[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_197":198,"_199":200},"routes/_app.x.$handle.$name",{"_98":97,"_32":45,"_107":88,"_27":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":125,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",13,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","01a08279-ff90-7328-a817-bbb2131ded40","name","fileType","http","content","import {\n createMcpHandler,\n McpServer,\n} from \"npm:@modelcontextprotocol/server@2\";\nimport * as z from \"npm:zod@4/v4\";\nimport {\n createRemoteJWKSet,\n decodeProtectedHeader,\n jwtVerify,\n} from \"npm:jose@6\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst CHATGPT_CLIENT_ID = \"https://chatgpt.com/oauth/client.json\";\nconst CHATGPT_REDIRECT_URI = \"https://chatgpt.com/connector_platform_oauth_redirect\";\nconst CHATGPT_JWKS = new URL(\"https://chatgpt.com/oauth/jwks.json\");\nconst SCOPE = \"brain.admission.observe\";\nconst CODE_TTL_MS = 5 * 60_000;\nconst TOKEN_TTL_MS = 2 * 60_000;\nconst ASSERTION_MAX_LIFETIME_MS = 5 * 60_000;\nconst JWKS = createRemoteJWKSet(CHATGPT_JWKS);\nconst enc = new TextEncoder();\n\nfunction origin(req: Request) {\n return new URL(req.url).origin;\n}\n\nfunction json(data: unknown, status = 200, headers: HeadersInit = {}) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", ...headers },\n });\n}\n\nfunction manualRedirect(location: string) {\n return new Response(null, { status: 302, headers: { location } });\n}\n\nfunction b64url(bytes: Uint8Array) {\n let s = \"\";\n for (const b of bytes) s += String.fromCharCode(b);\n return btoa(s).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/g, \"\");\n}\n\nfunction randomToken(bytes = 32) {\n const v = new Uint8Array(bytes);\n crypto.getRandomValues(v);\n return b64url(v);\n}\n\nasync function sha256Text(s: string) {\n const d = await crypto.subtle.digest(\"SHA-256\", enc.encode(s));\n return [...new Uint8Array(d)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction canon(x: any): string {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canon).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map((k) => JSON.stringify(k) + \":\" + canon(x[k])).join(\",\") + \"}\";\n}\n\nfunction exactKeys(x: any, allowed: string[]) {\n if (!x || typeof x !== \"object\" || Array.isArray(x)) return false;\n const got = Object.keys(x).sort();\n const want = [...allowed].sort();\n return got.length === want.length && got.every((v, i) => v === want[i]);\n}\n\nfunction cleanString(v: unknown, max = 512) {\n return typeof v === \"string\" && v.length > 0 && v.length <= max && v.trim() === v && !/[\\u0000-\\u001f\\u007f]/.test(v);\n}\n\nasync function initDb() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS auth_codes (\n code_hash TEXT PRIMARY KEY,\n client_id TEXT NOT NULL,\n redirect_uri TEXT NOT NULL,\n code_challenge TEXT NOT NULL,\n resource TEXT NOT NULL,\n scope TEXT NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0,\n created_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS assertion_jtis (\n jti_hash TEXT PRIMARY KEY,\n assertion_exp INTEGER NOT NULL,\n created_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS access_tokens (\n token_hash TEXT PRIMARY KEY,\n client_id TEXT NOT NULL,\n assertion_jti_hash TEXT NOT NULL,\n assertion_kid TEXT NOT NULL,\n scope TEXT NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0,\n created_at INTEGER NOT NULL\n )`);\n try {\n await sqlite.execute(\"ALTER TABLE access_tokens ADD COLUMN used INTEGER NOT NULL DEFAULT 0\");\n } catch {\n // Existing canary DB may already have the column.\n }\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS observations (\n observation_id TEXT PRIMARY KEY,\n session_ref TEXT NOT NULL,\n subject_ref TEXT,\n organization_ref TEXT,\n token_hash TEXT NOT NULL,\n assertion_jti_hash TEXT NOT NULL,\n assertion_kid TEXT NOT NULL,\n request_hash TEXT NOT NULL UNIQUE,\n challenge_sha256 TEXT,\n requested_agent_id TEXT,\n requested_workstream TEXT,\n requested_capabilities_json TEXT NOT NULL,\n observed_at INTEGER NOT NULL,\n expires_at INTEGER NOT NULL\n )`);\n}\n\nasync function cleanup() {\n const n = Date.now();\n await sqlite.execute({ sql: \"DELETE FROM auth_codes WHERE expires_at < ?\", args: [n - 60_000] });\n await sqlite.execute({ sql: \"DELETE FROM assertion_jtis WHERE assertion_exp < ?\", args: [n - 60_000] });\n await sqlite.execute({ sql: \"DELETE FROM access_tokens WHERE expires_at < ?\", args: [n - 60_000] });\n}\n\nfunction oauthError(req: Request, code: string, description: string, status = 400) {\n return json({ error: code, error_description: description, iss: origin(req) }, status, {\n \"cache-control\": \"no-store\",\n pragma: \"no-cache\",\n });\n}\n\nfunction resourceMetadata(req: Request) {\n const o = origin(req);\n return {\n resource: o,\n authorization_servers: [o],\n scopes_supported: [SCOPE],\n bearer_methods_supported: [\"header\"],\n };\n}\n\nfunction authServerMetadata(req: Request) {\n const o = origin(req);\n return {\n issuer: o,\n authorization_endpoint: `${o}/authorize`,\n token_endpoint: `${o}/token`,\n scopes_supported: [SCOPE],\n response_types_supported: [\"code\"],\n grant_types_supported: [\"authorization_code\"],\n code_challenge_methods_supported: [\"S256\"],\n token_endpoint_auth_methods_supported: [\"private_key_jwt\"],\n token_endpoint_auth_signing_alg_values_supported: [\"RS256\"],\n client_id_metadata_document_supported: true,\n authorization_response_iss_parameter_supported: true,\n };\n}\n\nasync function authorize(req: Request) {\n const u = new URL(req.url);\n const o = u.origin;\n const q = u.searchParams;\n const clientId = q.get(\"client_id\") || \"\";\n const redirectUri = q.get(\"redirect_uri\") || \"\";\n const responseType = q.get(\"response_type\") || \"\";\n const resource = q.get(\"resource\") || \"\";\n const scope = q.get(\"scope\") || \"\";\n const state = q.get(\"state\");\n const challenge = q.get(\"code_challenge\") || \"\";\n const challengeMethod = q.get(\"code_challenge_method\") || \"\";\n\n if (clientId !== CHATGPT_CLIENT_ID) return oauthError(req, \"unauthorized_client\", \"Only the stable ChatGPT CIMD client is accepted.\");\n if (redirectUri !== CHATGPT_REDIRECT_URI) return oauthError(req, \"invalid_request\", \"redirect_uri mismatch.\");\n if (responseType !== \"code\") return oauthError(req, \"unsupported_response_type\", \"Only authorization_code is supported.\");\n if (resource !== o) return oauthError(req, \"invalid_target\", \"resource must exactly match this MCP origin.\");\n if (!scope.split(/\\s+/).includes(SCOPE)) return oauthError(req, \"invalid_scope\", \"Required admission scope missing.\");\n if (challengeMethod !== \"S256\" || !/^[A-Za-z0-9_-]{43,128}$/.test(challenge)) {\n return oauthError(req, \"invalid_request\", \"PKCE S256 challenge required.\");\n }\n\n const rawCode = randomToken(32);\n const codeHash = await sha256Text(rawCode);\n const n = Date.now();\n await sqlite.execute({\n sql: `INSERT INTO auth_codes\n (code_hash,client_id,redirect_uri,code_challenge,resource,scope,expires_at,used,created_at)\n VALUES(?,?,?,?,?,?,?,0,?)`,\n args: [codeHash, clientId, redirectUri, challenge, resource, scope, n + CODE_TTL_MS, n],\n });\n\n const back = new URL(redirectUri);\n back.searchParams.set(\"code\", rawCode);\n if (state !== null) back.searchParams.set(\"state\", state);\n back.searchParams.set(\"iss\", o);\n return manualRedirect(back.toString());\n}\n\nasync function verifyClientAssertion(assertion: string, tokenEndpoint: string) {\n let header: any;\n try {\n header = decodeProtectedHeader(assertion);\n } catch {\n throw new Error(\"CLIENT_ASSERTION_HEADER_INVALID\");\n }\n if (header.alg !== \"RS256\" || typeof header.kid !== \"string\" || !header.kid) {\n throw new Error(\"CLIENT_ASSERTION_HEADER_INVALID\");\n }\n\n let verified: any;\n try {\n verified = await jwtVerify(assertion, JWKS, {\n algorithms: [\"RS256\"],\n issuer: CHATGPT_CLIENT_ID,\n subject: CHATGPT_CLIENT_ID,\n audience: tokenEndpoint,\n clockTolerance: 5,\n });\n } catch {\n throw new Error(\"CLIENT_ASSERTION_SIGNATURE_OR_CLAIMS_INVALID\");\n }\n\n const p: any = verified.payload;\n if (typeof p.jti !