[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_209":210,"_211":212},"routes/_app.x.$handle.$name",{"_98":97,"_32":45,"_107":88,"_27":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":125,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",17,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","01a08279-ff90-7328-a817-bbb2131ded40","name","fileType","http","content","import {\n createMcpHandler,\n McpServer,\n} from \"npm:@modelcontextprotocol/server@2\";\nimport * as z from \"npm:zod@4/v4\";\nimport {\n createRemoteJWKSet,\n decodeProtectedHeader,\n jwtVerify,\n} from \"npm:jose@6\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst CHATGPT_CLIENT_ID = \"https://chatgpt.com/oauth/client.json\";\nconst CHATGPT_REDIRECT_URI = \"https://chatgpt.com/connector_platform_oauth_redirect\";\nconst CHATGPT_JWKS = new URL(\"https://chatgpt.com/oauth/jwks.json\");\nconst PROJECT = \"mosadek/project-brain-live-v1-durable\";\nconst SCOPE = \"brain.admission.observe\";\nconst CHALLENGE_TTL_MS = 5 * 60_000;\nconst CODE_TTL_MS = 5 * 60_000;\nconst TOKEN_TTL_MS = 2 * 60_000;\nconst ASSERTION_MAX_LIFETIME_MS = 5 * 60_000;\nconst JWKS = createRemoteJWKSet(CHATGPT_JWKS);\nconst enc = new TextEncoder();\n\nfunction origin(req: Request) {\n return new URL(req.url).origin;\n}\n\nfunction json(data: unknown, status = 200, headers: HeadersInit = {}) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", ...headers },\n });\n}\n\nfunction manualRedirect(location: string) {\n return new Response(null, { status: 302, headers: { location } });\n}\n\nfunction b64url(bytes: Uint8Array) {\n let s = \"\";\n for (const b of bytes) s += String.fromCharCode(b);\n return btoa(s).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/g, \"\");\n}\n\nfunction randomToken(bytes = 32) {\n const v = new Uint8Array(bytes);\n crypto.getRandomValues(v);\n return b64url(v);\n}\n\nasync function sha256Text(s: string) {\n const d = await crypto.subtle.digest(\"SHA-256\", enc.encode(s));\n return [...new Uint8Array(d)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction canon(x: any): string {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canon).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map((k) => JSON.stringify(k) + \":\" + canon(x[k])).join(\",\") + \"}\";\n}\n\nfunction exactKeys(x: any, allowed: string[]) {\n if (!x || typeof x !== \"object\" || Array.isArray(x)) return false;\n const got = Object.keys(x).sort();\n const want = [...allowed].sort();\n return got.length === want.length && got.every((v, i) => v === want[i]);\n}\n\nfunction cleanString(v: unknown, max = 512) {\n return typeof v === \"string\" && v.length > 0 && v.length <= max && v.trim() === v && !/[\\u0000-\\u001f\\u007f]/.test(v);\n}\n\nasync function initDb() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS auth_codes (\n code_hash TEXT PRIMARY KEY,\n client_id TEXT NOT NULL,\n redirect_uri TEXT NOT NULL,\n code_challenge TEXT NOT NULL,\n resource TEXT NOT NULL,\n scope TEXT NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0,\n created_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS assertion_jtis (\n jti_hash TEXT PRIMARY KEY,\n assertion_exp INTEGER NOT NULL,\n created_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS access_tokens (\n token_hash TEXT PRIMARY KEY,\n client_id TEXT NOT NULL,\n assertion_jti_hash TEXT NOT NULL,\n assertion_kid TEXT NOT NULL,\n scope TEXT NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0,\n created_at INTEGER NOT NULL\n )`);\n try {\n await sqlite.execute(\"ALTER TABLE access_tokens ADD COLUMN used INTEGER NOT NULL DEFAULT 0\");\n } catch {\n // Existing canary DB may already have the column.\n }\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS admission_challenges (\n challenge_sha256 TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n requested_agent_id TEXT NOT NULL,\n requested_workstream TEXT NOT NULL,\n requested_capabilities_json TEXT NOT NULL,\n issued_at INTEGER NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS observations (\n observation_id TEXT PRIMARY KEY,\n project TEXT NOT NULL DEFAULT 'mosadek/project-brain-live-v1-durable',\n session_ref TEXT NOT NULL,\n subject_ref TEXT,\n organization_ref TEXT,\n token_hash TEXT NOT NULL,\n assertion_jti_hash TEXT NOT NULL,\n assertion_kid TEXT NOT NULL,\n request_hash TEXT NOT NULL UNIQUE,\n challenge_sha256 TEXT,\n challenge_issued_at INTEGER,\n challenge_expires_at INTEGER,\n requested_agent_id TEXT,\n requested_workstream TEXT,\n requested_capabilities_json TEXT NOT NULL,\n observed_at INTEGER NOT NULL,\n expires_at INTEGER NOT NULL\n )`);\n for (const migration of [\n \"ALTER TABLE observations ADD COLUMN project TEXT NOT NULL DEFAULT 'mosadek/project-brain-live-v1-durable'\",\n \"ALTER TABLE observations ADD COLUMN challenge_issued_at INTEGER\",\n \"ALTER TABLE observations ADD COLUMN challenge_expires_at INTEGER\",\n ]) {\n try { await sqlite.execute(migration); } catch {}\n }\n}\n\nasync function cleanup() {\n const n = Date.now();\n await sqlite.execute({ sql: \"DELETE FROM auth_codes WHERE expires_at < ?\", args: [n - 60_000] });\n await sqlite.execute({ sql: \"DELETE FROM assertion_jtis WHERE assertion_exp < ?\", args: [n - 60_000] });\n await sqlite.execute({ sql: \"DELETE FROM access_tokens WHERE expires_at < ?\", args: [n - 60_000] });\n await sqlite.execute({ sql: \"DELETE FROM admission_challenges WHERE expires_at < ?\", args: [n - 60_000] });\n}\n\nfunction oauthError(req: Request, code: string, description: string, status = 400) {\n return json({ error: code, error_description: description, iss: origin(req) }, status, {\n \"cache-control\": \"no-store\",\n pragma: \"no-cache\",\n });\n}\n\nfunction resourceMetadata(req: Request) {\n const o = origin(req);\n return {\n resource: o,\n authorization_servers: [o],\n scopes_supported: [SCOPE],\n bearer_methods_supported: [\"header\"],\n };\n}\n\nfunction authServerMetadata(req: Request) {\n const o = origin(req);\n return {\n issuer: o,\n authorization_endpoint: `${o}/authorize`,\n token_endpoint: `${o}/token`,\n scopes_supported: [SCOPE],\n response_types_supported: [\"code\"],\n grant_types_supported: [\"authorization_code\"],\n code_challenge_methods_supported: [\"S256\"],\n token_endpoint_auth_methods_supported: [\"private_key_jwt\"],\n token_endpoint_auth_signing_alg_values_supported: [\"RS256\"],\n client_id_metadata_document_supported: true,\n authorization_response_iss_parameter_supported: true,\n };\n}\n\nasync function authorize(req: Request) {\n const u = new URL(req.url);\n const o = u.origin;\n const q = u.searchParams;\n const clientId = q.get(\"client_id\") || \"\";\n const redirectUri = q.get(\"redirect_uri\") || \"\";\n const responseType = q.get(\"response_type\") || \"\";\n const resource = q.get(\"resource\") || \"\";\n const scope = q.get(\"scope\") || \"\";\n const state = q.get(\"state\");\n const challenge = q.get(\"code_challenge\") || \"\";\n const challengeMethod = q.get(\"code_challenge_method\") || \"\";\n\n if (clientId !== CHATGPT_CLIENT_ID) return oauthError(req, \"unauthorized_client\", \"Only the stable ChatGPT CIMD client is accepted.\");\n if (redirectUri !== CHATGPT_REDIRECT_URI) return oauthError(req, \"invalid_request\", \"redirect_uri mismatch.\");\n if (responseType !== \"code\") return oauthError(req, \"unsupported_response_type\", \"Only authorization_code is supported.\");\n if (resource !== o) return oauthError(req, \"invalid_target\", \"resource must exactly match this MCP origin.\");\n if (!scope.split(/\\s+/).includes(SCOPE)) return oauthError(req, \"invalid_scope\", \"Required admission scope missing.\");\n if (challengeMethod !== \"S256\" || !/^[A-Za-z0-9_-]{43,128}$/.test(challenge)) {\n return oauthError(req, \"invalid_request\", \"PKCE S256 challenge required.\");\n }\n\n const rawCode = randomToken(32);\n const codeHash = await sha256Text(rawCode);\n const n = Date.now();\n await sqlite.execute({\n sql: `INSERT INTO auth_codes\n (code_hash,client_id,redirect_uri,code_challenge,resource,scope,expires_at,used,created_at)\n VALUES(?,?,?,?,?,?,?,0,?)`,\n args: [codeHash, clientId, redirectUri, challenge, resource, scope, n + CODE_TTL_MS, n],\n });\n\n const back = new URL(redirectUri);\n back.searchParams.set(\"code\", rawCode);\n if (state !== null) back.searchParams.set(\"state\", state);\n back.searchParams.set(\"iss\", o);\n return manualRedirect(back.toString());\n}\n\nasync function verifyClientAssertion(assertion: string, tokenEndpoint: string) {\n let header: any;\n try {\n header = decodeProtectedHeader(assertion);\n } catch {\n throw new Error(\"CLIENT_ASSERTION_HEADER_INVALID\");\n }\n if (header.alg !== \"RS256\" || typeof header.kid !== \"string\" || !header.kid) {\n throw new Error(\"CLIENT_ASSERTION_HEADER_INVALID\");\n }\n\n let verified: any;\n try {\n verified = await jwtVerify(assertion, JWKS, {\n algorithms: [\"RS256\"],\n issuer: CHATGPT_CLIENT_ID,\n subject: CHATGPT_CLIENT_ID,\n audience: tokenEndpoint,\n clockTolerance: 5,\n });\n } catch {\n throw new Error(\"CLIENT_ASSERTION_SIGNATURE_OR_CLAIMS_INVALID\");\n }\n\n const p: any = verified.payload;\n if (typeof p.jti !== \"string\" || !p.jti) throw new Error(\"CLIENT_ASSERTION_JTI_REQUIRED\");\n if (!Number.isFinite(p.iat) || !Number.isFinite(p.exp)) throw new Error(\"CLIENT_ASSERTION_TIME_REQUIRED\");\n const issued = Number(p.iat) * 1000;\n const expires = Number(p.exp) * 1000;\n const n = Date.now();\n if (issued > n + 10_000 || expires <= n || expires <= issued || expires - issued > ASSERTION_MAX_LIFETIME_MS) {\n throw new Error(\"CLIENT_ASSERTION_TIME_INVALID\");\n }\n return { payload: p, kid: header.kid, jti: p.jti, expMs: expires };\n}\n\nasync function token(req: Request) {\n if (req.method !== \"POST\") return oauthError(req, \"invalid_request\", \"POST required.\", 405);\n const ct = req.headers.get(\"content-type\") || \"\";\n if (!ct.includes(\"application/x-www-form-urlencoded\")) return oauthError(req, \"invalid_request\", \"form encoding required.\");\n const form = new URLSearchParams(await req.text());\n const grantType = form.get(\"grant_type\") || \"\";\n const code = form.get(\"code\") || \"\";\n const redirectUri = form.get(\"redirect_uri\") || \"\";\n const clientId = form.get(\"client_id\") || \"\";\n const verifier = form.get(\"code_verifier\") || \"\";\n const resource = form.get(\"resource\") || \"\";\n const assertionType = form.get(\"client_assertion_type\") || \"\";\n const assertion = form.get(\"client_assertion\") || \"\";\n const o = origin(req);\n const tokenEndpoint = `${o}/token`;\n\n if (grantType !== \"authorization_code\") return oauthError(req, \"unsupported_grant_type\", \"authorization_code required.\");\n if (clientId !== CHATGPT_CLIENT_ID) return oauthError(req, \"invalid_client\", \"Stable ChatGPT CIMD client_id required.\", 401);\n if (redirectUri !== CHATGPT_REDIRECT_URI) return oauthError(req, \"invalid_grant\", \"redirect_uri mismatch.\");\n if (resource !== o) return oauthError(req, \"invalid_target\", \"resource mismatch.\");\n if (!code || !verifier) return oauthError(req, \"invalid_grant\", \"code and code_verifier required.\");\n if (assertionType !== \"urn:ietf:params:oauth:client-assertion-type:jwt-bearer\" || !assertion) {\n return oauthError(req, \"invalid_client\", \"private_key_jwt client assertion required.