[{"_1":2,"_179":-5,"_180":-5},"loaderData",{"_3":4,"_95":96},"root",{"_5":6,"_36":37,"_68":69},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":-5,"_32":33,"_34":20,"_35":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesChatPanelState","notificationCount",0,"flagDenols","isTeamOrgMember","ENV",{"_38":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":57,"_58":59,"_60":61,"_62":63,"_64":65,"_66":67},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","910f2b7baa2e41a0bfb37647cf7a18560b6e00fa","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","API_URL","https://api.val.town","clerkState",{"_70":71},"__internal_clerk_state",{"_72":73,"_74":47,"_75":76,"_77":76,"_78":20,"_79":76,"_80":76,"_81":76,"_82":76,"_83":84,"_93":20,"_94":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_85":20,"_19":20,"_86":76,"_87":88,"_89":76,"_90":47,"_91":20,"_92":76},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_97":98,"_99":100,"_101":102,"_103":104,"_156":157,"_176":177,"_178":-5},"handle","ziggyware","name","untitled-3418","path","new-file-915.ts","project",{"_105":106,"_99":100,"_107":108,"_109":-5,"_110":20,"_111":112,"_113":-5,"_114":-5,"_12":115,"_116":-5,"_117":20,"_118":-5,"_119":-5,"_120":33,"_14":121,"_122":-5,"_123":-5,"_124":-5,"_125":126,"_127":126,"_128":129,"_130":129,"_131":129,"_132":126,"_133":126,"_23":134,"_137":138,"_142":143,"_155":20},"id","1eb4f58a-23af-11f1-b336-42dde27851f2","createdAt",["D",1773937046659],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","2c6d46b0-54dd-11f0-a86c-6fbc2b29331a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","850db142-aa5e-4914-bceb-1e2e085ae4c5","tursoName","tursoHostname","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_97":98,"_135":136},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yekJHRDE5SGVoUHUzUENQaXY2MTRkT3h0cncifQ","org",{"_97":98,"_139":136,"_12":115,"_140":141},"avatar","tier","free","branch",{"_144":145,"_99":45,"_105":146,"_147":106,"_148":-5,"_149":-5,"_150":-5,"_151":-5,"_152":-5,"_153":100,"_154":98},"version",34,"1eb7738c-23af-11f1-b336-42dde27851f2","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_105":158,"_99":102,"_159":160,"_161":-5,"_162":146,"_163":164,"_165":166,"_107":167,"_144":168,"_169":170,"_171":172,"_173":20,"_174":-5,"_101":175},"66e3efb2-240b-11f1-adac-42dde27851f2","fileId","5d5045d6-240b-11f1-b674-42dde27851f2","parentId","branchId","branchVersion",17,"latest",true,["D",1773976681425],2,"fileType","http","content","import { useState, useCallback, useRef, useEffect } from \"react\";\n\n/*\n PARAGON RECON v3 — THE EIGENVALUE\n \n The prior 18 tests all hammered api.gemini.com.\n Meanwhile Gemini shipped an entirely separate WebSocket:\n \n wss://wsapi.fast.gemini.com (Fast API, sub-10ms, JSON-RPC)\n \n Different subdomain → different server → potentially different\n Origin validation. This is the overlooked door.\n \n Additionally: REST at 120 req/min = 2/sec = 500ms candles.\n That's faster than most dashboards need. We test that too.\n \n 22 vectors. Organized by actual probability of success.\n*/\n\nconst FAST = \"wss://wsapi.fast.gemini.com\";\nconst V1 = \"wss://api.gemini.com/v1/marketdata/BTCUSD\";\nconst V2 = \"wss://api.gemini.com/v2/marketdata/BTCUSD\";\nconst SBX = \"wss://api.sandbox.gemini.com/v1/marketdata/BTCUSD\";\nconst SBX2 = \"wss://api.sandbox.gemini.com/v2/marketdata/BTCUSD\";\nconst REST_T = \"https://api.gemini.com/v1/pubticker/btcusd\";\nconst REST_B = \"https://api.gemini.com/v1/book/BTCUSD?limit_bids=5&limit_asks=5\";\nconst REST_TR= \"https://api.gemini.com/v1/trades/BTCUSD?limit_trades=1\";\nconst CB = \"wss://ws-feed.exchange.coinbase.com\";\n\nconst FAST_SUB = JSON.stringify({ id:\"1\", method:\"subscribe\", params:{ streams:[\"btcusd@bookTicker\"] } });\nconst FAST_DEPTH = JSON.stringify({ id:\"2\", method:\"subscribe\", params:{ streams:[\"btcusd@depth5@100ms\"] } });\nconst FAST_TRADE = JSON.stringify({ id:\"3\", method:\"subscribe\", params:{ streams:[\"btcusd@trade\"] } });\nconst V2_SUB = JSON.stringify({ type:\"subscribe\", subscriptions:[{name:\"candles_1m\",symbols:[\"BTCUSD\"]}] });\nconst CB_SUB = JSON.stringify({ type:\"subscribe\", channels:[{name:\"ticker\",product_ids:[\"BTC-USD\"]}] });\n\nconst T = 9000;\n\nconst TESTS = [\n // ═══ FAST API — THE DISCOVERY ═══\n { id:\"fast-book\", cat:\"FAST API\", tier:0, label:\"Fast API — bookTicker\", desc:\"wss://wsapi.fast.gemini.com + btcusd@bookTicker subscription\" },\n { id:\"fast-depth\", cat:\"FAST API\", tier:0, label:\"Fast API — depth5@100ms\", desc:\"L2 partial depth at 100ms granularity via Fast API\" },\n { id:\"fast-trade\", cat:\"FAST API\", tier:0, label:\"Fast API — trade stream\", desc:\"Real-time trade executions via Fast API\" },\n { id:\"fast-raw\", cat:\"FAST API\", tier:0, label:\"Fast API — raw connect\", desc:\"Connect without subscribing — test if handshake alone succeeds\" },\n { id:\"fast-worker\", cat:\"FAST API\", tier:0, label:\"Fast API via Worker\", desc:\"Worker null-Origin + Fast API endpoint — double bypass\" },\n { id:\"fast-iframe\", cat:\"FAST API\", tier:0, label:\"Fast API via blob iframe\", desc:\"Opaque Origin + Fast API — triple isolation\" },\n\n // ═══ REST WEAPONIZATION ═══\n { id:\"rest-direct\", cat:\"REST\", tier:0, label:\"REST ticker (direct fetch)\", desc:\"Direct CORS fetch to api.gemini.com — test if REST allows browser Origin\" },\n { id:\"rest-book\", cat:\"REST\", tier:0, label:\"REST order book (direct)\", desc:\"GET /v1/book/BTCUSD?limit=5 — order book depth\" },\n { id:\"rest-trades\", cat:\"REST\", tier:0, label:\"REST recent trades (direct)\", desc:\"GET /v1/trades/BTCUSD?limit=1 — last trade\" },\n { id:\"rest-proxy\", cat:\"REST\", tier:1, label:\"REST via allorigins proxy\", desc:\"CORS proxy fallback if direct REST is blocked\" },\n { id:\"rest-poll\", cat:\"REST\", tier:0, label:\"REST 500ms rapid-poll (3 ticks)\", desc:\"Fetch ticker 3× at 500ms intervals — simulates streaming\" },\n\n // ═══ ORIGIN TRICKS on V1/V2 ═══\n { id:\"worker-v1\", cat:\"ORIGIN\", tier:1, label:\"Worker → v1 marketdata\", desc:\"Dedicated Worker null-Origin on legacy v1 endpoint\" },\n { id:\"iframe-v1\", cat:\"ORIGIN\", tier:1, label:\"Blob iframe → v1\", desc:\"Opaque-Origin iframe on legacy v1\" },\n { id:\"srcdoc-v1\", cat:\"ORIGIN\", tier:2, label:\"srcdoc iframe → v1\", desc:\"srcdoc sandbox on legacy v1 — subtly different Origin\" },\n { id:\"worker-v2\", cat:\"ORIGIN\", tier:1, label:\"Worker → v2 + subscribe\", desc:\"Worker on v2 with candle subscription\" },\n\n // ═══ HANDSHAKE VARIANTS ═══\n { id:\"subproto-fast\", cat:\"HANDSHAKE\", tier:1, label:\"Fast API + subprotocol\", desc:\"Fast API with Sec-WebSocket-Protocol: 'fast-api'\" },\n { id:\"port-443\", cat:\"HANDSHAKE\", tier:2, label:\"v1 explicit :443\", desc:\"wss://api.gemini.com:443 — changes Origin string\" },\n { id:\"sandbox-v1\", cat:\"HANDSHAKE\", tier:2, label:\"Sandbox v1\", desc:\"Sandbox infrastructure — different CORS config\" },\n\n // ═══ LONG SHOTS ═══\n { id:\"sse-fast\", cat:\"EXOTIC\", tier:2, label:\"EventSource → Fast API\", desc:\"SSE against Fast API URL — protocol mismatch test\" },\n { id:\"fetch-upgrade\",cat:\"EXOTIC\", tier:2, label:\"fetch() HTTP 101\", desc:\"Manual Upgrade header via fetch — confirming browser strips it\" },\n\n // ═══ CONTROLS ═══\n { id:\"coinbase\", cat:\"CONTROL\", tier:0, label:\"Coinbase WS (known-good)\", desc:\"Coinbase ticker — confirms browser WS works\" },\n { id:\"gemini-rest-v2\",cat:\"CONTROL\",tier:0, label:\"REST v2 ticker (direct)\", desc:\"GET /v2/ticker/btcusd — newer REST endpoint\" },\n];\n\nconst CATS_META = {\n \"FAST API\": { accent:\"#4ade80\", glyph:\"⚡\" },\n \"REST\": { accent:\"#60a5fa\", glyph:\"↻\" },\n \"ORIGIN\": { accent:\"#c084fc\", glyph:\"◎\" },\n \"HANDSHAKE\": { accent:\"#fbbf24\", glyph:\"⇌\" },\n \"EXOTIC\": { accent:\"#f87171\", glyph:\"✦\" },\n \"CONTROL\": { accent:\"#2dd4bf\", glyph:\"✓\" },\n};\n\nconst TIER_LABELS = [\"PRIME\",\"VIABLE\",\"LONG SHOT\"];\nconst TIER_COLORS = [\"#4ade80\",\"#fbbf24\",\"#ef4444\"];\n\nconst ST = {\n idle: { icon:\"○\", color:\"#2a2a2a\", lbl:\"—\" },\n running: { icon:\"◌\", color:\"#f59e0b\", lbl:\"INIT\" },\n connected: { icon:\"●\", color:\"#22d3ee\", lbl:\"OPEN\" },\n data: { icon:\"◉\", color:\"#4ade80\", lbl:\"DATA\" },\n failed: { icon:\"✕\", color:\"#ef4444\", lbl:\"FAIL\" },\n timeout: { icon:\"⏱\", color:\"#f97316\", lbl:\"T/O\" },\n};\n\n// ── ENGINE ────────────────────────────────────────────────\n\nfunction mkBlob(code) { return URL.createObjectURL(new Blob([code],{type:\"application/javascript\"})); }\n\nfunction wireWs(ws, t0, up, sub, timeout=T) {\n let n=0, done=false;\n const fin=(s,p={})=>{ if(done)return; done=true; try{ws.close();}catch(_){} up({status:s,...p}); };\n ws.onopen=()=>{\n up({status:\"connected\",latency:Math.round(performance.now()-t0),detail:\"Handshake accepted\"});\n if(sub) ws.send(sub);\n };\n ws.onmessage=(e)=>{\n n++;\n if(n===1) up({status:\"data\",preview:e.data.slice(0,500),latency:Math.round(performance.now()-t0),detail:`${n} msg`,msgs:n});\n else up({msgs:n,detail:`${n} msgs`});\n if(n>=4) fin(\"data\",{msgs:n});\n };\n ws.onerror=()=>fin(\"failed\",{detail:\"WS error (handshake rejected)\",latency:Math.round(performance.now()-t0)});\n ws.onclose=(ev)=>{ if(!n) fin(\"failed\",{detail:`Closed: code=${ev.code} reason=\"${ev.reason||\"∅\"}\"`,latency:Math.round(performance.now()-t0)}); };\n setTimeout(()=>{ if(!n) fin(\"timeout\",{detail:`No data in ${timeout}ms`,latency:timeout}); },timeout);\n}\n\nfunction workerWs(url, sub, up) {\n const t0=performance.now();\n up({status:\"running\",detail:\"\",preview:\"\",latency:null,msgs:0});\n const code=`\n self.onmessage=function(){\n try{\n const ws=new WebSocket(\"${url}\");\n let n=0,t0=Date.now();\n ws.onopen=()=>{\n self.postMessage({t:\"open\",ms:Date.now()-t0});\n ${sub?`ws.send('${sub.replace(/'/g,\"\\\\'\")}');`:\"\"}\n };\n ws.onmessage=(e)=>{n++;\n if(n===1)self.postMessage({t:\"data\",d:e.data.slice(0,500),ms:Date.now()-t0});\n if(n>=4){ws.close();self.postMessage({t:\"done\",n});}\n };\n ws.onerror=()=>self.postMessage({t:\"err\",d:\"WS error in Worker\"});\n ws.onclose=(ev)=>{if(!n)self.postMessage({t:\"close\",d:\"code=\"+ev.code});};\n setTimeout(()=>{try{ws.close();}catch(_){}if(!n)self.postMessage({t:\"timeout\"});},${T});\n }catch(e){self.postMessage({t:\"err\",d:e.message});}\n };\n `;\n try{\n const w=new Worker(mkBlob(code));\n w.onmessage=(e)=>{\n const d=e.data;\n if(d.t===\"open\") up({status:\"connected\",latency:d.ms,detail:\"Worker connected\"});\n else if(d.t===\"data\") up({status:\"data\",preview:d.d,latency:d.ms,detail:\"Worker data\"});\n else if(d.t===\"done\") up(p=>({...p,detail:`${d.n} msgs via Worker`}));\n else if(d.t===\"err\") up({status:\"failed\",detail:d.d});\n else if(d.t===\"close\") up({status:\"failed\",detail:d.d});\n else if(d.t===\"timeout\") up({status:\"timeout\",detail:\"Worker timeout\"});\n };\n w.postMessage(\"go\");\n }catch(e){up({status:\"failed\",detail:e.message});}\n}\n\nfunction iframeWs(url, id, sub, up) {\n const t0=performance.now();\n up({status:\"running\",detail:\"\",preview:\"\",latency:null,msgs:0});\n const html=`