== \"string\" || !p.jti) throw new Error(\"CLIENT_ASSERTION_JTI_REQUIRED\");\n if (!Number.isFinite(p.iat) || !Number.isFinite(p.exp)) throw new Error(\"CLIENT_ASSERTION_TIME_REQUIRED\");\n const issued = Number(p.iat) * 1000;\n const expires = Number(p.exp) * 1000;\n const n = Date.now();\n if (issued > n + 10_000 || expires <= n || expires <= issued || expires - issued > ASSERTION_MAX_LIFETIME_MS) {\n throw new Error(\"CLIENT_ASSERTION_TIME_INVALID\");\n }\n return { payload: p, kid: header.kid, jti: p.jti, expMs: expires };\n}\n\nasync function token(req: Request) {\n if (req.method !== \"POST\") return oauthError(req, \"invalid_request\", \"POST required.\", 405);\n const ct = req.headers.get(\"content-type\") || \"\";\n if (!ct.includes(\"application/x-www-form-urlencoded\")) return oauthError(req, \"invalid_request\", \"form encoding required.\");\n const form = new URLSearchParams(await req.text());\n const grantType = form.get(\"grant_type\") || \"\";\n const code = form.get(\"code\") || \"\";\n const redirectUri = form.get(\"redirect_uri\") || \"\";\n const clientId = form.get(\"client_id\") || \"\";\n const verifier = form.get(\"code_verifier\") || \"\";\n const resource = form.get(\"resource\") || \"\";\n const assertionType = form.get(\"client_assertion_type\") || \"\";\n const assertion = form.get(\"client_assertion\") || \"\";\n const o = origin(req);\n const tokenEndpoint = `${o}/token`;\n\n if (grantType !== \"authorization_code\") return oauthError(req, \"unsupported_grant_type\", \"authorization_code required.\");\n if (clientId !== CHATGPT_CLIENT_ID) return oauthError(req, \"invalid_client\", \"Stable ChatGPT CIMD client_id required.\", 401);\n if (redirectUri !== CHATGPT_REDIRECT_URI) return oauthError(req, \"invalid_grant\", \"redirect_uri mismatch.\");\n if (resource !== o) return oauthError(req, \"invalid_target\", \"resource mismatch.\");\n if (!code || !verifier) return oauthError(req, \"invalid_grant\", \"code and code_verifier required.\");\n if (assertionType !== \"urn:ietf:params:oauth:client-assertion-type:jwt-bearer\" || !assertion) {\n return oauthError(req, \"invalid_client\", \"private_key_jwt client assertion required.\", 401);\n }\n\n let av: { payload: any; kid: string; jti: string; expMs: number };\n try {\n av = await verifyClientAssertion(assertion, tokenEndpoint);\n } catch (e) {\n return oauthError(req, \"invalid_client\", e instanceof Error ? e.message : \"invalid assertion\", 401);\n }\n\n const codeHash = await sha256Text(code);\n const rows: any = await sqlite.execute({\n sql: \"SELECT * FROM auth_codes WHERE code_hash=? LIMIT 1\",\n args: [codeHash],\n });\n const row: any = rows.rows?.[0];\n const n = Date.now();\n if (!row || Number(row.used) !== 0 || Number(row.expires_at) <= n) return oauthError(req, \"invalid_grant\", \"code invalid, expired, or already used.\");\n if (String(row.client_id) !== clientId || String(row.redirect_uri) !== redirectUri || String(row.resource) !== resource) {\n return oauthError(req, \"invalid_grant\", \"authorization code binding mismatch.\");\n }\n\n const derivedChallenge = b64url(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", enc.encode(verifier))));\n if (derivedChallenge !== String(row.code_challenge)) return oauthError(req, \"invalid_grant\", \"PKCE verification failed.\");\n\n const jtiHash = await sha256Text(av.jti);\n try {\n await sqlite.execute({\n sql: \"INSERT INTO assertion_jtis(jti_hash,assertion_exp,created_at) VALUES(?,?,?)\",\n args: [jtiHash, av.expMs, n],\n });\n } catch {\n return oauthError(req, \"invalid_client\", \"client assertion replay rejected.\", 401);\n }\n\n const consume: any = await sqlite.execute({\n sql: \"UPDATE auth_codes SET used=1 WHERE code_hash=? AND used=0 AND expires_at>?\",\n args: [codeHash, n],\n });\n if (Number(consume.rowsAffected || 0) !== 1) return oauthError(req, \"invalid_grant\", \"authorization code replay rejected.\");\n\n const rawToken = randomToken(32);\n const tokenHash = await sha256Text(rawToken);\n await sqlite.execute({\n sql: `INSERT INTO access_tokens\n (token_hash,client_id,assertion_jti_hash,assertion_kid,scope,expires_at,used,created_at)\n VALUES(?,?,?,?,?,?,0,?)`,\n args: [tokenHash, clientId, jtiHash, av.kid, String(row.scope), n + TOKEN_TTL_MS, n],\n });\n\n return json({\n access_token: rawToken,\n token_type: \"Bearer\",\n expires_in: Math.floor(TOKEN_TTL_MS / 1000),\n scope: String(row.scope),\n }, 200, { \"cache-control\": \"no-store\", pragma: \"no-cache\" });\n}\n\nasync function consumeBearer(req: Request) {\n const h = req.headers.get(\"authorization\") || \"\";\n const m = /^Bearer\\s+(.+)$/i.exec(h);\n if (!m) return null;\n const tokenHash = await sha256Text(m[1]);\n const r: any = await sqlite.execute({\n sql: \"UPDATE access_tokens SET used=1 WHERE token_hash=? AND expires_at>? AND used=0 RETURNING *\",\n args: [tokenHash, Date.now()],\n });\n return r.rows?.[0] ? { ...r.rows[0], token_hash: tokenHash } : null;\n}\n\nfunction mcpToolError(text: string, challenge?: string) {\n const result: any = {\n isError: true,\n content: [{ type: \"text\", text }],\n };\n if (challenge) result._meta = { \"mcp/www_authenticate\": [challenge] };\n return result;\n}\n\nasync function handleAttestTool(args: any, ctx: any) {\n const req: Request | undefined = ctx?.http?.req;\n if (!req) return mcpToolError(\"HTTP transport required for host-authenticated admission.\");\n const o = origin(req);\n const resourceMetadataUrl = `${o}/.well-known/oauth-protected-resource`;\n const auth = await consumeBearer(req);\n if (!auth) {\n return mcpToolError(\n \"OAuth bearer token required.\",\n `Bearer resource_metadata=\"${resourceMetadataUrl}\", scope=\"${SCOPE}\", error=\"invalid_token\", error_description=\"OpenAI-authenticated linking is required to create a host/session observation\"`,\n );\n }\n if (!String(auth.scope).split(/\\s+/).includes(SCOPE)) return mcpToolError(\"Required scope missing.\");\n\n const challenge = String(args.challenge_sha256 || \"\").toLowerCase();\n const caps = [...new Set((args.requested_capabilities || []).map(String))].sort();\n\n // OpenAI client-supplied metadata is delivered in MCP request _meta. The\n // 2026-07-28 SDK validates/lifts its reserved MCP envelope before this\n // handler runs; non-reserved OpenAI keys remain available here.\n const meta: any = ctx?.mcpReq?._meta || {};\n const sessionRaw = meta[\"openai/session\"];\n const subjectRaw = meta[\"openai/subject\"];\n const orgRaw = meta[\"openai/organization\"];\n if (!cleanString(sessionRaw, 1024)) return mcpToolError(\"Host-provided openai/session metadata missing or invalid.\");\n if (subjectRaw !== undefined && !cleanString(subjectRaw, 1024)) return mcpToolError(\"openai/subject metadata invalid.\");\n if (orgRaw !== undefined && !cleanString(orgRaw, 1024)) return mcpToolError(\"openai/organization metadata invalid.