[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_172":173,"_174":175},"routes/_app.x.$handle.$name",{"_102":101,"_39":52,"_111":92,"_34":112,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_26":-5,"_123":-5,"_124":-5,"_125":33,"_126":127,"_128":31,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_50":51,"_39":52,"_45":53,"_54":-5,"_55":33,"_56":57,"_58":57,"_59":-5,"_60":-5,"_19":61,"_62":63,"_64":31,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":33},"version",4,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","2d56ea14-2092-4fff-ade5-00087d02c91e","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":29,"_30":31,"_32":33,"_34":35,"_36":35},"file",{"_37":38,"_39":35,"_40":41,"_42":44,"_45":46,"_47":14,"_48":49,"_30":33},"previous",{"_37":38,"_39":35,"_40":41,"_42":43},"deleted",true,"deletedHere",false,"path","mktest.ts","latestPath","fileId","e49b5b08-a30d-11f1-ae87-1607ee4eb77e","name","fileType","script","content","const enc = new TextEncoder();\nasync function sha256Hex(s: string): Promise {\n const h = await crypto.subtle.digest(\"SHA-256\", enc.encode(s) as unknown as ArrayBuffer);\n return [...new Uint8Array(h)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nconst adapter = \"ADAPTER-BYTES-123\";\nconst evalJson = JSON.stringify({ modelArtifactDigest: \"PLACEHOLDER_MODEL\", aggregate: 0.9, slices: { critical: 0.85 } });\nconst evalBytes = enc.encode(evalJson).length;\n\nexport default async function main() {\n const evalArtifact = await sha256Hex(evalJson);\n const modelDigest = await sha256Hex(adapter);\n\n // evaluation with real digests\n const evaluation = JSON.stringify({ modelArtifactDigest: modelDigest, aggregate: 0.9, slices: { critical: 0.85 } });\n const evalArtifact2 = await sha256Hex(evaluation);\n\n const files: Record = {\n \"adapter_config.json\": JSON.stringify({ r: 8, target_modules: [\"q_proj\"] }),\n \"adapter_model.safetensors\": adapter,\n \"evaluation.json\": evaluation,\n };\n // add remaining files then build inventory\n const manifest = {\n baseRevision: \"a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6a7b8c9d0\",\n task: \"sentiment\",\n datasetDigest: \"ds1\",\n codeDigest: \"code1\",\n trainingConfigDigest: \"tc1\",\n modelArtifactDigest: modelDigest,\n evaluationArtifactDigest: evalArtifact2,\n };\n files[\"training_manifest.json\"] = JSON.stringify(manifest);\n\n const readme = `# Model card\n\n\n\nProse is allowed.`;\n files[\"README.md\"] = readme;\n\n const names = Object.keys(files).sort();\n const inventory = [];\n for (const n of names) {\n const bytes = enc.encode(files[n]);\n inventory.push({ name: n, bytes: bytes.length, sha256: await sha256Hex(files[n]) });\n }\n files[\"inventory.json\"] = JSON.stringify(inventory);\n\n console.log(JSON.stringify({ files, evalLen: evalBytes }));\n return JSON.stringify({ files });\n}\n","const enc = new TextEncoder();\nasync function sha256Hex(s: string): Promise {\n const h = await crypto.subtle.digest(\"SHA-256\", enc.encode(s) as unknown as ArrayBuffer);\n return [...new Uint8Array(h)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport default async function fetchHandler(_req: Request): Promise {\n const adapter = \"ADAPTER-BYTES-123\";\n const modelDigest = await sha256Hex(adapter);\n const evaluation = JSON.stringify({ modelArtifactDigest: modelDigest, aggregate: 0.9, slices: { critical: 0.85 } });\n const evalArtifact = await sha256Hex(evaluation);\n\n const files: Record = {\n \"adapter_config.json\": JSON.stringify({ r: 8, target_modules: [\"q_proj\"] }),\n \"adapter_model.safetensors\": adapter,\n \"evaluation.json\": evaluation,\n };\n const manifest = {\n baseRevision: \"a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6a7b8c9d0\",\n task: \"sentiment\",\n datasetDigest: \"ds1\",\n codeDigest: \"code1\",\n trainingConfigDigest: \"tc1\",\n modelArtifactDigest: modelDigest,\n evaluationArtifactDigest: evalArtifact,\n };\n files[\"training_manifest.json\"] = JSON.stringify(manifest);\n\n const readme = `# Model card\\n\\n\\n\\nProse is allowed.