[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_442":443,"_444":445},"routes/_app.x.$handle.$name",{"_100":99,"_32":45,"_109":90,"_27":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":25,"_124":125,"_126":59,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",28,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":20,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":33,"_34":20,"_35":36},"deleted",false,"deletedHere","path","docs/TEST_EVIDENCE.md","latestPath","fileId","06f0a418-aafe-11f1-857f-1607ee4eb77e","name","TEST_EVIDENCE.md","fileType","content","# Test Evidence — PayAna Market Sentinel 1.2.0 RC1\n\nRelease-audit checkpoint: **2026-09-07T22:22:43Z**\n\n## Aggregate result\n\n```text\nPASS\nreleaseCandidate: payana-market-sentinel-1.2.0-rc1\nassertions: 189\nmutation steps: 35\ntotal checks: 224\n```\n\nThe release audit runs the mutation suites sequentially. This became a required control after a deliberately reproduced test-harness race showed that statically imported suites which temporarily replace `globalThis.fetch` can interfere with each other even when each suite passes independently.\n\nThe aggregate audit is executable at `tests/release_audit.ts`.\n\n## Suite 1 — live/core behavior\n\n`tests/selftest.ts`\n\n```text\n101 / 101 PASS\n```\n\nThe suite exercises live Binance public market evidence for all five allowlisted symbols:\n\n- BTCUSDT\n- ETHUSDT\n- BNBUSDT\n- SOLUSDT\n- XRPUSDT\n\nPer-symbol controls include:\n\n- valid evidence state;\n- read-only boundary;\n- positive price;\n- non-negative spread;\n- order-book imbalance bounded to [-1, 1];\n- stability score bounded to [0, 1];\n- explicit non-probability wording;\n- winning hypothesis present;\n- opposite hypothesis present;\n- alternative hypothesis present;\n- supporting evidence present;\n- opposing evidence present;\n- multiple alternative explanations;\n- observable falsifiers;\n- explicit next discriminating test;\n- `NO_TRADE_DECISION` invariant;\n- exactly three source receipts on the full-data path;\n- short-horizon series present;\n- current ticker timestamp (<5 minutes at execution).\n\nGlobal negative controls include invalid symbol formats, non-allowlisted/injection-like strings, an unsupported POST analysis request and unknown route behavior.\n\n## Suite 2 — source-failure and malformed-response mutation\n\n`tests/failure_modes_selftest.ts`\n\n```text\n23 / 23 PASS\n```\n\nThis suite replaces the network fetch function with controlled synthetic responses and verifies failure behavior rather than the happy path.\n\nValidated mutations:\n\n1. ticker source returns HTTP 503 while order book and candles remain valid;\n2. ticker returns HTTP 200 with malformed/invalid shape;\n3. ticker is the only surviving source;\n4. order book returns HTTP 200 with malformed/empty shape;\n5. all three market sources fail.\n\nImportant proven controls:\n\n- `HTTP_200 != VALID_SOURCE_SHAPE`;\n- malformed ticker receives `INVALID_TICKER_SHAPE`;\n- malformed order book receives `INVALID_DEPTH_SHAPE`;\n- failed/malformed sources do **not** become numeric zero;\n- unavailable derived metrics are returned as `null`;\n- surviving directional sources remain usable in `PARTIAL` state;\n- ticker-only evidence yields `INSUFFICIENT_EVIDENCE`, not a fabricated neutral/directional score;\n- all-source failure yields `FAIL` + `INSUFFICIENT_EVIDENCE` + `NO_TRADE_DECISION`;\n- source-missing risk flags are explicit;\n- recovery/next-test instructions are generated.\n\nThis suite directly tests the invariant:\n\n```text\nMISSING_EVIDENCE != ZERO\n```\n\n## Suite 3 — OAuth/CIMD/PKCE flow\n\n`tests/oauth_flow_selftest.ts`\n\n```text\n34 / 34 PASS\n```\n\nThis suite verifies the local authorization contract without using a real Binance account. Controls include:\n\n- stable HTTPS non-root CIMD `client_id`;\n- exact callback URI;\n- Authorization Code only;\n- PKCE `S256` challenge shape;\n- exact Agent OS `resource` parameter;\n- random state generation;\n- server-side temporary state/verifier storage;\n- state one-time consumption;\n- state replay rejection;\n- invalid callback rejection before token exchange;\n- RFC 9207 issuer-mismatch rejection before token exchange;\n- provider error values are not reflected into the callback page;\n- `/oauth/status` explicitly reports no token persistence and no automatic tool call.\n\n## Suite 4 — OAuth token/MCP catalog mutation\n\n`tests/oauth_mcp_probe_selftest.ts`\n\n```text\n22 / 22 PASS\n```\n\nThe network layer is replaced with synthetic token and MCP responses. This proves the callback integration logic without touching an account:\n\n- token exchange is form-encoded POST;\n- no Authorization header or `client_secret` is sent to the public-client token endpoint;\n- `client_id`, redirect URI, resource and PKCE verifier are exact;\n- a returned refresh token is reduced to a boolean receipt and not exposed as a retained token value;\n- MCP 2026-07-28 headers are present;\n- only `server/discover` and `tools/list` are issued;\n- `tools/call` is never issued;\n- market-data tools are identified from a mixed catalog;\n- `place_order`, account-related and transfer/wallet tools are excluded from the safe-market set;\n- the access token is absent from the probe result.\n\nThis suite directly tests:\n\n```text\nACCESS_TOKEN_EPHEMERAL != TOKEN_PERSISTED\nAUTHORIZED_TOOL_CATALOG != TOOL_CALL\n```\n\n## Suite 5 — rate-limit mutation\n\n`tests/rate_limit_selftest.ts`\n\n```text\nrequests 01–30 -> HTTP 200\nrequests 31–35 -> HTTP 429\nPASS\n```\n\nThis proves the current per-runtime limiter logic. It does **not** prove a globally distributed rate limiter; the architecture documentation explicitly records that limitation.\n\n## Browser/render validation\n\nIndependent JavaScript-rendering extraction was used after CSP hardening. React-only DOM selectors were requested, including:\n\n- `.app-shell`\n- `.source-item`\n- `.hypothesis-card`\n- `.next-test`\n\nThe render fetches completed without selector-not-matched failure. This is evidence that the JavaScript application rendered under the final strict CSP and that dynamic evidence/hypothesis elements existed in the DOM.\n\nWhat remains intentionally unclaimed:\n\n- screenshot-based visual QA;\n- click-through browser automation of symbol switching and Refresh;\n- screen recording.\n\nThose interactive witness paths were attempted through TinyFish and Firecrawl, but both external providers reported insufficient account credit at the checkpoint. This is classified as an external validation blocker, not as an application PASS or FAIL.\n\n## MCP boundary validation\n\nThe official Binance Agent OS MCP endpoint was probed without credentials. It returned an OAuth authorization challenge rather than an authenticated MCP session. Authorization-server metadata was read successfully and showed Authorization Code + PKCE S256, public-client token authentication and CIMD support.\n\nThe application now has a tested user-initiated CIMD/PKCE callback path, but **no real Binance account authorization has been executed or claimed**. The current durable database contains only the temporary OAuth-state schema; after the release audit there were zero pending state rows, and the val has zero user-configured environment variables. No Binance access token, refresh token, API key or account identifier is durably stored.\n\nTherefore:\n\n```text\nMCP_ENDPOINT_KNOWN != MCP_SESSION_AUTHORIZED\nOAUTH_FLOW_READY != USER_AUTHORIZED_SESSION\nAUTHORIZED_TOOL_CATALOG != TOOL_CALL\n```\n\nA real MCP authorization receipt remains an external human/account gate. When that gate is completed, PayAna is designed to use the callback token ephemerally to read the tool catalog, generate a sanitized receipt, and discard the token.\n","# Test Evidence — PayAna Market Sentinel 1.2.0 RC1\n\nRelease-audit checkpoint: **2026-09-07T22:22:43Z**\n\n## Aggregate result\n\n```text\nPASS\nreleaseCandidate: payana-market-sentinel-1.2.0-rc1\nassertions: 189\nmutation steps: 35\ntotal checks: 224\n```\n\nThe release audit runs the mutation suites sequentially. This became a required control after a deliberately reproduced test-harness race showed that statically imported suites which temporarily replace `globalThis.fetch` can interfere with each other even when each suite passes independently.\n\nThe aggregate audit is executable at `tests/release_audit.ts`.\n\n## Suite 1 — live/core behavior\n\n`tests/selftest.ts`\n\n```text\n101 / 101 PASS\n```\n\nThe suite exercises live Binance public market evidence for all five allowlisted symbols:\n\n- BTCUSDT\n- ETHUSDT\n- BNBUSDT\n- SOLUSDT\n- XRPUSDT\n\nPer-symbol controls include:\n\n- valid evidence state;\n- read-only boundary;\n- positive price;\n- non-negative spread;\n- order-book imbalance bounded to [-1, 1];\n- stability score bounded to [0, 1];\n- explicit non-probability wording;\n- winning hypothesis present;\n- opposite hypothesis present;\n- alternative hypothesis present;\n- supporting evidence present;\n- opposing evidence present;\n- multiple alternative explanations;\n- observable falsifiers;\n- explicit next discriminating test;\n- `NO_TRADE_DECISION` invariant;\n- exactly three source receipts on the full-data path;\n- short-horizon series present;\n- current ticker timestamp (<5 minutes at execution).\n\nGlobal negative controls include invalid symbol formats, non-allowlisted/injection-like strings, an unsupported POST analysis request and unknown route behavior.\n\n## Suite 2 — source-failure and malformed-response mutation\n\n`tests/failure_modes_selftest.ts`\n\n```text\n23 / 23 PASS\n```\n\nThis suite replaces the network fetch function with controlled synthetic responses and verifies failure behavior rather than the happy path.\n\nValidated mutations:\n\n1. ticker source returns HTTP 503 while order book and candles remain valid;\n2. ticker returns HTTP 200 with malformed/invalid shape;\n3. ticker is the only surviving source;\n4. order book returns HTTP 200 with malformed/empty shape;\n5. all three market sources fail.\n\nImportant proven controls:\n\n- `HTTP_200 != VALID_SOURCE_SHAPE`;\n- malformed ticker receives `INVALID_TICKER_SHAPE`;\n- malformed order book receives `INVALID_DEPTH_SHAPE`;\n- failed/malformed sources do **not** become numeric zero;\n- unavailable derived metrics are returned as `null`;\n- surviving directional sources remain usable in `PARTIAL` state;\n- ticker-only evidence yields `INSUFFICIENT_EVIDENCE`, not a fabricated neutral/directional score;\n- all-source failure yields `FAIL` + `INSUFFICIENT_EVIDENCE` + `NO_TRADE_DECISION`;\n- source-missing risk flags are explicit;\n- recovery/next-test instructions are generated.\n\nThis suite directly tests the invariant:\n\n```text\nMISSING_EVIDENCE != ZERO\n```\n\n## Suite 3 — OAuth/CIMD/PKCE flow\n\n`tests/oauth_flow_selftest.ts`\n\n```text\n34 / 34 PASS\n```\n\nThis suite verifies the local authorization contract without using a real Binance account. Controls include:\n\n- stable HTTPS non-root CIMD `client_id`;\n- exact callback URI;\n- Authorization Code only;\n- PKCE `S256` challenge shape;\n- exact Agent OS `resource` parameter;\n- random state generation;\n- server-side temporary state/verifier storage;\n- state one-time consumption;\n- state replay rejection;\n- invalid callback rejection before token exchange;\n- RFC 9207 issuer-mismatch rejection before token exchange;\n- provider error values are not reflected into the callback page;\n- `/oauth/status` explicitly reports no token persistence and no automatic tool call.\n\n## Suite 4 — OAuth token/MCP catalog mutation\n\n`tests/oauth_mcp_probe_selftest.ts`\n\n```text\n25 / 25 PASS\n```\n\nThe network layer is replaced with synthetic token and MCP responses. This proves the callback integration logic without touching an account:\n\n- token exchange is form-encoded POST;\n- no Authorization header or `client_secret` is sent to the public-client token endpoint;\n- `client_id`, redirect URI, resource and PKCE verifier are exact;\n- a returned refresh token is reduced to a boolean receipt and not exposed as a retained token value;\n- MCP 2026-07-28 protocol/method headers are present;\n- modern requests carry protocol version, client capabilities and current PayAna client identity in `_meta`;\n- only `server/discover` and `tools/list` are issued;\n- `tools/call` is never issued;\n- market-data tools are identified from a mixed catalog;\n- `place_order`, account-related and transfer/wallet tools are excluded from the safe-market set;\n- the access token is absent from the probe result.\n\nThis suite directly tests:\n\n```text\nACCESS_TOKEN_EPHEMERAL != TOKEN_PERSISTED\nAUTHORIZED_TOOL_CATALOG != TOOL_CALL\n```\n\n## Suite 5 — rate-limit mutation\n\n`tests/rate_limit_selftest.ts`\n\n```text\nrequests 01–30 -> HTTP 200\nrequests 31–35 -> HTTP 429\nPASS\n```\n\nThis proves the current per-runtime limiter logic. It does **not** prove a globally distributed rate limiter; the architecture documentation explicitly records that limitation.\n\n## Browser/render validation\n\nIndependent JavaScript-rendering extraction was used after CSP hardening. React-only DOM selectors were requested, including:\n\n- `.app-shell`\n- `.source-item`\n- `.hypothesis-card`\n- `.next-test`\n\nThe render fetches completed without selector-not-matched failure. This is evidence that the JavaScript application rendered under the final strict CSP and that dynamic evidence/hypothesis elements existed in the DOM.\n\nWhat remains intentionally unclaimed:\n\n- screenshot-based visual QA;\n- click-through browser automation of symbol switching and Refresh;\n- screen recording.\n\nThose interactive witness paths were attempted through TinyFish and Firecrawl, but both external providers reported insufficient account credit at the checkpoint. This is classified as an external validation blocker, not as an application PASS or FAIL.\n\n## MCP boundary validation\n\nThe official Binance Agent OS MCP endpoint was probed without credentials. It returned an OAuth authorization challenge rather than an authenticated MCP session. Authorization-server metadata was read successfully and showed Authorization Code + PKCE S256, public-client token authentication and CIMD support.\n\nThe application now has a tested user-initiated CIMD/PKCE callback path, but **no real Binance account authorization has been executed or claimed**. The current durable database contains only the temporary OAuth-state schema; after the release audit there were zero pending state rows, and the val has zero user-configured environment variables. No Binance access token, refresh token, API key or account identifier is durably stored.\n\nTherefore:\n\n```text\nMCP_ENDPOINT_KNOWN != MCP_SESSION_AUTHORIZED\nOAUTH_FLOW_READY != USER_AUTHORIZED_SESSION\nAUTHORIZED_TOOL_CATALOG != TOOL_CALL\n```\n\nA real MCP authorization receipt remains an external human/account gate. When that gate is completed, PayAna is designed to use the callback token ephemerally to read the tool catalog, generate a sanitized receipt, and discard the token.