[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_101":102,"_103":104},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","rumbo","name","rumbo-guard-v08","path","main.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/rumbo/rumbo-guard-v08/code/main.ts","extension","id","369e525e-b1df-46d3-8deb-84026826f71a","fileId","2cd5be7c-afca-11f1-a1d7-1607ee4eb77e","parentId","branchId","e96c0e78-f94b-4e2d-8b30-946203af5121","branchVersion",2,"latest",true,"createdAt",["D",1789341892413],"version",1,"fileType","http","content","import sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\nimport * as ed from \"npm:@noble/ed25519@2.2.3\";\n\nconst PROVIDER_FAMILY = \"valtown\";\nconst PROVIDER_ID = \"valtown:rumbo/rumbo-guard-v08\";\nconst BROKER_PUBLIC = \"LvKmqsJvOKAsPciTTnj-plXr16f4bz6ByVqM9rirqlY\";\nconst APPROVER_PUBLIC = \"TtsnsFUlqUaR4HHKzugez-XZrMGkVoWS93GKp1fPMDQ\";\nconst DEPLOYMENT_DIGEST = \"PLACEHOLDER_DEPLOYMENT_DIGEST\";\n\nconst te = new TextEncoder();\nfunction b64uToBytes(s:string):Uint8Array { const p=s+\"=\".repeat((4-s.length%4)%4); const bin=atob(p.replace(/-/g,\"+\").replace(/_/g,\"/\")); return Uint8Array.from(bin,c=>c.charCodeAt(0)); }\nfunction bytesToB64u(b:Uint8Array):string { let s=\"\"; for(const x of b)s+=String.fromCharCode(x); return btoa(s).replace(/\\+/g,\"-\").replace(/\\//g,\"_\").replace(/=+$/g,\"\"); }\nfunction canon(v:any):string { if(v===null||typeof v!==\"object\") return JSON.stringify(v); if(Array.isArray(v)) return \"[\"+v.map(canon).join(\",\")+\"]\"; const ks=Object.keys(v).sort(); return \"{\"+ks.map(k=>JSON.stringify(k)+\":\"+canon(v[k])).join(\",\")+\"}\"; }\nasync function sha256Hex(s:string):Promise { const d=new Uint8Array(await crypto.subtle.digest(\"SHA-256\",te.encode(s))); return [...d].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\"); }\nfunction keyId(pub:Uint8Array):Promise{ return sha256Hex(String.fromCharCode(...pub)).then(x=>x.slice(0,32)); }\nasync function rootSeed():Promise{ const v=Deno.env.get(\"RUMBO_V08_SIGNER_SEED\"); if(!v) throw new Error(\"SECRET_MISSING\"); return b64uToBytes(v); }\nasync function roleSeed(role:string):Promise{ const root=await rootSeed(); const mix=new Uint8Array(root.length+role.length); mix.set(root,0); mix.set(te.encode(role),root.length); return new Uint8Array(await crypto.subtle.digest(\"SHA-256\",mix)); }\nasync function ensure() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS v08_replay(nonce TEXT PRIMARY KEY, exp INTEGER NOT NULL)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS v08_grants(nonce TEXT PRIMARY KEY, exp INTEGER NOT NULL)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS v08_witness(seq INTEGER PRIMARY KEY, head TEXT NOT NULL, previous_receipt_hash TEXT NOT NULL, observed_at INTEGER NOT NULL, signature TEXT NOT NULL, receipt_hash TEXT NOT NULL)`);\n}\nasync function verifyProviderRequest(req:any, op:string):Promise{\n try{ const e=req?.envelope; if(!e||req?.signature==null||e.v!==8||e.op!==op||e.deployment_digest!==DEPLOYMENT_DIGEST)return null; const now=Math.floor(Date.now()/1000); if(e.iat>now+30||e.exp300||typeof e.nonce!==\"string\"||e.nonce.length!==32)return null; const ok=await ed.verifyAsync(b64uToBytes(req.signature),te.encode(canon(e)),b64uToBytes(BROKER_PUBLIC)); if(!ok)return null; await ensure(); try{ await sqlite.execute({sql:\"INSERT INTO v08_replay(nonce,exp) VALUES (?,?)\",args:[e.nonce,e.exp]}); }catch{ return null; } return e.body&&typeof e.body===\"object\"?e.body:null; }catch{ return null; }\n}\nasync function verifyGrant(grant:string, permitDigest:string):Promise{\n try{ const parts=grant.split(\".\"); if(parts.length!==3||parts[0]!==\"ag3\")return null; const ok=await ed.verifyAsync(b64uToBytes(parts[2]),te.encode(parts[1]),b64uToBytes(APPROVER_PUBLIC)); if(!ok)return null; const body=JSON.parse(new TextDecoder().decode(b64uToBytes(parts[1]))); const now=Math.floor(Date.now()/1000); if(body.v!==3||body.exp{\n try{ if(req.method===\"GET\") return Response.json(await identity()); if(req.method!==\"POST\") return new Response(\"method\",{status:405}); const raw=await req.json(); const op=raw?.envelope?.op; if(op!==\"observe\"&&op!==\"sign_permit\") return Response.json({ok:false,error:\"OP\"},{status:400}); const body=await verifyProviderRequest(raw,op); if(!body)return Response.json({ok:false,error:\"AUTH\"},{status:401}); const result=op===\"observe\"?await observe(body):await signPermit(body); return Response.json({ok:true,result}); }catch(e){ return Response.json({ok:false,error:String((e as Error).message||e)},{status:400}); }\n}\n","deleted",false,"label",[14],"a059c1af-c724-44c2-ab82-4ae574270953",["D",1789341829518],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","RUMBO v0.8 external signer and witness node","imageUrl","userId","d3788f19-13c5-4356-87e8-dce639626bb9","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a092aa-484c-771f-96e6-9511b5195ebc","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_100":-5},"org",{"_9":10,"_94":95,"_96":-5,"_55":-5,"_97":98,"_99":42},"branch",{"_35":30,"_11":85,"_22":28,"_86":45,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":12,"_93":10},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Rumbo","avatar","tier","free","canRestrictVals","profileImageUrl","ctx",{"_78":-5,"_134":135,"_136":137,"_138":139,"_140":42,"_141":42,"_142":42,"_143":32,"_144":-5,"_145":-7,"_146":-7,"_147":62,"_148":42,"_149":42,"_150":-5,"_151":42,"_152":42,"_153":42,"_154":-5},"ENV",{"_105":106,"_107":108,"_109":85,"_110":111,"_112":113,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]