[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_495":496,"_497":498},"routes/_app.x.$handle.$name",{"_100":99,"_32":45,"_109":90,"_27":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":26,"_124":125,"_126":24,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":26,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":24,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":26},"version",38,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":26,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":37,"_38":39,"_40":14,"_41":42,"_23":26},"previous","deleted",true,"deletedHere",false,"path","src/runtime/records.ts","latestPath","fileId","93b29a9c-a63e-11f1-965f-1607ee4eb77e","name","records.ts","fileType","script","content","/**\n * Shared record identity and lifetime rules.\n *\n * Both the HTTP app and the MCP endpoint resolve checks and decide whether one\n * is still readable. Two copies of either rule would drift silently: a\n * mismatched fingerprint makes the MCP endpoint miss cached work the UI can\n * see, and a mismatched expiry lets one surface serve a result the other has\n * already retired.\n */\nimport type { CheckRecord } from './types.ts'\n\n/**\n * Reuse identity for a domain check. It is versioned because it keys the cache\n * and the one-active-check index: changing what a check measures without\n * changing this prefix would let an old result answer a new question.\n */\nexport function checkFingerprint(domain: string): string {\n return `visibility-v1:${domain}`\n}\n\n/** A record with no `expiresAt` never expires; anything at or past it is gone. */\nexport function isCheckExpired(record: CheckRecord, at: Date): boolean {\n if (!record.expiresAt) return false\n const expiresAt = Date.parse(record.expiresAt)\n return Number.isFinite(expiresAt) && expiresAt <= at.getTime()\n}\n","createdAt",["D",1788292312042],"branchVersion","branchId","a4524491-dcb3-470a-a361-437a88df6a63","id","b1194860-7c77-41d7-b0b7-f3529a80e15b","AI-Visibility-Check",["D",1788292195151],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Does AI mention your brand and cite your site? Free check.","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/f4d36c97-6af9-485c-0fa5-13e825466c01/square512?exp=1789549199&sig=92ee6749b247ee91708b5e416b8711f6feca8aafcccd8176db8c563f01c4ab51","891d245e-ec71-404d-a5ca-223733ee2844","pinnedFileId","92ee44ee-a63e-11f1-8fd4-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0460b-6625-75ce-9e7f-9a6b062b0798","tursoName","b11948607c7741d7b0b7f3529a80e15b","tursoHostname","b11948607c7741d7b0b7f3529a80e15b-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789514495229],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":-5,"_105":106,"_107":26},"branch",{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"isOwned",333,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","canonry","handle","displayName","Canonry","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/5ae39d80-0d23-48e5-89d8-6bd2a7096401/square512?exp=1789549199&sig=8fff3646e917fd1a59abe9de8276029babb42246cd40658a590eb6cf82b240b4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":490,"_47":-5,"_48":26,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":24,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":491,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":492,"_84":493,"_86":494,"_88":26},"tree",[201,233,234,235,236,237,238],"files",[201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238],"counts",{"_190":63,"_191":186,"_192":63,"_193":194,"_195":196},"contents",[131,132,133,134,135,136,137],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":183,"_32":184,"_30":185,"_140":-5,"_41":42,"_40":186,"_142":24,"_38":187,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_27":189},{"_43":176,"_32":177,"_30":178,"_140":-5,"_41":42,"_40":179,"_142":26,"_38":180,"_13":63,"_34":20,"_36":181,"_23":26,"_146":-5,"_27":182},{"_43":169,"_32":170,"_30":171,"_140":-5,"_41":42,"_40":172,"_142":26,"_38":173,"_13":63,"_34":20,"_36":174,"_23":26,"_146":-5,"_27":175},{"_43":162,"_32":163,"_30":164,"_140":-5,"_41":42,"_40":165,"_142":24,"_38":166,"_13":63,"_34":20,"_36":167,"_23":26,"_146":-5,"_27":168},{"_43":155,"_32":156,"_30":157,"_140":-5,"_41":42,"_40":158,"_142":26,"_38":159,"_13":63,"_34":20,"_36":160,"_23":26,"_146":-5,"_27":161},{"_43":148,"_32":149,"_30":150,"_140":-5,"_41":42,"_40":151,"_142":26,"_38":152,"_13":63,"_34":20,"_36":153,"_23":26,"_146":-5,"_27":154},{"_43":138,"_32":139,"_30":58,"_140":-5,"_41":42,"_40":141,"_142":26,"_38":143,"_13":63,"_34":144,"_36":145,"_23":26,"_146":-5,"_27":147},"5188999e-ad25-4c5c-8de9-2938d6984856","main.http.tsx","parentId",15,"latest",["D",1788292310790],"http","import { sqlite } from '@valtown/sqlite'\nimport { createValTownApp } from './src/app/app.ts'\nimport { loadValTownConfig } from './src/config/index.ts'\nimport { createPublicCheckRunner, createRequestBoundDispatcher } from './src/jobs/public-check.ts'\nimport { createSiteHealthRunner } from './src/site-health/runner.ts'\nimport { ValSqliteCheckStore } from './src/storage/val-sqlite.ts'\nimport {\n canonryDemoClientScript,\n canonryDemoStyles,\n createPublicCheckForm,\n demoCanonryViewModel,\n renderCanonryDemo,\n toCanonryDemoViewModel,\n} from './src/ui/index.ts'\nimport { createGeminiValVisibilityProbe } from './src/visibility/gemini-probe.ts'\n\nconst config = loadValTownConfig()\nconst store = new ValSqliteCheckStore(sqlite)\nawait store.initialize()\n\nconst visibilityProbe = config.geminiApiKey\n ? createGeminiValVisibilityProbe({ apiKey: config.geminiApiKey, model: config.geminiModel ?? undefined })\n : null\nconst runner = createPublicCheckRunner({\n store,\n visibilityProbe,\n siteHealthRunner: createSiteHealthRunner(),\n ttlMs: config.checkTtlMs,\n})\n\nconst form = createPublicCheckForm(config)\n\nconst app = createValTownApp({\n store,\n config,\n dispatcher: createRequestBoundDispatcher(runner),\n renderPage: (record) =>\n record\n ? renderCanonryDemo(toCanonryDemoViewModel(record, { form, title: 'Canonry sample' }))\n : renderCanonryDemo({ ...demoCanonryViewModel, form }),\n assets: { styles: canonryDemoStyles, script: canonryDemoClientScript },\n})\n\nexport default app.fetch\n","label",[139],"fbb68b0c-0ce2-4e8d-9ee4-3fb5259c1a6d","deno.json","935238aa-a63e-11f1-9f99-1607ee4eb77e",26,["D",1788292310786],"{\n \"compilerOptions\": {\n \"strict\": true,\n \"noUncheckedIndexedAccess\": true\n },\n \"imports\": {\n \"hono\": \"npm:hono@4.12.25\",\n \"@canonry/aeo-audit\": \"npm:@canonry/aeo-audit@7.1.0\",\n \"@google/genai\": \"npm:@google/genai@1.46.0\",\n \"@valtown/sqlite\": \"https://esm.town/v/std/sqlite/main.ts\"\n },\n \"tasks\": {\n \"check\": \"deno check --allow-import --frozen main.http.tsx\",\n \"test\": \"deno test --allow-env --allow-net --allow-import --frozen test\",\n \"lint\": \"deno lint --allow-import main.http.tsx src test\",\n \"dev\": \"deno run --allow-net --allow-env --allow-import test/dev-server.ts\"\n },\n \"fmt\": {\n \"lineWidth\": 120,\n \"singleQuote\": true,\n \"semiColons\": false\n }\n}\n",[149],"d96e6cf8-bc82-4972-bc5b-b415d772d5e5","README.md","92e8b0ce-a63e-11f1-91a7-1607ee4eb77e",14,["D",1788292310785],"# AEO Check — a Canonry sample on Val Town\n\nThis directory contains **AEO Check** (`canonry/aeo-check`), a free, bounded public sample of Canonry. Git is the\nsource for every file in the Val.\n\nIt is deliberately not called Canonry: one check is 3 generated non-brand queries against Gemini plus a 5-page audit,\nwhile Canonry tracks Gemini, ChatGPT, Claude, and Perplexity on a schedule with no such limits. Every surface — header\nbyline, footer, MCP `initialize` instructions, the `self_host` tool, and the bundled skills — points back at the\nopen-source project at [github.com/Canonry/canonry](https://github.com/Canonry/canonry).\n\nThe sample uses one Canonry interface for two reports:\n\n- **AI Visibility** shows a sample trend, fresh Gemini results, and source evidence for each query.\n- **Site Health** shows a bounded Technical AEO score, factors, fixes, and page evidence.\n\nThe same data is also served to agents over MCP at `POST /mcp`, together with the bundled `canonry` and `aero` skills.\n\nThe four-engine trend contains labeled sample data. A fresh domain check contains one real Gemini snapshot and no\ninvented history.\n\n## Architecture\n\n```mermaid\nflowchart LR\n B[Browser] --> H[Val Town Deno host]\n H --> V[Val-local visibility core]\n H --> A[@canonry/aeo-audit]\n V --> G[Gemini: 1 plan + 3 queries]\n A --> C[5-page site sample]\n G --> S[Sanitized check result]\n C --> S\n S --> Q[Val-scoped SQLite]\n Q --> B\n Q --> M[MCP endpoint /mcp]\n K[canonry + aero skills] --> M\n M --> N[Any MCP client]\n```\n\nThe Deno host owns HTTP routes, Turnstile, quotas, cache records, job leases, and HTML. Technical AEO comes from the\npinned audit engine. This Val owns the visibility contracts, bounded evidence runner, Gemini planner, and Gemini adapter.\nThe visibility core does not read environment, storage, or HTTP state.\n\n## Directory map\n\n```text\napps/val-town/\n├── main.http.tsx Val HTTP entry\n├── deno.json Production imports and Deno tasks\n├── deno.lock Deno dependency lock\n├── .vt/state.json Val and branch identity\n├── src/\n│ ├── app/ HTTP routes and response policy\n│ ├── config/ Environment configuration\n│ ├── jobs/ Request-bound check runner\n│ ├── mcp/ MCP transport, tools, and generated skill resources\n│ ├── security/ URL and Turnstile checks\n│ ├── site-health/ Technical AEO adapter\n│ ├── storage/ SQLite and memory ports\n│ ├── ui/ Canonry HTML, CSS, and browser script\n│ └── visibility/ Local contracts, evidence runner, Gemini planner and adapter\n└── test/ Deno backend and UI tests\n```\n\n## Connect an agent\n\n`POST /mcp` speaks the Model Context Protocol over Streamable HTTP. Point any MCP client at the Val's `/mcp` URL; no\ncredential is required, because everything it serves is already public.\n\n```json\n{ \"mcpServers\": { \"aeo-check\": { \"url\": \"https:///mcp\" } } }\n```\n\nIt exposes six read tools — `get_check`, `get_ai_visibility`, `get_site_health`, `list_skills`, `read_skill`,\n`self_host` — plus `start_check`, and serves all 16 `canonry` and `aero` skill documents as MCP resources, entry points first. An agent\nreads the entry point for how to interpret coverage, then opens the reference the task calls for, exactly as it would\nin a local install.\n\nReads address a check by `checkId` or by `domain` and never spend: a domain resolves to the most recent cached check,\nor reports a miss. `start_check` runs a fresh one and blocks until it finishes, up to about 45 seconds, because\nexecution is request-bound and there is no background queue.\n\n`start_check` skips Turnstile, which an agent cannot solve, and spends from its own daily bucket\n(`CANONRY_MCP_PER_CLIENT_DAILY_LIMIT`, default 2) keyed on the caller's edge IP. It shares the same global daily cap\nand the same single execution lease as the browser, so MCP widens who may spend the budget, never how large it is. A\ndomain checked within the cache TTL returns immediately at no cost. Set `CANONRY_MCP_START_CHECKS=0` to remove the\ntool entirely.\n\nBoth protocol revisions work: the sessionless `2026-07-28` transport and the older `initialize` handshake that current\nclients still use.\n\n`src/mcp/skills/` is generated from `skills/` at the repository root — Val Town caps a file at 80,000 characters and\n`canonry-cli.md` is over it, so the mirror chunks each document. Run `node scripts/sync-val-town-skills.mjs` after\nediting a skill and commit the result; `--check` fails on drift.\n\n## Fixed public limits\n\n- One grounded Gemini planning call creates three non-brand queries.\n- Three Gemini checks run with a concurrency limit of two.\n- The site sample checks at most five pages and 2,500 edges.\n- The full request stops after 45 seconds.\n- Turnstile, daily quotas, one active job, and a 24-hour cache bound public use.\n\nThe host never sets `allowPrivateHost`. Failed provider checks stay `Not measured` and do not reduce the reported rates.\n\n## Run it locally\n\n```sh\ncd apps/val-town\ndeno task dev # http://localhost:8787 — stub runners, no network\nGEMINI_API_KEY=… deno task dev # real Gemini planner, probes, and crawl\n```\n\nIn-memory storage and no Turnstile, so the UI and `/mcp` both work without credentials. Smoke-test the endpoint with:\n\n```sh\ncurl -s localhost:8787/mcp -H 'content-type: application/json' \\\n -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"tools/list\"}'\n```\n\nOr drive it from a real client: `npx @modelcontextprotocol/inspector`, then connect to\n`http://localhost:8787/mcp` over Streamable HTTP.\n\n## Local checks\n\n```sh\nnode scripts/sync-val-town-skills.mjs --check # from the repository root\n\ncd apps/val-town\nnpx --yes deno@2.7.5 check --allow-import --frozen --config deno.json main.http.tsx\nnpx --yes deno@2.7.5 lint --config deno.json main.http.tsx src test\nnpx --yes deno@2.7.5 test --allow-env --allow-net --allow-import --frozen --config deno.json test\n```\n\n## Production configuration\n\nSet these environment variables in Val Town:\n\n- `VAL_TOWN_ENV=production`\n- `GEMINI_API_KEY`\n- `CANONRY_QUOTA_SALT`\n- `TURNSTILE_SECRET_KEY`\n- `TURNSTILE_SITE_KEY`\n- `TURNSTILE_ALLOWED_HOSTNAMES`\n\nOptional: `CANONRY_MCP_START_CHECKS=0` disables MCP-started checks; `CANONRY_MCP_PER_CLIENT_DAILY_LIMIT` sets their\ndaily per-caller allowance (default 2).\n\nThe host disables public checks when the production quota salt or Turnstile configuration is absent.\n\n## Release order\n\n1. Regenerate `deno.lock` with `deno.json`, and the skill mirror with `node scripts/sync-val-town-skills.mjs`.\n2. Run the local checks.\n3. Run `vt push --dry-run` from this directory.\n4. Review the file plan.\n5. Run `vt push` only after approval.\n6. Request `/healthz` and make sure that it returns `{\"ok\":true}`.\n\n`vt push` makes the Val match this directory. It deletes remote-only files, so do not edit production in the Val Town\neditor.\n",[156],"655360bd-bc32-4a60-b9ab-c9156f924695","CLAUDE.md","930d2c42-a63e-11f1-8d00-1607ee4eb77e",18,["D",1788292310988],"@AGENTS.md\n",[163],"45bc70da-b408-45c0-826b-7bd5c2e0dc27","AGENTS.md","92f64d1a-a63e-11f1-8d00-1607ee4eb77e",16,["D",1788292310802],"# AEO Check (Val Town)\n\nThis directory is the exact source mirrored to the public `canonry/aeo-check` val. Git is authoritative; do not make\nproduction-only edits in Val Town because `vt push` removes remote-only files.\n\n## Naming\n\nThe Val is **AEO Check**, not Canonry. It runs 3 generated queries against one engine and audits 5 pages; Canonry\ntracks four engines on a schedule with no such limits. Calling this \"Canonry\" would tell a visitor — or an agent\nreading `serverInfo` — that they had the platform when they have a sample of it, so the product name, the val name,\nand the MCP `serverInfo.name` all say `aeo-check`.\n\nAttribution runs the other way, and deliberately: every surface points back at the open-source project. The header\nbyline, the footer (with the install command), the MCP `initialize` instructions, the `self_host` tool, and the\nbundled skills all name Canonry and link to it. Keep that; a sample that does not lead anywhere is just a toy.\n\n## Boundaries\n\n- Keep the host Deno-native and web-standard. Do not import the Node Canonry server, Fastify, `better-sqlite3`, or the\n Vite dashboard.\n- Import reusable engines through exact pins. Technical AEO uses `@canonry/aeo-audit`; AI Visibility is implemented\n locally under `src/visibility/` so this Val owns its Gemini planner, adapter, and evidence runner.\n- The browser never receives provider, Turnstile-secret, deployment, or signing credentials.\n- Anonymous work is bounded by human verification, atomic quotas, cache reuse, output clipping, and hard provider/crawl\n deadlines.\n- Never set `allowPrivateHost`. Keep Technical AEO labeled as a bounded page sample, not a whole-site score.\n- Mention and citation are independent signals. Summary denominators contain successful checks only; failures stay\n visible.\n- The visibility core (`contracts`, `runtime`, `brand`, `runner`) must not read environment, storage, or HTTP state.\n Only the Gemini adapter makes provider calls; the host owns credentials, quotas, and scheduling.\n- Demo history must be explicitly labeled sample data. A fresh check is a snapshot until real history exists.\n- Never present the Val as the full platform. Bounds stay stated on the surface that shows the number.\n- `src/mcp/skills/` is generated. Edit `skills//` at the repository root, then run\n `node scripts/sync-val-town-skills.mjs` and commit the result. Never hand-edit a generated module.\n\n## MCP endpoint\n\n`POST /mcp` serves Model Context Protocol over Streamable HTTP so an agent can read this Val's checks directly. It is\nadditive: every browser route is unchanged, and the endpoint shares the same `CheckStore`, so an agent sees exactly the\nchecks the UI shows.\n\n- **Reads never spend.** `get_check`, `get_ai_visibility`, and `get_site_health` resolve through `store.get` and\n `store.findReusable` only. They must never reach `admit` or `dispatch`; a test asserts an uncached domain lookup\n leaves the store untouched.\n- **`start_check` is the only tool that spends,** and it runs the host's full admission path. It skips Turnstile,\n which an agent cannot solve, and spends from its own `mcp:` quota subject with its own daily limit. It must keep\n sharing the global daily cap and the single execution lease: the global cap is what bounds the bill, so MCP may\n widen who spends the budget but never how large it is. Disable with `CANONRY_MCP_START_CHECKS=0`.\n- **It blocks.** Execution is request-bound (`AbortSignal.timeout(45_000)`); there is no background queue, so\n returning a check ID early would kill the work with the request.\n- **Anonymous, on purpose.** Everything reachable here is already public: `/api/checks/:id` serves any check without a\n credential, and the skills ship in a public npm package. A token would gate nothing and would make the endpoint\n useless as something an agent is simply pointed at.\n- **Two protocol eras.** Revision `2026-07-28` removed sessions and the GET stream; every shipping client still opens\n with `initialize`. Both work. Keep the strict mirrored-header checks keyed off the version the caller declared, or\n legacy clients break.\n- Responses are always `application/json`. Nothing here streams, so do not add an SSE encoder.\n- `self_host` is the conversion path and costs nothing. Keep it in the read set and keep its comparison honest.\n- Mention and citation stay independent in tool output, and a failed check stays `null` rather than becoming `false`.\n\n## UI\n\nMatch the Canonry dashboard's restrained evidence-first hierarchy: compact header, underline tabs,\ncharts/tables/details, visible focus, and native disclosure controls. Do not port the full React SPA or add a card grid.\n\n## Verification\n\nRun `deno task check`, `deno task lint`, and `deno task test` from this directory, and\n`node scripts/sync-val-town-skills.mjs --check` from the repository root. A deployment additionally requires a\n`vt push --dry-run` and a live health smoke test.\n",[170],"32515d7c-b260-427a-af1a-f218e7d2f15a",".vtignore","92ff2520-a63e-11f1-91a7-1607ee4eb77e",17,["D",1788292310911],".env\n.env.*\ncoverage/\ntest/\n",[177],"70fabb5a-32a8-428a-9a8c-08292618dd57","src","91c8aac8-a63e-11f1-b64b-1607ee4eb77e",1,["D",1788292308897],"directory",[184],"pulls","branches","forks","envVars",{"_197":199,"_200":63},"connections",{"_197":63,"_198":63},"count","unfilledCount",7,"emptyCount",{"_43":183,"_32":184,"_30":185,"_140":-5,"_41":42,"_40":186,"_142":24,"_38":487,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_240":488,"_27":489},{"_43":482,"_32":481,"_30":475,"_140":185,"_41":42,"_40":483,"_142":24,"_38":484,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_240":485,"_27":486},{"_43":472,"_32":473,"_30":474,"_140":475,"_41":42,"_40":476,"_142":26,"_38":477,"_13":63,"_34":35,"_36":478,"_23":26,"_146":-5,"_240":479,"_27":480},{"_43":467,"_32":466,"_30":460,"_140":185,"_41":42,"_40":468,"_142":26,"_38":469,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_240":470,"_27":471},{"_43":458,"_32":340,"_30":459,"_140":460,"_41":42,"_40":461,"_142":26,"_38":462,"_13":63,"_34":35,"_36":463,"_23":26,"_146":-5,"_240":464,"_27":465},{"_43":451,"_32":452,"_30":453,"_140":185,"_41":42,"_40":454,"_142":26,"_38":455,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_240":456,"_27":457},{"_43":444,"_32":445,"_30":446,"_140":185,"_41":42,"_40":447,"_142":24,"_38":448,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_240":449,"_27":450},{"_43":439,"_32":438,"_30":433,"_140":185,"_41":42,"_40":440,"_142":24,"_38":441,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_240":442,"_27":443},{"_43":430,"_32":431,"_30":432,"_140":433,"_41":42,"_40":434,"_142":26,"_38":435,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_240":436,"_27":437},{"_43":426,"_32":421,"_30":415,"_140":185,"_41":42,"_40":199,"_142":24,"_38":427,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_240":428,"_27":429},{"_43":422,"_32":33,"_30":31,"_140":415,"_41":42,"_40":14,"_142":26,"_38":423,"_13":63,"_34":35,"_36":37,"_23":26,"_146":-5,"_240":424,"_27":425},{"_43":413,"_32":314,"_30":414,"_140":415,"_41":42,"_40":416,"_142":26,"_38":417,"_13":63,"_34":35,"_36":418,"_23":26,"_146":-5,"_240":419,"_27":420},{"_43":408,"_32":399,"_30":393,"_140":185,"_41":42,"_40":409,"_142":26,"_38":410,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_240":411,"_27":412},{"_43":400,"_32":401,"_30":402,"_140":393,"_41":42,"_40":403,"_142":26,"_38":404,"_13":63,"_34":35,"_36":405,"_23":26,"_146":-5,"_240":406,"_27":407},{"_43":390,"_32":391,"_30":392,"_140":393,"_41":42,"_40":394,"_142":26,"_38":395,"_13":63,"_34":35,"_36":396,"_23":26,"_146":-5,"_240":397,"_27":398},{"_43":383,"_32":384,"_30":385,"_140":185,"_41":42,"_40":386,"_142":24,"_38":387,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_240":388,"_27":389},{"_43":376,"_32":377,"_30":378,"_140":185,"_41":42,"_40":379,"_142":26,"_38":380,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_240":381,"_27":382},{"_43":371,"_32":322,"_30":316,"_140":185,"_41":42,"_40":372,"_142":24,"_38":373,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_240":374,"_27":375},{"_43":363,"_32":364,"_30":365,"_140":316,"_41":42,"_40":366,"_142":26,"_38":367,"_13":63,"_34":35,"_36":368,"_23":26,"_146":-5,"_240":369,"_27":370},{"_43":355,"_32":356,"_30":357,"_140":316,"_41":42,"_40":358,"_142":26,"_38":359,"_13":63,"_34":35,"_36":360,"_23":26,"_146":-5,"_240":361,"_27":362},{"_43":347,"_32":348,"_30":349,"_140":316,"_41":42,"_40":350,"_142":26,"_38":351,"_13":63,"_34":35,"_36":352,"_23":26,"_146":-5,"_240":353,"_27":354},{"_43":339,"_32":340,"_30":341,"_140":316,"_41":42,"_40":342,"_142":26,"_38":343,"_13":63,"_34":35,"_36":344,"_23":26,"_146":-5,"_240":345,"_27":346},{"_43":331,"_32":332,"_30":333,"_140":316,"_41":42,"_40":334,"_142":26,"_38":335,"_13":63,"_34":35,"_36":336,"_23":26,"_146":-5,"_240":337,"_27":338},{"_43":323,"_32":324,"_30":325,"_140":316,"_41":42,"_40":326,"_142":26,"_38":327,"_13":63,"_34":35,"_36":328,"_23":26,"_146":-5,"_240":329,"_27":330},{"_43":313,"_32":314,"_30":315,"_140":316,"_41":42,"_40":317,"_142":26,"_38":318,"_13":63,"_34":35,"_36":319,"_23":26,"_146":-5,"_240":320,"_27":321},{"_43":308,"_32":267,"_30":261,"_140":185,"_41":42,"_40":309,"_142":26,"_38":310,"_13":63,"_34":188,"_36":-5,"_23":26,"_146":-5,"_240":311,"_27":312},{"_43":300,"_32":301,"_30":302,"_140":261,"_41":42,"_40":303,"_142":26,"_38":304,"_13":63,"_34":35,"_36":305,"_23":26,"_146":-5,"_240":306,"_27":307},{"_43":292,"_32":293,"_30":294,"_140":261,"_41":42,"_40":295,"_142":26,"_38":296,"_13":63,"_34":35,"_36":297,"_23":26,"_146":-5,"_240":298,"_27":299},{"_43":284,"_32":285,"_30":286,"_140":261,"_41":42,"_40":287,"_142":26,"_38":288,"_13":63,"_34":35,"_36":289,"_23":26,"_146":-5,"_240":290,"_27":291},{"_43":276,"_32":277,"_30":278,"_140":261,"_41":42,"_40":279,"_142":26,"_38":280,"_13":63,"_34":35,"_36":281,"_23":26,"_146":-5,"_240":282,"_27":283},{"_43":268,"_32":269,"_30":270,"_140":261,"_41":42,"_40":271,"_142":26,"_38":272,"_13":63,"_34":35,"_36":273,"_23":26,"_146":-5,"_240":274,"_27":275},{"_43":258,"_32":259,"_30":260,"_140":261,"_41":42,"_40":262,"_142":26,"_38":263,"_13":63,"_34":35,"_36":264,"_23":26,"_146":-5,"_240":265,"_27":266},{"_43":176,"_32":177,"_30":178,"_140":-5,"_41":42,"_40":179,"_142":26,"_38":255,"_13":63,"_34":20,"_36":181,"_23":26,"_146":-5,"_240":256,"_27":257},{"_43":169,"_32":170,"_30":171,"_140":-5,"_41":42,"_40":172,"_142":26,"_38":252,"_13":63,"_34":20,"_36":174,"_23":26,"_146":-5,"_240":253,"_27":254},{"_43":162,"_32":163,"_30":164,"_140":-5,"_41":42,"_40":165,"_142":24,"_38":249,"_13":63,"_34":20,"_36":167,"_23":26,"_146":-5,"_240":250,"_27":251},{"_43":155,"_32":156,"_30":157,"_140":-5,"_41":42,"_40":158,"_142":26,"_38":246,"_13":63,"_34":20,"_36":160,"_23":26,"_146":-5,"_240":247,"_27":248},{"_43":148,"_32":149,"_30":150,"_140":-5,"_41":42,"_40":151,"_142":26,"_38":243,"_13":63,"_34":20,"_36":153,"_23":26,"_146":-5,"_240":244,"_27":245},{"_43":138,"_32":139,"_30":58,"_140":-5,"_41":42,"_40":141,"_142":26,"_38":239,"_13":63,"_34":144,"_36":145,"_23":26,"_146":-5,"_240":241,"_27":242},["D",1788292310790],"children",[],[139],["D",1788292310786],[],[149],["D",1788292310785],[],[156],["D",1788292310988],[],[163],["D",1788292310802],[],[170],["D",1788292310911],[],[177],"c839bdb8-988e-4523-919e-ece5a8822925","runtime.ts","9370d1ac-a63e-11f1-b150-1607ee4eb77e","92153f82-a63e-11f1-8621-1607ee4eb77e",30,["D",1788292311627],"import type { VisibilityProbeLimits } from './contracts.ts'\n\nconst HARD_LIMITS = {\n timeoutMs: { min: 1_000, max: 30_000 },\n maxConcurrency: { min: 1, max: 4 },\n maxQueries: { min: 1, max: 20 },\n maxProviders: { min: 1, max: 8 },\n maxAnswerChars: { min: 256, max: 20_000 },\n maxSources: { min: 1, max: 50 },\n maxSourceUrlChars: { min: 128, max: 4_096 },\n maxSourceTitleChars: { min: 32, max: 1_024 },\n maxSearchQueries: { min: 0, max: 25 },\n maxSearchQueryChars: { min: 32, max: 512 },\n} as const\n\nexport const MAX_QUERY_CHARS = 512\n/** Stable query IDs are returned verbatim, so reject oversize caller input. */\nexport const MAX_QUERY_ID_CHARS = 160\n/** Provider names are public report identities, not arbitrary display text. */\nexport const MAX_PROVIDER_ID_CHARS = 80\n/** Requested/served model identifiers are public report identities. */\nexport const MAX_MODEL_ID_CHARS = 256\nexport const MAX_BRAND_NAME_CHARS = 128\nexport const MAX_BRAND_NAMES = 20\nexport const MAX_DOMAIN_CHARS = 253\nexport const MAX_PROVIDER_ERROR_CHARS = 180\nexport const MAX_EXTRACTED_SOURCES = 100\n\nexport function resolveLimits(\n defaults: VisibilityProbeLimits,\n partial: Partial | undefined,\n): VisibilityProbeLimits {\n const candidate = { ...defaults, ...partial }\n return {\n timeoutMs: boundedInteger(candidate.timeoutMs, HARD_LIMITS.timeoutMs),\n maxConcurrency: boundedInteger(candidate.maxConcurrency, HARD_LIMITS.maxConcurrency),\n maxQueries: boundedInteger(candidate.maxQueries, HARD_LIMITS.maxQueries),\n maxProviders: boundedInteger(candidate.maxProviders, HARD_LIMITS.maxProviders),\n maxAnswerChars: boundedInteger(candidate.maxAnswerChars, HARD_LIMITS.maxAnswerChars),\n maxSources: boundedInteger(candidate.maxSources, HARD_LIMITS.maxSources),\n maxSourceUrlChars: boundedInteger(candidate.maxSourceUrlChars, HARD_LIMITS.maxSourceUrlChars),\n maxSourceTitleChars: boundedInteger(candidate.maxSourceTitleChars, HARD_LIMITS.maxSourceTitleChars),\n maxSearchQueries: boundedInteger(candidate.maxSearchQueries, HARD_LIMITS.maxSearchQueries),\n maxSearchQueryChars: boundedInteger(candidate.maxSearchQueryChars, HARD_LIMITS.maxSearchQueryChars),\n }\n}\n\nfunction boundedInteger(value: number, bounds: { min: number; max: number }): number {\n if (!Number.isFinite(value)) return bounds.min\n return Math.max(bounds.min, Math.min(bounds.max, Math.floor(value)))\n}\n\nexport function clipText(value: string, maxChars: number): { value: string; truncated: boolean } {\n if (value.length <= maxChars) return { value, truncated: false }\n return { value: value.slice(0, maxChars), truncated: true }\n}\n\nexport function cleanText(value: unknown): string {\n return typeof value === 'string' ? value.trim() : ''\n}\n\nexport function uniqueStable(values: readonly string[]): string[] {\n const seen = new Set()\n const unique: string[] = []\n for (const value of values) {\n if (seen.has(value)) continue\n seen.add(value)\n unique.push(value)\n }\n return unique\n}\n\nexport interface DeadlineSignal {\n signal: AbortSignal\n didTimeout(): boolean\n dispose(): void\n}\n\n/** Web-standard timeout composition that works in Node and Deno without globals. */\nexport function createDeadlineSignal(parent: AbortSignal | undefined, timeoutMs: number): DeadlineSignal {\n const controller = new AbortController()\n let timedOut = false\n const timeoutReason = new DOMException('Visibility provider request timed out.', 'TimeoutError')\n const abortFromParent = () => controller.abort(parent?.reason)\n if (parent?.aborted) abortFromParent()\n else parent?.addEventListener('abort', abortFromParent, { once: true })\n const timer = setTimeout(() => {\n timedOut = true\n controller.abort(timeoutReason)\n }, timeoutMs)\n return {\n signal: controller.signal,\n didTimeout: () => timedOut,\n dispose: () => {\n clearTimeout(timer)\n parent?.removeEventListener('abort', abortFromParent)\n },\n }\n}\n\nexport function isAbortError(error: unknown): boolean {\n if (error instanceof DOMException) return error.name === 'AbortError' || error.name === 'TimeoutError'\n if (!