${tools.map(x => `${escapeHtml(x)}`).join(\"\")}

`\n : \"\";\n const styleUrl = immutableFileUrl(\"/frontend/styles.css\");\n return `${escapeHtml(title)} · PayAna

AUTHORIZED MCP VERIFICATION

${escapeHtml(title)}

${escapeHtml(note)}

TOKEN NOT PERSISTEDNO TOOL CALLNO TRADE

Connection receipt

sanitized runtime evidence

${rows}

${toolPills}

Return to market cockpit

`;\n}\n\n\napp.use(\"*\", async (c, next) => {\n c.header(\"X-Content-Type-Options\", \"nosniff\");\n c.header(\"Referrer-Policy\", \"no-referrer\");\n c.header(\"X-Frame-Options\", \"DENY\");\n c.header(\"Permissions-Policy\", \"camera=(), microphone=(), geolocation=(), payment=()\");\n c.header(\"Content-Security-Policy\", \"default-src 'self'; script-src 'self' https://esm.town https://esm.sh; style-src 'self'; connect-src 'self' https://esm.sh; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'\");\n await next();\n});\n\n\napp.use(\"/api/*\", async (c, next) => {\n c.header(\"Cache-Control\", \"no-store\");\n c.header(\"X-Content-Type-Options\", \"nosniff\");\n c.header(\"Referrer-Policy\", \"no-referrer\");\n if (!rateAllowed(clientKey(c))) return c.json({ status: \"BLOCKED\", error: \"RATE_LIMITED\", retryAfterSeconds: 60 }, 429);\n await next();\n});\n\napp.get(\"/\", (c) => c.html(Root()));\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.get(\"/oauth/client-metadata.json\", (c) => {\n c.header(\"Cache-Control\", \"public, max-age=300\");\n return c.json(clientMetadata());\n});\n\napp.get(\"/oauth/status\", (c) => {\n c.header(\"Cache-Control\", \"no-store\");\n return c.json({\n status: \"READY_FOR_USER_AUTHORIZATION\",\n issuer: AGENT_OS.issuer,\n resource: AGENT_OS.resource,\n clientId: AGENT_OS.clientId,\n redirectUri: AGENT_OS.redirectUri,\n flow: \"authorization_code_pkce_s256_cimd\",\n tokenPersistence: \"NONE\",\n automaticToolCall: false,\n boundary: \"OAUTH_FLOW_READY != USER_AUTHORIZED_SESSION\",\n });\n});\n\napp.get(\"/oauth/start\", async (c) => {\n if (!rateAllowed(`oauth:${clientKey(c)}`)) return c.json({ status: \"BLOCKED\", error: \"RATE_LIMITED\", retryAfterSeconds: 60 }, 429);\n const request = await createAuthorizationRequest();\n c.header(\"Cache-Control\", \"no-store\");\n return c.redirect(request.url, 302);\n});\n\napp.get(\"/oauth/callback\", async (c) => {\n c.header(\"Cache-Control\", \"no-store\");\n const errorParam = c.req.query(\"error\");\n if (errorParam) {\n return c.html(oauthReceiptPage(\n \"Authorization not completed\",\n \"FAIL\",\n [{ label: \"State\", value: \"USER_OR_PROVIDER_DECLINED\" }],\n \"Binance returned an OAuth error. The callback deliberately does not echo provider error text into the page.\",\n ), 400);\n }\n\n const state = c.req.query(\"state\") ?? \"\";\n const code = c.req.query(\"code\") ?? \"\";\n const issuer = c.req.query(\"iss\") ?? \"\";\n if (!/^[A-Za-z0-9_-]{30,200}$/.test(state) || code.length < 8 || code.length > 5000) {\n return c.html(oauthReceiptPage(\n \"Invalid OAuth callback\",\n \"FAIL\",\n [{ label: \"Validation\", value: \"MISSING_OR_INVALID_STATE_OR_CODE\" }],\n \"The callback failed local input validation before any token request was made.\",\n ), 400);\n }\n if (issuer && issuer !== AGENT_OS.issuer) {\n return c.html(oauthReceiptPage(\n \"Issuer validation failed\",\n \"FAIL\",\n [{ label: \"Validation\", value: \"RFC9207_ISSUER_MISMATCH\" }],\n \"The authorization response issuer did not match the discovered Binance Agent OS authorization server. No token request was made.\",\n ), 400);\n }\n\n const pending = await consumeAuthorizationState(state);\n if (!pending) {\n return c.html(oauthReceiptPage(\n \"OAuth state expired or already used\",\n \"FAIL\",\n [{ label: \"Validation\", value: \"STATE_NOT_FOUND_OR_EXPIRED\" }],\n \"OAuth state is one-time-use and expires after ten minutes. Start a new verification flow.\",\n ), 400);\n }\n\n const token = await exchangeAuthorizationCode(code, pending.verifier);\n if (!token.ok) {\n return c.html(oauthReceiptPage(\n \"Token exchange failed\",\n \"FAIL\",\n [\n { label: \"HTTP status\", value: token.status },\n { label: \"OAuth result\", value: token.error },\n ],\n \"The one-time authorization code could not be exchanged. No token was persisted.\",\n ), 502);\n }\n\n let probe: any;\n try {\n probe = await probeAuthorizedAgentOs(token.accessToken);\n } catch (error) {\n probe = {\n connected: false,\n protocolEra: \"UNRESOLVED\",\n toolCount: 0,\n allToolNames: [],\n safeMarketToolNames: [],\n error: error instanceof Error ? error.message.slice(0, 180) : \"MCP_PROBE_FAILED\",\n };\n }\n\n const connected = probe.connected === true;\n return c.html(oauthReceiptPage(\n connected ? \"Binance Agent OS authorized\" : \"OAuth succeeded; MCP catalog not verified\",\n connected ? \"PASS\" : \"FAIL\",\n [\n { label: \"OAuth code flow\", value: \"PASS\" },\n { label: \"Issuer\", value: issuer || `${AGENT_OS.issuer} (callback omitted iss; server metadata did not advertise mandatory response-iss support)` },\n { label: \"Token persistence\", value: \"NONE\" },\n { label: \"Refresh token persisted\", value: \"NO\" },\n { label: \"Token endpoint scope\", value: token.scope ?? \"NOT_RETURNED\" },\n { label: \"MCP catalog connected\", value: connected ? \"YES\" : \"NO\" },\n { label: \"Protocol era\", value: probe.protocolEra ?? \"UNRESOLVED\" },\n { label: \"Tool count\", value: probe.toolCount ?? 0 },\n { label: \"Safe market tools\", value: probe.safeMarketToolNames ?? [] },\n { label: \"Automatic tool call\", value: \"NO\" },\n ],\n connected\n ? \"The callback used the ephemeral access token only to read the MCP tool catalog. No MCP tool was called and no Binance token or refresh token was persisted.\"\n : \"The OAuth code exchange succeeded, but the MCP tool catalog could not be proven in this callback. The access token was still discarded.\",\n ), connected ? 200 : 502);\n});\n\n\n\napp.get(\"/api/health\", (c) => c.json({\n status: \"PASS\",\n service: \"PayAna Market Sentinel\",\n version: \"1.2.0-rc1\",\n mode: \"READ_ONLY_MARKET_EVIDENCE_WITH_OPTIONAL_EPHEMERAL_MCP_AUTH_PROBE\",\n boundary: \"MARKET_DATA_READ != TRADING_AUTH\",\n supportedSymbols: supportedSymbols(),\n agentOsMcp: {\n endpointKnown: true,\n oauthFlowReady: true,\n oauthStartPath: \"/oauth/start\",\n runtimeProbeState: \"READY_FOR_USER_AUTHORIZATION\",\n liveAuthorizedSession: false,\n tokenPersistence: \"NONE\",\n automaticToolCall: false,\n },\n marketData: {\n provider: \"Binance public market-data surface\",\n runtimeChampion: \"data-api.binance.vision\",\n directApiBinanceComFromValTown: \"HTTP_451_RESTRICTED_LOCATION\",\n },\n generatedAt: new Date().toISOString(),\n}));\n\napp.get(\"/api/submission-evidence\", async (c) => {\n const core = {\n schema: \"payana-submission-evidence-1.0.0\",\n status: \"PASS\",\n project: \"PayAna — Falsifier Agent for Binance Agent OS\",\n track: \"A\",\n release: \"payana-market-sentinel-1.2.0-rc1\",\n releaseAudit: {\n assertions: 189,\n mutationSteps: 35,\n totalExecutedChecks: 224,\n pass: true,\n releaseAuditBaselineAt: \"2026-09-07T22:31:20.817Z\",\n concurrencyRegression: \"SQLITE_BUSY_CONCURRENT_OAUTH_STATE_CONSUMPTION_FIXED_AND_RETESTED_5X\",\n },\n boundaries: [\n \"MARKET_DATA_READ != TRADING_AUTH\",\n \"MISSING_EVIDENCE != ZERO\",\n \"CURRENT_PRESSURE != FUTURE_PRICE\",\n \"MODEL_SCORE != CALIBRATED_PROBABILITY\",\n \"MCP_ENDPOINT_KNOWN != MCP_SESSION_AUTHORIZED\",\n \"AUTHORIZED_TOOL_CATALOG != TOOL_CALL\",\n \"NO_TRADE_DECISION\",\n ],\n officialHackathon: {\n deadlineUtc: \"2026-09-08T23:59:00Z\",\n announcement: \"https://www.binance.com/en/blog/community/8802181509900814931\",\n agentOs: \"https://www.binance.com/en/agent-os\",\n mcpDocs: \"https://developers.binance.com/en/docs/agent-native/mcp-server/agentic\",\n },\n proofPaths: {\n health: \"/api/health\",\n liveBtcEvidence: \"/api/analyze?symbol=BTCUSDT\",\n oauthStatus: \"/oauth/status\",\n source: \"https://www.val.town/x/cleitoncosta/payana-binance-agent-os/code/\",\n },\n supplementalEvidence: {\n binanceChatGPTPublicMarketData: \"PASS\",\n classification: \"SEPARATE_PUBLIC_MARKET_DATA_INTEGRATION_NOT_AGENT_OS_MCP_AUTH_PROOF\",\n witness: \"BTCUSDT spot price and 24-hour statistics returned by the connected Binance ChatGPT integration on 2026-09-08\",\n },\n officialEntryRequirements: {\n followAndRepostBinance: \"UNVERIFIED\",\n replyOrQuoteSubmission: \"UNVERIFIED\",\n surveyCompletion: \"UNVERIFIED\",\n trackASubmissionArtifact: \"LIVE_DEMO_ALREADY_AVAILABLE\",\n videoRequirement: \"NOT_REQUIRED_WHEN_DEMO_IS_USED\",\n githubRequirement: \"IF_APPLICABLE\",\n },\n qualificationEvidenceOpen: [\n \"PARTICIPANT_ACCOUNT_ELIGIBILITY\",\n \"SUPPORTED_CLIENT_AGENT_OS_MCP_MARKET_DATA_WITNESS\",\n ],\n optionalEnhancements: [\n \"FINAL_VIDEO_OR_SCREEN_RECORDING\",\n \"DEDICATED_GITHUB_MIRROR_IF_USEFUL\",\n ],\n externalGatesNotClaimedComplete: [\n \"PARTICIPANT_ACCOUNT_ELIGIBILITY\",\n \"SUPPORTED_CLIENT_AGENT_OS_MCP_MARKET_DATA_WITNESS\",\n \"X_FOLLOW_AND_REPOST\",\n \"X_TRACK_A_SUBMISSION\",\n \"BINANCE_SURVEY_COMPLETION\",\n ],\n };\n const manifestSha256 = await sha256Hex(JSON.stringify(core));\n return c.json({ ...core, manifestSha256, generatedAt: new Date().toISOString() });\n});\n\napp.get(\"/api/symbols\", (c) => c.json({ status: \"PASS\", symbols: supportedSymbols() }));\n\napp.get(\"/api/analyze\", async (c) => {\n try {\n const symbol = normalizeSymbol(c.req.query(\"symbol\") ?? \"BTCUSDT\");\n const result = await analyzeMarket(symbol);\n const httpStatus = result.evidenceState === \"FAIL\" ? 503 : 200;\n return c.json(result, httpStatus);\n } catch (error) {\n const message = error instanceof Error ? error.message : String(error);\n const status = message === \"INVALID_SYMBOL_FORMAT\" || message === \"SYMBOL_NOT_ALLOWLISTED\" ? 400 : 500;\n return c.json({ status: \"FAIL\", error: message.slice(0, 180), boundary: \"NO_UNVALIDATED_SYMBOL_FORWARDING\" }, status);\n }\n});\n\napp.notFound((c) => c.json({ status: \"FAIL\", error: \"NOT_FOUND\" }, 404));\napp.onError((err) => {\n console.error(\"UNHANDLED\", err instanceof Error ? err.message : String(err));\n return new Response(JSON.stringify({ status: \"FAIL\", error: \"INTERNAL_ERROR\" }), { status: 500, headers: { \"content-type\": \"application/json\" } });\n});\n\nexport default app.fetch;\n","payana-agent-os","children",[],[209],"2e7e4260-0bfc-430c-906d-88a2db100fb3","SKILL.md","06f15bce-aafe-11f1-857f-1607ee4eb77e",["D",1788814343943],"# PayAna Falsifier Agent Skill\n\n## Purpose\n\nPayAna is an evidence-first market-analysis agent for Binance Agent OS. Its job is **not** to predict a guaranteed direction and **not** to place trades. It observes market evidence, constructs competing hypotheses, searches for disconfirming evidence, records what is missing, and returns a decision-quality briefing.