[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_260":261,"_262":263},"routes/_app.x.$handle.$name",{"_99":98,"_31":44,"_108":89,"_26":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":24,"_123":124,"_125":58,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_31":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":24},"version",11,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","providers/browserless.ts","latestPath","fileId","62afee48-aa05-11f1-9a10-1607ee4eb77e","name","browserless.ts","fileType","script","content","import type { BrowserReceipt, BrowserTask } from \"../lib/types.ts\";\n\nconst FUNCTION_CODE = String.raw`\nexport default async ({ page, context }) => {\n const plan = context.plan;\n const outputs = {};\n const checks = [];\n const targetHost = new URL(plan.targetUrl).hostname;\n const allowedHosts = new Set([targetHost, ...(plan.allowedHosts || [])]);\n const allowedMethods = new Set([\"GET\", \"HEAD\", \"OPTIONS\"]);\n const assertUrl = (value) => {\n const u = new URL(value);\n if (![\"http:\", \"https:\"].includes(u.protocol)) throw new Error(\"blocked protocol\");\n if (!allowedHosts.has(u.hostname)) throw new Error(\"blocked host: \" + u.hostname);\n };\n\n await page.setRequestInterception(true);\n page.on(\"request\", (req) => {\n try {\n if (req.isNavigationRequest() && req.frame() === page.mainFrame()) assertUrl(req.url());\n if (plan.risk === \"read_only\" && !allowedMethods.has(req.method().toUpperCase())) return req.abort(\"blockedbyclient\");\n return req.continue();\n } catch {\n return req.abort(\"blockedbyclient\");\n }\n });\n page.on(\"popup\", async (popup) => { try { await popup.close(); } catch {} });\n\n assertUrl(plan.targetUrl);\n await page.goto(plan.targetUrl, { waitUntil: \"domcontentloaded\" });\n assertUrl(page.url());\n\n for (const step of plan.steps) {\n switch (step.action) {\n case \"goto\": {\n const url = step.url || plan.targetUrl;\n assertUrl(url);\n await page.goto(url, { waitUntil: \"domcontentloaded\" });\n break;\n }\n case \"wait_for\":\n await page.waitForSelector(step.selector, { visible: true, timeout: step.timeoutMs || 10000 });\n break;\n case \"click\":\n if (step.waitForNavigation) {\n await Promise.all([page.waitForNavigation({ waitUntil: \"domcontentloaded\" }), page.click(step.selector)]);\n } else await page.click(step.selector);\n break;\n case \"fill\":\n await page.click(step.selector, { clickCount: 3 });\n await page.keyboard.press(\"Backspace\");\n await page.type(step.selector, step.text);\n break;\n case \"type\":\n await page.type(step.selector, step.text, { delay: step.delayMs || 0 });\n break;\n case \"select\":\n await page.select(step.selector, step.value);\n break;\n case \"extract_text\":\n outputs[step.key] = await page.$eval(step.selector, (el) => el.textContent || \"\");\n break;\n case \"extract_attribute\":\n outputs[step.key] = await page.