[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_434":435,"_436":437},"routes/_app.x.$handle.$name",{"_102":101,"_32":46,"_111":92,"_27":112,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_20":-5,"_123":-5,"_124":-5,"_125":25,"_126":127,"_128":61,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":56,"_18":57,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":25},"version",323,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","src/ui/render.ts","latestPath","fileId","9343b730-a63e-11f1-a6d3-1607ee4eb77e","name","render.ts","fileType","script","content","import { MAX_USER_QUERIES } from 'npm:@canonry/val-kit@0.1.0/jobs'\nimport { canonryDemoStyles, canonryGlyph, canonryMark } from 'npm:@canonry/val-kit@0.1.0/ui'\nimport { canonryDemoClientScript, QUERY_HINT_SUFFIX } from './client.ts'\nimport type {\n CanonryDemoViewModel,\n DemoUiStatus,\n EvidenceSource,\n QueryEvidenceViewModel,\n ShareEntryViewModel,\n ShareViewModel,\n SiteHealthFactorViewModel,\n SiteHealthPageViewModel,\n UiNotice,\n VisibilityViewModel,\n} from './types.ts'\n\nconst DEFAULT_CSS_HREF = '/assets/canonry-ui.css'\nconst DEFAULT_SCRIPT_SRC = '/assets/canonry-ui.js'\nconst DEFAULT_MARK_SRC = '/assets/canonry-mark.svg'\nconst DEFAULT_GLYPH_SRC = '/assets/canonry-glyph.svg'\n\n/**\n * Fingerprint an asset's own content into its URL.\n *\n * The document is `no-store` but the stylesheet was `max-age=3600`, so after a\n * deploy a returning visitor got new markup styled by an hour-old stylesheet —\n * new class names unstyled, removed ones still applied. A content hash changes\n * the URL exactly when the bytes change, which is what makes a long cache\n * lifetime safe rather than a liability.\n *\n * FNV-1a rather than SHA-256 because this runs at module load and only has to\n * differ when the content differs; it is a cache key, not a security boundary.\n */\nexport function assetUrl(path: string, content: string): string {\n let hash = 0x811c9dc5\n for (let index = 0; index < content.length; index++) {\n hash ^= content.charCodeAt(index)\n hash = Math.imul(hash, 0x01000193) >>> 0\n }\n return `${path}?v=${hash.toString(36)}`\n}\nconst MAX_ANSWER_CHARS = 1_400\n\nfunction escapeHtml(value: unknown): string {\n return String(value ?? '')\n .replaceAll('&', '&')\n .replaceAll('<', '<')\n .replaceAll('>', '>')\n .replaceAll('\"', '"')\n .replaceAll(\"'\", ''')\n}\n\nfunction escapeAttr(value: unknown): string {\n return escapeHtml(value).replaceAll('`', '`')\n}\n\nfunction safeUrl(value: string): string | null {\n try {\n const url = new URL(value)\n return url.protocol === 'https:' || url.protocol === 'http:' ? url.toString() : null\n } catch {\n return null\n }\n}\n\nfunction safeHref(value: string): string | null {\n if (value.startsWith('/') && !value.startsWith('//')) return value\n return safeUrl(value)\n}\n\nfunction safeFormAction(value: string): string {\n return value.startsWith('/') && !value.startsWith('//') ? value : '/check'\n}\n\nfunction safeHost(value: string): string {\n const url = safeUrl(value)\n if (!url) return 'Unavailable source'\n return new URL(url).hostname\n}\n\nfunction clip(value: string | null | undefined, limit = MAX_ANSWER_CHARS): string {\n if (!value) return ''\n return value.length > limit ? `${value.slice(0, limit - 1).trimEnd()}…` : value\n}\n\nfunction isFiniteNumber(value: number | null | undefined): value is number {\n return typeof value === 'number' && Number.isFinite(value)\n}\n\nfunction asPercent(value: number | null | undefined): string {\n if (!isFiniteNumber(value)) return 'Not measured'\n return `${Number.isInteger(value) ? value : value.toFixed(1)}%`\n}\n\nfunction asScore(value: number | null | undefined): string {\n return isFiniteNumber(value) ? `${Math.round(value)} / 100` : 'Not measured'\n}\n\nfunction formatTime(value: string | null | undefined): string | null {\n if (!value) return null\n const date = new Date(value)\n if (Number.isNaN(date.valueOf())) return null\n return new Intl.DateTimeFormat('en-US', {\n month: 'short',\n day: 'numeric',\n year: 'numeric',\n hour: 'numeric',\n minute: '2-digit',\n }).format(date)\n}\n\nfunction statusCopy(status: DemoUiStatus): UiNotice | null {\n switch (status) {\n case 'loading':\n return {\n tone: 'neutral',\n title: 'Checking this domain',\n detail: 'The report will appear here when the bounded checks finish.',\n }\n case 'partial':\n return {\n tone: 'caution',\n title: 'Partial result',\n detail: 'Only completed checks are included below. Failed checks are shown separately.',\n }\n case 'error':\n return {\n tone: 'negative',\n title: 'This check could not finish',\n detail: 'Try again later or use a domain that responds publicly.',\n }\n case 'rate-limited':\n return {\n tone: 'caution',\n title: 'Check limit reached',\n detail: 'This public sample has reached its current limit. Try again later.',\n }\n case 'empty':\n return { tone: 'neutral', title: 'No report yet', detail: 'Enter a public domain to create a bounded snapshot.' }\n default:\n return null\n }\n}\n\nfunction renderNotice(notice: UiNotice | undefined): string {\n if (!notice) return ''\n const href = notice.action?.href ? safeHref(notice.action.href) : null\n const action = href && notice.action\n ? `${escapeHtml(notice.action.label)}`\n : ''\n return `\n `\n}\n\n/**\n * Share of voice as a single 100% bar plus a ranked table.\n *\n * A bar rather than a pie because the question is comparative (\"am I ahead of\n * that site?\") and angles are read worse than lengths. One bar rather than a\n * bar per domain because the parts are shares of one whole, and the whole is\n * the point.\n *\n * The checked site is the only coloured segment. Rivals sit on a neutral ramp,\n * because giving each a hue would imply category meaning that does not exist:\n * they are the field, not a taxonomy. The ramp is ordered so adjacent segments\n * stay distinguishable.\n */\n/**\n * What the check actually does, carried by the heading's tooltip rather than a\n * subtitle. The trigger is a real button, and the copy rides its `aria-label`\n * so nothing is lost for assistive tech or for a test that looks the button up\n * by accessible name.\n */\nconst LANDING_EXPLAINER =\n 'An answer engine is asked your questions. We record whether the answer names your brand and whether it cites your domain, then run a technical SEO audit on a sample of your pages.'\n\n/** Where \"open source Canonry\" points. */\nconst CANONRY_REPO_URL = 'https://github.com/Canonry/canonry'\n\n/**\n * Ring geometry. `r` and the stroke width set the hole, and the hole is what\n * the target's own share is written into: a share chart where the reader has to\n * hunt for their own row has buried its own headline.\n */\nconst DONUT_RADIUS = 38\nconst DONUT_CIRCUMFERENCE = 2 * Math.PI * DONUT_RADIUS\n/** Separator between slices, in path units, shrunk for a slice too thin to keep it. */\nconst DONUT_GAP = 1.6\n\n/** One arc, positioned by how much of the ring precedes it. */\nfunction donutArc(startFraction: number, fraction: number, className: string, label: string): string {\n const length = fraction * DONUT_CIRCUMFERENCE\n if (length <= 0) return ''\n const drawn = Math.max(length - Math.min(DONUT_GAP, length * 0.3), 0.01)\n return ``\n}\n\n/** Copy that must change with the basis, since the two measure different things. */\nconst SHARE_BASIS = {\n mention: {\n label: 'Mentioned',\n caption: 'Brands named in the answer text. A brand counts once per answer.',\n column: 'Brand',\n tailNoun: 'named in',\n unmeasured: 'Mentions were not measured on this check.',\n },\n citation: {\n label: 'Cited',\n caption: 'Domains cited as sources. A domain counts once per answer.',\n column: 'Domain',\n tailNoun: 'cited in',\n unmeasured: 'Citations were not measured on this check.',\n },\n} as const\n\n/**\n * The whole section, with a basis switch when both are measurable.\n *\n * The switch is two radios and CSS, not script: the page CSP allows no inline\n * script, and a control that only works once an external file has loaded is a\n * control that is broken on first paint. Radios also give the group real\n * keyboard semantics for free, which a pair of divs would not.\n */\nfunction renderShareSection(visibility: VisibilityViewModel, idPrefix = 'share'): string {\n // Both bases are always offered. A basis with no data gets a pane that says\n // so, because a control that silently disappears reads as a broken page: the\n // reader cannot tell the difference between \"this was not measured\" and\n // \"this feature is gone\". The extraction can fail on a live check too, so\n // this is not only about records written before it existed.\n const panes = [\n { basis: 'mention', share: visibility.mentionShare },\n { basis: 'citation', share: visibility.share },\n ] as const\n if (panes.every((pane) => !pane.share)) return ''\n\n const headingId = `${idPrefix}-heading`\n const heading = `

Who else shows up

`\n // Open on a basis that HAS data, or the page loads onto an empty pane.\n const defaultBasis = panes.find((pane) => pane.share)?.basis ?? 'citation'\n\n const inputs = panes.map((pane) =>\n ``\n ).join('')\n const switcher = ``\n\n return `\n

\n ${heading}\n ${inputs}\n ${switcher}\n ${\n panes.map((pane) =>\n ``\n ).join('')\n }\n

`\n}\n\nfunction renderSharePane(\n share: ShareViewModel,\n basis: 'mention' | 'citation',\n idPrefix: string,\n headingId: string,\n): string {\n const copy = SHARE_BASIS[basis]\n const descId = `${idPrefix}-desc`\n\n // Fractions come from the counts, never from the rounded display percent:\n // eight rows each rounded to 5% would leave the ring visibly short.\n let cursor = 0\n const arcs = share.entries.map((entry, index) => {\n const fraction = entry.answers / share.totalAppearances\n const arc = donutArc(\n cursor,\n fraction,\n segmentClass(entry, index),\n `${escapeHtml(entry.domain)}: ${entry.percent}%`,\n )\n cursor += fraction\n return arc\n }).join('') + (share.tail\n ? donutArc(cursor, Math.max(1 - cursor, 0), 'is-other', `${share.tail.domains} more: ${share.tail.percent}%`)\n : '')\n\n const rows = share.entries.map((entry, index) => `\n \n ${\n escapeHtml(entry.domain)\n }${entry.isTarget ? '' : ''}\n ${entry.percent}%\n ${entry.answers} of ${share.measuredAnswers}\n `).join('')\n\n const summary = share.targetPercent === 0\n ? `${escapeHtml(share.targetDomain)} was not ${copy.tailNoun} any answer`\n : `${escapeHtml(share.targetDomain)} holds ${share.targetPercent}%`\n\n return `\n

${copy.caption}

\n \n ${\n share.tail\n ? ``\n : ''\n }\n ${\n share.unattributedAnswers > 0\n ? ``\n : ''\n }\n `\n}\n\nfunction round2(value: number): string {\n return (Math.round(value * 100) / 100).toString()\n}\n\n/** Target first, remainder last, rivals on a five-step neutral ramp. */\nfunction segmentClass(entry: ShareEntryViewModel, index: number): string {\n if (entry.isTarget) return 'is-target'\n return `rank-${index % 5}`\n}\n\nfunction renderVisibilityChart(visibility: VisibilityViewModel): string {\n const mention = visibility.summaries.mentioned\n const cite = visibility.summaries.cited\n const checkedAt = formatTime(visibility.checkedAt)\n return `\n

Answer-engine snapshot

\n ${checkedAt ? `

Checked ${escapeHtml(checkedAt)}

` : ''}\n

Mentioned in the answer: ${\n asPercent(mention.rate)\n }
Cited as a source: ${\n asPercent(cite.rate)\n }

`\n}\n\nfunction signalLabel(value: boolean | null, positive: string, negative: string): string {\n if (value === true) return positive\n if (value === false) return negative\n return 'Not measured'\n}\n\nfunction signalClass(value: boolean | null): string {\n if (value === true) return 'signal-positive'\n if (value === false) return 'signal-neutral'\n return 'signal-unavailable'\n}\n\nfunction renderSource(source: EvidenceSource): string {\n const url = safeUrl(source.url)\n const title = source.title?.trim() || safeHost(source.url)\n if (!url) {\n return `

${\n escapeHtml(title)\n }Unavailable URL

`\n }\n return `

${\n escapeHtml(title)\n }${escapeHtml(safeHost(url))}${\n source.isTargetDomain ? ' · target source' : ''\n }

`\n}\n\nfunction renderEvidenceDetails(row: QueryEvidenceViewModel): string {\n const answer = row.answerText\n ? `

${escapeHtml(clip(row.answerText))}

`\n : '

Answer text was not retained for this result.

'\n const sources = row.sources?.length\n ? `

${row.sources.map(renderSource).join('')}`\n : '

No source URLs were recorded.

'\n const matched = row.matchedTerms?.length\n ? `

Matched terms${escapeHtml(row.matchedTerms.join(', '))}

`\n : ''\n const models = [\n row.requestedModel ? `Requested: ${escapeHtml(row.requestedModel)}` : '',\n row.servedModel ? `Served: ${escapeHtml(row.servedModel)}` : '',\n ].filter(Boolean).join('')\n const searches = row.searchQueries?.length\n ? `

Search queries${escapeHtml(row.searchQueries.join(', '))}

`\n : ''\n const error = row.error\n ? `

Unavailable${escapeHtml(row.error)}

`\n : ''\n return `\n

View evidence

${models}${\n row.completedAt && formatTime(row.completedAt)\n ? `Completed: ${escapeHtml(formatTime(row.completedAt)!)}`\n : ''\n }

Answer

${answer}

\n ${matched}${searches}${error}\n

Sources

${sources}

`\n}\n\nfunction renderEvidence(visibility: VisibilityViewModel): string {\n const rows = visibility.evidence.map((row) => `\n \n ${escapeHtml(row.query)}\n ${escapeHtml(row.providerLabel ?? row.provider)}\n ${\n row.mentioned === true ? '✓' : row.mentioned === false ? '−' : '?'\n }${signalLabel(row.mentioned, 'Mentioned', 'Not mentioned')}\n ${\n row.cited === true ? '✓' : row.cited === false ? '−' : '?'\n }${signalLabel(row.cited, 'Cited', 'Not cited')}\n ${renderEvidenceDetails(row)}\n `).join('')\n const empty =\n '

No completed query evidence

Evidence appears after a check returns an answer.

