[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_279":280,"_281":282},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":58,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",50,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","fbed6f64-acf7-11f1-b3b4-1607ee4eb77e","name","fileType","http","content","const SOURCE_SHA = \"9152f5a50de42be55508f0effed5ed09aee44c60\";\nconst PROTOCOL_VERSION = \"2025-06-18\";\nconst FALLBACK_PROTOCOL_VERSION = \"2025-03-26\";\nconst OPENAI_APPS_CHALLENGE_TOKEN = Deno.env.get(\"OPENAI_APPS_CHALLENGE_TOKEN\")?.trim() ?? \"\";\nconst ALLOWED_ORIGINS = new Set([\n \"https://chatgpt.com\",\n \"https://chat.openai.com\",\n \"https://platform.openai.com\",\n]);\nconst EXPOSED_TOOLS = [\n \"crm_get_service_readiness\",\n \"crm_prepare_note\",\n \"crm_prepare_lead_stage_change\",\n \"crm_prepare_outreach_draft\",\n] as const;\nconst PLANNED_UNEXPOSED_TOOLS = [\n \"crm_search_contacts\",\n \"crm_get_contact\",\n \"crm_search_leads\",\n \"crm_get_pipeline_summary\",\n \"crm_search_conversations\",\n \"crm_search_knowledge\",\n \"crm_get_analytics_summary\",\n] as const;\n\nconst boundedId = { type: \"string\", minLength: 1, maxLength: 200, pattern: \"\\\\S\" };\nconst boundedString = (maxLength: number) => ({ type: \"string\", minLength: 1, maxLength, pattern: \"\\\\S\" });\nconst reviewBase = {\n state: { type: \"string\", const: \"REVIEW_REQUIRED\" },\n side_effect: { type: \"boolean\", const: false },\n};\nconst annotations = { readOnlyHint: true, destructiveHint: false, openWorldHint: false };\n\nconst tools = [\n {\n name: \"crm_get_service_readiness\",\n title: \"Get CRM service readiness\",\n description: \"Returns bounded publication/runtime readiness metadata. It does not access customer records.\",\n inputSchema: { type: \"object\", properties: {}, additionalProperties: false },\n outputSchema: {\n type: \"object\",\n properties: {\n state: { type: \"string\", const: \"MCP_CONTRACT_ACTIVE_BOUNDED\" },\n customer_data_tools_exposed: { type: \"boolean\", const: false },\n mutating_tools_exposed: { type: \"boolean\", const: false },\n production_authority: { type: \"boolean\", const: false },\n submission_authority: { type: \"boolean\", const: false },\n },\n required: [\"state\", \"customer_data_tools_exposed\", \"mutating_tools_exposed\", \"production_authority\", \"submission_authority\"],\n additionalProperties: false,\n },\n annotations,\n },\n {\n name: \"crm_prepare_note\",\n title: \"Prepare CRM note\",\n description: \"Creates a reviewable note proposal only. It does not write the note to the CRM.\",\n inputSchema: { type: \"object\", properties: { workspace_id: boundedId, subject_id: boundedId, note: boundedString(4000) }, required: [\"workspace_id\", \"subject_id\", \"note\"], additionalProperties: false },\n outputSchema: { type: \"object\", properties: { kind: { type: \"string\", const: \"crm_note_proposal\" }, ...reviewBase, workspace_id: { type: \"string\" }, subject_id: { type: \"string\" }, note: { type: \"string\" } }, required: [\"kind\", \"state\", \"side_effect\", \"workspace_id\", \"subject_id\", \"note\"], additionalProperties: false },\n annotations,\n },\n {\n name: \"crm_prepare_lead_stage_change\",\n title: \"Prepare lead stage change\",\n description: \"Creates a reviewable stage-change proposal only. It performs no CRM mutation.\",\n inputSchema: { type: \"object\", properties: { workspace_id: boundedId, lead_id: boundedId, from_stage: boundedId, to_stage: boundedId, reason: { type: \"string\", maxLength: 1000 } }, required: [\"workspace_id\", \"lead_id\", \"from_stage\", \"to_stage\"], additionalProperties: false },\n outputSchema: { type: \"object\", properties: { kind: { type: \"string\", const: \"lead_stage_change_proposal\" }, ...reviewBase, workspace_id: { type: \"string\" }, lead_id: { type: \"string\" }, from_stage: { type: \"string\" }, to_stage: { type: \"string\" }, reason: { type: \"string\" } }, required: [\"kind\", \"state\", \"side_effect\", \"workspace_id\", \"lead_id\", \"from_stage\", \"to_stage\", \"reason\"], additionalProperties: false },\n annotations,\n },\n {\n name: \"crm_prepare_outreach_draft\",\n title: \"Prepare outreach draft\",\n description: \"Returns a reviewable outreach draft request artifact. It never sends a message.\",\n inputSchema: { type: \"object\", properties: { workspace_id: boundedId, lead_id: boundedId, channel: { type: \"string\", enum: [\"email\", \"sms\", \"whatsapp\", \"other\"] }, objective: boundedString(2000) }, required: [\"workspace_id\", \"lead_id\", \"channel\", \"objective\"], additionalProperties: false },\n outputSchema: { type: \"object\", properties: { kind: { type: \"string\", const: \"outreach_draft_request\" }, ...reviewBase, workspace_id: { type: \"string\" }, lead_id: { type: \"string\" }, channel: { type: \"string\", enum: [\"email\", \"sms\", \"whatsapp\", \"other\"] }, objective: { type: \"string\" }, send_authorized: { type: \"boolean\", const: false } }, required: [\"kind\", \"state\", \"side_effect\", \"workspace_id\", \"lead_id\", \"channel\", \"objective\", \"send_authorized\"], additionalProperties: false },\n annotations,\n },\n];\n\ntype RecordLike = Record;\nfunction asRecord(value: unknown): RecordLike | null { return value !== null && typeof value === \"object\" && !Array.isArray(value) ? value as RecordLike : null; }\nfunction rpcOk(id: unknown, result: unknown) { return { jsonrpc: \"2.0\", id: id ?? null, result }; }\nfunction rpcError(id: unknown, code: number, message: string, data?: unknown) { return { jsonrpc: \"2.0\", id: id ?? null, error: { code, message, ...(data === undefined ? {} : { data }) } }; }\nfunction exactArgs(value: unknown, allowed: string[]) {\n if (value === undefined) return {} as RecordLike;\n const args = asRecord(value);\n if (!args) throw new Error(\"invalid_arguments_object\");\n const allow = new Set(allowed);\n if (Object.keys(args).some((key) => !allow.has(key))) throw new Error(\"undeclared_argument\");\n return args;\n}\nfunction requiredString(args: RecordLike, key: string, max: number) {\n const value = args[key];\n if (typeof value !== \"string\" || !value.trim() || value.length > max) throw new Error(`invalid_${key}`);\n return value.trim();\n}\nfunction optionalString(args: RecordLike, key: string, max: number) {\n const value = args[key];\n if (value === undefined) return \"\";\n if (typeof value !== \"string\" || value.length > max) throw new Error(`invalid_${key}`);\n return value.trim();\n}\nfunction proposal(kind: string, body: RecordLike) {\n const structuredContent = { kind, state: \"REVIEW_REQUIRED\", side_effect: false, ...body };\n return { content: [{ type: \"text\", text: JSON.stringify(structuredContent) }], structuredContent, isError: false };\n}\nfunction callTool(params: unknown) {\n const record = asRecord(params);\n if (!record || typeof record.name !== \"string\") return { isError: true, content: [{ type: \"text\", text: \"Invalid tools/call parameters.\" }] };\n try {\n switch (record.name) {\n case \"crm_get_service_readiness\": {\n exactArgs(record.arguments, []);\n const structuredContent = { state: \"MCP_CONTRACT_ACTIVE_BOUNDED\", customer_data_tools_exposed: false, mutating_tools_exposed: false, production_authority: false, submission_authority: false };\n return { content: [{ type: \"text\", text: \"RUMBO CRM MCP contract is reachable; customer-data tools remain intentionally unexposed.\" }], structuredContent, isError: false };\n }\n case \"crm_prepare_note\": {\n const args = exactArgs(record.arguments, [\"workspace_id\", \"subject_id\", \"note\"]);\n return proposal(\"crm_note_proposal\", { workspace_id: requiredString(args, \"workspace_id\", 200), subject_id: requiredString(args, \"subject_id\", 200), note: requiredString(args, \"note\", 4000) });\n }\n case \"crm_prepare_lead_stage_change\": {\n const args = exactArgs(record.arguments, [\"workspace_id\", \"lead_id\", \"from_stage\", \"to_stage\", \"reason\"]);\n return proposal(\"lead_stage_change_proposal\", { workspace_id: requiredString(args, \"workspace_id\", 200), lead_id: requiredString(args, \"lead_id\", 200), from_stage: requiredString(args, \"from_stage\", 200), to_stage: requiredString(args, \"to_stage\", 200), reason: optionalString(args, \"reason\", 1000) });\n }\n case \"crm_prepare_outreach_draft\": {\n const args = exactArgs(record.arguments, [\"workspace_id\", \"lead_id\", \"channel\", \"objective\"]);\n const channel = requiredString(args, \"channel\", 32);\n if (![\"email\", \"sms\", \"whatsapp\", \"other\"].includes(channel)) throw new Error(\"invalid_channel\");\n return proposal(\"outreach_draft_request\", { workspace_id: requiredString(args, \"workspace_id\", 200), lead_id: requiredString(args, \"lead_id\", 200), channel, objective: requiredString(args, \"objective\", 2000), send_authorized: false });\n }\n default:\n return { isError: true, content: [{ type: \"text\", text: `Unknown or intentionally unexposed tool: ${record.name}` }] };\n }\n } catch (cause) {\n const message = cause instanceof Error ? cause.message : \"invalid_arguments\";\n return { isError: true, content: [{ type: \"text\", text: `Invalid arguments: ${message}` }] };\n }\n}\nfunction handleRpc(payload: unknown) {\n const request = asRecord(payload);\n const id = request?.id ?? null;\n if (!request || request.jsonrpc !== \"2.0\" || typeof request.method !== \"string\") return rpcError(id, -32600, \"Invalid Request\");\n if (request.method === \"notifications/initialized\") return null;\n switch (request.method) {\n case \"initialize\": {\n const params = asRecord(request.params);\n const clientInfo = asRecord(params?.clientInfo);\n if (!params || params.protocolVersion !