\");\n\n const sessionRef = await sha256Text(\"session\\0\" + sessionRaw);\n const subjectRef = subjectRaw === undefined ? null : await sha256Text(\"subject\\0\" + subjectRaw);\n const organizationRef = orgRaw === undefined ? null : await sha256Text(\"organization\\0\" + orgRaw);\n const requestCore = {\n session_ref: sessionRef,\n subject_ref: subjectRef,\n organization_ref: organizationRef,\n challenge_sha256: challenge,\n requested_agent_id: args.requested_agent_id,\n requested_workstream: args.requested_workstream,\n requested_capabilities: caps,\n assertion_jti_hash: String(auth.assertion_jti_hash),\n assertion_kid: String(auth.assertion_kid),\n };\n const requestHash = await sha256Text(canon(requestCore));\n const observationId = \"obs_\" + requestHash.slice(0, 32);\n const n = Date.now();\n const expiresAt = Math.min(Number(auth.expires_at), n + 5 * 60_000);\n\n await sqlite.execute({\n sql: `INSERT INTO observations\n (observation_id,session_ref,subject_ref,organization_ref,token_hash,assertion_jti_hash,assertion_kid,request_hash,\n challenge_sha256,requested_agent_id,requested_workstream,requested_capabilities_json,observed_at,expires_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(request_hash) DO NOTHING`,\n args: [\n observationId, sessionRef, subjectRef, organizationRef, String(auth.token_hash), String(auth.assertion_jti_hash),\n String(auth.assertion_kid), requestHash, challenge, args.requested_agent_id, args.requested_workstream,\n canon(caps), n, expiresAt,\n ],\n });\n\n const observation = {\n schema: \"CHATGPT_HOST_SESSION_ATTESTATION_OBSERVATION_V1\",\n classification: \"CANDIDATE_NONAUTHORITY_HOST_SESSION_OBSERVATION\",\n host_client: \"CHATGPT_CIMD_PRIVATE_KEY_JWT_VERIFIED\",\n session_ref: sessionRef,\n subject_ref: subjectRef,\n organization_ref: organizationRef,\n challenge_sha256: challenge,\n requested_agent_id: args.requested_agent_id,\n requested_workstream: args.requested_workstream,\n requested_capabilities: caps,\n assertion_jti_hash: String(auth.assertion_jti_hash),\n assertion_kid: String(auth.assertion_kid),\n observation_id: observationId,\n request_hash: requestHash,\n observed_at_ms: n,\n expires_at_ms: expiresAt,\n p_real_increment: 0,\n canonical_brain_mutation: false,\n raw_session_persisted: false,\n raw_subject_persisted: false,\n raw_organization_persisted: false,\n };\n\n return {\n content: [{ type: \"text\", text: \"ChatGPT host/session observation created. Candidate only; no Brain authority or P_real increment.\" }],\n structuredContent: observation,\n };\n}\n\nconst descriptor: any = {\n title: \"Project Brain session provenance canary\",\n description: \"Create a candidate-only Project Brain execution-incarnation observation bound to ChatGPT host-authenticated OAuth and host-provided session metadata. This does not grant Brain authority or increment P_real.\",\n inputSchema: z.object({\n challenge_sha256: z.string().regex(/^[0-9a-f]{64}$/),\n requested_agent_id: z.string().min(1).max(256),\n requested_workstream: z.string().min(1).max(128),\n requested_capabilities: z.array(z.string().min(1).max(128)).max(128),\n }),\n outputSchema: z.object({\n schema: z.literal(\"CHATGPT_HOST_SESSION_ATTESTATION_OBSERVATION_V1\"),\n classification: z.literal(\"CANDIDATE_NONAUTHORITY_HOST_SESSION_OBSERVATION\"),\n host_client: z.literal(\"CHATGPT_CIMD_PRIVATE_KEY_JWT_VERIFIED\"),\n session_ref: z.string().regex(/^[0-9a-f]{64}$/),\n subject_ref: z.string().regex(/^[0-9a-f]{64}$/).nullable(),\n organization_ref: z.string().regex(/^[0-9a-f]{64}$/).nullable(),\n challenge_sha256: z.string().regex(/^[0-9a-f]{64}$/),\n requested_agent_id: z.string(),\n requested_workstream: z.string(),\n requested_capabilities: z.array(z.string()),\n assertion_jti_hash: z.string().regex(/^[0-9a-f]{64}$/),\n assertion_kid: z.string(),\n observation_id: z.string(),\n request_hash: z.string().regex(/^[0-9a-f]{64}$/),\n observed_at_ms: z.number().int(),\n expires_at_ms: z.number().int(),\n p_real_increment: z.literal(0),\n canonical_brain_mutation: z.literal(false),\n raw_session_persisted: z.literal(false),\n raw_subject_persisted: z.literal(false),\n raw_organization_persisted: z.literal(false),\n }),\n annotations: {\n readOnlyHint: false,\n destructiveHint: false,\n openWorldHint: false,\n idempotentHint: true,\n },\n securitySchemes: [{ type: \"oauth2\", scopes: [SCOPE] }],\n _meta: { securitySchemes: [{ type: \"oauth2\", scopes: [SCOPE] }] },\n};\n\nconst mcpHandler = createMcpHandler(() => {\n const server = new McpServer({ name: \"project-brain-chatgpt-admission-canary\", version: \"1.0.0\" });\n server.registerTool(\"brain-session-attest\", descriptor, async (args: any, ctx: any) => handleAttestTool(args, ctx));\n return server;\n});\n\nawait initDb();\n\nexport default async function handler(req: Request): Promise {\n await cleanup();\n const u = new URL(req.url);\n\n if (req.method === \"GET\" && u.pathname === \"/.well-known/oauth-protected-resource\") {\n return json(resourceMetadata(req), 200, { \"cache-control\": \"no-store\" });\n }\n if (req.method === \"GET\" && (u.pathname === \"/.well-known/oauth-authorization-server\" || u.pathname === \"/.well-known/openid-configuration\")) {\n return json(authServerMetadata(req), 200, { \"cache-control\": \"no-store\" });\n }\n if (u.pathname === \"/authorize\") return authorize(req);\n if (u.pathname === \"/token\") return token(req);\n if (req.method === \"GET\" && u.pathname === \"/health\") {\n return json({\n ok: true,\n schema: \"BRAIN_CHATGPT_ADMISSION_CANARY_HEALTH_V1\",\n authority: false,\n p_real_increment: 0,\n required_client_id: CHATGPT_CLIENT_ID,\n token_endpoint_auth: \"private_key_jwt\",\n required_tool_scope: SCOPE,\n raw_host_metadata_persisted: false,\n admission_bearer_semantics: \"single_use\",\n access_token_ttl_ms: TOKEN_TTL_MS,\n });\n }\n\n return mcpHandler.fetch(req);\n}\n","import {\n createMcpHandler,\n McpServer,\n} from \"npm:@modelcontextprotocol/server@2\";\nimport * as z from \"npm:zod@4/v4\";\nimport {\n createRemoteJWKSet,\n decodeProtectedHeader,\n jwtVerify,\n} from \"npm:jose@6\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst CHATGPT_CLIENT_ID = \"https://chatgpt.com/oauth/client.json\";\nconst CHATGPT_REDIRECT_URI = \"https://chatgpt.com/connector_platform_oauth_redirect\";\nconst CHATGPT_JWKS = new URL(\"https://chatgpt.com/oauth/jwks.json\");\nconst PROJECT = \"mosadek/project-brain-live-v1-durable\";\nconst SCOPE = \"brain.admission.observe\";\nconst CHALLENGE_TTL_MS = 5 * 60_000;\nconst CODE_TTL_MS = 5 * 60_000;\nconst TOKEN_TTL_MS = 2 * 60_000;\nconst ASSERTION_MAX_LIFETIME_MS = 5 * 60_000;\nconst JWKS = createRemoteJWKSet(CHATGPT_JWKS);\nconst enc = new TextEncoder();\n\nfunction origin(req: Request) {\n return new URL(req.url).origin;\n}\n\nfunction json(data: unknown, status = 200, headers: HeadersInit = {}) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", ...headers },\n });\n}\n\nfunction manualRedirect(location: string) {\n return new Response(null, { status: 302, headers: { location } });\n}\n\nfunction b64url(bytes: Uint8Array) {\n let s = \"\";\n for (const b of bytes) s += String.fromCharCode(b);\n return btoa(s).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/g, \"\");\n}\n\nfunction randomToken(bytes = 32) {\n const v = new Uint8Array(bytes);\n crypto.getRandomValues(v);\n return b64url(v);\n}\n\nasync function sha256Text(s: string) {\n const d = await crypto.subtle.digest(\"SHA-256\", enc.encode(s));\n return [...new Uint8Array(d)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction canon(x: any): string {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canon).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map((k) => JSON.stringify(k) + \":\" + canon(x[k])).join(\",\") + \"}\";\n}\n\nfunction exactKeys(x: any, allowed: string[]) {\n if (!x || typeof x !== \"object\" || Array.isArray(x)) return false;\n const got = Object.keys(x).sort();\n const want = [...allowed].sort();\n return got.length === want.length && got.every((v, i) => v === want[i]);\n}\n\nfunction cleanString(v: unknown, max = 512) {\n return typeof v === \"string\" && v.length > 0 && v.length <= max && v.trim() === v && !/[\\u0000-\\u001f\\u007f]/.test(v);\n}\n\nasync function initDb() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS auth_codes (\n code_hash TEXT PRIMARY KEY,\n client_id TEXT NOT NULL,\n redirect_uri TEXT NOT NULL,\n code_challenge TEXT NOT NULL,\n resource TEXT NOT NULL,\n scope TEXT NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0,\n created_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS assertion_jtis (\n jti_hash TEXT PRIMARY KEY,\n assertion_exp INTEGER NOT NULL,\n created_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS access_tokens (\n token_hash TEXT PRIMARY KEY,\n client_id TEXT NOT NULL,\n assertion_jti_hash TEXT NOT NULL,\n assertion_kid TEXT NOT NULL,\n scope TEXT NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0,\n created_at INTEGER NOT NULL\n )`);\n try {\n await sqlite.execute(\"ALTER TABLE access_tokens ADD COLUMN used INTEGER NOT NULL DEFAULT 0\");\n } catch {\n // Existing canary DB may already have the column.