[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_103":104,"_105":106},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","sebas1","name","rumbo-crm-openai-staging","path","main.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":12,"_13":44},"permalink","https://www.val.town/x/sebas1/rumbo-crm-openai-staging/code/main.ts","extension","id","cf2ed326-1260-420e-8c6b-a94367e734f5","fileId","fbed6f64-acf7-11f1-b3b4-1607ee4eb77e","parentId","branchId","ceba545d-7cc1-405d-a0c7-d27e7e735161","branchVersion",124,"latest",true,"createdAt",["D",1789121684747],"version",10,"fileType","http","content","const SOURCE_SHA = \"9152f5a50de42be55508f0effed5ed09aee44c60\";\nconst PROTOCOL_VERSION = \"2025-06-18\";\nconst FALLBACK_PROTOCOL_VERSION = \"2025-03-26\";\nconst OPENAI_APPS_CHALLENGE_TOKEN = Deno.env.get(\"OPENAI_APPS_CHALLENGE_TOKEN\")?.trim() ?? \"\";\nconst PORTAL_LOGO_SVG = `\n`;\nconst ALLOWED_ORIGINS = new Set([\n \"https://chatgpt.com\",\n \"https://chat.openai.com\",\n \"https://platform.openai.com\",\n]);\nconst EXPOSED_TOOLS = [\n \"crm_get_service_readiness\",\n \"crm_prepare_note\",\n \"crm_prepare_lead_stage_change\",\n \"crm_prepare_outreach_draft\",\n] as const;\nconst PLANNED_UNEXPOSED_TOOLS = [\n \"crm_search_contacts\",\n \"crm_get_contact\",\n \"crm_search_leads\",\n \"crm_get_pipeline_summary\",\n \"crm_search_conversations\",\n \"crm_search_knowledge\",\n \"crm_get_analytics_summary\",\n] as const;\n\nconst boundedId = { type: \"string\", minLength: 1, maxLength: 200, pattern: \"\\\\S\" };\nconst boundedString = (maxLength: number) => ({ type: \"string\", minLength: 1, maxLength, pattern: \"\\\\S\" });\nconst reviewBase = {\n state: { type: \"string\", const: \"REVIEW_REQUIRED\" },\n side_effect: { type: \"boolean\", const: false },\n};\nconst annotations = { readOnlyHint: true, destructiveHint: false, openWorldHint: false };\n\nconst tools = [\n {\n name: \"crm_get_service_readiness\",\n title: \"Get CRM service readiness\",\n description: \"Returns bounded publication/runtime readiness metadata. It does not access customer records.\",\n inputSchema: { type: \"object\", properties: {}, additionalProperties: false },\n outputSchema: {\n type: \"object\",\n properties: {\n state: { type: \"string\", const: \"MCP_CONTRACT_ACTIVE_BOUNDED\" },\n customer_data_tools_exposed: { type: \"boolean\", const: false },\n mutating_tools_exposed: { type: \"boolean\", const: false },\n production_authority: { type: \"boolean\", const: false },\n submission_authority: { type: \"boolean\", const: false },\n },\n required: [\"state\", \"customer_data_tools_exposed\", \"mutating_tools_exposed\", \"production_authority\", \"submission_authority\"],\n additionalProperties: false,\n },\n annotations,\n },\n {\n name: \"crm_prepare_note\",\n title: \"Prepare CRM note\",\n description: \"Returns a reviewable note proposal only. It does not write the note to the CRM.\",\n inputSchema: { type: \"object\", properties: { workspace_id: boundedId, subject_id: boundedId, note: boundedString(4000) }, required: [\"workspace_id\", \"subject_id\", \"note\"], additionalProperties: false },\n outputSchema: { type: \"object\", properties: { kind: { type: \"string\", const: \"crm_note_proposal\" }, ...reviewBase, workspace_id: { type: \"string\" }, subject_id: { type: \"string\" }, note: { type: \"string\" } }, required: [\"kind\", \"state\", \"side_effect\", \"workspace_id\", \"subject_id\", \"note\"], additionalProperties: false },\n annotations,\n },\n {\n name: \"crm_prepare_lead_stage_change\",\n title: \"Prepare lead stage change\",\n description: \"Returns a reviewable stage-change proposal only. It performs no CRM mutation.