[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_167":168,"_169":170},"routes/_app.x.$handle.$name",{"_103":102,"_38":50,"_111":93,"_33":112,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_26":-5,"_123":-5,"_124":-5,"_125":54,"_126":127,"_128":31,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_48":49,"_38":50,"_43":51,"_52":-5,"_53":54,"_55":56,"_57":56,"_58":-5,"_59":-5,"_19":60,"_61":62,"_63":31,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":87,"_88":89,"_90":91,"_92":54},"version",11,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","d80de94d-5b67-4d91-aaa8-954b32f5e189","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":29,"_30":31,"_32":31,"_33":34,"_35":34},"file",{"_36":37,"_38":34,"_39":40,"_41":42,"_43":44,"_45":14,"_46":47,"_30":31},"previous",{"_36":37,"_38":34,"_39":40,"_41":42},"deleted",true,"deletedHere","path","_test_oauth_diag.ts","latestPath","fileId","49c16704-82d2-11f1-8cd9-1607ee4eb77e","name","fileType","script","content","// Full post-fix verification: OAuth paths + MCP handshake + tools/list + mt_get_account\nconst base = \"https://claude_relevance--195161e282c211f1b4d61607ee4eb77e.web.val.run\";\nconst token = Deno.env.get(\"MCP_PATH_TOKEN\");\nconst mcpPath = \"/mcp/\" + token;\n\nasync function probe(label: string, method: string, path: string, body?: string) {\n const url = base + path;\n const init: RequestInit = { method, headers: { \"Content-Type\": \"application/json\" } };\n if (body) init.body = body;\n const res = await fetch(url, init);\n const text = await res.text();\n const hdrs: Record = {};\n res.headers.forEach((v, k) => { if (k.startsWith(\"access-control\") || k === \"www-authenticate\" || k === \"content-type\") hdrs[k] = v; });\n console.log(\"\\n=== \" + label + \" ===\");\n console.log(method + \" \" + path + \" → \" + res.status);\n console.log(\"Key headers:\", JSON.stringify(hdrs));\n console.log(\"Body (first 300):\", text.slice(0, 300));\n try { return JSON.parse(text); } catch { return null; }\n}\n\n// --- Non-token paths (must all be clean 404, no WWW-Authenticate, no auth hints) ---\nawait probe(\"POST / root\", \"POST\", \"/\", \"{}\");\nawait probe(\"GET / root\", \"GET\", \"/\");\nawait probe(\"GET .well-known/oauth-protected-resource\", \"GET\", \"/.well-known/oauth-protected-resource\");\nawait probe(\"GET .well-known/oauth-authorization-server\", \"GET\", \"/.well-known/oauth-authorization-server\");\n\n// --- MCP token path (must all be 200) ---\nconst initBody = JSON.stringify({ jsonrpc: \"2.0\", id: 1, method: \"initialize\", params: { protocolVersion: \"2025-06-18\", capabilities: {}, clientInfo: { name: \"verify\", version: \"1.0\" } } });\nconst initData = await probe(\"POST /mcp/ initialize\", \"POST\", mcpPath, initBody);\nconsole.log(\" protocolVersion:\", initData?.result?.protocolVersion);\nconsole.log(\" serverInfo:\", JSON.stringify(initData?.result?.serverInfo));\n\nconst toolsBody = JSON.stringify({ jsonrpc: \"2.0\", id: 2, method: \"tools/list\", params: {} });\nconst toolsData = await probe(\"POST /mcp/ tools/list\", \"POST\", mcpPath, toolsBody);\nconst toolNames = toolsData?.result?.tools?.map((t: any) => t.name) || [];\nconsole.log(\" tools:\", toolNames);\n\nconst acctBody = JSON.stringify({ jsonrpc: \"2.0\", id: 3, method: \"tools/call\", params: { name: \"mt_get_account\", arguments: {} } });\nconst acctData = await probe(\"POST /mcp/ tools/call mt_get_account\", \"POST\", mcpPath, acctBody);\nconst acctText = acctData?.result?.content?.