[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_544":545,"_546":547},"routes/_app.x.$handle.$name",{"_100":99,"_31":43,"_109":88,"_26":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":123,"_124":24,"_125":126,"_127":57,"_128":-5,"_129":-5,"_130":131},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",16,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":20,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","artifacts/kaggriculture_joined_research_plan_v1.md","latestPath","fileId","4178cfe2-aa32-11f1-9903-1607ee4eb77e","name","kaggriculture_joined_research_plan_v1.md","fileType","content","# Kaggriculture — Joined Research Plan V1\n\nStatus: JOINED_RESEARCHING\nAgent: A4-KAGGRICULTURE\nHuman gate: completed by user (competition joined; identity verification completed)\nDate: 2026-09-06\n\n## Official mechanics confirmed\n\n- 30 days × 24 turns = 720 turns.\n- One farmer action per turn; market orders can also be submitted, up to the configured per-turn limit.\n- Winning is determined by final bank balance; rating movement uses win/loss/tie rather than coin margin.\n- Up to 5 submissions/day; latest 2 submissions are tracked for active/final evaluation.\n- A validation episode runs the submission against a copy of itself before ladder entry.\n- Final evaluation continues after submission lock and culminates in a Bradley–Terry tournament.\n- Observation exposes both farms publicly, shared market state and town state; own shed/seeds/inventories are private.\n- Market inventory and prices are shared; player production can therefore alter the price environment faced by both agents.\n- Submission contract: root `main.py` with top-level `agent(obs)`.\n- No ingress/egress during episode evaluation.\n\n## Current strategic thesis\n\nDo not use an LLM per turn. Treat the problem as a deterministic control system with an adaptive macro layer.\n\nControl stack:\n\n1. macro allocation policy — crop/animal/land/labor/market regime;\n2. persistent task graph — avoid turn-by-turn retargeting;\n3. deterministic path/action executor — minimize walking/thrashing;\n4. market executor — exploit shared inventory/price dynamics;\n5. opponent model — infer likely supply pressure from public farm state;\n6. horizon controller — alter investment/liquidation as remaining turns shrink.\n\n## Neurônio variants\n\nK0 — Deterministic Control\n- stable regression oracle;\n- correct action schema;\n- no unnecessary complexity.\n\nK1 — Labor/Route Optimizer\n- hypothesis: reducing travel and retargeting improves win rate more than adding valuation complexity.\n\nK2 — Livestock/Fertilizer Flywheel\n- hypothesis: animal ROI is understated if product + fertilizer streams are not jointly valued.\n\nK3 — Opponent-Aware Anti-Glut\n- hypothesis: public opponent farm state predicts future shared-market supply enough to change profitable production/sale timing.\n\nK4 — Demand/Horizon Portfolio\n- hypothesis: explicit remaining-horizon value improves investment, allocation and liquidation timing.\n\nK5 — Hybrid Champion Candidate\n- blocked until K2/K3/K4 mechanisms individually survive ablation and regression testing.\n\n## Evidence discipline\n\nPublic replay data is useful for calibration, controls and matchup simulation, but copied action tapes are not a valid competitive strategy. Every external code/data source must satisfy competition licensing and accessibility rules. Public leaderboard/replay performance is historical evidence, not proof that a copied strategy will remain competitive.\n\n## Evaluation protocol\n\nFor every variant:\n\n1. validation/self-play smoke;\n2. deterministic seed set;\n3. mirrored seats where possible;\n4. fixed baseline opponents;\n5. replay-derived sparring opponents only as controls/reference;\n6. record wins/losses/ties, terminal bank, movement rate, pass rate, runtime errors;\n7. mutation/ablation against parent;\n8. promote only when the improvement survives repeated seed/opponent sets.\n\nPrimary selection metric: win rate / Bradley–Terry-relevant outcomes.\nSecondary diagnostics: terminal bank, movement efficiency, runtime stability and opponent-specific failure modes.\n\n## Immediate build order\n\n1. K0 exact-contract baseline.\n2. K1 persistent task graph + nearest/route-aware executor.\n3. Harness that runs paired/mirrored matches across seeds.\n4. Mechanic/reference calibration from official engine/reference data.\n5. K2/K3/K4 independently.\n6. K5 only after evidence-gated fusion.\n7. First Kaggle submission only after local/official-env smoke is clean.\n\n## Economic state\n\nGross revenue: 0\nNet revenue: 0\nTrial terminal: false\nSelection state: INCUBATION\nNo offspring allowed yet.\n","createdAt",["D",1788726824853],"branchVersion","branchId","f6b18fe8-8463-44a7-8607-6aadc93451c1","id","1cb1fea8-3811-42e9-b0ad-3a5ec2d20472","chat-native-maestro",["D",1788707065045],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Cloud runtime for ChatGPT-native orchestration","imageUrl","6cc24525-830b-4db3-9c9c-fd19fb50e91f","pinnedFileId","3fca0dce-aa04-11f1-bd83-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0773d-9d6b-7580-a53a-683363c351c8","tursoName","1cb1fea8381142e9b0ad3a5ec2d20472","tursoHostname","1cb1fea8381142e9b0ad3a5ec2d20472-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789575110896],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":53,"_105":106,"_107":24},"branch",{"_13":87,"_31":88,"_41":40,"_89":42,"_90":91,"_92":93,"_94":48,"_95":42,"_96":63,"_97":43,"_98":99},"isOwned",930,"economic-v0.6","projectId","forkedBranchId","22a6b9fb-662c-4823-89b0-7ec510c82fcd","forkedBranchVersion",68,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","cleitoncosta","handle","displayName","Cleiton Costa","avatar","https://lh3.googleusercontent.com/a/ACg8ocIgWisWQiXts_2fy5iRiRgl8A6c7Ef94eqE3ur-4mlyUrpCBmQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":539,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":540,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":541,"_82":542,"_84":543,"_86":24},"tree",[292,297,304,313,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331],"files",[292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331],"counts",{"_282":61,"_283":250,"_284":61,"_285":286,"_287":288},"contents",[138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156],"upstreamProject","upstreamBranch",{"_41":91,"_36":132,"_133":134,"_31":135,"_89":42,"_13":93,"_90":-5,"_92":-5,"_136":137,"_45":-5,"_86":24,"_47":48,"_98":99,"_62":63,"_97":43},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1788707065045],"updatedAt",["D",1788709584572],"main","lockfileKey","1788709584801-esm.town_v_cleitoncosta_chat-native-maestro@68-main",{"_41":276,"_31":277,"_29":278,"_160":-5,"_39":40,"_38":279,"_162":57,"_36":280,"_13":61,"_33":264,"_34":-5,"_23":24,"_166":-5,"_26":281},{"_41":271,"_31":272,"_29":273,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":274,"_13":61,"_33":264,"_34":-5,"_23":24,"_166":-5,"_26":275},{"_41":266,"_31":267,"_29":268,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":269,"_13":61,"_33":264,"_34":-5,"_23":24,"_166":-5,"_26":270},{"_41":260,"_31":261,"_29":262,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":263,"_13":61,"_33":264,"_34":-5,"_23":24,"_166":-5,"_26":265},{"_41":254,"_31":255,"_29":256,"_160":-5,"_39":40,"_38":161,"_162":24,"_36":257,"_13":61,"_33":20,"_34":258,"_23":24,"_166":-5,"_26":259},{"_41":247,"_31":248,"_29":249,"_160":-5,"_39":40,"_38":250,"_162":57,"_36":251,"_13":61,"_33":164,"_34":252,"_23":24,"_166":-5,"_26":253},{"_41":240,"_31":241,"_29":242,"_160":-5,"_39":40,"_38":243,"_162":57,"_36":244,"_13":61,"_33":164,"_34":245,"_23":24,"_166":-5,"_26":246},{"_41":233,"_31":234,"_29":235,"_160":-5,"_39":40,"_38":236,"_162":57,"_36":237,"_13":161,"_33":164,"_34":238,"_23":24,"_166":-5,"_26":239},{"_41":226,"_31":227,"_29":228,"_160":-5,"_39":40,"_38":229,"_162":57,"_36":230,"_13":61,"_33":164,"_34":231,"_23":24,"_166":-5,"_26":232},{"_41":219,"_31":220,"_29":221,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":222,"_13":61,"_33":223,"_34":224,"_23":24,"_166":-5,"_26":225},{"_41":212,"_31":213,"_29":214,"_160":-5,"_39":40,"_38":215,"_162":57,"_36":216,"_13":61,"_33":164,"_34":217,"_23":24,"_166":-5,"_26":218},{"_41":206,"_31":207,"_29":208,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":209,"_13":61,"_33":164,"_34":210,"_23":24,"_166":-5,"_26":211},{"_41":199,"_31":200,"_29":201,"_160":-5,"_39":40,"_38":202,"_162":57,"_36":203,"_13":61,"_33":164,"_34":204,"_23":24,"_166":-5,"_26":205},{"_41":193,"_31":194,"_29":195,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":196,"_13":61,"_33":164,"_34":197,"_23":24,"_166":-5,"_26":198},{"_41":187,"_31":188,"_29":189,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":190,"_13":61,"_33":164,"_34":191,"_23":24,"_166":-5,"_26":192},{"_41":181,"_31":182,"_29":183,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":184,"_13":61,"_33":164,"_34":185,"_23":24,"_166":-5,"_26":186},{"_41":175,"_31":176,"_29":177,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":178,"_13":61,"_33":164,"_34":179,"_23":24,"_166":-5,"_26":180},{"_41":168,"_31":169,"_29":170,"_160":-5,"_39":40,"_38":171,"_162":57,"_36":172,"_13":61,"_33":164,"_34":173,"_23":24,"_166":-5,"_26":174},{"_41":157,"_31":158,"_29":159,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":163,"_13":61,"_33":164,"_34":165,"_23":24,"_166":-5,"_26":167},"64265461-4810-40ad-beab-6f2cdc38131f","url_selftest.ts","01a077bc-2b99-740d-9881-6b7404857766","parentId",1,"latest",["D",1788715215771],"script","import { assertSafeUrl, preflightTaskNetwork } from \"./lib/url_security.ts\";\n\nconst cases = [\n \"https://example.com\",\n \"http://127.0.0.1\",\n \"http://169.254.169.254/latest/meta-data\",\n \"http://localhost\",\n \"https://user:pass@example.com\",\n \"https://example.com:8443\"\n];\n\nconst results: Record = {};\nfor (const value of cases) {\n try {\n results[value] = { ok: true, result: await assertSafeUrl(value) };\n } catch (error) {\n results[value] = { ok: false, error: error instanceof Error ? error.message : String(error) };\n }\n}\n\nlet allowedHostBlocked = false;\ntry {\n await preflightTaskNetwork({\n runId: \"url-selftest\",\n targetUrl: \"https://example.com\",\n risk: \"read_only\",\n purpose: \"URL security selftest\",\n allowedHosts: [\"127.0.0.1\"],\n steps: [{ action: \"expect_url\", contains: \"example.com\" }],\n });\n} catch {\n allowedHostBlocked = true;\n}\n\nconsole.log(JSON.stringify({ results, allowedHostBlocked }, null, 2));\n","label",[158],"f22c482d-b1ea-423d-a58b-324908fda53d","strategy_variant_migrate.ts","5a26e050-aa1a-11f1-9414-1607ee4eb77e",13,["D",1788716558331],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst now = new Date().toISOString();\nawait sqlite.batch([\n { sql: `CREATE TABLE IF NOT EXISTS strategy_variants (\n variant_id TEXT PRIMARY KEY,\n agent_id TEXT NOT NULL,\n parent_variant_id TEXT,\n generation INTEGER NOT NULL DEFAULT 0,\n name TEXT NOT NULL,\n hypothesis TEXT NOT NULL,\n mutation TEXT NOT NULL,\n status TEXT NOT NULL,\n evidence_state TEXT NOT NULL DEFAULT 'UNVERIFIED',\n benchmark_metric TEXT,\n benchmark_value REAL,\n artifact_pointer TEXT,\n notes TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n FOREIGN KEY(agent_id) REFERENCES economic_agents(agent_id),\n FOREIGN KEY(parent_variant_id) REFERENCES strategy_variants(variant_id)\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS variant_evaluations (\n evaluation_id TEXT PRIMARY KEY,\n variant_id TEXT NOT NULL,\n opponent_variant_id TEXT,\n environment TEXT NOT NULL,\n seed_set TEXT,\n seat_mode TEXT,\n episodes INTEGER NOT NULL DEFAULT 0,\n wins INTEGER NOT NULL DEFAULT 0,\n losses INTEGER NOT NULL DEFAULT 0,\n ties INTEGER NOT NULL DEFAULT 0,\n mean_terminal_bank REAL,\n median_terminal_bank REAL,\n movement_rate REAL,\n pass_rate REAL,\n runtime_errors INTEGER NOT NULL DEFAULT 0,\n evidence_state TEXT NOT NULL,\n evidence_json TEXT,\n created_at TEXT NOT NULL,\n FOREIGN KEY(variant_id) REFERENCES strategy_variants(variant_id)\n )` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_strategy_variants_agent ON strategy_variants(agent_id,generation,status)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_variant_evals_variant ON variant_evaluations(variant_id,created_at)` },\n { sql: `INSERT INTO schema_meta(key,value,updated_at) VALUES('strategy_variant_schema_version','0.6.1-candidate',?)\n ON CONFLICT(key) DO UPDATE SET value=excluded.value,updated_at=excluded.updated_at`, args:[now] },\n]);\n\nconst variants = [\n ['K0','A4-KAGGRICULTURE',null,0,'Deterministic Control','A compact deterministic executor provides a stable regression oracle and baseline','baseline_control','DESIGNED','UNVERIFIED','artifacts/kaggriculture_neuron_protocol_v1.md'],\n ['K1','A4-KAGGRICULTURE','K0',1,'Labor/Route Optimizer','Reducing walking/thrashing produces larger gains than more complex crop valuation','route_executor','DESIGNED','UNVERIFIED','artifacts/kaggriculture_neuron_protocol_v1.md'],\n ['K2','A4-KAGGRICULTURE','K1',2,'Livestock/Fertilizer Flywheel','Jointly valuing animal product plus fertilizer stream improves asset ROI','livestock_fertilizer','DESIGNED','UNVERIFIED','artifacts/kaggriculture_neuron_protocol_v1.md'],\n ['K3','A4-KAGGRICULTURE','K1',2,'Opponent-Aware Anti-Glut','Visible opponent production can predict shared-market glut early enough to alter profitable production/sale timing','opponent_forecast','DESIGNED','UNVERIFIED','artifacts/kaggriculture_neuron_protocol_v1.md'],\n ['K4','A4-KAGGRICULTURE','K1',2,'Demand/Horizon Portfolio','Explicit remaining-horizon NPV and observed town demand improve allocation and liquidation','horizon_npv','DESIGNED','UNVERIFIED','artifacts/kaggriculture_neuron_protocol_v1.md'],\n ['K5','A4-KAGGRICULTURE','K1',3,'Hybrid Champion Candidate','Only mechanisms that independently survive ablation should be fused into a challenger','evidence_gated_fusion','BLOCKED_BY_EVIDENCE','UNVERIFIED','artifacts/kaggriculture_neuron_protocol_v1.md'],\n] as const;\n\nfor (const [id,agent,parent,generation,name,hypothesis,mutation,status,evidence,artifact] of variants) {\n await sqlite.execute({\n sql:`INSERT INTO strategy_variants(variant_id,agent_id,parent_variant_id,generation,name,hypothesis,mutation,status,evidence_state,artifact_pointer,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(variant_id) DO UPDATE SET name=excluded.name,hypothesis=excluded.hypothesis,mutation=excluded.mutation,status=excluded.status,evidence_state=excluded.evidence_state,artifact_pointer=excluded.artifact_pointer,updated_at=excluded.updated_at`,\n args:[id,agent,parent,generation,name,hypothesis,mutation,status,evidence,artifact,now,now]\n });\n}\n\nconst rows = await sqlite.execute(`SELECT variant_id,parent_variant_id,generation,name,status,evidence_state FROM strategy_variants WHERE agent_id='A4-KAGGRICULTURE' ORDER BY generation,variant_id`);\nconsole.log(JSON.stringify({status:'PASS',version:'0.6.1-candidate',variants:rows.rows},null,2));\n",[169],"d17e92c8-0409-47b8-9ab8-94a9e01ee097","status.ts","01a077bc-2b99-740d-9881-6727e0b68381",["D",1788715215771],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { providerState } from \"./providers/router.ts\";\nimport { getProviderHealth } from \"./lib/provider_health.ts\";\nimport { POLICY } from \"./lib/policy.ts\";\nimport { COST_NOTES } from \"./lib/cost.ts\";\n\nconst schema = await sqlite.execute(\"SELECT key,value,updated_at FROM schema_meta ORDER BY key\");\nconst counts = await sqlite.execute(\"SELECT status, COUNT(*) AS count FROM browser_tasks GROUP BY status ORDER BY status\");\nconst census = await sqlite.execute(\"SELECT provider, priority, state, recurring_free, notes, updated_at FROM provider_census ORDER BY priority\");\nconst recent = await sqlite.execute(\"SELECT run_id,status,provider,attempt_count,error,updated_at FROM browser_tasks ORDER BY id DESC LIMIT 10\");\nconst attemptMetrics = await sqlite.execute(`\n SELECT provider,status,COUNT(*) AS attempts,\n CAST(AVG(duration_ms) AS INTEGER) AS avg_duration_ms,\n COALESCE(SUM(estimated_units),0) AS estimated_units\n FROM browser_attempts\n GROUP BY provider,status\n ORDER BY provider,status\n`);\n\nconst result = {\n service: \"chat-native-maestro\",\n version: POLICY.version,\n status: \"ready\",\n authenticatedDiagnostic: true,\n schema: schema.rows,\n providers: providerState(),\n providerHealth: await getProviderHealth(),\n taskCounts: counts.rows,\n providerCensus: census.rows,\n attemptMetrics: attemptMetrics.rows,\n recentReceipts: recent.rows,\n policy: POLICY,\n costNotes: COST_NOTES,\n environmentRequirements: {\n kernel: \"KERNEL_API_KEY\",\n browserless: \"BROWSERLESS_TOKEN\",\n },\n networkPreflight: {\n dnsOverHttps: \"cloudflare-dns.com\",\n failClosed: true,\n blocksPrivateAndReservedIpRanges: true,\n blocksUrlUserinfo: true,\n blocksNonstandardPorts: true,\n },\n automaticSchedule: \"disabled\",\n timestamp: new Date().toISOString(),\n};\n\nconsole.log(JSON.stringify(result, null, 2));\n",[176],"abd98a94-ae35-4165-976e-a3c5acbfba2b","stateful_selftest.ts","01a077bc-2b99-740d-9881-604153bba708",["D",1788715215771],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { decideDisposition, withTimeout } from \"./lib/policy.ts\";\nimport { providerAvailable, recordProviderOutcome } from \"./lib/provider_health.ts\";\nimport type { BrowserReceipt } from \"./lib/types.ts\";\n\nconst now = new Date().toISOString();\nconst syntheticFail = (n: number): BrowserReceipt => ({\n runId: `circuit-selftest-${n}`,\n provider: \"kernel\",\n status: \"FAIL\",\n error: `synthetic failure ${n}`,\n durationMs: 1,\n});\n\nlet timeoutBlocked = false;\ntry {\n await withTimeout(new Promise((resolve) => setTimeout(resolve, 50)), 5, \"synthetic timeout\");\n} catch (error) {\n timeoutBlocked = String(error).includes(\"timed out\");\n}\n\nconst dispositions = {\n readOnlyFirstFail: decideDisposition(\"read_only\", \"FAIL\", 1),\n readOnlyBudgetExhausted: decideDisposition(\"read_only\", \"FAIL\", 2),\n writeFail: decideDisposition(\"consequential\", \"FAIL\", 1),\n};\n\nlet circuitAfterThree: unknown;\nlet availableAfterThree: unknown;\ntry {\n await sqlite.execute({\n sql: `UPDATE provider_health SET circuit_state='CLOSED', consecutive_failures=0, open_until=NULL,\n last_success_at=NULL,last_failure_at=NULL,last_error=NULL,updated_at=? WHERE