[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_105":106,"_107":108},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","mosadek","name","brain-chatgpt-admission-canary-v1","path","main.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":42,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/mosadek/brain-chatgpt-admission-canary-v1/code/main.ts","extension","id","a1be2899-0063-4d47-a169-2f4a465f8b32","fileId","01a08279-ff90-7328-a817-bbb2131ded40","parentId","branchId","66f13ddf-4ddf-4f56-b304-b2f5408bdd74","branchVersion",20,"latest",true,"createdAt",["D",1788898048541],"version",9,"fileType","http","content","import {\n createMcpHandler,\n McpServer,\n} from \"npm:@modelcontextprotocol/server@2\";\nimport * as z from \"npm:zod@4/v4\";\nimport {\n createLocalJWKSet,\n decodeProtectedHeader,\n jwtVerify,\n} from \"npm:jose@6\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst CHATGPT_CLIENT_ID = \"https://chatgpt.com/oauth/client.json\";\nconst CHATGPT_REDIRECT_URI = \"https://chatgpt.com/connector_platform_oauth_redirect\";\nconst CHATGPT_JWKS = new URL(\"https://chatgpt.com/oauth/jwks.json\");\nconst PROJECT = \"mosadek/project-brain-live-v1-durable\";\nconst SCOPE = \"brain.admission.observe\";\nconst CHALLENGE_TTL_MS = 5 * 60_000;\nconst CODE_TTL_MS = 5 * 60_000;\nconst TOKEN_TTL_MS = 2 * 60_000;\nconst ASSERTION_MAX_LIFETIME_MS = 5 * 60_000;\nconst enc = new TextEncoder();\n\nfunction origin(req: Request) {\n return new URL(req.url).origin;\n}\n\nfunction json(data: unknown, status = 200, headers: HeadersInit = {}) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", ...headers },\n });\n}\n\nfunction manualRedirect(location: string) {\n return new Response(null, { status: 302, headers: { location } });\n}\n\nfunction b64url(bytes: Uint8Array) {\n let s = \"\";\n for (const b of bytes) s += String.fromCharCode(b);\n return btoa(s).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/g, \"\");\n}\n\nfunction randomToken(bytes = 32) {\n const v = new Uint8Array(bytes);\n crypto.getRandomValues(v);\n return b64url(v);\n}\n\nasync function sha256Text(s: string) {\n const d = await crypto.subtle.digest(\"SHA-256\", enc.encode(s));\n return [...new Uint8Array(d)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction canon(x: any): string {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canon).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map((k) => JSON.stringify(k) + \":\" + canon(x[k])).join(\",\") + \"}\";\n}\n\nfunction exactKeys(x: any, allowed: string[]) {\n if (!x || typeof x !== \"object\" || Array.isArray(x)) return false;\n const got = Object.keys(x).sort();\n const want = [...allowed].sort();\n return got.length === want.length && got.every((v, i) => v === want[i]);\n}\n\nfunction cleanString(v: unknown, max = 512) {\n return typeof v === \"string\" && v.length > 0 && v.length <= max && v.trim() === v && !/[\\u0000-\\u001f\\u007f]/.test(v);\n}\n\nasync function initDb() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS auth_codes (\n code_hash TEXT PRIMARY KEY,\n client_id TEXT NOT NULL,\n redirect_uri TEXT NOT NULL,\n code_challenge TEXT NOT NULL,\n resource TEXT NOT NULL,\n scope TEXT NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0,\n created_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS assertion_jtis (\n jti_hash TEXT PRIMARY KEY,\n assertion_exp INTEGER NOT NULL,\n created_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS access_tokens (\n token_hash TEXT PRIMARY KEY,\n client_id TEXT NOT NULL,\n assertion_jti_hash TEXT NOT NULL,\n assertion_kid TEXT NOT NULL,\n assertion_sha256 TEXT,\n scope TEXT NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0,\n created_at INTEGER NOT NULL\n )`);\n try {\n await sqlite.execute(\"ALTER TABLE access_tokens ADD COLUMN used INTEGER NOT NULL DEFAULT 0\");\n } catch {\n // Existing canary DB may already have the column.