[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_405":406,"_407":408},"routes/_app.x.$handle.$name",{"_100":99,"_32":45,"_109":90,"_27":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":25,"_124":125,"_126":59,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",61,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":20,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":33,"_34":20,"_35":36},"deleted",false,"deletedHere","path","docs/CURRENT_STATE.md","latestPath","fileId","48d7c6c0-aa06-11f1-b220-1607ee4eb77e","name","CURRENT_STATE.md","fileType","content","# CURRENT_STATE — V0.4.1\n\nUpdated: 2026-09-06\n\n## Canonical runtime\n\n`normal ChatGPT mobile/web -> authenticated Val Town plugin -> val-scoped SQLite -> runner.ts -> browser provider -> receipt`\n\nNo Codex and no user computer are required.\n\n## Val Town\n\n- Val: `cleitoncosta/chat-native-maestro`\n- Personal workspace tier: Free\n- Code visibility: public (Free-tier constraint)\n- HTTP endpoint: public health/status only\n- Task execution: authenticated Val Town plugin only\n- Persistent state: val-scoped SQLite\n\n## Implemented files\n\n- `main.ts` — minimal public GET-only liveness endpoint; detailed runtime state is not exposed.\n- `status.ts` — authenticated provider/task/receipt diagnostics via the Val Town plugin.\n- `runner.ts` — atomic queue claim, validation, execution, receipt persistence.\n- `selftest.ts` — positive and negative controls.\n- `lib/types.ts` — task/receipt DSL types.\n- `lib/dsl.ts` — validation, browser program generation, in-memory secret resolution.\n- `providers/router.ts` — provider routing/fallback.\n- `providers/kernel.ts` — primary browser adapter.\n- `providers/browserless.ts` — secondary browser adapter.\n\n## Evidence states\n\n### PASS\n\n- ChatGPT Val Town plugin connected and authenticated.\n- Free workspace enumerated.\n- Val creation/editing/running works.\n- HTTP endpoint returns 200.\n- SQLite schema, writes and reads work.\n- Queue claim works.\n- Receipts persist after execution.\n- Consequential action without approval -> BLOCKED.\n- `fill_secret` without approval -> BLOCKED.\n- Invalid secret env-var name -> BLOCKED.\n- Missing Kernel key -> classified BLOCKED.\n- Missing Browserless token -> classified BLOCKED.\n- Kernel SDK and Browserless adapter modules load in Val Town runtime.\n\n### UNVERIFIED\n\n- Kernel API authentication for this user.\n- Kernel real browser creation.\n- Kernel Playwright execution against a real page.\n- Kernel real credit consumption for this user.\n- Browserless API authentication for this user.\n- Browserless `/function` real execution.\n- Browserless real unit accounting for this user.\n\n## Negative-control receipts currently stored\n\n1. `neg-control-no-kernel-key` -> BLOCKED / `KERNEL_API_KEY missing`.\n2. `neg-control-no-browserless-token` -> BLOCKED / `BROWSERLESS_TOKEN missing`.\n3. `neg-control-secret-not-approved` -> BLOCKED / `NEEDS_SECRET_APPROVAL`.\n\n## Secrets\n\nTask JSON must never contain passwords, auth cookies or API tokens.\n\nA browser secret is referenced by env-var name with `fill_secret`. The value is resolved only in execution memory after approval. Provider API credentials live only in Val Town environment variables.\n\n## Next incomplete milestone\n\nConfigure exactly one recurring-free browser provider credential, preferably Kernel, then execute a read-only smoke test against `https://example.com` with explicit extraction and expectations. Measure actual provider usage and only then upgrade live browser state from UNVERIFIED.\n","# CURRENT_STATE — V0.5.0\n\nUpdated: 2026-09-06\n\n## Canonical runtime\n\n`normal ChatGPT mobile/web -> authenticated Val Town plugin -> val-scoped SQLite -> runner.ts -> provider router -> cloud browser -> receipt`\n\nNo Codex and no user computer are required.\n\n## Val Town\n\n- Val: `cleitoncosta/chat-native-maestro`\n- Personal workspace tier: Free\n- Code visibility: public (Free-tier constraint)\n- Public HTTP: minimal liveness only\n- Detailed diagnostics: authenticated `status.ts`\n- Task execution: authenticated Val Town plugin only\n- Persistent state: val-scoped SQLite\n- Schema/app version: 0.5.0\n- Automatic runner/cron: disabled\n\n## Implemented files\n\n### Entrypoints\n- `main.ts` — minimal public GET-only liveness endpoint.\n- `status.ts` — authenticated provider/task/cost/security diagnostics.\n- `runner.ts` — queue lease, validation, network preflight, routed execution, retry decision, receipt persistence.\n- `selftest.ts` — stateless DSL/config regression tests.\n- `stateful_selftest.ts` — circuit breaker, timeout and retry-state regression tests with state restoration.\n- `url_selftest.ts` — URL/DNS/SSRF regression tests.\n\n### Libraries\n- `lib/types.ts` — typed task/receipt/evidence schema.\n- `lib/dsl.ts` — DSL validation, browser program generation, in-memory secret resolution.\n- `lib/policy.ts` — retry/lease/timeout/circuit constants and pure disposition logic.\n- `lib/provider_health.ts` — circuit breaker state machine.\n- `lib/cost.ts` — provider cost-estimation rules.\n- `lib/url_security.ts` — fail-closed URL/DNS-over-HTTPS preflight.\n\n### Providers\n- `providers/router.ts` — provider routing/fallback with health tracking.\n- `providers/kernel.ts` — primary browser adapter.\n- `providers/browserless.ts` — secondary browser adapter.\n\n### Documentation\n- `README.md`\n- `docs/CURRENT_STATE.md`\n- `docs/PROVIDER_CENSUS.md`\n- `docs/ACTIVATION_RUNBOOK.md`\n- `docs/TASK_SCHEMA.md`\n- `docs/SMOKE_TASK.json`\n\n## Database schema V0.5\n\n### `browser_tasks`\nDurable queue and terminal receipt state. New V0.5 fields:\n- `attempt_count`\n- `claimed_at`\n- `next_attempt_at`\n\n### `browser_attempts`\nOne row per provider attempt/fallback with:\n- attempt number\n- provider\n- timestamps\n- status/error\n- duration\n- sanitized receipt\n- estimated Browserless units\n\n### `provider_health`\nCircuit state per provider:\n- `CLOSED` / `HALF_OPEN` / `OPEN`\n- consecutive failures\n- cooldown timestamp\n- last success/failure/error\n\n### `provider_census`\nProvider ranking and current free-tier facts.\n\n### `schema_meta`\n`schema_version=0.5.0`, `app_version=0.5.0`.\n\n## Operational policy V0.5\n\n- max attempts per task: 2\n- read-only FAIL retry delay: 10 s\n- RUNNING lease: 90 s\n- browser execution timeout: 25 s\n- provider circuit opens at 3 consecutive FAILs\n- circuit cooldown: 15 min\n- automatic cross-provider fallback: read-only only\n- automatic scheduled execution: disabled\n\nA retry can become `PENDING`, but it cannot consume browser credits until ChatGPT explicitly invokes the runner again.\n\n## Network security\n\nBefore any provider execution:\n- only HTTP/HTTPS\n- URL credentials/userinfo blocked\n- nonstandard ports blocked\n- private/link-local/loopback/reserved/documentation IPv4/IPv6 blocked\n- localhost/internal/metadata hostnames blocked\n- allowed hosts validated\n- A/AAAA resolved through Cloudflare DNS-over-HTTPS\n- any resolved non-public IP blocks the task\n- DNS/preflight failure fails closed\n\nRunner-level negative-control proof:\n`ssrf-runner-v05 -> BLOCKED / NETWORK_PREFLIGHT_BLOCKED: blocked hostname: 169.254.169.254`\n\nThe fixture was deleted after verification.\n\n## Secret policy\n\nTask JSON never stores secret values.\n`fill_secret` stores only an env-var name and requires explicit approval.\nThe value is resolved in memory immediately before provider execution.\n\n`extract_attribute` of `value` is blocked to reduce accidental credential leakage.\n\nCurrent user-created Val Town env-var count: **0**.\n\n## Evidence retention\n\nDefault: `minimal`.\nPersisted by default:\n- run/provider/status\n- final URL\n- checks\n- errors\n- duration\n- fallback evidence\n- network preflight evidence\n\nNot persisted by default:\n- extracted outputs\n- provider session ID\n\n`full` must be intentionally requested.\n\n## Cost policy\n\n### Kernel\nOfficial current Free plan verified 2026-09-06:\n- $0/month plus usage\n- $5 monthly free credits\n- 5 concurrent browsers\n- no card required to start\n- billed by GB-second\n\nLocal Kernel cost estimate remains unsupported; actual account usage must be observed.\n\n### Browserless\nOfficial current Free plan verified 2026-09-06:\n- 1,000 units/month\n- 2 concurrent browsers\n- max session 2 min\n- no card\n- browser time 1 unit/30 s\n- CAPTCHA/proxy additional\n- overage cap should be set to $0 if Browserless is activated\n\nThe runtime estimates base browser-time units only; actual provider accounting remains authoritative.\n\n## Evidence states\n\n### PASS\n\n- ChatGPT Val Town plugin authentication.\n- Free workspace enumerated.\n- create/edit/run/deploy.\n- public liveness HTTP 200.\n- authenticated diagnostics.\n- SQLite schema/migrations/versioning.\n- atomic queue claim.\n- empty queue behavior.\n- stale RUNNING lease recovery.\n- task attempt persistence.\n- retry policy pure test.\n- timeout test.\n- provider circuit OPEN after three synthetic FAILs and restoration to CLOSED.\n- consequential action approval gate.\n- secret approval gate.\n- invalid provider rejection.\n- `value` attribute extraction block.\n- Kernel SDK adapter module load.\n- Browserless adapter module load.\n- missing provider credential -> BLOCKED.\n- DoH availability through normal Val Town HTTPS egress.\n- public-domain DNS preflight.\n- local/private/metadata/userinfo/nonstandard-port URL blocks.\n- runner-level SSRF block before provider invocation.\n- automatic schedule disabled.\n\n### UNVERIFIED\n\n- Kernel API authentication for this account.\n- live Kernel browser creation.\n- live Kernel server-side Playwright execution.