[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_327":328,"_329":330},"routes/_app.x.$handle.$name",{"_100":99,"_31":44,"_109":90,"_26":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":24,"_124":125,"_126":24,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_31":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":54,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":24},"version",19,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","src/runtime/check-result.ts","latestPath","fileId","efb36968-a7bd-11f1-a791-1607ee4eb77e","name","check-result.ts","fileType","script","content","/**\n * What THIS val's check produces, and the reuse namespace that retires it.\n *\n * `@canonry/val-kit` is opaque to both: a `CheckRecord`\n * carries this schema through the kit's admission, lease, quota, and storage\n * machinery without the kit ever reading inside it, and `checkFingerprint` takes\n * the namespace as its first argument rather than inventing one. That is what\n * lets this val and the AI Visibility Check val store entirely different results\n * in the same table without either serving the other's cached work.\n */\nimport type { PerceptionReport } from 'npm:@canonry/val-kit@0.1.0/perception'\n\n/**\n * The reuse namespace for this product. It is the FIRST field of every\n * fingerprint, which is both the 24h cache key and the one-active-check index.\n *\n * Bump it — and only it — when a change adds or removes a measured signal, so\n * records that lack the new signal stop satisfying new requests at the moment\n * the signal set changed rather than at their own TTL. Never bump another\n * product's namespace, and never reuse one: two products keyed alike would\n * serve each other's results as cache hits, and a perception check and a\n * visibility check for one domain measure entirely different things.\n */\nexport const CHECK_FINGERPRINT_NAMESPACE = 'perception-v1'\n\nexport const CHECK_RESULT_SCHEMA_VERSION = '1.0' as const\n\nexport interface PerceptionCheckResult {\n schemaVersion: typeof CHECK_RESULT_SCHEMA_VERSION\n domain: string\n generatedAt: string\n /** Null when the one phase produced nothing at all. */\n perception: PerceptionReport | null\n errors: Array<{ area: 'perception'; message: string }>\n}\n","createdAt",["D",1788456963629],"branchVersion","branchId","0ff5a62c-67cf-45f9-85df-c272daf0a6a9","id","801445f4-c67d-433d-af43-92af47fb72c9","Brand-Perception-Check",["D",1788456812405],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","What AI engines say about a brand. Powered by Canonry.","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/aa8bd75a-0bc9-4694-0b72-9f187d1a6201/square512?exp=1789545599&sig=0d50af3ca47756c9d91729054814666cbff9b08dacac948b0607b6a85560fb3f","891d245e-ec71-404d-a5ca-223733ee2844","pinnedFileId","f06d06b6-a7bd-11f1-990b-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0460b-6625-75ce-9e7f-9a6b062b0798","tursoName","801445f4c67d433daf4392af47fb72c9","tursoHostname","801445f4c67d433daf4392af47fb72c9-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789501263826],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":-5,"_105":106,"_107":24},"branch",{"_13":89,"_31":90,"_42":41,"_91":43,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":44,"_98":99},"isOwned",40,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","canonry","handle","displayName","Canonry","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/5ae39d80-0d23-48e5-89d8-6bd2a7096401/square512?exp=1789545599&sig=0a9960884ebd7ffe829b9ebc677a1a156ca38fbe9a62f701ba13a4f84918b351","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_31":44,"_37":322,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":54,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":323,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":324,"_84":325,"_86":326,"_88":24},"tree",[185,200,201,202,203],"files",[185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203],"counts",{"_174":63,"_175":170,"_176":63,"_177":178,"_179":180},"contents",[131,132,133,134,135],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":167,"_31":168,"_29":169,"_139":-5,"_40":41,"_39":170,"_141":59,"_37":171,"_13":63,"_33":172,"_35":-5,"_23":24,"_144":-5,"_26":173},{"_42":160,"_31":161,"_29":162,"_139":-5,"_40":41,"_39":163,"_141":59,"_37":164,"_13":63,"_33":20,"_35":165,"_23":24,"_144":-5,"_26":166},{"_42":153,"_31":154,"_29":155,"_139":-5,"_40":41,"_39":156,"_141":59,"_37":157,"_13":63,"_33":20,"_35":158,"_23":24,"_144":-5,"_26":159},{"_42":146,"_31":147,"_29":148,"_139":-5,"_40":41,"_39":149,"_141":59,"_37":150,"_13":63,"_33":20,"_35":151,"_23":24,"_144":-5,"_26":152},{"_42":136,"_31":137,"_29":138,"_139":-5,"_40":41,"_39":140,"_141":59,"_37":142,"_13":63,"_33":20,"_35":143,"_23":24,"_144":-5,"_26":145},"76cd4383-7f9f-414b-970e-79b55b6fb3c2","deno.json","ef3563b0-a7bd-11f1-adc2-1607ee4eb77e","parentId",10,"latest",["D",1788456961593],"{\n \"compilerOptions\": {\n \"strict\": true,\n \"noUncheckedIndexedAccess\": true\n },\n \"tasks\": {\n \"check\": \"(test -f ../../../packages/val-kit/dist/index.js || (echo 'Build the kit first: pnpm --filter @canonry/val-kit build'; exit 1)) && deno check --allow-import --frozen --config deno.dev.json main.http.tsx\",\n \"check:prod\": \"deno check --allow-import --frozen main.http.tsx\",\n \"test\": \"(test -f ../../../packages/val-kit/dist/index.js || (echo 'Build the kit first: pnpm --filter @canonry/val-kit build'; exit 1)) && deno test --allow-env --allow-net --allow-import --frozen --config deno.dev.json test\",\n \"lint\": \"deno lint --config deno.dev.json main.http.tsx src test\",\n \"dev\": \"(test -f ../../../packages/val-kit/dist/index.js || (echo 'Build the kit first: pnpm --filter @canonry/val-kit build'; exit 1)) && deno run --allow-net --allow-env --allow-import --config deno.dev.json test/dev-server.ts\"\n },\n \"fmt\": {\n \"lineWidth\": 120,\n \"singleQuote\": true,\n \"semiColons\": false\n },\n \"lint\": {\n \"rules\": {\n \"exclude\": [\n \"no-import-prefix\"\n ]\n }\n }\n}\n","label",[137],"c29feae3-6199-49e3-8e83-6d8b72e354fa","README.md","ee6d0c1c-a7bd-11f1-a3ef-1607ee4eb77e",7,["D",1788456961584],"# Brand Perception Check\n\nEnter a domain. See what an AI answer engine says about your brand when someone asks it directly.\n\nFree. No signup. About 45 seconds.\n\n## What you get\n\nThree questions people actually type — \"is X legit?\", \"X reviews\", \"what are the complaints about X?\" — put to an\nanswer engine, and for each one:\n\n| | |\n|---|---|\n| **The verdict** | Recommends, cautions, mixed, or took no position. |\n| **The sentences behind it** | Copied out of the answer word for word. Never a paraphrase. |\n| **The concerns** | Short phrases the answer itself raises as drawbacks. |\n| **The sources** | What the engine attributed, by kind: the brand's own site, community, review site, news, other. |\n\nNo sentiment score. Nothing here measures feeling, so nothing here pretends to. You get what the answer said and the\nline it said it in.\n\nAn answer that took no position says so. An answer the check could not measure says that instead, and is left out of\nevery count rather than scored as a zero.\n\n## This is not a visibility check\n\nEvery question here names your brand, so the engine was always going to talk about you. The finding is what it SAID.\n\nWhether AI mentions you at all, on questions that do not name you, is a different measurement —\n[AI Visibility Check](https://github.com/Canonry/canonry) is the tool for that. The two numbers are never comparable.\n\n## MCP\n\nThis is also an MCP server. No API key.\n\n```json\n{ \"mcpServers\": { \"brand-perception-check\": { \"url\": \"https:///mcp\" } } }\n```\n\nTools: `start_check`, `get_check`, `get_brand_perception`, `self_host`, `read_skill`.\n\nThe Canonry and Aero analyst playbooks are served as MCP resources.\n\n## Limits\n\n- One engine (Gemini)\n- Three branded questions\n- One snapshot. No history, no tracking, no alerts\n\n## Canonry\n\nCanonry is the open source platform this samples. It runs on your own machine.\n\n```sh\nnpm install -g @canonry/canonry\ncanonry init\n```\n\nFour answer engines. Unlimited questions on a schedule. History, so you can watch a concern appear, spread, or go away.\nNon-brand tracking, competitor share, whole-site audits, and joins to Search Console, GA4, and Bing.\n\n[github.com/Canonry/canonry](https://github.com/Canonry/canonry) · [canonry.ai](https://canonry.ai)\n",[147],"74e5c8ce-cbc0-41a1-bf72-c9442a5356ee","CLAUDE.md","ef242aaa-a7bd-11f1-a3ef-1607ee4eb77e",9,["D",1788456962784],"@AGENTS.md\n",[154],"e1045a33-7bae-4ab3-b9ef-aeaf172196ca",".vtignore","ef08ebe6-a7bd-11f1-a3ef-1607ee4eb77e",8,["D",1788456962608],".env\n.env.