\n","createdAt",["D",1788819838132],"branchVersion","branchId","182c3c5a-4b2f-4ec3-8cf6-a4632f8ec886","id","71ad8a44-f36c-41e9-a978-0707deb4f71b","payana-binance-agent-os",["D",1788812694161],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","PayAna Falsifier Agent — evidence-first Binance market audit","imageUrl","6cc24525-830b-4db3-9c9c-fd19fb50e91f","pinnedFileId","01a07d8b-9306-748f-a55c-5a7124e2c8be","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0773d-9d6b-7580-a53a-683363c351c8","tursoName","71ad8a44f36c41e9a9780707deb4f71b","tursoHostname","71ad8a44f36c41e9a9780707deb4f71b-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789509043237],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":25},"branch",{"_13":89,"_32":90,"_43":42,"_91":44,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":45,"_98":99},"isOwned",52,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","cleitoncosta","handle","displayName","Cleiton Costa","avatar","https://lh3.googleusercontent.com/a/ACg8ocIgWisWQiXts_2fy5iRiRgl8A6c7Ef94eqE3ur-4mlyUrpCBmQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":437,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":438,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":439,"_84":440,"_86":441,"_88":25},"tree",[212,218,222,229,232,240,241,242,243],"files",[212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243],"counts",{"_200":63,"_201":202,"_203":204,"_205":206,"_207":208},"contents",[131,132,133,134,135,136,137,138,139],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":195,"_32":196,"_30":197,"_142":-5,"_41":42,"_40":155,"_144":59,"_38":198,"_13":63,"_34":178,"_35":-5,"_24":25,"_149":-5,"_27":199},{"_43":190,"_32":191,"_30":192,"_142":-5,"_41":42,"_40":155,"_144":59,"_38":193,"_13":63,"_34":178,"_35":-5,"_24":25,"_149":-5,"_27":194},{"_43":185,"_32":186,"_30":187,"_142":-5,"_41":42,"_40":171,"_144":59,"_38":188,"_13":63,"_34":178,"_35":-5,"_24":25,"_149":-5,"_27":189},{"_43":180,"_32":181,"_30":182,"_142":-5,"_41":42,"_40":155,"_144":59,"_38":183,"_13":63,"_34":178,"_35":-5,"_24":25,"_149":-5,"_27":184},{"_43":174,"_32":175,"_30":176,"_142":-5,"_41":42,"_40":155,"_144":59,"_38":177,"_13":63,"_34":178,"_35":-5,"_24":25,"_149":-5,"_27":179},{"_43":167,"_32":168,"_30":169,"_142":-5,"_41":42,"_40":155,"_144":25,"_38":170,"_13":171,"_34":20,"_35":172,"_24":25,"_149":-5,"_27":173},{"_43":159,"_32":160,"_30":161,"_142":-5,"_41":42,"_40":162,"_144":25,"_38":163,"_13":164,"_34":20,"_35":165,"_24":25,"_149":-5,"_27":166},{"_43":152,"_32":153,"_30":154,"_142":-5,"_41":42,"_40":155,"_144":59,"_38":156,"_13":63,"_34":20,"_35":157,"_24":25,"_149":-5,"_27":158},{"_43":140,"_32":141,"_30":57,"_142":-5,"_41":42,"_40":143,"_144":25,"_38":145,"_13":146,"_34":147,"_35":148,"_24":25,"_149":150,"_27":151},"b44bec37-e724-4e71-89dc-9f7c1a61f47b","index.ts","parentId",9,"latest",["D",1788819451982],2,"http","import { immutableFileUrl, parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { Hono } from \"npm:hono\";\nimport { Root } from \"./frontend/root.tsx\";\nimport { analyzeMarket, normalizeSymbol, supportedSymbols } from \"./lib/market.ts\";\nimport {\n AGENT_OS,\n clientMetadata,\n consumeAuthorizationState,\n createAuthorizationRequest,\n exchangeAuthorizationCode,\n probeAuthorizedAgentOs,\n} from \"./lib/agent_os_oauth.ts\";\n\nconst app = new Hono();\nconst buckets = new Map();\nconst RATE_WINDOW_MS = 60_000;\nconst RATE_MAX = 30;\n\nfunction clientKey(c: any) {\n return String(c.req.header(\"cf-connecting-ip\") || c.req.header(\"x-forwarded-for\") || \"unknown\").split(\",\")[0].trim().slice(0, 80);\n}\nfunction rateAllowed(key: string) {\n const now = Date.now();\n const bucket = buckets.get(key);\n if (!bucket || now - bucket.startedAt >= RATE_WINDOW_MS) {\n buckets.set(key, { startedAt: now, count: 1 });\n return true;\n }\n if (bucket.count >= RATE_MAX) return false;\n bucket.count += 1;\n if (buckets.size > 1000) {\n for (const [k, v] of buckets) if (now - v.startedAt >= RATE_WINDOW_MS) buckets.delete(k);\n }\n return true;\n}\n\nfunction escapeHtml(value: unknown) {\n return String(value ?? \"\")\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\\\"/g, \""\")\n .replace(/'/g, \"'\");\n}\n\nfunction oauthReceiptPage(title: string, state: \"PASS\" | \"FAIL\", details: { label: string; value: unknown }[], note: string) {\n const rows = details.map(({ label, value }) => `${escapeHtml(label)}${escapeHtml(value)}`).join(\"\");\n const tools = details.find(x => x.label === \"Safe market tools\")?.value;\n const toolPills = Array.isArray(tools)\n ? `

${tools.map(x => `${escapeHtml(x)}`).join(\"\")}

`\n : \"\";\n const styleUrl = immutableFileUrl(\"/frontend/styles.css\");\n return `${escapeHtml(title)} · PayAna

AUTHORIZED MCP VERIFICATION

${escapeHtml(title)}

${escapeHtml(note)}

TOKEN NOT PERSISTEDNO TOOL CALLNO TRADE

Connection receipt

sanitized runtime evidence

${rows}

${toolPills}

Return to market cockpit

`;\n}\n\n\napp.use(\"*\", async (c, next) => {\n c.header(\"X-Content-Type-Options\", \"nosniff\");\n c.header(\"Referrer-Policy\", \"no-referrer\");\n c.header(\"X-Frame-Options\", \"DENY\");\n c.header(\"Permissions-Policy\", \"camera=(), microphone=(), geolocation=(), payment=()\");\n c.header(\"Content-Security-Policy\", \"default-src 'self'; script-src 'self' https://esm.town https://esm.sh; style-src 'self'; connect-src 'self' https://esm.sh; img-src 'self' data:; font-src 'self'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'\");\n await next();\n});\n\n\napp.use(\"/api/*\", async (c, next) => {\n c.header(\"Cache-Control\", \"no-store\");\n c.header(\"X-Content-Type-Options\", \"nosniff\");\n c.header(\"Referrer-Policy\", \"no-referrer\");\n if (!rateAllowed(clientKey(c))) return c.json({ status: \"BLOCKED\", error: \"RATE_LIMITED\", retryAfterSeconds: 60 }, 429);\n await next();\n});\n\napp.get(\"/\", (c) => c.html(Root()));\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.get(\"/oauth/client-metadata.json\", (c) => {\n c.header(\"Cache-Control\", \"public, max-age=300\");\n return c.json(clientMetadata());\n});\n\napp.get(\"/oauth/status\", (c) => {\n c.header(\"Cache-Control\", \"no-store\");\n return c.json({\n status: \"READY_FOR_USER_AUTHORIZATION\",\n issuer: AGENT_OS.issuer,\n resource: AGENT_OS.resource,\n clientId: AGENT_OS.clientId,\n redirectUri: AGENT_OS.redirectUri,\n flow: \"authorization_code_pkce_s256_cimd\",\n tokenPersistence: \"NONE\",\n automaticToolCall: false,\n boundary: \"OAUTH_FLOW_READY != USER_AUTHORIZED_SESSION\",\n });\n});\n\napp.get(\"/oauth/start\", async (c) => {\n if (!rateAllowed(`oauth:${clientKey(c)}`)) return c.json({ status: \"BLOCKED\", error: \"RATE_LIMITED\", retryAfterSeconds: 60 }, 429);\n const request = await createAuthorizationRequest();\n c.header(\"Cache-Control\", \"no-store\");\n return c.redirect(request.url, 302);\n});\n\napp.get(\"/oauth/callback\", async (c) => {\n c.header(\"Cache-Control\", \"no-store\");\n const errorParam = c.req.query(\"error\");\n if (errorParam) {\n return c.html(oauthReceiptPage(\n \"Authorization not completed\",\n \"FAIL\",\n [{ label: \"State\", value: \"USER_OR_PROVIDER_DECLINED\" }],\n \"Binance returned an OAuth error. The callback deliberately does not echo provider error text into the page.\",\n ), 400);\n }\n\n const state = c.req.query(\"state\") ?? \"\";\n const code = c.req.query(\"code\") ?? \"\";\n const issuer = c.req.query(\"iss\") ?? \"\";\n if (!/^[A-Za-z0-9_-]{30,200}$/.test(state) || code.length < 8 || code.length > 5000) {\n return c.html(oauthReceiptPage(\n \"Invalid OAuth callback\",\n \"FAIL\",\n [{ label: \"Validation\", value: \"MISSING_OR_INVALID_STATE_OR_CODE\" }],\n \"The callback failed local input validation before any token request was made.\",\n ), 400);\n }\n if (issuer && issuer !== AGENT_OS.issuer) {\n return c.html(oauthReceiptPage(\n \"Issuer validation failed\",\n \"FAIL\",\n [{ label: \"Validation\", value: \"RFC9207_ISSUER_MISMATCH\" }],\n \"The authorization response issuer did not match the discovered Binance Agent OS authorization server. No token request was made.\",\n ), 400);\n }\n\n const pending = await consumeAuthorizationState(state);\n if (!pending) {\n return c.html(oauthReceiptPage(\n \"OAuth state expired or already used\",\n \"FAIL\",\n [{ label: \"Validation\", value: \"STATE_NOT_FOUND_OR_EXPIRED\" }],\n \"OAuth state is one-time-use and expires after ten minutes. Start a new verification flow.\",\n ), 400);\n }\n\n const token = await exchangeAuthorizationCode(code, pending.verifier);\n if (!token.ok) {\n return c.html(oauthReceiptPage(\n \"Token exchange failed\",\n \"FAIL\",\n [\n { label: \"HTTP status\", value: token.status },\n { label: \"OAuth result\", value: token.error },\n ],\n \"The one-time authorization code could not be exchanged. No token was persisted.\",\n ), 502);\n }\n\n let probe: any;\n try {\n probe = await probeAuthorizedAgentOs(token.accessToken);\n } catch (error) {\n probe = {\n connected: false,\n protocolEra: \"UNRESOLVED\",\n toolCount: 0,\n allToolNames: [],\n safeMarketToolNames: [],\n error: error instanceof Error ? error.message.slice(0, 180) : \"MCP_PROBE_FAILED\",\n };\n }\n\n const connected = probe.connected === true;\n return c.html(oauthReceiptPage(\n connected ? \"Binance Agent OS authorized\" : \"OAuth succeeded; MCP catalog not verified\",\n connected ? \"PASS\" : \"FAIL\",\n [\n { label: \"OAuth code flow\", value: \"PASS\" },\n { label: \"Issuer\", value: issuer || `${AGENT_OS.issuer} (callback omitted iss; server metadata did not advertise mandatory response-iss support)` },\n { label: \"Token persistence\", value: \"NONE\" },\n { label: \"Refresh token persisted\", value: \"NO\" },\n { label: \"Token endpoint scope\", value: token.scope ?? \"NOT_RETURNED\" },\n { label: \"MCP catalog connected\", value: connected ? \"YES\" : \"NO\" },\n { label: \"Protocol era\", value: probe.protocolEra ?? \"UNRESOLVED\" },\n { label: \"Tool count\", value: probe.toolCount ?? 0 },\n { label: \"Safe market tools\", value: probe.safeMarketToolNames ?? [] },\n { label: \"Automatic tool call\", value: \"NO\" },\n ],\n connected\n ? \"The callback used the ephemeral access token only to read the MCP tool catalog. No MCP tool was called and no Binance token or refresh token was persisted.\"\n : \"The OAuth code exchange succeeded, but the MCP tool catalog could not be proven in this callback. The access token was still discarded.\",\n ), connected ? 200 : 502);\n});\n\n\n\napp.get(\"/api/health\", (c) => c.json({\n status: \"PASS\",\n service: \"PayAna Market Sentinel\",\n version: \"1.2.0-rc1\",\n mode: \"READ_ONLY_MARKET_EVIDENCE_WITH_OPTIONAL_EPHEMERAL_MCP_AUTH_PROBE\",\n boundary: \"MARKET_DATA_READ != TRADING_AUTH\",\n supportedSymbols: supportedSymbols(),\n agentOsMcp: {\n endpointKnown: true,\n oauthFlowReady: true,\n oauthStartPath: \"/oauth/start\",\n runtimeProbeState: \"READY_FOR_USER_AUTHORIZATION\",\n liveAuthorizedSession: false,\n tokenPersistence: \"NONE\",\n automaticToolCall: false,\n },\n marketData: {\n provider: \"Binance public market-data surface\",\n runtimeChampion: \"data-api.binance.vision\",\n directApiBinanceComFromValTown: \"HTTP_451_RESTRICTED_LOCATION\",\n },\n generatedAt: new Date().toISOString(),\n}));\n\napp.get(\"/api/symbols\", (c) => c.json({ status: \"PASS\", symbols: supportedSymbols() }));\n\napp.get(\"/api/analyze\", async (c) => {\n try {\n const symbol = normalizeSymbol(c.req.query(\"symbol\") ?? \"BTCUSDT\");\n const result = await analyzeMarket(symbol);\n const httpStatus = result.evidenceState === \"FAIL\" ? 503 : 200;\n return c.json(result, httpStatus);\n } catch (error) {\n const message = error instanceof Error ? error.message : String(error);\n const status = message === \"INVALID_SYMBOL_FORMAT\" || message === \"SYMBOL_NOT_ALLOWLISTED\" ? 400 : 500;\n return c.json({ status: \"FAIL\", error: message.slice(0, 180), boundary: \"NO_UNVALIDATED_SYMBOL_FORWARDING\" }, status);\n }\n});\n\napp.notFound((c) => c.json({ status: \"FAIL\", error: \"NOT_FOUND\" }, 404));\napp.onError((err) => {\n console.error(\"UNHANDLED\", err instanceof Error ? err.message : String(err));\n return new Response(JSON.stringify({ status: \"FAIL\", error: \"INTERNAL_ERROR\" }), { status: 500, headers: { \"content-type\": \"application/json\" } });\n});\n\nexport default app.fetch;\n","label","payana-agent-os",[141],"2e7e4260-0bfc-430c-906d-88a2db100fb3","SKILL.md","06f15bce-aafe-11f1-857f-1607ee4eb77e",3,["D",1788814343943],"# PayAna Falsifier Agent Skill\n\n## Purpose\n\nPayAna is an evidence-first market-analysis agent for Binance Agent OS. Its job is **not** to predict a guaranteed direction and **not** to place trades. It observes market evidence, constructs competing hypotheses, searches for disconfirming evidence, records what is missing, and returns a decision-quality briefing.\n\nThe skill is designed for an MCP-capable AI client connected to the official Binance Agent OS MCP endpoint:\n\n`https://agent.binance.com/mcp/agentic`\n\nUse the minimum permission set required. For this skill, **Market Data only** is sufficient. Account, Trade, Transfer and withdrawal-like capabilities are outside the skill's required scope.\n\n## Hard safety boundary\n\n- `MARKET_DATA_READ != TRADING_AUTH`\n- Never request or enable Trade, Account or Transfer merely to complete this workflow.\n- Never place, simulate-as-real, confirm or recommend an order.\n- Never claim an MCP call occurred unless the tool receipt proves it.\n- Never treat model confidence as a calibrated probability.\n- Never treat a screenshot, HTTP 200, API field named `open`, or plausible prose as economic proof.\n- If one required source fails, mark the run `PARTIAL`; if all required sources fail, mark it `FAIL`.\n\n## Supported market evidence\n\nFor the requested Binance spot symbol, retrieve when available:\n\n1. 24h ticker: last price, 24h change, high, low, quote volume, trade count.\n2. Order book: at least top 20 bid and ask levels.\n3. 5m candlesticks: at least 36 candles when available.\n4. Funding/mark price only when exposed by the connected Agent OS market-data tool. Absence must be recorded, not imputed.\n\n## Loop\n\nRun this reasoning loop once per user request or monitoring cycle:\n\n1. **OBSERVE** — collect fresh market evidence and timestamps.\n2. **VALIDATE** — verify symbol, source success, timestamps, numeric bounds and non-empty data.\n3. **MODEL** — calculate descriptive metrics.\n4. **NEURON** — create at least three branches:\n - winning hypothesis supported by current evidence;\n - opposite hypothesis;\n - alternative/non-directional explanation such as noise, liquidity effects or stale/missing context.\n5. **FALSIFY** — define observable conditions that would invalidate each hypothesis.\n6. **NEGATIVE SPACE** — explicitly list context not available to the run.\n7. **RECONCILE** — choose the best current descriptive label, not a trade direction.\n8. **RECEIPT** — return source/tool receipts and timestamp.\n9. **NEXT TEST** — state what evidence should be checked next if the user wants to continue.