[0]?.text || \"\";\nconsole.log(\" account (first 500):\", acctText.slice(0, 500));\n\nconsole.log(\"\\n=== ALL CHECKS DONE ===\");\n","createdAt",["D",1784397629413],"branchVersion","branchId","dc6cdc3f-3851-4a74-a378-88229f4ae3dd","id","9881194d-b23d-4088-8fe1-60fb62504572","metaapi-bridge",["D",1784390558448],"deletedAt","legacyEnvVars",false,"privacy","public","httpPrivacy","description","imageUrl","0d170a7e-dbab-4265-b361-dba6fa0b2480","pinnedFileId","195161e2-82c2-11f1-b4d6-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f710c-5c2b-7196-8145-67760e07e0c9","tursoName","9881194db23d40888fe160fb62504572","tursoHostname","9881194db23d40888fe160fb62504572-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789472446807],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_103":102,"_110":-5},"org",{"_103":102,"_104":105,"_106":-5,"_19":-5,"_107":108,"_109":54},"branch",{"_13":14,"_38":93,"_48":47,"_94":49,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":50,"_101":102},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","claude_relevance","handle","displayName","Claude relevance ","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_48":49,"_38":50,"_43":162,"_52":-5,"_53":54,"_55":56,"_57":56,"_58":-5,"_59":-5,"_19":60,"_61":62,"_63":31,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":163,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":164,"_88":165,"_90":166,"_92":54},"tree",[157],"files",[157],"counts",{"_145":67,"_146":147,"_148":67,"_149":150,"_151":152},"contents",[133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_48":134,"_38":135,"_36":62,"_136":-5,"_46":47,"_45":137,"_138":31,"_43":139,"_13":140,"_39":141,"_41":142,"_30":54,"_143":-5,"_33":144},"e3bf82fe-23ec-4b4b-8e90-2d5990c8726f","main.ts","parentId",9,"latest",["D",1784397568089],5,"http","/**\n * ============================================================================\n * AKASHIC METAAPI BRIDGE — MCP Server for the live MT5 account\n * Hafeza Akashic Finance · single-file Val Town HTTP val · v1.1.0\n * ============================================================================\n *\n * PURPOSE\n * Separate, independent MCP server (own val, own URL, own connector) that\n * gives Claude direct access to the live MT5 trading account (The5ers,\n * login 26375310) via MetaAPI: live price, candles, account state, open\n * positions, and REAL order execution. Deliberately kept apart from the\n * Relevance AI control-plane val — different concern, different connector.\n *\n * TRANSPORT\n * MCP Streamable HTTP, stateless JSON mode. Endpoint: POST /mcp/{TOKEN}\n *\n * DEPLOY (Val Town — browser only, no build step, no CLI)\n * 1) Use a NEW, separate val (not the Relevance one). Paste this entire\n * file into its main.ts.\n * 2) In this val's Env Vars, set THREE variables:\n * MCP_PATH_TOKEN long random string you invent (the password in the URL)\n * METAAPI_TOKEN MetaAPI JWT token (from app.metaapi.cloud)\n * METAAPI_ACCOUNT_ID the MT5 account's MetaAPI cloud id\n * 3) Saving deploys it immediately. Endpoint:\n * https://-.web.val.run/mcp/\n * 4) Add that URL as a SECOND, separate Custom Connector on Claude:\n * claude.ai → Settings → Connectors → Add custom connector → paste → Save.\n *\n * This file holds NO secrets — all three values are read from environment\n * variables at request time.