*\ncoverage/\nnode_modules/\ndeno.dev.json\ndeno.dev.lock\ntest/\n",[161],"c1a9a2b8-0174-4415-b76e-49d63d23fbdd","src","edf99f8e-a7bd-11f1-a791-1607ee4eb77e",1,["D",1788456960824],"directory",[168],"pulls","branches","forks","envVars",{"_181":183,"_184":63},"connections",{"_181":63,"_182":63},"count","unfilledCount",5,"emptyCount",{"_42":167,"_31":168,"_29":169,"_139":-5,"_40":41,"_39":170,"_141":59,"_37":319,"_13":63,"_33":172,"_35":-5,"_23":24,"_144":-5,"_205":320,"_26":321},{"_42":314,"_31":313,"_29":307,"_139":169,"_40":41,"_39":315,"_141":59,"_37":316,"_13":63,"_33":172,"_35":-5,"_23":24,"_144":-5,"_205":317,"_26":318},{"_42":304,"_31":305,"_29":306,"_139":307,"_40":41,"_39":308,"_141":24,"_37":309,"_13":63,"_33":34,"_35":310,"_23":24,"_144":-5,"_205":311,"_26":312},{"_42":297,"_31":298,"_29":299,"_139":169,"_40":41,"_39":300,"_141":59,"_37":301,"_13":63,"_33":172,"_35":-5,"_23":24,"_144":-5,"_205":302,"_26":303},{"_42":291,"_31":292,"_29":293,"_139":169,"_40":41,"_39":183,"_141":59,"_37":294,"_13":63,"_33":172,"_35":-5,"_23":24,"_144":-5,"_205":295,"_26":296},{"_42":286,"_31":285,"_29":281,"_139":169,"_40":41,"_39":287,"_141":59,"_37":288,"_13":63,"_33":172,"_35":-5,"_23":24,"_144":-5,"_205":289,"_26":290},{"_42":280,"_31":32,"_29":30,"_139":281,"_40":41,"_39":14,"_141":24,"_37":282,"_13":63,"_33":34,"_35":36,"_23":24,"_144":-5,"_205":283,"_26":284},{"_42":275,"_31":226,"_29":220,"_139":169,"_40":41,"_39":276,"_141":59,"_37":277,"_13":63,"_33":172,"_35":-5,"_23":24,"_144":-5,"_205":278,"_26":279},{"_42":267,"_31":268,"_29":269,"_139":220,"_40":41,"_39":270,"_141":24,"_37":271,"_13":63,"_33":34,"_35":272,"_23":24,"_144":-5,"_205":273,"_26":274},{"_42":259,"_31":260,"_29":261,"_139":220,"_40":41,"_39":262,"_141":59,"_37":263,"_13":63,"_33":34,"_35":264,"_23":24,"_144":-5,"_205":265,"_26":266},{"_42":251,"_31":252,"_29":253,"_139":220,"_40":41,"_39":254,"_141":24,"_37":255,"_13":63,"_33":34,"_35":256,"_23":24,"_144":-5,"_205":257,"_26":258},{"_42":243,"_31":244,"_29":245,"_139":220,"_40":41,"_39":246,"_141":24,"_37":247,"_13":63,"_33":34,"_35":248,"_23":24,"_144":-5,"_205":249,"_26":250},{"_42":235,"_31":236,"_29":237,"_139":220,"_40":41,"_39":238,"_141":24,"_37":239,"_13":63,"_33":34,"_35":240,"_23":24,"_144":-5,"_205":241,"_26":242},{"_42":227,"_31":228,"_29":229,"_139":220,"_40":41,"_39":230,"_141":24,"_37":231,"_13":63,"_33":34,"_35":232,"_23":24,"_144":-5,"_205":233,"_26":234},{"_42":217,"_31":218,"_29":219,"_139":220,"_40":41,"_39":221,"_141":24,"_37":222,"_13":63,"_33":34,"_35":223,"_23":24,"_144":-5,"_205":224,"_26":225},{"_42":160,"_31":161,"_29":162,"_139":-5,"_40":41,"_39":163,"_141":59,"_37":214,"_13":63,"_33":20,"_35":165,"_23":24,"_144":-5,"_205":215,"_26":216},{"_42":153,"_31":154,"_29":155,"_139":-5,"_40":41,"_39":156,"_141":59,"_37":211,"_13":63,"_33":20,"_35":158,"_23":24,"_144":-5,"_205":212,"_26":213},{"_42":146,"_31":147,"_29":148,"_139":-5,"_40":41,"_39":149,"_141":59,"_37":208,"_13":63,"_33":20,"_35":151,"_23":24,"_144":-5,"_205":209,"_26":210},{"_42":136,"_31":137,"_29":138,"_139":-5,"_40":41,"_39":140,"_141":59,"_37":204,"_13":63,"_33":20,"_35":143,"_23":24,"_144":-5,"_205":206,"_26":207},["D",1788456961593],"children",[],[137],["D",1788456961584],[],[147],["D",1788456962784],[],[154],["D",1788456962608],[],[161],"b265a6f7-5c9c-4949-8def-e8960ba45637","types.ts","ef5474e4-a7bd-11f1-b510-1607ee4eb77e","ee10eef0-a7bd-11f1-a791-1607ee4eb77e",13,["D",1788456963089],"/**\n * The public Val Town page consumes this intentionally small, serializable view\n * model. The runtime maps normalized check records into it; this layer never\n * reads secrets, provider payloads, or storage directly.\n */\nimport type { PerceptionVerdict, SourceType } from 'npm:@canonry/val-kit@0.1.0/perception'\n\nexport type DemoUiStatus =\n | 'ready'\n | 'loading'\n | 'partial'\n | 'error'\n | 'rate-limited'\n | 'empty'\n\nexport type UiTone = 'neutral' | 'positive' | 'caution' | 'negative'\n\nexport interface UiAction {\n label: string\n href?: string\n}\n\nexport interface UiNotice {\n title: string\n detail: string\n tone: UiTone\n action?: UiAction\n}\n\nexport interface PerceptionSourceViewModel {\n url: string\n title: string | null\n /** Null when the engine handed back an opaque redirect it could not attribute. */\n domain: string | null\n typeLabel: string\n}\n\nexport interface PerceptionAnswerViewModel {\n id: string\n query: string\n /** Null is unmeasured, never 'none'. 'none' is a position the answer took. */\n verdict: PerceptionVerdict | null\n verdictLabel: string\n verdictTone: UiTone\n /** The first verified sentence, or null when there is none to quote. */\n headline: string | null\n evidenceSentences: readonly string[]\n concerns: readonly string[]\n sources: readonly PerceptionSourceViewModel[]\n searchQueries: readonly string[]\n answerText: string | null\n requestedModel?: string | null\n servedModel?: string | null\n completedAt?: string | null\n /** Why this answer was not measured. Null when it was. */\n error: string | null\n}\n\nexport interface VerdictCountViewModel {\n key: PerceptionVerdict\n label: string\n count: number\n tone: UiTone\n}\n\nexport interface ConcernViewModel {\n phrase: string\n answers: number\n}\n\nexport interface SourceTypeEntryViewModel {\n type: SourceType\n label: string\n answers: number\n /** 0..100, already rounded for display. */\n percent: number\n}\n\nexport interface SourceTypeViewModel {\n measuredAnswers: number\n unattributedAnswers: number\n totalAppearances: number\n entries: readonly SourceTypeEntryViewModel[]\n}\n\nexport interface PerceptionViewModel {\n checkedAt?: string | null\n requestedAt?: string | null\n /** Checks that produced a verdict. The denominator of every count below. */\n measuredAnswers: number\n /** Every branded question asked, measured or not. */\n requestedAnswers: number\n failedAnswers: number\n verdicts: readonly VerdictCountViewModel[]\n concerns: readonly ConcernViewModel[]\n /** Absent when no measured answer attributed a source. */\n sourceTypes?: SourceTypeViewModel\n answers: readonly PerceptionAnswerViewModel[]\n notice?: UiNotice\n}\n\nexport interface CheckFormViewModel {\n action: string\n method?: 'get' | 'post'\n /** Field read by the server-side verifier. Never render a secret in this model. */\n verificationFieldName?: string\n /** A public Cloudflare Turnstile site key. Omit it for local/test bypasses. */\n turnstileSiteKey?: string | null\n /** `audit` is intentionally fixed so the server can reject action mismatches. */\n turnstileAction?: 'audit'\n /** Production without a configured verifier is truthfully disabled. */\n verificationStatus?: 'ready' | 'not-required' | 'unavailable'\n verificationUnavailableMessage?: string\n submitLabel?: string\n}\n\nexport interface BrandPerceptionViewModel {\n status: DemoUiStatus\n title?: string\n displayName: string\n domain: string\n form?: CheckFormViewModel\n perception?: PerceptionViewModel\n notice?: UiNotice\n}\n",[],[168,226,218],"ui","4cf11495-9996-40ee-a814-09232309e74f","styles.ts","ef48ec32-a7bd-11f1-b229-1607ee4eb77e",12,["D",1788456963025],"/**\n * The shared design system plus the handful of rules this product needs.\n *\n * `canonryDemoStyles` is the kit's, and it is the reason the two Vals look like\n * one company: tokens, type, tables, notices, disclosures, and the tooltip are\n * written once. Everything appended below exists only because this page shows\n * something the other one does not — a verdict row, verbatim quotations, and a\n * concern list — and it is written in the kit's own vocabulary (its tokens, its\n * table classes) so it reads as the same surface rather than a second one.\n *\n * The kit is not edited to hold it. A rule no other Val can use is not a shared\n * value; it is this product's surface, and the seam says that stays here.\n */\nimport { canonryDemoStyles } from 'npm:@canonry/val-kit@0.1.0/ui'\n\nconst PERCEPTION_STYLES = String.raw`\n/* One instrument, so no tabs: the report starts straight after the header and\n needs the spacing a tab panel would otherwise have supplied. */\n.report-body { padding-top: 34px; }\n\n/* The kit's signal vocabulary has no negative, because the other Val has no\n negative signal. Here an engine cautioning about the brand is exactly that. */\n.signal-negative { color: var(--negative); }\n\n/* Unbounded counts, so a flat KPI row and no progress bars: \"2 of 3\" has no\n target to fill, and a bar would invent one. Four cells across, collapsing\n rather than shrinking, because a two-digit number in a 70px column is not\n more readable for being on one line. */\n.verdict-row { display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); gap: 18px; margin: 18px 0 0; }\n.verdict-row > div { border-top: 1px solid var(--border); padding-top: 11px; }\n.verdict-row dt { color: var(--secondary); font-size: 13px; }\n.verdict-row dd { margin: 3px 0 0; color: var(--text); font-family: var(--mono); font-size: 25px; font-weight: 650; letter-spacing: -.05em; }\n.verdict-row dd.is-unmeasured { color: var(--muted); font-family: var(--sans); font-size: 15px; font-weight: 500; letter-spacing: normal; }\n.verdict-row span { color: var(--muted); font-size: 13px; }\n.verdict-row .is-positive dd { color: var(--positive); }\n.verdict-row .is-caution dd { color: var(--caution); }\n.verdict-row .is-negative dd { color: var(--negative); }\n\n/* The answer's own words, in the table cell. Quoted, because a sentence lifted\n out of an answer is a quotation and must never read as our summary of it. */\n.answer-quote { display: inline-block; max-width: 46ch; color: var(--text-strong); }\n.answer-note { color: var(--muted); }\n.answer-error { color: var(--caution); }\n\n/* Inside the row disclosure: every verified sentence, still quoted. */\n.quote-list { display: grid; gap: 8px; margin: 0; padding: 0; list-style: none; }\n.quote-list li { max-width: 72ch; border-left: 2px solid var(--border-strong); padding-left: 11px; color: var(--text-strong); }\n.chip-list { display: flex; flex-wrap: wrap; gap: 6px; margin: 0; padding: 0; list-style: none; }\n.chip-list li { border: 1px solid var(--border-strong); border-radius: 999px; padding: 2px 9px; color: var(--secondary); font-size: 12px; }\n\n/* Concerns: a phrase and how many answers wrote it. A list, not a table, since\n there are two facts per row and one of them is prose. */\n.concern-list { margin: 10px 0 0; padding: 0; list-style: none; border-top: 1px solid var(--border); }\n.concern-list li { display: flex; align-items: baseline; justify-content: space-between; gap: 