$eval(step.selector, (el, attr) => el.getAttribute(attr), step.attribute);\n break;\n case \"expect_text\": {\n const body = await page.evaluate(() => document.body?.innerText || \"\");\n checks.push({ type: \"text\", expected: step.text, ok: body.includes(step.text) });\n break;\n }\n case \"expect_url\": {\n const actual = page.url();\n checks.push({ type: \"url\", expected: step.contains, actual, ok: actual.includes(step.contains) });\n break;\n }\n }\n assertUrl(page.url());\n }\n\n return {\n data: {\n finalUrl: page.url(),\n outputs,\n checks,\n verified: checks.length > 0 && checks.every((x) => x.ok),\n },\n type: \"application/json\",\n };\n};\n`;\n\nexport function browserlessConfigured(): boolean {\n return Boolean(Deno.env.get(\"BROWSERLESS_TOKEN\"));\n}\n\nexport async function executeBrowserless(task: BrowserTask): Promise {\n const token = Deno.env.get(\"BROWSERLESS_TOKEN\");\n if (!token) return { runId: task.runId, provider: \"browserless\", status: \"BLOCKED\", error: \"BROWSERLESS_TOKEN missing\" };\n\n const started = Date.now();\n const base = (Deno.env.get(\"BROWSERLESS_BASE_URL\") || \"https://production-sfo.browserless.io\").replace(/\\/+$/, \"\");\n try {\n const response = await fetch(`${base}/function?token=${encodeURIComponent(token)}`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ code: FUNCTION_CODE, context: { plan: task } }),\n });\n const text = await response.text();\n let result: any;\n try { result = JSON.parse(text); } catch { result = { raw: text }; }\n if (!response.ok) {\n return { runId: task.runId, provider: \"browserless\", status: \"FAIL\", error: `HTTP ${response.status}: ${text.slice(0, 500)}`, durationMs: Date.now() - started };\n }\n return {\n runId: task.runId,\n provider: \"browserless\",\n status: result?.verified ? \"PASS\" : \"PARTIAL\",\n finalUrl: result?.finalUrl,\n outputs: result?.outputs ?? {},\n checks: result?.checks ?? [],\n durationMs: Date.now() - started,\n providerMeta: { base },\n };\n } catch (error) {\n return { runId: task.runId, provider: \"browserless\", status: \"FAIL\", error: error instanceof Error ? error.message : String(error), durationMs: Date.now() - started };\n }\n}\n","createdAt",["D",1788707553226],"branchVersion","branchId","22a6b9fb-662c-4823-89b0-7ec510c82fcd","id","1cb1fea8-3811-42e9-b0ad-3a5ec2d20472","chat-native-maestro",["D",1788707065045],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Cloud runtime for ChatGPT-native orchestration","imageUrl","6cc24525-830b-4db3-9c9c-fd19fb50e91f","pinnedFileId","3fca0dce-aa04-11f1-bd83-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0773d-9d6b-7580-a53a-683363c351c8","tursoName","1cb1fea8381142e9b0ad3a5ec2d20472","tursoHostname","1cb1fea8381142e9b0ad3a5ec2d20472-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789488693443],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":54,"_104":105,"_106":24},"branch",{"_13":88,"_31":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"isOwned",68,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","cleitoncosta","handle","displayName","Cleiton Costa","avatar","https://lh3.googleusercontent.com/a/ACg8ocIgWisWQiXts_2fy5iRiRgl8A6c7Ef94eqE3ur-4mlyUrpCBmQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_31":44,"_37":255,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":256,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":257,"_83":258,"_85":259,"_87":24},"tree",[189,190,193,197,198,199],"files",[189,190,191,192,193,194,195,196,197,198,199],"counts",{"_179":62,"_180":163,"_181":62,"_182":183,"_184":185},"contents",[130,131,132,133,134,135],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":173,"_31":174,"_29":175,"_139":-5,"_40":41,"_39":176,"_141":58,"_37":177,"_13":62,"_33":165,"_35":-5,"_23":24