\n *\n * ENDPOINT FACTS (verified against MetaAPI cloud API for this account)\n * client host https://mt-client-api-v1.london.agiliumtrade.ai\n * market-data host https://mt-market-data-client-api-v1.london.agiliumtrade.ai\n * auth header \"auth-token\": {METAAPI_TOKEN} (NOT \"Authorization: Bearer\")\n * GET /users/current/accounts/{accountId}/accountInformation\n * GET /users/current/accounts/{accountId}/positions\n * GET /users/current/accounts/{accountId}/symbols/{symbol}/current-price\n * GET /users/current/accounts/{accountId}/historical-market-data/symbols/{symbol}/timeframes/{timeframe}/candles\n * POST /users/current/accounts/{accountId}/trade {actionType, symbol, volume, stopLoss, takeProfit, ...}\n * ============================================================================\n */\n\nfunction cfg(key: string): string | undefined {\n return Deno.env.get(key);\n}\n\nconst LATEST_PROTOCOL_VERSION = \"2025-06-18\";\nconst SUPPORTED_PROTOCOL_VERSIONS = [\"2025-06-18\", \"2025-03-26\", \"2024-11-05\"];\nconst SERVER_INFO = {\n name: \"akashic-metaapi-bridge\",\n title: \"Akashic MetaAPI Bridge (live MT5 account)\",\n version: \"1.1.0\",\n};\nconst INSTRUCTIONS =\n \"Direct live bridge to the Hafeza Akashic Finance MT5 trading account (The5ers, login \" +\n \"26375310) via MetaAPI. mt_get_account/mt_get_positions/mt_get_price/mt_get_candles are \" +\n \"read-only and safe to call freely. mt_place_order and mt_close_position execute REAL orders \" +\n \"with REAL money on a live $25K funded account — never place a naked order without stopLoss \" +\n \"and takeProfit, verify with mt_get_account/mt_get_positions before and after, and never act \" +\n \"on a trade without the founder's explicit intent. This server is independent of the separate \" +\n \"Relevance AI control-plane connector.\";\n\nconst MAX_TEXT_CHARS = 60000;\n\n// ---------------------------------------------------------------------------\n// MetaAPI HTTP client\n// ---------------------------------------------------------------------------\n\nconst METAAPI_CLIENT_HOST = \"https://mt-client-api-v1.london.agiliumtrade.ai\";\nconst METAAPI_MARKET_DATA_HOST = \"https://mt-market-data-client-api-v1.london.agiliumtrade.ai\";\n\nasync function metaapi(host: string, method: string, path: string, body?: unknown, query?: Record) {\n const token = cfg(\"METAAPI_TOKEN\");\n const accountId = cfg(\"METAAPI_ACCOUNT_ID\");\n if (!token || !accountId) {\n return { ok: false, status: 0, data: \"Missing METAAPI_TOKEN or METAAPI_ACCOUNT_ID environment variable.\" };\n }\n let url = host + (path.startsWith(\"/\") ? path : \"/\" + path);\n if (query && Object.keys(query).length > 0) {\n const qs = new URLSearchParams();\n for (const [k, v] of Object.entries(query)) {\n if (v === undefined || v === null) continue;\n qs.set(k, String(v));\n }\n const s = qs.toString();\n if (s) url += (url.includes(\"?\") ? \"&\" : \"?\") + s;\n }\n const init: RequestInit = {\n method,\n headers: { \"auth-token\": token, \"Content-Type\": \"application/json\" },\n };\n if (body !== undefined && method !== \"GET\") init.body = JSON.stringify(body);\n\n let res: Response;\n try {\n res = await fetch(url, init);\n } catch (e) {\n return { ok: false, status: 0, data: \"Network error reaching MetaAPI: \" + (e as Error).message };\n }\n const text = await res.text();\n let data: unknown;\n try {\n data = JSON.parse(text);\n } catch {\n data = text;\n }\n return { ok: res.ok, status: res.status, data };\n}\n\n// ---------------------------------------------------------------------------\n// Result formatting helpers\n// ---------------------------------------------------------------------------\n\nfunction fmt(x: unknown): string {\n if (typeof x === \"string\") return x;\n try {\n return JSON.stringify(x, null, 1);\n } catch {\n return String(x);\n }\n}\n\nfunction clip(x: unknown): string {\n const s = fmt(x);\n if (s.length <= MAX_TEXT_CHARS) return s;\n return s.slice(0, MAX_TEXT_CHARS) + \"\\n...