\n }\n try { await sqlite.execute(\"ALTER TABLE access_tokens ADD COLUMN assertion_sha256 TEXT\"); } catch {}\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS verified_client_assertions (\n jti_hash TEXT PRIMARY KEY,\n assertion_sha256 TEXT NOT NULL UNIQUE,\n assertion_jwt TEXT NOT NULL,\n jwk_json TEXT NOT NULL,\n kid TEXT NOT NULL,\n issuer TEXT NOT NULL,\n subject TEXT NOT NULL,\n audience TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n issued_at INTEGER NOT NULL,\n expires_at INTEGER NOT NULL,\n verified_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS admission_challenges (\n challenge_sha256 TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n requested_agent_id TEXT NOT NULL,\n requested_workstream TEXT NOT NULL,\n requested_capabilities_json TEXT NOT NULL,\n issued_at INTEGER NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS observations (\n observation_id TEXT PRIMARY KEY,\n project TEXT NOT NULL DEFAULT 'mosadek/project-brain-live-v1-durable',\n session_ref TEXT NOT NULL,\n subject_ref TEXT,\n organization_ref TEXT,\n token_hash TEXT NOT NULL,\n assertion_jti_hash TEXT NOT NULL,\n assertion_kid TEXT NOT NULL,\n client_assertion_sha256 TEXT,\n request_hash TEXT NOT NULL UNIQUE,\n challenge_sha256 TEXT,\n challenge_issued_at INTEGER,\n challenge_expires_at INTEGER,\n requested_agent_id TEXT,\n requested_workstream TEXT,\n requested_capabilities_json TEXT NOT NULL,\n observed_at INTEGER NOT NULL,\n expires_at INTEGER NOT NULL\n )`);\n for (const migration of [\n \"ALTER TABLE observations ADD COLUMN project TEXT NOT NULL DEFAULT 'mosadek/project-brain-live-v1-durable'\",\n \"ALTER TABLE observations ADD COLUMN challenge_issued_at INTEGER\",\n \"ALTER TABLE observations ADD COLUMN challenge_expires_at INTEGER\",\n \"ALTER TABLE observations ADD COLUMN client_assertion_sha256 TEXT\",\n ]) {\n try { await sqlite.execute(migration); } catch {}\n }\n}\n\nasync function cleanup() {\n const n = Date.now();\n await sqlite.execute({ sql: \"DELETE FROM auth_codes WHERE expires_at < ?\", args: [n - 60_000] });\n await sqlite.execute({ sql: \"DELETE FROM assertion_jtis WHERE assertion_exp < ?\", args: [n - 60_000] });\n await sqlite.execute({ sql: \"DELETE FROM access_tokens WHERE expires_at < ?\", args: [n - 60_000] });\n await sqlite.execute({ sql: \"DELETE FROM admission_challenges WHERE expires_at < ?\", args: [n - 60_000] });\n}\n\nfunction oauthError(req: Request, code: string, description: string, status = 400) {\n return json({ error: code, error_description: description, iss: origin(req) }, status, {\n \"cache-control\": \"no-store\",\n pragma: \"no-cache\",\n });\n}\n\nfunction resourceMetadata(req: Request) {\n const o = origin(req);\n return {\n resource: o,\n authorization_servers: [o],\n scopes_supported: [SCOPE],\n bearer_methods_supported: [\"header\"],\n };\n}\n\nfunction authServerMetadata(req: Request) {\n const o = origin(req);\n return {\n issuer: o,\n authorization_endpoint: `${o}/authorize`,\n token_endpoint: `${o}/token`,\n scopes_supported: [SCOPE],\n response_types_supported: [\"code\"],\n grant_types_supported: [\"authorization_code\"],\n code_challenge_methods_supported: [\"S256\"],\n token_endpoint_auth_methods_supported: [\"private_key_jwt\"],\n token_endpoint_auth_signing_alg_values_supported: [\"RS256\"],\n client_id_metadata_document_supported: true,\n