\n\nThe skill is designed for an MCP-capable AI client connected to the official Binance Agent OS MCP endpoint:\n\n`https://agent.binance.com/mcp/agentic`\n\nUse the minimum permission set required. For this skill, **Market Data only** is sufficient. Account, Trade, Transfer and withdrawal-like capabilities are outside the skill's required scope.\n\n## Hard safety boundary\n\n- `MARKET_DATA_READ != TRADING_AUTH`\n- Never request or enable Trade, Account or Transfer merely to complete this workflow.\n- Never place, simulate-as-real, confirm or recommend an order.\n- Never claim an MCP call occurred unless the tool receipt proves it.\n- Never treat model confidence as a calibrated probability.\n- Never treat a screenshot, HTTP 200, API field named `open`, or plausible prose as economic proof.\n- If one required source fails, mark the run `PARTIAL`; if all required sources fail, mark it `FAIL`.\n\n## Supported market evidence\n\nFor the requested Binance spot symbol, retrieve when available:\n\n1. 24h ticker: last price, 24h change, high, low, quote volume, trade count.\n2. Order book: at least top 20 bid and ask levels.\n3. 5m candlesticks: at least 36 candles when available.\n4. Funding/mark price only when exposed by the connected Agent OS market-data tool. Absence must be recorded, not imputed.\n\n## Loop\n\nRun this reasoning loop once per user request or monitoring cycle:\n\n1. **OBSERVE** — collect fresh market evidence and timestamps.\n2. **VALIDATE** — verify symbol, source success, timestamps, numeric bounds and non-empty data.\n3. **MODEL** — calculate descriptive metrics.\n4. **NEURON** — create at least three branches:\n - winning hypothesis supported by current evidence;\n - opposite hypothesis;\n - alternative/non-directional explanation such as noise, liquidity effects or stale/missing context.\n5. **FALSIFY** — define observable conditions that would invalidate each hypothesis.\n6. **NEGATIVE SPACE** — explicitly list context not available to the run.\n7. **RECONCILE** — choose the best current descriptive label, not a trade direction.\n8. **RECEIPT** — return source/tool receipts and timestamp.\n9. **NEXT TEST** — state what evidence should be checked next if the user wants to continue.\n\n## Deterministic metrics\n\nUse formulas equivalent to the reference implementation when raw inputs exist:\n\n- `spread_bps = (ask - bid) / mid * 10000`\n- `bid_notional = Σ(price_i * qty_i)` over top-20 bids\n- `ask_notional = Σ(price_i * qty_i)` over top-20 asks\n- `book_imbalance = (bid_notional - ask_notional) / (bid_notional + ask_notional)`\n- `log_return_t = ln(close_t / close_(t-1))`\n- `realized_vol_5m_bps = sample_std(log_returns) * 10000`\n- `momentum_30m_pct = (latest_close / close_30m_ago - 1) * 100`\n- `momentum_3h_pct = (latest_close / first_close_in_3h_window - 1) * 100`\n- `volume_z = (latest_quote_volume - mean(prior_quote_volumes)) / sample_std(prior_quote_volumes)`\n\nReference descriptive score:\n\n`directional_score = mean(tanh(2*book_imbalance), tanh(momentum_30m_pct/0.6), tanh(momentum_3h_pct/1.5))`\n\nThis score is a heuristic descriptor, not a probability and not a price forecast.\n\n## Output contract\n\nReturn a compact object or briefing with these fields:\n\n- `symbol`\n- `evidence_state`: `PASS | PARTIAL | FAIL`\n- `fetched_at`\n- `observations`\n- `descriptive_pressure`: `BULLISH_PRESSURE | BEARISH_PRESSURE | MIXED_NEUTRAL`\n- `supporting_evidence[]`\n- `opposing_evidence[]`\n- `alternative_explanations[]`\n- `falsifiers[]`\n- `risk_flags[]`\n- `missing_context[]`\n- `source_receipts[]`\n- `recommendation`: always `NO_TRADE_DECISION` for this skill\n- `next_test`\n\n## Example request\n\n\"Use Binance Agent OS market data to audit BTCUSDT. Tell me what the current evidence supports, what argues against it, what would falsify the reading, and what is missing. Do not trade.\"\n\n## Example acceptance criteria\n\nA run passes only if:\n\n- the symbol is explicit and validated;\n- at least one live source has a timestamp/currentness signal;\n- no missing source is silently replaced by fabricated data;\n- the opposite hypothesis and at least one alternative explanation are present;\n- falsifiers are observable rather than rhetorical;\n- source receipts are listed;\n- final recommendation remains `NO_TRADE_DECISION`.\n",[],[220],"8cd17a62-e855-4603-b4e4-5967c104f228","README.md","01a07d8b-9306-748f-a55c-55a2e635552d",49,["D",1788821098564],13,"# PayAna — Falsifier Agent for Binance Agent OS\n\n**Track A — Binance Agent OS Mini Hackathon**\n\nPayAna is an evidence-first market-analysis agent whose defining behavior is simple:\n\n> It does not stop after asking **“what does the market evidence support?”**. It also asks **“what would prove this reading wrong?”**\n\nThe project combines a reusable `SKILL.md` for an MCP-capable AI client with a deployed reference cockpit that computes transparent market metrics, records source receipts, exposes missing context and refuses to convert a descriptive market reading into a trade instruction.\n\n**Hard boundary:** `MARKET_DATA_READ != TRADING_AUTH`\n\n## Why this exists\n\nMany market-agent demos optimize for a polished answer or an executed action. That creates a failure mode: a coherent answer can still be based on stale data, one-sided evidence, missing context or a non-calibrated model score.\n\nPayAna instead forces a small scientific loop:\n\n```text\nOBSERVE → VALIDATE → MODEL → COMPETING HYPOTHESES\n → FALSIFY → NEGATIVE SPACE → RECONCILE → RECEIPT → NEXT TEST\n```\n\nThe result is **decision-quality evidence**, not a trade recommendation.\n\n## What the agent does\n\nFor a requested Binance market, PayAna:\n\n1. retrieves fresh market evidence;\n2. validates source state and timestamps;\n3. computes reproducible metrics;\n4. constructs a winning hypothesis, an opposite hypothesis and an alternative explanation;\n5. defines observable falsifiers;\n6. lists context that is missing instead of fabricating it;\n7. returns source receipts;\n8. ends with `NO_TRADE_DECISION`.\n\nSee [`SKILL.md`](./SKILL.md) for the agent contract.\n\n## Binance Agent OS integration\n\nOfficial MCP endpoint:\n\n```text\nhttps://agent.binance.com/mcp/agentic\n```\n\nThe skill requires only the **Market Data** capability. It does not require Account, Trade or Transfer.\n\nA runtime probe against the official endpoint correctly returned an OAuth challenge rather than pretending to be connected. The discovered authorization metadata advertises Authorization Code, PKCE `S256`, token endpoint authentication method `none`, and Client ID Metadata Document (CIMD) support.\n\nPayAna 1.2 adds an **optional, user-initiated OAuth verification flow** at `/oauth/start`. Its public client identity is `https://payana-agent-os.val.run/oauth/client-metadata.json`. The flow stores only a one-time `state` plus PKCE verifier for at most ten minutes, exchanges the authorization code in callback memory, reads the MCP tool catalog, and then discards the access token and any refresh token. It never calls an MCP tool automatically.\n\nThe boundary remains explicit:\n\n```text\nMCP_ENDPOINT_KNOWN != MCP_SESSION_AUTHORIZED\nOAUTH_FLOW_READY != USER_AUTHORIZED_SESSION\nAUTHORIZED_TOOL_CATALOG != TOOL_CALL\n```\n\nA direct unauthenticated MCP transport probe also found that the deployed Agent OS server currently returns JSON-RPC `Method not found` for modern `server/discover` and HTTP 401 + OAuth resource metadata for `tools/list`. So Binance's \"Market Data: public, no auth\" capability should not be confused with an anonymously accessible MCP tool catalog: the connection is still authorization-gated in this runtime. A real Agent OS connection receipt therefore still requires the participant to complete the supported MCP-client connection/authentication flow. Until that gate happens, the hosted reference cockpit continues to use Binance's documented public market-data API surface for the reproducible analysis layer and does not claim an authenticated MCP session.\n\nCurrent Binance Developer documentation lists supported MCP clients including ChatGPT on the web, ChatGPT/Codex Desktop, Codex CLI, Claude Code/Desktop, VS Code and Grok Bot. Its own connection witness is a read-only request for current BTCUSDT price and 24-hour change, with the Binance MCP tool attribution visibly present in the client response. PayAna uses that exact witness as the remaining MCP proof gate; Account, Trade and Transfer are not needed for the Track A read-only workflow.\n\n## Live reference cockpit\n\n**Production demo:** https://payana-agent-os.val.run/\n\nThe deployed web application provides a zero-trade demonstration of the deterministic evidence layer:\n\n- BTCUSDT\n- ETHUSDT\n- BNBUSDT\n- SOLUSDT\n- XRPUSDT\n\nFor each symbol it combines:\n\n- 24h ticker;\n- top-20 order book;\n- 36 × 5-minute candles;\n- spread;\n- top-20 bid/ask notional;\n- order-book imbalance;\n- 30m and 3h momentum;\n- 5m realized volatility;\n- volume z-score;\n- descriptive directional pressure;\n- heuristic evidence-stability score;\n- source receipts;\n- risk flags;\n- falsifiers;\n- missing context.\n\nThe stability score is explicitly **not a calibrated probability**.\n\n## Reproducible formulas\n\n```text\nspread_bps = (ask - bid) / mid * 10000\n\nbid_notional = Σ(price_i × qty_i), top 20 bids\nask_notional = Σ(price_i × qty_i), top 20 asks\n\nbook_imbalance =\n (bid_notional - ask_notional) /\n (bid_notional + ask_notional)\n\nlog_return_t = ln(close_t / close_(t-1))\n\nrealized_vol_5m_bps =\n sample_std(log_returns) × 10000\n\nmomentum_30m_pct =\n (latest_close / close_30m_ago - 1) × 100\n\nvolume_z =\n (latest_quote_volume - mean(prior_quote_volumes)) /\n sample_std(prior_quote_volumes)\n```\n\nThe API exposes its method description directly in every successful response.\n\n## HTTP API\n\n```text\nGET /api/health\nGET /api/submission-evidence # machine-readable Track A evidence manifest\nGET /api/symbols\nGET /api/analyze?symbol=BTCUSDT\nGET /oauth/status\nGET /oauth/client-metadata.json\nGET /oauth/start # explicit user action; redirects to Binance\nGET /oauth/callback # OAuth response only\n```\n\nThere is deliberately no trading endpoint. `/oauth/start` is not called by the cockpit automatically; the participant must click the verification action.\n\nExample safety fields:\n\n```json\n{\n \"readOnly\": true,\n \"boundary\": \"MARKET_DATA_READ != TRADING_AUTH\",\n \"assessment\": {\n \"recommendation\": \"NO_TRADE_DECISION\"\n }\n}\n```\n\n## Runtime discovery\n\nThe application does not assume that a documented endpoint is usable from every execution environment.