[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_168":169,"_170":171},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_104":85,"_27":105,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":25,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",15,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","intentic_adapter_test.ts","latestPath","fileId","69de69be-adf8-11f1-ae69-1607ee4eb77e","name","fileType","script","content","const out:any={tests:[],failures:[]};\nfunction ok(name:string,cond:boolean,detail:any={}){out.tests.push({name,ok:!!cond,detail});if(!cond)out.failures.push(name);}\nlet mod:any;\ntry{mod=await import(\"./intentic_adapter.ts\");}catch(error){throw new Error(\"RED_INTENTIC_ADAPTER_MISSING:\"+String(error));}\n\nconst good={sandboxUrl:\"https://sandbox-a1b2c3d4e5f6.intentic.dev\",controlToken:\"ict_test_secret\",monthlyAllowanceMinutes:2400,usedMinutes:100,estimatedWorkMinutes:15};\nconst admitted=mod.admitIntenticBatch(good);\nok(\"known_budget_with_tail_admitted\",admitted.ok===true && admitted.reservedMinutes===35,admitted);\nconst near=mod.admitIntenticBatch({...good,usedMinutes:2380});\nok(\"twenty_minute_idle_tail_reserved\",near.ok===false && near.reason===\"INSUFFICIENT_HOSTED_MINUTES\",near);\nconst unknown=mod.admitIntenticBatch({...good,usedMinutes:null});\nok(\"unknown_usage_fails_closed\",unknown.ok===false && unknown.reason===\"USAGE_UNKNOWN\",unknown);\nconst badUrl=mod.normalizeIntenticEndpoint(\"http://sandbox-a1b2c3.intentic.dev\");\nok(\"non_https_endpoint_rejected\",badUrl.ok===false,badUrl);\nconst endpoint=mod.normalizeIntenticEndpoint(good.sandboxUrl);\nok(\"https_endpoint_normalized\",endpoint.ok===true && endpoint.url===good.sandboxUrl,endpoint);\nconst binding=mod.buildIntenticRunBinding({taskId:\"TASK-123\",leaseOwner:\"brain-worker-7\",leaseGeneration:42});\nok(\"run_binding_is_deterministic\",binding.conversationId===\"brain-task-task-123-g42\",binding);\nconst req=mod.buildIntenticAgentRequest({sandboxUrl:good.sandboxUrl,controlToken:good.controlToken,prompt:\"Return only CANARY_OK\",taskId:\"TASK-123\",leaseOwner:\"brain-worker-7\",leaseGeneration:42});\nok(\"agent_request_uses_drive_header\",req.headers[\"x-intentic-control\"]===good.controlToken,req);\nok(\"agent_request_isolated\",JSON.parse(req.body).isolated===true,JSON.parse(req.body));\nok(\"agent_request_pins_codex\",JSON.parse(req.body).agent===\"codex\",JSON.parse(req.body));\nok(\"agent_request_disables_autoland\",JSON.parse(req.body).autoLand===false,JSON.parse(req.body));\nok(\"agent_request_never_lands\",!JSON.stringify(req).includes(\"/land\"),req);\nok(\"token_absent_from_log_metadata\",!JSON.stringify(req.log).includes(good.controlToken),req.log);\nok(\"valid_run_ack\",mod.parseIntenticRunAck({run:\"run_8c2f41d9\"}).ok===true);\nok(\"malformed_run_ack_rejected\",mod.parseIntenticRunAck({run:\"../../oops\"}).ok===false);\n\n// Network-path falsification: fake fetch is unavoidable because this candidate must remain secret-free and offline.\nconst calls:any[]=[];\nconst goodFetch=async(url:any,init:any)=>{calls.push({url:String(url),init});return new Response(JSON.stringify({run:\"run_live123\"}),{status:202,headers:{\"content-type\":\"application/json\"}})};\nconst dispatched=await mod.dispatchIntenticAgent({sandboxUrl:good.sandboxUrl,controlToken:good.controlToken,prompt:\"CANARY\",taskId:\"TASK-123\",leaseOwner:\"brain-worker-7\",leaseGeneration:42},goodFetch);\nok(\"dispatch_accepts_2xx_valid_ack\",dispatched.ok===true && dispatched.run===\"run_live123\",dispatched);\nok(\"dispatch_called_exact_agent_route\",calls.length===1 && calls[0].url.endsWith(\"/agent\"),calls);\nconst rejected=await mod.dispatchIntenticAgent({sandboxUrl:good.sandboxUrl,controlToken:good.controlToken,prompt:\"CANARY\",taskId:\"TASK-123\",leaseOwner:\"brain-worker-7\",leaseGeneration:42},async()=>new Response(\"quota\",{status:402}));\nok(\"non_2xx_fails_closed\",rejected.ok===false && rejected.reason===\"HTTP_402\",rejected);\nconst malformed=await mod.dispatchIntenticAgent({sandboxUrl:good.sandboxUrl,controlToken:good.controlToken,prompt:\"CANARY\",taskId:\"TASK-123\",leaseOwner:\"brain-worker-7\",leaseGeneration:42},async()=>new Response(JSON.stringify({run:\"../../oops\"}),{status:200,headers:{\"content-type\":\"application/json\"}}));\nok(\"malformed_ack_fails_closed\",malformed.ok===false && malformed.reason===\"RUN_ACK_INVALID\",malformed);\nconst network=await mod.dispatchIntenticAgent({sandboxUrl:good.sandboxUrl,controlToken:good.controlToken,prompt:\"CANARY\",taskId:\"TASK-123\",leaseOwner:\"brain-worker-7\",leaseGeneration:42},async()=>{throw new Error(\"offline\")});\nok(\"network_error_fails_closed\",network.ok===false && network.reason===\"NETWORK_ERROR\",network);\n\nconst completeSse=[\n `data: ${JSON.stringify({kind:\"attached\",run:\"run_live123\",startedAt:1,seq:0,rows:[]})}`,\n `data: ${JSON.stringify({kind:\"end\"})}`,\n ``\n].join(\"\\n\\n\");\nconst attached=mod.parseIntenticAttachStream(completeSse,\"run_live123\");\nok(\"attach_requires_matching_run_and_end\",attached.ok===true && attached.ended===true,attached);\nconst dropped=mod.parseIntenticAttachStream(completeSse.replace(`data: ${JSON.stringify({kind:\"end\"})}\\n\\n`,\"\"),\"run_live123\");\nok(\"stream_close_without_end_not_completion\",dropped.ok===false && dropped.reason===\"STREAM_DROPPED_BEFORE_END\",dropped);\nconst wrongRun=mod.parseIntenticAttachStream(completeSse,\"run_other999\");\nok(\"attach_wrong_run_rejected\",wrongRun.ok===false && wrongRun.reason===\"RUN_BINDING_MISMATCH\",wrongRun);\nconst errored=[\n `data: ${JSON.stringify({kind:\"attached\",run:\"run_live123\",startedAt:1,seq:0,rows:[]})}`,\n `data: ${JSON.stringify({kind:\"fact\",seq:1,fact:{kind:\"error\",message:\"provider failed\",code:\"provider-outage\"}})}`,\n `data: ${JSON.stringify({kind:\"end\"})}`,\n ``\n].join(\"\\n\\n\");\nconst agentError=mod.parseIntenticAttachStream(errored,\"run_live123\");\nok(\"agent_error_frame_fails_closed\",agentError.ok===false && agentError.reason===\"AGENT_ERROR\",agentError);\n\nconst attachFetch=async(url:any,init:any)=>{\n ok(\"attach_posts_exact_route\",String(url).endsWith(\"/agent/attach\"),{url:String(url)});\n const body=JSON.parse(String(init.body));\n ok(\"attach_binds_conversation_and_run\",body.conversationId===\"brain-task-task-123-g42\"&&body.run===\"run_live123\",body);\n return new Response(completeSse,{status:200,headers:{\"content-type\":\"text/event-stream\"}});\n};\nconst followed=await mod.attachIntenticRun({sandboxUrl:good.sandboxUrl,controlToken:good.controlToken,conversationId:\"brain-task-task-123-g42\",run:\"run_live123\"},attachFetch);\nok(\"attach_fetch_completion_verified\",followed.ok===true&&followed.ended===true,followed);\nconst attachHttp=await mod.attachIntenticRun({sandboxUrl:good.sandboxUrl,controlToken:good.controlToken,conversationId:\"brain-task-task-123-g42\",run:\"run_live123\"},async()=>new Response(\"no\",{status:403}));\nok(\"attach_http_failure_closed\",attachHttp.ok===false&&attachHttp.reason===\"ATTACH_HTTP_403\",attachHttp);\nconst sessionFetch=async(url:any,init:any)=>{\n ok(\"session_reads_encoded_conversation\",String(url).includes(\"/sessions/brain-task-task-123-g42\"),{url:String(url)});\n ok(\"session_is_get\",!init||init.method===undefined||init.method===\"GET\",init??