\n }\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS admission_challenges (\n challenge_sha256 TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n requested_agent_id TEXT NOT NULL,\n requested_workstream TEXT NOT NULL,\n requested_capabilities_json TEXT NOT NULL,\n issued_at INTEGER NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS observations (\n observation_id TEXT PRIMARY KEY,\n project TEXT NOT NULL DEFAULT 'mosadek/project-brain-live-v1-durable',\n session_ref TEXT NOT NULL,\n subject_ref TEXT,\n organization_ref TEXT,\n token_hash TEXT NOT NULL,\n assertion_jti_hash TEXT NOT NULL,\n assertion_kid TEXT NOT NULL,\n request_hash TEXT NOT NULL UNIQUE,\n challenge_sha256 TEXT,\n challenge_issued_at INTEGER,\n challenge_expires_at INTEGER,\n requested_agent_id TEXT,\n requested_workstream TEXT,\n requested_capabilities_json TEXT NOT NULL,\n observed_at INTEGER NOT NULL,\n expires_at INTEGER NOT NULL\n )`);\n for (const migration of [\n \"ALTER TABLE observations ADD COLUMN project TEXT NOT NULL DEFAULT 'mosadek/project-brain-live-v1-durable'\",\n \"ALTER TABLE observations ADD COLUMN challenge_issued_at INTEGER\",\n \"ALTER TABLE observations ADD COLUMN challenge_expires_at INTEGER\",\n ]) {\n try { await sqlite.execute(migration); } catch {}\n }\n}\n\nasync function cleanup() {\n const n = Date.now();\n await sqlite.execute({ sql: \"DELETE FROM auth_codes WHERE expires_at < ?\", args: [n - 60_000] });\n await sqlite.execute({ sql: \"DELETE FROM assertion_jtis WHERE assertion_exp < ?\", args: [n - 60_000] });\n await sqlite.execute({ sql: \"DELETE FROM access_tokens WHERE expires_at < ?\", args: [n - 60_000] });\n await sqlite.execute({ sql: \"DELETE FROM admission_challenges WHERE expires_at < ?\", args: [n - 60_000] });\n}\n\nfunction oauthError(req: Request, code: string, description: string, status = 400) {\n return json({ error: code, error_description: description, iss: origin(req) }, status, {\n \"cache-control\": \"no-store\",\n pragma: \"no-cache\",\n });\n}\n\nfunction resourceMetadata(req: Request) {\n const o = origin(req);\n return {\n resource: o,\n authorization_servers: [o],\n scopes_supported: [SCOPE],\n bearer_methods_supported: [\"header\"],\n };\n}\n\nfunction authServerMetadata(req: Request) {\n const o = origin(req);\n return {\n issuer: o,\n authorization_endpoint: `${o}/authorize`,\n token_endpoint: `${o}/token`,\n scopes_supported: [SCOPE],\n response_types_supported: [\"code\"],\n grant_types_supported: [\"authorization_code\"],\n code_challenge_methods_supported: [\"S256\"],\n token_endpoint_auth_methods_supported: [\"private_key_jwt\"],\n token_endpoint_auth_signing_alg_values_supported: [\"RS256\"],\n client_id_metadata_document_supported: true,\n authorization_response_iss_parameter_supported: true,\n };\n}\n\nasync function authorize(req: Request) {\n const u = new URL(req.url);\n const o = u.origin;\n const q = u.searchParams;\n const clientId = q.get(\"client_id\") || \"\";\n const redirectUri = q.get(\"redirect_uri\") || \"\";\n const responseType = q.get(\"response_type\") || \"\";\n const resource = q.get(\"resource\") || \"\";\n const scope = q.get(\"scope\") || \"\";\n const state = q.get(\"state\");\n const challenge = q.get(\"code_challenge\") || \"\";\n const challengeMethod = q.get(\"code_challenge_method\") || \"\";\n\n if (clientId !== CHATGPT_CLIENT_ID) return oauthError(req, \"unauthorized_client\", \"Only the stable ChatGPT CIMD client is accepted.\");\n if (redirectUri !== CHATGPT_REDIRECT_URI) return oauthError(req, \"invalid_request\", \"redirect_uri mismatch.\");\n if (responseType !== \"code\") return oauthError(req, \"unsupported_response_type\", \"Only authorization_code is supported.\");\n if (resource !== o) return oauthError(req, \"invalid_target\", \"resource must exactly match this MCP origin.\");\n if (!scope.split(/\\s+/).includes(SCOPE)) return oauthError(req, \"invalid_scope\", \"Required admission scope missing.\");\n if (challengeMethod !== \"S256\" || !/^[A-Za-z0-9_-]{43,128}$/.test(challenge)) {\n return oauthError(req, \"invalid_request\", \"PKCE S256 challenge required.\");\n }\n\n const rawCode = randomToken(32);\n const codeHash = await sha256Text(rawCode);\n const n = Date.now();\n await sqlite.execute({\n sql: `INSERT INTO auth_codes\n (code_hash,client_id,redirect_uri,code_challenge,resource,scope,expires_at,used,created_at)\n VALUES(?,?,?,?,?,?,?,0,?)`,\n args: [codeHash, clientId, redirectUri, challenge, resource, scope, n + CODE_TTL_MS, n],\n });\n\n const back = new URL(redirectUri);\n back.searchParams.set(\"code\", rawCode);\n if (state !== null) back.searchParams.set(\"state\", state);\n back.searchParams.set(\"iss\", o);\n return manualRedirect(back.toString());\n}\n\nasync function verifyClientAssertion(assertion: string, tokenEndpoint: string) {\n let header: any;\n try {\n header = decodeProtectedHeader(assertion);\n } catch {\n throw new Error(\"CLIENT_ASSERTION_HEADER_INVALID\");\n }\n if (header.alg !== \"RS256\" || typeof header.kid !== \"string\" || !header.kid) {\n throw new Error(\"CLIENT_ASSERTION_HEADER_INVALID\");\n }\n\n let verified: any;\n try {\n verified = await jwtVerify(assertion, JWKS, {\n algorithms: [\"RS256\"],\n issuer: CHATGPT_CLIENT_ID,\n subject: CHATGPT_CLIENT_ID,\n audience: tokenEndpoint,\n clockTolerance: 5,\n });\n } catch {\n throw new Error(\"CLIENT_ASSERTION_SIGNATURE_OR_CLAIMS_INVALID\");\n }\n\n const p: any = verified.payload;\n if (typeof p.jti !== \"string\" || !p.jti) throw new Error(\"CLIENT_ASSERTION_JTI_REQUIRED\");\n if (!Number.isFinite(p.iat) || !Number.isFinite(p.exp)) throw new Error(\"CLIENT_ASSERTION_TIME_REQUIRED\");\n const issued = Number(p.iat) * 1000;\n const expires = Number(p.exp) * 1000;\n const n = Date.now();\n if (issued > n + 10_000 || expires <= n || expires <= issued || expires - issued > ASSERTION_MAX_LIFETIME_MS) {\n throw new Error(\"CLIENT_ASSERTION_TIME_INVALID\");\n }\n return { payload: p, kid: header.kid, jti: p.jti, expMs: expires };\n}\n\nasync function token(req: Request) {\n if (req.method !== \"POST\") return oauthError(req, \"invalid_request\", \"POST required.\", 405);\n const ct = req.headers.get(\"content-type\") || \"\";\n if (!ct.includes(\"application/x-www-form-urlencoded\")) return oauthError(req, \"invalid_request\", \"form encoding required.\");\n const form = new URLSearchParams(await req.text());\n const grantType = form.get(\"grant_type\") || \"\";\n const code = form.get(\"code\") || \"\";\n const redirectUri = form.get(\"redirect_uri\") || \"\";\n const clientId = form.get(\"client_id\") || \"\";\n const verifier = form.get(\"code_verifier\") || \"\";\n const resource = form.get(\"resource\") || \"\";\n const assertionType = form.get(\"client_assertion_type\") || \"\";\n const assertion = form.get(\"client_assertion\") || \"\";\n const o = origin(req);\n const tokenEndpoint = `${o}/token`;\n\n if (grantType !== \"authorization_code\") return oauthError(req, \"unsupported_grant_type\", \"authorization_code required.\");\n if (clientId !== CHATGPT_CLIENT_ID) return oauthError(req, \"invalid_client\", \"Stable ChatGPT CIMD client_id required.\", 401);\n if (redirectUri !== CHATGPT_REDIRECT_URI) return oauthError(req, \"invalid_grant\", \"redirect_uri mismatch.\");\n if (resource !== o) return oauthError(req, \"invalid_target\", \"resource mismatch.\");\n if (!code || !verifier) return oauthError(req, \"invalid_grant\", \"code and code_verifier required.\");\n if (assertionType !== \"urn:ietf:params:oauth:client-assertion-type:jwt-bearer\" || !assertion) {\n return oauthError(req, \"invalid_client\", \"private_key_jwt client assertion required.