'\n return `\n

Query evidence

\n ${visibility.notice ? renderNotice(visibility.notice) : ''}\n ${\n visibility.evidence.length\n ? `

${rows}

Query	Engine	Mentioned	Cited	Evidence

`\n : empty\n }\n

`\n}\n\nfunction factorTone(factor: SiteHealthFactorViewModel): string {\n if (factor.state !== 'measured' || !isFiniteNumber(factor.score)) return 'factor-unavailable'\n if (factor.score >= 80) return 'factor-positive'\n if (factor.score >= 60) return 'factor-caution'\n return 'factor-negative'\n}\n\n/**\n * One row per factor, mirroring the dashboard's page audit: the summary carries\n * everything needed to decide whether to open it, and the evidence and the fix\n * live together inside. Closed by default so the section stays scannable.\n */\nfunction renderFactor(factor: SiteHealthFactorViewModel): string {\n const score = isFiniteNumber(factor.score)\n ? `${asScore(factor.score)}`\n : `${factor.state === 'not-applicable' ? 'Not applicable' : 'Unavailable'}`\n\n const list = (items: readonly string[], ordered: boolean) =>\n items.length === 0\n ? ''\n : ordered\n ? `

${escapeHtml(item)}

`\n : `

${escapeHtml(item)}

`\n\n const body = factor.findings.length === 0 && factor.recommendations.length === 0\n ? `

Nothing to report here.

`\n : `${factor.findings.length ? `

Evidence

${list(factor.findings, false)}

` : ''}${\n factor.recommendations.length ? `

Recommended fix

${list(factor.recommendations, true)}

` : ''\n }`\n\n return `

${escapeHtml(factor.label)}${\n escapeHtml(factor.detail)\n }${score}

${body}

`\n}\n\nfunction pageStatusLabel(status: SiteHealthPageViewModel['status']): string {\n if (status === 'good') return 'Good'\n if (status === 'needs-attention') return 'Needs attention'\n return 'Unavailable'\n}\n\nfunction renderPageDetails(page: SiteHealthPageViewModel): string {\n const facts = page.findings.length\n ? `

${escapeHtml(finding)}

`\n : '

No page-level findings were retained.

'\n return `

View findings

${facts}${\n page.indexable != null\n ? `

${\n page.indexable ? 'Indexable in this sample.' : 'Not indexable in this sample.'\n }

`\n : ''\n }

`\n}\n\nfunction readableValue(value: string): string {\n return value.replaceAll(/[-_]+/g, ' ').replaceAll(/\\s+/g, ' ').trim()\n}\n\nfunction renderSiteHealth(siteHealth: CanonryDemoViewModel['siteHealth'], idPrefix = 'site-health'): string {\n const headingId = `${idPrefix}-heading`\n const factorHeadingId = `${idPrefix}-factors`\n const fixHeadingId = `${idPrefix}-fixes`\n const worstPagesHeadingId = `${idPrefix}-worst-pages`\n if (!siteHealth) {\n return `\n

Technical AEO sample

No site-health sample

A bounded crawl can appear with a domain check.

`\n }\n const checkedAt = formatTime(siteHealth.checkedAt)\n // Inbound links come from the same crawl's link graph, joined by URL.\n const inboundByUrl = new Map((siteHealth.siteMap?.nodes ?? []).map((node) => [node.url, node.inboundLinks]))\n const pages = siteHealth.worstPages.map((page) => {\n const inbound = inboundByUrl.get(page.url)\n const url = safeUrl(page.url)\n const label = escapeHtml(page.url.replace(/^https?:\\/\\//, ''))\n const pageLink = url\n ? `${label}`\n : `${label}`\n return `${pageLink}${escapeHtml(pageStatusLabel(page.status))}${\n asScore(page.score)\n }${\n inbound === undefined ? 'not measured' : inbound\n }${renderPageDetails(page)}`\n }).join('')\n const defects = siteHealth.criticalDefects.map((defect) =>\n `

${escapeHtml(defect.detail)}

Fix${\n escapeHtml(defect.recommendation)\n }

`\n ).join('')\n // \"Partial termination\" was the third place that called a bounded sample\n // reaching its own ceiling a failure. Every `max-*` reason names a limit this\n // app configured, so say that; anything else really did end the crawl early.\n const termination = siteHealth.terminationReason\n ? `

${\n siteHealth.terminationReason.startsWith('max-')\n ? `Stopped at a configured limit: ${escapeHtml(readableValue(siteHealth.terminationReason))}`\n : `Crawl ended early: ${escapeHtml(readableValue(siteHealth.terminationReason))}`\n }.

`\n : ''\n const provenance = [\n siteHealth.provenance?.schemaVersion ? `Crawl schema ${siteHealth.provenance.schemaVersion}` : '',\n siteHealth.provenance?.engineVersion ? `Engine ${siteHealth.provenance.engineVersion}` : '',\n ].filter(Boolean).join(' · ')\n return `\n

${escapeHtml(siteHealth.sampleLabel)}

Sample score${asScore(siteHealth.score)}

${siteHealth.completedPages} of ${siteHealth.attemptedPages} pages completed${siteHealth.discoveredPages} pages discovered${\n siteHealth.failedPages === 0\n ? 'No failed pages'\n : `${siteHealth.failedPages} failed ${siteHealth.failedPages === 1 ? 'page' : 'pages'}`\n }${checkedAt ? `Checked ${escapeHtml(checkedAt)}` : ''}

\n ${siteHealth.notice ? renderNotice(siteHealth.notice) : ''}\n ${\n siteHealth.criticalDefects.length\n ? `

Problems outside the score

${defects}

`\n : ''\n }\n

Factors

${\n siteHealth.factors.map(renderFactor).join('')\n }

Worst sampled pages

${\n pages\n ? `

${pages}

Page	Status	Score	Inbound links	Findings

`\n : '

No page audit evidence is available.

'\n }${\n siteHealth.siteMap\n ? `

${siteHealth.siteMap.nodes.length} of ${siteHealth.siteMap.totalPages} pages and ${siteHealth.siteMap.edges.length} of ${siteHealth.siteMap.totalEdges} internal links were seen by this bounded crawl.

`\n : ''\n }

Sample scope

This is a bounded page sample, not a complete technical audit. A score applies only to the pages and factors checked here.

${termination}${\n provenance ? `

${escapeHtml(provenance)}

` : ''\n }

`\n}\n\n/**\n * The form does two different jobs, so it gets two treatments.\n *\n * On the landing page it is the ONLY thing to do, so it is the hero: a full\n * headline, a large field, and the scope note underneath. On a result page the\n * reader already has what they came for, so it shrinks into the header as a\n * secondary action and drops the onboarding copy — that copy wrapped to two\n * lines under a field jammed against the top edge, which is what made the\n * header look broken.\n */\n/**\n * The waiting state, revealed by script when a check is submitted.\n *\n * A check takes about 45 seconds and execution is request-bound, so the native\n * form POST leaves the browser blocked on a navigation for the whole time with\n * nothing on screen but a disabled button. The work still happens inside one\n * request; this just stops that request being the thing the browser is\n * painting.\n *\n * It claims only what is knowable while waiting. The domain and any questions\n * the visitor typed are theirs already; elapsed time is counted, not guessed;\n * and the two tracks are shown running TOGETHER because they genuinely do\n * (`Promise.allSettled` over the probe and the crawl). No invented sequence of\n * phases, because the server reports none and a progress bar that moves on a\n * timer is a lie with a nice curve.\n *\n * Rendered server-side and hidden, rather than built in script, so the markup\n * stays in one place and there is nothing to keep in sync.\n */\nfunction renderLoadingView(): string {\n return `\n `\n}\n\n/** Hover- and focus-revealed note. CSS only, because the page CSP allows no inline script. */\nfunction renderInfoTip(copy: string): string {\n return `${\n escapeHtml(copy)\n }`\n}\n\nfunction renderCheckForm(model: CanonryDemoViewModel, variant: 'hero' | 'compact' = 'compact'): string {\n if (!model.form) return ''\n const value = model.status === 'demo' || model.status === 'empty' ? '' : model.domain\n const verificationStatus = model.form.verificationStatus ?? (model.form.turnstileSiteKey ? 'ready' : 'not-required')\n const hasTurnstile = Boolean(model.form.turnstileSiteKey && verificationStatus === 'ready')\n const disabled = verificationStatus === 'unavailable'\n // interaction-only: the challenge still runs on load, so a token is ready at\n // submit, but the widget is drawn only if the visitor has to do something.\n // The default (`always`) meant the result page carried a green \"Success!\"\n // panel next to the check-another-domain form, announcing the outcome of a\n // challenge for a submission that had not happened, beside a report that had.\n const verification = hasTurnstile\n ? `

`\n : verificationStatus === 'unavailable'\n ? `

!${\n escapeHtml(\n model.form.verificationUnavailableMessage ?? 'Human verification is unavailable. Public checks are disabled.',\n )\n }

`\n : ''\n const verificationSlot = verification\n ? `

${verification}

`\n : ''\n const hero = variant === 'hero'\n return `\n

\n \n

\n \n \n

\n ${\n hero\n ? `

\n Questions you want to show up for optional\n \n

Add up to ${MAX_USER_QUERIES}. We generate the rest. ${QUERY_HINT_SUFFIX}

`\n : ''\n }\n ${\n hero\n // Scope facts, one line, said once. They used to be a sentence here and\n // a second sentence in the footer, which repeated the engine and the\n // question count the hint above already states.\n ? `

Gemini only5-page technical SEO auditMore engines in open source Canonry

`\n : ''\n }\n \n ${verificationSlot}\n

`\n}\n\nfunction renderMain(model: CanonryDemoViewModel): string {\n const glyphHref = assetUrl(DEFAULT_GLYPH_SRC, canonryGlyph)\n const globalNotice =\n (model.status === 'demo' || model.status === 'ready' ? model.notice : model.notice ?? statusCopy(model.status)) ??\n undefined\n const loading = model.status === 'loading'\n const visibility = model.visibility\n // Nothing has been checked yet, so a report header, tabs, and two empty\n // panels are scaffolding around an absence. Lead with the one action instead.\n if (model.status === 'empty') {\n return `\n

\n \n

Does AI mention your brand?${renderInfoTip(LANDING_EXPLAINER)}

\n ${renderCheckForm(model, 'hero')}\n

\n ${renderLoadingView()}\n

\n \n

`\n }\n return `\n

\n \n

${escapeHtml(model.domain)}

\n ${model.locale ? `

${escapeHtml(model.locale)}

` : ''}\n

\n ${model.status === 'demo' ? 'Sample data' : ''}\n

\n ${renderNotice(globalNotice)}\n

\n \n \n

\n ${\n visibility\n ? `${renderVisibilityChart(visibility)}${renderShareSection(visibility)}${renderEvidence(visibility)}`\n : '

No visibility result

Start a check to inspect answer-engine evidence.

'\n }\n

\n \n \n \n

Who else shows up

\n ${heading}\n ${inputs}\n ${switcher}\n ${\n panes.map((pane) =>\n ``\n ).join('')\n }\n

${copy.caption}

Answer-engine snapshot

\n ${checkedAt ? `

Checked ${escapeHtml(checkedAt)}

` : ''}\n

Mentioned in the answer: ${\n asPercent(mention.rate)\n }
Cited as a source: ${\n asPercent(cite.rate)\n }

${\n escapeHtml(title)\n }Unavailable URL

`\n }\n return `

${\n escapeHtml(title)\n }${escapeHtml(safeHost(url))}${\n source.isTargetDomain ? ' · target source' : ''\n }

`\n}\n\nfunction renderEvidenceDetails(row: QueryEvidenceViewModel): string {\n const answer = row.answerText\n ? `

${escapeHtml(clip(row.answerText))}

`\n : '

Answer text was not retained for this result.

'\n const sources = row.sources?.length\n ? `

${row.sources.map(renderSource).join('')}`\n : '

No source URLs were recorded.

'\n const matched = row.matchedTerms?.length\n ? `

Matched terms${escapeHtml(row.matchedTerms.join(', '))}

Search queries${escapeHtml(row.searchQueries.join(', '))}

`\n : ''\n const error = row.error\n ? `

Unavailable${escapeHtml(row.error)}

`\n : ''\n return `\n

View evidence

${models}${\n row.completedAt && formatTime(row.completedAt)\n ? `Completed: ${escapeHtml(formatTime(row.completedAt)!)}`\n : ''\n }

Answer

${answer}

\n ${matched}${searches}${error}\n

Sources

${sources}

No completed query evidence

Evidence appears after a check returns an answer.

'\n return `\n

Query evidence

\n ${visibility.notice ? renderNotice(visibility.notice) : ''}\n ${\n visibility.evidence.length\n ? `

${rows}

Query	Engine	Mentioned	Cited	Evidence

`\n : empty\n }\n

${escapeHtml(item)}

`\n : `

${escapeHtml(item)}

`\n\n const body = factor.findings.length === 0 && factor.recommendations.length === 0\n ? `

Nothing to report here.

`\n : `${factor.findings.length ? `

Evidence

${list(factor.findings, false)}

` : ''}${\n factor.recommendations.length ? `

Recommended fix

${list(factor.recommendations, true)}

` : ''\n }`\n\n return `

${escapeHtml(factor.label)}${\n escapeHtml(factor.detail)\n }${score}

${body}

${escapeHtml(finding)}

`\n : '

No page-level findings were retained.