{});\n return new Response(JSON.stringify({messages:[{role:\"assistant\",text:\"CANARY_OK\"}]}),{status:200,headers:{\"content-type\":\"application/json\"}});\n};\nconst transcript=await mod.fetchIntenticTranscript({sandboxUrl:good.sandboxUrl,controlToken:good.controlToken,conversationId:\"brain-task-task-123-g42\"},sessionFetch);\nok(\"final_transcript_returned\",transcript.ok===true&&transcript.messages?.[0]?.text===\"CANARY_OK\",transcript);\nconst malformedTranscript=await mod.fetchIntenticTranscript({sandboxUrl:good.sandboxUrl,controlToken:good.controlToken,conversationId:\"brain-task-task-123-g42\"},async()=>new Response(JSON.stringify({messages:\"bad\"}),{status:200}));\nok(\"malformed_transcript_rejected\",malformedTranscript.ok===false&&malformedTranscript.reason===\"TRANSCRIPT_INVALID\",malformedTranscript);\n\nout.summary={passed:out.tests.filter((x:any)=>x.ok).length,failed:out.failures.length,total:out.tests.length};\nconsole.log(JSON.stringify(out,null,2));\nif(out.failures.length)throw new Error(\"INTENTIC_ADAPTER_TEST_FAILURE:\"+out.failures.join(\",\"));\n","const out:any={tests:[],failures:[]};\nfunction ok(name:string,cond:boolean,detail:any={}){out.tests.push({name,ok:!!cond,detail});if(!cond)out.failures.push(name);}\nasync function rejects(name:string,fn:()=>Promise,needle:string){try{await fn();ok(name,false,{reason:\"did not reject\"});}catch(error){const text=String(error instanceof Error?error.message:error);ok(name,text.includes(needle),{text});}}\nconst mod:any=await import(\"./intentic_adapter.ts\");\nconst token=\"ict_\"+\"A\".repeat(43);\nconst base={sandboxUrl:\"https://sandbox-a1b2c3d4e5f6.intentic.dev\",token,task:\"Use only the permitted read-only tools to inspect the workspace and return CANARY_OK.\",conversationId:\"brain-canary-20260911-a1\",timeoutMs:10_000,pollMs:250};\n\nconst admitted=mod.admitIntenticBatch({sandboxUrl:base.sandboxUrl,token,monthlyAllowanceMinutes:2400,usedMinutes:100,estimatedWorkMinutes:15});\nok(\"batch_reserves_20m_idle_tail\",admitted.ok===true&&admitted.reservedMinutes===35,admitted);\nconst near=mod.admitIntenticBatch({sandboxUrl:base.sandboxUrl,token,monthlyAllowanceMinutes:2400,usedMinutes:2380,estimatedWorkMinutes:1});\nok(\"batch_fails_closed_near_ceiling\",near.ok===false&&near.reason===\"INSUFFICIENT_HOSTED_MINUTES\",near);\nconst unknown=mod.admitIntenticBatch({sandboxUrl:base.sandboxUrl,token,monthlyAllowanceMinutes:2400,usedMinutes:null,estimatedWorkMinutes:1});\nok(\"unknown_usage_fails_closed\",unknown.ok===false&&unknown.reason===\"USAGE_UNKNOWN\",unknown);\nok(\"non_https_rejected\",mod.normalizeIntenticEndpoint(\"http://x.intentic.dev\").ok===false);\nok(\"foreign_host_rejected\",mod.normalizeIntenticEndpoint(\"https://intentic.dev.evil.example\").ok===false);\nok(\"pathful_host_rejected\",mod.normalizeIntenticEndpoint(\"https://x.intentic.dev/foo\").ok===false);\n\nlet posted:any=null;\nconst happyFetch=async(url:any,init:any={})=>{\n const u=String(url);\n if(u.endsWith(\"/agent\")){\n posted=JSON.parse(String(init.body));\n return new Response(JSON.stringify({run:\"run_live123\"}),{status:200});\n }\n if(u.includes(\"/sessions?query=\")){\n return new Response(JSON.stringify({sessions:[{id:\"provider-session-77\",title:base.conversationId,updatedAt:Date.now()}]}),{status:200});\n }\n if(u.endsWith(\"/sessions/provider-session-77\")){\n