[{"_1":2,"_185":-5,"_186":-5},"loaderData",{"_3":4,"_96":97},"root",{"_5":6,"_37":38,"_69":70},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":-5,"_32":33,"_34":20,"_35":20,"_36":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesChatPanelState","notificationCount",0,"flagDenols","isBusinessOrgMember","isHigherTownieTier","ENV",{"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64,"_65":66,"_67":68},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","99a8c519f8bbd643e395a3e57fd2a0d656842c6e","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","API_URL","https://api.val.town","clerkState",{"_71":72},"__internal_clerk_state",{"_73":74,"_75":48,"_76":77,"_78":77,"_79":20,"_80":77,"_81":77,"_82":77,"_83":77,"_84":85,"_94":20,"_95":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_86":20,"_19":20,"_87":77,"_88":89,"_90":77,"_91":48,"_92":20,"_93":77},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_98":99,"_100":101,"_102":103,"_104":105,"_161":162,"_182":183,"_184":-5},"handle","pycoder42","name","study-resources","path","auth.ts","project",{"_106":107,"_100":101,"_108":109,"_110":-5,"_111":20,"_112":113,"_114":-5,"_115":-5,"_12":116,"_117":-5,"_118":20,"_119":-5,"_120":-5,"_121":33,"_14":122,"_123":124,"_125":126,"_127":128,"_129":-5,"_130":131,"_132":131,"_133":134,"_135":134,"_136":134,"_137":131,"_138":131,"_23":139,"_142":143,"_147":148,"_160":20},"id","32fc1ab6-3208-11f1-8a4a-42dde27851f2","createdAt",["D",1775514622169],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","019d275b-d06b-734f-8e50-762c85009c4d","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","019d275b-d06b-734f-8e50-7b6137063a35","tursoName","32fc1ab6320811f18a4a42dde27851f2","tursoHostname","32fc1ab6320811f18a4a42dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1775612491368],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_98":99,"_140":141},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18zQlNVQUVMTkx3QmljWDhIOVVPZjIwbVRSYjkifQ","org",{"_98":99,"_144":141,"_12":116,"_145":146},"avatar","tier","free","branch",{"_149":150,"_100":46,"_106":151,"_152":107,"_153":-5,"_154":-5,"_155":-5,"_156":-5,"_157":-5,"_158":101,"_159":99},"version",19,"32fceb1c-3208-11f1-8a4a-42dde27851f2","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_106":163,"_100":103,"_164":165,"_166":-5,"_167":151,"_168":169,"_170":171,"_108":172,"_149":173,"_174":175,"_176":177,"_178":20,"_179":180,"_102":181},"352a6766-32df-11f1-ab6f-42b51c65c3df","fileId","330273ca-3208-11f1-8a4a-42dde27851f2","parentId","branchId","branchVersion",18,"latest",true,["D",1775606967617],9,"fileType","http","content","// Val Town Game Auth Server\n//\n// This is the security backbone. It stores all secrets server-side.\n// The secure HTML files contain NOTHING sensitive — no repo URLs,\n// no encryption keys, no config URLs. Just a password prompt and\n// this endpoint's URL.\n//\n// Deploy: Paste into a new Val Town HTTP val.\n// Then set these environment variables in Val Town:\n// GITHUB_PAT — GitHub personal access token (repo read/write)\n// GITHUB_REPO — e.g. \"username/repo-name\"\n// GAME_KEYS_JSON — JSON: { \"drive-mad\": \"hex-key\", \"mr-mine\": \"hex-key\", ... }\n// (copy from .game-keys file)\n// AUTH_SECRET — A password for admin panel access (optional extra layer)\n//\n// Endpoints:\n// POST /auth — Authenticate a game session\n// GET /config — Read config (admin panel)\n// POST /config — Write config (admin panel)\n// POST /block-all — Invalidate all current file versions\n// POST /block-ip — Block an IP address (globally)\n// POST /unblock-ip — Remove a global IP block\n// POST /block-ip-game — Block an IP for a specific game only\n// POST /unblock-ip-game — Remove a per-game IP block\n// GET /ip-log — Read the IP access log (requires x-auth-secret header)\n// POST /track — Log a panel access beacon (no auth required)\n\nconst CORS_HEADERS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, x-auth-secret\",\n};\n\n// ─── Types ───────────────────────────────────────────────────\n\ntype IpLogEntry = { ip: string; gameId: string; at: string };\ntype PanelLogEntry = { p: string; r: string; ts: number; at: string };\n\nexport default async function server(request: Request): Promise {\n if (request.method === \"OPTIONS\") {\n return new Response(null, { headers: CORS_HEADERS });\n }\n\n const url = new URL(request.url);\n const path = url.pathname;\n\n try {\n if (path === \"/auth\" && request.method === \"POST\") {\n return handleAuth(request);\n }\n if (path === \"/config\" && request.method === \"GET\") {\n return handleReadConfig(request);\n }\n if (path === \"/config\" && request.method === \"POST\") {\n return handleWriteConfig(request);\n }\n if (path === \"/block-all\" && request.method === \"POST\") {\n return handleBlockAll(request);\n }\n if (path === \"/block-ip\" && request.method === \"POST\") {\n return handleBlockIp(request);\n }\n if (path === \"/unblock-ip\" && request.method === \"POST\") {\n return handleUnblockIp(request);\n }\n if (path === \"/block-ip-game\" && request.method === \"POST\") {\n return handleBlockIpGame(request);\n }\n if (path === \"/unblock-ip-game\" && request.method === \"POST\") {\n return handleUnblockIpGame(request);\n }\n if (path === \"/ip-log\" && request.method === \"GET\") {\n return handleReadIpLog(request);\n }\n if (path === \"/track\" && request.method === \"POST\") {\n return handleTrack(request);\n }\n return jsonResponse({ error: \"not_found\" }, 404);\n } catch (err: any) {\n return jsonResponse({ error: \"server_error\", message: err.message }, 500);\n }\n}\n\n// ─── Auth: The core endpoint ─────────────────────────────────\n// Called by secure HTML files when user enters password.\n// Returns encrypted game data + key if approved.\n// Returns error if denied. No secrets leak on denial.\n\nasync function handleAuth(request: Request): Promise {\n const body = await request.json() as {\n gameId?: string;\n password?: string;\n ip?: string;\n fileVersion?: number;\n };\n\n const gameId = normalizeGameId(body.gameId || \"\");\n const password = (body.password || \"\").trim();\n const clientIp = (body.ip || \"\").trim();\n const fileVersion = body.fileVersion || 0;\n\n if (!gameId) {\n return jsonResponse({ error: \"denied\", reason: \"Invalid game ID\" });\n }\n if (!password) {\n return jsonResponse({ error: \"denied\", reason: \"No password\" });\n }\n\n // Fetch current config from GitHub\n const config = await fetchConfig();\n if (!config) {\n return jsonResponse({ error: \"denied\", reason: \"Config unavailable\" });\n }\n\n // Check password\n const passwords = normalizePasswordList(config);\n if (!passwords.includes(password)) {\n return jsonResponse({ error: \"denied\", reason: \"Wrong password\" });\n }\n\n // Check if game is blocked\n const blocked = config.blocked || {};\n const blockVal = blocked[gameId];\n if (\n blockVal === true ||\n (typeof blockVal === \"string\" && new Date(blockVal) > new Date())\n ) {\n // Check if IP is in allowedIps (override block for permitted IPs)\n const allowedIps = normalizeAllowedIps(config.allowedIps);\n if (!clientIp || !allowedIps[clientIp]) {\n return jsonResponse({ error: \"denied\", reason: \"Game is blocked\" });\n }\n }\n\n // Check if IP is blocked globally\n const blockedIps = config.blockedIps || {};\n if (clientIp && blockedIps[clientIp]) {\n return jsonResponse({ error: \"denied\", reason: \"IP is blocked\" });\n }\n\n // Check if IP is blocked for this specific game\n const perGameBlocked = config.perGameBlockedIps || {};\n const gameBlocked = perGameBlocked[gameId] || {};\n if (clientIp && gameBlocked[clientIp]) {\n return jsonResponse({\n error: \"denied\",\n reason: \"IP is blocked for this game\",\n });\n }\n\n // Check minimum file version (version invalidation)\n const minFileVersion = config.minFileVersion || 0;\n if (fileVersion > 0 && fileVersion < minFileVersion) {\n return jsonResponse({\n error: \"denied\",\n reason: \"Outdated version. Get the latest files.