\n\n## Deterministic metrics\n\nUse formulas equivalent to the reference implementation when raw inputs exist:\n\n- `spread_bps = (ask - bid) / mid * 10000`\n- `bid_notional = Σ(price_i * qty_i)` over top-20 bids\n- `ask_notional = Σ(price_i * qty_i)` over top-20 asks\n- `book_imbalance = (bid_notional - ask_notional) / (bid_notional + ask_notional)`\n- `log_return_t = ln(close_t / close_(t-1))`\n- `realized_vol_5m_bps = sample_std(log_returns) * 10000`\n- `momentum_30m_pct = (latest_close / close_30m_ago - 1) * 100`\n- `momentum_3h_pct = (latest_close / first_close_in_3h_window - 1) * 100`\n- `volume_z = (latest_quote_volume - mean(prior_quote_volumes)) / sample_std(prior_quote_volumes)`\n\nReference descriptive score:\n\n`directional_score = mean(tanh(2*book_imbalance), tanh(momentum_30m_pct/0.6), tanh(momentum_3h_pct/1.5))`\n\nThis score is a heuristic descriptor, not a probability and not a price forecast.\n\n## Output contract\n\nReturn a compact object or briefing with these fields:\n\n- `symbol`\n- `evidence_state`: `PASS | PARTIAL | FAIL`\n- `fetched_at`\n- `observations`\n- `descriptive_pressure`: `BULLISH_PRESSURE | BEARISH_PRESSURE | MIXED_NEUTRAL`\n- `supporting_evidence[]`\n- `opposing_evidence[]`\n- `alternative_explanations[]`\n- `falsifiers[]`\n- `risk_flags[]`\n- `missing_context[]`\n- `source_receipts[]`\n- `recommendation`: always `NO_TRADE_DECISION` for this skill\n- `next_test`\n\n## Example request\n\n\"Use Binance Agent OS market data to audit BTCUSDT. Tell me what the current evidence supports, what argues against it, what would falsify the reading, and what is missing. Do not trade.\"\n\n## Example acceptance criteria\n\nA run passes only if:\n\n- the symbol is explicit and validated;\n- at least one live source has a timestamp/currentness signal;\n- no missing source is silently replaced by fabricated data;\n- the opposite hypothesis and at least one alternative explanation are present;\n- falsifiers are observable rather than rhetorical;\n- source receipts are listed;\n- final recommendation remains `NO_TRADE_DECISION`.\n",[153],"2fa1e14a-ba0e-4c1e-ad74-9b0ae98461f3","README.md","01a07d8b-9306-748f-a55c-55a2e635552d",25,["D",1788819807795],10,"# PayAna — Falsifier Agent for Binance Agent OS\n\n**Track A — Binance Agent OS Mini Hackathon**\n\nPayAna is an evidence-first market-analysis agent whose defining behavior is simple:\n\n> It does not stop after asking **“what does the market evidence support?”**. It also asks **“what would prove this reading wrong?”**\n\nThe project combines a reusable `SKILL.md` for an MCP-capable AI client with a deployed reference cockpit that computes transparent market metrics, records source receipts, exposes missing context and refuses to convert a descriptive market reading into a trade instruction.\n\n**Hard boundary:** `MARKET_DATA_READ != TRADING_AUTH`\n\n## Why this exists\n\nMany market-agent demos optimize for a polished answer or an executed action. That creates a failure mode: a coherent answer can still be based on stale data, one-sided evidence, missing context or a non-calibrated model score.\n\nPayAna instead forces a small scientific loop:\n\n```text\nOBSERVE → VALIDATE → MODEL → COMPETING HYPOTHESES\n → FALSIFY → NEGATIVE SPACE → RECONCILE → RECEIPT → NEXT TEST\n```\n\nThe result is **decision-quality evidence**, not a trade recommendation.\n\n## What the agent does\n\nFor a requested Binance market, PayAna:\n\n1. retrieves fresh market evidence;\n2. validates source state and timestamps;\n3. computes reproducible metrics;\n4. constructs a winning hypothesis, an opposite hypothesis and an alternative explanation;\n5. defines observable falsifiers;\n6. lists context that is missing instead of fabricating it;\n7. returns source receipts;\n8. ends with `NO_TRADE_DECISION`.\n\nSee [`SKILL.md`](./SKILL.md) for the agent contract.\n\n## Binance Agent OS integration\n\nOfficial MCP endpoint:\n\n```text\nhttps://agent.binance.com/mcp/agentic\n```\n\nThe skill requires only the **Market Data** capability. It does not require Account, Trade or Transfer.\n\nA runtime probe against the official endpoint correctly returned an OAuth challenge rather than pretending to be connected. The discovered authorization metadata advertises Authorization Code, PKCE `S256`, token endpoint authentication method `none`, and Client ID Metadata Document (CIMD) support.\n\nPayAna 1.2 adds an **optional, user-initiated OAuth verification flow** at `/oauth/start`. Its public client identity is `https://payana-agent-os.val.run/oauth/client-metadata.json`. The flow stores only a one-time `state` plus PKCE verifier for at most ten minutes, exchanges the authorization code in callback memory, reads the MCP tool catalog, and then discards the access token and any refresh token. It never calls an MCP tool automatically.\n\nThe boundary remains explicit:\n\n```text\nMCP_ENDPOINT_KNOWN != MCP_SESSION_AUTHORIZED\nOAUTH_FLOW_READY != USER_AUTHORIZED_SESSION\nAUTHORIZED_TOOL_CATALOG != TOOL_CALL\n```\n\nA real authorized Agent OS receipt still requires the participant to complete Binance's authorization UI. Until that human/account gate happens, the hosted reference cockpit continues to use Binance's public market-data surface for the reproducible analysis layer and does not claim an authenticated MCP session.\n\n## Live reference cockpit\n\n**Production demo:** https://payana-agent-os.val.run/\n\nThe deployed web application provides a zero-trade demonstration of the deterministic evidence layer:\n\n- BTCUSDT\n- ETHUSDT\n- BNBUSDT\n- SOLUSDT\n- XRPUSDT\n\nFor each symbol it combines:\n\n- 24h ticker;\n- top-20 order book;\n- 36 × 5-minute candles;\n- spread;\n- top-20 bid/ask notional;\n- order-book imbalance;\n- 30m and 3h momentum;\n- 5m realized volatility;\n- volume z-score;\n- descriptive directional pressure;\n- heuristic evidence-stability score;\n- source receipts;\n- risk flags;\n- falsifiers;\n- missing context.\n\nThe stability score is explicitly **not a calibrated probability**.\n\n## Reproducible formulas\n\n```text\nspread_bps = (ask - bid) / mid * 10000\n\nbid_notional = Σ(price_i × qty_i), top 20 bids\nask_notional = Σ(price_i × qty_i), top 20 asks\n\nbook_imbalance =\n (bid_notional - ask_notional) /\n (bid_notional + ask_notional)\n\nlog_return_t = ln(close_t / close_(t-1))\n\nrealized_vol_5m_bps =\n sample_std(log_returns) × 10000\n\nmomentum_30m_pct =\n (latest_close / close_30m_ago - 1) × 100\n\nvolume_z =\n (latest_quote_volume - mean(prior_quote_volumes)) /\n sample_std(prior_quote_volumes)\n```\n\nThe API exposes its method description directly in every successful response.\n\n## HTTP API\n\n```text\nGET /api/health\nGET /api/symbols\nGET /api/analyze?symbol=BTCUSDT\nGET /oauth/status\nGET /oauth/client-metadata.json\nGET /oauth/start # explicit user action; redirects to Binance\nGET /oauth/callback # OAuth response only\n```\n\nThere is deliberately no trading endpoint. `/oauth/start` is not called by the cockpit automatically; the participant must click the verification action.\n\nExample safety fields:\n\n```json\n{\n \"readOnly\": true,\n \"boundary\": \"MARKET_DATA_READ != TRADING_AUTH\",\n \"assessment\": {\n \"recommendation\": \"NO_TRADE_DECISION\"\n }\n}\n```\n\n## Runtime discovery\n\nThe application does not assume that a documented endpoint is usable from every execution environment.\n\nDuring the 2026-09-07 Val Town runtime census:\n\n```text\napi.binance.com → HTTP 451 from this runtime\nfapi.binance.com → HTTP 451 from this runtime\ndata-api.binance.vision → HTTP 200 for public spot market data\nAgent OS MCP initialize → HTTP 401 OAuth challenge, as expected without authorization\n```\n\n`data-api.binance.vision` is therefore the current runtime champion for the hosted public-data reference layer.\n\nSee [`docs/ARCHITECTURE.md`](./docs/ARCHITECTURE.md) for the evidence and boundaries.\n\n## Validation\n\nCurrent 1.2 release-candidate audit:\n\n```text\n189 / 189 assertions PASS\n35 / 35 rate-limit mutation steps PASS\n224 total executed checks\n```\n\nThe OAuth/MCP portion contributes 34 authorization-flow checks, 25 synthetic MCP/token-boundary checks and 6 OAuth-state storage/replay checks. The aggregate runner executes suites sequentially because multiple mutation suites temporarily replace `globalThis.fetch`; this prevents false interference between independent tests.\n\nCoverage includes all five allowlisted symbols and validates:\n\n- current ticker timestamp;\n- positive market price;\n- non-negative spread;\n- order-book imbalance bounds;\n- stability-score bounds;\n- explicit non-probability language;\n- three source receipts;\n- candle-series presence;\n- `NO_TRADE_DECISION` invariant;\n- invalid symbols;\n- injection-like symbol strings;\n- nonexistent routes;\n- rejection of write-like POST access.\n\nRate-limit mutation control:\n\n```text\nrequests 1–30 → HTTP 200\nrequests 31–35 → HTTP 429\nPASS\n```\n\nRun in Val Town:\n\n```text\ntests/selftest.ts\ntests/failure_modes_selftest.ts\ntests/oauth_flow_selftest.ts\ntests/oauth_mcp_probe_selftest.ts\ntests/oauth_state_storage_selftest.ts\ntests/rate_limit_selftest.ts\ntests/release_audit.ts\n```\n\nDetailed release evidence: [`docs/TEST_EVIDENCE.md`](./docs/TEST_EVIDENCE.md).\n\nThe browser layer is validated separately from server tests. After CSP hardening, a JavaScript-rendering fetch successfully matched React-only selectors including source receipts. Full interactive/screenshot automation is tracked separately because the external browser providers currently have insufficient credit; it is not mislabeled as completed.\n\n## Web hardening\n\n- strict symbol allowlist;\n- no arbitrary upstream URL forwarding;\n- `Cache-Control: no-store` on API results;\n- CSP;\n- `X-Content-Type-Options: nosniff`;\n- `X-Frame-Options: DENY`;\n- restrictive `Permissions-Policy`;\n- no Binance account key stored in the app;\n- no Account / Trade / Transfer function;\n- best-effort per-runtime rate limiting.\n\nThe rate limiter is intentionally documented as best-effort because serverless instances do not provide a shared global bucket.\n\n## Repository structure\n\n```text\n.\n├── SKILL.md # reusable Falsifier Agent contract\n├── index.ts # Hono API + web security boundaries\n├── lib/\n│ ├── market.ts # evidence acquisition + formulas\n│ └── agent_os_oauth.ts # CIMD + PKCE + ephemeral MCP catalog probe\n├── frontend/\n│ ├── root.tsx\n│ ├── index.tsx\n│ ├── styles.css\n│ └── components/App.tsx\n├── tests/\n│ ├── selftest.ts\n│ ├── failure_modes_selftest.ts\n│ ├── oauth_flow_selftest.ts\n│ ├── oauth_mcp_probe_selftest.ts\n│ ├── oauth_state_storage_selftest.ts\n│ ├── rate_limit_selftest.ts\n│ └── release_audit.ts\n├── audits/\n│ ├── binance_mcp_probe.ts\n│ ├── oauth_metadata_probe.ts\n│ ├── market_api_probe.ts\n│ └── vision_klines_probe.ts\n└── docs/\n ├── ARCHITECTURE.md\n ├── TEST_EVIDENCE.md\n └── SUBMISSION_CHECKLIST.md\n```\n\n## Negative controls that matter\n\n```text\nHTTP_200 != VALID_MARKET_EVIDENCE\nSCREENSHOT != BEHAVIOR_PROOF\nMARKET_DATA_READ != TRADING_AUTH\nMCP_ENDPOINT_KNOWN != MCP_SESSION_AUTHORIZED\nOAUTH_FLOW_READY != USER_AUTHORIZED_SESSION\nACCESS_TOKEN_EPHEMERAL != TOKEN_PERSISTED\nAUTHORIZED_TOOL_CATALOG != TOOL_CALL\nMODEL_SCORE != CALIBRATED_PROBABILITY\nMISSING_EVIDENCE != ZERO\nCURRENT_PRESSURE != FUTURE_PRICE\nFETCH_FAIL != ZERO\n```\n\n## Hackathon submission state\n\nThe official Binance announcement states a Track A deadline of **2026-09-08 23:59 UTC** and requires following/reposting Binance, replying or quote-reposting with the Track A submission (video/demo plus GitHub when applicable), and completing the survey.\n\nExternal account actions are intentionally tracked as unverified until they actually happen. See [`docs/SUBMISSION_CHECKLIST.md`](./docs/SUBMISSION_CHECKLIST.md).\n\n## Design principle\n\nPayAna's thesis is not “AI can predict the market.”\n\nIt is:\n\n> **An agent becomes more trustworthy when it is required to expose the evidence against its own conclusion, the conditions that would falsify it, and the context it does not have.**\n",[160],"6720addf-ce09-474a-a98d-8651776d2430","CHANGELOG.md","01a07d8b-9306-748f-a55c-52427940545d",["D",1788814343943],1,"# Changelog\n\n## 2026-09-07 — PayAna Market Sentinel 1.0 candidate\n\n### Agent / methodology\n\n- Added `SKILL.md`: evidence-first Binance Agent OS market-data workflow.\n- Added winning/opposite/alternative hypothesis branches and observable falsifiers.\n- Added explicit negative-space / missing-context reporting.\n- Added hard `NO_TRADE_DECISION` and `MARKET_DATA_READ != TRADING_AUTH` boundaries.\n- Replaced misleading \"model confidence\" language with a heuristic `stabilityScore` that explicitly states it is not a calibrated probability.\n\n### Binance runtime discovery\n\n- Probed the official Agent OS MCP endpoint.\n- Confirmed unauthenticated `initialize` produces an OAuth 401 challenge rather than a usable session.\n- Retrieved OAuth Protected Resource Metadata and Authorization Server Metadata.\n- Confirmed Authorization Code, PKCE S256, public-client token auth (`none`), and Client ID Metadata Document support.\n- Confirmed Val Town runtime receives HTTP 451 from `api.binance.com`/`fapi.binance.com`.\n- Confirmed `data-api.binance.vision` works for public spot ticker, depth and klines and promoted it as the hosted-demo runtime champion.\n\n### Evidence engine\n\n- Added five-symbol allowlist: BTCUSDT, ETHUSDT, BNBUSDT, SOLUSDT, XRPUSDT.\n- Added 24h ticker, top-20 order-book and 36 × 5m candle acquisition.\n- Added source receipts with HTTP state and duration.\n- Added PASS/PARTIAL/FAIL evidence-state classification.\n- Added spread, notional depth, order-book imbalance, realized volatility, momentum and volume-z calculations.\n- Added descriptive directional pressure and explicit falsifiers.\n- Added method/formula metadata directly to API responses.\n\n### API and security\n\n- Added `/api/health`, `/api/symbols`, `/api/analyze`.\n- Added strict symbol validation and allowlisting.\n- Added `Cache-Control: no-store` for API responses.\n- Added CSP, `nosniff`, frame denial, `Referrer-Policy` and restrictive `Permissions-Policy`.\n- Removed React inline-style dependencies so the strict `style-src 'self'` CSP remains viable.\n- Added best-effort per-runtime request limiting.\n- No trade, account, transfer, wallet or arbitrary upstream forwarding endpoint exists.\n\n### Frontend\n\n- Replaced the template UI with the PayAna dark evidence cockpit.\n- Added market metrics, short-horizon sparkline, source receipts, stability indicator, risk flags, falsifiers and blind spots.\n- Added automatic 30-second evidence refresh while the page is visible.\n- Added responsive desktop/mobile layout.\n\n### Validation\n\n- Core/live self-test: 101/101 PASS across five symbols and NEURON hypothesis fields.\n- Source-failure/malformed-response mutation suite: 23/23 PASS, including explicit proof that missing evidence is not zero-imputed.\n- Rate-limit mutation: requests 1–30 return 200; 31–35 return 429 — PASS.\n- Aggregate release audit: 124 assertions + 35 mutation steps = 159 executed checks, PASS.\n- Invalid/injection-like symbols are rejected.\n- Write-like POST access to analysis route is rejected.\n- Immutable frontend entry and App assets return 200 and compile to JavaScript.\n- Root HTTP response contains final CSP and security headers.\n- JavaScript-rendering content extraction matched React-only `.app-shell` and `.source-item` selectors after CSP hardening.