[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_229":230,"_231":232},"routes/_app.x.$handle.$name",{"_97":96,"_31":43,"_106":87,"_26":107,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":24,"_121":122,"_123":124,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":24,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":24},"version",12,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","superhero_equivalence_v2r1_live.ts","latestPath","fileId","1ccfe97e-abbc-11f1-ad2d-1607ee4eb77e","name","fileType","script","content","type D=\"forge\"|\"ledger\"; type E={n:number,k:string,d:any};\nconst te=new TextEncoder(),hx=(b:ArrayBuffer)=>[...new Uint8Array(b)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\nasync function H(s:string){return hx(await crypto.subtle.digest(\"SHA-256\",te.encode(s)))}\nfunction rot(s:string,n:number){n%=s.length;return s.slice(n)+s.slice(0,n)}\nfunction fold(s:string){let x=2166136261>>>0;for(const c of te.encode(s)){x^=c;x=Math.imul(x,16777619)>>>0}return x.toString(16).padStart(8,\"0\")}\nclass Env{\n n=0; ev:E[]=[]; acquired=new Set(); failed:string|null=null; finalReceipt:string|null=null; retained=false;\n domain:D; token:string; secret:string; old:string; shift:number; p1:string; p2:string; cur:string; stale:string; a:string; b:string; seal:string; decoy:string; goal:string;\n constructor(x:any){Object.assign(this,x)}\n static async make(domain:D){\n const seed=crypto.randomUUID(),r=await H(\"SEV2-LIVE2|\"+seed+\"|\"+domain),token=r.slice(0,16),secret=r.slice(16,48),old=(await H(\"old|\"+r)).slice(0,32),shift=parseInt(r.slice(48,52),16)%11+1;\n const p1=domain===\"forge\"?rot(secret,shift):rot([...secret].reverse().join(\"\"),shift),p2=fold(domain+\"|\"+p1+\"|\"+secret.slice(0,8));\n return new Env({domain,seed,token,secret,old,shift,p1,p2,cur:\"src-current-\"+token,stale:\"src-archive-\"+token,a:\"skill-alpha-\"+token,b:\"skill-beta-\"+token,seal:\"skill-seal-\"+token,decoy:\"skill-decoy-\"+token,goal:\"Produce the verified \"+domain+\" artifact for runtime nonce \"+token+\" under the current authoritative contract. No decomposition is supplied.\"});\n }\n L(k:string,d:any){this.ev.push({n:++this.n,k,d})}\n tools(){const F=(name:string,description:string,properties:any={},required:string[]=[])=>({type:\"function\",function:{name,description,parameters:{type:\"object\",properties,required,additionalProperties:false}}});return[\n F(\"controller_frame\",\"FIRST action only. Record your own success, requirements, unknowns, limiter, next step.\",{success:{type:\"string\"},requirements:{type:\"array\",items:{type:\"string\"}},unknowns:{type:\"array\",items:{type:\"string\"}},limiter:{type:\"string\"},next:{type:\"string\"}},[\"success\",\"requirements\",\"unknowns\",\"limiter\",\"next\"]),\n F(\"index_sources\",\"List runtime sources with authority and freshness.\"),\n F(\"read_source\",\"Read one exact source.\",{id:{type:\"string\"}},[\"id\"]),\n F(\"discover_skills\",\"Search runtime skill registry.\",{query:{type:\"string\"}},[\"query\"]),\n F(\"acquire_skill\",\"Load a discovered skill before use.\",{id:{type:\"string\"}},[\"id\"]),\n F(\"invoke_skill\",\"Run an acquired skill.\",{id:{type:\"string\"},input:{type:\"string\"}},[\"id\",\"input\"]),\n F(\"verify_partial\",\"Independent check of phase1 or phase2.\",{name:{type:\"string\",enum:[\"phase1\",\"phase2\"]},value:{type:\"string\"}},[\"name\",\"value\"]),\n F(\"finalize\",\"Submit semantic final artifact to hidden oracle.\",{answer:{type:\"string\"},proof:{type:\"string\"}},[\"answer\",\"proof\"]),\n F(\"retain\",\"After verified finalize, preserve reusable cognition and discard task-local context.