Project Brain Work Auth Canary

This is candidate-only and grants no Brain authority.

Continue authenticated canary

${JSON.stringify({\n    schema: WORK_AUTH_SCHEMA,\n    challenge_sha256: challengeHash,\n    expires_at_ms: expiresAt,\n    authority: \"CANDIDATE_NONAUTHORITY\",\n    p_real_increment: 0,\n  }, null, 2)}

`;\n return new Response(body, {\n status: 200,\n headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n}\n\nasync function attestWorkAuth(req: Request) {\n await ensureWorkAuthTable();\n const u = new URL(req.url);\n const challenge = u.searchParams.get(\"challenge\") ?? \"\";\n if (!/^[A-Za-z0-9_-]{40,128}$/.test(challenge)) {\n return jsonResponse({\n schema: WORK_AUTH_SCHEMA,\n ok: false,\n classification: \"REJECT_MALFORMED_CHALLENGE\",\n production_admission: false,\n p_real_increment: 0,\n }, 400);\n }\n\n let auth: any;\n try {\n auth = await verifyChatGPTWorkRequest(req);\n } catch (e) {\n return jsonResponse({\n schema: WORK_AUTH_SCHEMA,\n ok: false,\n classification: \"REJECT_WEB_BOT_AUTH\",\n reason: e instanceof Error ? e.message : String(e),\n production_admission: false,\n p_real_increment: 0,\n }, 401);\n }\n\n if (!auth.challengeCryptographicallyBound) {\n return jsonResponse({\n schema: WORK_AUTH_SCHEMA,\n ok: false,\n classification: \"REJECT_CHALLENGE_NOT_CRYPTOGRAPHICALLY_BOUND\",\n signed_components: auth.componentNames,\n host_origin_authenticated: true,\n host_path_authenticated: auth.pathCryptographicallyBound,\n production_admission: false,\n p_real_increment: 0,\n }, 401);\n }\n\n const challengeHash = await sha256(\n `${WORK_AUTH_SCHEMA}\\0challenge\\0${PROJECT}\\0${challenge}`,\n );\n const now = Date.now();\n\n let update: any;\n try {\n update = await sqlite.execute({\n sql: `UPDATE pb_work_webbot_auth_canary_v2\n SET consumed_at_ms=?,signature_hash=?,keyid=?\n WHERE challenge_hash=?\n AND consumed_at_ms IS NULL\n AND issued_at_ms<=?\n AND expires_at_ms>=?\n RETURNING issued_at_ms,expires_at_ms,consumed_at_ms`,\n args: [\n now,\n auth.signatureHash,\n auth.verified.keyid,\n challengeHash,\n now,\n now,\n ],\n });\n } catch (e) {\n const msg = e instanceof Error ? e.message : String(e);\n const replay = /UNIQUE|signature_hash/i.test(msg);\n return jsonResponse({\n schema: WORK_AUTH_SCHEMA,\n ok: false,\n classification: replay ? \"REJECT_SIGNATURE_REPLAY\" : \"REJECT_CANARY_STATE_ERROR\",\n production_admission: false,\n p_real_increment: 0,\n }, replay ? 409 : 500);\n }\n\n if ((update?.rows ?? []).length !== 1) {\n const q: any = await sqlite.execute({\n sql: `SELECT issued_at_ms,expires_at_ms,consumed_at_ms\n FROM pb_work_webbot_auth_canary_v2 WHERE challenge_hash=?`,\n args: [challengeHash],\n });\n const row = q?.rows?.[0] ?? null;\n const classification = !row\n ? \"REJECT_UNKNOWN_CHALLENGE\"\n : row.consumed_at_ms != null\n ? \"REJECT_CHALLENGE_REPLAY\"\n : Number(row.expires_at_ms) < now\n ? \"REJECT_EXPIRED_CHALLENGE\"\n : Number(row.issued_at_ms) > now\n ? \"REJECT_FUTURE_CHALLENGE\"\n : \"REJECT_CHALLENGE_STATE_AMBIGUOUS\";\n return jsonResponse({\n schema: WORK_AUTH_SCHEMA,\n ok: false,\n classification,\n production_admission: false,\n p_real_increment: 0,\n }, 409);\n }\n\n const receipt = {\n schema: WORK_AUTH_SCHEMA,\n ok: true,\n classification: \"AUTHENTICATED_CHATGPT_WORK_CHALLENGE_BOUND_INGRESS_CANDIDATE\",\n project: PROJECT,\n observed_at_ms: now,\n challenge_sha256: challengeHash,\n signature_sha256: auth.signatureHash,\n signature_agent: OPENAI_SIGNATURE_AGENT,\n keyid: auth.verified.keyid,\n algorithm: auth.verified.algorithm,\n signed_created: auth.verified.created?.toISOString?.