\", 401);\n }\n\n let av: { payload: any; kid: string; jti: string; expMs: number };\n try {\n av = await verifyClientAssertion(assertion, tokenEndpoint);\n } catch (e) {\n return oauthError(req, \"invalid_client\", e instanceof Error ? e.message : \"invalid assertion\", 401);\n }\n\n const codeHash = await sha256Text(code);\n const rows: any = await sqlite.execute({\n sql: \"SELECT * FROM auth_codes WHERE code_hash=? LIMIT 1\",\n args: [codeHash],\n });\n const row: any = rows.rows?.[0];\n const n = Date.now();\n if (!row || Number(row.used) !== 0 || Number(row.expires_at) <= n) return oauthError(req, \"invalid_grant\", \"code invalid, expired, or already used.\");\n if (String(row.client_id) !== clientId || String(row.redirect_uri) !== redirectUri || String(row.resource) !== resource) {\n return oauthError(req, \"invalid_grant\", \"authorization code binding mismatch.\");\n }\n\n const derivedChallenge = b64url(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", enc.encode(verifier))));\n if (derivedChallenge !== String(row.code_challenge)) return oauthError(req, \"invalid_grant\", \"PKCE verification failed.\");\n\n const jtiHash = await sha256Text(av.jti);\n try {\n await sqlite.execute({\n sql: \"INSERT INTO assertion_jtis(jti_hash,assertion_exp,created_at) VALUES(?,?,?)\",\n args: [jtiHash, av.expMs, n],\n });\n } catch {\n return oauthError(req, \"invalid_client\", \"client assertion replay rejected.\", 401);\n }\n\n const consume: any = await sqlite.execute({\n sql: \"UPDATE auth_codes SET used=1 WHERE code_hash=? AND used=0 AND expires_at>?\",\n args: [codeHash, n],\n });\n if (Number(consume.rowsAffected || 0) !== 1) return oauthError(req, \"invalid_grant\", \"authorization code replay rejected.\");\n\n const rawToken = randomToken(32);\n const tokenHash = await sha256Text(rawToken);\n await sqlite.execute({\n sql: `INSERT INTO access_tokens\n (token_hash,client_id,assertion_jti_hash,assertion_kid,scope,expires_at,used,created_at)\n VALUES(?,?,?,?,?,?,0,?)`,\n args: [tokenHash, clientId, jtiHash, av.kid, String(row.scope), n + TOKEN_TTL_MS, n],\n });\n\n return json({\n access_token: rawToken,\n token_type: \"Bearer\",\n expires_in: Math.floor(TOKEN_TTL_MS / 1000),\n scope: String(row.scope),\n }, 200, { \"cache-control\": \"no-store\", pragma: \"no-cache\" });\n}\n\nasync function consumeBearer(req: Request) {\n const h = req.headers.get(\"authorization\") || \"\";\n const m = /^Bearer\\s+(.+)$/i.exec(h);\n if (!m) return null;\n const tokenHash = await sha256Text(m[1]);\n const r: any = await sqlite.execute({\n sql: \"UPDATE access_tokens SET used=1 WHERE token_hash=? AND expires_at>? AND used=0 RETURNING *\",\n args: [tokenHash, Date.now()],\n });\n return r.rows?.[0] ? { ...r.rows[0], token_hash: tokenHash } : null;\n}\n\nasync function issueChallenge(args: any) {\n const caps = [...new Set((args.requested_capabilities || []).map(String))].sort();\n const n = Date.now();\n const challengeSha256 = await sha256Text(PROJECT + \"\\0\" + randomToken(32));\n await sqlite.execute({\n sql: `INSERT INTO admission_challenges\n (challenge_sha256,project,requested_agent_id,requested_workstream,requested_capabilities_json,issued_at,expires_at,used)\n VALUES(?,?,?,?,?,?,?,0)`,\n args:[\n challengeSha256,PROJECT,args.requested_agent_id,args.requested_workstream,canon(caps),n,n+CHALLENGE_TTL_MS,\n ],\n });\n return {\n content:[{type:\"text\",text:\"Fresh Project Brain admission challenge issued. It is candidate-only and grants no authority.\"}],\n structuredContent:{\n schema:\"PROJECT_BRAIN_ADMISSION_CHALLENGE_V1\",\n project:PROJECT,\n challenge_sha256:challengeSha256,\n requested_agent_id:args.requested_agent_id,\n requested_workstream:args.requested_workstream,\n requested_capabilities:caps,\n issued_at_ms:n,\n expires_at_ms:n+CHALLENGE_TTL_MS,\n p_real_increment:0,\n canonical_brain_mutation:false,\n },\n };\n}\n\nasync function consumeChallenge(args:any,caps:string[]) {\n const n=Date.now();\n const r:any=await sqlite.execute({\n sql:`UPDATE admission_challenges SET used=1\n WHERE challenge_sha256=? AND project=? AND requested_agent_id=? AND requested_workstream=?\n AND requested_capabilities_json=? AND expires_at>? AND used=0\n RETURNING issued_at,expires_at`,\n args:[\n String(args.challenge_sha256||\"\").toLowerCase(),PROJECT,args.requested_agent_id,args.requested_workstream,canon(caps),n,\n ],\n });\n return r.rows?.[0] ?? null;\n}\n\nfunction mcpToolError(text: string, challenge?: string) {\n const result: any = {\n isError: true,\n content: [{ type: \"text\", text }],\n };\n if (challenge) result._meta = { \"mcp/www_authenticate\": [challenge] };\n return result;\n}\n\nasync function handleAttestTool(args: any, ctx: any) {\n const req: Request | undefined = ctx?.http?.req;\n if (!req) return mcpToolError(\"HTTP transport required for host-authenticated admission.\");\n const o = origin(req);\n const resourceMetadataUrl = `${o}/.well-known/oauth-protected-resource`;\n const auth = await consumeBearer(req);\n if (!auth) {\n return mcpToolError(\n \"OAuth bearer token required.\",\n `Bearer resource_metadata=\"${resourceMetadataUrl}\", scope=\"${SCOPE}\", error=\"invalid_token\", error_description=\"OpenAI-authenticated linking is required to create a host/session observation\"`,\n );\n }\n if (!String(auth.scope).split(/\\s+/).includes(SCOPE)) return mcpToolError(\"Required scope missing.\");\n\n const challenge = String(args.challenge_sha256 || \"\").toLowerCase();\n const caps = [...new Set((args.requested_capabilities || []).map(String))].sort();\n\n // OpenAI client-supplied metadata is delivered in MCP request _meta. The\n // 2026-07-28 SDK validates/lifts its reserved MCP envelope before this\n // handler runs; non-reserved OpenAI keys remain available here.\n const meta: any = ctx?.mcpReq?._meta || {};\n const sessionRaw = meta[\"openai/session\"];\n const subjectRaw = meta[\"openai/subject\"];\n const orgRaw = meta[\"openai/organization\"];\n if (!cleanString(sessionRaw, 1024)) return mcpToolError(\"Host-provided openai/session metadata missing or invalid.\");\n if (subjectRaw !== undefined && !cleanString(subjectRaw, 1024)) return mcpToolError(\"openai/subject metadata invalid.\");\n if (orgRaw !== undefined && !cleanString(orgRaw, 1024)) return mcpToolError(\"openai/organization metadata invalid.\");\n\n const challengeRow = await consumeChallenge(args,caps);\n if (!challengeRow) return mcpToolError(\"Admission challenge is absent, stale, already used, or does not match the declared identity/workstream/capabilities.\");\n\n const sessionRef = await sha256Text(\"session\\0\" + sessionRaw);\n const subjectRef = subjectRaw === undefined ? null : await sha256Text(\"subject\\0\" + subjectRaw);\n const organizationRef = orgRaw === undefined ? null : await sha256Text(\"organization\\0\" + orgRaw);\n const requestCore = {\n project: PROJECT,\n session_ref: sessionRef,\n subject_ref: subjectRef,\n organization_ref: organizationRef,\n challenge_sha256: challenge,\n challenge_issued_at_ms: Number(challengeRow.issued_at),\n challenge_expires_at_ms: Number(challengeRow.expires_at),\n requested_agent_id: args.requested_agent_id,\n requested_workstream: args.requested_workstream,\n requested_capabilities: caps,\n assertion_jti_hash: String(auth.assertion_jti_hash),\n assertion_kid: String(auth.assertion_kid),\n };\n const requestHash = await sha256Text(canon(requestCore));\n const observationId = \"obs_\" + requestHash.slice(0, 32);\n const n = Date.now();\n const expiresAt = Math.min(Number(auth.expires_at), Number(challengeRow.expires_at), n + 5 * 60_000);\n\n await sqlite.execute({\n sql: `INSERT INTO observations\n (observation_id,project,session_ref,subject_ref,organization_ref,token_hash,assertion_jti_hash,assertion_kid,request_hash,\n challenge_sha256,challenge_issued_at,challenge_expires_at,requested_agent_id,requested_workstream,requested_capabilities_json,observed_at,expires_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(request_hash) DO