\",{skill_families:{type:\"array\",items:{type:\"string\"}},source_policy:{type:\"string\"},task_local_context_retained:{type:\"boolean\"},final_receipt:{type:\"string\"}},[\"skill_families\",\"source_policy\",\"task_local_context_retained\",\"final_receipt\"])\n ]}\n call(name:string,x:any){\n if(name===\"controller_frame\"){if(this.ev.some(e=>[\"source_read\",\"skill_acquire\",\"skill_attempt\"].includes(e.k))||!x?.success||!x?.limiter||!x?.next||!x?.requirements?.length||!x?.unknowns?.length)return{ok:false,error:\"BAD_OR_LATE_CONTROLLER\"};this.L(\"controller\",x);return{ok:true}}\n if(name===\"index_sources\"){this.L(\"source_index\",{});return[{id:this.stale,authority:\"ARCHIVE\",fresh:false},{id:this.cur,authority:\"PRIMARY\",fresh:true}]}\n if(name===\"read_source\"){if(x?.id===this.cur){this.L(\"source_read\",{id:x.id,authority:\"PRIMARY\",fresh:true});return{secret:this.secret,rule:\"CURRENT:\"+this.domain+\":\"+this.shift}}if(x?.id===this.stale){this.L(\"source_read\",{id:x.id,authority:\"ARCHIVE\",fresh:false});return{secret:this.old,rule:\"STALE:\"+this.domain+\":\"+((this.shift%11)+1)}}return{ok:false,error:\"UNKNOWN_SOURCE\"}}\n if(name===\"discover_skills\"){this.L(\"skill_discover\",{query:String(x?.query||\"\")});return[{id:this.decoy,family:\"other\",description:\"unrelated renderer\"},{id:this.a,family:\"phase1\",description:\"phase-1 transformer alpha\"},{id:this.b,family:\"phase1\",description:\"phase-1 transformer beta\"},{id:this.seal,family:\"phase2\",description:\"phase-2 seal; consumes successful phase-1 output\"}]}\n if(name===\"acquire_skill\"){const fam=x?.id===this.a||x?.id===this.b?\"phase1\":x?.id===this.seal?\"phase2\":x?.id===this.decoy?\"other\":null;if(!fam)return{ok:false,error:\"UNKNOWN_SKILL\"};this.acquired.add(x.id);this.L(\"skill_acquire\",{id:x.id,family:fam});return{ok:true,id:x.id,family:fam}}\n if(name===\"invoke_skill\"){const id=x?.id,input=String(x?.input??\"\");if(!this.acquired.has(id))return{ok:false,error:\"NOT_ACQUIRED\"};const fam=id===this.a||id===this.b?\"phase1\":id===this.seal?\"phase2\":\"other\";this.L(\"skill_attempt\",{id,family:fam});if(fam===\"phase1\"&&this.failed===null){this.failed=id;this.L(\"skill_error\",{id,family:fam,error:\"INJECTED_RUNTIME_FAILURE\"});return{ok:false,error:\"INJECTED_RUNTIME_FAILURE\",evidence:\"selected phase1 route failed; update state and choose another route\"}}let out;if(fam===\"phase1\"){const base=this.domain===\"forge\"?input:[...input].reverse().join(\"\");out=rot(base,this.shift)}else if(fam===\"phase2\")out=fold(this.domain+\"|\"+input+\"|\"+this.secret.slice(0,8));else out=\"DECOY\";this.L(\"skill_result\",{id,family:fam,hash:fold(out)});return{ok:true,output:out}}\n if(name===\"verify_partial\"){const exp=x?.name===\"phase1\"?this.p1:x?.name===\"phase2\"?this.p2:null,ok=exp!==null&&String(x?.value)===exp,receipt=fold(\"P|\"+x?.name+\"|\"+String(x?.value)+\"|\"+ok);this.L(\"check\",{name:x?.name,ok,receipt});return{ok,receipt}}\n if(name===\"finalize\"){const answer=String(x?.answer??\"\"),verified=answer===this.p2,receipt=verified?fold(\"F|\"+this.domain+\"|\"+answer+\"|\"+this.token):null;this.finalReceipt=receipt;this.L(\"final\",{verified,receipt});return{verified,receipt}}\n if(name===\"retain\"){if(!this.finalReceipt||x?.final_receipt!==this.finalReceipt||x?.task_local_context_retained!==false||!x?.skill_families?.length||!x?.source_policy)return{ok:false,error:\"UNVERIFIED_OR_BAD_RETENTION\"};this.retained=true;this.L(\"retention\",{verified:true,receipt:x.final_receipt});return{ok:true,committed:true}}\n return{ok:false,error:\"UNKNOWN_TOOL\"}\n }\n score(){const e=this.ev,ctrl=e.findIndex(x=>x.k===\"controller\"),first=e.findIndex(x=>[\"source_read\",\"skill_acquire\",\"skill_attempt\"].includes(x.k)),reads=e.filter(x=>x.k===\"source_read\"),acq=e.filter(x=>x.k===\"skill_acquire\"),err=e.find(x=>x.k===\"skill_error\"),att=e.filter(x=>x.k===\"skill_attempt\"),res=e.filter(x=>x.k===\"skill_result\"),checks=e.filter(x=>x.k===\"check\"&&x.d.ok),fin=e.findLast(x=>x.k===\"final\"),ret=e.findLast(x=>x.k===\"retention\"),p1acq=[...new Set(acq.filter(x=>x.d.family===\"phase1\").map(x=>x.d.id))],p1r=res.find(x=>x.d.family===\"phase1\"),p2r=res.find(x=>x.d.family===\"phase2\"),reAtt=err?att.find(x=>x.n>err.n&&x.d.family===\"phase1\"&&x.d.id!