return new Response(JSON.stringify({messages:[\n {role:\"user\",text:posted.prompt},\n {role:\"assistant\",text:\"CANARY_OK\",usage:{costUsd:0,durationMs:12,inputTokens:10,outputTokens:2}}\n ]}),{status:200});\n }\n return new Response(\"not found\",{status:404});\n};\nconst receipt=await mod.runIntenticCanary(base,happyFetch);\nok(\"happy_path_zero_cost_verified\",receipt.status===\"VERIFIED_ZERO_MODEL_COST_COMPLETE\"&&receipt.costEvidence===\"OBSERVED_ZERO\",receipt);\nok(\"provider_session_id_not_assumed_conversation_id\",receipt.sessionId===\"provider-session-77\",receipt);\nok(\"free_gateway_model_pinned\",posted.agent===\"endpoint/kilo-free\"&&posted.model===\"kilo-auto/free\"&&posted.harness===\"claude-code\",posted);\nok(\"isolated_unattended_no_autoland\",posted.isolated===true&&posted.unattended===true&&posted.autoLand===false,posted);\nok(\"default_tools_are_read_only\",JSON.stringify(posted.allowedTools)===JSON.stringify([\"Glob\",\"Read\",\"Grep\"]),posted.allowedTools);\nok(\"request_contains_source_marker\",String(posted.prompt).includes(\"BRAIN_CANARY_RECEIPT_ID=\"),posted.prompt);\nok(\"token_never_enters_receipt\",!JSON.stringify(receipt).includes(token),receipt);\nok(\"receipt_hashes_present\",/^[0-9a-f]{64}$/.test(receipt.requestSha256)&&/^[0-9a-f]{64}$/.test(receipt.transcriptSha256),receipt);\n\nawait rejects(\"paid_model_refused_before_network\",()=>mod.runIntenticCanary({...base,model:\"gpt-6\"},async()=>{throw new Error(\"fetch should not run\")}),\"NONFREE_MODEL_REFUSED\");\nawait rejects(\"malformed_token_refused\",()=>mod.runIntenticCanary({...base,token:\"ict_short\"},happyFetch),\"CONTROL_TOKEN_INVALID\");\nawait rejects(\"malformed_run_ack_refused\",()=>mod.runIntenticCanary(base,async(url:any,init:any={})=>String(url).endsWith(\"/agent\")?new Response(JSON.stringify({run:\"../../oops\"}),{status:200}):happyFetch(url,init)),\"RUN_ACK_INVALID\");\n\nconst positiveCostFetch=async(url:any,init:any={})=>{\n const u=String(url);\n if(u.endsWith(\"/agent\")){posted=JSON.parse(String(init.body));return new Response(JSON.stringify({run:\"run_cost123\"}),{status:200});}\n if(u.includes(\"/sessions?query=\"))return new Response(JSON.stringify({sessions:[{id:\"s-cost\",title:base.conversationId,updatedAt:1}]}),{status:200});\n return new Response(JSON.stringify({messages:[{role:\"user\",text:posted.prompt},{role:\"assistant\",text:\"done\",usage:{costUsd:0.01}}]}),{status:200});\n};\nawait rejects(\"positive_reported_cost_rejected\",()=>mod.runIntenticCanary(base,positiveCostFetch),\"NONZERO_MODEL_COST\");\n\nconst nullCostFetch=async(url:any,init:any={})=>{\n const u=String(url);\n if(u.endsWith(\"/agent\")){posted=JSON.parse(String(init.body));return new Response(JSON.stringify({run:\"run_null123\"}),{status:200});}\n if(u.includes(\"/sessions?query=\"))return new Response(JSON.stringify({sessions:[{id:\"s-null\",title:base.conversationId,updatedAt:1}]}),{status:200});\n return new Response(JSON.stringify({messages:[{role:\"user\",text:posted.prompt},{role:\"assistant\",text:\"done\",usage:{durationMs:1}}]}),{status:200});\n};\nconst nullReceipt=await mod.runIntenticCanary(base,nullCostFetch);\nok(\"unobserved_cost_not_misreported_as_verified_zero\",nullReceipt.status===\"COMPLETE_COST_UNOBSERVED\"&&nullReceipt.costEvidence===\"UNOBSERVED\",nullReceipt);\n\nconst ambiguousFetch=async(url:any,init:any={})=>{\n const u=String(url);\n if(u.endsWith(\"/agent\")){posted=JSON.parse(String(init.body));return new Response(JSON.stringify({run:\"run_amb123\"}),{status:200});}\n