authorization_response_iss_parameter_supported: true,\n };\n}\n\nasync function authorize(req: Request) {\n const u = new URL(req.url);\n const o = u.origin;\n const q = u.searchParams;\n const clientId = q.get(\"client_id\") || \"\";\n const redirectUri = q.get(\"redirect_uri\") || \"\";\n const responseType = q.get(\"response_type\") || \"\";\n const resource = q.get(\"resource\") || \"\";\n const scope = q.get(\"scope\") || \"\";\n const state = q.get(\"state\");\n const challenge = q.get(\"code_challenge\") || \"\";\n const challengeMethod = q.get(\"code_challenge_method\") || \"\";\n\n if (clientId !== CHATGPT_CLIENT_ID) return oauthError(req, \"unauthorized_client\", \"Only the stable ChatGPT CIMD client is accepted.\");\n if (redirectUri !== CHATGPT_REDIRECT_URI) return oauthError(req, \"invalid_request\", \"redirect_uri mismatch.\");\n if (responseType !== \"code\") return oauthError(req, \"unsupported_response_type\", \"Only authorization_code is supported.\");\n if (resource !== o) return oauthError(req, \"invalid_target\", \"resource must exactly match this MCP origin.\");\n if (!scope.split(/\\s+/).includes(SCOPE)) return oauthError(req, \"invalid_scope\", \"Required admission scope missing.\");\n if (challengeMethod !== \"S256\" || !/^[A-Za-z0-9_-]{43,128}$/.test(challenge)) {\n return oauthError(req, \"invalid_request\", \"PKCE S256 challenge required.\");\n }\n\n const rawCode = randomToken(32);\n const codeHash = await sha256Text(rawCode);\n const n = Date.now();\n await sqlite.execute({\n sql: `INSERT INTO auth_codes\n (code_hash,client_id,redirect_uri,code_challenge,resource,scope,expires_at,used,created_at)\n VALUES(?,?,?,?,?,?,?,0,?)`,\n args: [codeHash, clientId, redirectUri, challenge, resource, scope, n + CODE_TTL_MS, n],\n });\n\n const back = new URL(redirectUri);\n back.searchParams.set(\"code\", rawCode);\n if (state !== null) back.searchParams.set(\"state\", state);\n back.searchParams.set(\"iss\", o);\n return manualRedirect(back.toString());\n}\n\nasync function verifyClientAssertion(assertion: string, tokenEndpoint: string) {\n let header: any;\n try {\n header = decodeProtectedHeader(assertion);\n } catch {\n throw new Error(\"CLIENT_ASSERTION_HEADER_INVALID\");\n }\n if (header.alg !== \"RS256\" || typeof header.kid !== \"string\" || !header.kid) {\n throw new Error(\"CLIENT_ASSERTION_HEADER_INVALID\");\n }\n\n let jwks: any, matchedJwk: any, verified: any;\n try {\n const jr = await fetch(CHATGPT_JWKS, { headers: { accept: \"application/json\" } });\n if (!jr.ok) throw new Error(\"JWKS_FETCH_FAILED\");\n jwks = await jr.json();\n if (!jwks || !Array.isArray(jwks.keys)) throw new Error(\"JWKS_SHAPE_INVALID\");\n matchedJwk = jwks.keys.find((k:any) =>\n k && k.kid === header.kid && k.kty === \"RSA\" && k.alg === \"RS256\" && k.use === \"sig\"\n );\n if (!matchedJwk) throw new Error(\"JWKS_KID_NOT_FOUND\");\n const localJwks = createLocalJWKSet({ keys: [matchedJwk] });\n verified = await jwtVerify(assertion, localJwks, {\n algorithms: [\"RS256\"],\n issuer: CHATGPT_CLIENT_ID,\n subject: CHATGPT_CLIENT_ID,\n audience: tokenEndpoint,\n clockTolerance: 5,\n });\n } catch {\n throw new Error(\"CLIENT_ASSERTION_SIGNATURE_OR_CLAIMS_INVALID\");\n }\n\n const p: any = verified.payload;\n if (typeof p.jti !== \"string\" || !p.jti) throw new Error(\"CLIENT_ASSERTION_JTI_REQUIRED\");\n if (!Number.isFinite(p.iat) || !Number.isFinite(p.exp)) throw new Error(\"CLIENT_ASSERTION_TIME_REQUIRED\");\n const issued = Number(p.iat) * 1000;\n const expires = Number(p.exp) * 1000;\n const n = Date.now();\n if (issued > n + 10_000 || expires <= n || expires <= issued || expires - issued > ASSERTION_MAX_LIFETIME_MS) {\n throw new Error(\"CLIENT_ASSERTION_TIME_INVALID\");\n }\n return {\n payload: p,\n kid: header.kid,\n jti: p.jti,\n expMs: expires,\n issuedMs: issued,\n assertionSha256: await sha256Text(assertion),\n assertionJwt: assertion,\n jwkJson: canon(matchedJwk),\n };\n}\n\nasync function token(req: Request) {\n if (req.method !