[TRUNCATED \" + (s.length - MAX_TEXT_CHARS) + \" chars]\";\n}\n\nfunction ok(x: unknown) {\n return { content: [{ type: \"text\", text: clip(x) }] };\n}\n\nfunction fail(x: unknown) {\n return { content: [{ type: \"text\", text: clip(x) }], isError: true };\n}\n\nfunction metaResult(r: { ok: boolean; status: number; data: unknown }, hint?: string) {\n if (r.ok) return ok(r.data);\n let help = \"\";\n if (r.status === 401 || r.status === 403) {\n help = \" | Auth rejected: verify the METAAPI_TOKEN env var is current (tokens can be rotated/revoked in app.metaapi.cloud).\";\n } else if (r.status === 404) {\n help = \" | Not found: verify METAAPI_ACCOUNT_ID, the symbol name (must match MT5 Market Watch exactly), or the URL path/host.\";\n } else if (r.status === 429) {\n help = \" | Rate limited by MetaAPI: wait and retry.\";\n }\n return fail(\"MetaAPI error HTTP \" + r.status + help + (hint ? \" | \" + hint : \"\") + \"\\n\" + fmt(r.data));\n}\n\n// ---------------------------------------------------------------------------\n// Tool definitions\n// ---------------------------------------------------------------------------\n\nconst TOOLS = [\n {\n name: \"mt_get_account\",\n title: \"Get live MT5 account state\",\n description:\n \"Live balance, equity, margin, freeMargin, marginLevel, currency and server time for the \" +\n \"Hafeza Akashic Finance MT5 account (The5ers, login 26375310) via MetaAPI. Read-only, safe \" +\n \"to call freely.\",\n inputSchema: { type: \"object\", properties: {} },\n annotations: { readOnlyHint: true, openWorldHint: true },\n handler: async () => {\n const accountId = cfg(\"METAAPI_ACCOUNT_ID\");\n const r = await metaapi(METAAPI_CLIENT_HOST, \"GET\", \"/users/current/accounts/\" + accountId + \"/accountInformation\");\n return metaResult(r);\n },\n },\n\n {\n name: \"mt_get_positions\",\n title: \"Get open positions\",\n description:\n \"List every currently open position on the live MT5 account (symbol, type, volume, \" +\n \"openPrice, profit, stopLoss, takeProfit, positionId) via MetaAPI. Read-only, safe to call \" +\n \"freely. Use the returned positionId with mt_close_position.\",\n inputSchema: { type: \"object\", properties: {} },\n annotations: { readOnlyHint: true, openWorldHint: true },\n handler: async () => {\n const accountId = cfg(\"METAAPI_ACCOUNT_ID\");\n const r = await metaapi(METAAPI_CLIENT_HOST, \"GET\", \"/users/current/accounts/\" + accountId + \"/positions\");\n return metaResult(r);\n },\n },\n\n {\n name: \"mt_get_price\",\n title: \"Get live current price\",\n description:\n \"Live bid/ask quote for a symbol on the connected MT5 account via MetaAPI. Read-only, safe \" +\n \"to call freely.\",\n inputSchema: {\n type: \"object\",\n properties: {\n symbol: { type: \"string\", description: \"Symbol exactly as it appears in MT5 Market Watch, e.g. EURUSD.\" },\n },\n required: [\"symbol\"],\n },\n annotations: { readOnlyHint: true, openWorldHint: true },\n handler: async (args: any) => {\n const accountId = cfg(\"METAAPI_ACCOUNT_ID\");\n const r = await metaapi(\n METAAPI_CLIENT_HOST,\n \"GET\",\n \"/users/current/accounts/\" + accountId + \"/symbols/\" + args.symbol + \"/current-price\"\n );\n return metaResult(r);\n },\n },\n\n {\n name: \"mt_get_candles\",\n title: \"Get historical OHLC candles\",\n description:\n \"Historical candlestick (OHLC) data for a symbol/timeframe via MetaAPI historical market \" +\n \"data. Timeframe examples: 1m, 5m, 15m, 30m, 1h, 4h, 1d, 1w, 1mn. Read-only, safe to call \" +\n \"freely.