==err.d.id):undefined,reRes=reAtt?res.find(x=>x.n>reAtt.n&&x.d.id===reAtt.d.id):undefined;const cells:any={GOAL_COMPILER:ctrl>=0&&(first<0||ctrlx.d.id===this.cur&&x.d.authority===\"PRIMARY\"&&x.d.fresh),JIT_SKILL_ACQUISITION:p1acq.length>=2&&acq.some(x=>x.d.id===this.seal),SKILL_COMPOSITION_AND_CONTROL:!!p1r&&!!p2r&&p1r.n=2,FAILURE_RECOVERY_AND_REPLAN:!!err&&!!reAtt&&!!reRes,TEMPORARY_SPECIALIZATION_WITH_DURABLE_TRUTH:!!ret&&ret.d.receipt===fin?.d.receipt};const reasons=Object.entries(cells).filter(([,v])=>!v).map(([k])=>k+\"_FAIL\");return{pass:reasons.length===0,cells,reasons,event_count:e.length}}\n}\nconst ZERO_OOP_PREFLIGHT={requested_model:\"kilo-auto/free\",billing_basis:\"OFFICIAL_KILO_AUTO_FREE\",kilo_billed_usd:0,credits_required:false,evidence_sha256:\"2bb07b0c3c025af3a5b184a1b1fd9a6ddda1992c725e49313ad328ec2bbd8114\"};\nfunction stageTools(all:any[],env:any){const e=env.ev as any[],any=(k:string,p=(x:any)=>true)=>e.some(x=>x.k===k&&p(x)),allE=(k:string,p=(x:any)=>true)=>e.filter(x=>x.k===k&&p(x)),last=(k:string,p=(x:any)=>true)=>[...e].reverse().find(x=>x.k===k&&p(x));let names:string[];if(!any(\"controller\"))names=[\"controller_frame\"];else if(!any(\"source_index\"))names=[\"index_sources\"];else if(!any(\"source_read\",(x:any)=>x.d?.authority===\"PRIMARY\"&&x.d?.fresh===true))names=[\"read_source\"];else if(!any(\"skill_discover\"))names=[\"discover_skills\"];else{const p1=[...new Set(allE(\"skill_acquire\",(x:any)=>x.d?.family===\"phase1\").map((x:any)=>x.d.id))],p2=any(\"skill_acquire\",(x:any)=>x.d?.family===\"phase2\"),fail=last(\"skill_error\",(x:any)=>x.d?.family===\"phase1\"),r1=last(\"skill_result\",(x:any)=>x.d?.family===\"phase1\"),v1=any(\"check\",(x:any)=>x.d?.name===\"phase1\"&&x.d?.ok===true),r2=last(\"skill_result\",(x:any)=>x.d?.family===\"phase2\"),v2=any(\"check\",(x:any)=>x.d?.name===\"phase2\"&&x.d?.ok===true),fin=last(\"final\",(x:any)=>x.d?.verified===true),ret=last(\"retention\",(x:any)=>x.d?.verified===true);if(!fail&&p1.length===0)names=[\"acquire_skill\"];else if(!fail&&!r1)names=[\"invoke_skill\"];else if(fail&&p1.length<2)names=[\"acquire_skill\"];else if(fail&&(!r1||r1.nok.has(t?.function?.name))}\nfunction zeroOop(usage:any[]){const telemetry=usage.map((x:any,i:number)=>({i,market_cost:x?.usage?.market_cost??null,gateway_cost:x?.usage?.gateway_cost??null}));return{pass:ZERO_OOP_PREFLIGHT.requested_model===\"kilo-auto/free\"&&ZERO_OOP_PREFLIGHT.billing_basis===\"OFFICIAL_KILO_AUTO_FREE\"&&ZERO_OOP_PREFLIGHT.kilo_billed_usd===0&&ZERO_OOP_PREFLIGHT.credits_required===false,billing_authority:\"PINNED_CURRENT_REALITY_PREFLIGHT\",provider_cost_telemetry:telemetry,evidence_sha256:ZERO_OOP_PREFLIGHT.evidence_sha256}}\nasync function turn(messages:any[],tools:any[]){const t=Date.now(),r=await fetch(\"https://api.kilo.ai/api/gateway/chat/completions\",{method:\"POST\",headers:{\"content-type\":\"application/json\"},body:JSON.stringify({model:\"kilo-auto/free\",messages,tools,tool_choice:\"required\",temperature:0,max_tokens:1400})}),tx=await r.text();let j:any;try{j=JSON.parse(tx)}catch{j=null}return{http:r.status,ms:Date.now()-t,j,raw:j?null:tx.slice(0,1000)}}\nasync function run(env:Env,id:string){const sys=\"Act as one goal-to-capability controller. First call controller_frame with your own concise decomposition. Then use only tool evidence. Prefer fresh PRIMARY sources. Discover/acquire runtime skills rather than inventing them. If a selected skill fails, use the failure evidence to choose a different route, not blind retry. Independently verify intermediates, finalize the semantic artifact, and only after verified=true retain reusable cognition using the exact receipt. Stop after retention commits.