() ?? null,\n signed_expires: auth.verified.expires?.toISOString?.() ?? null,\n signed_components: auth.componentNames,\n host_origin_authenticated: true,\n host_path_authenticated: auth.pathCryptographicallyBound,\n one_time_challenge_consumed: true,\n challenge_cryptographically_bound_in_http_signature: auth.challengeCryptographicallyBound,\n raw_signature_persisted: false,\n raw_challenge_persisted: false,\n execution_provenance_scope: \"CHATGPT_WORK_BROWSER_ORIGIN_LIVENESS_ONLY\",\n distinct_physical_chatgpt_execution_proven: false,\n independent_review_eligible: false,\n production_admission: false,\n authority_promotion: false,\n p_real_increment: 0,\n human_authority_approval: false,\n direct_sprites_calls: 0,\n };\n\n await sqlite.execute({\n sql: `UPDATE pb_work_webbot_auth_canary_v2\n SET receipt_json=? WHERE challenge_hash=? AND signature_hash=?`,\n args: [JSON.stringify(receipt), challengeHash, auth.signatureHash],\n });\n\n return jsonResponse(receipt, 200);\n}\n\nconst handler = createMcpHandler(() => {\n const server = new McpServer({\n name: \"ew-session-attestation-probe\",\n version: \"1.0.0-candidate\",\n });\n\n server.registerTool(\"issue-session-attestation-challenge\", {\n description:\n \"Candidate-only: issue a fresh one-time challenge for testing ChatGPT session metadata. Does not grant authority.\",\n inputSchema: z.object({}),\n annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },\n }, async () => {\n await ensureTable();\n const raw = new Uint8Array(32);\n crypto.getRandomValues(raw);\n const challenge = b64url(raw);\n const challengeHash = await sha256(`${SCHEMA}\\0challenge\\0${PROJECT}\\0${challenge}`);\n const issued = Date.now();\n const expires = issued + CHALLENGE_TTL_MS;\n await sqlite.execute({\n sql: `INSERT INTO ew_session_attestation_probe_v1\n (challenge_hash,issued_at_ms,expires_at_ms,classification)\n VALUES(?,?,?,?)`,\n args: [challengeHash, issued, expires, \"ISSUED_CANDIDATE_NONAUTHORITY\"],\n });\n return result({\n schema: SCHEMA,\n project: PROJECT,\n challenge,\n challenge_sha256: challengeHash,\n issued_at_ms: issued,\n expires_at_ms: expires,\n one_time: true,\n authority: \"CANDIDATE_NONAUTHORITY\",\n physical_execution_provenance: false,\n });\n });\n\n server.registerTool(\"attest-current-chatgpt-session\", {\n description:\n \"Candidate-only: consume a fresh challenge and hash host-provided openai/session + openai/subject request metadata server-side. Raw metadata is never returned. Metadata observation alone is NOT authenticated ChatGPT-host proof.\",\n inputSchema: z.object({\n challenge: z.string().min(40).max(128).regex(/^[A-Za-z0-9_-]+$/),\n }),\n annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },\n }, async ({ challenge }, extra: any) => {\n await ensureTable();\n const meta = extra?.mcpReq?._meta ?? extra?._meta ?? null;\n const session = safeMetaString(meta?.[\"openai/session\"]);\n const subject = safeMetaString(meta?.[\"openai/subject\"]);\n const organization = safeMetaString(meta?.