\n- Interactive screenshot/browser automation was attempted but external TinyFish and Firecrawl accounts reported insufficient credit; this remains explicitly unverified instead of being promoted to PASS.\n\n### Documentation\n\n- Rebuilt README for the hackathon candidate.\n- Added `docs/ARCHITECTURE.md`.\n- Added `docs/SUBMISSION_CHECKLIST.md`.\n- Organized probes under `audits/` and executable checks under `tests/`.\n",[168],"b0b3070a-0ae5-46be-a259-51be1a48c8ed","tests","01a07da4-bf09-76f4-833d-9d03a9489f5d",["D",1788814343943],"directory",[175],"acea0143-79f0-4fd6-892d-800536017666","lib","01a07da4-bf09-76f4-833d-9ac0d61fa421",["D",1788814343943],[181],"ac623d20-11d2-446e-a0a9-ce656be124f9","frontend","01a07d8b-9306-748f-a55c-4dc932d21069",["D",1788812694161],[186],"fdf98946-4c18-40be-a9e5-a69534ffa619","docs","01a07da4-bf09-76f4-833d-941e59a75678",["D",1788814343943],[191],"e88db493-df85-499e-b1bb-0f870e23df5d","audits","01a07da4-bf09-76f4-833d-91948927bf7b",["D",1788814343943],[196],"pulls","branches",7,"forks",5,"envVars",{"_209":63,"_211":63},"connections",{"_209":63,"_210":63},"count","unfilledCount","emptyCount",{"_43":195,"_32":196,"_30":197,"_142":-5,"_41":42,"_40":155,"_144":59,"_38":434,"_13":63,"_34":178,"_35":-5,"_24":25,"_149":-5,"_245":435,"_27":436},{"_43":427,"_32":428,"_30":429,"_142":197,"_41":42,"_40":155,"_144":59,"_38":430,"_13":171,"_34":261,"_35":431,"_24":25,"_149":-5,"_245":432,"_27":433},{"_43":420,"_32":421,"_30":422,"_142":197,"_41":42,"_40":155,"_144":59,"_38":423,"_13":63,"_34":261,"_35":424,"_24":25,"_149":-5,"_245":425,"_27":426},{"_43":412,"_32":413,"_30":414,"_142":197,"_41":42,"_40":415,"_144":59,"_38":416,"_13":171,"_34":261,"_35":417,"_24":25,"_149":-5,"_245":418,"_27":419},{"_43":405,"_32":406,"_30":407,"_142":197,"_41":42,"_40":155,"_144":59,"_38":408,"_13":63,"_34":261,"_35":409,"_24":25,"_149":-5,"_245":410,"_27":411},{"_43":398,"_32":399,"_30":400,"_142":197,"_41":42,"_40":155,"_144":59,"_38":401,"_13":63,"_34":261,"_35":402,"_24":25,"_149":-5,"_245":403,"_27":404},{"_43":190,"_32":191,"_30":192,"_142":-5,"_41":42,"_40":155,"_144":59,"_38":395,"_13":63,"_34":178,"_35":-5,"_24":25,"_149":-5,"_245":396,"_27":397},{"_43":388,"_32":389,"_30":390,"_142":192,"_41":42,"_40":155,"_144":25,"_38":391,"_13":63,"_34":20,"_35":392,"_24":25,"_149":-5,"_245":393,"_27":394},{"_43":380,"_32":381,"_30":382,"_142":192,"_41":42,"_40":383,"_144":25,"_38":384,"_13":146,"_34":20,"_35":385,"_24":25,"_149":-5,"_245":386,"_27":387},{"_43":376,"_32":33,"_30":31,"_142":192,"_41":42,"_40":14,"_144":25,"_38":377,"_13":270,"_34":20,"_35":37,"_24":25,"_149":-5,"_245":378,"_27":379},{"_43":185,"_32":186,"_30":187,"_142":-5,"_41":42,"_40":171,"_144":59,"_38":373,"_13":63,"_34":178,"_35":-5,"_24":25,"_149":-5,"_245":374,"_27":375},{"_43":369,"_32":368,"_30":363,"_142":187,"_41":42,"_40":171,"_144":59,"_38":370,"_13":63,"_34":178,"_35":-5,"_24":25,"_149":-5,"_245":371,"_27":372},{"_43":360,"_32":361,"_30":362,"_142":363,"_41":42,"_40":143,"_144":25,"_38":364,"_13":146,"_34":261,"_35":365,"_24":25,"_149":-5,"_245":366,"_27":367},{"_43":353,"_32":354,"_30":355,"_142":187,"_41":42,"_40":171,"_144":59,"_38":356,"_13":63,"_34":20,"_35":357,"_24":25,"_149":-5,"_245":358,"_27":359},{"_43":346,"_32":347,"_30":348,"_142":187,"_41":42,"_40":171,"_144":59,"_38":349,"_13":63,"_34":261,"_35":350,"_24":25,"_149":-5,"_245":351,"_27":352},{"_43":339,"_32":340,"_30":341,"_142":187,"_41":42,"_40":155,"_144":59,"_38":342,"_13":171,"_34":261,"_35":343,"_24":25,"_149":-5,"_245":344,"_27":345},{"_43":332,"_32":333,"_30":334,"_142":187,"_41":42,"_40":143,"_144":59,"_38":335,"_13":171,"_34":20,"_35":336,"_24":25,"_149":-5,"_245":337,"_27":338},{"_43":180,"_32":181,"_30":182,"_142":-5,"_41":42,"_40":155,"_144":59,"_38":329,"_13":63,"_34":178,"_35":-5,"_24":25,"_149":-5,"_245":330,"_27":331},{"_43":321,"_32":322,"_30":323,"_142":182,"_41":42,"_40":324,"_144":25,"_38":325,"_13":270,"_34":261,"_35":326,"_24":25,"_149":-5,"_245":327,"_27":328},{"_43":314,"_32":315,"_30":316,"_142":182,"_41":42,"_40":155,"_144":59,"_38":317,"_13":63,"_34":261,"_35":318,"_24":25,"_149":-5,"_245":319,"_27":320},{"_43":174,"_32":175,"_30":176,"_142":-5,"_41":42,"_40":155,"_144":59,"_38":311,"_13":63,"_34":178,"_35":-5,"_24":25,"_149":-5,"_245":312,"_27":313},{"_43":304,"_32":305,"_30":306,"_142":176,"_41":42,"_40":155,"_144":59,"_38":307,"_13":63,"_34":261,"_35":308,"_24":25,"_149":-5,"_245":309,"_27":310},{"_43":297,"_32":298,"_30":299,"_142":176,"_41":42,"_40":143,"_144":59,"_38":300,"_13":63,"_34":261,"_35":301,"_24":25,"_149":-5,"_245":302,"_27":303},{"_43":289,"_32":290,"_30":291,"_142":176,"_41":42,"_40":292,"_144":59,"_38":293,"_13":171,"_34":261,"_35":294,"_24":25,"_149":-5,"_245":295,"_27":296},{"_43":281,"_32":282,"_30":283,"_142":176,"_41":42,"_40":284,"_144":59,"_38":285,"_13":63,"_34":261,"_35":286,"_24":25,"_149":-5,"_245":287,"_27":288},{"_43":274,"_32":275,"_30":276,"_142":176,"_41":42,"_40":155,"_144":59,"_38":277,"_13":63,"_34":261,"_35":278,"_24":25,"_149":-5,"_245":279,"_27":280},{"_43":265,"_32":266,"_30":267,"_142":176,"_41":42,"_40":268,"_144":59,"_38":269,"_13":270,"_34":261,"_35":271,"_24":25,"_149":-5,"_245":272,"_27":273},{"_43":257,"_32":258,"_30":259,"_142":176,"_41":42,"_40":155,"_144":59,"_38":260,"_13":63,"_34":261,"_35":262,"_24":25,"_149":-5,"_245":263,"_27":264},{"_43":167,"_32":168,"_30":169,"_142":-5,"_41":42,"_40":155,"_144":25,"_38":254,"_13":171,"_34":20,"_35":172,"_24":25,"_149":-5,"_245":255,"_27":256},{"_43":159,"_32":160,"_30":161,"_142":-5,"_41":42,"_40":162,"_144":25,"_38":251,"_13":164,"_34":20,"_35":165,"_24":25,"_149":-5,"_245":252,"_27":253},{"_43":152,"_32":153,"_30":154,"_142":-5,"_41":42,"_40":155,"_144":59,"_38":248,"_13":63,"_34":20,"_35":157,"_24":25,"_149":-5,"_245":249,"_27":250},{"_43":140,"_32":141,"_30":57,"_142":-5,"_41":42,"_40":143,"_144":25,"_38":244,"_13":146,"_34":147,"_35":148,"_24":25,"_149":150,"_245":246,"_27":247},["D",1788819451982],"children",[],[141],["D",1788814343943],[],[153],["D",1788819807795],[],[160],["D",1788814343943],[],[168],"44442e9d-9668-4878-98e7-b223f94c72d1","selftest.ts","06f1a980-aafe-11f1-857f-1607ee4eb77e",["D",1788814343943],"script","import handler from \"../index.ts\";\nimport { analyzeMarket, normalizeSymbol, supportedSymbols } from \"../lib/market.ts\";\n\nconst results: any[] = [];\nfunction check(name: string, pass: boolean, details?: unknown) {\n results.push({ name, pass, details });\n if (!pass) throw new Error(`SELFTEST_FAIL:${name}`);\n}\n\nfor (const bad of [\"INVALIDXYZ\", \"BTCUSDT&foo=bar\", \"../BTCUSDT\", \"\"]) {\n let rejected = false;\n try { normalizeSymbol(bad); } catch { rejected = true; }\n if (bad === \"\") {\n // empty input normalizes to default only when nullish is not used; explicit empty must not leave allowlist.\n check(\"explicit_empty_rejected\", rejected);\n } else check(`invalid_symbol_rejected:${bad}`, rejected);\n}\n\nfor (const symbol of supportedSymbols()) {\n const r: any = await analyzeMarket(symbol);\n check(`${symbol}:evidence`, [\"PASS\", \"PARTIAL\"].includes(r.evidenceState), r.evidenceState);\n check(`${symbol}:read_only`, r.readOnly === true && r.boundary === \"MARKET_DATA_READ != TRADING_AUTH\");\n check(`${symbol}:price_positive`, Number(r.market?.lastPrice) > 0, r.market?.lastPrice);\n check(`${symbol}:spread_nonnegative`, Number(r.microstructure?.spreadBps) >= 0, r.microstructure?.spreadBps);\n check(`${symbol}:imbalance_bounded`, Math.abs(Number(r.microstructure?.orderBookImbalance)) <= 1.000001, r.microstructure?.orderBookImbalance);\n check(`${symbol}:stability_bounded`, Number(r.assessment?.stabilityScore) >= 0 && Number(r.assessment?.stabilityScore) <= 1, r.assessment?.stabilityScore);\n check(`${symbol}:stability_not_probability`, String(r.assessment?.stabilityMeaning ?? \"\").includes(\"not a calibrated probability\"));\n check(`${symbol}:winning_hypothesis`, String(r.assessment?.hypotheses?.winning ?? \"\").length > 20);\n check(`${symbol}:opposite_hypothesis`, String(r.assessment?.hypotheses?.opposite ?? \"\").length > 20);\n check(`${symbol}:alternative_hypothesis`, String(r.assessment?.hypotheses?.alternative ?? \"\").length > 20);\n check(`${symbol}:supporting_evidence`, Array.isArray(r.assessment?.supportingEvidence) && r.assessment.supportingEvidence.length >= 1);\n check(`${symbol}:opposing_evidence`, Array.isArray(r.assessment?.opposingEvidence) && r.assessment.opposingEvidence.length >= 1);\n check(`${symbol}:alternative_explanations`, Array.isArray(r.assessment?.alternativeExplanations) && r.assessment.alternativeExplanations.length >= 2);\n check(`${symbol}:falsifiers`, Array.isArray(r.assessment?.falsifiers) && r.assessment.falsifiers.length >= 2);\n check(`${symbol}:next_test`, String(r.assessment?.nextTest ?? \"\").includes(\"5m\"));\n check(`${symbol}:no_trade_recommendation`, r.assessment?.recommendation === \"NO_TRADE_DECISION\");\n check(`${symbol}:receipts_present`, Array.isArray(r.receipts) && r.receipts.length === 3, r.receipts?.length);\n check(`${symbol}:series_present`, Array.isArray(r.shortHorizon?.closeSeries) && r.shortHorizon.closeSeries.length >= 12, r.shortHorizon?.closeSeries?.length);\n const closeTime = Number(r.market?.tickerCloseTime);\n check(`${symbol}:ticker_currentness`, Number.isFinite(closeTime) && Math.abs(Date.now() - closeTime) < 5 * 60_000, { closeTime, ageMs: Date.now() - closeTime });\n}\n\nconst post = await handler(new Request(\"https://local.test/api/analyze?symbol=BTCUSDT\", { method: \"POST\" }));\ncheck(\"post_not_supported\", post.status === 404, post.status);\nconst unknown = await handler(new Request(\"https://local.test/api/does-not-exist\"));\ncheck(\"unknown_route_404\", unknown.status === 404, unknown.status);\n\nconst pass = results.every(r => r.pass);\nconsole.log(JSON.stringify({ pass, version: \"1.0.0\", tests: results.length, results }));\nexport default { pass, tests: results.length };\n",[],[175,258],"fbe40cd3-87b6-4f29-8cd7-6508483703cb","release_audit.ts","06f1a084-aafe-11f1-857f-1607ee4eb77e",20,["D",1788819759620],4,"const core = (await import(\"./selftest.ts\")).default;\nconst failureModes = (await import(\"./failure_modes_selftest.ts\")).default;\nconst oauthFlow = (await import(\"./oauth_flow_selftest.ts\")).default;\nconst oauthMcpProbe = (await import(\"./oauth_mcp_probe_selftest.ts\")).default;\nconst oauthStateStorage = (await import(\"./oauth_state_storage_selftest.ts\")).default;\nconst rateLimit = (await import(\"./rate_limit_selftest.ts\")).default;\n\nconst suites = {\n core,\n failureModes,\n oauthFlow,\n oauthMcpProbe,\n oauthStateStorage,\n rateLimit,\n};\nconst pass = Object.values(suites).every((suite: any) => suite?.pass === true);\nconst assertionCount = Number(core?.tests ?? 0)\n + Number(failureModes?.tests ?? 0)\n + Number(oauthFlow?.tests ?? 0)\n + Number(oauthMcpProbe?.tests ?? 0)\n + Number(oauthStateStorage?.tests ?? 0);\nconst mutationSteps = Number(rateLimit?.tests ?? 0);\nconst result = {\n pass,\n releaseCandidate: \"payana-market-sentinel-1.2.0-rc1\",\n assertionCount,\n mutationSteps,\n totalExecutedChecks: assertionCount + mutationSteps,\n suites,\n invariants: [\n \"MARKET_DATA_READ != TRADING_AUTH\",\n \"MCP_ENDPOINT_KNOWN != MCP_SESSION_AUTHORIZED\",\n \"MODEL_SCORE != CALIBRATED_PROBABILITY\",\n \"MISSING_EVIDENCE != ZERO\",\n \"CURRENT_PRESSURE != FUTURE_PRICE\",\n \"OAUTH_FLOW_READY != USER_AUTHORIZED_SESSION\",\n \"ACCESS_TOKEN_EPHEMERAL != TOKEN_PERSISTED\",\n \"AUTHORIZED_TOOL_CATALOG != TOOL_CALL\",\n ],\n auditedAt: new Date().toISOString(),\n};\nconsole.log(JSON.stringify(result));\nif (!pass) throw new Error(\"RELEASE_AUDIT_FAIL\");\nexport default result;\n",[],[175,266],"f18596a0-38ea-4e54-b9c4-7bfd020a9356","rate_limit_selftest.ts","06f19a58-aafe-11f1-857f-1607ee4eb77e",["D",1788814343943],"import handler from \"../index.ts\";\n\nconst statuses:number[]=[];\nfor(let i=0;i<35;i++){\n const r=await handler(new Request(\"https://local.test/api/health\",{headers:{\"x-forwarded-for\":\"203.0.113.77\"}}));\n statuses.push(r.status);\n}\nconst first30=statuses.slice(0,30);\nconst tail=statuses.slice(30);\nconst pass=first30.every(s=>s===200)&&tail.every(s=>s===429);\nconsole.log(JSON.stringify({pass,statuses,rule:\"30 requests per 60s per runtime bucket\"}));\nif(!pass) throw new Error(\"RATE_LIMIT_SELFTEST_FAIL\");\nexport default {pass, tests: statuses.length};\n",[],[175,275],"c632fd3f-6d66-413c-b066-7288ec3076d7","oauth_state_storage_selftest.ts","8d8f7326-ab0a-11f1-8b39-1607ee4eb77e",17,["D",1788819723776],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { consumeAuthorizationState, createAuthorizationRequest } from \"../lib/agent_os_oauth.ts\";\n\nconst checks: { name: string; pass: boolean; details?: unknown }[] = [];\nfunction check(name: string, pass: boolean, details?: unknown) {\n checks.push({ name, pass, details });\n if (!pass) throw new Error(`OAUTH_STATE_STORAGE_SELFTEST:${name}`);\n}\n\nconst marker = `storage-selftest-${crypto.randomUUID()}`;\nconst expiredState = `${marker}-expired`;\ntry {\n await sqlite.execute({\n sql: \"INSERT OR REPLACE INTO agent_os_oauth_states(state, code_verifier, created_at_ms) VALUES(?,?,?)\",\n args: [expiredState, \"synthetic-expired-verifier\", Date.now() - 11 * 60_000],\n });\n\n const request = await createAuthorizationRequest();\n const expired = await sqlite.execute({ sql: \"SELECT COUNT(*) AS n FROM agent_os_oauth_states WHERE state=?\", args: [expiredState] });\n check(\"expired_state_pruned_on_create\", Number((expired.rows[0] as any)?.n ?? -1) === 0, expired.rows[0]);\n\n const consumed = await consumeAuthorizationState(request.state);\n check(\"fresh_state_consumable\", Boolean(consumed?.verifier && consumed.verifier.length >= 80), consumed?.verifier.length);\n check(\"fresh_state_replay_rejected\", (await consumeAuthorizationState(request.state)) === null);\n\n const concurrent = await createAuthorizationRequest();\n const pair = await Promise.all([\n consumeAuthorizationState(concurrent.state),\n consumeAuthorizationState(concurrent.state),\n ]);\n const winners = pair.filter(Boolean).length;\n check(\"concurrent_consumption_single_winner\", winners === 1, winners);\n\n const pending = await sqlite.execute({ sql: \"SELECT COUNT(*) AS n FROM agent_os_oauth_states WHERE state IN (?,?)\", args: [request.state, concurrent.state] });\n check(\"test_states_not_left_pending\", Number((pending.rows[0] as any)?.n ?? -1) === 0, pending.rows[0]);\n\n const total = await sqlite.execute(\"SELECT COUNT(*) AS n FROM agent_os_oauth_states\");\n check(\"global_pending_state_cap_respected\", Number((total.rows[0] as any)?.n ?? 0) <= 500, total.rows[0]);\n} finally {\n await sqlite.execute({ sql: \"DELETE FROM agent_os_oauth_states WHERE state LIKE ?