16px; border-bottom: 1px solid var(--border); padding: 11px 2px; }\n.concern-phrase { color: var(--text-strong); font-size: 14px; }\n.concern-count { color: var(--muted); font-family: var(--mono); font-size: 12px; white-space: nowrap; }\n\n.source-count { color: var(--text-strong); font-family: var(--mono); font-variant-numeric: tabular-nums; white-space: nowrap; }\n.source-share { color: var(--text); font-family: var(--mono); font-variant-numeric: tabular-nums; width: 6ch; }\n.section-footnote { margin: 10px 0 0; color: var(--muted); font-size: 12px; }\n\n@media (max-width: 860px) {\n .verdict-row { grid-template-columns: repeat(2, minmax(0, 1fr)); }\n}\n@media (max-width: 600px) {\n .verdict-row { grid-template-columns: 1fr; gap: 12px; }\n .concern-list li { align-items: flex-start; flex-direction: column; gap: 4px; }\n}\n`\n\n/** Served from `/assets/canonry-ui.css` by the Val host, as one stylesheet. */\nexport const brandPerceptionStyles = `${canonryDemoStyles}\\n${PERCEPTION_STYLES}`\n",[],[168,226,228],"fd354acf-6696-4473-956d-20f59da560d3","render.ts","ef796fc4-a7bd-11f1-b510-1607ee4eb77e",16,["D",1788456963339],"import { MAX_USER_QUERIES } from 'npm:@canonry/val-kit@0.1.0/jobs'\nimport { canonryGlyph, canonryMark } from 'npm:@canonry/val-kit@0.1.0/ui'\nimport { brandPerceptionClientScript, QUERY_HINT_SUFFIX } from './client.ts'\nimport { brandPerceptionStyles } from './styles.ts'\nimport type {\n BrandPerceptionViewModel,\n DemoUiStatus,\n PerceptionAnswerViewModel,\n PerceptionSourceViewModel,\n PerceptionViewModel,\n UiNotice,\n} from './types.ts'\n\nconst DEFAULT_CSS_HREF = '/assets/canonry-ui.css'\nconst DEFAULT_SCRIPT_SRC = '/assets/canonry-ui.js'\nconst DEFAULT_MARK_SRC = '/assets/canonry-mark.svg'\nconst DEFAULT_GLYPH_SRC = '/assets/canonry-glyph.svg'\n\n/** The product's name, written once and used everywhere a name appears. */\nexport const PRODUCT_NAME = 'Brand Perception Check'\n\n/**\n * Fingerprint an asset's own content into its URL.\n *\n * The document is `no-store` but a stylesheet on a TTL means that after a deploy\n * a returning visitor gets new markup styled by an old stylesheet — new class\n * names unstyled, removed ones still applied. A content hash changes the URL\n * exactly when the bytes change, which is what makes a long cache lifetime safe\n * rather than a liability.\n *\n * FNV-1a rather than SHA-256 because this runs at module load and only has to\n * differ when the content differs; it is a cache key, not a security boundary.\n */\nexport function assetUrl(path: string, content: string): string {\n let hash = 0x811c9dc5\n for (let index = 0; index < content.length; index++) {\n hash ^= content.charCodeAt(index)\n hash = Math.imul(hash, 0x01000193) >>> 0\n }\n return `${path}?v=${hash.toString(36)}`\n}\n\nconst MAX_ANSWER_CHARS = 1_400\n\n/** Where \"open source Canonry\" points. */\nconst CANONRY_REPO_URL = 'https://github.com/Canonry/canonry'\n\n/**\n * What the check actually does, carried by the heading's tooltip rather than a\n * subtitle. The trigger is a real button, and the copy rides its `aria-label`\n * so nothing is lost for assistive tech or for a test that looks the button up\n * by accessible name.\n */\nconst LANDING_EXPLAINER =\n 'An answer engine is asked questions that name this brand. We record the position each answer takes and quote the ' +\n 'sentences it wrote that carry it, along with the concerns it raises and the sources it attributed.'\n\nconst VERDICT_TIP =\n 'Each answer is read back for the position it takes, and a verdict is kept only when sentences copied word for ' +\n 'word out of that answer carry it. \"Took no position\" means the answer described the brand without recommending ' +\n 'or cautioning, which is a finding. Nothing here is a sentiment score.'\n\nconst ANSWERS_TIP =\n 'Every question here names the brand, so the engine was always going to discuss it. The finding is what it said, ' +\n 'not whether it appeared, which makes this a different instrument from an AI visibility rate and never comparable ' +\n 'to one. Open a row for the full quotations, the concerns, and the sources behind that answer.'\n\nconst CONCERNS_TIP =\n 'A concern is a short phrase the answer itself writes as a drawback, verified word for word against the prose. It ' +\n 'counts once per answer, however often that answer repeats it, so one verbose answer cannot outrank a concern ' +\n 'three separate answers raised.'\n\nconst SOURCES_TIP =\n 'The sources this answer engine attributed for these answers, grouped by kind. A kind counts once per answer, so ' +\n 'eight links to one forum is one answer leaning on community sources. This is not a claim about where opinions ' +\n 'about the brand come from on the web — three answers cannot support that.'\n\nfunction escapeHtml(value: unknown): string {\n return String(value ?? '')\n .replaceAll('&', '&')\n .replaceAll('<', '<')\n .replaceAll('>', '>')\n .replaceAll('\"', '"')\n .replaceAll(\"'\", ''')\n}\n\nfunction escapeAttr(value: unknown): string {\n return escapeHtml(value).replaceAll('`', '`')\n}\n\nfunction safeUrl(value: string): string | null {\n try {\n const url = new URL(value)\n return url.protocol === 'https:' || url.protocol === 'http:' ? url.toString() : null\n } catch {\n return null\n }\n}\n\nfunction safeHref(value: string): string | null {\n if (value.startsWith('/') && !value.startsWith('//')) return value\n return safeUrl(value)\n}\n\nfunction safeFormAction(value: string): string {\n return value.startsWith('/') && !value.startsWith('//') ? value : '/check'\n}\n\nfunction safeHost(value: string): string {\n const url = safeUrl(value)\n if (!url) return 'Unavailable source'\n return new URL(url).hostname\n}\n\nfunction clip(value: string | null | undefined, limit = MAX_ANSWER_CHARS): string {\n if (!value) return ''\n return value.length > limit ? `${value.slice(0, limit - 1).trimEnd()}…` : value\n}\n\nfunction plural(count: number, one: string, many: string): string {\n return count === 1 ? one : many\n}\n\nfunction formatTime(value: string | null | undefined): string | null {\n if (!value) return null\n const date = new Date(value)\n if (Number.isNaN(date.valueOf())) return null\n return new Intl.DateTimeFormat('en-US', {\n month: 'short',\n day: 'numeric',\n year: 'numeric',\n hour: 'numeric',\n minute: '2-digit',\n }).format(date)\n}\n\nfunction statusCopy(status: DemoUiStatus): UiNotice | null {\n switch (status) {\n case 'loading':\n return {\n tone: 'neutral',\n title: 'Checking this brand',\n detail: 'The report will appear here when the bounded check finishes.',\n }\n case 'partial':\n return {\n tone: 'caution',\n title: 'Partial result',\n detail: 'Only the answers that were measured are counted below. The rest are shown as not measured.',\n }\n case 'error':\n return {\n tone: 'negative',\n title: 'This check could not finish',\n detail: 'Try again later or use a domain that responds publicly.',\n }\n case 'rate-limited':\n return {\n tone: 'caution',\n title: 'Check limit reached',\n detail: 'This public sample has reached its current limit. Try again later.',\n }\n case 'empty':\n return { tone: 'neutral', title: 'No report yet', detail: 'Enter a public domain to create a bounded snapshot.' }\n default:\n return null\n }\n}\n\nfunction renderNotice(notice: UiNotice | undefined): string {\n if (!notice) return ''\n const href = notice.action?.href ? safeHref(notice.action.href) : null\n const action = href && notice.action\n ? `${escapeHtml(notice.action.label)}`\n : ''\n return `\n `\n}\n\n/** Hover- and focus-revealed note. CSS only, because the page CSP allows no inline script. */\nfunction renderInfoTip(copy: string): string {\n return `${\n escapeHtml(copy)\n }`\n}\n\n/**\n * One tone vocabulary for the whole page. The badge and the KPI cell read the\n * SAME `verdictTone`, so the colour of \"Cautions\" cannot be rose in one place\n * and amber in the other — which is what happens when a renderer decides tone\n * a second time.\n */\nconst VERDICT_TONE_CLASS = {\n positive: 'signal-positive',\n negative: 'signal-negative',\n caution: 'signal-caution',\n neutral: 'signal-neutral',\n} as const\n\nconst VERDICT_GLYPH = { recommends: '✓', cautions: '!', mixed: '~', none: '−' } as const\n\n/** A verdict badge, never a score. An unmeasured row is dimmed, not toned. */\nfunction verdictBadge(answer: PerceptionAnswerViewModel): string {\n const glyph = answer.verdict === null ? '?' : VERDICT_GLYPH[answer.verdict]\n const className = answer.verdict === null ? 'signal-unavailable' : VERDICT_TONE_CLASS[answer.verdictTone]\n return `${glyph}${\n escapeHtml(answer.verdictLabel)\n }`\n}\n\n/**\n * The headline cell.\n *\n * A measured verdict quotes the answer's own first verified sentence. `none`\n * gets a statement of what happened, and an unmeasured row gets the reason it\n * was not measured — the row already says \"Not measured\", and the question a\n * reader then asks is \"why\".\n */\nfunction answerHeadlineCell(answer: PerceptionAnswerViewModel): string {\n if (answer.verdict === null) {\n return `${escapeHtml(answer.error ?? 'This answer was not measured.')}`\n }\n if (answer.headline) {\n return `${escapeHtml(answer.headline)}`\n }\n return 'The answer described the brand without taking a position.'\n}\n\nfunction renderSource(source: PerceptionSourceViewModel): string {\n const url = safeUrl(source.url)\n const title = source.title?.trim() || (url ? safeHost(url) : 'Unavailable source')\n const host = url ? safeHost(url) : source.domain\n const meta = `${escapeHtml(host ?? 'Unattributed host')} · ${escapeHtml(source.typeLabel)}`\n if (!url) {\n return `