== \"POST\") return oauthError(req, \"invalid_request\", \"POST required.\", 405);\n const ct = req.headers.get(\"content-type\") || \"\";\n if (!ct.includes(\"application/x-www-form-urlencoded\")) return oauthError(req, \"invalid_request\", \"form encoding required.\");\n const form = new URLSearchParams(await req.text());\n const grantType = form.get(\"grant_type\") || \"\";\n const code = form.get(\"code\") || \"\";\n const redirectUri = form.get(\"redirect_uri\") || \"\";\n const clientId = form.get(\"client_id\") || \"\";\n const verifier = form.get(\"code_verifier\") || \"\";\n const resource = form.get(\"resource\") || \"\";\n const assertionType = form.get(\"client_assertion_type\") || \"\";\n const assertion = form.get(\"client_assertion\") || \"\";\n const o = origin(req);\n const tokenEndpoint = `${o}/token`;\n\n if (grantType !== \"authorization_code\") return oauthError(req, \"unsupported_grant_type\", \"authorization_code required.\");\n if (clientId !== CHATGPT_CLIENT_ID) return oauthError(req, \"invalid_client\", \"Stable ChatGPT CIMD client_id required.\", 401);\n if (redirectUri !== CHATGPT_REDIRECT_URI) return oauthError(req, \"invalid_grant\", \"redirect_uri mismatch.\");\n if (resource !== o) return oauthError(req, \"invalid_target\", \"resource mismatch.\");\n if (!code || !verifier) return oauthError(req, \"invalid_grant\", \"code and code_verifier required.\");\n if (assertionType !== \"urn:ietf:params:oauth:client-assertion-type:jwt-bearer\" || !assertion) {\n return oauthError(req, \"invalid_client\", \"private_key_jwt client assertion required.\", 401);\n }\n\n let av: { payload: any; kid: string; jti: string; expMs: number; issuedMs: number; assertionSha256: string; assertionJwt: string; jwkJson: string };\n try {\n av = await verifyClientAssertion(assertion, tokenEndpoint);\n } catch (e) {\n return oauthError(req, \"invalid_client\", e instanceof Error ? e.message : \"invalid assertion\", 401);\n }\n\n const codeHash = await sha256Text(code);\n const rows: any = await sqlite.execute({\n sql: \"SELECT * FROM auth_codes WHERE code_hash=? LIMIT 1\",\n args: [codeHash],\n });\n const row: any = rows.rows?.[0];\n const n = Date.now();\n if (!row || Number(row.used) !== 0 || Number(row.expires_at) <= n) return oauthError(req, \"invalid_grant\", \"code invalid, expired, or already used.\");\n if (String(row.client_id) !== clientId || String(row.redirect_uri) !== redirectUri || String(row.resource) !== resource) {\n return oauthError(req, \"invalid_grant\", \"authorization code binding mismatch.\");\n }\n\n const derivedChallenge = b64url(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", enc.encode(verifier))));\n if (derivedChallenge !== String(row.code_challenge)) return oauthError(req, \"invalid_grant\", \"PKCE verification failed.\");\n\n const jtiHash = await sha256Text(av.jti);\n try {\n await sqlite.execute({\n sql: \"INSERT INTO assertion_jtis(jti_hash,assertion_exp,created_at) VALUES(?,?,?)\",\n args: [jtiHash, av.expMs, n],\n });\n } catch {\n return oauthError(req, \"invalid_client\", \"client assertion replay rejected.\", 401);\n }\n\n const consume: any = await sqlite.execute({\n sql: \"UPDATE auth_codes SET used=1 WHERE code_hash=? AND used=0 AND expires_at>?