return new Response(JSON.stringify({sessions:[{id:\"a\",title:base.conversationId,updatedAt:1},{id:\"b\",title:base.conversationId,updatedAt:2}]}),{status:200});\n};\nawait rejects(\"ambiguous_session_rejected\",()=>mod.runIntenticCanary(base,ambiguousFetch),\"AMBIGUOUS_SESSION\");\n\nconst pendingFetch=async(url:any,init:any={})=>{\n const u=String(url);\n if(u.endsWith(\"/agent\")){posted=JSON.parse(String(init.body));return new Response(JSON.stringify({run:\"run_pending123\"}),{status:200});}\n if(u.includes(\"/sessions?query=\"))return new Response(JSON.stringify({sessions:[{id:\"s-pending\",title:base.conversationId,updatedAt:1}]}),{status:200});\n return new Response(JSON.stringify({messages:[{role:\"user\",text:posted.prompt},{role:\"assistant\",text:\"done\",usage:{costUsd:0}},{role:\"assistant\",text:\"approve?\",permission:{status:\"pending\"}}]}),{status:200});\n};\nawait rejects(\"pending_human_decision_rejected\",()=>mod.runIntenticCanary(base,pendingFetch),\"PENDING_DECISION\");\n\nout.summary={passed:out.tests.filter((x:any)=>x.ok).length,failed:out.failures.length,total:out.tests.length};\nconsole.log(JSON.stringify(out,null,2));\nif(out.failures.length)throw new Error(\"INTENTIC_ADAPTER_TEST_FAILURE:\"+out.failures.join(\",\"));\n","createdAt",["D",1789148964115],"branchVersion","branchId","2f9d80b1-c9d7-4e62-b389-487800adf356","id","6b91c2a9-2a91-48f6-8933-62209b1e2b13","brain-intentic-canary-v1",["D",1789141786402],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Isolated Intentic transport canary tests","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_103":99},"org",{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",17,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":164,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":165,"_79":166,"_81":167,"_83":25},"tree",[155,156],"files",[155,156],"counts",{"_144":61,"_145":146,"_147":61,"_148":149,"_150":151},"contents",[126,127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":136,"_32":137,"_30":138,"_129":-5,"_41":42,"_40":139,"_130":131,"_38":140,"_13":141,"_33":34,"_35":142,"_24":25,"_134":-5,"_27":143},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":131,"_38":132,"_13":133,"_33":34,"_35":37,"_24":25,"_134":-5,"_27":135},"5f940545-54fc-438b-8fa7-41d62d46c075","parentId","latest",true,["D",1789148964115],9,"label",[28],"6cbb4b04-1446-48ab-adda-0f8632d008c0","intentic_adapter.ts","78becd34-adf8-11f1-b980-1607ee4eb77e",14,["D",1789148941751],4,"// CANDIDATE ONLY. Isolated from canonical Brain production executors.\n// No credentials are stored by this module; the raw Intentic editor token exists only in call memory.\n\nexport const INTENTIC_CANDIDATE_REV = \"intentic-worker-candidate-v1-20260911-r2\";\nexport const KILO_GATEWAY_BASE_URL = \"https://api.kilo.ai/api/gateway\";\nexport const KILO_FREE_MODEL = \"kilo-auto/free\";\nexport const DEFAULT_INTENTIC_PROVIDER = \"endpoint/kilo-free\";\nexport const DEFAULT_SAFE_TOOLS = [\"Glob\", \"Read\", \"Grep\"] as const;\n\nconst CONVERSATION_ID = /^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/u;\nconst INTENTIC_TOKEN = /^ict_[A-Za-z0-9_-]{43}$/u;\nconst PENDING_CARD_FIELDS = [\n \"plan\", \"question\", \"permission\", \"browserHelp\", \"terminalHelp\",\n \"capabilityOffer\", \"paymentOffer\", \"credentialOffer\",\n] as const;\n\ntype FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise;\n\nexport type CostEvidence = \"OBSERVED_ZERO\" | \"UNOBSERVED\";\nexport type CanaryStatus = \"VERIFIED_ZERO_MODEL_COST_COMPLETE\" | \"COMPLETE_COST_UNOBSERVED\";\n\nexport