${escapeHtml(title)}${meta}

`\n }\n return `

`\n}\n\nfunction renderAnswerDetails(answer: PerceptionAnswerViewModel): string {\n const quotes = answer.evidenceSentences.length\n ? `

What the answer said

${escapeHtml(sentence)}

`\n : `

What the answer said

${\n answer.verdict === null\n ? 'This answer was not measured, so nothing was read out of it.'\n : 'No sentence in this answer took a position on the brand.'\n }

`\n const concerns = answer.concerns.length\n ? `

Concerns this answer raised

${escapeHtml(concern)}

`\n : ''\n const sources = answer.sources.length\n ? `

${answer.sources.map(renderSource).join('')}`\n : `

${\n answer.verdict === null\n ? 'This answer was not measured, so no source was attributed to it.'\n : 'The engine attributed no source to this answer.'\n }

`\n const searches = answer.searchQueries.length\n ? `

Searches the engine ran${\n escapeHtml(answer.searchQueries.join(', '))\n }

`\n : ''\n const models = [\n answer.requestedModel ? `Requested: ${escapeHtml(answer.requestedModel)}` : '',\n answer.servedModel ? `Served: ${escapeHtml(answer.servedModel)}` : '',\n answer.completedAt && formatTime(answer.completedAt)\n ? `Completed: ${escapeHtml(formatTime(answer.completedAt)!)}`\n : '',\n ].filter(Boolean).join('')\n const answerText = answer.answerText\n ? `

Full answer

${\n escapeHtml(clip(answer.answerText))\n }

`\n : '

Answer text was not retained for this result.

'\n const error = answer.error\n ? `

Not measured${escapeHtml(answer.error)}

`\n : ''\n return `\n

View evidence

${models}

\n ${quotes}${concerns}${error}\n

Sources

${sources}

\n ${searches}\n ${answerText}\n

`\n}\n\n/**\n * The headline row.\n *\n * Flat KPI cells, never progress bars: \"2 of 3 answers\" has no target to fill,\n * and a bar would invent one. The denominator is written under every number\n * rather than once at the top, because the number and the bound it rests on\n * have to be read together.\n */\nfunction renderVerdictSnapshot(perception: PerceptionViewModel): string {\n const measured = perception.measuredAnswers\n const checkedAt = formatTime(perception.checkedAt)\n const cells = perception.verdicts.map((verdict) =>\n `

${escapeHtml(verdict.label)}

${\n measured === 0\n ? '

Not measured

'\n : `

${verdict.count}

`\n }${\n measured === 0 ? 'No answer was measured' : `of ${measured} ${plural(measured, 'answer', 'answers')}`\n }

`\n ).join('')\n return `\n

Verdict snapshot${renderInfoTip(VERDICT_TIP)}

\n ${checkedAt ? `

Checked ${escapeHtml(checkedAt)}

` : ''}\n

${perception.requestedAnswers} branded ${\n plural(perception.requestedAnswers, 'question', 'questions')\n }Gemini${measured} measured

${cells}\n

`\n}\n\nfunction renderAnswers(perception: PerceptionViewModel): string {\n const rows = perception.answers.map((answer) => `\n \n ${escapeHtml(answer.query)}\n ${verdictBadge(answer)}\n ${answerHeadlineCell(answer)}\n ${\n // An unmeasured answer has no sources because there is no answer, not\n // because the engine attributed none. A 0 here would be a measured zero.\n answer.verdict === null\n ? 'not measured'\n : answer.sources.length\n }\n ${renderAnswerDetails(answer)}\n `).join('')\n const empty =\n '

No answers were recorded

Answers appear once the engine replies to a branded question.

'\n return `\n

Answers${renderInfoTip(ANSWERS_TIP)}

\n ${perception.notice ? renderNotice(perception.notice) : ''}\n ${\n perception.answers.length\n ? `

${rows}

Branded question	Verdict	What the answer said	Sources	Evidence

`\n : empty\n }\n

`\n}\n\nfunction renderConcerns(perception: PerceptionViewModel): string {\n const measured = perception.measuredAnswers\n const body = perception.concerns.length\n ? `

${escapeHtml(concern.phrase)}in ${concern.answers} of ${measured} ${\n plural(measured, 'answer', 'answers')\n }

`\n : `

${\n measured === 0\n ? 'No answer was measured, so no concern could be read out of one.'\n : `No concern was raised in the ${measured} ${plural(measured, 'answer', 'answers')} measured.`\n }

`\n return `\n

Concerns raised${\n renderInfoTip(CONCERNS_TIP)\n }

\n ${body}\n

`\n}\n\nfunction renderSourceTypes(perception: PerceptionViewModel): string {\n const share = perception.sourceTypes\n const body = share\n ? `

${\n share.entries.map((entry) =>\n ``\n ).join('')\n }

Kind of source	Answers	Share
${escapeHtml(entry.label)}	${entry.answers} of ${share.measuredAnswers}	${entry.percent}%

${\n share.unattributedAnswers > 0\n ? `

${share.unattributedAnswers} measured ${\n plural(share.unattributedAnswers, 'answer', 'answers')\n } attributed no source at all, and ${\n plural(share.unattributedAnswers, 'is', 'are')\n } excluded from the share.

`\n : ''\n }`\n : `

${\n perception.measuredAnswers === 0\n ? 'No answer was measured, so no source could be attributed.'\n : 'No measured answer attributed a source.'\n }

`\n return `\n

Sources the engine attributed${\n renderInfoTip(SOURCES_TIP)\n }

\n ${body}\n

`\n}\n\n/**\n * The waiting state, revealed by script when a check is submitted.\n *\n * A check takes about 45 seconds and execution is request-bound, so a native\n * form POST leaves the browser blocked on a navigation for the whole time with\n * nothing on screen but a disabled button. The work still happens inside one\n * request; this just stops that request being the thing the browser is painting.\n *\n * It claims only what is knowable while waiting. The domain and any questions\n * the visitor typed are theirs already, and elapsed time is counted rather than\n * guessed. There is ONE track, not a list of phases: this runner really is\n * sequential — plan, then probe, then read the answers back — but the server\n * reports no phase, so naming three of them would tell the reader which one is\n * running when nothing knows that.\n */\nfunction renderLoadingView(): string {\n return `\n `\n}\n\n/**\n * The form does two different jobs, so it gets two treatments.\n *\n * On the landing page it is the ONLY thing to do, so it is the hero: a full\n * headline, a large field, and the scope note underneath. On a result page the\n * reader already has what they came for, so it shrinks into the header as a\n * secondary action and drops the onboarding copy.\n */\nfunction renderCheckForm(model: BrandPerceptionViewModel, variant: 'hero' | 'compact' = 'compact'): string {\n if (!model.form) return ''\n const value = model.status === 'empty' ? '' : model.domain\n const verificationStatus = model.form.verificationStatus ?? (model.form.turnstileSiteKey ? 'ready' : 'not-required')\n const hasTurnstile = Boolean(model.form.turnstileSiteKey && verificationStatus === 'ready')\n const disabled = verificationStatus === 'unavailable'\n // interaction-only: the challenge still runs on load, so a token is ready at\n // submit, but the widget is drawn only if the visitor has to do something.\n const verification = hasTurnstile\n ? `

`\n : verificationStatus === 'unavailable'\n ? `

!${\n escapeHtml(\n model.form.verificationUnavailableMessage ?? 'Human verification is unavailable. Public checks are disabled.',\n )\n }

`\n : ''\n const verificationSlot = verification\n ? `

${verification}

`\n : ''\n const hero = variant === 'hero'\n const submitLabel = model.form.submitLabel ?? 'Check a brand'\n return `\n `\n}\n\nfunction brandLockup(glyphHref: string): string {\n return `

brand perception checkpowered by $\"\"$ Canonry

`\n}\n\nconst FOOTER_LINKS =\n 'npm i -g @canonry/canonryGitHub canonry.ai'\n\nfunction renderMain(model: BrandPerceptionViewModel): string {\n const glyphHref = assetUrl(DEFAULT_GLYPH_SRC, canonryGlyph)\n const globalNotice = (model.status === 'ready' ? model.notice : model.notice ?? statusCopy(model.status)) ?? undefined\n const perception = model.perception\n // Nothing has been checked yet, so a report header over two empty panels is\n // scaffolding around an absence. Lead with the one action instead.\n if (model.status === 'empty') {\n return `\n

\n \n

What does AI say about your brand?${renderInfoTip(LANDING_EXPLAINER)}

\n ${renderCheckForm(model, 'hero')}\n

\n ${renderLoadingView()}\n

\n \n

`\n }\n return `\n

\n \n

${escapeHtml(model.domain)}

\n ${renderNotice(globalNotice)}\n

\n ${\n perception\n ? `${renderVerdictSnapshot(perception)}${renderAnswers(perception)}${renderConcerns(perception)}${\n renderSourceTypes(perception)\n }`\n : '

No brand perception result

Start a check to see what an answer engine says about this brand.