\",\n args: [codeHash, n],\n });\n if (Number(consume.rowsAffected || 0) !== 1) return oauthError(req, \"invalid_grant\", \"authorization code replay rejected.\");\n\n const rawToken = randomToken(32);\n const tokenHash = await sha256Text(rawToken);\n await sqlite.execute({\n sql: `INSERT INTO verified_client_assertions\n (jti_hash,assertion_sha256,assertion_jwt,jwk_json,kid,issuer,subject,audience,payload_json,issued_at,expires_at,verified_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[\n jtiHash,av.assertionSha256,av.assertionJwt,av.jwkJson,av.kid,CHATGPT_CLIENT_ID,CHATGPT_CLIENT_ID,\n tokenEndpoint,canon(av.payload),av.issuedMs,av.expMs,n,\n ],\n });\n await sqlite.execute({\n sql: `INSERT INTO access_tokens\n (token_hash,client_id,assertion_jti_hash,assertion_kid,assertion_sha256,scope,expires_at,used,created_at)\n VALUES(?,?,?,?,?,?,?,0,?)`,\n args: [tokenHash, clientId, jtiHash, av.kid, av.assertionSha256, String(row.scope), n + TOKEN_TTL_MS, n],\n });\n\n return json({\n access_token: rawToken,\n token_type: \"Bearer\",\n expires_in: Math.floor(TOKEN_TTL_MS / 1000),\n scope: String(row.scope),\n }, 200, { \"cache-control\": \"no-store\", pragma: \"no-cache\" });\n}\n\nasync function consumeBearer(req: Request) {\n const h = req.headers.get(\"authorization\") || \"\";\n const m = /^Bearer\\s+(.+)$/i.exec(h);\n if (!m) return null;\n const tokenHash = await sha256Text(m[1]);\n const r: any = await sqlite.execute({\n sql: \"UPDATE access_tokens SET used=1 WHERE token_hash=? AND expires_at>? AND used=0 RETURNING *\",\n args: [tokenHash, Date.now()],\n });\n return r.rows?.[0] ? { ...r.rows[0], token_hash: tokenHash } : null;\n}\n\nasync function issueChallenge(args: any) {\n const caps = [...new Set((args.requested_capabilities || []).map(String))].sort();\n const n = Date.now();\n const challengeSha256 = await sha256Text(PROJECT + \"\\0\" + randomToken(32));\n await sqlite.execute({\n sql: `INSERT INTO admission_challenges\n (challenge_sha256,project,requested_agent_id,requested_workstream,requested_capabilities_json,issued_at,expires_at,used)\n VALUES(?,?,?,?,?,?,?,0)`,\n args:[\n challengeSha256,PROJECT,args.requested_agent_id,args.requested_workstream,canon(caps),n,n+CHALLENGE_TTL_MS,\n ],\n });\n return {\n content:[{type:\"text\",text:\"Fresh Project Brain admission challenge issued. It is candidate-only and grants no authority.\"}],\n structuredContent:{\n schema:\"PROJECT_BRAIN_ADMISSION_CHALLENGE_V1\",\n project:PROJECT,\n challenge_sha256:challengeSha256,\n requested_agent_id:args.requested_agent_id,\n requested_workstream:args.requested_workstream,\n requested_capabilities:caps,\n issued_at_ms:n,\n expires_at_ms:n+CHALLENGE_TTL_MS,\n p_real_increment:0,\n canonical_brain_mutation:false,\n },\n };\n}\n\nasync function consumeChallenge(args:any,caps:string[]) {\n const n=Date.now();\n const r:any=await sqlite.execute({\n sql:`UPDATE admission_challenges SET used=1\n WHERE challenge_sha256=? AND project=? AND requested_agent_id=? AND requested_workstream=?\n AND requested_capabilities_json=? AND issued_at<=? AND expires_at>? AND expires_at>issued_at\n AND (expires_at-issued_at)<=? AND used=0\n RETURNING issued_at,expires_at`,\n args:[\n String(args.challenge_sha256||\"\").toLowerCase(),PROJECT,args.requested_agent_id,args.requested_workstream,\n canon(caps),n,n,CHALLENGE_TTL_MS,\n ],\n });\n return r.rows?.[0] ?? null;\n}\n\nfunction mcpToolError(text: string, challenge?: string) {\n const result: any = {\n isError: true,\n content: [{ type: \"text\", text }],\n };\n if (challenge) result._meta = { \"mcp/www_authenticate\": [challenge] };\n return result;\n}\n\nasync function handleAttestTool(args: any, ctx: any) {\n const req: Request | undefined = ctx?.http?.req;\n if (!req) return mcpToolError(\"HTTP transport required for host-authenticated admission.