(error instanceof Error)) return false\n return error.name === 'AbortError' || error.name === 'TimeoutError' || /\\babort(?:ed|ing)?\\b/i.test(error.message)\n}\n\n/** Do not echo provider response bodies, URLs, or accidental credentials into report storage. */\nexport function safeProviderErrorMessage(error: unknown): string {\n const generic = 'The provider request failed.'\n if (!(error instanceof Error)) return generic\n const message = error.message.replace(/[\\r\\n\\t]+/g, ' ').trim()\n if (!message) return generic\n // Provider SDK messages commonly embed request IDs and error bodies. Keep a\n // small classified surface instead of a transport dump.\n if (/\\b429\\b/.test(message)) return 'The provider rate-limited this request.'\n if (/\\b(?:500|501|502|503|504)\\b/.test(message)) return 'The provider was temporarily unavailable.'\n if (/invalid api key|api[_ -]?key|unauthori[sz]ed|forbidden/i.test(message)) {\n return 'The provider credentials were rejected.'\n }\n if (/timeout|timed out/i.test(message)) return 'The provider request timed out.'\n return clipText(generic, MAX_PROVIDER_ERROR_CHARS).value\n}\n\nexport function nowIso(now: (() => Date) | undefined): string {\n return (now?.() ?? new Date()).toISOString()\n}\n\nexport function throwIfAborted(signal: AbortSignal): void {\n if (!signal.aborted) return\n throw signal.reason instanceof Error ? signal.reason : new DOMException('Aborted', 'AbortError')\n}\n\nexport function sleep(delayMs: number, signal: AbortSignal): Promise {\n return new Promise((resolve, reject) => {\n throwIfAborted(signal)\n const timer = setTimeout(done, delayMs)\n const onAbort = () => {\n clearTimeout(timer)\n signal.removeEventListener('abort', onAbort)\n reject(signal.reason instanceof Error ? signal.reason : new DOMException('Aborted', 'AbortError'))\n }\n function done(): void {\n signal.removeEventListener('abort', onAbort)\n resolve()\n }\n signal.addEventListener('abort', onAbort, { once: true })\n })\n}\n",[],[184,267,259],"visibility","abbdcbe9-fc5e-403a-94fd-785d60bfad8a","runner.ts","938767d2-a63e-11f1-a6d3-1607ee4eb77e",33,["D",1788292311828],"import {\n DEFAULT_VISIBILITY_PROBE_LIMITS,\n type RunVisibilityProbeInput,\n VISIBILITY_PROBE_SCHEMA_VERSION,\n type VisibilityProbeCheck,\n type VisibilityProbeFailure,\n type VisibilityProbeQuery,\n type VisibilityProbeReport,\n type VisibilityProbeReportStatus,\n type VisibilityProbeSourceEvidence,\n type VisibilityProbeSummary,\n type VisibilityProbeTarget,\n type VisibilityProviderAdapter,\n type VisibilityProviderResponse,\n} from './contracts.ts'\nimport {\n type CitationEvidence,\n detectCitation,\n detectMention,\n type NormalizedTarget,\n normalizeTarget,\n} from './brand.ts'\nimport {\n cleanText,\n clipText,\n createDeadlineSignal,\n isAbortError,\n MAX_EXTRACTED_SOURCES,\n MAX_MODEL_ID_CHARS,\n MAX_PROVIDER_ID_CHARS,\n MAX_QUERY_CHARS,\n MAX_QUERY_ID_CHARS,\n nowIso,\n resolveLimits,\n safeProviderErrorMessage,\n throwIfAborted,\n uniqueStable,\n} from './runtime.ts'\n\ninterface PreparedQuery extends VisibilityProbeQuery {\n id: string\n text: string\n}\n\ninterface PreparedAdapter {\n adapter: VisibilityProviderAdapter\n name: string\n requestedModel: string | null\n}\n\ninterface CheckSlot {\n query: PreparedQuery\n adapter: PreparedAdapter\n}\n\n/**\n * Execute a bounded query × provider matrix and return only normalized evidence.\n * A failed check is intentionally represented with null metrics, never coerced\n * into `not-mentioned` / `not-cited`.\n */\nexport async function runVisibilityProbe(input: RunVisibilityProbeInput): Promise {\n const limits = resolveLimits(DEFAULT_VISIBILITY_PROBE_LIMITS, input.limits)\n const target = normalizeTarget(input.target)\n const queries = prepareQueries(input.queries, limits.maxQueries)\n const adapters = prepareAdapters(input.adapters, limits.maxProviders)\n const startedAt = nowIso(input.now)\n const slots = createSlots(queries, adapters)\n const checks = new Array(slots.length)\n let cursor = 0\n\n const worker = async (): Promise => {\n while (cursor < slots.length) {\n const index = cursor\n cursor += 1\n checks[index] = await executeSlot(slots[index]!, target, limits, input.signal, input.now)\n }\n }\n await Promise.all(Array.from({ length: Math.min(limits.maxConcurrency, slots.length) }, worker))\n\n const summary = summarize(checks)\n return {\n schemaVersion: VISIBILITY_PROBE_SCHEMA_VERSION,\n target: { canonicalDomain: target.canonicalDomain, brandNames: target.brandNames },\n startedAt,\n completedAt: nowIso(input.now),\n status: reportStatus(summary),\n checks,\n summary,\n }\n}\n\nfunction prepareQueries(input: readonly VisibilityProbeQuery[], maxQueries: number): PreparedQuery[] {\n if (input.length === 0) throw new Error('at least one query is required')\n if (input.length > maxQueries) throw new Error(`at most ${maxQueries} queries are allowed`)\n const ids = new Set()\n return input.map((candidate, index) => {\n const text = cleanText(candidate.text)\n if (!text) throw new Error(`query ${index + 1} must not be empty`)\n if (text.length > MAX_QUERY_CHARS) {\n throw new Error(`query ${index + 1} must be at most ${MAX_QUERY_CHARS} characters`)\n }\n const id = cleanText(candidate.id) || `query-${index + 1}`\n if (id.length > MAX_QUERY_ID_CHARS) {\n throw new Error(`query ${index + 1} ID must be at most ${MAX_QUERY_ID_CHARS} characters`)\n }\n if (ids.has(id)) throw new Error('query IDs must be unique')\n ids.add(id)\n return { id, text }\n })\n}\n\nfunction prepareAdapters(input: readonly VisibilityProviderAdapter[], maxProviders: number): PreparedAdapter[] {\n if (input.length === 0) throw new Error('at least one provider adapter is required')\n if (input.length > maxProviders) throw new Error(`at most ${maxProviders} provider adapters are allowed`)\n const names = new Set()\n return input.map((adapter) => {\n const name = cleanText(adapter.name)\n if (!name || typeof adapter.execute !== 'function') {\n throw new Error('each provider adapter must have a name and execute function')\n }\n if (name.length > MAX_PROVIDER_ID_CHARS) {\n throw new Error(`provider adapter names must be at most ${MAX_PROVIDER_ID_CHARS} characters`)\n }\n if (names.has(name)) throw new Error('provider adapter names must be unique')\n const requestedModel = boundedIdentifier(adapter.requestedModel, MAX_MODEL_ID_CHARS)\n if (adapter.requestedModel !== undefined && !requestedModel) {\n throw new Error(`provider adapter requestedModel must be at most ${MAX_MODEL_ID_CHARS} non-whitespace characters`)\n }\n names.add(name)\n return { adapter, name, requestedModel }\n })\n}\n\nfunction createSlots(queries: readonly PreparedQuery[], adapters: readonly PreparedAdapter[]): CheckSlot[] {\n const slots: CheckSlot[] = []\n for (const query of queries) {\n for (const adapter of adapters) slots.push({ query, adapter })\n }\n return slots\n}\n\nasync function executeSlot(\n slot: CheckSlot,\n target: NormalizedTarget,\n limits: ReturnType,\n parentSignal: AbortSignal | undefined,\n now: (() => Date) | undefined,\n): Promise {\n const deadline = createDeadlineSignal(parentSignal, limits.timeoutMs)\n try {\n throwIfAborted(deadline.signal)\n const response = await slot.adapter.adapter.execute({\n query: slot.query,\n target: { canonicalDomain: target.canonicalDomain, brandNames: target.brandNames },\n signal: deadline.signal,\n limits,\n })\n throwIfAborted(deadline.signal)\n return successfulCheck(slot, response, target, limits, now)\n } catch (error) {\n return failedCheck(slot, classifyFailure(error, deadline.didTimeout()), now)\n } finally {\n deadline.dispose()\n }\n}\n\nfunction successfulCheck(\n slot: CheckSlot,\n response: VisibilityProviderResponse,\n target: NormalizedTarget,\n limits: ReturnType,\n now: (() => Date) | undefined,\n): VisibilityProbeCheck {\n const answer = cleanText(response.answerText)\n if (!answer) {\n return failedCheck(\n slot,\n { code: 'invalid-response', message: 'The provider response contained no answer text.' },\n now,\n )\n }\n const requestedModel = boundedIdentifier(response.requestedModel, MAX_MODEL_ID_CHARS)\n if (!requestedModel) {\n return failedCheck(slot, {\n code: 'invalid-response',\n message: 'The provider response has an invalid requested model.',\n }, now)\n }\n // Match only the evidence that will be returned. This keeps the verdict\n // auditable and caps work even for a malformed custom adapter.\n const clippedAnswer = clipText(answer, limits.maxAnswerChars)\n const mention = detectMention(clippedAnswer.value, target)\n const citation = detectCitation((response.sources ?? []).slice(0, MAX_EXTRACTED_SOURCES), target)\n const clippedSources = clipSources(citation, limits)\n const normalizedSearchQueries = normalizeSearchQueries(response.searchQueries, limits)\n return {\n queryId: slot.query.id,\n query: slot.query.text,\n provider: slot.adapter.name,\n requestedModel,\n servedModel: boundedIdentifier(response.servedModel, MAX_MODEL_ID_CHARS),\n completedAt: nowIso(now),\n status: 'success',\n answerText: clippedAnswer.value,\n answerTruncated: clippedAnswer.truncated,\n mentioned: mention.mentioned,\n matchedTerms: mention.matchedTerms,\n cited: citation.cited,\n citedDomains: uniqueStable(\n clippedSources.map((source) => source.domain).filter((domain): domain is string => Boolean(domain)),\n ),\n citedUrls: clippedSources.map((source) => source.url),\n // Derive every outward-facing URL/domain array from the clipped source\n // set. `citation` may inspect up to the extraction hard cap to preserve\n // the verdict, but it must never leak an unbounded provider URL.\n matchedCitationDomains: uniqueStable(\n clippedSources.filter((source) => source.targetDomainMatch)\n .map((source) => source.domain)\n .filter((domain): domain is string => Boolean(domain)),\n ),\n matchedCitationUrls: clippedSources.filter((source) => source.targetDomainMatch).map((source) => source.url),\n sources: clippedSources,\n sourceCount: citation.sources.length,\n sourcesTruncated: citation.sources.length > clippedSources.length,\n searchQueries: normalizedSearchQueries.values,\n searchQueriesTruncated: normalizedSearchQueries.truncated,\n retrievalStatus: response.retrievalStatus ?? 'unknown',\n error: null,\n }\n}\n\nfunction clipSources(\n citation: CitationEvidence,\n limits: ReturnType,\n): VisibilityProbeSourceEvidence[] {\n // If output clipping occurs, keep target matches first so `cited: true`\n // always has visible source evidence. Relative provider order is preserved\n // within the matching and non-matching groups.\n const ordered = [\n ...citation.sources.filter((source) => source.targetDomainMatch),\n ...citation.sources.filter((source) => !source.targetDomainMatch),\n ]\n return ordered.slice(0, limits.maxSources).map((source) => ({\n url: clipText(source.url, limits.maxSourceUrlChars).value,\n title: source.title ? clipText(source.title, limits.maxSourceTitleChars).value : null,\n domain: source.domain,\n targetDomainMatch: source.targetDomainMatch,\n }))\n}\n\nfunction normalizeSearchQueries(\n values: readonly string[] | undefined,\n limits: ReturnType,\n): { values: string[]; truncated: boolean } {\n const source = (values ?? []).slice(0, MAX_EXTRACTED_SOURCES)\n const cleaned = uniqueStable(source.map(cleanText).filter(Boolean))\n return {\n values: cleaned.slice(0, limits.maxSearchQueries).map((value) => clipText(value, limits.maxSearchQueryChars).value),\n truncated: values !== undefined && (values.length > source.length || cleaned.length > limits.maxSearchQueries),\n }\n}\n\nfunction failedCheck(\n slot: CheckSlot,\n error: VisibilityProbeFailure,\n now: (() => Date) | undefined,\n): VisibilityProbeCheck {\n return {\n queryId: slot.query.id,\n query: slot.query.text,\n provider: slot.adapter.name,\n requestedModel: slot.adapter.requestedModel,\n servedModel: null,\n completedAt: nowIso(now),\n status: 'failed',\n answerText: null,\n answerTruncated: false,\n mentioned: null,\n matchedTerms: [],\n cited: null,\n citedDomains: [],\n citedUrls: [],\n matchedCitationDomains: [],\n matchedCitationUrls: [],\n sources: [],\n sourceCount: 0,\n sourcesTruncated: false,\n searchQueries: [],\n searchQueriesTruncated: false,\n retrievalStatus: 'unknown',\n error,\n }\n}\n\nfunction boundedIdentifier(value: unknown, maxChars: number): string | null {\n const normalized = cleanText(value)\n return normalized && normalized.length <= maxChars ? normalized : null\n}\n\nfunction classifyFailure(error: unknown, timedOut: boolean): VisibilityProbeFailure {\n if (timedOut) return { code: 'timeout', message: 'The provider request timed out.' }\n if (isAbortError(error)) return { code: 'aborted', message: 'The provider request was cancelled.' }\n return { code: 'provider-error', message: safeProviderErrorMessage(error) }\n}\n\nfunction summarize(checks: readonly VisibilityProbeCheck[]): VisibilityProbeSummary {\n const successfulChecks = checks.filter((check) => check.status === 'success')\n const mentionedChecks = successfulChecks.filter((check) => check.mentioned === true).length\n const citedChecks = successfulChecks.filter((check) => check.cited === true).length\n const denominator = successfulChecks.length\n return {\n totalChecks: checks.length,\n successfulChecks: denominator,\n failedChecks: checks.length - denominator,\n mentionedChecks,\n citedChecks,\n mentionRate: denominator > 0 ? mentionedChecks / denominator : null,\n citationRate: denominator > 0 ? citedChecks / denominator : null,\n }\n}\n\nfunction reportStatus(summary: VisibilityProbeSummary): VisibilityProbeReportStatus {\n if (summary.successfulChecks === 0) return 'failed'\n return summary.failedChecks > 0 ? 'partial' : 'completed'\n}\n\n/** Public helper for callers that want to validate normalized target input before a run. */\nexport function normalizeVisibilityProbeTarget(target: VisibilityProbeTarget): VisibilityProbeTarget {\n const normalized = normalizeTarget(target)\n return { canonicalDomain: normalized.canonicalDomain, brandNames: normalized.brandNames }\n}\n",[],[184,267,269],"910191b8-ae0d-426c-98fa-4fd7b945f7b1","gemini.ts","9378da96-a63e-11f1-9b04-1607ee4eb77e",31,["D",1788292311720],"import { type GenerateContentParameters, type GenerateContentResponse, GoogleGenAI } from '@google/genai'\n\nimport type {\n VisibilityProbeTarget,\n VisibilityProviderAdapter,\n VisibilityProviderRequest,\n VisibilityProviderResponse,\n VisibilityQueryPlan,\n VisibilityQueryPlanner,\n VisibilityQueryPlanningInput,\n VisibilitySource,\n} from './contracts.ts'\nimport { detectMention, hostOf, normalizeTarget } from './brand.ts'\nimport {\n cleanText,\n clipText,\n createDeadlineSignal,\n isAbortError,\n MAX_EXTRACTED_SOURCES,\n MAX_MODEL_ID_CHARS,\n nowIso,\n sleep,\n throwIfAborted,\n uniqueStable,\n} from './runtime.ts'\n\nexport const DEFAULT_GEMINI_VISIBILITY_MODEL = 'gemini-2.5-flash'\nconst VERTEX_AI_SEARCH_PROXY_DOMAIN = 'vertexaisearch.cloud.google.com'\nconst MAX_PLANNER_CONTEXT_CHARS = 12_000\nconst MAX_PLANNER_OUTPUT_TOKENS = 700\n\nexport interface GeminiVisibilityAdapterOptions {\n apiKey: string\n model?: string\n /** 0–2 retries for 429/5xx/network failures. Defaults to one retry. */\n maxRetries?: number\n retryBaseDelayMs?: number\n /** Bounded model output. Defaults to 1,200 and is capped at 2,048. */\n maxOutputTokens?: number\n /** Test/advanced-runtime seam; normal hosts should omit this and use the SDK client. */\n client?: GeminiContentClient\n}\n\nexport interface GeminiContentClient {\n models: {\n generateContent(params: GenerateContentParameters): Promise\n }\n}\n\n/**\n * A Gemini adapter that asks Gemini to use native Google Search grounding.\n * It emits only normalized answer/source evidence and never retains a raw SDK\n * response. The caller owns key storage, budgets, and request admission.\n */\nexport function createGeminiVisibilityAdapter(options: GeminiVisibilityAdapterOptions): VisibilityProviderAdapter {\n const config = normalizeGeminiOptions(options)\n const client = options.client ?? createGeminiClient(config)\n return {\n name: 'gemini',\n requestedModel: config.model,\n async execute(request: VisibilityProviderRequest): Promise {\n const response = await withBoundedRetry(\n () =>\n client.models.generateContent({\n model: config.model,\n contents: request.query.text,\n config: {\n tools: [{ googleSearch: {} }],\n candidateCount: 1,\n temperature: 0,\n maxOutputTokens: config.maxOutputTokens,\n abortSignal: request.signal,\n },\n }),\n request.signal,\n config,\n )\n return normalizeGeminiVisibilityResponse(response, config.model)\n },\n }\n}\n\n/**\n * One bounded planning call for public-domain onboarding. It plans aliases and\n * non-brand buyer queries from caller-provided homepage text; it never fetches\n * the domain itself and does not run a visibility probe.\n */\nexport function createGeminiVisibilityQueryPlanner(options: GeminiVisibilityAdapterOptions): VisibilityQueryPlanner {\n const config = normalizeGeminiOptions(options)\n const client = options.client ?? createGeminiClient(config)\n return {\n name: 'gemini',\n requestedModel: config.model,\n async plan(input: VisibilityQueryPlanningInput): Promise {\n const target = normalizeTarget({ canonicalDomain: input.canonicalDomain, brandNames: input.brandNames ?? [] })\n const context = cleanText(input.homepageContext)\n const maxQueries = boundedPlannerQueryCount(input.maxQueries)\n const deadline = createDeadlineSignal(input.signal, 15_000)\n try {\n throwIfAborted(deadline.signal)\n const response = await withBoundedRetry(\n () =>\n client.models.generateContent({\n model: config.model,\n contents: buildPlannerPrompt({\n canonicalDomain: target.canonicalDomain,\n homepageContext: context ? clipText(context, MAX_PLANNER_CONTEXT_CHARS).value : null,\n maxQueries,\n }),\n config: {\n temperature: 0,\n candidateCount: 1,\n maxOutputTokens: MAX_PLANNER_OUTPUT_TOKENS,\n // Gemini 2.5 does not support structured output plus a built-in\n // tool. We rely on the strict JSON/fence parser below instead.\n tools: [{ googleSearch: {} }],\n abortSignal: deadline.signal,\n },\n }),\n deadline.signal,\n // Planning is one logical and one provider call in the public\n // funnel. Hosts may re-admit a new plan explicitly if desired.\n { ...config, maxRetries: 0 },\n )\n return parseGeminiQueryPlan({\n responseText: extractAnswerText(response),\n target: { canonicalDomain: target.canonicalDomain, brandNames: target.brandNames },\n maxQueries,\n requestedModel: config.model,\n servedModel: extractServedModel(response),\n generatedAt: nowIso(input.now),\n })\n } finally {\n deadline.dispose()\n }\n },\n }\n}\n\ninterface NormalizedGeminiOptions {\n apiKey: string\n model: string\n maxRetries: number\n retryBaseDelayMs: number\n maxOutputTokens: number\n}\n\nfunction normalizeGeminiOptions(options: GeminiVisibilityAdapterOptions): NormalizedGeminiOptions {\n const apiKey = cleanText(options.apiKey)\n if (!apiKey) throw new Error('Gemini API key is required')\n const model = cleanText(options.model) || DEFAULT_GEMINI_VISIBILITY_MODEL\n if (model.length > MAX_MODEL_ID_CHARS) {\n throw new Error(`Gemini model must be at most ${MAX_MODEL_ID_CHARS} characters`)\n }\n return {\n apiKey,\n model,\n maxRetries: clampInteger(options.maxRetries ?? 1, 0, 2),\n retryBaseDelayMs: clampInteger(options.retryBaseDelayMs ?? 400, 100, 2_000),\n maxOutputTokens: clampInteger(options.maxOutputTokens ?? 1_200, 128, 2_048),\n }\n}\n\nexport function createGeminiClient(options: Pick): GoogleGenAI {\n return new GoogleGenAI({ apiKey: options.apiKey })\n}\n\nasync function withBoundedRetry(\n operation: () => Promise,\n signal: AbortSignal,\n config: Pick,\n): Promise {\n let attempt = 0\n for (;;) {\n throwIfAborted(signal)\n try {\n return await operation()\n } catch (error) {\n if (attempt >= config.maxRetries || !isRetryable(error) || isAbortError(error) || signal.aborted) throw error\n const delay = Math.min(config.retryBaseDelayMs * (2 ** attempt), 4_000)\n attempt += 1\n await sleep(delay, signal)\n }\n }\n}\n\nfunction isRetryable(error: unknown): boolean {\n if (error instanceof TypeError) return true\n if (!error || typeof error !== 'object') return false\n const record = error as Record\n const candidate = record.status ?? record.statusCode ?? record.code\n const status = typeof candidate === 'number' ? candidate : Number(candidate)\n if (Number.isInteger(status)) return status === 429 || status >= 500\n const message = error instanceof Error ? error.message : ''\n return /\\b(?:429|500|501|502|503|504)\\b|fetch failed|network/i.test(message)\n}\n\n/** Exported for provider fixture tests; it is deliberately raw-payload free. */\nexport function normalizeGeminiVisibilityResponse(\n response: GenerateContentResponse,\n requestedModel: string,\n): VisibilityProviderResponse {\n const model = boundedModelId(requestedModel)\n if (!model) throw new Error(`Gemini model must be at most ${MAX_MODEL_ID_CHARS} non-whitespace characters`)\n return {\n requestedModel: model,\n servedModel: extractServedModel(response),\n answerText: extractAnswerText(response),\n sources: extractGroundedSources(response),\n searchQueries: extractSearchQueries(response),\n // Google Search grounding is requested, but the API does not reliably\n // attest whether a search actually ran for each answer.\n retrievalStatus: 'unknown',\n }\n}\n\nfunction asRecord(value: unknown): Record | null {\n return value && typeof value === 'object' ? value as Record : null\n}\n\nfunction asRecords(value: unknown): Record[] {\n return Array.isArray(value)\n ? value.flatMap((item) => {\n const record = asRecord(item)\n return record ? [record] : []\n })\n : []\n}\n\nexport function extractAnswerText(response: GenerateContentResponse): string {\n const record = asRecord(response)\n const candidate = asRecords(record?.candidates).at(0)\n const content = asRecord(candidate?.content)\n const parts = asRecords(content?.parts)\n return parts.flatMap((part) => typeof part.text === 'string' ? [part.text] : []).join('')\n}\n\nfunction extractServedModel(response: GenerateContentResponse): string | null {\n return boundedModelId(asRecord(response)?.modelVersion)\n}\n\nexport function extractGroundedSources(response: GenerateContentResponse): VisibilitySource[] {\n const record = asRecord(response)\n const candidate = asRecords(record?.candidates).at(0)\n const metadata = asRecord(candidate?.groundingMetadata)\n const chunks = asRecords(metadata?.groundingChunks)\n const indices = new Set()\n for (const support of asRecords(metadata?.groundingSupports)) {\n const values = support.groundingChunkIndices\n if (!Array.isArray(values)) continue\n for (const value of values) {\n if (typeof value === 'number' && Number.isInteger(value) && value >= 0 && value < chunks.length) {\n indices.add(value)\n }\n }\n }\n const selected = indices.size > 0 ? [...indices].map((index) => chunks[index]!).filter(Boolean) : chunks\n const sources: VisibilitySource[] = []\n const seen = new Set()\n for (const chunk of selected) {\n if (sources.length >= MAX_EXTRACTED_SOURCES) break\n const web = asRecord(chunk.web)\n const source = typeof web?.uri === 'string'\n ? normalizeGeminiSource(web.uri, typeof web.title === 'string' ? web.title : null)\n : null\n if (!source || seen.has(source.url)) continue\n seen.add(source.url)\n sources.push(source)\n }\n return sources\n}\n\nfunction normalizeGeminiSource(uri: string, title: string | null): VisibilitySource | null {\n try {\n const parsed = new URL(uri)\n if (hostOf(parsed.hostname) !