[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_111":112,"_113":114},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","cleitoncosta","name","payana-agent-os-submission-ready-backup-20260907","path","audits/oauth_authorization_acceptance_probe.ts","project",{"_22":48,"_11":12,"_35":49,"_50":-5,"_51":44,"_52":53,"_54":53,"_55":56,"_57":-5,"_58":59,"_60":61,"_62":34,"_63":-5,"_64":-5,"_65":38,"_66":67,"_68":69,"_70":71,"_72":73,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/cleitoncosta/payana-agent-os-submission-ready-backup-20260907/code/audits/oauth_authorization_acceptance_probe.ts","extension","id","a5efa07d-bf13-4ffd-99da-23004da6e341","oauth_authorization_acceptance_probe.ts","fileId","01a07e0c-4c3d-7799-899a-611eedc3b883","parentId","01a07e0c-4c3d-7799-899a-6e4f7d842e7f","branchId","7298105c-3d8e-4686-910b-22b22fd80057","branchVersion",1,"latest",true,"createdAt",["D",1788821130220],"version",0,"fileType","script","content","import { consumeAuthorizationState, createAuthorizationRequest } from \"../lib/agent_os_oauth.ts\";\n\nconst request = await createAuthorizationRequest();\nconst authUrl = new URL(request.url);\nlet result: Record = {};\ntry {\n const response = await fetch(authUrl, {\n method: \"GET\",\n redirect: \"manual\",\n headers: {\n Accept: \"text/html,application/xhtml+xml,application/json;q=0.9,*/*;q=0.8\",\n \"User-Agent\": \"PayAna-Agent-OS-OAuth-Acceptance-Probe/1.0\",\n },\n });\n const text = await response.text();\n const lower = text.toLowerCase();\n const locationRaw = response.headers.get(\"location\");\n let location: string | null = null;\n if (locationRaw) {\n try {\n const u = new URL(locationRaw, authUrl);\n location = `${u.origin}${u.pathname}`;\n } catch {\n location = \"UNPARSEABLE_REDIRECT\";\n }\n }\n const invalidClientLike = /invalid[_ -]?client|client[_ -]?metadata.*(invalid|failed)|client id.*(invalid|unknown)|redirect[_ -]?uri.*(invalid|mismatch)/i.test(text);\n const authSurfaceLike = /sign in|log in|login|authorize|authorization|consent|binance/i.test(text) || Boolean(location);\n const title = text.match(/]*>([^<]{0,200})<\\/title>/i)?.[1]?.replace(/\\s+/g, \" \").trim() ?? null;\n const visibleText = text\n .replace(//gi, \" \")\n .replace(//gi, \" \")\n .replace(/<[^>]+>/g, \" \")\n .replace(/ /g, \" \")\n .replace(/&/g, \"&\")\n .replace(/\\s+/g, \" \")\n .trim()\n .slice(0, 500);\n const transportReachable = response.status >= 200 && response.status < 400;\n const providerAcceptanceProven = (response.status === 200 || (response.status >= 300 && response.status < 400)) && !invalidClientLike && authSurfaceLike;\n const evidenceState = providerAcceptanceProven ? \"PASS\" : transportReachable && !invalidClientLike && authSurfaceLike ? \"PARTIAL\" : \"FAIL\";\n result = {\n pass: evidenceState !== \"FAIL\",\n evidenceState,\n providerAcceptanceProven,\n status: response.status,\n contentType: response.headers.get(\"content-type\"),\n redirect: location,\n invalidClientLike,\n authSurfaceLike,\n bodyLength: text.length,\n title,\n visibleText,\n bodyMarkers: {\n mentionsBinance: lower.includes(\"binance\"),\n mentionsLogin: lower.includes(\"login\") || lower.includes(\"log in\") || lower.includes(\"sign in\"),\n mentionsAuthorize: lower.includes(\"authorize\") || lower.includes(\"authorization\") || lower.includes(\"consent\"),\n },\n boundary: \"AUTHORIZATION_SURFACE_REACHABLE != CLIENT_METADATA_ACCEPTED != USER_AUTHORIZED_SESSION\",\n };\n} finally {\n await consumeAuthorizationState(request.state);\n}\nconsole.log(JSON.stringify(result));\nif (result.pass !== true) throw new Error(\"OAUTH_AUTHORIZATION_ACCEPTANCE_PROBE_FAIL\");\nexport default result;\n","deleted",false,"label",[47,24],"audits","0a9bf7c1-10e0-4a7a-9534-ee606ed07eef",["D",1788821130220],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","PayAna Track A submission-ready detached backup","imageUrl","userId","6cc24525-830b-4db3-9c9c-fd19fb50e91f","pinnedFileId","01a07e0c-4c3d-7799-899a-db3fba2b60fb","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","01a0773d-9d6b-7580-a53a-683363c351c8","tursoName","0a9bf7c110e04a7a9534ee606ed07eef","tursoHostname","0a9bf7c110e04a7a9534ee606ed07eef-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789521041830],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_110":106},"org",{"_9":10,"_103":104,"_105":106,"_58":59,"_107":108,"_109":44},"branch",{"_37":32,"_11":91,"_22":30,"_92":48,"_93":94,"_95":96,"_97":53,"_98":99,"_100":67,"_101":12,"_102":10},"isOwned","main","projectId","forkedBranchId","182c3c5a-4b2f-4ec3-8cf6-a4632f8ec886","forkedBranchVersion",49,"forkedProjectPrivacy","forkedProjectId","71ad8a44-f36c-41e9-a978-0707deb4f71b","forkedProjectOrgId","projectName","userHandle","displayName","Cleiton Costa","avatar","https://lh3.googleusercontent.com/a/ACg8ocIgWisWQiXts_2fy5iRiRgl8A6c7Ef94eqE3ur-4mlyUrpCBmQ=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_84":-5,"_144":145,"_146":147,"_148":149,"_150":44,"_151":44,"_152":44,"_153":34,"_154":-5,"_155":-7,"_156":-7,"_157":38,"_158":44,"_159":44,"_160":-5,"_161":44,"_162":44,"_163":44,"_164":-5},"ENV",{"_115":116,"_117":118,"_119":91,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139,"_140":141,"_142":143},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]