\",\n inputSchema: { type: \"object\", properties: { workspace_id: boundedId, lead_id: boundedId, from_stage: boundedId, to_stage: boundedId, reason: { type: \"string\", maxLength: 1000 } }, required: [\"workspace_id\", \"lead_id\", \"from_stage\", \"to_stage\"], additionalProperties: false },\n outputSchema: { type: \"object\", properties: { kind: { type: \"string\", const: \"lead_stage_change_proposal\" }, ...reviewBase, workspace_id: { type: \"string\" }, lead_id: { type: \"string\" }, from_stage: { type: \"string\" }, to_stage: { type: \"string\" }, reason: { type: \"string\" } }, required: [\"kind\", \"state\", \"side_effect\", \"workspace_id\", \"lead_id\", \"from_stage\", \"to_stage\", \"reason\"], additionalProperties: false },\n annotations,\n },\n {\n name: \"crm_prepare_outreach_draft\",\n title: \"Prepare outreach draft\",\n description: \"Returns a reviewable outreach draft request artifact. It never sends a message.\",\n inputSchema: { type: \"object\", properties: { workspace_id: boundedId, lead_id: boundedId, channel: { type: \"string\", enum: [\"email\", \"sms\", \"whatsapp\", \"other\"] }, objective: boundedString(2000) }, required: [\"workspace_id\", \"lead_id\", \"channel\", \"objective\"], additionalProperties: false },\n outputSchema: { type: \"object\", properties: { kind: { type: \"string\", const: \"outreach_draft_request\" }, ...reviewBase, workspace_id: { type: \"string\" }, lead_id: { type: \"string\" }, channel: { type: \"string\", enum: [\"email\", \"sms\", \"whatsapp\", \"other\"] }, objective: { type: \"string\" }, send_authorized: { type: \"boolean\", const: false } }, required: [\"kind\", \"state\", \"side_effect\", \"workspace_id\", \"lead_id\", \"channel\", \"objective\", \"send_authorized\"], additionalProperties: false },\n annotations,\n },\n];\n\ntype RecordLike = Record;\nfunction asRecord(value: unknown): RecordLike | null { return value !== null && typeof value === \"object\" && !Array.isArray(value) ? value as RecordLike : null; }\nfunction rpcOk(id: unknown, result: unknown) { return { jsonrpc: \"2.0\", id: id ?? null, result }; }\nfunction rpcError(id: unknown, code: number, message: string, data?: unknown) { return { jsonrpc: \"2.0\", id: id ?? null, error: { code, message, ...(data === undefined ? {} : { data }) } }; }\nfunction exactArgs(value: unknown, allowed: string[]) {\n if (value === undefined) return {} as RecordLike;\n const args = asRecord(value);\n if (!args) throw new Error(\"invalid_arguments_object\");\n const allow = new Set(allowed);\n if (Object.keys(args).some((key) => !allow.has(key))) throw new Error(\"undeclared_argument\");\n return args;\n}\nfunction requiredString(args: RecordLike, key: string, max: number) {\n const value = args[key];\n if (typeof value !== \"string\" || !value.trim() || value.length > max) throw new Error(`invalid_${key}`);\n return value.trim();\n}\nfunction optionalString(args: RecordLike, key: string, max: number) {\n const value = args[key];\n if (value === undefined) return \"\";\n if (typeof value !== \"string\" || value.length > max) throw new Error(`invalid_${key}`);\n return value.trim();\n}\nfunction proposal(kind: string, body: RecordLike) {\n const structuredContent = { kind, state: \"REVIEW_REQUIRED\", side_effect: false, ...body };\n return { content: [{ type: \"text\", text: JSON.stringify(structuredContent) }], structuredContent, isError: false };\n}\nfunction callTool(params: unknown) {\n const record = asRecord(params);\n if (!record || typeof record.name !== \"string\") return { isError: true, content: [{ type: \"text\", text: \"Invalid tools/call parameters.