== VERTEX_AI_SEARCH_PROXY_DOMAIN) {\n return { url: parsed.toString(), title }\n }\n const prefix = '/grounding-api-redirect/'\n if (parsed.pathname.startsWith(prefix)) {\n try {\n const redirect = decodeURIComponent(parsed.pathname.slice(prefix.length))\n const redirected = new URL(redirect)\n if (redirected.protocol === 'https:' || redirected.protocol === 'http:') {\n return { url: redirected.toString(), title }\n }\n } catch {\n // Opaque redirect; retain its URL below without treating its host as a citation.\n }\n }\n // Vertex can return an opaque redirect. Preserve the evidence URL but\n // never attribute the proxy hostname as a source. A title is only usable\n // when it is itself exactly a hostname/domain, never ordinary prose.\n return { url: parsed.toString(), title, domain: titleDomain(title) }\n } catch {\n return null\n }\n}\n\nfunction titleDomain(title: string | null): string | null {\n const candidate = cleanText(title)\n if (!candidate || !/^[a-z0-9.-]+$/i.test(candidate)) return null\n const domain = hostOf(candidate)\n return domain && domain.includes('.') ? domain : null\n}\n\nexport function extractSearchQueries(response: GenerateContentResponse): string[] {\n const record = asRecord(response)\n const candidate = asRecords(record?.candidates).at(0)\n const metadata = asRecord(candidate?.groundingMetadata)\n const values = metadata?.webSearchQueries\n return Array.isArray(values) ? uniqueStable(values.flatMap((value) => typeof value === 'string' ? [value] : [])) : []\n}\n\nfunction boundedPlannerQueryCount(value: number | undefined): number {\n return clampInteger(value ?? 3, 1, 3)\n}\n\nfunction clampInteger(value: number, min: number, max: number): number {\n if (!Number.isFinite(value)) return min\n return Math.max(min, Math.min(max, Math.floor(value)))\n}\n\nexport interface GeminiQueryPlanParseInput {\n responseText: string\n target: VisibilityProbeTarget\n maxQueries: number\n requestedModel: string\n servedModel: string | null\n generatedAt: string\n}\n\n/**\n * Deterministic parser/validator for the planner's one-call JSON response.\n * It accepts only exact JSON and removes branded, duplicate, empty, and\n * overlong queries before returning a plan.\n */\nexport function parseGeminiQueryPlan(input: GeminiQueryPlanParseInput): VisibilityQueryPlan {\n const requestedModel = boundedModelId(input.requestedModel)\n if (!requestedModel) throw new Error(`Gemini model must be at most ${MAX_MODEL_ID_CHARS} non-whitespace characters`)\n let parsed: unknown\n try {\n parsed = JSON.parse(stripCodeFence(input.responseText))\n } catch {\n throw new Error('The query planner returned invalid JSON.')\n }\n const record = asRecord(parsed)\n const rawNames = Array.isArray(record?.brandNames) ? record.brandNames.slice(0, 20) : []\n const rawQueries = Array.isArray(record?.queries) ? record.queries.slice(0, 20) : []\n const plannerNames = rawNames.flatMap((value) => typeof value === 'string' ? [cleanText(value)] : [])\n .filter((name) => name.length > 0 && name.length <= 128)\n const target = normalizeTarget({\n canonicalDomain: input.target.canonicalDomain,\n brandNames: uniqueStable([...input.target.brandNames, ...plannerNames]),\n })\n const seenQueries = new Set()\n const queries = rawQueries.flatMap((value) => typeof value === 'string' ? [cleanText(value)] : [])\n .filter((query) => query.length > 0 && query.length <= 512)\n .filter((query) => {\n const key = query.toLocaleLowerCase('en').replace(/\\s+/g, ' ')\n if (seenQueries.has(key)) return false\n seenQueries.add(key)\n return !detectMention(query, target).mentioned\n })\n .slice(0, input.maxQueries)\n .map((text, index) => ({ id: `planned-query-${index + 1}`, text }))\n if (queries.length !== input.maxQueries) {\n throw new Error(`The query planner did not return ${input.maxQueries} non-brand buyer queries.`)\n }\n return {\n target: { canonicalDomain: target.canonicalDomain, brandNames: target.brandNames },\n queries,\n planner: 'gemini',\n requestedModel,\n servedModel: boundedModelId(input.servedModel),\n generatedAt: input.generatedAt,\n }\n}\n\nfunction boundedModelId(value: unknown): string | null {\n const model = cleanText(value)\n return model && model.length <= MAX_MODEL_ID_CHARS ? model : null\n}\n\nfunction stripCodeFence(value: string): string {\n const trimmed = value.trim()\n if (!trimmed.startsWith('```') || !trimmed.endsWith('```')) return trimmed\n const firstNewline = trimmed.indexOf('\\n')\n if (firstNewline === -1) return trimmed\n const language = trimmed.slice(3, firstNewline).trim().toLowerCase()\n if (language && language !== 'json') return trimmed\n return trimmed.slice(firstNewline + 1, -3).trim()\n}\n\nexport function buildPlannerPrompt(input: {\n canonicalDomain: string\n homepageContext: string | null\n maxQueries: number\n}): string {\n return [\n 'You create a small AI-visibility probe plan from a company website.',\n 'Return JSON only, with this exact shape: {\"brandNames\":[\"...\"],\"queries\":[\"...\"]}.',\n `Return 1-5 exact company/brand aliases and exactly ${input.maxQueries} non-brand buyer-intent queries.`,\n 'Queries must be natural questions or searches a prospective buyer could use before knowing the company.',\n 'Do not include the company name, domain, URLs, competitors, explanations, markdown, or extra keys.',\n `Domain: ${input.canonicalDomain}`,\n input.homepageContext\n ? 'Homepage extract:'\n : 'No homepage extract was provided. Use Google Search grounding to verify the domain context.',\n ...(input.homepageContext ? [input.homepageContext] : []),\n ].join('\\n')\n}\n",[],[184,267,277],"396ac57b-3fb8-40c9-8e0f-13271ea85e04","gemini-probe.ts","9381a0ae-a63e-11f1-8fd4-1607ee4eb77e",32,["D",1788292311602],"import {\n createGeminiVisibilityAdapter,\n createGeminiVisibilityQueryPlanner,\n type GeminiContentClient,\n} from './gemini.ts'\nimport type { VisibilityProbeCheck, VisibilityProbeReport } from './contracts.ts'\nimport { runVisibilityProbe } from './runner.ts'\nimport type {\n VisibilityEvidence,\n VisibilityProbeInput,\n VisibilityProbePort,\n VisibilityReport,\n} from '../runtime/types.ts'\n\nexport interface GeminiValVisibilityProbeOptions {\n apiKey: string\n model?: string\n /** Test seam; production uses the SDK client created by the local adapter. */\n client?: GeminiContentClient\n}\n\nexport const VAL_TOWN_GEMINI_VISIBILITY_LIMITS = {\n maxPlannerCalls: 1,\n maxProbeCalls: 3,\n plannerTimeoutMs: 10_000,\n probeTimeoutMs: 10_000,\n probeConcurrency: 2,\n} as const\n\n/**\n * Val-specific composition of the local planner, provider adapter, and\n * evidence runner. The public host can make exactly one planning call and at\n * most three probe calls per check.\n */\nexport function createGeminiValVisibilityProbe(options: GeminiValVisibilityProbeOptions): VisibilityProbePort {\n const planner = createGeminiVisibilityQueryPlanner({\n apiKey: options.apiKey,\n model: options.model,\n maxRetries: 0,\n maxOutputTokens: 700,\n client: options.client,\n })\n const adapter = createGeminiVisibilityAdapter({\n apiKey: options.apiKey,\n model: options.model,\n maxRetries: 0,\n maxOutputTokens: 1_000,\n client: options.client,\n })\n\n return {\n async probe(input: VisibilityProbeInput): Promise {\n const plannerSignal = AbortSignal.any([\n input.signal,\n AbortSignal.timeout(VAL_TOWN_GEMINI_VISIBILITY_LIMITS.plannerTimeoutMs),\n ])\n const plan = await planner.plan({\n canonicalDomain: input.domain,\n brandNames: [],\n maxQueries: VAL_TOWN_GEMINI_VISIBILITY_LIMITS.maxProbeCalls,\n signal: plannerSignal,\n })\n const report = await runVisibilityProbe({\n target: plan.target,\n queries: plan.queries,\n adapters: [adapter],\n signal: input.signal,\n limits: {\n maxQueries: VAL_TOWN_GEMINI_VISIBILITY_LIMITS.maxProbeCalls,\n maxProviders: 1,\n maxConcurrency: VAL_TOWN_GEMINI_VISIBILITY_LIMITS.probeConcurrency,\n timeoutMs: VAL_TOWN_GEMINI_VISIBILITY_LIMITS.probeTimeoutMs,\n maxAnswerChars: 4_000,\n maxSources: 12,\n maxSearchQueries: 12,\n },\n })\n return toHostReport(input.domain, report)\n },\n }\n}\n\nfunction toHostReport(domain: string, report: VisibilityProbeReport): VisibilityReport {\n return {\n schemaVersion: String(report.schemaVersion),\n domain,\n startedAt: report.startedAt,\n completedAt: report.completedAt,\n summary: {\n successfulChecks: report.summary.successfulChecks,\n failedChecks: report.summary.failedChecks,\n mentionRate: report.summary.mentionRate,\n citationRate: report.summary.citationRate,\n },\n evidence: report.checks.map(toEvidence),\n }\n}\n\nfunction toEvidence(check: VisibilityProbeCheck): VisibilityEvidence {\n return {\n query: check.query,\n provider: check.provider,\n requestedModel: check.requestedModel,\n servedModel: check.servedModel,\n completedAt: check.completedAt,\n answerText: check.answerText,\n mentioned: check.mentioned,\n matchedTerms: check.matchedTerms,\n cited: check.cited,\n citedDomains: check.citedDomains,\n citedUrls: check.citedUrls,\n matchedCitationDomains: check.matchedCitationDomains,\n matchedCitationUrls: check.matchedCitationUrls,\n sources: check.sources.map((source) => ({ url: source.url, title: source.title })),\n searchQueries: check.searchQueries,\n retrievalStatus: check.status === 'failed'\n ? 'error'\n : check.retrievalStatus === 'used'\n ? 'grounded'\n : check.retrievalStatus === 'not-used'\n ? 'not-grounded'\n : 'unknown',\n error: check.error?.message ?? null,\n }\n}\n",[],[184,267,285],"0ddab71a-7a15-42ed-82e7-e1ec8b4c27e8","contracts.ts","93687142-a63e-11f1-9f99-1607ee4eb77e",29,["D",1788292311586],"/** A versioned, persistence-free report contract. */\nexport const VISIBILITY_PROBE_SCHEMA_VERSION = 1 as const\n\n/**\n * User-approved identity for one site. `brandNames` are exact aliases, not\n * fuzzy search terms. A domain counts as an answer mention only when it is\n * written explicitly; the probe never silently derives a prose alias from it.\n */\nexport interface VisibilityProbeTarget {\n canonicalDomain: string\n brandNames: readonly string[]\n}\n\nexport interface VisibilityProbeQuery {\n /** Stable caller identity. A deterministic position-based ID is used when omitted. */\n id?: string\n text: string\n}\n\nexport type VisibilityRetrievalStatus = 'used' | 'not-used' | 'unknown'\n\n/** A provider-normalized source. Never pass raw provider response objects here. */\nexport interface VisibilitySource {\n url: string\n title?: string | null\n /**\n * Optional provider-normalized source domain. `null` explicitly says an\n * opaque provider redirect could not be attributed to a website, so callers\n * must not fall back to the redirect host.\n */\n domain?: string | null\n}\n\n/**\n * What a provider adapter returns after it has interpreted its own response.\n * The runner applies the target-specific mention/citation detection and output\n * caps, so adapters have no Canonry persistence or UI knowledge.\n */\nexport interface VisibilityProviderResponse {\n requestedModel: string\n /** Only use a provider-disclosed identity; never fall back to requestedModel. */\n servedModel?: string | null\n answerText: string\n sources?: readonly VisibilitySource[]\n searchQueries?: readonly string[]\n retrievalStatus?: VisibilityRetrievalStatus\n}\n\nexport interface VisibilityProviderRequest {\n query: VisibilityProbeQuery\n target: VisibilityProbeTarget\n signal: AbortSignal\n limits: VisibilityProbeLimits\n}\n\n/** Provider-neutral execution seam. Adapters own credentials passed at construction. */\nexport interface VisibilityProviderAdapter {\n /** Stable machine identifier, for example `gemini`. */\n readonly name: string\n /** Configuration identity, useful when a request fails before the provider responds. */\n readonly requestedModel?: string\n execute(request: VisibilityProviderRequest): Promise\n}\n\n/**\n * All values are bounded by hard local limits. The public Val Town sample sets\n * tighter product limits (three Gemini queries).\n */\nexport interface VisibilityProbeLimits {\n /** Per query-provider request deadline. */\n timeoutMs: number\n maxConcurrency: number\n maxQueries: number\n maxProviders: number\n maxAnswerChars: number\n maxSources: number\n maxSourceUrlChars: number\n maxSourceTitleChars: number\n maxSearchQueries: number\n maxSearchQueryChars: number\n}\n\nexport const DEFAULT_VISIBILITY_PROBE_LIMITS: VisibilityProbeLimits = {\n timeoutMs: 16_000,\n maxConcurrency: 1,\n maxQueries: 10,\n maxProviders: 4,\n maxAnswerChars: 12_000,\n maxSources: 20,\n maxSourceUrlChars: 2_048,\n maxSourceTitleChars: 512,\n maxSearchQueries: 10,\n maxSearchQueryChars: 300,\n}\n\nexport interface RunVisibilityProbeInput {\n target: VisibilityProbeTarget\n queries: readonly VisibilityProbeQuery[]\n adapters: readonly VisibilityProviderAdapter[]\n limits?: Partial\n /** Cancels outstanding work. A cancellation becomes a failed check, never a false negative. */\n signal?: AbortSignal\n /** Deterministic test seam; no wall-clock state is retained. */\n now?: () => Date\n}\n\nexport type VisibilityProbeCheckStatus = 'success' | 'failed'\nexport type VisibilityProbeReportStatus = 'completed' | 'partial' | 'failed'\n\nexport type VisibilityProbeFailureCode = 'aborted' | 'timeout' | 'provider-error' | 'invalid-response'\n\n/** Safe, clipped error information. Provider bodies and credentials never leave an adapter. */\nexport interface VisibilityProbeFailure {\n code: VisibilityProbeFailureCode\n message: string\n}\n\n/** A source selected for display after output caps are applied. */\nexport interface VisibilityProbeSourceEvidence {\n url: string\n title: string | null\n domain: string | null\n /** This source points to the target domain or one of its subdomains. */\n targetDomainMatch: boolean\n}\n\n/** One query × provider observation. `null` means the check failed, not false. */\nexport interface VisibilityProbeCheck {\n queryId: string\n query: string\n provider: string\n requestedModel: string | null\n servedModel: string | null\n completedAt: string\n status: VisibilityProbeCheckStatus\n answerText: string | null\n answerTruncated: boolean\n mentioned: boolean | null\n matchedTerms: string[]\n cited: boolean | null\n /** All domain identities emitted by the provider's source list, subject to output caps. */\n citedDomains: string[]\n /** All source URLs emitted by the provider's source list, subject to output caps. */\n citedUrls: string[]\n matchedCitationDomains: string[]\n matchedCitationUrls: string[]\n sources: VisibilityProbeSourceEvidence[]\n sourceCount: number\n sourcesTruncated: boolean\n searchQueries: string[]\n searchQueriesTruncated: boolean\n retrievalStatus: VisibilityRetrievalStatus\n error: VisibilityProbeFailure | null\n}\n\n/** Rates use successful query-provider checks only. They are null when none succeeded. */\nexport interface VisibilityProbeSummary {\n totalChecks: number\n successfulChecks: number\n failedChecks: number\n mentionedChecks: number\n citedChecks: number\n mentionRate: number | null\n citationRate: number | null\n}\n\nexport interface VisibilityProbeReport {\n schemaVersion: typeof VISIBILITY_PROBE_SCHEMA_VERSION\n target: VisibilityProbeTarget\n startedAt: string\n completedAt: string\n status: VisibilityProbeReportStatus\n checks: VisibilityProbeCheck[]\n summary: VisibilityProbeSummary\n}\n\n/**\n * Separate optional planning seam. The host supplies any homepage text it has\n * already fetched; the planner never fetches a website to plan a probe.\n */\nexport interface VisibilityQueryPlanningInput {\n canonicalDomain: string\n /** Optional host-fetched homepage extract. An empty value uses grounded domain research only. */\n homepageContext?: string\n brandNames?: readonly string[]\n maxQueries?: number\n signal?: AbortSignal\n /** Deterministic test seam; no wall-clock state is retained. */\n now?: () => Date\n}\n\nexport interface VisibilityQueryPlan {\n target: VisibilityProbeTarget\n queries: VisibilityProbeQuery[]\n planner: string\n requestedModel: string\n servedModel: string | null\n generatedAt: string\n}\n\nexport interface VisibilityQueryPlanner {\n readonly name: string\n readonly requestedModel: string\n plan(input: VisibilityQueryPlanningInput): Promise\n}\n",[],[184,267,293],"40410abf-b9cd-4f61-b495-e6b8b0487782","brand.ts","935818ec-a63e-11f1-b64b-1607ee4eb77e",27,["D",1788292311530],"import type { VisibilityProbeTarget, VisibilitySource } from './contracts.ts'\nimport { cleanText, MAX_BRAND_NAME_CHARS, MAX_BRAND_NAMES, MAX_DOMAIN_CHARS, uniqueStable } from './runtime.ts'\n\n/**\n * Exact brand identity matching, kept Val-local so the probe core has no\n * dependency on Canonry's private workspace contracts at runtime. The behavior\n * deliberately mirrors Canonry's approved-alias model: adjacent\n * complete words only, never substring or edit-distance guesses.\n */\nconst WORD_SEGMENTER = new Intl.Segmenter('en', { granularity: 'word' })\nconst NON_WORD = /[^\\p{L}\\p{N}]+/gu\nconst WORD_RUNS = /[\\p{L}\\p{N}]+/gu\nconst ACCENT_BEARING_SCRIPT = /[\\p{Script=Latin}\\p{Script=Greek}\\p{Script=Cyrillic}]/u\nconst NON_ASCII = /\\P{ASCII}/u\nconst WRITTEN_URL_OR_DOMAIN =\n /(?:https?:\\/\\/|www\\.)[^\\s<>(){}]+|\\b(?:[\\p{L}\\p{N}](?:[\\p{L}\\p{N}-]{0,61}[\\p{L}\\p{N}])?\\.)+[a-z]{2,63}(?:[/?#][^\\s<>(){}]*)?/giu\n\nexport interface NormalizedTarget {\n canonicalDomain: string\n /** Explicit caller-approved names, safe to return on the public report. */\n brandNames: string[]\n /** Exact-match aliases. These are caller-approved names only. */\n aliases: string[]\n}\n\nexport interface MentionEvidence {\n mentioned: boolean\n matchedTerms: string[]\n}\n\nexport interface CitationEvidence {\n cited: boolean\n citedDomains: string[]\n citedUrls: string[]\n matchedCitationDomains: string[]\n matchedCitationUrls: string[]\n sources: NormalizedSource[]\n}\n\nexport interface NormalizedSource {\n url: string\n title: string | null\n domain: string | null\n targetDomainMatch: boolean\n}\n\nfunction foldAccents(value: string): string {\n if (!NON_ASCII.test(value)) return value\n let folded = ''\n for (const character of value) {\n if (character.charCodeAt(0) < 0x80) {\n folded += character\n continue\n }\n const decomposed = character.normalize('NFD')\n const base = decomposed[0]!\n folded += decomposed.length > 1 && ACCENT_BEARING_SCRIPT.test(base) ? base : character\n }\n return folded\n}\n\nfunction normalizedWords(value: string): string[] {\n const normalized = foldAccents(value.normalize('NFKC')).toLocaleLowerCase('en')\n const words: string[] = []\n for (const segment of WORD_SEGMENTER.segment(normalized)) {\n if (!segment.isWordLike) continue\n for (const word of segment.segment.match(WORD_RUNS) ?? []) words.push(word)\n }\n return words\n}\n\nfunction brandKey(value: string): string {\n return normalizedWords(value).join('')\n}\n\nfunction matchedAliasKeys(text: string, aliases: readonly string[]): Set {\n const keys = new Set(aliases.map(brandKey).filter(Boolean))\n if (keys.size === 0) return new Set()\n const normalized = foldAccents(text.normalize('NFKC')).toLocaleLowerCase('en')\n const compact = normalized.replace(NON_WORD, '')\n const reachable = new Set([...keys].filter((key) => compact.includes(key)))\n if (reachable.size === 0) return new Set()\n\n const longest = Math.max(...[...reachable].map((key) => key.length))\n const found = new Set()\n const words = normalizedWords(text)\n for (let start = 0; start < words.length; start++) {\n let candidate = ''\n for (let end = start; end < words.length; end++) {\n candidate += words[end]\n if (reachable.has(candidate)) found.add(candidate)\n if (candidate.length >= longest) break\n }\n if (found.size === reachable.size) break\n }\n return found\n}\n\n/** Normalize only a hostname / http(s) URL; output never retains credentials. */\nexport function hostOf(value: string | null | undefined): string | null {\n const candidate = cleanText(value)\n // A source URL can legitimately be longer than its hostname. Bound the\n // parser input, then validate the resulting hostname independently.\n if (!candidate || candidate.length > 8_192) return null\n const withScheme = /^https?:\\/\\//i.test(candidate) ? candidate : `https://${candidate}`\n try {\n const hostname = new URL(withScheme).hostname.replace(/^www\\./i, '').replace(/\\.$/, '').toLowerCase()\n return hostname && hostname.length <= MAX_DOMAIN_CHARS ? hostname : null\n } catch {\n return null\n }\n}\n\nexport function hostMatchesDomain(candidate: string | null | undefined, domain: string): boolean {\n const candidateHost = hostOf(candidate)\n return candidateHost === domain || Boolean(candidateHost?.endsWith(`.${domain}`))\n}\n\nexport function normalizeTarget(target: VisibilityProbeTarget): NormalizedTarget {\n const canonicalDomain = hostOf(target.canonicalDomain)\n if (!canonicalDomain || !canonicalDomain.includes('.')) {\n throw new Error('target.canonicalDomain must be a valid public hostname')\n }\n if (!Array.isArray(target.brandNames)) throw new Error('target.brandNames must be an array')\n if (target.brandNames.length > MAX_BRAND_NAMES) {\n throw new Error(`target.brandNames may contain at most ${MAX_BRAND_NAMES} entries`)\n }\n\n const explicitNames = target.brandNames.map(cleanText).filter(Boolean)\n if (explicitNames.some((name) => name.length > MAX_BRAND_NAME_CHARS)) {\n throw new Error(`target.brandNames entries must be at most ${MAX_BRAND_NAME_CHARS} characters`)\n }\n const brandNames = uniqueStable(explicitNames)\n return { canonicalDomain, brandNames, aliases: brandNames }\n}\n\nfunction normalizeSourceUrl(value: string): string | null {\n const raw = cleanText(value)\n if (!raw) return null\n try {\n const parsed = new URL(raw)\n if (parsed.protocol !== 'https:' && parsed.protocol !== 'http:') return null\n parsed.username = ''\n parsed.password = ''\n return parsed.toString()\n } catch {\n return null\n }\n}\n\n/** Find explicit written URLs/domains in answer prose, not fuzzy word fragments. */\nfunction writtenHosts(text: string): string[] {\n const hosts: string[] = []\n for (const match of text.matchAll(WRITTEN_URL_OR_DOMAIN)) {\n const candidate = match[0]!.replace(/[.,;:!?]+$/, '')\n const host = hostOf(candidate)\n if (host) hosts.push(host)\n }\n return uniqueStable(hosts)\n}\n\nexport function detectMention(answerText: string, target: NormalizedTarget): MentionEvidence {\n const matchedTerms: string[] = []\n if (writtenHosts(answerText).some((host) => hostMatchesDomain(host, target.canonicalDomain))) {\n matchedTerms.push(target.canonicalDomain)\n }\n\n const matchedKeys = matchedAliasKeys(answerText, target.aliases)\n for (const alias of target.aliases) {\n if (matchedKeys.has(brandKey(alias))) matchedTerms.push(alias)\n }\n const unique = uniqueStable(matchedTerms)\n return {\n mentioned: unique.length > 0,\n matchedTerms: unique,\n }\n}\n\n/**\n * Derive citation evidence strictly from the source list. This intentionally\n * does not inspect answer prose: a mention without a source is not a citation.\n */\nexport function detectCitation(\n inputSources: readonly VisibilitySource[] | undefined,\n target: NormalizedTarget,\n): CitationEvidence {\n const sourceMap = new Map()\n for (const source of inputSources ?? []) {\n const url = normalizeSourceUrl(source.url)\n if (!url || sourceMap.has(url)) continue\n // An adapter may explicitly set `domain: null` for an opaque provider\n // redirect. Do not turn that infrastructure hostname into a citation.\n const domain = source.domain === undefined ? hostOf(url) : hostOf(source.domain)\n sourceMap.set(url, {\n url,\n title: cleanText(source.title) || null,\n domain,\n targetDomainMatch: domain ? hostMatchesDomain(domain, target.canonicalDomain) : false,\n })\n }\n const sources = [...sourceMap.values()]\n const citedDomains = uniqueStable(sources.flatMap((source) => source.domain ? [source.domain] : []))\n const citedUrls = sources.map((source) => source.url)\n const matchedSources = sources.filter((source) => source.targetDomainMatch)\n return {\n cited: matchedSources.length > 0,\n citedDomains,\n citedUrls,\n matchedCitationDomains: uniqueStable(matchedSources.flatMap((source) => source.domain ? [source.domain] : [])),\n matchedCitationUrls: matchedSources.map((source) => source.url),\n sources,\n }\n}\n",[],[184,267,301],"7093d43c-bb87-4fe5-82ad-1c7711051c31",4,["D",1788292309391],[227,228,229,230,231,232],[184,267],"b9daa5e5-0737-4b14-b647-904b6d187cb0","types.ts","931ff2a0-a63e-11f1-b64b-1607ee4eb77e","91e63a7a-a63e-11f1-9a7d-1607ee4eb77e",20,["D",1788292311121],"/**\n * The public Val Town page consumes this intentionally small, serializable\n * view model. The runtime maps normalized Canonry results into it; this layer\n * never reads secrets, provider payloads, or storage directly.