'\n }\n

\n \n

`\n}\n\n/** Returns a complete document so the runtime can use it as an HTTP response body. */\nexport function renderBrandPerception(model: BrandPerceptionViewModel): string {\n const title = `${model.displayName} | ${PRODUCT_NAME}`\n return `\n\n \n \n \n \n ${escapeHtml(title)}\n \n \n \n \n \n \n ${\n model.form?.turnstileSiteKey && (model.form.verificationStatus ?? 'ready') === 'ready'\n ? ''\n : ''\n }\n \n ${renderMain(model)}\n`\n}\n\n/** Useful for a host that owns the outer document or wants an embedded fragment. */\nexport function renderBrandPerceptionBody(model: BrandPerceptionViewModel): string {\n return renderMain(model)\n}\n",[],[168,226,236],"7e185d75-2a4f-452b-8e9a-796b39f5aedc","index.ts","ef885f02-a7bd-11f1-b787-1607ee4eb77e",17,["D",1788456963399],"export { createPublicCheckForm } from './check-form.ts'\nexport { brandPerceptionClientScript, QUERY_HINT_SUFFIX } from './client.ts'\nexport { emptyLandingViewModel, toBrandPerceptionViewModel } from './from-check-record.ts'\nexport type { CheckRecordViewOptions } from './from-check-record.ts'\nexport { assetUrl, PRODUCT_NAME, renderBrandPerception, renderBrandPerceptionBody } from './render.ts'\nexport { brandPerceptionStyles } from './styles.ts'\nexport { canonryGlyph, canonryMark } from 'npm:@canonry/val-kit@0.1.0/ui'\nexport type {\n BrandPerceptionViewModel,\n CheckFormViewModel,\n ConcernViewModel,\n DemoUiStatus,\n PerceptionAnswerViewModel,\n PerceptionSourceViewModel,\n PerceptionViewModel,\n SourceTypeEntryViewModel,\n SourceTypeViewModel,\n UiAction,\n UiNotice,\n UiTone,\n VerdictCountViewModel,\n} from './types.ts'\n",[],[168,226,244],"02d3a9e8-672c-4dc6-bca2-433b1e873a6f","from-check-record.ts","ef63417c-a7bd-11f1-b229-1607ee4eb77e",14,["D",1788456963121],"import {\n type CheckRecord,\n PUBLIC_CHECK_UNAVAILABLE,\n PUBLIC_RATE_LIMITED_ERROR_CODE,\n} from 'npm:@canonry/val-kit@0.1.0/jobs'\nimport type {\n PerceptionEvidence,\n PerceptionReport,\n PerceptionVerdict,\n SourceType,\n} from 'npm:@canonry/val-kit@0.1.0/perception'\nimport type { PerceptionCheckResult } from '../runtime/check-result.ts'\nimport type {\n BrandPerceptionViewModel,\n CheckFormViewModel,\n PerceptionAnswerViewModel,\n PerceptionViewModel,\n UiTone,\n VerdictCountViewModel,\n} from './types.ts'\n\nexport interface CheckRecordViewOptions {\n form?: CheckFormViewModel\n displayName?: string\n title?: string\n}\n\nconst LOCAL_READY_FORM: CheckFormViewModel = {\n action: '/check',\n method: 'post',\n verificationFieldName: 'cf-turnstile-response',\n verificationStatus: 'not-required',\n submitLabel: 'Check a brand',\n}\n\n/**\n * The verdict vocabulary, written once.\n *\n * `none` is a POSITION — the answer described the brand and took none — so it\n * gets a neutral tone and a label that says what happened, never \"no data\".\n * `null` is the absence of a measurement and is handled separately, because\n * collapsing the two would turn an outage into a finding.\n */\nconst VERDICT_COPY: Readonly> = {\n recommends: { label: 'Recommends', tone: 'positive' },\n cautions: { label: 'Cautions', tone: 'negative' },\n mixed: { label: 'Mixed', tone: 'caution' },\n none: { label: 'Took no position', tone: 'neutral' },\n}\n\n/** What KIND of place, in the reader's words. Never \"where opinions come from\". */\nconst SOURCE_TYPE_LABELS: Readonly> = {\n official: 'The brand’s own site',\n community: 'Community',\n review: 'Review site',\n news: 'News',\n other: 'Other',\n}\n\n/**\n * Converts a sanitized, durable public-check record into the narrow UI model.\n * It deliberately never turns an unmeasured answer into a neutral verdict.\n */\nexport function toBrandPerceptionViewModel(\n record: CheckRecord | null,\n options: CheckRecordViewOptions = {},\n): BrandPerceptionViewModel {\n const domain = record?.domain ?? ''\n const result = record?.result ?? null\n const status = record ? mapStatus(record) : 'empty'\n const resultDomain = result?.domain || domain\n\n return {\n status,\n title: options.title,\n displayName: options.displayName ?? nameFromDomain(resultDomain || 'Brand'),\n domain: resultDomain,\n form: { ...LOCAL_READY_FORM, ...options.form },\n perception: result?.perception ? mapPerception(result.perception) : undefined,\n notice: buildNotice(record, result),\n }\n}\n\n/**\n * Did anything in this check actually fail?\n *\n * `record.status` is decided once, when the check runs, and stored, which makes\n * it the wrong thing to warn a reader off: correcting the rule behind it never\n * reaches a record already written, so a shared link keeps showing the old\n * verdict for its whole 24h life. The evidence is right here in the result, so\n * read it instead of the flag.\n */\nfunction hasFailedWork(record: CheckRecord): boolean {\n const result = record.result\n if (!result) return false\n if (result.errors.length > 0) return true\n return (result.perception?.evidence ?? []).some((row) => row.verdict === null)\n}\n\nfunction mapStatus(record: CheckRecord): BrandPerceptionViewModel['status'] {\n if (record.errorCode === PUBLIC_RATE_LIMITED_ERROR_CODE) return 'rate-limited'\n switch (record.status) {\n case 'queued':\n case 'running':\n return 'loading'\n case 'partial':\n // A stored `partial` is only worth a caution when something in the result\n // actually failed. See `hasFailedWork`.\n return hasFailedWork(record) ? 'partial' : 'ready'\n case 'failed':\n return 'error'\n case 'complete':\n return 'ready'\n }\n}\n\nfunction mapPerception(report: PerceptionReport): PerceptionViewModel {\n const failed = report.summary.failedChecks\n const sourceTypes = report.summary.sourceTypes\n return {\n requestedAt: report.startedAt,\n checkedAt: report.completedAt,\n measuredAnswers: report.summary.successfulChecks,\n requestedAnswers: report.evidence.length,\n failedAnswers: failed,\n // Fixed order, so the row reads the same on every check and a count that\n // happens to be zero keeps its column rather than shuffling the others.\n verdicts: (['recommends', 'cautions', 'mixed', 'none'] as const).map((key): VerdictCountViewModel => ({\n key,\n label: VERDICT_COPY[key].label,\n tone: VERDICT_COPY[key].tone,\n count: report.summary.verdicts[key],\n })),\n concerns: report.summary.concerns.map((concern) => ({ phrase: concern.phrase, answers: concern.answers })),\n // Percentages round for display only; the shares they come from sum to 1.\n sourceTypes: sourceTypes\n ? {\n measuredAnswers: sourceTypes.measuredAnswers,\n unattributedAnswers: sourceTypes.unattributedAnswers,\n totalAppearances: sourceTypes.totalAppearances,\n entries: sourceTypes.entries.map((entry) => ({\n type: entry.type,\n label: SOURCE_TYPE_LABELS[entry.type],\n answers: entry.answers,\n percent: Math.round(entry.share * 100),\n })),\n }\n : undefined,\n answers: report.evidence.map(mapAnswer),\n notice: failed > 0\n ? {\n tone: 'caution',\n title: `${failed} ${failed === 1 ? 'answer' : 'answers'} unavailable`,\n // The reason leads, because that is what a row reading \"Not measured\"\n // makes someone ask. It is only stated when the failures agree on one;\n // with several the banner would have to pick one and be wrong about the\n // rest, so it defers to the per-row evidence instead.\n detail: `${failureReason(report.evidence) ?? ''}Every count uses the answers that were measured.`,\n }\n : undefined,\n }\n}\n\n/** The one reason every unmeasured answer shares, or null when they disagree. */\nfunction failureReason(evidence: readonly PerceptionEvidence[]): string | null {\n const reasons = new Set(\n evidence.filter((row) => row.verdict === null)\n .map((row) => row.error)\n // The generic sentence is the ABSENCE of a reason. Leading with it\n // produces \"1 answer unavailable. This answer-engine check was\n // unavailable.\" — the banner restating its own title.\n .filter((error): error is string => Boolean(error) && error !== PUBLIC_CHECK_UNAVAILABLE),\n )\n if (reasons.size !== 1) return null\n const [reason] = [...reasons]\n return reason ? `${reason} ` : null\n}\n\nfunction mapAnswer(row: PerceptionEvidence): PerceptionAnswerViewModel {\n const copy = row.verdict === null ? null : VERDICT_COPY[row.verdict]\n return {\n id: `${row.provider}:${row.query}:${row.completedAt}`,\n query: row.query,\n verdict: row.verdict,\n verdictLabel: copy?.label ?? 'Not measured',\n verdictTone: copy?.tone ?? 'neutral',\n // The answer's own first sentence, or nothing. A verdict of 'none' carries\n // no evidence by construction, and inventing a line to fill the cell would\n // put words in an answer that did not write them.\n headline: row.evidenceSentences[0] ?? null,\n evidenceSentences: row.evidenceSentences,\n concerns: row.concerns,\n sources: row.sources.map((source) => ({\n url: source.url,\n title: source.title,\n domain: source.domain,\n typeLabel: SOURCE_TYPE_LABELS[source.type],\n })),\n searchQueries: row.searchQueries,\n answerText: row.answerText,\n requestedModel: row.requestedModel,\n servedModel: row.servedModel,\n completedAt: row.completedAt,\n error: row.error,\n }\n}\n\nfunction buildNotice(\n record: CheckRecord | null,\n result: PerceptionCheckResult | null,\n): BrandPerceptionViewModel['notice'] {\n if (!record) return undefined\n if (record.errorCode === PUBLIC_RATE_LIMITED_ERROR_CODE) {\n return {\n tone: 'caution',\n title: 'Check limit reached',\n detail: record.errorMessage ?? 