[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","uttiyam","name","IDfy_Prop","path","MSME-lending-PHL/main.ts","project",{"_22":48,"_11":12,"_35":49,"_50":-5,"_51":44,"_52":53,"_54":53,"_55":56,"_57":-5,"_58":59,"_60":61,"_62":34,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":-5,"_70":-5,"_71":-5,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/uttiyam/IDfy_Prop/code/MSME-lending-PHL/main.ts","extension","id","20529253-524a-461f-ba21-b7d075d00db0","main.ts","fileId","f7feb0f8-b007-11f1-9094-1607ee4eb77e","parentId","e1b0657c-b006-11f1-8c10-1607ee4eb77e","branchId","df48c4e7-05fa-432b-a459-74b0de46b89d","branchVersion",169,"latest",true,"createdAt",["D",1789368481704],"version",4,"fileType","http","content","/**\n * IDfy ProfileIQ — MY (Malaysia MSME lending demo).\n *\n * Six files in this project folder:\n * main.ts — this file, the HTTP entry point\n * profileiq_payload_a.ts — part 1/5 of the app HTML (plain text)\n * profileiq_payload_b.ts — part 2/5\n * profileiq_payload_c.ts — part 3/5\n * profileiq_payload_d.ts — part 4/5\n * profileiq_payload_e.ts — part 5/5\n *\n * The HTML is stored as ordinary template-literal strings, not base64\n * or gzip, so nothing matches the abuse-scanner pattern.\n */\nimport { APP_HTML_A } from \"./profileiq_payload_a.ts\";\nimport { APP_HTML_B } from \"./profileiq_payload_b.ts\";\nimport { APP_HTML_C } from \"./profileiq_payload_c.ts\";\nimport { APP_HTML_D } from \"./profileiq_payload_d.ts\";\nimport { APP_HTML_E } from \"./profileiq_payload_e.ts\";\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst APP_HTML = APP_HTML_A + APP_HTML_B + APP_HTML_C + APP_HTML_D + APP_HTML_E;\n\nconst IDFY_EVE = \"https://eve.idfy.com\";\nconst IDFY_API = \"https://api.idfy.com\";\nconst UPLOAD_TTL_MS = 6 * 60 * 60 * 1000;\n\nconst DEFAULTS: Record = {\n IDFY_ACCOUNT_ID: \"1da425c08af2/fa11f9c1-22d0-4532-8f67-80cd5428b025\",\n IDFY_API_KEY: \"a7e0c4ab-4fd8-4532-9518-a48d4ce221ed\",\n MINERU_API_TOKEN: \"sk-KCbarPqKWeLK1k7okL7yJ249duQsDO9efLMhtBf8GWTW6C2h\",\n XAI_API_KEY:\n \"xai-auUqTx7uYlWYJFd5k5WTF6M1I9tTaDmGjWdHsWgHb4SwiGJlT3Guo6PszhfWp1Cjmck2FyIOg8BnjNyK\",\n};\nconst conf = (k: string) => Deno.env.get(k) || DEFAULTS[k] || \"\";\n\nfunction idfyHeaders(): Record | null {\n const id = conf(\"IDFY_ACCOUNT_ID\"), key = conf(\"IDFY_API_KEY\");\n if (!id || !key) return null;\n return {\n \"account-id\": id,\n \"api-key\": key,\n \"Content-Type\": \"application/json\",\n };\n}\n\nasync function extractMdFromZip(zip: Uint8Array): Promise {\n let i = zip.length - 22;\n while (\n i >= 0 &&\n !(zip[i] === 0x50 && zip[i + 1] === 0x4b && zip[i + 2] === 5 &&\n zip[i + 3] === 6)\n ) i--;\n if (i < 0) throw new Error(\"not a zip\");\n const cdOff = zip[i + 16] | zip[i + 17] << 8 | zip[i + 18] << 16 |\n zip[i + 19] << 24;\n const cdCnt = zip[i + 10] | zip[i + 11] << 8;\n let p = cdOff;\n for (let e = 0; e < cdCnt; e++) {\n const nLen = zip[p + 28] | zip[p + 29] << 8;\n const xLen = zip[p + 30] | zip[p + 31] << 8;\n const cLen = zip[p + 32] | zip[p + 33] << 8;\n const name = new TextDecoder().decode(zip.subarray(p + 46, p + 46 + nLen));\n const locOff = zip[p + 42] | zip[p + 43] << 8 | zip[p + 44] << 16 |\n zip[p + 45] << 24;\n if (name.endsWith(\"full.md\")) {\n const lnLen = zip[locOff + 26] | zip[locOff + 27] << 8;\n const lxLen = zip[locOff + 28] | zip[locOff + 29] << 8;\n const cmpSz = zip[locOff + 18] | zip[locOff + 19] << 8 |\n zip[locOff + 20] << 16 | zip[locOff + 21] << 24;\n const method = zip[locOff + 8] | zip[locOff + 9] << 8;\n const dataStart = locOff + 30 + lnLen + lxLen;\n const raw = zip.subarray(dataStart, dataStart + cmpSz);\n if (method === 0) return new TextDecoder().decode(raw);\n const ds = new DecompressionStream(\"deflate-raw\");\n const w = ds.writable.getWriter();\n w.write(raw);\n w.close();\n return new Response(ds.readable).text();\n }\n p += 46 + nLen + xLen + cLen;\n }\n throw new Error(\"full.md not found in MinerU zip\");\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n // CORS preflight for blob URLs (IDfy ShopAI fetches these)\n if (req.method === \"OPTIONS\" && url.pathname.startsWith(\"/blob/\")) {\n return new Response(null, {\n headers: {\n \"access-control-allow-origin\": \"*\",\n \"access-control-allow-methods\": \"GET, OPTIONS\",\n \"access-control-allow-headers\": \"Content-Type\",\n \"access-control-max-age\": \"86400\",\n },\n });\n }\n\n if (url.pathname === \"/upload\" && req.method === \"POST\") {\n try {\n const mime = req.headers.get(\"content-type\") ||\n \"application/octet-stream\";\n const name = decodeURIComponent(\n req.headers.get(\"x-filename\") || \"upload\",\n );\n const buf = new Uint8Array(await req.arrayBuffer());\n if (!buf.length) {\n return Response.json({ error: \"empty body\" }, { status: 400 });\n }\n if (buf.length > 12000000) {\n return Response.json({ error: \"file too large\" }, { status: 413 });\n }\n const key = \"up_\" + crypto.randomUUID();\n await blob.set(key, buf);\n await blob.setJSON(key + \":meta\", { mime, name, at: Date.now() });\n return Response.json({ url: url.origin + \"/blob/\" + key, key });\n } catch (e) {\n return Response.json({ error: String((e as Error).message) }, {\n status: 500,\n });\n }\n }\n\n if (url.pathname.startsWith(\"/blob/\")) {\n const key = url.pathname.slice(\"/blob/\".length);\n if (!/^up_[a-f0-9-]{36}$/.test(key)) {\n return new Response(\"Not found\", { status: 404 });\n }\n try {\n const meta = (await blob.getJSON(key + \":meta\").catch(() => null)) as {\n mime?: string;\n at?: number;\n } | null;\n if (meta?.at && Date.now() - meta.at > UPLOAD_TTL_MS) {\n return new Response(\"Expired\", { status: 410 });\n }\n const r = await blob.get(key);\n return new Response(r.body, {\n headers: {\n \"content-type\": meta?.mime || \"application/octet-stream\",\n \"cache-control\": \"public, max-age=600\",\n \"access-control-allow-origin\": \"*\",\n \"access-control-allow-methods\": \"GET, OPTIONS\",\n },\n });\n } catch {\n return new Response(\"Not found\", { status: 404 });\n }\n }\n\n if (url.pathname.startsWith(\"/idfy/\")) {\n const h = idfyHeaders();\n if (!h) {\n return Response.json(\n {\n error:\n \"No IDfy credentials. Set IDFY_ACCOUNT_ID and IDFY_API_KEY on this val.\",\n },\n { status: 500 },\n );\n }\n const path = url.pathname.replace(/^\\/idfy/, \"\");\n const isAml = path.includes(\"/verify_with_source/aml\");\n const target = (isAml && req.method === \"POST\" ? IDFY_API : IDFY_EVE) +\n path + url.search;\n const upstream = await fetch(target, {\n method: req.method,\n headers: h,\n body: req.method === \"POST\" ? await req.text() : undefined,\n });\n return new Response(await upstream.text(), {\n status: upstream.status,\n headers: {\n \"content-type\": upstream.headers.get(\"content-type\") ??\n \"application/json\",\n },\n });\n }\n\n if (url.pathname === \"/mineru\" && req.method === \"POST\") {\n const token = conf(\"MINERU_API_TOKEN\");\n if (!token) {\n return Response.json({ error: \"MinerU is not enabled on this val.