\n- Kernel real credit consumption.\n- Browserless API authentication for this account.\n- live Browserless `/function` execution.\n- Browserless real unit consumption.\n\n## Persistent historical negative controls\n\nThese three V0.4 records intentionally remain in `browser_tasks` as historical evidence:\n1. `neg-control-no-kernel-key` -> BLOCKED / `KERNEL_API_KEY missing`.\n2. `neg-control-no-browserless-token` -> BLOCKED / `BROWSERLESS_TOKEN missing`.\n3. `neg-control-secret-not-approved` -> BLOCKED / `NEEDS_SECRET_APPROVAL`.\n\nV0.5 synthetic lease/circuit/SSRF fixtures were removed after tests so production metrics are not polluted.\n\n## Next incomplete milestone\n\nExactly one external action remains necessary: configure a recurring-free browser credential, preferably `KERNEL_API_KEY`, directly in Val Town env vars. Do not paste it into chat.\n\nAfter the key exists:\n1. confirm only the env-var **name** exists;\n2. enqueue `docs/SMOKE_TASK.json` explicitly;\n3. execute `runner.ts` once;\n4. inspect task + attempt receipt;\n5. verify `heading = Example Domain` and all checks PASS;\n6. inspect provider usage;\n7. only then promote Kernel from `ACCOUNT_KEY_REQUIRED/UNVERIFIED` to `OPERATIONAL`.\n","createdAt",["D",1788709100805],"branchVersion","branchId","22a6b9fb-662c-4823-89b0-7ec510c82fcd","id","1cb1fea8-3811-42e9-b0ad-3a5ec2d20472","chat-native-maestro",["D",1788707065045],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Cloud runtime for ChatGPT-native orchestration","imageUrl","6cc24525-830b-4db3-9c9c-fd19fb50e91f","pinnedFileId","3fca0dce-aa04-11f1-bd83-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0773d-9d6b-7580-a53a-683363c351c8","tursoName","1cb1fea8381142e9b0ad3a5ec2d20472","tursoHostname","1cb1fea8381142e9b0ad3a5ec2d20472-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789488693443],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},"branch",{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"isOwned",68,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","cleitoncosta","handle","displayName","Cleiton Costa","avatar","https://lh3.googleusercontent.com/a/ACg8ocIgWisWQiXts_2fy5iRiRgl8A6c7Ef94eqE3ur-4mlyUrpCBmQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":400,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":401,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":402,"_84":403,"_86":404,"_88":25},"tree",[233,239,246,250,251,252,253,254,255,256,257],"files",[233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257],"counts",{"_223":63,"_224":209,"_225":63,"_226":227,"_228":229},"contents",[131,132,133,134,135,136,137,138,139,140,141],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":218,"_32":219,"_30":220,"_145":-5,"_41":42,"_40":180,"_147":59,"_38":221,"_13":63,"_34":211,"_35":-5,"_24":25,"_151":-5,"_27":222},{"_43":213,"_32":214,"_30":215,"_145":-5,"_41":42,"_40":158,"_147":59,"_38":216,"_13":63,"_34":211,"_35":-5,"_24":25,"_151":-5,"_27":217},{"_43":206,"_32":207,"_30":208,"_145":-5,"_41":42,"_40":209,"_147":59,"_38":210,"_13":63,"_34":211,"_35":-5,"_24":25,"_151":-5,"_27":212},{"_43":199,"_32":200,"_30":201,"_145":-5,"_41":42,"_40":202,"_147":59,"_38":203,"_13":158,"_34":20,"_35":204,"_24":25,"_151":-5,"_27":205},{"_43":191,"_32":192,"_30":193,"_145":-5,"_41":42,"_40":194,"_147":25,"_38":195,"_13":196,"_34":149,"_35":197,"_24":25,"_151":-5,"_27":198},{"_43":183,"_32":184,"_30":57,"_145":-5,"_41":42,"_40":185,"_147":59,"_38":186,"_13":187,"_34":188,"_35":189,"_24":25,"_151":-5,"_27":190},{"_43":175,"_32":176,"_30":177,"_145":-5,"_41":42,"_40":178,"_147":59,"_38":179,"_13":180,"_34":149,"_35":181,"_24":25,"_151":-5,"_27":182},{"_43":168,"_32":169,"_30":170,"_145":-5,"_41":42,"_40":171,"_147":59,"_38":172,"_13":158,"_34":149,"_35":173,"_24":25,"_151":-5,"_27":174},{"_43":161,"_32":162,"_30":163,"_145":-5,"_41":42,"_40":164,"_147":59,"_38":165,"_13":63,"_34":149,"_35":166,"_24":25,"_151":-5,"_27":167},{"_43":153,"_32":154,"_30":155,"_145":-5,"_41":42,"_40":156,"_147":59,"_38":157,"_13":158,"_34":149,"_35":159,"_24":25,"_151":-5,"_27":160},{"_43":142,"_32":143,"_30":144,"_145":-5,"_41":42,"_40":146,"_147":59,"_38":148,"_13":63,"_34":149,"_35":150,"_24":25,"_151":-5,"_27":152},"ed4d9ad6-b14b-427b-ab08-893c1060b28d","url_selftest.ts","bb0b6f1a-aa08-11f1-8751-1607ee4eb77e","parentId",58,"latest",["D",1788708989939],"script","import { assertSafeUrl, preflightTaskNetwork } from \"./lib/url_security.ts\";\n\nconst cases = [\n \"https://example.com\",\n \"http://127.0.0.1\",\n \"http://169.254.169.254/latest/meta-data\",\n \"http://localhost\",\n \"https://user:pass@example.com\",\n \"https://example.com:8443\"\n];\n\nconst results: Record = {};\nfor (const value of cases) {\n try {\n results[value] = { ok: true, result: await assertSafeUrl(value) };\n } catch (error) {\n results[value] = { ok: false, error: error instanceof Error ? error.message : String(error) };\n }\n}\n\nlet allowedHostBlocked = false;\ntry {\n await preflightTaskNetwork({\n runId: \"url-selftest\",\n targetUrl: \"https://example.com\",\n risk: \"read_only\",\n purpose: \"URL security selftest\",\n allowedHosts: [\"127.0.0.1\"],\n steps: [{ action: \"expect_url\", contains: \"example.com\" }],\n });\n} catch {\n allowedHostBlocked = true;\n}\n\nconsole.log(JSON.stringify({ results, allowedHostBlocked }, null, 2));\n","label",[143],"59fe43cf-a587-4797-848f-49cb998631e4","status.ts","9fd401be-aa06-11f1-9ea0-1607ee4eb77e",59,["D",1788709048219],2,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { providerState } from \"./providers/router.ts\";\nimport { getProviderHealth } from \"./lib/provider_health.ts\";\nimport { POLICY } from \"./lib/policy.ts\";\nimport { COST_NOTES } from \"./lib/cost.ts\";\n\nconst schema = await sqlite.execute(\"SELECT key,value,updated_at FROM schema_meta ORDER BY key\");\nconst counts = await sqlite.execute(\"SELECT status, COUNT(*) AS count FROM browser_tasks GROUP BY status ORDER BY status\");\nconst census = await sqlite.execute(\"SELECT provider, priority, state, recurring_free, notes, updated_at FROM provider_census ORDER BY priority\");\nconst recent = await sqlite.execute(\"SELECT run_id,status,provider,attempt_count,error,updated_at FROM browser_tasks ORDER BY id DESC LIMIT 10\");\nconst attemptMetrics = await sqlite.execute(`\n SELECT provider,status,COUNT(*) AS attempts,\n CAST(AVG(duration_ms) AS INTEGER) AS avg_duration_ms,\n COALESCE(SUM(estimated_units),0) AS estimated_units\n FROM browser_attempts\n GROUP BY provider,status\n ORDER BY provider,status\n`);\n\nconst result = {\n service: \"chat-native-maestro\",\n version: POLICY.version,\n status: \"ready\",\n authenticatedDiagnostic: true,\n schema: schema.rows,\n providers: providerState(),\n providerHealth: await getProviderHealth(),\n taskCounts: counts.rows,\n providerCensus: census.rows,\n attemptMetrics: attemptMetrics.rows,\n recentReceipts: recent.rows,\n policy: POLICY,\n costNotes: COST_NOTES,\n environmentRequirements: {\n kernel: \"KERNEL_API_KEY\",\n browserless: \"BROWSERLESS_TOKEN\",\n },\n networkPreflight: {\n dnsOverHttps: \"cloudflare-dns.com\",\n failClosed: true,\n blocksPrivateAndReservedIpRanges: true,\n blocksUrlUserinfo: true,\n blocksNonstandardPorts: true,\n },\n automaticSchedule: \"disabled\",\n timestamp: new Date().toISOString(),\n};\n\nconsole.log(JSON.stringify(result, null, 2));\n",[154],"4520b4a0-ebf6-43a6-bde0-821b5a87e971","stateful_selftest.ts","02391064-aa08-11f1-b31d-1607ee4eb77e",47,["D",1788708679858],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { decideDisposition, withTimeout } from \"./lib/policy.ts\";\nimport { providerAvailable, recordProviderOutcome } from \"./lib/provider_health.ts\";\nimport type { BrowserReceipt } from \"./lib/types.ts\";\n\nconst now = new Date().toISOString();\nconst syntheticFail = (n: number): BrowserReceipt => ({\n runId: `circuit-selftest-${n}`,\n provider: \"kernel\",\n status: \"FAIL\",\n error: `synthetic failure ${n}`,\n durationMs: 1,\n});\n\nlet timeoutBlocked = false;\ntry {\n await withTimeout(new Promise((resolve) => setTimeout(resolve, 50)), 5, \"synthetic timeout\");\n} catch (error) {\n timeoutBlocked = String(error).includes(\"timed out\");\n}\n\nconst dispositions = {\n readOnlyFirstFail: decideDisposition(\"read_only\", \"FAIL\", 1),\n readOnlyBudgetExhausted: decideDisposition(\"read_only\", \"FAIL\", 2),\n writeFail: decideDisposition(\"consequential\", \"FAIL\", 1),\n};\n\nlet circuitAfterThree: unknown;\nlet availableAfterThree: unknown;\ntry {\n await sqlite.execute({\n sql: `UPDATE provider_health SET circuit_state='CLOSED', consecutive_failures=0, open_until=NULL,\n last_success_at=NULL,last_failure_at=NULL,last_error=NULL,updated_at=? WHERE provider='kernel'`,\n args: [now],\n });\n await recordProviderOutcome(\"kernel\", syntheticFail(1));\n await recordProviderOutcome(\"kernel\", syntheticFail(2));\n await recordProviderOutcome(\"kernel\", syntheticFail(3));\n circuitAfterThree = (await sqlite.execute(\"SELECT provider,circuit_state,consecutive_failures,open_until FROM provider_health WHERE provider='kernel'\")).rows[0];\n availableAfterThree = await providerAvailable(\"kernel\");\n} finally {\n await sqlite.execute({\n sql: `UPDATE provider_health SET circuit_state='CLOSED', consecutive_failures=0, open_until=NULL,\n last_success_at=NULL,last_failure_at=NULL,last_error=NULL,updated_at=? WHERE provider='kernel'`,\n args: [new Date().toISOString()],\n });\n}\n\nconsole.log(JSON.stringify({\n version: \"0.5.0\",\n timeoutBlocked,\n dispositions,\n circuitAfterThree,\n availableAfterThree,\n restoredKernelHealth: (await sqlite.execute(\"SELECT provider,circuit_state,consecutive_failures,open_until