\n */\n\nexport type DemoUiStatus =\n | 'demo'\n | 'ready'\n | 'loading'\n | 'partial'\n | 'error'\n | 'rate-limited'\n | 'empty'\n\nexport type VisibilityMetric = 'mentioned' | 'cited'\nexport type EvidenceState = 'success' | 'pending' | 'failed' | 'not-measured'\n\nexport interface UiAction {\n label: string\n href?: string\n /** Submit action when the action is represented by the public check form. */\n formAction?: string\n}\n\nexport interface UiNotice {\n title: string\n detail: string\n tone: 'neutral' | 'positive' | 'caution' | 'negative'\n action?: UiAction\n}\n\nexport interface ProviderDescriptor {\n id: string\n label: string\n /** Requested model, never inferred from a response. */\n model?: string\n color?: string\n}\n\nexport interface VisibilityTrendPoint {\n /** Human-readable bucket label, for example \"May 06\". */\n label: string\n observedAt?: string\n values: Record>>\n}\n\nexport interface VisibilitySummaryMetric {\n /** 0..100 only when denominator is known. */\n rate: number | null\n numerator: number\n denominator: number\n deltaPoints?: number | null\n}\n\nexport interface EvidenceSource {\n url: string\n title?: string | null\n /** Whether the source URL belongs to the checked domain. */\n isTargetDomain?: boolean\n}\n\nexport interface QueryEvidenceViewModel {\n id: string\n query: string\n provider: string\n providerLabel?: string\n requestedModel?: string | null\n servedModel?: string | null\n completedAt?: string | null\n /** A null signal means unavailable, never false. */\n mentioned: boolean | null\n /** A null signal means unavailable, never false. */\n cited: boolean | null\n matchedTerms?: readonly string[]\n answerText?: string | null\n sources?: readonly EvidenceSource[]\n searchQueries?: readonly string[]\n retrievalStatus?: EvidenceState\n error?: string | null\n}\n\nexport interface VisibilityViewModel {\n /** Demo history is explicitly synthetic. Fresh live work is a snapshot. */\n historyKind: 'demo-history' | 'snapshot'\n checkedAt?: string | null\n requestedAt?: string | null\n providers: readonly ProviderDescriptor[]\n summaries: Record\n trend?: readonly VisibilityTrendPoint[]\n evidence: readonly QueryEvidenceViewModel[]\n /** Successful checks only are the denominator for the summary rates. */\n completedChecks: number\n requestedChecks: number\n failedChecks?: number\n notice?: UiNotice\n}\n\nexport type SiteHealthFactorState = 'measured' | 'not-applicable' | 'unavailable'\n\nexport interface SiteHealthFactorViewModel {\n id: string\n label: string\n state: SiteHealthFactorState\n score: number | null\n detail: string\n}\n\nexport type PageHealthStatus = 'good' | 'needs-attention' | 'unavailable'\n\nexport interface SiteHealthPageViewModel {\n url: string\n score: number | null\n status: PageHealthStatus\n findings: readonly string[]\n indexable?: boolean | null\n}\n\nexport interface SiteHealthFixViewModel {\n id: string\n title: string\n detail: string\n affectedPages?: number | null\n}\n\nexport interface SiteHealthProvenanceViewModel {\n /** Crawl-result schema retained so the bounded sample remains traceable. */\n schemaVersion?: string | null\n /** Requested and resolved crawl roots distinguish a redirect from a source URL. */\n rootUrl?: string | null\n finalRootUrl?: string | null\n /** Hosts the bounded runner actually attempted, in order. */\n attemptedHosts?: readonly string[]\n /** Optional engine identity when the host makes it available. */\n engineVersion?: string | null\n}\n\nexport interface SiteHealthViewModel {\n /** Must remain an honest bounded-sample label in the public demo. */\n sampleLabel: string\n score: number | null\n /** URLs found by the bounded crawl, not a total site-page count. */\n discoveredPages: number\n attemptedPages: number\n completedPages: number\n failedPages: number\n checkedAt?: string | null\n factors: readonly SiteHealthFactorViewModel[]\n topFixes: readonly SiteHealthFixViewModel[]\n worstPages: readonly SiteHealthPageViewModel[]\n /** Durable reason a bounded crawl ended before completion, never synthesized. */\n terminationReason?: string | null\n provenance?: SiteHealthProvenanceViewModel\n notice?: UiNotice\n}\n\nexport interface CheckFormViewModel {\n action: string\n method?: 'get' | 'post'\n /** Field read by the server-side verifier. Never render a secret in this model. */\n verificationFieldName?: string\n /** A public Cloudflare Turnstile site key. Omit it for local/test bypasses. */\n turnstileSiteKey?: string | null\n /** `audit` is intentionally fixed so the server can reject action mismatches. */\n turnstileAction?: 'audit'\n /** Production without a configured verifier is truthfully disabled. */\n verificationStatus?: 'ready' | 'not-required' | 'unavailable'\n verificationUnavailableMessage?: string\n submitLabel?: string\n}\n\nexport interface CanonryDemoViewModel {\n status: DemoUiStatus\n title?: string\n displayName: string\n domain: string\n locale?: string\n form?: CheckFormViewModel\n visibility?: VisibilityViewModel\n siteHealth?: SiteHealthViewModel\n notice?: UiNotice\n}\n",[],[184,322,314],"ui","3634ab7f-7575-4b55-bad7-eb76244ebd09","styles.ts","933382e8-a63e-11f1-91a7-1607ee4eb77e",22,["D",1788292311113],"/** Self-contained styles served from `/assets/canonry-ui.css` by the Val host. */\nexport const canonryDemoStyles = String.raw`\n:root {\n color-scheme: dark;\n --bg: #09090b;\n --surface: #111113;\n --surface-soft: #18181b;\n --surface-hover: #202024;\n --border: #29292e;\n --border-strong: #414147;\n --text: #f4f4f5;\n --text-strong: #e4e4e7;\n --secondary: #a1a1aa;\n --muted: #87878f;\n --faint: #62626b;\n --positive: #34d399;\n --caution: #fbbf24;\n --negative: #fb7185;\n --link: #93c5fd;\n --focus: #f4f4f5;\n --sans: Geist, Inter, ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, \"Segoe UI\", sans-serif;\n --mono: \"Geist Mono\", ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;\n}\n* { box-sizing: border-box; }\nhtml { background: var(--bg); }\nbody { margin: 0; background: var(--bg); color: var(--text); font-family: var(--sans); font-size: 14px; line-height: 1.5; }\nbutton, input { font: inherit; }\na { color: var(--link); }\na:focus-visible, button:focus-visible, input:focus-visible, summary:focus-visible { outline: 2px solid var(--focus); outline-offset: 3px; }\n.canonry-demo { width: min(100%, 1440px); margin: 0 auto; min-height: 100vh; padding: 0 32px 28px; }\n.app-header { min-height: 74px; display: flex; align-items: center; justify-content: space-between; gap: 22px; border-bottom: 1px solid var(--border); }\n.brand-lockup { display: flex; align-items: baseline; gap: 10px; white-space: nowrap; }\n.wordmark { color: var(--text); font-size: 18px; font-weight: 700; letter-spacing: -.04em; text-decoration: none; }\n.brand-lockup > span { color: var(--muted); font-size: 12px; }\n.domain-form { display: grid; grid-template-columns: auto minmax(360px, 1fr); gap: 6px 10px; align-items: center; max-width: 620px; }\n.domain-form > label { color: var(--secondary); font-size: 13px; white-space: nowrap; }\n.domain-form-row { display: flex; min-width: 0; }\n.domain-form input { min-width: 0; width: 100%; height: 38px; border: 1px solid var(--border-strong); border-radius: 6px 0 0 6px; background: var(--surface); color: var(--text); padding: 0 11px; }\n.domain-form input::placeholder { color: var(--muted); }\n.domain-form button { min-height: 38px; border: 1px solid var(--text); border-radius: 0 6px 6px 0; background: var(--text); color: var(--bg); padding: 0 13px; font-weight: 650; cursor: pointer; white-space: nowrap; }\n.domain-form button:hover { background: #d4d4d8; border-color: #d4d4d8; }\n.domain-form button:active { transform: translateY(1px); }\n.domain-form button:disabled, .domain-form input:disabled { cursor: not-allowed; opacity: .55; }\n.domain-form button:disabled:hover { background: var(--text); border-color: var(--text); }\n.domain-form > p { grid-column: 2; margin: 0; color: var(--muted); font-size: 13px; }\n.verification-slot { grid-column: 2; min-height: 0; }\n.turnstile-wrap { margin-top: 3px; min-height: 65px; }\n.verification-unavailable { display: flex; gap: 7px; align-items: center; margin: 3px 0 0; color: var(--caution); font-size: 13px; }\n.verification-unavailable span { display: grid; width: 17px; height: 17px; place-items: center; border: 1px solid currentColor; border-radius: 50%; font-family: var(--mono); font-size: 11px; }\n.report-header { display: flex; justify-content: space-between; gap: 20px; padding: 38px 0 32px; border-bottom: 1px solid var(--border); }\n.eyebrow { margin: 0 0 7px; color: var(--muted); font-size: 11px; font-weight: 650; letter-spacing: .13em; text-transform: uppercase; }\nh1, h2, h3, p { margin-top: 0; }\nh1 { margin-bottom: 8px; color: var(--text); font-size: clamp(24px, 3vw, 34px); letter-spacing: -.035em; line-height: 1.15; }\nh1 span { display: block; color: var(--secondary); font-size: .55em; font-weight: 500; letter-spacing: -.015em; margin-top: 4px; }\nh2 { margin: 0; color: var(--text-strong); font-size: 21px; font-weight: 600; letter-spacing: -.025em; }\nh3 { color: var(--text-strong); font-size: 15px; font-weight: 600; margin: 0 0 12px; }\n.report-domain { margin: 0; color: var(--secondary); font-family: var(--mono); font-size: 13px; }\n.sample-badge { height: fit-content; border: 1px solid var(--border-strong); border-radius: 999px; color: var(--secondary); font-size: 12px; padding: 4px 9px; white-space: nowrap; }\n.notice { display: grid; grid-template-columns: auto minmax(0, 1fr) auto; gap: 10px; align-items: start; margin: 18px 0 0; border: 1px solid var(--border); border-left-width: 3px; padding: 11px 13px; background: var(--surface); }\n.notice-neutral { border-left-color: var(--secondary); }\n.notice-positive { border-left-color: var(--positive); }\n.notice-caution { border-left-color: var(--caution); }\n.notice-negative { border-left-color: var(--negative); }\n.notice-glyph { display: grid; width: 18px; height: 18px; place-items: center; border: 1px solid currentColor; border-radius: 50%; color: var(--secondary); font-family: var(--mono); font-size: 11px; line-height: 1; }\n.notice-caution .notice-glyph { color: var(--caution); }\n.notice-negative .notice-glyph { color: var(--negative); }\n.notice-title { margin: 0; color: var(--text-strong); font-weight: 600; }\n.notice-detail { margin: 1px 0 0; color: var(--secondary); font-size: 13px; }\n.notice-link { align-self: center; font-size: 13px; white-space: nowrap; }\n.report-tabs { display: flex; gap: 28px; height: 62px; align-items: end; border-bottom: 1px solid var(--border); }\n.report-tabs button { position: relative; min-height: 45px; border: 0; padding: 0 0 14px; background: transparent; color: var(--secondary); cursor: pointer; font-size: 15px; font-weight: 550; }\n.report-tabs button:hover { color: var(--text); }\n.report-tabs button[aria-selected=\"true\"] { color: var(--text); }\n.report-tabs button[aria-selected=\"true\"]::after { position: absolute; right: 0; bottom: -1px; left: 0; height: 2px; background: var(--text); content: \"\"; }\n[data-report-panel] { padding-top: 34px; }\n.analysis-section { padding: 0 0 36px; border-bottom: 1px solid var(--border); }\n.analysis-section + .analysis-section { padding-top: 32px; }\n.section-heading { display: flex; align-items: start; justify-content: space-between; gap: 18px; margin-bottom: 22px; }\n.section-heading .eyebrow { margin-bottom: 5px; }\n.trend-heading { align-items: end; }\n.signal-summary { display: flex; align-items: baseline; justify-content: flex-end; flex-wrap: wrap; gap: 8px; text-align: right; }\n.signal-summary .metric-label { color: var(--secondary); font-size: 13px; }\n.signal-summary strong { color: var(--text); font-family: var(--mono); font-size: 30px; letter-spacing: -.06em; line-height: 1; }\n.metric-delta { font-family: var(--mono); font-size: 13px; font-weight: 600; }\n.metric-delta.up { color: var(--positive); }\n.metric-delta.down { color: var(--negative); }\n.chart-toolbar { display: flex; align-items: center; justify-content: space-between; gap: 16px; margin-bottom: 15px; }\n.segmented-control { display: inline-flex; border: 1px solid var(--border-strong); border-radius: 6px; overflow: hidden; }\n.metric-toggle { min-height: 34px; border: 0; border-right: 1px solid var(--border-strong); padding: 0 12px; background: transparent; color: var(--secondary); cursor: pointer; font-weight: 550; }\n.metric-toggle:last-child { border-right: 0; }\n.metric-toggle:hover { background: var(--surface-hover); color: var(--text); }\n.metric-toggle.is-active { background: #42424a; color: var(--text); }\n.chart-denominator { margin: 0; color: var(--muted); font-family: var(--mono); font-size: 13px; }\n.chart-legend { display: flex; flex-wrap: wrap; gap: 9px 20px; margin: 0 0 14px; padding: 0; list-style: none; }\n.chart-legend li { display: inline-flex; align-items: center; gap: 7px; color: var(--secondary); font-size: 13px; }\n.chart-legend strong { color: var(--text-strong); font-family: var(--mono); font-size: 12px; }\n.chart-legend code { color: var(--muted); font-family: var(--mono); font-size: 11px; }\n.legend-line { width: 23px; height: 3px; border-radius: 999px; background: var(--series-color, var(--secondary)); }\n.series-0 { --series-color: #fb923c; }\n.series-1 { --series-color: #60a5fa; }\n.series-2 { --series-color: #34d399; }\n.series-3 { --series-color: #22d3ee; }\n.series-4 { --series-color: #a78bfa; }\n.trend-chart { min-height: 275px; border-top: 1px solid var(--border); border-bottom: 1px solid var(--border); padding: 14px 0 4px; }\n.trend-svg { display: block; width: 100%; height: 275px; overflow: visible; }\n.chart-grid { stroke: #29292e; stroke-width: 1; }\n.chart-axis { fill: #94949d; font-family: var(--mono); font-size: 11px; }\n.chart-line { fill: none; stroke: var(--series-color, var(--secondary)); stroke-width: 3; stroke-linecap: round; stroke-linejoin: round; vector-effect: non-scaling-stroke; }\n.chart-dot { fill: var(--series-color, var(--secondary)); }\n.chart-caption { margin: 12px 0 0; color: var(--secondary); font-size: 13px; }\n.data-disclosure { margin-top: 14px; color: var(--secondary); }\n.data-disclosure > summary, .evidence-detail > summary, .page-detail > summary { width: fit-content; color: var(--link); cursor: pointer; font-size: 13px; }\n.data-disclosure > summary:hover, .evidence-detail > summary:hover, .page-detail > summary:hover { color: #dbeafe; }\n.table-wrap { overflow-x: auto; max-width: 100%; }\n.compact-table, .evidence-table { width: 100%; border-collapse: collapse; min-width: 680px; text-align: left; }\n.compact-table { margin-top: 12px; }\nth { color: var(--secondary); font-size: 11px; font-weight: 650; letter-spacing: .075em; text-transform: uppercase; }\nth, td { border-bottom: 1px solid var(--border); padding: 11px 12px; vertical-align: top; }\ntbody th { color: var(--text-strong); font-size: 13px; font-weight: 550; letter-spacing: normal; text-transform: none; }\ntd { color: var(--secondary); font-size: 13px; }\n.section-intro { max-width: 68ch; margin: -10px 0 18px; color: var(--secondary); font-size: 13px; }\n.query-text { display: inline-block; max-width: 37ch; }\n.signal { display: inline-flex; align-items: center; gap: 5px; white-space: nowrap; font-size: 13px; font-weight: 550; }\n.signal-positive { color: var(--positive); }\n.signal-neutral { color: var(--secondary); }\n.signal-caution { color: var(--caution); }\n.signal-unavailable { color: var(--muted); }\n.evidence-detail > summary, .page-detail > summary { white-space: nowrap; }\n.evidence-content { max-width: 720px; padding: 12px 0 4px; }\n.evidence-meta { display: flex; flex-wrap: wrap; gap: 6px 16px; color: var(--muted); font-size: 12px; }\ncode { color: var(--text-strong); font-family: var(--mono); font-size: .92em; }\n.detail-label { display: block; margin: 12px 0 4px; color: var(--muted); font-size: 11px; font-weight: 650; letter-spacing: .09em; text-transform: uppercase; }\n.evidence-answer blockquote { max-width: 72ch; margin: 0; border-left: 2px solid var(--border-strong); padding-left: 11px; color: var(--text-strong); }\n.detail-empty { color: var(--muted); font-size: 13px; }\n.detail-error { color: var(--negative); }\n.source-list { display: grid; gap: 7px; margin: 0; padding: 0; list-style: none; }\n.source-title { display: block; overflow: hidden; max-width: 70ch; color: var(--link); text-overflow: ellipsis; white-space: nowrap; }\n.source-host { display: block; color: var(--muted); font-family: var(--mono); font-size: 11px; }\n.empty-state, .snapshot-state { display: flex; gap: 12px; align-items: flex-start; border: 1px dashed var(--border-strong); padding: 19px; color: var(--secondary); }\n.empty-state p, .snapshot-state p { margin: 0; }\n.empty-title, .snapshot-title { color: var(--text-strong); font-weight: 600; }\n.snapshot-icon { color: var(--muted); font-family: var(--mono); font-size: 22px; line-height: 1; }\n.snapshot-metrics { display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 18px; margin: 18px 0 0; }\n.snapshot-metrics > div { border-top: 1px solid var(--border); padding-top: 11px; }\n.snapshot-metrics dt { color: var(--secondary); font-size: 13px; }\n.snapshot-metrics dd { margin: 3px 0 0; color: var(--text); font-family: var(--mono); font-size: 25px; font-weight: 650; letter-spacing: -.05em; }\n.snapshot-metrics span { color: var(--muted); font-size: 13px; }\n.checked-at { margin: 0; color: var(--muted); font-family: var(--mono); font-size: 12px; }\n.site-score { display: flex; align-items: baseline; gap: 9px; white-space: nowrap; }\n.site-score span { color: var(--secondary); font-size: 13px; }\n.site-score strong { color: var(--text); font-family: var(--mono); font-size: 24px; letter-spacing: -.05em; }\n.sample-facts { display: flex; flex-wrap: wrap; gap: 6px 16px; margin: -6px 0 24px; color: var(--secondary); font-size: 13px; }\n.sample-facts span + span::before { display: inline-block; margin-right: 16px; color: var(--faint); content: \"·\"; }\n.sample-facts strong { color: var(--text-strong); font-family: var(--mono); }\n.site-grid { display: grid; grid-template-columns: minmax(0, 1.2fr) minmax(300px, .8fr); gap: 34px; }\n.factor-list, .fix-list { margin: 0; padding: 0; list-style: none; }\n.factor-row { display: grid; grid-template-columns: minmax(0, 1fr) minmax(150px, .42fr); gap: 16px; align-items: center; border-top: 1px solid var(--border); padding: 12px 0; }\n.factor-row:last-child { border-bottom: 1px solid var(--border); }\n.factor-row p, .fix-list p { margin: 0; color: var(--text-strong); font-weight: 550; }\n.factor-row > div > span, .fix-list span { display: block; margin-top: 2px; color: var(--secondary); font-size: 13px; }\n.factor-score { display: flex; align-items: center; gap: 9px; }\n.factor-score meter { width: 100%; height: 9px; accent-color: var(--secondary); }\n.factor-positive meter { accent-color: var(--positive); }\n.factor-caution meter { accent-color: var(--caution); }\n.factor-negative meter { accent-color: var(--negative); }\n.factor-score strong { min-width: 58px; color: var(--text-strong); font-family: var(--mono); font-size: 13px; text-align: right; white-space: nowrap; }\n.factor-state { color: var(--muted); font-size: 13px; text-align: right; }\n.fix-list { display: grid; gap: 0; border-top: 1px solid var(--border); }\n.fix-list li { display: grid; grid-template-columns: 25px minmax(0, 1fr); gap: 9px; border-bottom: 1px solid var(--border); padding: 12px 0; }\n.fix-index { display: grid; width: 20px; height: 20px; place-items: center; border: 1px solid var(--border-strong); border-radius: 50%; color: var(--secondary); font-family: var(--mono); font-size: 11px; }\n.worst-pages { margin-top: 34px; }\n.url-cell a { display: inline-block; max-width: 48ch; overflow: hidden; color: var(--text-strong); text-overflow: ellipsis; white-space: nowrap; }\n.score-cell { color: var(--text-strong); font-family: var(--mono); white-space: nowrap; }\n.page-detail > div { max-width: 60ch; padding: 10px 0 2px; }\n.page-detail ul { display: grid; gap: 4px; margin: 0; padding-left: 18px; color: var(--secondary); }\n.page-indexability { margin: 10px 0 0; color: var(--secondary); }\n.sample-scope > p { max-width: 70ch; margin: 9px 0 0; color: var(--secondary); font-size: 13px; }\n.sample-scope .sample-provenance { color: var(--muted); font-family: var(--mono); font-size: 12px; }\n.no-js-site-health { padding-top: 34px; }\n.app-footer { display: flex; justify-content: space-between; gap: 14px; padding: 23px 0 4px; color: var(--muted); font-size: 12px; }\n.app-footer a { color: var(--secondary); }\n.app-footer > span:first-child { max-width: 62ch; }\n.footer-links { display: flex; align-items: baseline; gap: 13px; white-space: nowrap; }\n.footer-links code { font-family: ui-monospace, SFMono-Regular, Menlo, monospace; font-size: 11px; color: var(--secondary); }\n.sr-only { position: absolute; width: 1px; height: 1px; overflow: hidden; clip: rect(0, 0, 0, 0); white-space: nowrap; }\n[hidden] { display: none !important; }\n@media (max-width: 860px) {\n .canonry-demo { padding: 0 20px 24px; }\n .app-header { align-items: flex-start; flex-direction: column; padding: 18px 0; }\n .domain-form { width: 100%; max-width: none; grid-template-columns: 1fr; }\n .domain-form > p, .verification-slot { grid-column: 1; }\n .domain-form > label { position: absolute; width: 1px; height: 1px; overflow: hidden; clip: rect(0, 0, 0, 0); white-space: nowrap; }\n .report-header { padding: 28px 0 24px; }\n .site-grid { grid-template-columns: 1fr; gap: 28px; }\n}\n@media (max-width: 600px) {\n body { font-size: 14px; }\n .canonry-demo { padding: 0 14px 20px; }\n .report-header, .section-heading, .trend-heading { align-items: flex-start; flex-direction: column; }\n .signal-summary { justify-content: flex-start; text-align: left; }\n .chart-toolbar { align-items: flex-start; flex-direction: column; }\n .chart-legend { display: grid; grid-template-columns: 1fr 1fr; gap: 8px; }\n .chart-legend li { min-width: 0; flex-wrap: wrap; gap: 5px; }\n .chart-legend code { display: none; }\n .trend-chart, .trend-svg { min-height: 225px; height: 225px; }\n .site-score { margin-top: -10px; }\n .snapshot-metrics { grid-template-columns: 1fr; gap: 12px; }\n .factor-row { grid-template-columns: 1fr; gap: 8px; }\n .factor-state { text-align: left; }\n .sample-facts { display: grid; gap: 5px; }\n .sample-facts span + span::before { display: none; }\n .notice { grid-template-columns: auto minmax(0, 1fr); }\n .notice-link { grid-column: 2; }\n}\n@media (prefers-reduced-motion: reduce) {\n *, *::before, *::after { scroll-behavior: auto !important; transition-duration: .01ms !important; animation-duration: .01ms !important; animation-iteration-count: 1 !important; }\n}\n`\n",[],[184,322,324],"9d0af8f4-4821-482d-a8f5-0411cfb49b7c","render.ts","9343b730-a63e-11f1-a6d3-1607ee4eb77e",24,["D",1788292311388],"import type {\n CanonryDemoViewModel,\n DemoUiStatus,\n EvidenceSource,\n QueryEvidenceViewModel,\n SiteHealthFactorViewModel,\n SiteHealthPageViewModel,\n UiNotice,\n VisibilityMetric,\n VisibilityViewModel,\n} from './types.ts'\n\nconst DEFAULT_CSS_HREF = '/assets/canonry-ui.css'\nconst DEFAULT_SCRIPT_SRC = '/assets/canonry-ui.js'\nconst MAX_ANSWER_CHARS = 1_400\n\nfunction escapeHtml(value: unknown): string {\n return String(value ?? '')\n .replaceAll('&', '&')\n .replaceAll('<', '<')\n .replaceAll('>', '>')\n .replaceAll('\"', '"')\n .replaceAll(\"'\", ''')\n}\n\nfunction escapeAttr(value: unknown): string {\n return escapeHtml(value).replaceAll('`', '`')\n}\n\nfunction safeUrl(value: string): string | null {\n try {\n const url = new URL(value)\n return url.protocol === 'https:' || url.protocol === 'http:' ? url.toString() : null\n } catch {\n return null\n }\n}\n\nfunction safeHref(value: string): string | null {\n if (value.startsWith('/') && !value.startsWith('//')) return value\n return safeUrl(value)\n}\n\nfunction safeFormAction(value: string): string {\n return value.startsWith('/') && !value.startsWith('//') ? value : '/check'\n}\n\nfunction safeHost(value: string): string {\n const url = safeUrl(value)\n if (!url) return 'Unavailable source'\n return new URL(url).hostname\n}\n\nfunction clip(value: string | null | undefined, limit = MAX_ANSWER_CHARS): string {\n if (!value) return ''\n return value.length > limit ? `${value.slice(0, limit - 1).trimEnd()}…` : value\n}\n\nfunction isFiniteNumber(value: number | null | undefined): value is number {\n return typeof value === 'number' && Number.isFinite(value)\n}\n\nfunction asPercent(value: number | null | undefined): string {\n if (!isFiniteNumber(value)) return 'Not measured'\n return `${Number.isInteger(value) ? value : value.toFixed(1)}%`\n}\n\nfunction asScore(value: number | null | undefined): string {\n return isFiniteNumber(value) ? `${Math.round(value)} / 100` : 'Not measured'\n}\n\nfunction formatTime(value: string | null | undefined): string | null {\n if (!value) return null\n const date = new Date(value)\n if (Number.isNaN(date.valueOf())) return null\n return new Intl.DateTimeFormat('en-US', {\n month: 'short',\n day: 'numeric',\n year: 'numeric',\n hour: 'numeric',\n minute: '2-digit',\n }).format(date)\n}\n\nfunction statusCopy(status: DemoUiStatus): UiNotice | null {\n switch (status) {\n case 'loading':\n return {\n tone: 'neutral',\n title: 'Checking this domain',\n detail: 'The report will appear here when the bounded checks finish.',\n }\n case 'partial':\n return {\n tone: 'caution',\n title: 'Partial result',\n detail: 'Only completed checks are included below. Failed checks are shown separately.',\n }\n case 'error':\n return {\n tone: 'negative',\n title: 'This check could not finish',\n detail: 'Try again later or use a domain that responds publicly.',\n }\n case 'rate-limited':\n return {\n tone: 'caution',\n title: 'Check limit reached',\n detail: 'This public sample has reached its current limit. Try again later.',\n }\n case 'empty':\n return { tone: 'neutral', title: 'No report yet', detail: 'Enter a public domain to create a bounded snapshot.' }\n default:\n return null\n }\n}\n\nfunction renderNotice(notice: UiNotice | undefined): string {\n if (!notice) return ''\n const href = notice.action?.href ? safeHref(notice.action.href) : null\n const action = href && notice.action\n ? `${escapeHtml(notice.action.label)}`\n : ''\n return `\n `\n}\n\nfunction providerSeriesClass(index: number): string {\n return `series-${index % 5}`\n}\n\nfunction chartPointX(index: number, count: number): number {\n const left = 56\n const right = 892\n if (count <= 1) return (left + right) / 2\n return left + ((right - left) * index) / (count - 1)\n}\n\nfunction chartPointY(value: number): number {\n const top = 18\n const bottom = 218\n const normalized = Math.max(0, Math.min(100, value))\n return bottom - ((bottom - top) * normalized) / 100\n}\n\nfunction renderTrendPath(values: Array, pointCount: number): string {\n let segment = ''\n let started = false\n for (let index = 0; index < pointCount; index += 1) {\n const value = values[index]\n if (!isFiniteNumber(value)) {\n started = false\n continue\n }\n const command = started ? 'L' : 'M'\n segment += `${command}${chartPointX(index, pointCount).toFixed(1)},${chartPointY(value).toFixed(1)} `\n started = true\n }\n return segment.trim()\n}\n\nfunction renderTrendSvg(visibility: VisibilityViewModel, metric: VisibilityMetric): string {\n const trend = visibility.trend ?? []\n const gridLabels = [100, 75, 50, 25, 0]\n const grids = gridLabels.map((value) => {\n const y = chartPointY(value)\n return `${value}%`\n }).join('')\n const labels = trend.map((point, index) => (\n `${\n escapeHtml(point.label)\n }`\n )).join('')\n const paths = visibility.providers.map((provider, index) => {\n const values = trend.map((point) => point.values[provider.id]?.[metric] ?? null)\n const path = renderTrendPath(values, trend.length)\n const series = providerSeriesClass(index)\n const dots = values.map((value, pointIndex) =>\n isFiniteNumber(value)\n ? ``\n : ''\n ).join('')\n return path ? `${dots}` : ''\n }).join('')\n const title = metric === 'mentioned' ? 'Mentioned in answer trend' : 'Cited in source trend'\n return `\n `\n}\n\nfunction renderTrendData(visibility: VisibilityViewModel, metric: VisibilityMetric): string {\n const trend = visibility.trend ?? []\n if (trend.length === 0) return ''\n const columns = visibility.providers.map((provider) => `${escapeHtml(provider.label)}`).join('')\n const rows = trend.map((point) => {\n const cells = visibility.providers.map((provider) =>\n `${asPercent(point.values[provider.id]?.[metric] ?? null)}`\n ).join('')\n return `${escapeHtml(point.label)}${cells}`\n }).join('')\n return `\n