\");\n const o = origin(req);\n const resourceMetadataUrl = `${o}/.well-known/oauth-protected-resource`;\n const auth = await consumeBearer(req);\n if (!auth) {\n return mcpToolError(\n \"OAuth bearer token required.\",\n `Bearer resource_metadata=\"${resourceMetadataUrl}\", scope=\"${SCOPE}\", error=\"invalid_token\", error_description=\"OpenAI-authenticated linking is required to create a host/session observation\"`,\n );\n }\n if (!String(auth.scope).split(/\\s+/).includes(SCOPE)) return mcpToolError(\"Required scope missing.\");\n\n const challenge = String(args.challenge_sha256 || \"\").toLowerCase();\n const caps = [...new Set((args.requested_capabilities || []).map(String))].sort();\n\n // OpenAI client-supplied metadata is delivered in MCP request _meta. The\n // 2026-07-28 SDK validates/lifts its reserved MCP envelope before this\n // handler runs; non-reserved OpenAI keys remain available here.\n const meta: any = ctx?.mcpReq?._meta || {};\n const sessionRaw = meta[\"openai/session\"];\n const subjectRaw = meta[\"openai/subject\"];\n const orgRaw = meta[\"openai/organization\"];\n if (!cleanString(sessionRaw, 1024)) return mcpToolError(\"Host-provided openai/session metadata missing or invalid.\");\n if (subjectRaw !== undefined && !cleanString(subjectRaw, 1024)) return mcpToolError(\"openai/subject metadata invalid.\");\n if (orgRaw !== undefined && !cleanString(orgRaw, 1024)) return mcpToolError(\"openai/organization metadata invalid.\");\n\n const challengeRow = await consumeChallenge(args,caps);\n if (!challengeRow) return mcpToolError(\"Admission challenge is absent, stale, already used, or does not match the declared identity/workstream/capabilities.\");\n\n const sessionRef = await sha256Text(\"session\\0\" + sessionRaw);\n const subjectRef = subjectRaw === undefined ? null : await sha256Text(\"subject\\0\" + subjectRaw);\n const organizationRef = orgRaw === undefined ? null : await sha256Text(\"organization\\0\" + orgRaw);\n const requestCore = {\n project: PROJECT,\n session_ref: sessionRef,\n subject_ref: subjectRef,\n organization_ref: organizationRef,\n challenge_sha256: challenge,\n challenge_issued_at_ms: Number(challengeRow.issued_at),\n challenge_expires_at_ms: Number(challengeRow.expires_at),\n requested_agent_id: args.requested_agent_id,\n requested_workstream: args.requested_workstream,\n requested_capabilities: caps,\n assertion_jti_hash: String(auth.assertion_jti_hash),\n assertion_kid: String(auth.assertion_kid),\n client_assertion_sha256: String(auth.assertion_sha256 || \"\"),\n };\n const requestHash = await sha256Text(canon(requestCore));\n const observationId = \"obs_\" + requestHash.slice(0, 32);\n const n = Date.now();\n const expiresAt = Math.min(Number(auth.expires_at), Number(challengeRow.expires_at), n + 5 * 60_000);\n\n await sqlite.execute({\n sql: `INSERT INTO observations\n (observation_id,project,session_ref,subject_ref,organization_ref,token_hash,assertion_jti_hash,assertion_kid,client_assertion_sha256,request_hash,\n challenge_sha256,challenge_issued_at,challenge_expires_at,requested_agent_id,requested_workstream,requested_capabilities_json,observed_at,expires_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(request_hash) DO NOTHING`,\n args: [\n observationId, PROJECT, sessionRef, subjectRef, organizationRef, String(auth.token_hash), String(auth.assertion_jti_hash),\n String(auth.assertion_kid), String(auth.assertion_sha256 || \"\"), requestHash, challenge, Number(challengeRow.issued_at), Number(challengeRow.expires_at),\n args.requested_agent_id, args.requested_workstream, canon(caps), n, expiresAt,\n ],\n });\n\n const observation = {\n schema: \"CHATGPT_HOST_SESSION_ATTESTATION_OBSERVATION_V1\",\n project: PROJECT,\n classification: \"CANDIDATE_NONAUTHORITY_HOST_SESSION_OBSERVATION\",\n host_client: \"CHATGPT_CIMD_PRIVATE_KEY_JWT_VERIFIED\",\n session_ref: sessionRef,\n subject_ref: subjectRef,\n organization_ref: organizationRef,\n challenge_sha256: challenge,\n challenge_issued_at_ms: Number(challengeRow.issued_at),\n challenge_expires_at_ms: Number(challengeRow.expires_at),\n requested_agent_id: args.requested_agent_id,\n requested_workstream: args.requested_workstream,\n requested_capabilities: caps,\n assertion_jti_hash: String(auth.assertion_jti_hash),\n assertion_kid: String(auth.assertion_kid),\n client_assertion_sha256: String(auth.assertion_sha256 || \"\"),\n observation_id: observationId,\n request_hash: requestHash,\n observed_at_ms: n,\n expires_at_ms: expiresAt,\n p_real_increment: 0,\n canonical_brain_mutation: false,\n raw_session_persisted: false,\n raw_subject_persisted: false,\n raw_organization_persisted: false,\n };\n\n return {\n content: [{ type: \"text\", text: \"ChatGPT host/session observation created. Candidate only; no Brain authority or P_real increment.\" }],\n structuredContent: observation,\n };\n}\n\nconst challengeDescriptor: any = {\n title:\"Issue Project Brain admission challenge\",\n description:\"Issue a short-lived, project-bound challenge for the current requested logical identity, workstream, and capability declaration. This is candidate-only and grants no authority.\",\n inputSchema:z.object({\n requested_agent_id:z.string().min(1).max(256),\n requested_workstream:z.string().min(1).max(128),\n requested_capabilities:z.array(z.string().min(1).max(128)).max(128),\n }),\n outputSchema:z.object({\n schema:z.literal(\"PROJECT_BRAIN_ADMISSION_CHALLENGE_V1\"),\n project:z.literal(PROJECT),\n challenge_sha256:z.string().regex(/^[0-9a-f]{64}$/),\n requested_agent_id:z.string(),\n requested_workstream:z.string(),\n requested_capabilities:z.array(z.string()),\n issued_at_ms:z.number().int(),\n expires_at_ms:z.number().int(),\n p_real_increment:z.literal(0),\n canonical_brain_mutation:z.literal(false),\n }),\n annotations:{readOnlyHint:false,destructiveHint:false,openWorldHint:false,idempotentHint:false},\n securitySchemes:[{type:\"noauth\"}],\n _meta:{securitySchemes:[{type:\"noauth\"}]},\n};\n\nconst descriptor: any = {\n title: \"Project Brain session provenance canary\",\n description: \"Create a candidate-only Project Brain execution-incarnation observation bound to ChatGPT host-authenticated OAuth and host-provided session metadata. This does not grant Brain authority or increment P_real.\",\n inputSchema: z.object({\n challenge_sha256: z.string().regex(/^[0-9a-f]{64}$/),\n requested_agent_id: z.string().min(1).max(256),\n requested_workstream: z.string().min(1).max(128),\n requested_capabilities: z.array(z.string().min(1).max(128)).max(128),\n }),\n outputSchema: z.object({\n schema: z.literal(\"CHATGPT_HOST_SESSION_ATTESTATION_OBSERVATION_V1\"),\n project: z.literal(PROJECT),\n classification: z.literal(\"CANDIDATE_NONAUTHORITY_HOST_SESSION_OBSERVATION\"),\n host_client: z.literal(\"CHATGPT_CIMD_PRIVATE_KEY_JWT_VERIFIED\"),\n session_ref: z.string().regex(/^[0-9a-f]{64}$/),\n subject_ref: z.string().regex(/^[0-9a-f]{64}$/).nullable(),\n organization_ref: z.string().regex(/^[0-9a-f]{64}$/).nullable(),\n challenge_sha256: z.string().regex(/^[0-9a-f]{64}$/),\n challenge_issued_at_ms: z.number().int(),\n