[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_103":104,"_105":106},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","nbbaier","name","request-capture","path","lib.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":58,"_59":32,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/nbbaier/request-capture/code/lib.ts","extension","id","3167caee-add3-4b20-9e16-e7e9b94ac7c2","fileId","b0a8fe84-9acc-11f1-9ce8-1607ee4eb77e","parentId","branchId","3183b296-5847-427a-9a53-e0c005bb1bde","branchVersion",3,"latest",true,"createdAt",["D",1787033937487],"version",1,"fileType","script","content","/**\n * request-capture — HTTP request logging middleware for Val Town.\n *\n * Wrap any HTTP handler and every request it receives is snapshotted\n * into val-scoped blob storage as a serializable object:\n *\n * import { withRequestLogging } from \"https://esm.town/v/nbbaier/request-capture/lib.ts\";\n *\n * export default withRequestLogging(async (req: Request) => {\n * return Response.json({ ok: true, path: new URL(req.url).pathname });\n * });\n *\n * The captured record includes method, url, timestamp, an id, and headers\n * (sensitive ones redacted). The request body is NOT consumed by default so\n * the wrapped handler still gets to read it. Retrieval helpers below.\n */\n\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\n/** The serializable record persisted per captured request. */\nexport interface CapturedRequest {\n /** Unique id for this capture, in `captures:` blob key form later. */\n id: string;\n method: string;\n url: string;\n /** Unix timestamp in milliseconds. */\n timestamp: number;\n /** ISO datetime string. */\n time: string;\n headers: Record;\n /**\n * The request body, captured iff `options.captureBody` is true.\n * Returns undefined when body wasn't captured (the default).\n */\n body?: string;\n}\n\n/** Headers that commonly hold secrets and are redacted by default. */\nconst SENSITIVE_HEADERS = new Set([\n \"authorization\",\n \"proxy-authorization\",\n \"cookie\",\n \"set-cookie\",\n \"x-api-key\",\n \"api-key\",\n \"x-val-town-user\",\n]);\n\nexport interface RequestLoggingOptions {\n /** Capture the request body? Requires cloning the request; default false. */\n captureBody?: boolean;\n /**\n * Callback invoked with the capture after it's persisted. Use for\n * additional fan-out (log lines, other stores). Errors here don't\n * break the wrapped handler.\n */\n onCaptured?: (capture: CapturedRequest) => Promise | void;\n /** Max body bytes to capture when captureBody is true (default 64 KB). */\n maxBodyBytes?: number;\n /** Key prefix for stored captures (default \"captures\"). */\n keyPrefix?: string;\n}\n\n/** Builds the blob key for a capture id. */\nfunction captureKey(prefix: string, id: string): string {\n return `${prefix}:${id}`;\n}\n\n/** Hash a raw header name to a stable, mostly-readable pseudo-name. */\nfunction redactHeader(name: string): string {\n return `${name}:redacted`;\n}\n\nexport function withRequestLogging(\n handler: (req: Request) => Response | Promise,\n options: RequestLoggingOptions = {},\n): (req: Request) => Promise {\n const {\n captureBody = false,\n maxBodyBytes = 64 * 1024,\n keyPrefix = \"captures\",\n } = options;\n\n return async (req: Request): Promise => {\n const id = crypto.randomUUID();\n const timestamp = Date.now();\n const now = new Date(timestamp);\n\n // Build the serializable snapshot.\n const headers: Record = {};\n req.headers.forEach((value, key) => {\n headers[SENSITIVE_HEADERS.has(key) ? redactHeader(key) : key] = value;\n });\n\n const capture: CapturedRequest = {\n id,\n method: req.method,\n url: req.url,\n timestamp,\n time: now.toISOString(),\n headers,\n };\n\n // Optionally consume the body from a clone, leaving the original intact\n // for the wrapped handler.\n if (captureBody) {\n try {\n const cloned = req.clone();\n const text = await cloned.text();\n capture.body = text.length > maxBodyBytes\n ? text.slice(0, maxBodyBytes)\n : text;\n } catch {\n // Body unreadable (e.g. a streaming body) — skip it, not fatal.\n }\n }\n\n // Serialize once and persist. Punting on the id for anything else to attach.\n await blob.setJSON(captureKey(keyPrefix, id), capture);\n\n if (options.onCaptured) {\n // Fan out without letting a failure affect the handler.\n Promise.resolve(options.onCaptured(capture)).catch((err) => {\n console.error(\"request-capture: onCaptured hook failed\", err);\n });\n }\n\n return handler(req);\n };\n}\n\n/** Read back a single captured request. */\nexport async function readRequest(id: string, prefix = \"captures\"): Promise {\n return await blob.getJSON(captureKey(prefix, id));\n}\n\n/** List all captured request blobs (optionally filtered), newest first. */\nexport async function listCaptures(prefix = \"captures\", limit = 100): Promise {\n const entries = (await blob.list(prefix + \":\")).sort((a, b) =>\n b.key.localeCompare(a.key)\n );\n const out: CapturedRequest[] = [];\n for (const { key } of entries.slice(0, limit)) {\n const cap = await blob.getJSON(key);\n if (cap) out.push(cap);\n }\n return out;\n}\n\n/** Remove captures older than the given age in milliseconds. Returns count removed. */\nexport async function pruneCaptures(olderThanMs: number, prefix = \"captures\"): Promise {\n const nowMs = Date.now();\n const cutoff = nowMs - olderThanMs;\n const entries = await blob.list(prefix + \":\");\n let removed = 0;\n for (const { key, lastModified } of entries) {\n if (new Date(lastModified).getTime() < cutoff) {\n await blob.delete(key);\n removed++;\n }\n }\n return removed;\n}\n","deleted",false,"label",[14],"e41edbfa-0909-43a5-bb51-c38cadbbeed2",["D",1787033924484],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","HTTP middleware that snapshots requests to blob storage","imageUrl","userId","5d1042a9-7b0b-499d-8a72-3a8ac7a4e185","pinnedFileId","aa3d4398-9acc-11f1-9e1b-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","5f80108f-7ca4-4327-b77b-089dbe4b5a82","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_102":98},"org",{"_9":10,"_96":-5,"_97":98,"_55":56,"_99":100,"_101":42},"branch",{"_35":86,"_11":87,"_22":28,"_88":45,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":12,"_95":10},"isOwned",9,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://secure.gravatar.com/avatar/0129a541b7b3574e92c4afd06c5e32da&d=identicon","tier","pro","canRestrictVals","profileImageUrl","ctx",{"_79":-5,"_136":137,"_138":139,"_140":141,"_142":42,"_143":42,"_144":42,"_145":32,"_146":-5,"_147":-7,"_148":-7,"_149":63,"_150":42,"_151":42,"_152":-5,"_153":42,"_154":42,"_155":42,"_156":-5},"ENV",{"_107":108,"_109":110,"_111":87,"_112":113,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]