`;\n files[\"README.md\"] = readme;\n\n const names = Object.keys(files).sort();\n const inventory = [];\n for (const n of names) {\n const bytes = enc.encode(files[n]);\n inventory.push({ name: n, bytes: bytes.length, sha256: await sha256Hex(files[n]) });\n }\n files[\"inventory.json\"] = JSON.stringify(inventory);\n\n return new Response(JSON.stringify({ files }), {\n headers: { \"content-type\": \"application/json\" },\n });\n}","createdAt",["D",1787941610212],"branchVersion","branchId","df0727d8-3bc8-4c02-b7f1-4b14fb6817d6","id","e47cdc33-1257-4d91-858a-880392112f0e","verify-bundle",["D",1787941444934],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","0b226cf7-648e-4c18-a637-a242174ea0ae","pinnedFileId","cba8b00a-a30d-11f1-99a7-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a04960-730b-72cd-9a55-540d95db24cf","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_102":101,"_110":106},"org",{"_102":101,"_103":104,"_105":106,"_19":61,"_107":108,"_109":33},"branch",{"_13":91,"_39":92,"_50":49,"_93":51,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":52,"_100":101},"isOwned",6,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","navneett","handle","displayName","Navneet","avatar","https://lh3.googleusercontent.com/a/ACg8ocJAPndyQ_8iMhy-CLbFWFKg3UQvEmVag37z1F6jRx4Vf-V-Zw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_50":51,"_39":52,"_45":168,"_54":-5,"_55":33,"_56":57,"_58":57,"_59":-5,"_60":-5,"_19":61,"_62":63,"_64":31,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":169,"_86":170,"_88":171,"_90":33},"tree",[159,160],"files",[159,160],"counts",{"_149":68,"_150":139,"_151":68,"_152":153,"_154":155},"contents",[133,134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_50":142,"_39":143,"_37":63,"_136":-5,"_48":49,"_47":144,"_137":31,"_45":145,"_13":139,"_40":146,"_42":147,"_30":33,"_140":52,"_34":148},{"_50":135,"_39":35,"_37":38,"_136":-5,"_48":49,"_47":14,"_137":33,"_45":138,"_13":139,"_40":41,"_42":44,"_30":33,"_140":-5,"_34":141},"d83a4154-5a94-4e72-8d31-f37b9ca5bd92","parentId","latest",["D",1787941610212],1,"label",[35],"581a5167-8631-4e04-bf75-530e2072d433","main.ts",2,["D",1787941511389],"http","// POST /verify-bundle — deterministic model bundle + model card verifier.\nconst enc = new TextEncoder();\n\nconst json = (obj: unknown, status = 200) =>\n new Response(JSON.stringify(obj), {\n status,\n headers: { \"content-type\": \"application/json\" },\n });\n\nfunction utf8Compare(a: string, b: string): number {\n const ab = enc.encode(a), bb = enc.encode(b);\n const n = Math.min(ab.length, bb.length);\n for (let i = 0; i < n; i++) if (ab[i] !