'\n return `

View findings

${facts}${\n page.indexable != null\n ? `

${\n page.indexable ? 'Indexable in this sample.' : 'Not indexable in this sample.'\n }

`\n : ''\n }

Technical AEO sample

No site-health sample

A bounded crawl can appear with a domain check.

${escapeHtml(defect.detail)}

Fix${\n escapeHtml(defect.recommendation)\n }

${escapeHtml(siteHealth.sampleLabel)}

Sample score${asScore(siteHealth.score)}

\n ${siteHealth.notice ? renderNotice(siteHealth.notice) : ''}\n ${\n siteHealth.criticalDefects.length\n ? `

Problems outside the score

${defects}

`\n : ''\n }\n

Factors

${\n siteHealth.factors.map(renderFactor).join('')\n }

Worst sampled pages

${\n pages\n ? `

${pages}

Page	Status	Score	Inbound links	Findings

`\n : '

No page audit evidence is available.

'\n }${\n siteHealth.siteMap\n ? `

${siteHealth.siteMap.nodes.length} of ${siteHealth.siteMap.totalPages} pages and ${siteHealth.siteMap.edges.length} of ${siteHealth.siteMap.totalEdges} internal links were seen by this bounded crawl.

`\n : ''\n }

Sample scope

This is a bounded page sample, not a complete technical audit. A score applies only to the pages and factors checked here.

${termination}${\n provenance ? `

${escapeHtml(provenance)}

` : ''\n }

`\n : verificationStatus === 'unavailable'\n ? `

!${\n escapeHtml(\n model.form.verificationUnavailableMessage ?? 'Human verification is unavailable. Public checks are disabled.',\n )\n }

`\n : ''\n const verificationSlot = verification\n ? `

${verification}

`\n : ''\n const hero = variant === 'hero'\n return `\n

\n \n

\n \n \n

\n ${\n hero\n ? `

\n Questions you want to show up for optional\n \n

Add up to ${MAX_USER_QUERIES}. We generate the rest. ${QUERY_HINT_SUFFIX}

Gemini only5-page technical SEO auditMore engines in open source Canonry

`\n : ''\n }\n \n ${verificationSlot}\n

\n \n

Does AI mention your brand?${renderInfoTip(LANDING_EXPLAINER)}

\n ${renderCheckForm(model, 'hero')}\n

\n ${renderLoadingView()}\n

\n \n

`\n }\n return `\n

\n \n

${escapeHtml(model.domain)}

\n ${model.locale ? `

${escapeHtml(model.locale)}

` : ''}\n

\n ${model.status === 'demo' ? 'Sample data' : ''}\n

\n ${renderNotice(globalNotice)}\n

\n \n \n

\n ${\n visibility\n ? `${renderVisibilityChart(visibility)}${renderShareSection(visibility)}${renderEvidence(visibility)}`\n : '

No visibility result

Start a check to inspect answer-engine evidence.

