OBSERVED_ZERO\" ? \"VERIFIED_ZERO_MODEL_COST_COMPLETE\" : \"COMPLETE_COST_UNOBSERVED\";\n const completed = Date.now();\n const assistantText = transcript.messages.filter((row: any) => row?.role === \"assistant\" && typeof row?.text === \"string\").map((row: any) => row.text).join(\"\\n\").trim();\n if (!assistantText) fail(\"EMPTY_RESULT\", \"no assistant text\");\n\n return {\n rev: INTENTIC_CANDIDATE_REV,\n status,\n costEvidence,\n sandboxOrigin: cfg.endpoint,\n conversationId: input.conversationId,\n sessionId,\n runId: ack.run,\n provider: cfg.provider,\n model: cfg.model,\n requestSha256,\n transcriptSha256: await sha256(transcript),\n startedAt: new Date(started).toISOString(),\n completedAt: new Date(completed).toISOString(),\n elapsedMs: completed - started,\n reportedDurationMs: typeof terminal.usage?.durationMs === \"number\" ? terminal.usage.durationMs : null,\n reportedCostUsd,\n assistantText,\n };\n}\n","deleted",false,"label",[14],"6b91c2a9-2a91-48f6-8933-62209b1e2b13",["D",1789141786402],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Isolated Intentic transport canary tests","imageUrl","userId","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_102":98},"org",{"_9":10,"_95":96,"_97":98,"_55":56,"_99":100,"_101":42},"branch",{"_35":85,"_11":86,"_22":28,"_87":45,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":12,"_94":10},"isOwned",17,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_78":-5,"_136":137,"_138":139,"_140":141,"_142":42,"_143":42,"_144":42,"_145":32,"_146":-5,"_147":-7,"_148":-7,"_149":62,"_150":42,"_151":42,"_152":-5,"_153":42,"_154":42,"_155":42,"_156":-5},"ENV",{"_107":108,"_109":110,"_111":86,"_112":113,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]