\n\nDuring the 2026-09-07 Val Town runtime census:\n\n```text\napi.binance.com → HTTP 451 from this runtime\nfapi.binance.com → HTTP 451 from this runtime\ndata-api.binance.vision → HTTP 200 for public spot market data\nAgent OS MCP initialize → HTTP 401 OAuth challenge, as expected without authorization\n```\n\n`data-api.binance.vision` is therefore the current runtime champion for the hosted public-data reference layer.\n\nSee [`docs/ARCHITECTURE.md`](./docs/ARCHITECTURE.md) for the evidence and boundaries.\n\n## Validation\n\nCurrent 1.2 release-candidate audit:\n\n```text\n189 / 189 assertions PASS\n35 / 35 rate-limit mutation steps PASS\n224 total executed checks\n```\n\nThe OAuth/MCP portion contributes 34 authorization-flow checks, 25 synthetic MCP/token-boundary checks and 6 OAuth-state storage/replay checks. The aggregate runner executes suites sequentially because multiple mutation suites temporarily replace `globalThis.fetch`; this prevents false interference between independent tests.\n\nCoverage includes all five allowlisted symbols and validates:\n\n- current ticker timestamp;\n- positive market price;\n- non-negative spread;\n- order-book imbalance bounds;\n- stability-score bounds;\n- explicit non-probability language;\n- three source receipts;\n- candle-series presence;\n- `NO_TRADE_DECISION` invariant;\n- invalid symbols;\n- injection-like symbol strings;\n- nonexistent routes;\n- rejection of write-like POST access.\n\nRate-limit mutation control:\n\n```text\nrequests 1–30 → HTTP 200\nrequests 31–35 → HTTP 429\nPASS\n```\n\nRun in Val Town:\n\n```text\ntests/selftest.ts\ntests/failure_modes_selftest.ts\ntests/oauth_flow_selftest.ts\ntests/oauth_mcp_probe_selftest.ts\ntests/oauth_state_storage_selftest.ts\ntests/rate_limit_selftest.ts\ntests/release_audit.ts\n```\n\nDetailed release evidence: [`docs/TEST_EVIDENCE.md`](./docs/TEST_EVIDENCE.md).\n\nThe browser layer is validated separately from server tests. After CSP hardening, a JavaScript-rendering fetch successfully matched React-only selectors including source receipts. Full interactive/screenshot automation is tracked separately because the external browser providers currently have insufficient credit; it is not mislabeled as completed.\n\n## Web hardening\n\n- strict symbol allowlist;\n- no arbitrary upstream URL forwarding;\n- `Cache-Control: no-store` on API results;\n- CSP;\n- `X-Content-Type-Options: nosniff`;\n- `X-Frame-Options: DENY`;\n- restrictive `Permissions-Policy`;\n- no Binance account key stored in the app;\n- no Account / Trade / Transfer function;\n- best-effort per-runtime rate limiting.\n\nThe rate limiter is intentionally documented as best-effort because serverless instances do not provide a shared global bucket.\n\n## Repository structure\n\n```text\n.\n├── SKILL.md # reusable Falsifier Agent contract\n├── index.ts # Hono API + web security boundaries\n├── lib/\n│ ├── market.ts # evidence acquisition + formulas\n│ └── agent_os_oauth.ts # CIMD + PKCE + ephemeral MCP catalog probe\n├── frontend/\n│ ├── root.tsx\n│ ├── index.tsx\n│ ├── styles.css\n│ └── components/App.tsx\n├── tests/\n│ ├── selftest.ts\n│ ├── failure_modes_selftest.ts\n│ ├── oauth_flow_selftest.ts\n│ ├── oauth_mcp_probe_selftest.ts\n│ ├── oauth_state_storage_selftest.ts\n│ ├── rate_limit_selftest.ts\n│ └── release_audit.ts\n├── audits/\n│ ├── binance_mcp_probe.ts\n│ ├── binance_mcp_public_market_probe.ts\n│ ├── oauth_authorization_acceptance_probe.ts\n│ ├── oauth_metadata_probe.ts\n│ ├── market_api_probe.ts\n│ └── vision_klines_probe.ts\n└── docs/\n ├── ARCHITECTURE.md\n ├── TEST_EVIDENCE.md\n ├── SUBMISSION_CHECKLIST.md\n └── SUBMISSION_PACKAGE.md\n```\n\n## Negative controls that matter\n\n```text\nHTTP_200 != VALID_MARKET_EVIDENCE\nSCREENSHOT != BEHAVIOR_PROOF\nMARKET_DATA_READ != TRADING_AUTH\nMCP_ENDPOINT_KNOWN != MCP_SESSION_AUTHORIZED\nOAUTH_FLOW_READY != USER_AUTHORIZED_SESSION\nACCESS_TOKEN_EPHEMERAL != TOKEN_PERSISTED\nAUTHORIZED_TOOL_CATALOG != TOOL_CALL\nMODEL_SCORE != CALIBRATED_PROBABILITY\nMISSING_EVIDENCE != ZERO\nCURRENT_PRESSURE != FUTURE_PRICE\nFETCH_FAIL != ZERO\n```\n\n## Hackathon submission state\n\nThe official Binance announcement states a Track A deadline of **2026-09-08 23:59 UTC** and requires following/reposting Binance, replying or quote-reposting with the Track A submission (video/demo plus GitHub when applicable), and completing the survey.\n\nExternal account actions are intentionally tracked as unverified until they actually happen. See [`docs/SUBMISSION_CHECKLIST.md`](./docs/SUBMISSION_CHECKLIST.md) for the current gates and [`docs/SUBMISSION_PACKAGE.md`](./docs/SUBMISSION_PACKAGE.md) for the prepared video, X and survey handoff.\n\n## Design principle\n\nPayAna's thesis is not “AI can predict the market.”\n\nIt is:\n\n> **An agent becomes more trustworthy when it is required to expose the evidence against its own conclusion, the conditions that would falsify it, and the context it does not have.**\n",[],[227],"a15731ad-4d53-4619-8b2b-f7fefce8f8bb","CHANGELOG.md","01a07d8b-9306-748f-a55c-52427940545d",45,["D",1788820320342],4,"# Changelog\n\n## 2026-09-07 — PayAna Market Sentinel 1.2.0 RC1\n\n### Agent OS connection verification\n\n- Added stable production endpoint `https://payana-agent-os.val.run/` and CIMD client identity at `/oauth/client-metadata.json`.\n- Added user-initiated Authorization Code + PKCE S256 flow with `/oauth/start` and `/oauth/callback`.\n- Added one-time OAuth state/verifier storage with 10-minute TTL, replay rejection, concurrent single-consumer behavior and a hard 500-row pending-state cap.\n- Access tokens and refresh tokens are never durably stored; callback use is ephemeral.\n- Authorized-catalog probe reads only `server/discover` / `tools/list`; no `tools/call` is performed automatically.\n- Added MCP 2026-07-28 protocol/method headers and `_meta` protocol version, client capabilities and client identity, with legacy initialize fallback retained.\n- Added direct unauthenticated Agent OS transport probe: `server/discover` returned method-not-found while `tools/list` returned OAuth 401, proving the current connection gate.\n- Added canonical authorization-surface probe; Binance returned a JavaScript anti-robot interstitial (HTTP 202), so provider CIMD acceptance remains PARTIAL until a real browser/client flow completes.\n\n### Falsification and security\n\n- Added OAuth flow suite: 34/34 PASS.\n- Added synthetic token/MCP catalog suite: 25/25 PASS.\n- Added OAuth-state storage/replay suite: 6/6 PASS.\n- Synthetic tool catalog includes safe Market Data and dangerous order/account/transfer tools; dangerous tools are excluded and automatic tool invocation is prohibited.\n- Hardened modern MCP request metadata to current 2026-07-28 structure.\n- Bounded abandoned OAuth state growth and verified zero pending self-test states after execution.\n- Fixed a reproduced LibSQL `SQLITE_BUSY` race in concurrent OAuth-state consumption by replacing SELECT+DELETE batching with atomic `DELETE ... RETURNING`, bounded busy retry and best-effort expiry pruning.\n- OAuth-state concurrency suite passed five consecutive executions after the fix; full 224-check release audit passed again at 2026-09-07T22:31:20Z.\n\n\n### Release validation\n\n- Core/live market suite: 101/101 PASS.\n- Source failure/malformed-response suite: 23/23 PASS.\n- OAuth flow suite: 34/34 PASS.\n- OAuth token/MCP suite: 25/25 PASS.\n- OAuth state storage suite: 6/6 PASS.\n- Rate-limit mutation: 35/35 expected transitions PASS.\n- Aggregate: **189 assertions + 35 mutation steps = 224 executed checks PASS**.\n- A test-harness race was discovered when global fetch mutation suites were statically imported; aggregate execution now imports mutation suites sequentially.\n\n### Submission readiness\n\n- Updated README, architecture, evidence and submission checklist to distinguish public Market Data from MCP connection authorization.\n- Current technical blockers are external proof gates: real supported-client MCP connection, final screen recording, GitHub mirror if used, X submission and Binance survey.\n\n## 2026-09-07 — PayAna Market Sentinel 1.0 candidate\n\n### Agent / methodology\n\n- Added `SKILL.md`: evidence-first Binance Agent OS market-data workflow.\n- Added winning/opposite/alternative hypothesis branches and observable falsifiers.\n- Added explicit negative-space / missing-context reporting.\n- Added hard `NO_TRADE_DECISION` and `MARKET_DATA_READ != TRADING_AUTH` boundaries.\n- Replaced misleading \"model confidence\" language with a heuristic `stabilityScore` that explicitly states it is not a calibrated probability.\n\n### Binance runtime discovery\n\n- Probed the official Agent OS MCP endpoint.\n- Confirmed unauthenticated `initialize` produces an OAuth 401 challenge rather than a usable session.\n- Retrieved OAuth Protected Resource Metadata and Authorization Server Metadata.\n- Confirmed Authorization Code, PKCE S256, public-client token auth (`none`), and Client ID Metadata Document support.\n- Confirmed Val Town runtime receives HTTP 451 from `api.binance.com`/`fapi.binance.com`.\n- Confirmed `data-api.binance.vision` works for public spot ticker, depth and klines and promoted it as the hosted-demo runtime champion.\n\n### Evidence engine\n\n- Added five-symbol allowlist: BTCUSDT, ETHUSDT, BNBUSDT, SOLUSDT, XRPUSDT.\n- Added 24h ticker, top-20 order-book and 36 × 5m candle acquisition.\n- Added source receipts with HTTP state and duration.\n- Added PASS/PARTIAL/FAIL evidence-state classification.\n- Added spread, notional depth, order-book imbalance, realized volatility, momentum and volume-z calculations.\n- Added descriptive directional pressure and explicit falsifiers.\n- Added method/formula metadata directly to API responses.\n\n### API and security\n\n- Added `/api/health`, `/api/symbols`, `/api/analyze`.\n- Added strict symbol validation and allowlisting.\n- Added `Cache-Control: no-store` for API responses.\n- Added CSP, `nosniff`, frame denial, `Referrer-Policy` and restrictive `Permissions-Policy`.\n- Removed React inline-style dependencies so the strict `style-src 'self'` CSP remains viable.\n- Added best-effort per-runtime request limiting.\n- No trade, account, transfer, wallet or arbitrary upstream forwarding endpoint exists.\n\n### Frontend\n\n- Replaced the template UI with the PayAna dark evidence cockpit.\n- Added market metrics, short-horizon sparkline, source receipts, stability indicator, risk flags, falsifiers and blind spots.