provider='kernel'`,\n args: [now],\n });\n await recordProviderOutcome(\"kernel\", syntheticFail(1));\n await recordProviderOutcome(\"kernel\", syntheticFail(2));\n await recordProviderOutcome(\"kernel\", syntheticFail(3));\n circuitAfterThree = (await sqlite.execute(\"SELECT provider,circuit_state,consecutive_failures,open_until FROM provider_health WHERE provider='kernel'\")).rows[0];\n availableAfterThree = await providerAvailable(\"kernel\");\n} finally {\n await sqlite.execute({\n sql: `UPDATE provider_health SET circuit_state='CLOSED', consecutive_failures=0, open_until=NULL,\n last_success_at=NULL,last_failure_at=NULL,last_error=NULL,updated_at=? WHERE provider='kernel'`,\n args: [new Date().toISOString()],\n });\n}\n\nconsole.log(JSON.stringify({\n version: \"0.5.0\",\n timeoutBlocked,\n dispositions,\n circuitAfterThree,\n availableAfterThree,\n restoredKernelHealth: (await sqlite.execute(\"SELECT provider,circuit_state,consecutive_failures,open_until FROM provider_health WHERE provider='kernel'\")).rows[0],\n}, null, 2));\n",[182],"73e9e358-f044-43f3-8b0c-ee8e3f20e4f8","snapshot_export.ts","01a077bc-2b99-740d-9881-5e611370bab8",["D",1788715215771],"import JSZip from \"npm:jszip\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\nconst release = \"65-main\";\nconst paths = [\n \"main.ts\",\n \"status.ts\",\n \"runner.ts\",\n \"selftest.ts\",\n \"stateful_selftest.ts\",\n \"url_selftest.ts\",\n \"README.md\",\n \"lib/types.ts\",\n \"lib/dsl.ts\",\n \"lib/policy.ts\",\n \"lib/provider_health.ts\",\n \"lib/cost.ts\",\n \"lib/url_security.ts\",\n \"providers/router.ts\",\n \"providers/kernel.ts\",\n \"providers/browserless.ts\",\n \"docs/CURRENT_STATE.md\",\n \"docs/PROVIDER_CENSUS.md\",\n \"docs/ACTIVATION_RUNBOOK.md\",\n \"docs/TASK_SCHEMA.md\",\n \"docs/SMOKE_TASK.json\",\n \"docs/SECURITY_MODEL.md\",\n];\n\nconst zip = new JSZip();\nconst manifest: Array<{ path: string; bytes: number; sha256: string; sourceUrl: string }> = [];\nconst enc = new TextEncoder();\nconst hex = (bytes: ArrayBuffer) => [...new Uint8Array(bytes)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n\nfor (const path of paths) {\n const sourceUrl = `https://esm.town/v/cleitoncosta/chat-native-maestro@${release}/${path}`;\n const response = await fetch(sourceUrl, { signal: AbortSignal.timeout(10_000) });\n if (!response.ok) throw new Error(`${path}: HTTP ${response.status}`);\n let text = await response.text();\n if (path.endsWith(\".ts\") || path.endsWith(\".tsx\")) {\n text = text.replace(/^\\/\\* Open in Val Town: [^\\n]+ \\*\\/\\n/, \"\");\n }\n const bytes = enc.encode(text);\n const sha256 = hex(await crypto.subtle.digest(\"SHA-256\", bytes));\n manifest.push({ path, bytes: bytes.byteLength, sha256, sourceUrl });\n zip.file(path, text);\n}\n\nconst metadata = {\n name: \"CHATGPT_CHAT_NATIVE_MAESTRO_V0_5_0_CLOUD_SNAPSHOT\",\n sourceVal: \"cleitoncosta/chat-native-maestro\",\n sourceBranchRelease: release,\n appVersion: \"0.5.0\",\n exportedAt: new Date().toISOString(),\n fileCount: paths.length,\n credentialsIncluded: false,\n databaseContentsIncluded: false,\n note: \"Source files fetched from immutable esm.town release URLs; esm.town TypeScript display header removed before packaging.\",\n};\nzip.file(\"LIVE_EXPORT_METADATA.json\", JSON.stringify(metadata, null, 2));\nzip.file(\"SOURCE_MANIFEST.json\", JSON.stringify(manifest, null, 2));\nconst base64 = await zip.generateAsync({ type: \"base64\", compression: \"DEFLATE\", compressionOptions: { level: 9 } });\nconst blobKey = \"release:v0.5.0:source.zip.b64\";\nawait blob.set(blobKey, base64);\nconst base64Sha256 = hex(await crypto.subtle.digest(\"SHA-256\", enc.encode(base64)));\nconsole.log(JSON.stringify({ metadata, manifest, blobKey, base64Length: base64.length, base64Sha256 }));\n",[188],"53ccefb1-9a83-4be5-a76f-668e29910d84","selftest.ts","01a077bc-2b99-740d-9881-5a19ff4d14c8",["D",1788715215771],"import { validateTask } from \"./lib/dsl.ts\";\nimport { providerState } from \"./providers/router.ts\";\nimport { POLICY } from \"./lib/policy.ts\";\nimport { getProviderHealth } from \"./lib/provider_health.ts\";\n\nconst validRead = {\n runId: \"selftest-read-v05\",\n targetUrl: \"https://example.com\",\n risk: \"read_only\" as const,\n purpose: \"Validate V0.5 DSL without opening a browser\",\n evidenceRetention: \"minimal\" as const,\n steps: [{ action: \"expect_text\" as const, text: \"Example Domain\" }],\n};\n\nconst blockedWrite = {\n runId: \"selftest-write-v05\",\n targetUrl: \"https://example.com\",\n risk: \"consequential\" as const,\n approved: false,\n purpose: \"Negative control for approval gate\",\n steps: [{ action: \"click\" as const, selector: \"button\" }],\n};\n\nconst blockedSecret = {\n runId: \"selftest-secret-v05\",\n targetUrl: \"https://example.com\",\n risk: \"read_only\" as const,\n approved: false,\n purpose: \"Negative control for secret resolution gate\",\n steps: [{ action: \"fill_secret\" as const, selector: \"#password\", envVar: \"EXAMPLE_PASSWORD\" }],\n};\n\nconst invalidProvider = {\n ...validRead,\n runId: \"selftest-provider-v05\",\n preferredProvider: \"imaginary-provider\" as any,\n};\n\nconst blockedValueExtraction = {\n ...validRead,\n runId: \"selftest-value-v05\",\n steps: [{ action: \"extract_attribute\" as const, selector: \"#password\", attribute: \"value\", key: \"password\" }],\n};\n\nconst result = {\n version: POLICY.version,\n validReadErrors: validateTask(validRead),\n blockedWriteErrors: validateTask(blockedWrite),\n blockedSecretErrors: validateTask(blockedSecret),\n invalidProviderErrors: validateTask(invalidProvider),\n blockedValueExtractionErrors: validateTask(blockedValueExtraction),\n providers: providerState(),\n providerHealth: await getProviderHealth(),\n policy: POLICY,\n expected: {\n validReadErrors: [],\n blockedWriteContains: \"NEEDS_APPROVAL\",\n blockedSecretContains: \"NEEDS_SECRET_APPROVAL\",\n invalidProviderContains: \"invalid preferredProvider\",\n valueExtractionBlocked: true,\n providersConfigured: false,\n },\n};\n\nconsole.log(JSON.stringify(result, null, 2));\n",[194],"4c29f586-3db0-4d31-84e4-90a8a3bc8396","selection_engine.ts","ef689386-aa18-11f1-8b71-1607ee4eb77e",11,["D",1788715949727],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { rankGeneration, offspringPlan, type SelectionCandidate, type SelectionResult } from \"./lib/neuron_evolution.ts\";\n\nconst now = new Date().toISOString();\n\nconst agents = await sqlite.execute(`\n SELECT a.agent_id,a.generation,\n COALESCE(SUM(t.gross_revenue),0) AS gross,\n COALESCE(SUM(t.browser_cost+t.llm_cost+t.api_cost+t.hosting_cost+t.platform_fee+t.transaction_cost),0) AS cost,\n COALESCE(SUM(t.net_revenue),0) AS net,\n COALESCE(SUM(CASE WHEN t.operationally_eligible=1 AND t.terminal=1 THEN 1 ELSE 0 END),0) AS terminal_trials,\n COALESCE(SUM(CASE WHEN t.operationally_eligible=1 AND t.terminal=1 AND t.net_revenue>0 THEN 1 ELSE 0 END),0) AS successful_trials,\n COALESCE(SUM(CASE WHEN t.operationally_eligible=1 AND t.terminal=1 AND t.net_revenue<=0 THEN 1 ELSE 0 END),0) AS failed_trials,\n COALESCE(SUM(CASE WHEN t.operationally_eligible=1 AND t.terminal=0 THEN 1 ELSE 0 END),0) AS active_eligible_trials\n FROM economic_agents a\n LEFT JOIN economic_trials t ON t.agent_id=a.agent_id\n GROUP BY a.agent_id,a.generation\n ORDER BY a.generation,a.agent_id\n`);\n\ntype Row = Record;\ntype Derived = { row: Row; candidate: SelectionCandidate };\nconst derived: Derived[] = agents.rows.map((row: Row) => {\n const terminalTrials = Number(row.terminal_trials ?? 0);\n const activeEligibleTrials = Number(row.active_eligible_trials ?? 0);\n return {\n row,\n candidate: {\n agentId: String(row.agent_id),\n netRevenue: Number(row.net ?? 0),\n operationallyEligible: terminalTrials > 0,\n terminal: terminalTrials > 0 && activeEligibleTrials === 0,\n },\n };\n});\n\nconst results = new Map();\nconst generations = [...new Set(derived.map((x) => Number(x.row.generation)))].sort((a,b)=>a-b);\nfor (const generation of generations) {\n const group = derived.filter((x) => Number(x.row.generation) === generation);\n for (const result of rankGeneration(group.map((x) => x.candidate))) results.set(result.agentId, result);\n}\n\nconst statements: Array<{sql:string;args:Array}> = [];\nconst plans: Array> = [];\nfor (const item of derived) {\n const result = results.get(item.candidate.agentId)!;\n const gross = Number(item.row.gross ?? 0);\n const cost = Number(item.row.cost ?? 0);\n const terminalTrials = Number(item.row.terminal_trials ?? 0);\n const successfulTrials = Number(item.row.successful_trials ?? 0);\n const failedTrials = Number(item.row.failed_trials ?? 0);\n statements.push({\n sql: `INSERT INTO agent_fitness(agent_id,selection_state,lifetime_gross,lifetime_cost,lifetime_net,benchmark_net,terminal_trials,successful_trials,failed_trials,rank,offspring_count,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(agent_id) DO UPDATE SET\n selection_state=excluded.selection_state,\n lifetime_gross=excluded.lifetime_gross,\n lifetime_cost=excluded.lifetime_cost,\n lifetime_net=excluded.lifetime_net,\n benchmark_net=CASE WHEN excluded.lifetime_net>agent_fitness.benchmark_net THEN excluded.lifetime_net ELSE agent_fitness.benchmark_net END,\n terminal_trials=excluded.terminal_trials,\n successful_trials=excluded.successful_trials,\n failed_trials=excluded.failed_trials,\n rank=excluded.rank,\n offspring_count=excluded.offspring_count,\n updated_at=excluded.updated_at`,\n args: [result.agentId,result.state,gross,cost,result.netRevenue,Math.max(0,result.benchmark),terminalTrials,successfulTrials,failedTrials,result.rank ?? null,result.offspringCount,now],\n });\n if (result.state === \"DEAD\" || result.state === \"SURVIVOR\") {\n statements.push({\n sql: `UPDATE economic_agents SET status=?,updated_at=? WHERE agent_id=?`,\n args: [result.state,now,result.agentId],\n });\n }\n for (const plan of offspringPlan(result)) plans.push({ generation: Number(item.row.generation), ...plan });\n}\n\nif (statements.length) await sqlite.batch(statements);\nconst fitness = await sqlite.execute(`SELECT agent_id,selection_state,lifetime_gross,lifetime_cost,lifetime_net,benchmark_net,terminal_trials,successful_trials,failed_trials,rank,offspring_count FROM agent_fitness ORDER BY agent_id`);\n\nconsole.log(JSON.stringify({ status: \"PASS\", evaluated: derived.length, fitness: fitness.rows, offspringPlans: plans, timestamp: now }, null, 2));\n",[200],"78c1b1fd-24a3-47f8-83ee-334894178982","runner.ts","01a077bc-2b99-740d-9881-57dc4656df82",["D",1788715215771],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { BrowserReceipt, BrowserTask } from \"./lib/types.ts\";\nimport { validateTask } from \"./lib/dsl.ts\";\nimport { executeRouted } from \"./providers/router.ts\";\nimport { decideDisposition, POLICY } from \"./lib/policy.ts\";\nimport { estimateProviderUnits } from \"./lib/cost.ts\";\nimport { preflightTaskNetwork } from \"./lib/url_security.ts\";\n\nasync function recoverStaleLeases() {\n const staleBefore = new Date(Date.now() - POLICY.runningLeaseMs).toISOString();\n const now = new Date().toISOString();\n await sqlite.batch([\n {\n sql: `UPDATE browser_tasks SET status='FAIL', claimed_at=NULL, next_attempt_at=NULL,\n error='stale running lease; retry budget exhausted', updated_at=?\n WHERE status='RUNNING' AND claimed_at IS NOT NULL AND claimed_at=?`,\n args: [now, staleBefore, POLICY.maxAttemptsPerTask],\n },\n {\n sql: `UPDATE browser_tasks SET status='PENDING', claimed_at=NULL, next_attempt_at=?,\n error='stale running lease recovered', updated_at=?\n WHERE status='RUNNING' AND claimed_at IS NOT NULL AND claimed_at | undefined;\n}\n\nfunction storageReceipt(receipt: BrowserReceipt, task: BrowserTask) {\n if (task.evidenceRetention === \"full\") return receipt;\n const meta = receipt.providerMeta ?? {};\n return {\n runId: receipt.runId,\n provider: receipt.provider,\n status: receipt.status,\n finalUrl: receipt.finalUrl,\n checks: receipt.checks ?? [],\n error: receipt.error,\n durationMs: receipt.durationMs,\n providerMeta: {\n fallbackFrom: meta.fallbackFrom,\n priorStatus: meta.priorStatus,\n priorError: meta.priorError,\n priorDurationMs: meta.priorDurationMs,\n networkPreflight: meta.networkPreflight,\n },\n outputsPersisted: false,\n };\n}\n\nasync function recordAttempts(taskId: number, attemptNo: number, startedAt: string, receipt: BrowserReceipt, storedReceipt: unknown) {\n const finishedAt = new Date().toISOString();\n const meta = receipt.providerMeta ?? {};\n const statements: Array<{ sql: string; args: Array }> = [];\n\n if (typeof meta.fallbackFrom === \"string\") {\n statements.push({\n sql: `INSERT INTO browser_attempts(task_id,run_id,attempt_no,provider,started_at,finished_at,status,duration_ms,error,receipt_json,estimated_units)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)`,\n args: [taskId, receipt.runId, attemptNo, meta.fallbackFrom, startedAt, finishedAt,\n String(meta.priorStatus ?? \"FAIL\"), Number(meta.priorDurationMs ?? 0),\n meta.priorError == null ? null : String(meta.priorError), null, null],\n });\n }\n\n statements.push({\n sql: `INSERT INTO browser_attempts(task_id,run_id,attempt_no,provider,started_at,finished_at,status,duration_ms,error,receipt_json,estimated_units)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)`,\n args: [taskId, receipt.runId, attemptNo, receipt.provider, startedAt, finishedAt,\n receipt.status, receipt.durationMs ?? null, receipt.error ?? null, JSON.stringify(storedReceipt), estimateProviderUnits(receipt)],\n });\n await sqlite.batch(statements);\n}\n\nasync function finishTask(row: Record, task: BrowserTask, receipt: BrowserReceipt, storedReceipt: unknown) {\n const id = Number(row.id);\n const attemptCount = Number(row.attempt_count);\n const now = new Date().toISOString();\n const disposition = decideDisposition(task.risk, receipt.status, attemptCount);\n const next = disposition.retryable ? new Date(Date.now() + disposition.retryDelayMs).toISOString() : null;\n await sqlite.execute({\n sql: `UPDATE browser_tasks SET status=?, provider=?, receipt_json=?, error=?, updated_at=?, claimed_at=NULL, next_attempt_at=? WHERE id=?`,\n args: [disposition.taskStatus, receipt.provider, JSON.stringify(storedReceipt), receipt.error ?? null, now, next, id],\n });\n}\n\nasync function blockTask(row: Record, task: BrowserTask | undefined, errors: string[]) {\n const id = Number(row.id);\n const receipt = { runId: task?.runId ?? String(row.run_id), status: \"BLOCKED\", errors };\n const now = new Date().toISOString();\n await sqlite.batch([\n {\n sql: `UPDATE browser_tasks SET status='BLOCKED', provider=?, receipt_json=?, error=?, updated_at=?, claimed_at=NULL, next_attempt_at=NULL WHERE id=?`,\n args: [task?.preferredProvider ?? \"validation\", JSON.stringify(receipt), errors.join(\"; \"), now, id],\n },\n {\n sql: `INSERT INTO browser_attempts(task_id,run_id,attempt_no,provider,started_at,finished_at,status,error,receipt_json,estimated_units)\n VALUES(?,?,?,?,?,?,?,?,?,?)`,\n args: [id, String(row.run_id), Number(row.attempt_count), task?.preferredProvider ?? \"validation\",\n String(row.claimed_at ?? now), now, \"BLOCKED\", errors.join(\"; \"), JSON.stringify(receipt), null],\n },\n ]);\n console.log(JSON.stringify(receipt, null, 2));\n return receipt;\n}\n\nasync function main() {\n await recoverStaleLeases();\n const row = await claimNext();\n if (!row) {\n const result = { status: \"NO_PENDING_TASK\" };\n console.log(JSON.stringify(result));\n return result;\n }\n\n let task: BrowserTask;\n try {\n task = JSON.parse(String(row.task_json)) as BrowserTask;\n } catch (error) {\n return blockTask(row, undefined, [`invalid task_json: ${error instanceof Error ? error.message : String(error)}`]);\n }\n\n const errors = validateTask(task);\n if (errors.length) return blockTask(row, task, errors);\n\n let networkPreflight: Array<{ host: string; ips: string[] }>;\n try {\n networkPreflight = await preflightTaskNetwork(task);\n } catch (error) {\n return blockTask(row, task, [`NETWORK_PREFLIGHT_BLOCKED: ${error instanceof Error ? error.message : String(error)}`]);\n }\n\n const receipt = await executeRouted(task);\n receipt.providerMeta = { ...(receipt.providerMeta ?? {}), networkPreflight };\n const storedReceipt = storageReceipt(receipt, task);\n await recordAttempts(Number(row.id), Number(row.attempt_count), String(row.claimed_at), receipt, storedReceipt);\n await finishTask(row, task, receipt, storedReceipt);\n\n console.log(JSON.stringify(receipt, null, 2));\n return receipt;\n}\n\nawait main();\n",[207],"d3478695-ab23-4ced-ba33-45fb9cac7566","neuron_selftest.ts","b37a05da-aa18-11f1-a8c4-1607ee4eb77e",9,["D",1788715849210],"import { classifyCandidate, rankGeneration, offspringPlan, MUTATION_ARCHETYPES } from \"./lib/neuron_evolution.ts\";\n\nconst incubation = classifyCandidate({ agentId: \"INC\", netRevenue: 0, operationallyEligible: false, terminal: false });\nconst running = classifyCandidate({ agentId: \"RUN\", netRevenue: 100, operationallyEligible: true, terminal: false });\nconst zero = classifyCandidate({ agentId: \"ZERO\", netRevenue: 0, operationallyEligible: true, terminal: true });\nconst loss = classifyCandidate({ agentId: \"LOSS\", netRevenue: -0.01, operationallyEligible: true, terminal: true });\nconst win = classifyCandidate({ agentId: \"WIN\", netRevenue: 12.5, operationallyEligible: true, terminal: true });\n\nconst ranked = rankGeneration([\n { agentId: \"A\", netRevenue: 100, operationallyEligible: true, terminal: true },\n { agentId: \"B\", netRevenue: 80, operationallyEligible: true, terminal: true },\n { agentId: \"C\", netRevenue: 50, operationallyEligible: true, terminal: true },\n { agentId: \"D\", netRevenue: 10, operationallyEligible: true, terminal: true },\n { agentId: \"E\", netRevenue: 1, operationallyEligible: true, terminal: true },\n { agentId: \"Z\", netRevenue: 0, operationallyEligible: true, terminal: true },\n]);\n\nconst byId = new Map(ranked.map((x) => [x.agentId, x]));\nconst topPlan = offspringPlan(byId.get(\"A\")!);\nconst deadPlan = offspringPlan(byId.get(\"Z\")!);\n\nconst checks = [\n { name: \"incubation is not killed\", pass: incubation.state === \"INCUBATION\" && incubation.offspringCount === 0 },\n { name: \"nonterminal profit is still incubation\", pass: running.state === \"INCUBATION\" && running.offspringCount === 0 },\n { name: \"terminal zero dies\", pass: zero.state === \"DEAD\" && zero.offspringCount === 0 },\n { name: \"terminal loss dies\", pass: loss.state === \"DEAD\" && loss.offspringCount === 0 },\n { name: \"positive terminal survives\", pass: win.state === \"SURVIVOR\" && win.benchmark === 12.5 },\n { name: \"highest net ranks first\", pass: byId.get(\"A\")?.rank === 1 },\n { name: \"top survivor gets more offspring than tail survivor\", pass: (byId.get(\"A\")?.offspringCount ?? 