== bb[i]) return ab[i] - bb[i];\n return ab.length - bb.length;\n}\n\nfunction sortCodes(codes: string[]): string[] {\n return [...new Set(codes)].sort(utf8Compare);\n}\n\nasync function sha256Hex(bytes: Uint8Array): Promise {\n const h = await crypto.subtle.digest(\"SHA-256\", bytes as unknown as ArrayBuffer);\n return [...new Uint8Array(h)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\ntype Any = Record;\n\nconst REQUIRED_FILES = [\n \"README.md\", \"training_manifest.json\", \"evaluation.json\",\n \"inventory.json\", \"adapter_model.safetensors\", \"adapter_config.json\",\n];\nconst UNSAFE_EXT = [\".bin\", \".pt\", \".pth\", \".pkl\", \".pickle\"];\n\nasync function handleVerify(body: Any) {\n const policy = body.policy;\n const files = body.files;\n const violations: string[] = [];\n\n // policy validity\n const policyOk =\n policy && typeof policy === \"object\" && !Array.isArray(policy) &&\n Array.isArray(policy.requiredSlices) && policy.requiredSlices.length > 0 &&\n policy.requiredSlices.every((s: unknown) => typeof s === \"string\" && s.length > 0) &&\n new Set(policy.requiredSlices).size === policy.requiredSlices.length &&\n typeof policy.license === \"string\" && policy.license.length > 0 &&\n typeof policy.intendedUse === \"string\" && policy.intendedUse.length > 0 &&\n typeof policy.limitations === \"string\" && policy.limitations.length > 0;\n if (!policyOk) violations.push(\"INVALID_POLICY\");\n const requiredSlices: string[] = policyOk ? policy.requiredSlices : [];\n const license = policyOk ? policy.license : null;\n const intendedUse = policyOk ? policy.intendedUse : null;\n const limitations = policyOk ? policy.limitations : null;\n\n // missing / non-string files\n for (const name of REQUIRED_FILES) {\n if (!(name in files)) violations.push(`MISSING_FILE:${name}`);\n }\n for (const [name, content] of Object.entries(files)) {\n if (typeof content !== \"string\") violations.push(`INVALID_FILE:${name}`);\n }\n if (violations.some((v) => v.startsWith(\"MISSING_FILE:\") || v.startsWith(\"INVALID_FILE:\"))) {\n return json({ decision: \"reject\", violations: sortCodes(violations), inventoryDigest: null });\n }\n\n const get = (n: string) => files[n] as string;\n const bytesOf = (n: string) => enc.encode(get(n));\n\n // unsafe weights\n for (const name of Object.keys(files)) {\n for (const ext of UNSAFE_EXT) {\n if (name.endsWith(ext)) { violations.push(\"UNSAFE_WEIGHTS\"); break; }\n }\n }\n\n // JSON parse helper\n const parseJson = (name: string): { ok: boolean; val?: unknown } => {\n try { return { ok: true, val: JSON.parse(get(name)) }; }\n catch { violations.push(`INVALID_JSON:${name}`); return { ok: false }; }\n };\n\n // ---------- inventory ----------\n let inventory: Any[] | null = null;\n const invParse = parseJson(\"inventory.json\");\n if (invParse.ok) {\n const v = invParse.val;\n const listOk = Array.isArray(v) && (v as Any[]).every((e: Any) =>\n e && typeof e === \"object\" && !Array.isArray(e) &&\n Object.keys(e).length === 3 &&\n Object.keys(e)[0] === \"name\" && Object.keys(e)[1] === \"bytes\" && Object.keys(e)[2] === \"sha256\" &&\n typeof e.name === \"string\" && typeof e.bytes === \"number\" &&\n Number.isSafeInteger(e.bytes) && e.bytes >= 0 &&\n typeof e.sha256 === \"string\" && /^[0-9a-f]{64}$/.test(e.sha256));\n const sortedOk = listOk && (v as Any[]).every((e: Any, i: number) =>\n i === 0 || utf8Compare((v as Any[])[i - 1].name, e.name) < 0);\n const selfOk = listOk && !(v as Any[]).some((e: Any) => e.name === \"inventory.json\");\n const expectedNames = Object.keys(files).filter((n) => n !== \"inventory.json\");\n const exactNames = listOk &&\n (v as Any[]).length === expectedNames.length &&\n (v as Any[]).every((e: Any) => expectedNames.includes(e.name));\n if (!listOk || !sortedOk || !selfOk || !exactNames) {\n violations.push(\"INVENTORY_MISMATCH\");\n } else {\n // recompute\n const recomputed: Any[] = [];\n let ok = true;\n for (const e of v as Any[]) {\n const bytes = enc.encode(files[e.name]);\n if (typeof files[e.name] !