\",\n });\n }\n\n // All checks passed — return the game data + decryption key\n const gameKeys = getGameKeys();\n const gameKey = gameKeys[gameId];\n if (!gameKey) {\n return jsonResponse({ error: \"denied\", reason: \"Game not configured\" });\n }\n\n // Fetch encrypted game data from GitHub (server-side, client never sees repo URL)\n const repo = getEnv(\"GITHUB_REPO\");\n const pat = getEnv(\"GITHUB_PAT\");\n const gameDataUrl =\n `https://raw.githubusercontent.com/${repo}/main/Technical%20Stuff/game-data/${gameId}.enc.json`;\n\n const gameDataResp = await fetch(gameDataUrl, {\n headers: pat ? { Authorization: `token ${pat}` } : {},\n });\n\n if (!gameDataResp.ok) {\n return jsonResponse({ error: \"denied\", reason: \"Game data unavailable\" });\n }\n\n const gameData = await gameDataResp.json();\n\n // Fire-and-forget: log this access (don't await, don't fail auth if it errors)\n if (clientIp) {\n appendToIpLog({ ip: clientIp, gameId, at: new Date().toISOString() }).catch(\n () => {},\n );\n }\n\n return jsonResponse({\n ok: true,\n gameData: gameData, // { iv, authTag, ciphertext }\n key: gameKey, // hex-encoded AES-256 key\n });\n}\n\n// ─── Config read/write (admin panel) ─────────────────────────\n\nasync function handleReadConfig(request: Request): Promise {\n const url = new URL(request.url);\n const password = url.searchParams.get(\"password\") || \"\";\n\n const config = await fetchConfig();\n if (!config) return jsonResponse({ error: \"Config unavailable\" }, 500);\n\n const passwords = normalizePasswordList(config);\n if (!passwords.includes(password)) {\n return jsonResponse({ error: \"Unauthorized\" }, 401);\n }\n\n return jsonResponse(config);\n}\n\nasync function handleWriteConfig(request: Request): Promise {\n const body = await request.json() as { password?: string; config?: any };\n const password = (body.password || \"\").trim();\n\n const currentConfig = await fetchConfig();\n if (!currentConfig) return jsonResponse({ error: \"Config unavailable\" }, 500);\n\n const passwords = normalizePasswordList(currentConfig);\n if (!passwords.includes(password)) {\n return jsonResponse({ error: \"Unauthorized\" }, 401);\n }\n\n const newConfig = body.config;\n if (!newConfig || typeof newConfig !== \"object\") {\n return jsonResponse({ error: \"Invalid config\" }, 400);\n }\n\n await writeConfigToGitHub(newConfig);\n return jsonResponse({ ok: true });\n}\n\n// ─── Block all versions ──────────────────────────────────────\n\nasync function handleBlockAll(request: Request): Promise {\n const body = await request.json() as { password?: string };\n const password = (body.password || \"\").trim();\n\n const config = await fetchConfig();\n if (!config) return jsonResponse({ error: \"Config unavailable\" }, 500);\n\n const passwords = normalizePasswordList(config);\n if (!passwords.includes(password)) {\n return jsonResponse({ error: \"Unauthorized\" }, 401);\n }\n\n // Set minFileVersion to current timestamp — all older files are blocked\n config.minFileVersion = Date.now();\n await writeConfigToGitHub(config);\n\n return jsonResponse({\n ok: true,\n minFileVersion: config.minFileVersion,\n message:\n \"All current versions blocked. Regenerate files to create valid versions.