'\n }\n

\n \n \n \n

`\n}\n\n/** Returns a complete document so the runtime can use it as an HTTP response body. */\nexport function renderCanonryDemo(model: CanonryDemoViewModel): string {\n const title = `${model.displayName} | AI Visibility Check`\n return `\n\n \n \n \n \n ${escapeHtml(title)}\n \n \n \n \n \n \n ${\n model.form?.turnstileSiteKey && (model.form.verificationStatus ?? 'ready') === 'ready'\n ? ''\n : ''\n }\n \n ${renderMain(model)}\n`\n}\n\n/** Useful for a host that owns the outer document or wants an embedded fragment. */\nexport function renderCanonryDemoBody(model: CanonryDemoViewModel): string {\n return renderMain(model)\n}\n","createdAt",["D",1788474097213],"branchVersion","branchId","a4524491-dcb3-470a-a361-437a88df6a63","id","b1194860-7c77-41d7-b0b7-f3529a80e15b","AI-Visibility-Check",["D",1788292195151],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Does AI mention your brand and cite your site? Free check.","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/f4d36c97-6af9-485c-0fa5-13e825466c01/square512?exp=1789549199&sig=92ee6749b247ee91708b5e416b8711f6feca8aafcccd8176db8c563f01c4ab51","891d245e-ec71-404d-a5ca-223733ee2844","pinnedFileId","92ee44ee-a63e-11f1-8fd4-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0460b-6625-75ce-9e7f-9a6b062b0798","tursoName","b11948607c7741d7b0b7f3529a80e15b","tursoHostname","b11948607c7741d7b0b7f3529a80e15b-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789514495229],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_102":101,"_110":106},"org",{"_102":101,"_103":104,"_105":106,"_18":-5,"_107":108,"_109":25},"branch",{"_13":91,"_32":92,"_44":43,"_93":45,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":46,"_100":101},"isOwned",333,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","canonry","handle","displayName","Canonry","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/5ae39d80-0d23-48e5-89d8-6bd2a7096401/square512?exp=1789549199&sig=8fff3646e917fd1a59abe9de8276029babb42246cd40658a590eb6cf82b240b4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_32":46,"_39":429,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":56,"_18":57,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":65,"_66":67,"_68":69,"_70":71,"_72":430,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":431,"_86":432,"_88":433,"_90":25},"tree",[215,237,238,239,240,241,242,243],"files",[215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243],"counts",{"_204":65,"_205":195,"_206":65,"_207":208,"_209":210},"contents",[133,134,135,136,137,138,139,140],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":198,"_32":199,"_30":200,"_143":-5,"_42":43,"_41":195,"_145":61,"_39":201,"_13":65,"_34":202,"_36":-5,"_24":25,"_150":-5,"_27":203},{"_44":190,"_32":191,"_30":192,"_143":-5,"_42":43,"_41":193,"_145":61,"_39":194,"_13":195,"_34":20,"_36":196,"_24":25,"_150":-5,"_27":197},{"_44":182,"_32":183,"_30":184,"_143":-5,"_42":43,"_41":185,"_145":25,"_39":186,"_13":187,"_34":20,"_36":188,"_24":25,"_150":-5,"_27":189},{"_44":175,"_32":176,"_30":177,"_143":-5,"_42":43,"_41":178,"_145":61,"_39":179,"_13":65,"_34":20,"_36":180,"_24":25,"_150":-5,"_27":181},{"_44":167,"_32":168,"_30":169,"_143":-5,"_42":43,"_41":170,"_145":61,"_39":171,"_13":172,"_34":20,"_36":173,"_24":25,"_150":-5,"_27":174},{"_44":160,"_32":161,"_30":162,"_143":-5,"_42":43,"_41":163,"_145":61,"_39":164,"_13":157,"_34":20,"_36":165,"_24":25,"_150":-5,"_27":166},{"_44":152,"_32":153,"_30":154,"_143":-5,"_42":43,"_41":155,"_145":61,"_39":156,"_13":157,"_34":20,"_36":158,"_24":25,"_150":-5,"_27":159},{"_44":141,"_32":142,"_30":59,"_143":-5,"_42":43,"_41":144,"_145":25,"_39":146,"_13":147,"_34":148,"_36":149,"_24":25,"_150":-5,"_27":151},"07e596a3-55cb-44be-8d8f-1ac08768654c","main.http.tsx","parentId",287,"latest",["D",1788465273024],6,"http","import { sqlite } from 'https://esm.town/v/std/sqlite/main.ts'\nimport { loadValTownConfig } from 'npm:@canonry/val-kit@0.1.0/config'\nimport { createRequestBoundDispatcher } from 'npm:@canonry/val-kit@0.1.0/jobs'\nimport { ValSqliteCheckStore } from 'npm:@canonry/val-kit@0.1.0/storage'\nimport { createGeminiValVisibilityProbe } from 'npm:@canonry/val-kit@0.1.0/visibility'\nimport { createValTownApp } from './src/app/app.ts'\nimport { createPublicCheckRunner } from './src/jobs/public-check.ts'\nimport type { CheckResult } from './src/runtime/check-result.ts'\nimport { createSiteHealthRunner } from './src/site-health/runner.ts'\nimport {\n canonryDemoClientScript,\n canonryDemoStyles,\n canonryGlyph,\n canonryMark,\n createPublicCheckForm,\n emptyLandingViewModel,\n renderCanonryDemo,\n toCanonryDemoViewModel,\n} from './src/ui/index.ts'\n\nconst config = loadValTownConfig(Deno.env.toObject())\nconst store = new ValSqliteCheckStore(sqlite)\nawait store.initialize()\n\nconst visibilityProbe = config.geminiApiKey\n ? createGeminiValVisibilityProbe({ apiKey: config.geminiApiKey, model: config.geminiModel ?? undefined })\n : null\nconst runner = createPublicCheckRunner({\n store,\n visibilityProbe,\n siteHealthRunner: createSiteHealthRunner(),\n ttlMs: config.checkTtlMs,\n})\n\nconst form = createPublicCheckForm(config)\n\nconst app = createValTownApp({\n store,\n config,\n dispatcher: createRequestBoundDispatcher(runner),\n renderPage: (record) =>\n record\n ? renderCanonryDemo(toCanonryDemoViewModel(record, { form, title: 'AI Visibility Check' }))\n : renderCanonryDemo(emptyLandingViewModel(form)),\n assets: { styles: canonryDemoStyles, script: canonryDemoClientScript, mark: canonryMark, glyph: canonryGlyph },\n})\n\nexport default app.fetch\n","label",[142],"b99d218a-3578-4e5e-bbfe-27dd823f647f","deno.lock","96393c08-a63e-11f1-9d10-1607ee4eb77e",321,["D",1788474097204],3,"{\n \"version\": \"5\",\n \"specifiers\": {\n \"npm:@canonry/aeo-audit@7.1.0\": \"7.1.0\",\n \"npm:@canonry/val-kit@0.2.0\": \"0.2.0\",\n \"npm:@libsql/client@0.17.2\": \"0.17.2\",\n \"npm:hono@4.12.25\": \"4.12.25\"\n },\n \"npm\": {\n \"@canonry/aeo-audit@7.1.0\": {\n \"integrity\": \"sha512-XwWEfzVqrzBkaCCAe4ficJW52LUhpxzsNF3uB3v3u2RsUHD3nRhv03jSgyTpj7hILTUNJTt8Xqn5HNMgDqX19w==\",\n \"dependencies\": [\n \"cheerio\",\n \"ipaddr.js\",\n \"undici\"\n ],\n \"bin\": true\n },\n \"@canonry/val-kit@0.2.0\": {\n \"integrity\": \"sha512-ZhONFlG4XwBBo4Iyrcc3neR24Y1dP40E5eM8IiEOg4sqttvi1xvqC6HvgxpdB9oPfcP+Jq+MWdpkxYoQ78Yjzw==\",\n \"dependencies\": [\n \"@google/genai\"\n ]\n },\n \"@google/genai@1.46.0\": {\n \"integrity\": \"sha512-ewPMN5JkKfgU5/kdco9ZhXBHDPhVqZpMQqIFQhwsHLf8kyZfx1cNpw1pHo1eV6PGEW7EhIBFi3aYZraFndAXqg==\",\n \"dependencies\": [\n \"google-auth-library\",\n \"p-retry\",\n \"protobufjs\",\n \"ws\"\n ]\n },\n \"@libsql/client@0.17.2\": {\n \"integrity\": \"sha512-0aw0S3iQMHvOxfRt5j1atoCCPMT3gjsB2PS8/uxSM1DcDn39xqz6RlgSMxtP8I3JsxIXAFuw7S41baLEw0Zi+Q==\",\n \"dependencies\": [\n \"@libsql/core\",\n \"@libsql/hrana-client\",\n \"js-base64\",\n \"libsql\",\n \"promise-limit\"\n ]\n },\n \"@libsql/core@0.17.4\": {\n \"integrity\": \"sha512-LqF9gIvnJ38nmAH1y/ChizHqDO/MO1wLgA96XrraulEEbqXxLjleSH92YWTolbuJKgPUmGu4aJk9W3UnAcxLOQ==\",\n \"dependencies\": [\n \"js-base64\"\n ]\n },\n \"@libsql/darwin-arm64@0.5.29\": {\n \"integrity\": \"sha512-K+2RIB1OGFPYQbfay48GakLhqf3ArcbHqPFu7EZiaUcRgFcdw8RoltsMyvbj5ix2fY0HV3Q3Ioa/ByvQdaSM0A==\",\n \"os\": [\"darwin\"],\n \"cpu\": [\"arm64\"]\n },\n \"@libsql/darwin-x64@0.5.29\": {\n \"integrity\": \"sha512-OtT+KFHsKFy1R5FVadr8FJ2Bb1mghtXTyJkxv0trocq7NuHntSki1eUbxpO5ezJesDvBlqFjnWaYYY516QNLhQ==\",\n \"os\": [\"darwin\"],\n \"cpu\": [\"x64\"]\n },\n \"@libsql/hrana-client@0.9.0\": {\n \"integrity\": \"sha512-pxQ1986AuWfPX4oXzBvLwBnfgKDE5OMhAdR/5cZmRaB4Ygz5MecQybvwZupnRz341r2CtFmbk/BhSu7k2Lm+Jw==\",\n \"dependencies\": [\n \"@libsql/isomorphic-ws\",\n \"cross-fetch\",\n \"js-base64\",\n \"node-fetch@3.3.2\"\n ]\n },\n \"@libsql/isomorphic-ws@0.1.5\": {\n \"integrity\": \"sha512-DtLWIH29onUYR00i0GlQ3UdcTRC6EP4u9w/h9LxpUZJWRMARk6dQwZ6Jkd+QdwVpuAOrdxt18v0K2uIYR3fwFg==\",\n \"dependencies\": [\n \"@types/ws\",\n \"ws\"\n ]\n },\n \"@libsql/linux-arm-gnueabihf@0.5.29\": {\n \"integrity\": \"sha512-CD4n4zj7SJTHso4nf5cuMoWoMSS7asn5hHygsDuhRl8jjjCTT3yE+xdUvI4J7zsyb53VO5ISh4cwwOtf6k2UhQ==\",\n \"os\": [\"linux\"],\n \"cpu\": [\"arm\"]\n },\n \"@libsql/linux-arm-musleabihf@0.5.29\": {\n \"integrity\": \"sha512-2Z9qBVpEJV7OeflzIR3+l5yAd4uTOLxklScYTwpZnkm2vDSGlC1PRlueLaufc4EFITkLKXK2MWBpexuNJfMVcg==\",\n \"os\": [\"linux\"],\n \"cpu\": [\"arm\"]\n },\n \"@libsql/linux-arm64-gnu@0.5.29\": {\n \"integrity\": \"sha512-gURBqaiXIGGwFNEaUj8Ldk7Hps4STtG+31aEidCk5evMMdtsdfL3HPCpvys+ZF/tkOs2MWlRWoSq7SOuCE9k3w==\",\n \"os\": [\"linux\"],\n \"cpu\": [\"arm64\"]\n },\n \"@libsql/linux-arm64-musl@0.5.29\": {\n \"integrity\": \"sha512-fwgYZ0H8mUkyVqXZHF3mT/92iIh1N94Owi/f66cPVNsk9BdGKq5gVpoKO+7UxaNzuEH1roJp2QEwsCZMvBLpqg==\",\n \"os\": [\"linux\"],\n \"cpu\": [\"arm64\"]\n },\n \"@libsql/linux-x64-gnu@0.5.29\": {\n \"integrity\": \"sha512-y14V0vY0nmMC6G0pHeJcEarcnGU2H6cm21ZceRkacWHvQAEhAG0latQkCtoS2njFOXiYIg+JYPfAoWKbi82rkg==\",\n \"os\": [\"linux\"],\n \"cpu\": [\"x64\"]\n },\n \"@libsql/linux-x64-musl@0.5.29\": {\n \"integrity\": \"sha512-gquqwA/39tH4pFl+J9n3SOMSymjX+6kZ3kWgY3b94nXFTwac9bnFNMffIomgvlFaC4ArVqMnOZD3nuJ3H3VO1w==\",\n \"os\": [\"linux\"],\n \"cpu\": [\"x64\"]\n },\n \"@libsql/win32-x64-msvc@0.5.29\": {\n \"integrity\": \"sha512-4/0CvEdhi6+KjMxMaVbFM2n2Z44escBRoEYpR+gZg64DdetzGnYm8mcNLcoySaDJZNaBd6wz5DNdgRmcI4hXcg==\",\n \"os\": [\"win32\"],\n \"cpu\": [\"x64\"]\n },\n \"@neon-rs/load@0.0.4\": {\n \"integrity\": \"sha512-kTPhdZyTQxB+2wpiRcFWrDcejc4JI6tkPuS7UZCG4l6Zvc5kU/gGQ/ozvHTh1XR5tS+UlfAfGuPajjzQjCiHCw==\"\n },\n \"@protobufjs/aspromise@1.1.2\": {\n \"integrity\": \"sha512-j+gKExEuLmKwvz3OgROXtrJ2UG2x8Ch2YZUxahh+s1F2HZ+wAceUNLkvy6zKCPVRkU++ZWQrdxsUeQXmcg4uoQ==\"\n },\n \"@protobufjs/base64@1.1.2\": {\n \"integrity\": \"sha512-AZkcAA5vnN/v4PDqKyMR5lx7hZttPDgClv83E//FMNhR2TMcLUhfRUBHCmSl0oi9zMgDDqRUJkSxO3wm85+XLg==\"\n },\n \"@protobufjs/codegen@2.0.5\": {\n \"integrity\": \"sha512-zgXFLzW3Ap33e6d0Wlj4MGIm6Ce8O89n/apUaGNB/jx+hw+ruWEp7EwGUshdLKVRCxZW12fp9r40E1mQrf/34g==\"\n },\n \"@protobufjs/eventemitter@1.1.1\": {\n \"integrity\": \"sha512-vW1GmwMZNnL+gMRaovlh9yZX74kc+TTU3FObkkurpMaRtBfLP3ldjS9KQWlwZgraRE0+dheEEoAxdzcJQ8eXZg==\"\n },\n \"@protobufjs/fetch@1.1.1\": {\n \"integrity\": \"sha512-GpptLrs57adMSuHi3VNj0mAF8dwh36LMaYF6XyJ6JMWlVsc+t42tm1HSEDmOs3A8fC9yyeisgLhsTVQokOZ0zw==\",\n \"dependencies\": [\n \"@protobufjs/aspromise\"\n ]\n },\n \"@protobufjs/float@1.0.2\": {\n \"integrity\": \"sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ==\"\n },\n \"@protobufjs/path@1.1.2\": {\n \"integrity\": \"sha512-6JOcJ5Tm08dOHAbdR3GrvP+yUUfkjG5ePsHYczMFLq3ZmMkAD98cDgcT2iA1lJ9NVwFd4tH/iSSoe44YWkltEA==\"\n },\n \"@protobufjs/pool@1.1.0\": {\n \"integrity\": \"sha512-0kELaGSIDBKvcgS4zkjz1PeddatrjYcmMWOlAuAPwAeccUrPHdUqo/J6LiymHHEiJT5NrF1UVwxY14f+fy4WQw==\"\n },\n \"@protobufjs/utf8@1.1.2\": {\n \"integrity\": \"sha512-b1UQwcEZ4yCnMCD8DAL1VlbvBJE9/IX4FTIp7BG1xYpf29SLazLSrqUkj4w7Y5y7cCVP6E5tcqqcI0xemPkHug==\"\n },\n \"@types/node@26.4.1\": {\n \"integrity\": \"sha512-k97ENvZWtvA6yqz5/FS6a7duDgOPEeOQOc2iKS/nY6mX6qJUKtLnWzQS+Xj6tXweyj6ZcTAK2Qecetnvi9nCLA==\",\n \"dependencies\": [\n \"undici-types\"\n ]\n },\n \"@types/retry@0.12.0\": {\n \"integrity\": \"sha512-wWKOClTTiizcZhXnPY4wikVAwmdYHp8q6DmC+EJUzAMsycb7HB32Kh9RN4+0gExjmPmZSAQjgURXIGATPegAvA==\"\n },\n \"@types/ws@8.18.1\": {\n \"integrity\": \"sha512-ThVF6DCVhA8kUGy+aazFQ4kXQ7E1Ty7A3ypFOe0IcJV8O/M511G99AW24irKrW56Wt44yG9+ij8FaqoBGkuBXg==\",\n \"dependencies\": [\n \"@types/node\"\n ]\n },\n \"agent-base@7.1.4\": {\n \"integrity\": \"sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==\"\n },\n \"base64-js@1.5.1\": {\n \"integrity\": \"sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==\"\n },\n \"bignumber.js@9.3.1\": {\n \"integrity\": \"sha512-Ko0uX15oIUS7wJ3Rb30Fs6SkVbLmPBAKdlm7q9+ak9bbIeFf0MwuBsQV6z7+X768/cHsfg+WlysDWJcmthjsjQ==\"\n },\n \"boolbase@1.0.0\": {\n \"integrity\": \"sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==\"\n },\n \"buffer-equal-constant-time@1.0.1\": {\n \"integrity\": \"sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==\"\n },\n \"cheerio-select@2.1.0\": {\n \"integrity\": \"sha512-9v9kG0LvzrlcungtnJtpGNxY+fzECQKhK4EGJX2vByejiMX84MFNQw4UxPJl3bFbTMw+Dfs37XaIkCwTZfLh4g==\",\n \"dependencies\": [\n \"boolbase\",\n \"css-select\",\n \"css-what\",\n \"domelementtype\",\n \"domhandler\",\n \"domutils\"\n ]\n },\n \"cheerio@1.2.0\": {\n \"integrity\": \"sha512-WDrybc/gKFpTYQutKIK6UvfcuxijIZfMfXaYm8NMsPQxSYvf+13fXUJ4rztGGbJcBQ/GF55gvrZ0Bc0bj/mqvg==\",\n \"dependencies\": [\n \"cheerio-select\",\n \"dom-serializer\",\n \"domhandler\",\n \"domutils\",\n \"encoding-sniffer\",\n \"htmlparser2\",\n \"parse5\",\n \"parse5-htmlparser2-tree-adapter\",\n \"parse5-parser-stream\",\n \"undici\",\n \"whatwg-mimetype\"\n ]\n },\n \"cross-fetch@4.1.0\": {\n \"integrity\": \"sha512-uKm5PU+MHTootlWEY+mZ4vvXoCn4fLQxT9dSc1sXVMSFkINTJVN8cAQROpwcKm8bJ/c7rgZVIBWzH5T78sNZZw==\",\n \"dependencies\": [\n \"node-fetch@2.7.0\"\n ]\n },\n \"css-select@5.2.2\": {\n \"integrity\": \"sha512-TizTzUddG/xYLA3NXodFM0fSbNizXjOKhqiQQwvhlspadZokn1KDy0NZFS0wuEubIYAV5/c1/lAr0TaaFXEXzw==\",\n \"dependencies\": [\n \"boolbase\",\n \"css-what\",\n \"domhandler\",\n \"domutils\",\n \"nth-check\"\n ]\n },\n \"css-what@6.2.2\": {\n \"integrity\": \"sha512-u/O3vwbptzhMs3L1fQE82ZSLHQQfto5gyZzwteVIEyeaY5Fc7R4dapF/BvRoSYFeqfBk4m0V1Vafq5Pjv25wvA==\"\n },\n \"data-uri-to-buffer@4.0.1\": {\n \"integrity\": \"sha512-0R9ikRb668HB7QDxT1vkpuUBtqc53YyAwMwGeUFKRojY/NWKvdZ+9UYtRfGmhqNbRkTSVpMbmyhXipFFv2cb/A==\"\n },\n \"debug@4.4.3\": {\n \"integrity\": \"sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==\",\n \"dependencies\": [\n \"ms\"\n ]\n },\n \"detect-libc@2.0.2\": {\n \"integrity\": \"sha512-UX6sGumvvqSaXgdKGUsgZWqcUyIXZ/vZTrlRT/iobiKhGL0zL4d3osHj3uqllWJK+i+sixDS/3COVEOFbupFyw==\"\n },\n \"dom-serializer@2.0.0\": {\n \"integrity\": \"sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg==\",\n \"dependencies\": [\n \"domelementtype\",\n \"domhandler\",\n \"entities@4.5.0\"\n ]\n },\n \"domelementtype@2.3.0\": {\n \"integrity\": \"sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==\"\n },\n \"domhandler@5.0.3\": {\n \"integrity\": \"sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==\",\n \"dependencies\": [\n \"domelementtype\"\n ]\n },\n \"domutils@3.2.2\": {\n \"integrity\": \"sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw==\",\n \"dependencies\": [\n \"dom-serializer\",\n \"domelementtype\",\n \"domhandler\"\n ]\n },\n \"ecdsa-sig-formatter@1.0.11\": {\n \"integrity\": \"sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==\",\n \"dependencies\": [\n \"safe-buffer\"\n ]\n },\n \"encoding-sniffer@0.2.1\": {\n \"integrity\": \"sha512-5gvq20T6vfpekVtqrYQsSCFZ1wEg5+wW0/QaZMWkFr6BqD3NfKs0rLCx4rrVlSWJeZb5NBJgVLswK/w2MWU+Gw==\",\n \"dependencies\": [\n \"iconv-lite\",\n \"whatwg-encoding\"\n ]\n },\n \"entities@4.5.0\": {\n \"integrity\": \"sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==\"\n },\n \"entities@6.0.1\": {\n \"integrity\": \"sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==\"\n },\n \"entities@7.0.1\": {\n \"integrity\": \"sha512-TWrgLOFUQTH994YUyl1yT4uyavY5nNB5muff+RtWaqNVCAK408b5ZnnbNAUEWLTCpum9w6arT70i1XdQ4UeOPA==\"\n },\n \"extend@3.0.2\": {\n \"integrity\": \"sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==\"\n },\n \"fetch-blob@3.2.0\": {\n \"integrity\": \"sha512-7yAQpD2UMJzLi1Dqv7qFYnPbaPx7ZfFK6PiIxQ4PfkGPyNyl2Ugx+a/umUonmKqjhM4DnfbMvdX6otXq83soQQ==\",\n \"dependencies\": [\n \"node-domexception\",\n \"web-streams-polyfill\"\n ]\n },\n \"formdata-polyfill@4.0.10\": {\n \"integrity\": \"sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g==\",\n \"dependencies\": [\n \"fetch-blob\"\n ]\n },\n \"gaxios@7.3.1\": {\n \"integrity\": \"sha512-kB3rzJV7d9juLZh8/56QTXCwQfxyhdOMdyYk1HdQKFtF8TJTDTZQJtixWIwXdE9Jji91mC41DUNpjleo4L4eAQ==\",\n \"dependencies\": [\n \"extend\",\n \"https-proxy-agent\",\n \"node-fetch@3.3.2\"\n ]\n },\n \"gcp-metadata@8.1.2\": {\n \"integrity\": \"sha512-zV/5HKTfCeKWnxG0Dmrw51hEWFGfcF2xiXqcA3+J90WDuP0SvoiSO5ORvcBsifmx/FoIjgQN3oNOGaQ5PhLFkg==\",\n \"dependencies\": [\n \"gaxios\",\n \"google-logging-utils\",\n \"json-bigint\"\n ]\n },\n \"google-auth-library@10.9.1\": {\n \"integrity\": \"sha512-i1ydyHrqcIxXkWh/uBmVkzCvIuq5yiK2ATndIe5XxKholrG/MTYP9xGYka4sQhrbIAgGjL2B6NOE7rFaiF3fXw==\",\n \"dependencies\": [\n \"base64-js\",\n \"ecdsa-sig-formatter\",\n \"gaxios\",\n \"gcp-metadata\",\n \"google-logging-utils\",\n \"jws\"\n ]\n },\n \"google-logging-utils@1.1.3\": {\n \"integrity\": \"sha512-eAmLkjDjAFCVXg7A1unxHsLf961m6y17QFqXqAXGj/gVkKFrEICfStRfwUlGNfeCEjNRa32JEWOUTlYXPyyKvA==\"\n },\n \"hono@4.12.25\": {\n \"integrity\": \"sha512-2NFaIyNVgJmBs/ecmtGzlmluTFs5cHEWGTdu0t1HBwYzoGXOL5nUQBRMXsXWla5i4KkG//QMzVP88m1+I3fdAQ==\"\n },\n \"htmlparser2@10.1.0\": {\n \"integrity\": \"sha512-VTZkM9GWRAtEpveh7MSF6SjjrpNVNNVJfFup7xTY3UpFtm67foy9HDVXneLtFVt4pMz5kZtgNcvCniNFb1hlEQ==\",\n \"dependencies\": [\n \"domelementtype\",\n \"domhandler\",\n \"domutils\",\n \"entities@7.0.1\"\n ]\n },\n \"https-proxy-agent@7.0.6\": {\n \"integrity\": \"sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==\",\n \"dependencies\": [\n \"agent-base\",\n \"debug\"\n ]\n },\n \"iconv-lite@0.6.3\": {\n \"integrity\": \"sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==\",\n \"dependencies\": [\n \"safer-buffer\"\n ]\n },\n \"ipaddr.js@2.5.0\": {\n \"integrity\": \"sha512-aq+t5NAc+cS6rZQQVWC2x98CPqGtKKTMDd4Gaodv0wShnItdKg/51djkGJ1hqH+Oy0ivDftCbSLCQob8zso01w==\"\n },\n \"js-base64@3.9.3\": {\n \"integrity\": \"sha512-uwYQp+VJ38FVvtim6qNbit6e9uT6dwWQ4Y1+H9TxhW5hcHjpHwoxlR0nMpqUmIFOmu4VqMxwdJA88gIVuZJQ/g==\"\n },\n \"json-bigint@1.0.0\": {\n \"integrity\": \"sha512-SiPv/8VpZuWbvLSMtTDU8hEfrZWg/mH/nV/b4o0CYbSxu1UIQPLdwKOCIyLQX+VIPO5vrLX3i8qtqFyhdPSUSQ==\",\n \"dependencies\": [\n \"bignumber.js\"\n ]\n },\n \"jwa@2.0.1\": {\n \"integrity\": \"sha512-hRF04fqJIP8Abbkq5NKGN0Bbr3JxlQ+qhZufXVr0DvujKy93ZCbXZMHDL4EOtodSbCWxOqR8MS1tXA5hwqCXDg==\",\n \"dependencies\": [\n \"buffer-equal-constant-time\",\n \"ecdsa-sig-formatter\",\n \"safe-buffer\"\n ]\n },\n \"jws@4.0.1\": {\n \"integrity\": \"sha512-EKI/M/yqPncGUUh44xz0PxSidXFr/+r0pA70+gIYhjv+et7yxM+s29Y+VGDkovRofQem0fs7Uvf4+YmAdyRduA==\",\n \"dependencies\": [\n \"jwa\",\n \"safe-buffer\"\n ]\n },\n \"libsql@0.5.29\": {\n \"integrity\": \"sha512-8lMP8iMgiBzzoNbAPQ59qdVcj6UaE/Vnm+fiwX4doX4Narook0a4GPKWBEv+CR8a1OwbfkgL18uBfBjWdF0Fzg==\",\n \"dependencies\": [\n \"@neon-rs/load\",\n \"detect-libc\"\n ],\n \"optionalDependencies\": [\n \"@libsql/darwin-arm64\",\n \"@libsql/darwin-x64\",\n \"@libsql/linux-arm-gnueabihf\",\n \"@libsql/linux-arm-musleabihf\",\n \"@libsql/linux-arm64-gnu\",\n \"@libsql/linux-arm64-musl\",\n \"@libsql/linux-x64-gnu\",\n \"@libsql/linux-x64-musl\",\n \"@libsql/win32-x64-msvc\"\n ],\n \"os\": [\"darwin\", \"linux\", \"win32\"],\n \"cpu\": [\"x64\", \"arm64\", \"wasm32\", \"arm\"]\n },\n \"long@5.3.2\": {\n \"integrity\": \"sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==\"\n },\n \"ms@2.1.3\": {\n \"integrity\": \"sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==\"\n },\n \"node-domexception@1.0.0\": {\n \"integrity\": \"sha512-/jKZoMpw0F8GRwl4/eLROPA3cfcXtLApP0QzLmUT/HuPCZWyB7IY9ZrMeKw2O/nFIqPQB3PVM9aYm0F312AXDQ==\",\n \"deprecated\": true\n },\n \"node-fetch@2.7.0\": {\n \"integrity\": \"sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==\",\n \"dependencies\": [\n \"whatwg-url\"\n ]\n },\n \"node-fetch@3.3.2\": {\n \"integrity\": \"sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA==\",\n \"dependencies\": [\n \"data-uri-to-buffer\",\n \"fetch-blob\",\n \"formdata-polyfill\"\n ]\n },\n \"nth-check@2.1.1\": {\n \"integrity\": \"sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==\",\n \"dependencies\": [\n \"boolbase\"\n ]\n },\n \"p-retry@4.6.2\": {\n \"integrity\": \"sha512-312Id396EbJdvRONlngUx0NydfrIQ5lsYu0znKVUzVvArzEIt08V1qhtyESbGVd1FGX7UKtiFp5uwKZdM8wIuQ==\",\n \"dependencies\": [\n \"@types/retry\",\n \"retry\"\n ]\n },\n \"parse5-htmlparser2-tree-adapter@7.1.0\": {\n \"integrity\": \"sha512-ruw5xyKs6lrpo9x9rCZqZZnIUntICjQAd0Wsmp396Ul9lN/h+ifgVV1x1gZHi8euej6wTfpqX8j+BFQxF0NS/g==\",\n \"dependencies\": [\n \"domhandler\",\n \"parse5\"\n ]\n },\n \"parse5-parser-stream@7.1.2\": {\n \"integrity\": \"sha512-JyeQc9iwFLn5TbvvqACIF/VXG6abODeB3Fwmv/TGdLk2LfbWkaySGY72at4+Ty7EkPZj854u4CrICqNk2qIbow==\",\n \"dependencies\": [\n \"parse5\"\n ]\n },\n \"parse5@7.3.0\": {\n \"integrity\": \"sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw==\",\n \"dependencies\": [\n \"entities@6.0.1\"\n ]\n },\n \"promise-limit@2.7.0\": {\n \"integrity\": \"sha512-7nJ6v5lnJsXwGprnGXga4wx6d1POjvi5Qmf1ivTRxTjH4Z/9Czja/UCMLVmB9N93GeWOU93XaFaEt6jbuoagNw==\"\n },\n \"protobufjs@7.6.6\": {\n \"integrity\": \"sha512-dYDWdjSl5RNb7SgPxGQcRU+GtvP7s2fpkrY0r432PcOIaZ0/rBcxEZnQN67iJhFuQiVw754JDoPruPCNdGsbjg==\",\n \"dependencies\": [\n \"@protobufjs/aspromise\",\n \"@protobufjs/base64\",\n \"@protobufjs/codegen\",\n \"@protobufjs/eventemitter\",\n \"@protobufjs/fetch\",\n \"@protobufjs/float\",\n \"@protobufjs/path\",\n \"@protobufjs/pool\",\n \"@protobufjs/utf8\",\n \"@types/node\",\n \"long\"\n ],\n \"scripts\": true\n },\n \"retry@0.13.1\": {\n \"integrity\": \"sha512-XQBQ3I8W1Cge0Seh+6gjj03LbmRFWuoszgK9ooCpwYIrhhoO80pfq4cUkU5DkknwfOfFteRwlZ56PYOGYyFWdg==\"\n },\n \"safe-buffer@5.2.1\": {\n \"integrity\": \"sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==\"\n },\n \"safer-buffer@2.1.2\": {\n \"integrity\": \"sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==\"\n },\n \"tr46@0.0.3\": {\n \"integrity\": \"sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==\"\n },\n \"undici-types@8.3.0\": {\n \"integrity\": \"sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ==\"\n },\n \"undici@7.29.0\": {\n \"integrity\": \"sha512-IDxfleLmmbSskfWSUATiN1nfn2rDuvnMOqb5CWR92iIfojA0Ud+ulOAAEQ57LPr9rWmsreUyf5lwyao+7GNNVw==\"\n },\n \"web-streams-polyfill@3.3.3\": {\n \"integrity\": \"sha512-d2JWLCivmZYTSIoge9MsgFCZrt571BikcWGYkjC1khllbTeDlGqZ2D8vD8E/lJa8WGWbb7Plm8/XJYV7IJHZZw==\"\n },\n \"webidl-conversions@3.0.1\": {\n \"integrity\": \"sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==\"\n },\n \"whatwg-encoding@3.1.1\": {\n \"integrity\": \"sha512-6qN4hJdMwfYBtE3YBTTHhoeuUrDBPZmbQaxWAqSALV/MeEnR5z1xd8UKud2RAkFoPkmB+hli1TZSnyi84xz1vQ==\",\n \"dependencies\": [\n \"iconv-lite\"\n ],\n \"deprecated\": true\n },\n \"whatwg-mimetype@4.0.0\": {\n \"integrity\": \"sha512-QaKxh0eNIi2mE9p2vEdzfagOKHCcj1pJ56EEHGQOVxp8r9/iszLUUV7v89x9O1p/T+NlTM5W7jW6+cz4Fq1YVg==\"\n },\n \"whatwg-url@5.0.0\": {\n \"integrity\": \"sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==\",\n \"dependencies\": [\n \"tr46\",\n \"webidl-conversions\"\n ]\n },\n \"ws@8.21.3\": {\n \"integrity\": \"sha512-201TZ/kPWxoPr/OKWjquZR1SWKXcvxdH+e1xrx89b3YbmzLMFCLfnaG1HFIgWzJOEWZ7MvpK++odZufgYR50Rw==\"\n }\n },\n \"redirects\": {\n \"https://esm.town/v/std/API_URL\": \"https://esm.town/v/std/API_URL?v=5\",\n \"https://esm.town/v/std/sqlite/main.ts\": \"https://esm.town/v/std/sqlite@31-main/main.ts\"\n },\n \"remote\": {\n \"https://esm.town/v/std/API_URL?v=5\": \"46109f905a50e32281d3ffbe7b9c8209a778290c5274d83d131fba2d26c4974d\",\n \"https://esm.town/v/std/sqlite@31-main/main.ts\": \"1e2a0fdf57aa0b4fcf840c04d048e81f415d0ed93205522b6579b2971a8cfd64\"\n }\n}\n",[153],"4e102688-4fcf-4e78-97ff-f6907e072226","deno.json","935238aa-a63e-11f1-9f99-1607ee4eb77e",306,["D",1788465273064],"{\n \"compilerOptions\": {\n \"strict\": true,\n \"noUncheckedIndexedAccess\": true\n },\n \"tasks\": {\n \"check\": \"(test -f ../../../packages/val-kit/dist/index.js || (echo 'Build the kit first: pnpm --filter @canonry/val-kit build'; exit 1)) && deno check --allow-import --frozen --config deno.dev.json main.http.tsx\",\n \"check:prod\": \"deno check --allow-import --frozen main.http.tsx\",\n \"test\": \"(test -f ../../../packages/val-kit/dist/index.js || (echo 'Build the kit first: pnpm --filter @canonry/val-kit build'; exit 1)) && deno test --allow-env --allow-net --allow-import --frozen --config deno.dev.json test\",\n \"lint\": \"deno lint --config deno.dev.json main.http.tsx src test\",\n \"dev\": \"(test -f ../../../packages/val-kit/dist/index.js || (echo 'Build the kit first: pnpm --filter @canonry/val-kit build'; exit 1)) && deno run --allow-net --allow-env --allow-import --config deno.dev.json test/dev-server.ts\"\n },\n \"fmt\": {\n \"lineWidth\": 120,\n \"singleQuote\": true,\n \"semiColons\": false\n },\n \"lint\": {\n \"rules\": {\n \"exclude\": [\n \"no-import-prefix\"\n ]\n }\n }\n}\n",[161],"cb16d29c-f734-4227-a27a-e40b02a633a3","README.md","92e8b0ce-a63e-11f1-91a7-1607ee4eb77e",111,["D",1788308781777],4,"# AI Visibility Check\n\nEnter a domain. See whether an AI answer engine mentions your brand and cites your site.\n\nFree. No signup. About 45 seconds.\n\n## Signals\n\nTwo signals, measured separately.\n\n| Signal | Meaning |\n|---|---|\n| Mentioned | Your brand appears in the text the engine wrote. |\n| Cited | Your domain appears in the sources behind the answer. |\n\nThey are independent. A site can be cited without being named, or named without being cited.\n\n## Results\n\n- Three questions generated for your site\n- The full answer text\n- Mentioned and cited per question, with the sources used\n- A technical audit of a sample of pages\n- A map of how those pages link to each other\n\nA failed check is reported as failed, not scored as zero.\n\n## MCP\n\nThis is also an MCP server. No API key.\n\n```json\n{ \"mcpServers\": { \"ai-visibility-check\": { \"url\": \"https:///mcp\" } } }\n```\n\nTools: `start_check`, `get_check`, `get_ai_visibility`, `get_site_health`, `list_skills`, `read_skill`, `self_host`.\n\nThe Canonry and Aero analyst playbooks are served as MCP resources.\n\n## Limits\n\n- One engine (Gemini)\n- Three generated questions\n- Five pages of audit\n- One snapshot. No history, no tracking, no alerts\n\n## Canonry\n\nCanonry is the open source platform this samples. It runs on your own machine.\n\n```sh\nnpm install -g @canonry/canonry\ncanonry init\n```\n\nFour answer engines. Unlimited questions on a schedule. Whole-site audits. History, competitor share, and joins to\nSearch Console, GA4, and Bing.\n\n[github.com/Canonry/canonry](https://github.com/Canonry/canonry) · [canonry.ai](https://canonry.ai)\n",[168],"655360bd-bc32-4a60-b9ab-c9156f924695","CLAUDE.md","930d2c42-a63e-11f1-8d00-1607ee4eb77e",18,["D",1788292310988],"@AGENTS.md\n",[176],"25a0f6c1-cd25-49f9-af2d-a3903a2b2937","AGENTS.md","92f64d1a-a63e-11f1-8d00-1607ee4eb77e",299,["D",1788465274588],33,"# AI Visibility Check (Val Town)\n\nThis directory is the exact source mirrored to the public `canonry/AI-Visibility-Check` val. Git is authoritative; do not make\nproduction-only edits in Val Town because `vt push` removes remote-only files.\n\n## Naming\n\nThe Val is **AI Visibility Check**, not Canonry. It runs 3 generated queries against one engine and audits 5 pages,\nwhere Canonry tracks four engines on a schedule with no such limits. Calling this \"Canonry\" would tell a visitor, or\nan agent reading `serverInfo`, that they had the platform when they have a sample of it. So the product name, the val\nname, and the MCP `serverInfo.name` all say AI Visibility Check.\n\nAttribution runs the other way, and deliberately: every surface points back at the open-source project. The header\nbyline, the footer (with the install command), the MCP `initialize` instructions, the `self_host` tool, and the\nbundled skills all name Canonry and link to it. Keep that; a sample that does not lead anywhere is just a toy.\n\n## Boundaries\n\n- Keep the host Deno-native and web-standard. Do not import the Node Canonry server, Fastify, `better-sqlite3`, or the\n Vite dashboard.\n- Import reusable code through exact pins. Technical AEO uses `@canonry/aeo-audit`; everything a public check runs ON\n comes from `@canonry/val-kit`.\n- **The kit is the shared core; this Val is the product surface.