interface IntenticCanaryInput {\n sandboxUrl: string;\n token: string;\n task: string;\n conversationId: string;\n provider?: string;\n model?: string;\n allowedTools?: string[];\n timeoutMs?: number;\n pollMs?: number;\n}\n\nexport interface IntenticCanaryReceipt {\n rev: string;\n status: CanaryStatus;\n costEvidence: CostEvidence;\n sandboxOrigin: string;\n conversationId: string;\n sessionId: string;\n runId: string;\n provider: string;\n model: string;\n requestSha256: string;\n transcriptSha256: string;\n startedAt: string;\n completedAt: string;\n elapsedMs: number;\n reportedDurationMs: number | null;\n reportedCostUsd: number | null;\n assistantText: string;\n}\n\nfunction fail(code: string, detail: string): never {\n throw new Error(`${code}: ${detail}`);\n}\n\nexport function normalizeIntenticEndpoint(raw: string): { ok: true; url: string } | { ok: false; reason: string } {\n try {\n const u = new URL(raw);\n if (u.protocol !== \"https:\") return { ok: false, reason: \"HTTPS_REQUIRED\" };\n if (!u.hostname.endsWith(\".intentic.dev\")) return { ok: false, reason: \"HOST_NOT_INTENTIC\" };\n if (u.username || u.password || u.search || u.hash) return { ok: false, reason: \"ENDPOINT_NOT_CANONICAL\" };\n if (u.pathname !== \"/\" && u.pathname !== \"\") return { ok: false, reason: \"ENDPOINT_PATH_FORBIDDEN\" };\n return { ok: true, url: u.origin };\n } catch {\n return { ok: false, reason: \"INVALID_URL\" };\n }\n}\n\nexport function admitIntenticBatch(input: {\n sandboxUrl: string;\n token: string;\n monthlyAllowanceMinutes: number;\n usedMinutes: number | null;\n estimatedWorkMinutes: number;\n idleTailMinutes?: number;\n}): any {\n const endpoint = normalizeIntenticEndpoint(input.sandboxUrl);\n if (!endpoint.ok) return { ok: false, reason: endpoint.reason };\n if (!INTENTIC_TOKEN.test(input.token)) return { ok: false, reason: \"CONTROL_TOKEN_INVALID\" };\n if (!Number.isFinite(input.monthlyAllowanceMinutes) || input.monthlyAllowanceMinutes <= 0) return { ok: false, reason: \"ALLOWANCE_INVALID\" };\n if (input.usedMinutes === null || !Number.isFinite(input.usedMinutes)) return { ok: false, reason: \"USAGE_UNKNOWN\" };\n if (input.usedMinutes < 0 || input.usedMinutes > input.monthlyAllowanceMinutes) return { ok: false, reason: \"USAGE_INVALID\" };\n if (!Number.isFinite(input.estimatedWorkMinutes) || input.estimatedWorkMinutes <= 0) return { ok: false, reason: \"WORK_ESTIMATE_INVALID\" };\n const idleTailMinutes = input.idleTailMinutes ?? 20;\n if (!Number.isFinite(idleTailMinutes) || idleTailMinutes < 0) return { ok: false, reason: \"IDLE_TAIL_INVALID\" };\n const reservedMinutes = Math.ceil(input.estimatedWorkMinutes) + Math.ceil(idleTailMinutes);\n const remainingMinutes = input.monthlyAllowanceMinutes - input.usedMinutes;\n if (reservedMinutes > remainingMinutes) return { ok: false, reason: \"INSUFFICIENT_HOSTED_MINUTES\", reservedMinutes, remainingMinutes };\n return { ok: true, reservedMinutes, remainingMinutes, endpoint: endpoint.url };\n}\n\nfunction validate(input: IntenticCanaryInput) {\n const endpoint = normalizeIntenticEndpoint(input.sandboxUrl);\n if (!endpoint.ok) fail(endpoint.reason, input.sandboxUrl);\n if (!INTENTIC_TOKEN.test(input.token)) fail(\"CONTROL_TOKEN_INVALID\", \"expected raw ict_ token shape\");\n if (!CONVERSATION_ID.test(input.conversationId)) fail(\"INVALID_CONVERSATION_ID\", \"does not match Intentic grammar\");\n if (!input.task.trim() || input.task.length > 20_000) fail(\"INVALID_TASK\", \"task must be 1..20000 chars\");\n const provider = input.provider ?? DEFAULT_INTENTIC_PROVIDER;\n if (!