\",\n });\n}\n\n// ─── Global IP blocking ──────────────────────────────────────\n\nasync function handleBlockIp(request: Request): Promise {\n const body = await request.json() as {\n password?: string;\n ip?: string;\n label?: string;\n };\n const password = (body.password || \"\").trim();\n const ip = (body.ip || \"\").trim();\n const label = (body.label || \"\").trim();\n\n if (!ip) return jsonResponse({ error: \"No IP provided\" }, 400);\n\n const config = await fetchConfig();\n if (!config) return jsonResponse({ error: \"Config unavailable\" }, 500);\n\n const passwords = normalizePasswordList(config);\n if (!passwords.includes(password)) {\n return jsonResponse({ error: \"Unauthorized\" }, 401);\n }\n\n if (!config.blockedIps) config.blockedIps = {};\n config.blockedIps[ip] = {\n label: label || ip,\n blockedAt: new Date().toISOString(),\n };\n\n await writeConfigToGitHub(config);\n return jsonResponse({ ok: true, blockedIps: config.blockedIps });\n}\n\nasync function handleUnblockIp(request: Request): Promise {\n const body = await request.json() as { password?: string; ip?: string };\n const password = (body.password || \"\").trim();\n const ip = (body.ip || \"\").trim();\n\n if (!ip) return jsonResponse({ error: \"No IP provided\" }, 400);\n\n const config = await fetchConfig();\n if (!config) return jsonResponse({ error: \"Config unavailable\" }, 500);\n\n const passwords = normalizePasswordList(config);\n if (!passwords.includes(password)) {\n return jsonResponse({ error: \"Unauthorized\" }, 401);\n }\n\n if (config.blockedIps) {\n delete config.blockedIps[ip];\n }\n\n await writeConfigToGitHub(config);\n return jsonResponse({ ok: true, blockedIps: config.blockedIps || {} });\n}\n\n// ─── Per-game IP blocking ─────────────────────────────────────\n\nasync function handleBlockIpGame(request: Request): Promise {\n const body = await request.json() as {\n password?: string;\n ip?: string;\n gameId?: string;\n label?: string;\n };\n const password = (body.password || \"\").trim();\n const ip = (body.ip || \"\").trim();\n const gameId = normalizeGameId(body.gameId || \"\");\n const label = (body.label || \"\").trim();\n\n if (!ip) return jsonResponse({ error: \"No IP provided\" }, 400);\n if (!gameId) return jsonResponse({ error: \"No game ID provided\" }, 400);\n\n const config = await fetchConfig();\n if (!config) return jsonResponse({ error: \"Config unavailable\" }, 500);\n\n const passwords = normalizePasswordList(config);\n if (!passwords.includes(password)) {\n return jsonResponse({ error: \"Unauthorized\" }, 401);\n }\n\n if (!config.perGameBlockedIps) config.perGameBlockedIps = {};\n if (!config.perGameBlockedIps[gameId]) config.perGameBlockedIps[gameId] = {};\n config.perGameBlockedIps[gameId][ip] = {\n label: label || ip,\n blockedAt: new Date().toISOString(),\n };\n\n await writeConfigToGitHub(config);\n return jsonResponse({\n ok: true,\n perGameBlockedIps: config.perGameBlockedIps,\n });\n}\n\nasync function handleUnblockIpGame(request: Request): Promise {\n const body = await request.json() as {\n password?: string;\n ip?: string;\n gameId?: string;\n };\n const password = (body.password || \"\").trim();\n const ip = (body.ip || \"\").trim();\n const gameId = normalizeGameId(body.gameId || \"\");\n\n if (!ip) return jsonResponse({ error: \"No IP provided\" }, 400);\n if (!gameId) return jsonResponse({ error: \"No game ID provided\" }, 400);\n\n const config = await fetchConfig();\n if (!config) return jsonResponse({ error: \"Config unavailable\" }, 500);\n\n const passwords = normalizePasswordList(config);\n if (!passwords.includes(password)) {\n return jsonResponse({ error: \"Unauthorized\" }, 401);\n }\n\n if (config.perGameBlockedIps && config.perGameBlockedIps[gameId]) {\n delete config.perGameBlockedIps[gameId][ip];\n // Clean up empty game entry\n if (Object.keys(config.perGameBlockedIps[gameId]).length === 0) {\n delete config.perGameBlockedIps[gameId];\n }\n }\n\n await writeConfigToGitHub(config);\n return jsonResponse({\n ok: true,\n perGameBlockedIps: config.perGameBlockedIps || {},\n });\n}\n\n// ─── IP log read ──────────────────────────────────────────────\n\nasync function handleReadIpLog(request: Request): Promise {\n const secret = request.headers.get(\"x-auth-secret\") || \"\";\n const expectedSecret = getEnv(\"AUTH_SECRET\");\n if (!expectedSecret || secret !