0) > (byId.get(\"E\")?.offspringCount ?? 0) },\n { name: \"dead candidate never spawns\", pass: deadPlan.length === 0 },\n { name: \"top offspring plan contains faithful replica\", pass: topPlan.some((x) => x.mutation === \"faithful_replica\") },\n { name: \"top offspring plan contains opposite hypothesis\", pass: topPlan.some((x) => x.mutation === \"opposite_hypothesis\") },\n { name: \"top offspring plan contains causal ablation\", pass: topPlan.some((x) => x.mutation === \"causal_ablation\") },\n { name: \"offspring inherit parent revenue benchmark\", pass: topPlan.every((x) => x.targetNetRevenue === 100) },\n { name: \"mutation archetypes remain unique\", pass: new Set(MUTATION_ARCHETYPES).size === MUTATION_ARCHETYPES.length },\n];\n\nconst failed = checks.filter((x) => !x.pass);\nconsole.log(JSON.stringify({\n status: failed.length ? \"FAIL\" : \"PASS\",\n checks,\n failed,\n samples: { incubation, running, zero, loss, win },\n ranked,\n topPlan,\n deadPlan,\n}, null, 2));\n\nif (failed.length) throw new Error(`neuron_selftest failed: ${failed.map((x) => x.name).join(\", \")}`);\n",[213],"0b8a62cc-6643-43ee-836c-80ffdb940f3c","main.ts","01a077bc-2b99-740d-9881-5062f5c9e3f1",["D",1788715215771],"http","export default async function (req: Request): Promise {\n if (req.method !== \"GET\") {\n return Response.json({ error: \"method_not_allowed\" }, { status: 405 });\n }\n\n return Response.json({\n service: \"chat-native-maestro\",\n version: \"0.5.0\",\n status: \"alive\",\n executionSurface: \"authenticated_val_town_plugin_only\",\n automaticExecution: \"disabled\",\n security: {\n publicEndpointWriteMethods: \"disabled\",\n detailedRuntimeState: \"not_exposed_publicly\",\n arbitraryCodeInput: \"disabled\",\n },\n });\n}\n",[220],"cc6d6013-d074-40d9-86d1-e032efb5f9ed","economic_trial_migrate.ts","c6c01576-aa18-11f1-9bd9-1607ee4eb77e",10,["D",1788715881407],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst now = new Date().toISOString();\n\nawait sqlite.batch([\n {\n sql: `CREATE TABLE IF NOT EXISTS economic_trials (\n trial_id TEXT PRIMARY KEY,\n agent_id TEXT NOT NULL,\n opportunity_id TEXT,\n lifecycle_state TEXT NOT NULL,\n operationally_eligible INTEGER NOT NULL DEFAULT 0,\n terminal INTEGER NOT NULL DEFAULT 0,\n gross_revenue REAL NOT NULL DEFAULT 0,\n browser_cost REAL NOT NULL DEFAULT 0,\n llm_cost REAL NOT NULL DEFAULT 0,\n api_cost REAL NOT NULL DEFAULT 0,\n hosting_cost REAL NOT NULL DEFAULT 0,\n platform_fee REAL NOT NULL DEFAULT 0,\n transaction_cost REAL NOT NULL DEFAULT 0,\n net_revenue REAL NOT NULL DEFAULT 0,\n currency TEXT NOT NULL DEFAULT 'BRL',\n evidence_json TEXT,\n started_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n finished_at TEXT,\n FOREIGN KEY(agent_id) REFERENCES economic_agents(agent_id),\n FOREIGN KEY(opportunity_id) REFERENCES opportunities(opportunity_id)\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS agent_fitness (\n agent_id TEXT PRIMARY KEY,\n selection_state TEXT NOT NULL DEFAULT 'INCUBATION',\n lifetime_gross REAL NOT NULL DEFAULT 0,\n lifetime_cost REAL NOT NULL DEFAULT 0,\n lifetime_net REAL NOT NULL DEFAULT 0,\n benchmark_net REAL NOT NULL DEFAULT 0,\n terminal_trials INTEGER NOT NULL DEFAULT 0,\n successful_trials INTEGER NOT NULL DEFAULT 0,\n failed_trials INTEGER NOT NULL DEFAULT 0,\n rank INTEGER,\n offspring_count INTEGER NOT NULL DEFAULT 0,\n updated_at TEXT NOT NULL,\n FOREIGN KEY(agent_id) REFERENCES economic_agents(agent_id)\n )`,\n },\n { sql: `CREATE INDEX IF NOT EXISTS idx_trials_agent_state ON economic_trials(agent_id,lifecycle_state)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_trials_opportunity ON economic_trials(opportunity_id,lifecycle_state)` },\n {\n sql: `INSERT OR IGNORE INTO agent_fitness(agent_id,selection_state,updated_at)\n SELECT agent_id,'INCUBATION',? FROM economic_agents`,\n args: [now],\n },\n {\n sql: `INSERT INTO schema_meta(key,value,updated_at) VALUES('economic_trial_schema_version','0.6.1-candidate',?)\n ON CONFLICT(key) DO UPDATE SET value=excluded.value,updated_at=excluded.updated_at`,\n args: [now],\n },\n]);\n\nconst tables = await sqlite.execute(`SELECT name FROM sqlite_master WHERE type='table' AND name IN ('economic_trials','agent_fitness') ORDER BY name`);\nconst fitness = await sqlite.execute(`SELECT agent_id,selection_state,lifetime_net,terminal_trials FROM agent_fitness ORDER BY agent_id`);\nconsole.log(JSON.stringify({ status: 'PASS', version: '0.6.1-candidate', tables: tables.rows, fitness: fitness.rows }, null, 2));\n",[227],"3746465a-cdd1-4c28-a3bd-e17821cba719","economic_status.ts","af4f16f4-aa17-11f1-a15c-1607ee4eb77e",14,["D",1788716592876],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { ECONOMIC_POLICY } from \"./lib/economic_policy.ts\";\n\nconst agents = await sqlite.execute(`SELECT status, COUNT(*) AS count FROM economic_agents GROUP BY status ORDER BY status`);\nconst opportunities = await sqlite.execute(`SELECT status, COUNT(*) AS count FROM opportunities GROUP BY status ORDER BY status`);\nconst runs = await sqlite.execute(`SELECT state, COUNT(*) AS count, COALESCE(SUM(net_revenue),0) AS net_revenue FROM economic_runs GROUP BY state ORDER BY state`);\nconst trials = await sqlite.execute(`SELECT lifecycle_state,COUNT(*) AS count,COALESCE(SUM(net_revenue),0) AS net_revenue FROM economic_trials GROUP BY lifecycle_state ORDER BY lifecycle_state`);\nconst fitness = await sqlite.execute(`SELECT agent_id,selection_state,lifetime_gross,lifetime_cost,lifetime_net,benchmark_net,terminal_trials,successful_trials,failed_trials,rank,offspring_count,updated_at FROM agent_fitness ORDER BY generation IS NULL, rank IS NULL, rank, agent_id`).catch(async () =>\n await sqlite.execute(`SELECT agent_id,selection_state,lifetime_gross,lifetime_cost,lifetime_net,benchmark_net,terminal_trials,successful_trials,failed_trials,rank,offspring_count,updated_at FROM agent_fitness ORDER BY rank IS NULL,rank,agent_id`)\n);\nconst variants = await sqlite.execute(`SELECT variant_id,agent_id,parent_variant_id,generation,name,mutation,status,evidence_state,benchmark_metric,benchmark_value,artifact_pointer,updated_at FROM strategy_variants ORDER BY agent_id,generation,variant_id`);\nconst variantEvals = await sqlite.execute(`SELECT variant_id,COUNT(*) AS evaluations,COALESCE(SUM(episodes),0) AS episodes,COALESCE(SUM(wins),0) AS wins,COALESCE(SUM(losses),0) AS losses,COALESCE(SUM(ties),0) AS ties,COALESCE(SUM(runtime_errors),0) AS runtime_errors FROM variant_evaluations GROUP BY variant_id ORDER BY variant_id`);\nconst champions = await sqlite.execute(`SELECT champion_class,agent_id,run_id,metric_value,currency,updated_at FROM economic_champions ORDER BY champion_class`);\nconst latestAgents = await sqlite.execute(`SELECT agent_id,parent_id,generation,lineage,status,hypothesis,strategy,updated_at FROM economic_agents ORDER BY generation DESC,agent_id LIMIT 20`);\nconst latestOpportunities = await sqlite.execute(`SELECT opportunity_id,title,source,url,category,deadline,payout_currency,payout_max,estimated_cost,human_dependency,evidence_state,status,score,updated_at FROM opportunities ORDER BY score DESC,updated_at DESC LIMIT 30`);\nconst latestTrials = await sqlite.execute(`SELECT trial_id,agent_id,opportunity_id,lifecycle_state,operationally_eligible,terminal,gross_revenue,net_revenue,currency,updated_at,finished_at FROM economic_trials ORDER BY updated_at DESC LIMIT 30`);\nconst failures = await sqlite.execute(`SELECT failure_class,COUNT(*) AS count,MAX(created_at) AS latest FROM negative_knowledge GROUP BY failure_class ORDER BY latest DESC,failure_class`);\nconst success = await sqlite.execute(`SELECT COUNT(*) AS count, COALESCE(MAX(replication_count),0) AS max_replications FROM success_patterns`);\nconst totals = await sqlite.execute(`SELECT\n COALESCE(SUM(gross_revenue),0) AS gross_revenue,\n COALESCE(SUM(browser_cost+llm_cost+api_cost+hosting_cost+platform_fee+transaction_cost),0) AS total_cost,\n COALESCE(SUM(net_revenue),0) AS net_revenue\n FROM economic_trials`);\nconst schema = await sqlite.execute(`SELECT key,value,updated_at FROM schema_meta WHERE key LIKE '%version%' ORDER BY key`);\n\nconst totalRow = totals.rows[0] ?? {};\nconst realRevenue = Number(totalRow.gross_revenue ?? 0);\nconst realNet = Number(totalRow.net_revenue ?? 0);\nconst terminalTrialCount = latestTrials.rows.filter((x: Record) => Number(x.terminal ?? 0) === 1).length;\n\nconsole.log(JSON.stringify({\n service: \"chat-native-maestro/economic\",\n version: ECONOMIC_POLICY.version,\n schema: schema.rows,\n agents: agents.rows,\n opportunities: opportunities.rows,\n runs: runs.rows,\n trials: trials.rows,\n fitness: fitness.rows,\n variants: variants.rows,\n variantEvaluations: variantEvals.rows,\n champions: champions.rows,\n latestAgents: latestAgents.rows,\n rankedOpportunities: latestOpportunities.rows,\n latestTrials: latestTrials.rows,\n failureClasses: failures.rows,\n successPatterns: success.rows,\n totals: totalRow,\n terminalTrialCount,\n realRevenueState: realRevenue > 0 ? \"NONZERO\" : \"ZERO\",\n netRevenueState: realNet > 0 ? \"POSITIVE\" : realNet < 0 ? \"NEGATIVE\" : \"ZERO\",\n selfSustaining: realNet > 0 && terminalTrialCount > 0,\n timestamp: new Date().toISOString(),\n}, null, 2));\n",[234],"aa858d97-bbd1-487f-951e-c22790b9a453","economic_selftest.ts","66d41424-aa17-11f1-9a39-1607ee4eb77e",4,["D",1788715291111],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { ECONOMIC_POLICY, evaluateEconomicAction, netRevenue } from \"./lib/economic_policy.ts\";\n\nconst cases = {\n r0: evaluateEconomicAction({ actionClass: \"R0_OBSERVE\" }),\n r1: evaluateEconomicAction({ actionClass: \"R1_PREPARE\" }),\n r2: evaluateEconomicAction({ actionClass: \"R2_REVERSIBLE_WRITE\" }),\n r3Blocked: evaluateEconomicAction({ actionClass: \"R3_COMMIT_SUBMIT\", approved: false }),\n r3Approved: evaluateEconomicAction({ actionClass: \"R3_COMMIT_SUBMIT\", approved: true }),\n r4BlockedNoApproval: evaluateEconomicAction({ actionClass: \"R4_ECONOMIC_SPEND\", amount: 1, maxBudget: 5, approved: false }),\n r4BlockedBudget: evaluateEconomicAction({ actionClass: \"R4_ECONOMIC_SPEND\", amount: 6, maxBudget: 5, approved: true }),\n r4Approved: evaluateEconomicAction({ actionClass: \"R4_ECONOMIC_SPEND\", amount: 4, maxBudget: 5, approved: true }),\n r5: evaluateEconomicAction({ actionClass: \"R5_IDENTITY_LEGAL\", approved: true }),\n};\n\nconst profitCase = netRevenue({ grossRevenue: 10, browserCost: 1, llmCost: 2, apiCost: 0.5, platformFee: 1 });\nconst lossCase = netRevenue({ grossRevenue: 5, browserCost: 4, llmCost: 3 });\nconst tables = await sqlite.execute(`SELECT name FROM sqlite_master WHERE type='table' AND name IN (\n 'economic_agents','opportunities','economic_runs','negative_knowledge','success_patterns','economic_champions'\n) ORDER BY name`);\nconst root = await sqlite.execute(`SELECT agent_id,parent_id,generation,lineage,status FROM economic_agents WHERE agent_id='A0'`);\n\nconst checks = [\n { name: \"R0 auto\", pass: cases.r0.allowed && !cases.r0.humanGate },\n { name: \"R1 auto\", pass: cases.r1.allowed && !cases.r1.humanGate },\n { name: \"R2 auto\", pass: cases.r2.allowed && !cases.r2.humanGate },\n { name: \"R3 blocks without approval\", pass: !cases.r3Blocked.allowed && cases.r3Blocked.reason === \"NEEDS_COMMIT_APPROVAL\" },\n { name: \"R3 allows approved\", pass: cases.r3Approved.allowed },\n { name: \"R4 blocks no approval\", pass: !cases.r4BlockedNoApproval.allowed },\n { name: \"R4 enforces budget\", pass: !cases.r4BlockedBudget.allowed && cases.r4BlockedBudget.reason === \"BUDGET_EXCEEDED\" },\n { name: \"R4 permits approved in-budget\", pass: cases.r4Approved.allowed },\n { name: \"R5 always human gate\", pass: !cases.r5.allowed && cases.r5.humanGate },\n { name: \"net revenue profit\", pass: profitCase === 5.5 },\n { name: \"net revenue loss\", pass: lossCase === -2 },\n { name: \"all economic tables present\", pass: tables.rows.length === 6 },\n { name: \"A0 root present\", pass: root.rows.length === 1 && root.rows[0].generation === 0 },\n];\n\nconst failed = checks.filter((x) => !x.pass);\nconsole.log(JSON.stringify({\n status: failed.length ? \"FAIL\" : \"PASS\",\n version: ECONOMIC_POLICY.version,\n checks,\n failed,\n cases,\n profitCase,\n lossCase,\n tables: tables.rows,\n root: root.rows,\n}, null, 2));\nif (failed.length) throw new Error(`economic_selftest failed: ${failed.map((x) => x.name).join(', ')}`);\n",[241],"c2e35226-ae2c-4a39-bfb8-3af34f7addf3","economic_migrate.ts","5a85f9ee-aa17-11f1-8f39-1607ee4eb77e",3,["D",1788715270460],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst now = new Date().toISOString();\n\nawait sqlite.batch([\n {\n sql: `CREATE TABLE IF NOT EXISTS economic_agents (\n agent_id TEXT PRIMARY KEY,\n parent_id TEXT,\n generation INTEGER NOT NULL DEFAULT 0,\n lineage TEXT NOT NULL,\n hypothesis TEXT NOT NULL,\n strategy TEXT NOT NULL,\n status TEXT NOT NULL,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n FOREIGN KEY(parent_id) REFERENCES economic_agents(agent_id)\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS opportunities (\n opportunity_id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n source TEXT NOT NULL,\n url TEXT,\n category TEXT NOT NULL,\n deadline TEXT,\n payout_currency TEXT,\n payout_max REAL,\n estimated_cost REAL NOT NULL DEFAULT 0,\n human_dependency REAL NOT NULL DEFAULT 1,\n evidence_state TEXT NOT NULL,\n status TEXT NOT NULL,\n score REAL,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS economic_runs (\n run_id TEXT PRIMARY KEY,\n agent_id TEXT NOT NULL,\n opportunity_id TEXT,\n browser_run_id TEXT,\n action_class TEXT NOT NULL,\n strategy_variant TEXT,\n provider TEXT,\n state TEXT NOT NULL,\n gross_revenue REAL NOT NULL DEFAULT 0,\n currency TEXT NOT NULL DEFAULT 'BRL',\n browser_cost REAL NOT NULL DEFAULT 0,\n llm_cost REAL NOT NULL DEFAULT 0,\n api_cost REAL NOT NULL DEFAULT 0,\n hosting_cost REAL NOT NULL DEFAULT 0,\n platform_fee REAL NOT NULL DEFAULT 0,\n transaction_cost REAL NOT NULL DEFAULT 0,\n net_revenue REAL NOT NULL DEFAULT 0,\n evidence_json TEXT,\n started_at TEXT NOT NULL,\n finished_at TEXT,\n FOREIGN KEY(agent_id) REFERENCES economic_agents(agent_id),\n FOREIGN KEY(opportunity_id) REFERENCES opportunities(opportunity_id)\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS negative_knowledge (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n agent_id TEXT,\n opportunity_id TEXT,\n failure_class TEXT NOT NULL,\n cause TEXT NOT NULL,\n context TEXT,\n detector TEXT,\n avoid_rule TEXT,\n evidence_json TEXT,\n created_at TEXT NOT NULL\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS success_patterns (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n agent_id TEXT,\n opportunity_id TEXT,\n mechanism TEXT NOT NULL,\n preconditions TEXT,\n counterfactual TEXT,\n boundaries TEXT,\n replication_count INTEGER NOT NULL DEFAULT 0,\n confidence REAL NOT NULL DEFAULT 0,\n evidence_json TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS economic_champions (\n champion_class TEXT PRIMARY KEY,\n agent_id TEXT NOT NULL,\n run_id TEXT,\n metric_value REAL NOT NULL DEFAULT 0,\n currency TEXT NOT NULL DEFAULT 'BRL',\n updated_at TEXT NOT NULL\n )`,\n },\n { sql: `CREATE INDEX IF NOT EXISTS idx_economic_agents_parent ON economic_agents(parent_id)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_opportunities_status_score ON opportunities(status, score)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_economic_runs_agent ON economic_runs(agent_id, started_at)` },\n { sql: `CREATE INDEX IF NOT EXISTS idx_economic_runs_opportunity ON economic_runs(opportunity_id, started_at)` },\n {\n sql: `INSERT OR IGNORE INTO economic_agents(agent_id,parent_id,generation,lineage,hypothesis,strategy,status,created_at,updated_at)\n VALUES('A0',NULL,0,'A0','Find economically viable opportunities with minimal human dependency','Neurônio root: branch, measure, falsify, replicate winners','INCUBATION',?,?)`,\n args: [now, now],\n },\n {\n sql: `INSERT INTO schema_meta(key,value,updated_at) VALUES('economic_schema_version','0.6.0-candidate',?)\n ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at`,\n args: [now],\n },\n]);\n\nconst tables = await sqlite.execute(`SELECT name FROM sqlite_master WHERE type='table' AND name IN (\n 'economic_agents','opportunities','economic_runs','negative_knowledge','success_patterns','economic_champions'\n) ORDER BY name`);\nconst root = await sqlite.execute(`SELECT agent_id,generation,lineage,status FROM economic_agents WHERE agent_id='A0'`);\nconsole.log(JSON.stringify({ status: 'PASS', economicSchemaVersion: '0.6.0-candidate', tables: tables.rows, root: root.rows }, null, 2));\n",[248],"ae39bf64-442c-408a-a4d7-fb176828672b","README.md","01a077bc-2b99-740d-9881-4e48ec93504b",["D",1788715215771],"# Chat-Native Maestro V0.5.0\n\nCloud runtime controlled from normal ChatGPT mobile/web.\n\n## Canonical constraint\n\n- No Codex.\n- No user PC.\n- No local browser runtime.\n- Normal ChatGPT is the control plane.\n- Val Town is the persistent cloud compute/state plane.\n- No automatic browser schedule is enabled.\n\n## Runtime path\n\n`ChatGPT -> authenticated Val Town plugin -> val-scoped SQLite -> runner.ts -> provider router -> cloud browser -> verified receipt`\n\nThe public HTTP endpoint is liveness-only. Provider configuration, task state, receipts, health and cost metrics are available only through authenticated `status.ts` execution.\n\n## Browser routing\n\n1. Kernel — primary/champion.\n2. Browserless — recurring-free fallback.\n3. Browserbase — researched fallback, not implemented.\n4. Steel — one-time-credit fallback, not preferred for steady state.\n\nCross-provider fallback is allowed only for `read_only`. A write failure is never replayed automatically on another provider because failure is not proof of zero side effects.\n\n## Current provider economics (research snapshot 2026-09-06)\n\n### Kernel Free\n\n- $0/month plus usage costs.