challenge_expires_at_ms: z.number().int(),\n requested_agent_id: z.string(),\n requested_workstream: z.string(),\n requested_capabilities: z.array(z.string()),\n assertion_jti_hash: z.string().regex(/^[0-9a-f]{64}$/),\n assertion_kid: z.string(),\n client_assertion_sha256: z.string().regex(/^[0-9a-f]{64}$/),\n observation_id: z.string(),\n request_hash: z.string().regex(/^[0-9a-f]{64}$/),\n observed_at_ms: z.number().int(),\n expires_at_ms: z.number().int(),\n p_real_increment: z.literal(0),\n canonical_brain_mutation: z.literal(false),\n raw_session_persisted: z.literal(false),\n raw_subject_persisted: z.literal(false),\n raw_organization_persisted: z.literal(false),\n }),\n annotations: {\n readOnlyHint: false,\n destructiveHint: false,\n openWorldHint: false,\n idempotentHint: true,\n },\n securitySchemes: [{ type: \"oauth2\", scopes: [SCOPE] }],\n _meta: { securitySchemes: [{ type: \"oauth2\", scopes: [SCOPE] }] },\n};\n\nconst mcpHandler = createMcpHandler(() => {\n const server = new McpServer({ name: \"project-brain-chatgpt-admission-canary\", version: \"1.2.0\" });\n server.registerTool(\"brain-admission-challenge\", challengeDescriptor, async (args:any) => issueChallenge(args));\n server.registerTool(\"brain-session-attest\", descriptor, async (args: any, ctx: any) => handleAttestTool(args, ctx));\n return server;\n});\n\nawait initDb();\n\nexport default async function handler(req: Request): Promise {\n await cleanup();\n const u = new URL(req.url);\n\n if (req.method === \"GET\" && u.pathname === \"/.well-known/oauth-protected-resource\") {\n return json(resourceMetadata(req), 200, { \"cache-control\": \"no-store\" });\n }\n if (req.method === \"GET\" && (u.pathname === \"/.well-known/oauth-authorization-server\" || u.pathname === \"/.well-known/openid-configuration\")) {\n return json(authServerMetadata(req), 200, { \"cache-control\": \"no-store\" });\n }\n if (u.pathname === \"/authorize\") return authorize(req);\n if (u.pathname === \"/token\") return token(req);\n if (req.method === \"GET\" && u.pathname === \"/health\") {\n return json({\n ok: true,\n schema: \"BRAIN_CHATGPT_ADMISSION_CANARY_HEALTH_V1\",\n authority: false,\n p_real_increment: 0,\n required_client_id: CHATGPT_CLIENT_ID,\n token_endpoint_auth: \"private_key_jwt\",\n required_tool_scope: SCOPE,\n project: PROJECT,\n challenge_ttl_ms: CHALLENGE_TTL_MS,\n raw_host_metadata_persisted: false,\n admission_bearer_semantics: \"single_use\",\n access_token_ttl_ms: TOKEN_TTL_MS,\n preserved_openai_assertion_receipt: true,\n independent_receipt_reverify_file: \"verify_live_receipts.ts\",\n });\n }\n\n return mcpHandler.fetch(req);\n}\n","deleted",false,"label",[14],"0805b07e-7699-4af9-bece-c6bfcf298903",["D",1788895428429],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","ChatGPT host/session provenance admission canary","imageUrl","userId","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","0805b07e76994af9becec6bfcf298903","tursoHostname","0805b07e76994af9becec6bfcf298903-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789504908499],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_104":100},"org",{"_9":10,"_97":98,"_99":100,"_55":56,"_101":102,"_103":42},"branch",{"_35":30,"_11":88,"_22":28,"_89":45,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":12,"_96":10},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_138":139,"_140":141,"_142":143,"_144":42,"_145":42,"_146":42,"_147":32,"_148":-5,"_149":-7,"_150":-7,"_151":62,"_152":42,"_153":42,"_154":-5,"_155":42,"_156":42,"_157":42,"_158":-5},"ENV",{"_109":110,"_111":112,"_113":88,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]