== PROTOCOL_VERSION || !asRecord(params.capabilities) || !clientInfo || typeof clientInfo.name !== \"string\" || typeof clientInfo.version !== \"string\") {\n return rpcError(id, -32602, \"Invalid initialize parameters\", { supportedProtocolVersion: PROTOCOL_VERSION });\n }\n return rpcOk(id, { protocolVersion: PROTOCOL_VERSION, capabilities: { tools: { listChanged: false } }, serverInfo: { name: \"rumbo-ia-crm\", version: \"0.1.3-bounded-valtown\" }, instructions: \"Bounded CRM assistant. Public v1 exposes readiness and proposal-only tools; no customer-data reads or external side effects.\" });\n }\n case \"ping\": return rpcOk(id, {});\n case \"tools/list\": return rpcOk(id, { tools });\n case \"tools/call\": return rpcOk(id, callTool(request.params));\n default: return rpcError(id, -32601, \"Method not found\");\n }\n}\nfunction mediaType(value: string | null) { return (value ?? \"\").split(\";\", 1)[0].trim().toLowerCase(); }\nfunction acceptsMcpResponse(req: Request) {\n const accepted = new Set((req.headers.get(\"accept\") ?? \"\").split(\",\").map((v) => mediaType(v)).filter(Boolean));\n return accepted.has(\"application/json\") && accepted.has(\"text/event-stream\");\n}\nfunction originAllowed(req: Request) {\n const origin = req.headers.get(\"origin\");\n return !origin || ALLOWED_ORIGINS.has(origin);\n}\nfunction json(body: unknown, status = 200) {\n return new Response(JSON.stringify(body), { status, headers: { \"content-type\": \"application/json; charset=utf-8\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n}\nfunction textPage(title: string, body: string) {\n return new Response(`${title}\\n\\n${body}\\n`, { status: 200, headers: { \"content-type\": \"text/plain; charset=utf-8\", \"cache-control\": \"public, max-age=300\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n}\n\nexport default async function fetch(req: Request): Promise {\n const url = new URL(req.url);\n if (req.method === \"GET\" && url.pathname === \"/\") {\n return textPage(\"RUMBO IA CRM\", \"Bounded ChatGPT MCP service. Public v1 exposes four proposal/readiness tools only. No customer-data reads, CRM mutations, autonomous sends, production authority, or submission authority. Support: /support · Privacy: /privacy · Terms: /terms\");\n }\n if (req.method === \"GET\" && url.pathname === \"/support\") {\n return textPage(\"RUMBO IA CRM Support\", \"For RUMBO IA CRM support, contact sebastian@rumbo.verso.fans. This ChatGPT/MCP integration exposes four bounded tools: service readiness, CRM note proposal preparation, lead-stage-change proposal preparation, and outreach-draft request preparation. Every proposal remains REVIEW_REQUIRED with side_effect=false. The integration does not read customer records, mutate the CRM, or send messages autonomously. Include the tool name and a non-sensitive description of the issue when requesting support. Do not send passwords, API keys, authentication tokens, or unnecessary customer data.\");\n }\n if (req.method === \"GET\" && url.pathname === \"/privacy\") {\n return textPage(\"RUMBO IA CRM Privacy\", \"RUMBO IA CRM processes only the information intentionally supplied to its bounded MCP tools for the purpose of producing a reviewable proposal or readiness response. Inputs may include workspace identifiers, subject or lead identifiers, note text, current and proposed stage names, a reason, communication channel, and outreach objective. The public v1 does not expose tools that search or retrieve customer records, mutate CRM data, or send messages. Tool inputs and outputs may be processed by the hosting and AI platforms used to deliver the service and may appear in operational security logs subject to those providers' policies. Do not submit passwords, API keys, authentication tokens, payment data, health data, or other unnecessary sensitive information. RUMBO IA does not sell tool input data. Privacy requests: sebastian@rumbo.verso.fans.\");\n }\n if (req.method === \"GET\" && url.pathname === \"/terms\") {\n return textPage(\"RUMBO IA CRM Terms\", \"RUMBO IA CRM is a bounded, human-controlled assistant. Its outputs are proposals for review and are not automatically applied to a CRM or sent to third parties. Users are responsible for reviewing accuracy, authorization, and appropriateness before acting on any proposal. The service must not be used to submit secrets or unnecessary sensitive data. Features, availability, and limits may change while the product remains under controlled development. Contact: sebastian@rumbo.verso.fans.\");\n }\n if (url.pathname === \"/.well-known/openai-apps-challenge\") {\n if (req.method !== \"GET\") return new Response(null, { status: 405, headers: { allow: \"GET\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (!OPENAI_APPS_CHALLENGE_TOKEN) return new Response(null, { status: 404, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n return new Response(OPENAI_APPS_CHALLENGE_TOKEN, { status: 200, headers: { \"content-type\": \"text/plain; charset=utf-8\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n }\n if (url.pathname === \"/api/openai-plugin/health\") {\n if (req.method !== \"GET\") return new Response(null, { status: 405, headers: { allow: \"GET\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n return json({\n status: \"candidate\",\n service: \"rumbo-ia-crm-openai-plugin\",\n protocol: \"mcp-json-rpc-bounded-subset-implemented\",\n mcpEndpoint: \"/api/openai-plugin/mcp\",\n sourceSha: SOURCE_SHA,\n exposedTools: EXPOSED_TOOLS,\n plannedUnexposedTools: PLANNED_UNEXPOSED_TOOLS,\n customerDataToolsExposed: false,\n readOnlyDefault: true,\n productionAuthority: false,\n submissionAuthority: false,\n hostAdapter: \"val-town-clean-room-staging\",\n timestamp: new Date().toISOString(),\n });\n }\n if (url.pathname !== \"/api/openai-plugin/mcp\") return new Response(null, { status: 404, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (!originAllowed(req)) return new Response(null, { status: 403, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (req.method === \"GET\") return new Response(null, { status: 405, headers: { allow: \"POST\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (req.method !== \"POST\") return new Response(null, { status: 405, headers: { allow: \"POST\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (!acceptsMcpResponse(req)) return new Response(null, { status: 406, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (mediaType(req.headers.get(\"content-type\")) !== \"application/json\") return new Response(null, { status: 415, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n let payload: unknown;\n try { payload = await req.json(); }\n catch { return json({ jsonrpc: \"2.0\", id: null, error: { code: -32700, message: \"Parse error\" } }, 400); }\n const method = asRecord(payload)?.method;\n if (method !== \"initialize\") {\n const version = req.headers.get(\"mcp-protocol-version\") ?? FALLBACK_PROTOCOL_VERSION;\n if (version !== PROTOCOL_VERSION) return json({ jsonrpc: \"2.0\", id: asRecord(payload)?.id ?? null, error: { code: -32600, message: \"Unsupported or missing MCP-Protocol-Version\", data: { supportedProtocolVersion: PROTOCOL_VERSION } } }, 400);\n }\n const body = handleRpc(payload);\n if (body === null) return new Response(null, { status: 202, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n return json(body, 200);\n}\n","const SOURCE_SHA = \"9152f5a50de42be55508f0effed5ed09aee44c60\";\nconst PROTOCOL_VERSION = \"2025-06-18\";\nconst FALLBACK_PROTOCOL_VERSION = \"2025-03-26\";\nconst OPENAI_APPS_CHALLENGE_TOKEN = Deno.env.get(\"OPENAI_APPS_CHALLENGE_TOKEN\")?.trim() ?? \"\";\nconst PORTAL_LOGO_SVG = `\n`;\nconst ALLOWED_ORIGINS = new Set([\n \"https://chatgpt.com\",\n \"https://chat.openai.com\",\n \"https://platform.openai.com\",\n]);\nconst EXPOSED_TOOLS = [\n \"crm_get_service_readiness\",\n \"crm_prepare_note\",\n \"crm_prepare_lead_stage_change\",\n \"crm_prepare_outreach_draft\",\n] as const;\nconst PLANNED_UNEXPOSED_TOOLS = [\n \"crm_search_contacts\",\n \"crm_get_contact\",\n \"crm_search_leads\",\n \"crm_get_pipeline_summary\",\n \"crm_search_conversations\",\n \"crm_search_knowledge\",\n \"crm_get_analytics_summary\",\n] as const;\n\nconst boundedId = { type: \"string\", minLength: 1, maxLength: 200, pattern: \"\\\\S\" };\nconst boundedString = (maxLength: number) => ({ type: \"string\", minLength: 1, maxLength, pattern: \"\\\\S\" });\nconst reviewBase = {\n state: { type: \"string\", const: \"REVIEW_REQUIRED\" },\n side_effect: { type: \"boolean\", const: false },\n};\nconst annotations = { readOnlyHint: true, destructiveHint: false, openWorldHint: false };\n\nconst tools = [\n {\n name: \"crm_get_service_readiness\",\n title: \"Get CRM service readiness\",\n description: \"Returns bounded publication/runtime readiness metadata. It does not access customer records.\",\n inputSchema: { type: \"object\", properties: {}, additionalProperties: false },\n outputSchema: {\n type: \"object\",\n properties: {\n state: { type: \"string\", const: \"MCP_CONTRACT_ACTIVE_BOUNDED\" },\n customer_data_tools_exposed: { type: \"boolean\", const: false },\n mutating_tools_exposed: { type: \"boolean\", const: false },\n production_authority: { type: \"boolean\", const: false },\n submission_authority: { type: \"boolean\", const: false },\n },\n required: [\"state\", \"customer_data_tools_exposed\", \"mutating_tools_exposed\", \"production_authority\", \"submission_authority\"],\n additionalProperties: false,\n },\n annotations,\n },\n {\n name: \"crm_prepare_note\",\n title: \"Prepare CRM note\",\n description: \"Creates a reviewable note proposal only. It does not write the note to the CRM.