\", 401);\n }\n\n let av: { payload: any; kid: string; jti: string; expMs: number };\n try {\n av = await verifyClientAssertion(assertion, tokenEndpoint);\n } catch (e) {\n return oauthError(req, \"invalid_client\", e instanceof Error ? e.message : \"invalid assertion\", 401);\n }\n\n const codeHash = await sha256Text(code);\n const rows: any = await sqlite.execute({\n sql: \"SELECT * FROM auth_codes WHERE code_hash=? LIMIT 1\",\n args: [codeHash],\n });\n const row: any = rows.rows?.[0];\n const n = Date.now();\n if (!row || Number(row.used) !== 0 || Number(row.expires_at) <= n) return oauthError(req, \"invalid_grant\", \"code invalid, expired, or already used.\");\n if (String(row.client_id) !== clientId || String(row.redirect_uri) !== redirectUri || String(row.resource) !== resource) {\n return oauthError(req, \"invalid_grant\", \"authorization code binding mismatch.\");\n }\n\n const derivedChallenge = b64url(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", enc.encode(verifier))));\n if (derivedChallenge !== String(row.code_challenge)) return oauthError(req, \"invalid_grant\", \"PKCE verification failed.\");\n\n const jtiHash = await sha256Text(av.jti);\n try {\n await sqlite.execute({\n sql: \"INSERT INTO assertion_jtis(jti_hash,assertion_exp,created_at) VALUES(?,?,?)\",\n args: [jtiHash, av.expMs, n],\n });\n } catch {\n return oauthError(req, \"invalid_client\", \"client assertion replay rejected.\", 401);\n }\n\n const consume: any = await sqlite.execute({\n sql: \"UPDATE auth_codes SET used=1 WHERE code_hash=? AND used=0 AND expires_at>?\",\n args: [codeHash, n],\n });\n if (Number(consume.rowsAffected || 0) !== 1) return oauthError(req, \"invalid_grant\", \"authorization code replay rejected.\");\n\n const rawToken = randomToken(32);\n const tokenHash = await sha256Text(rawToken);\n await sqlite.execute({\n sql: `INSERT INTO access_tokens\n (token_hash,client_id,assertion_jti_hash,assertion_kid,scope,expires_at,used,created_at)\n VALUES(?,?,?,?,?,?,0,?)`,\n args: [tokenHash, clientId, jtiHash, av.kid, String(row.scope), n + TOKEN_TTL_MS, n],\n });\n\n return json({\n access_token: rawToken,\n token_type: \"Bearer\",\n expires_in: Math.floor(TOKEN_TTL_MS / 1000),\n scope: String(row.scope),\n }, 200, { \"cache-control\": \"no-store\", pragma: \"no-cache\" });\n}\n\nasync function consumeBearer(req: Request) {\n const h = req.headers.get(\"authorization\") || \"\";\n const m = /^Bearer\\s+(.+)$/i.exec(h);\n if (!m) return null;\n const tokenHash = await sha256Text(m[1]);\n const r: any = await sqlite.execute({\n sql: \"UPDATE access_tokens SET used=1 WHERE token_hash=? AND expires_at>? AND used=0 RETURNING *\",\n args: [tokenHash, Date.now()],\n });\n return r.rows?.[0] ? { ...r.rows[0], token_hash: tokenHash } : null;\n}\n\nasync function issueChallenge(args: any) {\n const caps = [...new Set((args.requested_capabilities || []).map(String))].sort();\n const n = Date.now();\n const challengeSha256 = await sha256Text(PROJECT + \"\\0\" + randomToken(32));\n await sqlite.execute({\n sql: `INSERT INTO admission_challenges\n (challenge_sha256,project,requested_agent_id,requested_workstream,requested_capabilities_json,issued_at,expires_at,used)\n VALUES(?,?,?,?,?,?,?,0)`,\n args:[\n challengeSha256,PROJECT,args.requested_agent_id,args.requested_workstream,canon(caps),n,n+CHALLENGE_TTL_MS,\n ],\n });\n return {\n content:[{type:\"text\",text:\"Fresh Project Brain admission challenge issued. It is candidate-only and grants no authority.\"}],\n structuredContent:{\n schema:\"PROJECT_BRAIN_ADMISSION_CHALLENGE_V1\",\n project:PROJECT,\n challenge_sha256:challengeSha256,\n requested_agent_id:args.requested_agent_id,\n requested_workstream:args.requested_workstream,\n requested_capabilities:caps,\n issued_at_ms:n,\n expires_at_ms:n+CHALLENGE_TTL_MS,\n p_real_increment:0,\n canonical_brain_mutation:false,\n },\n };\n}\n\nasync function consumeChallenge(args:any,caps:string[]) {\n const n=Date.now();\n const r:any=await sqlite.execute({\n sql:`UPDATE admission_challenges SET used=1\n WHERE challenge_sha256=? AND project=? AND requested_agent_id=? AND requested_workstream=?\n AND requested_capabilities_json=? AND issued_at<=? AND expires_at>? AND expires_at>issued_at\n AND (expires_at-issued_at)<=? AND used=0\n RETURNING issued_at,expires_at`,\n args:[\n String(args.challenge_sha256||\"\").toLowerCase(),PROJECT,args.requested_agent_id,args.requested_workstream,\n canon(caps),n,n,CHALLENGE_TTL_MS,\n ],\n });\n return r.rows?.[0] ?? null;\n}\n\nfunction mcpToolError(text: string, challenge?: string) {\n const result: any = {\n isError: true,\n content: [{ type: \"text\", text }],\n };\n if (challenge) result._meta = { \"mcp/www_authenticate\": [challenge] };\n return result;\n}\n\nasync function handleAttestTool(args: any, ctx: any) {\n const req: Request | undefined = ctx?.http?.req;\n if (!req) return mcpToolError(\"HTTP transport required for host-authenticated admission.\");\n const o = origin(req);\n const resourceMetadataUrl = `${o}/.well-known/oauth-protected-resource`;\n const auth = await consumeBearer(req);\n if (!auth) {\n return mcpToolError(\n \"OAuth bearer token required.\",\n `Bearer resource_metadata=\"${resourceMetadataUrl}\", scope=\"${SCOPE}\", error=\"invalid_token\", error_description=\"OpenAI-authenticated linking is required to create a host/session observation\"`,\n );\n }\n if (!String(auth.scope).split(/\\s+/).includes(SCOPE)) return mcpToolError(\"Required scope missing.\");\n\n const challenge = String(args.challenge_sha256 || \"\").toLowerCase();\n const caps = [...new Set((args.requested_capabilities || []).map(String))].sort();\n\n // OpenAI client-supplied metadata is delivered in MCP request _meta. The\n // 2026-07-28 SDK validates/lifts its reserved MCP envelope before this\n // handler runs; non-reserved OpenAI keys remain available here.\n const meta: any = ctx?.mcpReq?._meta || {};\n const sessionRaw = meta[\"openai/session\"];\n const subjectRaw = meta[\"openai/subject\"];\n const orgRaw = meta[\"openai/organization\"];\n if (!cleanString(sessionRaw, 1024)) return mcpToolError(\"Host-provided openai/session metadata missing or invalid.\");\n if (subjectRaw !== undefined && !cleanString(subjectRaw, 1024)) return mcpToolError(\"openai/subject metadata invalid.\");\n if (orgRaw !== undefined && !cleanString(orgRaw, 1024)) return mcpToolError(\"openai/organization metadata invalid.\");\n\n const challengeRow = await consumeChallenge(args,caps);\n if (!challengeRow) return mcpToolError(\"Admission challenge is absent, stale, already used, or does not match the declared identity/workstream/capabilities.\");\n\n const sessionRef = await sha256Text(\"session\\0\" + sessionRaw);\n const subjectRef = subjectRaw === undefined ? null : await sha256Text(\"subject\\0\" + subjectRaw);\n const organizationRef = orgRaw === undefined ? null : await sha256Text(\"organization\\0\" + orgRaw);\n const requestCore = {\n project: PROJECT,\n session_ref: sessionRef,\n subject_ref: subjectRef,\n organization_ref: organizationRef,\n challenge_sha256: challenge,\n challenge_issued_at_ms: Number(challengeRow.issued_at),\n challenge_expires_at_ms: Number(challengeRow.expires_at),\n requested_agent_id: args.requested_agent_id,\n requested_workstream: args.requested_workstream,\n requested_capabilities: caps,\n assertion_jti_hash: String(auth.assertion_jti_hash),\n assertion_kid: String(auth.assertion_kid),\n };\n const requestHash = await sha256Text(canon(requestCore));\n const observationId = \"obs_\" + requestHash.slice(0, 32);\n const n = Date.now();\n const expiresAt = Math.min(Number(auth.expires_at), Number(challengeRow.expires_at), n + 5 * 60_000);\n\n await sqlite.execute({\n sql: `INSERT INTO observations\n (observation_id,project,session_ref,subject_ref,organization_ref,token_hash,assertion_jti_hash,assertion_kid,request_hash,\n challenge_sha256,challenge_issued_at,challenge_expires_at,requested_agent_id,requested_workstream,requested_capabilities_json,observed_at,expires_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(request_hash) DO NOTHING`,\n args: [\n observationId, PROJECT, sessionRef, subjectRef, organizationRef, String(auth.token_hash), String(auth.assertion_jti_hash),\n String(auth.assertion_kid), requestHash, challenge, Number(challengeRow.issued_at), Number(challengeRow.expires_at),\n args.requested_agent_id, args.requested_workstream, canon(caps), n, expiresAt,\n ],\n });\n\n const observation = {\n schema: \"CHATGPT_HOST_SESSION_ATTESTATION_OBSERVATION_V1\",\n project: PROJECT,\n classification: \"CANDIDATE_NONAUTHORITY_HOST_SESSION_OBSERVATION\",\n host_client: \"CHATGPT_CIMD_PRIVATE_KEY_JWT_VERIFIED\",\n session_ref: sessionRef,\n subject_ref: subjectRef,\n organization_ref: organizationRef,\n challenge_sha256: challenge,\n challenge_issued_at_ms: Number(challengeRow.issued_at),\n challenge_expires_at_ms: Number(challengeRow.expires_at),\n requested_agent_id: args.requested_agent_id,\n requested_workstream: args.requested_workstream,\n requested_capabilities: caps,\n assertion_jti_hash: String(auth.assertion_jti_hash),\n assertion_kid: String(auth.assertion_kid),\n observation_id: observationId,\n request_hash: requestHash,\n observed_at_ms: n,\n expires_at_ms: expiresAt,\n p_real_increment: 0,\n canonical_brain_mutation: false,\n raw_session_persisted: false,\n raw_subject_persisted: false,\n raw_organization_persisted: false,\n };\n\n return {\n content: [{ type: \"text\", text: \"ChatGPT host/session observation created. Candidate only; no Brain authority or P_real increment.\" }],\n structuredContent: observation,\n };\n}\n\nconst challengeDescriptor: any = {\n title:\"Issue Project Brain admission challenge\",\n description:\"Issue a short-lived, project-bound challenge for the current requested logical identity, workstream, and capability declaration. This is candidate-only and grants no authority.\",\n inputSchema:z.object({\n requested_agent_id:z.string().min(1).max(256),\n requested_workstream:z.string().min(1).max(128),\n requested_capabilities:z.array(z.string().min(1).max(128)).max(128),\n }),\n outputSchema:z.object({\n schema:z.literal(\"PROJECT_BRAIN_ADMISSION_CHALLENGE_V1\"),\n project:z.literal(PROJECT),\n challenge_sha256:z.string().regex(/^[0-9a-f]{64}$/),\n requested_agent_id:z.string(),\n requested_workstream:z.string(),\n requested_capabilities:z.array(z.string()),\n issued_at_ms:z.number().int(),\n expires_at_ms:z.number().int(),\n p_real_increment:z.literal(0),\n canonical_brain_mutation:z.literal(false),\n }),\n annotations:{readOnlyHint:false,destructiveHint:false,openWorldHint:false,idempotentHint:false},\n securitySchemes:[{type:\"noauth\"}],\n _meta:{securitySchemes:[{type:\"noauth\"}]},\n};\n\nconst descriptor: any = {\n title: \"Project Brain session provenance canary\",\n description: \"Create a candidate-only Project Brain execution-incarnation observation bound to ChatGPT host-authenticated OAuth and host-provided session metadata. This does not grant Brain authority or increment P_real.