\";const msgs:any[]=[{role:\"system\",content:sys},{role:\"user\",content:env.goal}],trace:any[]=[],usage:any[]=[];let invalid:string|null=null;for(let i=0;i<14&&!env.retained;i++){const z=await turn(msgs,stageTools(env.tools(),env));usage.push({turn:i,http:z.http,ms:z.ms,resolved_model:z.j?.model,usage:z.j?.usage});if(z.http!==200||!z.j){invalid=\"PROVIDER_OR_GATEWAY_\"+z.http;break}const m=z.j?.choices?.[0]?.message,calls=m?.tool_calls;trace.push({turn:i,content:m?.content??null,calls:calls??[]});if(!Array.isArray(calls)||!calls.length){invalid=\"NO_TOOL_CALL\";break}msgs.push({role:\"assistant\",content:m?.content??null,tool_calls:calls});for(const c of calls){let a:any;try{a=JSON.parse(c.function.arguments)}catch{invalid=\"MALFORMED_TOOL_JSON\";break}const out=env.call(c.function.name,a);trace.push({turn:i,tool:c.function.name,args:a,result:out});msgs.push({role:\"tool\",tool_call_id:c.id,name:c.function.name,content:JSON.stringify(out)})}if(invalid)break}return{domain:env.domain,seed:(env as any).seed,token:env.token,invalid,retained:env.retained,score:env.score(),usage,total_ms:usage.reduce((a,x)=>a+x.ms,0),zero_out_of_pocket:zeroOop(usage),trace,events:env.ev}}\nconst id=\"sev2-live2-\"+crypto.randomUUID(),start=new Date().toISOString(),a=await run(await Env.make(\"forge\"),id),b=await run(await Env.make(\"ledger\"),id),suite={same_controller_identity:true,both_valid:a.invalid===null&&b.invalid===null,both_pass:a.score.pass&&b.score.pass,cross_domain_pass:a.invalid===null&&b.invalid===null&&a.score.pass&&b.score.pass,zero_out_of_pocket:a.zero_out_of_pocket.pass&&b.zero_out_of_pocket.pass};console.log(JSON.stringify({schema:\"SUPERHERO_EQUIVALENCE_V2R1_LIVE_CAUSAL_RUN_V1\",classification:\"LIVE_BEHAVIORAL_CANDIDATE_NONAUTHORITY\",harness_source_identity:\"EXTERNAL_RECEIPT_REQUIRED\",inherited_declared_harness_id:\"2bfb3004ad0b0cdf6bd2d79b6ac9f6df5653c37b89b6460e7659b5310ef0a06c\",route:\"kilo-auto/free\",candidate_id:id,started_at:start,finished_at:new Date().toISOString(),cases:[a,b],suite,p_real_increment:false,authority_promotion:false,parent_eight_cell_floor_bound:false,execution_provenance_sufficient_for_superhero_count:false,human_authority_approval:false,direct_sprites_calls:0}));","createdAt",["D",1788895985034],"branchVersion","branchId","2e98fe85-8b4c-49b1-adc3-d9ff669a18b9","id","b08b4ad3-6d37-44aa-b0b7-0dda042f57c0","project-brain-external-reviewer-v1",["D",1788895209748],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Independent trace-bound Brain reviewer ingress","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","01a08276-a951-750b-946d-09f390baa4e2","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","b08b4ad36d3744aab0b70dda042f57c0","tursoHostname","b08b4ad36d3744aab0b70dda042f57c0-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789511441255],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_97":96,"_105":101},"org",{"_97":96,"_98":99,"_100":101,"_18":53,"_102":103,"_104":24},"branch",{"_13":86,"_31":87,"_41":40,"_88":42,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":43,"_95":96},"isOwned",58,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":224,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":24,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":64,"_65":66,"_67":225,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":226,"_81":227,"_83":228,"_85":24},"tree",[195,196,197,198,199,200,201],"files",[195,196,197,198,199,200,201],"counts",{"_185":60,"_186":143,"_187":60,"_188":189,"_190":191},"contents",[129,130,131,132,133,134,135],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_41":179,"_31":180,"_29":181,"_139":-5,"_39":40,"_38":143,"_141":124,"_36":182,"_13":60,"_32":20,"_34":183,"_23":24,"_145":-5,"_26":184},{"_41":172