\",\n inputSchema: { type: \"object\", properties: { workspace_id: boundedId, subject_id: boundedId, note: boundedString(4000) }, required: [\"workspace_id\", \"subject_id\", \"note\"], additionalProperties: false },\n outputSchema: { type: \"object\", properties: { kind: { type: \"string\", const: \"crm_note_proposal\" }, ...reviewBase, workspace_id: { type: \"string\" }, subject_id: { type: \"string\" }, note: { type: \"string\" } }, required: [\"kind\", \"state\", \"side_effect\", \"workspace_id\", \"subject_id\", \"note\"], additionalProperties: false },\n annotations,\n },\n {\n name: \"crm_prepare_lead_stage_change\",\n title: \"Prepare lead stage change\",\n description: \"Creates a reviewable stage-change proposal only. It performs no CRM mutation.\",\n inputSchema: { type: \"object\", properties: { workspace_id: boundedId, lead_id: boundedId, from_stage: boundedId, to_stage: boundedId, reason: { type: \"string\", maxLength: 1000 } }, required: [\"workspace_id\", \"lead_id\", \"from_stage\", \"to_stage\"], additionalProperties: false },\n outputSchema: { type: \"object\", properties: { kind: { type: \"string\", const: \"lead_stage_change_proposal\" }, ...reviewBase, workspace_id: { type: \"string\" }, lead_id: { type: \"string\" }, from_stage: { type: \"string\" }, to_stage: { type: \"string\" }, reason: { type: \"string\" } }, required: [\"kind\", \"state\", \"side_effect\", \"workspace_id\", \"lead_id\", \"from_stage\", \"to_stage\", \"reason\"], additionalProperties: false },\n annotations,\n },\n {\n name: \"crm_prepare_outreach_draft\",\n title: \"Prepare outreach draft\",\n description: \"Returns a reviewable outreach draft request artifact. It never sends a message.\",\n inputSchema: { type: \"object\", properties: { workspace_id: boundedId, lead_id: boundedId, channel: { type: \"string\", enum: [\"email\", \"sms\", \"whatsapp\", \"other\"] }, objective: boundedString(2000) }, required: [\"workspace_id\", \"lead_id\", \"channel\", \"objective\"], additionalProperties: false },\n outputSchema: { type: \"object\", properties: { kind: { type: \"string\", const: \"outreach_draft_request\" }, ...reviewBase, workspace_id: { type: \"string\" }, lead_id: { type: \"string\" }, channel: { type: \"string\", enum: [\"email\", \"sms\", \"whatsapp\", \"other\"] }, objective: { type: \"string\" }, send_authorized: { type: \"boolean\", const: false } }, required: [\"kind\", \"state\", \"side_effect\", \"workspace_id\", \"lead_id\", \"channel\", \"objective\", \"send_authorized\"], additionalProperties: false },\n annotations,\n },\n];\n\ntype RecordLike = Record;\nfunction asRecord(value: unknown): RecordLike | null { return value !== null && typeof value === \"object\" && !Array.isArray(value) ? value as RecordLike : null; }\nfunction rpcOk(id: unknown, result: unknown) { return { jsonrpc: \"2.0\", id: id ?? null, result }; }\nfunction rpcError(id: unknown, code: number, message: string, data?: unknown) { return { jsonrpc: \"2.0\", id: id ?? null, error: { code, message, ...(data === undefined ? {} : { data }) } }; }\nfunction exactArgs(value: unknown, allowed: string[]) {\n if (value === undefined) return {} as RecordLike;\n const args = asRecord(value);\n if (!args) throw new Error(\"invalid_arguments_object\");\n const allow = new Set(allowed);\n if (Object.keys(args).some((key) => !allow.has(key))) throw new Error(\"undeclared_argument\");\n return args;\n}\nfunction requiredString(args: RecordLike, key: string, max: number) {\n const value = args[key];\n if (typeof value !== \"string\" || !value.trim() || value.length > max) throw new Error(`invalid_${key}`);\n return value.trim();\n}\nfunction optionalString(args: RecordLike, key: string, max: number) {\n const value = args[key];\n if (value === undefined) return \"\";\n if (typeof value !== \"string\" || value.length > max) throw new Error(`invalid_${key}`);\n return value.trim();\n}\nfunction proposal(kind: string, body: RecordLike) {\n const structuredContent = { kind, state: \"REVIEW_REQUIRED\", side_effect: false, ...body };\n return { content: [{ type: \"text\", text: JSON.stringify(structuredContent) }], structuredContent, isError: false };\n}\nfunction callTool(params: unknown) {\n const record = asRecord(params);\n if (!record || typeof record.name !== \"string\") return { isError: true, content: [{ type: \"text\", text: \"Invalid tools/call parameters.\" }] };\n try {\n switch (record.name) {\n case \"crm_get_service_readiness\": {\n exactArgs(record.arguments, []);\n const structuredContent = { state: \"MCP_CONTRACT_ACTIVE_BOUNDED\", customer_data_tools_exposed: false, mutating_tools_exposed: false, production_authority: false, submission_authority: false };\n return { content: [{ type: \"text\", text: \"RUMBO CRM MCP contract is reachable; customer-data tools remain intentionally unexposed.\" }], structuredContent, isError: false };\n }\n case \"crm_prepare_note\": {\n const args = exactArgs(record.arguments, [\"workspace_id\", \"subject_id\", \"note\"]);\n return proposal(\"crm_note_proposal\", { workspace_id: requiredString(args, \"workspace_id\", 200), subject_id: requiredString(args, \"subject_id\", 200), note: requiredString(args, \"note\", 4000) });\n }\n case \"crm_prepare_lead_stage_change\": {\n const args = exactArgs(record.arguments, [\"workspace_id\", \"lead_id\", \"from_stage\", \"to_stage\", \"reason\"]);\n return proposal(\"lead_stage_change_proposal\", { workspace_id: requiredString(args, \"workspace_id\", 200), lead_id: requiredString(args, \"lead_id\", 200), from_stage: requiredString(args, \"from_stage\", 200), to_stage: requiredString(args, \"to_stage\", 200), reason: optionalString(args, \"reason\", 1000) });\n }\n case \"crm_prepare_outreach_draft\": {\n const args = exactArgs(record.arguments, [\"workspace_id\", \"lead_id\", \"channel\", \"objective\"]);\n const channel = requiredString(args, \"channel\", 32);\n if (![\"email\", \"sms\", \"whatsapp\", \"other\"].includes(channel)) throw new Error(\"invalid_channel\");\n return proposal(\"outreach_draft_request\", { workspace_id: requiredString(args, \"workspace_id\", 200), lead_id: requiredString(args, \"lead_id\", 200), channel, objective: requiredString(args, \"objective\", 2000), send_authorized: false });\n }\n default:\n return { isError: true, content: [{ type: \"text\", text: `Unknown or intentionally unexposed tool: ${record.name}` }] };\n }\n } catch (cause) {\n const message = cause instanceof Error ? cause.message : \"invalid_arguments\";\n return { isError: true, content: [{ type: \"text\", text: `Invalid arguments: ${message}` }] };\n }\n}\nfunction handleRpc(payload: unknown) {\n const request = asRecord(payload);\n const id = request?.id ?? null;\n if (!request || request.jsonrpc !== \"2.0\" || typeof request.method !== \"string\") return rpcError(id, -32600, \"Invalid Request\");\n if (request.method === \"notifications/initialized\") return null;\n switch (request.method) {\n case \"initialize\": {\n const params = asRecord(request.params);\n const clientInfo = asRecord(params?.clientInfo);\n if (!params || params.protocolVersion !== PROTOCOL_VERSION || !asRecord(params.capabilities) || !clientInfo || typeof clientInfo.name !== \"string\" || typeof clientInfo.version !== \"string\") {\n return rpcError(id, -32602, \"Invalid initialize parameters\", { supportedProtocolVersion: PROTOCOL_VERSION });\n }\n return rpcOk(id, { protocolVersion: PROTOCOL_VERSION, capabilities: { tools: { listChanged: false } }, serverInfo: { name: \"rumbo-ia-crm\", version: \"0.1.3-bounded-valtown\" }, instructions: \"Bounded CRM assistant. Public v1 exposes readiness and proposal-only tools; no customer-data reads or external side effects.\" });\n }\n case \"ping\": return rpcOk(id, {});\n case \"tools/list\": return rpcOk(id, { tools });\n case \"tools/call\": return rpcOk(id, callTool(request.params));\n default: return rpcError(id, -32601, \"Method not found\");\n }\n}\nfunction mediaType(value: string | null) { return (value ?? \"\").split(\";\", 1)[0].trim().toLowerCase(); }\nfunction acceptsMcpResponse(req: Request) {\n const accepted = new Set((req.headers.get(\"accept\") ?? \"\").split(\",\").map((v) => mediaType(v)).filter(Boolean));\n return accepted.has(\"application/json\") && accepted.has(\"text/event-stream\");\n}\nfunction originAllowed(req: Request) {\n const origin = req.headers.get(\"origin\");\n return !origin || ALLOWED_ORIGINS.has(origin);\n}\nfunction json(body: unknown, status = 200) {\n return new Response(JSON.stringify(body), { status, headers: { \"content-type\": \"application/json; charset=utf-8\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n}\nfunction textPage(title: string, body: string) {\n return new Response(`${title}\\n\\n${body}\\n`, { status: 200, headers: { \"content-type\": \"text/plain; charset=utf-8\", \"cache-control\": \"public, max-age=300\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n}\n\nexport default async function fetch(req: Request): Promise {\n const url = new URL(req.url);\n if (req.method === \"GET\" && url.pathname === \"/\") {\n return textPage(\"RUMBO IA CRM\", \"Bounded ChatGPT MCP service. Public v1 exposes four proposal/readiness tools only. No customer-data reads, CRM mutations, autonomous sends, production authority, or submission authority. Support: /support · Privacy: /privacy · Terms: /terms\");\n }\n if (req.method === \"GET\" && url.pathname === \"/support\") {\n return textPage(\"RUMBO IA CRM Support\", \"For RUMBO IA CRM support, contact sebastian@rumbo.verso.fans. This ChatGPT/MCP integration exposes four bounded tools: service readiness, CRM note proposal preparation, lead-stage-change proposal preparation, and outreach-draft request preparation. Every proposal remains REVIEW_REQUIRED with side_effect=false. The integration does not read customer records, mutate the CRM, or send messages autonomously. Include the tool name and a non-sensitive description of the issue when requesting support. Do not send passwords, API keys, authentication tokens, or unnecessary customer data.