[\"openai/organization\"]);\n\n if (!session || !subject) {\n return result({\n schema: SCHEMA,\n ok: false,\n classification: \"REJECT_MISSING_OR_MALFORMED_REQUIRED_HOST_METADATA\",\n observed_openai_session: !!session,\n observed_openai_subject: !!subject,\n raw_metadata_returned: false,\n physical_execution_provenance: false,\n promotion_safe: false,\n }, true);\n }\n\n const challengeHash = await sha256(`${SCHEMA}\\0challenge\\0${PROJECT}\\0${challenge}`);\n const now = Date.now();\n const sessionHash = await sha256(`${SCHEMA}\\0session\\0${PROJECT}\\0${session}`);\n const subjectHash = await sha256(`${SCHEMA}\\0subject\\0${PROJECT}\\0${subject}`);\n const organizationHash = organization\n ? await sha256(`${SCHEMA}\\0organization\\0${PROJECT}\\0${organization}`)\n : null;\n\n const receipt = {\n schema: SCHEMA,\n project: PROJECT,\n challenge_sha256: challengeHash,\n session_sha256: sessionHash,\n subject_sha256: subjectHash,\n organization_sha256: organizationHash,\n observed_from_request_meta: true,\n raw_metadata_returned: false,\n host_path_authenticated: false,\n generic_mcp_client_can_supply_meta: true,\n classification: \"HOST_METADATA_OBSERVED_NOT_AUTHENTICATED_HOST_PROOF\",\n physical_execution_provenance: false,\n promotion_safe: false,\n note:\n \"Different session hashes can be useful experimental evidence only after the caller path is independently proven to be ChatGPT-host-controlled and non-spoofable. This candidate does not make that claim.\",\n };\n const receiptJson = JSON.stringify(receipt);\n\n const u: any = await sqlite.execute({\n sql: `UPDATE ew_session_attestation_probe_v1\n SET consumed_at_ms=?,session_hash=?,subject_hash=?,organization_hash=?,\n classification=?,receipt_json=?\n WHERE challenge_hash=?\n AND consumed_at_ms IS NULL\n AND issued_at_ms<=?\n AND expires_at_ms>=?\n RETURNING issued_at_ms,expires_at_ms,consumed_at_ms`,\n args: [\n now, sessionHash, subjectHash, organizationHash,\n receipt.classification, receiptJson, challengeHash, now, now,\n ],\n });\n\n if ((u.rows ?? []).length !== 1) {\n const q: any = await sqlite.execute({\n sql: `SELECT issued_at_ms,expires_at_ms,consumed_at_ms\n FROM ew_session_attestation_probe_v1 WHERE challenge_hash=?`,\n args: [challengeHash],\n });\n const row = q.rows?.[0] ?? null;\n const classification = !row\n ? \"REJECT_UNKNOWN_CHALLENGE\"\n : row.consumed_at_ms != null\n ? \"REJECT_REPLAY_ALREADY_CONSUMED\"\n : Number(row.expires_at_ms) < now\n ? \"REJECT_EXPIRED_CHALLENGE\"\n : Number(row.issued_at_ms) > now\n ? \"REJECT_FUTURE_CHALLENGE\"\n : \"REJECT_CHALLENGE_STATE_AMBIGUOUS\";\n return result({\n schema: SCHEMA,\n ok: false,\n classification,\n challenge_sha256: challengeHash,\n raw_metadata_returned: false,\n physical_execution_provenance: false,\n promotion_safe: false,\n }, true);\n }\n\n return result({ ok: true, ...receipt });\n });\n\n return server;\n});\n\nexport default async function fetch(req: Request) {\n const u = new URL(req.url);\n if (req.method === \"GET\" && u.pathname === \"/work-auth-canary/v1/challenge\") {\n return await issueWorkAuthChallenge(req);\n }\n if (req.method === \"GET\" && u.pathname === \"/work-auth-canary/v1/attest\") {\n return await attestWorkAuth(req);\n }\n return await handler.fetch(req);\n}\n",[147],"10728816-97a8-49bb-bc56-90afe8d37385",["D",1788897432847],10,[28],"00f43aa6-0e88-4f60-a8a8-6d4fb4c2a354","main.ts",12,["D",1788896819634],5,"import {\n createMcpHandler,\n McpServer,\n} from \"npm:@modelcontextprotocol/server@2\";\nimport * as z from \"npm:zod@4/v4\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { verify as verifyWebBot } from \"npm:web-bot-auth@0.2.0\";\nimport { verifierFromJWK } from \"npm:web-bot-auth@0.2.0/crypto\";\n\nconst PROJECT = \"mosadek/project-brain-live-v1-durable\";\nconst SCHEMA = \"EW_CHATGPT_SESSION_ATTESTATION_PROBE_V1\";\nconst CHALLENGE_TTL_MS = 120_000;\nconst META_MAX = 1024;\nconst enc = new TextEncoder();\n\nasync function sha256(s: string) {\n const d = await crypto.subtle.digest(\"SHA-256\", enc.encode(s));\n return [...new Uint8Array(d)].