\", args: [`${marker}%`] });\n}\n\nconst pass = checks.every(x => x.pass);\nconsole.log(JSON.stringify({ pass, version: \"oauth-state-storage-1.0.0\", tests: checks.length, checks }));\nexport default { pass, tests: checks.length };\n",[],[175,282],"fbb78bce-99f7-443f-b5d7-56aefb64e68b","oauth_mcp_probe_selftest.ts","eba028da-ab09-11f1-870d-1607ee4eb77e",16,["D",1788819706612],"import { AGENT_OS, exchangeAuthorizationCode, probeAuthorizedAgentOs } from \"../lib/agent_os_oauth.ts\";\n\nconst originalFetch = globalThis.fetch;\nconst checks: { name: string; pass: boolean; details?: unknown }[] = [];\nfunction check(name: string, pass: boolean, details?: unknown) {\n checks.push({ name, pass, details });\n if (!pass) throw new Error(`OAUTH_MCP_PROBE_SELFTEST:${name}`);\n}\n\ntry {\n let tokenRequest: any = null;\n globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {\n const url = String(input);\n if (url === AGENT_OS.tokenEndpoint) {\n tokenRequest = { url, method: init?.method, headers: new Headers(init?.headers), body: String(init?.body ?? \"\") };\n return new Response(JSON.stringify({ access_token: \"synthetic-access\", refresh_token: \"synthetic-refresh\", token_type: \"Bearer\", expires_in: 900, scope: \"market-data\" }), { status: 200, headers: { \"content-type\": \"application/json\" } });\n }\n throw new Error(`UNEXPECTED_FETCH:${url}`);\n }) as typeof fetch;\n\n const token = await exchangeAuthorizationCode(\"synthetic-code\", \"synthetic-verifier\");\n check(\"token_exchange_success\", token.ok === true, token);\n if (!token.ok) throw new Error(\"UNREACHABLE_TOKEN_FAIL\");\n check(\"token_request_post\", tokenRequest?.method === \"POST\", tokenRequest?.method);\n check(\"token_request_no_authorization_header\", !tokenRequest?.headers?.has(\"authorization\"));\n const form = new URLSearchParams(tokenRequest?.body ?? \"\");\n check(\"token_request_client_id\", form.get(\"client_id\") === AGENT_OS.clientId, form.get(\"client_id\"));\n check(\"token_request_redirect\", form.get(\"redirect_uri\") === AGENT_OS.redirectUri, form.get(\"redirect_uri\"));\n check(\"token_request_resource\", form.get(\"resource\") === AGENT_OS.resource, form.get(\"resource\"));\n check(\"token_request_pkce_verifier\", form.get(\"code_verifier\") === \"synthetic-verifier\");\n check(\"token_request_no_client_secret\", !form.has(\"client_secret\"));\n check(\"refresh_token_only_booleanized\", token.refreshTokenReturned === true && !(\"refreshToken\" in token));\n\n const mcpBodies: any[] = [];\n globalThis.fetch = (async (input: RequestInfo | URL, init?: RequestInit) => {\n const url = String(input);\n if (url !== AGENT_OS.resource) throw new Error(`UNEXPECTED_MCP_URL:${url}`);\n const headers = new Headers(init?.headers);\n const body = JSON.parse(String(init?.body ?? \"{}\"));\n mcpBodies.push({ headers, body });\n if (body.method === \"server/discover\") {\n return new Response(JSON.stringify({ jsonrpc: \"2.0\", id: body.id, result: { capabilities: { tools: {} } }, _meta: { \"io.modelcontextprotocol/serverInfo\": { name: \"synthetic\", version: \"1\" } } }), { status: 200, headers: { \"content-type\": \"application/json\" } });\n }\n if (body.method === \"tools/list\") {\n return new Response(JSON.stringify({ jsonrpc: \"2.0\", id: body.id, result: { tools: [\n { name: \"get_ticker_price\", description: \"Read current ticker price market data\", inputSchema: { type: \"object\", properties: { symbol: { type: \"string\" } }, required: [\"symbol\"] } },\n { name: \"get_order_book\", description: \"Read current order book depth\", inputSchema: { type: \"object\", properties: { symbol: { type: \"string\" }, limit: { type: \"integer\", minimum: 1, maximum: 100 } }, required: [\"symbol\"] } },\n { name: \"place_order\", description: \"Place an order at a target price\", inputSchema: { type: \"object\", properties: { symbol: { type: \"string\" } }, required: [\"symbol\"] } },\n { name: \"get_account_price_alerts\", description: \"Read account-related price alerts\", inputSchema: { type: \"object\", properties: {} } },\n { name: \"transfer_wallet\", description: \"Transfer wallet assets\", inputSchema: { type: \"object\", properties: {} } }\n ] } }), { status: 200, headers: { \"content-type\": \"application/json\" } });\n }\n if (body.method === \"tools/call\") throw new Error(\"AUTOMATIC_TOOL_CALL_FORBIDDEN\");\n throw new Error(`UNEXPECTED_MCP_METHOD:${body.method}`);\n }) as typeof fetch;\n\n const probe = await probeAuthorizedAgentOs(\"synthetic-access\");\n check(\"probe_connected\", probe.connected === true, probe.connected);\n check(\"probe_modern_era\", probe.protocolEra === \"2026-07-28\", probe.protocolEra);\n check(\"probe_tool_count\", probe.toolCount === 5, probe.toolCount);\n check(\"probe_safe_ticker\", probe.safeMarketToolNames.includes(\"get_ticker_price\"), probe.safeMarketToolNames);\n check(\"probe_safe_order_book\", probe.safeMarketToolNames.includes(\"get_order_book\"), probe.safeMarketToolNames);\n check(\"probe_excludes_place_order\", !probe.safeMarketToolNames.includes(\"place_order\"), probe.safeMarketToolNames);\n check(\"probe_excludes_account\", !probe.safeMarketToolNames.includes(\"get_account_price_alerts\"), probe.safeMarketToolNames);\n check(\"probe_excludes_transfer\", !probe.safeMarketToolNames.includes(\"transfer_wallet\"), probe.safeMarketToolNames);\n check(\"probe_no_auto_tool_call\", probe.automaticToolCallPerformed === false, probe.automaticToolCallPerformed);\n check(\"probe_exactly_two_mcp_requests\", mcpBodies.length === 2, mcpBodies.map(x => x.body.method));\n check(\"probe_no_tools_call\", !mcpBodies.some(x => x.body.method === \"tools/call\"), mcpBodies.map(x => x.body.method));\n check(\"modern_headers_present\", mcpBodies.every(x => x.headers.get(\"mcp-protocol-version\") === \"2026-07-28\" && x.headers.get(\"mcp-method\") === x.body.method));\n check(\"modern_meta_protocol_version\", mcpBodies.every(x => x.body?.params?._meta?.[\"io.modelcontextprotocol/protocolVersion\"] === \"2026-07-28\"));\n check(\"modern_meta_capabilities_present\", mcpBodies.every(x => x.body?.params?._meta?.[\"io.modelcontextprotocol/clientCapabilities\"] && typeof x.body.params._meta[\"io.modelcontextprotocol/clientCapabilities\"] === \"object\"));\n check(\"modern_meta_client_info_current\", mcpBodies.every(x => x.body?.params?._meta?.[\"io.modelcontextprotocol/clientInfo\"]?.version === \"1.2.0-rc1\"));\n check(\"token_not_in_probe_output\", !JSON.stringify(probe).includes(\"synthetic-access\"));\n} finally {\n globalThis.fetch = originalFetch;\n}\n\nconst pass = checks.every(x => x.pass);\nconsole.log(JSON.stringify({ pass, version: \"oauth-mcp-probe-1.0.0\", tests: checks.length, checks }));\nexport default { pass, tests: checks.length };\n",[],[175,290],"f8b3cbad-26ca-4ccc-aa57-d547c0c29a2f","oauth_flow_selftest.ts","eba008c8-ab09-11f1-870d-1607ee4eb77e",["D",1788819451982],"import handler from \"../index.ts\";\nimport {\n AGENT_OS,\n clientMetadata,\n consumeAuthorizationState,\n createAuthorizationRequest,\n} from \"../lib/agent_os_oauth.ts\";\n\nconst checks: { name: string; pass: boolean; details?: unknown }[] = [];\nfunction check(name: string, pass: boolean, details?: unknown) {\n checks.push({ name, pass, details });\n if (!pass) throw new Error(`OAUTH_SELFTEST_FAIL:${name}`);\n}\n\nconst metadata = clientMetadata();\ncheck(\"client_id_https_non_root\", new URL(metadata.client_id).protocol === \"https:\" && new URL(metadata.client_id).pathname !== \"/\", metadata.client_id);\ncheck(\"client_id_exact\", metadata.client_id === AGENT_OS.clientId);\ncheck(\"metadata_client_name\", metadata.client_name === \"PayAna Falsifier Agent\");\ncheck(\"redirect_exact\", metadata.redirect_uris.length === 1 && metadata.redirect_uris[0] === AGENT_OS.redirectUri);\ncheck(\"redirect_same_origin\", new URL(metadata.redirect_uris[0]).origin === AGENT_OS.origin);\ncheck(\"auth_method_none\", metadata.token_endpoint_auth_method === \"none\");\ncheck(\"web_application\", metadata.application_type === \"web\");\ncheck(\"authorization_code_only\", metadata.grant_types.includes(\"authorization_code\") && metadata.response_types.includes(\"code\"));\n\nconst generated = await createAuthorizationRequest();\nconst authorizationUrl = new URL(generated.url);\ncheck(\"authorization_host\", authorizationUrl.origin === \"https://accounts.binance.com\", authorizationUrl.origin);\ncheck(\"authorization_path\", authorizationUrl.pathname === \"/agentic-oauth/authorize\", authorizationUrl.pathname);\ncheck(\"response_type\", authorizationUrl.searchParams.get(\"response_type\") === \"code\");\ncheck(\"authorization_client_id\", authorizationUrl.searchParams.get(\"client_id\") === AGENT_OS.clientId);\ncheck(\"authorization_redirect\", authorizationUrl.searchParams.get(\"redirect_uri\") === AGENT_OS.redirectUri);\ncheck(\"authorization_resource\", authorizationUrl.searchParams.get(\"resource\") === AGENT_OS.resource);\ncheck(\"pkce_method\", authorizationUrl.searchParams.get(\"code_challenge_method\") === \"S256\");\ncheck(\"pkce_challenge_shape\", /^[A-Za-z0-9_-]{43}$/.test(authorizationUrl.searchParams.get(\"code_challenge\") ?? \"\"), authorizationUrl.searchParams.get(\"code_challenge\"));\ncheck(\"state_shape\", /^[A-Za-z0-9_-]{40,60}$/.test(generated.state), generated.state.length);\nconst consumed = await consumeAuthorizationState(generated.state);\ncheck(\"state_consumed_once\", Boolean(consumed?.verifier && consumed.verifier.length >= 80), consumed?.verifier.length);\nconst replay = await consumeAuthorizationState(generated.state);\ncheck(\"state_replay_rejected\", replay === null, replay);\n\nconst metadataResponse = await handler(new Request(\"https://local.test/oauth/client-metadata.json\", { headers: { \"x-forwarded-for\": \"203.0.113.81\" } }));\ncheck(\"metadata_route_200\", metadataResponse.status === 200, metadataResponse.status);\nconst routeMetadata = await metadataResponse.json();\ncheck(\"metadata_route_exact_client\", routeMetadata.client_id === AGENT_OS.clientId, routeMetadata.client_id);\n\nconst statusResponse = await handler(new Request(\"https://local.test/oauth/status\", { headers: { \"x-forwarded-for\": \"203.0.113.82\" } }));\ncheck(\"status_route_200\", statusResponse.status === 200, statusResponse.status);\nconst statusBody = await statusResponse.json();\ncheck(\"status_boundary\", statusBody.boundary === \"OAUTH_FLOW_READY != USER_AUTHORIZED_SESSION\", statusBody.boundary);\ncheck(\"status_no_token_persistence\", statusBody.tokenPersistence === \"NONE\", statusBody.tokenPersistence);\ncheck(\"status_no_auto_tool_call\", statusBody.automaticToolCall === false, statusBody.automaticToolCall);\n\nconst startResponse = await handler(new Request(\"https://local.test/oauth/start\", { headers: { \"x-forwarded-for\": \"203.0.113.83\" } }));\ncheck(\"start_route_302\", startResponse.status === 302, startResponse.status);\nconst location = startResponse.headers.get(\"location\") ?? \"\";\nconst startUrl = new URL(location);\ncheck(\"start_external_binance\", startUrl.origin === \"https://accounts.binance.com\", startUrl.origin);\nconst startState = startUrl.searchParams.get(\"state\") ?? \"\";\ncheck(\"start_state_present\", /^[A-Za-z0-9_-]{40,60}$/.test(startState), startState.length);\ncheck(\"start_state_server_stored\", Boolean(await consumeAuthorizationState(startState)));\n\nconst invalidCallback = await handler(new Request(\"https://local.test/oauth/callback?state=nope&code=short\", { headers: { \"x-forwarded-for\": \"203.0.113.84\" } }));\ncheck(\"invalid_callback_400\", invalidCallback.status === 400, invalidCallback.status);\n\nconst issuerCase = await createAuthorizationRequest();\nconst badIssuerUrl = new URL(\"https://local.test/oauth/callback\");\nbadIssuerUrl.searchParams.set(\"state\", issuerCase.state);\nbadIssuerUrl.searchParams.set(\"code\", \"synthetic-code-never-exchanged\");\nbadIssuerUrl.searchParams.set(\"iss\", \"https://attacker.example\");\nconst badIssuer = await handler(new Request(badIssuerUrl, { headers: { \"x-forwarded-for\": \"203.0.113.85\" } }));\ncheck(\"issuer_mismatch_400\", badIssuer.status === 400, badIssuer.status);\ncheck(\"issuer_mismatch_does_not_consume_state\", Boolean(await consumeAuthorizationState(issuerCase.state)));\n\nconst denied = await handler(new Request(\"https://local.test/oauth/callback?error=access_denied\", { headers: { \"x-forwarded-for\": \"203.0.113.86\" } }));\ncheck(\"provider_denial_400\", denied.status === 400, denied.status);\nconst deniedHtml = await denied.text();\ncheck(\"provider_error_not_reflected\", !deniedHtml.includes(\"access_denied\"));\n\nconst pass = checks.every(c => c.pass);\nconsole.log(JSON.stringify({ pass, version: \"oauth-flow-1.0.0\", tests: checks.length, checks }));\nexport default { pass, tests: checks.length };\n",[],[175,298],"194332be-7f20-4f78-bc6b-c66a8ed42772","failure_modes_selftest.ts","06f17dd4-aafe-11f1-857f-1607ee4eb77e",["D",1788814343943],"import { analyzeMarket } from \"../lib/market.ts\";\n\nconst originalFetch = globalThis.fetch;\nconst now = Date.now();\nconst validTicker = {\n symbol: \"BTCUSDT\", priceChangePercent: \"1.25\", lastPrice: \"100.00\", bidPrice: \"99.99\", askPrice: \"100.01\",\n highPrice: \"105.00\", lowPrice: \"95.00\", volume: \"1000\", quoteVolume: \"100000\", closeTime: now, count: 1234,\n};\nconst validDepth = {\n lastUpdateId: 42,\n bids: [[\"99.99\", \"2\"], [\"99.98\", \"1\"]],\n asks: [[\"100.01\", \"1\"], [\"100.02\", \"1\"]],\n};\nconst validKlines = Array.from({ length: 8 }, (_, i) => {\n const open = now - (8 - i) * 300_000;\n const close = 100 + i * 0.1;\n return [open, String(close - 0.05), String(close + 0.1), String(close - 0.1), String(close), \"10\", open + 299_999, String(1000 + i * 10), 100, \"5\", \"500\", \"0\"];\n});\n\nfunction response(body: unknown, status = 200) {\n return new Response(JSON.stringify(body), { status, headers: { \"content-type\": \"application/json\" } });\n}\nfunction install(mode: \"ticker_fail\" | \"malformed_ticker\" | \"ticker_only\" | \"all_fail\" | \"malformed_depth\") {\n globalThis.fetch = (async (input: RequestInfo | URL) => {\n const url = String(input);\n if (mode === \"all_fail\") return response({ error: \"synthetic\" }, 503);\n if (url.includes(\"/ticker/24hr\")) {\n if (mode === \"ticker_fail\") return response({ error: \"synthetic\" }, 503);\n if (mode === \"malformed_ticker\") return response({ symbol: \"BTCUSDT\", lastPrice: \"0\" });\n return response(validTicker);\n }\n if (url.includes(\"/depth\")) {\n if (mode === \"ticker_only\") return response({ error: \"synthetic\" }, 503);\n if (mode === \"malformed_depth\") return response({ lastUpdateId: 42, bids: [], asks: [] });\n return response(validDepth);\n }\n if (url.includes(\"/klines\")) {\n if (mode === \"ticker_only\") return response({ error: \"synthetic\" }, 503);\n return response(validKlines);\n }\n return response({ error: \"unexpected\" }, 404);\n }) as typeof fetch;\n}\n\nconst checks: { name: string; pass: boolean; details?: unknown }[] = [];\nfunction check(name: string, pass: boolean, details?: unknown) {\n checks.push({ name, pass, details });\n if (!pass) throw new Error(`FAILURE_MODE_SELFTEST:${name}`);\n}\n\ntry {\n install(\"ticker_fail\");\n const a: any = await analyzeMarket(\"BTCUSDT\");\n check(\"ticker_fail_partial\", a.evidenceState === \"PARTIAL\", a.evidenceState);\n check(\"ticker_fail_null_price\", a.market?.lastPrice === null, a.market?.lastPrice);\n check(\"ticker_fail_source_false\", a.sourceAvailability?.ticker === false);\n check(\"ticker_fail_no_zero_imputation\", a.market?.change24hPct === null && a.market?.high24h === null && a.market?.low24h === null);\n