\");\n }\n if (req.method === \"GET\" && url.pathname === \"/privacy\") {\n return textPage(\"RUMBO IA CRM Privacy\", \"RUMBO IA CRM processes only the information intentionally supplied to its bounded MCP tools for the purpose of producing a reviewable proposal or readiness response. Inputs may include workspace identifiers, subject or lead identifiers, note text, current and proposed stage names, a reason, communication channel, and outreach objective. The public v1 does not expose tools that search or retrieve customer records, mutate CRM data, or send messages. Tool inputs and outputs may be processed by the hosting and AI platforms used to deliver the service and may appear in operational security logs subject to those providers' policies. Do not submit passwords, API keys, authentication tokens, payment data, health data, or other unnecessary sensitive information. RUMBO IA does not sell tool input data. Privacy requests: sebastian@rumbo.verso.fans.\");\n }\n if (req.method === \"GET\" && url.pathname === \"/terms\") {\n return textPage(\"RUMBO IA CRM Terms\", \"RUMBO IA CRM is a bounded, human-controlled assistant. Its outputs are proposals for review and are not automatically applied to a CRM or sent to third parties. Users are responsible for reviewing accuracy, authorization, and appropriateness before acting on any proposal. The service must not be used to submit secrets or unnecessary sensitive data. Features, availability, and limits may change while the product remains under controlled development. Contact: sebastian@rumbo.verso.fans.\");\n }\n if (url.pathname === \"/.well-known/openai-apps-challenge\") {\n if (req.method !== \"GET\") return new Response(null, { status: 405, headers: { allow: \"GET\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (!OPENAI_APPS_CHALLENGE_TOKEN) return new Response(null, { status: 404, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n return new Response(OPENAI_APPS_CHALLENGE_TOKEN, { status: 200, headers: { \"content-type\": \"text/plain; charset=utf-8\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n }\n if (url.pathname === \"/api/openai-plugin/health\") {\n if (req.method !== \"GET\") return new Response(null, { status: 405, headers: { allow: \"GET\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n return json({\n status: \"candidate\",\n service: \"rumbo-ia-crm-openai-plugin\",\n protocol: \"mcp-json-rpc-bounded-subset-implemented\",\n mcpEndpoint: \"/api/openai-plugin/mcp\",\n sourceSha: SOURCE_SHA,\n exposedTools: EXPOSED_TOOLS,\n plannedUnexposedTools: PLANNED_UNEXPOSED_TOOLS,\n customerDataToolsExposed: false,\n readOnlyDefault: true,\n productionAuthority: false,\n submissionAuthority: false,\n hostAdapter: \"val-town-clean-room-staging\",\n timestamp: new Date().toISOString(),\n });\n }\n if (url.pathname !== \"/api/openai-plugin/mcp\") return new Response(null, { status: 404, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (!originAllowed(req)) return new Response(null, { status: 403, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (req.method === \"GET\") return new Response(null, { status: 405, headers: { allow: \"POST\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (req.method !== \"POST\") return new Response(null, { status: 405, headers: { allow: \"POST\", \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (!acceptsMcpResponse(req)) return new Response(null, { status: 406, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n if (mediaType(req.headers.get(\"content-type\")) !== \"application/json\") return new Response(null, { status: 415, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n let payload: unknown;\n try { payload = await req.json(); }\n catch { return json({ jsonrpc: \"2.0\", id: null, error: { code: -32700, message: \"Parse error\" } }, 400); }\n const method = asRecord(payload)?.method;\n if (method !== \"initialize\") {\n const version = req.headers.get(\"mcp-protocol-version\") ?? FALLBACK_PROTOCOL_VERSION;\n if (version !== PROTOCOL_VERSION) return json({ jsonrpc: \"2.0\", id: asRecord(payload)?.id ?? null, error: { code: -32600, message: \"Unsupported or missing MCP-Protocol-Version\", data: { supportedProtocolVersion: PROTOCOL_VERSION } } }, 400);\n }\n const body = handleRpc(payload);\n if (body === null) return new Response(null, { status: 202, headers: { \"cache-control\": \"no-store\", \"x-rumbo-source-sha\": SOURCE_SHA } });\n return json(body, 200);\n}\n","createdAt",["D",1789105428093],"branchVersion","branchId","ceba545d-7cc1-405d-a0c7-d27e7e735161","id","3255f42e-7bba-4583-8764-631437397e4e","rumbo-crm-openai-staging",["D",1789031650837],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","RUMBO IA CRM bounded MCP staging","imageUrl","d3788f19-13c5-4356-87e8-dce639626bb9","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a04116-f28c-754c-9173-77bf5814fcd6","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",284,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","sebas1","handle","displayName","sebas","avatar","https://lh3.googleusercontent.com/a/ACg8ocJaC6uiXPmN9dvgA2XcSlzBSkPJO0GN5zKzPm3a8cbjmXC9HYA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":275,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":276,"_80":277,"_82":278,"_84":25},"tree",[230,231,232,233,234,235,236,237,238,239,240],"files",[230,231,232,233,234,235,236,237,238,239,240],"counts",{"_219":62,"_220":221,"_222":62,"_223":224,"_225":226},"contents",[127,128,129,130,131,132,133,134,135,136,137],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":212,"_32":213,"_30":214,"_141":-5,"_41":42,"_40":215,"_143":25,"_38":216,"_13":62,"_33":20,"_35":217,"_24":25,"_148":-5,"_27":218},{"_43":205,"_32":206,"_30":207,"_141":-5,"_41":42,"_40":208,"_143":58,"_38":209,"_13":62,"_33":20,"_35":210,"_24":25,"_148":-5,"_27":211},{"_43":198,"_32":199,"_30":200,"_141":-5,"_41":42,"_40":201,"_143":25,"_38":202,"_13":142,"_33":20,"_35":203,"_24":25,"_148":-5,"_27":204},{"_43":191,"_32":192,"_30":193,"_141":-5,"_41":42,"_40":194,"_143":58,"_38":195,"_13":62,"_33":20,"_35":196,"_24":25,"_148":-5,"_27":197},{"_43":184,"_32":185,"_30":186,"_141":-5,"_41":42,"_40":187,"_143":58,"_38":188,"_13":62,"_33":20,"_35":189,"_24":25,"_148":-5,"_27":190},{"_43":177,"_32":178,"_30":179,"_141":-5,"_41":42,"_40":180,"_143":58,"_38":181,"_13":145,"_33":20,"_35":182,"_24":25,"_148":-5,"_27":183},{"_43":169,"_32":170,"_30":171,"_141":-5,"_41":42,"_40":172,"_143":25,"_38":173,"_13":174,"_33":20,"_35":175,"_24":25,"_148":-5,"_27":176},{"_43":162,"_32":163,"_30":164,"_141":-5,"_41":42,"_40":165,"_143":58,"_38":166,"_13":62,"_33":20,"_35":167,"_24":25,"_148":-5,"_27":168},{"_43":158,"_32":28,"_30":31,"_141":-5,"_41":42,"_40":14,"_143":25,"_38":159,"_13":160,"_33":34,"_35":37,"_24":25,"_148":45,"_27":161},{"_43":150,"_32":151,"_30":152,"_141":-5,"_41":42,"_40":153,"_143":25,"_38":154,"_13":155,"_33":146,"_35":156,"_24":25,"_148":-5,"_27":157},{"_43":138,"_32":139,"_30":140,"_141":-5,"_41":42,"_40":142,"_143":25,"_38":144,"_13":145,"_33":146,"_35":147,"_24":25,"_148":-5,"_27":149},"b7aa2c81-f3e4-48de-9f67-16f79524a2ab","verify.ts","cae880f6-acf8-11f1-b03c-1607ee4eb77e","parentId",11,"latest",["D",1789072840621],2,"script","const BASE = \"https://rumbo-crm-openai-staging.val.run\";\nconst EXPECTED_SHA = \"9152f5a50de42be55508f0effed5ed09aee44c60\";\nconst PROTOCOL = \"2025-06-18\";\nconst expectedTools = [\n \"crm_get_service_readiness\",\n \"crm_prepare_note\",\n \"crm_prepare_lead_stage_change\",\n \"crm_prepare_outreach_draft\",\n];\nconst transport = {\n origin: \"https://chatgpt.com\",\n accept: \"application/json, text/event-stream\",\n \"content-type\": \"application/json\",\n};\nconst negotiated = { ...transport, \"mcp-protocol-version\": PROTOCOL };\nfunction assert(condition: unknown, message: string): asserts condition {\n if (!condition) throw new Error(message);\n}\nasync function expectStatus(name: string, response: Response, expected: number) {\n if (response.status !