\" }] };\n try {\n switch (record.name) {\n case \"crm_get_service_readiness\": {\n exactArgs(record.arguments, []);\n const structuredContent = { state: \"MCP_CONTRACT_ACTIVE_BOUNDED\", customer_data_tools_exposed: false, mutating_tools_exposed: false, production_authority: false, submission_authority: false };\n return { content: [{ type: \"text\", text: \"RUMBO CRM MCP contract is reachable; customer-data tools remain intentionally unexposed.\" }], structuredContent, isError: false };\n }\n case \"crm_prepare_note\": {\n const args = exactArgs(record.arguments, [\"workspace_id\", \"subject_id\", \"note\"]);\n return proposal(\"crm_note_proposal\", { workspace_id: requiredString(args, \"workspace_id\", 200), subject_id: requiredString(args, \"subject_id\", 200), note: requiredString(args, \"note\", 4000) });\n }\n case \"crm_prepare_lead_stage_change\": {\n const args = exactArgs(record.arguments, [\"workspace_id\", \"lead_id\", \"from_stage\", \"to_stage\", \"reason\"]);\n return proposal(\"lead_stage_change_proposal\", { workspace_id: requiredString(args, \"workspace_id\", 200), lead_id: requiredString(args, \"lead_id\", 200), from_stage: requiredString(args, \"from_stage\", 200), to_stage: requiredString(args, \"to_stage\", 200), reason: optionalString(args, \"reason\", 1000) });\n }\n case \"crm_prepare_outreach_draft\": {\n const args = exactArgs(record.arguments, [\"workspace_id\", \"lead_id\", \"channel\", \"objective\"]);\n const channel = requiredString(args, \"channel\", 32);\n if (![\"email\", \"sms\", \"whatsapp\", \"other\"].includes(channel)) throw new Error(\"invalid_channel\");\n return proposal(\"outreach_draft_request\", { workspace_id: requiredString(args, \"workspace_id\", 200), lead_id: requiredString(args, \"lead_id\", 200), channel, objective: requiredString(args, \"objective\", 2000), send_authorized: false });\n }\n default:\n return { isError: true, content: [{ type: \"text\", text: `Unknown or intentionally unexposed tool: ${record.name}` }] };\n }\n } catch (cause) {\n const message = cause instanceof Error ? cause.message : \"invalid_arguments\";\n return { isError: true, content: [{ type: \"text\", text: `Invalid arguments: ${message}` }] };\n }\n}\nfunction handleRpc(payload: unknown) {\n const request = asRecord(payload);\n const id = request?.id ?? null;\n if (!request || request.jsonrpc !== \"2.0\" || typeof request.method !== \"string\") return rpcError(id, -32600, \"Invalid Request\");\n if (request.method === \"notifications/initialized\") return null;\n switch (request.method) {\n case \"initialize\": {\n const params = asRecord(request.params);\n const clientInfo = asRecord(params?.clientInfo);\n if (!params || params.protocolVersion !== PROTOCOL_VERSION || !asRecord(params.capabilities) || !clientInfo || typeof clientInfo.name !== \"string\" || typeof clientInfo.version !== \"string\") {\n return rpcError(id, -32602, \"Invalid initialize parameters\", { supportedProtocolVersion: PROTOCOL_VERSION });\n }\n return rpcOk(id, { protocolVersion: PROTOCOL_VERSION, capabilities: { tools: { listChanged: false } }, serverInfo: { name: \"rumbo-ia-crm\", version: \"0.1.3-bounded-valtown\" }, instructions: \"Bounded CRM assistant. Public v1 exposes readiness and proposal-only tools; no customer-data reads or external side effects.\" });\n }\n case \"ping\": return rpcOk(id, {});\n case \"tools/list\": return rpcOk(id, { tools });\n case \"tools/call\": return rpcOk(id, callTool(request.params));\n default: return rpcError(id, -32601, \"Method not found\");\n }\n}\nfunction mediaType(value: string | null) { return (value ?? \"\").split(\";\", 1)[0].trim().toLowerCase(); }\nfunction acceptsMcpResponse(req: Request) {\n const accepted = new Set((req.headers.get(\"accept\") ?? \"\").split(\",\").map((v) => mediaType(v)).filter(Boolean));\n return accepted.has(\"application/json\") && accepted.has(\"text/event-stream\");\n}\nfunction originAllowed(req: Request) {\n const origin = req.headers.get(\"origin\");\n return !origin || ALLOWED_ORIGINS.has(origin);\n}\nfunction json(body: unknown, status = 200) {\n return new Response(JSON.stringify(body), { status, headers: { \"content-type\": \"application/json; charset=utf-8\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n}\nfunction textPage(title: string, body: string) {\n return new Response(`${title}\\n\\n${body}\\n`, { status: 200, headers: { \"content-type\": \"text/plain; charset=utf-8\", \"cache-control\": \"public, max-age=300\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n}\n\nexport default async function fetch(req: Request): Promise {\n const url = new URL(req.url);\n if (req.method === \"GET\" && url.pathname === \"/logo.svg\") {\n return new Response(PORTAL_LOGO_SVG, { status: 200, headers: { \"content-type\": \"image/svg+xml; charset=utf-8\", \"cache-control\": \"public, max-age=300\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n }\n if (req.method === \"GET\" && url.pathname === \"/\") {\n return textPage(\"RUMBO IA CRM\", \"Bounded ChatGPT MCP service. Public v1 exposes four proposal/readiness tools only. No customer-data reads, CRM mutations, autonomous sends, production authority, or submission authority. Support: /support · Privacy: /privacy · Terms: /terms · Logo: /logo.svg\");\n }\n if (req.method === \"GET\" && url.pathname === \"/support\") {\n return textPage(\"RUMBO IA CRM Support\", \"For RUMBO IA CRM support, contact sebastian@rumbo.verso.fans. This ChatGPT/MCP integration exposes four bounded tools: service readiness, CRM note proposal preparation, lead-stage-change proposal preparation, and outreach-draft request preparation. Every proposal remains REVIEW_REQUIRED with side_effect=false. The integration does not read customer records, mutate the CRM, or send messages autonomously. Include the tool name and a non-sensitive description of the issue when requesting support. Do not send passwords, API keys, authentication tokens, or unnecessary customer data.\");\n }\n if (req.method === \"GET\" && url.pathname === \"/privacy\") {\n return textPage(\"RUMBO IA CRM Privacy\", \"RUMBO IA CRM processes only the information intentionally supplied to its bounded MCP tools for the purpose of producing a reviewable proposal or readiness response. Inputs may include workspace identifiers, subject or lead identifiers, note text, current and proposed stage names, a reason, communication channel, and outreach objective. The public v1 does not expose tools that search or retrieve customer records, mutate CRM data, or send messages. Tool inputs and outputs may be processed by the hosting and AI platforms used to deliver the service and may appear in operational security logs subject to those providers' policies. Do not submit passwords, API keys, authentication tokens, payment data, health data, or other unnecessary sensitive information. RUMBO IA does not sell tool input data. Privacy requests: sebastian@rumbo.verso.fans.\");\n }\n if (req.method === \"GET\" && url.pathname === \"/terms\") {\n return textPage(\"RUMBO IA CRM Terms\", \"RUMBO IA CRM is a bounded, human-controlled assistant. Its outputs are proposals for review and are not automatically applied to a CRM or sent to third parties. Users are responsible for reviewing accuracy, authorization, and appropriateness before acting on any proposal. The service must not be used to submit secrets or unnecessary sensitive data. Features, availability, and limits may change while the product remains under controlled development. Contact: sebastian@rumbo.verso.fans.\");\n }\n if (url.pathname === \"/.well-known/openai-apps-challenge\") {\n if (req.method !