\n- $5/month free credits.\n- 5 concurrent browsers.\n- live view.\n- stealth mode with CAPTCHA solver/proxy.\n- managed auth.\n- no card required to get started.\n- usage model: GB-second.\n\n### Browserless Free\n\n- 1,000 units/month.\n- 2 concurrent browsers.\n- 2-minute max session.\n- no card required.\n- browser time: 1 unit per 30-second block.\n- successful CAPTCHA solve: additional units.\n- built-in proxies: additional units.\n- provider supports an overage cap that should be set to $0 for this project's zero-surprise-cost policy.\n\n## Browser DSL\n\nSupported:\n- `goto`\n- `wait_for`\n- `click`\n- `fill`\n- `fill_secret`\n- `type`\n- `select`\n- `extract_text`\n- `extract_attribute`\n- `expect_text`\n- `expect_url`\n\nArbitrary JavaScript and shell input are intentionally absent from the task schema.\n\nThe `value` attribute is blocked from `extract_attribute` to reduce accidental credential exfiltration after form fill.\n\n## Risk gates\n\n- `read_only`: normal execution.\n- `reversible_write`: requires explicit `approved=true`.\n- `consequential`: requires explicit `approved=true`.\n- `fill_secret`: separately requires explicit approval, even during a read-oriented flow.\n\n## Secret handling\n\nPasswords, cookies and provider tokens must never be stored in `task_json`.\n\nUse:\n\n```json\n{\"action\":\"fill_secret\",\"selector\":\"#password\",\"envVar\":\"PORTAL_PASSWORD\"}\n```\n\nOnly the environment-variable name is stored. The value is resolved in memory immediately before execution.\n\nProvider credentials belong only in Val Town env vars:\n- `KERNEL_API_KEY`\n- `BROWSERLESS_TOKEN`\n- optional `BROWSERLESS_BASE_URL`\n\n## Network / SSRF boundary\n\nBefore any provider call, `runner.ts` runs a fail-closed network preflight:\n\n- only HTTP/HTTPS;\n- URL userinfo is blocked;\n- nonstandard ports are blocked;\n- localhost/private/link-local/reserved/documentation IP ranges are blocked;\n- known metadata/internal hostnames are blocked;\n- `allowedHosts` are validated;\n- hostnames are resolved with DNS-over-HTTPS and all A/AAAA results must be public.\n\nThe browser program itself also restricts main-frame navigation to the original target host plus explicit `allowedHosts`.\n\nDNS preflight reduces SSRF/DNS-rebinding risk but is not a mathematical proof against DNS rebinding after the preflight. Provider isolation and post-action validation remain required.\n\n## Read-only browser firewall\n\nWhen `risk=read_only`, browser network requests using methods other than GET/HEAD/OPTIONS are aborted. Popups are closed.\n\nThis prevents common POST/PUT/PATCH/DELETE side effects. It cannot guarantee zero side effects on badly designed GET endpoints.\n\n## Reliability controls\n\n- task `run_id` is unique/idempotent;\n- atomic queue claim;\n- 90-second RUNNING lease;\n- stale lease recovery;\n- max 2 task attempts;\n- read-only FAIL retry delay: 10 seconds;\n- writes are not auto-retried;\n- browser timeout: 25 seconds;\n- Kernel cleanup timeout: 5 seconds;\n- provider circuit opens after 3 consecutive provider FAILs;\n- circuit cooldown: 15 minutes;\n- BLOCKED configuration errors do not degrade provider health;\n- no cron/automatic runner, so eligible retries still require an explicit ChatGPT runner invocation.\n\n## Evidence retention\n\nDefault is `minimal`:\n- status;\n- final URL;\n- expectations/checks;\n- error;\n- duration;\n- fallback metadata;\n- DNS preflight evidence.\n\nExtracted outputs and provider session IDs are not persisted by default.\n\nUse `evidenceRetention: \"full\"` only when the extracted output is intentionally safe to retain.\n\n## Cost telemetry\n\n`browser_attempts` records per-attempt provider/status/duration and an estimated Browserless browser-time unit count.\n\nBrowserless estimates exclude CAPTCHA/proxy add-ons. Kernel usage is not estimated locally because its billing basis is GB-second; actual account usage must be observed from Kernel.\n\n## PASS rule\n\n`TOOL_SUCCESS_RESPONSE != BEHAVIOR_PROOF`.\n\nA browser execution with no positive expectation remains `PARTIAL`. `PASS` requires all explicit expectations to succeed.\n\n## Current live evidence\n\nPASS:\n- Val Town plugin authenticated.\n- Free workspace.\n- create/edit/run/deploy.\n- public liveness endpoint.\n- authenticated diagnostics.\n- val-scoped SQLite.\n- schema versioning.\n- atomic task claim.\n- stale lease recovery.\n- persisted task/attempt receipts.\n- retry decision logic.\n- timeout control.\n- provider circuit breaker and restore test.\n- risk approval gate.\n- secret approval gate.\n- invalid provider rejection.\n- `value` attribute extraction rejection.\n- DNS-over-HTTPS preflight.\n- private/metadata URL blocking in both self-test and runner pipeline.\n- Kernel SDK module loading.\n- Browserless adapter module loading.\n- safe missing-provider-credential classification.\n\nUNVERIFIED:\n- Kernel API authentication for this account.\n- live Kernel browser creation.\n- live Kernel Playwright execution.\n- Kernel actual credit consumption.\n- Browserless API authentication for this account.\n- live Browserless `/function` execution.\n- Browserless actual unit consumption.\n\nNo user-created environment variables are currently configured, so no live browser provider has been promoted to OPERATIONAL.\n\n## Next milestone\n\n`docs/SMOKE_TASK.json` is deliberately a DRAFT, not a queued task. After exactly one provider credential is configured, ChatGPT can enqueue that read-only smoke task, run `runner.ts`, persist the attempt and promote the provider only if the explicit expectations PASS.\n\nSee:\n- `docs/CURRENT_STATE.md`\n- `docs/PROVIDER_CENSUS.md`\n- `docs/ACTIVATION_RUNBOOK.md`\n- `docs/TASK_SCHEMA.md`\n- `docs/SMOKE_TASK.json`\n",[255],"9e625300-a023-4458-8c07-bea2447f6601","providers","01a077bc-2b99-740d-9881-4952f29c18f3",["D",1788715215771],"directory",[261],"94b02e1c-a9b9-457c-8c32-1b19e33e4ad5","lib","01a077bc-2b99-740d-9881-3bf068d89182",["D",1788715215771],[267],"3e709f84-5c5f-42d7-bfae-c6fc769c7f45","docs","01a077bc-2b99-740d-9881-1e90a3c35ec2",["D",1788715215771],[272],"92a4504f-1375-4b96-be86-04027652b123","artifacts","40731aa4-aa18-11f1-bdcb-1607ee4eb77e",6,["D",1788715656185],[277],"pulls","branches","forks","envVars",{"_289":61,"_291":61},"connections",{"_289":61,"_290":61},"count","unfilledCount","emptyCount",{"_41":276,"_31":277,"_29":278,"_160":-5,"_39":40,"_38":279,"_162":57,"_36":536,"_13":61,"_33":264,"_34":-5,"_23":24,"_166":-5,"_333":537,"_26":538},{"_41":528,"_31":529,"_29":530,"_160":278,"_39":40,"_38":531,"_162":57,"_36":532,"_13":61,"_33":20,"_34":533,"_23":24,"_166":-5,"_333":534,"_26":535},{"_41":520,"_31":521,"_29":522,"_160":278,"_39":40,"_38":523,"_162":57,"_36":524,"_13":61,"_33":20,"_34":525,"_23":24,"_166":-5,"_333":526,"_26":527},{"_41":516,"_31":32,"_29":30,"_160":278,"_39":40,"_38":14,"_162":57,"_36":517,"_13":61,"_33":20,"_34":35,"_23":24,"_166":-5,"_333":518,"_26":519},{"_41":508,"_31":509,"_29":510,"_160":278,"_39":40,"_38":511,"_162":57,"_36":512,"_13":61,"_33":20,"_34":513,"_23":24,"_166":-5,"_333":514,"_26":515},{"_41":271,"_31":272,"_29":273,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":505,"_13":61,"_33":264,"_34":-5,"_23":24,"_166":-5,"_333":506,"_26":507},{"_41":498,"_31":499,"_29":500,"_160":273,"_39":40,"_38":161,"_162":57,"_36":501,"_13":61,"_33":20,"_34":502,"_23":24,"_166":-5,"_333":503,"_26":504},{"_41":491,"_31":492,"_29":493,"_160":273,"_39":40,"_38":161,"_162":57,"_36":494,"_13":61,"_33":20,"_34":495,"_23":24,"_166":-5,"_333":496,"_26":497},{"_41":484,"_31":485,"_29":486,"_160":273,"_39":40,"_38":161,"_162":57,"_36":487,"_13":61,"_33":20,"_34":488,"_23":24,"_166":-5,"_333":489,"_26":490},{"_41":477,"_31":478,"_29":479,"_160":273,"_39":40,"_38":161,"_162":57,"_36":480,"_13":61,"_33":20,"_34":481,"_23":24,"_166":-5,"_333":482,"_26":483},{"_41":470,"_31":471,"_29":472,"_160":273,"_39":40,"_38":161,"_162":57,"_36":473,"_13":61,"_33":20,"_34":474,"_23":24,"_166":-5,"_333":475,"_26":476},{"_41":463,"_31":464,"_29":465,"_160":273,"_39":40,"_38":161,"_162":57,"_36":466,"_13":61,"_33":20,"_34":467,"_23":24,"_166":-5,"_333":468,"_26":469},{"_41":266,"_31":267,"_29":268,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":460,"_13":61,"_33":264,"_34":-5,"_23":24,"_166":-5,"_333":461,"_26":462},{"_41":453,"_31":454,"_29":455,"_160":268,"_39":40,"_38":161,"_162":57,"_36":456,"_13":61,"_33":164,"_34":457,"_23":24,"_166":-5,"_333":458,"_26":459},{"_41":446,"_31":447,"_29":448,"_160":268,"_39":40,"_38":161,"_162":57,"_36":449,"_13":61,"_33":164,"_34":450,"_23":24,"_166":-5,"_333":451,"_26":452},{"_41":438,"_31":439,"_29":440,"_160":268,"_39":40,"_38":441,"_162":57,"_36":442,"_13":61,"_33":164,"_34":443,"_23":24,"_166":-5,"_333":444,"_26":445},{"_41":430,"_31":431,"_29":432,"_160":268,"_39":40,"_38":433,"_162":57,"_36":434,"_13":61,"_33":164,"_34":435,"_23":24,"_166":-5,"_333":436,"_26":437},{"_41":423,"_31":424,"_29":425,"_160":268,"_39":40,"_38":161,"_162":57,"_36":426,"_13":61,"_33":164,"_34":427,"_23":24,"_166":-5,"_333":428,"_26":429},{"_41":416,"_31":417,"_29":418,"_160":268,"_39":40,"_38":161,"_162":57,"_36":419,"_13":61,"_33":164,"_34":420,"_23":24,"_166":-5,"_333":421,"_26":422},{"_41":409,"_31":410,"_29":411,"_160":268,"_39":40,"_38":161,"_162":57,"_36":412,"_13":61,"_33":164,"_34":413,"_23":24,"_166":-5,"_333":414,"_26":415},{"_41":402,"_31":403,"_29":404,"_160":268,"_39":40,"_38":161,"_162":57,"_36":405,"_13":61,"_33":164,"_34":406,"_23":24,"_166":-5,"_333":407,"_26":408},{"_41":260,"_31":261,"_29":262,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":399,"_13":61,"_33":264,"_34":-5,"_23":24,"_166":-5,"_333":400,"_26":401},{"_41":392,"_31":393,"_29":394,"_160":262,"_39":40,"_38":161,"_162":57,"_36":395,"_13":61,"_33":164,"_34":396,"_23":24,"_166":-5,"_333":397,"_26":398},{"_41":385,"_31":386,"_29":387,"_160":262,"_39":40,"_38":161,"_162":57,"_36":388,"_13":61,"_33":164,"_34":389,"_23":24,"_166":-5,"_333":390,"_26":391},{"_41":378,"_31":379,"_29":380,"_160":262,"_39":40,"_38":161,"_162":57,"_36":381,"_13":61,"_33":164,"_34":382,"_23":24,"_166":-5,"_333":383,"_26":384},{"_41":254,"_31":255,"_29":256,"_160":-5,"_39":40,"_38":161,"_162":24,"_36":375,"_13":61,"_33":20,"_34":258,"_23":24,"_166":-5,"_333":376,"_26":377},{"_41":247,"_31":248,"_29":249,"_160":-5,"_39":40,"_38":250,"_162":57,"_36":372,"_13":61,"_33":164,"_34":252,"_23":24,"_166":-5,"_333":373,"_26":374},{"_41":240,"_31":241,"_29":242,"_160":-5,"_39":40,"_38":243,"_162":57,"_36":369,"_13":61,"_33":164,"_34":245,"_23":24,"_166":-5,"_333":370,"_26":371},{"_41":233,"_31":234,"_29":235,"_160":-5,"_39":40,"_38":236,"_162":57,"_36":366,"_13":161,"_33":164,"_34":238,"_23":24,"_166":-5,"_333":367,"_26":368},{"_41":226,"_31":227,"_29":228,"_160":-5,"_39":40,"_38":229,"_162":57,"_36":363,"_13":61,"_33":164,"_34":231,"_23":24,"_166":-5,"_333":364,"_26":365},{"_41":219,"_31":220,"_29":221,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":360,"_13":61,"_33":223,"_34":224,"_23":24,"_166":-5,"_333":361,"_26":362},{"_41":212,"_31":213,"_29":214,"_160":-5,"_39":40,"_38":215,"_162":57,"_36":357,"_13":61,"_33":164,"_34":217,"_23":24,"_166":-5,"_333":358,"_26":359},{"_41":206,"_31":207,"_29":208,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":354,"_13":61,"_33":164,"_34":210,"_23":24,"_166":-5,"_333":355,"_26":356},{"_41":199,"_31":200,"_29":201,"_160":-5,"_39":40,"_38":202,"_162":57,"_36":351,"_13":61,"_33":164,"_34":204,"_23":24,"_166":-5,"_333":352,"_26":353},{"_41":193,"_31":194,"_29":195,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":348,"_13":61,"_33":164,"_34":197,"_23":24,"_166":-5,"_333":349,"_26":350},{"_41":187,"_31":188,"_29":189,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":345,"_13":61,"_33":164,"_34":191,"_23":24,"_166":-5,"_333":346,"_26":347},{"_41":181,"_31":182,"_29":183,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":342,"_13":61,"_33":164,"_34":185,"_23":24,"_166":-5,"_333":343,"_26":344},{"_41":175,"_31":176,"_29":177,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":339,"_13":61,"_33":164,"_34":179,"_23":24,"_166":-5,"_333":340,"_26":341},{"_41":168,"_31":169,"_29":170,"_160":-5,"_39":40,"_38":171,"_162":57,"_36":336,"_13":61,"_33":164,"_34":173,"_23":24,"_166":-5,"_333":337,"_26":338},{"_41":157,"_31":158,"_29":159,"_160":-5,"_39":40,"_38":161,"_162":57,"_36":332,"_13":61,"_33":164,"_34":165,"_23":24,"_166":-5,"_333":334,"_26":335},["D",1788715215771],"children",[],[158],["D",1788716558331],[],[169],["D",1788715215771],[],[176],["D",1788715215771],[],[182],["D",1788715215771],[],[188],["D",1788715215771],[],[194],["D",1788715949727],[],[200],["D",1788715215771],[],[207],["D",1788715849210],[],[213],["D",1788715215771],[],[220],["D",1788715881407],[],[227],["D",1788716592876],[],[234],["D",1788715291111],[],[241],["D",1788715270460],[],[248],["D",1788715215771],[],[255],"55194c44-26a6-467a-b820-b6fead64159d","router.ts","01a077bc-2b99-740d-9881-4721aef6fa58",["D",1788715215771],"import type { BrowserReceipt, BrowserTask, ProviderName } from \"../lib/types.ts\";\nimport { executeKernel, kernelConfigured } from \"./kernel.ts\";\nimport { browserlessConfigured, executeBrowserless } from \"./browserless.ts\";\nimport { providerAvailable, recordProviderOutcome } from \"../lib/provider_health.ts\";\n\nexport function providerState() {\n const kernel = kernelConfigured();\n const browserless = browserlessConfigured();\n return {\n kernel: { priority: 1, configured: kernel, state: kernel ? \"READY\" : \"ACCOUNT_KEY_REQUIRED\" },\n browserless: { priority: 2, configured: browserless, state: browserless ? \"READY\" : \"ACCOUNT_TOKEN_REQUIRED\" },\n };\n}\n\nasync function runProvider(provider: ProviderName, task: BrowserTask): Promise {\n const health = await providerAvailable(provider);\n if (!health.available) {\n return { runId: task.runId, provider, status: \"BLOCKED\", error: health.reason ?? \"provider circuit open\" };\n }\n\n const receipt = provider === \"kernel\" ? await executeKernel(task) : await executeBrowserless(task);\n await recordProviderOutcome(provider, receipt);\n return receipt;\n}\n\nfunction withFallbackMeta(receipt: BrowserReceipt, prior: BrowserReceipt): BrowserReceipt {\n return {\n ...receipt,\n providerMeta: {\n ...(receipt.providerMeta ?? {}),\n fallbackFrom: prior.provider,\n priorStatus: prior.status,\n priorError: prior.error ?? null,\n priorDurationMs: prior.durationMs ?? null,\n },\n };\n}\n\nexport async function executeRouted(task: BrowserTask): Promise {\n if (task.preferredProvider === \"browserless\") return runProvider(\"browserless\", task);\n if (task.preferredProvider === \"kernel\") return runProvider(\"kernel\", task);\n\n if (kernelConfigured()) {\n const primary = await runProvider(\"kernel\", task);\n if (primary.status === \"PASS\" || primary.status === \"PARTIAL\") return primary;\n if (task.risk === \"read_only\" && browserlessConfigured()) {\n const fallback = await runProvider(\"browserless\", task);\n return withFallbackMeta(fallback, primary);\n }\n return primary;\n }\n\n if (browserlessConfigured()) return runProvider(\"browserless\", task);\n return runProvider(\"kernel\", task);\n}\n",[],[261,379],"fc83999d-4ff9-4e7c-abc1-af6110dc1d07","kernel.ts","01a077bc-2b99-740d-9881-42c7df42306f",["D",1788715215771],"import Kernel from \"npm:@onkernel/sdk\";\nimport type { BrowserReceipt, BrowserTask } from \"../lib/types.ts\";\nimport { buildKernelPlaywrightCode, resolveSecrets } from \"../lib/dsl.ts\";\nimport { POLICY, withTimeout } from \"../lib/policy.ts\";\n\nexport function kernelConfigured(): boolean {\n return Boolean(Deno.env.get(\"KERNEL_API_KEY\"));\n}\n\nexport async function executeKernel(task: BrowserTask): Promise {\n const apiKey = Deno.env.get(\"KERNEL_API_KEY\");\n if (!apiKey) {\n return { runId: task.runId, provider: \"kernel\", status: \"BLOCKED\", error: \"KERNEL_API_KEY missing\" };\n }\n\n let resolvedTask: BrowserTask;\n try {\n resolvedTask = resolveSecrets(task);\n } catch (error) {\n return { runId: task.runId, provider: \"kernel\", status: \"BLOCKED\", error: error instanceof Error ? error.message : String(error) };\n }\n\n const started = Date.now();\n const kernel = new Kernel({ apiKey });\n let sessionId: string | undefined;\n try {\n const kernelBrowser = await withTimeout(\n kernel.browsers.create({ headless: true, stealth: true }),\n 10_000,\n \"kernel browser create\",\n );\n sessionId = kernelBrowser.session_id;\n\n const response = await withTimeout(\n kernel.browsers.playwright.execute(sessionId, {\n code: buildKernelPlaywrightCode(resolvedTask),\n }),\n POLICY.browserTimeoutMs,\n \"kernel playwright execute\",\n );\n const result = (response as any).result ?? response;\n const verified = Boolean(result?.verified);\n return {\n runId: task.runId,\n provider: \"kernel\",\n status: verified ? \"PASS\" : \"PARTIAL\",\n finalUrl: result?.finalUrl,\n outputs: result?.outputs ?? {},\n checks: result?.checks ?? [],\n durationMs: Date.now() - started,\n providerMeta: { sessionId, headless: true, stealth: true },\n };\n } catch (error) {\n return {\n runId: task.runId,\n provider: \"kernel\",\n status: \"FAIL\",\n error: error instanceof Error ? error.message : String(error),\n durationMs: Date.now() - started,\n providerMeta: sessionId ? { sessionId } : {},\n };\n } finally {\n if (sessionId) {\n try {\n await withTimeout(kernel.browsers.deleteByID(sessionId), 5_000, \"kernel browser cleanup\");\n } catch (cleanupError) {\n console.error(\"kernel cleanup failed\", cleanupError);\n }\n }\n }\n}\n",[],[261,386],"26c3a975-f21b-42bd-bb91-c1a4c17ea40b","browserless.ts","01a077bc-2b99-740d-9881-3f2f98b23d50",["D",1788715215771],"import type { BrowserReceipt, BrowserTask } from \"../lib/types.ts\";\nimport { resolveSecrets } from \"../lib/dsl.ts\";\nimport { POLICY } from \"../lib/policy.ts\";\n\nconst FUNCTION_CODE = String.raw`\nexport default async ({ page, context }) => {\n const plan = context.plan;\n const outputs = {};\n const checks = [];\n const targetHost = new URL(plan.targetUrl).hostname;\n const allowedHosts = new Set([targetHost, ...