,"_31":173,"_29":174,"_139":-5,"_39":40,"_38":175,"_141":24,"_36":176,"_13":143,"_32":33,"_34":177,"_23":24,"_145":-5,"_26":178},{"_41":165,"_31":166,"_29":55,"_139":-5,"_39":40,"_38":167,"_141":124,"_36":168,"_13":143,"_32":169,"_34":170,"_23":24,"_145":-5,"_26":171},{"_41":162,"_31":27,"_29":30,"_139":-5,"_39":40,"_38":14,"_141":124,"_36":163,"_13":60,"_32":33,"_34":35,"_23":24,"_145":-5,"_26":164},{"_41":154,"_31":155,"_29":156,"_139":-5,"_39":40,"_38":157,"_141":124,"_36":158,"_13":159,"_32":33,"_34":160,"_23":24,"_145":-5,"_26":161},{"_41":147,"_31":148,"_29":149,"_139":-5,"_39":40,"_38":150,"_141":124,"_36":151,"_13":60,"_32":33,"_34":152,"_23":24,"_145":-5,"_26":153},{"_41":136,"_31":137,"_29":138,"_139":-5,"_39":40,"_38":140,"_141":124,"_36":142,"_13":143,"_32":33,"_34":144,"_23":24,"_145":-5,"_26":146},"4cfa15a8-05f6-4f81-b749-f4e89f22c122","version_probe.ts","5848b5ae-abbb-11f1-8e4b-1607ee4eb77e","parentId",7,"latest",["D",1788895659130],1,"console.log(\"VERSION_PROBE_B\");","label",[137],"7366e75c-decf-4d97-8bb4-3f9ba178e517","trace_ingress_verifier_v1.ts","9b92889e-abbb-11f1-a858-1607ee4eb77e",11,["D",1788895768236],"import ValTown from \"npm:@valtown/sdk\";\n\nconst vt = new ValTown();\n\nconst EXPECT = {\n project: \"mosadek/project-brain-live-v1-durable\",\n reviewerValId: \"b08b4ad3-6d37-44aa-b0b7-0dda042f57c0\",\n reviewerFileId: \"01a08276-a951-750b-946d-09f390baa4e2\",\n reviewerBranchId: \"2e98fe85-8b4c-49b1-adc3-d9ff669a18b9\",\n reviewerMetadataVersion: 2,\n reviewerTelemetryVersion: \"1\",\n reviewerSourceBytes: 2417,\n reviewerSourceSha256: \"08cfc99cef5ecf54c700d2b5e755a15631f0cf304bf0797b70846aa0348a9d84\",\n sourceUpdatedAt: \"2026-09-08T19:21:39.632Z\",\n traceId: \"01a0827808af725e813558698a33e692\",\n challengeSha256: \"00e993bd217dd01748873444c70132b8c313839297fcafe4352c5d680e524f73\",\n candidateSha256: \"032338891294119214bc8283c8bdbe09faaeac6fa55c207586e85a43a39e0ddc\",\n requestSha256: \"4561e31bccf8a617855283a089d1412e11522ef170a306433e54dd2320b19498\",\n deterministicReviewSha256: \"17f645fde518322d57c29034e26e79239eae15af1783a3bd0dc6a76e6ea9e043\",\n endpoint: \"https://mosadek--01a08276a951750b946d09f390baa4e2.web.val.run\",\n policyId: \"PROJECT_BRAIN_VAL_TRACE_EXTERNAL_REVIEWER_V1\",\n purpose: \"TRACE_BOUND_EXTERNAL_EXECUTION_PROBE_V1\",\n windowStart: \"2026-09-08T19:20:00Z\",\n windowEnd: \"2026-09-08T19:23:00Z\",\n} as const;\n\nfunction fail(reason:string, detail:any=null):never {\n throw new Error(JSON.stringify({ok:false,reason,detail}));\n}\nfunction attrMap(xs:any[]) {\n const m:any={};\n for (const x of xs || []) {\n const v=x?.value||{};\n m[String(x?.key||\"\")] = v.stringValue ?? v.intValue ?? v.doubleValue ?? v.boolValue ?? null;\n }\n return m;\n}\nfunction exactKeys(v:any, keys:string[]) {\n if(!v || typeof v!==\"object\" || Array.isArray(v)) return false;\n const a=Object.keys(v).sort(), b=[...keys].sort();\n return a.length===b.length && a.every((x,i)=>x===b[i]);\n}\nasync function sha256Text(s:string) {\n const d=await crypto.subtle.digest(\"SHA-256\",new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nfunction nsToMs(s:string) {\n return Number(BigInt(s)/1000000n);\n}\n\nconst expectedUrl =\n EXPECT.endpoint + \"/review\" +\n \"?challenge=\" + EXPECT.challengeSha256 +\n \"&candidate=\" + EXPECT.candidateSha256 +\n \"&request=\" + EXPECT.requestSha256;\n\nconst meta:any = await vt.files.retrieve(EXPECT.reviewerFileId);\nif(meta.id!==EXPECT.reviewerFileId || meta.path!==\"main.ts\" || meta.type!==\"http\") fail(\"SOURCE_METADATA_IDENTITY\");\nif(Number(meta.version)!==EXPECT.reviewerMetadataVersion) fail(\"SOURCE_METADATA_VERSION\",meta.version);\nif(String(meta.updatedAt)!