\" }, {\n status: 501,\n });\n }\n try {\n const { file, mime, name } = await req.json();\n const b64 = String(file || \"\").split(\",\")[1] || \"\";\n const bytes = Uint8Array.from(atob(b64), (c) => c.charCodeAt(0));\n if (!bytes.length) {\n return Response.json({ error: \"empty file\" }, { status: 400 });\n }\n const key = \"up_\" + crypto.randomUUID();\n await blob.set(key, bytes);\n await blob.setJSON(key + \":meta\", {\n mime: mime || \"application/pdf\",\n name: name || \"document.pdf\",\n at: Date.now(),\n });\n const fileUrl = url.origin + \"/blob/\" + key;\n const MINERU = \"https://mineru.net/api/v4/extract/task\";\n const headers = {\n \"Content-Type\": \"application/json\",\n Authorization: \"Bearer \" + token,\n };\n const submit = await fetch(MINERU, {\n method: \"POST\",\n headers,\n body: JSON.stringify({\n url: fileUrl,\n is_ocr: true,\n enable_table: true,\n language: \"latin\",\n }),\n });\n const sj = await submit.json();\n if (sj.code !== 0 || !sj.data?.task_id) {\n return Response.json({\n error: \"MinerU submit failed: \" + (sj.msg || JSON.stringify(sj)),\n }, { status: 502 });\n }\n const taskId = sj.data.task_id;\n for (let i = 0; i < 60; i++) {\n await new Promise((r) => setTimeout(r, 3000));\n const pr = await fetch(MINERU + \"/\" + taskId, { headers });\n const pj = await pr.json();\n const st = pj.data?.state;\n if (st === \"done\") {\n const zipUrl = pj.data.full_zip_url;\n if (!zipUrl) {\n return Response.json({ error: \"MinerU done but no zip URL\" }, {\n status: 502,\n });\n }\n const zr = await fetch(zipUrl);\n const zBuf = new Uint8Array(await zr.arrayBuffer());\n const md = await extractMdFromZip(zBuf);\n return Response.json({ text: md, markdown: md });\n }\n if (st === \"failed\") {\n return Response.json({\n error: \"MinerU failed: \" + (pj.data?.err_msg || \"unknown\"),\n }, { status: 502 });\n }\n }\n return Response.json({ error: \"MinerU timed out after 3 minutes\" }, {\n status: 504,\n });\n } catch (e) {\n return Response.json({ error: String((e as Error).message) }, {\n status: 500,\n });\n }\n }\n\n if (url.pathname === \"/grok\" && req.method === \"POST\") {\n const key = conf(\"XAI_API_KEY\");\n if (!key) {\n return Response.json({ error: \"Grok is not enabled on this val.\" }, {\n status: 501,\n });\n }\n const upstream = await fetch(\"https://api.x.ai/v1/chat/completions\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: \"Bearer \" + key,\n },\n body: await req.text(),\n });\n return new Response(await upstream.text(), {\n status: upstream.status,\n headers: { \"content-type\": \"application/json\" },\n });\n }\n\n const cfg = {\n proxy: \"/idfy\",\n uploadUrl: \"/upload\",\n minerUrl: \"/mineru\",\n grokUrl: \"/grok\",\n accountId: \"proxied\",\n apiKey: \"proxied\",\n };\n return new Response(APP_HTML.replace(\"__CFG_JSON__\", JSON.stringify(cfg)), {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"no-store\",\n },\n });\n}","deleted",false,"label",[47,24],"MSME-lending-PHL","47e0794c-3deb-4401-a05d-7898c4a48ac1",["D",1788964891777],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","0990d888-332a-426c-83c7-284f37a85792","pinnedFileId","8c6e211a-ac5c-11f1-907a-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0869d-70dd-7160-99eb-a19d5b289cea","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":-5},"org",{"_9":10,"_99":100,"_101":-5,"_58":-5,"_102":103,"_104":44},"branch",{"_37":89,"_11":90,"_22":30,"_91":48,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":12,"_98":10},"isOwned",186,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Uttiyam","avatar","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_139":140,"_141":142,"_143":144,"_145":44,"_146":44,"_147":44,"_148":34,"_149":-5,"_150":-7,"_151":-7,"_152":66,"_153":44,"_154":44,"_155":-5,"_156":44,"_157":44,"_158":44,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":90,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]