FROM provider_health WHERE provider='kernel'\")).rows[0],\n}, null, 2));\n",[162],"28ff8473-39df-4272-8946-a28042188764","selftest.ts","226bfbf6-aa05-11f1-8f4b-1607ee4eb77e",44,["D",1788708610657],"import { validateTask } from \"./lib/dsl.ts\";\nimport { providerState } from \"./providers/router.ts\";\nimport { POLICY } from \"./lib/policy.ts\";\nimport { getProviderHealth } from \"./lib/provider_health.ts\";\n\nconst validRead = {\n runId: \"selftest-read-v05\",\n targetUrl: \"https://example.com\",\n risk: \"read_only\" as const,\n purpose: \"Validate V0.5 DSL without opening a browser\",\n evidenceRetention: \"minimal\" as const,\n steps: [{ action: \"expect_text\" as const, text: \"Example Domain\" }],\n};\n\nconst blockedWrite = {\n runId: \"selftest-write-v05\",\n targetUrl: \"https://example.com\",\n risk: \"consequential\" as const,\n approved: false,\n purpose: \"Negative control for approval gate\",\n steps: [{ action: \"click\" as const, selector: \"button\" }],\n};\n\nconst blockedSecret = {\n runId: \"selftest-secret-v05\",\n targetUrl: \"https://example.com\",\n risk: \"read_only\" as const,\n approved: false,\n purpose: \"Negative control for secret resolution gate\",\n steps: [{ action: \"fill_secret\" as const, selector: \"#password\", envVar: \"EXAMPLE_PASSWORD\" }],\n};\n\nconst invalidProvider = {\n ...validRead,\n runId: \"selftest-provider-v05\",\n preferredProvider: \"imaginary-provider\" as any,\n};\n\nconst blockedValueExtraction = {\n ...validRead,\n runId: \"selftest-value-v05\",\n steps: [{ action: \"extract_attribute\" as const, selector: \"#password\", attribute: \"value\", key: \"password\" }],\n};\n\nconst result = {\n version: POLICY.version,\n validReadErrors: validateTask(validRead),\n blockedWriteErrors: validateTask(blockedWrite),\n blockedSecretErrors: validateTask(blockedSecret),\n invalidProviderErrors: validateTask(invalidProvider),\n blockedValueExtractionErrors: validateTask(blockedValueExtraction),\n providers: providerState(),\n providerHealth: await getProviderHealth(),\n policy: POLICY,\n expected: {\n validReadErrors: [],\n blockedWriteContains: \"NEEDS_APPROVAL\",\n blockedSecretContains: \"NEEDS_SECRET_APPROVAL\",\n invalidProviderContains: \"invalid preferredProvider\",\n valueExtractionBlocked: true,\n providersConfigured: false,\n },\n};\n\nconsole.log(JSON.stringify(result, null, 2));\n",[169],"4d1f1c21-cf07-447c-a402-ab67a6802191","runner.ts","46aa03fa-aa05-11f1-b85b-1607ee4eb77e",57,["D",1788708982153],4,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { BrowserReceipt, BrowserTask } from \"./lib/types.ts\";\nimport { validateTask } from \"./lib/dsl.ts\";\nimport { executeRouted } from \"./providers/router.ts\";\nimport { decideDisposition, POLICY } from \"./lib/policy.ts\";\nimport { estimateProviderUnits } from \"./lib/cost.ts\";\nimport { preflightTaskNetwork } from \"./lib/url_security.ts\";\n\nasync function recoverStaleLeases() {\n const staleBefore = new Date(Date.now() - POLICY.runningLeaseMs).toISOString();\n const now = new Date().toISOString();\n await sqlite.batch([\n {\n sql: `UPDATE browser_tasks SET status='FAIL', claimed_at=NULL, next_attempt_at=NULL,\n error='stale running lease; retry budget exhausted', updated_at=?\n WHERE status='RUNNING' AND claimed_at IS NOT NULL AND claimed_at=?`,\n args: [now, staleBefore, POLICY.maxAttemptsPerTask],\n },\n {\n sql: `UPDATE browser_tasks SET status='PENDING', claimed_at=NULL, next_attempt_at=?,\n error='stale running lease recovered', updated_at=?\n WHERE status='RUNNING' AND claimed_at IS NOT NULL AND claimed_at | undefined;\n}\n\nfunction storageReceipt(receipt: BrowserReceipt, task: BrowserTask) {\n if (task.evidenceRetention === \"full\") return receipt;\n const meta = receipt.providerMeta ?? {};\n return {\n runId: receipt.runId,\n provider: receipt.provider,\n status: receipt.status,\n finalUrl: receipt.finalUrl,\n checks: receipt.checks ?? [],\n error: receipt.error,\n durationMs: receipt.durationMs,\n providerMeta: {\n fallbackFrom: meta.fallbackFrom,\n priorStatus: meta.priorStatus,\n priorError: meta.priorError,\n priorDurationMs: meta.priorDurationMs,\n networkPreflight: meta.networkPreflight,\n },\n outputsPersisted: false,\n };\n}\n\nasync function recordAttempts(taskId: number, attemptNo: number, startedAt: string, receipt: BrowserReceipt, storedReceipt: unknown) {\n const finishedAt = new Date().toISOString();\n const meta = receipt.providerMeta ?? {};\n const statements: Array<{ sql: string; args: Array }> = [];\n\n if (typeof meta.fallbackFrom === \"string\") {\n statements.push({\n sql: `INSERT INTO browser_attempts(task_id,run_id,attempt_no,provider,started_at,finished_at,status,duration_ms,error,receipt_json,estimated_units)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)`,\n args: [taskId, receipt.runId, attemptNo, meta.fallbackFrom, startedAt, finishedAt,\n String(meta.priorStatus ?? \"FAIL\"), Number(meta.priorDurationMs ?? 0),\n meta.priorError == null ? null : String(meta.priorError), null, null],\n });\n }\n\n statements.push({\n sql: `INSERT INTO browser_attempts(task_id,run_id,attempt_no,provider,started_at,finished_at,status,duration_ms,error,receipt_json,estimated_units)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)`,\n args: [taskId, receipt.runId, attemptNo, receipt.provider, startedAt, finishedAt,\n receipt.status, receipt.durationMs ?? null, receipt.error ?? null, JSON.stringify(storedReceipt), estimateProviderUnits(receipt)],\n });\n await sqlite.batch(statements);\n}\n\nasync function finishTask(row: Record, task: BrowserTask, receipt: BrowserReceipt, storedReceipt: unknown) {\n const id = Number(row.id);\n const attemptCount = Number(row.attempt_count);\n const now = new Date().toISOString();\n const disposition = decideDisposition(task.risk, receipt.status, attemptCount);\n const next = disposition.retryable ? new Date(Date.now() + disposition.retryDelayMs).toISOString() : null;\n await sqlite.execute({\n sql: `UPDATE browser_tasks SET status=?, provider=?, receipt_json=?, error=?, updated_at=?, claimed_at=NULL, next_attempt_at=? WHERE id=?`,\n args: [disposition.taskStatus, receipt.provider, JSON.stringify(storedReceipt), receipt.error ?? null, now, next, id],\n });\n}\n\nasync function blockTask(row: Record, task: BrowserTask | undefined, errors: string[]) {\n const id = Number(row.id);\n const receipt = { runId: task?.runId ?? String(row.run_id), status: \"BLOCKED\", errors };\n const now = new Date().toISOString();\n await sqlite.batch([\n {\n sql: `UPDATE browser_tasks SET status='BLOCKED', provider=?, receipt_json=?, error=?, updated_at=?, claimed_at=NULL, next_attempt_at=NULL WHERE id=?`,\n args: [task?.preferredProvider ?? \"validation\", JSON.stringify(receipt), errors.join(\"; \"), now, id],\n },\n {\n sql: `INSERT INTO browser_attempts(task_id,run_id,attempt_no,provider,started_at,finished_at,status,error,receipt_json,estimated_units)\n VALUES(?,?,?,?,?,?,?,?,?,?)`,\n args: [id, String(row.run_id), Number(row.attempt_count), task?.preferredProvider ?? \"validation\",\n String(row.claimed_at ?? now), now, \"BLOCKED\", errors.join(\"; \"), JSON.stringify(receipt), null],\n },\n ]);\n console.log(JSON.stringify(receipt, null, 2));\n return receipt;\n}\n\nasync function main() {\n await recoverStaleLeases();\n const row = await claimNext();\n if (!row) {\n const result = { status: \"NO_PENDING_TASK\" };\n console.log(JSON.stringify(result));\n return result;\n }\n\n let task: BrowserTask;\n try {\n task = JSON.parse(String(row.task_json)) as BrowserTask;\n } catch (error) {\n return blockTask(row, undefined, [`invalid task_json: ${error instanceof Error ? error.message : String(error)}`]);\n }\n\n const errors = validateTask(task);\n if (errors.length) return blockTask(row, task, errors);\n\n let networkPreflight: Array<{ host: string; ips: string[] }>;\n try {\n networkPreflight = await preflightTaskNetwork(task);\n } catch (error) {\n return blockTask(row, task, [`NETWORK_PREFLIGHT_BLOCKED: ${error instanceof Error ? error.message : String(error)}`]);\n }\n\n const receipt = await executeRouted(task);\n receipt.providerMeta = { ...(receipt.providerMeta ?? {}), networkPreflight };\n const storedReceipt = storageReceipt(receipt, task);\n await recordAttempts(Number(row.id), Number(row.attempt_count), String(row.claimed_at), receipt, storedReceipt);\n await finishTask(row, task, receipt, storedReceipt);\n\n console.log(JSON.stringify(receipt, null, 2));\n return receipt;\n}\n\nawait main();\n",[176],"a1a5812d-5ce3-4242-9526-b3a3285a7466","main.ts",51,["D",1788708823582],5,"http","export default async function (req: Request): Promise {\n if (req.method !== \"GET\") {\n return Response.json({ error: \"method_not_allowed\" }, { status: 405 });\n }\n\n return Response.json({\n service: \"chat-native-maestro\",\n version: \"0.5.0\",\n status: \"alive\",\n executionSurface: \"authenticated_val_town_plugin_only\",\n automaticExecution: \"disabled\",\n security: {\n publicEndpointWriteMethods: \"disabled\",\n detailedRuntimeState: \"not_exposed_publicly\",\n arbitraryCodeInput: \"disabled\",\n },\n });\n}\n",[184],"6a82d07f-8313-4ef8-99ae-6a02a2764ff8","dns_probe.ts","7fec04d0-aa08-11f1-813e-1607ee4eb77e",55,["D",1788708906255],1,"const result: Record = {};\ntry {\n const url = new URL(\"https://cloudflare-dns.com/dns-query\");\n url.searchParams.set(\"name\", \"example.com\");\n url.searchParams.set(\"type\", \"A\");\n const response = await fetch(url, { headers: { accept: \"application/dns-json\" } });\n result.status = response.status;\n result.body = await response.json();\n result.supported = response.ok;\n} catch (error) {\n result.supported = false;\n result.error = error instanceof Error ? error.message : String(error);\n}\nconsole.log(JSON.stringify(result, null, 2));\n",[192],"2b722ed6-bbb0-4a75-b456-753bb4fe677a","README.md","3efb9a6e-aa06-11f1-82ca-1607ee4eb77e",60,["D",1788709073518],"# Chat-Native Maestro V0.5.0\n\nCloud runtime controlled from normal ChatGPT mobile/web.