\",\n inputSchema: z.object({\n challenge_sha256: z.string().regex(/^[0-9a-f]{64}$/),\n requested_agent_id: z.string().min(1).max(256),\n requested_workstream: z.string().min(1).max(128),\n requested_capabilities: z.array(z.string().min(1).max(128)).max(128),\n }),\n outputSchema: z.object({\n schema: z.literal(\"CHATGPT_HOST_SESSION_ATTESTATION_OBSERVATION_V1\"),\n project: z.literal(PROJECT),\n classification: z.literal(\"CANDIDATE_NONAUTHORITY_HOST_SESSION_OBSERVATION\"),\n host_client: z.literal(\"CHATGPT_CIMD_PRIVATE_KEY_JWT_VERIFIED\"),\n session_ref: z.string().regex(/^[0-9a-f]{64}$/),\n subject_ref: z.string().regex(/^[0-9a-f]{64}$/).nullable(),\n organization_ref: z.string().regex(/^[0-9a-f]{64}$/).nullable(),\n challenge_sha256: z.string().regex(/^[0-9a-f]{64}$/),\n challenge_issued_at_ms: z.number().int(),\n challenge_expires_at_ms: z.number().int(),\n requested_agent_id: z.string(),\n requested_workstream: z.string(),\n requested_capabilities: z.array(z.string()),\n assertion_jti_hash: z.string().regex(/^[0-9a-f]{64}$/),\n assertion_kid: z.string(),\n observation_id: z.string(),\n request_hash: z.string().regex(/^[0-9a-f]{64}$/),\n observed_at_ms: z.number().int(),\n expires_at_ms: z.number().int(),\n p_real_increment: z.literal(0),\n canonical_brain_mutation: z.literal(false),\n raw_session_persisted: z.literal(false),\n raw_subject_persisted: z.literal(false),\n raw_organization_persisted: z.literal(false),\n }),\n annotations: {\n readOnlyHint: false,\n destructiveHint: false,\n openWorldHint: false,\n idempotentHint: true,\n },\n securitySchemes: [{ type: \"oauth2\", scopes: [SCOPE] }],\n _meta: { securitySchemes: [{ type: \"oauth2\", scopes: [SCOPE] }] },\n};\n\nconst mcpHandler = createMcpHandler(() => {\n const server = new McpServer({ name: \"project-brain-chatgpt-admission-canary\", version: \"1.1.0\" });\n server.registerTool(\"brain-admission-challenge\", challengeDescriptor, async (args:any) => issueChallenge(args));\n server.registerTool(\"brain-session-attest\", descriptor, async (args: any, ctx: any) => handleAttestTool(args, ctx));\n return server;\n});\n\nawait initDb();\n\nexport default async function handler(req: Request): Promise {\n await cleanup();\n const u = new URL(req.url);\n\n if (req.method === \"GET\" && u.pathname === \"/.well-known/oauth-protected-resource\") {\n return json(resourceMetadata(req), 200, { \"cache-control\": \"no-store\" });\n }\n if (req.method === \"GET\" && (u.pathname === \"/.well-known/oauth-authorization-server\" || u.pathname === \"/.well-known/openid-configuration\")) {\n return json(authServerMetadata(req), 200, { \"cache-control\": \"no-store\" });\n }\n if (u.pathname === \"/authorize\") return authorize(req);\n if (u.pathname === \"/token\") return token(req);\n if (req.method === \"GET\" && u.pathname === \"/health\") {\n return json({\n ok: true,\n schema: \"BRAIN_CHATGPT_ADMISSION_CANARY_HEALTH_V1\",\n authority: false,\n p_real_increment: 0,\n required_client_id: CHATGPT_CLIENT_ID,\n token_endpoint_auth: \"private_key_jwt\",\n required_tool_scope: SCOPE,\n project: PROJECT,\n challenge_ttl_ms: CHALLENGE_TTL_MS,\n raw_host_metadata_persisted: false,\n admission_bearer_semantics: \"single_use\",\n access_token_ttl_ms: TOKEN_TTL_MS,\n });\n }\n\n return mcpHandler.fetch(req);\n}\n","import {\n createMcpHandler,\n McpServer,\n} from \"npm:@modelcontextprotocol/server@2\";\nimport * as z from \"npm:zod@4/v4\";\nimport {\n createLocalJWKSet,\n decodeProtectedHeader,\n jwtVerify,\n} from \"npm:jose@6\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst CHATGPT_CLIENT_ID = \"https://chatgpt.com/oauth/client.json\";\nconst CHATGPT_REDIRECT_URI = \"https://chatgpt.com/connector_platform_oauth_redirect\";\nconst CHATGPT_JWKS = new URL(\"https://chatgpt.com/oauth/jwks.json\");\nconst PROJECT = \"mosadek/project-brain-live-v1-durable\";\nconst SCOPE = \"brain.admission.observe\";\nconst CHALLENGE_TTL_MS = 5 * 60_000;\nconst CODE_TTL_MS = 5 * 60_000;\nconst TOKEN_TTL_MS = 2 * 60_000;\nconst ASSERTION_MAX_LIFETIME_MS = 5 * 60_000;\nconst enc = new TextEncoder();\n\nfunction origin(req: Request) {\n return new URL(req.url).origin;\n}\n\nfunction json(data: unknown, status = 200, headers: HeadersInit = {}) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", ...headers },\n });\n}\n\nfunction manualRedirect(location: string) {\n return new Response(null, { status: 302, headers: { location } });\n}\n\nfunction b64url(bytes: Uint8Array) {\n let s = \"\";\n for (const b of bytes) s += String.fromCharCode(b);\n return btoa(s).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/g, \"\");\n}\n\nfunction randomToken(bytes = 32) {\n const v = new Uint8Array(bytes);\n crypto.getRandomValues(v);\n return b64url(v);\n}\n\nasync function sha256Text(s: string) {\n const d = await crypto.subtle.digest(\"SHA-256\", enc.encode(s));\n return [...new Uint8Array(d)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction canon(x: any): string {\n if (x === null || typeof x !== \"object\") return JSON.stringify(x);\n if (Array.isArray(x)) return \"[\" + x.map(canon).join(\",\") + \"]\";\n return \"{\" + Object.keys(x).sort().map((k) => JSON.stringify(k) + \":\" + canon(x[k])).join(\",\") + \"}\";\n}\n\nfunction exactKeys(x: any, allowed: string[]) {\n if (!x || typeof x !== \"object\" || Array.isArray(x)) return false;\n const got = Object.keys(x).sort();\n const want = [...allowed].sort();\n return got.length === want.length && got.every((v, i) => v === want[i]);\n}\n\nfunction cleanString(v: unknown, max = 512) {\n return typeof v === \"string\" && v.length > 0 && v.length <= max && v.trim() === v && !/[\\u0000-\\u001f\\u007f]/.test(v);\n}\n\nasync function initDb() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS auth_codes (\n code_hash TEXT PRIMARY KEY,\n client_id TEXT NOT NULL,\n redirect_uri TEXT NOT NULL,\n code_challenge TEXT NOT NULL,\n resource TEXT NOT NULL,\n scope TEXT NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0,\n created_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS assertion_jtis (\n jti_hash TEXT PRIMARY KEY,\n assertion_exp INTEGER NOT NULL,\n created_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS access_tokens (\n token_hash TEXT PRIMARY KEY,\n client_id TEXT NOT NULL,\n assertion_jti_hash TEXT NOT NULL,\n assertion_kid TEXT NOT NULL,\n assertion_sha256 TEXT,\n scope TEXT NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0,\n created_at INTEGER NOT NULL\n )`);\n try {\n await sqlite.execute(\"ALTER TABLE access_tokens ADD COLUMN used INTEGER NOT NULL DEFAULT 0\");\n } catch {\n // Existing canary DB may already have the column.\n }\n try { await sqlite.execute(\"ALTER TABLE access_tokens ADD COLUMN assertion_sha256 TEXT\"); } catch {}\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS verified_client_assertions (\n jti_hash TEXT PRIMARY KEY,\n assertion_sha256 TEXT NOT NULL UNIQUE,\n assertion_jwt TEXT NOT NULL,\n jwk_json TEXT NOT NULL,\n kid TEXT NOT NULL,\n issuer TEXT NOT NULL,\n subject TEXT NOT NULL,\n audience TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n issued_at INTEGER NOT NULL,\n expires_at INTEGER NOT NULL,\n verified_at INTEGER NOT NULL\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS admission_challenges (\n challenge_sha256 TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n requested_agent_id TEXT NOT NULL,\n requested_workstream TEXT NOT NULL,\n requested_capabilities_json TEXT NOT NULL,\n issued_at INTEGER NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS observations (\n observation_id TEXT PRIMARY KEY,\n project TEXT NOT NULL DEFAULT 'mosadek/project-brain-live-v1-durable',\n session_ref TEXT NOT NULL,\n subject_ref TEXT,\n organization_ref TEXT,\n token_hash TEXT NOT NULL,\n assertion_jti_hash TEXT NOT NULL,\n assertion_kid TEXT NOT NULL,\n client_assertion_sha256 TEXT,\n request_hash TEXT NOT NULL UNIQUE,\n challenge_sha256 TEXT,\n challenge_issued_at INTEGER,\n challenge_expires_at INTEGER,\n requested_agent_id TEXT,\n requested_workstream TEXT,\n requested_capabilities_json TEXT NOT NULL,\n observed_at INTEGER NOT NULL,\n expires_at INTEGER NOT NULL\n )`);\n for (const migration of [\n \"ALTER TABLE observations ADD COLUMN project TEXT NOT NULL DEFAULT 'mosadek/project-brain-live-v1-durable'\",\n \"ALTER TABLE observations ADD COLUMN challenge_issued_at INTEGER\",\n \"ALTER TABLE observations ADD COLUMN challenge_expires_at INTEGER\",\n \"ALTER TABLE observations ADD COLUMN client_assertion_sha256 TEXT\",\n ]) {\n try { await sqlite.execute(migration); } catch {}\n }\n}\n\nasync function cleanup() {\n const n = Date.now();\n await sqlite.execute({ sql: \"DELETE FROM auth_codes WHERE expires_at < ?\", args: [n - 60_000] });\n await sqlite.execute({ sql: \"DELETE FROM assertion_jtis WHERE assertion_exp < ?\", args: [n - 60_000] });\n await sqlite.execute({ sql: \"DELETE FROM access_tokens WHERE expires_at < ?\", args: [n - 60_000] });\n await sqlite.execute({ sql: \"DELETE FROM admission_challenges WHERE expires_at < ?\", args: [n - 60_000] });\n}\n\nfunction oauthError(req: Request, code: string, description: string, status = 400) {\n return json({ error: code, error_description: description, iss: origin(req) }, status, {\n \"cache-control\": \"no-store\",\n pragma: \"no-cache\",\n });\n}\n\nfunction resourceMetadata(req: Request) {\n const o = origin(req);\n return {\n resource: o,\n authorization_servers: [o],\n scopes_supported: [SCOPE],\n bearer_methods_supported: [\"header\"],\n };\n}\n\nfunction authServerMetadata(req: Request) {\n const o = origin(req);\n return {\n issuer: o,\n authorization_endpoint: `${o}/authorize`,\n token_endpoint: `${o}/token`,\n scopes_supported: [SCOPE],\n response_types_supported: [\"code\"],\n grant_types_supported: [\"authorization_code\"],\n code_challenge_methods_supported: [\"S256\"],\n token_endpoint_auth_methods_supported: [\"private_key_jwt\"],\n token_endpoint_auth_signing_alg_values_supported: [\"RS256\"],\n client_id_metadata_document_supported: true,\n authorization_response_iss_parameter_supported: true,\n };\n}\n\nasync function authorize(req: Request) {\n const u = new URL(req.url);\n const o = u.origin;\n const q = u.searchParams;\n const clientId = q.get(\"client_id\") || \"\";\n const redirectUri = q.get(\"redirect_uri\") || \"\";\n const responseType = q.get(\"response_type\") || \"\";\n const resource = q.get(\"resource\") || \"\";\n const scope = q.get(\"scope\") || \"\";\n const state = q.get(\"state\");\n const challenge = q.get(\"code_challenge\") || \"\";\n const challengeMethod = q.get(\"code_challenge_method\") || \"\";\n\n if (clientId !== CHATGPT_CLIENT_ID) return oauthError(req, \"unauthorized_client\", \"Only the stable ChatGPT CIMD client is accepted.\");\n if (redirectUri !== CHATGPT_REDIRECT_URI) return oauthError(req, \"invalid_request\", \"redirect_uri mismatch.\");\n if (responseType !== \"code\") return oauthError(req, \"unsupported_response_type\", \"Only authorization_code is supported.\");\n if (resource !== o) return oauthError(req, \"invalid_target\", \"resource must exactly match this MCP origin.\");\n if (!scope.split(/\\s+/).includes(SCOPE)) return oauthError(req, \"invalid_scope\", \"Required admission scope missing.\");\n if (challengeMethod !== \"S256\" || !/^[A-Za-z0-9_-]{43,128}$/.test(challenge)) {\n return oauthError(req, \"invalid_request\", \"PKCE S256 challenge required.\");\n }\n\n const rawCode = randomToken(32);\n const codeHash = await sha256Text(rawCode);\n const n = Date.now();\n await sqlite.execute({\n sql: `INSERT INTO auth_codes\n (code_hash,client_id,redirect_uri,code_challenge,resource,scope,expires_at,used,created_at)\n VALUES(?,?,?,?,?,?,?,0,?)