==EXPECT.sourceUpdatedAt) fail(\"SOURCE_UPDATED_AT\",meta.updatedAt);\n\nconst contentResp:any = await vt.vals.files.getContent(EXPECT.reviewerValId,{path:\"main.ts\"});\nconst sourceText=await contentResp.text();\nconst sourceBytes=new TextEncoder().encode(sourceText).length;\nconst sourceSha=await sha256Text(sourceText);\nif(sourceBytes!==EXPECT.reviewerSourceBytes) fail(\"SOURCE_BYTES\",sourceBytes);\nif(sourceSha!==EXPECT.reviewerSourceSha256) fail(\"SOURCE_SHA256\",sourceSha);\n\nconst traces:any=await vt.telemetry.traces.list({\n file_id:EXPECT.reviewerFileId,\n start:EXPECT.windowStart,\n end:EXPECT.windowEnd,\n limit:100,\n direction:\"desc\",\n});\nconst all:any[] = traces.data || [];\nconst exactUrlRuns=all.filter((t:any)=>{\n const a=attrMap(t.attributes);\n return t.name===\"GET \"+expectedUrl &&\n a[\"http.request.method\"]===\"GET\" &&\n a[\"url.full\"]===expectedUrl &&\n String(a[\"http.response.status_code\"])===\"200\" &&\n a[\"val.file_id\"]===EXPECT.reviewerFileId &&\n a[\"val.branch_id\"]===EXPECT.reviewerBranchId &&\n String(a[\"val.version\"])===EXPECT.reviewerTelemetryVersion;\n});\nif(exactUrlRuns.length!==1) fail(\"REPLAY_OR_MISSING_EXACT_RUN\",{count:exactUrlRuns.length,traceIds:exactUrlRuns.map((x:any)=>x.traceId)});\nconst trace=exactUrlRuns[0];\nif(trace.traceId!==EXPECT.traceId) fail(\"TRACE_ID_MISMATCH\",trace.traceId);\nif(Number(trace.status?.code)!==1) fail(\"TRACE_STATUS\",trace.status);\n\nconst traceStartMs=nsToMs(trace.startTimeUnixNano);\nconst traceEndMs=nsToMs(trace.endTimeUnixNano);\nif(!(traceStartMs>0 && traceEndMs>=traceStartMs)) fail(\"TRACE_TIME\");\nif(Date.parse(EXPECT.sourceUpdatedAt)>traceStartMs) fail(\"SOURCE_NOT_FROZEN_BEFORE_TRACE\");\n\nconst logs:any=await vt.telemetry.logs.list({\n trace_ids:[EXPECT.traceId],\n file_id:EXPECT.reviewerFileId,\n start:EXPECT.windowStart,\n end:EXPECT.windowEnd,\n limit:100,\n direction:\"desc\",\n});\nconst marker=\"PROJECT_BRAIN_EXTERNAL_REVIEW_RECEIPT \";\nconst matching=(logs.data||[]).filter((x:any)=>x.traceId===EXPECT.traceId && String(x.body?.stringValue||\"\").startsWith(marker));\nif(matching.length!==1) fail(\"RECEIPT_LOG_CARDINALITY\",matching.length);\nconst log=matching[0];\nconst la=attrMap(log.attributes);\nif(la[\"val.file_id\"]!==EXPECT.reviewerFileId || la[\"val.branch_id\"]!==EXPECT.reviewerBranchId) fail(\"LOG_SOURCE_BINDING\");\nconst logMs=nsToMs(log.timeUnixNano);\nif(logMstraceEndMs) fail(\"LOG_OUTSIDE_TRACE\");\n\nlet receipt:any;\ntry{receipt=JSON.parse(String(log.body.stringValue).slice(marker.length))}catch{fail(\"RECEIPT_JSON\")}\nconst receiptKeys=[\n \"schema\",\"positive\",\"project\",\"purpose\",\"challenge_sha256\",\"candidate_sha256\",\"request_sha256\",\n \"recomputed_request_sha256\",\"deterministic_review_sha256\",\"reviewer_substrate\",\"policy_id\",\n \"source_frozen_before_run\",\"promotion_authority_granted\",\"executed_at\"\n];\nif(!exactKeys(receipt,receiptKeys)) fail(\"RECEIPT_SHAPE\",Object.keys(receipt||{}));\nif(receipt.schema!==\"PROJECT_BRAIN_VAL_TRACE_EXTERNAL_REVIEW_RECEIPT_V1\") fail(\"RECEIPT_SCHEMA\");\nif(receipt.positive!==true) fail(\"RECEIPT_NOT_POSITIVE\");\nif(receipt.project!==EXPECT.project || receipt.purpose!==EXPECT.purpose) fail(\"RECEIPT_SCOPE\");\nif(receipt.challenge_sha256!==EXPECT.challengeSha256 || receipt.candidate_sha256!==EXPECT.candidateSha256) fail(\"RECEIPT_BINDING\");\nif(receipt.request_sha256!==EXPECT.requestSha256 || receipt.recomputed_request_sha256!==EXPECT.requestSha256) fail(\"REQUEST_HASH\");\nif(receipt.deterministic_review_sha256!==EXPECT.deterministicReviewSha256) fail(\"REVIEW_HASH\");\nif(receipt.reviewer_substrate!==\"VAL_TOWN_HTTP\" || receipt.policy_id!==EXPECT.policyId) fail(\"REVIEWER_IDENTITY\");\nif(receipt.source_frozen_before_run!==true) fail(\"SOURCE_FREEZE_FLAG\");\nif(receipt.promotion_authority_granted!