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction b64url(bytes: Uint8Array) {\n let s = \"\";\n for (const b of bytes) s += String.fromCharCode(b);\n return btoa(s).replaceAll(\"+\", \"-\").replaceAll(\"/\", \"_\").replace(/=+$/g, \"\");\n}\n\nfunction safeMetaString(v: unknown): string | null {\n if (typeof v !== \"string\" || v.length < 1 || v.length > META_MAX) return null;\n if (/[\\u0000-\\u001f\\u007f]/.test(v)) return null;\n return v;\n}\n\nasync function ensureTable() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ew_session_attestation_probe_v1(\n challenge_hash TEXT PRIMARY KEY,\n issued_at_ms INTEGER NOT NULL,\n expires_at_ms INTEGER NOT NULL,\n consumed_at_ms INTEGER,\n session_hash TEXT,\n subject_hash TEXT,\n organization_hash TEXT,\n classification TEXT,\n receipt_json TEXT\n )`);\n}\n\nfunction result(obj: unknown, isError = false) {\n return {\n isError,\n content: [{ type: \"text\" as const, text: JSON.stringify(obj) }],\n };\n}\n\n\nconst WORK_AUTH_SCHEMA = \"PROJECT_BRAIN_CHATGPT_WORK_WEBBOT_AUTH_CANARY_V1\";\nconst OPENAI_SIGNATURE_AGENT = \"https://chatgpt.com\";\nconst OPENAI_SIGNATURE_DIRECTORY =\n \"https://chatgpt.com/.well-known/http-message-signatures-directory\";\nconst WORK_CHALLENGE_TTL_MS = 120_000;\n\nfunction jsonResponse(obj: unknown, status = 200, headers: Record = {}) {\n return new Response(JSON.stringify(obj, null, 2), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", \"cache-control\": \"no-store\", ...headers },\n });\n}\n\nasync function ensureWorkAuthTable() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS pb_work_webbot_auth_canary_v1(\n challenge_hash TEXT PRIMARY KEY,\n issued_at_ms INTEGER NOT NULL,\n expires_at_ms INTEGER NOT NULL,\n consumed_at_ms INTEGER,\n signature_hash TEXT UNIQUE,\n keyid TEXT,\n receipt_json TEXT\n )`);\n}\n\nasync function resolveOpenAIVerifier(profile: any) {\n if (\n profile?.signatureAgent?.uri !== OPENAI_SIGNATURE_AGENT ||\n profile?.signatureAgent?.type !== \"directory\" ||\n profile?.algorithm !== \"ed25519\"\n ) {\n throw new Error(\"REJECT_SIGNATURE_AGENT_PROFILE\");\n }\n\n const r = await fetch(OPENAI_SIGNATURE_DIRECTORY, {\n headers: { accept: \"application/http-message-signatures-directory+json\" },\n signal: AbortSignal.timeout(10_000),\n });\n if (!r.ok) throw new Error(\"REJECT_OPENAI_KEY_DIRECTORY_UNAVAILABLE\");\n\n const directory: any = await r.json();\n if (\n directory?.signature_agent !== OPENAI_SIGNATURE_AGENT ||\n directory?.purpose !== \"ai\" ||\n !Array.isArray(directory?.keys)\n ) {\n throw new Error(\"REJECT_OPENAI_KEY_DIRECTORY_SCHEMA\");\n }\n\n const nowSec = Math.floor(Date.now() / 1000);\n for (const key of directory.keys) {\n if (\n key?.kty !== \"OKP\" ||\n key?.crv !== \"Ed25519\" ||\n key?.use !