\n\n## Canonical constraint\n\n- No Codex.\n- No user PC.\n- No local browser runtime.\n- Normal ChatGPT is the control plane.\n- Val Town is the persistent cloud compute/state plane.\n- No automatic browser schedule is enabled.\n\n## Runtime path\n\n`ChatGPT -> authenticated Val Town plugin -> val-scoped SQLite -> runner.ts -> provider router -> cloud browser -> verified receipt`\n\nThe public HTTP endpoint is liveness-only. Provider configuration, task state, receipts, health and cost metrics are available only through authenticated `status.ts` execution.\n\n## Browser routing\n\n1. Kernel — primary/champion.\n2. Browserless — recurring-free fallback.\n3. Browserbase — researched fallback, not implemented.\n4. Steel — one-time-credit fallback, not preferred for steady state.\n\nCross-provider fallback is allowed only for `read_only`. A write failure is never replayed automatically on another provider because failure is not proof of zero side effects.\n\n## Current provider economics (research snapshot 2026-09-06)\n\n### Kernel Free\n\n- $0/month plus usage costs.\n- $5/month free credits.\n- 5 concurrent browsers.\n- live view.\n- stealth mode with CAPTCHA solver/proxy.\n- managed auth.\n- no card required to get started.\n- usage model: GB-second.\n\n### Browserless Free\n\n- 1,000 units/month.\n- 2 concurrent browsers.\n- 2-minute max session.\n- no card required.\n- browser time: 1 unit per 30-second block.\n- successful CAPTCHA solve: additional units.\n- built-in proxies: additional units.\n- provider supports an overage cap that should be set to $0 for this project's zero-surprise-cost policy.\n\n## Browser DSL\n\nSupported:\n- `goto`\n- `wait_for`\n- `click`\n- `fill`\n- `fill_secret`\n- `type`\n- `select`\n- `extract_text`\n- `extract_attribute`\n- `expect_text`\n- `expect_url`\n\nArbitrary JavaScript and shell input are intentionally absent from the task schema.\n\nThe `value` attribute is blocked from `extract_attribute` to reduce accidental credential exfiltration after form fill.\n\n## Risk gates\n\n- `read_only`: normal execution.\n- `reversible_write`: requires explicit `approved=true`.\n- `consequential`: requires explicit `approved=true`.\n- `fill_secret`: separately requires explicit approval, even during a read-oriented flow.\n\n## Secret handling\n\nPasswords, cookies and provider tokens must never be stored in `task_json`.\n\nUse:\n\n```json\n{\"action\":\"fill_secret\",\"selector\":\"#password\",\"envVar\":\"PORTAL_PASSWORD\"}\n```\n\nOnly the environment-variable name is stored. The value is resolved in memory immediately before execution.\n\nProvider credentials belong only in Val Town env vars:\n- `KERNEL_API_KEY`\n- `BROWSERLESS_TOKEN`\n- optional `BROWSERLESS_BASE_URL`\n\n## Network / SSRF boundary\n\nBefore any provider call, `runner.ts` runs a fail-closed network preflight:\n\n- only HTTP/HTTPS;\n- URL userinfo is blocked;\n- nonstandard ports are blocked;\n- localhost/private/link-local/reserved/documentation IP ranges are blocked;\n- known metadata/internal hostnames are blocked;\n- `allowedHosts` are validated;\n- hostnames are resolved with DNS-over-HTTPS and all A/AAAA results must be public.\n\nThe browser program itself also restricts main-frame navigation to the original target host plus explicit `allowedHosts`.\n\nDNS preflight reduces SSRF/DNS-rebinding risk but is not a mathematical proof against DNS rebinding after the preflight. Provider isolation and post-action validation remain required.\n\n## Read-only browser firewall\n\nWhen `risk=read_only`, browser network requests using methods other than GET/HEAD/OPTIONS are aborted. Popups are closed.\n\nThis prevents common POST/PUT/PATCH/DELETE side effects. It cannot guarantee zero side effects on badly designed GET endpoints.\n\n## Reliability controls\n\n- task `run_id` is unique/idempotent;\n- atomic queue claim;\n- 90-second RUNNING lease;\n- stale lease recovery;\n- max 2 task attempts;\n- read-only FAIL retry delay: 10 seconds;\n- writes are not auto-retried;\n- browser timeout: 25 seconds;\n- Kernel cleanup timeout: 5 seconds;\n- provider circuit opens after 3 consecutive provider FAILs;\n- circuit cooldown: 15 minutes;\n- BLOCKED configuration errors do not degrade provider health;\n- no cron/automatic runner, so eligible retries still require an explicit ChatGPT runner invocation.\n\n## Evidence retention\n\nDefault is `minimal`:\n- status;\n- final URL;\n- expectations/checks;\n- error;\n- duration;\n- fallback metadata;\n- DNS preflight evidence.\n\nExtracted outputs and provider session IDs are not persisted by default.\n\nUse `evidenceRetention: \"full\"` only when the extracted output is intentionally safe to retain.\n\n## Cost telemetry\n\n`browser_attempts` records per-attempt provider/status/duration and an estimated Browserless browser-time unit count.\n\nBrowserless estimates exclude CAPTCHA/proxy add-ons. Kernel usage is not estimated locally because its billing basis is GB-second; actual account usage must be observed from Kernel.\n\n## PASS rule\n\n`TOOL_SUCCESS_RESPONSE != BEHAVIOR_PROOF`.\n\nA browser execution with no positive expectation remains `PARTIAL`. `PASS` requires all explicit expectations to succeed.\n\n## Current live evidence\n\nPASS:\n- Val Town plugin authenticated.\n- Free workspace.\n- create/edit/run/deploy.\n- public liveness endpoint.\n- authenticated diagnostics.\n- val-scoped SQLite.\n- schema versioning.\n- atomic task claim.\n- stale lease recovery.\n- persisted task/attempt receipts.\n- retry decision logic.\n- timeout control.\n- provider circuit breaker and restore test.\n- risk approval gate.\n- secret approval gate.\n- invalid provider rejection.\n- `value` attribute extraction rejection.\n- DNS-over-HTTPS preflight.\n- private/metadata URL blocking in both self-test and runner pipeline.\n- Kernel SDK module loading.\n- Browserless adapter module loading.\n- safe missing-provider-credential classification.\n\nUNVERIFIED:\n- Kernel API authentication for this account.\n- live Kernel browser creation.\n- live Kernel Playwright execution.\n- Kernel actual credit consumption.\n- Browserless API authentication for this account.\n- live Browserless `/function` execution.\n- Browserless actual unit consumption.\n\nNo user-created environment variables are currently configured, so no live browser provider has been promoted to OPERATIONAL.\n\n## Next milestone\n\n`docs/SMOKE_TASK.json` is deliberately a DRAFT, not a queued task. After exactly one provider credential is configured, ChatGPT can enqueue that read-only smoke task, run `runner.ts`, persist the attempt and promote the provider only if the explicit expectations PASS.\n\nSee:\n- `docs/CURRENT_STATE.md`\n- `docs/PROVIDER_CENSUS.md`\n- `docs/ACTIVATION_RUNBOOK.md`\n- `docs/TASK_SCHEMA.md`\n- `docs/SMOKE_TASK.json`\n",[200],"52abd68c-7eb8-45d0-87f2-28a80af822c4","providers","f528640e-aa04-11f1-8241-1607ee4eb77e",3,["D",1788707369470],"directory",[207],"561d863a-e041-4f0a-b61d-8884716cb727","lib","f30be01a-aa04-11f1-b5ff-1607ee4eb77e",["D",1788707365920],[214],"7a194648-9f6b-42ee-8ade-4a9c3bcd3220","docs","f7f2feb0-aa04-11f1-9265-1607ee4eb77e",["D",1788707374127],[219],"pulls","branches","forks","envVars",{"_230":63,"_232":63},"connections",{"_230":63,"_231":63},"count","unfilledCount","emptyCount",{"_43":218,"_32":219,"_30":220,"_145":-5,"_41":42,"_40":180,"_147":59,"_38":397,"_13":63,"_34":211,"_35":-5,"_24":25,"_151":-5,"_259":398,"_27":399},{"_43":389,"_32":390,"_30":391,"_145":220,"_41":42,"_40":392,"_147":25,"_38":393,"_13":63,"_34":20,"_35":394,"_24":25,"_151":-5,"_259":395,"_27":396},{"_43":385,"_32":33,"_30":31,"_145":220,"_41":42,"_40":14,"_147":59,"_38":386,"_13":158,"_34":20,"_35":37,"_24":25,"_151":-5,"_259":387,"_27":388},{"_43":377,"_32":378,"_30":379,"_145":220,"_41":42,"_40":380,"_147":25,"_38":381,"_13":63,"_34":20,"_35":382,"_24":25,"_151":-5,"_259":383,"_27":384},{"_43":369,"_32":370,"_30":371,"_145":220,"_41":42,"_40":372,"_147":59,"_38":373,"_13":63,"_34":20,"_35":374,"_24":25,"_151":-5,"_259":375,"_27":376},{"_43":361,"_32":362,"_30":363,"_145":220,"_41":42,"_40":364,"_147":59,"_38":365,"_13":63,"_34":20,"_35":366,"_24":25,"_151":-5,"_259":367,"_27":368},{"_43":213,"_32":214,"_30":215,"_145":-5,"_41":42,"_40":158,"_147":59,"_38":358,"_13":63,"_34":211,"_35":-5,"_24":25,"_151":-5,"_259":359,"_27":360},{"_43":350,"_32":351,"_30":352,"_145":215,"_41":42,"_40":353,"_147":59,"_38":354,"_13":63,"_34":149,"_35":355,"_24":25,"_151":-5,"_259":356,"_27":357},{"_43":342,"_32":343,"_30":344,"_145":215,"_41":42,"_40":345,"_147":59,"_38":346,"_13":180,"_34":149,"_35":347,"_24":25,"_151":-5,"_259":348,"_27":349},{"_43":334,"_32":335,"_30":336,"_145":215,"_41":42,"_40":337,"_147":59,"_38":338,"_13":158,"_34":149,"_35":339,"_24":25,"_151":-5,"_259":340,"_27":341},{"_43":326,"_32":327,"_30":328,"_145":215,"_41":42,"_40":329,"_147":59,"_38":330,"_13":63,"_34":149,"_35":331,"_24":25,"_151":-5,"_259":332,"_27":333},{"_43":318,"_32":319,"_30":320,"_145":215,"_41":42,"_40":321,"_147":59,"_38":322,"_13":158,"_34":149,"_35":323,"_24":25,"_151":-5,"_259":324,"_27":325},{"_43":310,"_32":311,"_30":312,"_145":215,"_41":42,"_40":313,"_147":59,"_38":314,"_13":63,"_34":149,"_35":315,"_24":25,"_151":-5,"_259":316,"_27":317},{"_43":206,"_32":207,"_30":208,"_145":-5,"_41":42,"_40":209,"