Trend data

${columns}${rows}

Date

`\n}\n\nfunction metricLabel(metric: VisibilityMetric): string {\n return metric === 'mentioned' ? 'Mentioned' : 'Cited'\n}\n\nfunction renderMetricSummary(visibility: VisibilityViewModel, metric: VisibilityMetric, hidden = false): string {\n const summary = visibility.summaries[metric]\n return `

\n ${metricLabel(metric)}${asPercent(summary.rate)}${\n isFiniteNumber(summary.deltaPoints)\n ? `= 0 ? 'up' : 'down'}\">${summary.deltaPoints >= 0 ? '+' : ''}${\n summary.deltaPoints.toFixed(1)\n } pts`\n : ''\n }\n

`\n}\n\nfunction renderTrendLegend(visibility: VisibilityViewModel, metric: VisibilityMetric): string {\n const latest = visibility.trend?.at(-1)\n const rows = visibility.providers.map((provider, index) => {\n const latestValue = latest?.values[provider.id]?.[metric] ?? null\n return `

${\n escapeHtml(provider.label)\n }${provider.model ? `${escapeHtml(provider.model)}` : ''}${\n asPercent(latestValue)\n }

`\n }).join('')\n return `

${rows}`\n}\n\nfunction renderTrendMetricPanel(visibility: VisibilityViewModel, metric: VisibilityMetric, hidden = false): string {\n return `

\n ${renderTrendLegend(visibility, metric)}\n

${renderTrendSvg(visibility, metric)}

Mentioned is answer text. Cited is a source link to this domain. They are independent signals.