\n- Added automatic 30-second evidence refresh while the page is visible.\n- Added responsive desktop/mobile layout.\n\n### Validation\n\n- Core/live self-test: 101/101 PASS across five symbols and NEURON hypothesis fields.\n- Source-failure/malformed-response mutation suite: 23/23 PASS, including explicit proof that missing evidence is not zero-imputed.\n- Rate-limit mutation: requests 1–30 return 200; 31–35 return 429 — PASS.\n- Aggregate release audit: 124 assertions + 35 mutation steps = 159 executed checks, PASS.\n- Invalid/injection-like symbols are rejected.\n- Write-like POST access to analysis route is rejected.\n- Immutable frontend entry and App assets return 200 and compile to JavaScript.\n- Root HTTP response contains final CSP and security headers.\n- JavaScript-rendering content extraction matched React-only `.app-shell` and `.source-item` selectors after CSP hardening.\n- Interactive screenshot/browser automation was attempted but external TinyFish and Firecrawl accounts reported insufficient credit; this remains explicitly unverified instead of being promoted to PASS.\n\n### Documentation\n\n- Rebuilt README for the hackathon candidate.\n- Added `docs/ARCHITECTURE.md`.\n- Added `docs/SUBMISSION_CHECKLIST.md`.\n- Organized probes under `audits/` and executable checks under `tests/`.\n",[],[236],"44442e9d-9668-4878-98e7-b223f94c72d1","selftest.ts","06f1a980-aafe-11f1-857f-1607ee4eb77e","01a07da4-bf09-76f4-833d-9d03a9489f5d",["D",1788814343943],"import handler from \"../index.ts\";\nimport { analyzeMarket, normalizeSymbol, supportedSymbols } from \"../lib/market.ts\";\n\nconst results: any[] = [];\nfunction check(name: string, pass: boolean, details?: unknown) {\n results.push({ name, pass, details });\n if (!pass) throw new Error(`SELFTEST_FAIL:${name}`);\n}\n\nfor (const bad of [\"INVALIDXYZ\", \"BTCUSDT&foo=bar\", \"../BTCUSDT\", \"\"]) {\n let rejected = false;\n try { normalizeSymbol(bad); } catch { rejected = true; }\n if (bad === \"\") {\n // empty input normalizes to default only when nullish is not used; explicit empty must not leave allowlist.\n check(\"explicit_empty_rejected\", rejected);\n } else check(`invalid_symbol_rejected:${bad}`, rejected);\n}\n\nfor (const symbol of supportedSymbols()) {\n const r: any = await analyzeMarket(symbol);\n check(`${symbol}:evidence`, [\"PASS\", \"PARTIAL\"].includes(r.evidenceState), r.evidenceState);\n check(`${symbol}:read_only`, r.readOnly === true && r.boundary === \"MARKET_DATA_READ != TRADING_AUTH\");\n check(`${symbol}:price_positive`, Number(r.market?.lastPrice) > 0, r.market?.lastPrice);\n check(`${symbol}:spread_nonnegative`, Number(r.microstructure?.spreadBps) >= 0, r.microstructure?.spreadBps);\n check(`${symbol}:imbalance_bounded`, Math.abs(Number(r.microstructure?.orderBookImbalance)) <= 1.000001, r.microstructure?.orderBookImbalance);\n check(`${symbol}:stability_bounded`, Number(r.assessment?.stabilityScore) >= 0 && Number(r.assessment?.stabilityScore) <= 1, r.assessment?.stabilityScore);\n check(`${symbol}:stability_not_probability`, String(r.assessment?.stabilityMeaning ?? \"\").includes(\"not a calibrated probability\"));\n check(`${symbol}:winning_hypothesis`, String(r.assessment?.hypotheses?.winning ?? \"\").length > 20);\n check(`${symbol}:opposite_hypothesis`, String(r.assessment?.hypotheses?.opposite ?? \"\").length > 20);\n check(`${symbol}:alternative_hypothesis`, String(r.assessment?.hypotheses?.alternative ?? \"\").length > 20);\n check(`${symbol}:supporting_evidence`, Array.isArray(r.assessment?.supportingEvidence) && r.assessment.supportingEvidence.length >= 1);\n check(`${symbol}:opposing_evidence`, Array.isArray(r.assessment?.opposingEvidence) && r.assessment.opposingEvidence.length >= 1);\n check(`${symbol}:alternative_explanations`, Array.isArray(r.assessment?.alternativeExplanations) && r.assessment.alternativeExplanations.length >= 2);\n check(`${symbol}:falsifiers`, Array.isArray(r.assessment?.falsifiers) && r.assessment.falsifiers.length >= 2);\n check(`${symbol}:next_test`, String(r.assessment?.nextTest ?? \"\").includes(\"5m\"));\n check(`${symbol}:no_trade_recommendation`, r.assessment?.recommendation === \"NO_TRADE_DECISION\");\n check(`${symbol}:receipts_present`, Array.isArray(r.receipts) && r.receipts.length === 3, r.receipts?.length);\n check(`${symbol}:series_present`, Array.isArray(r.shortHorizon?.closeSeries) && r.shortHorizon.closeSeries.length >= 12, r.shortHorizon?.closeSeries?.length);\n const closeTime = Number(r.market?.tickerCloseTime);\n check(`${symbol}:ticker_currentness`, Number.isFinite(closeTime) && Math.abs(Date.now() - closeTime) < 5 * 60_000, { closeTime, ageMs: Date.now() - closeTime });\n}\n\nconst post = await handler(new Request(\"https://local.test/api/analyze?symbol=BTCUSDT\", { method: \"POST\" }));\ncheck(\"post_not_supported\", post.status === 404, post.status);\nconst unknown = await handler(new Request(\"https://local.test/api/does-not-exist\"));\ncheck(\"unknown_route_404\", unknown.status === 404, unknown.status);\n\nconst pass = results.every(r => r.pass);\nconsole.log(JSON.stringify({ pass, version: \"1.0.0\", tests: results.length, results }));\nexport default { pass, tests: results.length };\n",[],[252,245],"tests","fbe40cd3-87b6-4f29-8cd7-6508483703cb","release_audit.ts","06f1a084-aafe-11f1-857f-1607ee4eb77e",20,["D",1788819759620],"const core = (await import(\"./selftest.ts\")).default;\nconst failureModes = (await import(\"./failure_modes_selftest.ts\")).default;\nconst oauthFlow = (await import(\"./oauth_flow_selftest.ts\")).default;\nconst oauthMcpProbe = (await import(\"./oauth_mcp_probe_selftest.ts\")).default;\nconst oauthStateStorage = (await import(\"./oauth_state_storage_selftest.ts\")).default;\nconst rateLimit = (await import(\"./rate_limit_selftest.ts\")).default;\n\nconst suites = {\n core,\n failureModes,\n oauthFlow,\n oauthMcpProbe,\n oauthStateStorage,\n rateLimit,\n};\nconst pass = Object.values(suites).every((suite: any) => suite?.pass === true);\nconst assertionCount = Number(core?.tests ?? 0)\n + Number(failureModes?.tests ?? 0)\n + Number(oauthFlow?.tests ?? 0)\n + Number(oauthMcpProbe?.tests ?? 0)\n + Number(oauthStateStorage?.tests ?? 0);\nconst mutationSteps = Number(rateLimit?.tests ?? 0);\nconst result = {\n pass,\n releaseCandidate: \"payana-market-sentinel-1.2.0-rc1\",\n assertionCount,\n mutationSteps,\n totalExecutedChecks: assertionCount + mutationSteps,\n suites,\n invariants: [\n \"MARKET_DATA_READ != TRADING_AUTH\",\n \"MCP_ENDPOINT_KNOWN != MCP_SESSION_AUTHORIZED\",\n \"MODEL_SCORE != CALIBRATED_PROBABILITY\",\n \"MISSING_EVIDENCE != ZERO\",\n \"CURRENT_PRESSURE != FUTURE_PRICE\",\n \"OAUTH_FLOW_READY != USER_AUTHORIZED_SESSION\",\n \"ACCESS_TOKEN_EPHEMERAL != TOKEN_PERSISTED\",\n \"AUTHORIZED_TOOL_CATALOG != TOOL_CALL\",\n ],\n auditedAt: new Date().toISOString(),\n};\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"RELEASE_AUDIT_FAIL\");\nexport default result;\n",[],[252,254],"f18596a0-38ea-4e54-b9c4-7bfd020a9356","rate_limit_selftest.ts","06f19a58-aafe-11f1-857f-1607ee4eb77e",["D",1788814343943],"import handler from \"../index.ts\";\n\nconst statuses:number[]=[];\nfor(let i=0;i<35;i++){\n const r=await handler(new Request(\"https://local.test/api/health\",{headers:{\"x-forwarded-for\":\"203.0.113.77\"}}));\n statuses.push(r.status);\n}\nconst first30=statuses.slice(0,30);\nconst tail=statuses.slice(30);\nconst pass=first30.every(s=>s===200)&&tail.every(s=>s===429);\nconsole.log(JSON.stringify({pass,statuses,rule:\"30 requests per 60s per runtime bucket\"}));\nif(!pass) throw new Error(\"RATE_LIMIT_SELFTEST_FAIL\");\nexport default {pass, tests: statuses.length};\n",[],[252,262],"c632fd3f-6d66-413c-b066-7288ec3076d7","oauth_state_storage_selftest.ts","8d8f7326-ab0a-11f1-8b39-1607ee4eb77e",17,["D",1788819723776],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { consumeAuthorizationState, createAuthorizationRequest } from \"../lib/agent_os_oauth.ts\";\n\nconst checks: { name: string; pass: boolean; details?: unknown }[] = [];\nfunction check(name: string, pass: boolean, details?: unknown) {\n checks.push({ name, pass, details });\n if (!pass) throw new Error(`OAUTH_STATE_STORAGE_SELFTEST:${name}`);\n}\n\nconst marker = `storage-selftest-${crypto.randomUUID()}`;\nconst expiredState = `${marker}-expired`;\ntry {\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO agent_os_oauth_states(state, code_verifier, created_at_ms) VALUES(?,?,?)\",\n args: [expiredState, \"synthetic-expired-verifier\", Date.now() - 11 * 60_000],\n });\n\n const request = await createAuthorizationRequest();\n const expired = await sqlite.execute({ sql: \"SELECT COUNT(*) AS n FROM agent_os_oauth_states WHERE state=?\", args: [expiredState] });\n check(\"expired_state_pruned_on_create\", Number((expired.rows[0] as any)?.n ?? -1) === 0, expired.rows[0]);\n\n const consumed = await consumeAuthorizationState(request.state);\n check(\"fresh_state_consumable\", Boolean(consumed?.verifier && consumed.verifier.length >= 80), consumed?.verifier.length);\n check(\"fresh_state_replay_rejected\", (await consumeAuthorizationState(request.state)) === null);\n\n const concurrent = await createAuthorizationRequest();\n const pair = await Promise.all([\n consumeAuthorizationState(concurrent.state),\n consumeAuthorizationState(concurrent.state),\n ]);\n const winners = pair.filter(Boolean).length;\n check(\"concurrent_consumption_single_winner\", winners === 1, winners);\n\n const pending = await sqlite.execute({ sql: \"SELECT COUNT(*) AS n FROM agent_os_oauth_states WHERE state IN (?,?)\", args: [request.state, concurrent.state] });\n check(\"test_states_not_left_pending\", Number((pending.rows[0] as any)?.n ?? -1) === 0, pending.rows[0]);\n\n const total = await sqlite.execute(\"SELECT COUNT(*) AS n FROM agent_os_oauth_states\");\n check(\"global_pending_state_cap_respected\", Number((total.rows[0] as any)?.n ?? 0) <= 500, total.rows[0]);\n} finally {\n await sqlite.execute({ sql: \"DELETE FROM agent_os_oauth_states WHERE state LIKE ?