[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_110":111,"_112":113},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","cleitoncosta","name","payana-binance-agent-os","path","audits/oauth_authorization_acceptance_probe.ts","project",{"_22":48,"_11":12,"_35":49,"_50":-5,"_51":44,"_52":53,"_54":53,"_55":56,"_57":-5,"_58":59,"_60":61,"_62":34,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":70,"_71":72,"_73":74,"_75":-5,"_76":77,"_78":77,"_79":80,"_81":80,"_82":80,"_83":77,"_84":77,"_85":86,"_87":88,"_89":90,"_91":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/cleitoncosta/payana-binance-agent-os/code/audits/oauth_authorization_acceptance_probe.ts","extension","id","02ba7e33-d1e2-4064-8aa6-b626cdb05b56","oauth_authorization_acceptance_probe.ts","fileId","fec5147a-ab09-11f1-9d49-1607ee4eb77e","parentId","01a07da4-bf09-76f4-833d-91948927bf7b","branchId","182c3c5a-4b2f-4ec3-8cf6-a4632f8ec886","branchVersion",11,"latest",true,"createdAt",["D",1788819568314],"version",1,"fileType","script","content","import { consumeAuthorizationState, createAuthorizationRequest } from \"../lib/agent_os_oauth.ts\";\n\nconst request = await createAuthorizationRequest();\nconst authUrl = new URL(request.url);\nlet result: Record = {};\ntry {\n const response = await fetch(authUrl, {\n method: \"GET\",\n redirect: \"manual\",\n headers: {\n Accept: \"text/html,application/xhtml+xml,application/json;q=0.9,*/*;q=0.8\",\n \"User-Agent\": \"PayAna-Agent-OS-OAuth-Acceptance-Probe/1.0\",\n },\n });\n const text = await response.text();\n const lower = text.toLowerCase();\n const locationRaw = response.headers.get(\"location\");\n let location: string | null = null;\n if (locationRaw) {\n try {\n const u = new URL(locationRaw, authUrl);\n location = `${u.origin}${u.pathname}`;\n } catch {\n location = \"UNPARSEABLE_REDIRECT\";\n }\n }\n const invalidClientLike = /invalid[_ -]?client|client[_ -]?metadata.*(invalid|failed)|client id.*(invalid|unknown)|redirect[_ -]?uri.*(invalid|mismatch)/i.test(text);\n const authSurfaceLike = /sign in|log in|login|authorize|authorization|consent|binance/i.test(text) || Boolean(location);\n const title = text.match(/]*>([^<]{0,200})<\\/title>/i)?.[1]?.replace(/\\s+/g, \" \").trim() ?? null;\n const visibleText = text\n .replace(//gi, \" \")\n .replace(//gi, \" \")\n .replace(/<[^>]+>/g, \" \")\n .replace(/ /g, \" \")\n .replace(/&/g, \"&\")\n .replace(/\\s+/g, \" \")\n .trim()\n .slice(0, 500);\n const transportReachable = response.status >= 200 && response.status < 400;\n const providerAcceptanceProven = (response.status === 200 || (response.status >= 300 && response.status < 400)) && !invalidClientLike && authSurfaceLike;\n const evidenceState = providerAcceptanceProven ? \"PASS\" : transportReachable && !invalidClientLike && authSurfaceLike ? \"PARTIAL\" : \"FAIL\";\n result = {\n pass: evidenceState !== \"FAIL\",\n evidenceState,\n providerAcceptanceProven,\n status: response.status,\n contentType: response.headers.get(\"content-type\"),\n redirect: location,\n invalidClientLike,\n authSurfaceLike,\n bodyLength: text.length,\n title,\n visibleText,\n bodyMarkers: {\n mentionsBinance: lower.includes(\"binance\"),\n mentionsLogin: lower.includes(\"login\") || lower.includes(\"log in\") || lower.includes(\"sign in\"),\n mentionsAuthorize: lower.includes(\"authorize\") || lower.includes(\"authorization\") || lower.includes(\"consent\"),\n },\n boundary: \"AUTHORIZATION_SURFACE_REACHABLE != CLIENT_METADATA_ACCEPTED != USER_AUTHORIZED_SESSION\",\n };\n} finally {\n await consumeAuthorizationState(request.state);\n}\nconsole.log(JSON.stringify(result));\nif (result.pass !== true) throw new Error(\"OAUTH_AUTHORIZATION_ACCEPTANCE_PROBE_FAIL\");\nexport default result;\n","deleted",false,"label",[47,24],"audits","71ad8a44-f36c-41e9-a978-0707deb4f71b",["D",1788812694161],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","PayAna Falsifier Agent — evidence-first Binance market audit","imageUrl","userId","6cc24525-830b-4db3-9c9c-fd19fb50e91f","pinnedFileId","01a07d8b-9306-748f-a55c-5a7124e2c8be","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0773d-9d6b-7580-a53a-683363c351c8","tursoName","71ad8a44f36c41e9a9780707deb4f71b","tursoHostname","71ad8a44f36c41e9a9780707deb4f71b-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789509043237],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_109":105},"org",{"_9":10,"_102":103,"_104":105,"_58":59,"_106":107,"_108":44},"branch",{"_37":92,"_11":93,"_22":30,"_94":48,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":12,"_101":10},"isOwned",52,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Cleiton Costa","avatar","https://lh3.googleusercontent.com/a/ACg8ocIgWisWQiXts_2fy5iRiRgl8A6c7Ef94eqE3ur-4mlyUrpCBmQ=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_85":-5,"_143":144,"_145":146,"_147":148,"_149":44,"_150":44,"_151":44,"_152":34,"_153":-5,"_154":-7,"_155":-7,"_156":66,"_157":44,"_158":44,"_159":-5,"_160":44,"_161":44,"_162":44,"_163":-5},"ENV",{"_114":115,"_116":117,"_118":93,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138,"_139":140,"_141":142},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]