== \"string\") { ok = false; violations.push(`INVALID_FILE:${e.name}`); continue; }\n recomputed.push({ name: e.name, bytes: bytes.length, sha256: await sha256Hex(bytes) });\n }\n recomputed.sort((a, b) => utf8Compare(a.name, b.name));\n if (!ok || JSON.stringify(recomputed) !== JSON.stringify(v as Any[])) {\n violations.push(\"INVENTORY_MISMATCH\");\n }\n inventory = recomputed;\n }\n }\n\n // inventoryDigest of the recomputed array (compact JSON)\n const recomputedInv: Any[] = [];\n for (const name of Object.keys(files).filter((n) => n !== \"inventory.json\")) {\n const bytes = bytesOf(name);\n recomputedInv.push({ name, bytes: bytes.length, sha256: await sha256Hex(bytes) });\n }\n recomputedInv.sort((a, b) => utf8Compare(a.name, b.name));\n const inventoryDigest = await sha256Hex(enc.encode(JSON.stringify(recomputedInv)));\n\n // ---------- adapter config ----------\n const cfgParse = parseJson(\"adapter_config.json\");\n let adapterDigest: string | null = null;\n if (cfgParse.ok) {\n const c = cfgParse.val;\n const ok = c && typeof c === \"object\" && !Array.isArray(c) &&\n typeof c.r === \"number\" && Number.isSafeInteger(c.r) && c.r > 0 &&\n Array.isArray(c.target_modules) && c.target_modules.length > 0 &&\n c.target_modules.every((t: unknown) => typeof t === \"string\" && t.length > 0) &&\n new Set(c.target_modules).size === c.target_modules.length;\n if (!ok) violations.push(\"INVALID_ADAPTER_CONFIG\");\n }\n adapterDigest = await sha256Hex(bytesOf(\"adapter_model.safetensors\"));\n\n // ---------- training manifest ----------\n const manParse = parseJson(\"training_manifest.json\");\n let manifest: Any | null = null;\n if (manParse.ok) {\n const m = manParse.val;\n const objOk = m && typeof m === \"object\" && !Array.isArray(m);\n if (!objOk) {\n violations.push(\"INVALID_TRAINING_MANIFEST\");\n } else {\n const revOk = typeof m.baseRevision === \"string\" && /^[0-9a-f]{40}$/.test(m.baseRevision);\n if (!revOk) violations.push(\"MUTABLE_BASE_REVISION\");\n const fields = [\"task\", \"datasetDigest\", \"codeDigest\", \"trainingConfigDigest\",\n \"modelArtifactDigest\", \"evaluationArtifactDigest\"];\n for (const f of fields) {\n if (typeof m[f] !== \"string\" || m[f].length === 0) {\n violations.push(`MISSING_MANIFEST_FIELD:${f}`);\n }\n }\n if (revOk && fields.every((f) => typeof m[f] === \"string\" && m[f].length > 0)) {\n manifest = m;\n }\n }\n }\n\n // evaluation artifact digest = SHA-256 of exact evaluation.json bytes\n const evalArtifactDigest = await sha256Hex(bytesOf(\"evaluation.json\"));\n\n if (manifest) {\n if (manifest.modelArtifactDigest !== adapterDigest) violations.push(\"MODEL_ARTIFACT_MISMATCH\");\n if (manifest.evaluationArtifactDigest !== evalArtifactDigest) violations.push(\"EVALUATION_ARTIFACT_MISMATCH\");\n }\n\n // ---------- evaluation ----------\n let evaluation: Any | null = null;\n const evalParse = parseJson(\"evaluation.json\");\n if (evalParse.ok) {\n const e = evalParse.val;\n const objOk = e && typeof e === \"object\" && !Array.isArray(e);\n if (!objOk) {\n violations.push(\"INVALID_EVALUATION\");\n } else {\n if (manifest && typeof manifest.modelArtifactDigest === \"string\" &&\n typeof e.modelArtifactDigest === \"string\" && e.modelArtifactDigest !== manifest.modelArtifactDigest) {\n violations.push(\"EVALUATION_DIGEST_MISMATCH\");\n }\n const agg = e.aggregate;\n if (typeof agg !== \"number\" || !Number.isFinite(agg) || agg < 0 || agg > 1) {\n violations.push(\"INVALID_AGGREGATE\");\n }\n const slices = (e.slices && typeof e.slices === \"object\" && !Array.isArray(e.slices)) ? e.slices : {};\n for (const s of requiredSlices) {\n const v = slices[s];\n if (v === undefined || v === null) {\n violations.push(`MISSING_SLICE:${s}`);\n } else if (typeof v !