check(\"ticker_fail_risk_flag\", a.assessment?.riskFlags?.includes(\"MISSING_TICKER_SOURCE\"));\n check(\"ticker_fail_direction_from_survivors\", Number.isFinite(Number(a.assessment?.directionalScore)) && a.assessment?.signalCount >= 2, a.assessment);\n\n install(\"malformed_ticker\");\n const b: any = await analyzeMarket(\"BTCUSDT\");\n const tickerReceipt = b.receipts?.find((r: any) => r.name === \"spot_24h_ticker\");\n check(\"malformed_ticker_partial\", b.evidenceState === \"PARTIAL\", b.evidenceState);\n check(\"malformed_ticker_rejected\", tickerReceipt?.status === \"FAIL\" && tickerReceipt?.error === \"INVALID_TICKER_SHAPE\", tickerReceipt);\n check(\"malformed_ticker_not_price_zero\", b.market?.lastPrice === null, b.market?.lastPrice);\n\n install(\"ticker_only\");\n const c: any = await analyzeMarket(\"BTCUSDT\");\n check(\"ticker_only_partial\", c.evidenceState === \"PARTIAL\", c.evidenceState);\n check(\"ticker_only_insufficient_direction\", c.assessment?.bias === \"INSUFFICIENT_EVIDENCE\", c.assessment?.bias);\n check(\"ticker_only_score_null\", c.assessment?.directionalScore === null, c.assessment?.directionalScore);\n check(\"ticker_only_micro_null\", c.microstructure?.orderBookImbalance === null && c.microstructure?.bidNotionalTop20 === null);\n check(\"ticker_only_candles_zero\", c.shortHorizon?.candles === 0 && c.shortHorizon?.momentum30mPct === null);\n check(\"ticker_only_no_trade\", c.assessment?.recommendation === \"NO_TRADE_DECISION\");\n check(\"ticker_only_recovery_next_test\", String(c.assessment?.nextTest).includes(\"Recover\"));\n\n install(\"malformed_depth\");\n const d: any = await analyzeMarket(\"BTCUSDT\");\n const depthReceipt = d.receipts?.find((r: any) => r.name === \"spot_order_book\");\n check(\"malformed_depth_partial\", d.evidenceState === \"PARTIAL\", d.evidenceState);\n check(\"malformed_depth_rejected\", depthReceipt?.status === \"FAIL\" && depthReceipt?.error === \"INVALID_DEPTH_SHAPE\", depthReceipt);\n check(\"malformed_depth_null_imbalance\", d.microstructure?.orderBookImbalance === null, d.microstructure?.orderBookImbalance);\n\n install(\"all_fail\");\n const e: any = await analyzeMarket(\"BTCUSDT\");\n check(\"all_fail_state\", e.evidenceState === \"FAIL\", e.evidenceState);\n check(\"all_fail_insufficient\", e.assessment?.bias === \"INSUFFICIENT_EVIDENCE\", e.assessment?.bias);\n check(\"all_fail_no_trade\", e.assessment?.recommendation === \"NO_TRADE_DECISION\");\n check(\"all_fail_all_receipts_fail\", e.receipts?.length === 3 && e.receipts.every((r: any) => r.status === \"FAIL\"));\n} finally {\n globalThis.fetch = originalFetch;\n}\n\nconst pass = checks.every(c => c.pass);\nconsole.log(JSON.stringify({ pass, version: \"failure-modes-1.0.0\", tests: checks.length, checks }));\nexport default { pass, tests: checks.length };\n",[],[175,305],["D",1788814343943],[233,234,235,236,237,238,239],[175],"2b9199f0-ddf0-4d25-bcc6-7ed24d0c4e39","market.ts","06f0fd28-aafe-11f1-857f-1607ee4eb77e",["D",1788814343943],"const BASE = \"https://data-api.binance.vision\";\nconst SYMBOLS = new Set([\"BTCUSDT\", \"ETHUSDT\", \"BNBUSDT\", \"SOLUSDT\", \"XRPUSDT\"]);\nconst FETCH_TIMEOUT_MS = 7000;\n\nexport type MarketEvidenceState = \"PASS\" | \"PARTIAL\" | \"FAIL\";\n\ntype SourceReceipt = {\n name: string;\n url: string;\n status: \"PASS\" | \"FAIL\";\n httpStatus?: number;\n durationMs: number;\n error?: string;\n};\n\ntype Ticker = {\n symbol: string;\n priceChangePercent: string;\n lastPrice: string;\n bidPrice: string;\n askPrice: string;\n highPrice: string;\n lowPrice: string;\n volume: string;\n quoteVolume: string;\n closeTime: number;\n count: number;\n};\ntype Depth = { lastUpdateId: number; bids: [string, string][]; asks: [string, string][] };\ntype Kline = [number, string, string, string, string, string, number, string, number, string, string, string];\n\ntype SignalAtom = { name: string; score: number; observed: string };\n\nfunction num(value: unknown) {\n const n = Number(value);\n return Number.isFinite(n) ? n : Number.NaN;\n}\nfunction round(value: number, digits = 4) {\n if (!Number.isFinite(value)) return null;\n const p = 10 ** digits;\n return Math.round(value * p) / p;\n}\nfunction mean(xs: number[]) {\n return xs.length ? xs.reduce((a, b) => a + b, 0) / xs.length : Number.NaN;\n}\nfunction std(xs: number[]) {\n if (xs.length < 2) return Number.NaN;\n const m = mean(xs);\n return Math.sqrt(xs.reduce((s, x) => s + (x - m) ** 2, 0) / (xs.length - 1));\n}\nfunction zscore(value: number, sample: number[]) {\n const sd = std(sample);\n return Number.isFinite(sd) && sd > 0 ? (value - mean(sample)) / sd : Number.NaN;\n}\nfunction validPositive(value: unknown) {\n const n = Number(value);\n return Number.isFinite(n) && n > 0;\n}\nfunction validNonNegative(value: unknown) {\n const n = Number(value);\n return Number.isFinite(n) && n >= 0;\n}\nfunction validateTicker(value: unknown): value is Ticker {\n const v = value as any;\n return Boolean(v && typeof v === \"object\" && typeof v.symbol === \"string\" &&\n validPositive(v.lastPrice) && validPositive(v.bidPrice) && validPositive(v.askPrice) &&\n validPositive(v.highPrice) && validPositive(v.lowPrice) && validNonNegative(v.quoteVolume) &&\n Number.isFinite(Number(v.priceChangePercent)) && Number.isFinite(Number(v.closeTime)) && Number(v.closeTime) > 0 &&\n Number.isFinite(Number(v.count)) && Number(v.count) >= 0);\n}\nfunction validBookSide(side: unknown): side is [string, string][] {\n return Array.isArray(side) && side.length > 0 && side.every(level =>\n Array.isArray(level) && level.length >= 2 && validPositive(level[0]) && validNonNegative(level[1]));\n}\nfunction validateDepth(value: unknown): value is Depth {\n const v = value as any;\n return Boolean(v && typeof v === \"object\" && Number.isFinite(Number(v.lastUpdateId)) &&\n validBookSide(v.bids) && validBookSide(v.asks));\n}\nfunction validateKlines(value: unknown): value is Kline[] {\n return Array.isArray(value) && value.length >= 7 && value.every((k: any) =>\n Array.isArray(k) && k.length >= 8 && Number.isFinite(Number(k[0])) && Number(k[0]) > 0 &&\n validPositive(k[4]) && Number.isFinite(Number(k[6])) && Number(k[6]) > Number(k[0]) && validNonNegative(k[7]));\n}\nfunction failShape(receipt: SourceReceipt, error: string) {\n receipt.status = \"FAIL\";\n receipt.error = error;\n}\n\nexport function normalizeSymbol(raw: unknown) {\n const symbol = String(raw ?? \"BTCUSDT\").trim().toUpperCase();\n if (!/^[A-Z0-9]{5,20}$/.test(symbol)) throw new Error(\"INVALID_SYMBOL_FORMAT\");\n if (!SYMBOLS.has(symbol)) throw new Error(\"SYMBOL_NOT_ALLOWLISTED\");\n return symbol;\n}\n\nasync function getJson(name: string, path: string): Promise<{ value?: T; receipt: SourceReceipt }> {\n const url = `${BASE}${path}`;\n const started = performance.now();\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);\n try {\n const response = await fetch(url, {\n method: \"GET\",\n headers: { Accept: \"application/json\", \"User-Agent\": \"PayAna-Market-Sentinel/1.1\" },\n signal: controller.signal,\n });\n const durationMs = Math.round(performance.now() - started);\n if (!response.ok) {\n return { receipt: { name, url, status: \"FAIL\", httpStatus: response.status, durationMs, error: `HTTP_${response.status}` } };\n }\n const value = await response.json() as T;\n return { value, receipt: { name, url, status: \"PASS\", httpStatus: response.status, durationMs } };\n } catch (error) {\n return {\n receipt: {\n name,\n url,\n status: \"FAIL\",\n durationMs: Math.round(performance.now() - started),\n error: error instanceof Error ? error.message.slice(0, 180) : String(error).slice(0, 180),\n },\n };\n } finally {\n clearTimeout(timer);\n }\n}\n\nexport async function analyzeMarket(rawSymbol: unknown) {\n const symbol = normalizeSymbol(rawSymbol);\n const fetchedAt = new Date().toISOString();\n const [tickerResult, depthResult, klinesResult] = await Promise.all([\n getJson(\"spot_24h_ticker\", `/api/v3/ticker/24hr?symbol=${symbol}`),\n getJson(\"spot_order_book\", `/api/v3/depth?symbol=${symbol}&limit=20`),\n getJson(\"spot_5m_klines\", `/api/v3/klines?symbol=${symbol}&interval=5m&limit=36`),\n ]);\n\n if (tickerResult.receipt.status === \"PASS\" && !validateTicker(tickerResult.value)) failShape(tickerResult.receipt, \"INVALID_TICKER_SHAPE\");\n if (depthResult.receipt.status === \"PASS\" && !validateDepth(depthResult.value)) failShape(depthResult.receipt, \"INVALID_DEPTH_SHAPE\");\n if (klinesResult.receipt.status === \"PASS\" && !validateKlines(klinesResult.value)) failShape(klinesResult.receipt, \"INVALID_KLINES_SHAPE\");\n\n const ticker = tickerResult.receipt.status === \"PASS\" && validateTicker(tickerResult.value) ? tickerResult.value : undefined;\n const depth = depthResult.receipt.status === \"PASS\" && validateDepth(depthResult.value) ? depthResult.value : undefined;\n const klines = klinesResult.receipt.status === \"PASS\" && validateKlines(klinesResult.value) ? klinesResult.value : [];\n const receipts = [tickerResult.receipt, depthResult.receipt, klinesResult.receipt];\n const successes = receipts.filter(r => r.status === \"PASS\").length;\n const evidenceState: MarketEvidenceState = successes === receipts.length ? \"PASS\" : successes > 0 ? \"PARTIAL\" : \"FAIL\";\n const sourceAvailability = { ticker: Boolean(ticker), orderBook: Boolean(depth), klines: klines.length > 0 };\n\n if (evidenceState === \"FAIL\") {\n return {\n symbol,\n evidenceState,\n fetchedAt,\n readOnly: true,\n sourceAvailability,\n error: \"ALL_MARKET_SOURCES_FAILED\",\n receipts,\n boundary: \"MARKET_DATA_READ != TRADING_AUTH\",\n assessment: {\n bias: \"INSUFFICIENT_EVIDENCE\",\n recommendation: \"NO_TRADE_DECISION\",\n hypotheses: {\n winning: \"No directional hypothesis is admissible because all required market evidence sources failed.\",\n opposite: \"A directional market condition may exist, but this run has no valid evidence with which to establish it.\",\n alternative: \"The failure may be caused by provider/network/runtime conditions rather than the market itself.\",\n },\n supportingEvidence: [\"No valid source survived validation.\"],\n opposingEvidence: [\"No valid source survived validation.\"],\n alternativeExplanations: [\"Provider outage, runtime restriction, timeout or response-shape drift.\"],\n falsifiers: [\"A subsequent run with valid source receipts falsifies the all-sources-failed state.\"],\n nextTest: \"Retry the read-only sources and require at least one validated directional source before assigning market pressure.\",\n },\n };\n }\n\n const last = ticker ? num(ticker.lastPrice) : Number.NaN;\n const bid = ticker ? num(ticker.bidPrice) : Number.NaN;\n const ask = ticker ? num(ticker.askPrice) : Number.NaN;\n const mid = Number.isFinite(bid) && Number.isFinite(ask) && bid > 0 && ask > 0 ? (bid + ask) / 2 : Number.NaN;\n const spreadBps = Number.isFinite(mid) && mid > 0 ? ((ask - bid) / mid) * 10_000 : Number.NaN;\n\n const bidNotional = depth ? depth.bids.reduce((sum, [p, q]) => sum + num(p) * num(q), 0) : Number.NaN;\n const askNotional = depth ? depth.asks.reduce((sum, [p, q]) => sum + num(p) * num(q), 0) : Number.NaN;\n const bookTotal = Number.isFinite(bidNotional) && Number.isFinite(askNotional) ? bidNotional + askNotional : Number.NaN;\n const imbalance = Number.isFinite(bookTotal) && bookTotal > 0 ? (bidNotional - askNotional) / bookTotal : Number.NaN;\n\n const closes = klines.map(k => num(k[4])).filter(Number.isFinite);\n const quoteVolumes = klines.map(k => num(k[7])).filter(Number.isFinite);\n const logReturns = closes.slice(1).map((c, i) => Math.log(c / closes[i])).filter(Number.isFinite);\n const shortVolRaw = std(logReturns);\n const shortVolBps = Number.isFinite(shortVolRaw) ? shortVolRaw * 10_000 : Number.NaN;\n const momentum30mPct = closes.length >= 7 ? (closes.at(-1)! / closes.at(-7)! - 1) * 100 : Number.NaN;\n const momentum3hPct = closes.length >= 2 ? (closes.at(-1)! / closes[0] - 1) * 100 : Number.NaN;\n const lastQuoteVolume = quoteVolumes.length ? quoteVolumes.at(-1)! : Number.NaN;\n const priorVolumes = quoteVolumes.slice(0, -1);\n const volumeZ = Number.isFinite(lastQuoteVolume) && priorVolumes.length >= 4 ? zscore(lastQuoteVolume, priorVolumes) : Number.NaN;\n\n const riskFlags: string[] = [];\n if (!ticker) riskFlags.push(\"MISSING_TICKER_SOURCE\");\n if (!depth) riskFlags.push(\"MISSING_ORDER_BOOK_SOURCE\");\n if (!klines.length) riskFlags.push(\"MISSING_KLINES_SOURCE\");\n if (Number.isFinite(spreadBps) && spreadBps > 2) riskFlags.push(\"WIDE_SPREAD\");\n if (Number.isFinite(imbalance) && Math.abs(imbalance) > 0.55) riskFlags.push(imbalance > 0 ? \"BID_HEAVY_BOOK\" : \"ASK_HEAVY_BOOK\");\n if (Number.isFinite(shortVolBps) && shortVolBps > 18) riskFlags.push(\"HIGH_SHORT_HORIZON_VOLATILITY\");\n if (Number.isFinite(momentum30mPct) && Math.abs(momentum30mPct) > 0.8) riskFlags.push(\"FAST_30M_MOVE\");\n if (Number.isFinite(volumeZ) && Math.abs(volumeZ) > 2) riskFlags.push(\"VOLUME_ANOMALY\");\n\n const signalAtoms: SignalAtom[] = [];\n if (Number.isFinite(imbalance)) signalAtoms.push({ name: \"Top-20 order-book imbalance\", score: Math.tanh(imbalance * 2), observed: `imbalance=${round(imbalance, 4)}` });\n if (Number.isFinite(momentum30mPct)) signalAtoms.push({ name: \"30m momentum\", score: Math.tanh(momentum30mPct / 0.6), observed: `momentum30m=${round(momentum30mPct, 3)}%` });\n if (Number.isFinite(momentum3hPct)) signalAtoms.push({ name: \"3h momentum\", score: Math.tanh(momentum3hPct / 1.5), observed: `momentum3h=${round(momentum3hPct, 3)}%` });\n const directionalScore = signalAtoms.length ? mean(signalAtoms.map(x => x.score)) : Number.NaN;\n const polarity = Number.isFinite(directionalScore) ? (directionalScore > 0.2 ? 1 : directionalScore < -0.2 ? -1 : 0) : 0;\n const bias = !signalAtoms.length ? \"INSUFFICIENT_EVIDENCE\" : polarity > 0 ? \"BULLISH_PRESSURE\" : polarity < 0 ? \"BEARISH_PRESSURE\" : \"MIXED_NEUTRAL\";\n\n const stabilityPenalty = Math.min(0.7,\n (Number.isFinite(volumeZ) ? Math.abs(volumeZ) * 0.04 : 0) +\n (Number.isFinite(shortVolBps) ? shortVolBps * 0.012 : 0) +\n (Number.isFinite(spreadBps) ? spreadBps * 0.06 : 0) +\n (3 - successes) * 0.18);\n const stabilityScore = Math.max(0, Math.min(1, 0.72 - stabilityPenalty));\n\n const aligned = bias === \"INSUFFICIENT_EVIDENCE\"\n ? []\n : polarity === 0 ? signalAtoms.filter(x => Math.abs(x.score) < 0.35) : signalAtoms.filter(x => Math.sign(x.score) === polarity && Math.abs(x.score) >= 0.08);\n const opposed = bias === \"INSUFFICIENT_EVIDENCE\"\n ? []\n : polarity === 0 ? signalAtoms.filter(x => Math.abs(x.score) >= 0.35) : signalAtoms.filter(x => Math.sign(x.score) === -polarity && Math.abs(x.score) >= 0.08);\n\n const supportingEvidence = aligned.length\n ? aligned.map(x => `${x.name}: ${x.observed}`)\n : [bias === \"INSUFFICIENT_EVIDENCE\" ? \"No validated directional component is available.\" : polarity === 0 ? \"No directional component dominates the combined score.\" : \"Combined score is directional, but no single component clears the support threshold strongly enough.\"];\n const opposingEvidence = opposed.length\n ? opposed.map(x => `${x.name}: ${x.observed}`)\n : [bias === \"INSUFFICIENT_EVIDENCE\" ? \"No validated directional component is available to oppose or support a direction.