\",\n inputSchema: {\n type: \"object\",\n properties: {\n symbol: { type: \"string\", description: \"e.g. EURUSD\" },\n timeframe: { type: \"string\", description: \"e.g. 15m, 1h, 4h, 1d. Default 15m.\" },\n limit: { type: \"number\", description: \"Number of most recent candles to return. Default 100.\" },\n },\n required: [\"symbol\"],\n },\n annotations: { readOnlyHint: true, openWorldHint: true },\n handler: async (args: any) => {\n const accountId = cfg(\"METAAPI_ACCOUNT_ID\");\n const timeframe = args.timeframe || \"15m\";\n const r = await metaapi(\n METAAPI_MARKET_DATA_HOST,\n \"GET\",\n \"/users/current/accounts/\" + accountId + \"/historical-market-data/symbols/\" + args.symbol + \"/timeframes/\" + timeframe + \"/candles\",\n undefined,\n { limit: args.limit ?? 100 }\n );\n return metaResult(r);\n },\n },\n\n {\n name: \"mt_place_order\",\n title: \"Place a REAL trade order\",\n description:\n \"Places a REAL order on the live MT5 account via MetaAPI — this risks real capital ($25K \" +\n \"The5ers funded account). actionType: ORDER_TYPE_BUY / ORDER_TYPE_SELL (market), or \" +\n \"ORDER_TYPE_BUY_LIMIT / ORDER_TYPE_SELL_LIMIT / ORDER_TYPE_BUY_STOP / ORDER_TYPE_SELL_STOP \" +\n \"(pending, requires openPrice). DOCTRINE: never send a naked order — always include \" +\n \"stopLoss and takeProfit. Verify with mt_get_account and mt_get_positions before and after. \" +\n \"clientId is built as strategyId_positionId_orderId; combined length of clientId + comment \" +\n \"must not exceed 30 characters (MetaAPI limit).\",\n inputSchema: {\n type: \"object\",\n properties: {\n actionType: { type: \"string\", description: \"ORDER_TYPE_BUY, ORDER_TYPE_SELL, ORDER_TYPE_BUY_LIMIT, ORDER_TYPE_SELL_LIMIT, ORDER_TYPE_BUY_STOP, or ORDER_TYPE_SELL_STOP.\" },\n symbol: { type: \"string\", description: \"e.g. EURUSD\" },\n volume: { type: \"number\", description: \"Lot size, e.g. 0.01\" },\n openPrice: { type: \"number\", description: \"Required for pending orders (LIMIT/STOP); omit for market orders.\" },\n stopLoss: { type: \"number\", description: \"Stop loss price. Required by doctrine on every order.\" },\n takeProfit: { type: \"number\", description: \"Take profit price. Required by doctrine on every order.\" },\n strategyId: { type: \"string\", description: \"Strategy identifier for clientId. Default 'ak'.\" },\n positionId: { type: \"string\", description: \"Position identifier for clientId. Default: current epoch ms.\" },\n orderId: { type: \"string\", description: \"Order identifier for clientId. Default '1'.\" },\n comment: { type: \"string\", description: \"Optional order comment/tag. Combined with clientId must be ≤30 chars.\" },\n },\n required: [\"actionType\", \"symbol\", \"volume\"],\n },\n annotations: { destructiveHint: true, openWorldHint: true },\n handler: async (args: any) => {\n const accountId = cfg(\"METAAPI_ACCOUNT_ID\");\n\n // Build clientId as strategyId_positionId_orderId\n const strategyId = args.strategyId || \"ak\";\n const positionId = args.positionId || String(Date.now());\n const orderId = args.orderId || \"1\";\n const clientId = strategyId + \"_\" + positionId + \"_\" + orderId;\n const comment = args.comment || \"\";\n\n // MetaAPI enforces clientId + comment combined ≤ 30 characters\n if (clientId.length + comment.length > 30) {\n return fail(\n \"clientId + comment combined exceeds 30 characters (MetaAPI limit). \" +\n \"clientId='\" + clientId + \"' (\" + clientId.length + \" chars), \" +\n \"comment='\" + comment + \"' (\" + comment.length + \" chars), \" +\n \"combined=\" + (clientId.length + comment.length) + \". \" +\n \"Shorten strategyId/positionId/orderId or the comment.