`,\n args: [codeHash, clientId, redirectUri, challenge, resource, scope, n + CODE_TTL_MS, n],\n });\n\n const back = new URL(redirectUri);\n back.searchParams.set(\"code\", rawCode);\n if (state !== null) back.searchParams.set(\"state\", state);\n back.searchParams.set(\"iss\", o);\n return manualRedirect(back.toString());\n}\n\nasync function verifyClientAssertion(assertion: string, tokenEndpoint: string) {\n let header: any;\n try {\n header = decodeProtectedHeader(assertion);\n } catch {\n throw new Error(\"CLIENT_ASSERTION_HEADER_INVALID\");\n }\n if (header.alg !== \"RS256\" || typeof header.kid !== \"string\" || !header.kid) {\n throw new Error(\"CLIENT_ASSERTION_HEADER_INVALID\");\n }\n\n let jwks: any, matchedJwk: any, verified: any;\n try {\n const jr = await fetch(CHATGPT_JWKS, { headers: { accept: \"application/json\" } });\n if (!jr.ok) throw new Error(\"JWKS_FETCH_FAILED\");\n jwks = await jr.json();\n if (!jwks || !Array.isArray(jwks.keys)) throw new Error(\"JWKS_SHAPE_INVALID\");\n matchedJwk = jwks.keys.find((k:any) =>\n k && k.kid === header.kid && k.kty === \"RSA\" && k.alg === \"RS256\" && k.use === \"sig\"\n );\n if (!matchedJwk) throw new Error(\"JWKS_KID_NOT_FOUND\");\n const localJwks = createLocalJWKSet({ keys: [matchedJwk] });\n verified = await jwtVerify(assertion, localJwks, {\n algorithms: [\"RS256\"],\n issuer: CHATGPT_CLIENT_ID,\n subject: CHATGPT_CLIENT_ID,\n audience: tokenEndpoint,\n clockTolerance: 5,\n });\n } catch {\n throw new Error(\"CLIENT_ASSERTION_SIGNATURE_OR_CLAIMS_INVALID\");\n }\n\n const p: any = verified.payload;\n if (typeof p.jti !== \"string\" || !p.jti) throw new Error(\"CLIENT_ASSERTION_JTI_REQUIRED\");\n if (!Number.isFinite(p.iat) || !Number.isFinite(p.exp)) throw new Error(\"CLIENT_ASSERTION_TIME_REQUIRED\");\n const issued = Number(p.iat) * 1000;\n const expires = Number(p.exp) * 1000;\n const n = Date.now();\n if (issued > n + 10_000 || expires <= n || expires <= issued || expires - issued > ASSERTION_MAX_LIFETIME_MS) {\n throw new Error(\"CLIENT_ASSERTION_TIME_INVALID\");\n }\n return {\n payload: p,\n kid: header.kid,\n jti: p.jti,\n expMs: expires,\n issuedMs: issued,\n assertionSha256: await sha256Text(assertion),\n assertionJwt: assertion,\n jwkJson: canon(matchedJwk),\n };\n}\n\nasync function token(req: Request) {\n if (req.method !== \"POST\") return oauthError(req, \"invalid_request\", \"POST required.\", 405);\n const ct = req.headers.get(\"content-type\") || \"\";\n if (!ct.includes(\"application/x-www-form-urlencoded\")) return oauthError(req, \"invalid_request\", \"form encoding required.\");\n const form = new URLSearchParams(await req.text());\n const grantType = form.get(\"grant_type\") || \"\";\n const code = form.get(\"code\") || \"\";\n const redirectUri = form.get(\"redirect_uri\") || \"\";\n const clientId = form.get(\"client_id\") || \"\";\n const verifier = form.get(\"code_verifier\") || \"\";\n const resource = form.get(\"resource\") || \"\";\n const assertionType = form.get(\"client_assertion_type\") || \"\";\n const assertion = form.get(\"client_assertion\") || \"\";\n const o = origin(req);\n const tokenEndpoint = `${o}/token`;\n\n if (grantType !== \"authorization_code\") return oauthError(req, \"unsupported_grant_type\", \"authorization_code required.\");\n if (clientId !== CHATGPT_CLIENT_ID) return oauthError(req, \"invalid_client\", \"Stable ChatGPT CIMD client_id required.\", 401);\n if (redirectUri !== CHATGPT_REDIRECT_URI) return oauthError(req, \"invalid_grant\", \"redirect_uri mismatch.\");\n if (resource !== o) return oauthError(req, \"invalid_target\", \"resource mismatch.\");\n if (!code || !verifier) return oauthError(req, \"invalid_grant\", \"code and code_verifier required.\");\n if (assertionType !== \"urn:ietf:params:oauth:client-assertion-type:jwt-bearer\" || !assertion) {\n return oauthError(req, \"invalid_client\", \"private_key_jwt client assertion required.\", 401);\n }\n\n let av: { payload: any; kid: string; jti: string; expMs: number; issuedMs: number; assertionSha256: string; assertionJwt: string; jwkJson: string };\n try {\n av = await verifyClientAssertion(assertion, tokenEndpoint);\n } catch (e) {\n return oauthError(req, \"invalid_client\", e instanceof Error ? e.message : \"invalid assertion\", 401);\n }\n\n const codeHash = await sha256Text(code);\n const rows: any = await sqlite.execute({\n sql: \"SELECT * FROM auth_codes WHERE code_hash=? LIMIT 1\",\n args: [codeHash],\n });\n const row: any = rows.rows?.[0];\n const n = Date.now();\n if (!row || Number(row.used) !== 0 || Number(row.expires_at) <= n) return oauthError(req, \"invalid_grant\", \"code invalid, expired, or already used.\");\n if (String(row.client_id) !== clientId || String(row.redirect_uri) !== redirectUri || String(row.resource) !== resource) {\n return oauthError(req, \"invalid_grant\", \"authorization code binding mismatch.\");\n }\n\n const derivedChallenge = b64url(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", enc.encode(verifier))));\n if (derivedChallenge !== String(row.code_challenge)) return oauthError(req, \"invalid_grant\", \"PKCE verification failed.\");\n\n const jtiHash = await sha256Text(av.jti);\n try {\n await sqlite.execute({\n sql: \"INSERT INTO assertion_jtis(jti_hash,assertion_exp,created_at) VALUES(?,?,?)\",\n args: [jtiHash, av.expMs, n],\n });\n } catch {\n return oauthError(req, \"invalid_client\", \"client assertion replay rejected.\", 401);\n }\n\n const consume: any = await sqlite.execute({\n sql: \"UPDATE auth_codes SET used=1 WHERE code_hash=? AND used=0 AND expires_at>?\",\n args: [codeHash, n],\n });\n if (Number(consume.rowsAffected || 0) !== 1) return oauthError(req, \"invalid_grant\", \"authorization code replay rejected.\");\n\n const rawToken = randomToken(32);\n const tokenHash = await sha256Text(rawToken);\n await sqlite.execute({\n sql: `INSERT INTO verified_client_assertions\n (jti_hash,assertion_sha256,assertion_jwt,jwk_json,kid,issuer,subject,audience,payload_json,issued_at,expires_at,verified_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?)`,\n args:[\n jtiHash,av.assertionSha256,av.assertionJwt,av.jwkJson,av.kid,CHATGPT_CLIENT_ID,CHATGPT_CLIENT_ID,\n tokenEndpoint,canon(av.payload),av.issuedMs,av.expMs,n,\n ],\n });\n await sqlite.execute({\n sql: `INSERT INTO access_tokens\n (token_hash,client_id,assertion_jti_hash,assertion_kid,assertion_sha256,scope,expires_at,used,created_at)\n VALUES(?,?,?,?,?,?,?,0,?)`,\n args: [tokenHash, clientId, jtiHash, av.kid, av.assertionSha256, String(row.scope), n + TOKEN_TTL_MS, n],\n });\n\n return json({\n access_token: rawToken,\n token_type: \"Bearer\",\n expires_in: Math.floor(TOKEN_TTL_MS / 1000),\n scope: String(row.scope),\n }, 200, { \"cache-control\": \"no-store\", pragma: \"no-cache\" });\n}\n\nasync function consumeBearer(req: Request) {\n const h = req.headers.get(\"authorization\") || \"\";\n const m = /^Bearer\\s+(.+)$/i.exec(h);\n if (!m) return null;\n const tokenHash = await sha256Text(m[1]);\n const r: any = await sqlite.execute({\n sql: \"UPDATE access_tokens SET used=1 WHERE token_hash=? AND expires_at>? AND used=0 RETURNING *\",\n args: [tokenHash, Date.now()],\n });\n return r.rows?.[0] ? { ...r.rows[0], token_hash: tokenHash } : null;\n}\n\nasync function issueChallenge(args: any) {\n const caps = [...new Set((args.requested_capabilities || []).map(String))].sort();\n const n = Date.now();\n const challengeSha256 = await sha256Text(PROJECT + \"\\0\" + randomToken(32));\n await sqlite.execute({\n sql: `INSERT INTO admission_challenges\n (challenge_sha256,project,requested_agent_id,requested_workstream,requested_capabilities_json,issued_at,expires_at,used)\n VALUES(?,?,?,?,?,?,?,0)`,\n args:[\n challengeSha256,PROJECT,args.requested_agent_id,args.requested_workstream,canon(caps),n,n+CHALLENGE_TTL_MS,\n ],\n });\n return {\n content:[{type:\"text\",text:\"Fresh Project Brain admission challenge issued. It is candidate-only and grants no authority.\"}],\n structuredContent:{\n schema:\"PROJECT_BRAIN_ADMISSION_CHALLENGE_V1\",\n project:PROJECT,\n challenge_sha256:challengeSha256,\n requested_agent_id:args.requested_agent_id,\n requested_workstream:args.requested_workstream,\n requested_capabilities:caps,\n issued_at_ms:n,\n expires_at_ms:n+CHALLENGE_TTL_MS,\n p_real_increment:0,\n canonical_brain_mutation:false,\n },\n };\n}\n\nasync function consumeChallenge(args:any,caps:string[]) {\n const n=Date.now();\n const r:any=await sqlite.execute({\n sql:`UPDATE admission_challenges SET used=1\n WHERE challenge_sha256=? AND project=? AND requested_agent_id=? AND requested_workstream=?\n AND requested_capabilities_json=? AND issued_at<=? AND expires_at>? AND expires_at>issued_at\n AND (expires_at-issued_at)<=? AND used=0\n RETURNING issued_at,expires_at`,\n args:[\n String(args.challenge_sha256||\"\").toLowerCase(),PROJECT,args.requested_agent_id,args.requested_workstream,\n canon(caps),n,n,CHALLENGE_TTL_MS,\n ],\n });\n return r.rows?.[0] ?? null;\n}\n\nfunction mcpToolError(text: string, challenge?: string) {\n const result: any = {\n isError: true,\n content: [{ type: \"text\", text }],\n };\n if (challenge) result._meta = { \"mcp/www_authenticate\": [challenge] };\n return result;\n}\n\nasync function handleAttestTool(args: any, ctx: any) {\n const req: Request | undefined = ctx?.http?.req;\n if (!req) return mcpToolError(\"HTTP transport required for host-authenticated admission.\");\n const o = origin(req);\n const resourceMetadataUrl = `${o}/.well-known/oauth-protected-resource`;\n const auth = await consumeBearer(req);\n if (!auth) {\n return mcpToolError(\n \"OAuth bearer token required.\",\n `Bearer resource_metadata=\"${resourceMetadataUrl}\", scope=\"${SCOPE}\", error=\"invalid_token\", error_description=\"OpenAI-authenticated linking is required to create a host/session observation\"`,\n );\n }\n if (!String(auth.scope).split(/\\s+/).includes(SCOPE)) return mcpToolError(\"Required scope missing.\");\n\n const challenge = String(args.challenge_sha256 || \"\").toLowerCase();\n const caps = [...new Set((args.requested_capabilities || []).map(String))].sort();\n\n // OpenAI client-supplied metadata is delivered in MCP request _meta. The\n // 2026-07-28 SDK validates/lifts its reserved MCP envelope before this\n // handler runs; non-reserved OpenAI keys remain available here.\n const meta: any = ctx?.mcpReq?._meta || {};\n const sessionRaw = meta[\"openai/session\"];\n const subjectRaw = meta[\"openai/subject\"];\n const orgRaw = meta[\"openai/organization\"];\n if (!cleanString(sessionRaw, 1024)) return mcpToolError(\"Host-provided openai/session metadata missing or invalid.\");\n if (subjectRaw !== undefined && !cleanString(subjectRaw, 1024)) return mcpToolError(\"openai/subject metadata invalid.\");\n if (orgRaw !== undefined && !cleanString(orgRaw, 1024)) return mcpToolError(\"openai/organization metadata invalid.\");\n\n const challengeRow = await consumeChallenge(args,caps);\n if (!challengeRow) return mcpToolError(\"Admission challenge is absent, stale, already used, or does not match the declared identity/workstream/capabilities.