\", args: [`${marker}%`] });\n}\n\nconst pass = checks.every(x => x.pass);\nconsole.log(JSON.stringify({ pass, version: \"oauth-state-storage-1.0.0\", tests: checks.length, checks }));\nexport default { pass, tests: checks.length };\n",[],[252,269],"fbb78bce-99f7-443f-b5d7-56aefb64e68b","oauth_mcp_probe_selftest.ts","eba028da-ab09-11f1-870d-1607ee4eb77e",16,["D",1788819706612],1,"import { AGENT_OS, exchangeAuthorizationCode, probeAuthorizedAgentOs } from \"../lib/agent_os_oauth.ts\";\n\nconst originalFetch = globalThis.fetch;\nconst checks: { name: string; pass: boolean; details?: unknown }[] = [];\nfunction check(name: string, pass: boolean, details?: unknown) {\n checks.push({ name, pass, details });\n if (!pass) throw new Error(`OAUTH_MCP_PROBE_SELFTEST:${name}`);\n}\n\ntry {\n let tokenRequest: any = null;\n globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {\n const url = String(input);\n if (url === AGENT_OS.tokenEndpoint) {\n tokenRequest = { url, method: init?.method, headers: new Headers(init?.headers), body: String(init?.body ?? \"\") };\n return new Response(JSON.stringify({ access_token: \"synthetic-access\", refresh_token: \"synthetic-refresh\", token_type: \"Bearer\", expires_in: 900, scope: \"market-data\" }), { status: 200, headers: { \"content-type\": \"application/json\" } });\n }\n throw new Error(`UNEXPECTED_FETCH:${url}`);\n }) as typeof fetch;\n\n const token = await exchangeAuthorizationCode(\"synthetic-code\", \"synthetic-verifier\");\n check(\"token_exchange_success\", token.ok === true, token);\n if (!token.ok) throw new Error(\"UNREACHABLE_TOKEN_FAIL\");\n check(\"token_request_post\", tokenRequest?.method === \"POST\", tokenRequest?.method);\n check(\"token_request_no_authorization_header\", !tokenRequest?.headers?.has(\"authorization\"));\n const form = new URLSearchParams(tokenRequest?.body ?? \"\");\n check(\"token_request_client_id\", form.get(\"client_id\") === AGENT_OS.clientId, form.get(\"client_id\"));\n check(\"token_request_redirect\", form.get(\"redirect_uri\") === AGENT_OS.redirectUri, form.get(\"redirect_uri\"));\n check(\"token_request_resource\", form.get(\"resource\") === AGENT_OS.resource, form.get(\"resource\"));\n check(\"token_request_pkce_verifier\", form.get(\"code_verifier\") === \"synthetic-verifier\");\n check(\"token_request_no_client_secret\", !form.has(\"client_secret\"));\n check(\"refresh_token_only_booleanized\", token.refreshTokenReturned === true && !(\"refreshToken\" in token));\n\n const mcpBodies: any[] = [];\n globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {\n const url = String(input);\n if (url !== AGENT_OS.resource) throw new Error(`UNEXPECTED_MCP_URL:${url}`);\n const headers = new Headers(init?.headers);\n const body = JSON.parse(String(init?.body ?? \"{}\"));\n mcpBodies.push({ headers, body });\n if (body.method === \"server/discover\") {\n return new Response(JSON.stringify({ jsonrpc: \"2.0\", id: body.id, result: { capabilities: { tools: {} } }, _meta: { \"io.modelcontextprotocol/serverInfo\": { name: \"synthetic\", version: \"1\" } } }), { status: 200, headers: { \"content-type\": \"application/json\" } });\n }\n if (body.method === \"tools/list\") {\n return new Response(JSON.stringify({ jsonrpc: \"2.0\", id: body.id, result: { tools: [\n { name: \"get_ticker_price\", description: \"Read current ticker price market data\", inputSchema: { type: \"object\", properties: { symbol: { type: \"string\" } }, required: [\"symbol\"] } },\n { name: \"get_order_book\", description: \"Read current order book depth\", inputSchema: { type: \"object\", properties: { symbol: { type: \"string\" }, limit: { type: \"integer\", minimum: 1, maximum: 100 } }, required: [\"symbol\"] } },\n { name: \"place_order\", description: \"Place an order at a target price\", inputSchema: { type: \"object\", properties: { symbol: { type: \"string\" } }, required: [\"symbol\"] } },\n { name: \"get_account_price_alerts\", description: \"Read account-related price alerts\", inputSchema: { type: \"object\", properties: {} } },\n { name: \"transfer_wallet\", description: \"Transfer wallet assets\", inputSchema: { type: \"object\", properties: {} } }\n ] } }), { status: 200, headers: { \"content-type\": \"application/json\" } });\n }\n if (body.method === \"tools/call\") throw new Error(\"AUTOMATIC_TOOL_CALL_FORBIDDEN\");\n throw new Error(`UNEXPECTED_MCP_METHOD:${body.method}`);\n }) as typeof fetch;\n\n const probe = await probeAuthorizedAgentOs(\"synthetic-access\");\n check(\"probe_connected\", probe.connected === true, probe.connected);\n check(\"probe_modern_era\", probe.protocolEra === \"2026-07-28\", probe.protocolEra);\n check(\"probe_tool_count\", probe.toolCount === 5, probe.toolCount);\n check(\"probe_safe_ticker\", probe.safeMarketToolNames.includes(\"get_ticker_price\"), probe.safeMarketToolNames);\n check(\"probe_safe_order_book\", probe.safeMarketToolNames.includes(\"get_order_book\"), probe.safeMarketToolNames);\n check(\"probe_excludes_place_order\", !probe.safeMarketToolNames.includes(\"place_order\"), probe.safeMarketToolNames);\n check(\"probe_excludes_account\", !probe.safeMarketToolNames.includes(\"get_account_price_alerts\"), probe.safeMarketToolNames);\n check(\"probe_excludes_transfer\", !probe.safeMarketToolNames.includes(\"transfer_wallet\"), probe.safeMarketToolNames);\n check(\"probe_no_auto_tool_call\", probe.automaticToolCallPerformed === false, probe.automaticToolCallPerformed);\n check(\"probe_exactly_two_mcp_requests\", mcpBodies.length === 2, mcpBodies.map(x => x.body.method));\n check(\"probe_no_tools_call\", !mcpBodies.some(x => x.body.method === \"tools/call\"), mcpBodies.map(x => x.body.method));\n check(\"modern_headers_present\", mcpBodies.every(x => x.headers.get(\"mcp-protocol-version\") === \"2026-07-28\" && x.headers.get(\"mcp-method\") === x.body.method));\n check(\"modern_meta_protocol_version\", mcpBodies.every(x => x.body?.params?._meta?.[\"io.modelcontextprotocol/protocolVersion\"] === \"2026-07-28\"));\n check(\"modern_meta_capabilities_present\", mcpBodies.every(x => x.body?.params?._meta?.[\"io.modelcontextprotocol/clientCapabilities\"] && typeof x.body.params._meta[\"io.modelcontextprotocol/clientCapabilities\"] === \"object\"));\n check(\"modern_meta_client_info_current\", mcpBodies.every(x => x.body?.params?._meta?.[\"io.modelcontextprotocol/clientInfo\"]?.version === \"1.2.0-rc1\"));\n check(\"token_not_in_probe_output\", !JSON.stringify(probe).includes(\"synthetic-access\"));\n} finally {\n globalThis.fetch = originalFetch;\n}\n\nconst pass = checks.every(x => x.pass);\nconsole.log(JSON.stringify({ pass, version: \"oauth-mcp-probe-1.0.0\", tests: checks.length, checks }));\nexport default { pass, tests: checks.length };\n",[],[252,277],"f8b3cbad-26ca-4ccc-aa57-d547c0c29a2f","oauth_flow_selftest.ts","eba008c8-ab09-11f1-870d-1607ee4eb77e",9,["D",1788819451982],"import handler from \"../index.ts\";\nimport {\n AGENT_OS,\n clientMetadata,\n consumeAuthorizationState,\n createAuthorizationRequest,\n} from \"../lib/agent_os_oauth.ts\";\n\nconst checks: { name: string; pass: boolean; details?: unknown }[] = [];\nfunction check(name: string, pass: boolean, details?: unknown) {\n checks.push({ name, pass, details });\n if (!pass) throw new Error(`OAUTH_SELFTEST_FAIL:${name}`);\n}\n\nconst metadata = clientMetadata();\ncheck(\"client_id_https_non_root\", new URL(metadata.client_id).protocol === \"https:\" && new URL(metadata.client_id).pathname !== \"/\", metadata.client_id);\ncheck(\"client_id_exact\", metadata.client_id === AGENT_OS.clientId);\ncheck(\"metadata_client_name\", metadata.client_name === \"PayAna Falsifier Agent\");\ncheck(\"redirect_exact\", metadata.redirect_uris.length === 1 && metadata.redirect_uris[0] === AGENT_OS.redirectUri);\ncheck(\"redirect_same_origin\", new URL(metadata.redirect_uris[0]).origin === AGENT_OS.origin);\ncheck(\"auth_method_none\", metadata.token_endpoint_auth_method === \"none\");\ncheck(\"web_application\", metadata.application_type === \"web\");\ncheck(\"authorization_code_only\", metadata.grant_types.includes(\"authorization_code\") && metadata.response_types.includes(\"code\"));\n\nconst generated = await createAuthorizationRequest();\nconst authorizationUrl = new URL(generated.url);\ncheck(\"authorization_host\", authorizationUrl.origin === \"https://accounts.binance.com\", authorizationUrl.origin);\ncheck(\"authorization_path\", authorizationUrl.pathname === \"/agentic-oauth/authorize\", authorizationUrl.pathname);\ncheck(\"response_type\", authorizationUrl.searchParams.get(\"response_type\") === \"code\");\ncheck(\"authorization_client_id\", authorizationUrl.searchParams.get(\"client_id\") === AGENT_OS.clientId);\ncheck(\"authorization_redirect\", authorizationUrl.searchParams.get(\"redirect_uri\") === AGENT_OS.redirectUri);\ncheck(\"authorization_resource\", authorizationUrl.searchParams.get(\"resource\") === AGENT_OS.resource);\ncheck(\"pkce_method\", authorizationUrl.searchParams.get(\"code_challenge_method\") === \"S256\");\ncheck(\"pkce_challenge_shape\", /^[A-Za-z0-9_-]{43}$/.test(authorizationUrl.searchParams.get(\"code_challenge\") ?? \"\"), authorizationUrl.searchParams.get(\"code_challenge\"));\ncheck(\"state_shape\", /^[A-Za-z0-9_-]{40,60}$/.test(generated.state), generated.state.length);\nconst consumed = await consumeAuthorizationState(generated.state);\ncheck(\"state_consumed_once\", Boolean(consumed?.verifier && consumed.verifier.length >= 80), consumed?.verifier.length);\nconst replay = await consumeAuthorizationState(generated.state);\ncheck(\"state_replay_rejected\", replay === null, replay);\n\nconst metadataResponse = await handler(new Request(\"https://local.test/oauth/client-metadata.json\", { headers: { \"x-forwarded-for\": \"203.0.113.81\" } }));\ncheck(\"metadata_route_200\", metadataResponse.status === 200, metadataResponse.status);\nconst routeMetadata = await metadataResponse.json();\ncheck(\"metadata_route_exact_client\", routeMetadata.client_id === AGENT_OS.clientId, routeMetadata.client_id);\n\nconst statusResponse = await handler(new Request(\"https://local.test/oauth/status\", { headers: { \"x-forwarded-for\": \"203.0.113.82\" } }));\ncheck(\"status_route_200\", statusResponse.status === 200, statusResponse.status);\nconst statusBody = await statusResponse.json();\ncheck(\"status_boundary\", statusBody.boundary === \"OAUTH_FLOW_READY != USER_AUTHORIZED_SESSION\", statusBody.boundary);\ncheck(\"status_no_token_persistence\", statusBody.tokenPersistence === \"NONE\", statusBody.tokenPersistence);\ncheck(\"status_no_auto_tool_call\", statusBody.automaticToolCall === false, statusBody.automaticToolCall);\n\nconst startResponse = await handler(new Request(\"https://local.test/oauth/start\", { headers: { \"x-forwarded-for\": \"203.0.113.83\" } }));\ncheck(\"start_route_302\", startResponse.status === 302, startResponse.status);\nconst location = startResponse.headers.get(\"location\") ?? \"\";\nconst startUrl = new URL(location);\ncheck(\"start_external_binance\", startUrl.origin === \"https://accounts.binance.com\", startUrl.origin);\nconst startState = startUrl.searchParams.get(\"state\") ?? \"\";\ncheck(\"start_state_present\", /^[A-Za-z0-9_-]{40,60}$/.test(startState), startState.length);\ncheck(\"start_state_server_stored\", Boolean(await