[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_111":112,"_113":114},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","cleitoncosta","name","payana-agent-os-rc1-backup-20260907","path","audits/oauth_authorization_acceptance_probe.ts","project",{"_22":48,"_11":12,"_35":49,"_50":-5,"_51":44,"_52":53,"_54":53,"_55":56,"_57":-5,"_58":59,"_60":61,"_62":34,"_63":-5,"_64":-5,"_65":38,"_66":67,"_68":69,"_70":71,"_72":73,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/cleitoncosta/payana-agent-os-rc1-backup-20260907/code/audits/oauth_authorization_acceptance_probe.ts","extension","id","77add88e-625d-4b99-9e77-7f164c0a893c","oauth_authorization_acceptance_probe.ts","fileId","01a07e00-e39c-71b0-8ceb-60c0b1f3bcdf","parentId","01a07e00-e39c-71b0-8ceb-6d67b3dec9de","branchId","0ddaf74c-988d-44be-8506-fe4865cb31a1","branchVersion",1,"latest",true,"createdAt",["D",1788820382412],"version",0,"fileType","script","content","import { consumeAuthorizationState, createAuthorizationRequest } from \"../lib/agent_os_oauth.ts\";\n\nconst request = await createAuthorizationRequest();\nconst authUrl = new URL(request.url);\nlet result: Record = {};\ntry {\n const response = await fetch(authUrl, {\n method: \"GET\",\n redirect: \"manual\",\n headers: {\n Accept: \"text/html,application/xhtml+xml,application/json;q=0.9,*/*;q=0.8\",\n \"User-Agent\": \"PayAna-Agent-OS-OAuth-Acceptance-Probe/1.0\",\n },\n });\n const text = await response.text();\n const lower = text.toLowerCase();\n const locationRaw = response.headers.get(\"location\");\n let location: string | null = null;\n if (locationRaw) {\n try {\n const u = new URL(locationRaw, authUrl);\n location = `${u.origin}${u.pathname}`;\n } catch {\n location = \"UNPARSEABLE_REDIRECT\";\n }\n }\n const invalidClientLike = /invalid[_ -]?client|client[_ -]?metadata.*(invalid|failed)|client id.*(invalid|unknown)|redirect[_ -]?uri.*(invalid|mismatch)/i.test(text);\n const authSurfaceLike = /sign in|log in|login|authorize|authorization|consent|binance/i.test(text) || Boolean(location);\n const title = text.match(/]*>([^<]{0,200})<\\/title>/i)?.[1]?.replace(/\\s+/g, \" \").trim() ?? null;\n const visibleText = text\n .replace(//gi, \" \")\n .replace(//gi, \" \")\n .replace(/<[^>]+>/g, \" \")\n .replace(/ /g, \" \")\n .replace(/&/g, \"&\")\n .replace(/\\s+/g, \" \")\n .trim()\n .slice(0, 500);\n const transportReachable = response.status >= 200 && response.status < 400;\n const providerAcceptanceProven = (response.status === 200 || (response.status >= 300 && response.status < 400)) && !invalidClientLike && authSurfaceLike;\n const evidenceState = providerAcceptanceProven ? \"PASS\" : transportReachable && !invalidClientLike && authSurfaceLike ? \"PARTIAL\" : \"FAIL\";\n result = {\n pass: evidenceState !== \"FAIL\",\n evidenceState,\n providerAcceptanceProven,\n status: response.status,\n contentType: response.headers.get(\"content-type\"),\n redirect: location,\n invalidClientLike,\n authSurfaceLike,\n bodyLength: text.length,\n title,\n visibleText,\n bodyMarkers: {\n mentionsBinance: lower.includes(\"binance\"),\n mentionsLogin: lower.includes(\"login\") || lower.includes(\"log in\") || lower.includes(\"sign in\"),\n mentionsAuthorize: lower.includes(\"authorize\") || lower.includes(\"authorization\") || lower.includes(\"consent\"),\n },\n boundary: \"AUTHORIZATION_SURFACE_REACHABLE != CLIENT_METADATA_ACCEPTED != USER_AUTHORIZED_SESSION\",\n };\n} finally {\n await consumeAuthorizationState(request.state);\n}\nconsole.log(JSON.stringify(result));\nif (result.pass !== true) throw new Error(\"OAUTH_AUTHORIZATION_ACCEPTANCE_PROBE_FAIL\");\nexport default result;\n","deleted",false,"label",[47,24],"audits","dd76f3ea-9fc4-4246-b008-5e2648b67faa",["D",1788820382412],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Detached PayAna Binance Agent OS 1.2 RC1 backup","imageUrl","userId","6cc24525-830b-4db3-9c9c-fd19fb50e91f","pinnedFileId","01a07e00-e39c-71b0-8ceb-d52b43d97997","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","01a0773d-9d6b-7580-a53a-683363c351c8","tursoName","dd76f3ea9fc44246b0085e2648b67faa","tursoHostname","dd76f3ea9fc44246b0085e2648b67faa-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789516253896],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_110":106},"org",{"_9":10,"_103":104,"_105":106,"_58":59,"_107":108,"_109":44},"branch",{"_37":32,"_11":91,"_22":30,"_92":48,"_93":94,"_95":96,"_97":53,"_98":99,"_100":67,"_101":12,"_102":10},"isOwned","main","projectId","forkedBranchId","182c3c5a-4b2f-4ec3-8cf6-a4632f8ec886","forkedBranchVersion",45,"forkedProjectPrivacy","forkedProjectId","71ad8a44-f36c-41e9-a978-0707deb4f71b","forkedProjectOrgId","projectName","userHandle","displayName","Cleiton Costa","avatar","https://lh3.googleusercontent.com/a/ACg8ocIgWisWQiXts_2fy5iRiRgl8A6c7Ef94eqE3ur-4mlyUrpCBmQ=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_84":-5,"_144":145,"_146":147,"_148":149,"_150":44,"_151":44,"_152":44,"_153":34,"_154":-5,"_155":-7,"_156":-7,"_157":38,"_158":44,"_159":44,"_160":-5,"_161":44,"_162":44,"_163":44,"_164":-5},"ENV",{"_115":116,"_117":118,"_119":91,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139,"_140":141,"_142":143},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]