\");\n\n const sessionRef = await sha256Text(\"session\\0\" + sessionRaw);\n const subjectRef = subjectRaw === undefined ? null : await sha256Text(\"subject\\0\" + subjectRaw);\n const organizationRef = orgRaw === undefined ? null : await sha256Text(\"organization\\0\" + orgRaw);\n const requestCore = {\n project: PROJECT,\n session_ref: sessionRef,\n subject_ref: subjectRef,\n organization_ref: organizationRef,\n challenge_sha256: challenge,\n challenge_issued_at_ms: Number(challengeRow.issued_at),\n challenge_expires_at_ms: Number(challengeRow.expires_at),\n requested_agent_id: args.requested_agent_id,\n requested_workstream: args.requested_workstream,\n requested_capabilities: caps,\n assertion_jti_hash: String(auth.assertion_jti_hash),\n assertion_kid: String(auth.assertion_kid),\n client_assertion_sha256: String(auth.assertion_sha256 || \"\"),\n };\n const requestHash = await sha256Text(canon(requestCore));\n const observationId = \"obs_\" + requestHash.slice(0, 32);\n const n = Date.now();\n const expiresAt = Math.min(Number(auth.expires_at), Number(challengeRow.expires_at), n + 5 * 60_000);\n\n await sqlite.execute({\n sql: `INSERT INTO observations\n (observation_id,project,session_ref,subject_ref,organization_ref,token_hash,assertion_jti_hash,assertion_kid,client_assertion_sha256,request_hash,\n challenge_sha256,challenge_issued_at,challenge_expires_at,requested_agent_id,requested_workstream,requested_capabilities_json,observed_at,expires_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(request_hash) DO NOTHING`,\n args: [\n observationId, PROJECT, sessionRef, subjectRef, organizationRef, String(auth.token_hash), String(auth.assertion_jti_hash),\n String(auth.assertion_kid), String(auth.assertion_sha256 || \"\"), requestHash, challenge, Number(challengeRow.issued_at), Number(challengeRow.expires_at),\n args.requested_agent_id, args.requested_workstream, canon(caps), n, expiresAt,\n ],\n });\n\n const observation = {\n schema: \"CHATGPT_HOST_SESSION_ATTESTATION_OBSERVATION_V1\",\n project: PROJECT,\n classification: \"CANDIDATE_NONAUTHORITY_HOST_SESSION_OBSERVATION\",\n host_client: \"CHATGPT_CIMD_PRIVATE_KEY_JWT_VERIFIED\",\n session_ref: sessionRef,\n subject_ref: subjectRef,\n organization_ref: organizationRef,\n challenge_sha256: challenge,\n challenge_issued_at_ms: Number(challengeRow.issued_at),\n challenge_expires_at_ms: Number(challengeRow.expires_at),\n requested_agent_id: args.requested_agent_id,\n requested_workstream: args.requested_workstream,\n requested_capabilities: caps,\n assertion_jti_hash: String(auth.assertion_jti_hash),\n assertion_kid: String(auth.assertion_kid),\n client_assertion_sha256: String(auth.assertion_sha256 || \"\"),\n observation_id: observationId,\n request_hash: requestHash,\n observed_at_ms: n,\n expires_at_ms: expiresAt,\n p_real_increment: 0,\n canonical_brain_mutation: false,\n raw_session_persisted: false,\n raw_subject_persisted: false,\n raw_organization_persisted: false,\n };\n\n return {\n content: [{ type: \"text\", text: \"ChatGPT host/session observation created. Candidate only; no Brain authority or P_real increment.\" }],\n structuredContent: observation,\n };\n}\n\nconst challengeDescriptor: any = {\n title:\"Issue Project Brain admission challenge\",\n description:\"Issue a short-lived, project-bound challenge for the current requested logical identity, workstream, and capability declaration. This is candidate-only and grants no authority.\",\n inputSchema:z.object({\n requested_agent_id:z.string().min(1).max(256),\n requested_workstream:z.string().min(1).max(128),\n requested_capabilities:z.array(z.string().min(1).max(128)).max(128),\n }),\n outputSchema:z.object({\n schema:z.literal(\"PROJECT_BRAIN_ADMISSION_CHALLENGE_V1\"),\n project:z.literal(PROJECT),\n challenge_sha256:z.string().regex(/^[0-9a-f]{64}$/),\n requested_agent_id:z.string(),\n requested_workstream:z.string(),\n requested_capabilities:z.array(z.string()),\n issued_at_ms:z.number().int(),\n expires_at_ms:z.number().int(),\n p_real_increment:z.literal(0),\n canonical_brain_mutation:z.literal(false),\n }),\n annotations:{readOnlyHint:false,destructiveHint:false,openWorldHint:false,idempotentHint:false},\n securitySchemes:[{type:\"noauth\"}],\n _meta:{securitySchemes:[{type:\"noauth\"}]},\n};\n\nconst descriptor: any = {\n title: \"Project Brain session provenance canary\",\n description: \"Create a candidate-only Project Brain execution-incarnation observation bound to ChatGPT host-authenticated OAuth and host-provided session metadata. This does not grant Brain authority or increment P_real.\",\n inputSchema: z.object({\n challenge_sha256: z.string().regex(/^[0-9a-f]{64}$/),\n requested_agent_id: z.string().min(1).max(256),\n requested_workstream: z.string().min(1).max(128),\n requested_capabilities: z.array(z.string().min(1).max(128)).max(128),\n }),\n outputSchema: z.object({\n schema: z.literal(\"CHATGPT_HOST_SESSION_ATTESTATION_OBSERVATION_V1\"),\n project: z.literal(PROJECT),\n classification: z.literal(\"CANDIDATE_NONAUTHORITY_HOST_SESSION_OBSERVATION\"),\n host_client: z.literal(\"CHATGPT_CIMD_PRIVATE_KEY_JWT_VERIFIED\"),\n session_ref: z.string().regex(/^[0-9a-f]{64}$/),\n subject_ref: z.string().regex(/^[0-9a-f]{64}$/).nullable(),\n organization_ref: z.string().regex(/^[0-9a-f]{64}$/).nullable(),\n challenge_sha256: z.string().regex(/^[0-9a-f]{64}$/),\n challenge_issued_at_ms: z.number().int(),\n challenge_expires_at_ms: z.number().int(),\n requested_agent_id: z.string(),\n requested_workstream: z.string(),\n requested_capabilities: z.array(z.string()),\n assertion_jti_hash: z.string().regex(/^[0-9a-f]{64}$/),\n assertion_kid: z.string(),\n client_assertion_sha256: z.string().regex(/^[0-9a-f]{64}$/),\n observation_id: z.string(),\n request_hash: z.string().regex(/^[0-9a-f]{64}$/),\n observed_at_ms: z.number().int(),\n expires_at_ms: z.number().int(),\n p_real_increment: z.literal(0),\n canonical_brain_mutation: z.literal(false),\n raw_session_persisted: z.literal(false),\n raw_subject_persisted: z.literal(false),\n raw_organization_persisted: z.literal(false),\n }),\n annotations: {\n readOnlyHint: false,\n destructiveHint: false,\n openWorldHint: false,\n idempotentHint: true,\n },\n securitySchemes: [{ type: \"oauth2\", scopes: [SCOPE] }],\n _meta: { securitySchemes: [{ type: \"oauth2\", scopes: [SCOPE] }] },\n};\n\nconst mcpHandler = createMcpHandler(() => {\n const server = new McpServer({ name: \"project-brain-chatgpt-admission-canary\", version: \"1.1.0\" });\n server.registerTool(\"brain-admission-challenge\", challengeDescriptor, async (args:any) => issueChallenge(args));\n server.registerTool(\"brain-session-attest\", descriptor, async (args: any, ctx: any) => handleAttestTool(args, ctx));\n return server;\n});\n\nawait initDb();\n\nexport default async function handler(req: Request): Promise {\n await cleanup();\n const u = new URL(req.url);\n\n if (req.method === \"GET\" && u.pathname === \"/.well-known/oauth-protected-resource\") {\n return json(resourceMetadata(req), 200, { \"cache-control\": \"no-store\" });\n }\n if (req.method === \"GET\" && (u.pathname === \"/.well-known/oauth-authorization-server\" || u.pathname === \"/.well-known/openid-configuration\")) {\n return json(authServerMetadata(req), 200, { \"cache-control\": \"no-store\" });\n }\n if (u.pathname === \"/authorize\") return authorize(req);\n if (u.pathname === \"/token\") return token(req);\n if (req.method === \"GET\" && u.pathname === \"/health\") {\n return json({\n ok: true,\n schema: \"BRAIN_CHATGPT_ADMISSION_CANARY_HEALTH_V1\",\n authority: false,\n p_real_increment: 0,\n required_client_id: CHATGPT_CLIENT_ID,\n token_endpoint_auth: \"private_key_jwt\",\n required_tool_scope: SCOPE,\n project: PROJECT,\n challenge_ttl_ms: CHALLENGE_TTL_MS,\n raw_host_metadata_persisted: false,\n admission_bearer_semantics: \"single_use\",\n access_token_ttl_ms: TOKEN_TTL_MS,\n });\n }\n\n return mcpHandler.fetch(req);\n}\n","createdAt",["D",1788897908743],"branchVersion","branchId","66f13ddf-4ddf-4f56-b304-b2f5408bdd74","id","0805b07e-7699-4af9-bece-c6bfcf298903","brain-chatgpt-admission-canary-v1",["D",1788895428429],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","ChatGPT host/session provenance admission canary","imageUrl","6be0fc5c-1fef-4bd6-a1e1-67a3f8c0764e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0715b-703f-741f-ab35-c85020e4a5e0","tursoName","0805b07e76994af9becec6bfcf298903","tursoHostname","0805b07e76994af9becec6bfcf298903-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789591905500],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},"branch",{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"isOwned",20,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","mosadek","handle","displayName","Mo Sadek","avatar","https://lh3.googleusercontent.com/a/ACg8ocL1eT_LHhKSg5px3nXIO6eez79aZXef466qXKh2gak-0iwrvw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":204,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":205,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":206,"_82":207,"_84":208,"_86":25},"tree",[183,184,185,186,187],"files",[183,184,185,186,187],"counts",{"_173":61,"_174":169,"_175":61,"_176":177,"_178":179},"contents",[130,131,132,133,134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":166,"_32":167,"_30":168,"_138":-5,"_41":42,"_40":169,"_140":125,"_38":170,"_13":61,"_33":20,"_35":171,"_24":25,"_144":-5,"_27":172},{"_43":162,"_32":28,"_30":31,"_138":-5,"_41":42,"_40":14,"_140":25,"_38":163,"_13":164,"_33":34,"_35":37,"_24":25,"_144":-5,"_27":165},{"_43":154,"_32":155,"_30":156,"_138":-5,"_41":42,"_40":157,"_140":125,"_38":158,"_13":159,"_33":142,"_35":160,"_24":25,"_144":-5,"_27":161},{"_43":146,"_32":147,"_30":148,"_138":-5,"_41":42,"_40":149,"_140":125,"_38":150,"_13":151,"_33":142,"_35":152,"_24":25,"_144":-5,"_27":153},{"_43":135,"_32":136,"_30":137,"_138":-5,"_41":42,"_40":139,"_140":25,"_38":141,"_13":61,"_33":142,"_35":143,"_24":25,"_144":-5,"_27":145},"e1aafb9b-5ce8-437f-b174-56350278235c","selftest_v3.ts","115f7f2e-abc0-11f1-93ca-1607ee4eb77e","parentId",16,"latest",["D",1788897683862],"script","import handler from \"./main.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { generateKeyPair, SignJWT } from \"npm:jose@6\";\n\nconst ORIGIN=\"https://mosadek--01a08279ff907328a817bbb2131ded40.web.val.run\";\nconst MCP=ORIGIN+\"/mcp\";\nconst CLIENT=\"https://chatgpt.com/oauth/client.json\";\nconst REDIRECT=\"https://chatgpt.com/connector_platform_oauth_redirect\";\nconst PROJECT=\"mosadek/project-brain-live-v1-durable\";\nconst SCOPE=\"brain.admission.observe\";\nconst enc=new TextEncoder();\n\nfunction check(name:string,pass:boolean,detail:any=null){return{name,pass,detail}}\nconst out:any[]=[];\nasync function sha256Text(s:string){const d=await crypto.subtle.digest(\"SHA-256\",enc.encode(s));return[...