consumeAuthorizationState(startState)));\n\nconst invalidCallback = await handler(new Request(\"https://local.test/oauth/callback?state=nope&code=short\", { headers: { \"x-forwarded-for\": \"203.0.113.84\" } }));\ncheck(\"invalid_callback_400\", invalidCallback.status === 400, invalidCallback.status);\n\nconst issuerCase = await createAuthorizationRequest();\nconst badIssuerUrl = new URL(\"https://local.test/oauth/callback\");\nbadIssuerUrl.searchParams.set(\"state\", issuerCase.state);\nbadIssuerUrl.searchParams.set(\"code\", \"synthetic-code-never-exchanged\");\nbadIssuerUrl.searchParams.set(\"iss\", \"https://attacker.example\");\nconst badIssuer = await handler(new Request(badIssuerUrl, { headers: { \"x-forwarded-for\": \"203.0.113.85\" } }));\ncheck(\"issuer_mismatch_400\", badIssuer.status === 400, badIssuer.status);\ncheck(\"issuer_mismatch_does_not_consume_state\", Boolean(await consumeAuthorizationState(issuerCase.state)));\n\nconst denied = await handler(new Request(\"https://local.test/oauth/callback?error=access_denied\", { headers: { \"x-forwarded-for\": \"203.0.113.86\" } }));\ncheck(\"provider_denial_400\", denied.status === 400, denied.status);\nconst deniedHtml = await denied.text();\ncheck(\"provider_error_not_reflected\", !deniedHtml.includes(\"access_denied\"));\n\nconst pass = checks.every(c => c.pass);\nconsole.log(JSON.stringify({ pass, version: \"oauth-flow-1.0.0\", tests: checks.length, checks }));\nexport default { pass, tests: checks.length };\n",[],[252,286],"194332be-7f20-4f78-bc6b-c66a8ed42772","failure_modes_selftest.ts","06f17dd4-aafe-11f1-857f-1607ee4eb77e",["D",1788814343943],"import { analyzeMarket } from \"../lib/market.ts\";\n\nconst originalFetch = globalThis.fetch;\nconst now = Date.now();\nconst validTicker = {\n symbol: \"BTCUSDT\", priceChangePercent: \"1.25\", lastPrice: \"100.00\", bidPrice: \"99.99\", askPrice: \"100.01\",\n highPrice: \"105.00\", lowPrice: \"95.00\", volume: \"1000\", quoteVolume: \"100000\", closeTime: now, count: 1234,\n};\nconst validDepth = {\n lastUpdateId: 42,\n bids: [[\"99.99\", \"2\"], [\"99.98\", \"1\"]],\n asks: [[\"100.01\", \"1\"], [\"100.02\", \"1\"]],\n};\nconst validKlines = Array.from({ length: 8 }, (_, i) => {\n const open = now - (8 - i) * 300_000;\n const close = 100 + i * 0.1;\n return [open, String(close - 0.05), String(close + 0.1), String(close - 0.1), String(close), \"10\", open + 299_999, String(1000 + i * 10), 100, \"5\", \"500\", \"0\"];\n});\n\nfunction response(body: unknown, status = 200) {\n return new Response(JSON.stringify(body), { status, headers: { \"content-type\": \"application/json\" } });\n}\nfunction install(mode: \"ticker_fail\" | \"malformed_ticker\" | \"ticker_only\" | \"all_fail\" | \"malformed_depth\") {\n globalThis.fetch = (async (input: RequestInfo | URL) => {\n const url = String(input);\n if (mode === \"all_fail\") return response({ error: \"synthetic\" }, 503);\n if (url.includes(\"/ticker/24hr\")) {\n if (mode === \"ticker_fail\") return response({ error: \"synthetic\" }, 503);\n if (mode === \"malformed_ticker\") return response({ symbol: \"BTCUSDT\", lastPrice: \"0\" });\n return response(validTicker);\n }\n if (url.includes(\"/depth\")) {\n if (mode === \"ticker_only\") return response({ error: \"synthetic\" }, 503);\n if (mode === \"malformed_depth\") return response({ lastUpdateId: 42, bids: [], asks: [] });\n return response(validDepth);\n }\n if (url.includes(\"/klines\")) {\n if (mode === \"ticker_only\") return response({ error: \"synthetic\" }, 503);\n return response(validKlines);\n }\n return response({ error: \"unexpected\" }, 404);\n }) as typeof fetch;\n}\n\nconst checks: { name: string; pass: boolean; details?: unknown }[] = [];\nfunction check(name: string, pass: boolean, details?: unknown) {\n checks.push({ name, pass, details });\n if (!pass) throw new Error(`FAILURE_MODE_SELFTEST:${name}`);\n}\n\ntry {\n install(\"ticker_fail\");\n const a: any = await analyzeMarket(\"BTCUSDT\");\n check(\"ticker_fail_partial\", a.evidenceState === \"PARTIAL\", a.evidenceState);\n check(\"ticker_fail_null_price\", a.market?.lastPrice === null, a.market?.lastPrice);\n check(\"ticker_fail_source_false\", a.sourceAvailability?.ticker === false);\n check(\"ticker_fail_no_zero_imputation\", a.market?.change24hPct === null && a.market?.high24h === null && a.market?.low24h === null);\n check(\"ticker_fail_risk_flag\", a.assessment?.riskFlags?.includes(\"MISSING_TICKER_SOURCE\"));\n check(\"ticker_fail_direction_from_survivors\", Number.isFinite(Number(a.assessment?.directionalScore)) && a.assessment?.signalCount >= 2, a.assessment);\n\n install(\"malformed_ticker\");\n const b: any = await analyzeMarket(\"BTCUSDT\");\n const tickerReceipt = b.receipts?.find((r: any) => r.name === \"spot_24h_ticker\");\n check(\"malformed_ticker_partial\", b.evidenceState === \"PARTIAL\", b.evidenceState);\n check(\"malformed_ticker_rejected\", tickerReceipt?.status === \"FAIL\" && tickerReceipt?.error === \"INVALID_TICKER_SHAPE\", tickerReceipt);\n check(\"malformed_ticker_not_price_zero\", b.market?.lastPrice === null, b.market?.lastPrice);\n\n install(\"ticker_only\");\n const c: any = await analyzeMarket(\"BTCUSDT\");\n check(\"ticker_only_partial\", c.evidenceState === \"PARTIAL\", c.evidenceState);\n check(\"ticker_only_insufficient_direction\", c.assessment?.bias === \"INSUFFICIENT_EVIDENCE\", c.assessment?.bias);\n check(\"ticker_only_score_null\", c.assessment?.directionalScore === null, c.assessment?.directionalScore);\n check(\"ticker_only_micro_null\", c.microstructure?.orderBookImbalance === null && c.microstructure?.bidNotionalTop20 === null);\n check(\"ticker_only_candles_zero\", c.shortHorizon?.candles === 0 && c.shortHorizon?.momentum30mPct === null);\n check(\"ticker_only_no_trade\", c.assessment?.recommendation === \"NO_TRADE_DECISION\");\n check(\"ticker_only_recovery_next_test\", String(c.assessment?.nextTest).includes(\"Recover\"));\n\n install(\"malformed_depth\");\n const d: any = await analyzeMarket(\"BTCUSDT\");\n const depthReceipt = d.receipts?.find((r: any) => r.name === \"spot_order_book\");\n check(\"malformed_depth_partial\", d.evidenceState === \"PARTIAL\", d.evidenceState);\n check(\"malformed_depth_rejected\", depthReceipt?.status === \"FAIL\" && depthReceipt?.error === \"INVALID_DEPTH_SHAPE\", depthReceipt);\n check(\"malformed_depth_null_imbalance\", d.microstructure?.orderBookImbalance === null, d.microstructure?.orderBookImbalance);\n\n install(\"all_fail\");\n const e: any = await analyzeMarket(\"BTCUSDT\");\n check(\"all_fail_state\", e.evidenceState === \"FAIL\", e.evidenceState);\n check(\"all_fail_insufficient\", e.assessment?.bias === \"INSUFFICIENT_EVIDENCE\", e.assessment?.bias);\n check(\"all_fail_no_trade\", e.assessment?.recommendation === \"NO_TRADE_DECISION\");\n check(\"all_fail_all_receipts_fail\", e.receipts?.length === 3 && e.receipts.every((r: any) => r.status === \"FAIL\"));\n} finally {\n globalThis.fetch = originalFetch;\n}\n\nconst pass = checks.every(c => c.pass);\nconsole.log(JSON.stringify({ pass, version: \"failure-modes-1.0.0\", tests: checks.length, checks }));\nexport default { pass, tests: checks.length };\n",[],[252,294],"b0b3070a-0ae5-46be-a259-51be1a48c8ed",["D",1788814343943],"directory",[197,198,199,200,201,202,203],[252],["D",1788814343943],[],[161,71],"f3630d24-f639-4cb4-ab9a-a2c6fbc00cb5","agent_os_oauth.ts","eb9f7160-ab09-11f1-870d-1607ee4eb77e",42,["D",1788820228062],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport const AGENT_OS = {\n issuer: \"https://agent.binance.com\",\n resource: \"https://agent.binance.com/mcp/agentic\",\n authorizationEndpoint: \"https://accounts.binance.com/agentic-oauth/authorize\",\n tokenEndpoint: \"https://accounts.binance.com/oauth-agentic/token\",\n origin: \"https://payana-agent-os.val.run\",\n clientId: \"https://payana-agent-os.val.run/oauth/client-metadata.json\",\n redirectUri: \"https://payana-agent-os.val.run/oauth/callback\",\n} as const;\n\nconst OAUTH_STATE_TTL_MS = 10 * 60_000;\nconst OAUTH_STATE_MAX_ROWS = 500;\n\nfunction base64url(bytes: Uint8Array) {\n let binary = \"\";\n for (const byte of bytes) binary += String.fromCharCode(byte);\n return btoa(binary).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/g, \"\");\n}\n\nfunction randomBase64url(bytes = 32) {\n return base64url(crypto.getRandomValues(new Uint8Array(bytes)));\n}\n\nasync function sha256Base64url(value: string) {\n return base64url(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(value))));\n}\n\nasync function ensureStateSchema() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS agent_os_oauth_states (\n state TEXT PRIMARY KEY,\n code_verifier TEXT NOT NULL,\n created_at_ms INTEGER NOT NULL\n )`);\n}\n\nexport function clientMetadata() {\n return {\n client_id: AGENT_OS.clientId,\n client_name: \"PayAna Falsifier Agent\",\n client_uri: AGENT_OS.origin,\n redirect_uris: [AGENT_OS.redirectUri],\n grant_types: [\"authorization_code\"],\n response_types: [\"code\"],\n token_endpoint_auth_method: \"none\",\n application_type: \"web\",\n };\n}\n\nexport async function createAuthorizationRequest() {\n await ensureStateSchema();\n const now = Date.now();\n const state = randomBase64url(32);\n const verifier = randomBase64url(64);\n const challenge = await sha256Base64url(verifier);\n await sqlite.batch([\n {\n sql: \"DELETE FROM agent_os_oauth_states WHERE created_at_ms < ?\",\n args: [now - OAUTH_STATE_TTL_MS],\n },\n {\n sql: \"INSERT INTO agent_os_oauth_states(state, code_verifier, created_at_ms) VALUES(?,?,?)\",\n args: [state, verifier, now],\n },\n {\n sql: \"DELETE FROM agent_os_oauth_states WHERE state NOT IN (SELECT state FROM agent_os_oauth_states ORDER BY created_at_ms DESC, state DESC LIMIT ?)\",\n args: [OAUTH_STATE_MAX_ROWS],\n },\n ]);\n\n const url = new URL(AGENT_OS.authorizationEndpoint);\n url.searchParams.set(\"response_type\", \"code\");\n url.searchParams.set(\"client_id\", AGENT_OS.clientId);\n url.searchParams.set(\"redirect_uri\", AGENT_OS.redirectUri);\n url.searchParams.set(\"code_challenge\", challenge);\n url.searchParams.set(\"code_challenge_method\", \"S256\");\n url.searchParams.set(\"state\", state);\n url.searchParams.set(\"resource\", AGENT_OS.resource);\n return { url: url.toString(), state, challenge };\n}\n\nfunction isSqliteBusy(error: unknown) {\n const anyError = error as any;\n return anyError?.code === \"SQLITE_BUSY\" || /SQLITE_BUSY|database is locked/i.test(String(anyError?.message ?? error ?? \"\"));\n}\n\nasync function pruneExpiredOAuthStatesBestEffort(now: number) {\n try {\n await sqlite.execute({\n sql: \"DELETE FROM agent_os_oauth_states WHERE created_at_ms < ?