==false) fail(\"PROMOTION_CONFUSION\");\nconst executedMs=Date.parse(receipt.executed_at);\nif(!Number.isFinite(executedMs) || executedMstraceEndMs) fail(\"EXECUTED_AT_OUTSIDE_TRACE\");\n\nconst canonicalRequest=JSON.stringify({\n candidate_sha256:EXPECT.candidateSha256,\n challenge_sha256:EXPECT.challengeSha256,\n project:EXPECT.project,\n purpose:EXPECT.purpose,\n});\nif(await sha256Text(canonicalRequest)!==EXPECT.requestSha256) fail(\"LOCAL_REQUEST_RECOMPUTE\");\n\nconst localReview=JSON.stringify({\n candidate_sha256:EXPECT.candidateSha256,\n challenge_sha256:EXPECT.challengeSha256,\n request_sha256:EXPECT.requestSha256,\n policy_id:EXPECT.policyId,\n positive:true,\n});\nif(await sha256Text(localReview)!==EXPECT.deterministicReviewSha256) fail(\"LOCAL_REVIEW_RECOMPUTE\");\n\nconsole.log(JSON.stringify({\n ok:true,\n schema:\"PROJECT_BRAIN_VAL_TRACE_INGRESS_VERIFICATION_V1\",\n evidence_class:\"PROJECT_VERIFIABLE_EXTERNAL_EXECUTOR_V1\",\n provider:\"VAL_TOWN\",\n trace_id:EXPECT.traceId,\n trace_cardinality:1,\n source_sha256:sourceSha,\n source_bytes:sourceBytes,\n source_metadata_version:EXPECT.reviewerMetadataVersion,\n source_telemetry_revision:EXPECT.reviewerTelemetryVersion,\n challenge_sha256:EXPECT.challengeSha256,\n candidate_sha256:EXPECT.candidateSha256,\n request_sha256:EXPECT.requestSha256,\n deterministic_review_sha256:EXPECT.deterministicReviewSha256,\n promotion_authority_granted:false,\n p_real_increment:0,\n}));\n",[148],"f8b3f552-e942-4273-a6e8-3afdad859845","telemetry_probe.ts","1e55af0a-abbb-11f1-a7f7-1607ee4eb77e",8,["D",1788895676725],3,"import ValTown from \"npm:@valtown/sdk\";\nconst vt = new ValTown();\nconst fileId = \"5848b5ae-abbb-11f1-8e4b-1607ee4eb77e\";\nconst traces:any = await vt.telemetry.traces.list({\n file_id: fileId,\n start: \"2026-09-08T19:27:20Z\",\n end: \"2026-09-08T19:28:30Z\",\n limit: 100,\n direction: \"asc\",\n});\nconsole.log(JSON.stringify(traces.data || []));\n",[155],"95c6aca3-972d-49e6-b1d3-5719d441a4de",["D",1788895985034],[27],"bde6a29c-a9ea-4a90-aece-27761831374a","main.ts",2,["D",1788895299632],"http","const PROJECT = \"mosadek/project-brain-live-v1-durable\";\nconst PURPOSE = \"TRACE_BOUND_EXTERNAL_EXECUTION_PROBE_V1\";\nconst EXPECTED_CANDIDATE_SHA256 = \"032338891294119214bc8283c8bdbe09faaeac6fa55c207586e85a43a39e0ddc\";\nconst POLICY_ID = \"PROJECT_BRAIN_VAL_TRACE_EXTERNAL_REVIEWER_V1\";\nconst HEX64 = /^[0-9a-f]{64}$/;\n\nasync function sha256(s: string) {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport default async function handler(req: Request): Promise {\n const u = new URL(req.url);\n if (u.pathname === \"/health\") {\n return Response.json({ ok: true, policy_id: POLICY_ID, candidate_sha256: EXPECTED_CANDIDATE_SHA256 });\n }\n\n const challenge = String(u.searchParams.get(\"challenge\") || \"\").toLowerCase();\n const candidate = String(u.searchParams.get(\"candidate\") || \"\").toLowerCase();\n const requestSha = String(u.searchParams.get(\"request\") || \"\").toLowerCase();\n\n if (!HEX64.test(challenge) || !HEX64.test(candidate) || !HEX64.test(requestSha)) {\n return Response.json({ ok: false, reason: \"BAD_BINDING_SHAPE\" }, { status: 400 });\n }\n\n const canonicalRequest = JSON.stringify({\n candidate_sha256: candidate,\n challenge_sha256: challenge,\n project: PROJECT,\n purpose: PURPOSE,\n });\n const recomputedRequestSha = await sha256(canonicalRequest);\n const positive = candidate === EXPECTED_CANDIDATE_SHA256 && requestSha === recomputedRequestSha;\n const deterministicReviewSha = await sha256(JSON.stringify({\n candidate_sha256: candidate,\n challenge_sha256: challenge,\n request_sha256: requestSha,\n policy_id: POLICY_ID,\n positive,\n }));\n\n const receipt = {\n schema: \"PROJECT_BRAIN_VAL_TRACE_EXTERNAL_REVIEW_RECEIPT_V1\",\n positive,\n project: PROJECT,\n purpose: PURPOSE,\n challenge_sha256: challenge,\n candidate_sha256: candidate,\n request_sha256: requestSha,\n recomputed_request_sha256: recomputedRequestSha,\n deterministic_review_sha256: deterministicReviewSha,\n reviewer_substrate: \"VAL_TOWN_HTTP\",\n policy_id: POLICY_ID,\n source_frozen_before_run: true,\n promotion_authority_granted: false,\n executed_at: new Date().toISOString(),\n };\n\n console.log(\"PROJECT_BRAIN_EXTERNAL_REVIEW_RECEIPT \" + JSON.stringify(receipt));\n return Response.json(receipt, { status: positive ? 