${renderTrendData(visibility, metric)}

`\n}\n\nfunction renderVisibilityChart(visibility: VisibilityViewModel): string {\n const isHistory = visibility.historyKind === 'demo-history' && (visibility.trend?.length ?? 0) > 1\n const mention = visibility.summaries.mentioned\n const cite = visibility.summaries.cited\n const checkedAt = formatTime(visibility.checkedAt)\n if (!isHistory) {\n return `\n

AI visibility

Fresh snapshot

\n ${checkedAt ? `

Checked ${escapeHtml(checkedAt)}

` : ''}\n

\n ○\n

No trend yet

A fresh domain is measured once. Canonry does not invent prior history.

Mentioned: ${\n asPercent(mention.rate)\n }
Cited: ${\n asPercent(cite.rate)\n }

`\n }\n return `\n

Trend

Answer-engine trend

\n ${renderMetricSummary(visibility, 'mentioned')}\n ${renderMetricSummary(visibility, 'cited', true)}\n

\n \n ${renderTrendMetricPanel(visibility, 'mentioned')}\n ${renderTrendMetricPanel(visibility, 'cited', true)}\n

`\n}\n\nfunction signalLabel(value: boolean | null, positive: string, negative: string): string {\n if (value === true) return positive\n if (value === false) return negative\n return 'Not measured'\n}\n\nfunction signalClass(value: boolean | null): string {\n if (value === true) return 'signal-positive'\n if (value === false) return 'signal-neutral'\n return 'signal-unavailable'\n}\n\nfunction renderSource(source: EvidenceSource): string {\n const url = safeUrl(source.url)\n const title = source.title?.trim() || safeHost(source.url)\n if (!url) {\n return `

${\n escapeHtml(title)\n }Unavailable URL

`\n }\n return `

${\n escapeHtml(title)\n }${escapeHtml(safeHost(url))}${\n source.isTargetDomain ? ' · target source' : ''\n }

`\n}\n\nfunction renderEvidenceDetails(row: QueryEvidenceViewModel): string {\n const answer = row.answerText\n ? `

${escapeHtml(clip(row.answerText))}

`\n : '

Answer text was not retained for this result.

'\n const sources = row.sources?.length\n ? `

${row.sources.map(renderSource).join('')}`\n : '

No source URLs were recorded.

'\n const matched = row.matchedTerms?.length\n ? `

Matched terms${escapeHtml(row.matchedTerms.join(', '))}

`\n : ''\n const models = [\n row.requestedModel ? `Requested: ${escapeHtml(row.requestedModel)}` : '',\n row.servedModel ? `Served: ${escapeHtml(row.servedModel)}` : '',\n ].filter(Boolean).join('')\n const searches = row.searchQueries?.length\n ? `

Search queries${escapeHtml(row.searchQueries.join(', '))}

`\n : ''\n const error = row.error\n ? `

Unavailable${escapeHtml(row.error)}

`\n : ''\n return `\n

View evidence

${models}${\n row.completedAt && formatTime(row.completedAt)\n ? `Completed: ${escapeHtml(formatTime(row.completedAt)!)}`\n : ''\n }

Answer

${answer}

\n ${matched}${searches}${error}\n

Sources

${sources}

`\n}\n\nfunction renderEvidence(visibility: VisibilityViewModel): string {\n const rows = visibility.evidence.map((row) => `\n \n ${escapeHtml(row.query)}\n ${escapeHtml(row.providerLabel ?? row.provider)}\n ${\n row.mentioned === true ? '✓' : row.mentioned === false ? '−' : '?'\n }${signalLabel(row.mentioned, 'Mentioned', 'Not mentioned')}\n ${\n row.cited === true ? '✓' : row.cited === false ? '−' : '?'\n }${signalLabel(row.cited, 'Cited', 'Not cited')}\n ${renderEvidenceDetails(row)}\n `).join('')\n const empty =\n '

No completed query evidence

Evidence appears after a check returns an answer.

'\n return `\n

Evidence

Query evidence

Mentioned means the brand appears in answer text. Cited means a source URL belongs to the checked domain.

\n ${visibility.notice ? renderNotice(visibility.notice) : ''}\n ${\n visibility.evidence.length\n ? `

${rows}

Query	Engine	Mentioned	Cited	Evidence

`\n : empty\n }\n

`\n}\n\nfunction factorTone(factor: SiteHealthFactorViewModel): string {\n if (factor.state !== 'measured' || !isFiniteNumber(factor.score)) return 'factor-unavailable'\n if (factor.score >= 80) return 'factor-positive'\n if (factor.score >= 60) return 'factor-caution'\n return 'factor-negative'\n}\n\nfunction renderFactor(factor: SiteHealthFactorViewModel): string {\n const content = factor.state === 'measured' && isFiniteNumber(factor.score)\n ? `

${\n asScore(factor.score)\n }

`\n : `${factor.state === 'not-applicable' ? 'Not applicable' : 'Unavailable'}`\n return `

${escapeHtml(factor.label)}

${\n escapeHtml(factor.detail)\n }

${content}

`\n}\n\nfunction pageStatusLabel(status: SiteHealthPageViewModel['status']): string {\n if (status === 'good') return 'Good'\n if (status === 'needs-attention') return 'Needs attention'\n return 'Unavailable'\n}\n\nfunction renderPageDetails(page: SiteHealthPageViewModel): string {\n const facts = page.findings.length\n ? `

${escapeHtml(finding)}

`\n : '

No page-level findings were retained.

'\n return `

View findings

${facts}${\n page.indexable != null\n ? `

${\n page.indexable ? 'Indexable in this sample.' : 'Not indexable in this sample.'\n }

`\n : ''\n }

`\n}\n\nfunction readableValue(value: string): string {\n return value.replaceAll(/[-_]+/g, ' ').replaceAll(/\\s+/g, ' ').trim()\n}\n\nfunction renderSiteHealth(siteHealth: CanonryDemoViewModel['siteHealth'], idPrefix = 'site-health'): string {\n const headingId = `${idPrefix}-heading`\n const factorHeadingId = `${idPrefix}-factors`\n const fixHeadingId = `${idPrefix}-fixes`\n const worstPagesHeadingId = `${idPrefix}-worst-pages`\n if (!siteHealth) {\n return `\n

Site health

Technical AEO sample

No site-health sample

A bounded crawl can appear with a domain check.

`\n }\n const checkedAt = formatTime(siteHealth.checkedAt)\n const pages = siteHealth.worstPages.map((page) => {\n const url = safeUrl(page.url)\n const label = escapeHtml(page.url.replace(/^https?:\\/\\//, ''))\n const pageLink = url\n ? `${label}`\n : `${label}`\n return `${pageLink}${escapeHtml(pageStatusLabel(page.status))}${asScore(page.score)}${\n renderPageDetails(page)\n }`\n }).join('')\n const fixes = siteHealth.topFixes.map((fix, index) =>\n `

${index + 1}

${escapeHtml(fix.title)}

${\n escapeHtml(fix.detail)\n }${\n isFiniteNumber(fix.affectedPages)\n ? ` ${fix.affectedPages} sampled ${fix.affectedPages === 1 ? 'page' : 'pages'}.`\n : ''\n }

`\n ).join('')\n const termination = siteHealth.terminationReason\n ? `

Partial termination: ${escapeHtml(readableValue(siteHealth.terminationReason))}.

`\n : ''\n const provenance = [\n siteHealth.provenance?.schemaVersion ? `Crawl schema ${siteHealth.provenance.schemaVersion}` : '',\n siteHealth.provenance?.engineVersion ? `Engine ${siteHealth.provenance.engineVersion}` : '',\n ].filter(Boolean).join(' · ')\n return `\n

Site health

${escapeHtml(siteHealth.sampleLabel)}

Sample score${asScore(siteHealth.score)}

${siteHealth.completedPages} of ${siteHealth.attemptedPages} pages completed${siteHealth.discoveredPages} pages discovered${\n siteHealth.failedPages === 0\n ? 'No failed pages'\n : `${siteHealth.failedPages} failed ${siteHealth.failedPages === 1 ? 'page' : 'pages'}`\n }${checkedAt ? `Checked ${escapeHtml(checkedAt)}` : ''}

\n ${siteHealth.notice ? renderNotice(siteHealth.notice) : ''}\n

Factors

${\n siteHealth.factors.map(renderFactor).join('')\n }

Top fixes

${\n siteHealth.topFixes.length\n ? `

${fixes}`\n : '

No prioritized fixes in this sample.

'\n }

Worst sampled pages

${\n pages\n ? `

${pages}

Page	Status	Score	Findings

`\n : '

No page audit evidence is available.

'\n }

Sample scope

This is a bounded page sample, not a complete technical audit. A score applies only to the pages and factors checked here.

${termination}${\n provenance ? `

${escapeHtml(provenance)}

` : ''\n }

`\n}\n\nfunction renderCheckForm(model: CanonryDemoViewModel): string {\n if (!model.form) return ''\n const value = model.status === 'demo' || model.status === 'empty' ? '' : model.domain\n const verificationStatus = model.form.verificationStatus ?? (model.form.turnstileSiteKey ? 'ready' : 'not-required')\n const hasTurnstile = Boolean(model.form.turnstileSiteKey && verificationStatus === 'ready')\n const disabled = verificationStatus === 'unavailable'\n const verification = hasTurnstile\n ? `

`\n : verificationStatus === 'unavailable'\n ? `

!${\n escapeHtml(\n model.form.verificationUnavailableMessage ?? 'Human verification is unavailable. Public checks are disabled.',\n )\n }

`\n : ''\n const verificationSlot = verification\n ? `

${verification}

`\n : ''\n return `\n `\n}\n\nfunction renderMain(model: CanonryDemoViewModel): string {\n const globalNotice =\n (model.status === 'demo' || model.status === 'ready' ? model.notice : model.notice ?? statusCopy(model.status)) ??\n undefined\n const loading = model.status === 'loading'\n const visibility = model.visibility\n return `\n

\n \n

${model.status === 'demo' ? 'Demo report' : 'Domain report'}

${escapeHtml(model.displayName)}AI visibility and site health

${escapeHtml(model.domain)}${\n model.locale ? ` · ${escapeHtml(model.locale)}` : ''\n }

\n ${model.status === 'demo' ? 'Sample data' : ''}\n

\n ${renderNotice(globalNotice)}\n

\n \n \n

\n ${\n visibility\n ? `${renderVisibilityChart(visibility)}${renderEvidence(visibility)}`\n : '

No visibility result

Start a check to inspect answer-engine evidence.