== \"sig\" ||\n (typeof key?.nbf === \"number\" && key.nbf > nowSec) ||\n (typeof key?.exp === \"number\" && key.exp < nowSec)\n ) continue;\n\n const verifier = await verifierFromJWK(key);\n if (verifier.keyid === profile.keyid) return verifier;\n }\n throw new Error(\"REJECT_OPENAI_KEYID_NOT_CURRENT\");\n}\n\nasync function verifyChatGPTWorkRequest(req: Request) {\n const signature = req.headers.get(\"signature\");\n const signatureInput = req.headers.get(\"signature-input\");\n const signatureAgent = req.headers.get(\"signature-agent\");\n if (!signature || !signatureInput || !signatureAgent) {\n throw new Error(\"REJECT_MISSING_WEB_BOT_AUTH_HEADERS\");\n }\n\n const signatureHash = await sha256(\n `${WORK_AUTH_SCHEMA}\\0signature\\0${signature}\\0${signatureInput}\\0${signatureAgent}`,\n );\n\n const verified: any = await verifyWebBot(req, {\n maxAge: 180,\n clockSkew: 30,\n resolver: resolveOpenAIVerifier,\n validate: async (v: any) => {\n const names = new Set((v?.components ?? []).map((x: any) => x?.name));\n return (\n v?.signatureAgent?.uri === OPENAI_SIGNATURE_AGENT &&\n v?.signatureAgent?.type === \"directory\" &&\n v?.algorithm === \"ed25519\" &&\n names.has(\"@authority\") &&\n names.has(\"signature-agent\")\n );\n },\n });\n\n const componentNames = (verified?.components ?? []).map((x: any) => x?.name);\n return {\n verified,\n signatureHash,\n componentNames,\n challengeCryptographicallyBound:\n componentNames.includes(\"@query\") ||\n componentNames.includes(\"@query-param\") ||\n componentNames.includes(\"@path\") ||\n componentNames.includes(\"@request-target\") ||\n componentNames.includes(\"@target-uri\"),\n };\n}\n\nasync function issueWorkAuthChallenge(req: Request) {\n await ensureWorkAuthTable();\n const raw = new Uint8Array(32);\n crypto.getRandomValues(raw);\n const challenge = b64url(raw);\n const challengeHash = await sha256(\n `${WORK_AUTH_SCHEMA}\\0challenge\\0${PROJECT}\\0${challenge}`,\n );\n const issuedAt = Date.now();\n const expiresAt = issuedAt + WORK_CHALLENGE_TTL_MS;\n await sqlite.execute({\n sql: `INSERT INTO pb_work_webbot_auth_canary_v1\n (challenge_hash,issued_at_ms,expires_at_ms)\n VALUES(?,?,?)`,\n args: [challengeHash, issuedAt, expiresAt],\n });\n\n const attest = new URL(\"/work-auth-canary/v1/attest\", req.url);\n attest.searchParams.set(\"challenge\", challenge);\n const body = `\n Project Brain Work Auth Canary\n

Project Brain Work Auth Canary

This is candidate-only and grants no Brain authority.

Continue authenticated canary

${JSON.stringify({\n    schema: WORK_AUTH_SCHEMA,\n    challenge_sha256: challengeHash,\n    expires_at_ms: expiresAt,\n    authority: \"CANDIDATE_NONAUTHORITY\",\n    p_real_increment: 0,\n  }, null, 2)}

`;\n return new Response(body, {\n status: 200,\n headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n}\n\nasync function attestWorkAuth(req: Request) {\n await ensureWorkAuthTable();\n const u = new URL(req.url);\n const challenge = u.searchParams.get(\"challenge\") ?? \"\";\n if (!/^[A-Za-z0-9_-]{40,128}$/.test(challenge)) {\n return jsonResponse({\n schema: WORK_AUTH_SCHEMA,\n ok: false,\n classification: \"REJECT_MALFORMED_CHALLENGE\",\n production_admission: false,\n p_real_increment: 0,\n }, 400);\n }\n\n let auth: any;\n try {\n auth = await verifyChatGPTWorkRequest(req);\n } catch (e) {\n return jsonResponse({\n schema: WORK_AUTH_SCHEMA,\n ok: false,\n classification: \"REJECT_WEB_BOT_AUTH\",\n reason: e instanceof Error ? e.message : String(e),\n production_admission: false,\n p_real_increment: 0,\n }, 401);\n }\n\n const challengeHash = await sha256(\n `${WORK_AUTH_SCHEMA}\\0challenge\\0${PROJECT}\\0${challenge}`,\n );\n const now = Date.now();\n\n let update: any;\n try {\n update = await sqlite.execute({\n sql: `UPDATE pb_work_webbot_auth_canary_v1\n SET consumed_at_ms=?,signature_hash=?,keyid=?