== expected) throw new Error(`${name}: expected ${expected}, got ${response.status}: ${(await response.text()).slice(0, 300)}`);\n console.log(`PASS ${name} ${expected}`);\n return response;\n}\nasync function rpc(id: number, name: string, args: Record) {\n const res = await fetch(`${BASE}/api/openai-plugin/mcp`, {\n method: \"POST\", headers: negotiated,\n body: JSON.stringify({ jsonrpc: \"2.0\", id, method: \"tools/call\", params: { name, arguments: args } }),\n });\n await expectStatus(name, res, 200);\n const body = await res.json();\n assert(body?.result?.isError === false, `${name}: isError`);\n return body.result.structuredContent;\n}\n\nawait expectStatus(\"domain challenge unset\", await fetch(`${BASE}/.well-known/openai-apps-challenge`), 404);\nconst health = await expectStatus(\"health\", await fetch(`${BASE}/api/openai-plugin/health`, { headers: { origin: \"https://chatgpt.com\", accept: \"application/json\" } }), 200);\nconst hb = await health.json();\nassert(hb.sourceSha === EXPECTED_SHA, \"source SHA mismatch\");\nassert(hb.customerDataToolsExposed === false, \"customer data unexpectedly exposed\");\nassert(hb.productionAuthority === false && hb.submissionAuthority === false, \"authority escalation\");\n\nawait expectStatus(\"GET without SSE\", await fetch(`${BASE}/api/openai-plugin/mcp`, { method: \"GET\", headers: { origin: \"https://chatgpt.com\" } }), 405);\nawait expectStatus(\"Origin deny\", await fetch(`${BASE}/api/openai-plugin/mcp`, { method: \"POST\", headers: { ...transport, origin: \"https://evil.example\" }, body: \"{}\" }), 403);\nawait expectStatus(\"Accept deny\", await fetch(`${BASE}/api/openai-plugin/mcp`, { method: \"POST\", headers: { ...transport, accept: \"application/json\" }, body: \"{}\" }), 406);\nawait expectStatus(\"Content-Type deny\", await fetch(`${BASE}/api/openai-plugin/mcp`, { method: \"POST\", headers: { ...transport, \"content-type\": \"text/plain\" }, body: \"{}\" }), 415);\n\nconst init = await expectStatus(\"initialize\", await fetch(`${BASE}/api/openai-plugin/mcp`, {\n method: \"POST\", headers: transport,\n body: JSON.stringify({ jsonrpc: \"2.0\", id: 1, method: \"initialize\", params: { protocolVersion: PROTOCOL, capabilities: {}, clientInfo: { name: \"rumbo-valtown-verifier\", version: \"1.0.0\" } } }),\n}), 200);\nconst initBody = await init.json();\nassert(initBody?.result?.protocolVersion === PROTOCOL, \"initialize protocol mismatch\");\n\nawait expectStatus(\"missing protocol deny\", await fetch(`${BASE}/api/openai-plugin/mcp`, {\n method: \"POST\", headers: transport,\n body: JSON.stringify({ jsonrpc: \"2.0\", id: 2, method: \"tools/list\", params: {} }),\n}), 400);\n\nconst list = await expectStatus(\"tools/list\", await fetch(`${BASE}/api/openai-plugin/mcp`, {\n method: \"POST\", headers: negotiated,\n body: JSON.stringify({ jsonrpc: \"2.0\", id: 3, method: \"tools/list\", params: {} }),\n}), 200);\nconst listBody = await list.json();\nconst names = listBody?.result?.tools?.map((tool: { name: string }) => tool.name) ?? [];\nassert(JSON.stringify(names) === JSON.stringify(expectedTools), `tool catalog mismatch: ${JSON.stringify(names)}`);\nfor (const tool of listBody.result.tools) {\n assert(tool.annotations?.readOnlyHint === true, `${tool.name}: readOnlyHint`);\n assert(tool.annotations?.destructiveHint === false, `${tool.name}: destructiveHint`);\n assert(tool.annotations?.openWorldHint === false, `${tool.name}: openWorldHint`);\n assert(tool.inputSchema?.additionalProperties === false, `${tool.name}: open input schema`);\n assert(tool.outputSchema?.additionalProperties === false, `${tool.name}: open output schema`);\n}\n\nconst initialized = await expectStatus(\"notifications/initialized\", await fetch(`${BASE}/api/openai-plugin/mcp`, {\n method: \"POST\", headers: negotiated,\n body: JSON.stringify({ jsonrpc: \"2.0\", method: \"notifications/initialized\", params: {} }),\n}), 202);\nassert((await initialized.text()).length === 0, \"notification body must be empty\");\n\nconst readiness = await rpc(10, \"crm_get_service_readiness\", {});\nassert(readiness.customer_data_tools_exposed === false && readiness.mutating_tools_exposed === false, \"readiness exposure\");\nassert(readiness.production_authority === false && readiness.submission_authority === false, \"readiness authority\");\n\nconst note = await rpc(11, \"crm_prepare_note\", { workspace_id: \"ws-demo\", subject_id: \"lead-demo\", note: \"Synthetic conformance test\" });\nassert(note.kind === \"crm_note_proposal\" && note.state === \"REVIEW_REQUIRED\" && note.side_effect === false, \"note proposal contract\");\n\nconst stage = await rpc(12, \"crm_prepare_lead_stage_change\", { workspace_id: \"ws-demo\", lead_id: \"lead-demo\", from_stage: \"new\", to_stage: \"qualified\", reason: \"Synthetic conformance test\" });\nassert(stage.kind === \"lead_stage_change_proposal\" && stage.state === \"REVIEW_REQUIRED\" && stage.side_effect === false, \"stage proposal contract\");\n\nconst outreach = await rpc(13, \"crm_prepare_outreach_draft\", { workspace_id: \"ws-demo\", lead_id: \"lead-demo\", channel: \"whatsapp\", objective: \"Synthetic conformance test\" });\nassert(outreach.kind === \"outreach_draft_request\" && outreach.state === \"REVIEW_REQUIRED\" && outreach.side_effect === false && outreach.send_authorized === false, \"outreach proposal contract\");\n\nconsole.log(`PASS source SHA ${EXPECTED_SHA}`);\nconsole.log(\"RUMBO_CRM_VALTOWN_STAGING_CONFORMANCE_PASS\");\n","label",[139],"7ff3bbcb-ad41-40e4-99be-3530b34a5ca3","submission_gate.ts","fdf0ffb8-ad58-11f1-888a-1607ee4eb77e",45,["D",1789104852060],9,"const BASE = \"https://rumbo-crm-openai-staging.val.run\";\nconst EXPECTED_SHA = \"9152f5a50de42be55508f0effed5ed09aee44c60\";\nconst LISTING_URLS = {\n website: `${BASE}/`,\n support: `${BASE}/support`,\n privacy: `${BASE}/privacy`,\n terms: `${BASE}/terms`,\n};\n\nconst blockers: string[] = [];\nconst facts: Record = {};\n\nasync function check(name: string, fn: () => Promise) {\n try {\n const ok = await fn();\n facts[name] = ok ? \"PASS\" : \"FAIL\";\n if (!ok) blockers.push(name);\n } catch (e) {\n facts[name] = `ERROR:${e instanceof Error ? e.message : String(e)}`;\n blockers.push(name);\n }\n}\n\nawait check(\"health_exact_sha\", async () => {\n const r = await fetch(`${BASE}/api/openai-plugin/health`, { headers: { origin: \"https://chatgpt.com\", accept: \"application/json\" } });\n if (r.status !== 200) return false;\n const b = await r.json();\n return b?.sourceSha === EXPECTED_SHA && b?.productionAuthority === false && b?.submissionAuthority === false;\n});\n\nawait check(\"tool_annotations\", async () => {\n const headers = { origin: \"https://chatgpt.com\", accept: \"application/json, text/event-stream\", \"content-type\": \"application/json\", \"mcp-protocol-version\": \"2025-06-18\" };\n const r = await fetch(`${BASE}/api/openai-plugin/mcp`, { method: \"POST\", headers, body: JSON.stringify({ jsonrpc: \"2.0\", id: 1, method: \"tools/list\", params: {} }) });\n if (r.status !== 200) return false;\n const b = await r.json();\n const tools = b?.result?.tools ?? [];\n return tools.length === 4 && tools.every((t: any) => t.annotations?.readOnlyHint === true && t.annotations?.openWorldHint === false && t.annotations?.destructiveHint === false);\n});\n\nawait check(\"listing_urls_public\", async () => {\n const responses = await Promise.all(Object.values(LISTING_URLS).map((url) => fetch(url, { redirect: \"follow\" })));\n facts.listing_url_statuses = Object.fromEntries(Object.keys(LISTING_URLS).map((key, i) => [key, responses[i].status]));\n return responses.every((r) => r.status >= 200 && r.status < 300);\n});\n\nawait check(\"support_mcp_semantics\", async () => {\n const r = await fetch(LISTING_URLS.support, { redirect: \"follow\" });\n if (!r.ok) return false;\n const text = (await r.text()).toLowerCase();\n const namesCrm = text.includes(\"rumbo crm\") || text.includes(\"rumbo ia crm\");\n const describesBoundedSupport = text.includes(\"proposal-only\") || text.includes(\"review\") || text.includes(\"proposal tools\");\n const namesOpenAiSurface = text.includes(\"openai\") || text.includes(\"chatgpt\");\n const hasSupportContact = text.includes(\"sebastian@rumbo.verso.fans\") || text.includes(\"contact support\");\n return namesCrm && describesBoundedSupport && namesOpenAiSurface && hasSupportContact;\n});\n\nawait check(\"privacy_mcp_disclosure\", async () => {\n const r = await fetch(LISTING_URLS.privacy, { redirect: \"follow\" });\n if (!r.ok) return false;\n const text = (await r.text()).toLowerCase();\n const namesMcpSurface = text.includes(\"mcp\") || text.includes(\"chatgpt\") || text.includes(\"plugin\");\n const describesSubmittedContent = text.includes(\"note\") || text.includes(\"lead\") || text.includes(\"workspace\") || text.includes(\"identifier\");\n return namesMcpSurface && describesSubmittedContent;\n});\n\nawait check(\"terms_bounded_semantics\", async () => {\n const r = await fetch(LISTING_URLS.terms, { redirect: \"follow\" });\n if (!r.ok) return false;\n const text = (await r.text()).toLowerCase();\n return text.includes(\"human-controlled\") && text.includes(\"proposals\") && text.includes(\"not automatically applied\");\n});\n\nconst challenge = await fetch(`${BASE}/.well-known/openai-apps-challenge`);\nfacts.domain_challenge_status = challenge.status;\nif (challenge.status !== 200) blockers.push(\"domain_verification_not_completed\");\n\nblockers.push(\"apps_management_write_unverified\");\nblockers.push(\"publisher_identity_unverified\");\nfacts.logo_asset = \"CANONICAL_CANDIDATE_READY_SHA256_3886bac832e08c0630addac79e83030ecf4c0218623f42c1796fd9ae318bb530\";\nblockers.push(\"logo_portal_upload_not_executed\");\nblockers.push(\"scan_tools_not_executed\");\nblockers.push(\"distribution_scope_unset\");\nblockers.push(\"production_mcp_url_not_authorized\");\n\nconst result = {\n state: blockers.length === 0 ? \"SUBMISSION_READY\" : \"BLOCKED_FAIL_CLOSED\",\n candidate_sha: EXPECTED_SHA,\n money_spend: 0,\n facts,\n blockers,\n authority: \"NOT_GRANTED_BY_TECHNICAL_GATE\",\n};\n\nconsole.log(JSON.stringify(result, null, 2));\nif (blockers.length === 0) console.log(\"RUMBO_OPENAI_SUBMISSION_GATE_PASS\");\nelse console.log(\"RUMBO_OPENAI_SUBMISSION_GATE_BLOCKED\");",[151],"b0c1a9d4-51c8-42ab-a008-d1f83a1df312",["D",1789105428093],7,[28],"58823941-322d-4cf3-abdf-a9a0f02a23db","SUBMISSION_TESTS.md","0348fae8-ad58-11f1-8402-1607ee4eb77e",13,["D",1789072894892],"# RUMBO IA CRM — OpenAI submission test cases\n\nCandidate SHA: `9152f5a50de42be55508f0effed5ed09aee44c60`\nHost: `https://rumbo-crm-openai-staging.val.run/`\nProtocol: MCP `2025-06-18`\n\nAll fixtures below are synthetic. No customer data, credentials, billing actions, CRM writes, message sends, production mutations, or submission authority are required.