(plan.allowedHosts || [])]);\n const allowedMethods = new Set([\"GET\", \"HEAD\", \"OPTIONS\"]);\n const assertUrl = (value) => {\n const u = new URL(value);\n if (![\"http:\", \"https:\"].includes(u.protocol)) throw new Error(\"blocked protocol\");\n if (!allowedHosts.has(u.hostname)) throw new Error(\"blocked host: \" + u.hostname);\n };\n\n await page.setRequestInterception(true);\n page.on(\"request\", (req) => {\n try {\n if (req.isNavigationRequest() && req.frame() === page.mainFrame()) assertUrl(req.url());\n if (plan.risk === \"read_only\" && !allowedMethods.has(req.method().toUpperCase())) return req.abort(\"blockedbyclient\");\n return req.continue();\n } catch {\n return req.abort(\"blockedbyclient\");\n }\n });\n page.on(\"popup\", async (popup) => { try { await popup.close(); } catch {} });\n\n assertUrl(plan.targetUrl);\n await page.goto(plan.targetUrl, { waitUntil: \"domcontentloaded\" });\n assertUrl(page.url());\n\n for (const step of plan.steps) {\n switch (step.action) {\n case \"goto\": {\n const url = step.url || plan.targetUrl;\n assertUrl(url);\n await page.goto(url, { waitUntil: \"domcontentloaded\" });\n break;\n }\n case \"wait_for\":\n await page.waitForSelector(step.selector, { visible: true, timeout: step.timeoutMs || 10000 });\n break;\n case \"click\":\n if (step.waitForNavigation) {\n await Promise.all([page.waitForNavigation({ waitUntil: \"domcontentloaded\" }), page.click(step.selector)]);\n } else await page.click(step.selector);\n break;\n case \"fill\":\n await page.click(step.selector, { clickCount: 3 });\n await page.keyboard.press(\"Backspace\");\n await page.type(step.selector, step.text);\n break;\n case \"type\":\n await page.type(step.selector, step.text, { delay: step.delayMs || 0 });\n break;\n case \"select\":\n await page.select(step.selector, step.value);\n break;\n case \"extract_text\":\n outputs[step.key] = await page.$eval(step.selector, (el) => el.textContent || \"\");\n break;\n case \"extract_attribute\":\n outputs[step.key] = await page.$eval(step.selector, (el, attr) => el.getAttribute(attr), step.attribute);\n break;\n case \"expect_text\": {\n const body = await page.evaluate(() => document.body?.innerText || \"\");\n checks.push({ type: \"text\", expected: step.text, ok: body.includes(step.text) });\n break;\n }\n case \"expect_url\": {\n const actual = page.url();\n checks.push({ type: \"url\", expected: step.contains, actual, ok: actual.includes(step.contains) });\n break;\n }\n }\n assertUrl(page.url());\n }\n\n return {\n data: {\n finalUrl: page.url(),\n outputs,\n checks,\n verified: checks.length > 0 && checks.every((x) => x.ok),\n },\n type: \"application/json\",\n };\n};\n`;\n\nexport function browserlessConfigured(): boolean {\n return Boolean(Deno.env.get(\"BROWSERLESS_TOKEN\"));\n}\n\nexport async function executeBrowserless(task: BrowserTask): Promise {\n const token = Deno.env.get(\"BROWSERLESS_TOKEN\");\n if (!token) return { runId: task.runId, provider: \"browserless\", status: \"BLOCKED\", error: \"BROWSERLESS_TOKEN missing\" };\n\n let resolvedTask: BrowserTask;\n try {\n resolvedTask = resolveSecrets(task);\n } catch (error) {\n return { runId: task.runId, provider: \"browserless\", status: \"BLOCKED\", error: error instanceof Error ? error.message : String(error) };\n }\n\n const started = Date.now();\n const base = (Deno.env.get(\"BROWSERLESS_BASE_URL\") || \"https://production-sfo.browserless.io\").replace(/\\/+$/, \"\");\n try {\n const response = await fetch(`${base}/function?token=${encodeURIComponent(token)}`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ code: FUNCTION_CODE, context: { plan: resolvedTask } }),\n signal: AbortSignal.timeout(POLICY.browserTimeoutMs),\n });\n const text = await response.text();\n let result: any;\n try { result = JSON.parse(text); } catch { result = { raw: text }; }\n if (!response.ok) {\n return { runId: task.runId, provider: \"browserless\", status: \"FAIL\", error: `HTTP ${response.status}: ${text.slice(0, 500)}`, durationMs: Date.now() - started };\n }\n return {\n runId: task.runId,\n provider: \"browserless\",\n status: result?.verified ? \"PASS\" : \"PARTIAL\",\n finalUrl: result?.finalUrl,\n outputs: result?.outputs ?? {},\n checks: result?.checks ?? [],\n durationMs: Date.now() - started,\n providerMeta: { base },\n };\n } catch (error) {\n return { runId: task.runId, provider: \"browserless\", status: \"FAIL\", error: error instanceof Error ? error.message : String(error), durationMs: Date.now() - started };\n }\n}\n",[],[261,393],["D",1788715215771],[314,315,316],[261],"55c421c5-2ce5-4f82-9115-c76d40c7214a","url_security.ts","01a077bc-2b99-740d-9881-355e348197e4",["D",1788715215771],"import type { BrowserTask } from \"./types.ts\";\n\ntype DnsAnswer = { name?: string; type?: number; data?: string };\ntype DnsJson = { Status?: number; Answer?: DnsAnswer[] };\n\nconst BLOCKED_HOST_NAMES = new Set([\n \"localhost\",\n \"localhost.localdomain\",\n \"metadata.google.internal\",\n \"metadata\",\n]);\n\nfunction stripBrackets(host: string): string {\n return host.startsWith(\"[\") && host.endsWith(\"]\") ? host.slice(1, -1) : host;\n}\n\nfunction parseIpv4(value: string): number[] | null {\n const parts = value.split(\".\");\n if (parts.length !== 4) return null;\n const nums = parts.map((p) => Number(p));\n if (nums.some((n) => !Number.isInteger(n) || n < 0 || n > 255)) return null;\n return nums;\n}\n\nexport function isNonPublicIp(value: string): boolean {\n const ip = stripBrackets(value.trim().toLowerCase());\n const v4 = parseIpv4(ip);\n if (v4) {\n const [a, b, c] = v4;\n if (a === 0 || a === 10 || a === 127 || a >= 224) return true;\n if (a === 100 && b >= 64 && b <= 127) return true;\n if (a === 169 && b === 254) return true;\n if (a === 172 && b >= 16 && b <= 31) return true;\n if (a === 192 && b === 0 && c === 0) return true;\n if (a === 192 && b === 0 && c === 2) return true;\n if (a === 192 && b === 168) return true;\n if (a === 198 && (b === 18 || b === 19)) return true;\n if (a === 198 && b === 51 && c === 100) return true;\n if (a === 203 && b === 0 && c === 113) return true;\n return false;\n }\n\n if (ip.includes(\":\")) {\n if (ip === \"::\" || ip === \"::1\") return true;\n if (ip.startsWith(\"fc\") || ip.startsWith(\"fd\")) return true;\n if (/^fe[89ab]/.test(ip)) return true;\n if (ip.startsWith(\"ff\")) return true;\n if (ip.startsWith(\"2001:db8\")) return true;\n const mapped = ip.match(/::ffff:(\\d+\\.\\d+\\.\\d+\\.\\d+)$/);\n if (mapped) return isNonPublicIp(mapped[1]);\n return false;\n }\n\n return false;\n}\n\nfunction blockedHostname(hostname: string): boolean {\n const host = stripBrackets(hostname.toLowerCase().replace(/\\.$/, \"\"));\n if (BLOCKED_HOST_NAMES.has(host)) return true;\n if (host.endsWith(\".localhost\") || host.endsWith(\".local\") || host.endsWith(\".internal\") || host.endsWith(\".home.arpa\")) return true;\n if (isNonPublicIp(host)) return true;\n return false;\n}\n\nasync function doh(hostname: string, type: \"A\" | \"AAAA\"): Promise {\n const url = new URL(\"https://cloudflare-dns.com/dns-query\");\n url.searchParams.set(\"name\", hostname);\n url.searchParams.set(\"type\", type);\n const response = await fetch(url, {\n headers: { accept: \"application/dns-json\" },\n signal: AbortSignal.timeout(5_000),\n });\n if (!response.ok) throw new Error(`DoH ${type} failed with HTTP ${response.status}`);\n return await response.json() as DnsJson;\n}\n\nexport async function resolvePublicIps(hostname: string): Promise {\n const host = stripBrackets(hostname.toLowerCase().replace(/\\.$/, \"\"));\n if (blockedHostname(host)) throw new Error(`blocked hostname: ${host}`);\n if (parseIpv4(host) || host.includes(\":\")) return [host];\n\n const [a, aaaa] = await Promise.all([doh(host, \"A\"), doh(host, \"AAAA\")]);\n const answers = [...(a.Answer ?? []), ...(aaaa.Answer ?? [])];\n const ips = answers\n .filter((x) => x.type === 1 || x.type === 28)\n .map((x) => String(x.data ?? \"\"))\n .filter(Boolean);\n\n if (ips.length === 0) throw new Error(`no A/AAAA records resolved for ${host}`);\n const blocked = ips.filter(isNonPublicIp);\n if (blocked.length) throw new Error(`hostname ${host} resolved to blocked IP(s): ${blocked.join(\", \")}`);\n return [...new Set(ips)];\n}\n\nexport async function assertSafeUrl(value: string): Promise<{ url: string; host: string; ips: string[] }> {\n const url = new URL(value);\n if (![\"http:\", \"https:\"].includes(url.protocol)) throw new Error(\"only http/https URLs are allowed\");\n if (url.username || url.password) throw new Error(\"URL userinfo is blocked\");\n if (url.port && ![\"80\", \"443\"].includes(url.port)) throw new Error(`nonstandard port blocked: ${url.port}`);\n if (blockedHostname(url.hostname)) throw new Error(`blocked hostname: ${url.hostname}`);\n const ips = await resolvePublicIps(url.hostname);\n return { url: url.toString(), host: url.hostname, ips };\n}\n\nexport async function preflightTaskNetwork(task: BrowserTask) {\n const checked: Array<{ host: string; ips: string[] }> = [];\n const seen = new Set();\n\n const checkUrl = async (value: string) => {\n const result = await assertSafeUrl(value);\n if (!seen.has(result.host)) {\n seen.add(result.host);\n checked.push({ host: result.host, ips: result.ips });\n }\n };\n\n await checkUrl(task.targetUrl);\n for (const step of task.steps) {\n if (step.action === \"goto\" && step.url) await checkUrl(step.url);\n }\n for (const host of task.allowedHosts ?? []) {\n const clean = host.trim().toLowerCase();\n if (!clean || clean.includes(\"/\") || clean.includes(\"://\") || clean.includes(\"@\")) throw new Error(`invalid allowedHost: ${host}`);\n await checkUrl(`https://${clean}/`);\n }\n\n return checked;\n}\n",[],[267,403],"b13f2e19-c7f4-4bcb-935b-b449dfda8b0e","types.ts","01a077bc-2b99-740d-9881-31a5d93088f8",["D",1788715215771],"export type Risk = \"read_only\" | \"reversible_write\" | \"consequential\";\nexport type ProviderName = \"kernel\" | \"browserless\";\nexport type EvidenceRetention = \"minimal\" | \"full\";\n\nexport type Step =\n | { action: \"goto\"; url?: string }\n | { action: \"wait_for\"; selector: string; timeoutMs?: number }\n | { action: \"click\"; selector: string; waitForNavigation?: boolean }\n | { action: \"fill\"; selector: string; text: string }\n | { action: \"fill_secret\"; selector: string; envVar: string }\n | { action: \"type\"; selector: string; text: string; delayMs?: number }\n | { action: \"select\"; selector: string; value: string }\n | { action: \"extract_text\"; selector: string; key: string }\n | { action: \"extract_attribute\"; selector: string; attribute: string; key: string }\n | { action: \"expect_text\"; text: string }\n | { action: \"expect_url\"; contains: string };\n\nexport type BrowserTask = {\n runId: string;\n targetUrl: string;\n risk: Risk;\n approved?: boolean;\n purpose: string;\n allowedHosts?: string[];\n preferredProvider?: ProviderName;\n evidenceRetention?: EvidenceRetention;\n steps: Step[];\n};\n\nexport type BrowserReceipt = {\n runId: string;\n provider: ProviderName;\n status: \"PASS\" | \"PARTIAL\" | \"FAIL\" | \"BLOCKED\";\n finalUrl?: string;\n outputs?: Record;\n checks?: Array>;\n error?: string;\n durationMs?: number;\n providerMeta?: Record;\n};\n",[],[267,410],"5257a923-09fd-451f-b4c5-eaa39b641d34","provider_health.ts","01a077bc-2b99-740d-9881-2d5b14823b37",["D",1788715215771],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { BrowserReceipt, ProviderName } from \"./types.ts\";\nimport { POLICY } from \"./policy.ts\";\n\nexport async function providerAvailable(provider: ProviderName): Promise<{ available: boolean; reason?: string }> {\n const row = (await sqlite.execute({ sql: \"SELECT * FROM provider_health WHERE provider=?\", args: [provider] })).rows[0] as any;\n if (!row) return { available: true };\n if (row.circuit_state !== \"OPEN\") return { available: true };\n if (!row.open_until) return { available: false, reason: \"provider circuit open\" };\n const until = Date.parse(String(row.open_until));\n if (Number.isFinite(until) && Date.now() >= until) {\n await sqlite.execute({\n sql: \"UPDATE provider_health SET circuit_state='HALF_OPEN', updated_at=? WHERE provider=?\",\n args: [new Date().toISOString(), provider],\n });\n return { available: true };\n }\n return { available: false, reason: `provider circuit open until ${row.open_until}` };\n}\n\nexport async function recordProviderOutcome(provider: ProviderName, receipt: BrowserReceipt): Promise {\n const now = new Date().toISOString();\n if (receipt.status === \"PASS\" || receipt.status === \"PARTIAL\") {\n await sqlite.execute({\n sql: `UPDATE provider_health SET circuit_state='CLOSED', consecutive_failures=0, open_until=NULL,\n last_success_at=?, last_error=NULL, updated_at=? WHERE provider=?`,\n args: [now, now, provider],\n });\n return;\n }\n\n if (receipt.status === \"BLOCKED\") return;\n\n const row = (await sqlite.execute({ sql: \"SELECT consecutive_failures FROM provider_health WHERE provider=?\", args: [provider] })).rows[0] as any;\n const failures = Number(row?.consecutive_failures ?? 0) + 1;\n const shouldOpen = failures >= POLICY.providerCircuitFailureThreshold;\n const openUntil = shouldOpen ? new Date(Date.now() + POLICY.providerCircuitCooldownMs).toISOString() : null;\n await sqlite.execute({\n sql: `UPDATE provider_health SET circuit_state=?, consecutive_failures=?, open_until=?,\n last_failure_at=?, last_error=?, updated_at=? WHERE provider=?`,\n args: [shouldOpen ? \"OPEN\" : \"CLOSED\", failures, openUntil, now, receipt.error ?? receipt.status, now, provider],\n });\n}\n\nexport async function getProviderHealth() {\n return (await sqlite.execute(\"SELECT * FROM provider_health ORDER BY provider\")).rows;\n}\n",[],[267,417],"7ad8bdee-273b-4d7c-abcf-bb2f5d966c86","policy.ts","01a077bc-2b99-740d-9881-280da64a368a",["D",1788715215771],"import type { Risk } from \"./types.ts\";\n\nexport const POLICY = {\n version: \"0.5.0\",\n maxAttemptsPerTask: 2,\n retryDelayMs: 10_000,\n runningLeaseMs: 90_000,\n readOnlyFallbackAllowed: true,\n browserTimeoutMs: 25_000,\n providerFailureWindow: 5,\n providerCircuitFailureThreshold: 3,\n providerCircuitCooldownMs: 15 * 60_000,\n} as const;\n\nexport function isTerminalStatus(status: string): boolean {\n return [\"PASS\", \"PARTIAL\", \"FAIL\", \"BLOCKED\", \"CANCELLED\"].includes(status);\n}\n\nexport function decideDisposition(risk: Risk, receiptStatus: string, attemptCount: number) {\n const retryable = risk === \"read_only\" && receiptStatus === \"FAIL\" && attemptCount < POLICY.maxAttemptsPerTask;\n return {\n retryable,\n taskStatus: retryable ? \"PENDING\" : receiptStatus,\n retryDelayMs: retryable ? POLICY.retryDelayMs : 0,\n } as const;\n}\n\nexport async function withTimeout(promise: Promise, ms: number, label: string): Promise {\n let timer: number | undefined;\n const timeout = new Promise((_, reject) => {\n timer = setTimeout(() => reject(new Error(`${label} timed out after ${ms}ms`)), ms);\n });\n try {\n return await Promise.race([promise, timeout]);\n } finally {\n if (timer !== undefined) clearTimeout(timer);\n }\n}\n",[],[267,424],"7d31d3a0-a36d-43fe-acc2-6664bd750149","neuron_evolution.ts","7063f21a-aa18-11f1-84d5-1607ee4eb77e",8,["D",1788715736660],"export type SelectionCandidate = {\n agentId: string;\n netRevenue: number;\n operationallyEligible: boolean;\n terminal: boolean;\n};\n\nexport type SelectionState = \"INCUBATION\" | \"DEAD\" | \"SURVIVOR\";\n\nexport type SelectionResult = SelectionCandidate & {\n state: SelectionState;\n benchmark: number;\n rank?: number;\n offspringCount: number;\n};\n\nexport const MUTATION_ARCHETYPES = [\n \"faithful_replica\",\n \"tool_or_provider_mutation\",\n \"channel_or_market_mutation\",\n \"opposite_hypothesis\",\n \"causal_ablation\",\n] as const;\n\nexport function classifyCandidate(candidate: SelectionCandidate): SelectionResult {\n if (!candidate.operationallyEligible || !candidate.terminal) {\n return { ...candidate, state: \"INCUBATION\", benchmark: 0, offspringCount: 0 };\n }\n if (candidate.netRevenue <= 0) {\n return { ...candidate, state: \"DEAD\", benchmark: 0, offspringCount: 0 };\n }\n return { ...candidate, state: \"SURVIVOR\", benchmark: candidate.netRevenue, offspringCount: 1 };\n}\n\nexport function rankGeneration(candidates: SelectionCandidate[]): SelectionResult[] {\n const classified = candidates.map(classifyCandidate);\n const survivors = classified\n .filter((x) => x.state === \"SURVIVOR\")\n .sort((a, b) => b.netRevenue - a.netRevenue || a.agentId.localeCompare(b.agentId));\n\n const count = survivors.length;\n survivors.forEach((item, index) => {\n item.rank = index + 1;\n if (count === 1) item.offspringCount = 5;\n else {\n const percentile = index / count;\n item.offspringCount = percentile < 0.2 ? 5 : percentile < 0.5 ? 3 : 1;\n }\n });\n\n const byId = new Map(survivors.map((x) => [x.agentId, x]));\n return classified.map((x) => byId.get(x.agentId) ?? x);\n}\n\nexport function offspringPlan(parent: SelectionResult) {\n if (parent.state !== \"SURVIVOR\" || parent.offspringCount <= 0) return [];\n const count = Math.min(parent.offspringCount, MUTATION_ARCHETYPES.length);\n return Array.from({ length: count }, (_, index) => ({\n parentId: parent.agentId,\n childIndex: index + 1,\n mutation: MUTATION_ARCHETYPES[index],\n targetNetRevenue: parent.benchmark,\n }));\n}\n",[],[267,431],"bc8cbefe-eadd-4ab1-a695-c92931a29c9c","economic_policy.ts","4fb3747e-aa17-11f1-8e41-1607ee4eb77e",2,["D",1788715252312],"export type EconomicActionClass =\n | \"R0_OBSERVE\"\n | \"R1_PREPARE\"\n | \"R2_REVERSIBLE_WRITE\"\n | \"R3_COMMIT_SUBMIT\"\n | \"R4_ECONOMIC_SPEND\"\n | \"R5_IDENTITY_LEGAL\";\n\nexport type EconomicActionRequest = {\n actionClass: EconomicActionClass;\n approved?: boolean;\n amount?: number;\n maxBudget?: number;\n};\n\nexport type EconomicActionDecision = {\n allowed: boolean;\n humanGate: boolean;\n reason: string;\n};\n\nexport const ECONOMIC_POLICY = {\n version: \"0.6.0-candidate\",\n defaultBudget: 0,\n actionClasses: {\n R0_OBSERVE: \"Research/read/analyze only\",\n R1_PREPARE: \"Create local/draft artifacts without external commitment\",\n R2_REVERSIBLE_WRITE: \"Reversible external writes such as saving a draft\",\n R3_COMMIT_SUBMIT: \"External commitment such as submit/publish/PR\",\n R4_ECONOMIC_SPEND: \"Any action that spends money or credits\",\n R5_IDENTITY_LEGAL: \"KYC, banking, payout setup, legal or identity declarations\",\n },\n} as const;\n\nexport function evaluateEconomicAction(req: EconomicActionRequest): EconomicActionDecision {\n switch (req.actionClass) {\n case \"R0_OBSERVE\":\n case \"R1_PREPARE\":\n case \"R2_REVERSIBLE_WRITE\":\n return { allowed: true, humanGate: false, reason: \"AUTO_ALLOWED_BY_CLASS\" };\n case \"R3_COMMIT_SUBMIT\":\n return req.approved\n ? { allowed: true, humanGate: false, reason: \"CONTROLLED_WRITE_APPROVED\" }\n : { allowed: false, humanGate: true, reason: \"NEEDS_COMMIT_APPROVAL\" };\n case \"R4_ECONOMIC_SPEND\": {\n const amount = req.amount ?? 