\n WHERE challenge_hash=?\n AND consumed_at_ms IS NULL\n AND issued_at_ms<=?\n AND expires_at_ms>=?\n RETURNING issued_at_ms,expires_at_ms,consumed_at_ms`,\n args: [\n now,\n auth.signatureHash,\n auth.verified.keyid,\n challengeHash,\n now,\n now,\n ],\n });\n } catch (e) {\n const msg = e instanceof Error ? e.message : String(e);\n const replay = /UNIQUE|signature_hash/i.test(msg);\n return jsonResponse({\n schema: WORK_AUTH_SCHEMA,\n ok: false,\n classification: replay ? \"REJECT_SIGNATURE_REPLAY\" : \"REJECT_CANARY_STATE_ERROR\",\n production_admission: false,\n p_real_increment: 0,\n }, replay ? 409 : 500);\n }\n\n if ((update?.rows ?? []).length !== 1) {\n const q: any = await sqlite.execute({\n sql: `SELECT issued_at_ms,expires_at_ms,consumed_at_ms\n FROM pb_work_webbot_auth_canary_v1 WHERE challenge_hash=?`,\n args: [challengeHash],\n });\n const row = q?.rows?.[0] ?? null;\n const classification = !row\n ? \"REJECT_UNKNOWN_CHALLENGE\"\n : row.consumed_at_ms != null\n ? \"REJECT_CHALLENGE_REPLAY\"\n : Number(row.expires_at_ms) < now\n ? \"REJECT_EXPIRED_CHALLENGE\"\n : Number(row.issued_at_ms) > now\n ? \"REJECT_FUTURE_CHALLENGE\"\n : \"REJECT_CHALLENGE_STATE_AMBIGUOUS\";\n return jsonResponse({\n schema: WORK_AUTH_SCHEMA,\n ok: false,\n classification,\n production_admission: false,\n p_real_increment: 0,\n }, 409);\n }\n\n const receipt = {\n schema: WORK_AUTH_SCHEMA,\n ok: true,\n classification: \"AUTHENTICATED_CHATGPT_WORK_INGRESS_CANDIDATE\",\n project: PROJECT,\n observed_at_ms: now,\n challenge_sha256: challengeHash,\n signature_sha256: auth.signatureHash,\n signature_agent: OPENAI_SIGNATURE_AGENT,\n keyid: auth.verified.keyid,\n algorithm: auth.verified.algorithm,\n signed_created: auth.verified.created?.toISOString?.() ?? null,\n signed_expires: auth.verified.expires?.toISOString?.() ?? null,\n signed_components: auth.componentNames,\n host_path_authenticated: true,\n one_time_challenge_consumed: true,\n challenge_cryptographically_bound_in_http_signature: auth.challengeCryptographicallyBound,\n raw_signature_persisted: false,\n raw_challenge_persisted: false,\n execution_provenance_scope: \"CHATGPT_WORK_BROWSER_ORIGIN_LIVENESS_ONLY\",\n distinct_physical_chatgpt_execution_proven: false,\n independent_review_eligible: false,\n production_admission: false,\n authority_promotion: false,\n p_real_increment: 0,\n human_authority_approval: false,\n direct_sprites_calls: 0,\n };\n\n await sqlite.execute({\n sql: `UPDATE pb_work_webbot_auth_canary_v1\n SET receipt_json=? WHERE challenge_hash=? AND signature_hash=?`,\n args: [JSON.stringify(receipt), challengeHash, auth.signatureHash],\n });\n\n return jsonResponse(receipt, 200);\n}\n\nconst handler = createMcpHandler(() => {\n const server = new McpServer({\n name: \"ew-session-attestation-probe\",\n version: \"1.0.0-candidate\",\n });\n\n server.registerTool(\"issue-session-attestation-challenge\", {\n description:\n \"Candidate-only: issue a fresh one-time challenge for testing ChatGPT session metadata. Does not grant authority.\",\n inputSchema: z.object({}),\n annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },\n }, async () => {\n await ensureTable();\n const raw = new Uint8Array(32);\n crypto.getRandomValues(raw);\n const challenge = b64url(raw);\n const challengeHash = await sha256(`${SCHEMA}\\0challenge\\0${PROJECT}\\0${challenge}`);\n const issued = Date.now();\n const expires = issued + CHALLENGE_TTL_MS;\n await sqlite.execute({\n sql: `INSERT INTO ew_session_attestation_probe_v1\n (challenge_hash,issued_at_ms,expires_at_ms,classification)\n VALUES(?,?,?,?)