\",\n args: [now - OAUTH_STATE_TTL_MS],\n });\n } catch (error) {\n if (!isSqliteBusy(error)) console.warn(\"OAUTH_STATE_PRUNE_SKIPPED\", error instanceof Error ? error.message : String(error));\n }\n}\n\nexport async function consumeAuthorizationState(state: string) {\n await ensureStateSchema();\n const now = Date.now();\n const retryDelaysMs = [0, 12, 30, 70, 140];\n\n for (let attempt = 0; attempt < retryDelaysMs.length; attempt += 1) {\n if (retryDelaysMs[attempt] > 0) await new Promise(resolve => setTimeout(resolve, retryDelaysMs[attempt]));\n try {\n const result = await sqlite.execute({\n sql: \"DELETE FROM agent_os_oauth_states WHERE state=? AND created_at_ms>=? RETURNING code_verifier, created_at_ms\",\n args: [state, now - OAUTH_STATE_TTL_MS],\n });\n const row = result.rows?.[0] as { code_verifier?: unknown; created_at_ms?: unknown } | undefined;\n await pruneExpiredOAuthStatesBestEffort(now);\n if (!row || typeof row.code_verifier !== \"string\") return null;\n return { verifier: row.code_verifier, createdAtMs: Number(row.created_at_ms) };\n } catch (error) {\n if (!isSqliteBusy(error) || attempt === retryDelaysMs.length - 1) throw error;\n }\n }\n return null;\n}\n\nexport async function exchangeAuthorizationCode(code: string, verifier: string) {\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), 10_000);\n try {\n const body = new URLSearchParams({\n grant_type: \"authorization_code\",\n code,\n redirect_uri: AGENT_OS.redirectUri,\n client_id: AGENT_OS.clientId,\n code_verifier: verifier,\n resource: AGENT_OS.resource,\n });\n const response = await fetch(AGENT_OS.tokenEndpoint, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\", Accept: \"application/json\" },\n body,\n signal: controller.signal,\n });\n const text = await response.text();\n let payload: any = null;\n try { payload = JSON.parse(text); } catch {}\n if (!response.ok) {\n return {\n ok: false as const,\n status: response.status,\n error: String(payload?.error ?? \"TOKEN_EXCHANGE_FAILED\").slice(0, 120),\n errorDescription: String(payload?.error_description ?? \"\").slice(0, 240) || null,\n };\n }\n const accessToken = typeof payload?.access_token === \"string\" ? payload.access_token : \"\";\n if (!accessToken) return { ok: false as const, status: response.status, error: \"TOKEN_RESPONSE_MISSING_ACCESS_TOKEN\", errorDescription: null };\n return {\n ok: true as const,\n accessToken,\n tokenType: String(payload?.token_type ?? \"Bearer\").slice(0, 40),\n expiresIn: Number.isFinite(Number(payload?.expires_in)) ? Number(payload.expires_in) : null,\n scope: typeof payload?.scope === \"string\" ? payload.scope.slice(0, 500) : null,\n refreshTokenReturned: typeof payload?.refresh_token === \"string\" && payload.refresh_token.length > 0,\n };\n } finally {\n clearTimeout(timer);\n }\n}\n\nfunction parseMcpBody(contentType: string | null, text: string) {\n if (contentType?.includes(\"text/event-stream\")) {\n const events = text\n .split(/\\n\\n+/)\n .map(block => block.split(\"\\n\").filter(line => line.startsWith(\"data:\")).map(line => line.slice(5).trim()).join(\"\\n\"))\n .filter(Boolean)\n .map(data => { try { return JSON.parse(data); } catch { return { raw: data.slice(0, 1000) }; } });\n return events.length === 1 ? events[0] : events;\n }\n try { return JSON.parse(text); } catch { return { raw: text.slice(0, 1000) }; }\n}\n\nasync function mcpPost(accessToken: string, body: any, extraHeaders: Record = {}) {\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), 10_000);\n try {\n const response = await fetch(AGENT_OS.resource, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${accessToken}`,\n \"Content-Type\": \"application/json\",\n Accept: \"application/json, text/event-stream\",\n ...extraHeaders,\n },\n body: JSON.stringify(body),\n signal: controller.signal,\n });\n const text = await response.text();\n return {\n ok: response.ok,\n status: response.status,\n sessionId: response.headers.get(\"mcp-session-id\"),\n protocolVersion: response.headers.get(\"mcp-protocol-version\"),\n body: parseMcpBody(response.headers.get(\"content-type\"), text),\n };\n } finally {\n clearTimeout(timer);\n }\n}\n\nfunction extractRpcResult(body: any) {\n if (body && !Array.isArray(body) && typeof body === \"object\") return body;\n if (Array.isArray(body)) return body.find(x => x && typeof x === \"object\" && (\"result\" in x || \"error\" in x)) ?? body[0] ?? null;\n return null;\n}\n\nfunction compactTools(body: any) {\n const rpc = extractRpcResult(body);\n const tools = Array.isArray(rpc?.result?.tools) ? rpc.result.tools : [];\n return tools.slice(0, 100).map((tool: any) => ({\n name: String(tool?.name ?? \"\").slice(0, 160),\n description: String(tool?.description ?? \"\").replace(/\\s+/g, \" \").trim().slice(0, 500),\n inputSchema: tool?.inputSchema && typeof tool.inputSchema === \"object\" ? tool.inputSchema : null,\n }));\n}\n\nfunction isSafeMarketTool(tool: { name: string; description: string; inputSchema: any }) {\n const text = `${tool.name} ${tool.description}`.toLowerCase().replace(/[_-]+/g, \" \");\n const positive = /(market data|ticker|price|order book|orderbook|depth|kline|candlestick|candle)/.test(text);\n const dangerous = /(place\\s+order|create\\s+order|cancel\\s+order|execute\\s+trade|\\btrade\\b|withdraw|transfer|deposit|account|wallet|position|margin|leverage)/.test(text);\n return positive && !dangerous;\n}\n\nfunction argsForSafeMarketTool(tool: { inputSchema: any }) {\n const schema = tool.inputSchema;\n if (!schema || typeof schema !== \"object\") return {};\n const props = schema.properties && typeof schema.properties === \"object\" ? schema.properties : {};\n const required = Array.isArray(schema.required) ? schema.required.map(String) : [];\n const args: Record = {};\n for (const key of Object.keys(props)) {\n const lower = key.toLowerCase();\n const property = props[key] ?? {};\n if (lower === \"symbol\" || lower === \"pair\" || lower === \"tradingpair\") args[key] = \"BTCUSDT\";\n else if (lower === \"symbols\") args[key] = [\"BTCUSDT\"];\n else if (lower === \"interval\" || lower === \"timeframe\") args[key] = \"5m\";\n else if (lower === \"limit\") {\n const minimum = Number.isFinite(Number(property.minimum)) ? Number(property.minimum) : 1;\n const maximum = Number.isFinite(Number(property.maximum)) ? Number(property.maximum) : 20;\n args[key] = Math.max(minimum, Math.min(maximum, 5));\n } else if (lower === \"market\" || lower === \"markettype\") args[key] = \"spot\";\n }\n const unknownRequired = required.filter(key => !(key in args));\n return unknownRequired.length ? null : args;\n}\n\nasync function callModern(accessToken: string, method: string, params: any, name?: string) {\n return await mcpPost(accessToken, {\n jsonrpc: \"2.0\",\n id: crypto.randomUUID(),\n method,\n params: {\n ...params,\n _meta: {\n ...(params?._meta ?? {}),\n \"io.modelcontextprotocol/protocolVersion\": \"2026-07-28\",\n \"io.modelcontextprotocol/clientCapabilities\": {},\n \"io.modelcontextprotocol/clientInfo\": { name: \"PayAna Falsifier Agent\", version: \"1.2.0-rc1\" },\n },\n },\n }, {\n \"MCP-Protocol-Version\": \"2026-07-28\",\n \"Mcp-Method\": method,\n ...(name ? { \"Mcp-Name\": name } : {}),\n });\n}\n\nasync function listToolsModern(accessToken: string) {\n const discover = await callModern(accessToken, \"server/discover\", {});\n const tools = await callModern(accessToken, \"tools/list\", {});\n return { era: \"2026-07-28\", discover, tools, compact: compactTools(tools.body) };\n}\n\nasync function listToolsLegacy(accessToken: string) {\n const init = await mcpPost(accessToken, {\n jsonrpc: \"2.0\",\n id: 1,\n method: \"initialize\",\n params: {\n protocolVersion: \"2025-11-25\",\n capabilities: {},\n clientInfo: { name: \"PayAna Falsifier Agent\", version: \"1.2.0-rc1\" },\n },\n });\n if (!init.ok) return { era: \"legacy\", init, tools: null, compact: [] as any[] };\n const session = init.sessionId ?? undefined;\n await mcpPost(accessToken, {\n jsonrpc: \"2.0\",\n method: \"notifications/initialized\",\n params: {},\n }, session ? { \"Mcp-Session-Id\": session } : {});\n const tools = await mcpPost(accessToken, {\n jsonrpc: \"2.0\",\n id: 2,\n method: \"tools/list\",\n params: {},\n }, session ? { \"Mcp-Session-Id\": session } : {});\n return { era: String((extractRpcResult(init.body) as any)?.result?.protocolVersion ?? \"legacy\"), init, tools, compact: compactTools(tools.body) };\n}\n\nexport async function probeAuthorizedAgentOs(accessToken: string) {\n const modern = await listToolsModern(accessToken);\n const modernRpc = extractRpcResult(modern.tools.body);\n let selected: any = modern;\n if (!modern.tools.ok || modernRpc?.error || !Array.isArray(modernRpc?.result?.tools)) {\n selected = await listToolsLegacy(accessToken);\n }\n\n const tools = selected.compact as { name: string; description: string; inputSchema: any }[];\n const safeCandidates = tools.filter(isSafeMarketTool);\n const safeMarketToolNames = safeCandidates.map(t => t.name).slice(0, 30);\n const callableMarketCandidates = safeCandidates\n .map(tool => ({ name: tool.name, args: argsForSafeMarketTool(tool) }))\n .filter(x => x.args !