0;\n const budget = req.maxBudget ?? ECONOMIC_POLICY.defaultBudget;\n if (!req.approved) return { allowed: false, humanGate: true, reason: \"NEEDS_SPEND_APPROVAL\" };\n if (amount < 0) return { allowed: false, humanGate: true, reason: \"INVALID_NEGATIVE_AMOUNT\" };\n if (amount > budget) return { allowed: false, humanGate: true, reason: \"BUDGET_EXCEEDED\" };\n return { allowed: true, humanGate: false, reason: \"SPEND_WITHIN_APPROVED_BUDGET\" };\n }\n case \"R5_IDENTITY_LEGAL\":\n return { allowed: false, humanGate: true, reason: \"HUMAN_IDENTITY_OR_LEGAL_GATE\" };\n }\n}\n\nexport function netRevenue(input: {\n grossRevenue?: number;\n browserCost?: number;\n llmCost?: number;\n apiCost?: number;\n hostingCost?: number;\n platformFee?: number;\n transactionCost?: number;\n}) {\n const gross = input.grossRevenue ?? 0;\n const costs = (input.browserCost ?? 0) + (input.llmCost ?? 0) + (input.apiCost ?? 0) +\n (input.hostingCost ?? 0) + (input.platformFee ?? 0) + (input.transactionCost ?? 0);\n return gross - costs;\n}\n",[],[267,439],"ebc09386-8d31-425e-a75d-ce3486658bf8","dsl.ts","01a077bc-2b99-740d-9881-2409b3ecffa5",["D",1788715215771],"import type { BrowserTask } from \"./types.ts\";\n\nconst ALLOWED_ACTIONS = new Set([\n \"goto\", \"wait_for\", \"click\", \"fill\", \"fill_secret\", \"type\", \"select\",\n \"extract_text\", \"extract_attribute\", \"expect_text\", \"expect_url\",\n]);\n\nexport function validateTask(task: BrowserTask): string[] {\n const errors: string[] = [];\n if (!task || typeof task !== \"object\") return [\"task must be an object\"];\n if (!task.runId || task.runId.length > 128) errors.push(\"invalid runId\");\n if (!task.purpose || task.purpose.length > 1000) errors.push(\"invalid purpose\");\n if (!Array.isArray(task.steps) || task.steps.length < 1 || task.steps.length > 30) errors.push(\"steps must contain 1..30 actions\");\n if (![\"read_only\", \"reversible_write\", \"consequential\"].includes(task.risk)) errors.push(\"invalid risk\");\n if (task.risk !== \"read_only\" && task.approved !== true) errors.push(\"NEEDS_APPROVAL\");\n if (task.preferredProvider && ![\"kernel\", \"browserless\"].includes(task.preferredProvider)) errors.push(\"invalid preferredProvider\");\n if (task.evidenceRetention && ![\"minimal\", \"full\"].includes(task.evidenceRetention)) errors.push(\"invalid evidenceRetention\");\n\n let target: URL | undefined;\n try {\n target = new URL(task.targetUrl);\n if (![\"http:\", \"https:\"].includes(target.protocol)) errors.push(\"target protocol blocked\");\n } catch {\n errors.push(\"invalid targetUrl\");\n }\n\n const targetHost = target?.hostname;\n const allowed = new Set([targetHost, ...(task.allowedHosts ?? [])].filter(Boolean) as string[]);\n for (const [i, step] of (task.steps ?? []).entries()) {\n if (!step || !ALLOWED_ACTIONS.has((step as any).action)) {\n errors.push(`step ${i}: unsupported action`);\n continue;\n }\n const maybe = step as any;\n if (typeof maybe.selector === \"string\" && maybe.selector.length > 1000) errors.push(`step ${i}: selector too long`);\n if (typeof maybe.text === \"string\" && maybe.text.length > 10000) errors.push(`step ${i}: text too long`);\n if (maybe.action === \"fill_secret\") {\n if (typeof maybe.envVar !== \"string\" || !/^[A-Za-z_][A-Za-z0-9_]*$/.test(maybe.envVar)) errors.push(`step ${i}: invalid secret env var`);\n if (task.approved !== true) errors.push(\"NEEDS_SECRET_APPROVAL\");\n }\n if (maybe.action === \"extract_attribute\" && String(maybe.attribute).toLowerCase() === \"value\") {\n errors.push(`step ${i}: extracting value attribute is blocked to reduce secret leakage risk`);\n }\n if (maybe.action === \"goto\" && maybe.url) {\n try {\n const u = new URL(maybe.url);\n if (![\"http:\", \"https:\"].includes(u.protocol) || !allowed.has(u.hostname)) errors.push(`step ${i}: navigation host blocked`);\n } catch {\n errors.push(`step ${i}: invalid goto url`);\n }\n }\n }\n return [...new Set(errors)];\n}\n\nexport function buildKernelPlaywrightCode(task: BrowserTask): string {\n const plan = JSON.stringify(task);\n return `\nconst plan = ${plan};\nconst outputs = {};\nconst checks = [];\nconst targetHost = new URL(plan.targetUrl).hostname;\nconst allowedHosts = new Set([targetHost, ...(plan.allowedHosts || [])]);\nconst allowedMethods = new Set([\"GET\", \"HEAD\", \"OPTIONS\"]);\n\nconst assertUrl = (value) => {\n const u = new URL(value);\n if (![\"http:\", \"https:\"].includes(u.protocol)) throw new Error(\"blocked protocol\");\n if (!allowedHosts.has(u.hostname)) throw new Error(\"blocked host: \" + u.hostname);\n};\n\nawait page.route(\"**/*\", async (route) => {\n const req = route.request();\n try {\n if (req.isNavigationRequest() && req.frame() === page.mainFrame()) assertUrl(req.url());\n if (plan.risk === \"read_only\" && !allowedMethods.has(req.method().toUpperCase())) return route.abort(\"blockedbyclient\");\n return route.continue();\n } catch {\n return route.abort(\"blockedbyclient\");\n }\n});\n\npage.on(\"popup\", async (popup) => { try { await popup.close(); } catch {} });\nassertUrl(plan.targetUrl);\nawait page.goto(plan.targetUrl, { waitUntil: \"domcontentloaded\" });\nassertUrl(page.url());\n\nfor (const step of plan.steps) {\n switch (step.action) {\n case \"goto\": {\n const url = step.url || plan.targetUrl;\n assertUrl(url);\n await page.goto(url, { waitUntil: \"domcontentloaded\" });\n break;\n }\n case \"wait_for\":\n await page.locator(step.selector).waitFor({ state: \"visible\", timeout: step.timeoutMs || 10000 });\n break;\n case \"click\":\n if (step.waitForNavigation) {\n await Promise.all([\n page.waitForLoadState(\"domcontentloaded\"),\n page.locator(step.selector).click(),\n ]);\n } else await page.locator(step.selector).click();\n break;\n case \"fill\":\n await page.locator(step.selector).fill(step.text);\n break;\n case \"type\":\n await page.locator(step.selector).pressSequentially(step.text, { delay: step.delayMs || 0 });\n break;\n case \"select\":\n await page.locator(step.selector).selectOption(step.value);\n break;\n case \"extract_text\":\n outputs[step.key] = await page.locator(step.selector).innerText();\n break;\n case \"extract_attribute\":\n outputs[step.key] = await page.locator(step.selector).getAttribute(step.attribute);\n break;\n case \"expect_text\": {\n const body = await page.locator(\"body\").innerText();\n checks.push({ type: \"text\", expected: step.text, ok: body.includes(step.text) });\n break;\n }\n case \"expect_url\": {\n const actual = page.url();\n checks.push({ type: \"url\", expected: step.contains, actual, ok: actual.includes(step.contains) });\n break;\n }\n }\n assertUrl(page.url());\n}\n\nreturn {\n finalUrl: page.url(),\n outputs,\n checks,\n verified: checks.length > 0 && checks.every((x) => x.ok),\n};\n`;\n}\n\nexport function resolveSecrets(task: BrowserTask): BrowserTask {\n const steps = task.steps.map((step) => {\n if (step.action !== \"fill_secret\") return step;\n const value = Deno.env.get(step.envVar);\n if (value === undefined) throw new Error(`secret env var missing: ${step.envVar}`);\n return { action: \"fill\" as const, selector: step.selector, text: value };\n });\n return { ...task, steps };\n}\n",[],[267,447],"ffa9eab5-1611-4a35-91c1-b027af8f5f45","cost.ts","01a077bc-2b99-740d-9881-21df979511ad",["D",1788715215771],"import type { BrowserReceipt } from \"./types.ts\";\n\nexport function estimateProviderUnits(receipt: BrowserReceipt): number | null {\n if (receipt.status === \"BLOCKED\") return null;\n if (receipt.provider !== \"browserless\") return null;\n if (receipt.durationMs == null) return null;\n return Math.max(1, Math.ceil(receipt.durationMs / 30_000));\n}\n\nexport const COST_NOTES = {\n browserless: \"Estimated units cover browser-time only. Actual cost can be higher with CAPTCHA solving or built-in proxies.\",\n kernel: \"No local unit estimate: Kernel bills usage by GB-second; actual provider usage must be observed from the account.\",\n} as const;\n",[],[267,454],["D",1788715215771],[305,306,307,308,309,310,311,312],[267],"9b11c5f5-b155-47a5-b4df-46bb3b72111d","TASK_SCHEMA.md","01a077bc-2b99-740d-9881-199895a0596b",["D",1788715215771],"# Browser Task Schema — V0.5\n\nTasks are inserted into the val-scoped SQLite database by the authenticated ChatGPT Val Town plugin. There is no public enqueue endpoint.\n\n## Required fields\n\n- `runId`: unique stable id, <=128 chars.\n- `targetUrl`: http/https URL.\n- `risk`: `read_only`, `reversible_write`, or `consequential`.\n- `purpose`: human-readable reason for the run.\n- `steps`: 1..30 DSL actions.\n\n## Optional fields\n\n- `approved`: must be `true` for `reversible_write`, `consequential`, and any `fill_secret` action.\n- `allowedHosts`: extra main-navigation hosts, explicit only.\n- `preferredProvider`: `kernel` or `browserless`.\n- `evidenceRetention`: `minimal` (default) or `full`.\n\n## DSL actions\n\n- `goto`\n- `wait_for`\n- `click`\n- `fill`\n- `fill_secret`\n- `type`\n- `select`\n- `extract_text`\n- `extract_attribute` (attribute `value` is blocked)\n- `expect_text`\n- `expect_url`\n\n## Secret rule\n\nNever put a password, cookie, API token, or OTP secret in `task_json`.\nUse `fill_secret` with an environment-variable name. The value is resolved in execution memory only after approval.\n\n## Evidence retention\n\n`minimal` persists status, URL, checks, errors, duration and fallback metadata but omits extracted outputs and provider session ids.\n`full` persists the full receipt and should be used only when the extracted data is intentionally safe to retain.\n\n## Retry policy\n\n- Only `read_only` + provider `FAIL` is retryable.\n- Maximum 2 task attempts.\n- Retry delay: 10 seconds.\n- `BLOCKED`, `PARTIAL`, writes and consequential tasks are never automatically retried.\n- No cron/automatic runner is enabled, so a retry becomes eligible but does not consume browser credits until ChatGPT explicitly runs `runner.ts` again.\n\n## Provider fallback\n\n- Kernel is primary.\n- Browserless is fallback only for `read_only` tasks.\n- No cross-provider retry for writes.\n\n## PASS rule\n\nA successful browser call without at least one positive expectation remains `PARTIAL`.\n`PASS` requires all explicit expectations to succeed.\n",[],[272,464],"989fd312-57a2-4772-9d55-033ac00154a3","SMOKE_TASK.json","01a077bc-2b99-740d-9881-17f664878040",["D",1788715215771],"{\n \"state\": \"DRAFT_ONLY_DO_NOT_AUTO_ENQUEUE\",\n \"task\": {\n \"runId\": \"smoke-kernel-example-com\",\n \"targetUrl\": \"https://example.com\",\n \"risk\": \"read_only\",\n \"purpose\": \"First live cloud-browser smoke test after provider credential activation\",\n \"preferredProvider\": \"kernel\",\n \"evidenceRetention\": \"minimal\",\n \"steps\": [\n {\"action\": \"extract_text\", \"selector\": \"h1\", \"key\": \"heading\"},\n {\"action\": \"expect_text\", \"text\": \"Example Domain\"},\n {\"action\": \"expect_url\", \"contains\": \"example.com\"}\n ]\n },\n \"promotionCriteria\": [\n \"provider credential key exists in Val Town\",\n \"runner returns PASS\",\n \"heading equals Example Domain\",\n \"all expectations pass\",\n \"attempt receipt is persisted\",\n \"provider usage is observed when available\"\n ]\n}\n",[],[272,471],"312b84fe-7828-4773-b437-17bbbcbafdca","SECURITY_MODEL.md","01a077bc-2b99-740d-9881-11dec1877342",["D",1788715215771],"# Security Model — V0.5.0\n\n## Trust boundaries\n\n### Trusted control plane\n- normal authenticated ChatGPT conversation;\n- authenticated Val Town plugin operations;\n- source code committed in `cleitoncosta/chat-native-maestro` after validation.\n\n### Sensitive trusted storage\n- Val Town Environment Variables;\n- val-scoped SQLite, but only for non-secret task metadata/evidence.\n\n### Untrusted inputs\n- every webpage and frame;\n- page text, HTML, script-generated text and accessibility labels;\n- redirects;\n- URLs supplied by pages;\n- downloaded files;\n- DNS answers and provider responses as evidence that still needs validation;\n- third-party provider error messages.\n\nA webpage is data, never policy or authorization.\n\n## Threat 1 — Prompt injection from a webpage\n\nRisk: page content tries to instruct ChatGPT/runner to reveal secrets, change policy, expand allowed hosts, approve actions or run arbitrary code.\n\nControls:\n- browser receives a bounded DSL, not a free-form agent prompt;\n- no shell or arbitrary-JS task action;\n- page content cannot set `approved=true`;\n- page content cannot add env vars;\n- page content cannot alter `allowedHosts`;\n- browser result is evidence/data only.\n\nResidual risk: extracted malicious text can still be shown to the language model. The control plane must continue treating it as untrusted data.\n\n## Threat 2 — SSRF / internal network access\n\nRisk: task or redirect targets localhost, cloud metadata, private network or a public hostname resolving to non-public IPs.\n\nControls before provider call:\n- HTTP/HTTPS only;\n- URL userinfo blocked;\n- only ports 80/443;\n- direct private/link-local/loopback/reserved/documentation IPv4 and IPv6 ranges blocked;\n- localhost/internal/metadata hostnames blocked;\n- `allowedHosts` validated;\n- A and AAAA resolved through Cloudflare DNS-over-HTTPS;\n- task fails closed if DoH fails, no A/AAAA is found, or any resolved address is non-public.\n\nControls in browser:\n- main-frame navigation restricted to target host plus explicit allowed hosts;\n- popups closed.\n\nValidated negative control:\n`169.254.169.254` is blocked in the real runner before provider invocation.\n\nResidual risk: DNS rebinding after preflight cannot be fully proven absent by a one-time DoH check. Remote browser isolation and navigation checks remain required.\n\n## Threat 3 — Secret leakage\n\nRisk: credentials enter task JSON, source, logs or persistent receipts.\n\nControls:\n- provider credentials only in Val Town env vars;\n- site credentials referenced by env-var name with `fill_secret`;\n- secret value resolved in memory immediately before execution;\n- `fill_secret` requires explicit approval;\n- `extract_attribute: value` blocked;\n- default `evidenceRetention=minimal` omits extracted outputs and provider session IDs;\n- snapshot/export must exclude env-var values and raw sensitive task payloads.\n\nResidual risk: a target site can reflect a submitted secret into ordinary DOM text. The orchestrator must not deliberately extract selectors expected to contain secrets, and `full` retention must not be used for sensitive workflows without a specific reason.\n\n## Threat 4 — Duplicate/replayed writes\n\nRisk: timeout or provider error occurs after a write happened, then another attempt repeats the effect.\n\nControls:\n- automatic retry only for `read_only + FAIL`;\n- no automatic retry for `reversible_write` or `consequential`;\n- no cross-provider fallback for writes;\n- unique `run_id` in SQLite;\n- write tasks require explicit approval.\n\nResidual risk: even a read-classified website can mutate state via GET. The read-only method firewall is strong but cannot prove zero side effects on a badly designed server.\n\n## Threat 5 — Read-only task causes state mutation\n\nControls:\n- browser request firewall allows only GET/HEAD/OPTIONS for `read_only`;\n- common POST/PUT/PATCH/DELETE side effects are blocked;\n- explicit expectations and post-action verification required.\n\nResidual risk:\n- GET endpoints may have side effects;\n- service-worker/browser behavior can be complex;\n- some legitimate read APIs use POST/GraphQL and will fail under strict mode. Do not weaken strict mode silently; use a connector/fetch route or explicitly reclassify the task.\n\n## Threat 6 — Provider degradation / repeated spend\n\nRisk: provider outage causes repeated browser sessions or runaway retries.\n\nControls:\n- max 2 task attempts;\n- 10-second retry eligibility delay;\n- no automatic scheduler;\n- provider circuit opens after 3 consecutive FAILs;\n- 15-minute cooldown;\n- BLOCKED config errors do not increment failure count;\n- PASS/PARTIAL resets provider failures;\n- browser timeouts;\n- Kernel cleanup in `finally`.\n\n## Threat 7 — Stuck RUNNING job\n\nRisk: Val Town/runtime interruption leaves queue permanently locked.\n\nControls:\n- 90-second lease;\n- stale lease recovery;\n- retry budget checked during recovery;\n- terminal failure when retry budget exhausted.\n\nValidated with a real stale-job fixture that was removed after testing.\n\n## Threat 8 — Cost surprise\n\n### Kernel\n- recurring free credits are finite;\n- no automatic runner;\n- short browser timeout;\n- cleanup in `finally`;\n- actual Kernel GB-second usage remains provider-authoritative.\n\n### Browserless\n- local estimate covers base browser-time units only;\n- CAPTCHA/proxy add-ons are not inferred as free;\n- before activation, provider overage spend limit must be set to `$0`;\n- no automatic browser cron;\n- compare local estimated units to provider accounting.\n\n## Threat 9 — False PASS\n\nControls:\n- `TOOL_SUCCESS_RESPONSE != BEHAVIOR_PROOF`;\n- no checks -> `PARTIAL`, not PASS;\n- PASS requires at least one positive expectation and all expectations true;\n- provider/module/pricing availability never promotes a tool to OPERATIONAL;\n- credential, browser creation, actual action, validation and usage evidence are separate states.\n\n## Threat 10 — Public Free-tier source exposure\n\nThe personal Val Town Free workspace requires public source visibility.\n\nControls:\n- no secrets in source;\n- public HTTP endpoint exposes liveness only;\n- detailed task/provider state stays behind authenticated plugin execution;\n- env-var values are never returned by normal Val Town listing tools;\n- source assumes it is publicly readable.\n\n## Evidence-state vocabulary\n\n- `AVAILABLE`: provider/service exists.\n- `ADAPTER_LOADED`: code imports in Val Town.\n- `CONFIGURED`: required env-var key exists.\n- `AUTHENTICATED`: credential proved usable.\n- `AUTHORIZED`: required action is permitted.\n- `EXECUTED`: real provider action occurred.\n- `VERIFIED`: postcondition proved.