[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_108":109,"_110":111},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","lightweightorg","name","lightweightindustries","path","backend/utils/gate.ts","project",{"_22":49,"_11":12,"_35":50,"_51":-5,"_52":44,"_53":54,"_55":54,"_56":57,"_58":59,"_60":61,"_62":63,"_64":34,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/lightweightorg/lightweightindustries/code/backend/utils/gate.ts","extension","id","c69a2a62-5647-4a8c-8829-4b270b345e01","gate.ts","fileId","495b591e-ac3f-11f1-8027-1607ee4eb77e","parentId","01a085de-26c9-705c-866d-ae7e6a176e09","branchId","882c282b-dbad-4f8a-8f35-51665afdbc22","branchVersion",39,"latest",true,"createdAt",["D",1789042213864],"version",3,"fileType","script","content","import { escapeHtml } from \"./html.ts\";\n\n/**\n * Gates: trade an identity for something.\n *\n * A gate is a CONTENT file (`content/gates/.md`) plus a `{{gate:}}`\n * token in a page. Adding another gate is a file and a token — never code.\n */\n\n/** Google Identity Services — the script that draws the button and the popup. */\nexport const GSI_SCRIPT = \"https://accounts.google.com/gsi/client\";\n\n/** Records that a visitor has already paid the toll. */\nexport const UNLOCK_COOKIE = \"lw_unlocked\";\n\n/**\n * ⚠️ This cookie is NOT a security boundary and is deliberately unsigned.\n * Forging it reveals a calendar link that is handed to anyone who signs in,\n * so signing it would buy nothing. If a gate ever fronts something of real\n * value, this decision has to be revisited — sign it then.\n */\n\n/**\n * ⚠️ THE TYPED-EMAIL FALLBACK IS TEMPORARILY OFF.\n *\n * It is the one door that verifies nothing, which makes it the way around\n * Google sign-in. Nothing has been deleted: the disclosure, the form, the\n * controller path and the Notion write are all still here and still wired.\n * This flag is the switch that shows them again.\n *\n * Flip it to true once the remediations land — at minimum a honeypot and a\n * rate limit on /api/unlock, and ideally the flow where a typed submission\n * becomes a REQUEST (thank-you, manual vetting) rather than an unlock.\n *\n * Read in TWO places on purpose, so the form and the endpoint cannot drift\n * apart: renderGatePrompt omits the whole disclosure, and unlockGate refuses.\n * Hiding only the form would leave /api/unlock accepting posts from anything\n * that knows the URL — and that URL is in the page source of every visit made\n * before today, so it is not a secret.\n */\nexport const EMAIL_FALLBACK_ENABLED = false;\n\n/**\n * A gate token — with or without the paragraph `marked` may have wrapped it in.\n *\n * ⚠️ BOTH have to work, because the difference is invisible to whoever is\n * writing the page. `marked` treats a run of lines starting with a raw HTML\n * tag as ONE html block that ends at the first blank line, so this:\n *\n *

\n *\n * {{gate:calendar}}\n *\n *

\n *\n * renders the token as its own paragraph, while this:\n *\n *

\n * {{gate:calendar}}\n *

\n *\n * emits it as bare text inside the html block. Requiring the paragraph made\n * the second form fail silently — the literal token was printed on the page.\n * Matching the wrapper OPTIONALLY means an author never has to know that rule.\n * When the paragraph is present it is consumed along with the token, so no\n * empty paragraph is left behind.\n */\nconst GATE_TOKEN = /(?:

\\s*)?\\{\\{gate:([a-z0-9-]+)\\}\\}(?:\\s*<\\/p>)?/g;\n\nexport function findGateNames(html: string): string[] {\n return [...html.matchAll(GATE_TOKEN)].map((match) => match[1]);\n}\n\nexport function replaceGate(\n html: string,\n name: string,\n replacement: string,\n): string {\n // The replacement is passed as a FUNCTION, not a string, so a dollar sign in\n // the reward content (say, a price) is never read as a replacement pattern.\n //\n // `name` is safe to interpolate into the pattern: it only ever arrives from\n // `findGateNames`, which matched it against [a-z0-9-]+, so it can carry no\n // regex metacharacters.\n return html.replace(\n new RegExp(\n `(?:

\\\\s*)?\\\\{\\\\{gate:${name}\\\\}\\\\}(?:\\\\s*

)?`,\n \"g\",\n ),\n () => replacement,\n );\n}\n\n/**\n * The DOM id a gate renders under.\n *\n * Ours, not `marked`'s: heading ids would depend on the renderer's slugging of\n * whatever the heading happens to say, and would break the moment the copy\n * changes. This is keyed to the gate name instead.\n *\n * The name is used BARE — `#calendar`, not `#gate-calendar` — because the\n * anchor is a public URL someone might type or share, and the prefix was\n * machinery leaking into it. Nothing else on these pages emits ids (marked is\n * not configured to slug headings), so there is nothing to collide with. If\n * that ever changes, this function is the single place to re-prefix.\n *\n * Every caller goes through here — the page wrapper, the unlock redirect, and\n * the Google callback redirect — so the shape of the anchor is decided once.\n */\nexport function gateAnchorId(name: string): string {\n return name;\n}\n\n/**\n * Wraps a gate so an unlock can land the visitor back on it.\n *\n * An `article`, not a plain div: a gate is a bounded, self-contained thing —\n * a prompt in one state, an embedded calendar in the other — and Pico styles\n * `article` as a card, which is exactly that reading.\n *\n * Doing it HERE rather than around the token in markdown also removes a trap.\n * Raw HTML written around the token in a content file can swallow it into one\n * html block, and then the token never becomes a paragraph (see GATE_TOKEN\n * above). Owning the wrapper in code means an author writes only the token.\n */\nexport function wrapGate(name: string, html: string): string {\n const id = escapeHtml(gateAnchorId(name));\n // TWO hooks, doing two different jobs:\n // id — unique, per gate, so an unlock redirect can land on this one.\n // class — shared by every gate, so one CSS rule styles all of them.\n // Styling the id instead would mean the next gate inherits nothing.\n return `

\\n${html}\\n

`;\n}\n\nexport type GateError = \"email\" | \"google\" | null;\n\n/**\n * ⚠️ EVERY visitor-facing word in a locked gate arrives here from the gate's\n * own content file. None of it is written into this module.\n *\n * That is the same rule the token follows — adding a gate is a file, never\n * code — and it has to hold for the copy too, or the second gate inherits\n * calendar-flavoured wording it cannot change without a code edit.\n */\nexport interface GatePromptInput {\n name: string;\n /**\n * Optional lead-in above the button. Usually absent: the page around the\n * token is a better place for prose, because it can be edited, moved and\n * read in context. A gate that sets none renders only its controls.\n */\n prompt?: string;\n button: string;\n /** Summary on the disclosure hiding the email form. */\n fallback: string;\n /**\n * Optional line under the form. Omitted ENTIRELY when the gate file doesn't\n * set one — the absence is the point, so a gate says only what it needs to.\n */\n assurance?: string;\n /** Null when GOOGLE_CLIENT_ID isn't set. */\n googleClientId: string | null;\n /** Absolute. Must EXACTLY match an authorized redirect URI on the client. */\n loginUri: string;\n /** Only ONE #g_id_onload may exist per page — the first gate emits it. */\n includeOnload: boolean;\n error?: GateError;\n}\n\nexport function renderGatePrompt(\n {\n name,\n prompt,\n button,\n fallback,\n assurance,\n googleClientId,\n loginUri,\n includeOnload,\n error,\n }: GatePromptInput,\n): string {\n const gate = escapeHtml(name);\n const fieldId = `gate-${name}-email`;\n\n const notice = error === \"google\"\n ? `

Google sign-in didn't finish. Try again, or use your email below.

\\n`\n : error === \"email\"\n ? `

That doesn't look like an email address — try again?