\"\n );\n }\n\n const body: any = { actionType: args.actionType, symbol: args.symbol, volume: args.volume, clientId };\n if (args.openPrice !== undefined) body.openPrice = args.openPrice;\n if (args.stopLoss !== undefined) body.stopLoss = args.stopLoss;\n if (args.takeProfit !== undefined) body.takeProfit = args.takeProfit;\n if (comment) body.comment = comment;\n const r = await metaapi(METAAPI_CLIENT_HOST, \"POST\", \"/users/current/accounts/\" + accountId + \"/trade\", body);\n return metaResult(r, \"This was a REAL order on REAL capital. Verify with mt_get_positions.\");\n },\n },\n\n {\n name: \"mt_close_position\",\n title: \"Close a REAL open position\",\n description:\n \"Fully closes an existing open position on the live MT5 account via MetaAPI. Get the \" +\n \"positionId from mt_get_positions first. This affects REAL capital.\",\n inputSchema: {\n type: \"object\",\n properties: {\n positionId: { type: \"string\", description: \"Position id from mt_get_positions.\" },\n },\n required: [\"positionId\"],\n },\n annotations: { destructiveHint: true, openWorldHint: true },\n handler: async (args: any) => {\n const accountId = cfg(\"METAAPI_ACCOUNT_ID\");\n const body = { actionType: \"POSITION_CLOSE_ID\", positionId: args.positionId };\n const r = await metaapi(METAAPI_CLIENT_HOST, \"POST\", \"/users/current/accounts/\" + accountId + \"/trade\", body);\n return metaResult(r, \"This closed a REAL position. Verify with mt_get_positions.\");\n },\n },\n];\n\n// ---------------------------------------------------------------------------\n// JSON-RPC 2.0 / MCP plumbing (stateless Streamable HTTP)\n// ---------------------------------------------------------------------------\n\nfunction rpcResult(id: unknown, result: unknown) {\n return { jsonrpc: \"2.0\", id, result };\n}\n\nfunction rpcError(id: unknown, code: number, message: string) {\n return { jsonrpc: \"2.0\", id: id ?? null, error: { code, message } };\n}\n\nasync function handleRpc(msg: any) {\n if (!msg || typeof msg !== \"object\" || Array.isArray(msg) || typeof msg.method !== \"string\") {\n return rpcError(msg && msg.id, -32600, \"Invalid Request\");\n }\n const { id, method, params } = msg;\n const isNotification = id === undefined || id === null;\n\n try {\n if (method === \"initialize\") {\n const requested = params && params.protocolVersion;\n const version = SUPPORTED_PROTOCOL_VERSIONS.includes(requested) ? requested : LATEST_PROTOCOL_VERSION;\n return rpcResult(id, {\n protocolVersion: version,\n capabilities: { tools: { listChanged: false } },\n serverInfo: SERVER_INFO,\n instructions: INSTRUCTIONS,\n });\n }\n\n if (method.startsWith(\"notifications/\")) return null;\n\n if (method === \"ping\") return rpcResult(id, {});\n\n if (method === \"tools/list\") {\n return rpcResult(id, {\n tools: TOOLS.map((t) => ({\n name: t.name,\n title: t.title,\n description: t.description,\n inputSchema: t.inputSchema,\n annotations: t.annotations,\n })),\n });\n }\n\n if (method === \"tools/call\") {\n const toolName = params && params.name;\n const tool = TOOLS.find((t) => t.name === toolName);\n if (!tool) return rpcError(id, -32602, \"Unknown tool: \" + toolName);\n const args = (params && params.arguments) || {};\n const required = (tool.inputSchema as any).required || [];\n const missing = required.filter((k: string) => args[k] === undefined || args[k] === null || args[k] === \"\");\n