NOTHING`,\n args: [\n observationId, PROJECT, sessionRef, subjectRef, organizationRef, String(auth.token_hash), String(auth.assertion_jti_hash),\n String(auth.assertion_kid), requestHash, challenge, Number(challengeRow.issued_at), Number(challengeRow.expires_at),\n args.requested_agent_id, args.requested_workstream, canon(caps), n, expiresAt,\n ],\n });\n\n const observation = {\n schema: \"CHATGPT_HOST_SESSION_ATTESTATION_OBSERVATION_V1\",\n project: PROJECT,\n classification: \"CANDIDATE_NONAUTHORITY_HOST_SESSION_OBSERVATION\",\n host_client: \"CHATGPT_CIMD_PRIVATE_KEY_JWT_VERIFIED\",\n session_ref: sessionRef,\n subject_ref: subjectRef,\n organization_ref: organizationRef,\n challenge_sha256: challenge,\n requested_agent_id: args.requested_agent_id,\n requested_workstream: args.requested_workstream,\n requested_capabilities: caps,\n assertion_jti_hash: String(auth.assertion_jti_hash),\n assertion_kid: String(auth.assertion_kid),\n observation_id: observationId,\n request_hash: requestHash,\n observed_at_ms: n,\n expires_at_ms: expiresAt,\n p_real_increment: 0,\n canonical_brain_mutation: false,\n raw_session_persisted: false,\n raw_subject_persisted: false,\n raw_organization_persisted: false,\n };\n\n return {\n content: [{ type: \"text\", text: \"ChatGPT host/session observation created. Candidate only; no Brain authority or P_real increment.\" }],\n structuredContent: observation,\n };\n}\n\nconst challengeDescriptor: any = {\n title:\"Issue Project Brain admission challenge\",\n description:\"Issue a short-lived, project-bound challenge for the current requested logical identity, workstream, and capability declaration. This is candidate-only and grants no authority.\",\n inputSchema:z.object({\n requested_agent_id:z.string().min(1).max(256),\n requested_workstream:z.string().min(1).max(128),\n requested_capabilities:z.array(z.string().min(1).max(128)).max(128),\n }),\n outputSchema:z.object({\n schema:z.literal(\"PROJECT_BRAIN_ADMISSION_CHALLENGE_V1\"),\n project:z.literal(PROJECT),\n challenge_sha256:z.string().regex(/^[0-9a-f]{64}$/),\n requested_agent_id:z.string(),\n requested_workstream:z.string(),\n requested_capabilities:z.array(z.string()),\n issued_at_ms:z.number().int(),\n expires_at_ms:z.number().int(),\n p_real_increment:z.literal(0),\n canonical_brain_mutation:z.literal(false),\n }),\n annotations:{readOnlyHint:false,destructiveHint:false,openWorldHint:false,idempotentHint:false},\n securitySchemes:[{type:\"noauth\"}],\n _meta:{securitySchemes:[{type:\"noauth\"}]},\n};\n\nconst descriptor: any = {\n title: \"Project Brain session provenance canary\",\n description: \"Create a candidate-only Project Brain execution-incarnation observation bound to ChatGPT host-authenticated OAuth and host-provided session metadata. This does not grant Brain authority or increment P_real.\",\n inputSchema: z.object({\n challenge_sha256: z.string().regex(/^[0-9a-f]{64}$/),\n challenge_issued_at_ms: z.number().int(),\n challenge_expires_at_ms: z.number().int(),\n requested_agent_id: z.string().min(1).max(256),\n requested_workstream: z.string().min(1).max(128),\n requested_capabilities: z.array(z.string().min(1).max(128)).max(128),\n }),\n outputSchema: z.object({\n schema: z.literal(\"CHATGPT_HOST_SESSION_ATTESTATION_OBSERVATION_V1\"),\n project: z.literal(PROJECT),\n classification: z.literal(\"CANDIDATE_NONAUTHORITY_HOST_SESSION_OBSERVATION\"),\n host_client: z.literal(\"CHATGPT_CIMD_PRIVATE_KEY_JWT_VERIFIED\"),\n session_ref: z.string().regex(/^[0-9a-f]{64}$/),\n subject_ref: z.string().regex(/^[0-9a-f]{64}$/).nullable(),\n organization_ref: z.string().regex(/^[0-9a-f]{64}$/).nullable(),\n challenge_sha256: z.string().regex(/^[0-9a-f]{64}$/),\n requested_agent_id: z.string(),\n requested_workstream: z.string(),\n requested_capabilities: z.array(z.string()),\n assertion_jti_hash: z.string().regex(/^[0-9a-f]{64}$/),\n assertion_kid: z.string(),\n observation_id: z.string(),\n request_hash: z.string().regex(/^[0-9a-f]{64}$/),\n observed_at_ms: z.number().int(),\n expires_at_ms: z.number().int(),\n p_real_increment: z.literal(0),\n canonical_brain_mutation: z.literal(false),\n raw_session_persisted: z.literal(false),\n raw_subject_persisted: z.literal(false),\n raw_organization_persisted: z.literal(false),\n }),\n annotations: {\n readOnlyHint: false,\n destructiveHint: false,\n openWorldHint: false,\n idempotentHint: true,\n },\n securitySchemes: [{ type: \"oauth2\", scopes: [SCOPE] }],\n _meta: { securitySchemes: [{ type: \"oauth2\", scopes: [SCOPE] }] },\n};\n\nconst mcpHandler = createMcpHandler(() => {\n const server = new McpServer({ name: \"project-brain-chatgpt-admission-canary\", version: \"1.1.0\" });\n server.registerTool(\"brain-admission-challenge\", challengeDescriptor, async (args:any) => issueChallenge(args));\n server.registerTool(\"brain-session-attest\", descriptor, async (args: any, ctx: any) => handleAttestTool(args, ctx));\n return server;\n});\n\nawait initDb();\n\nexport default async function handler(req: Request): Promise {\n await cleanup();\n const u = new URL(req.url);\n\n if (req.method === \"GET\" && u.pathname === \"/.well-known/oauth-protected-resource\") {\n return json(resourceMetadata(req), 200, { \"cache-control\": \"no-store\" });\n }\n if (req.method === \"GET\" && (u.pathname === \"/.well-known/oauth-authorization-server\" || u.pathname === \"/.well-known/openid-configuration\")) {\n return json(authServerMetadata(req), 200, { \"cache-control\": \"no-store\" });\n }\n if (u.pathname === \"/authorize\") return authorize(req);\n if (u.pathname === \"/token\") return token(req);\n if (req.method === \"GET\" && u.pathname === \"/health\") {\n return json({\n ok: true,\n schema: \"BRAIN_CHATGPT_ADMISSION_CANARY_HEALTH_V1\",\n authority: false,\n p_real_increment: 0,\n required_client_id: CHATGPT_CLIENT_ID,\n token_endpoint_auth: \"private_key_jwt\",\n required_tool_scope: SCOPE,\n project: PROJECT,\n challenge_ttl_ms: CHALLENGE_TTL_MS,\n raw_host_metadata_persisted: false,\n admission_bearer_semantics: \"single_use\",\n access_token_ttl_ms: TOKEN_TTL_MS,\n });\n }\n\n return mcpHandler.fetch(req);\n}\n","createdAt",["D",1788897465557],"branchVersion","branchId","66f13ddf-4ddf-4f56-b304-b2f5408bdd74","id","0805b07e-7699-4af9-bece-c6bfcf298903","brain-chatgpt-admission-canary-v1",["D",1788895428429],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","ChatGPT host/session provenance admission canary","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","0805b07e76994af9becec6bfcf298903","tursoHostname","0805b07e76994af9becec6bfcf298903-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789504908499],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},"branch",{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"isOwned",20,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":192,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":193,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":194,"_82":195,"_84":196,"_86":25},"tree",[175,176,177,178],"files",[175,176,177,178],"counts",{"_165":61,"_166":161,"_167":61,"_168":169,"_170":171},"contents",[130,131,132,133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":158,"_32":159,"_30":160,"_137":-5,"_41":42,"_40":161,"_139":125,"_38":162,"_13":61,"_33":20,"_35":163,"_24":25,"_144":-5,"_27":164},{"_43":154,"_32":28,"_30":31,"_137":-5,"_41":42,"_40":14,"_139":25,"_38":155,"_13":156,"_33":34,"_35":37,"_24":25,"_144":-5,"_27":157},{"_43":146,"_32":147,"_30":148,"_137":-5,"_41":42,"_40":149,"_139":125,"_38":150,"_13":151,"_33":142,"_35":152,"_24":25,"_144":-5,"_27":153},{"_43":134,"_32":135,"_30":136,"_137":-5,"_41":42,"_40":138,"_139":125,"_38":140,"_13":141,"_33":142,"_35":143,"_24":25,"_144":-5,"_27":145},"7a274a4d-6e94-4bc9-9879-ca16fe1fedb1","selftest.ts","8258273a-abbb-11f1-a7f7-1607ee4eb77e","parentId",12,"latest",["D",1788897301321],3,"script","import handler from \"./main.