** `@canonry/val-kit` owns the visibility contracts,\n brand matcher, evidence runner, share of voice, and Gemini adapter; the URL and Turnstile guards; both `CheckStore`\n implementations; check-record identity and the generic admission/lease machinery; MCP framing and the generated skill\n resources; and the design tokens and mark. What stays here is what this Val IS: its HTTP routes and response policy,\n the check runner's phases and every sentence a visitor reads, the Technical AEO adapter, its MCP tool surface, and its\n HTML. The admission test is mechanical — a module that references a visibility or site-health phase, string, or the\n product's own offering is not generic, whatever else is true of it. Moving one here is not a fork: delete the local\n copy and import the kit, or the two drift and only production finds out which one shipped.\n- **This Val owns its own result schema, and the kit stores it opaquely.** `CheckResult` and\n `CHECK_FINGERPRINT_NAMESPACE` live in `src/runtime/check-result.ts`; the Technical AEO sample's types\n (`SiteHealthSample`, `SiteMapNode`, `FactorSample`, `SiteHealthRunner`, …) live in `src/site-health/types.ts`. The\n kit sees them only as the `TResult` of `CheckRecord` — written as JSON, handed back untouched — which\n is what lets a second Val store a completely different result through the same admission, lease, and quota\n machinery. The parameter is named once, at `new ValSqliteCheckStore(sqlite)` in `main.http.tsx`, and\n every record downstream is typed from there; a cast on the result path in this Val means the generic was dropped\n somewhere above it. What stayed in the kit is the visibility INSTRUMENT's output and ports —\n `VisibilityReport`, `VisibilityEvidence`, `VisibilityProbePort` — because they are what a probe PRODUCES, not what\n a product stores.\n- The browser never receives provider, Turnstile-secret, deployment, or signing credentials.\n- Anonymous work is bounded by human verification, atomic quotas, cache reuse, output clipping, and hard provider/crawl\n deadlines.\n- `allowPrivateHost` names the ONE host being crawled, per attempt, and must never be widened. Val Town grants no DNS\n (`Deno.resolveDns` has no net access to the resolver, `node:dns.resolve4` returns UNKNOWN), so the engine's\n resolve-then-check SSRF guard fails closed on every hostname and the crawl audits zero pages for every domain. The\n option is a hostname rather than a boolean precisely so the guard cannot be switched off: a matching host skips the\n DNS preflight and IP pinning, and every other host, including a redirect to cloud metadata, is still resolved and\n still blocked. Two layers below it, `normalizePublicDomain` has already rejected private hosts at the input\n boundary, and Val Town's sandbox refuses fetches to 169.254.169.254, 127.0.0.1, 10/8 and 192.168/16 outright.\n- Keep Technical AEO labeled as a bounded page sample, not a whole-site score.\n- Mention and citation are independent signals. Summary denominators contain successful checks only; failures stay\n visible.\n- The visibility core (`contracts`, `runtime`, `brand`, `runner`) must not read environment, storage, or HTTP state.\n Only the Gemini adapter makes provider calls; the host owns credentials, quotas, and scheduling. That is now the\n kit's own seam rule — see `packages/val-kit/AGENTS.md` — and it is why `loadValTownConfig` takes the environment as\n an argument rather than reading `Deno.env` itself.\n- **Never render data the Val did not measure.** The landing page ships an empty state, not a fixture. It previously\n drew a four-engine trend with invented model identifiers, labelled only by a badge in the page header, well above\n the numbers it qualified — anyone who scrolled read fabrication as measurement, and it advertised three engines this\n Val does not run. A fresh check is a single Gemini snapshot; there is no history to draw and none may be invented.\n- Never present the Val as the full platform. Bounds stay stated on the surface that shows the number.\n- The bundled skills are generated into the KIT (`packages/val-kit/src/mcp/skills/`), not into this directory. Edit\n `skills//` at the repository root, then run `node scripts/sync-val-town-skills.mjs` and commit the result. CI\n runs it with `--check`. Never hand-edit a generated module.\n\n## MCP endpoint\n\n`POST /mcp` serves Model Context Protocol over Streamable HTTP so an agent can read this Val's checks directly. It is\nadditive: every browser route is unchanged, and the endpoint shares the same `CheckStore`, so an agent sees exactly the\nchecks the UI shows.\n\n- **Reads never spend.** `get_check`, `get_ai_visibility`, and `get_site_health` resolve through `store.get` and\n `store.findReusable` only. They must never reach `admit` or `dispatch`; a test asserts an uncached domain lookup\n leaves the store untouched.\n- **`start_check` is the only tool that spends,** and it runs the host's full admission path. It skips Turnstile,\n which an agent cannot solve, and spends from its own `mcp:` quota subject with its own daily limit. It must keep\n sharing the global daily cap and the single execution lease: the global cap is what bounds the bill, so MCP may\n widen who spends the budget but never how large it is. Disable with `CANONRY_MCP_START_CHECKS=0`.\n- **It blocks.** Execution is request-bound (`AbortSignal.timeout(45_000)`); there is no background queue, so\n returning a check ID early would kill the work with the request.\n- **Anonymous, on purpose.** Everything reachable here is already public: `/api/checks/:id` serves any check without a\n credential, and the skills ship in a public npm package. A token would gate nothing and would make the endpoint\n useless as something an agent is simply pointed at.\n- **Two protocol eras.** Revision `2026-07-28` removed sessions and the GET stream; every shipping client still opens\n with `initialize`. Both work. Keep the strict mirrored-header checks keyed off the version the caller declared, or\n legacy clients break.\n- Responses are always `application/json`. Nothing here streams, so do not add an SSE encoder.\n- `self_host` is the conversion path and costs nothing. Keep it in the read set and keep its comparison honest.\n- Mention and citation stay independent in tool output, and a failed check stays `null` rather than becoming `false`.\n\n## Share of voice\n\nThe kit's `visibility/share.ts` ranks every domain the engine attributed as a source across the answers.\n\n- **It is CITATION share, and the label must say so.** Mention share needs the rivals' brand names so they can be\n matched in the answer text. A public check has no competitor list, and the probe contract in\n the kit's `visibility/contracts.ts` forbids the shortcut: brand names are exact approved aliases and a prose alias is\n never derived from a domain. Inferring \"stripe.com is in the sources, so the word Stripe here is a rival mention\"\n is precisely the guess that contract rules out. Do not add it.\n- **A domain counts once per answer, never once per link.** Ten links to one documentation site is one site holding\n one answer; counting links would let a single well-linked page outrank a domain cited across every answer.\n- **A failed answer is unmeasured and cannot enter the denominator.** A successful answer that attributed no source is\n counted separately and stated, because an answer with no sources is not an answer where rivals won.\n- **The checked site keeps its row even at 0%,** and absorbs its own subdomains. A measured zero is the finding; a\n missing row reads as an error. The first version re-inserted the target only when it ranked BELOW the display cut,\n which silently dropped it whenever it was never cited at all: a domain absent from the ranking has no rank. Assert\n the ROW exists, not just that `targetShare` is zero, or the test passes while the UI omits it.\n- **Two bases, one ranker, never blended.** `Mentioned` is brands named in the answer prose; `Cited` is domains the\n engine attributed as sources. They are independent signals with separate tables, captions, column headers, and\n denominators, and `rank()` is shared so ordering, the display cut, and the tail cannot drift between them. The switch\n is two radios and a general-sibling CSS selector, never script: the page CSP blocks inline script, and a control that\n only works once an external file has loaded is broken on first paint. Radios also carry real keyboard semantics.\n- **Mention share exists only because of `mention-extract.ts`.** A mention is a name written in text, and nothing before\n the probes run knows the rivals' names. Deriving one from a cited domain is the exact inference `contracts.ts`\n forbids, so instead the model PROPOSES and exact matching DISPOSES: one extra bounded call lists the names each\n answer writes, and every proposal is re-verified with `namesWrittenIn`, the same adjacent-complete-words rule the\n target's own verdict uses. An invented, expanded, or translated name is not in the prose, so it is dropped. The\n target's row is counted from its OWN `mentioned` verdict, never from the extraction, because its aliases are approved\n and the extraction's are proposals.\n- **The extraction constrains its own output.** It uses no tool, so unlike the planner it can set `responseMimeType` +\n `responseSchema`; the planner has to hand-parse a fence because Gemini 2.5 refuses structured output alongside\n `googleSearch`. `thinkingBudget: 0` is set for the same reason the first live run returned nothing: thinking is on by\n default on 2.5 and bills from the same output allowance, so a reasoning model can spend the whole budget before\n writing a character and return empty text. Copying names out of a text needs no reasoning.\n- **`namedBrands: null` is unmeasured, not empty.** An answer the extraction never covered leaves the mention basis out\n of the denominator entirely. Counting it as naming nobody would deflate every share by an outage instead of\n reporting one.\n- **The Val budget is now five provider calls** (1 planner, 3 probes, 1 extraction), pinned by\n the kit's `visibility-gemini.test.ts`. That number is meant to be noticed when a feature adds a call.\n- **It is a donut, and the hole is the point.** The target's own share is written into the ring's centre and stated\n nowhere else. A share chart where the reader hunts for their own row has buried its own headline, and the section\n header used to print the same number a second time. Arc lengths come from the COUNTS, never from the rounded display\n percent: eight rows each rounded to 5% leave a ring visibly short of closing. Geometry rides on SVG attributes\n (`stroke-dasharray`, `stroke-dashoffset`), never inline style, because the page CSP blocks the latter. One neutral\n ramp drives both the arc stroke and the legend swatch through a `--share-color` custom property, so a colour is\n written once.\n- **The tail is a stated fact, not a row.** Folding it into `entries` printed \"12 more sites, 12 of 2 answers\", where\n the answers column counted appearances spread over twelve domains against the answer count. It is its own field, it\n keeps its bar segment, and the head plus the tail still total 1.\n- Segment geometry is SVG attributes, never inline style: the page CSP blocks inline styles. The checked site is the\n only coloured segment; rivals sit on a neutral ramp, because hues would imply a taxonomy that does not exist.\n\n## The engine pin lives in source, so the bump sweeps source\n\nVal Town ignores an import map, so every import is fully qualified inline:\n`npm:@canonry/aeo-audit@7.1.0`, repeated in each file that imports the engine. That is N places to drift instead of\none `deno.json` key.\n\n`scripts/bump-aeo-audit.mjs` therefore SWEEPS `apps/vals/ai-visibility-check/src` and `main.http.tsx` rather than editing a manifest\nkey, and `aeo-audit-dependency-contract.test.ts` asserts the set of inline specifiers collapses to exactly one version\nthat equals Canonry's pin. Both were written against the import map the val briefly had; the bump would have thrown on\nevery engine release and the val would have sat on an old engine while Canonry moved.\n\nA new file importing the engine is picked up with no change to either, which is the point of scanning rather than\nlisting.\n\n`npm:@canonry/val-kit@0.1.0/` is the same pattern for the same reason, and it is guarded the same way:\n`packages/canonry/test/val-kit-dependency-contract.test.ts` asserts each val's inline kit specifiers collapse to one\nversion, that it equals `packages/val-kit/package.json`, and that the two Deno configs stay on their respective sides\nof the seam. It iterates `apps/vals/*`, so a second val is covered on the day it lands. The deploy workflow repeats the\nversion half against public npm, because a pin CI resolved from the workspace still has to exist on the registry before\nVal Town can resolve it.\n\n## \"Partial\" was written in THREE places, and fixing one hid the other two\n\nReaching a configured ceiling was framed as a failure in three independent spots, all keyed off the same frozen\n`status`:\n\n1. the top-level `Partial result` banner (`statusCopy` in `render.ts`, via `mapStatus`),\n2. a `Partial site sample` notice inside Site Health (`mapSiteHealth`), and\n3. `Partial termination: ` in the Sample scope disclosure.\n\nEach was fixed in turn, and after each one the banner \"was gone\" — because the fix was verified by grepping for that\none string. Grep for the CONCEPT (`grep -oiE 'partial[a-z ]*'`) and render a real record, not for the sentence you\njust changed.\n\nAll three now key off whether work actually failed. The third keeps the reason visible as evidence and only changes\nthe framing: `Stopped at a configured limit: max pages` for a `max-*` reason, `Crawl ended early: ` for\nanything else.