if (missing.length > 0) {\n return rpcResult(id, fail(\"Missing required argument(s): \" + missing.join(\", \")));\n }\n const result = await tool.handler(args);\n return rpcResult(id, result);\n }\n\n if (isNotification) return null;\n return rpcError(id, -32601, \"Method not found: \" + method);\n } catch (e) {\n if (isNotification) return null;\n return rpcResult(id, fail(\"Server error while handling '\" + method + \"': \" + (e as Error).message));\n }\n}\n\n// ---------------------------------------------------------------------------\n// HTTP entry point\n// ---------------------------------------------------------------------------\n\nconst CORS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, GET, OPTIONS, DELETE\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Mcp-Session-Id, MCP-Protocol-Version\",\n};\n\nfunction jsonResponse(obj: unknown, status?: number) {\n return new Response(JSON.stringify(obj), {\n status: status || 200,\n headers: { \"Content-Type\": \"application/json\", ...CORS },\n });\n}\n\nexport default async function (request: Request): Promise {\n const url = new URL(request.url);\n const token = cfg(\"MCP_PATH_TOKEN\");\n if (!token || url.pathname !== \"/mcp/\" + token) {\n return new Response(\"Not found\", { status: 404 });\n }\n\n if (request.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS });\n }\n\n for (const k of [\"METAAPI_TOKEN\", \"METAAPI_ACCOUNT_ID\"]) {\n if (!cfg(k)) {\n return jsonResponse(rpcError(null, -32603, \"Server misconfigured: missing environment variable \" + k), 500);\n }\n }\n\n if (request.method === \"GET\") {\n return new Response(\n \"Akashic MetaAPI Bridge MCP v\" + SERVER_INFO.version + \" — POST JSON-RPC here (Streamable HTTP).\",\n { status: 405, headers: { Allow: \"POST, OPTIONS\", ...CORS } }\n );\n }\n if (request.method === \"DELETE\") {\n return new Response(null, { status: 405, headers: { Allow: \"POST, OPTIONS\", ...CORS } });\n }\n if (request.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405, headers: { Allow: \"POST, OPTIONS\", ...CORS } });\n }\n\n let payload: any;\n try {\n payload = await request.json();\n } catch {\n return jsonResponse(rpcError(null, -32700, \"Parse error: body must be JSON\"), 400);\n }\n\n if (Array.isArray(payload)) {\n const results = [];\n for (const m of payload) {\n const r = await handleRpc(m);\n if (r !== null) results.push(r);\n }\n if (results.length === 0) return new Response(null, { status: 202, headers: CORS });\n return jsonResponse(results, 200);\n }\n\n const result = await handleRpc(payload);\n if (result === null) return new Response(null, { status: 202, headers: CORS });\n return jsonResponse(result, 200);\n}\n","label",[135],"pulls","branches",1,"forks","envVars",{"_153":155,"_156":67},"connections",{"_153":67,"_154":67},"count","unfilledCount",3,"emptyCount",{"_48":134,"_38":135,"_36":62,"_136":-5,"_46":47,"_45":137,"_138":31,"_43":158,"_13":140,"_39":141,"_41":142,"_30":54,"_143":-5,"_159":160,"_33":161},["D",1784397568089],"children",[],[135],["D",1784390558448],["D",1789472446807],{"_103":102,"_110":-5},{"_103":102,"_104":105,"_106":-5,"_19":-5,"_107":108,"_109":54},{"_13":14,"_38":93,"_48":47,"_94":49,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":50,"_101":102},"ctx",{"_86":-5,"_130":200,"_201":202,"_203":204,"_205":54,"_206":54,"_207":54,"_208":31,"_209":-5,"_210":-7,"_211":-7,"_212":67,"_213":54,"_214":54,"_215":-5,"_216":54,"_217":54,"_218":54,"_219":-5},"ENV",{"_171":172,"_173":174,"_175":93,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v11