/^endpoint\\/[A-Za-z0-9._-]+$/u.test(provider)) fail(\"INVALID_PROVIDER\", \"canary permits endpoint/ only\");\n const model = input.model ?? KILO_FREE_MODEL;\n if (model !== KILO_FREE_MODEL && model !== \"openrouter/free\" && !model.endsWith(\":free\")) fail(\"NONFREE_MODEL_REFUSED\", model);\n const allowedTools = input.allowedTools ?? [...DEFAULT_SAFE_TOOLS];\n if (allowedTools.length === 0 || allowedTools.length > 16 || allowedTools.some((x) => !/^[A-Za-z0-9._:-]{1,64}$/u.test(x))) {\n fail(\"INVALID_TOOL_ALLOWLIST\", \"bounded explicit tool list required\");\n }\n const timeoutMs = input.timeoutMs ?? 8 * 60_000;\n const pollMs = input.pollMs ?? 2_000;\n if (timeoutMs < 10_000 || timeoutMs > 15 * 60_000) fail(\"INVALID_TIMEOUT\", \"10s..15m only\");\n if (pollMs < 250 || pollMs > 10_000) fail(\"INVALID_POLL\", \"250ms..10s only\");\n return { endpoint: endpoint.url, provider, model, allowedTools, timeoutMs, pollMs };\n}\n\nfunction stable(value: unknown): string {\n if (Array.isArray(value)) return `[${value.map(stable).join(\",\")}]`;\n if (value && typeof value === \"object\") {\n return `{${Object.entries(value as Record).sort(([a], [b]) => a.localeCompare(b)).map(([k, v]) => `${JSON.stringify(k)}:${stable(v)}`).join(\",\")}}`;\n }\n return JSON.stringify(value);\n}\n\nasync function sha256(value: unknown): Promise {\n const bytes = new TextEncoder().encode(typeof value === \"string\" ? value : stable(value));\n const digest = await crypto.subtle.digest(\"SHA-256\", bytes);\n return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function getJson(fetcher: FetchLike, url: string, init: RequestInit): Promise {\n const response = await fetcher(url, init);\n const text = await response.text();\n if (!response.ok) fail(\"HTTP_ERROR\", `${response.status} ${url}: ${text.slice(0, 500)}`);\n try { return JSON.parse(text); } catch { fail(\"SHAPE_ERROR\", `non-JSON response from ${url}`); }\n}\n\nfunction hasPendingDecision(row: any): boolean {\n return PENDING_CARD_FIELDS.some((field) => row?.[field]?.status === \"pending\");\n}\n\nfunction terminalAssistant(messages: any[]): any | undefined {\n for (let i = messages.length - 1; i >= 0; i--) {\n const row = messages[i];\n if (row?.role === \"assistant\" && row?.usage && !hasPendingDecision(row)) return row;\n }\n return undefined;\n}\n\nexport async function runIntenticCanary(input: IntenticCanaryInput, fetcher: FetchLike = fetch): Promise {\n const cfg = validate(input);\n const nonce = crypto.randomUUID();\n const marker = `BRAIN_CANARY_RECEIPT_ID=${input.conversationId};NONCE=${nonce}`;\n const prompt = `${marker}\\n\\n${input.task}`;\n const body = {\n prompt,\n title: input.conversationId,\n conversationId: input.conversationId,\n isolated: true,\n unattended: true,\n agent: cfg.provider,\n harness: \"claude-code\",\n model: cfg.model,\n autoLand: false,\n permissionMode: \"acceptEdits\",\n allowedTools: cfg.allowedTools,\n tierHold: true,\n fast: false,\n };\n const requestSha256 = await sha256(body);\n const headers = { \"x-intentic-control\": input.token, \"content-type\": \"application/json\", accept: \"application/json\" };\n const started = Date.now();\n const ack = await getJson(fetcher, `${cfg.endpoint}/agent`, { method: \"POST\", headers, body: JSON.stringify(body) });\n if (typeof ack?.run !== \"string\" || !