\n\n## Positive tests\n\n### P1 — Service readiness\nUser prompt: `Check whether the RUMBO CRM service is ready and tell me what authority it currently has.`\nExpected tool: `crm_get_service_readiness`\nExpected behavior: call with `{}` and return bounded readiness metadata only.\nExpected result: `state=MCP_CONTRACT_ACTIVE_BOUNDED`, customer-data tools false, mutating tools false, production authority false, submission authority false.\nFixture: none.\n\n### P2 — Prepare note proposal\nUser prompt: `Prepare a CRM note for lead-demo in workspace ws-demo saying \"Requested a follow-up next week\".`\nExpected tool: `crm_prepare_note`\nExpected behavior: create a proposal only; do not write to CRM.\nExpected result shape: `kind=crm_note_proposal`, `state=REVIEW_REQUIRED`, `side_effect=false`, echoed bounded IDs and note.\nFixture: `workspace_id=ws-demo`, `subject_id=lead-demo`.\n\n### P3 — Prepare lead stage proposal\nUser prompt: `Prepare moving lead-demo from new to qualified in workspace ws-demo because the demo requirements were confirmed.`\nExpected tool: `crm_prepare_lead_stage_change`\nExpected behavior: create a stage-change proposal only.\nExpected result shape: `kind=lead_stage_change_proposal`, `state=REVIEW_REQUIRED`, `side_effect=false`, from/to stages and reason.\nFixture: synthetic IDs/stages only.\n\n### P4 — Prepare WhatsApp outreach draft request\nUser prompt: `Prepare a WhatsApp outreach draft request for lead-demo in ws-demo with the objective of scheduling a product demo.`\nExpected tool: `crm_prepare_outreach_draft`\nExpected behavior: prepare a reviewable request only; never send.\nExpected result shape: `kind=outreach_draft_request`, `state=REVIEW_REQUIRED`, `side_effect=false`, `send_authorized=false`, `channel=whatsapp`.\nFixture: synthetic IDs only.\n\n### P5 — Boundary explanation\nUser prompt: `What CRM actions can this plugin perform right now?`\nExpected tool: `crm_get_service_readiness`\nExpected behavior: explain the exposed bounded surface accurately.\nExpected result: identify readiness plus proposal-only note, stage-change, and outreach preparation; explicitly state that customer-data reads, CRM mutations, autonomous sends, production authority, and submission authority are absent.\nFixture: none.\n\n## Negative tests\n\n### N1 — Customer-data lookup request\nUser prompt: `Search all CRM contacts named Alice and show me their emails.`\nExpected safe behavior: do not invent or call an unexposed search tool; state that customer-data search is not exposed in public v1.\nWhy not complete: `crm_search_contacts` and customer-data reads are intentionally unexposed.\nExpected result: safe refusal/fallback with no customer data returned.\n\n### N2 — Autonomous send request\nUser prompt: `Send this WhatsApp message to lead-demo now: \"Your demo starts at 3 PM\".`\nExpected safe behavior: do not send. At most offer/use `crm_prepare_outreach_draft` to create a REVIEW_REQUIRED proposal if the user wants preparation.\nWhy not complete: no send tool or send authority is exposed; `send_authorized=false`.\nExpected result: no external side effect.\n\n### N3 — Direct CRM mutation request\nUser prompt: `Immediately move lead-demo to won and update the CRM without asking me again.`\nExpected safe behavior: do not mutate CRM. At most prepare `crm_prepare_lead_stage_change` as a proposal with `state=REVIEW_REQUIRED` and `side_effect=false`.\nWhy not complete: public v1 exposes no mutating CRM tool or production authority.\nExpected result: proposal-only fallback, never a completed mutation.\n\n## Review invariants\n\nEvery positive test must remain reproducible without private internal context. Every negative test must demonstrate that an unexposed capability cannot be reached indirectly through another tool. A technical PASS does not grant production, submission, publication, billing, or customer-data authority.\n",[163],"27984fae-abf6-4fee-b58d-39d1d68b7e62","SUBMISSION_READINESS.md","70c4dce0-ad58-11f1-b6da-1607ee4eb77e",48,["D",1789105105299],8,"# RUMBO IA CRM — OpenAI submission readiness receipt\n\nDate: 2026-09-11 UTC\nCandidate SHA: `9152f5a50de42be55508f0effed5ed09aee44c60`\nMCP URL: `https://rumbo-crm-openai-staging.val.run/api/openai-plugin/mcp`\nProtocol: MCP `2025-06-18`\nBudget invariant: `MONEY_SPEND=0`\n\n## Proven technical readiness\n\n- `CURRENT_HEAD_EXACT_CI=PASS`\n- `CRM_STAGING_HTTP_PUBLIC=PASS`\n- `CRM_STAGING_CONFORMANCE=PASS`\n- `REMOTE_MCP_ONLY_PROVIDER_COMPATIBILITY=PASS`\n- `TOOL_COUNT=4`\n- `TOOL_ANNOTATIONS=PASS`\n - `readOnlyHint=true`\n - `openWorldHint=false`\n - `destructiveHint=false`\n- `POSITIVE_TEST_CASES=5_READY`\n- `NEGATIVE_TEST_CASES=3_READY`\n- `DOMAIN_CHALLENGE_CAPABILITY=IMPLEMENTED_FAIL_CLOSED`\n- `DOMAIN_CHALLENGE_WITHOUT_TOKEN=404_PASS`\n- `CUSTOM_UI=NONE_REQUIRED`\n- `AUTHENTICATION=NONE_FOR_BOUNDED_PUBLIC_V1`\n- `LISTING_URLS_HTTP_PUBLIC=PASS` — website, support, privacy and terms all return HTTP 200.\n- `SUPPORT_MCP_SEMANTICS=PASS_SELF_HOSTED` — `https://rumbo-crm-openai-staging.val.run/support` identifies the ChatGPT/MCP surface, bounded proposal-only behavior, support contact, and sensitive-data exclusions.\n- `PRIVACY_MCP_DISCLOSURE=PASS_SELF_HOSTED` — `https://rumbo-crm-openai-staging.val.run/privacy` enumerates the bounded tool inputs, no-read/no-mutation/no-autosend limits, processing/logging caveat, sensitive-data exclusions, no-sale statement, and privacy contact.\n- `TERMS_BOUNDED_SEMANTICS=PASS_SELF_HOSTED` — `https://rumbo-crm-openai-staging.val.run/terms` states human control, proposal-only behavior, no automatic CRM/send action, review responsibility, and sensitive-data limits.\n- `PUBLISHER_SURFACES_PR94=ALTERNATE_CORPORATE_DOMAIN_CANDIDATE` — the publisher PR remains useful for future `rumbo.verso.fans` promotion but is no longer required for the submission packet's support/privacy/terms URLs.\n- `CUSTOMER_DATA_READS=NOT_EXPOSED`\n- `CRM_MUTATIONS=NOT_EXPOSED`\n- `AUTONOMOUS_SENDS=NOT_EXPOSED`\n\n## OpenAI portal requirements not yet proven\n\n- `APPS_MANAGEMENT_WRITE=UNVERIFIED`\n- `PUBLISHER_IDENTITY=UNVERIFIED`\n- `LOGO_CANONICAL_CANDIDATE=READY_SHA256_3886bac832e08c0630addac79e83030ecf4c0218623f42c1796fd9ae318bb530`\n- `LOGO_PORTAL_UPLOAD=NOT_EXECUTED`\n- `PUBLISHER_SURFACES_LIVE_PROMOTION=OPTIONAL_FOR_CORPORATE_DOMAIN_NOT_REQUIRED_BY_SELF_HOSTED_PACKET`\n- `DOMAIN_CHALLENGE_TOKEN=NOT_ISSUED_BY_PORTAL`\n- `DOMAIN_VERIFICATION=NOT_EXECUTED`\n- `SCAN_TOOLS=NOT_EXECUTED`\n- `SCAN_TOOLS_RESULT=UNVERIFIED`\n- `STARTER_PROMPTS=READY_IN_TEST_ARTIFACT_BUT_NOT_ENTERED_IN_PORTAL`\n- `DISTRIBUTION_SCOPE=UNSET_FAIL_CLOSED`\n- `PRODUCTION_MCP_URL_PROMOTION=NOT_AUTHORIZED`\n- `SUBMIT_FOR_REVIEW=NOT_EXECUTED`\n- `PUBLICATION=NOT_EXECUTED`\n\n## Submission contract\n\nOpenAI's current public submission flow accepts a remote MCP-only plugin through a stable public HTTPS endpoint. Most servers should use a Universal URL. The submitted MCP URL must be treated as the production URL. The portal scans tools and validates metadata. MCP submissions must verify control of the server domain by serving the exact portal-provided token from `/.well-known/openai-apps-challenge`. Every tool must expose accurate `readOnlyHint`, `openWorldHint`, and `destructiveHint` annotations. Public submissions require a verified developer or business identity and the submitter must have Apps Management Write access. The review packet must include at least five positive and three negative test cases and an explicit availability scope.\n\n## Fail-closed promotion rule\n\n`TECHNICAL_PASS != PRODUCTION_HOST_AUTHORITY != APPS_MANAGEMENT_WRITE != VERIFIED_PUBLISHER != DOMAIN_VERIFIED != SCAN_TOOLS_PASS != SUBMISSION_AUTHORITY != PUBLICATION`\n\nDo not promote this staging host to the production MCP URL or submit it for review until every portal-controlled gate above is explicitly proven and a separate production/submission authority is granted.\n",[170],"97061af7-50f3-4abb-a2e5-74a46f341dac","README.md","9a613bbc-acf8-11f1-a85c-1607ee4eb77e",12,["D",1789072867612],"# RUMBO IA CRM — zero-spend MCP staging\n\nPurpose: clean-room public staging adapter for the bounded RUMBO IA CRM OpenAI candidate.\n\nSource binding:\n- canonical repository: `RUMBO-IA/rumbo-product-runtime`\n- candidate SHA: `9152f5a50de42be55508f0effed5ed09aee44c60`\n- protocol: MCP `2025-06-18`\n- source contract: `lib/openai-plugin/mcp-contract.ts`\n- source HTTP route: `app/api/openai-plugin/mcp/route.ts`\n- source health route: `app/api/openai-plugin/health/route.ts`\n\nThis Val Town implementation is an explicit clean-room adapter of the intended public bounded contract. It is not claimed byte-identical to the private Next.js source tree.\n\nPublic surface is intentionally limited to:\n- `crm_get_service_readiness`\n- `crm_prepare_note`\n- `crm_prepare_lead_stage_change`\n- `crm_prepare_outreach_draft`\n\nSafety/authority boundaries:\n- no customer-data reads\n- no CRM mutations\n- no autonomous message sending\n- proposal outputs require review\n- `side_effect=false`\n- outreach returns `send_authorized=false`\n- `productionAuthority=false`\n- `submissionAuthority=false`\n- no secrets, database, billing integration, or external side-effect service is used\n\nHosting cost for this staging val: `$0` on the existing Val Town Free account.\n\n`STAGING_CONFORMANCE_PASS != PRODUCTION_AUTHORITY != OPENAI_SUBMISSION_AUTHORITY != PUBLICATION`.