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\")}\nfunction b64url(bytes:Uint8Array){let s=\"\";for(const b of bytes)s+=String.fromCharCode(b);return btoa(s).replace(/\\+/g,\"-\").replace(/\\//g,\"_\").replace(/=+$/g,\"\")}\nasync function pkce(verifier:string){return b64url(new Uint8Array(await crypto.subtle.digest(\"SHA-256\",enc.encode(verifier))))}\nasync function call(req:Request){const r=await handler(req);const txt=await r.text();let body:any=txt;try{body=JSON.parse(txt)}catch{}return{status:r.status,headers:Object.fromEntries(r.headers.entries()),body}}\nfunction meta(extra:any={}){return{\n \"io.modelcontextprotocol/protocolVersion\":\"2026-07-28\",\n \"io.modelcontextprotocol/clientInfo\":{name:\"selftest-v3\",version:\"1\"},\n \"io.modelcontextprotocol/clientCapabilities\":{},\n ...extra,\n}}\nasync function mcp(method:string,id:number,params:any={},name?:string,bearer?:string){\n const headers:any={\"content-type\":\"application/json\",\"accept\":\"application/json, text/event-stream\",\"mcp-protocol-version\":\"2026-07-28\",\"mcp-method\":method};\n if(name)headers[\"mcp-name\"]=name;if(bearer)headers.authorization=\"Bearer \"+bearer;\n const body={jsonrpc:\"2.0\",id,method,params:{...params,_meta:params._meta??meta()}};\n return call(new Request(MCP,{method:\"POST\",headers,body:JSON.stringify(body)}));\n}\nasync function tool(name:string,id:number,args:any,hostMeta:any={},bearer?:string){\n return mcp(\"tools/call\",id,{name,arguments:args,_meta:meta(hostMeta)},name,bearer);\n}\nasync function issue(agent:string,sessionCaps:string[]=[\"reasoning\"],ws=\"global\"){\n const r=await tool(\"brain-admission-challenge\",crypto.getRandomValues(new Uint32Array(1))[0],{\n requested_agent_id:agent,requested_workstream:ws,requested_capabilities:sessionCaps\n });\n return {r,c:r.body?.result?.structuredContent};\n}\nasync function synthBearer(label:string){\n const raw=\"synthetic-\"+label+\"-\"+crypto.randomUUID(),hash=await sha256Text(raw),jti=await sha256Text(\"jti-\"+label+\"-\"+crypto.randomUUID()),n=Date.now();\n await sqlite.execute({sql:`INSERT INTO access_tokens(token_hash,client_id,assertion_jti_hash,assertion_kid,scope,expires_at,used,created_at) VALUES(?,?,?,?,?,?,0,?)`,\n args:[hash,CLIENT,jti,\"synthetic-v3-kid\",SCOPE,n+120000,n]});\n return {raw,hash,jti};\n}\nasync function deleteBearer(hash:string){await sqlite.execute({sql:\"DELETE FROM access_tokens WHERE token_hash=?\",args:[hash]})}\nasync function deleteChallenge(h:string){await sqlite.execute({sql:\"DELETE FROM admission_challenges WHERE challenge_sha256=?\",args:[h]})}\nasync function deleteObservation(h:string){await sqlite.execute({sql:\"DELETE FROM observations WHERE request_hash=?\",args:[h]})}\nasync function attest(agent:string,c:any,bearer:string,session:string,subject?:string,org?:string,caps:string[]=[\"reasoning\"],ws=\"global\"){\n const hm:any={\"openai/session\":session};if(subject!==undefined)hm[\"openai/subject\"]=subject;if(org!==undefined)hm[\"openai/organization\"]=org;\n return tool(\"brain-session-attest\",crypto.getRandomValues(new Uint32Array(1))[0],{\n challenge_sha256:c.challenge_sha256,requested_agent_id:agent,requested_workstream:ws,requested_capabilities:caps\n },hm,bearer);\n}\nasync function rawChallenge(agent:string,caps:string[],issued:number,expires:number,used=0){\n const h=await sha256Text(\"raw-challenge\\0\"+crypto.randomUUID());\n await sqlite.execute({sql:`INSERT INTO admission_challenges(challenge_sha256,project,requested_agent_id,requested_workstream,requested_capabilities_json,issued_at,expires_at,used) VALUES(?,?,?,?,?,?,?,?)`,\n args:[h,PROJECT,agent,\"global\",JSON.stringify([...new Set(caps)].sort()),issued,expires,used]});\n return {challenge_sha256:h,issued_at_ms:issued,expires_at_ms:expires};\n}\n\n// Platform/MCP discovery.\nconst health=await call(new Request(ORIGIN+\"/health\"));\nout.push(check(\"health_nonauthority\",health.status===200&&health.body.authority===false&&health.body.p_real_increment===0&&health.body.project===PROJECT&&health.body.admission_bearer_semantics===\"single_use\",health));\nconst discover=await mcp(\"server/discover\",1,{});\nout.push(check(\"mcp_discover_2026_07_28\",discover.status===200&&discover.body.result?.supportedVersions?.includes(\"2026-07-28\"),discover));\nconst list=await mcp(\"tools/list\",2,{});\nconst tools=list.body.result?.tools||[], challengeTool=tools.find((x:any)=>x.name===\"brain-admission-challenge\"), attestTool=tools.find((x:any)=>x.name===\"brain-session-attest\");\nout.push(check(\"two_tool_contract_discoverable\",list.status===200&&!!challengeTool&&!!attestTool,tools.map((x:any)=>x.name)));\nconst attestInputProps=Object.keys(attestTool?.inputSchema?.properties||{});\nout.push(check(\"server_owned_challenge_times_not_model_inputs\",!attestInputProps.includes(\"challenge_issued_at_ms\")&&!attestInputProps.includes(\"challenge_expires_at_ms\"),attestInputProps));\nout.push(check(\"oauth_security_scheme_advertised\",attestTool?._meta?.securitySchemes?.some((x:any)=>x.type===\"oauth2\"&&x.scopes?.includes(SCOPE))===true,attestTool?._meta));\n\n// OAuth falsification.\nconst verifier=\"v\".repeat(43),cc=await pkce(verifier);\nfunction authUrl(over:any={}){const u=new URL(ORIGIN+\"/authorize\");const base:any={client_id:CLIENT,redirect_uri:REDIRECT,response_type:\"code\",resource:ORIGIN,scope:SCOPE,state:\"s\",code_challenge:cc,code_challenge_method:\"S256\",...over};for(const[k,v]of Object.entries(base))u.searchParams.set(k,String(v));return u}\nconst wrongClient=await call(new Request(authUrl({client_id:\"https://attacker.example/client.json\"})));\nout.push(check(\"oauth_wrong_client_rejected\",wrongClient.status===400&&wrongClient.body.error===\"unauthorized_client\"&&wrongClient.body.iss===ORIGIN,wrongClient));\nconst wrongRedirect=await call(new Request(authUrl({redirect_uri:\"https://attacker.example/cb\"})));\nout.push(check(\"oauth_wrong_redirect_rejected\",wrongRedirect.status===400&&wrongRedirect.body.error===\"invalid_request\",wrongRedirect));\nconst wrongResource=await call(new Request(authUrl({resource:\"https://attacker.example\"})));\nout.push(check(\"oauth_wrong_resource_rejected\",wrongResource.status===400&&wrongResource.body.error===\"invalid_target\",wrongResource));\nconst badPkce=await call(new Request(authUrl({code_challenge:\"short\",code_challenge_method:\"plain\"})));\nout.push(check(\"oauth_non_s256_pkce_rejected\",badPkce.status===400,badPkce));\nconst ar=await handler(new Request(authUrl({state:\"state-v3\"})));const loc=new URL(ar.headers.get(\"location\")||\"\");const code=loc.searchParams.get(\"code\")||\"\";\nout.push(check(\"oauth_authorize_exact_chatgpt_redirect\",ar.status===302&&loc.origin+loc.pathname===REDIRECT&&!!code&&loc.searchParams.get(\"state\")===\"state-v3\"&&loc.searchParams.get(\"iss\")===ORIGIN,{status:ar.status,redirect:loc.origin+loc.pathname,has_code:!!code,iss:loc.searchParams.get(\"iss\")}));\nconst baseForm=new URLSearchParams({grant_type:\"authorization_code\",code,redirect_uri:REDIRECT,client_id:CLIENT,code_verifier:verifier,resource:ORIGIN});\nconst noAssertion=await call(new Request(ORIGIN+\"/token\",{method:\"POST\",headers:{\"content-type\":\"application/x-www-form-urlencoded\"},body:baseForm}));\nout.push(check(\"oauth_private_key_jwt_required\",noAssertion.status===401&&noAssertion.body.error===\"invalid_client\",noAssertion));\nconst malformedForm=new URLSearchParams(baseForm);malformedForm.set(\"client_assertion_type\",\"urn:ietf:params:oauth:client-assertion-type:jwt-bearer\");malformedForm.set(\"client_assertion\",\"not-a-jwt\");\nconst malformed=await call(new Request(ORIGIN+\"/token\",{method:\"POST\",headers:{\"content-type\":\"application/x-www-form-urlencoded\"},body:malformedForm}));\nout.push(check(\"oauth_malformed_assertion_rejected\",malformed.status===401&&malformed.body.error===\"invalid_client\",malformed));\nconst {privateKey}=await generateKeyPair(\"RS256\");\nconst fakeJwt=await new SignJWT({}).setProtectedHeader({alg:\"RS256\",kid:\"cimd-20260428030119\"}).setIssuer(CLIENT).setSubject(CLIENT).setAudience(ORIGIN+\"/token\").setIssuedAt().setExpirationTime(\"2m\").setJti(\"fake-\"+crypto.randomUUID()).sign(privateKey);\nconst fakeForm=new URLSearchParams(baseForm);fakeForm.set(\"client_assertion_type\",\"urn:ietf:params:oauth:client-assertion-type:jwt-bearer\");fakeForm.set(\"client_assertion\",fakeJwt);\nconst fake=await call(new Request(ORIGIN+\"/token\",{method:\"POST\",headers:{\"content-type\":\"application/x-www-form-urlencoded\"},body:fakeForm}));\nout.push(check(\"oauth_valid_shape_wrong_private_key_rejected\",fake.status===401&&fake.body.error_description===\"CLIENT_ASSERTION_SIGNATURE_OR_CLAIMS_INVALID\",fake));\nconst codeHash=await sha256Text(code),codeRow:any=await sqlite.execute({sql:\"SELECT used FROM auth_codes WHERE code_hash=?\",args:[codeHash]});\nout.push(check(\"forged_assertions_do_not_burn_auth_code\",Number(codeRow.rows?.[0]?.used)===0,codeRow.rows?.[0]||null));\nawait sqlite.execute({sql:\"DELETE FROM auth_codes WHERE code_hash=?\",args:[codeHash]});\n\n// Runtime auth absence.\nconst unauthIssue=await issue(\"unauth-meta-agent\");\nconst noBearer=await attest(\"unauth-meta-agent\",unauthIssue.c,\"not-present\",\"forged-session\",\"forged-subject\");\nconst wa=noBearer.body.result?._meta?.[\"mcp/www_authenticate\"]?.[0]||\"\";\nout.push(check(\"connector_auth_absence_rejected_with_linking_challenge\",noBearer.body.result?.isError===true&&wa.includes('error=\"invalid_token\"')&&wa.includes(\"error_description=\"),noBearer));\nawait deleteChallenge(unauthIssue.c.challenge_sha256);\n\n// Server-issued challenge positive path.\nconst p=await issue(\"positive-agent\",[\"reasoning\",\"web_research\"]);\nout.push(check(\"server_issues_project_bound_fresh_challenge\",p.r.status===200&&p.c?.schema===\"PROJECT_BRAIN_ADMISSION_CHALLENGE_V1\"&&p.c?.project===PROJECT&&/^[0-9a-f]{64}$/.test(p.c?.challenge_sha256||\"\")&&p.c?.expires_at_ms>p.c?.issued_at_ms&&p.c?.expires_at_ms-p.c?.issued_at_ms===300000&&p.c?.p_real_increment===0,p.c));\nconst pb=await synthBearer(\"positive\");\nconst pos=await attest(\"positive-agent\",p.c,pb.raw,\"synthetic-session-A\",\"synthetic-subject-A\",\"synthetic-org-A\",[\"reasoning\",\"web_research\"]);\nconst obs=pos.body.result?.structuredContent;\nout.push(check(\"positive_synthetic_path_creates_project_challenge_bound_hashes\",pos.status===200&&pos.body.result?.isError!==true&&obs?.project===PROJECT&&obs?.challenge_sha256===p.c.challenge_sha256&&obs?.challenge_issued_at_ms===p.c.issued_at_ms&&obs?.challenge_expires_at_ms===p.c.expires_at_ms&&/^[0-9a-f]{64}$/.test(obs?.session_ref||\"\")&&/^[0-9a-f]{64}$/.test(obs?.subject_ref||\"\")&&obs?.p_real_increment===0&&obs?.canonical_brain_mutation===false,pos));\nconst usedToken:any=await sqlite.execute({sql:\"SELECT used FROM access_tokens WHERE token_hash=?\",args:[pb.hash]}),usedChallenge:any=await sqlite.execute({sql:\"SELECT used FROM admission_challenges WHERE challenge_sha256=?\",args:[p.c.challenge_sha256]});\nout.push(check(\"bearer_and_challenge_consumed_once\",Number(usedToken.rows?.[0]?.used)===1&&Number(usedChallenge.rows?.[0]?.used)===1,{token:usedToken.rows?.[0],challenge:usedChallenge.rows?.[0]}));\nconst bearerReplay=await attest(\"positive-agent\",p.c,pb.raw,\"synthetic-session-A\",\"synthetic-subject-A\",\"synthetic-org-A\",[\"reasoning\",\"web_research\"]);\nout.push(check(\"bearer_replay_rejected\",bearerReplay.body.result?.isError===true,bearerReplay));\nconst pb2=await synthBearer(\"copied-challenge\");\nconst copiedChallenge=await attest(\"positive-agent\",p.c,pb2.raw,\"synthetic-session-A\",\"synthetic-subject-A\",\"synthetic-org-A\",[\"reasoning\",\"web_research\"]);\nout.push(check(\"copied_used_challenge_with_fresh_bearer_rejected\",copiedChallenge.body.result?.isError===true&&String(copiedChallenge.body.result?.content?.