200 : 422 });\n}\n",[166],"b0d9003f-b2cf-43e7-9277-893dd3d0e786","file_metadata_probe.ts","7151bf82-abbb-11f1-9b94-1607ee4eb77e",10,["D",1788895714361],"import ValTown from \"npm:@valtown/sdk\";\nconst vt = new ValTown();\nconst valId = \"b08b4ad3-6d37-44aa-b0b7-0dda042f57c0\";\nconst meta:any = await vt.files.retrieve(\"01a08276-a951-750b-946d-09f390baa4e2\");\nconst res:any = await vt.vals.files.getContent(valId, { path: \"main.ts\" });\nconst text = await res.text();\nconst d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(text));\nconst sha = [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\nconsole.log(JSON.stringify({meta, bytes:new TextEncoder().encode(text).length, sha256:sha}));\n",[173],"27b76da5-78e5-442f-8a5b-a9f2d3e1d5d5","README.md","01a08276-a951-750b-946d-05aa9a763dfb",["D",1788895209748],"# MCP server\n\nA minimal MCP server with one example tool (that gets the current time in a\ngiven timezone).\n\nRemix this val to create your own MCP server on Val\nTown—[**_just like the MCP Core Maintainer team!_**](https://blog.val.town/mcp-core-maintainers)\n\nThis MCP server (<50 LOC in [`main.ts`](./main.ts)) is live on\n[mcp-time.val.run](https://mcp-time.val.run) if you'd like to test it\n([playground.ai.cloudflare.com](https://playground.ai.cloudflare.com) is a great\nplace to test an MCP server quickly). It's built on the v2 TypeScript SDK,\ncompatible with “MCP 2.0” (technically, the\n[2026-07-28 spec](https://modelcontextprotocol.io/specification/2026-07-28)). It\nalso supports the legacy spec, for MCP clients that haven't upgraded yet.",[180],"pulls","branches","forks","envVars",{"_192":143,"_194":60},"connections",{"_192":60,"_193":60},"count","unfilledCount","emptyCount",{"_41":179,"_31":180,"_29":181,"_139":-5,"_39":40,"_38":143,"_141":124,"_36":221,"_13":60,"_32":20,"_34":183,"_23":24,"_145":-5,"_203":222,"_26":223},{"_41":172,"_31":173,"_29":174,"_139":-5,"_39":40,"_38":175,"_141":24,"_36":218,"_13":143,"_32":33,"_34":177,"_23":24,"_145":-5,"_203":219,"_26":220},{"_41":165,"_31":166,"_29":55,"_139":-5,"_39":40,"_38":167,"_141":124,"_36":215,"_13":143,"_32":169,"_34":170,"_23":24,"_145":-5,"_203":216,"_26":217},{"_41":162,"_31":27,"_29":30,"_139":-5,"_39":40,"_38":14,"_141":124,"_36":212,"_13":60,"_32":33,"_34":35,"_23":24,"_145":-5,"_203":213,"_26":214},{"_41":154,"_31":155,"_29":156,"_139":-5,"_39":40,"_38":157,"_141":124,"_36":209,"_13":159,"_32":33,"_34":160,"_23":24,"_145":-5,"_203":210,"_26":211},{"_41":147,"_31":148,"_29":149,"_139":-5,"_39":40,"_38":150,"_141":124,"_36":206,"_13":60,"_32":33,"_34":152,"_23":24,"_145":-5,"_203":207,"_26":208},{"_41":136,"_31":137,"_29":138,"_139":-5,"_39":40,"_38":140,"_141":124,"_36":202,"_13":143,"_32":33,"_34":144,"_23":24,"_145":-5,"_203":204,"_26":205},["D",1788895659130],"children",[],[137],["D",1788895768236],[],[148],["D",1788895676725],[],[155],["D",1788895985034],[],[27],["D",1788895299632],[],[166],["D",1788895714361],[],[173],["D",1788895209748],[],[180],["D",1788895209748],["D",1789511441255],{"_97":96,"_105":101},{"_97":96,"_98":99,"_100":101,"_18":53,"_102":103,"_104":24},{"_13":86,"_31":87,"_41":40,"_88":42,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":43,"_95":96},"ctx",{"_79":-5,"_126":262,"_263":264,"_265":266,"_267":24,"_268":24,"_269":24,"_270":124,"_271":-5,"_272":-7,"_273":-7,"_274":60,"_275":24,"_276":24,"_277":-5,"_278":24,"_279":24,"_280":24,"_281":-5},"ENV",{"_233":234,"_235":236,"_237":87,"_238":239,"_240":241,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v12