'\n }\n

\n \n \n \n

`\n}\n\n/** Returns a complete document so the runtime can use it as an HTTP response body. */\nexport function renderCanonryDemo(model: CanonryDemoViewModel): string {\n const title = `${model.displayName} | Canonry`\n return `\n\n \n \n \n \n ${escapeHtml(title)}\n \n \n ${\n model.form?.turnstileSiteKey && (model.form.verificationStatus ?? 'ready') === 'ready'\n ? ''\n : ''\n }\n \n ${renderMain(model)}\n`\n}\n\n/** Useful for a host that owns the outer document or wants an embedded fragment. */\nexport function renderCanonryDemoBody(model: CanonryDemoViewModel): string {\n return renderMain(model)\n}\n",[],[184,322,332],"97e365c1-708a-43b8-8d79-ebbb0b4a4610","index.ts","93608ea0-a63e-11f1-9b04-1607ee4eb77e",28,["D",1788292311400],"export { demoCanonryViewModel } from '../fixtures/demo-report.ts'\nexport { createPublicCheckForm } from './check-form.ts'\nexport { canonryDemoClientScript } from './client.ts'\nexport { toCanonryDemoViewModel } from './from-check-record.ts'\nexport type { CheckRecordViewOptions } from './from-check-record.ts'\nexport { renderCanonryDemo, renderCanonryDemoBody } from './render.ts'\nexport { canonryDemoStyles } from './styles.ts'\nexport type {\n CanonryDemoViewModel,\n CheckFormViewModel,\n DemoUiStatus,\n EvidenceSource,\n EvidenceState,\n ProviderDescriptor,\n QueryEvidenceViewModel,\n SiteHealthFactorState,\n SiteHealthFactorViewModel,\n SiteHealthFixViewModel,\n SiteHealthPageViewModel,\n SiteHealthProvenanceViewModel,\n SiteHealthViewModel,\n UiAction,\n UiNotice,\n VisibilityMetric,\n VisibilitySummaryMetric,\n VisibilityTrendPoint,\n VisibilityViewModel,\n} from './types.ts'\n",[],[184,322,340],"6b5562ec-bdd4-495a-93a1-30472a334cc6","from-check-record.ts","9329ca82-a63e-11f1-9b04-1607ee4eb77e",21,["D",1788292311210],"import type {\n CheckRecord,\n CheckResult,\n SiteHealthPageSample,\n SiteHealthSample,\n VisibilityEvidence,\n VisibilityReport,\n} from '../runtime/types.ts'\nimport { PUBLIC_RATE_LIMITED_ERROR_CODE } from '../runtime/types.ts'\nimport type {\n CanonryDemoViewModel,\n CheckFormViewModel,\n QueryEvidenceViewModel,\n SiteHealthFactorViewModel,\n SiteHealthFixViewModel,\n SiteHealthPageViewModel,\n VisibilityViewModel,\n} from './types.ts'\n\nexport interface CheckRecordViewOptions {\n form?: CheckFormViewModel\n displayName?: string\n locale?: string\n title?: string\n}\n\nconst LOCAL_READY_FORM: CheckFormViewModel = {\n action: '/check',\n method: 'post',\n verificationFieldName: 'cf-turnstile-response',\n verificationStatus: 'not-required',\n submitLabel: 'Check a domain',\n}\n\n/**\n * Converts a sanitized, durable public-check record into the narrow UI model.\n * It deliberately never turns an absent provider report into a 0% score.\n */\nexport function toCanonryDemoViewModel(\n record: CheckRecord | null,\n options: CheckRecordViewOptions = {},\n): CanonryDemoViewModel {\n const domain = record?.domain ?? ''\n const result = record?.result ?? null\n const status = record ? mapStatus(record) : 'empty'\n const resultDomain = result?.domain || domain\n const displayName = options.displayName ?? nameFromDomain(resultDomain || 'Canonry')\n const visibility = result?.visibility ? mapVisibility(result.visibility) : undefined\n const siteHealth = result?.siteHealth ? mapSiteHealth(result.siteHealth, result.generatedAt) : undefined\n\n return {\n status,\n title: options.title,\n displayName,\n domain: resultDomain,\n locale: options.locale,\n form: { ...LOCAL_READY_FORM, ...options.form },\n visibility,\n siteHealth,\n notice: buildNotice(record, result),\n }\n}\n\nfunction mapStatus(record: CheckRecord): CanonryDemoViewModel['status'] {\n if (record.errorCode === PUBLIC_RATE_LIMITED_ERROR_CODE) return 'rate-limited'\n switch (record.status) {\n case 'queued':\n case 'running':\n return 'loading'\n case 'partial':\n return 'partial'\n case 'failed':\n return 'error'\n case 'complete':\n return 'ready'\n }\n}\n\nfunction mapVisibility(report: VisibilityReport): VisibilityViewModel {\n const providers = uniqueProviders(report.evidence)\n const denominator = report.summary.successfulChecks\n const mentioned = report.evidence.filter((row) => row.mentioned).length\n const cited = report.evidence.filter((row) => row.cited).length\n const failed = report.summary.failedChecks\n return {\n historyKind: 'snapshot',\n requestedAt: report.startedAt,\n checkedAt: report.completedAt,\n providers,\n summaries: {\n mentioned: {\n rate: percent(report.summary.mentionRate),\n numerator: mentioned,\n denominator,\n },\n cited: {\n rate: percent(report.summary.citationRate),\n numerator: cited,\n denominator,\n },\n },\n completedChecks: denominator,\n requestedChecks: denominator + failed,\n failedChecks: failed,\n evidence: report.evidence.map(mapEvidence),\n notice: failed > 0\n ? {\n tone: 'caution',\n title: `${failed} ${failed === 1 ? 'check' : 'checks'} unavailable`,\n detail: 'Mention and citation rates use completed checks only.',\n }\n : undefined,\n }\n}\n\nfunction uniqueProviders(evidence: readonly VisibilityEvidence[]): VisibilityViewModel['providers'] {\n const seen = new Map()\n for (const row of evidence) {\n if (seen.has(row.provider)) continue\n seen.set(row.provider, {\n id: row.provider,\n label: providerLabel(row.provider),\n model: row.requestedModel ?? undefined,\n })\n }\n return [...seen.values()]\n}\n\nfunction mapEvidence(row: VisibilityEvidence): QueryEvidenceViewModel {\n // The portable probe distinguishes all provider sources from the sources\n // whose URL actually matches the target. Accept the old runtime shape while\n // it rolls forward, but never mark every cited source as a target citation.\n const matchedCitationUrls = new Set(readMatchedCitationUrls(row))\n return {\n id: `${row.provider}:${row.query}:${row.completedAt}`,\n query: row.query,\n provider: row.provider,\n providerLabel: providerLabel(row.provider),\n requestedModel: row.requestedModel,\n servedModel: row.servedModel,\n completedAt: row.completedAt,\n mentioned: row.mentioned,\n cited: row.cited,\n matchedTerms: row.matchedTerms,\n answerText: row.answerText,\n sources: row.sources.map((source) => ({\n url: source.url,\n title: source.title,\n isTargetDomain: matchedCitationUrls.has(source.url),\n })),\n searchQueries: row.searchQueries,\n retrievalStatus: mapRetrievalStatus(row.retrievalStatus),\n error: row.error,\n }\n}\n\nfunction readMatchedCitationUrls(row: VisibilityEvidence): readonly string[] {\n return (row as VisibilityEvidence & { matchedCitationUrls?: readonly string[] }).matchedCitationUrls ?? []\n}\n\nfunction percent(value: number | null): number | null {\n if (value == null || !Number.isFinite(value)) return null\n return Math.max(0, Math.min(100, value * 100))\n}\n\nfunction mapRetrievalStatus(status: VisibilityEvidence['retrievalStatus']): QueryEvidenceViewModel['retrievalStatus'] {\n if (status === 'error') return 'failed'\n if (status === 'grounded') return 'success'\n if (status === 'not-grounded') return 'not-measured'\n return 'pending'\n}\n\nfunction mapSiteHealth(sample: SiteHealthSample, checkedAt: string): NonNullable {\n const complete = sample.pages.filter((page) => page.status === 'success').length\n const failed = sample.pages.filter((page) => page.status === 'error').length\n const attempted = Math.min(5, Math.max(sample.pages.length, sample.pagesObserved))\n return {\n sampleLabel: sample.label,\n score: sample.score,\n discoveredPages: sample.pagesDiscovered,\n attemptedPages: attempted,\n completedPages: complete,\n failedPages: failed,\n checkedAt,\n factors: sample.factors.map((factor) => {\n const state = factorState(sample, factor.id, factor.count)\n return {\n id: factor.id,\n label: factor.name,\n state,\n score: state === 'measured' ? factor.averageScore : null,\n detail: state === 'measured'\n ? `Measured across ${factor.count} sampled ${factor.count === 1 ? 'page' : 'pages'}.`\n : state === 'not-applicable'\n ? 'Not applicable to the sampled page types.'\n : 'Not measured in this sample.',\n }\n }),\n topFixes: topFixes(sample),\n worstPages: sample.pages.map(mapSiteHealthPage),\n terminationReason: sample.terminationReason,\n provenance: {\n schemaVersion: sample.schemaVersion,\n rootUrl: sample.rootUrl,\n finalRootUrl: sample.finalRootUrl,\n attemptedHosts: sample.attemptedHosts,\n engineVersion: readOptionalString(sample, 'engineVersion') ?? readOptionalString(sample, 'crawlEngineVersion'),\n },\n notice: sample.status === 'error' || sample.error\n ? {\n tone: 'caution',\n title: 'Site sample unavailable',\n detail: sample.error ?? 'The Technical AEO sample could not complete.',\n }\n : sample.status === 'partial'\n ? {\n tone: 'caution',\n title: 'Partial site sample',\n detail: 'Only completed pages contribute to the shown evidence.',\n }\n : sample.warnings.length\n ? { tone: 'caution', title: 'Sample warning', detail: sample.warnings[0]! }\n : undefined,\n }\n}\n\nfunction factorState(sample: SiteHealthSample, factorId: string, count: number): SiteHealthFactorViewModel['state'] {\n if (count > 0) return 'measured'\n const sampled = sample.pages.flatMap((page) => page.factors.filter((factor) => factor.id === factorId))\n if (sampled.length > 0 && sampled.every((factor) => factor.applicable === false)) return 'not-applicable'\n return 'unavailable'\n}\n\nfunction readOptionalString(value: object, key: string): string | null {\n const candidate = (value as Record)[key]\n return typeof candidate === 'string' && candidate.trim() ? candidate.trim() : null\n}\n\nfunction mapSiteHealthPage(page: SiteHealthPageSample): SiteHealthPageViewModel {\n const findings = [\n ...page.criticalDefects.map((defect) => defect.detail),\n ...page.factors.flatMap((factor) => factor.findings.map((finding) => finding.message)),\n ...(page.error ? [page.error] : []),\n ].filter(Boolean).slice(0, 6)\n return {\n url: page.url,\n score: page.score,\n status: page.status === 'error' ? 'unavailable' : (page.score ?? 0) >= 80 ? 'good' : 'needs-attention',\n findings,\n indexable: indexability(page.indexability),\n }\n}\n\nfunction topFixes(sample: SiteHealthSample): SiteHealthFixViewModel[] {\n const fixes = new Map\n }>()\n for (const page of sample.pages) {\n for (const defect of page.criticalDefects) {\n addFix(fixes, page.url, defect.recommendation || defect.detail, defect.detail)\n }\n for (const factor of page.factors) {\n for (const recommendation of factor.recommendations) {\n addFix(fixes, page.url, recommendation, factor.name)\n }\n }\n }\n return [...fixes.values()].slice(0, 3).map((fix) => ({\n id: fix.id,\n title: fix.title,\n detail: fix.detail,\n affectedPages: fix.affectedPageUrls.size,\n }))\n}\n\nfunction addFix(\n fixes: Map }>,\n pageUrl: string,\n recommendation: string,\n detail: string,\n): void {\n const title = firstSentence(recommendation || detail)\n const key = title.toLocaleLowerCase('en-US')\n if (!title) return\n const known = fixes.get(key)\n if (known) {\n known.affectedPageUrls.add(pageUrl)\n return\n }\n fixes.set(key, {\n id: `${fixes.size + 1}:${key}`,\n title,\n detail: recommendation && recommendation !== title ? recommendation : detail,\n affectedPageUrls: new Set([pageUrl]),\n })\n}\n\nfunction firstSentence(value: string): string {\n const sentence = value.split(/[.!?]\\s|[.!?]$/)[0] ?? value\n return sentence.trim().slice(0, 110)\n}\n\nfunction indexability(value: string | null): boolean | null {\n if (!value) return null\n if (value === 'eligible' || value === 'indexable') return true\n if (value === 'hidden' || value === 'failed' || value === 'not-indexable') return false\n return null\n}\n\nfunction providerLabel(provider: string): string {\n const known: Record = {\n gemini: 'Gemini',\n openai: 'OpenAI',\n claude: 'Claude',\n perplexity: 'Perplexity',\n }\n return known[provider] ?? (provider ? `${provider.slice(0, 1).toUpperCase()}${provider.slice(1)}` : 'Unknown engine')\n}\n\nfunction buildNotice(record: CheckRecord | null, result: CheckResult | null): CanonryDemoViewModel['notice'] {\n if (!record) return undefined\n if (record.errorCode === PUBLIC_RATE_LIMITED_ERROR_CODE) {\n return {\n tone: 'caution',\n title: 'Check limit reached',\n detail: record.errorMessage ?? 'This public sample has reached its current limit. Try again later.',\n }\n }\n if (record.status === 'failed') {\n return {\n tone: 'negative',\n title: 'This check could not finish',\n detail: record.errorMessage ?? 'Try another public domain later.',\n }\n }\n if (result?.errors.length) {\n const first = result.errors[0]!\n return {\n tone: 'caution',\n title: first.area === 'visibility' ? 'Visibility was unavailable' : 'Site sample was unavailable',\n detail: first.message,\n }\n }\n return undefined\n}\n\nfunction nameFromDomain(domain: string): string {\n const host = domain.replace(/^www\\./i, '').split('.')[0] ?? domain\n return host\n .replace(/[-_]+/g, ' ')\n .replace(/\\b\\w/g, (letter) => letter.toUpperCase())\n}\n",[],[184,322,348],"30630697-9c4a-43ce-a84d-3c67ca3a125b","client.ts","933a30f2-a63e-11f1-aa2a-1607ee4eb77e",23,["D",1788292311298],"/** Client-side enhancement only. The page remains usable with native forms and details. */\nexport const canonryDemoClientScript = `\n(() => {\n const tabs = Array.from(document.querySelectorAll('[data-report-tab]'));\n const panels = Array.from(document.querySelectorAll('[data-report-panel]'));\n const setTab = (name, focus) => {\n tabs.forEach((tab) => {\n const active = tab.dataset.reportTab === name;\n tab.setAttribute('aria-selected', String(active));\n tab.tabIndex = active ? 0 : -1;\n if (active && focus) tab.focus();\n });\n panels.forEach((panel) => { panel.hidden = panel.dataset.reportPanel !== name; });\n };\n tabs.forEach((tab, index) => {\n tab.addEventListener('click', () => setTab(tab.dataset.reportTab, false));\n tab.addEventListener('keydown', (event) => {\n if (!['ArrowLeft', 'ArrowRight', 'Home', 'End'].includes(event.key)) return;\n event.preventDefault();\n const target = event.key === 'Home' ? 0 : event.key === 'End' ? tabs.length - 1 : (index + (event.key === 'ArrowRight' ? 1 : tabs.length - 1)) % tabs.length;\n const next = tabs[target];\n if (next) setTab(next.dataset.reportTab, true);\n });\n });\n const metricButtons = Array.from(document.querySelectorAll('[data-visibility-metric]'));\n const metricPanels = Array.from(document.querySelectorAll('[data-visibility-panel]'));\n const metricSummaries = Array.from(document.querySelectorAll('[data-visibility-summary]'));\n metricButtons.forEach((button) => {\n button.addEventListener('click', () => {\n const metric = button.dataset.visibilityMetric;\n metricButtons.forEach((item) => {\n const active = item === button;\n item.classList.toggle('is-active', active);\n item.setAttribute('aria-pressed', String(active));\n });\n metricPanels.forEach((panel) => { panel.hidden = panel.dataset.visibilityPanel !== metric; });\n metricSummaries.forEach((summary) => { summary.hidden = summary.dataset.visibilitySummary !== metric; });\n });\n });\n\n const form = document.querySelector('[data-domain-check-form]');\n if (form) {\n const submit = form.querySelector('[data-domain-submit]');\n const busy = form.querySelector('[data-form-busy]');\n form.addEventListener('submit', () => {\n form.setAttribute('aria-busy', 'true');\n if (submit instanceof HTMLButtonElement) {\n submit.disabled = true;\n submit.setAttribute('aria-disabled', 'true');\n submit.textContent = 'Starting…';\n }\n if (busy) {\n busy.hidden = false;\n busy.textContent = 'Starting check…';\n }\n });\n }\n})();\n`\n",[],[184,322,356],"bdd01eca-55df-4b2d-8bff-52e3ec3f77da","check-form.ts","9316a416-a63e-11f1-8fd4-1607ee4eb77e",19,["D",1788292311023],"import type { ValTownConfig } from '../config/index.ts'\nimport type { CheckFormViewModel } from './types.ts'\n\ntype PublicCheckFormConfig = Pick<\n ValTownConfig,\n | 'publicChecksEnabled'\n | 'publicChecksUnavailableMessage'\n | 'humanVerificationStatus'\n | 'turnstileSiteKey'\n>\n\n/** Builds the public form from the complete admission capability, not CAPTCHA alone. */\nexport function createPublicCheckForm(config: PublicCheckFormConfig): CheckFormViewModel {\n const unavailable = !config.publicChecksEnabled\n return {\n action: '/check',\n method: 'post',\n verificationFieldName: 'cf-turnstile-response',\n turnstileSiteKey: unavailable ? null : config.turnstileSiteKey,\n turnstileAction: 'audit',\n verificationStatus: unavailable ? 'unavailable' : config.humanVerificationStatus,\n verificationUnavailableMessage: unavailable\n ? config.publicChecksUnavailableMessage ?? 'Public checks are temporarily unavailable.'\n : 'Human verification is not configured. Public checks are disabled.',\n submitLabel: 'Check a domain',\n }\n}\n",[],[184,322,364],"860a6741-04fd-4cac-81b8-88fa850c061e",2,["D",1788292309086],[219,220,221,222,223,224,225],[184,322],"01568ee8-b51f-43e3-8630-3492a546a4c6","storage","927bf83a-a63e-11f1-8d00-1607ee4eb77e",9,["D",1788292310084],[],[184,377],"9872971b-6df7-4db3-a940-d575fb5071df","site-health","92bd6c2a-a63e-11f1-9f99-1607ee4eb77e",12,["D",1788292310513],[],[184,384],"ec409f06-74cc-48dc-8496-7ea08a6c02f3","url.ts","938ff438-a63e-11f1-9193-1607ee4eb77e","92429036-a63e-11f1-9a7d-1607ee4eb77e",34,["D",1788292311893],"const MAX_DOMAIN_INPUT_LENGTH = 253\n\nexport class PublicUrlError extends Error {\n override name = 'PublicUrlError'\n}\n\nexport interface NormalizedPublicDomain {\n domain: string\n rootUrl: string\n}\n\nfunction isBlockedIpv4(host: string): boolean {\n const parts = host.split('.').map(Number)\n if (parts.length !== 4 || parts.some((part) => !Number.isInteger(part) || part < 0 || part > 255)) return false\n const a = parts[0]!\n const b = parts[1]!\n const c = parts[2]!\n return a === 0 ||\n a === 10 ||\n a === 127 ||\n (a === 100 && b >= 64 && b <= 127) ||\n (a === 169 && b === 254) ||\n (a === 172 && b >= 16 && b <= 31) ||\n (a === 192 && b === 0 && c === 0) ||\n (a === 192 && b === 168) ||\n (a === 198 && (b === 18 || b === 19)) ||\n a >= 224\n}\n\n/** `URL.hostname` retains brackets around an IPv6 literal. */\nfunction normalizedIpv6Literal(host: string): string | null {\n const value = host.toLowerCase()\n const unbracketed = value.startsWith('[') && value.endsWith(']') ? value.slice(1, -1) : value\n // A parsed URL hostname contains a colon only for an IPv6 literal. Do not\n // run IPv6 prefix checks against DNS names such as fda.gov or fc2.com.\n return unbracketed.includes(':') ? unbracketed : null\n}\n\nfunction isBlockedIpv6(value: string): boolean {\n return value === '::1' ||\n value === '::' ||\n value.startsWith('fe80:') ||\n value.startsWith('fc') ||\n value.startsWith('fd')\n}\n\n/**\n * Normalizes a user domain to a HTTPS root. This is a first-line guard; the\n * crawler still performs DNS and per-hop SSRF validation before every fetch.\n */\nexport function normalizePublicDomain(input: unknown): NormalizedPublicDomain {\n if (typeof input !== 'string') throw new PublicUrlError('Enter a domain.')\n const trimmed = input.trim()\n if (!trimmed || trimmed.length > MAX_DOMAIN_INPUT_LENGTH) throw new PublicUrlError('Enter a valid public domain.')\n\n const candidate = /^[a-z][a-z0-9+.-]*:\\/\\//i.test(trimmed) ? trimmed : `https://${trimmed}`\n let url: URL\n try {\n url = new URL(candidate)\n } catch {\n throw new PublicUrlError('Enter a valid public domain.')\n }\n\n if (url.protocol !== 'http:' && url.protocol !== 'https:') {\n throw new PublicUrlError('Only HTTP(S) domains can be checked.')\n }\n if (url.username || url.password) throw new PublicUrlError('Credentials are not allowed in a domain.')\n if (url.port && url.port !== '80' && url.port !== '443') {\n throw new PublicUrlError('Only standard web ports can be checked.')\n }\n if (url.pathname !== '/' || url.search || url.hash) throw new PublicUrlError('Enter a domain, not a page URL.')\n\n const hostname = url.hostname.toLowerCase().replace(/\\.$/, '')\n if (!hostname || hostname === 'localhost' || hostname.endsWith('.localhost') || hostname.endsWith('.local')) {\n throw new PublicUrlError('Private and local hosts cannot be checked.')\n }\n if (isBlockedIpv4(hostname)) {\n throw new PublicUrlError('Private and local hosts cannot be checked.')\n }\n\n const ipv6 = normalizedIpv6Literal(hostname)\n if (ipv6) {\n if (isBlockedIpv6(ipv6)) throw new PublicUrlError('Private and local hosts cannot be checked.')\n throw new PublicUrlError('IPv6 literal domains are not supported.')\n }\n\n // URL already performs IDNA conversion. IPv6 literals were rejected above;\n // require a DNS-looking name or a public IPv4 literal.\n const isIpv4 = /^\\d{1,3}(?:\\.\\d{1,3}){3}$/.test(hostname)\n if (!isIpv4 && (!hostname.includes('.') || hostname.length > MAX_DOMAIN_INPUT_LENGTH)) {\n throw new PublicUrlError('Enter a public domain with a valid hostname.')\n }\n\n return { domain: hostname, rootUrl: `https://${hostname}/` }\n}\n\n/** The sole alternate hostname the public host may attempt after a failed root crawl. */\nexport function wwwAlternate(domain: string): string | null {\n if (/^\\d{1,3}(?:\\.\\d{1,3}){3}$/.test(domain) || domain.includes(':')) return null\n return domain.startsWith('www.') ? domain.slice(4) : `www.${domain}`\n}\n\nexport function utcDay(now: Date = new Date()): string {\n return now.toISOString().slice(0, 10)\n}\n",[],[184,399,391],"security","a0bcfaff-8b0b-4a2e-90df-4d7ad01ae08d","turnstile.ts","93acddaa-a63e-11f1-a387-1607ee4eb77e",37,["D",1788292311919],"export class HumanVerificationError extends Error {\n override name = 'HumanVerificationError'\n constructor(message: string, readonly code: 'unavailable' | 'invalid' | 'transport' = 'invalid') {\n super(message)\n }\n}\n\nexport interface HumanVerificationInput {\n token: string | null\n remoteIp: string | null\n}\n\nexport interface HumanVerifier {\n verify(input: HumanVerificationInput): Promise\n}\n\nexport interface TurnstileVerifierOptions {\n secret: string\n allowedHostnames: readonly string[]\n fetchImpl?: typeof fetch\n}\n\n/** One public form, one server-enforced action. Do not make this client/env configurable. */\nexport const TURNSTILE_AUDIT_ACTION = 'audit'\n\ninterface TurnstileResponse {\n success?: boolean\n action?: string\n hostname?: string\n ['error-codes']?: string[]\n}\n\n/** Server-side only Turnstile verification. Tokens never become stored check data. */\nexport function createTurnstileVerifier(options: TurnstileVerifierOptions): HumanVerifier {\n const allowedHostnames = new Set(options.allowedHostnames.map((hostname) => hostname.toLowerCase()))\n const fetchImpl = options.fetchImpl ?? fetch\n\n return {\n async verify({ token, remoteIp }) {\n if (!token || token.length > 2048) throw new HumanVerificationError('Complete the human verification challenge.')\n const form = new URLSearchParams({\n secret: options.secret,\n response: token,\n idempotency_key: crypto.randomUUID(),\n })\n if (remoteIp) form.set('remoteip', remoteIp)\n\n let response: Response\n try {\n response = await fetchImpl('https://challenges.cloudflare.com/turnstile/v0/siteverify', {\n method: 'POST',\n headers: { 'content-type': 'application/x-www-form-urlencoded' },\n body: form,\n signal: AbortSignal.timeout(10_000),\n })\n } catch {\n throw new HumanVerificationError('Human verification is temporarily unavailable.', 'transport')\n }\n if (!response.ok) throw new HumanVerificationError('Human verification is temporarily unavailable.', 'transport')\n\n let payload: TurnstileResponse\n try {\n payload = await response.json() as TurnstileResponse\n } catch {\n throw new HumanVerificationError('Human verification is temporarily unavailable.', 'transport')\n }\n if (!payload.success) throw new HumanVerificationError('Complete the human verification challenge.')\n if (payload.action !== TURNSTILE_AUDIT_ACTION) {\n throw new HumanVerificationError('Human verification did not match this check.')\n }\n if (allowedHostnames.size > 0 && (!payload.hostname || !allowedHostnames.has(payload.hostname.toLowerCase()))) {\n throw new HumanVerificationError('Human verification did not match this site.')\n }\n },\n }\n}\n\n/** Production deliberately fails closed until a real Turnstile secret is configured. */\nexport class UnavailableHumanVerifier implements HumanVerifier {\n verify(): Promise {\n return Promise.reject(new HumanVerificationError('Human verification is not configured.', 'unavailable'))\n }\n}\n\n/** Development/test-only seam. It is never selected by a production configuration. */\nexport class LocalBypassHumanVerifier implements HumanVerifier {\n verify(): Promise {\n return Promise.resolve()\n }\n}\n",[],[184,399,401],"b8bce09a-c6af-4a10-812e-6d794b08426b",6,["D",1788292309698],[214,215],[184,399],"e28b7a02-6dfe-4e71-8516-ee38c41cd453","93a5c9fc-a63e-11f1-8fd4-1607ee4eb77e","9256932e-a63e-11f1-9a7d-1607ee4eb77e",36,["D",1788292311987],"/**\n * Runtime-neutral contracts for the public Canonry sample. The Val host owns\n * request handling and persistence; package adapters own provider and crawler\n * implementation details.\n */\n\nexport const CHECK_RESULT_SCHEMA_VERSION = '1.0' as const\n/** Controlled presentation code for native public-form quota failures. */\nexport const PUBLIC_RATE_LIMITED_ERROR_CODE = 'public-rate-limited' as const\n\nexport type CheckStatus = 'queued' | 'running' | 'complete' | 'partial' | 'failed'\n\nexport interface VisibilitySource {\n url: string\n title: string | null\n}\n\n/** A normalized, display-safe answer observation. Never place a raw provider response here. */\nexport interface VisibilityEvidence {\n query: string\n provider: string\n requestedModel: string | null\n servedModel: string | null\n completedAt: string\n answerText: string | null\n /** Null means the provider check failed; it is never silently converted to false. */\n mentioned: boolean | null\n matchedTerms: string[]\n /** Null means the provider check failed; it is never silently converted to false. */\n cited: boolean | null\n citedDomains: string[]\n citedUrls: string[]\n matchedCitationDomains: string[]\n matchedCitationUrls: string[]\n sources: VisibilitySource[]\n searchQueries: string[]\n retrievalStatus: 'grounded' | 'not-grounded' | 'unknown' | 'error'\n error: string | null\n}\n\nexport interface VisibilitySummary {\n successfulChecks: number\n failedChecks: number\n mentionRate: number | null\n citationRate: number | null\n}\n\nexport interface VisibilityReport {\n schemaVersion: string\n domain: string\n startedAt: string\n completedAt: string\n summary: VisibilitySummary\n evidence: VisibilityEvidence[]\n}\n\nexport interface VisibilityProbeInput {\n domain: string\n /** The package may use this one capped call to derive a profile/query basket. */\n maxPlannerCalls: 1\n /** The package may issue at most this many grounded answer-engine probes. */\n maxProbeCalls: 3\n signal: AbortSignal\n}\n\n/**\n * Boundary between public-check orchestration and the Val-local visibility\n * implementation. The public result never includes raw provider responses.