\\n`\n : \"\";\n\n // The ARTICLE is what the disclosure reveals — the form arrives as a card\n // rather than as loose fields under a summary.\n //\n // fieldset role=\"group\" is Pico's own grouped-input markup: it strips the\n // inner border radii so field and button read as one control. Its rules\n // select DIRECT children, so ONLY those two may live inside it — the hidden\n // gate field sits outside, or it would take the first-child slot and the\n // rounding would land on the wrong element.\n //\n // The label sits ABOVE the fieldset, not in it — inside, it would be a\n // direct child of the group and take the first-child slot, flattening the\n // corners of the wrong element. And a real label means no aria-label: with\n // both present the aria-label wins and the visible text is what gets\n // ignored, which is backwards.\n const form = `

\n \n

`;\n\n // Google is the DEFAULT: one click, an account picked in Google's own popup,\n // and an address that comes back verified. Typing is the fallback.\n //\n // `data-auto_prompt=\"false\"` suppresses One Tap — a button was asked for, not\n // an uninvited flyover on page load. `data-state` carries which gate was\n // clicked; Google echoes it back in the POST.\n //\n // `data-text=\"continue_with\"` renders \"Continue with Google\" rather than\n // \"Sign in with Google\": this is a marketing page, and \"sign in\" implies an\n // account they don't have and never wanted.\n const onload = includeOnload\n ? `

\n`\n : \"\";\n\n const google = googleClientId\n ? `${onload}

`\n // Visible on purpose rather than hidden: a missing button reads as a bug,\n // and this says what to fix. It disappears once the client id is set.\n : `

\n Set GOOGLE_CLIENT_ID to enable this.

`;\n\n // Rendered only when the gate file asks for it, so silence is the default.\n const note = assurance ? `\\n${escapeHtml(assurance)}` : \"\";\n\n // Both the lead-in and the assurance are opt-in, so a gate that sets neither\n // renders exactly its controls: the button, and the form behind a summary.\n const lead = prompt ? `

${escapeHtml(prompt)}

\\n` : \"\";\n\n // The WHOLE disclosure goes when the fallback is off, not just the form\n // inside it: there should be nothing to notice, let alone open.\n const disclosure = EMAIL_FALLBACK_ENABLED\n ? `\n

${escapeHtml(fallback)}

\n${form}\n

`\n : \"\";\n\n return `${lead}${notice}${google}${disclosure}${note}`;\n}\n\n/**\n * Shown ABOVE an unlocked reward. The escape hatch out of a year-long,\n * httpOnly cookie — without it the gate becomes invisible forever to anyone\n * who has opened it once.\n *\n * A paragraph rather than `small`: it sits as a block-level child of the gate,\n * so it needs an element that carries its own spacing, and shrinking the one\n * control that undoes a year-long cookie was the wrong emphasis anyway.\n */\nexport function renderUnlockedNote(email: string): string {\n // \"Continuing as\", not \"Signed in as\" — this is a marketing page, and\n // sign-in language implies an account nobody here has or wants.\n return `

Continuing as ${\n escapeHtml(email)\n } · (Not you?)

`;\n}","deleted",false,"label",[47,48,24],"backend","utils","e5478a0f-89bc-4c6b-b160-450142887dc4",["D",1788890813214],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Tools that travel","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/b36c9f74-c526-4d15-b99d-8536563aa401/square512?exp=1789556399&sig=822f4ed58190439f02d57cb47f57e0c1ebcbb3c313208364c8df9539d437b6fc","userId","449588c0-326d-11f0-a80c-0741f032ef73","pinnedFileId","495ac9a4-ac3f-11f1-8027-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a038d7-2f56-77a8-813a-73db7ed08bec","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_107":103},"org",{"_9":10,"_101":10,"_102":103,"_60":-5,"_104":105,"_106":34},"branch",{"_37":91,"_11":92,"_22":30,"_93":49,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":12,"_100":10},"isOwned",318,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/f0c72fa6-9948-4a8c-bb6c-89aef6f85d01/square512?exp=1789556399&sig=d1ea4db041c25694ed12025bda15c04623fca71c745f16ff5198ffce4ab188f0","tier","business","canRestrictVals","profileImageUrl","ctx",{"_84":-5,"_141":142,"_143":144,"_145":146,"_147":44,"_148":44,"_149":44,"_150":34,"_151":-5,"_152":-7,"_153":-7,"_154":68,"_155":44,"_156":44,"_157":-5,"_158":44,"_159":44,"_160":44,"_161":-5},"ENV",{"_112":113,"_114":115,"_116":92,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138,"_139":140},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]