_147":59,"_38":307,"_13":63,"_34":211,"_35":-5,"_24":25,"_151":-5,"_259":308,"_27":309},{"_43":299,"_32":300,"_30":301,"_145":208,"_41":42,"_40":302,"_147":59,"_38":303,"_13":180,"_34":149,"_35":304,"_24":25,"_151":-5,"_259":305,"_27":306},{"_43":291,"_32":292,"_30":293,"_145":208,"_41":42,"_40":294,"_147":59,"_38":295,"_13":180,"_34":149,"_35":296,"_24":25,"_151":-5,"_259":297,"_27":298},{"_43":283,"_32":284,"_30":285,"_145":208,"_41":42,"_40":286,"_147":59,"_38":287,"_13":158,"_34":149,"_35":288,"_24":25,"_151":-5,"_259":289,"_27":290},{"_43":199,"_32":200,"_30":201,"_145":-5,"_41":42,"_40":202,"_147":59,"_38":280,"_13":158,"_34":20,"_35":204,"_24":25,"_151":-5,"_259":281,"_27":282},{"_43":191,"_32":192,"_30":193,"_145":-5,"_41":42,"_40":194,"_147":25,"_38":277,"_13":196,"_34":149,"_35":197,"_24":25,"_151":-5,"_259":278,"_27":279},{"_43":183,"_32":184,"_30":57,"_145":-5,"_41":42,"_40":185,"_147":59,"_38":274,"_13":187,"_34":188,"_35":189,"_24":25,"_151":-5,"_259":275,"_27":276},{"_43":175,"_32":176,"_30":177,"_145":-5,"_41":42,"_40":178,"_147":59,"_38":271,"_13":180,"_34":149,"_35":181,"_24":25,"_151":-5,"_259":272,"_27":273},{"_43":168,"_32":169,"_30":170,"_145":-5,"_41":42,"_40":171,"_147":59,"_38":268,"_13":158,"_34":149,"_35":173,"_24":25,"_151":-5,"_259":269,"_27":270},{"_43":161,"_32":162,"_30":163,"_145":-5,"_41":42,"_40":164,"_147":59,"_38":265,"_13":63,"_34":149,"_35":166,"_24":25,"_151":-5,"_259":266,"_27":267},{"_43":153,"_32":154,"_30":155,"_145":-5,"_41":42,"_40":156,"_147":59,"_38":262,"_13":158,"_34":149,"_35":159,"_24":25,"_151":-5,"_259":263,"_27":264},{"_43":142,"_32":143,"_30":144,"_145":-5,"_41":42,"_40":146,"_147":59,"_38":258,"_13":63,"_34":149,"_35":150,"_24":25,"_151":-5,"_259":260,"_27":261},["D",1788708989939],"children",[],[143],["D",1788709048219],[],[154],["D",1788708679858],[],[162],["D",1788708610657],[],[169],["D",1788708982153],[],[176],["D",1788708823582],[],[184],["D",1788708906255],[],[192],["D",1788709073518],[],[200],"9853b5ac-79a2-471c-87bb-31d20bd2b93b","router.ts","40781008-aa05-11f1-bfc5-1607ee4eb77e",37,["D",1788708460636],"import type { BrowserReceipt, BrowserTask, ProviderName } from \"../lib/types.ts\";\nimport { executeKernel, kernelConfigured } from \"./kernel.ts\";\nimport { browserlessConfigured, executeBrowserless } from \"./browserless.ts\";\nimport { providerAvailable, recordProviderOutcome } from \"../lib/provider_health.ts\";\n\nexport function providerState() {\n const kernel = kernelConfigured();\n const browserless = browserlessConfigured();\n return {\n kernel: { priority: 1, configured: kernel, state: kernel ? \"READY\" : \"ACCOUNT_KEY_REQUIRED\" },\n browserless: { priority: 2, configured: browserless, state: browserless ? \"READY\" : \"ACCOUNT_TOKEN_REQUIRED\" },\n };\n}\n\nasync function runProvider(provider: ProviderName, task: BrowserTask): Promise {\n const health = await providerAvailable(provider);\n if (!health.available) {\n return { runId: task.runId, provider, status: \"BLOCKED\", error: health.reason ?? \"provider circuit open\" };\n }\n\n const receipt = provider === \"kernel\" ? await executeKernel(task) : await executeBrowserless(task);\n await recordProviderOutcome(provider, receipt);\n return receipt;\n}\n\nfunction withFallbackMeta(receipt: BrowserReceipt, prior: BrowserReceipt): BrowserReceipt {\n return {\n ...receipt,\n providerMeta: {\n ...(receipt.providerMeta ?? {}),\n fallbackFrom: prior.provider,\n priorStatus: prior.status,\n priorError: prior.error ?? null,\n priorDurationMs: prior.durationMs ?? null,\n },\n };\n}\n\nexport async function executeRouted(task: BrowserTask): Promise {\n if (task.preferredProvider === \"browserless\") return runProvider(\"browserless\", task);\n if (task.preferredProvider === \"kernel\") return runProvider(\"kernel\", task);\n\n if (kernelConfigured()) {\n const primary = await runProvider(\"kernel\", task);\n if (primary.status === \"PASS\" || primary.status === \"PARTIAL\") return primary;\n if (task.risk === \"read_only\" && browserlessConfigured()) {\n const fallback = await runProvider(\"browserless\", task);\n return withFallbackMeta(fallback, primary);\n }\n return primary;\n }\n\n if (browserlessConfigured()) return runProvider(\"browserless\", task);\n return runProvider(\"kernel\", task);\n}\n",[],[207,284],"3dfb6747-ac0f-4473-8d83-50f188fabde7","kernel.ts","1aa22634-aa05-11f1-8241-1607ee4eb77e",42,["D",1788708574938],"import Kernel from \"npm:@onkernel/sdk\";\nimport type { BrowserReceipt, BrowserTask } from \"../lib/types.ts\";\nimport { buildKernelPlaywrightCode, resolveSecrets } from \"../lib/dsl.ts\";\nimport { POLICY, withTimeout } from \"../lib/policy.ts\";\n\nexport function kernelConfigured(): boolean {\n return Boolean(Deno.env.get(\"KERNEL_API_KEY\"));\n}\n\nexport async function executeKernel(task: BrowserTask): Promise {\n const apiKey = Deno.env.get(\"KERNEL_API_KEY\");\n if (!apiKey) {\n return { runId: task.runId, provider: \"kernel\", status: \"BLOCKED\", error: \"KERNEL_API_KEY missing\" };\n }\n\n let resolvedTask: BrowserTask;\n try {\n resolvedTask = resolveSecrets(task);\n } catch (error) {\n return { runId: task.runId, provider: \"kernel\", status: \"BLOCKED\", error: error instanceof Error ? error.message : String(error) };\n }\n\n const started = Date.now();\n const kernel = new Kernel({ apiKey });\n let sessionId: string | undefined;\n try {\n const kernelBrowser = await withTimeout(\n kernel.browsers.create({ headless: true, stealth: true }),\n 10_000,\n \"kernel browser create\",\n );\n sessionId = kernelBrowser.session_id;\n\n const response = await withTimeout(\n kernel.browsers.playwright.execute(sessionId, {\n code: buildKernelPlaywrightCode(resolvedTask),\n }),\n POLICY.browserTimeoutMs,\n \"kernel playwright execute\",\n );\n const result = (response as any).result ?? response;\n const verified = Boolean(result?.verified);\n return {\n runId: task.runId,\n provider: \"kernel\",\n status: verified ? \"PASS\" : \"PARTIAL\",\n finalUrl: result?.finalUrl,\n outputs: result?.outputs ?? {},\n checks: result?.checks ?? [],\n durationMs: Date.now() - started,\n providerMeta: { sessionId, headless: true, stealth: true },\n };\n } catch (error) {\n return {\n runId: task.runId,\n provider: \"kernel\",\n status: \"FAIL\",\n error: error instanceof Error ? error.message : String(error),\n durationMs: Date.now() - started,\n providerMeta: sessionId ? { sessionId } : {},\n };\n } finally {\n if (sessionId) {\n try {\n await withTimeout(kernel.browsers.deleteByID(sessionId), 5_000, \"kernel browser cleanup\");\n } catch (cleanupError) {\n console.error(\"kernel cleanup failed\", cleanupError);\n }\n }\n }\n}\n",[],[207,292],"f72cdfad-c2bc-42e6-bd68-78a743902e9b","browserless.ts","62afee48-aa05-11f1-9a10-1607ee4eb77e",43,["D",1788708593522],"import type { BrowserReceipt, BrowserTask } from \"../lib/types.ts\";\nimport { resolveSecrets } from \"../lib/dsl.ts\";\nimport { POLICY } from \"../lib/policy.ts\";\n\nconst FUNCTION_CODE = String.raw`\nexport default async ({ page, context }) => {\n const plan = context.plan;\n const outputs = {};\n const checks = [];\n const targetHost = new URL(plan.targetUrl).hostname;\n const allowedHosts = new Set([targetHost, ...(plan.allowedHosts || [])]);\n const allowedMethods = new Set([\"GET\", \"HEAD\", \"OPTIONS\"]);\n const assertUrl = (value) => {\n const u = new URL(value);\n if (![\"http:\", \"https:\"].includes(u.protocol)) throw new Error(\"blocked protocol\");\n if (!allowedHosts.has(u.hostname)) throw new Error(\"blocked host: \" + u.hostname);\n };\n\n await page.setRequestInterception(true);\n page.on(\"request\", (req) => {\n try {\n if (req.isNavigationRequest() && req.frame() === page.mainFrame()) assertUrl(req.url());\n if (plan.risk === \"read_only\" && !allowedMethods.has(req.method().toUpperCase())) return req.abort(\"blockedbyclient\");\n return req.continue();\n } catch {\n return req.abort(\"blockedbyclient\");\n }\n });\n page.on(\"popup\", async (popup) => { try { await popup.close(); } catch {} });\n\n assertUrl(plan.targetUrl);\n await page.goto(plan.targetUrl, { waitUntil: \"domcontentloaded\" });\n assertUrl(page.url());\n\n for (const step of plan.steps) {\n switch (step.action) {\n case \"goto\": {\n const url = step.url || plan.targetUrl;\n assertUrl(url);\n await page.goto(url, { waitUntil: \"domcontentloaded\" });\n break;\n }\n case \"wait_for\":\n await page.waitForSelector(step.selector, { visible: true, timeout: step.timeoutMs || 10000 });\n break;\n case \"click\":\n if (step.waitForNavigation) {\n await Promise.all([page.waitForNavigation({ waitUntil: \"domcontentloaded\" }), page.click(step.selector)]);\n } else await page.click(step.selector);\n break;\n case \"fill\":\n await page.click(step.selector, { clickCount: 3 });\n await page.keyboard.press(\"Backspace\");\n await page.type(step.selector, step.text);\n break;\n case \"type\":\n await page.type(step.selector, step.text, { delay: step.delayMs || 0 });\n break;\n case \"select\":\n await page.select(step.selector, step.value);\n break;\n case \"extract_text\":\n outputs[step.key] = await page.$eval(step.selector, (el) => el.textContent || \"\");\n break;\n case \"extract_attribute\":\n outputs[step.key] = await page.