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { generateKeyPair, SignJWT } from \"npm:jose@6\";\n\nconst ORIGIN = \"https://mosadek--01a08279ff907328a817bbb2131ded40.web.val.run\";\nconst CLIENT = \"https://chatgpt.com/oauth/client.json\";\nconst REDIRECT = \"https://chatgpt.com/connector_platform_oauth_redirect\";\nconst SCOPE = \"brain.admission.observe\";\nconst enc = new TextEncoder();\n\nasync function sha256Text(s: string) {\n const d = await crypto.subtle.digest(\"SHA-256\", enc.encode(s));\n return [...new Uint8Array(d)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction b64url(bytes: Uint8Array) {\n let s = \"\";\n for (const b of bytes) s += String.fromCharCode(b);\n return btoa(s).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/g, \"\");\n}\nasync function challenge(verifier: string) {\n return b64url(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", enc.encode(verifier))));\n}\nasync function call(req: Request) {\n const r = await handler(req);\n const text = await r.text();\n let body: any = text;\n try { body = JSON.parse(text); } catch {}\n return { status: r.status, headers: Object.fromEntries(r.headers.entries()), body };\n}\nfunction check(name: string, pass: boolean, detail: any = null) {\n return { name, pass, detail };\n}\n\nconst out: any[] = [];\nconst verifier = \"v\".repeat(43);\nconst cc = await challenge(verifier);\n\nconst health = await call(new Request(ORIGIN + \"/health\"));\nout.push(check(\"health_nonauthority\", health.status === 200 && health.body.authority === false && health.body.p_real_increment === 0, health));\n\nconst rm = await call(new Request(ORIGIN + \"/.well-known/oauth-protected-resource\"));\nout.push(check(\"resource_metadata_exact_origin\", rm.status === 200 && rm.body.resource === ORIGIN && rm.body.authorization_servers?.[0] === ORIGIN, rm));\n\nconst as = await call(new Request(ORIGIN + \"/.well-known/oauth-authorization-server\"));\nout.push(check(\"auth_metadata_private_key_jwt_only\", as.status === 200 && JSON.stringify(as.body.token_endpoint_auth_methods_supported) === JSON.stringify([\"private_key_jwt\"]) && as.body.client_id_metadata_document_supported === true, as));\n\nconst badClientUrl = new URL(ORIGIN + \"/authorize\");\nfor (const [k,v] of Object.entries({\n client_id:\"https://attacker.example/client.json\", redirect_uri:REDIRECT, response_type:\"code\", resource:ORIGIN,\n scope:SCOPE, state:\"s1\", code_challenge:cc, code_challenge_method:\"S256\"\n})) badClientUrl.searchParams.set(k,String(v));\nconst badClient = await call(new Request(badClientUrl));\nout.push(check(\"authorize_wrong_client_rejected\", badClient.status === 400 && badClient.body.error === \"unauthorized_client\", badClient));\n\nconst badRedirectUrl = new URL(ORIGIN + \"/authorize\");\nfor (const [k,v] of Object.entries({\n client_id:CLIENT, redirect_uri:\"https://attacker.example/cb\", response_type:\"code\", resource:ORIGIN,\n scope:SCOPE, state:\"s2\", code_challenge:cc, code_challenge_method:\"S256\"\n})) badRedirectUrl.searchParams.set(k,String(v));\nconst badRedirect = await call(new Request(badRedirectUrl));\nout.push(check(\"authorize_wrong_redirect_rejected\", badRedirect.status === 400 && badRedirect.body.error === \"invalid_request\", badRedirect));\n\nconst badResourceUrl = new URL(ORIGIN + \"/authorize\");\nfor (const [k,v] of Object.entries({\n client_id:CLIENT, redirect_uri:REDIRECT, response_type:\"code\", resource:\"https://attacker.example\",\n scope:SCOPE, state:\"s3\", code_challenge:cc, code_challenge_method:\"S256\"\n})) badResourceUrl.searchParams.set(k,String(v));\nconst badResource = await call(new Request(badResourceUrl));\nout.push(check(\"authorize_wrong_resource_rejected\", badResource.status === 400 && badResource.body.error === \"invalid_target\", badResource));\n\nconst badPkceUrl = new URL(ORIGIN + \"/authorize\");\nfor (const [k,v] of Object.entries({\n client_id:CLIENT, redirect_uri:REDIRECT, response_type:\"code\", resource:ORIGIN,\n scope:SCOPE, state:\"s4\", code_challenge:\"short\", code_challenge_method:\"plain\"\n})) badPkceUrl.searchParams.set(k,String(v));\nconst badPkce = await call(new Request(badPkceUrl));\nout.push(check(\"authorize_non_s256_pkce_rejected\", badPkce.status === 400, badPkce));\n\nconst okUrl = new URL(ORIGIN + \"/authorize\");\nfor (const [k,v] of Object.entries({\n client_id:CLIENT, redirect_uri:REDIRECT, response_type:\"code\", resource:ORIGIN,\n scope:SCOPE, state:\"selftest-state\", code_challenge:cc, code_challenge_method:\"S256\"\n})) okUrl.searchParams.set(k,String(v));\nconst auth = await handler(new Request(okUrl));\nconst loc = auth.headers.get(\"location\") || \"\";\nconst locUrl = new URL(loc);\nconst code = locUrl.searchParams.get(\"code\") || \"\";\nout.push(check(\"authorize_exact_chatgpt_cimd_redirect\", auth.status === 302 && locUrl.origin + locUrl.pathname === REDIRECT && !!code && locUrl.searchParams.get(\"state\") === \"selftest-state\" && locUrl.searchParams.get(\"iss\") === ORIGIN, {status:auth.status,location_origin_path:locUrl.origin+locUrl.pathname,has_code:!!code,state:locUrl.searchParams.get(\"state\"),iss:locUrl.searchParams.get(\"iss\")}));\n\nconst noAssertionForm = new URLSearchParams({\n grant_type:\"authorization_code\", code, redirect_uri:REDIRECT, client_id:CLIENT, code_verifier:verifier, resource:ORIGIN,\n});\nconst noAssertion = await call(new Request(ORIGIN + \"/token\", {\n method:\"POST\", headers:{\"content-type\":\"application/x-www-form-urlencoded\"}, body:noAssertionForm\n}));\nout.push(check(\"token_none_auth_rejected\", noAssertion.status === 401 && noAssertion.body.error === \"invalid_client\", noAssertion));\n\nconst forgedForm = new URLSearchParams(noAssertionForm);\nforgedForm.set(\"client_assertion_type\",\"urn:ietf:params:oauth:client-assertion-type:jwt-bearer\");\nforgedForm.set(\"client_assertion\",\"not-a-jwt\");\nconst forged = await call(new Request(ORIGIN + \"/token\", {\n method:\"POST\", headers:{\"content-type\":\"application/x-www-form-urlencoded\"}, body:forgedForm\n}));\nout.push(check(\"token_forged_private_key_jwt_rejected\", forged.status === 401 && forged.body.error === \"invalid_client\", forged));\n\nconst {privateKey}=await generateKeyPair(\"RS256\");\nconst syntacticallyValidForged = await new SignJWT({})\n .setProtectedHeader({alg:\"RS256\",kid:\"cimd-20260428030119\"})\n .setIssuer(CLIENT)\n .setSubject(CLIENT)\n .setAudience(ORIGIN+\"/token\")\n .setIssuedAt()\n .setExpirationTime(\"2m\")\n .setJti(\"selftest-\"+crypto.randomUUID())\n .sign(privateKey);\nconst forgedCryptoForm = new URLSearchParams(noAssertionForm);\nforgedCryptoForm.set(\"client_assertion_type\",\"urn:ietf:params:oauth:client-assertion-type:jwt-bearer\");\nforgedCryptoForm.set(\"client_assertion\",syntacticallyValidForged);\nconst forgedCrypto = await call(new Request(ORIGIN + \"/token\", {\n method:\"POST\", headers:{\"content-type\":\"application/x-www-form-urlencoded\"}, body:forgedCryptoForm\n}));\nout.push(check(\"token_valid_shape_wrong_crypto_key_rejected\", forgedCrypto.status === 401 && forgedCrypto.body.error === \"invalid_client\" && forgedCrypto.body.error_description === \"CLIENT_ASSERTION_SIGNATURE_OR_CLAIMS_INVALID\", forgedCrypto));\n\nconst codeHash = await sha256Text(code);\nconst codeRow: any = await sqlite.execute({sql:\"SELECT used FROM auth_codes WHERE code_hash=?\",args:[codeHash]});\nout.push(check(\"forged_assertion_does_not_burn_auth_code\", Number(codeRow.rows?.[0]?.used) === 0, codeRow.rows?.[0] || null));\n\nconst toolBody = {\n jsonrpc:\"2.0\", id:77, method:\"tools/call\",\n params:{name:\"brain-session-attest\",arguments:{\n challenge_sha256:\"a\".repeat(64), requested_agent_id:\"selftest\", requested_workstream:\"global\", requested_capabilities:[\"reasoning\"]\n },_meta:{\"openai/session\":\"forged-session-in-request-body\"}}\n};\ntoolBody.params._meta = {\n ...toolBody.params._meta,\n \"io.modelcontextprotocol/protocolVersion\":\"2026-07-28\",\n \"io.modelcontextprotocol/clientInfo\":{name:\"selftest\",version:\"1\"},\n \"io.modelcontextprotocol/clientCapabilities\":{}\n};\nconst noBearer = await call(new Request(ORIGIN + \"/\", {\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n \"accept\":\"application/json, text/event-stream\",\n \"mcp-protocol-version\":\"2026-07-28\",\n \"mcp-method\":\"tools/call\",\n \"mcp-name\":\"brain-session-attest\"\n },\n body:JSON.stringify(toolBody)\n}));\nconst noBearerChallenge = noBearer.body.result?._meta?.