/^run_[A-Za-z0-9_-]{4,128}$/u.test(ack.run)) fail(\"RUN_ACK_INVALID\", \"POST /agent returned malformed run id\");\n\n const deadline = started + cfg.timeoutMs;\n let sessionId: string | undefined;\n let transcript: any | undefined;\n let terminal: any | undefined;\n while (Date.now() < deadline) {\n const list = await getJson(fetcher, `${cfg.endpoint}/sessions?query=${encodeURIComponent(input.conversationId)}`, { method: \"GET\", headers });\n if (!Array.isArray(list?.sessions)) fail(\"SHAPE_ERROR\", \"GET /sessions missing sessions array\");\n const exact = list.sessions.filter((s: any) => s?.title === input.conversationId && typeof s?.id === \"string\");\n if (exact.length > 1) fail(\"AMBIGUOUS_SESSION\", \"multiple exact-title sessions\");\n if (exact.length === 1) {\n sessionId = exact[0].id;\n transcript = await getJson(fetcher, `${cfg.endpoint}/sessions/${encodeURIComponent(sessionId)}`, { method: \"GET\", headers });\n if (!Array.isArray(transcript?.messages)) fail(\"SHAPE_ERROR\", \"session transcript missing messages\");\n const bound = transcript.messages.some((row: any) => row?.role === \"user\" && typeof row?.text === \"string\" && row.text.includes(marker));\n if (bound) {\n terminal = terminalAssistant(transcript.messages);\n if (terminal) break;\n }\n }\n await new Promise((resolve) => setTimeout(resolve, cfg.pollMs));\n }\n if (!sessionId || !transcript || !terminal) fail(\"CANARY_TIMEOUT\", \"no source-bound terminal transcript before deadline\");\n if (transcript.messages.some(hasPendingDecision)) fail(\"PENDING_DECISION\", \"unresolved human decision in transcript\");\n\n const reportedCostUsd = typeof terminal.usage?.costUsd === \"number\" ? terminal.usage.costUsd : null;\n if (reportedCostUsd !== null && reportedCostUsd > 0) fail(\"NONZERO_MODEL_COST\", `reported ${reportedCostUsd}`);\n const costEvidence: CostEvidence = reportedCostUsd === 0 ? \"OBSERVED_ZERO\" : \"UNOBSERVED\";\n const status: CanaryStatus = costEvidence === \"OBSERVED_ZERO\" ? \"VERIFIED_ZERO_MODEL_COST_COMPLETE\" : \"COMPLETE_COST_UNOBSERVED\";\n const completed = Date.now();\n const assistantText = transcript.messages.filter((row: any) => row?.role === \"assistant\" && typeof row?.text === \"string\").map((row: any) => row.text).join(\"\\n\").trim();\n if (!assistantText) fail(\"EMPTY_RESULT\", \"no assistant text\");\n\n return {\n rev: INTENTIC_CANDIDATE_REV,\n status,\n costEvidence,\n sandboxOrigin: cfg.endpoint,\n conversationId: input.conversationId,\n sessionId,\n runId: ack.run,\n provider: cfg.provider,\n model: cfg.model,\n requestSha256,\n transcriptSha256: await sha256(transcript),\n startedAt: new Date(started).toISOString(),\n completedAt: new Date(completed).toISOString(),\n elapsedMs: completed - started,\n reportedDurationMs: typeof terminal.usage?.durationMs === \"number\" ? terminal.usage.durationMs : null,\n reportedCostUsd,\n assistantText,\n };\n}\n",[137],"pulls","branches",1,"forks","envVars",{"_152":61,"_154":61},"connections",{"_152":61,"_153":61},"count","unfilledCount","emptyCount",{"_43":136,"_32":137,"_30":138,"_129":-5,"_41":42,"_40":139,"_130":131,"_38":161,"_13":141,"_33":34,"_35":142,"_24":25,"_134":-5,"_158":162,"_27":163},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":131,"_38":157,"_13":133,"_33":34,"_35":37,"_24":25,"_134":-5,"_158":159,"_27":160},["D",1789148964115],"children",[],[28],["D",1789148941751],[],[137],["D",1789141786402],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_123":201,"_202":203,"_204":205,"_206":25,"_207":25,"_208":25,"_209":131,"_210":-5,"_211":-7,"_212":-7,"_213":61,"_214":25,"_215":25,"_216":-5,"_217":25,"_218":25,"_219":25,"_220":-5},"ENV",{"_172":173,"_174":175,"_176":85,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v15