== expectedSecret) {\n return jsonResponse({ error: \"Unauthorized\" }, 401);\n }\n const log = await fetchIpLog();\n return jsonResponse({ ok: true, entries: log });\n}\n\n// ─── Panel access tracking beacon ─────────────────────────────\n\nasync function handleTrack(request: Request): Promise {\n // Fire-and-forget — always return 200, never fail the caller\n try {\n const body = await request.json() as {\n p?: string;\n r?: string;\n ts?: number;\n };\n const entry: PanelLogEntry = {\n p: (body.p || \"\").trim(),\n r: (body.r || \"\").trim(),\n ts: body.ts || 0,\n at: new Date().toISOString(),\n };\n appendToPanelLog(entry).catch(() => {});\n } catch {\n // Ignore parse errors — always 200\n }\n return jsonResponse({ ok: true });\n}\n\n// ─── GitHub API helpers ──────────────────────────────────────\n\nasync function fetchConfig(): Promise {\n const repo = getEnv(\"GITHUB_REPO\");\n const pat = getEnv(\"GITHUB_PAT\");\n\n const url =\n `https://raw.githubusercontent.com/${repo}/main/Technical%20Stuff/config.json?t=${Date.now()}`;\n const resp = await fetch(url, {\n headers: pat ? { Authorization: `token ${pat}` } : {},\n });\n\n if (!resp.ok) return null;\n return resp.json();\n}\n\nasync function writeConfigToGitHub(config: any): Promise {\n const repo = getEnv(\"GITHUB_REPO\");\n const pat = getEnv(\"GITHUB_PAT\");\n\n if (!repo || !pat) throw new Error(\"GITHUB_REPO and GITHUB_PAT required\");\n\n // Get current file SHA\n const apiUrl =\n `https://api.github.com/repos/${repo}/contents/Technical%20Stuff/config.json`;\n const getResp = await fetch(apiUrl, {\n headers: {\n Authorization: `token ${pat}`,\n Accept: \"application/vnd.github.v3+json\",\n },\n });\n\n let sha = \"\";\n if (getResp.ok) {\n const data = await getResp.json() as any;\n sha = data.sha;\n }\n\n // Write updated config\n const content = btoa(\n unescape(encodeURIComponent(JSON.stringify(config, null, 2) + \"\\n\")),\n );\n const putResp = await fetch(apiUrl, {\n method: \"PUT\",\n headers: {\n Authorization: `token ${pat}`,\n Accept: \"application/vnd.github.v3+json\",\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n message: \"Update config via auth server\",\n content: content,\n sha: sha || undefined,\n }),\n });\n\n if (!putResp.ok) {\n const err = await putResp.text();\n throw new Error(\"GitHub write failed: \" + err);\n }\n}\n\n// ─── IP log helpers ───────────────────────────────────────────\n\nasync function fetchIpLog(): Promise {\n const repo = getEnv(\"GITHUB_REPO\");\n const pat = getEnv(\"GITHUB_PAT\");\n const url =\n `https://raw.githubusercontent.com/${repo}/main/Technical%20Stuff/ip-log.json?t=${Date.now()}`;\n try {\n const resp = await fetch(url, {\n headers: pat ? { Authorization: `token ${pat}` } : {},\n });\n if (!resp.ok) return [];\n return resp.json();\n } catch {\n return [];\n }\n}\n\nasync function appendToIpLog(entry: IpLogEntry): Promise {\n const repo = getEnv(\"GITHUB_REPO\");\n const pat = getEnv(\"GITHUB_PAT\");\n\n if (!repo || !pat) return;\n\n const apiUrl =\n `https://api.github.com/repos/${repo}/contents/Technical%20Stuff/ip-log.json`;\n\n // Read current log + SHA\n const getResp = await fetch(apiUrl, {\n headers: {\n Authorization: `token ${pat}`,\n Accept: \"application/vnd.github.v3+json\",\n },\n });\n\n let currentLog: IpLogEntry[] = [];\n let sha = \"\";\n if (getResp.ok) {\n const data = await getResp.json() as any;\n sha = data.sha;\n try {\n currentLog = JSON.parse(atob(data.content.replace(/\\n/g, \"\")));\n } catch {\n currentLog = [];\n }\n }\n\n // Prepend new entry and cap at 1000\n const updated = [entry, ...currentLog].slice(0, 1000);\n\n const content = btoa(\n unescape(encodeURIComponent(JSON.stringify(updated, null, 2) + \"\\n\")),\n );\n await fetch(apiUrl, {\n method: \"PUT\",\n headers: {\n Authorization: `token ${pat}`,\n Accept: \"application/vnd.github.v3+json\",\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n message: \"Log game access\",\n content,\n sha: sha || undefined,\n }),\n });\n}\n\n// ─── Panel log helpers ────────────────────────────────────────\n\nasync function appendToPanelLog(entry: PanelLogEntry): Promise {\n const repo = getEnv(\"GITHUB_REPO\");\n const pat = getEnv(\"GITHUB_PAT\");\n\n if (!repo || !pat) return;\n\n const apiUrl =\n `https://api.github.com/repos/${repo}/contents/Technical%20Stuff/panel-access-log.json`;\n\n // Read current log + SHA\n const getResp = await fetch(apiUrl, {\n headers: {\n Authorization: `token ${pat}`,\n Accept: \"application/vnd.github.v3+json\",\n },\n });\n\n let currentLog: PanelLogEntry[] = [];\n let sha = \"\";\n if (getResp.ok) {\n const data = await getResp.json() as any;\n sha = data.sha;\n try {\n currentLog = JSON.parse(atob(data.content.replace(/\\n/g, \"\")));\n } catch {\n currentLog = [];\n }\n }\n\n // Prepend new entry and cap at 1000\n const updated = [entry, ...currentLog].slice(0, 1000);\n\n const content = btoa(\n unescape(encodeURIComponent(JSON.stringify(updated, null, 2) + \"\\n\")),\n );\n await fetch(apiUrl, {\n method: \"PUT\",\n headers: {\n Authorization: `token ${pat}`,\n Accept: \"application/vnd.github.v3+json\",\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n message: \"Log panel access\",\n content,\n sha: sha || undefined,\n }),\n });\n}\n\n// ─── Helpers ─────────────────────────────────────────────────\n\nfunction getEnv(key: string): string {\n return (Deno.env.get(key) || \"\").trim();\n}\n\nfunction getGameKeys(): Record {\n try {\n return JSON.parse(getEnv(\"GAME_KEYS_JSON\"));\n } catch {\n return {};\n }\n}\n\nfunction normalizeGameId(value: string): string {\n let normalized = value.trim().toLowerCase();\n if (!normalized) return \"\";\n normalized = normalized.replace(/\\.html$/i, \"\");\n normalized = normalized.replace(/eaglrcraft/g, \"eaglercraft\");\n normalized = normalized.replace(/open[-\\s]*in[-\\s]*new[-\\s]*tab/g, \" \");\n normalized = normalized.replace(\n /-(regular|locked|locked-b64|secure|base)/g,\n \" \",\n );\n normalized = normalized.replace(/[-_\\s]+/g, \"-\").replace(/^-+|-+$/g, \"\");\n return normalized;\n}\n\nfunction normalizePasswordList(config: any): string[] {\n if (!config) return [];\n const passwords: string[] = [];\n if (config.password) passwords.push(config.password.trim());\n if (Array.isArray(config.passwords)) {\n config.passwords.forEach((p: string) => {\n const trimmed = (p || \"\").trim();\n if (trimmed && !passwords.includes(trimmed)) passwords.push(trimmed);\n });\n }\n return passwords;\n}\n\nfunction normalizeAllowedIps(raw: any): Record {\n if (!raw || typeof raw !== \"object\") return {};\n const result: Record = {};\n Object.keys(raw).forEach((ip) => {\n const trimmed = ip.trim();\n if (trimmed) result[trimmed] = raw[ip];\n });\n return result;\n}\n\nfunction jsonResponse(data: any, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: {\n \"Content-Type\": \"application/json\",\n ...CORS_HEADERS,\n },\n });\n}","deleted","label","pythoncoderauth",[103],"permalink","https://www.val.town/x/pycoder42/study-resources/code/auth.ts","extension","actionData","errors"]