== null)\n .slice(0, 20);\n const allToolNames = tools.map(t => t.name).slice(0, 100);\n return {\n connected: tools.length > 0,\n protocolEra: selected.era,\n toolCount: tools.length,\n allToolNames,\n safeMarketToolNames,\n callableMarketCandidates,\n automaticToolCallPerformed: false,\n boundary: \"AUTHORIZED_TOOL_CATALOG_READ_ONLY; ACCESS_TOKEN_AND_REFRESH_TOKEN_NOT_PERSISTED; NO_TOOL_CALL_PERFORMED\",\n };\n}\n",[],[161,309],"acea0143-79f0-4fd6-892d-800536017666",["D",1788814343943],[194,195],[161],"f3f0f1da-1665-4abd-b523-09cdbb6e3ef3","styles.css","06f0c07e-aafe-11f1-857f-1607ee4eb77e","01a07d8b-9306-748f-a55c-4dc932d21069",["D",1788819451982],":root{color-scheme:dark;--bg:#07090d;--panel:rgba(16,20,27,.78);--panel2:rgba(20,25,33,.64);--line:rgba(255,255,255,.08);--line2:rgba(255,255,255,.13);--text:#f5f7fa;--muted:#929aa8;--soft:#c7ccd4;--green:#63e6be;--amber:#ffd166;--red:#ff7b8b;--blue:#8bb8ff;--violet:#ba9cff;--radius:22px;--shadow:0 24px 70px rgba(0,0,0,.34)}*{box-sizing:border-box}html{background:var(--bg);font-family:Inter,ui-sans-serif,-apple-system,BlinkMacSystemFont,\"SF Pro Display\",\"Segoe UI\",sans-serif}body{margin:0;min-height:100vh;color:var(--text);background:radial-gradient(900px 500px at 76% -8%,rgba(94,122,255,.12),transparent 65%),radial-gradient(750px 520px at -8% 30%,rgba(71,230,190,.07),transparent 67%),linear-gradient(180deg,#080a0f 0%,#07090d 100%);font-feature-settings:\"tnum\" 1,\"cv02\" 1,\"cv03\" 1}button,select{font:inherit}button{color:inherit}.app-shell{width:min(1220px,calc(100% - 32px));margin:0 auto;padding:26px 0 48px}.topbar{display:flex;justify-content:space-between;align-items:center;gap:18px;margin-bottom:28px}.brand{display:flex;align-items:center;gap:12px}.mark{width:38px;height:38px;border-radius:13px;border:1px solid var(--line2);display:grid;place-items:center;background:linear-gradient(145deg,rgba(139,184,255,.15),rgba(99,230,190,.07));box-shadow:inset 0 1px rgba(255,255,255,.08)}.mark svg{width:20px;height:20px}.brand-copy strong{display:block;font-size:14px;letter-spacing:.01em}.brand-copy span{display:block;color:var(--muted);font-size:11px;margin-top:2px}.status-pill{display:flex;align-items:center;gap:8px;border:1px solid var(--line);background:rgba(255,255,255,.035);padding:8px 11px;border-radius:999px;color:var(--soft);font-size:11px}.dot{width:7px;height:7px;border-radius:50%;background:var(--green);box-shadow:0 0 0 5px rgba(99,230,190,.08)}.hero{display:grid;grid-template-columns:1.25fr .75fr;gap:18px;margin-bottom:18px}.hero-main,.hero-side,.card{border:1px solid var(--line);background:linear-gradient(145deg,rgba(255,255,255,.042),rgba(255,255,255,.018));box-shadow:var(--shadow);backdrop-filter:blur(20px);-webkit-backdrop-filter:blur(20px)}.hero-main{border-radius:28px;padding:30px 30px 26px;min-height:265px;position:relative;overflow:hidden}.hero-main:after{content:\"\";position:absolute;width:300px;height:300px;border-radius:50%;right:-150px;top:-160px;background:rgba(139,184,255,.08);filter:blur(10px);pointer-events:none}.eyebrow{font-size:11px;letter-spacing:.13em;text-transform:uppercase;color:var(--blue);font-weight:700}.hero h1{font-size:clamp(34px,5vw,64px);line-height:.98;letter-spacing:-.052em;margin:16px 0 15px;max-width:780px}.hero p{margin:0;max-width:690px;color:#adb5c1;font-size:14px;line-height:1.62}.hero-note{display:flex;flex-wrap:wrap;gap:8px;margin-top:24px}.mini-pill{font-size:10px;color:#bbc2cc;border:1px solid var(--line);border-radius:999px;padding:6px 8px;background:rgba(255,255,255,.025)}.hero-side{border-radius:28px;padding:22px;display:flex;flex-direction:column;justify-content:space-between}.hero-side-title{font-size:11px;color:var(--muted);text-transform:uppercase;letter-spacing:.1em}.symbol-row{display:flex;gap:8px;flex-wrap:wrap;margin-top:12px}.symbol-btn{border:1px solid var(--line);background:rgba(255,255,255,.025);border-radius:12px;padding:8px 10px;font-size:11px;cursor:pointer;transition:.18s ease}.symbol-btn:hover{background:rgba(255,255,255,.06);transform:translateY(-1px)}.symbol-btn.active{border-color:rgba(139,184,255,.45);background:rgba(139,184,255,.11);color:#dce9ff}.action-stack{display:grid;gap:8px;margin-top:20px}.refresh{display:block;width:100%;margin-top:20px;border:1px solid rgba(139,184,255,.25);background:linear-gradient(180deg,rgba(139,184,255,.14),rgba(139,184,255,.08));border-radius:14px;padding:11px 14px;font-weight:700;font-size:12px;cursor:pointer;transition:.18s ease;text-align:center;text-decoration:none;color:inherit}.action-stack .refresh{margin-top:0}.refresh:hover{transform:translateY(-1px);border-color:rgba(139,184,255,.4)}.refresh:disabled{opacity:.5;cursor:wait;transform:none}.secondary-action{background:rgba(255,255,255,.025);border-color:var(--line2);font-weight:650}.grid{display:grid;grid-template-columns:repeat(12,minmax(0,1fr));gap:14px}.card{border-radius:var(--radius);padding:18px;min-width:0}.span-3{grid-column:span 3}.span-4{grid-column:span 4}.span-5{grid-column:span 5}.span-7{grid-column:span 7}.span-12{grid-column:span 12}.metric-label{color:var(--muted);font-size:10px;text-transform:uppercase;letter-spacing:.09em}.metric-value{font-size:27px;line-height:1.05;font-weight:760;letter-spacing:-.035em;margin-top:9px}.metric-sub{font-size:10px;color:var(--muted);margin-top:7px}.pos{color:var(--green)}.neg{color:var(--red)}.neutral{color:var(--soft)}.section-head{display:flex;justify-content:space-between;align-items:flex-start;gap:12px;margin-bottom:14px}.section-head h2{font-size:14px;margin:0;letter-spacing:-.015em}.section-head span{font-size:10px;color:var(--muted)}.chart-wrap{height:205px;position:relative}.chart-wrap svg{width:100%;height:100%;overflow:visible}.chart-line{fill:none;stroke:#8bb8ff;stroke-width:2;vector-effect:non-scaling-stroke}.chart-area{fill:url(#chartFill)}.chart-grid{stroke:rgba(255,255,255,.05);stroke-width:1;vector-effect:non-scaling-stroke}.chart-meta{position:absolute;right:0;top:0;text-align:right}.chart-meta strong{display:block;font-size:13px}.chart-meta span{font-size:10px;color:var(--muted)}.assessment{display:flex;flex-direction:column;gap:14px}.bias-row{display:flex;align-items:center;justify-content:space-between;gap:12px}.bias-badge{font-size:10px;font-weight:750;letter-spacing:.06em;border-radius:999px;padding:7px 9px;border:1px solid var(--line2);background:rgba(255,255,255,.03)}.confidence-track{height:7px;background:rgba(255,255,255,.055);border-radius:999px;overflow:hidden}.confidence-fill{height:100%;background:linear-gradient(90deg,#729dff,#63e6be);border-radius:999px}.risk-list,.source-list,.falsifier-list{display:grid;gap:8px}.risk-item,.source-item,.falsifier-item{border:1px solid var(--line);background:rgba(255,255,255,.018);border-radius:13px;padding:10px 11px;font-size:11px;line-height:1.42;color:#c5cbd4}.risk-item{display:flex;align-items:center;gap:8px}.risk-icon{width:7px;height:7px;border-radius:50%;background:var(--amber);flex:0 0 auto}.source-item{display:grid;grid-template-columns:auto 1fr auto;gap:9px;align-items:center}.source-state{font-size:9px;font-weight:800;letter-spacing:.05em}.source-state.pass{color:var(--green)}.source-state.fail{color:var(--red)}.source-name{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.source-ms{font-size:9px;color:var(--muted)}.evidence-banner{display:flex;align-items:flex-start;gap:11px;padding:12px;border-radius:15px;border:1px solid rgba(99,230,190,.14);background:rgba(99,230,190,.035)}.evidence-banner svg{width:18px;height:18px;flex:0 0 auto;margin-top:1px}.evidence-banner strong{display:block;font-size:11px}.evidence-banner p{font-size:10px;color:var(--muted);margin:4px 0 0;line-height:1.45}.kv{display:grid;grid-template-columns:1fr auto;gap:9px 14px;font-size:11px}.kv span:nth-child(odd){color:var(--muted)}.kv span:nth-child(even){font-variant-numeric:tabular-nums;font-weight:650}.skeleton{animation:pulse 1.35s ease-in-out infinite alternate;background:rgba(255,255,255,.05);border-radius:8px;color:transparent!important}@keyframes pulse{to{background:rgba(255,255,255,.1)}}.error-box{grid-column:1/-1;border:1px solid rgba(255,123,139,.22);background:rgba(255,123,139,.05);border-radius:18px;padding:16px;color:#ffc2ca;font-size:12px}.footer{display:flex;justify-content:space-between;gap:16px;align-items:center;margin-top:18px;padding:4px 2px;color:#68717e;font-size:10px}.footer a{color:#9099a7;text-decoration:none}.footer a:hover{color:#d4d9e0}@media(max-width:980px){.hero{grid-template-columns:1fr}.span-3{grid-column:span 6}.span-4,.span-5,.span-7{grid-column:span 12}}@media(max-width:620px){.app-shell{width:min(100% - 20px,1220px);padding-top:14px}.topbar{margin-bottom:16px}.brand-copy span{display:none}.status-pill{font-size:9px}.hero-main,.hero-side{border-radius:22px;padding:20px}.hero-main{min-height:auto}.hero h1{font-size:39px}.span-3{grid-column:span 12}.card{padding:15px;border-radius:18px}.metric-value{font-size:24px}.footer{align-items:flex-start;flex-direction:column}.source-item{grid-template-columns:auto minmax(0,1fr) auto}}.metric-value-compact{font-size:22px}.mt12{margin-top:12px}.confidence-progress{display:block;width:100%;height:7px;margin:8px 0 0;appearance:none;-webkit-appearance:none;border:0;border-radius:999px;overflow:hidden;background:rgba(255,255,255,.055)}.confidence-progress::-webkit-progress-bar{background:rgba(255,255,255,.055);border-radius:999px}.confidence-progress::-webkit-progress-value{background:linear-gradient(90deg,#729dff,#63e6be);border-radius:999px}.confidence-progress::-moz-progress-bar{background:linear-gradient(90deg,#729dff,#63e6be);border-radius:999px}.neuron-card{overflow:hidden}.hypothesis-grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:10px}.hypothesis-card{margin:0;border:1px solid var(--line);background:rgba(255,255,255,.018);border-radius:16px;padding:14px;min-height:132px}.hypothesis-card p{margin:8px 0 0;color:#c4cbd5;font-size:11px;line-height:1.55}.hypothesis-label{font-size:9px;font-weight:800;letter-spacing:.09em;text-transform:uppercase}.hypothesis-winning{border-color:rgba(99,230,190,.15);background:rgba(99,230,190,.025)}.hypothesis-winning .hypothesis-label{color:var(--green)}.hypothesis-opposite{border-color:rgba(255,123,139,.14);background:rgba(255,123,139,.022)}.hypothesis-opposite .hypothesis-label{color:var(--red)}.hypothesis-alternative{border-color:rgba(186,156,255,.15);background:rgba(186,156,255,.022)}.hypothesis-alternative .hypothesis-label{color:var(--violet)}.counter-grid{display:grid;grid-template-columns:1fr 1fr;gap:10px;margin-top:10px}.counter-panel,.alternative-strip,.next-test{border:1px solid var(--line);background:rgba(255,255,255,.014);border-radius:15px;padding:13px}.counter-title{font-size:9px;font-weight:800;letter-spacing:.07em;text-transform:uppercase;color:var(--muted)}.support-title{color:var(--green)}.oppose-title{color:var(--red)}.evidence-stack{display:grid;gap:7px;margin-top:9px}.evidence-row{display:flex;gap:8px;align-items:flex-start;color:#c5cbd4;font-size:10px;line-height:1.45}.evidence-dot{width:6px;height:6px;border-radius:50%;margin-top:4px;flex:0 0 auto}.support-dot{background:var(--green)}.oppose-dot{background:var(--red)}.alternative-strip{margin-top:10px}.alternative-list{display:flex;flex-wrap:wrap;gap:7px;margin-top:9px}.next-test{display:flex;gap:12px;align-items:flex-start;margin-top:10px;border-color:rgba(139,184,255,.16);background:rgba(139,184,255,.025)}.next-test strong{font-size:9px;letter-spacing:.07em;text-transform:uppercase;color:var(--blue);min-width:150px}.next-test span{font-size:10px;color:#c5cbd4;line-height:1.5}@media(max-width:760px){.hypothesis-grid,.counter-grid{grid-template-columns:1fr}.next-test{flex-direction:column;gap:6px}.next-test strong{min-width:0}}",[],[328,321],"frontend","0754e739-fc63-4013-8823-c7ae18d87daf","root.tsx","01a07d8b-9306-748f-a55c-4ba603dea5c0",["D",1788814343943],"/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\nexport function Root() {\n return (\n <>\n {raw(\"\")}\n \n \n \n \n \n \n PayAna Market Sentinel\n \n \n \n \n

History · market.ts