== \"GET\") return new Response(null, { status: 405, headers: { allow: \"GET\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (!OPENAI_APPS_CHALLENGE_TOKEN) return new Response(null, { status: 404, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n return new Response(OPENAI_APPS_CHALLENGE_TOKEN, { status: 200, headers: { \"content-type\": \"text/plain; charset=utf-8\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n }\n if (url.pathname === \"/api/openai-plugin/health\") {\n if (req.method !== \"GET\") return new Response(null, { status: 405, headers: { allow: \"GET\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n return json({\n status: \"candidate\",\n service: \"rumbo-ia-crm-openai-plugin\",\n protocol: \"mcp-json-rpc-bounded-subset-implemented\",\n mcpEndpoint: \"/api/openai-plugin/mcp\",\n sourceSha: SOURCE_SHA,\n exposedTools: EXPOSED_TOOLS,\n plannedUnexposedTools: PLANNED_UNEXPOSED_TOOLS,\n customerDataToolsExposed: false,\n readOnlyDefault: true,\n productionAuthority: false,\n submissionAuthority: false,\n hostAdapter: \"val-town-clean-room-staging\",\n timestamp: new Date().toISOString(),\n });\n }\n if (url.pathname !== \"/api/openai-plugin/mcp\") return new Response(null, { status: 404, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (!originAllowed(req)) return new Response(null, { status: 403, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (req.method === \"GET\") return new Response(null, { status: 405, headers: { allow: \"POST\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (req.method !== \"POST\") return new Response(null, { status: 405, headers: { allow: \"POST\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (!acceptsMcpResponse(req)) return new Response(null, { status: 406, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (mediaType(req.headers.get(\"content-type\")) !== \"application/json\") return new Response(null, { status: 415, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n let payload: unknown;\n try { payload = await req.json(); }\n catch { return json({ jsonrpc: \"2.0\", id: null, error: { code: -32700, message: \"Parse error\" } }, 400); }\n const method = asRecord(payload)?.method;\n if (method !== \"initialize\") {\n const version = req.headers.get(\"mcp-protocol-version\") ?? FALLBACK_PROTOCOL_VERSION;\n if (version !== PROTOCOL_VERSION) return json({ jsonrpc: \"2.0\", id: asRecord(payload)?.id ?? null, error: { code: -32600, message: \"Unsupported or missing MCP-Protocol-Version\", data: { supportedProtocolVersion: PROTOCOL_VERSION } } }, 400);\n }\n const body = handleRpc(payload);\n if (body === null) return new Response(null, { status: 202, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n return json(body, 200);\n}\n","deleted",false,"label",[14],"3255f42e-7bba-4583-8764-631437397e4e",["D",1789031650837],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","RUMBO IA CRM bounded MCP staging","imageUrl","userId","d3788f19-13c5-4356-87e8-dce639626bb9","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a04116-f28c-754c-9173-77bf5814fcd6","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_102":98},"org",{"_9":10,"_95":96,"_97":98,"_55":56,"_99":100,"_101":42},"branch",{"_35":85,"_11":86,"_22":28,"_87":45,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":12,"_94":10},"isOwned",284,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","sebas","avatar","https://lh3.googleusercontent.com/a/ACg8ocJaC6uiXPmN9dvgA2XcSlzBSkPJO0GN5zKzPm3a8cbjmXC9HYA=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_78":-5,"_136":137,"_138":139,"_140":141,"_142":42,"_143":42,"_144":42,"_145":32,"_146":-5,"_147":-7,"_148":-7,"_149":62,"_150":42,"_151":42,"_152":-5,"_153":42,"_154":42,"_155":42,"_156":-5},"ENV",{"_107":108,"_109":110,"_111":86,"_112":113,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]