,"_144":-5,"_26":178},{"_42":167,"_31":168,"_29":169,"_139":-5,"_40":41,"_39":170,"_141":58,"_37":171,"_13":62,"_33":165,"_35":-5,"_23":24,"_144":-5,"_26":172},{"_42":160,"_31":161,"_29":162,"_139":-5,"_40":41,"_39":163,"_141":58,"_37":164,"_13":62,"_33":165,"_35":-5,"_23":24,"_144":-5,"_26":166},{"_42":153,"_31":154,"_29":56,"_139":-5,"_40":41,"_39":155,"_141":24,"_37":156,"_13":62,"_33":157,"_35":158,"_23":24,"_144":-5,"_26":159},{"_42":146,"_31":147,"_29":148,"_139":-5,"_40":41,"_39":149,"_141":24,"_37":150,"_13":62,"_33":34,"_35":151,"_23":24,"_144":-5,"_26":152},{"_42":136,"_31":137,"_29":138,"_139":-5,"_40":41,"_39":140,"_141":24,"_37":142,"_13":62,"_33":34,"_35":143,"_23":24,"_144":-5,"_26":145},"137db98d-d2a0-4a10-be61-811a0f81092d","selftest.ts","226bfbf6-aa05-11f1-8f4b-1607ee4eb77e","parentId",8,"latest",["D",1788707445413],"import { validateTask } from \"./lib/dsl.ts\";\nimport { kernelConfigured } from \"./providers/kernel.ts\";\n\nconst validRead = {\n runId: \"selftest-read\",\n targetUrl: \"https://example.com\",\n risk: \"read_only\" as const,\n purpose: \"Validate DSL without opening a browser\",\n steps: [{ action: \"expect_text\" as const, text: \"Example Domain\" }],\n};\n\nconst blockedWrite = {\n runId: \"selftest-write\",\n targetUrl: \"https://example.com\",\n risk: \"consequential\" as const,\n approved: false,\n purpose: \"Negative control for approval gate\",\n steps: [{ action: \"click\" as const, selector: \"button\" }],\n};\n\nconst result = {\n version: \"0.4\",\n validReadErrors: validateTask(validRead),\n blockedWriteErrors: validateTask(blockedWrite),\n kernelConfigured: kernelConfigured(),\n expected: {\n validReadErrors: [],\n blockedWriteContains: \"NEEDS_APPROVAL\",\n kernelConfigured: false,\n },\n};\n\nconsole.log(JSON.stringify(result, null, 2));\n","label",[137],"3222f370-2951-416a-ad22-cd27337b4e37","runner.ts","46aa03fa-aa05-11f1-b85b-1607ee4eb77e",10,["D",1788707506196],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { BrowserTask } from \"./lib/types.ts\";\nimport { validateTask } from \"./lib/dsl.ts\";\nimport { executeRouted } from \"./providers/router.ts\";\n\nasync function claimNext() {\n const now = new Date().toISOString();\n const result = await sqlite.execute({\n sql: `UPDATE browser_tasks\n SET status='RUNNING', updated_at=?\n WHERE id=(SELECT id FROM browser_tasks WHERE status='PENDING' ORDER BY id LIMIT 1)\n RETURNING *`,\n args: [now],\n });\n return result.rows[0] as Record | undefined;\n}\n\nasync function finish(id: number, status: string, provider: string, receipt: unknown, error?: string) {\n await sqlite.execute({\n sql: `UPDATE browser_tasks\n SET status=?, provider=?, receipt_json=?, error=?, updated_at=?\n WHERE id=?`,\n args: [status, provider, JSON.stringify(receipt), error ?? null, new Date().toISOString(), id],\n });\n}\n\nasync function main() {\n const row = await claimNext();\n if (!row) {\n const result = { status: \"NO_PENDING_TASK\" };\n console.log(JSON.stringify(result));\n return result;\n }\n\n const id = Number(row.id);\n let task: BrowserTask;\n try {\n task = JSON.parse(String(row.task_json)) as BrowserTask;\n } catch (error) {\n const receipt = { status: \"BLOCKED\", error: \"invalid task_json\" };\n await finish(id, \"BLOCKED\", \"none\", receipt, String(error));\n