$eval(step.selector, (el, attr) => el.getAttribute(attr), step.attribute);\n break;\n case \"expect_text\": {\n const body = await page.evaluate(() => document.body?.innerText || \"\");\n checks.push({ type: \"text\", expected: step.text, ok: body.includes(step.text) });\n break;\n }\n case \"expect_url\": {\n const actual = page.url();\n checks.push({ type: \"url\", expected: step.contains, actual, ok: actual.includes(step.contains) });\n break;\n }\n }\n assertUrl(page.url());\n }\n\n return {\n data: {\n finalUrl: page.url(),\n outputs,\n checks,\n verified: checks.length > 0 && checks.every((x) => x.ok),\n },\n type: \"application/json\",\n };\n};\n`;\n\nexport function browserlessConfigured(): boolean {\n return Boolean(Deno.env.get(\"BROWSERLESS_TOKEN\"));\n}\n\nexport async function executeBrowserless(task: BrowserTask): Promise {\n const token = Deno.env.get(\"BROWSERLESS_TOKEN\");\n if (!token) return { runId: task.runId, provider: \"browserless\", status: \"BLOCKED\", error: \"BROWSERLESS_TOKEN missing\" };\n\n let resolvedTask: BrowserTask;\n try {\n resolvedTask = resolveSecrets(task);\n } catch (error) {\n return { runId: task.runId, provider: \"browserless\", status: \"BLOCKED\", error: error instanceof Error ? error.message : String(error) };\n }\n\n const started = Date.now();\n const base = (Deno.env.get(\"BROWSERLESS_BASE_URL\") || \"https://production-sfo.browserless.io\").replace(/\\/+$/, \"\");\n try {\n const response = await fetch(`${base}/function?token=${encodeURIComponent(token)}`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ code: FUNCTION_CODE, context: { plan: resolvedTask } }),\n signal: AbortSignal.timeout(POLICY.browserTimeoutMs),\n });\n const text = await response.text();\n let result: any;\n try { result = JSON.parse(text); } catch { result = { raw: text }; }\n if (!response.ok) {\n return { runId: task.runId, provider: \"browserless\", status: \"FAIL\", error: `HTTP ${response.status}: ${text.slice(0, 500)}`, durationMs: Date.now() - started };\n }\n return {\n runId: task.runId,\n provider: \"browserless\",\n status: result?.verified ? \"PASS\" : \"PARTIAL\",\n finalUrl: result?.finalUrl,\n outputs: result?.outputs ?? {},\n checks: result?.checks ?? [],\n durationMs: Date.now() - started,\n providerMeta: { base },\n };\n } catch (error) {\n return { runId: task.runId, provider: \"browserless\", status: \"FAIL\", error: error instanceof Error ? error.message : String(error), durationMs: Date.now() - started };\n }\n}\n",[],[207,300],["D",1788707369470],[247,248,249],[207],"2b465799-8dd6-4750-b07a-dad5ae57369b","url_security.ts","a612ca68-aa08-11f1-b25d-1607ee4eb77e",56,["D",1788708954762],"import type { BrowserTask } from \"./types.ts\";\n\ntype DnsAnswer = { name?: string; type?: number; data?: string };\ntype DnsJson = { Status?: number; Answer?: DnsAnswer[] };\n\nconst BLOCKED_HOST_NAMES = new Set([\n \"localhost\",\n \"localhost.localdomain\",\n \"metadata.google.internal\",\n \"metadata\",\n]);\n\nfunction stripBrackets(host: string): string {\n return host.startsWith(\"[\") && host.endsWith(\"]\") ? host.slice(1, -1) : host;\n}\n\nfunction parseIpv4(value: string): number[] | null {\n const parts = value.split(\".\");\n if (parts.length !== 4) return null;\n const nums = parts.map((p) => Number(p));\n if (nums.some((n) => !Number.isInteger(n) || n < 0 || n > 255)) return null;\n return nums;\n}\n\nexport function isNonPublicIp(value: string): boolean {\n const ip = stripBrackets(value.trim().toLowerCase());\n const v4 = parseIpv4(ip);\n if (v4) {\n const [a, b, c] = v4;\n if (a === 0 || a === 10 || a === 127 || a >= 224) return true;\n if (a === 100 && b >= 64 && b <= 127) return true;\n if (a === 169 && b === 254) return true;\n if (a === 172 && b >= 16 && b <= 31) return true;\n if (a === 192 && b === 0 && c === 0) return true;\n if (a === 192 && b === 0 && c === 2) return true;\n if (a === 192 && b === 168) return true;\n if (a === 198 && (b === 18 || b === 19)) return true;\n if (a === 198 && b === 51 && c === 100) return true;\n if (a === 203 && b === 0 && c === 113) return true;\n return false;\n }\n\n if (ip.includes(\":\")) {\n if (ip === \"::\" || ip === \"::1\") return true;\n if (ip.startsWith(\"fc\") || ip.startsWith(\"fd\")) return true;\n if (/^fe[89ab]/.test(ip)) return true;\n if (ip.startsWith(\"ff\")) return true;\n if (ip.startsWith(\"2001:db8\")) return true;\n const mapped = ip.match(/::ffff:(\\d+\\.\\d+\\.\\d+\\.\\d+)$/);\n if (mapped) return isNonPublicIp(mapped[1]);\n return false;\n }\n\n return false;\n}\n\nfunction blockedHostname(hostname: string): boolean {\n const host = stripBrackets(hostname.toLowerCase().replace(/\\.$/, \"\"));\n if (BLOCKED_HOST_NAMES.has(host)) return true;\n if (host.endsWith(\".localhost\") || host.endsWith(\".local\") || host.endsWith(\".internal\") || host.endsWith(\".home.arpa\")) return true;\n if (isNonPublicIp(host)) return true;\n return false;\n}\n\nasync function doh(hostname: string, type: \"A\" | \"AAAA\"): Promise {\n const url = new URL(\"https://cloudflare-dns.com/dns-query\");\n url.searchParams.set(\"name\", hostname);\n url.searchParams.set(\"type\", type);\n const response = await fetch(url, {\n headers: { accept: \"application/dns-json\" },\n signal: AbortSignal.timeout(5_000),\n });\n if (!response.ok) throw new Error(`DoH ${type} failed with HTTP ${response.status}`);\n return await response.json() as DnsJson;\n}\n\nexport async function resolvePublicIps(hostname: string): Promise {\n const host = stripBrackets(hostname.toLowerCase().replace(/\\.$/, \"\"));\n if (blockedHostname(host)) throw new Error(`blocked hostname: ${host}`);\n if (parseIpv4(host) || host.includes(\":\")) return [host];\n\n const [a, aaaa] = await Promise.all([doh(host, \"A\"), doh(host, \"AAAA\")]);\n const answers = [...(a.Answer ?? []), ...(aaaa.Answer ?? [])];\n const ips = answers\n .filter((x) => x.type === 1 || x.type === 28)\n .map((x) => String(x.data ?? \"\"))\n .filter(Boolean);\n\n if (ips.length === 0) throw new Error(`no A/AAAA records resolved for ${host}`);\n const blocked = ips.filter(isNonPublicIp);\n if (blocked.length) throw new Error(`hostname ${host} resolved to blocked IP(s): ${blocked.join(\", \")}`);\n return [...new Set(ips)];\n}\n\nexport async function assertSafeUrl(value: string): Promise<{ url: string; host: string; ips: string[] }> {\n const url = new URL(value);\n if (![\"http:\", \"https:\"].includes(url.protocol)) throw new Error(\"only http/https URLs are allowed\");\n if (url.username || url.password) throw new Error(\"URL userinfo is blocked\");\n if (url.port && ![\"80\", \"443\"].includes(url.port)) throw new Error(`nonstandard port blocked: ${url.port}`);\n if (blockedHostname(url.hostname)) throw new Error(`blocked hostname: ${url.hostname}`);\n const ips = await resolvePublicIps(url.hostname);\n return { url: url.toString(), host: url.hostname, ips };\n}\n\nexport async function preflightTaskNetwork(task: BrowserTask) {\n const checked: Array<{ host: string; ips: string[] }> = [];\n const seen = new Set();\n\n const checkUrl = async (value: string) => {\n const result = await assertSafeUrl(value);\n if (!seen.has(result.host)) {\n seen.add(result.host);\n checked.push({ host: result.host, ips: result.ips });\n }\n };\n\n await checkUrl(task.targetUrl);\n for (const step of task.steps) {\n if (step.action === \"goto\" && step.url) await checkUrl(step.url);\n }\n for (const host of task.allowedHosts ?? []) {\n const clean = host.trim().toLowerCase();\n if (!clean || clean.includes(\"/\") || clean.includes(\"://\") || clean.includes(\"@\")) throw new Error(`invalid allowedHost: ${host}`);\n await checkUrl(`https://${clean}/`);\n }\n\n return checked;\n}\n",[],[214,311],"36b42981-a6f9-4cd6-a481-07a9a038a7b5","types.ts","08217668-aa05-11f1-b47d-1607ee4eb77e",39,["D",1788708517010],"export type Risk = \"read_only\" | \"reversible_write\" | \"consequential\";\nexport type ProviderName = \"kernel\" | \"browserless\";\nexport type EvidenceRetention = \"minimal\" | \"full\";\n\nexport type Step =\n | { action: \"goto\"; url?: string }\n | { action: \"wait_for\"; selector: string; timeoutMs?: number }\n | { action: \"click\"; selector: string; waitForNavigation?: boolean }\n | { action: \"fill\"; selector: string; text: string }\n | { action: \"fill_secret\"; selector: string; envVar: string }\n | { action: \"type\"; selector: string; text: string; delayMs?: number }\n | { action: \"select\"; selector: string; value: string }\n | { action: \"extract_text\"; selector: string; key: string }\n | { action: \"extract_attribute\"; selector: string; attribute: string; key: string }\n | { action: \"expect_text\"; text: string }\n | { action: \"expect_url\"; contains: string };\n\nexport type BrowserTask = {\n runId: string;\n targetUrl: string;\n risk: Risk;\n approved?: boolean;\n purpose: string;\n allowedHosts?: string[];\n preferredProvider?: ProviderName;\n evidenceRetention?: EvidenceRetention;\n steps: Step[];\n};\n\nexport type BrowserReceipt = {\n runId: string;\n provider: ProviderName;\n status: \"PASS\" | \"PARTIAL\" | \"FAIL\" | \"BLOCKED\";\n finalUrl?: string;\n outputs?: Record;\n checks?: Array>;\n error?: string;\n durationMs?: number;\n providerMeta?: Record;\n};\n",[],[214,319],"9e8d90ce-1918-4afb-9a17-f03ecb926764","provider_health.ts","7993f5d0-aa07-11f1-af42-1607ee4eb77e",36,["D",1788708450626],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { BrowserReceipt, ProviderName } from \"./types.ts\";\nimport { POLICY } from \"./policy.ts\";\n\nexport async function providerAvailable(provider: ProviderName): Promise<{ available: boolean; reason?: string }> {\n const row = (await sqlite.execute({ sql: \"SELECT * FROM provider_health WHERE provider=?\", args: [provider] })).rows[0] as any;\n if (!row) return { available: true };\n if (row.circuit_state !== \"OPEN\") return { available: true };\n if (!row.open_until) return { available: false, reason: \"provider circuit open\" };\n const until = Date.parse(String(row.open_until));\n if (Number.isFinite(until) && Date.now() >= until) {\n await sqlite.execute({\n sql: \"UPDATE provider_health SET circuit_state='HALF_OPEN', updated_at=? WHERE provider=?