'This public sample has reached its current limit. Try again later.',\n }\n }\n if (record.status === 'failed') {\n return {\n tone: 'negative',\n title: 'This check could not finish',\n detail: result?.errors[0]?.message ?? record.errorMessage ?? 'Try another public domain later.',\n }\n }\n const first = result?.errors[0]\n if (first) return { tone: 'caution', title: 'Brand perception was unavailable', detail: first.message }\n return undefined\n}\n\nfunction nameFromDomain(domain: string): string {\n const host = domain.replace(/^www\\./i, '').split('.')[0] ?? domain\n return host\n .replace(/[-_]+/g, ' ')\n .replace(/\\b\\w/g, (letter) => letter.toUpperCase())\n}\n\n/**\n * The landing view, shown before anything has been checked.\n *\n * It carries no `perception` because nothing has been measured yet. A fixture\n * here would be read as measurement by anyone who scrolled past the badge that\n * qualified it — and a fabricated verdict about a real brand is a worse lie\n * than a fabricated percentage. An empty state is the honest thing to show when\n * the answer is \"nothing yet\".\n */\nexport function emptyLandingViewModel(form: CheckFormViewModel): BrandPerceptionViewModel {\n return {\n status: 'empty',\n title: 'Brand Perception Check',\n displayName: 'Check a brand',\n domain: '',\n form,\n }\n}\n",[],[168,226,252],"19bf501c-ea6f-43f0-9f73-2295a95628cb","client.ts","ef6e34d8-a7bd-11f1-b787-1607ee4eb77e",15,["D",1788456963255],"/**\n * The one place the timing is written. The script below rewrites the query\n * hint's text on every keystroke, so a suffix left only in the server markup\n * would survive until the visitor types and then silently disappear.\n */\nexport const QUERY_HINT_SUFFIX = 'Takes about 45 seconds.'\n\n/** Client-side enhancement only. The page remains usable with native forms and details. */\nexport const brandPerceptionClientScript = `\n(() => {\n const queries = document.querySelector('[data-query-hint]');\n const queryInput = document.getElementById('queries-input');\n if (queries && queryInput) {\n const max = Number(queries.dataset.max || 3);\n const update = () => {\n const used = queryInput.value.split('\\\\n').map((line) => line.trim()).filter((line) => line.length >= 3).length;\n const kept = Math.min(used, max);\n const rest = max - kept;\n const counts = kept === 0\n ? 'Add up to ' + max + '. We generate the rest.'\n : rest === 0\n ? 'Using your ' + kept + '. We generate none.'\n : 'Using your ' + kept + '. We generate the other ' + rest + '.';\n // Interpolated at module load so the server markup and every rewrite of\n // this line read one constant.\n queries.textContent = counts + ' ' + ${JSON.stringify(QUERY_HINT_SUFFIX)};\n };\n queryInput.addEventListener('input', update);\n update();\n }\n\n const form = document.querySelector('[data-domain-check-form]');\n if (form) {\n const submit = form.querySelector('[data-domain-submit]');\n const busy = form.querySelector('[data-form-busy]');\n const checking = document.querySelector('[data-checking]');\n\n const markBusy = () => {\n form.setAttribute('aria-busy', 'true');\n if (submit instanceof HTMLButtonElement) {\n submit.disabled = true;\n submit.setAttribute('aria-disabled', 'true');\n submit.textContent = 'Starting…';\n }\n if (busy) {\n busy.hidden = false;\n busy.classList.remove('is-error');\n busy.textContent = 'Starting check…';\n }\n };\n\n // Without the waiting view there is nothing to enhance: fall back to the\n // native POST, which still works, just with a blocked browser.\n if (!checking) {\n form.addEventListener('submit', markBusy);\n } else {\n const elapsedEl = checking.querySelector('[data-checking-elapsed]');\n const domainEl = checking.querySelector('[data-checking-domain]');\n const queriesEl = checking.querySelector('[data-checking-queries]');\n const hero = document.querySelector('[data-hero]');\n\n const restore = (message) => {\n checking.hidden = true;\n if (hero) hero.hidden = false;\n form.removeAttribute('aria-busy');\n if (submit instanceof HTMLButtonElement) {\n submit.disabled = false;\n submit.removeAttribute('aria-disabled');\n submit.textContent = submit.dataset.label || 'Check a brand';\n }\n if (busy) {\n busy.hidden = false;\n // A failure and \"Starting check…\" must not be the same grey line, or\n // hiding the waiting view reads as the page bouncing back to the form\n // with nothing said, while the reason sits on screen unnoticed.\n busy.classList.add('is-error');\n busy.textContent = message;\n }\n // A Turnstile token is redeemed exactly once. The page is still here\n // after a failure, so the spent token has to be replaced before the\n // visitor can try again.\n if (window.turnstile && typeof window.turnstile.reset === 'function') {\n try { window.turnstile.reset(); } catch (_) { /* widget absent */ }\n }\n };\n\n form.addEventListener('submit', (event) => {\n const data = new FormData(form);\n const domain = String(data.get('domain') || '').trim();\n if (!domain) return;\n event.preventDefault();\n markBusy();\n\n if (domainEl) domainEl.textContent = domain;\n const typed = String(data.get('queries') || '')\n .split('\\\\n').map((line) => line.trim()).filter((line) => line.length >= 3).slice(0, 3);\n if (queriesEl) {\n queriesEl.textContent = '';\n for (const question of typed) {\n const item = document.createElement('li');\n item.textContent = question;\n queriesEl.appendChild(item);\n }\n queriesEl.hidden = typed.length === 0;\n }\n if (hero) hero.hidden = true;\n checking.hidden = false;\n\n const started = Date.now();\n const tick = setInterval(() => {\n if (elapsedEl) elapsedEl.textContent = Math.round((Date.now() - started) / 1000) + 's';\n }, 1000);\n\n fetch(form.dataset.jsonAction || '/api/checks', {\n method: 'POST',\n headers: { 'content-type': 'application/json', accept: 'application/json' },\n body: JSON.stringify({\n domain: domain,\n queries: typed,\n turnstileToken: data.get('cf-turnstile-response') || null,\n }),\n })\n .then((response) => response.json().then((body) => ({ ok: response.ok, body: body })))\n .then((result) => {\n clearInterval(tick);\n const id = result.body && result.body.check && result.body.check.id;\n if (result.ok && id) {\n location.href = '/?check=' + encodeURIComponent(id);\n return;\n }\n const error = result.body && result.body.error;\n restore((error && error.message) || 'The check could not be started. Try again.');\n })\n .catch(() => {\n clearInterval(tick);\n restore('The check could not be reached. Try again.');\n });\n });\n }\n }\n})();\n`\n",[],[168,226,260],"d5ec46fe-a8aa-41fc-b913-7083a7638f16","check-form.ts","ef3bc3ea-a7bd-11f1-8727-1607ee4eb77e",11,["D",1788456962916],"import type { ValTownConfig } from 'npm:@canonry/val-kit@0.1.0/config'\nimport type { CheckFormViewModel } from './types.ts'\n\ntype PublicCheckFormConfig = Pick<\n ValTownConfig,\n | 'publicChecksEnabled'\n | 'publicChecksUnavailableMessage'\n | 'humanVerificationStatus'\n | 'turnstileSiteKey'\n>\n\n/** Builds the public form from the complete admission capability, not CAPTCHA alone. */\nexport function createPublicCheckForm(config: PublicCheckFormConfig): CheckFormViewModel {\n const unavailable = !config.publicChecksEnabled\n return {\n action: '/check',\n method: 'post',\n verificationFieldName: 'cf-turnstile-response',\n turnstileSiteKey: unavailable ? null : config.turnstileSiteKey,\n turnstileAction: 'audit',\n verificationStatus: unavailable ? 'unavailable' : config.humanVerificationStatus,\n verificationUnavailableMessage: unavailable\n ? config.publicChecksUnavailableMessage ?? 'Public checks are temporarily unavailable.'\n : 'Human verification is not configured. Public checks are disabled.',\n submitLabel: 'Check a brand',\n }\n}\n",[],[168,226,268],"ded814b2-e46f-462c-a9f1-97a00b7b4d1b",2,["D",1788456960982],[193,194,195,196,197,198,199],[168,226],"c6eaa31d-1fde-4905-9470-0f6c532f7f5e","ee30f538-a7bd-11f1-a791-1607ee4eb77e",["D",1788456963629],[],[168,285,32],"runtime","4f9d45fe-bb61-49dc-95e1-7721ed13d71e",4,["D",1788456961187],[191],[168,285],"943197cc-b06b-4946-9882-f880ef9fb6c8","mcp","ee403354-a7bd-11f1-adc2-1607ee4eb77e",["D",1788456961282],[],[168,292],"ebf126d5-0f4e-4391-8a29-d0cf0edb41da","jobs","ee5205ca-a7bd-11f1-adc2-1607ee4eb77e",6,["D",1788456961408],[],[168,298],"5af1252d-a8a5-44b0-af77-3dfb3e9c165a","app.ts","ef9ec922-a7bd-11f1-ba16-1607ee4eb77e","ee205a2a-a7bd-11f1-a3ef-1607ee4eb77e",18,["D",1788456963585],"import { Hono } from 'npm:hono@4.12.25'\nimport type { ValTownConfig } from 'npm:@canonry/val-kit@0.1.0/config'\nimport {\n type CheckRecord,\n checkFingerprint,\n type CheckStore,\n isCheckExpired,\n type JobDispatcher,\n newCheckRecord,\n normalizeUserQueries,\n PUBLIC_CHECK_EXECUTION_LEASE_MS,\n PUBLIC_CHECK_EXECUTION_LEASE_NAME,\n PUBLIC_RATE_LIMITED_ERROR_CODE,\n} from 'npm:@canonry/val-kit@0.1.0/jobs'\nimport {\n HumanVerificationError,\n normalizePublicDomain,\n PublicUrlError,\n utcDay,\n} from 'npm:@canonry/val-kit@0.1.0/security'\nimport { PublicQuotaError } from '../jobs/perception-check.ts'\nimport { createMcpHandler } from '../mcp/server.ts'\nimport { CHECK_FINGERPRINT_NAMESPACE, type PerceptionCheckResult } from '../runtime/check-result.ts'\n\nconst MAX_BODY_BYTES = 4_096\nconst CHECK_ID = /^[0-9a-f-]{36}$/i\n\nexport interface PageAssets {\n styles: string\n script: string\n /** Plated logo, used as the favicon. */\n mark: string\n /** Bare glyph, used inline in the brand lockup. */\n glyph: string\n}\n\nexport interface ValTownAppDependencies {\n store: CheckStore\n config: ValTownConfig\n dispatcher: JobDispatcher\n /** The UI is injected so this host stays independent from the renderer implementation. */\n renderPage: (record: CheckRecord | null) => string\n assets: PageAssets\n now?: () => Date\n}\n\nexport class PublicCheckUnavailableError extends Error {\n override name = 'PublicCheckUnavailableError'\n}\n\nclass PublicCheckAdmissionBusyError extends Error {\n override name = 'PublicCheckAdmissionBusyError'\n constructor() {\n super('Another request for this domain is being accepted. Try again shortly.')