[0]?.text||\"\").includes(\"challenge\"),copiedChallenge));\nawait deleteBearer(pb.hash);await deleteBearer(pb2.hash);if(obs?.request_hash)await deleteObservation(obs.request_hash);await deleteChallenge(p.c.challenge_sha256);\n\n// Declaration mismatch must not consume challenge.\nconst dm=await issue(\"agent-A\");const dmb=await synthBearer(\"decl-mismatch\");\nconst dmres=await attest(\"agent-B\",dm.c,dmb.raw,\"session-dm\",\"subject-dm\");\nconst dmrow:any=await sqlite.execute({sql:\"SELECT used FROM admission_challenges WHERE challenge_sha256=?\",args:[dm.c.challenge_sha256]});\nout.push(check(\"challenge_identity_mismatch_rejected_without_consuming_challenge\",dmres.body.result?.isError===true&&Number(dmrow.rows?.[0]?.used)===0,{response:dmres,challenge:dmrow.rows?.[0]}));\nawait deleteBearer(dmb.hash);await deleteChallenge(dm.c.challenge_sha256);\n\n// Missing/malformed host session.\nconst ms=await issue(\"missing-session\");const msb=await synthBearer(\"missing-session\");\nconst msres=await tool(\"brain-session-attest\",9001,{challenge_sha256:ms.c.challenge_sha256,requested_agent_id:\"missing-session\",requested_workstream:\"global\",requested_capabilities:[\"reasoning\"]},{\"openai/subject\":\"subject-only\"},msb.raw);\nout.push(check(\"missing_openai_session_rejected\",msres.body.result?.isError===true&&String(msres.body.result?.content?.[0]?.text||\"\").includes(\"openai/session\"),msres));\nawait deleteBearer(msb.hash);await deleteChallenge(ms.c.challenge_sha256);\nconst mal=await issue(\"malformed-session\");const malb=await synthBearer(\"malformed-session\");\nconst malres=await attest(\"malformed-session\",mal.c,malb.raw,\"bad\\u0001session\",\"subject-mal\");\nout.push(check(\"malformed_openai_session_rejected\",malres.body.result?.isError===true&&String(malres.body.result?.content?.[0]?.text||\"\").includes(\"openai/session\"),malres));\nawait deleteBearer(malb.hash);await deleteChallenge(mal.c.challenge_sha256);\n\n// Stale/future/overlong challenge rows.\nfor(const tc of [\n {name:\"stale_challenge_rejected\",issued:Date.now()-600000,expires:Date.now()-300000},\n {name:\"future_challenge_rejected\",issued:Date.now()+60000,expires:Date.now()+240000},\n {name:\"overlong_challenge_rejected\",issued:Date.now()-1000,expires:Date.now()+600000},\n]){\n const agent=\"time-\"+tc.name,b=await synthBearer(tc.name),c=await rawChallenge(agent,[\"reasoning\"],tc.issued,tc.expires);\n const rr=await attest(agent,c,b.raw,\"session-\"+tc.name,\"subject-\"+tc.name);\n out.push(check(tc.name,rr.body.result?.isError===true&&String(rr.body.result?.content?.[0]?.text||\"\").includes(\"challenge\"),rr));\n await deleteBearer(b.hash);await deleteChallenge(c.challenge_sha256);\n}\n\n// Same physical/session signal across two logical agent IDs must collapse to one session_ref.\nasync function accepted(agent:string,session:string,subject:string){\n const q=await issue(agent),b=await synthBearer(agent),r=await attest(agent,q.c,b.raw,session,subject),o=r.body.result?.structuredContent;\n await deleteBearer(b.hash);await deleteChallenge(q.c.challenge_sha256);if(o?.request_hash)await deleteObservation(o.request_hash);\n return {r,o};\n}\nconst same1=await accepted(\"same-session-agent-1\",\"same-host-session\",\"same-host-subject\");\nconst same2=await accepted(\"same-session-agent-2\",\"same-host-session\",\"same-host-subject\");\nout.push(check(\"same_session_multiple_agent_ids_not_distinct_execution\",same1.o?.session_ref===same2.o?.session_ref&&same1.o?.requested_agent_id!==same2.o?.requested_agent_id,{a1:{agent:same1.o?.requested_agent_id,session_ref:same1.o?.session_ref},a2:{agent:same2.o?.requested_agent_id,session_ref:same2.o?.session_ref}}));\n\n// Same subject, different sessions should distinguish sessions while retaining subject identity.\nconst sd1=await accepted(\"same-subject-session-1\",\"host-session-1\",\"shared-host-subject\");\nconst sd2=await accepted(\"same-subject-session-2\",\"host-session-2\",\"shared-host-subject\");\nout.push(check(\"same_subject_different_sessions_distinguished\",sd1.o?.subject_ref===sd2.o?.subject_ref&&sd1.o?.session_ref!==sd2.o?.session_ref,{s1:{session_ref:sd1.o?.session_ref,subject_ref:sd1.o?.subject_ref},s2:{session_ref:sd2.o?.session_ref,subject_ref:sd2.o?.subject_ref}}));\nconst cs1=await accepted(\"cross-subject-1\",\"cross-session-1\",\"subject-one\");\nconst cs2=await accepted(\"cross-subject-2\",\"cross-session-2\",\"subject-two\");\nout.push(check(\"cross_subjects_distinguished\",cs1.o?.subject_ref!==cs2.o?.subject_ref,{subject1:cs1.o?.subject_ref,subject2:cs2.o?.subject_ref}));\n\n// Model-visible leakage: response must contain hashes, never raw host identifiers.\nconst leakSession=\"RAW-SESSION-LEAK-SENTINEL-\"+crypto.randomUUID(),leakSubject=\"RAW-SUBJECT-LEAK-SENTINEL-\"+crypto.randomUUID(),leakOrg=\"RAW-ORG-LEAK-SENTINEL-\"+crypto.randomUUID();\nconst lq=await issue(\"leak-agent\"),lb=await synthBearer(\"leak\"),lr=await attest(\"leak-agent\",lq.c,lb.raw,leakSession,leakSubject,leakOrg),lo=lr.body.result?.structuredContent,visible=JSON.stringify(lr.body);\nout.push(check(\"raw_host_metadata_not_model_visible\",!visible.includes(leakSession)&&!visible.includes(leakSubject)&&!visible.includes(leakOrg)&&/^[0-9a-f]{64}$/.test(lo?.session_ref||\"\"),{contains_session:visible.includes(leakSession),contains_subject:visible.includes(leakSubject),contains_org:visible.includes(leakOrg),session_ref:lo?.session_ref}));\nawait deleteBearer(lb.hash);await deleteChallenge(lq.c.challenge_sha256);if(lo?.request_hash)await deleteObservation(lo.request_hash);\n\nconst obsSchema:any=await sqlite.execute(\"PRAGMA table_info(observations)\"),names=(obsSchema.rows||[]).map((x:any)=>String(x.name));\nout.push(check(\"storage_schema_has_no_raw_host_identifier_columns\",!names.includes(\"session\")&&!names.includes(\"subject\")&&!names.includes(\"organization\")&&names.includes(\"session_ref\")&&names.includes(\"subject_ref\")&&names.includes(\"organization_ref\"),names));\n\nconst failed=out.filter(x=>!x.pass);\nconsole.log(JSON.stringify({schema:\"BRAIN_CHATGPT_ADMISSION_CANARY_SELFTEST_V3\",total:out.length,passed:out.length-failed.length,failed:failed.length,pass:failed.length===0,tests:out},null,2));\n","label",[136],"7a274a4d-6e94-4bc9-9879-ca16fe1fedb1","selftest.ts","8258273a-abbb-11f1-a7f7-1607ee4eb77e",12,["D",1788897301321],3,"import handler from \"./main.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { generateKeyPair, SignJWT } from \"npm:jose@6\";\n\nconst ORIGIN = \"https://mosadek--01a08279ff907328a817bbb2131ded40.web.val.run\";\nconst CLIENT = \"https://chatgpt.com/oauth/client.json\";\nconst REDIRECT = \"https://chatgpt.com/connector_platform_oauth_redirect\";\nconst SCOPE = \"brain.admission.observe\";\nconst enc = new TextEncoder();\n\nasync function sha256Text(s: string) {\n const d = await crypto.subtle.digest(\"SHA-256\", enc.encode(s));\n return [...new Uint8Array(d)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\nfunction b64url(bytes: Uint8Array) {\n let s = \"\";\n for (const b of bytes) s += String.fromCharCode(b);\n return btoa(s).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/g, \"\");\n}\nasync function challenge(verifier: string) {\n return b64url(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", enc.encode(verifier))));\n}\nasync function call(req: Request) {\n const r = await handler(req);\n const text = await r.text();\n let body: any = text;\n try { body = JSON.parse(text); } catch {}\n return { status: r.status, headers: Object.fromEntries(r.headers.entries()), body };\n}\nfunction check(name: string, pass: boolean, detail: any = null) {\n return { name, pass, detail };\n}\n\nconst out: any[] = [];\nconst verifier = \"v\".repeat(43);\nconst cc = await challenge(verifier);\n\nconst health = await call(new Request(ORIGIN + \"/health\"));\nout.push(check(\"health_nonauthority\", health.status === 200 && health.body.authority === false && health.body.p_real_increment === 0, health));\n\nconst rm = await call(new Request(ORIGIN + \"/.well-known/oauth-protected-resource\"));\nout.push(check(\"resource_metadata_exact_origin\", rm.status === 200 && rm.body.resource === ORIGIN && rm.body.authorization_servers?.[0] === ORIGIN, rm));\n\nconst as = await call(new Request(ORIGIN + \"/.well-known/oauth-authorization-server\"));\nout.push(check(\"auth_metadata_private_key_jwt_only\", as.status === 200 && JSON.stringify(as.body.token_endpoint_auth_methods_supported) === JSON.stringify([\"private_key_jwt\"]) && as.body.client_id_metadata_document_supported === true, as));\n\nconst badClientUrl = new URL(ORIGIN + \"/authorize\");\nfor (const [k,v] of Object.entries({\n client_id:\"https://attacker.example/client.json\", redirect_uri:REDIRECT, response_type:\"code\", resource:ORIGIN,\n scope:SCOPE, state:\"s1\", code_challenge:cc, code_challenge_method:\"S256\"\n})) badClientUrl.searchParams.set(k,String(v));\nconst badClient = await call(new Request(badClientUrl));\nout.push(check(\"authorize_wrong_client_rejected\", badClient.status === 400 && badClient.body.error === \"unauthorized_client\", badClient));\n\nconst badRedirectUrl = new URL(ORIGIN + \"/authorize\");\nfor (const [k,v] of Object.entries({\n client_id:CLIENT, redirect_uri:\"https://attacker.example/cb\", response_type:\"code\", resource:ORIGIN,\n scope:SCOPE, state:\"s2\", code_challenge:cc, code_challenge_method:\"S256\"\n})) badRedirectUrl.searchParams.set(k,String(v));\nconst badRedirect = await call(new Request(badRedirectUrl));\nout.push(check(\"authorize_wrong_redirect_rejected\", badRedirect.status === 400 && badRedirect.body.error === \"invalid_request\", badRedirect));\n\nconst badResourceUrl = new URL(ORIGIN + \"/authorize\");\nfor (const [k,v] of Object.entries({\n client_id:CLIENT, redirect_uri:REDIRECT, response_type:\"code\", resource:\"https://attacker.example\",\n scope:SCOPE, state:\"s3\", code_challenge:cc, code_challenge_method:\"S256\"\n})) badResourceUrl.searchParams.set(k,String(v));\nconst badResource = await call(new Request(badResourceUrl));\nout.push(check(\"authorize_wrong_resource_rejected\", badResource.status === 400 && badResource.body.error === \"invalid_target\", badResource));\n\nconst badPkceUrl = new URL(ORIGIN + \"/authorize\");\nfor (const [k,v] of Object.entries({\n client_id:CLIENT, redirect_uri:REDIRECT, response_type:\"code\", resource:ORIGIN,\n scope:SCOPE, state:\"s4\", code_challenge:\"short\", code_challenge_method:\"plain\"\n})) badPkceUrl.searchParams.set(k,String(v));\nconst badPkce = await call(new Request(badPkceUrl));\nout.push(check(\"authorize_non_s256_pkce_rejected\", badPkce.status === 400, badPkce));\n\nconst okUrl = new URL(ORIGIN + \"/authorize\");\nfor (const [k,v] of Object.entries({\n client_id:CLIENT, redirect_uri:REDIRECT, response_type:\"code\", resource:ORIGIN,\n scope:SCOPE, state:\"selftest-state\", code_challenge:cc, code_challenge_method:\"S256\"\n})) okUrl.searchParams.set(k,String(v));\nconst auth = await handler(new Request(okUrl));\nconst loc = auth.headers.get(\"location\") || \"\";\nconst locUrl = new URL(loc);\nconst code = locUrl.searchParams.get(\"code\") || \"\";\nout.push(check(\"authorize_exact_chatgpt_cimd_redirect\", auth.status === 302 && locUrl.origin + locUrl.pathname === REDIRECT && !!code && locUrl.searchParams.get(\"state\") === \"selftest-state\" && locUrl.searchParams.get(\"iss\") === ORIGIN, {status:auth.status,location_origin_path:locUrl.origin+locUrl.pathname,has_code:!!code,state:locUrl.searchParams.get(\"state\"),iss:locUrl.searchParams.get(\"iss\")}));\n\nconst