\n\n## The caution is read from the evidence, not from a stored flag\n\n`record.status` is decided once, when the check runs, and persisted. That makes it the wrong thing to warn a reader\noff. Correcting the rule behind it does NOT correct the records already written: every check from before the\nbounded-sample fix kept `status: 'partial'` for its whole 24h life, so a reader opening a shared link still got\n\"Partial result — Failed checks are shown separately\" over a run with zero failed probes and a completed crawl. The\nfix shipped and the screenshot still showed the banner, because the fix could only reach checks that had not happened\nyet.\n\n`hasFailedWork` reads the result instead: a probe left unmeasured (`mentioned` and `cited` both null), a crawl with\n`status: 'error'`, or a recorded phase error. A stored `partial` with none of those reads as `ready`. Any of them\nstill raises the caution, so a real failure is never swallowed.\n\nThis is the same principle as the factor ordering: a presentation decision over stored data belongs at READ time, not\nfrozen into the row. It also makes the next semantic correction retroactive for free.\n\n## A bounded sample reaching its own ceiling is COMPLETE\n\nThe crawler's `summary.complete` means \"the crawler saw the whole site\". This sample is designed never to do that:\n`maxPages` is 5. So `max-pages` fired on every real site, site health reported `partial`, that marked the whole record\npartial, and an amber \"Partial result — Only completed checks are included below. Failed checks are shown separately.\"\nsat at the top of every single report, over runs where nothing had failed. A caution on 100% of results is not a\ncaution; it is the first thing a reader sees and it says the product is broken.\n\n`isCompleteBoundedSample` keys off the termination reason instead. Every `max-*` reason names a limit configured in\n`VAL_TOWN_SITE_HEALTH_LIMITS`, so reaching one is the sample working. `root-host-redirect` — the only reason today\nthat is not one of ours — stays partial, because it means the crawl never reached the host that was asked for. An\nempty sample is still an `error`: hitting a ceiling cannot upgrade one. The reason itself was always shown under\n\"Sample scope\" and still is; only the STATUS was wrong.\n\n**Drive the browser path, not just MCP.** This survived every test and every MCP check because `start_check` over MCP\nbypasses Turnstile, and the notice is rendered from the record status by the UI. It took one real submission through\nthe form to see it.\n\n## Every Gemini call needs an explicit thinking budget\n\nGemini 2.5 thinks by DEFAULT and bills those tokens against `maxOutputTokens`. A call that does not set\n`thinkingConfig` can therefore spend its whole allowance reasoning and return a response with NO TEXT. It presents as\nlost data, never as an error.\n\nThe same bug landed three separate times before the pattern was obvious:\n\n| call | symptom | budget |\n|---|---|---|\n| `mention-extract.ts` | mentions silently unmeasured | `0` — copying names out needs no thought |\n| probe adapter | \"returned no answer text\", one lost answer per check | `512` of 2,400 — it simulates an engine, so some reasoning is wanted |\n| planner | \"returned invalid JSON\" from `JSON.parse('')`, losing every generated question | `0` of 1,200 — emitting a small JSON object needs no thought |\n\nThe kit's `visibility-gemini.test.ts` drives all three through a capturing client and fails if any omits an explicit\nbudget, or sets one that could consume its whole allowance. A new call site cannot inherit the default quietly.\n\n## An empty answer says which of eleven things happened\n\n`FinishReason` is a closed provider enum, and every value is mapped to a safe sentence. Mapping only the likely ones\nleft the rest falling through to \"contained no answer text\", which is where the diagnosis had already been destroyed\ntwice: the same probe failure got investigated from scratch each time because the message could not distinguish a\ntruncated answer from a refused one from one never attempted.\n\n`STOP` with no text is a real, observed outcome — the model ends cleanly and writes nothing — and it reads as \"the\nanswer engine finished without saying anything for this question\". That is a finding, not a bug: the signals stay\n`null`, because a brand cannot be absent from an answer that does not exist.\n\n## One flaky call must not cost the whole visibility phase\n\nThree things each turned a single transient failure into TOTAL visibility loss. All three are fixed, and all three\nwere found by reading real failed checks rather than by testing.\n\n- **The planner demanded an EXACT query count.** Two usable queries out of three threw, and the reader got nothing\n instead of two answers. Fewer than requested is a smaller sample; only ZERO is a failure, because then there is\n nothing to ask.\n- **Nothing retried.** `maxRetries: 0` on both the planner and the probe adapter, with `withBoundedRetry` wired and\n disabled. A transient 503 on one probe lost that answer outright, and one on the planner lost the entire phase.\n Both now retry once, INSIDE the deadline the call already holds, so the budget arithmetic is unchanged. The\n regression fixture proves the value: its retryable 429 used to report 2 successful / 1 failed and now reports 3 / 0.\n- **A planning failure discarded questions the VISITOR typed.** `probe()` rejected whole when `planner.plan()` threw,\n even with supplied queries in hand. Those are perfectly good probes; losing them because our generator hiccuped\n returns an empty report for work the visitor already specified. A planning failure is now fatal only when it leaves\n nothing to probe.\n\nThe call-count pin in the kit's `visibility-gemini.test.ts` moved 5 -> 6 to cover the retry. That number is meant to\nbe noticed: it is the check on what a public visitor can make this val spend.\n\n## The probe budget is arithmetic, not a guess\n\nThree deadlines in three files have to fit inside one ceiling: `plannerTimeoutMs` + probe waves x `probeTimeoutMs` +\n`MENTION_EXTRACT_LIMITS.timeoutMs` <= `PUBLIC_CHECK_WORK_BUDGET_MS`. Nothing but `probe-budget.test.ts` connects them.\n\nThey last disagreed in a way that cost the product: three probes at concurrency 2 need TWO waves, so the phase's worst\ncase was `10 + 2x10 + 12 = 42s` against a 45s ceiling. There was no room left to give a probe a realistic deadline, so\n`probeTimeoutMs` sat at 10s — and a grounded `googleSearch` answer regularly runs past that. A real check timed out on\nALL THREE probes. The 10s was never a judgement about Gemini; it was all the budget there was.\n\nRunning every probe in one wave (`probeConcurrency >= maxProbeCalls`) buys back a whole wave and pays for a 20s\ndeadline. Measured after: 3 of 3 successful in 16s wall clock. Raising `maxProbeCalls` without raising concurrency\nsilently reintroduces the second wave, so the test asserts one wave rather than asserting the numbers.\n\n## A phase that produced no rows still says why\n\n`publicProbeError` preserves why one PROBE failed. `visibilityPhaseError` preserves why the whole PHASE did — a\nplanning failure or a provider failure thrown before any probe ran. Without it a check that threw early reported \"The\nAI Visibility sample could not complete.\" and had no evidence rows to carry a reason either, so it was unexplainable\nfrom every surface.\n\nProvider failures route through the same `safeProviderErrorMessage` classifier the row path uses, so the two cannot\ndescribe one outage differently. Planning failures get their own sentence, because \"questions could not be generated\nfor this domain\" is a fact about the DOMAIN and the difference between \"try again\" and \"this will not work\".\n\n## A failed start must not look like a bounce\n\n`.form-busy` carries two different things: \"Starting check…\" and the reason a check failed. They used to be the same\n13px `--secondary` line, sitting directly under `#queries-help`, which is also 13px `--secondary`, and `.check-facts`\nat 12px muted. So when `restore()` hid the waiting view and un-hid the hero, the page appeared to bounce back to the\nform with nothing said, while the reason sat on screen as the fourth of four near-identical grey lines.\n\nA failure now gets `is-error`, which reuses the `.verification-unavailable` treatment already in the stylesheet\n(`--caution`, circled `!`). The glyph is generated content, not markup, because the message is set with `textContent`.\n`markBusy()` clears the class, so a previous failure cannot outlive the next submit.\n\nThe stub `classList` in `render.test.ts` had only `toggle` and `contains`. Adding `add`/`remove` was needed, and the\nexisting behavioural test caught the missing method immediately, which is the argument for driving the real script in\nthe harness rather than asserting on its source. The failure half still needs a `FormData` stub to drive, so it is\npinned at the source; the clear-on-submit half is behavioural.\n\n## A basis with no data is offered and explained\n\nThe section renders BOTH radios always. A basis with nothing to show gets a pane saying so and a dimmed label, and the\ndefault selection lands on a basis that has data so the page never opens onto an empty pane.\n\nIt used to render only the bases it had, which meant a check with no mention data lost the control entirely. A reader\ncannot tell a missing control from a broken page, and asked twice why the toggle was gone. This is not only about\nrecords written before the extraction shipped: the extraction call can fail on a live check, leaving `namedBrands:\nnull` on a fresh one.\n\n## Adding a measured signal bumps the reuse key\n\nThe thing to bump is `CHECK_FINGERPRINT_NAMESPACE` in `src/runtime/check-result.ts`, and it is bumped in exactly one\nplace. It is `visibility-v3` because checks now measure the brands each answer names. The key is the cache and the\none-active-check index, so a v2 record kept satisfying requests for the same domain and served a result silently\nmissing half the report until it hit its own 24h TTL. The repo's own identity-vs-tuning rule covers this: a\nparameter, or a signal, that changes what the operation PRODUCES must join the reuse key.\n\nThe namespace is a required argument to the kit's `checkFingerprint(namespace, domain, userQueries)` — the kit has no\ndefault and refuses an empty one, because a namespace two products shared would hand each of them the other's result\nand report it as a cache hit. So bump THIS constant when THIS Val's signal set changes, and never another Val's: that\nwould retire their live cache and change nothing about ours.\n\nBumping retires those records for REUSE only. `?check=` still resolves, so a shared link keeps working and shows\nthe explained-empty mention pane.\n\n## A numeric column is aligned once, on the column\n\n`is-numeric` goes on the header AND on every cell in that column, and one rule keys off it. Alignment used to live on\nthe cell classes only (`.share-pct`, `.share-count`, `.inbound-cell`), so every header inherited the table's `left` and\nsat half a table away from its own numbers: \"ANSWERS\" on the left edge, \"1 of 2\" on the right. Two places that had to\nbe kept in step by hand, and were not.\n\n`render.test.ts` walks every rendered table, reads which header indices carry the class, and asserts each body cell at\nthat index agrees. Note the lookahead in its header regex: `]*>` also matches ``, which silently shifts\nevery column index by one and makes the guard report a failure in the wrong column.\n\n## The link graph is numbers, not a diagram\n\nThe crawl's internal-link graph is real and still stored, still in the `get_site_health` MCP payload, and still capped\nby `site-map.ts`. It is no longer DRAWN, and the reason is worth keeping.\n\nA 5-page crawl cannot support a graph. On real data every crawled page came back at `depth 0` and every discovered\ntarget at `depth null`, and inbound links took three distinct values across 24 nodes. The diagram claimed three visual\nchannels (column = click depth, height = inbound rank, size = inbound count) and two of them had no variation to show,\nso node position was effectively alphabetical. A picture whose caption asserts axes the data cannot fill reads as\ninvented, and a reader who says \"is this fake?\" is reading it correctly.\n\nAn earlier version was worse: it spaced nodes evenly around concentric rings, so the angle came from an array index.\nAdjacency is the first thing an eye reads in a graph, and there it meant nothing at all.\n\nWhat survived: inbound links are now a column on the sampled-pages table, joined from the same graph by URL, and the\nbounded-crawl counts (\"N of M pages and N of M internal links\") are a line under it. Both are pinned by tests, because\nthe risk when deleting a visual is silently deleting the facts it carried.\n\n## UI\n\nMatch the Canonry dashboard's restrained evidence-first hierarchy: compact header, underline tabs,\ncharts/tables/details, visible focus, and native disclosure controls. Do not port the full React SPA or add a card grid.\n\n#- **Factors are ranked by score, best first, at read time.** The audit engine emits its rollup alphabetically, which\n reads as a list of names rather than a result. Order is a reading decision over stored data, not part of the record,\n so `orderFactors` is applied where the data is read: the UI view model and the `get_site_health` payload call the\n same comparator, so a check written before the change ranks correctly too and the two surfaces never disagree about\n which factor is doing best. An unmeasured factor sorts LAST, never as a zero: \"not applicable to the sampled page\n types\" is the absence of a measurement, and ranking it below the worst real score claims it is worse than the worst\n thing found. Ties break by name, since several factors scoring 100 is the common case. Assert factors by id, never by\n index; a positional assertion in `render.test.ts` broke the moment the order became meaningful.\n\n## Site Health follows the dashboard's page audit\n\nOne collapsed `