\n }\n}\n\nclass PublicCheckCapacityError extends Error {\n override name = 'PublicCheckCapacityError'\n constructor() {\n super('The public check is at capacity. Try again shortly.')\n }\n}\n\nexport function createValTownApp(deps: ValTownAppDependencies): Hono {\n const app = new Hono()\n const now = deps.now ?? (() => new Date())\n\n app.use('*', async (context, next) => {\n const turnstileAllowed = deps.config.publicChecksEnabled &&\n deps.config.humanVerificationStatus === 'ready' && Boolean(deps.config.turnstileSiteKey)\n context.header('Content-Security-Policy', contentSecurityPolicy(turnstileAllowed))\n context.header('X-Content-Type-Options', 'nosniff')\n context.header('Referrer-Policy', 'strict-origin-when-cross-origin')\n context.header('Permissions-Policy', 'camera=(), microphone=(), geolocation=(), payment=()')\n context.header('Cross-Origin-Opener-Policy', 'same-origin')\n await next()\n })\n\n app.get('/healthz', (context) => context.json({ ok: true }))\n\n // Anonymous, read-only MCP over Streamable HTTP. It shares this app's store\n // so an agent reads exactly the checks the UI shows, and it owns its own\n // method/origin/envelope handling — including the 405 for a non-POST, which\n // is why it is registered for every method rather than POST alone.\n const mcp = createMcpHandler({\n store: deps.store,\n now,\n startCheck: deps.config.mcpStartChecksEnabled\n ? async (domain, remoteIp, queries) => {\n const outcome = await submitCheck(deps, {\n domain,\n queries,\n token: null,\n remoteIp,\n now: now(),\n admission: 'mcp',\n })\n return { record: (await deps.store.get(outcome.record.id)) ?? outcome.record, reused: outcome.reused }\n }\n : undefined,\n })\n app.all('/mcp', (context) => mcp(context.req.raw))\n // Immutable: the document references these with a content hash, so a changed\n // asset arrives under a new URL rather than waiting out a TTL.\n app.get('/assets/canonry-ui.css', (context) => {\n context.header('Cache-Control', 'public, max-age=31536000, immutable')\n return context.body(deps.assets.styles, 200, { 'content-type': 'text/css; charset=utf-8' })\n })\n app.get('/assets/canonry-ui.js', (context) => {\n context.header('Cache-Control', 'public, max-age=31536000, immutable')\n return context.body(deps.assets.script, 200, { 'content-type': 'application/javascript; charset=utf-8' })\n })\n app.get('/assets/canonry-mark.svg', (context) => {\n context.header('Cache-Control', 'public, max-age=31536000, immutable')\n return context.body(deps.assets.mark, 200, { 'content-type': 'image/svg+xml; charset=utf-8' })\n })\n app.get('/assets/canonry-glyph.svg', (context) => {\n context.header('Cache-Control', 'public, max-age=31536000, immutable')\n return context.body(deps.assets.glyph, 200, { 'content-type': 'image/svg+xml; charset=utf-8' })\n })\n\n app.get('/', async (context) => {\n const requestedId = context.req.query('check')\n const stored = requestedId && CHECK_ID.test(requestedId) ? await deps.store.get(requestedId) : null\n const record = stored && !isCheckExpired(stored, now()) ? stored : null\n context.header('Cache-Control', 'no-store')\n return context.html(deps.renderPage(record))\n })\n\n app.get('/api/checks/:id', async (context) => {\n const id = context.req.param('id')\n if (!CHECK_ID.test(id)) return apiError(context, 404, 'not-found', 'Check not found.')\n const record = await deps.store.get(id)\n if (!record || isCheckExpired(record, now())) return apiError(context, 404, 'not-found', 'Check not found.')\n context.header('Cache-Control', 'no-store')\n return context.json({ check: publicCheckRecord(record) })\n })\n\n app.post('/api/checks', async (context) => {\n const payload = await parseJsonBody(context.req.raw)\n const outcome = await submitCheck(deps, {\n domain: payload.domain,\n queries: payload.queries,\n token: typeof payload.turnstileToken === 'string' ? payload.turnstileToken : null,\n remoteIp: remoteIp(context.req.raw),\n now: now(),\n })\n context.header('Cache-Control', 'no-store')\n if (outcome.dispatch === 'busy') {\n return apiError(context, 503, 'busy', 'The public check is at capacity. Try again shortly.')\n }\n return context.json(\n { check: publicCheckRecord(outcome.record), reused: outcome.reused },\n outcome.record.status === 'queued' || outcome.record.status === 'running' ? 202 : 200,\n )\n })\n\n app.post('/check', async (context) => {\n let submittedDomain: unknown = null\n try {\n const form = await parseFormBody(context.req.raw)\n submittedDomain = form.get('domain')\n const outcome = await submitCheck(deps, {\n domain: submittedDomain,\n queries: form.get('queries'),\n token: form.get('cf-turnstile-response'),\n remoteIp: remoteIp(context.req.raw),\n now: now(),\n })\n if (outcome.dispatch === 'busy') throw new PublicCheckCapacityError()\n return context.redirect(`/?check=${encodeURIComponent(outcome.record.id)}`, 303)\n } catch (error) {\n const failure = formFailureRecord(submittedDomain, now(), error)\n context.header('Cache-Control', 'no-store')\n return context.html(deps.renderPage(failure), formFailureStatus(error))\n }\n })\n\n app.notFound((context) => apiError(context, 404, 'not-found', 'Not found.'))\n app.onError((error, context) => {\n if (error instanceof PublicUrlError) return apiError(context, 400, 'invalid-domain', error.message)\n if (error instanceof HumanVerificationError) {\n const status = error.code === 'unavailable' || error.code === 'transport' ? 503 : 403\n return apiError(context, status, `human-verification-${error.code}`, error.message)\n }\n if (error instanceof PublicQuotaError) return apiError(context, 429, `${error.scope}-quota`, error.message)\n if (error instanceof PublicCheckAdmissionBusyError) return apiError(context, 503, 'admission-busy', error.message)\n if (error instanceof PublicCheckCapacityError) return apiError(context, 503, 'busy', error.message)\n if (error instanceof PublicCheckUnavailableError) return apiError(context, 503, 'unavailable', error.message)\n if (error instanceof BodyTooLargeError) {\n return apiError(context, 413, 'body-too-large', 'Request body is too large.')\n }\n if (error instanceof InvalidBodyError) return apiError(context, 400, 'invalid-body', error.message)\n return apiError(context, 500, 'internal-error', 'The public check could not be started.')\n })\n\n return app\n}\n\ninterface CheckSubmission {\n record: CheckRecord\n reused: boolean\n dispatch: 'completed' | 'busy' | 'ignored'\n}\n\ninterface SubmitInput {\n domain: unknown\n /** Raw caller input; normalized here, never trusted as given. */\n queries?: unknown\n token: string | null\n remoteIp: string | null\n now: Date\n /**\n * Which admission rules apply. `mcp` skips human verification, which an\n * agent cannot perform, and spends from a separate, tighter daily bucket so\n * it cannot consume the browser allowance. Every other control — the global\n * daily cap, the single execution lease, cache reuse — is identical.\n */\n admission?: 'browser' | 'mcp'\n}\n\nasync function submitCheck(\n deps: ValTownAppDependencies,\n input: SubmitInput,\n): Promise {\n if (!deps.config.publicChecksEnabled) {\n throw new PublicCheckUnavailableError(\n deps.config.publicChecksUnavailableMessage ?? 'Public checks are temporarily unavailable.',\n )\n }\n const target = normalizePublicDomain(input.domain)\n const userQueries = normalizeUserQueries(input.queries)\n const viaMcp = input.admission === 'mcp'\n if (!viaMcp) await deps.config.humanVerifier.verify({ token: input.token, remoteIp: input.remoteIp })\n // The questions join the reuse key. They change what the check measures, so\n // a second caller asking different questions about the same domain must not\n // be handed the first caller's answers.\n const fingerprint = checkFingerprint(CHECK_FINGERPRINT_NAMESPACE, target.domain, userQueries)\n const timestamp = input.now.toISOString()\n\n // Cached and already-active work is useful without consuming the one global\n // execution slot. This keeps same-domain retries quota- and capacity-free.\n const reusable = await deps.store.findReusable(fingerprint, timestamp)\n if (reusable) return dispatchExistingCheck(deps, reusable)\n\n const hashedClient = await hashQuotaSubject(deps.config.quotaSalt, input.remoteIp ?? 'unknown')\n // A distinct subject rather than a distinct scope: `CheckQuotaClaim.scope` is\n // a closed union, and prefixing keeps the two buckets disjoint without\n // widening a durable contract.