[\"mcp/www_authenticate\"]?.[0] || \"\";\nout.push(check(\n \"tool_session_meta_without_bearer_rejected\",\n noBearer.status === 200 &&\n noBearer.body.result?.isError === true &&\n noBearerChallenge.includes('error=\"invalid_token\"') &&\n noBearerChallenge.includes('error_description='),\n noBearer,\n));\n\nconst syntheticToken = \"synthetic-\" + crypto.randomUUID();\nconst syntheticTokenHash = await sha256Text(syntheticToken);\nconst syntheticJtiHash = await sha256Text(\"synthetic-jti-\" + crypto.randomUUID());\nconst tnow = Date.now();\nawait sqlite.execute({\n sql: `INSERT INTO access_tokens\n (token_hash,client_id,assertion_jti_hash,assertion_kid,scope,expires_at,used,created_at)\n VALUES(?,?,?,?,?,?,0,?)`,\n args:[syntheticTokenHash,CLIENT,syntheticJtiHash,\"synthetic-selftest-kid\",SCOPE,tnow+120000,tnow],\n});\nconst positiveBody = JSON.parse(JSON.stringify(toolBody));\npositiveBody.id = 78;\npositiveBody.params.arguments.requested_agent_id = \"selftest-positive\";\npositiveBody.params._meta[\"openai/session\"] = \"synthetic-host-session\";\npositiveBody.params._meta[\"openai/subject\"] = \"synthetic-host-subject\";\nconst positiveReq = () => new Request(ORIGIN + \"/mcp\", {\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n \"accept\":\"application/json, text/event-stream\",\n \"mcp-protocol-version\":\"2026-07-28\",\n \"mcp-method\":\"tools/call\",\n \"mcp-name\":\"brain-session-attest\",\n \"authorization\":\"Bearer \"+syntheticToken,\n },\n body:JSON.stringify(positiveBody),\n});\nconst positive = await call(positiveReq());\nconst obs = positive.body.result?.structuredContent;\nout.push(check(\n \"synthetic_single_use_bearer_creates_hashed_observation\",\n positive.status===200 &&\n positive.body.result?.isError!==true &&\n obs?.schema===\"CHATGPT_HOST_SESSION_ATTESTATION_OBSERVATION_V1\" &&\n obs?.classification===\"CANDIDATE_NONAUTHORITY_HOST_SESSION_OBSERVATION\" &&\n obs?.host_client===\"CHATGPT_CIMD_PRIVATE_KEY_JWT_VERIFIED\" &&\n /^[0-9a-f]{64}$/.test(obs?.session_ref||\"\") &&\n /^[0-9a-f]{64}$/.test(obs?.subject_ref||\"\") &&\n obs?.p_real_increment===0 &&\n obs?.canonical_brain_mutation===false,\n positive,\n));\nconst tokenAfter: any = await sqlite.execute({sql:\"SELECT used FROM access_tokens WHERE token_hash=?\",args:[syntheticTokenHash]});\nout.push(check(\"admission_bearer_consumed_exactly_once\", Number(tokenAfter.rows?.[0]?.used)===1, tokenAfter.rows?.[0]||null));\nconst replay = await call(positiveReq());\nout.push(check(\n \"admission_bearer_replay_rejected\",\n replay.status===200 &&\n replay.body.result?.isError===true &&\n String(replay.body.result?.content?.[0]?.text||\"\").includes(\"OAuth bearer token required\"),\n replay,\n));\nawait sqlite.execute({sql:\"DELETE FROM access_tokens WHERE token_hash=?\",args:[syntheticTokenHash]});\nif (obs?.request_hash) await sqlite.execute({sql:\"DELETE FROM observations WHERE request_hash=?\",args:[obs.request_hash]});\n\nconst schema: any = await sqlite.execute(\"PRAGMA table_info(observations)\");\nconst names = (schema.rows || []).map((r:any)=>String(r.name));\nout.push(check(\"observation_schema_has_no_raw_session_subject_org\", !names.includes(\"session\") && !names.includes(\"subject\") && !names.includes(\"organization\") && names.includes(\"session_ref\") && names.includes(\"subject_ref\") && names.includes(\"organization_ref\"), names));\n\nawait sqlite.execute({sql:\"DELETE FROM auth_codes WHERE code_hash=?\",args:[codeHash]});\n\nconst failed = out.filter(x=>!x.pass);\nconsole.log(JSON.stringify({\n schema:\"BRAIN_CHATGPT_ADMISSION_CANARY_SELFTEST_V1\",\n total:out.length,\n passed:out.length-failed.length,\n failed:failed.length,\n pass:failed.length===0,\n tests:out\n}, null, 2));\n","label",[135],"1cab053c-8f30-4ca9-902d-230c95550ead","protocol_probe.ts","9982893c-abbb-11f1-b5b1-1607ee4eb77e",9,["D",1788897089884],2,"import handler from \"./main.ts\";\n\nconst ORIGIN=\"https://mosadek--01a08279ff907328a817bbb2131ded40.web.val.run\";\nasync function probe(body:any){\n const r=await handler(new Request(ORIGIN+\"/mcp\",{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n \"accept\":\"application/json, text/event-stream\",\n \"mcp-protocol-version\":\"2026-07-28\"\n },\n body:JSON.stringify(body)\n }));\n const text=await r.text();\n console.log(JSON.stringify({status:r.status,headers:Object.fromEntries(r.headers.entries()),text}));\n}\nasync function modern(method:string, id:number, params:any={}, name?:string){\n const meta={\n \"io.modelcontextprotocol/protocolVersion\":\"2026-07-28\",\n \"io.modelcontextprotocol/clientInfo\":{name:\"selftest\",version:\"1\"},\n \"io.modelcontextprotocol/clientCapabilities\":{}\n };\n const body={jsonrpc:\"2.0\",id,method,params:{...params,_meta:meta}};\n const headers:any={\n \"content-type\":\"application/json\",\n \"accept\":\"application/json, text/event-stream\",\n \"mcp-protocol-version\":\"2026-07-28\",\n \"mcp-method\":method\n };\n if(name) headers[\"mcp-name\"]=name;\n const r=await handler(new Request(ORIGIN+\"/mcp\",{method:\"POST\",headers,body:JSON.stringify(body)}));\n const text=await r.text();\n console.log(JSON.stringify({method,status:r.status,headers:Object.fromEntries(r.headers.entries()),text}));\n}\nawait modern(\"server/discover\",1,{});\nawait modern(\"tools/list\",2,{});\n",[147],"a61f866f-c816-4a71-acca-ec17916de02e",["D",1788897465557],5,[28],"93717156-4bae-4442-b148-fddc2d762e51","README.md","01a08279-ff90-7328-a817-b5a38f5e46ce",1,["D",1788895428429],"# MCP server\n\nA minimal MCP server with one example tool (that gets the current time in a\ngiven timezone).\n\nRemix this val to create your own MCP server on Val\nTown—[**_just like the MCP Core Maintainer team!_**](https://blog.val.town/mcp-core-maintainers)\n\nThis MCP server (<50 LOC in [`main.ts`](./main.ts)) is live on\n[mcp-time.val.run](https://mcp-time.val.run) if you'd like to test it\n([playground.ai.cloudflare.com](https://playground.ai.cloudflare.com) is a great\nplace to test an MCP server quickly). It's built on the v2 TypeScript SDK,\ncompatible with “MCP 2.0” (technically, the\n[2026-07-28 spec](https://modelcontextprotocol.io/specification/2026-07-28)). It\nalso supports the legacy spec, for MCP clients that haven't upgraded yet.",[159],"pulls","branches","forks","envVars",{"_172":61,"_174":61},"connections",{"_172":61,"_173":61},"count","unfilledCount","emptyCount",{"_43":158,"_32":159,"_30":160,"_137":-5,"_41":42,"_40":161,"_139":125,"_38":189,"_13":61,"_33":20,"_35":163,"_24":25,"_144":-5,"_180":190,"_27":191},{"_43":154,"_32":28,"_30":31,"_137":-5,"_41":42,"_40":14,"_139":25,"_38":186,"_13":156,"_33":34,"_35":37,"_24":25,"_144":-5,"_180":187,"_27":188},{"_43":146,"_32":147,"_30":148,"_137":-5,"_41":42,"_40":149,"_139":125,"_38":183,"_13":151,"_33":142,"_35":152,"_24":25,"_144":-5,"_180":184,"_27":185},{"_43":134,"_32":135,"_30":136,"_137":-5,"_41":42,"_40":138,"_139":125,"_38":179,"_13":141,"_33":142,"_35":143,"_24":25,"_144":-5,"_180":181,"_27":182},["D",1788897301321],"children",[],[135],["D",1788897089884],[],[147],["D",1788897465557],[],[28],["D",1788895428429],[],[159],["D",1788895428429],["D",1789504908499],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"ctx",{"_80":-5,"_127":230,"_231":232,"_233":234,"_235":25,"_236":25,"_237":25,"_238":125,"_239":-5,"_240":-7,"_241":-7,"_242":61,"_243":25,"_244":25,"_245":-5,"_246":25,"_247":25,"_248":25,"_249":-5},"ENV",{"_201":202,"_203":204,"_205":88,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v13