\n- `OPERATIONAL`: full required chain is repeatedly or sufficiently evidenced for intended scope.\n- `BLOCKED`: known prerequisite prevents execution.\n- `UNVERIFIED`: evidence is absent; not equivalent to failure.\n\nCurrent Kernel and Browserless live-browser state remains `UNVERIFIED` because no user-created provider env vars exist yet.\n",[],[272,478],"43c57926-d688-45f9-bdd4-705fbd5186c1","PROVIDER_CENSUS.md","01a077bc-2b99-740d-9881-0e23597c5715",["D",1788715215771],"# Browser Provider Census — V0.5.0\n\nResearch snapshot: 2026-09-06.\n\nRanking target: normal ChatGPT mobile/web, no user PC, recurring free allowance, deterministic browser control, strong isolation, minimal browser-open time and zero-surprise-cost preference.\n\n## 1. Kernel — CHAMPION\n\nRuntime state: `ACCOUNT_KEY_REQUIRED` / live browser `UNVERIFIED`.\n\nCurrent official Free plan:\n- $0/month plus usage costs\n- $5/month free credits\n- 5 concurrent browsers\n- live view\n- stealth mode including CAPTCHA solver/proxy\n- managed auth (3 connections)\n- one-day session replays\n- uploads/downloads\n- no card required to get started\n- usage billed by GB-second\n\nTechnical fit:\n- official Val Town browser-automation guide/starter\n- `@onkernel/sdk`\n- server-side Playwright execution in the browser VM\n- on-demand `browsers.create()` is explicitly recommended for occasional/bursty/one-off work\n- browser is destroyed in `finally`\n\nAdapter: `providers/kernel.ts`.\nRequired env var: `KERNEL_API_KEY`.\n\nOfficial sources:\n- https://www.kernel.sh/pricing\n- https://www.kernel.sh/docs\n- https://docs.val.town/guides/browser-automation/kernel\n\n## 2. Browserless — RECURRING-FREE FALLBACK\n\nRuntime state: `ACCOUNT_TOKEN_REQUIRED` / live browser `UNVERIFIED`.\n\nCurrent official Free plan:\n- 1,000 units/month\n- 2 concurrent browsers\n- 2-minute max session\n- no card required\n- Chrome / WebKit / Firefox\n- automatic CAPTCHA solving available\n- persisted sessions/replays\n\nUnit model:\n- browser time: 1 unit per 30-second connection block\n- partial blocks round up\n- successful CAPTCHA solve: 10 additional units\n- residential proxy: 6 units/MB\n- datacenter proxy: 2 units/MB\n\nSeptember 2026 provider control:\n- account overage spend limit can be set to `$0`\n- this should be mandatory before promotion to fallback OPERATIONAL under this project's zero-surprise-cost policy\n\nAdapter: `providers/browserless.ts`.\nRequired env var: `BROWSERLESS_TOKEN`.\nOptional: `BROWSERLESS_BASE_URL`.\n\nOfficial sources:\n- https://www.browserless.io/pricing\n- https://docs.browserless.io/overview/unit-consumption\n- https://www.browserless.io/changelog/2026-09\n\n## 3. Browserbase — RESEARCHED FALLBACK\n\nState: researched, not implemented.\n\nVal Town has an official Browserbase integration guide and starter. It remains behind Kernel/Browserless because the current combination above better matches recurring-free allowance + CAPTCHA/anti-bot + cost control for this project.\n\nSource:\n- https://docs.val.town/guides/browser-automation/browserbase\n\n## 4. Steel — RESERVE / ONE-TIME-CREDIT PATH\n\nState: researched, not implemented.\n\nUseful properties:\n- open-source browser API\n- Puppeteer/Playwright\n- official Val Town integration guide\n\nLower priority because one-time starter credit is less aligned with recurring zero-cost steady state than Kernel/Browserless.\n\nSource:\n- https://docs.val.town/guides/browser-automation/steel\n\n## Routing rules V0.5\n\n1. Explicit configured `preferredProvider` is honored unless its circuit is OPEN.\n2. Otherwise Kernel is primary.\n3. Browserless fallback is allowed only for `read_only`.\n4. Provider `BLOCKED` for missing configuration does not increment health failures.\n5. Provider `FAIL` increments consecutive failures.\n6. Three consecutive FAILs open the provider circuit for 15 minutes.\n7. PASS/PARTIAL resets provider failure state.\n8. Never automatically retry a write on another provider.\n9. Keep reasoning outside the browser; send only a short deterministic DSL plan.\n10. No automatic cron runs browsers.\n\n## Promotion rule\n\nA provider cannot become `OPERATIONAL` from docs/pricing/module-load alone. Required evidence:\n- env-var key exists\n- credential authenticates\n- real browser is created\n- network preflight passes\n- read-only smoke plan executes\n- explicit expectations PASS\n- attempt is persisted\n- provider health remains CLOSED\n- actual account consumption is observed if available\n\nUntil all of these are true, state remains `UNVERIFIED` even if the SDK call returns successfully.\n",[],[272,485],"875dc314-896d-458c-b402-0a0485726280","CURRENT_STATE.md","01a077bc-2b98-7186-8f2c-a206cdcc09fd",["D",1788715215771],"# CURRENT_STATE — V0.5.0\n\nUpdated: 2026-09-06\n\n## Canonical runtime\n\n`normal ChatGPT mobile/web -> authenticated Val Town plugin -> val-scoped SQLite -> runner.ts -> provider router -> cloud browser -> receipt`\n\nNo Codex and no user computer are required.\n\n## Val Town\n\n- Val: `cleitoncosta/chat-native-maestro`\n- Personal workspace tier: Free\n- Code visibility: public (Free-tier constraint)\n- Public HTTP: minimal liveness only\n- Detailed diagnostics: authenticated `status.ts`\n- Task execution: authenticated Val Town plugin only\n- Persistent state: val-scoped SQLite\n- Schema/app version: 0.5.0\n- Automatic runner/cron: disabled\n\n## Implemented files\n\n### Entrypoints\n- `main.ts` — minimal public GET-only liveness endpoint.\n- `status.ts` — authenticated provider/task/cost/security diagnostics.\n- `runner.ts` — queue lease, validation, network preflight, routed execution, retry decision, receipt persistence.\n- `selftest.ts` — stateless DSL/config regression tests.\n- `stateful_selftest.ts` — circuit breaker, timeout and retry-state regression tests with state restoration.\n- `url_selftest.ts` — URL/DNS/SSRF regression tests.\n\n### Libraries\n- `lib/types.ts` — typed task/receipt/evidence schema.\n- `lib/dsl.ts` — DSL validation, browser program generation, in-memory secret resolution.\n- `lib/policy.ts` — retry/lease/timeout/circuit constants and pure disposition logic.\n- `lib/provider_health.ts` — circuit breaker state machine.\n- `lib/cost.ts` — provider cost-estimation rules.\n- `lib/url_security.ts` — fail-closed URL/DNS-over-HTTPS preflight.\n\n### Providers\n- `providers/router.ts` — provider routing/fallback with health tracking.\n- `providers/kernel.ts` — primary browser adapter.\n- `providers/browserless.ts` — secondary browser adapter.\n\n### Documentation\n- `README.md`\n- `docs/CURRENT_STATE.md`\n- `docs/PROVIDER_CENSUS.md`\n- `docs/ACTIVATION_RUNBOOK.md`\n- `docs/TASK_SCHEMA.md`\n- `docs/SMOKE_TASK.json`\n\n## Database schema V0.5\n\n### `browser_tasks`\nDurable queue and terminal receipt state. New V0.5 fields:\n- `attempt_count`\n- `claimed_at`\n- `next_attempt_at`\n\n### `browser_attempts`\nOne row per provider attempt/fallback with:\n- attempt number\n- provider\n- timestamps\n- status/error\n- duration\n- sanitized receipt\n- estimated Browserless units\n\n### `provider_health`\nCircuit state per provider:\n- `CLOSED` / `HALF_OPEN` / `OPEN`\n- consecutive failures\n- cooldown timestamp\n- last success/failure/error\n\n### `provider_census`\nProvider ranking and current free-tier facts.\n\n### `schema_meta`\n`schema_version=0.5.0`, `app_version=0.5.0`.\n\n## Operational policy V0.5\n\n- max attempts per task: 2\n- read-only FAIL retry delay: 10 s\n- RUNNING lease: 90 s\n- browser execution timeout: 25 s\n- provider circuit opens at 3 consecutive FAILs\n- circuit cooldown: 15 min\n- automatic cross-provider fallback: read-only only\n- automatic scheduled execution: disabled\n\nA retry can become `PENDING`, but it cannot consume browser credits until ChatGPT explicitly invokes the runner again.\n\n## Network security\n\nBefore any provider execution:\n- only HTTP/HTTPS\n- URL credentials/userinfo blocked\n- nonstandard ports blocked\n- private/link-local/loopback/reserved/documentation IPv4/IPv6 blocked\n- localhost/internal/metadata hostnames blocked\n- allowed hosts validated\n- A/AAAA resolved through Cloudflare DNS-over-HTTPS\n- any resolved non-public IP blocks the task\n- DNS/preflight failure fails closed\n\nRunner-level negative-control proof:\n`ssrf-runner-v05 -> BLOCKED / NETWORK_PREFLIGHT_BLOCKED: blocked hostname: 169.254.169.254`\n\nThe fixture was deleted after verification.\n\n## Secret policy\n\nTask JSON never stores secret values.\n`fill_secret` stores only an env-var name and requires explicit approval.\nThe value is resolved in memory immediately before provider execution.\n\n`extract_attribute` of `value` is blocked to reduce accidental credential leakage.\n\nCurrent user-created Val Town env-var count: **0**.\n\n## Evidence retention\n\nDefault: `minimal`.\nPersisted by default:\n- run/provider/status\n- final URL\n- checks\n- errors\n- duration\n- fallback evidence\n- network preflight evidence\n\nNot persisted by default:\n- extracted outputs\n- provider session ID\n\n`full` must be intentionally requested.\n\n## Cost policy\n\n### Kernel\nOfficial current Free plan verified 2026-09-06:\n- $0/month plus usage\n- $5 monthly free credits\n- 5 concurrent browsers\n- no card required to start\n- billed by GB-second\n\nLocal Kernel cost estimate remains unsupported; actual account usage must be observed.\n\n### Browserless\nOfficial current Free plan verified 2026-09-06:\n- 1,000 units/month\n- 2 concurrent browsers\n- max session 2 min\n- no card\n- browser time 1 unit/30 s\n- CAPTCHA/proxy additional\n- overage cap should be set to $0 if Browserless is activated\n\nThe runtime estimates base browser-time units only; actual provider accounting remains authoritative.\n\n## Evidence states\n\n### PASS\n\n- ChatGPT Val Town plugin authentication.\n- Free workspace enumerated.\n- create/edit/run/deploy.\n- public liveness HTTP 200.\n- authenticated diagnostics.\n- SQLite schema/migrations/versioning.\n- atomic queue claim.\n- empty queue behavior.\n- stale RUNNING lease recovery.\n- task attempt persistence.\n- retry policy pure test.\n- timeout test.\n- provider circuit OPEN after three synthetic FAILs and restoration to CLOSED.\n- consequential action approval gate.\n- secret approval gate.\n- invalid provider rejection.\n- `value` attribute extraction block.\n- Kernel SDK adapter module load.\n- Browserless adapter module load.\n- missing provider credential -> BLOCKED.\n- DoH availability through normal Val Town HTTPS egress.\n- public-domain DNS preflight.\n- local/private/metadata/userinfo/nonstandard-port URL blocks.\n- runner-level SSRF block before provider invocation.\n- automatic schedule disabled.\n\n### UNVERIFIED\n\n- Kernel API authentication for this account.\n- live Kernel browser creation.\n- live Kernel server-side Playwright execution.\n- Kernel real credit consumption.\n- Browserless API authentication for this account.\n- live Browserless `/function` execution.\n- Browserless real unit consumption.\n\n## Persistent historical negative controls\n\nThese three V0.4 records intentionally remain in `browser_tasks` as historical evidence:\n1. `neg-control-no-kernel-key` -> BLOCKED / `KERNEL_API_KEY missing`.\n2. `neg-control-no-browserless-token` -> BLOCKED / `BROWSERLESS_TOKEN missing`.\n3. `neg-control-secret-not-approved` -> BLOCKED / `NEEDS_SECRET_APPROVAL`.\n\nV0.5 synthetic lease/circuit/SSRF fixtures were removed after tests so production metrics are not polluted.\n\n## Next incomplete milestone\n\nExactly one external action remains necessary: configure a recurring-free browser credential, preferably `KERNEL_API_KEY`, directly in Val Town env vars. Do not paste it into chat.\n\nAfter the key exists:\n1. confirm only the env-var **name** exists;\n2. enqueue `docs/SMOKE_TASK.json` explicitly;\n3. execute `runner.ts` once;\n4. inspect task + attempt receipt;\n5. verify `heading = Example Domain` and all checks PASS;\n6. inspect provider usage;\n7. only then promote Kernel from `ACCOUNT_KEY_REQUIRED/UNVERIFIED` to `OPERATIONAL`.\n",[],[272,492],"59787f7c-1e09-4175-b579-f752ee64d035","ACTIVATION_RUNBOOK.md","01a077bc-2b98-7186-8f2c-9ca4b3fc4a0e",["D",1788715215771],"# Activation Runbook — V0.5.0\n\n## Objetivo\n\nAtivar exatamente um browser cloud sem depender de Codex ou computador do usuário e sem criar execução automática que possa consumir franquia sozinha.\n\nO provider preferido para a primeira ativação é **Kernel**.\n\n## 1. Kernel — ativação preferencial\n\n### Conta e chave\n\n1. Criar ou entrar em uma conta Kernel Free.\n2. Gerar uma API key no dashboard Kernel.\n3. Abrir diretamente o editor de Environment Variables do Val Town.\n4. Criar `KERNEL_API_KEY` com o valor da chave.\n5. Não colar a chave no ChatGPT, README, código, SQLite, issue, log ou task JSON.\n\nVal Town env editor:\nhttps://www.val.town/x/cleitoncosta/chat-native-maestro/environment-variables?key=KERNEL_API_KEY\n\nKernel API key dashboard:\nhttps://dashboard.onkernel.com/api-keys\n\n### Após gravar a chave\n\nNão executar browser imediatamente.\n\n1. ChatGPT consulta `list_env_vars` e confirma apenas que o **nome** `KERNEL_API_KEY` existe. O valor não deve ser retornado.\n2. Executar `selftest.ts` e `status.ts`.\n3. Confirmar:\n - Kernel `configured=true`;\n - circuit `CLOSED`;\n - nenhum job `PENDING` inesperado;\n - `automaticSchedule=disabled`.\n4. Ler `docs/SMOKE_TASK.json`.\n5. Inserir explicitamente a task draft no SQLite como `PENDING` somente nesse momento.\n6. Executar `runner.ts` exatamente uma vez.\n7. Ler o registro de `browser_tasks` e `browser_attempts` do smoke.\n8. Exigir:\n - receipt `PASS`;\n - `finalUrl` contém `example.com`;\n - `expect_text` passou;\n - `expect_url` passou;\n - output corrente `heading` é `Example Domain`;\n - attempt persistido;\n - circuit continua `CLOSED`.\n9. Consultar uso/créditos no Kernel, quando disponível.\n10. Somente depois atualizar o estado do Kernel para `OPERATIONAL`.\n\n### Promoção rejeitada se\n\n- SDK retorna sucesso mas expectations falham;\n- receipt é `PARTIAL`;\n- browser cria mas não navega;\n- network preflight falha;\n- circuit abre;\n- consumo não pode ser observado quando isso é material à decisão;\n- qualquer etapa é apenas inferida, não executada.\n\n## 2. Browserless — fallback\n\nAtivar somente se Kernel onboarding estiver bloqueado ou para validar redundância.\n\n### Antes da chave\n\nNo dashboard Browserless, configurar o **overage spend limit para $0**. Isso é requisito deste projeto para evitar cobrança surpresa.\n\nDepois:\n1. criar/entrar na conta Browserless Free;\n2. obter o token;\n3. salvar como `BROWSERLESS_TOKEN` no Val Town;\n4. opcionalmente salvar `BROWSERLESS_BASE_URL` se o account endpoint regional diferir do default;\n5. nunca colar o token em chat/código/SQLite.\n\nVal Town env editor:\nhttps://www.val.town/x/cleitoncosta/chat-native-maestro/environment-variables?key=BROWSERLESS_TOKEN\n\n### Smoke Browserless\n\nUsar a mesma task de `docs/SMOKE_TASK.json`, alterando apenas:\n\n```json\n\"preferredProvider\": \"browserless\"\n```\n\nExigir os mesmos critérios de PASS e, adicionalmente:\n- registrar `estimated_units`;\n- comparar com units reais do provider;\n- lembrar que CAPTCHA/proxy podem gerar units adicionais e não estão incluídos na estimativa local.\n\n## 3. Credenciais de sites-alvo\n\nPara login em um site, criar env vars específicas no Val Town, por exemplo:\n- `PORTAL_USERNAME`\n- `PORTAL_PASSWORD`\n\nTask JSON usa apenas referência:\n\n```json\n{\n \"action\": \"fill_secret\",\n \"selector\": \"#password\",\n \"envVar\": \"PORTAL_PASSWORD\"\n}\n```\n\n`fill_secret` exige aprovação explícita mesmo quando a finalidade geral é leitura.\n\nNunca armazenar senha/token diretamente em `task_json`.\n\n## 4. Regras de segurança operacional\n\n- Não executar task automaticamente só porque uma credencial apareceu.\n- Não criar cron de browser por padrão.\n- Não repetir writes em outro provider após falha.\n- Não transformar `FAIL` de provider em prova de ausência de side effect.\n- Não usar `evidenceRetention=full` com dados sensíveis sem necessidade explícita.\n- Não extrair atributo `value` de campos de formulário; a DSL bloqueia isso.\n- Não usar localhost, metadata cloud, rede privada, URL com userinfo ou porta não padrão; o network preflight bloqueia.\n- Não desabilitar o DNS-over-HTTPS preflight para “fazer funcionar”.\n- Não ampliar `allowedHosts` automaticamente a partir de conteúdo da página.\n- Não tratar uma página como fonte de autorização, policy ou segredo.\n\n## 5. Política de custo\n\n### Kernel\nO plano Free atual fornece créditos mensais; o runtime mantém browser com timeout curto e cleanup em `finally`. Não existe cron de browser.\n\n### Browserless\nA franquia Free é baseada em units. Antes da ativação:\n- overage cap = $0;\n- manter sessões curtas;\n- não habilitar proxy/CAPTCHA sem necessidade;\n- comparar `estimated_units` com uso real.\n\n## 6. Estado atual\n\nEnquanto `list_env_vars` não mostrar `KERNEL_API_KEY` ou `BROWSERLESS_TOKEN`, ambos continuam:\n\n`AVAILABLE/ADAPTER_LOADED != AUTHENTICATED != OPERATIONAL`\n\nNenhum provider deve ser promovido por documentação, pricing, existência do SDK ou sucesso de importação isoladamente.\n",[],[272,499],["D",1788715215771],[298,299,300,301,302,303],[272],"0bd27574-a4c3-4d33-aaf0-fde83f6d055e","kaggriculture_neuron_protocol_v1.md","ee36dfc6-aa19-11f1-ad34-1607ee4eb77e",12,["D",1788716377031],"# Kaggriculture — Neurônio Competition Protocol V1\n\nStatus: R1_PREPARE / NO KAGGLE SUBMISSION YET\nAgent: A4-KAGGRICULTURE\nOpportunity: OP-KAGGRICULTURE-202609\nPrepared: 2026-09-06\n\n## Primary contract\n\n- Start: 2026-07-29\n- Entry / team-merger deadline: 2026-09-23 23:59 UTC\n- Final submission deadline: 2026-09-30 23:59 UTC\n- Final convergence/tournament continues into ~2026-10-15\n- Prize pool: USD 50,000\n- 10 prize positions × USD 5,000\n- No purchase necessary\n- 5 submissions/team/day\n- Latest 2 submissions are the active/final-evaluation pair\n- Winner of an episode = higher bank cash after 720 turns; cash margin itself does not change rating magnitude\n- Validation episode runs a submission against itself before ladder admission\n\n## Grimório interpretation\n\nThis competition is unusually compatible with the Neurônio method because the external environment supplies:\n\n- repeated trials;\n- adversarial opponents;\n- observable fitness;\n- daily mutation budget;\n- public replay evidence;\n- a final tournament;\n- an explicit economic objective.