\",\n args: [new Date().toISOString(), provider],\n });\n return { available: true };\n }\n return { available: false, reason: `provider circuit open until ${row.open_until}` };\n}\n\nexport async function recordProviderOutcome(provider: ProviderName, receipt: BrowserReceipt): Promise {\n const now = new Date().toISOString();\n if (receipt.status === \"PASS\" || receipt.status === \"PARTIAL\") {\n await sqlite.execute({\n sql: `UPDATE provider_health SET circuit_state='CLOSED', consecutive_failures=0, open_until=NULL,\n last_success_at=?, last_error=NULL, updated_at=? WHERE provider=?`,\n args: [now, now, provider],\n });\n return;\n }\n\n if (receipt.status === \"BLOCKED\") return;\n\n const row = (await sqlite.execute({ sql: \"SELECT consecutive_failures FROM provider_health WHERE provider=?\", args: [provider] })).rows[0] as any;\n const failures = Number(row?.consecutive_failures ?? 0) + 1;\n const shouldOpen = failures >= POLICY.providerCircuitFailureThreshold;\n const openUntil = shouldOpen ? new Date(Date.now() + POLICY.providerCircuitCooldownMs).toISOString() : null;\n await sqlite.execute({\n sql: `UPDATE provider_health SET circuit_state=?, consecutive_failures=?, open_until=?,\n last_failure_at=?, last_error=?, updated_at=? WHERE provider=?`,\n args: [shouldOpen ? \"OPEN\" : \"CLOSED\", failures, openUntil, now, receipt.error ?? receipt.status, now, provider],\n });\n}\n\nexport async function getProviderHealth() {\n return (await sqlite.execute(\"SELECT * FROM provider_health ORDER BY provider\")).rows;\n}\n",[],[214,327],"30a557f0-8e88-4aa8-8f98-81486032a5e9","policy.ts","50662fa2-aa07-11f1-b77b-1607ee4eb77e",45,["D",1788708643387],"import type { Risk } from \"./types.ts\";\n\nexport const POLICY = {\n version: \"0.5.0\",\n maxAttemptsPerTask: 2,\n retryDelayMs: 10_000,\n runningLeaseMs: 90_000,\n readOnlyFallbackAllowed: true,\n browserTimeoutMs: 25_000,\n providerFailureWindow: 5,\n providerCircuitFailureThreshold: 3,\n providerCircuitCooldownMs: 15 * 60_000,\n} as const;\n\nexport function isTerminalStatus(status: string): boolean {\n return [\"PASS\", \"PARTIAL\", \"FAIL\", \"BLOCKED\", \"CANCELLED\"].includes(status);\n}\n\nexport function decideDisposition(risk: Risk, receiptStatus: string, attemptCount: number) {\n const retryable = risk === \"read_only\" && receiptStatus === \"FAIL\" && attemptCount < POLICY.maxAttemptsPerTask;\n return {\n retryable,\n taskStatus: retryable ? \"PENDING\" : receiptStatus,\n retryDelayMs: retryable ? POLICY.retryDelayMs : 0,\n } as const;\n}\n\nexport async function withTimeout(promise: Promise, ms: number, label: string): Promise {\n let timer: number | undefined;\n const timeout = new Promise((_, reject) => {\n timer = setTimeout(() => reject(new Error(`${label} timed out after ${ms}ms`)), ms);\n });\n try {\n return await Promise.race([promise, timeout]);\n } finally {\n if (timer !== undefined) clearTimeout(timer);\n }\n}\n",[],[214,335],"a85185f4-ae91-4dc6-bfdd-7432df49fe18","dsl.ts","1341db6e-aa05-11f1-ba4c-1607ee4eb77e",41,["D",1788708562937],"import type { BrowserTask } from \"./types.ts\";\n\nconst ALLOWED_ACTIONS = new Set([\n \"goto\", \"wait_for\", \"click\", \"fill\", \"fill_secret\", \"type\", \"select\",\n \"extract_text\", \"extract_attribute\", \"expect_text\", \"expect_url\",\n]);\n\nexport function validateTask(task: BrowserTask): string[] {\n const errors: string[] = [];\n if (!task || typeof task !== \"object\") return [\"task must be an object\"];\n if (!task.runId || task.runId.length > 128) errors.push(\"invalid runId\");\n if (!task.purpose || task.purpose.length > 1000) errors.push(\"invalid purpose\");\n if (!Array.isArray(task.steps) || task.steps.length < 1 || task.steps.length > 30) errors.push(\"steps must contain 1..30 actions\");\n if (![\"read_only\", \"reversible_write\", \"consequential\"].includes(task.risk)) errors.push(\"invalid risk\");\n if (task.risk !== \"read_only\" && task.approved !== true) errors.push(\"NEEDS_APPROVAL\");\n if (task.preferredProvider && ![\"kernel\", \"browserless\"].includes(task.preferredProvider)) errors.push(\"invalid preferredProvider\");\n if (task.evidenceRetention && ![\"minimal\", \"full\"].includes(task.evidenceRetention)) errors.push(\"invalid evidenceRetention\");\n\n let target: URL | undefined;\n try {\n target = new URL(task.targetUrl);\n if (![\"http:\", \"https:\"].includes(target.protocol)) errors.push(\"target protocol blocked\");\n } catch {\n errors.push(\"invalid targetUrl\");\n }\n\n const targetHost = target?.hostname;\n const allowed = new Set([targetHost, ...(task.allowedHosts ?? [])].filter(Boolean) as string[]);\n for (const [i, step] of (task.steps ?? []).entries()) {\n if (!step || !ALLOWED_ACTIONS.has((step as any).action)) {\n errors.push(`step ${i}: unsupported action`);\n continue;\n }\n const maybe = step as any;\n if (typeof maybe.selector === \"string\" && maybe.selector.length > 1000) errors.push(`step ${i}: selector too long`);\n if (typeof maybe.text === \"string\" && maybe.text.length > 10000) errors.push(`step ${i}: text too long`);\n if (maybe.action === \"fill_secret\") {\n if (typeof maybe.envVar !== \"string\" || !/^[A-Za-z_][A-Za-z0-9_]*$/.test(maybe.envVar)) errors.push(`step ${i}: invalid secret env var`);\n if (task.approved !== true) errors.push(\"NEEDS_SECRET_APPROVAL\");\n }\n if (maybe.action === \"extract_attribute\" && String(maybe.attribute).toLowerCase() === \"value\") {\n errors.push(`step ${i}: extracting value attribute is blocked to reduce secret leakage risk`);\n }\n if (maybe.action === \"goto\" && maybe.url) {\n try {\n const u = new URL(maybe.url);\n if (![\"http:\", \"https:\"].includes(u.protocol) || !allowed.has(u.hostname)) errors.push(`step ${i}: navigation host blocked`);\n } catch {\n errors.push(`step ${i}: invalid goto url`);\n }\n }\n }\n return [...new Set(errors)];\n}\n\nexport function buildKernelPlaywrightCode(task: BrowserTask): string {\n const plan = JSON.stringify(task);\n return `\nconst plan = ${plan};\nconst outputs = {};\nconst checks = [];\nconst targetHost = new URL(plan.targetUrl).hostname;\nconst allowedHosts = new Set([targetHost, ...(plan.allowedHosts || [])]);\nconst allowedMethods = new Set([\"GET\", \"HEAD\", \"OPTIONS\"]);\n\nconst assertUrl = (value) => {\n const u = new URL(value);\n if (![\"http:\", \"https:\"].includes(u.protocol)) throw new Error(\"blocked protocol\");\n if (!allowedHosts.has(u.hostname)) throw new Error(\"blocked host: \" + u.hostname);\n};\n\nawait page.route(\"**/*\", async (route) => {\n const req = route.request();\n try {\n if (req.isNavigationRequest() && req.frame() === page.mainFrame()) assertUrl(req.url());\n if (plan.risk === \"read_only\" && !allowedMethods.has(req.method().toUpperCase())) return route.abort(\"blockedbyclient\");\n return route.continue();\n } catch {\n return route.abort(\"blockedbyclient\");\n }\n});\n\npage.on(\"popup\", async (popup) => { try { await popup.close(); } catch {} });\nassertUrl(plan.targetUrl);\nawait page.goto(plan.targetUrl, { waitUntil: \"domcontentloaded\" });\nassertUrl(page.url());\n\nfor (const step of plan.steps) {\n switch (step.action) {\n case \"goto\": {\n const url = step.url || plan.targetUrl;\n assertUrl(url);\n await page.goto(url, { waitUntil: \"domcontentloaded\" });\n break;\n }\n case \"wait_for\":\n await page.locator(step.selector).waitFor({ state: \"visible\", timeout: step.timeoutMs || 10000 });\n break;\n case \"click\":\n if (step.waitForNavigation) {\n await Promise.all([\n page.waitForLoadState(\"domcontentloaded\"),\n page.locator(step.selector).click(),\n ]);\n } else await page.locator(step.selector).click();\n break;\n case \"fill\":\n await page.locator(step.selector).fill(step.text);\n break;\n case \"type\":\n await page.locator(step.selector).pressSequentially(step.text, { delay: step.delayMs || 0 });\n break;\n case \"select\":\n await page.locator(step.selector).selectOption(step.value);\n break;\n case \"extract_text\":\n outputs[step.key] = await page.locator(step.selector).innerText();\n break;\n case \"extract_attribute\":\n outputs[step.key] = await page.locator(step.selector).getAttribute(step.attribute);\n break;\n case \"expect_text\": {\n const body = await page.locator(\"body\").innerText();\n checks.push({ type: \"text\", expected: step.text, ok: body.includes(step.text) });\n break;\n }\n case \"expect_url\": {\n const actual = page.url();\n checks.push({ type: \"url\", expected: step.contains, actual, ok: actual.includes(step.contains) });\n break;\n }\n }\n assertUrl(page.url());\n}\n\nreturn {\n finalUrl: page.url(),\n outputs,\n checks,\n verified: checks.length > 0 && checks.every((x) => x.ok),\n};\n`;\n}\n\nexport function resolveSecrets(task: BrowserTask): BrowserTask {\n const steps = task.steps.map((step) => {\n if (step.action !== \"fill_secret\") return step;\n const value = Deno.env.get(step.envVar);\n if (value === undefined) throw new Error(`secret env var missing: ${step.envVar}`);\n return { action: \"fill\" as const, selector: step.selector, text: value };\n });\n return { ...task, steps };\n}\n",[],[214,343],"87219d4b-60bf-4c29-bf8f-adadda54eb87","cost.ts","3b1f1e28-aa08-11f1-8943-1607ee4eb77e",48,["D",1788708775292],"import type { BrowserReceipt } from \"./types.ts\";\n\nexport function estimateProviderUnits(receipt: BrowserReceipt): number | null {\n if (receipt.status === \"BLOCKED\") return null;\n if (receipt.provider !