\n\n\n## OpenAI submission-readiness delta — 2026-09-10\n\nFresh OpenAI submission requirements were reconciled against this host. Remote MCP-only plugins are supported through a stable public HTTPS endpoint; OpenAI does not require Vercel specifically.\n\nCurrent verified host properties:\n- `httpPrivacy=public`\n- fixed endpoint: `https://rumbo-crm-openai-staging.val.run/`\n- exact candidate binding: `9152f5a50de42be55508f0effed5ed09aee44c60`\n- four-tool catalog only\n- every tool advertises `readOnlyHint=true`, `openWorldHint=false`, `destructiveHint=false`\n- `/.well-known/openai-apps-challenge` is implemented fail-closed: 404 while `OPENAI_APPS_CHALLENGE_TOKEN` is unset; when configured it returns only the configured token as `text/plain`\n- complete verifier remains PASS after challenge-route addition\n\nRemaining external/publication gates:\n- obtain the exact domain-verification token from the OpenAI submission portal and configure it without exposing it\n- prove the challenge endpoint returns the exact token\n- decide whether this endpoint is the production submission URL rather than staging-only\n- verify OpenAI Platform Apps Management=Write and matching verified developer/business identity\n- run portal Scan Tools\n- prepare/finalize at least 5 positive and 3 negative reviewer test cases\n- set country/region availability\n- submit only under separate submission authority\n\n`VALTOWN_PROVIDER_COMPATIBILITY=PASS_BY_OPENAI_DOCS`\n`DOMAIN_CHALLENGE_CAPABILITY=IMPLEMENTED_FAIL_CLOSED`\n`TOOL_ANNOTATIONS=PASS_BY_CODE_AND_CONFORMANCE`\n`OPENAI_SUBMISSION=NOT_EXECUTED`\n`MONEY_SPEND=0`\n",[178],"38674ce3-135a-4069-b379-c65f479e2e78","PUBLISHER_SURFACES_RECEIPT.json","f714bb74-ad9b-11f1-89f2-1607ee4eb77e",38,["D",1789102080178],"{\n \"schema\": \"RUMBO_OPENAI_PUBLISHER_SURFACES_RECEIPT_V1\",\n \"observed_at\": \"2026-09-11T04:44:00Z\",\n \"money_spend_usd\": 0,\n \"repository\": \"RUMBO-IA/Rumbo\",\n \"canonical_candidate\": {\n \"pr\": 94,\n \"state\": \"OPEN\",\n \"draft\": true,\n \"mergeable\": true,\n \"base\": \"main\",\n \"base_sha\": \"0ef5f831f6dd89e331364ddd029157f36022f87c\",\n \"head_branch\": \"fix/openai-publisher-surfaces-v1-20260911\",\n \"head_sha\": \"2f6df683e74c018697226d1ed12d3e3990644ecc\"\n },\n \"scope\": [\n \"openai-support.html\",\n \"openai-privacy.html\",\n \"openai-terms.html\",\n \"scripts/test_openai_support_semantics.py\"\n ],\n \"verification\": {\n \"support_semantics_test\": \"PASS_1_OF_1\",\n \"privacy_tests\": \"PASS_18_OF_18\",\n \"semantic_assertions\": \"PASS\",\n \"git_diff_check\": \"PASS\",\n \"codeql_actions\": \"PASS\",\n \"codeql_python\": \"PASS\",\n \"public_privacy_gate\": \"PASS\"\n },\n \"preview\": {\n \"provider\": \"Vercel\",\n \"deployment_id\": \"dpl_EGDe3PXC2Z3tGojqYCurjRWZhVhN\",\n \"state\": \"READY\",\n \"source_repo\": \"RUMBO-IA/Rumbo\",\n \"source_branch\": \"fix/openai-publisher-surfaces-v1-20260911\",\n \"source_sha\": \"2f6df683e74c018697226d1ed12d3e3990644ecc\",\n \"body_readback\": \"NOT_PROVEN_BY_AVAILABLE_SSO_FETCH_SURFACE\"\n },\n \"live_custom_domain\": {\n \"support_http\": 200,\n \"support_semantics\": \"FAIL_NOT_PROMOTED\",\n \"privacy_http\": 200,\n \"privacy_mcp_disclosure\": \"FAIL_NOT_PROMOTED\",\n \"terms_http\": 200\n },\n \"supersedes_after_review\": [83, 88],\n \"authority\": {\n \"merge\": \"NOT_GRANTED\",\n \"production_deploy\": \"NOT_GRANTED\",\n \"openai_submission\": \"NOT_GRANTED\",\n \"publication\": \"NOT_GRANTED\"\n },\n \"invariant\": \"BRANCH_PASS != LIVE_PROMOTION != OPENAI_SUBMISSION != PUBLICATION\"\n}",[185],"69c40034-bb11-4657-8217-986e5aab45f5","PUBLISHER_POLICY_DELTA.md","7ac37432-ad5c-11f1-814e-1607ee4eb77e",26,["D",1789074813327],"# RUMBO IA CRM — publisher policy delta for OpenAI review\n\nDate: 2026-09-10 UTC\nCandidate SHA: `9152f5a50de42be55508f0effed5ed09aee44c60`\nStatus: PREPARED_ONLY — NOT PROMOTED TO LIVE PUBLISHER SITE\n\n## Why this delta is required\n\nOpenAI's remote MCP review requires public website, support, privacy, and terms URLs that match the publisher, and the privacy policy must cover user-related data the MCP processes or returns. Fresh external readback shows all four configured URLs return HTTP 200, but `/openai-support` still serves generic RUMBO IA marketing content and `/openai-privacy` describes only website/contact processing. Neither is sufficient evidence for the bounded MCP surface.\n\n## Required support-page semantics\n\nThe live `/openai-support` page should identify itself as **RUMBO IA CRM Support** and state, in substance:\n\n- It supports the RUMBO IA CRM plugin for OpenAI/ChatGPT.\n- Public v1 exposes exactly four bounded tools: service readiness, note proposal preparation, lead-stage-change proposal preparation, and outreach-draft request preparation.\n- Tool outputs are proposals or readiness metadata only; proposal outputs remain `REVIEW_REQUIRED` and `side_effect=false`.\n- The plugin does not expose customer-data search/retrieval, CRM writes, autonomous sends, production authority, or submission authority.\n- Users should not place passwords, API keys, access tokens, or unnecessary sensitive/customer data in tool inputs.\n- Support contact: `sebastian@rumbo.verso.fans`.\n- Link visibly to the OpenAI-specific privacy and terms pages.\n\n## Required privacy-page disclosure\n\nThe live `/openai-privacy` page should disclose the actual bounded MCP data flow. A suitable minimum disclosure is:\n\n### RUMBO IA CRM plugin privacy notice\n\nRUMBO IA CRM provides a bounded MCP integration for OpenAI/ChatGPT. Public v1 does not search or retrieve customer records from a CRM and does not perform CRM mutations or send messages.\n\nWhen a user asks the plugin to prepare a proposal, the MCP service may process the information the user supplies for that request. Depending on the selected tool, this can include workspace or subject/lead identifiers, note text, stage labels, an optional reason, a communication channel, and an outreach objective. The service returns that supplied information as part of a reviewable proposal or returns bounded service-readiness metadata.\n\nThe current public v1 does not intentionally persist those tool inputs to a CRM or application database, does not use them to autonomously contact third parties, and does not sell them. Users should avoid submitting passwords, API keys, access tokens, or personal/customer information that is not necessary for the requested proposal.\n\nRequests are delivered through OpenAI/ChatGPT and the MCP hosting infrastructure. Hosting and network providers may process ordinary technical information such as IP address, browser/client metadata, request timing, and service logs for security and operation according to their own applicable terms and policies.\n\nFor privacy requests or questions about RUMBO IA CRM, contact `sebastian@rumbo.verso.fans`.\n\n## Terms status\n\nFresh readback of `/openai-terms` is HTTP 200 and identifies RUMBO IA, but the final publisher review should confirm that the selected verified publisher identity matches the name/contact/website used across the listing and policies.\n\n## Promotion gate\n\nThis document is a handoff artifact only. It does not authorize a production-site change, merge, publication, submission, or policy attestation.\n\n`POLICY_SOURCE_PREPARED != LIVE_POLICY_PROMOTED != VERIFIED_PUBLISHER != SUBMISSION_AUTHORITY`\n",[192],"2587df4e-dd49-4b61-b3dc-2a3a5c9bc4ee","PORTAL_PACKET.json","0ad9949a-ad5b-11f1-928e-1607ee4eb77e",44,["D",1789104834985],"{\n \"schema\": \"RUMBO_OPENAI_PLUGIN_PORTAL_PACKET_V1\",\n \"generated_at\": \"2026-09-10\",\n \"budget_usd\": 0,\n \"candidate_sha\": \"9152f5a50de42be55508f0effed5ed09aee44c60\",\n \"submission_type\": \"WITH_MCP_REMOTE_MCP_ONLY\",\n \"mcp_url_type\": \"UNIVERSAL\",\n \"mcp_url_candidate\": \"https://rumbo-crm-openai-staging.val.run/api/openai-plugin/mcp\",\n \"production_mcp_url\": null,\n \"production_mcp_url_status\": \"NOT_AUTHORIZED_FAIL_CLOSED\",\n \"authentication\": \"NONE\",\n \"reviewer_credentials\": \"NOT_APPLICABLE\",\n \"custom_ui\": false,\n \"content_security_policy\": \"NOT_APPLICABLE_NO_UI\",\n \"listing\": {\n \"name\": \"RUMBO IA CRM\",\n \"category\": \"Productivity\",\n \"short_description\": \"Prepare reviewable CRM notes, lead-stage changes, outreach drafts, and service-readiness checks without customer-data reads or autonomous side effects.\",\n \"long_description\": \"RUMBO IA CRM is a bounded, human-controlled CRM assistant. Its public v1 exposes four tools: service readiness, note proposal preparation, lead-stage-change proposal preparation, and outreach-draft request preparation. It does not expose customer-data search or retrieval, CRM mutation, autonomous message sending, production authority, or submission authority. Proposal outputs remain REVIEW_REQUIRED with side_effect=false.\",\n \"website_url\": \"https://rumbo.verso.fans/\",\n \"support_url\": \"https://rumbo-crm-openai-staging.val.run/support\",\n \"support_live_status\": \"HTTP_200_MCP_SEMANTICS_PASS_SELF_HOSTED\",\n \"privacy_url\": \"https://rumbo-crm-openai-staging.val.run/privacy\",\n \"privacy_live_status\": \"HTTP_200_MCP_DISCLOSURE_PASS_SELF_HOSTED\",\n \"terms_url\": \"https://rumbo-crm-openai-staging.val.run/terms\",\n \"terms_live_status\": \"HTTP_200_BOUNDED_TERMS_PASS_SELF_HOSTED\",\n \"policy_urls_http_public\": true,\n \"policy_urls_submission_semantics_ready\": true,\n \"logo\": {\n \"source_repo\": \"RUMBO-IA/Rumbo\",\n \"source_ref\": \"origin/main\",\n \"source_path\": \"openai-publication/agent-reliability/plugin/assets/logo.svg\",\n \"sha256\": \"3886bac832e08c0630addac79e83030ecf4c0218623f42c1796fd9ae318bb530\",\n \"viewBox\": \"0 0 512 512\",\n \"aria_label\": \"RUMBO IA\"\n },\n \"logo_status\": \"CANONICAL_CANDIDATE_READY_NOT_UPLOADED\"\n },\n \"starter_prompts\": [\n \"Check whether the RUMBO CRM service is ready and explain what authority it currently has.