\" : polarity === 0 ? \"No strong single component breaks the mixed/neutral classification.\" : \"No measured component currently provides strong opposite-direction evidence; this can change on the next book/candle update.\"];\n\n const hypotheses = {\n winning: bias === \"INSUFFICIENT_EVIDENCE\"\n ? \"Directional pressure is not assigned because the surviving evidence does not contain a validated directional component.\"\n : polarity > 0\n ? \"Current measured pressure leans bullish because the combined microstructure/momentum score is positive.\"\n : polarity < 0\n ? \"Current measured pressure leans bearish because the combined microstructure/momentum score is negative.\"\n : \"Current evidence is mixed/neutral because the measured directional components do not agree strongly enough.\",\n opposite: bias === \"INSUFFICIENT_EVIDENCE\"\n ? \"A directional condition may exist despite the insufficient reading; recovering a valid directional source can falsify this abstention.\"\n : polarity > 0\n ? \"The bullish-pressure reading is wrong or transient; liquidity can disappear and the next completed candle can reverse the momentum evidence.\"\n : polarity < 0\n ? \"The bearish-pressure reading is wrong or transient; liquidity can disappear and the next completed candle can reverse the momentum evidence.\"\n : \"A directional move may already be forming but is being masked by disagreement across the current short-horizon measurements.\",\n alternative: \"The observed pattern may be short-lived liquidity/noise or mean reversion rather than persistent directional information.\",\n };\n\n const alternativeExplanations = [\n \"Top-of-book liquidity is ephemeral and can change faster than the polling interval.\",\n Number.isFinite(volumeZ) && Math.abs(volumeZ) > 2\n ? \"The latest volume is statistically unusual versus the recent sample, so short-horizon metrics may reflect an event shock.\"\n : Number.isFinite(volumeZ)\n ? \"Volume is not currently extreme versus the recent sample, so the directional reading may simply reflect ordinary microstructure noise.\"\n : \"Volume anomaly could not be assessed because valid candle-volume evidence is unavailable.\",\n \"Funding, derivatives positioning, news and on-chain context are absent from this hosted runtime and could materially change interpretation.\",\n ];\n\n const nextTest = bias === \"INSUFFICIENT_EVIDENCE\"\n ? \"Recover at least one validated directional source (order book or 5m candles), then recompute without zero-imputing missing evidence.\"\n : `At the next completed 5m candle, recompute all available directional components and re-read top-20 depth; challenge the current label if the combined score crosses ${polarity > 0 ? \"below +0.20\" : polarity < 0 ? \"above -0.20\" : \"outside ±0.20\"}${Number.isFinite(imbalance) ? \" or if order-book imbalance changes sign\" : \"\"}.`;\n\n const falsifiers: string[] = [];\n if (Number.isFinite(imbalance)) falsifiers.push(imbalance > 0 ? \"Bid-heavy order book can vanish quickly; recheck if imbalance crosses below 0.\" : \"Ask-heavy order book can vanish quickly; recheck if imbalance crosses above 0.\");\n if (Number.isFinite(momentum30mPct)) falsifiers.push(momentum30mPct > 0 ? \"Bullish 30m momentum is falsified if the next completed 5m close falls below the first close of the 30m window.\" : \"Bearish 30m momentum is falsified if the next completed 5m close rises above the first close of the 30m window.\");\n if (!falsifiers.length) falsifiers.push(\"Recovering a validated directional source can falsify the current insufficient-evidence classification.\");\n falsifiers.push(\"This analysis has no account, position, liquidation, funding, news, or on-chain context.\");\n\n return {\n symbol,\n evidenceState,\n fetchedAt,\n readOnly: true,\n boundary: \"MARKET_DATA_READ != TRADING_AUTH\",\n provider: \"Binance public market-data surface via data-api.binance.vision\",\n sourceAvailability,\n method: {\n version: \"sentinel-1.1.0\",\n missingDataPolicy: \"Missing or malformed sources produce null derived fields and are excluded from directional aggregation; no zero imputation.\",\n spreadBps: \"(ask-bid)/mid*10000\",\n orderBookImbalance: \"(top20_bid_notional-top20_ask_notional)/(top20_bid_notional+top20_ask_notional)\",\n realizedVolatility: \"sample_std(log(close_t/close_t-1))*10000 over 5m candles\",\n volumeZScore: \"(latest_quote_volume-mean(prior_quote_volume))/sample_std(prior_quote_volume)\",\n directionalScore: \"mean of available validated components: tanh(2*imbalance), tanh(momentum30mPct/0.6), tanh(momentum3hPct/1.5)\",\n stabilityScore: \"heuristic 0..1; decreases with |volume z|, short volatility, spread and each missing source; not a probability\",\n },\n market: {\n lastPrice: round(last, 8),\n change24hPct: round(ticker ? num(ticker.priceChangePercent) : Number.NaN, 3),\n high24h: round(ticker ? num(ticker.highPrice) : Number.NaN, 8),\n low24h: round(ticker ? num(ticker.lowPrice) : Number.NaN, 8),\n quoteVolume24h: round(ticker ? num(ticker.quoteVolume) : Number.NaN, 2),\n tradeCount24h: ticker ? Number(ticker.count) : null,\n tickerCloseTime: ticker?.closeTime ?? null,\n },\n microstructure: {\n bid: round(bid, 8),\n ask: round(ask, 8),\n spreadBps: round(spreadBps, 4),\n bidNotionalTop20: round(bidNotional, 2),\n askNotionalTop20: round(askNotional, 2),\n orderBookImbalance: round(imbalance, 4),\n depthUpdateId: depth?.lastUpdateId ?? null,\n },\n shortHorizon: {\n interval: \"5m\",\n candles: klines.length,\n realizedVolatilityBpsPer5m: round(shortVolBps, 3),\n momentum30mPct: round(momentum30mPct, 3),\n momentum3hPct: round(momentum3hPct, 3),\n latestQuoteVolume: round(lastQuoteVolume, 2),\n volumeZScore: round(volumeZ, 3),\n lastClosedOrCurrentCandleCloseTime: klines.at(-1)?.[6] ?? null,\n closeSeries: klines.slice(-24).map(k => ({ time: k[0], close: round(num(k[4]), 8) })),\n },\n assessment: {\n bias,\n signalCount: signalAtoms.length,\n directionalScore: round(directionalScore, 4),\n stabilityScore: round(stabilityScore, 3),\n stabilityMeaning: \"Heuristic snapshot stability score, not a calibrated probability or forecast confidence.\",\n hypotheses,\n supportingEvidence,\n opposingEvidence,\n alternativeExplanations,\n riskFlags,\n recommendation: \"NO_TRADE_DECISION\",\n explanation: \"Read-only evidence synthesis. Directional pressure is descriptive, not a forecast or order recommendation.\",\n falsifiers,\n nextTest,\n },\n missingContext: [\n \"Futures funding/mark-price endpoint unavailable from current Val Town runtime due Binance regional restriction\",\n \"No authenticated Binance account context\",\n \"No portfolio/position context\",\n \"No external news/on-chain context\",\n ],\n receipts,\n };\n}\n\nexport function supportedSymbols() {\n return [...SYMBOLS];\n}\n",[],[181,315],"99ab4b56-df3c-4169-90d9-36fc53840e1e","agent_os_oauth.ts","eb9f7160-ab09-11f1-870d-1607ee4eb77e",15,["D",1788819699807],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport const AGENT_OS = {\n issuer: \"https://agent.binance.com\",\n resource: \"https://agent.binance.com/mcp/agentic\",\n authorizationEndpoint: \"https://accounts.binance.com/agentic-oauth/authorize\",\n tokenEndpoint: \"https://accounts.binance.com/oauth-agentic/token\",\n origin: \"https://payana-agent-os.val.run\",\n clientId: \"https://payana-agent-os.val.run/oauth/client-metadata.json\",\n redirectUri: \"https://payana-agent-os.val.run/oauth/callback\",\n} as const;\n\nconst OAUTH_STATE_TTL_MS = 10 * 60_000;\nconst OAUTH_STATE_MAX_ROWS = 500;\n\nfunction base64url(bytes: Uint8Array) {\n let binary = \"\";\n for (const byte of bytes) binary += String.fromCharCode(byte);\n return btoa(binary).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/g, \"\");\n}\n\nfunction randomBase64url(bytes = 32) {\n return base64url(crypto.getRandomValues(new Uint8Array(bytes)));\n}\n\nasync function sha256Base64url(value: string) {\n return base64url(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(value))));\n}\n\nasync function ensureStateSchema() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS agent_os_oauth_states (\n state TEXT PRIMARY KEY,\n code_verifier TEXT NOT NULL,\n created_at_ms INTEGER NOT NULL\n )`);\n}\n\nexport function clientMetadata() {\n return {\n client_id: AGENT_OS.clientId,\n client_name: \"PayAna Falsifier Agent\",\n client_uri: AGENT_OS.origin,\n redirect_uris: [AGENT_OS.redirectUri],\n grant_types: [\"authorization_code\"],\n response_types: [\"code\"],\n token_endpoint_auth_method: \"none\",\n application_type: \"web\",\n };\n}\n\nexport async function createAuthorizationRequest() {\n await ensureStateSchema();\n const now = Date.now();\n const state = randomBase64url(32);\n const verifier = randomBase64url(64);\n const challenge = await sha256Base64url(verifier);\n await sqlite.batch([\n {\n sql: \"DELETE FROM agent_os_oauth_states WHERE created_at_ms < ?\",\n args: [now - OAUTH_STATE_TTL_MS],\n },\n {\n sql: \"INSERT INTO agent_os_oauth_states(state, code_verifier, created_at_ms) VALUES(?,?,?)\",\n args: [state, verifier, now],\n },\n {\n sql: \"DELETE FROM agent_os_oauth_states WHERE state NOT IN (SELECT state FROM agent_os_oauth_states ORDER BY created_at_ms DESC, state DESC LIMIT ?)\",\n args: [OAUTH_STATE_MAX_ROWS],\n },\n ]);\n\n const url = new URL(AGENT_OS.authorizationEndpoint);\n url.searchParams.set(\"response_type\", \"code\");\n url.searchParams.set(\"client_id\", AGENT_OS.clientId);\n url.searchParams.set(\"redirect_uri\", AGENT_OS.redirectUri);\n url.searchParams.set(\"code_challenge\", challenge);\n url.searchParams.set(\"code_challenge_method\", \"S256\");\n url.searchParams.set(\"state\", state);\n url.searchParams.set(\"resource\", AGENT_OS.resource);\n return { url: url.toString(), state, challenge };\n}\n\nexport async function consumeAuthorizationState(state: string) {\n await ensureStateSchema();\n const now = Date.now();\n const result = await sqlite.batch([\n {\n sql: \"SELECT code_verifier, created_at_ms FROM agent_os_oauth_states WHERE state=? AND created_at_ms>=? LIMIT 1\",\n args: [state, now - OAUTH_STATE_TTL_MS],\n },\n {\n sql: \"DELETE FROM agent_os_oauth_states WHERE state=?\",\n args: [state],\n },\n {\n sql: \"DELETE FROM agent_os_oauth_states WHERE created_at_ms < ?\",\n args: [now - OAUTH_STATE_TTL_MS],\n },\n ]);\n const row = result[0]?.rows?.[0] as { code_verifier?: unknown; created_at_ms?: unknown } | undefined;\n if (!row || typeof row.code_verifier !== \"string\") return null;\n return { verifier: row.code_verifier, createdAtMs: Number(row.created_at_ms) };\n}\n\nexport async function exchangeAuthorizationCode(code: string, verifier: string) {\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), 10_000);\n try {\n const body = new URLSearchParams({\n grant_type: \"authorization_code\",\n code,\n redirect_uri: AGENT_OS.redirectUri,\n client_id: AGENT_OS.clientId,\n code_verifier: verifier,\n resource: AGENT_OS.resource,\n });\n const response = await fetch(AGENT_OS.tokenEndpoint, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\", Accept: \"application/json\" },\n body,\n signal: controller.signal,\n });\n const text = await response.text();\n let payload: any = null;\n try { payload = JSON.parse(text); } catch {}\n if (!response.ok) {\n return {\n ok: false as const,\n status: response.status,\n error: String(payload?.error ?? \"TOKEN_EXCHANGE_FAILED\").slice(0, 120),\n errorDescription: String(payload?.error_description ?? \"\").slice(0, 240) || null,\n };\n }\n const accessToken = typeof payload?.access_token === \"string\" ? payload.access_token : \"\";\n if (!accessToken) return { ok: false as const, status: response.status, error: \"TOKEN_RESPONSE_MISSING_ACCESS_TOKEN\", errorDescription: null };\n return {\n ok: true as const,\n accessToken,\n tokenType: String(payload?.token_type ?? \"Bearer\").slice(0, 40),\n expiresIn: Number.isFinite(Number(payload?.expires_in)) ? Number(payload.expires_in) : null,\n scope: typeof payload?.scope === \"string\" ? payload.scope.slice(0, 500) : null,\n refreshTokenReturned: typeof payload?.refresh_token === \"string\" && payload.refresh_token.length > 0,\n };\n } finally {\n clearTimeout(timer);\n }\n}\n\nfunction parseMcpBody(contentType: string | null, text: string) {\n if (contentType?.includes(\"text/event-stream\")) {\n const events = text\n .split(/\\n\\n+/)\n .map(block => block.split(\"\\n\").filter(line => line.startsWith(\"data:\")).map(line => line.slice(5).trim()).join(\"\\n\"))\n .filter(Boolean)\n .map(data => { try { return JSON.parse(data); } catch { return { raw: data.slice(0, 1000) }; } });\n return events.length === 1 ? events[0] : events;\n }\n try { return JSON.parse(text); } catch { return { raw: text.slice(0, 1000) }; }\n}\n\nasync function mcpPost(accessToken: string, body: any, extraHeaders: Record = {}) {\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), 10_000);\n try {\n const response = await fetch(AGENT_OS.resource, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${accessToken}`,\n \"Content-Type\": \"application/json\",\n Accept: \"application/json, text/event-stream\",\n ...extraHeaders,\n },\n body: JSON.stringify(body),\n signal: controller.signal,\n });\n const text = await response.text();\n return {\n ok: response.ok,\n status: response.status,\n sessionId: response.headers.get(\"mcp-session-id\"),\n protocolVersion: response.headers.get(\"mcp-protocol-version\"),\n body: parseMcpBody(response.headers.get(\"content-type\"), text),\n };\n } finally {\n clearTimeout(timer);\n }\n}\n\nfunction extractRpcResult(body: any) {\n if (body && !Array.isArray(body) && typeof body === \"object\") return body;\n if (Array.isArray(body)) return body.find(x => x && typeof x === \"object\" && (\"result\" in x || \"error\" in x)) ?? body[0] ?? null;\n return null;\n}\n\nfunction compactTools(body: any) {\n const rpc = extractRpcResult(body);\n const tools = Array.isArray(rpc?.result?.tools) ? rpc.result.tools : [];\n return tools.slice(0, 100).map((tool: any) => ({\n name: String(tool?.name ?? \"\").slice(0, 160),\n description: String(tool?.description ?? \"\").replace(/\\s+/g, \" \").trim().slice(0, 500),\n inputSchema: tool?.inputSchema && typeof tool.inputSchema === \"object\" ? tool.inputSchema : null,\n }));\n}\n\nfunction isSafeMarketTool(tool: { name: string; description: string; inputSchema: any }) {\n const text = `${tool.name} ${tool.description}`.toLowerCase().replace(/[_-]+/g, \" \");\n const positive = /(market data|ticker|price|order book|orderbook|depth|kline|candlestick|candle)/.test(text);\n const dangerous = /(place\\s+order|create\\s+order|cancel\\s+order|execute\\s+trade|\\btrade\\b|withdraw|transfer|deposit|account|wallet|position|margin|leverage)/.test(text);\n return positive && !dangerous;\n}\n\nfunction argsForSafeMarketTool(tool: { inputSchema: any }) {\n const schema = tool.inputSchema;\n if (!schema || typeof schema !