== \"browserless\") return null;\n if (receipt.durationMs == null) return null;\n return Math.max(1, Math.ceil(receipt.durationMs / 30_000));\n}\n\nexport const COST_NOTES = {\n browserless: \"Estimated units cover browser-time only. Actual cost can be higher with CAPTCHA solving or built-in proxies.\",\n kernel: \"No local unit estimate: Kernel bills usage by GB-second; actual provider usage must be observed from the account.\",\n} as const;\n",[],[214,351],["D",1788707365920],[240,241,242,243,244,245],[214],"a19841c4-9d53-4970-8720-6dfbe80abb18","TASK_SCHEMA.md","6433d9f2-aa08-11f1-bb32-1607ee4eb77e",53,["D",1788708844254],"# Browser Task Schema — V0.5\n\nTasks are inserted into the val-scoped SQLite database by the authenticated ChatGPT Val Town plugin. There is no public enqueue endpoint.\n\n## Required fields\n\n- `runId`: unique stable id, <=128 chars.\n- `targetUrl`: http/https URL.\n- `risk`: `read_only`, `reversible_write`, or `consequential`.\n- `purpose`: human-readable reason for the run.\n- `steps`: 1..30 DSL actions.\n\n## Optional fields\n\n- `approved`: must be `true` for `reversible_write`, `consequential`, and any `fill_secret` action.\n- `allowedHosts`: extra main-navigation hosts, explicit only.\n- `preferredProvider`: `kernel` or `browserless`.\n- `evidenceRetention`: `minimal` (default) or `full`.\n\n## DSL actions\n\n- `goto`\n- `wait_for`\n- `click`\n- `fill`\n- `fill_secret`\n- `type`\n- `select`\n- `extract_text`\n- `extract_attribute` (attribute `value` is blocked)\n- `expect_text`\n- `expect_url`\n\n## Secret rule\n\nNever put a password, cookie, API token, or OTP secret in `task_json`.\nUse `fill_secret` with an environment-variable name. The value is resolved in execution memory only after approval.\n\n## Evidence retention\n\n`minimal` persists status, URL, checks, errors, duration and fallback metadata but omits extracted outputs and provider session ids.\n`full` persists the full receipt and should be used only when the extracted data is intentionally safe to retain.\n\n## Retry policy\n\n- Only `read_only` + provider `FAIL` is retryable.\n- Maximum 2 task attempts.\n- Retry delay: 10 seconds.\n- `BLOCKED`, `PARTIAL`, writes and consequential tasks are never automatically retried.\n- No cron/automatic runner is enabled, so a retry becomes eligible but does not consume browser credits until ChatGPT explicitly runs `runner.ts` again.\n\n## Provider fallback\n\n- Kernel is primary.\n- Browserless is fallback only for `read_only` tasks.\n- No cross-provider retry for writes.\n\n## PASS rule\n\nA successful browser call without at least one positive expectation remains `PARTIAL`.\n`PASS` requires all explicit expectations to succeed.\n",[],[219,362],"f9a4c86f-6f29-4e19-a3f9-4343513964b6","SMOKE_TASK.json","5d015344-aa08-11f1-a288-1607ee4eb77e",52,["D",1788708832174],"{\n \"state\": \"DRAFT_ONLY_DO_NOT_AUTO_ENQUEUE\",\n \"task\": {\n \"runId\": \"smoke-kernel-example-com\",\n \"targetUrl\": \"https://example.com\",\n \"risk\": \"read_only\",\n \"purpose\": \"First live cloud-browser smoke test after provider credential activation\",\n \"preferredProvider\": \"kernel\",\n \"evidenceRetention\": \"minimal\",\n \"steps\": [\n {\"action\": \"extract_text\", \"selector\": \"h1\", \"key\": \"heading\"},\n {\"action\": \"expect_text\", \"text\": \"Example Domain\"},\n {\"action\": \"expect_url\", \"contains\": \"example.com\"}\n ]\n },\n \"promotionCriteria\": [\n \"provider credential key exists in Val Town\",\n \"runner returns PASS\",\n \"heading equals Example Domain\",\n \"all expectations pass\",\n \"attempt receipt is persisted\",\n \"provider usage is observed when available\"\n ]\n}\n",[],[219,370],"552929ae-79cc-46d2-a38c-653e6426f7bc","PROVIDER_CENSUS.md","5865efa4-aa06-11f1-b715-1607ee4eb77e",29,["D",1788707965447],"# Browser Provider Census — V0.4.1\n\nResearch snapshot: 2026-09-06.\n\nThe ranking optimizes for a ChatGPT-mobile control plane with no user PC, recurring free allowance, deterministic browser control, provider isolation, and minimal browser-open time.\n\n## 1. Kernel — CHAMPION\n\nState in this val: `ACCOUNT_KEY_REQUIRED`.\n\nWhy first:\n- Free plan with recurring monthly credits.\n- Multiple concurrent browsers.\n- Headless browser available.\n- Stealth/CAPTCHA/proxy features.\n- Managed auth capability.\n- Uploads/downloads and replay/live-view capabilities.\n- Official Val Town browser-automation guide and starter val.\n- Current Kernel SDK supports server-side Playwright execution in the browser VM, reducing Val Town-side browser-library overhead.\n\nAdapter: `providers/kernel.ts`.\n\nRequired env var: `KERNEL_API_KEY`.\n\n## 2. Browserless — RECURRING-FREE FALLBACK\n\nState in this val: `ACCOUNT_TOKEN_REQUIRED`.\n\nWhy second:\n- Recurring Free plan.\n- No card advertised for Free.\n- 1,000 browser units/month.\n- Two concurrent browsers.\n- Short bounded sessions are a good fit for deterministic plans.\n- Function API can execute Puppeteer code over one HTTPS request.\n\nAdapter: `providers/browserless.ts`.\n\nRequired env var: `BROWSERLESS_TOKEN`.\nOptional: `BROWSERLESS_BASE_URL`.\n\n## 3. Browserbase — RESEARCHED FALLBACK\n\nState: not implemented.\n\nCurrent Free allowance researched:\n- recurring Free plan;\n- three concurrent browsers;\n- one browser-hour/month;\n- Free CAPTCHA support is weaker than higher-priority choices.\n\nOfficial Val Town integration guide exists.\n\n## 4. Steel — ONE-TIME-CREDIT FALLBACK\n\nState: not implemented.\n\nUseful properties:\n- open-source browser infrastructure;\n- Playwright/Puppeteer support;\n- official Val Town guide;\n- substantial starter credits.\n\nReason for lower rank: starter credits are not the preferred recurring-free steady-state budget and some advanced anti-bot/proxy capability can require paid-balance verification.\n\n## Routing rules\n\n1. Honor an explicit `preferredProvider` when the requested provider is configured.\n2. Otherwise use Kernel first.\n3. For `read_only` only, if Kernel fails and Browserless is configured, fallback to Browserless.\n4. Never automatically retry `reversible_write` or `consequential` work on another provider. A failed response is not proof that the first provider caused no side effect.\n5. Keep browser sessions as short as possible; reasoning occurs in ChatGPT before opening a browser.\n\n## Promotion rule\n\nNo provider becomes `OPERATIONAL` from pricing/docs alone. Promotion requires:\n- credential authentication;\n- real browser creation;\n- a read-only smoke task;\n- explicit expectation PASS;\n- receipt persistence;\n- provider usage/cost observation if available.\n",[],[219,378],"507f0353-8d0d-4386-b5f6-b2bdfa6863b9",["D",1788709100805],[],[219,33],"576913e9-063e-4587-9ab3-e3a47f4d9ef5","ACTIVATION_RUNBOOK.md","60d7bb54-aa06-11f1-91f3-1607ee4eb77e",30,["D",1788707979591],"# Activation Runbook — V0.4.1\n\n## Preferred activation: Kernel\n\n1. Create or sign in to a Kernel Free account.\n2. Create an API key in the Kernel dashboard.\n3. Store it only as Val Town env var `KERNEL_API_KEY`.\n4. Do not paste the key into chat, README, SQLite, task JSON, logs, or source code.\n5. Re-run `selftest.ts` and verify Kernel changes from `ACCOUNT_KEY_REQUIRED` to `READY`.\n6. Enqueue a read-only smoke task for `https://example.com`:\n - extract `h1`;\n - expect `Example Domain`;\n - expect URL contains `example.com`.\n7. Run `runner.ts`.\n8. Query the persisted receipt.\n9. Promote Kernel to OPERATIONAL only if receipt status is PASS and the output matches the expected page state.\n10. Observe provider usage/credit consumption if the account API/dashboard exposes it.\n\nVal Town env editor:\nhttps://www.val.town/x/cleitoncosta/chat-native-maestro/environment-variables?key=KERNEL_API_KEY\n\nKernel API key dashboard:\nhttps://dashboard.onkernel.com/api-keys\n\n## Secondary activation: Browserless\n\nUse only if Kernel onboarding is blocked or as fallback testing.\n\n1. Create/sign in to Browserless Free.\n2. Obtain the account token.\n3. Store it as `BROWSERLESS_TOKEN` in Val Town.\n4. If the account gives a regional base endpoint different from the default, store it as `BROWSERLESS_BASE_URL`.\n5. Re-run `selftest.ts` and health GET.\n6. Run the same read-only smoke task with `preferredProvider: \"browserless\"`.\n7. Persist and inspect receipt.\n8. Observe actual unit consumption.\n\nVal Town env editor:\nhttps://www.val.town/x/cleitoncosta/chat-native-maestro/environment-variables?key=BROWSERLESS_TOKEN\n\n## Browser-login secrets\n\nFor credentials used inside a target site, create dedicated Val Town env vars, for example:\n- `PORTAL_USERNAME`\n- `PORTAL_PASSWORD`\n\nTask JSON uses only references:\n\n```json\n{\n \"action\": \"fill_secret\",\n \"selector\": \"#password\",\n \"envVar\": \"PORTAL_PASSWORD\"\n}\n```\n\nA task containing `fill_secret` requires explicit approval before execution.\n\n## Never do\n\n- Never embed API keys in public source code.\n- Never store passwords in SQLite task JSON.\n- Never retry a failed write task automatically on another browser provider.\n- Never treat provider HTTP/SDK success as proof that the requested page state was achieved.\n- Never downgrade an explicit expectation failure to PASS.\n",[],[219,390],["D",1788707374127],[234,235,236,237,238],[219],["D",1788707065045],["D",1789488693443],{"_100":99,"_108":104},{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"ctx",{"_82":-5,"_128":438,"_439":440,"_441":442,"_443":25,"_444":25,"_445":25,"_446":59,"_447":-5,"_448":-7,"_449":-7,"_450":63,"_451":25,"_452":25,"_453":-5,"_454":25,"_455":25,"_456":25,"_457":-5},"ENV",{"_409":410,"_411":412,"_413":90,"_414":415,"_416":417,"_418":419,"_420":421,"_422":423,"_424":425,"_426":427,"_428":429,"_430":431,"_432":433,"_434":435,"_436":437},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v61