\n const clientSubject = viaMcp ? `mcp:${hashedClient}` : hashedClient\n const clientMax = viaMcp ? deps.config.mcpPerClientDailyLimit : deps.config.perClientDailyLimit\n const day = utcDay(input.now)\n const executionLeaseOwner = crypto.randomUUID()\n const executionLeaseUntil = new Date(input.now.getTime() + PUBLIC_CHECK_EXECUTION_LEASE_MS).toISOString()\n const capacityAvailable = await deps.store.claimGlobalLease(\n PUBLIC_CHECK_EXECUTION_LEASE_NAME,\n executionLeaseOwner,\n timestamp,\n executionLeaseUntil,\n )\n if (!capacityAvailable) throw new PublicCheckCapacityError()\n\n let capacityHeld = true\n let dispatchOwnsCapacity = false\n const releaseCapacity = async () => {\n if (!capacityHeld) return\n await deps.store.releaseGlobalLease(PUBLIC_CHECK_EXECUTION_LEASE_NAME, executionLeaseOwner)\n capacityHeld = false\n }\n\n try {\n const admission = await deps.store.admit({\n candidate: newCheckRecord({\n id: crypto.randomUUID(),\n fingerprint,\n domain: target.domain,\n userQueries,\n now: input.now,\n }),\n now: timestamp,\n clientQuota: { scope: 'client', subject: clientSubject, day, max: clientMax },\n globalQuota: { scope: 'global', subject: 'all', day, max: deps.config.globalDailyLimit },\n })\n if (admission.kind === 'quota-exhausted') throw new PublicQuotaError(admission.scope)\n if (admission.kind === 'busy') throw new PublicCheckAdmissionBusyError()\n\n if (admission.kind === 'reused') {\n // A concurrent same-domain admission won. It must not inherit capacity\n // reserved by this request, so it goes through ordinary reuse dispatch.\n await releaseCapacity()\n return dispatchExistingCheck(deps, admission.record)\n }\n\n let dispatch: 'completed' | 'busy' | 'ignored' = 'ignored'\n if (admission.record.status === 'queued') {\n // Request-bound dispatch takes responsibility for this owner as soon as\n // it receives the promise. Its runner releases even a lost job claim.\n const dispatched = deps.dispatcher.dispatch(admission.record.id, { executionLeaseOwner })\n dispatchOwnsCapacity = true\n dispatch = await dispatched\n }\n return {\n record: (await deps.store.get(admission.record.id)) ?? admission.record,\n reused: admission.kind !== 'created',\n dispatch,\n }\n } finally {\n // The runner owns capacity only after dispatch receives the owner. The app\n // releases every admission, reuse, quota, and pre-dispatch error path.\n if (!dispatchOwnsCapacity) await releaseCapacity()\n }\n}\n\nasync function dispatchExistingCheck(\n deps: ValTownAppDependencies,\n record: CheckRecord,\n): Promise {\n const dispatch = record.status === 'queued' ? await deps.dispatcher.dispatch(record.id) : 'ignored'\n return {\n record: (await deps.store.get(record.id)) ?? record,\n reused: true,\n dispatch,\n }\n}\n\nfunction publicCheckRecord(\n record: CheckRecord,\n): Omit, 'fingerprint' | 'leaseOwner' | 'leaseUntil'> {\n const { fingerprint: _fingerprint, leaseOwner: _leaseOwner, leaseUntil: _leaseUntil, ...safe } = record\n return safe\n}\n\nfunction apiError(\n context: { json: (body: unknown, status?: number) => Response; header: (name: string, value: string) => void },\n status: number,\n code: string,\n message: string,\n): Response {\n context.header('Cache-Control', 'no-store')\n return context.json({ error: { code, message } }, status)\n}\n\nclass BodyTooLargeError extends Error {}\nclass InvalidBodyError extends Error {}\n\nasync function parseJsonBody(request: Request): Promise> {\n if (!request.headers.get('content-type')?.toLowerCase().includes('application/json')) {\n throw new InvalidBodyError('Expected a JSON request body.')\n }\n const text = await readLimitedBody(request)\n try {\n const parsed = JSON.parse(text)\n if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) throw new Error()\n return parsed as Record\n } catch {\n throw new InvalidBodyError('Request body must be a JSON object.')\n }\n}\n\nasync function parseFormBody(request: Request): Promise {\n if (!request.headers.get('content-type')?.toLowerCase().includes('application/x-www-form-urlencoded')) {\n throw new InvalidBodyError('Expected a form submission.')\n }\n return new URLSearchParams(await readLimitedBody(request))\n}\n\nasync function readLimitedBody(request: Request): Promise {\n const contentLength = Number(request.headers.get('content-length'))\n if (Number.isFinite(contentLength) && contentLength > MAX_BODY_BYTES) throw new BodyTooLargeError()\n if (!request.body) return ''\n const reader = request.body.getReader()\n const chunks: Uint8Array[] = []\n let length = 0\n while (true) {\n const next = await reader.read()\n if (next.done) break\n length += next.value.byteLength\n if (length > MAX_BODY_BYTES) {\n await reader.cancel()\n throw new BodyTooLargeError()\n }\n chunks.push(next.value)\n }\n const output = new Uint8Array(length)\n let offset = 0\n for (const chunk of chunks) {\n output.set(chunk, offset)\n offset += chunk.byteLength\n }\n return new TextDecoder().decode(output)\n}\n\nfunction remoteIp(request: Request): string | null {\n // Val injects this edge header. `x-forwarded-for` is caller-controlled on a\n // public val, so it is deliberately ignored for quota identity.\n const cf = request.headers.get('cf-connecting-ip')?.trim()\n if (cf && cf.length <= 128) return cf\n return null\n}\n\nasync function hashQuotaSubject(salt: string, value: string): Promise {\n const bytes = new TextEncoder().encode(`${salt}\\u0000${value}`)\n const digest = new Uint8Array(await crypto.subtle.digest('SHA-256', bytes))\n return [...digest].map((byte) => byte.toString(16).padStart(2, '0')).join('')\n}\n\n/**\n * `frame-ancestors` allows Val Town because the val's own page previews the\n * deployed site in an iframe, and `'none'` renders that preview blank — the\n * first thing anyone arriving from val.town sees. The allowance is exactly the\n * hosting platform and nothing else, so ordinary clickjacking is still blocked.\n * There is little to hijack regardless: no session, no credential, and the only\n * action is submitting a public domain.\n */\nconst FRAME_ANCESTORS = [\"'self'\", 'https://www.val.town', 'https://val.town'].join(' ')\n\n/**\n * Geist is served from jsDelivr because a Val cannot ship the font itself:\n * woff2 is binary and Val Town refuses to push binary files. It is the same\n * package and version the dashboard bundles (`@fontsource-variable/geist`), so\n * the two surfaces render in the same typeface rather than this one silently\n * falling back to a system font, which is what it did before.\n */\nconst FONT_CDN = 'https://cdn.jsdelivr.net'\n\nfunction contentSecurityPolicy(turnstileAllowed: boolean): string {\n const turnstile = turnstileAllowed ? ' https://challenges.cloudflare.com' : ''\n return [\n \"default-src 'self'\",\n \"base-uri 'none'\",\n \"object-src 'none'\",\n `frame-ancestors ${FRAME_ANCESTORS}`,\n \"form-action 'self'\",\n `script-src 'self'${turnstile}`,\n `style-src 'self' ${FONT_CDN}`,\n `font-src ${FONT_CDN}`,\n `connect-src 'self'${turnstile}`,\n `frame-src${turnstile || \" 'none'\"}`,\n \"img-src 'self' data: https:\",\n ].join('; ')\n}\n\nfunction formFailureRecord(domain: unknown, now: Date, error: unknown): CheckRecord {\n const displayDomain = typeof domain === 'string' ? domain.trim().slice(0, 253) : ''\n const timestamp = now.toISOString()\n return {\n id: crypto.randomUUID(),\n fingerprint: '',\n domain: displayDomain,\n userQueries: [],\n status: 'failed',\n createdAt: timestamp,\n updatedAt: timestamp,\n expiresAt: null,\n result: null,\n errorCode: error instanceof PublicQuotaError ? PUBLIC_RATE_LIMITED_ERROR_CODE : 'form-submission-failed',\n errorMessage: formFailureMessage(error),\n leaseOwner: null,\n leaseUntil: null,\n }\n}\n\nfunction formFailureMessage(error: unknown): string {\n if (\n error instanceof PublicUrlError || error instanceof PublicQuotaError || error instanceof HumanVerificationError ||\n error instanceof PublicCheckUnavailableError || error instanceof PublicCheckAdmissionBusyError ||\n error instanceof PublicCheckCapacityError\n ) return error.message\n if (error instanceof BodyTooLargeError) return 'The submission was too large. Enter only a domain.'\n if (error instanceof InvalidBodyError) return 'The form could not be read. Try again.'\n return 'The public check could not be started. Try again later.'\n}\n\nfunction formFailureStatus(error: unknown): 400 | 403 | 413 | 429 | 503 {\n if (error instanceof PublicUrlError || error instanceof InvalidBodyError) return 400\n if (error instanceof BodyTooLargeError) return 413\n if (error instanceof PublicQuotaError) return 429\n if (\n error instanceof PublicCheckUnavailableError || error instanceof PublicCheckAdmissionBusyError ||\n error instanceof PublicCheckCapacityError\n ) return 503\n if (error instanceof HumanVerificationError) return error.code === 'invalid' ? 403 : 503\n return 503\n}\n",[],[168,313,305],"app","3d119210-fb81-4a4a-9cbb-b0eaa18880b4",3,["D",1788456961083],[187],[168,313],["D",1788456960824],[186,188,189,190,192],[168],["D",1788456812405],["D",1789501263826],{"_100":99,"_108":104},{"_100":99,"_101":102,"_103":104,"_18":-5,"_105":106,"_107":24},{"_13":89,"_31":90,"_42":41,"_91":43,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":44,"_98":99},"ctx",{"_82":-5,"_128":360,"_361":362,"_363":364,"_365":24,"_366":24,"_367":24,"_368":59,"_369":-5,"_370":-7,"_371":-7,"_372":63,"_373":24,"_374":24,"_375":-5,"_376":24,"_377":24,"_378":24,"_379":-5},"ENV",{"_331":332,"_333":334,"_335":90,"_336":337,"_338":339,"_340":341,"_342":343,"_344":345,"_346":347,"_348":349,"_350":351,"_352":353,"_354":355,"_356":357,"_358":359},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v19