== \"number\" || !Number.isFinite(v) || v < 0 || v > 1) {\n violations.push(`SLICE_RANGE:${s}`);\n }\n }\n evaluation = e;\n }\n }\n\n // ---------- model card ----------\n const readme = get(\"README.md\");\n const prefix = \"\", start);\n if (end === -1) {\n violations.push(\"INVALID_MODEL_CARD\");\n } else {\n const payload = readme.slice(start, end);\n let card: unknown;\n try { card = JSON.parse(payload); }\n catch { violations.push(\"INVALID_MODEL_CARD\"); card = undefined; }\n if (card !== undefined) {\n if (!card || typeof card !== \"object\" || Array.isArray(card)) {\n violations.push(\"INVALID_MODEL_CARD\");\n } else {\n const c = card as Any;\n const check = (cond: boolean) => { if (!cond) violations.push(\"MODEL_CARD_MISMATCH\"); };\n check(typeof c.task === \"string\" && manifest !== null && c.task === manifest.task);\n check(typeof c.baseRevision === \"string\" && manifest !== null && c.baseRevision === manifest.baseRevision);\n check(typeof c.datasetDigest === \"string\" && manifest !== null && c.datasetDigest === manifest.datasetDigest);\n check(typeof c.modelArtifactDigest === \"string\" && manifest !== null &&\n c.modelArtifactDigest === manifest.modelArtifactDigest);\n check(typeof c.license === \"string\" && license !== null && c.license === license);\n check(typeof c.intendedUse === \"string\" && intendedUse !== null && c.intendedUse === intendedUse);\n check(typeof c.limitations === \"string\" && limitations !== null && c.limitations === limitations);\n }\n }\n }\n }\n\n const codes = sortCodes(violations);\n return json({\n decision: codes.length === 0 ? \"admit\" : \"reject\",\n violations: codes,\n inventoryDigest,\n });\n}\n\nexport default async function fetchHandler(req: Request): Promise {\n const url = new URL(req.url);\n if (req.method === \"POST\" && (url.pathname === \"/verify-bundle\" || url.pathname === \"/verify-bundle/\")) {\n let body: Any;\n try {\n body = JSON.parse(await req.text());\n } catch {\n return json({ error: \"INVALID_INPUT\" }, 400);\n }\n if (!body || typeof body !== \"object\" || Array.isArray(body)) {\n return json({ error: \"INVALID_INPUT\" }, 400);\n }\n if (!body.policy || typeof body.policy !== \"object\" || Array.isArray(body.policy) ||\n !body.files || typeof body.files !== \"object\" || Array.isArray(body.files)) {\n return json({ error: \"INVALID_INPUT\" }, 400);\n }\n return handleVerify(body);\n }\n return json({ service: \"verify-bundle\", endpoint: \"POST /verify-bundle\" });\n}\n",[143],"pulls","branches","forks","envVars",{"_156":68,"_158":68},"connections",{"_156":68,"_157":68},"count","unfilledCount","emptyCount",{"_50":142,"_39":143,"_37":63,"_136":-5,"_48":49,"_47":144,"_137":31,"_45":165,"_13":139,"_40":146,"_42":147,"_30":33,"_140":52,"_162":166,"_34":167},{"_50":135,"_39":35,"_37":38,"_136":-5,"_48":49,"_47":14,"_137":33,"_45":161,"_13":139,"_40":41,"_42":44,"_30":33,"_140":-5,"_162":163,"_34":164},["D",1787941610212],"children",[],[35],["D",1787941511389],[],[143],["D",1787941444934],{"_102":101,"_110":106},{"_102":101,"_103":104,"_105":106,"_19":61,"_107":108,"_109":33},{"_13":91,"_39":92,"_50":49,"_93":51,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":52,"_100":101},"ctx",{"_84":-5,"_130":205,"_206":207,"_208":209,"_210":33,"_211":33,"_212":33,"_213":31,"_214":-5,"_215":-7,"_216":-7,"_217":68,"_218":33,"_219":33,"_220":-5,"_221":33,"_222":33,"_223":33,"_224":-5},"ENV",{"_176":177,"_178":179,"_180":92,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v4