console.log(JSON.stringify(receipt, null, 2));\n return receipt;\n }\n\n const errors = validateTask(task);\n if (errors.length) {\n const receipt = { runId: task.runId, status: \"BLOCKED\", errors };\n await finish(id, \"BLOCKED\", task.preferredProvider ?? \"kernel\", receipt, errors.join(\"; \"));\n console.log(JSON.stringify(receipt, null, 2));\n return receipt;\n }\n\n const receipt = await executeRouted(task);\n await finish(id, receipt.status, receipt.provider, receipt, receipt.error);\n console.log(JSON.stringify(receipt, null, 2));\n return receipt;\n}\n\nawait main();\n",[147],"0291e13b-440e-472c-880b-b2b2f2d6cef2","main.ts",1,["D",1788707065151],"http","export default async function (_req: Request): Promise {\n const providerConfigured = Boolean(Deno.env.get(\"BROWSERLESS_TOKEN\"));\n const gatewayAuthConfigured = Boolean(Deno.env.get(\"MAESTRO_GATEWAY_KEY\"));\n return Response.json({\n service: \"chat-native-maestro\",\n version: \"0.3-runtime\",\n status: \"ready\",\n providerConfigured,\n gatewayAuthConfigured,\n timestamp: new Date().toISOString(),\n });\n}\n",[154],"52abd68c-7eb8-45d0-87f2-28a80af822c4","providers","f528640e-aa04-11f1-8241-1607ee4eb77e",3,["D",1788707369470],"directory",[161],"561d863a-e041-4f0a-b61d-8884716cb727","lib","f30be01a-aa04-11f1-b5ff-1607ee4eb77e",2,["D",1788707365920],[168],"7a194648-9f6b-42ee-8ade-4a9c3bcd3220","docs","f7f2feb0-aa04-11f1-9265-1607ee4eb77e",4,["D",1788707374127],[174],"pulls","branches","forks","envVars",{"_186":62,"_188":62},"connections",{"_186":62,"_187":62},"count","unfilledCount","emptyCount",{"_42":173,"_31":174,"_29":175,"_139":-5,"_40":41,"_39":176,"_141":58,"_37":252,"_13":62,"_33":165,"_35":-5,"_23":24,"_144":-5,"_201":253,"_26":254},{"_42":167,"_31":168,"_29":169,"_139":-5,"_40":41,"_39":170,"_141":58,"_37":249,"_13":62,"_33":165,"_35":-5,"_23":24,"_144":-5,"_201":250,"_26":251},{"_42":241,"_31":242,"_29":243,"_139":169,"_40":41,"_39":244,"_141":24,"_37":245,"_13":62,"_33":34,"_35":246,"_23":24,"_144":-5,"_201":247,"_26":248},{"_42":233,"_31":234,"_29":235,"_139":169,"_40":41,"_39":236,"_141":24,"_37":237,"_13":62,"_33":34,"_35":238,"_23":24,"_144":-5,"_201":239,"_26":240},{"_42":160,"_31":161,"_29":162,"_139":-5,"_40":41,"_39":163,"_141":58,"_37":230,"_13":62,"_33":165,"_35":-5,"_23":24,"_144":-5,"_201":231,"_26":232},{"_42":226,"_31":32,"_29":30,"_139":162,"_40":41,"_39":14,"_141":24,"_37":227,"_13":62,"_33":34,"_35":36,"_23":24,"_144":-5,"_201":228,"_26":229},{"_42":218,"_31":219,"_29":220,"_139":162,"_40":41,"_39":221,"_141":24,"_37":222,"_13":62,"_33":34,"_35":223,"_23":24,"_144":-5,"_201":224,"_26":225},{"_42":210,"_31":211,"_29":212,"_139":162,"_40":41,"_39":213,"_141":24,"_37":214,"_13":62,"_33":34,"_35":215,"_23":24,"_144":-5,"_201":216,"_26":217},{"_42":153,"_31":154,"_29":56,"_139":-5,"_40":41,"_39":155,"_141":24,"_37":207,"_13":62,"_33":157,"_35":158,"_23":24,"_144":-5,"_201":208,"_26":209},{"_42":146,"_31":147,"_29":148,"_139":-5,"_40":41,"_39":149,"_141":24,"_37":204,"_13":62,"_33":34,"_35":151,"_23":24,"_144":-5,"_201":205,"_26":206},{"_42":136,"_31":137,"_29":138,"_139":-5,"_40":41,"_39":140,"_141":24,"_37":200,"_13":62,"_33":34,"_35":143,"_23":24,"_144":-5,"_201":202,"_26":203},["D",1788707445413],"children",[],[137],["D",1788707506196],[],[147],["D",1788707065151],[],[154],"18745628-3b5a-46d3-ba9f-2fd9be7d83a6","router.ts","40781008-aa05-11f1-bfc5-1607ee4eb77e",9,["D",1788707495810],"import