[{"_1":2,"_176":-5,"_177":-5},"loaderData",{"_3":4,"_92":93},"root",{"_5":6,"_35":36,"_65":66},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20,"_34":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","isTeamOrgMember","ENV",{"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","8a08d4a46a197c541e82d5fac862bafdcf40c111","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_67":68},"__internal_clerk_state",{"_69":70,"_71":46,"_72":73,"_74":73,"_75":20,"_76":73,"_77":73,"_78":73,"_79":73,"_80":81,"_90":20,"_91":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_82":20,"_19":20,"_83":73,"_84":85,"_86":73,"_87":46,"_88":20,"_89":73},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_94":95,"_96":97,"_98":99,"_100":101,"_150":151,"_173":174,"_175":-5},"handle","alpaca1712","name","XSSAgent","path","backend/services/mcp.ts","project",{"_102":103,"_96":97,"_104":105,"_106":-5,"_107":20,"_108":109,"_110":-5,"_111":-5,"_12":112,"_113":114,"_115":116,"_117":116,"_118":-5,"_119":32,"_14":120,"_121":122,"_123":122,"_124":125,"_126":125,"_127":125,"_128":122,"_129":122,"_23":130,"_133":134,"_136":137,"_149":20},"id","bdd1de52-bf74-11f0-96e2-42dde27851f2","createdAt",["D",1762916857021],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","dd466579-7dfb-4784-af1f-60db19283bf6","pinnedFileId","8cdf2128-bf75-11f0-9d4b-42dde27851f2","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","2100634a-7e5d-44d4-94fa-a3cd4b79f424","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_94":95,"_131":132},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18ybnp2Z0VIZklHWDd3NVdUNFNZMzZkQmQzejgifQ","org",{"_94":95,"_135":132,"_12":112},"avatar","branch",{"_138":139,"_96":44,"_102":140,"_141":103,"_142":-5,"_143":-5,"_144":-5,"_145":-5,"_146":-5,"_147":97,"_148":95},"version",18,"bdd257e2-bf74-11f0-96e2-42dde27851f2","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_102":152,"_96":153,"_154":155,"_156":157,"_158":140,"_159":160,"_161":116,"_104":162,"_138":163,"_164":165,"_166":167,"_168":20,"_169":-5,"_98":170},"6db252b6-bf75-11f0-8b0f-42dde27851f2","mcp.ts","fileId","5df56da4-bf75-11f0-adc0-42dde27851f2","parentId","bec9444b-7258-46b9-adf4-9a05b6d91cb8","branchId","branchVersion",7,"latest",["D",1762917152086],3,"fileType","script","content","import type { XSSPayload, MCPResponse } from \"../../shared/types.ts\";\n\nexport class MCPService {\n private baseUrl = \"https://trooper-mcp-production.up.railway.app\";\n private apiKey: string;\n\n constructor() {\n const apiKey = Deno.env.get('MCP_API_KEY');\n if (!apiKey) {\n throw new Error('MCP_API_KEY environment variable is required');\n }\n this.apiKey = apiKey;\n }\n\n private getHeaders(): Record {\n return {\n 'Content-Type': 'application/json',\n 'User-Agent': 'XSS-Testing-Agent/1.0',\n 'Authorization': `Bearer ${this.apiKey}`,\n 'X-API-Key': this.apiKey\n };\n }\n\n async getXSSPayloads(options: {\n type?: 'reflected' | 'stored' | 'dom' | 'all';\n severity?: 'low' | 'medium' | 'high' | 'critical' | 'all';\n limit?: number;\n context?: string;\n } = {}): Promise {\n try {\n const params = new URLSearchParams();\n \n if (options.type && options.type !== 'all') {\n params.append('type', options.type);\n }\n \n if (options.severity && options.severity !== 'all') {\n params.append('severity', options.severity);\n }\n \n if (options.limit) {\n params.append('limit', options.limit.toString());\n }\n \n if (options.context) {\n params.append('context', options.context);\n }\n\n const url = `${this.baseUrl}/xss/payloads${params.toString() ? '?' + params.toString() : ''}`;\n \n const response = await fetch(url, {\n method: 'GET',\n headers: this.getHeaders()\n });\n\n if (!response.ok) {\n throw new Error(`MCP service responded with status: ${response.status}`);\n }\n\n const data: MCPResponse = await response.json();\n return data.payloads || [];\n } catch (error) {\n console.error('MCP service error:', error);\n \n // Fallback to basic XSS payloads if MCP service is unavailable\n return this.getFallbackPayloads(options.type);\n }\n }\n\n async generateCustomPayloads(context: {\n url: string;\n parameters?: string[];\n htmlContext?: string;\n framework?: string;\n }): Promise {\n try {\n const response = await fetch(`${this.baseUrl}/xss/generate`, {\n method: 'POST',\n headers: this.getHeaders(),\n body: JSON.stringify(context)\n });\n\n if (!response.ok) {\n throw new Error(`MCP service responded with status: ${response.status}`);\n }\n\n const data: MCPResponse = await response.json();\n return data.payloads || [];\n } catch (error) {\n console.error('MCP custom payload generation error:', error);\n return [];\n }\n }\n\n private getFallbackPayloads(type?: string): XSSPayload[] {\n const basicPayloads: XSSPayload[] = [\n {\n id: 'basic-1',\n payload: '',\n type: 'reflected',\n description: 'Basic script tag injection',\n severity: 'medium'\n },\n {\n id: 'basic-2',\n payload: '\">',\n type: 'reflected',\n description: 'Script injection with quote escape',\n severity: 'medium'\n },\n {\n id: 'basic-3',\n payload: 'javascript:alert(\"XSS\")',\n type: 'reflected',\n description: 'JavaScript protocol injection',\n severity: 'medium'\n },\n {\n id: 'basic-4',\n payload: '

',\n type: 'reflected',\n description: 'Image tag with onerror event',\n severity: 'high'\n },\n {\n id: 'basic-5',\n payload: '