\n\nDo NOT use Kaggle rating as the only truth. Public discussion documents meaningful rating noise and large rating differences between identical submissions. Use paired local matches + ladder as independent evidence.\n\n## Champion / challenger slot policy\n\nBecause only the latest 2 submissions are used for final evaluation:\n\n1. Slot C = CURRENT_PROVEN_CHAMPION.\n2. Slot X = CHALLENGER.\n3. Never replace both slots with unproven mutations in the same generation.\n4. If X beats C in controlled evaluation and survives ladder falsification, X becomes C.\n5. Re-submit/freeze the champion when necessary to keep one latest slot occupied by a known-good artifact.\n6. Preserve exact code hash, parameters, tests, seed set and evidence for every champion epoch.\n\nThis is the competition-level equivalent of `CURRENT_PROVEN_CHAMPION`.\n\n## What current public meta evidence says\n\nCommunity evidence is discovery/benchmark evidence, not authority:\n\n- A fixed-asset strategy has been reported around 81% win rate and became widely copied.\n- A recently observed highly adaptive #1 agent was reported 40-0 over a 40-game public x-ray window with median margin around +13k before being retired by its team.\n- Another public report reached ~80k terminal cash with PPO but hit a wall and moved toward a hybrid policy + deterministic executor.\n- Public analysis repeatedly identifies path/walking inefficiency as a major bottleneck; early work reported 83% of unit-turns moving, improved toward ~55% by avoiding target thrashing.\n- The first ~10 daily hires are inexpensive relative to farm economics; labor-action capacity is generally cheaper than bad routing.\n- Static replay/meta agents remain strong, so novelty alone is not fitness.\n\n## Official-engine facts that matter to strategy\n\n- 30 days × 24 turns = 720 turns.\n- Starting money default: 3000.\n- Farm starts with one unlocked 5×5 quadrant.\n- Additional land: 1000, 2000, 4000 in fixed order.\n- Hiring resets daily and follows Fibonacci cost × multiplier.\n- Opponent farm is visible; opponent shed/private inventory is hidden.\n- Market inventory/prices are shared and persistent.\n- Selling pushes a resource into the glut branch for both players.\n- Town demand removes products from shared market inventory and can create scarcity.\n- Melon has no specialty-shop demand; town center is its principal exogenous sink.\n- Animals can create fertilizer daily; uncollected fertilizer does not accumulate.\n- Shed capacity is finite; excess end-of-day inventory can be discarded.\n- End-state winner uses cash in bank, so unliquidated inventory/capital is dangerous near horizon.\n\n## Architecture hypothesis\n\nThe strongest zero/low-compute direction is not pure LLM, pure RL, or a fixed tape.\n\nUse:\n\n`ADAPTIVE MACRO PLANNER → DETERMINISTIC TASK GRAPH → PATH/ACTION EXECUTOR → MARKET EXECUTOR`\n\n### Macro planner\n\nRecomputes only when meaningful state changes occur:\n\n- new day;\n- town shop unlock;\n- material price movement;\n- opponent commits to a new production cluster;\n- land/animal/crop lifecycle event;\n- endgame horizon threshold.\n\nOutputs desired asset mix, harvest/sell timing, land/hire budget and target inventory.\n\n### Deterministic executor\n\nConverts macro intent into explicit work orders and avoids per-turn retargeting:\n\n1. finish all useful same-tile operations before moving;\n2. assign persistent tasks to units;\n3. minimize Manhattan movement / use clustered layouts;\n4. prioritize survival actions (water/feed) over yield optimization;\n5. preserve item/shed capacity;\n6. use hands only when marginal task value exceeds hire + walking cost.\n\n### Market executor\n\nPredicts near-future shared inventory from:\n\n- current market inventory;\n- known town demand;\n- our visible production pipeline;\n- opponent visible crops/animals;\n- our hidden inventory;\n- horizon.\n\nThen chooses `sell now`, `hold`, or `produce another resource` based on expected marginal sale price, not base price.\n\n## Initial Neurônio branches\n\nThese are research variants, NOT economic offspring. Economic offspring are created only after positive real net revenue.\n\n### K0 — Deterministic control\n\nPurpose: stable control and regression oracle.\n\n- compact 1–3 quadrant layout;\n- deterministic task completion;\n- simple horizon-aware liquidation;\n- no opponent adaptation except basic price observation.\n\nMust be reproducible across seeds.\n\n### K1 — Labor/route optimizer\n\nMutation: K0 + workload-derived hands + persistent routing.\n\nHypothesis: reducing walking/thrashing provides larger win gain than adding a more sophisticated crop-value model.\n\nAblation: same macro policy with fixed hands / naive nearest-target routing.\n\n### K2 — Livestock/fertilizer flywheel\n\nMutation: K1 + animal-centric asset allocation.\n\n- value named product + fertilizer stream jointly;\n- feed/care/collect as co-located task bundle;\n- use fertilizer where marginal crop gain beats fertilizer sale value;\n- adapt animal type to observed shop demand.\n\nFalsifier: seasons with weak product demand; action/walking cost; wheat feed opportunity cost.\n\n### K3 — Opponent-aware anti-glut\n\nMutation: K1 + forecast opponent future supply from public farm state.\n\n- front-run likely opponent dumps;\n- avoid entering a resource whose predicted shared glut destroys both margins;\n- exploit complementary demand holes;\n- maintain uncertainty because opponent shed is hidden.\n\nFalsifier: opponent visibility adds noise without enough predictive power.\n\n### K4 — Demand/horizon portfolio\n\nMutation: K1 + explicit NPV by remaining turns and town draw.\n\n- only start an asset if expected payback occurs before wind-down;\n- demand-sensitive product allocation;\n- controlled inventory holding under shed limit;\n- late-game liquidation schedule;\n- land expansion only when marginal NPV beats capital + route overhead.\n\nFalsifier: static meta beats adaptivity because replanning causes execution instability.\n\n### K5 — Hybrid champion candidate\n\nOnly created after K1–K4 evidence.\n\n`K1 executor + best macro mechanisms from K2/K3/K4`\n\nDo not fuse every feature. Each mechanism must survive ablation first.\n\n## Evaluation harness when Kaggle runtime becomes available\n\nFor every candidate:\n\n1. validation episode/self mirror;\n2. fixed seed suite;\n3. both player seats;\n4. built-ins: pass/random/starter;\n5. public reference agents used only as attributed controls;\n6. CURRENT_CHAMPION head-to-head;\n7. paired seeds so both candidates face identical stochastic worlds;\n8. report win/loss/tie, terminal bank, movement %, pass %, task completion, discarded inventory, deaths/weeds/escapes, realized price per product and land/hire utilization.\n\nUse Bradley-Terry or paired win rate for ranking; terminal bank is diagnostic, not the competition's sole ranking signal.\n\n## Promotion gate\n\nA challenger can replace Champion only when all are true:\n\n- zero validation/runtime errors;\n- deterministic invariants pass;\n- >50% paired win rate vs champion with enough episodes to avoid obvious noise;\n- preferably >=60% before online promotion in early generations;\n- no material regression against reference-agent basket;\n- improvement mechanism is explainable or survives ablation;\n- exact submission artifact hash preserved.\n\n## Daily online use of 5 submission budget\n\nDo not spend 5 slots blindly.\n\nSuggested cadence after local harness exists:\n\n1. champion/canary if needed;\n2. strongest challenger;\n3. orthogonal challenger with high information gain;\n4–5 only when earlier evidence justifies them.\n\nBecause only the latest 2 are final-active, order matters. Preserve champion + one challenger at day end.\n\n## Negative-space questions\n\n- Are top agents intentionally retired to reduce replay harvesting?\n- Does a fixed-route meta dominate only because common opponents are copies of it?\n- Can opponent-aware adaptation exploit this monoculture?\n- Is 4th quadrant ever NPV-positive after walking + labor + delayed production?\n- Is fertilizer sale or use better under each current demand state?\n- Can shop draw be inferred early enough to materially reallocate assets?\n- Does expected-value demand planning lose to robust/worst-case planning?\n- Is market timing more valuable than production optimization?\n- Which features improve terminal bank but reduce head-to-head win rate?\n\n## Required next external gate\n\nKaggle account must accept the competition rules before 2026-09-23. This is an R3/terms/account gate and cannot be truthfully fabricated by the agent.\n\nAfter that, use the official `kaggle_environments` runtime as the oracle. Do not promote a hand-written substitute simulator as proof of game performance.\n",[],[277,509],"00a862ef-d86a-4945-a833-760ba8728205",["D",1788726824853],[],[277,32],"0e19555c-7e69-4662-ba5f-cae3f13cdc4e","calle_feedback_candidate_v1.md","51f5ad64-aa18-11f1-a53a-1607ee4eb77e",7,["D",1788715685600],"# CALL-E Feedback Candidate V1\n\nStatus: R1_PREPARE / NOT SUBMITTED\nAgent: A2-CALLE\nOpportunity: OP-CALL-E-20260914\nPrepared: 2026-09-06\n\n## Why this candidate exists\n\nThe CALL-E rules allow one feedback submission per entrant and explicitly value actionable bug reports, UI improvements, documentation improvements, and suggested integrations. This artifact contains only findings supported by public documentation/repository evidence. It does **not** claim an authenticated CALL-E runtime test or a real phone call.\n\n## Finding 1 — Supported-region documentation can become stale relative to the maintained region backlog\n\n### Evidence\n\n- The current repository README lists Kenya (`KE`, +254, English, International) in the public “Supported Regions and Languages” table.\n- The current regional/language backlog in GitHub issue #102 records Kenya (`KE`, +254, Swahili) as `Requested`, added 2026-09-01, not `Enabled`.\n- The latest README commit returned for `README.md` was 2026-08-27, while the backlog contains later state changes through 2026-09-03.\n\n### User/agent impact\n\nAn agent that trusts the README as a capability contract can select a recipient/locale combination that the live service may reject. For autonomous callers this is more serious than a normal documentation typo: unsupported-route failures happen near a consequential action boundary and can break planning, retry logic, cost estimation, and user expectations.\n\n### Suggested improvement\n\nCreate one canonical machine-readable capability source and derive public documentation from it. For example:\n\n1. expose a read-only API/MCP capability such as `list_supported_regions` / `get_call_capabilities`;\n2. return region, calling code, supported locales/languages, line type/region, availability state, and effective date;\n3. generate the README table from that source in CI;\n4. fail CI when the generated table and committed documentation diverge;\n5. include a `last_updated`/capability-version value so agent clients can reason about staleness.\n\nThis avoids manually synchronized capability claims across README, issues, Discord and backend behavior.\n\n## Finding 2 — Capability discovery is missing from the 3-tool MCP workflow\n\nThe public MCP contract exposes only:\n\n- `plan_call`\n- `run_call`\n- `get_call_run`\n\nFor an agent, supported-region/language discovery therefore appears to happen only indirectly when `plan_call` rejects or clarifies a request. A read-only capability-discovery tool would let an agent validate a plan before generating a call workflow and would make the system friendlier for unattended automation.\n\n### Suggested tool\n\n`get_call_capabilities({ destination_country?, locale?, channel? })`\n\nPossible output:\n\n```json\n{\n \"capability_version\": \"...\",\n \"destination_country\": \"BR\",\n \"calling_code\": \"+55\",\n \"supported\": true,\n \"languages\": [\"Portuguese\", \"English\"],\n \"locales\": [\"pt-BR\", \"en-...\"],\n \"line_region\": \"Local\",\n \"effective_at\": \"...\"\n}\n```\n\nThis is especially useful for agents that need to choose among regions or languages before `plan_call`.\n\n## Finding 3 — Documentation currentness should be treated as a runtime contract\n\nThe repository is evolving quickly: recent public issues include Windows shell incompatibility (#111), SSE parsing loss (#110), CLI binary collision (#109), missing recovery guidance (#108), and an API-key placeholder mismatch (#107). These are already reported, so they should **not** be duplicated in the feedback survey as new bugs. However, together they show that integration documentation is a fast-moving operational surface.\n\n### Suggested improvement\n\nPublish a small generated compatibility manifest alongside the install guide, for example:\n\n```json\n{\n \"cli_version\": \"...\",\n \"mcp_protocol\": \"...\",\n \"supported_shells\": [\"bash\", \"pwsh\", \"cmd\"],\n \"mcp_tools\": [\"plan_call\", \"run_call\", \"get_call_run\"],\n \"capability_version\": \"...\",\n \"docs_commit\": \"...\"\n}\n```\n\nAgent integrations could verify this before using cached instructions. This would reduce the chance of an agent following stale command syntax or capability assumptions.\n\n## Recommended survey wording\n\n> I found a currentness problem in the supported-region documentation that is particularly important for autonomous agents. The current README lists Kenya (+254) as a supported English/International destination, while the maintained regional backlog in issue #102 records Kenya as Requested (added Sep 1, not Enabled). The README’s latest returned commit is Aug 27, so the two public capability surfaces can disagree as support changes weekly. I recommend making the region/language matrix machine-readable and generating the README from the same source, with a capability version/effective date. It would also be useful to expose a read-only MCP/API capability such as `get_call_capabilities` so agents can validate destination + locale before `plan_call` rather than learning support only through a failed/clarification path. A CI check could fail when generated docs diverge from the canonical capability source. I did not place a real call for this finding; this is a public docs/repository consistency audit.\n\n## Falsification / remaining work before submission\n\n- Re-check the live README immediately before submission.\n- Re-check issue #102 immediately before submission.\n- If a documented capability API/tool already exists elsewhere, revise Finding 2 from “missing” to “hard to discover in the public integration path”.\n- If authenticated CALL-E access is created, run a **plan-only** Brazil/Portuguese capability check first. Do not call `run_call` as a connectivity test.\n- Do not claim a phone call was attempted unless it actually was.\n\n## Evidence state\n\nFinding 1: STRONG / public contradiction observed\nFinding 2: PARTIAL / absence confirmed in public 3-tool MCP contract, backend-wide absence not proven\nFinding 3: INFERENCE / synthesis from multiple already-reported integration issues\n\n## Economic state\n\nGross revenue: 0\nCost recorded by this agent: 0\nNet revenue: 0\nStatus: PREPARED_NOT_SUBMITTED\n",[],[277,521],"05af4f80-7c0e-4dba-9cc2-f5000cae2a0d","HUMAN_GATE_KAGGRICULTURE_20260906.md","0e5a86d4-aa30-11f1-a6db-1607ee4eb77e",15,["D",1788725880082],"# HUMAN GATE — Kaggriculture\n\nStatus: READY_FOR_USER_ACTION\nChecked: 2026-09-06\nOpportunity: OP-KAGGRICULTURE-202609\nAgent: A4-KAGGRICULTURE\n\n## Proven current primary-source facts\n\n- Official competition: https://www.kaggle.com/competitions/kaggriculture\n- Official rules: https://www.kaggle.com/competitions/kaggriculture/rules\n- Sponsor: Google LLC\n- Total prizes: USD 50,000\n- 10 prizes of USD 5,000 each\n- Entry Deadline: 2026-09-23\n- Team Merger Deadline: 2026-09-23\n- Final Submission Deadline: 2026-09-30\n- Maximum submissions: 5/day\n- Up to 2 final submissions may be selected for judging\n- Rules explicitly permit AMLT/automated machine learning tools subject to licensing/rule compliance.\n- General eligibility is worldwide except listed sanctioned/restricted territories; Brazil is not among the listed exclusions in the current rules.\n- A Kaggle account and acceptance of the competition rules are required before the Entry Deadline.\n\n## Human action required\n\n1. Sign in to the user's real Kaggle account.\n2. Open the Kaggriculture competition page.\n3. Click `Join Competition`.\n4. Read and accept the official competition rules using the user's own identity/account.\n5. Do not create multiple Kaggle accounts; the rules prohibit multiple accounts.\n6. Stop after the competition shows the account as joined. Do not submit an agent yet.\n\n## Why this is a human gate\n\nAccepting binding competition rules is an identity/legal action (R5/HUMAN_GATE). The agent may prepare strategies, code, tests, ablations and submissions, but must not impersonate the user or accept binding terms on the user's behalf.\n\n## After the gate\n\nExpected next lifecycle state: `JOINED_RESEARCHING`.\nThe autonomous work resumes with K0→K5 strategy experiments, simulation/replay analysis, deterministic executor optimization, anti-glut/opponent-aware branches, falsification and champion selection.\n\n## Important correction from previous plan\n\nCALL-E/Devpost must NOT be used for this user's paid-entry experiment: the current official CALL-E rules explicitly list Brazil among excluded resident territories. That opportunity is now `INELIGIBLE` and the prior recommendation to register was withdrawn and recorded as negative knowledge.\n",[],[277,529],["D",1788715656185],[293,294,295,296],[277],["D",1788707065045],["D",1789575110896],{"_100":99,"_108":104},{"_100":99,"_101":102,"_103":104,"_18":53,"_105":106,"_107":24},{"_13":87,"_31":88,"_41":40,"_89":42,"_90":91,"_92":93,"_94":48,"_95":42,"_96":63,"_97":43,"_98":99},"ctx",{"_80":-5,"_129":577,"_578":579,"_580":581,"_582":24,"_583":24,"_584":24,"_585":57,"_586":-5,"_587":-7,"_588":-7,"_589":61,"_590":24,"_591":24,"_592":-5,"_593":24,"_594":24,"_595":24,"_596":-5},"ENV",{"_548":549,"_550":551,"_552":135,"_553":554,"_555":556,"_557":558,"_559":560,"_561":562,"_563":564,"_565":566,"_567":568,"_569":570,"_571":572,"_573":574,"_575":576},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v16