type { BrowserReceipt, BrowserTask } from \"../lib/types.ts\";\nimport { executeKernel, kernelConfigured } from \"./kernel.ts\";\n\nexport function providerState() {\n return {\n kernel: {\n priority: 1,\n configured: kernelConfigured(),\n state: kernelConfigured() ? \"READY\" : \"ACCOUNT_KEY_REQUIRED\",\n },\n browserless: {\n priority: 2,\n configured: Boolean(Deno.env.get(\"BROWSERLESS_TOKEN\")),\n state: Deno.env.get(\"BROWSERLESS_TOKEN\") ? \"ADAPTER_PENDING_VALIDATION\" : \"ACCOUNT_TOKEN_REQUIRED\",\n },\n };\n}\n\nexport async function executeRouted(task: BrowserTask): Promise {\n if (task.preferredProvider === \"browserless\") {\n return {\n runId: task.runId,\n provider: \"browserless\",\n status: \"BLOCKED\",\n error: \"Browserless adapter intentionally not activated until Kernel baseline is validated\",\n };\n }\n\n return executeKernel(task);\n}\n",[],[161,211],"83ca2b3f-a347-45f5-aeb2-6f19ac279e00","kernel.ts","1aa22634-aa05-11f1-8241-1607ee4eb77e",7,["D",1788707432340],"import Kernel from \"npm:@onkernel/sdk\";\nimport type { BrowserReceipt, BrowserTask } from \"../lib/types.ts\";\nimport { buildKernelPlaywrightCode } from \"../lib/dsl.ts\";\n\nexport function kernelConfigured(): boolean {\n return Boolean(Deno.env.get(\"KERNEL_API_KEY\"));\n}\n\nexport async function executeKernel(task: BrowserTask): Promise {\n const apiKey = Deno.env.get(\"KERNEL_API_KEY\");\n if (!apiKey) {\n return { runId: task.runId, provider: \"kernel\", status: \"BLOCKED\", error: \"KERNEL_API_KEY missing\" };\n }\n\n const started = Date.now();\n const kernel = new Kernel({ apiKey });\n let sessionId: string | undefined;\n try {\n const kernelBrowser = await kernel.browsers.create({\n headless: true,\n stealth: true,\n });\n sessionId = kernelBrowser.session_id;\n\n const response = await kernel.browsers.playwright.execute(sessionId, {\n code: buildKernelPlaywrightCode(task),\n });\n const result = (response as any).result ?? response;\n const verified = Boolean(result?.verified);\n return {\n runId: task.runId,\n provider: \"kernel\",\n status: verified ? \"PASS\" : \"PARTIAL\",\n finalUrl: result?.finalUrl,\n outputs: result?.outputs ?? {},\n checks: result?.checks ?? [],\n durationMs: Date.now() - started,\n providerMeta: { sessionId, headless: true, stealth: true },\n };\n } catch (error) {\n return {\n runId: task.runId,\n provider: \"kernel\",\n status: \"FAIL\",\n error: error instanceof Error ? error.message : String(error),\n durationMs: Date.now() - started,\n providerMeta: sessionId ? { sessionId } : {},\n };\n } finally {\n if (sessionId) {\n try { await kernel.browsers.deleteByID(sessionId); } catch (cleanupError) {\n console.error(\"kernel cleanup failed\", cleanupError);\n }\n }\n }\n}\n",[],[161,219],"5e18ce3a-3a2b-4db1-a01c-3d981a76bf71",["D",1788707553226],[],[161,32],["D",1788707369470],[194,195,196],[161],"67f8250b-1e2d-4c08-b30b-6b4afe9df6b6","types.ts","08217668-aa05-11f1-b47d-1607ee4eb77e",5,["D",1788707401299],"export type Risk = \"read_only\" | \"reversible_write\" | \"consequential\";\nexport type ProviderName = \"kernel\" | \"browserless\";\n\nexport type Step =\n | { action: \"goto\"; url?: string }\n | { action: \"wait_for\"; selector: string; timeoutMs?: number }\n | { action: \"click\"; selector: string; waitForNavigation?: boolean }\n | { action: \"fill\"; selector: string; text: string }\n | { action: \"type\"; selector: string; text: string; delayMs?: number }\n | { action: \"select\"; selector: string; value: string }\n | { action: \"extract_text\"; selector: string; key: string }\n | { action: \"extract_attribute\"; selector: string; attribute: string; key: string }\n | { action: \"expect_text\"; text: string }\n | { action: \"expect_url\"; contains: string };\n\nexport type BrowserTask = {\n runId: string;\n targetUrl: string;\n risk: Risk;\n approved?: boolean;\n purpose: string;\n allowedHosts?: string[];\n preferredProvider?: ProviderName;\n steps: Step[];\n};\n\nexport type BrowserReceipt = {\n runId: string;\n provider: ProviderName;\n status: \"PASS\" | \"PARTIAL\" | \"FAIL\" | \"BLOCKED\";\n finalUrl?: string;\n outputs?: Record;\n checks?: Array>;\n error?: string;\n durationMs?: number;\n providerMeta?: Record;\n};\n",[],[168,234],"4f47b09f-5a43-422b-b765-6d370334c4a7","dsl.ts","1341db6e-aa05-11f1-ba4c-1607ee4eb77e",6,["D",1788707419968],"import type { BrowserTask } from \"./types.ts\";\n\nconst ALLOWED_ACTIONS = new Set([\n \"goto\", \"wait_for\", \"click\", \"fill\", \"type\", \"select\",\n \"extract_text\", \"extract_attribute\", \"expect_text\", \"expect_url\",\n]);\n\nexport function validateTask(task: BrowserTask): string[] {\n const errors: string[] = [];\n if (!task || typeof task !== \"object\") return [\"task must be an object\"];\n if (!task.runId || task.runId.length > 128) errors.push(\"invalid runId\");\n if (!task.purpose || task.purpose.length > 1000) errors.push(\"invalid purpose\");\n if (!Array.isArray(task.steps) || task.steps.length < 1 || task.steps.length > 30) errors.push(\"steps must contain 1..30 actions\");\n if (![\"read_only\", \"reversible_write\", \"consequential\"].includes(task.risk)) errors.push(\"invalid risk\");\n if (task.risk !== \"read_only\" && task.approved !== true) errors.push(\"NEEDS_APPROVAL\");\n\n let target: URL | undefined;\n try {\n target = new URL(task.targetUrl);\n if (![\"http:\", \"https:\"].includes(target.protocol)) errors.push(\"target protocol blocked\");\n } catch {\n errors.push(\"invalid targetUrl\");\n }\n\n const targetHost = target?.hostname;\n const allowed = new Set([targetHost, ...(task.allowedHosts ?? [])].filter(Boolean) as string[]);\n for (const [i, step] of (task.steps ?? []).entries()) {\n if (!step || !ALLOWED_ACTIONS.has((step as any).action)) {\n errors.push(`step ${i}: unsupported action`);\n continue;\n }\n const maybe = step as any;\n if (typeof maybe.selector === \"string\" && maybe.selector.length > 1000) errors.push(`step ${i}: selector too long`);\n if (typeof maybe.text === \"string\" && maybe.text.length > 10000) errors.push(`step ${i}: text too long`);\n if (maybe.action === \"goto\" && maybe.url) {\n try {\n const u = new URL(maybe.url);\n if (![\"http:\", \"https:\"].includes(u.protocol) || !allowed.has(u.hostname)) errors.push(`step ${i}: navigation host blocked`);\n } catch {\n errors.push(`step ${i}: invalid goto url`);\n }\n }\n }\n return errors;\n}\n\nexport function buildKernelPlaywrightCode(task: BrowserTask): string {\n const plan = JSON.stringify(task);\n return `\nconst plan = ${plan};\nconst outputs = {};\nconst checks = [];\nconst targetHost = new URL(plan.targetUrl).hostname;\nconst allowedHosts = new Set([targetHost, ...