noAssertionForm = new URLSearchParams({\n grant_type:\"authorization_code\", code, redirect_uri:REDIRECT, client_id:CLIENT, code_verifier:verifier, resource:ORIGIN,\n});\nconst noAssertion = await call(new Request(ORIGIN + \"/token\", {\n method:\"POST\", headers:{\"content-type\":\"application/x-www-form-urlencoded\"}, body:noAssertionForm\n}));\nout.push(check(\"token_none_auth_rejected\", noAssertion.status === 401 && noAssertion.body.error === \"invalid_client\", noAssertion));\n\nconst forgedForm = new URLSearchParams(noAssertionForm);\nforgedForm.set(\"client_assertion_type\",\"urn:ietf:params:oauth:client-assertion-type:jwt-bearer\");\nforgedForm.set(\"client_assertion\",\"not-a-jwt\");\nconst forged = await call(new Request(ORIGIN + \"/token\", {\n method:\"POST\", headers:{\"content-type\":\"application/x-www-form-urlencoded\"}, body:forgedForm\n}));\nout.push(check(\"token_forged_private_key_jwt_rejected\", forged.status === 401 && forged.body.error === \"invalid_client\", forged));\n\nconst {privateKey}=await generateKeyPair(\"RS256\");\nconst syntacticallyValidForged = await new SignJWT({})\n .setProtectedHeader({alg:\"RS256\",kid:\"cimd-20260428030119\"})\n .setIssuer(CLIENT)\n .setSubject(CLIENT)\n .setAudience(ORIGIN+\"/token\")\n .setIssuedAt()\n .setExpirationTime(\"2m\")\n .setJti(\"selftest-\"+crypto.randomUUID())\n .sign(privateKey);\nconst forgedCryptoForm = new URLSearchParams(noAssertionForm);\nforgedCryptoForm.set(\"client_assertion_type\",\"urn:ietf:params:oauth:client-assertion-type:jwt-bearer\");\nforgedCryptoForm.set(\"client_assertion\",syntacticallyValidForged);\nconst forgedCrypto = await call(new Request(ORIGIN + \"/token\", {\n method:\"POST\", headers:{\"content-type\":\"application/x-www-form-urlencoded\"}, body:forgedCryptoForm\n}));\nout.push(check(\"token_valid_shape_wrong_crypto_key_rejected\", forgedCrypto.status === 401 && forgedCrypto.body.error === \"invalid_client\" && forgedCrypto.body.error_description === \"CLIENT_ASSERTION_SIGNATURE_OR_CLAIMS_INVALID\", forgedCrypto));\n\nconst codeHash = await sha256Text(code);\nconst codeRow: any = await sqlite.execute({sql:\"SELECT used FROM auth_codes WHERE code_hash=?\",args:[codeHash]});\nout.push(check(\"forged_assertion_does_not_burn_auth_code\", Number(codeRow.rows?.[0]?.used) === 0, codeRow.rows?.[0] || null));\n\nconst toolBody = {\n jsonrpc:\"2.0\", id:77, method:\"tools/call\",\n params:{name:\"brain-session-attest\",arguments:{\n challenge_sha256:\"a\".repeat(64), requested_agent_id:\"selftest\", requested_workstream:\"global\", requested_capabilities:[\"reasoning\"]\n },_meta:{\"openai/session\":\"forged-session-in-request-body\"}}\n};\ntoolBody.params._meta = {\n ...toolBody.params._meta,\n \"io.modelcontextprotocol/protocolVersion\":\"2026-07-28\",\n \"io.modelcontextprotocol/clientInfo\":{name:\"selftest\",version:\"1\"},\n \"io.modelcontextprotocol/clientCapabilities\":{}\n};\nconst noBearer = await call(new Request(ORIGIN + \"/\", {\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n \"accept\":\"application/json, text/event-stream\",\n \"mcp-protocol-version\":\"2026-07-28\",\n \"mcp-method\":\"tools/call\",\n \"mcp-name\":\"brain-session-attest\"\n },\n body:JSON.stringify(toolBody)\n}));\nconst noBearerChallenge = noBearer.body.result?._meta?.[\"mcp/www_authenticate\"]?.[0] || \"\";\nout.push(check(\n \"tool_session_meta_without_bearer_rejected\",\n noBearer.status === 200 &&\n noBearer.body.result?.isError === true &&\n noBearerChallenge.includes('error=\"invalid_token\"') &&\n noBearerChallenge.includes('error_description='),\n noBearer,\n));\n\nconst syntheticToken = \"synthetic-\" + crypto.randomUUID();\nconst syntheticTokenHash = await sha256Text(syntheticToken);\nconst syntheticJtiHash = await sha256Text(\"synthetic-jti-\" + crypto.randomUUID());\nconst tnow = Date.now();\nawait sqlite.execute({\n sql: `INSERT INTO access_tokens\n (token_hash,client_id,assertion_jti_hash,assertion_kid,scope,expires_at,used,created_at)\n VALUES(?,?,?,?,?,?,0,?)`,\n args:[syntheticTokenHash,CLIENT,syntheticJtiHash,\"synthetic-selftest-kid\",SCOPE,tnow+120000,tnow],\n});\nconst positiveBody = JSON.parse(JSON.stringify(toolBody));\npositiveBody.id = 78;\npositiveBody.params.arguments.requested_agent_id = \"selftest-positive\";\npositiveBody.params._meta[\"openai/session\"] = \"synthetic-host-session\";\npositiveBody.params._meta[\"openai/subject\"] = \"synthetic-host-subject\";\nconst positiveReq = () => new Request(ORIGIN + \"/mcp\", {\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n \"accept\":\"application/json, text/event-stream\",\n \"mcp-protocol-version\":\"2026-07-28\",\n \"mcp-method\":\"tools/call\",\n \"mcp-name\":\"brain-session-attest\",\n \"authorization\":\"Bearer \"+syntheticToken,\n },\n body:JSON.stringify(positiveBody),\n});\nconst positive = await call(positiveReq());\nconst obs = positive.body.result?.structuredContent;\nout.push(check(\n \"synthetic_single_use_bearer_creates_hashed_observation\",\n positive.status===200 &&\n positive.body.result?.isError!==true &&\n obs?.schema===\"CHATGPT_HOST_SESSION_ATTESTATION_OBSERVATION_V1\" &&\n obs?.classification===\"CANDIDATE_NONAUTHORITY_HOST_SESSION_OBSERVATION\" &&\n obs?.host_client===\"CHATGPT_CIMD_PRIVATE_KEY_JWT_VERIFIED\" &&\n /^[0-9a-f]{64}$/.test(obs?.session_ref||\"\") &&\n /^[0-9a-f]{64}$/.test(obs?.subject_ref||\"\") &&\n obs?.p_real_increment===0 &&\n obs?.canonical_brain_mutation===false,\n positive,\n));\nconst tokenAfter: any = await sqlite.execute({sql:\"SELECT used FROM access_tokens WHERE token_hash=?\",args:[syntheticTokenHash]});\nout.push(check(\"admission_bearer_consumed_exactly_once\", Number(tokenAfter.rows?.[0]?.used)===1, tokenAfter.rows?.[0]||null));\nconst replay = await call(positiveReq());\nout.push(check(\n \"admission_bearer_replay_rejected\",\n replay.status===200 &&\n replay.body.result?.isError===true &&\n String(replay.body.result?.content?.[0]?.text||\"\").includes(\"OAuth bearer token required\"),\n replay,\n));\nawait sqlite.execute({sql:\"DELETE FROM access_tokens WHERE token_hash=?\",args:[syntheticTokenHash]});\nif (obs?.request_hash) await sqlite.execute({sql:\"DELETE FROM observations WHERE request_hash=?\",args:[obs.request_hash]});\n\nconst schema: any = await sqlite.execute(\"PRAGMA table_info(observations)\");\nconst names = (schema.rows || []).map((r:any)=>String(r.name));\nout.push(check(\"observation_schema_has_no_raw_session_subject_org\", !names.includes(\"session\") && !names.includes(\"subject\") && !names.includes(\"organization\") && names.includes(\"session_ref\") && names.includes(\"subject_ref\") && names.includes(\"organization_ref\"), names));\n\nawait sqlite.execute({sql:\"DELETE FROM auth_codes WHERE code_hash=?\",args:[codeHash]});\n\nconst failed = out.filter(x=>!x.pass);\nconsole.log(JSON.stringify({\n schema:\"BRAIN_CHATGPT_ADMISSION_CANARY_SELFTEST_V1\",\n total:out.length,\n passed:out.length-failed.length,\n failed:failed.length,\n pass:failed.length===0,\n tests:out\n}, null, 2));\n",[147],"1cab053c-8f30-4ca9-902d-230c95550ead","protocol_probe.ts","9982893c-abbb-11f1-b5b1-1607ee4eb77e",9,["D",1788897089884],2,"import handler from \"./main.ts\";\n\nconst ORIGIN=\"https://mosadek--01a08279ff907328a817bbb2131ded40.web.val.run\";\nasync function probe(body:any){\n const r=await handler(new Request(ORIGIN+\"/mcp\",{\n method:\"POST\",\n headers:{\n \"content-type\":\"application/json\",\n \"accept\":\"application/json, text/event-stream\",\n \"mcp-protocol-version\":\"2026-07-28\"\n },\n body:JSON.stringify(body)\n }));\n const text=await r.text();\n console.log(JSON.stringify({status:r.status,headers:Object.fromEntries(r.headers.entries()),text}));\n}\nasync function modern(method:string, id:number, params:any={}, name?:string){\n const meta={\n \"io.modelcontextprotocol/protocolVersion\":\"2026-07-28\",\n \"io.modelcontextprotocol/clientInfo\":{name:\"selftest\",version:\"1\"},\n \"io.modelcontextprotocol/clientCapabilities\":{}\n };\n const body={jsonrpc:\"2.0\",id,method,params:{...params,_meta:meta}};\n const headers:any={\n \"content-type\":\"application/json\",\n \"accept\":\"application/json, text/event-stream\",\n \"mcp-protocol-version\":\"2026-07-28\",\n \"mcp-method\":method\n };\n if(name) headers[\"mcp-name\"]=name;\n const r=await handler(new Request(ORIGIN+\"/mcp\",{method:\"POST\",headers,body:JSON.stringify(body)}));\n const text=await r.text();\n console.log(JSON.stringify({method,status:r.status,headers:Object.fromEntries(r.headers.entries()),text}));\n}\nawait modern(\"server/discover\",1,{});\nawait modern(\"tools/list\",2,{});\n",[155],"a4596b78-e7ad-4908-833d-692a11ab064c",["D",1788897908743],8,[28],"93717156-4bae-4442-b148-fddc2d762e51","README.md","01a08279-ff90-7328-a817-b5a38f5e46ce",1,["D",1788895428429],"# MCP server\n\nA minimal MCP server with one example tool (that gets the current time in a\ngiven timezone).\n\nRemix this val to create your own MCP server on Val\nTown—[**_just like the MCP Core Maintainer team!_**](https://blog.val.town/mcp-core-maintainers)\n\nThis MCP server (<50 LOC in [`main.ts`](./main.ts)) is live on\n[mcp-time.val.run](https://mcp-time.val.run) if you'd like to test it\n([playground.ai.cloudflare.com](https://playground.ai.cloudflare.com) is a great\nplace to test an MCP server quickly). It's built on the v2 TypeScript SDK,\ncompatible with “MCP 2.0” (technically, the\n[2026-07-28 spec](https://modelcontextprotocol.io/specification/2026-07-28)). It\nalso supports the legacy spec, for MCP clients that haven't upgraded yet.",[167],"pulls","branches","forks","envVars",{"_180":61,"_182":61},"connections",{"_180":61,"_181":61},"count","unfilledCount","emptyCount",{"_43":166,"_32":167,"_30":168,"_138":-5,"_41":42,"_40":169,"_140":125,"_38":201,"_13":61,"_33":20,"_35":171,"_24":25,"_144":-5,"_189":202,"_27":203},{"_43":162,"_32":28,"_30":31,"_138":-5,"_41":42,"_40":14,"_140":25,"_38":198,"_13":164,"_33":34,"_35":37,"_24":25,"_144":-5,"_189":199,"_27":200},{"_43":154,"_32":155,"_30":156,"_138":-5,"_41":42,"_40":157,"_140":125,"_38":195,"_13":159,"_33":142,"_35":160,"_24":25,"_144":-5,"_189":196,"_27":197},{"_43":146,"_32":147,"_30":148,"_138":-5,"_41":42,"_40":149,"_140":125,"_38":192,"_13":151,"_33":142,"_35":152,"_24":25,"_144":-5,"_189":193,"_27":194},{"_43":135,"_32":136,"_30":137,"_138":-5,"_41":42,"_40":139,"_140":25,"_38":188,"_13":61,"_33":142,"_35":143,"_24":25,"_144":-5,"_189":190,"_27":191},["D",1788897683862],"children",[],[136],["D",1788897301321],[],[147],["D",1788897089884],[],[155],["D",1788897908743],[],[28],["D",1788895428429],[],[167],["D",1788895428429],["D",1789591905500],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"ctx",{"_80":-5,"_127":242,"_243":244,"_245":246,"_247":25,"_248":25,"_249":25,"_250":125,"_251":-5,"_252":-7,"_253":-7,"_254":61,"_255":25,"_256":25,"_257":-5,"_258":25,"_259":25,"_260":25,"_261":-5},"ENV",{"_213":214,"_215":216,"_217":88,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233,"_234":235,"_236":237,"_238":239,"_240":241},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","518c05f2c13b243481ef29134a5672756425e459","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v17