`,\n args: [challengeHash, issued, expires, \"ISSUED_CANDIDATE_NONAUTHORITY\"],\n });\n return result({\n schema: SCHEMA,\n project: PROJECT,\n challenge,\n challenge_sha256: challengeHash,\n issued_at_ms: issued,\n expires_at_ms: expires,\n one_time: true,\n authority: \"CANDIDATE_NONAUTHORITY\",\n physical_execution_provenance: false,\n });\n });\n\n server.registerTool(\"attest-current-chatgpt-session\", {\n description:\n \"Candidate-only: consume a fresh challenge and hash host-provided openai/session + openai/subject request metadata server-side. Raw metadata is never returned. Metadata observation alone is NOT authenticated ChatGPT-host proof.\",\n inputSchema: z.object({\n challenge: z.string().min(40).max(128).regex(/^[A-Za-z0-9_-]+$/),\n }),\n annotations: { readOnlyHint: false, destructiveHint: false, openWorldHint: false },\n }, async ({ challenge }, extra: any) => {\n await ensureTable();\n const meta = extra?.mcpReq?._meta ?? extra?._meta ?? null;\n const session = safeMetaString(meta?.[\"openai/session\"]);\n const subject = safeMetaString(meta?.[\"openai/subject\"]);\n const organization = safeMetaString(meta?.[\"openai/organization\"]);\n\n if (!session || !subject) {\n return result({\n schema: SCHEMA,\n ok: false,\n classification: \"REJECT_MISSING_OR_MALFORMED_REQUIRED_HOST_METADATA\",\n observed_openai_session: !!session,\n observed_openai_subject: !!subject,\n raw_metadata_returned: false,\n physical_execution_provenance: false,\n promotion_safe: false,\n }, true);\n }\n\n const challengeHash = await sha256(`${SCHEMA}\\0challenge\\0${PROJECT}\\0${challenge}`);\n const now = Date.now();\n const sessionHash = await sha256(`${SCHEMA}\\0session\\0${PROJECT}\\0${session}`);\n const subjectHash = await sha256(`${SCHEMA}\\0subject\\0${PROJECT}\\0${subject}`);\n const organizationHash = organization\n ? await sha256(`${SCHEMA}\\0organization\\0${PROJECT}\\0${organization}`)\n : null;\n\n const receipt = {\n schema: SCHEMA,\n project: PROJECT,\n challenge_sha256: challengeHash,\n session_sha256: sessionHash,\n subject_sha256: subjectHash,\n organization_sha256: organizationHash,\n observed_from_request_meta: true,\n raw_metadata_returned: false,\n host_path_authenticated: false,\n generic_mcp_client_can_supply_meta: true,\n classification: \"HOST_METADATA_OBSERVED_NOT_AUTHENTICATED_HOST_PROOF\",\n physical_execution_provenance: false,\n promotion_safe: false,\n note:\n \"Different session hashes can be useful experimental evidence only after the caller path is independently proven to be ChatGPT-host-controlled and non-spoofable. This candidate does not make that claim.\",\n };\n const receiptJson = JSON.stringify(receipt);\n\n const u: any = await sqlite.execute({\n sql: `UPDATE ew_session_attestation_probe_v1\n SET consumed_at_ms=?,session_hash=?,subject_hash=?,organization_hash=?,\n classification=?,receipt_json=?\n WHERE challenge_hash=?\n AND consumed_at_ms IS NULL\n AND issued_at_ms<=?\n AND expires_at_ms>=?\n RETURNING issued_at_ms,expires_at_ms,consumed_at_ms`,\n args: [\n now, sessionHash, subjectHash, organizationHash,\n receipt.classification, receiptJson, challengeHash, now, now,\n ],\n });\n\n if ((u.rows ?? []).length !== 1) {\n const q: any = await sqlite.execute({\n sql: `SELECT issued_at_ms,expires_at_ms,consumed_at_ms\n FROM ew_session_attestation_probe_v1 WHERE challenge_hash=?