(plan.allowedHosts || [])]);\nconst allowedMethods = new Set([\"GET\", \"HEAD\", \"OPTIONS\"]);\n\nconst assertUrl = (value) => {\n const u = new URL(value);\n if (![\"http:\", \"https:\"].includes(u.protocol)) throw new Error(\"blocked protocol\");\n if (!allowedHosts.has(u.hostname)) throw new Error(\"blocked host: \" + u.hostname);\n};\n\nawait page.route(\"**/*\", async (route) => {\n const req = route.request();\n try {\n if (req.isNavigationRequest() && req.frame() === page.mainFrame()) assertUrl(req.url());\n if (plan.risk === \"read_only\" && !allowedMethods.has(req.method().toUpperCase())) return route.abort(\"blockedbyclient\");\n return route.continue();\n } catch {\n return route.abort(\"blockedbyclient\");\n }\n});\n\npage.on(\"popup\", async (popup) => { try { await popup.close(); } catch {} });\nassertUrl(plan.targetUrl);\nawait page.goto(plan.targetUrl, { waitUntil: \"domcontentloaded\" });\nassertUrl(page.url());\n\nfor (const step of plan.steps) {\n switch (step.action) {\n case \"goto\": {\n const url = step.url || plan.targetUrl;\n assertUrl(url);\n await page.goto(url, { waitUntil: \"domcontentloaded\" });\n break;\n }\n case \"wait_for\":\n await page.locator(step.selector).waitFor({ state: \"visible\", timeout: step.timeoutMs || 10000 });\n break;\n case \"click\":\n if (step.waitForNavigation) {\n await Promise.all([\n page.waitForLoadState(\"domcontentloaded\"),\n page.locator(step.selector).click(),\n ]);\n } else await page.locator(step.selector).click();\n break;\n case \"fill\":\n await page.locator(step.selector).fill(step.text);\n break;\n case \"type\":\n await page.locator(step.selector).pressSequentially(step.text, { delay: step.delayMs || 0 });\n break;\n case \"select\":\n await page.locator(step.selector).selectOption(step.value);\n break;\n case \"extract_text\":\n outputs[step.key] = await page.locator(step.selector).innerText();\n break;\n case \"extract_attribute\":\n outputs[step.key] = await page.locator(step.selector).getAttribute(step.attribute);\n break;\n case \"expect_text\": {\n const body = await page.locator(\"body\").innerText();\n checks.push({ type: \"text\", expected: step.text, ok: body.includes(step.text) });\n break;\n }\n case \"expect_url\": {\n const actual = page.url();\n checks.push({ type: \"url\", expected: step.contains, actual, ok: actual.includes(step.contains) });\n break;\n }\n }\n assertUrl(page.url());\n}\n\nreturn {\n finalUrl: page.url(),\n outputs,\n checks,\n verified: checks.length > 0 && checks.every((x) => x.ok),\n};\n`;\n}\n",[],[168,242],["D",1788707365920],[191,192],[168],["D",1788707374127],[],[174],["D",1788707065045],["D",1789488693443],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":54,"_104":105,"_106":24},{"_13":88,"_31":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"ctx",{"_81":-5,"_127":293,"_294":295,"_296":297,"_298":24,"_299":24,"_300":24,"_301":58,"_302":-5,"_303":-7,"_304":-7,"_305":62,"_306":24,"_307":24,"_308":-5,"_309":24,"_310":24,"_311":24,"_312":-5},"ENV",{"_264":265,"_266":267,"_268":89,"_269":270,"_271":272,"_273":274,"_275":276,"_277":278,"_279":280,"_281":282,"_283":284,"_285":286,"_287":288,"_289":290,"_291":292},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v11