` per factor, mirroring `apps/web/src/components/project/PageAuditEvidence.tsx`. The summary\ncarries the name, the page count, and the score, which is everything a reader needs to decide whether to open it. The\nevidence and the fix live together inside, because a problem and its remedy are one thought.\n\nIt used to be two columns, Factors beside Top fixes, built by flattening every recommendation away from the factor it\ncame from and printing the factor's name as the fix's own subtitle. The two columns restated each other, and a\nrecommendation repeated across five sampled pages appeared five times, so one templated problem read as five.\nRecommendations and findings are now deduped onto their factor.\n\nCritical defects sit outside the score, so they render above the list and are never collapsed.\n\n### The waiting state\n\nA check takes about 45 seconds and execution is request-bound, so a native form POST leaves the browser blocked on a\nnavigation for the whole time with nothing on screen but a disabled button. Script intercepts the submit, posts to\n`/api/checks`, and shows `renderLoadingView()` until the id comes back. The work still happens inside that one\nrequest; it is just no longer the thing the browser is painting.\n\n- **It claims only what is knowable while waiting.** The domain and the visitor's own questions are already theirs;\n elapsed time is counted, not guessed. The bar is indeterminate on purpose: the server reports no phase, and a bar\n that filled would be inventing progress.\n- **The two tracks are concurrent because they are.** The runner is `Promise.allSettled` over the probe and the crawl,\n so showing them as parallel is a fact, not a layout choice. Do not turn them into a sequence of phases.\n- **The no-script path must keep working.** The form still carries `method=\"post\" action=\"/check\"`, the enhancement\n falls back when the waiting view is absent, and a test asserts both.\n- **Reset Turnstile on failure.** A token is redeemed exactly once, and this page now survives a failed submit, so a\n retry without `turnstile.reset()` sends a spent token.\n- Motion is `transform` and `opacity` only, and stops entirely under `prefers-reduced-motion`.\n\n### Say it once\n\nThe page carried the same idea up to three times. It opened with a `DOMAIN REPORT` kicker over a derived display name\nover a subtitle naming the two tabs directly beneath it over the domain the name came from; then an `AI VISIBILITY`\nkicker repeating the active tab; then a sentence defining mention against cited, which the evidence section defined\nagain in its own words a screen later. All of it is named in `DESIGN.md` (\"Do not repeat a page choice through cards,\ntabs, and headings\") and in `PRODUCT.md`'s anti-references (\"Multiple headings that restate the same page\").\n\nSo: no section kickers. Six tiny uppercase labels over six headings is scaffolding, not voice, and the headings\nalready name their sections. The page title is the domain itself, because that is the subject and a derived name is\none more thing to read. Mention against cited is stated once, in the metric labels where the numbers are\n(`Mentioned in the answer`, `Cited as a source`), not in prose above them and again below.\n\nTone belongs in a whole frame and a glyph, never a coloured rail down one edge. A `border-left` heavier than 1px used\nas an accent is the side-stripe pattern; notices use a full tone-tinted border instead.\n\n### What is shared with `apps/web`, and what cannot be\n\nThe two surfaces must LOOK like one product, but they cannot SHARE code. `apps/web` is React 19 + Vite + Tailwind 4\nwith TanStack Query, and its components are bound to the generated SDK (`useQuery(getApiV1…Options({client:\nheyClient}))`). This Val is a Deno request handler that returns HTML strings, with no bundler and a `script-src 'self'`\npolicy. Importing a component would drag in the router, the query layer, and a Tailwind build.\n\nSo the design system is shared by VALUE, and the values must be copied exactly:\n\n- **Fonts.** Same package and version the dashboard bundles, `@fontsource-variable/geist@5.3.0` and `-mono`, loaded\n from jsDelivr because a Val cannot ship woff2 (binary files are rejected). Naming Geist in a font stack without\n loading it — which is what this page did originally — silently renders the whole surface in a system font.\n- **Typographic detail.** `font-feature-settings: \"cv11\", \"ss01\", \"ss03\"`, `-0.015em` heading tracking (`-0.02em` on\n h1), `\"ss02\", \"cv11\"` on monospace, and antialiasing. Without these the same typeface still reads as a different one.\n- **Colour.** Token values are copied from `apps/web/src/styles.css`, alpha included (`rgb(24 24 27 / 0.3)`), not\n eyeballed to a nearby hex. A test pins them.\n\nThe site map is the one place where sharing was considered and rejected. The dashboard solves its layout with\nForceAtlas2 + noverlap in a `node:worker_threads` worker and renders it with Sigma/WebGL, for graphs of 20k–50k nodes.\nVal Town has no worker threads, the page must render without JavaScript, and this graph is at most 24 nodes — a regime\nwhere a force simulation is both overkill and non-deterministic. The deterministic depth-ring layout is the right\ntool at this size, not a shortcut.\n\n## Architecture\n\n```mermaid\nflowchart LR\n B[Browser] --> H[Val Town Deno host]\n H --> V[\"@canonry/val-kit visibility core\"]\n H --> A[@canonry/aeo-audit]\n V --> G[Gemini: 1 plan + 3 queries]\n A --> C[5-page site sample]\n G --> S[Sanitized check result]\n C --> S\n S --> Q[Val-scoped SQLite]\n Q --> B\n Q --> M[MCP endpoint /mcp]\n K[canonry + aero skills] --> M\n M --> N[Any MCP client]\n```\n\nThe Deno host owns HTTP routes, the check runner's phases, quota policy, and HTML. Technical AEO comes from the pinned\naudit engine. The visibility contracts, bounded evidence runner, Gemini planner and adapter, the URL and Turnstile\nguards, and both stores come from the pinned kit; none of them read environment, storage, or HTTP state.\n\n```text\napps/vals/ai-visibility-check/\n├── main.http.tsx Val HTTP entry\n├── deno.json PUSHED production graph: Deno tasks and lint policy\n├── deno.lock Production dependency lock (public npm)\n├── deno.dev.json Local dev graph: links @canonry/val-kit from the workspace\n├── deno.dev.lock Dev dependency lock (linked kit)\n├── .vt/state.json Val and branch identity (gitignored; CI generates it from the deploy workflow)\n├── src/\n│ ├── app/ HTTP routes and response policy\n│ ├── jobs/ Request-bound check runner: phases, budget, sanitizers, visitor copy\n│ ├── mcp/ This Val's MCP server and tool surface\n│ ├── site-health/ Technical AEO adapter, link-graph sample, factor ordering\n│ └── ui/ View models, HTML, and browser script\n└── test/ Deno backend and UI tests, plus the local dev server\n```\n\nEverything the tree no longer lists — `visibility/`, `security/`, `storage/`, check-record identity and the lease\nmachinery, MCP framing, the generated skills, and the design tokens — is `@canonry/val-kit`, imported by subpath.\n\n## Dependencies\n\nEvery dependency is fully qualified at the import site (`npm:hono@4.12.25`, `npm:@canonry/val-kit@0.1.0/jobs`,\n`https://esm.town/v/std/sqlite/main.ts`). Val Town resolves the module graph from esm.town and does NOT apply a pushed\n`deno.json` import map, so a bare specifier deploys and then throws `not a dependency and not in import map` at the\nfirst request. `deno.json` therefore excludes the `no-import-prefix` lint rule, which exists to enforce the opposite\nconvention.\n\n### Two configs, because the kit is resolved from two different places\n\n`deno.json` is PUSHED. It is the production graph, and it must describe only what Val Town can see: the public\nregistry. A `links` entry there would point at a workspace no deployed val has, and a shared `lock` would be rewritten\nwith a resolution production cannot reproduce. So it carries no `links`, no `nodeModulesDir`, and no `lock` key, and\nthe contract test fails if one appears.\n\n`deno.dev.json` is LOCAL, and `.vtignore` keeps it (and `deno.dev.lock` and `node_modules/`) out of the push. It\nduplicates `compilerOptions`, `lint`, and `fmt` — Deno has no `extends`, so there is no way to share them — and adds\n`links: [\"../../../packages/val-kit\"]`, `nodeModulesDir: \"auto\"` (linking an npm package REQUIRES a node_modules\ndirectory; without it Deno refuses outright), and its own `lock: \"deno.dev.lock\"`. That is what lets one PR change the\nkit and this val together, before the kit is published. `deno.dev.lock` is committed, because `--frozen` needs it and\nCI checks out fresh.\n\n**Build the kit first.** Deno consumes an npm package as built JavaScript, and the kit's `exports` point at `dist/`,\nso `pnpm --filter @canonry/val-kit build` has to run before any Deno task here. The `check`, `test`, and `dev` tasks\nguard on `dist/index.js` and say so rather than failing inside a resolution error. Deno re-syncs its copy of a linked\npackage whenever that `dist/` changes, so rebuilding is the whole refresh step.\n\n## Fixed public limits\n\n- A visitor may supply up to three questions; the planner generates only the remainder, and is not called at all when\n all three are supplied. Supplied questions are IDENTITY, not tuning: they join `checkFingerprint`, so two callers\n asking different questions about one domain never share a cached result.\n- One grounded Gemini planning call creates the questions the visitor did not supply.\n- Three Gemini checks run with a concurrency limit of two.\n- The site sample checks at most five pages and 2,500 edges.\n- The full request stops after 45 seconds.\n- Turnstile, daily quotas, one active job, and a 24-hour cache bound public use.\n- The link map displays at most 24 nodes and 60 edges, and says so when it truncates.\n\nThe host scopes `allowPrivateHost` to the one host being crawled, per the boundary above. Failed provider\nchecks stay `Not measured` and do not reduce reported rates.\n\n## Local development\n\n```sh\ndeno task dev # http://localhost:8787 — stub runners, no network\nGEMINI_API_KEY=… deno task dev # real Gemini planner, probes, and crawl\n```\n\nIn-memory storage and no Turnstile, so the UI and `/mcp` both work without credentials. `npx\n@modelcontextprotocol/inspector` against `http://localhost:8787/mcp` drives the endpoint as a real client would.\n\n## Verification\n\nRun `pnpm --filter @canonry/val-kit build` from the repository root, then `deno task check`, `deno task lint`, and\n`deno task test` from this directory, plus `node scripts/sync-val-town-skills.mjs --check` from the root. Those three\ntasks validate the DEV graph, which is what CI's `vals` matrix job runs.\n\n`deno task check:prod` validates the PRODUCTION graph instead (plain `deno.json`, `--frozen`). It cannot pass until\nthe pinned kit version is on public npm — before that it fails with `npm package '@canonry/val-kit' does not exist` —\nwhich is the same gate the deploy workflow applies, on purpose. A deployment additionally requires a `vt push\n--dry-run` and a live health smoke test.\n\n## Production configuration\n\nSet in Val Town: `VAL_TOWN_ENV=production`, `GEMINI_API_KEY`, `CANONRY_QUOTA_SALT`, `TURNSTILE_SECRET_KEY`,\n`TURNSTILE_SITE_KEY`, `TURNSTILE_ALLOWED_HOSTNAMES`. Optional: `CANONRY_MCP_START_CHECKS=0` removes the MCP write\ntool; `CANONRY_MCP_PER_CLIENT_DAILY_LIMIT` sets its daily per-caller allowance (default 2).\n\nPublic checks are disabled when the production quota salt or Turnstile configuration is absent, so an unconfigured\ndeployment serves reads and skills but refuses to spend.\n\n## Release order\n\n1. Publish the pinned `@canonry/val-kit` version with the `Publish @canonry/val-kit` workflow\n (`.github/workflows/publish-val-kit.yml`). Until then the production graph cannot resolve, and both `check:prod`\n and the deploy workflow fail closed — by design, since a val that deploys against an unpublished pin throws at the\n first request instead of at the push.\n2. Refresh the production `deno.lock` with `deno check --allow-import main.http.tsx` (plain config, no `--frozen`) and\n commit it. `deno.dev.lock` is separate and is not touched by this.\n\n> **Deno blocks a freshly published version for 24 hours.** `deno check` applies a\n> minimum dependency age policy (default 24h) to reduce supply-chain risk, so the\n> step above fails with \"blocked by the minimum dependency age policy\" if the kit\n> was published minutes ago. Pass `--min-dep-age 0` to generate the lock anyway —\n> defensible for a first-party package this repo just built and published from a\n> reviewed commit. The override is only needed to CREATE the lock: once the lock\n> pins the version with its integrity hash, `--frozen` resolves from the lock and\n> the policy does not apply, so the deploy workflow needs no flag and no config.\n3. Regenerate the skill mirror with `node scripts/sync-val-town-skills.mjs`.\n4. Run the verification commands above, including `deno task check:prod`.\n5. Run `vt push --dry-run` and review the file plan. A local push reads `.vt/state.json`; CI has none, so the deploy\n workflow generates it from the val and branch IDs pinned in the workflow with\n `node scripts/write-val-town-state.mjs apps/vals/ai-visibility-check`.\n6. Run `vt push` only after approval.\n7. Request `/healthz` and confirm `{\"ok\":true}`.\n\n`vt push` makes the Val match this directory. It deletes remote-only files, so do not edit production in the Val Town\neditor.\n\n## A failed check says why\n\n`mentioned: null` / `cited: null` is a check that did not happen, and the row reads \"Not measured\". The runner already\nclassifies why into a closed set of safe strings (timed out, rate-limited, temporarily unavailable, credentials\nrejected, no answer text, unusable model, cancelled, generic), and `gemini-probe.ts` carries the message through.\n\nThe public sanitizer used to overwrite all of it with one \"This answer-engine check was unavailable.\". Nothing is\nlogged either, so the reason existed for one function call and was then destroyed: a row nobody, operator included,\ncould explain afterwards. `publicProbeError` now translates each known message into visitor wording (\"answer engine\",\nnot \"provider\") and falls back to the generic sentence for anything it does not recognize, so a sanitizer still never\ntrusts its input.\n\n`probe-error-copy.test.ts` drives the REAL runner into each failure, then asserts none of them lands on the generic\nfallback. That is the guard: a new failure mode added upstream without a translation fails the suite instead of\nsilently erasing its own reason. The banner leads with the reason only when every failed check shares one; with two\ndifferent reasons it would have to pick one and be wrong about the rest, so it defers to the per-row evidence.\n\n## Say it once, and say it where it belongs\n\nThe block under the landing form was three paragraphs of identical muted grey carrying five facts, two of them twice:\nthe question count sat in the hint and again in the page footer, and the single engine sat in its own sentence and\nagain in the footer. Repetition with no contrast is what made it read as a wall.\n\nIt is now two lines with two steps of hierarchy:\n\n- The **hint** (13px, `--secondary`) is an instruction and belongs to the questions field. `DESIGN.md` reserves\n `--muted` for nonessential metadata and forbids putting instructions in it, which is what the old block did with all\n three lines.\n- The **facts row** (12px, `--muted`, dot-separated) is scope metadata, so muted is correct there. It reuses the\n `.sample-facts` separator vocabulary, including the narrow-width collapse to a stack, since a wrapped item that\n begins with a separator reads as broken.\n\nThe footer sentence is gone from the LANDING, where the facts row above it already says everything, and kept on the\nRESULT page, where there is no form and a report read on its own must still state what it is a sample of. Both are\npinned by tests. The redundancy test counts on the visible block only: the tooltip's copy is deliberately written\ntwice, once as the trigger's accessible name and once as the body, which is one statement for two audiences.\n\n## The heading's tooltip is CSS only\n\nThe landing explains itself through a note on the heading rather than a subtitle. It opens on `:hover` and, critically,\n`:focus-within` — the page CSP allows no inline script, and the trigger must work before the enhancement script loads\nor without it at all. That is why the trigger is a real `

Diff · v323