\n */\nexport interface VisibilityProbePort {\n probe(input: VisibilityProbeInput): Promise\n}\n\nexport interface FactorSample {\n id: string\n name: string\n score: number\n applicable: boolean | null\n findings: Array<{ code: string; message: string }>\n recommendations: string[]\n}\n\nexport interface SiteHealthPageSample {\n url: string\n status: 'success' | 'error'\n score: number | null\n depth: number | null\n indexability: string | null\n factors: FactorSample[]\n criticalDefects: Array<{\n id: string\n severity: string\n detail: string\n recommendation: string\n }>\n error: string | null\n}\n\nexport interface SiteHealthSample {\n schemaVersion: string\n label: '5-page Technical AEO sample'\n domain: string\n rootUrl: string\n finalRootUrl: string | null\n status: 'complete' | 'partial' | 'error'\n score: number | null\n pagesDiscovered: number\n pagesFetched: number\n pagesObserved: number\n elapsedMs: number\n terminationReason: string | null\n warnings: string[]\n factors: Array<{ id: string; name: string; averageScore: number; count: number }>\n pages: SiteHealthPageSample[]\n attemptedHosts: string[]\n error: string | null\n}\n\nexport interface CheckResult {\n schemaVersion: typeof CHECK_RESULT_SCHEMA_VERSION\n domain: string\n generatedAt: string\n visibility: VisibilityReport | null\n siteHealth: SiteHealthSample | null\n errors: Array<{ area: 'visibility' | 'site-health'; code: string; message: string }>\n}\n\nexport interface CheckRecord {\n id: string\n fingerprint: string\n domain: string\n status: CheckStatus\n createdAt: string\n updatedAt: string\n expiresAt: string | null\n result: CheckResult | null\n errorCode: string | null\n errorMessage: string | null\n /** A durable execution claim. It prevents two Val isolates from running one check. */\n leaseOwner: string | null\n leaseUntil: string | null\n}\n\nexport interface CheckQuotaClaim {\n scope: 'client' | 'global'\n subject: string\n day: string\n max: number\n}\n\n/**\n * A durable admission result. The store owns this whole decision so concurrent\n * Val isolates cannot independently spend quota and start the same domain.\n */\nexport type CheckAdmission =\n | { kind: 'created'; record: CheckRecord }\n | { kind: 'reused'; record: CheckRecord }\n | { kind: 'reclaimed'; record: CheckRecord }\n | { kind: 'quota-exhausted'; scope: 'client' | 'global' }\n | { kind: 'busy' }\n\nexport interface CheckAdmissionInput {\n candidate: CheckRecord\n now: string\n clientQuota: CheckQuotaClaim\n globalQuota: CheckQuotaClaim\n}\n\nexport interface CheckStore {\n initialize(): Promise\n /**\n * Atomically reuse an active/fresh check, reclaim a crashed lease, or spend\n * quota and create one new record. Production executes this as one durable\n * SQLite admission batch; callers must not compose these steps.\n */\n admit(input: CheckAdmissionInput): Promise\n /** Legacy/read seam used by tests and status helpers; it never returns an expired running lease. */\n findReusable(fingerprint: string, now: string): Promise\n create(record: CheckRecord): Promise\n get(id: string): Promise\n update(\n id: string,\n patch: Partial>,\n ): Promise\n /** Atomically transition a queued/stale check to running and attach a per-check lease. */\n claimJob(id: string, owner: string, now: string, leaseUntil: string): Promise\n /** Publish a terminal result only if this isolate still owns the per-check lease. */\n finalizeJob(\n id: string,\n owner: string,\n patch: Partial>,\n ): Promise\n /** Return an unstarted claimed job to the durable queue when global capacity is occupied. */\n requeueJob(id: string, owner: string, now: string): Promise\n /** One active paid/public check at a time, with expiry so a crashed isolate recovers. */\n claimGlobalLease(name: string, holder: string, now: string, leaseUntil: string): Promise\n releaseGlobalLease(name: string, holder: string): Promise\n /** Atomically spend one unit only while the current UTC-day total is below max. */\n claimQuota(scope: string, subject: string, day: string, max: number): Promise\n}\n\nexport interface SiteHealthRunner {\n run(domain: string, signal: AbortSignal): Promise\n}\n\n/**\n * Internal-only handoff for a request that already reserved the one global\n * execution slot before durable admission. It is never derived from client\n * input or exposed by the public API.\n */\nexport interface PublicCheckDispatchOptions {\n executionLeaseOwner?: string\n}\n\nexport interface PublicCheckRunner {\n run(checkId: string, options?: PublicCheckDispatchOptions): Promise<'completed' | 'busy' | 'ignored'>\n}\n\nexport interface JobDispatcher {\n dispatch(checkId: string, options?: PublicCheckDispatchOptions): Promise<'completed' | 'busy' | 'ignored'>\n}\n",[],[184,421,314],"runtime","32337a79-34bd-4825-bc29-e031191682b9",["D",1788292312042],[],[184,421,33],"eb2d53de-7095-4756-867a-252fd03349cc",["D",1788292309828],[211,212],[184,421],"b605cbd6-3f6c-41a7-9331-771bbb222029","skills","92d014b0-a63e-11f1-8fd4-1607ee4eb77e","9269bbca-a63e-11f1-8d00-1607ee4eb77e",13,["D",1788292310636],[],[184,438,431],"mcp","ae91bccc-3e31-4356-834f-cb508c834a4f",8,["D",1788292309949],[209],[184,438],"96780fc5-c060-4b02-86a2-4b51b47199f6","jobs","92af4352-a63e-11f1-9f99-1607ee4eb77e",11,["D",1788292310414],[],[184,445],"6ddf4a2e-04bf-4c6c-bba6-3dc1c98830a9","fixtures","929d710e-a63e-11f1-8621-1607ee4eb77e",10,["D",1788292310299],[],[184,452],"3f38e0a0-df02-47e0-b3d1-c0c6af1feaec","939da182-a63e-11f1-b150-1607ee4eb77e","92281dc8-a63e-11f1-8621-1607ee4eb77e",35,["D",1788292311811],"import {\n createTurnstileVerifier,\n type HumanVerifier,\n LocalBypassHumanVerifier,\n UnavailableHumanVerifier,\n} from '../security/turnstile.ts'\n\nexport interface ValTownConfig {\n environment: 'production' | 'development' | 'test'\n checkTtlMs: number\n perClientDailyLimit: number\n globalDailyLimit: number\n quotaSalt: string\n humanVerifier: HumanVerifier\n turnstileSiteKey: string | null\n humanVerificationStatus: 'ready' | 'not-required' | 'unavailable'\n geminiApiKey: string | null\n geminiModel: string | null\n publicChecksEnabled: boolean\n publicChecksUnavailableMessage: string | null\n /** Whether the MCP endpoint may start a check. Reads are always available. */\n mcpStartChecksEnabled: boolean\n /** Daily per-caller allowance for MCP-started checks, in its own quota bucket. */\n mcpPerClientDailyLimit: number\n}\n\nfunction positiveInt(input: string | undefined, fallback: number): number {\n const parsed = Number(input)\n return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback\n}\n\nfunction splitCsv(input: string | undefined): string[] {\n return (input ?? '').split(',').map((value) => value.trim()).filter(Boolean)\n}\n\n/**\n * Env parsing is intentionally small. A deployed production val refuses every\n * public check if Turnstile isn't configured; local/test can opt into the\n * explicit bypass to keep tests free of secrets.\n */\nexport function loadValTownConfig(env: Record = Deno.env.toObject()): ValTownConfig {\n // There is no trusted implicit signal that a Val is a development host.\n // Default to production so the local bypass must always be opted into with\n // both an explicit environment and its deliberately unsafe flag.\n const environment = env.VAL_TOWN_ENV === 'development'\n ? 'development'\n : env.VAL_TOWN_ENV === 'test'\n ? 'test'\n : 'production'\n const secret = env.TURNSTILE_SECRET_KEY?.trim()\n const siteKey = env.TURNSTILE_SITE_KEY?.trim()\n const allowedHostnames = splitCsv(env.TURNSTILE_ALLOWED_HOSTNAMES)\n const hasCompleteTurnstileConfig = Boolean(secret && siteKey && allowedHostnames.length > 0)\n const configuredQuotaSalt = env.CANONRY_QUOTA_SALT?.trim() || null\n\n let humanVerifier: HumanVerifier\n let humanVerificationStatus: ValTownConfig['humanVerificationStatus']\n if (hasCompleteTurnstileConfig && secret) {\n humanVerifier = createTurnstileVerifier({ secret, allowedHostnames })\n humanVerificationStatus = 'ready'\n } else if (environment !== 'production' && env.ALLOW_INSECURE_LOCAL_HUMAN_BYPASS === '1') {\n humanVerifier = new LocalBypassHumanVerifier()\n humanVerificationStatus = 'not-required'\n } else {\n humanVerifier = new UnavailableHumanVerifier()\n humanVerificationStatus = 'unavailable'\n }\n\n return {\n environment,\n checkTtlMs: positiveInt(env.CANONRY_CHECK_CACHE_TTL_MS, 86_400_000),\n perClientDailyLimit: positiveInt(env.CANONRY_PER_CLIENT_DAILY_LIMIT, 3),\n globalDailyLimit: positiveInt(env.CANONRY_GLOBAL_DAILY_LIMIT, 100),\n // A stable shared salt is required in production. A process-local fallback\n // would make per-IP quotas disappear whenever Val starts another isolate.\n quotaSalt: configuredQuotaSalt || (environment === 'production' ? '' : 'local-development-only'),\n humanVerifier,\n turnstileSiteKey: humanVerificationStatus === 'ready' ? siteKey || null : null,\n humanVerificationStatus,\n geminiApiKey: env.GEMINI_API_KEY?.trim() || null,\n geminiModel: env.GEMINI_VISIBILITY_MODEL?.trim() || null,\n publicChecksEnabled: environment !== 'production' || Boolean(configuredQuotaSalt),\n publicChecksUnavailableMessage: environment === 'production' && !configuredQuotaSalt\n ? 'Public checks are temporarily unavailable.'\n : null,\n // An agent cannot solve a Turnstile challenge, so the MCP write path trades\n // human verification for a much tighter per-caller allowance. The global\n // daily cap and the single execution lease are unchanged, so this widens\n // who may spend the budget, never how large the budget is.\n mcpStartChecksEnabled: env.CANONRY_MCP_START_CHECKS !== '0',\n mcpPerClientDailyLimit: positiveInt(env.CANONRY_MCP_PER_CLIENT_DAILY_LIMIT, 2),\n }\n}\n",[],[184,466,340],"config","5b29d0bc-67f9-4641-abd9-7035be8a9b71",5,["D",1788292309530],[205],[184,466],"b63d1832-e923-4d48-889b-33fad39743a9","app.ts","9349f686-a63e-11f1-b64b-1607ee4eb77e","91f8f4bc-a63e-11f1-8621-1607ee4eb77e",25,["D",1788292311428],"import { Hono } from 'hono'\nimport type { ValTownConfig } from '../config/index.ts'\nimport { createMcpHandler } from '../mcp/server.ts'\nimport {\n newCheckRecord,\n PUBLIC_CHECK_EXECUTION_LEASE_MS,\n PUBLIC_CHECK_EXECUTION_LEASE_NAME,\n PublicQuotaError,\n} from '../jobs/public-check.ts'\nimport { checkFingerprint, isCheckExpired } from '../runtime/records.ts'\nimport {\n type CheckRecord,\n type CheckStore,\n type JobDispatcher,\n PUBLIC_RATE_LIMITED_ERROR_CODE,\n} from '../runtime/types.ts'\nimport { HumanVerificationError } from '../security/turnstile.ts'\nimport { normalizePublicDomain, PublicUrlError, utcDay } from '../security/url.ts'\n\nconst MAX_BODY_BYTES = 4_096\nconst CHECK_ID = /^[0-9a-f-]{36}$/i\n\nexport interface PageAssets {\n styles: string\n script: string\n}\n\nexport interface ValTownAppDependencies {\n store: CheckStore\n config: ValTownConfig\n dispatcher: JobDispatcher\n /** The UI is injected so this host stays independent from the renderer implementation. */\n renderPage: (record: CheckRecord | null) => string\n assets: PageAssets\n now?: () => Date\n}\n\nexport class PublicCheckUnavailableError extends Error {\n override name = 'PublicCheckUnavailableError'\n}\n\nclass PublicCheckAdmissionBusyError extends Error {\n override name = 'PublicCheckAdmissionBusyError'\n constructor() {\n super('Another request for this domain is being accepted. Try again shortly.')\n }\n}\n\nclass PublicCheckCapacityError extends Error {\n override name = 'PublicCheckCapacityError'\n constructor() {\n super('The public check is at capacity. Try again shortly.')\n }\n}\n\nexport function createValTownApp(deps: ValTownAppDependencies): Hono {\n const app = new Hono()\n const now = deps.now ?? (() => new Date())\n\n app.use('*', async (context, next) => {\n const turnstileAllowed = deps.config.publicChecksEnabled &&\n deps.config.humanVerificationStatus === 'ready' && Boolean(deps.config.turnstileSiteKey)\n context.header('Content-Security-Policy', contentSecurityPolicy(turnstileAllowed))\n context.header('X-Content-Type-Options', 'nosniff')\n context.header('Referrer-Policy', 'strict-origin-when-cross-origin')\n context.header('Permissions-Policy', 'camera=(), microphone=(), geolocation=(), payment=()')\n context.header('Cross-Origin-Opener-Policy', 'same-origin')\n await next()\n })\n\n app.get('/healthz', (context) => context.json({ ok: true }))\n\n // Anonymous, read-only MCP over Streamable HTTP. It shares this app's store\n // so an agent reads exactly the checks the UI shows, and it owns its own\n // method/origin/envelope handling — including the 405 for a non-POST, which\n // is why it is registered for every method rather than POST alone.\n const mcp = createMcpHandler({\n store: deps.store,\n now,\n startCheck: deps.config.mcpStartChecksEnabled\n ? async (domain, remoteIp) => {\n const outcome = await submitCheck(deps, { domain, token: null, remoteIp, now: now(), admission: 'mcp' })\n return { record: (await deps.store.get(outcome.record.id)) ?? outcome.record, reused: outcome.reused }\n }\n : undefined,\n })\n app.all('/mcp', (context) => mcp(context.req.raw))\n app.get('/assets/canonry-ui.css', (context) => {\n context.header('Cache-Control', 'public, max-age=3600')\n return context.body(deps.assets.styles, 200, { 'content-type': 'text/css; charset=utf-8' })\n })\n app.get('/assets/canonry-ui.js', (context) => {\n context.header('Cache-Control', 'public, max-age=3600')\n return context.body(deps.assets.script, 200, { 'content-type': 'application/javascript; charset=utf-8' })\n })\n\n app.get('/', async (context) => {\n const requestedId = context.req.query('check')\n const stored = requestedId && CHECK_ID.test(requestedId) ? await deps.store.get(requestedId) : null\n const record = stored && !isCheckExpired(stored, now()) ? stored : null\n context.header('Cache-Control', 'no-store')\n return context.html(deps.renderPage(record))\n })\n\n app.get('/api/checks/:id', async (context) => {\n const id = context.req.param('id')\n if (!CHECK_ID.test(id)) return apiError(context, 404, 'not-found', 'Check not found.')\n const record = await deps.store.get(id)\n if (!record || isCheckExpired(record, now())) return apiError(context, 404, 'not-found', 'Check not found.')\n context.header('Cache-Control', 'no-store')\n return context.json({ check: publicCheckRecord(record) })\n })\n\n app.post('/api/checks', async (context) => {\n const payload = await parseJsonBody(context.req.raw)\n const outcome = await submitCheck(deps, {\n domain: payload.domain,\n token: typeof payload.turnstileToken === 'string' ? payload.turnstileToken : null,\n remoteIp: remoteIp(context.req.raw),\n now: now(),\n })\n context.header('Cache-Control', 'no-store')\n if (outcome.dispatch === 'busy') {\n return apiError(context, 503, 'busy', 'The public check is at capacity. Try again shortly.')\n }\n return context.json(\n { check: publicCheckRecord(outcome.record), reused: outcome.reused },\n outcome.record.status === 'queued' || outcome.record.status === 'running' ? 202 : 200,\n )\n })\n\n app.post('/check', async (context) => {\n let submittedDomain: unknown = null\n try {\n const form = await parseFormBody(context.req.raw)\n submittedDomain = form.get('domain')\n const outcome = await submitCheck(deps, {\n domain: submittedDomain,\n token: form.get('cf-turnstile-response'),\n remoteIp: remoteIp(context.req.raw),\n now: now(),\n })\n if (outcome.dispatch === 'busy') throw new PublicCheckCapacityError()\n return context.redirect(`/?check=${encodeURIComponent(outcome.record.id)}`, 303)\n } catch (error) {\n const failure = formFailureRecord(submittedDomain, now(), error)\n context.header('Cache-Control', 'no-store')\n return context.html(deps.renderPage(failure), formFailureStatus(error))\n }\n })\n\n app.notFound((context) => apiError(context, 404, 'not-found', 'Not found.'))\n app.onError((error, context) => {\n if (error instanceof PublicUrlError) return apiError(context, 400, 'invalid-domain', error.message)\n if (error instanceof HumanVerificationError) {\n const status = error.code === 'unavailable' || error.code === 'transport' ? 503 : 403\n return apiError(context, status, `human-verification-${error.code}`, error.message)\n }\n if (error instanceof PublicQuotaError) return apiError(context, 429, `${error.scope}-quota`, error.message)\n if (error instanceof PublicCheckAdmissionBusyError) return apiError(context, 503, 'admission-busy', error.message)\n if (error instanceof PublicCheckCapacityError) return apiError(context, 503, 'busy', error.message)\n if (error instanceof PublicCheckUnavailableError) return apiError(context, 503, 'unavailable', error.message)\n if (error instanceof BodyTooLargeError) {\n return apiError(context, 413, 'body-too-large', 'Request body is too large.')\n }\n if (error instanceof InvalidBodyError) return apiError(context, 400, 'invalid-body', error.message)\n return apiError(context, 500, 'internal-error', 'The public check could not be started.')\n })\n\n return app\n}\n\ninterface SubmitInput {\n domain: unknown\n token: string | null\n remoteIp: string | null\n now: Date\n /**\n * Which admission rules apply. `mcp` skips human verification, which an\n * agent cannot perform, and spends from a separate, tighter daily bucket so\n * it cannot consume the browser allowance. Every other control — the global\n * daily cap, the single execution lease, cache reuse — is identical.\n */\n admission?: 'browser' | 'mcp'\n}\n\nasync function submitCheck(\n deps: ValTownAppDependencies,\n input: SubmitInput,\n): Promise<{ record: CheckRecord; reused: boolean; dispatch: 'completed' | 'busy' | 'ignored' }> {\n if (!deps.config.publicChecksEnabled) {\n throw new PublicCheckUnavailableError(\n deps.config.publicChecksUnavailableMessage ?? 'Public checks are temporarily unavailable.',\n )\n }\n const target = normalizePublicDomain(input.domain)\n const viaMcp = input.admission === 'mcp'\n if (!viaMcp) await deps.config.humanVerifier.verify({ token: input.token, remoteIp: input.remoteIp })\n const fingerprint = checkFingerprint(target.domain)\n const timestamp = input.now.toISOString()\n\n // Cached and already-active work is useful without consuming the one global\n // execution slot. This keeps same-domain retries quota- and capacity-free.\n const reusable = await deps.store.findReusable(fingerprint, timestamp)\n if (reusable) return dispatchExistingCheck(deps, reusable)\n\n const hashedClient = await hashQuotaSubject(deps.config.quotaSalt, input.remoteIp ?? 'unknown')\n // A distinct subject rather than a distinct scope: `CheckQuotaClaim.scope` is\n // a closed union, and prefixing keeps the two buckets disjoint without\n // widening a durable contract.\n const clientSubject = viaMcp ? `mcp:${hashedClient}` : hashedClient\n const clientMax = viaMcp ? deps.config.mcpPerClientDailyLimit : deps.config.perClientDailyLimit\n const day = utcDay(input.now)\n const executionLeaseOwner = crypto.randomUUID()\n const executionLeaseUntil = new Date(input.now.getTime() + PUBLIC_CHECK_EXECUTION_LEASE_MS).toISOString()\n const capacityAvailable = await deps.store.claimGlobalLease(\n PUBLIC_CHECK_EXECUTION_LEASE_NAME,\n executionLeaseOwner,\n timestamp,\n executionLeaseUntil,\n )\n if (!capacityAvailable) throw new PublicCheckCapacityError()\n\n let capacityHeld = true\n let dispatchOwnsCapacity = false\n const releaseCapacity = async () => {\n if (!capacityHeld) return\n await deps.store.releaseGlobalLease(PUBLIC_CHECK_EXECUTION_LEASE_NAME, executionLeaseOwner)\n capacityHeld = false\n }\n\n try {\n const admission = await deps.store.admit({\n candidate: newCheckRecord({ id: crypto.randomUUID(), fingerprint, domain: target.domain, now: input.now }),\n now: timestamp,\n clientQuota: { scope: 'client', subject: clientSubject, day, max: clientMax },\n globalQuota: { scope: 'global', subject: 'all', day, max: deps.config.globalDailyLimit },\n })\n if (admission.kind === 'quota-exhausted') throw new PublicQuotaError(admission.scope)\n if (admission.kind === 'busy') throw new PublicCheckAdmissionBusyError()\n\n if (admission.kind === 'reused') {\n // A concurrent same-domain admission won. It must not inherit capacity\n // reserved by this request, so it goes through ordinary reuse dispatch.\n await releaseCapacity()\n return dispatchExistingCheck(deps, admission.record)\n }\n\n let dispatch: 'completed' | 'busy' | 'ignored' = 'ignored'\n if (admission.record.status === 'queued') {\n // Request-bound dispatch takes responsibility for this owner as soon as\n // it receives the promise. Its runner releases even a lost job claim.\n const dispatched = deps.dispatcher.dispatch(admission.record.id, { executionLeaseOwner })\n dispatchOwnsCapacity = true\n dispatch = await dispatched\n }\n return {\n record: (await deps.store.get(admission.record.id)) ?? admission.record,\n reused: admission.kind !== 'created',\n dispatch,\n }\n } finally {\n // The runner owns capacity only after dispatch receives the owner. The app\n // releases every admission, reuse, quota, and pre-dispatch error path.\n if (!dispatchOwnsCapacity) await releaseCapacity()\n }\n}\n\nasync function dispatchExistingCheck(\n deps: ValTownAppDependencies,\n record: CheckRecord,\n): Promise<{ record: CheckRecord; reused: true; dispatch: 'completed' | 'busy' | 'ignored' }> {\n const dispatch = record.status === 'queued' ? await deps.dispatcher.dispatch(record.id) : 'ignored'\n return {\n record: (await deps.store.get(record.id)) ?? record,\n reused: true,\n dispatch,\n }\n}\n\nfunction publicCheckRecord(record: CheckRecord): Omit {\n const { fingerprint: _fingerprint, leaseOwner: _leaseOwner, leaseUntil: _leaseUntil, ...safe } = record\n return safe\n}\n\nfunction apiError(\n context: { json: (body: unknown, status?: number) => Response; header: (name: string, value: string) => void },\n status: number,\n code: string,\n message: string,\n): Response {\n context.header('Cache-Control', 'no-store')\n return context.json({ error: { code, message } }, status)\n}\n\nclass BodyTooLargeError extends Error {}\nclass InvalidBodyError extends Error {}\n\nasync function parseJsonBody(request: Request): Promise> {\n if (!request.headers.get('content-type')?.toLowerCase().includes('application/json')) {\n throw new InvalidBodyError('Expected a JSON request body.')\n }\n const text = await readLimitedBody(request)\n try {\n const parsed = JSON.parse(text)\n if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) throw new Error()\n return parsed as Record\n } catch {\n throw new InvalidBodyError('Request body must be a JSON object.')\n }\n}\n\nasync function parseFormBody(request: Request): Promise {\n if (!request.headers.get('content-type')?.toLowerCase().includes('application/x-www-form-urlencoded')) {\n throw new InvalidBodyError('Expected a form submission.')\n }\n return new URLSearchParams(await readLimitedBody(request))\n}\n\nasync function readLimitedBody(request: Request): Promise {\n const contentLength = Number(request.headers.get('content-length'))\n if (Number.isFinite(contentLength) && contentLength > MAX_BODY_BYTES) throw new BodyTooLargeError()\n if (!request.body) return ''\n const reader = request.body.getReader()\n const chunks: Uint8Array[] = []\n let length = 0\n while (true) {\n const next = await reader.read()\n if (next.done) break\n length += next.value.byteLength\n if (length > MAX_BODY_BYTES) {\n await reader.cancel()\n throw new BodyTooLargeError()\n }\n chunks.push(next.value)\n }\n const output = new Uint8Array(length)\n let offset = 0\n for (const chunk of chunks) {\n output.set(chunk, offset)\n offset += chunk.byteLength\n }\n return new TextDecoder().decode(output)\n}\n\nfunction remoteIp(request: Request): string | null {\n // Val injects this edge header. `x-forwarded-for` is caller-controlled on a\n // public val, so it is deliberately ignored for quota identity.\n const cf = request.headers.get('cf-connecting-ip')?.trim()\n if (cf && cf.length <= 128) return cf\n return null\n}\n\nasync function hashQuotaSubject(salt: string, value: string): Promise {\n const bytes = new TextEncoder().encode(`${salt}\\u0000${value}`)\n const digest = new Uint8Array(await crypto.subtle.digest('SHA-256', bytes))\n return [...digest].map((byte) => byte.toString(16).padStart(2, '0')).join('')\n}\n\nfunction contentSecurityPolicy(turnstileAllowed: boolean): string {\n const turnstile = turnstileAllowed ? ' https://challenges.cloudflare.com' : ''\n return [\n \"default-src 'self'\",\n \"base-uri 'none'\",\n \"object-src 'none'\",\n \"frame-ancestors 'none'\",\n \"form-action 'self'\",\n `script-src 'self'${turnstile}`,\n \"style-src 'self'\",\n `connect-src 'self'${turnstile}`,\n `frame-src${turnstile || \" 'none'\"}`,\n \"img-src 'self' data: https:\",\n ].join('; ')\n}\n\nfunction formFailureRecord(domain: unknown, now: Date, error: unknown): CheckRecord {\n const displayDomain = typeof domain === 'string' ? domain.trim().slice(0, 253) : ''\n const timestamp = now.toISOString()\n return {\n id: crypto.randomUUID(),\n fingerprint: '',\n domain: displayDomain,\n status: 'failed',\n createdAt: timestamp,\n updatedAt: timestamp,\n expiresAt: null,\n result: null,\n errorCode: error instanceof PublicQuotaError ? PUBLIC_RATE_LIMITED_ERROR_CODE : 'form-submission-failed',\n errorMessage: formFailureMessage(error),\n leaseOwner: null,\n leaseUntil: null,\n }\n}\n\nfunction formFailureMessage(error: unknown): string {\n if (\n error instanceof PublicUrlError || error instanceof PublicQuotaError || error instanceof HumanVerificationError ||\n error instanceof PublicCheckUnavailableError || error instanceof PublicCheckAdmissionBusyError ||\n error instanceof PublicCheckCapacityError\n ) return error.message\n if (error instanceof BodyTooLargeError) return 'The submission was too large. Enter only a domain.'\n if (error instanceof InvalidBodyError) return 'The form could not be read. Try again.'\n return 'The public check could not be started. Try again later.'\n}\n\nfunction formFailureStatus(error: unknown): 400 | 403 | 413 | 429 | 503 {\n if (error instanceof PublicUrlError || error instanceof InvalidBodyError) return 400\n if (error instanceof BodyTooLargeError) return 413\n if (error instanceof PublicQuotaError) return 429\n if (\n error instanceof PublicCheckUnavailableError || error instanceof PublicCheckAdmissionBusyError ||\n error instanceof PublicCheckCapacityError\n ) return 503\n if (error instanceof HumanVerificationError) return error.code === 'invalid' ? 403 : 503\n return 503\n}\n",[],[184,481,473],"app","099c2e2e-a5d0-494f-ae81-754dd43458ad",3,["D",1788292309199],[203],[184,481],["D",1788292308897],[202,204,206,207,208,210,213,216,217,218,226],[184],["D",1788292195151],["D",1789514495229],{"_100":99,"_108":104},{"_100":99,"_101":102,"_103":104,"_18":-5,"_105":106,"_107":26},{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"ctx",{"_82":-5,"_128":528,"_529":530,"_531":532,"_533":26,"_534":26,"_535":26,"_536":24,"_537":-5,"_538":-7,"_539":-7,"_540":63,"_541":26,"_542":26,"_543":-5,"_544":26,"_545":26,"_546":26,"_547":-5},"ENV",{"_499":500,"_501":502,"_503":90,"_504":505,"_506":507,"_508":509,"_510":511,"_512":513,"_514":515,"_516":517,"_518":519,"_520":521,"_522":523,"_524":525,"_526":527},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v38