== \"object\") return {};\n const props = schema.properties && typeof schema.properties === \"object\" ? schema.properties : {};\n const required = Array.isArray(schema.required) ? schema.required.map(String) : [];\n const args: Record = {};\n for (const key of Object.keys(props)) {\n const lower = key.toLowerCase();\n const property = props[key] ?? {};\n if (lower === \"symbol\" || lower === \"pair\" || lower === \"tradingpair\") args[key] = \"BTCUSDT\";\n else if (lower === \"symbols\") args[key] = [\"BTCUSDT\"];\n else if (lower === \"interval\" || lower === \"timeframe\") args[key] = \"5m\";\n else if (lower === \"limit\") {\n const minimum = Number.isFinite(Number(property.minimum)) ? Number(property.minimum) : 1;\n const maximum = Number.isFinite(Number(property.maximum)) ? Number(property.maximum) : 20;\n args[key] = Math.max(minimum, Math.min(maximum, 5));\n } else if (lower === \"market\" || lower === \"markettype\") args[key] = \"spot\";\n }\n const unknownRequired = required.filter(key => !(key in args));\n return unknownRequired.length ? null : args;\n}\n\nasync function callModern(accessToken: string, method: string, params: any, name?: string) {\n return await mcpPost(accessToken, {\n jsonrpc: \"2.0\",\n id: crypto.randomUUID(),\n method,\n params: {\n ...params,\n _meta: {\n ...(params?._meta ?? {}),\n \"io.modelcontextprotocol/protocolVersion\": \"2026-07-28\",\n \"io.modelcontextprotocol/clientCapabilities\": {},\n \"io.modelcontextprotocol/clientInfo\": { name: \"PayAna Falsifier Agent\", version: \"1.2.0-rc1\" },\n },\n },\n }, {\n \"MCP-Protocol-Version\": \"2026-07-28\",\n \"Mcp-Method\": method,\n ...(name ? { \"Mcp-Name\": name } : {}),\n });\n}\n\nasync function listToolsModern(accessToken: string) {\n const discover = await callModern(accessToken, \"server/discover\", {});\n const tools = await callModern(accessToken, \"tools/list\", {});\n return { era: \"2026-07-28\", discover, tools, compact: compactTools(tools.body) };\n}\n\nasync function listToolsLegacy(accessToken: string) {\n const init = await mcpPost(accessToken, {\n jsonrpc: \"2.0\",\n id: 1,\n method: \"initialize\",\n params: {\n protocolVersion: \"2025-11-25\",\n capabilities: {},\n clientInfo: { name: \"PayAna Falsifier Agent\", version: \"1.2.0-rc1\" },\n },\n });\n if (!init.ok) return { era: \"legacy\", init, tools: null, compact: [] as any[] };\n const session = init.sessionId ?? undefined;\n await mcpPost(accessToken, {\n jsonrpc: \"2.0\",\n method: \"notifications/initialized\",\n params: {},\n }, session ? { \"Mcp-Session-Id\": session } : {});\n const tools = await mcpPost(accessToken, {\n jsonrpc: \"2.0\",\n id: 2,\n method: \"tools/list\",\n params: {},\n }, session ? { \"Mcp-Session-Id\": session } : {});\n return { era: String((extractRpcResult(init.body) as any)?.result?.protocolVersion ?? \"legacy\"), init, tools, compact: compactTools(tools.body) };\n}\n\nexport async function probeAuthorizedAgentOs(accessToken: string) {\n const modern = await listToolsModern(accessToken);\n const modernRpc = extractRpcResult(modern.tools.body);\n let selected: any = modern;\n if (!modern.tools.ok || modernRpc?.error || !Array.isArray(modernRpc?.result?.tools)) {\n selected = await listToolsLegacy(accessToken);\n }\n\n const tools = selected.compact as { name: string; description: string; inputSchema: any }[];\n const safeCandidates = tools.filter(isSafeMarketTool);\n const safeMarketToolNames = safeCandidates.map(t => t.name).slice(0, 30);\n const callableMarketCandidates = safeCandidates\n .map(tool => ({ name: tool.name, args: argsForSafeMarketTool(tool) }))\n .filter(x => x.args !== null)\n .slice(0, 20);\n const allToolNames = tools.map(t => t.name).slice(0, 100);\n return {\n connected: tools.length > 0,\n protocolEra: selected.era,\n toolCount: tools.length,\n allToolNames,\n safeMarketToolNames,\n callableMarketCandidates,\n automaticToolCallPerformed: false,\n boundary: \"AUTHORIZED_TOOL_CATALOG_READ_ONLY; ACCESS_TOKEN_AND_REFRESH_TOKEN_NOT_PERSISTED; NO_TOOL_CALL_PERFORMED\",\n };\n}\n",[],[181,322],["D",1788814343943],[230,231],[181],"f3f0f1da-1665-4abd-b523-09cdbb6e3ef3","styles.css","06f0c07e-aafe-11f1-857f-1607ee4eb77e",["D",1788819451982],":root{color-scheme:dark;--bg:#07090d;--panel:rgba(16,20,27,.78);--panel2:rgba(20,25,33,.64);--line:rgba(255,255,255,.08);--line2:rgba(255,255,255,.13);--text:#f5f7fa;--muted:#929aa8;--soft:#c7ccd4;--green:#63e6be;--amber:#ffd166;--red:#ff7b8b;--blue:#8bb8ff;--violet:#ba9cff;--radius:22px;--shadow:0 24px 70px rgba(0,0,0,.34)}*{box-sizing:border-box}html{background:var(--bg);font-family:Inter,ui-sans-serif,-apple-system,BlinkMacSystemFont,\"SF Pro Display\",\"Segoe UI\",sans-serif}body{margin:0;min-height:100vh;color:var(--text);background:radial-gradient(900px 500px at 76% -8%,rgba(94,122,255,.12),transparent 65%),radial-gradient(750px 520px at -8% 30%,rgba(71,230,190,.07),transparent 67%),linear-gradient(180deg,#080a0f 0%,#07090d 100%);font-feature-settings:\"tnum\" 1,\"cv02\" 1,\"cv03\" 1}button,select{font:inherit}button{color:inherit}.app-shell{width:min(1220px,calc(100% - 32px));margin:0 auto;padding:26px 0 48px}.topbar{display:flex;justify-content:space-between;align-items:center;gap:18px;margin-bottom:28px}.brand{display:flex;align-items:center;gap:12px}.mark{width:38px;height:38px;border-radius:13px;border:1px solid var(--line2);display:grid;place-items:center;background:linear-gradient(145deg,rgba(139,184,255,.15),rgba(99,230,190,.07));box-shadow:inset 0 1px rgba(255,255,255,.08)}.mark svg{width:20px;height:20px}.brand-copy strong{display:block;font-size:14px;letter-spacing:.01em}.brand-copy span{display:block;color:var(--muted);font-size:11px;margin-top:2px}.status-pill{display:flex;align-items:center;gap:8px;border:1px solid var(--line);background:rgba(255,255,255,.035);padding:8px 11px;border-radius:999px;color:var(--soft);font-size:11px}.dot{width:7px;height:7px;border-radius:50%;background:var(--green);box-shadow:0 0 0 5px rgba(99,230,190,.08)}.hero{display:grid;grid-template-columns:1.25fr .75fr;gap:18px;margin-bottom:18px}.hero-main,.hero-side,.card{border:1px solid var(--line);background:linear-gradient(145deg,rgba(255,255,255,.042),rgba(255,255,255,.018));box-shadow:var(--shadow);backdrop-filter:blur(20px);-webkit-backdrop-filter:blur(20px)}.hero-main{border-radius:28px;padding:30px 30px 26px;min-height:265px;position:relative;overflow:hidden}.hero-main:after{content:\"\";position:absolute;width:300px;height:300px;border-radius:50%;right:-150px;top:-160px;background:rgba(139,184,255,.08);filter:blur(10px);pointer-events:none}.eyebrow{font-size:11px;letter-spacing:.13em;text-transform:uppercase;color:var(--blue);font-weight:700}.hero h1{font-size:clamp(34px,5vw,64px);line-height:.98;letter-spacing:-.052em;margin:16px 0 15px;max-width:780px}.hero p{margin:0;max-width:690px;color:#adb5c1;font-size:14px;line-height:1.62}.hero-note{display:flex;flex-wrap:wrap;gap:8px;margin-top:24px}.mini-pill{font-size:10px;color:#bbc2cc;border:1px solid var(--line);border-radius:999px;padding:6px 8px;background:rgba(255,255,255,.025)}.hero-side{border-radius:28px;padding:22px;display:flex;flex-direction:column;justify-content:space-between}.hero-side-title{font-size:11px;color:var(--muted);text-transform:uppercase;letter-spacing:.1em}.symbol-row{display:flex;gap:8px;flex-wrap:wrap;margin-top:12px}.symbol-btn{border:1px solid var(--line);background:rgba(255,255,255,.025);border-radius:12px;padding:8px 10px;font-size:11px;cursor:pointer;transition:.18s ease}.symbol-btn:hover{background:rgba(255,255,255,.06);transform:translateY(-1px)}.symbol-btn.active{border-color:rgba(139,184,255,.45);background:rgba(139,184,255,.11);color:#dce9ff}.action-stack{display:grid;gap:8px;margin-top:20px}.refresh{display:block;width:100%;margin-top:20px;border:1px solid rgba(139,184,255,.25);background:linear-gradient(180deg,rgba(139,184,255,.14),rgba(139,184,255,.08));border-radius:14px;padding:11px 14px;font-weight:700;font-size:12px;cursor:pointer;transition:.18s ease;text-align:center;text-decoration:none;color:inherit}.action-stack .refresh{margin-top:0}.refresh:hover{transform:translateY(-1px);border-color:rgba(139,184,255,.4)}.refresh:disabled{opacity:.5;cursor:wait;transform:none}.secondary-action{background:rgba(255,255,255,.025);border-color:var(--line2);font-weight:650}.grid{display:grid;grid-template-columns:repeat(12,minmax(0,1fr));gap:14px}.card{border-radius:var(--radius);padding:18px;min-width:0}.span-3{grid-column:span 3}.span-4{grid-column:span 4}.span-5{grid-column:span 5}.span-7{grid-column:span 7}.span-12{grid-column:span 12}.metric-label{color:var(--muted);font-size:10px;text-transform:uppercase;letter-spacing:.09em}.metric-value{font-size:27px;line-height:1.05;font-weight:760;letter-spacing:-.035em;margin-top:9px}.metric-sub{font-size:10px;color:var(--muted);margin-top:7px}.pos{color:var(--green)}.neg{color:var(--red)}.neutral{color:var(--soft)}.section-head{display:flex;justify-content:space-between;align-items:flex-start;gap:12px;margin-bottom:14px}.section-head h2{font-size:14px;margin:0;letter-spacing:-.015em}.section-head span{font-size:10px;color:var(--muted)}.chart-wrap{height:205px;position:relative}.chart-wrap svg{width:100%;height:100%;overflow:visible}.chart-line{fill:none;stroke:#8bb8ff;stroke-width:2;vector-effect:non-scaling-stroke}.chart-area{fill:url(#chartFill)}.chart-grid{stroke:rgba(255,255,255,.05);stroke-width:1;vector-effect:non-scaling-stroke}.chart-meta{position:absolute;right:0;top:0;text-align:right}.chart-meta strong{display:block;font-size:13px}.chart-meta span{font-size:10px;color:var(--muted)}.assessment{display:flex;flex-direction:column;gap:14px}.bias-row{display:flex;align-items:center;justify-content:space-between;gap:12px}.bias-badge{font-size:10px;font-weight:750;letter-spacing:.06em;border-radius:999px;padding:7px 9px;border:1px solid var(--line2);background:rgba(255,255,255,.03)}.confidence-track{height:7px;background:rgba(255,255,255,.055);border-radius:999px;overflow:hidden}.confidence-fill{height:100%;background:linear-gradient(90deg,#729dff,#63e6be);border-radius:999px}.risk-list,.source-list,.falsifier-list{display:grid;gap:8px}.risk-item,.source-item,.falsifier-item{border:1px solid var(--line);background:rgba(255,255,255,.018);border-radius:13px;padding:10px 11px;font-size:11px;line-height:1.42;color:#c5cbd4}.risk-item{display:flex;align-items:center;gap:8px}.risk-icon{width:7px;height:7px;border-radius:50%;background:var(--amber);flex:0 0 auto}.source-item{display:grid;grid-template-columns:auto 1fr auto;gap:9px;align-items:center}.source-state{font-size:9px;font-weight:800;letter-spacing:.05em}.source-state.pass{color:var(--green)}.source-state.fail{color:var(--red)}.source-name{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.source-ms{font-size:9px;color:var(--muted)}.evidence-banner{display:flex;align-items:flex-start;gap:11px;padding:12px;border-radius:15px;border:1px solid rgba(99,230,190,.14);background:rgba(99,230,190,.035)}.evidence-banner svg{width:18px;height:18px;flex:0 0 auto;margin-top:1px}.evidence-banner strong{display:block;font-size:11px}.evidence-banner p{font-size:10px;color:var(--muted);margin:4px 0 0;line-height:1.45}.kv{display:grid;grid-template-columns:1fr auto;gap:9px 14px;font-size:11px}.kv span:nth-child(odd){color:var(--muted)}.kv span:nth-child(even){font-variant-numeric:tabular-nums;font-weight:650}.skeleton{animation:pulse 1.35s ease-in-out infinite alternate;background:rgba(255,255,255,.05);border-radius:8px;color:transparent!important}@keyframes pulse{to{background:rgba(255,255,255,.1)}}.error-box{grid-column:1/-1;border:1px solid rgba(255,123,139,.22);background:rgba(255,123,139,.05);border-radius:18px;padding:16px;color:#ffc2ca;font-size:12px}.footer{display:flex;justify-content:space-between;gap:16px;align-items:center;margin-top:18px;padding:4px 2px;color:#68717e;font-size:10px}.footer a{color:#9099a7;text-decoration:none}.footer a:hover{color:#d4d9e0}@media(max-width:980px){.hero{grid-template-columns:1fr}.span-3{grid-column:span 6}.span-4,.span-5,.span-7{grid-column:span 12}}@media(max-width:620px){.app-shell{width:min(100% - 20px,1220px);padding-top:14px}.topbar{margin-bottom:16px}.brand-copy span{display:none}.status-pill{font-size:9px}.hero-main,.hero-side{border-radius:22px;padding:20px}.hero-main{min-height:auto}.hero h1{font-size:39px}.span-3{grid-column:span 12}.card{padding:15px;border-radius:18px}.metric-value{font-size:24px}.footer{align-items:flex-start;flex-direction:column}.source-item{grid-template-columns:auto minmax(0,1fr) auto}}.metric-value-compact{font-size:22px}.mt12{margin-top:12px}.confidence-progress{display:block;width:100%;height:7px;margin:8px 0 0;appearance:none;-webkit-appearance:none;border:0;border-radius:999px;overflow:hidden;background:rgba(255,255,255,.055)}.confidence-progress::-webkit-progress-bar{background:rgba(255,255,255,.055);border-radius:999px}.confidence-progress::-webkit-progress-value{background:linear-gradient(90deg,#729dff,#63e6be);border-radius:999px}.confidence-progress::-moz-progress-bar{background:linear-gradient(90deg,#729dff,#63e6be);border-radius:999px}.neuron-card{overflow:hidden}.hypothesis-grid{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:10px}.hypothesis-card{margin:0;border:1px solid var(--line);background:rgba(255,255,255,.018);border-radius:16px;padding:14px;min-height:132px}.hypothesis-card p{margin:8px 0 0;color:#c4cbd5;font-size:11px;line-height:1.55}.hypothesis-label{font-size:9px;font-weight:800;letter-spacing:.09em;text-transform:uppercase}.hypothesis-winning{border-color:rgba(99,230,190,.15);background:rgba(99,230,190,.025)}.hypothesis-winning .hypothesis-label{color:var(--green)}.hypothesis-opposite{border-color:rgba(255,123,139,.14);background:rgba(255,123,139,.022)}.hypothesis-opposite .hypothesis-label{color:var(--red)}.hypothesis-alternative{border-color:rgba(186,156,255,.15);background:rgba(186,156,255,.022)}.hypothesis-alternative .hypothesis-label{color:var(--violet)}.counter-grid{display:grid;grid-template-columns:1fr 1fr;gap:10px;margin-top:10px}.counter-panel,.alternative-strip,.next-test{border:1px solid var(--line);background:rgba(255,255,255,.014);border-radius:15px;padding:13px}.counter-title{font-size:9px;font-weight:800;letter-spacing:.07em;text-transform:uppercase;color:var(--muted)}.support-title{color:var(--green)}.oppose-title{color:var(--red)}.evidence-stack{display:grid;gap:7px;margin-top:9px}.evidence-row{display:flex;gap:8px;align-items:flex-start;color:#c5cbd4;font-size:10px;line-height:1.45}.evidence-dot{width:6px;height:6px;border-radius:50%;margin-top:4px;flex:0 0 auto}.support-dot{background:var(--green)}.oppose-dot{background:var(--red)}.alternative-strip{margin-top:10px}.alternative-list{display:flex;flex-wrap:wrap;gap:7px;margin-top:9px}.next-test{display:flex;gap:12px;align-items:flex-start;margin-top:10px;border-color:rgba(139,184,255,.16);background:rgba(139,184,255,.025)}.next-test strong{font-size:9px;letter-spacing:.07em;text-transform:uppercase;color:var(--blue);min-width:150px}.next-test span{font-size:10px;color:#c5cbd4;line-height:1.5}@media(max-width:760px){.hypothesis-grid,.counter-grid{grid-template-columns:1fr}.next-test{flex-direction:column;gap:6px}.next-test strong{min-width:0}}",[],[186,333],"0754e739-fc63-4013-8823-c7ae18d87daf","root.tsx","01a07d8b-9306-748f-a55c-4ba603dea5c0",["D",1788814343943],"/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\nexport function Root() {\n return (\n <>\n {raw(\"\")}\n \n \n \n \n \n \n PayAna Market Sentinel\n \n \n \n \n

Diff · v28