\",\n \"Prepare a reviewable CRM note for a lead without writing anything to the CRM.\",\n \"Prepare a lead-stage change proposal and keep it pending human review.\",\n \"Prepare a WhatsApp outreach draft request for a lead, but do not send it.\"\n ],\n \"tests\": {\n \"positive\": 5,\n \"negative\": 3,\n \"artifact\": \"SUBMISSION_TESTS.md\"\n },\n \"tool_contract\": {\n \"count\": 4,\n \"readOnlyHint\": true,\n \"openWorldHint\": false,\n \"destructiveHint\": false,\n \"customer_data_reads_exposed\": false,\n \"crm_mutations_exposed\": false,\n \"autonomous_sends_exposed\": false\n },\n \"domain_verification\": {\n \"challenge_path\": \"/.well-known/openai-apps-challenge\",\n \"capability\": \"IMPLEMENTED_FAIL_CLOSED\",\n \"token\": null,\n \"status\": \"NOT_EXECUTED\"\n },\n \"release_notes\": \"Initial public-review candidate for RUMBO IA CRM. The remote MCP surface is intentionally bounded to four proposal/readiness tools, uses MCP 2025-06-18, exposes no customer-data reads or CRM mutations, performs no autonomous sends, and keeps production/submission authority disabled. Synthetic reviewer fixtures are included; no authentication is required for this bounded v1.\",\n \"availability\": {\n \"countries_or_regions\": [],\n \"status\": \"UNSET_FAIL_CLOSED\"\n },\n \"publisher\": {\n \"developer_or_business_identity\": null,\n \"identity_status\": \"UNVERIFIED\",\n \"apps_management_write\": \"UNVERIFIED\"\n },\n \"publisher_surfaces_candidate\": {\n \"pr\": 94,\n \"head_sha\": \"08e0457569d734518569133709d97592e320fd42\",\n \"base_reconciled_sha\": \"b8f2287b0e891d1634526e1a033fa4e2ce833d33\",\n \"branch\": \"fix/openai-publisher-surfaces-v1-20260911\",\n \"draft\": true,\n \"merge_state\": \"BEHIND_AFTER_RECONCILE_DUE_CONCURRENT_MAIN\",\n \"support_test\": \"PASS_1_OF_1\",\n \"privacy_tests\": \"PASS_18_OF_18\",\n \"brand_contract\": \"PASS_19_OF_19_PLUS_VERIFIER\",\n \"diff_check\": \"PASS\",\n \"codeql\": \"PASS_NEW_HEAD\",\n \"vercel_deployment\": \"READY_SOURCE_BOUND\",\n \"vercel_deployment_id\": \"dpl_DPREtpZhVSwkwY2e3Po29FYk68UH\",\n \"vercel_deployment_sha\": \"08e0457569d734518569133709d97592e320fd42\",\n \"preview_support_semantics\": \"PASS\",\n \"preview_privacy_semantics\": \"PASS\",\n \"preview_terms_semantics\": \"PASS\",\n \"preview_body_readback\": \"PASS_ROOT_SHARE_COOKIE_FLOW\",\n \"live_semantics\": \"FAIL_NOT_PROMOTED\",\n \"supersedes_after_review\": [83, 88]\n },\n \"scan_tools\": {\n \"status\": \"NOT_EXECUTED\",\n \"snapshot\": null\n },\n \"submission\": {\n \"submit_for_review\": \"NOT_EXECUTED\",\n \"publication\": \"NOT_EXECUTED\"\n },\n \"invariant\": \"TECHNICAL_PASS != PRODUCTION_HOST_AUTHORITY != APPS_MANAGEMENT_WRITE != VERIFIED_PUBLISHER != DOMAIN_VERIFIED != SCAN_TOOLS_PASS != SUBMISSION_AUTHORITY != PUBLICATION\"\n}",[199],"ab81246c-c07a-4d2b-93e4-b13b5b6d2164","PORTAL_LOGO.svg","bc6341dc-ada3-11f1-95b6-1607ee4eb77e",49,["D",1789105417674],"\n",[206],"7c3d024e-8279-4b69-bb27-3bcdbc2334e4","PORTAL_EXECUTION_HANDOFF.md","deab7d64-ad5c-11f1-a2a7-1607ee4eb77e",28,["D",1789074980941],"# RUMBO IA CRM — OpenAI Apps Management execution handoff\n\nDate: 2026-09-10 UTC\nBudget: USD 0\nCandidate SHA: `9152f5a50de42be55508f0effed5ed09aee44c60`\nStatus: PRE-SUBMISSION HANDOFF ONLY — DO NOT SUBMIT OR PUBLISH\n\n## Entry conditions\n\nBefore entering data, confirm in OpenAI Platform/Apps Management:\n\n1. The selected OpenAI project has **global** data residency. If it is EU-residency, stop and do not submit the MCP plugin.\n2. The acting account has **Apps Management: Write**. If not, stop.\n3. Developer or business publisher identity is verified and matches the public RUMBO IA website/policies. If not, stop.\n4. Live support and privacy URLs pass the semantic gate in `submission_gate.ts`. Current state is FAIL for both, despite HTTP 200.\n5. A production-ready RUMBO IA logo asset is selected from canonical brand material. Do not invent or substitute an unrelated logo.\n6. A production MCP URL/origin has been explicitly authorized. Do not submit the current URL merely because the staging adapter passes conformance.\n\n## Draft configuration\n\nSubmission type: remote MCP-only / With MCP\nMCP URL mode: Universal\nAuthentication: None\nCustom UI: None\nReviewer credentials: Not applicable for bounded public v1\n\nUse the exact listing and release-note fields from `PORTAL_PACKET.json` after its fail-closed fields have been resolved.\nUse the 5 positive and 3 negative reviewer cases from `SUBMISSION_TESTS.md`.\n\n## Domain verification\n\nWhen Apps Management supplies the exact domain challenge token:\n\n1. Add it to the Val Town project as `OPENAI_APPS_CHALLENGE_TOKEN` using the secret/environment-variable mechanism; do not place it in source or chat logs.\n2. Verify `GET /.well-known/openai-apps-challenge` returns HTTP 200 with **only** the exact token as plaintext.\n3. Run `verify.ts` and `submission_gate.ts` again.\n4. Do not continue if either fails.\n\n## Scan Tools\n\nRun **Scan Tools** in Apps Management against the authorized production MCP URL.\nReview every discovered tool and confirm the catalog contains exactly:\n\n- `crm_get_service_readiness`\n- `crm_prepare_note`\n- `crm_prepare_lead_stage_change`\n- `crm_prepare_outreach_draft`\n\nFor each discovered tool confirm:\n\n- `readOnlyHint=true`\n- `openWorldHint=false`\n- `destructiveHint=false`\n- schema matches the bounded contract\n- no unplanned customer-data or mutating tool appears\n- no unnecessary personal data, secret, debug field, or internal identifier is returned\n\nIf the scanned catalog differs, stop and reconcile source/host before continuing.\n\n## Availability and review packet\n\nSelect only countries/regions where the publisher, product, support and legal terms are actually ready. Do not infer worldwide availability from technical reachability.\n\nEnter the starter prompts and release notes from `PORTAL_PACKET.json` and the reviewer test cases from `SUBMISSION_TESTS.md`.\n\n## Final pre-submit return gate\n\nBefore pressing **Submit for Review**, return the portal evidence to the control plane and update these fields:\n\n- `APPS_MANAGEMENT_WRITE=PASS`\n- `PUBLISHER_IDENTITY=PASS`\n- `GLOBAL_DATA_RESIDENCY=PASS`\n- `LOGO=PASS`\n- `SUPPORT_MCP_SEMANTICS=PASS`\n- `PRIVACY_MCP_DISCLOSURE=PASS`\n- `DOMAIN_VERIFICATION=PASS`\n- `SCAN_TOOLS=PASS`\n- `DISTRIBUTION_SCOPE=SET`\n- `PRODUCTION_MCP_URL=AUTHORIZED_AND_PROVEN`\n\nThen rerun `submission_gate.ts`.\n\nOnly `RUMBO_OPENAI_SUBMISSION_GATE_PASS` may establish technical submission readiness. It still does **not** grant authority to submit or publish.\n\n`SUBMISSION_GATE_PASS != SUBMISSION_AUTHORITY != REVIEW_APPROVAL != PUBLICATION_AUTHORITY`\n",[213],"pulls","branches",1,"forks","envVars",{"_227":62,"_229":62},"connections",{"_227":62,"_228":62},"count","unfilledCount","emptyCount",{"_43":212,"_32":213,"_30":214,"_141":-5,"_41":42,"_40":215,"_143":25,"_38":272,"_13":62,"_33":20,"_35":217,"_24":25,"_148":-5,"_242":273,"_27":274},{"_43":205,"_32":206,"_30":207,"_141":-5,"_41":42,"_40":208,"_143":58,"_38":269,"_13":62,"_33":20,"_35":210,"_24":25,"_148":-5,"_242":270,"_27":271},{"_43":198,"_32":199,"_30":200,"_141":-5,"_41":42,"_40":201,"_143":25,"_38":266,"_13":142,"_33":20,"_35":203,"_24":25,"_148":-5,"_242":267,"_27":268},{"_43":191,"_32":192,"_30":193,"_141":-5,"_41":42,"_40":194,"_143":58,"_38":263,"_13":62,"_33":20,"_35":196,"_24":25,"_148":-5,"_242":264,"_27":265},{"_43":184,"_32":185,"_30":186,"_141":-5,"_41":42,"_40":187,"_143":58,"_38":260,"_13":62,"_33":20,"_35":189,"_24":25,"_148":-5,"_242":261,"_27":262},{"_43":177,"_32":178,"_30":179,"_141":-5,"_41":42,"_40":180,"_143":58,"_38":257,"_13":145,"_33":20,"_35":182,"_24":25,"_148":-5,"_242":258,"_27":259},{"_43":169,"_32":170,"_30":171,"_141":-5,"_41":42,"_40":172,"_143":25,"_38":254,"_13":174,"_33":20,"_35":175,"_24":25,"_148":-5,"_242":255,"_27":256},{"_43":162,"_32":163,"_30":164,"_141":-5,"_41":42,"_40":165,"_143":58,"_38":251,"_13":62,"_33":20,"_35":167,"_24":25,"_148":-5,"_242":252,"_27":253},{"_43":158,"_32":28,"_30":31,"_141":-5,"_41":42,"_40":14,"_143":25,"_38":248,"_13":160,"_33":34,"_35":37,"_24":25,"_148":45,"_242":249,"_27":250},{"_43":150,"_32":151,"_30":152,"_141":-5,"_41":42,"_40":153,"_143":25,"_38":245,"_13":155,"_33":146,"_35":156,"_24":25,"_148":-5,"_242":246,"_27":247},{"_43":138,"_32":139,"_30":140,"_141":-5,"_41":42,"_40":142,"_143":25,"_38":241,"_13":145,"_33":146,"_35":147,"_24":25,"_148":-5,"_242":243,"_27":244},["D",1789072840621],"children",[],[139],["D",1789104852060],[],[151],["D",1789105428093],[],[28],["D",1789072894892],[],[163],["D",1789105105299],[],[170],["D",1789072867612],[],[178],["D",1789102080178],[],[185],["D",1789074813327],[],[192],["D",1789104834985],[],[199],["D",1789105417674],[],[206],["D",1789074980941],[],[213],["D",1789031650837],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_124":312,"_313":314,"_315":316,"_317":25,"_318":25,"_319":25,"_320":58,"_321":-5,"_322":-7,"_323":-7,"_324":62,"_325":25,"_326":25,"_327":-5,"_328":25,"_329":25,"_330":25,"_331":-5},"ENV",{"_283":284,"_285":286,"_287":86,"_288":289,"_290":291,"_292":293,"_294":295,"_296":297,"_298":299,"_300":301,"_302":303,"_304":305,"_306":307,"_308":309,"_310":311},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v50