`,\n args: [challengeHash],\n });\n const row = q.rows?.[0] ?? null;\n const classification = !row\n ? \"REJECT_UNKNOWN_CHALLENGE\"\n : row.consumed_at_ms != null\n ? \"REJECT_REPLAY_ALREADY_CONSUMED\"\n : Number(row.expires_at_ms) < now\n ? \"REJECT_EXPIRED_CHALLENGE\"\n : Number(row.issued_at_ms) > now\n ? \"REJECT_FUTURE_CHALLENGE\"\n : \"REJECT_CHALLENGE_STATE_AMBIGUOUS\";\n return result({\n schema: SCHEMA,\n ok: false,\n classification,\n challenge_sha256: challengeHash,\n raw_metadata_returned: false,\n physical_execution_provenance: false,\n promotion_safe: false,\n }, true);\n }\n\n return result({ ok: true, ...receipt });\n });\n\n return server;\n});\n\nexport default async function fetch(req: Request) {\n const u = new URL(req.url);\n if (req.method === \"GET\" && u.pathname === \"/work-auth-canary/v1/challenge\") {\n return await issueWorkAuthChallenge(req);\n }\n if (req.method === \"GET\" && u.pathname === \"/work-auth-canary/v1/attest\") {\n return await attestWorkAuth(req);\n }\n return await handler.fetch(req);\n}\n",[160],"dc40ea94-8b8f-49c9-9b3a-0ea07dd5c595","README.md","01a081e2-1f44-7010-93c8-4641009b682e",1,["D",1788885475025],"# MCP server\n\nA minimal MCP server with one example tool (that gets the current time in a\ngiven timezone).\n\nRemix this val to create your own MCP server on Val\nTown—[**_just like the MCP Core Maintainer team!_**](https://blog.val.town/mcp-core-maintainers)\n\nThis MCP server (<50 LOC in [`main.ts`](./main.ts)) is live on\n[mcp-time.val.run](https://mcp-time.val.run) if you'd like to test it\n([playground.ai.cloudflare.com](https://playground.ai.cloudflare.com) is a great\nplace to test an MCP server quickly). It's built on the v2 TypeScript SDK,\ncompatible with “MCP 2.0” (technically, the\n[2026-07-28 spec](https://modelcontextprotocol.io/specification/2026-07-28)). It\nalso supports the legacy spec, for MCP clients that haven't upgraded yet.",[167],"pulls","branches","forks","envVars",{"_180":62,"_182":62},"connections",{"_180":62,"_181":62},"count","unfilledCount","emptyCount",{"_43":166,"_32":167,"_30":168,"_139":-5,"_41":42,"_40":169,"_141":126,"_38":201,"_13":62,"_33":20,"_35":171,"_24":25,"_144":-5,"_189":202,"_27":203},{"_43":159,"_32":160,"_30":57,"_139":-5,"_41":42,"_40":161,"_141":126,"_38":198,"_13":163,"_33":152,"_35":164,"_24":25,"_144":-5,"_189":199,"_27":200},{"_43":155,"_32":28,"_30":31,"_139":-5,"_41":42,"_40":14,"_141":25,"_38":195,"_13":157,"_33":34,"_35":37,"_24":25,"_144":-5,"_189":196,"_27":197},{"_43":146,"_32":147,"_30":148,"_139":-5,"_41":42,"_40":149,"_141":126,"_38":192,"_13":151,"_33":152,"_35":153,"_24":25,"_144":-5,"_189":193,"_27":194},{"_43":136,"_32":137,"_30":138,"_139":-5,"_41":42,"_40":140,"_141":126,"_38":188,"_13":62,"_33":34,"_35":143,"_24":25,"_144":-5,"_189":190,"_27":191},["D",1788897418265],"children",[],[137],["D",1788897195254],[],[147],["D",1788897432847],[],[28],["D",1788896819634],[],[160],["D",1788885475025],[],[167],["D",1788885475025],["D",1789494036282],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_128":242,"_243":244,"_245":246,"_247":25,"_248":25,"_249":25,"_250":126,"_251":-5,"_252":-7,"_253":-7,"_254":62,"_255":25,"_256":25,"_257":-5,"_258":25,"_259":25,"_260":25,"_261":-5},"ENV",{"_213":214,"_215":216,"_217":89,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233,"_234":235,"_236":237,"_238":239,"_240":241},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v28