[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_387":388,"_389":390},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_289":290,"_47":-7,"_291":-5,"_17":292,"_293":294,"_295":296,"_297":298,"_299":300,"_64":-5,"_301":302,"_303":304,"_305":24,"_306":307,"_308":181,"_309":-5,"_310":-5,"_311":312},"routes/_app.x.$handle.$name.branch.$branch.history",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":-5},"handle","Pete5x5","name","secure-message-relay","branchName","main","project",{"_41":238,"_13":14,"_45":239,"_86":-5,"_240":24,"_241":242,"_243":242,"_244":245,"_246":-5,"_25":93,"_247":112,"_248":181,"_249":-5,"_250":-5,"_251":20,"_49":50,"_252":253,"_254":255,"_256":257,"_258":-5,"_259":260,"_261":260,"_262":263,"_264":263,"_265":263,"_266":260,"_267":260,"_62":268,"_269":270,"_271":272,"_273":24},"page",0,"history",[26,27,28,29,30,31,32,33,34,35,36,37,38,39,40],"hasNext",false,"userId",{"_41":231,"_43":44,"_45":232,"_47":233,"_49":50,"_51":224,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":234,"_64":235,"_66":-5,"_67":-5,"_69":-5,"_70":-5,"_72":236},{"_41":224,"_43":44,"_45":225,"_47":226,"_49":50,"_51":217,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":227,"_64":228,"_66":-5,"_67":-5,"_69":-5,"_70":-5,"_72":229},{"_41":217,"_43":44,"_45":218,"_47":219,"_49":50,"_51":210,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":220,"_64":221,"_66":-5,"_67":-5,"_69":-5,"_70":-5,"_72":222},{"_41":210,"_43":44,"_45":211,"_47":212,"_49":50,"_51":203,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":213,"_64":214,"_66":-5,"_67":-5,"_69":-5,"_70":-5,"_72":215},{"_41":203,"_43":44,"_45":204,"_47":205,"_49":50,"_51":196,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":206,"_64":207,"_66":-5,"_67":-5,"_69":-5,"_70":-5,"_72":208},{"_41":196,"_43":44,"_45":197,"_47":198,"_49":50,"_51":189,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":199,"_64":200,"_66":-5,"_67":-5,"_69":-5,"_70":-5,"_72":201},{"_41":189,"_43":44,"_45":190,"_47":191,"_49":50,"_51":182,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":192,"_64":193,"_66":-5,"_67":-5,"_69":-5,"_70":-5,"_72":194},{"_41":182,"_43":44,"_45":183,"_47":184,"_49":50,"_51":175,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":185,"_64":186,"_66":-5,"_67":-5,"_69":-5,"_70":-5,"_72":187},{"_41":175,"_43":44,"_45":176,"_47":129,"_49":50,"_51":166,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":177,"_64":178,"_66":-5,"_67":-5,"_69":-5,"_70":-5,"_72":179},{"_41":166,"_43":44,"_45":167,"_47":168,"_49":50,"_51":159,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":169,"_64":170,"_66":-5,"_67":-5,"_69":-5,"_70":-5,"_72":171},{"_41":159,"_43":44,"_45":160,"_47":161,"_49":50,"_51":149,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":162,"_64":163,"_66":-5,"_67":-5,"_69":-5,"_70":-5,"_72":164},{"_41":149,"_43":44,"_45":150,"_47":151,"_49":50,"_51":140,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":152,"_64":153,"_66":-5,"_67":-5,"_69":-5,"_70":-5,"_72":154},{"_41":140,"_43":44,"_45":141,"_47":142,"_49":50,"_51":133,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":143,"_64":144,"_66":-5,"_67":-5,"_69":-5,"_70":-5,"_72":145},{"_41":133,"_43":44,"_45":134,"_47":135,"_49":50,"_51":42,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":136,"_64":137,"_66":-5,"_67":-5,"_69":-5,"_70":-5,"_72":138},{"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":-5,"_52":53,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":63,"_64":65,"_66":-5,"_67":68,"_69":-5,"_70":71,"_72":73},"id","2e7983a9-94f3-4739-828e-bc0964b8cefa","branchId","25502506-8acf-4fc8-80a2-965452dc3efd","createdAt",["D",1787792915355],"version",1,"orgId","dc5a7ebe-7841-4930-908a-6990859a8fe8","parentId","incomingCommitId","ddd61e33-7115-46cd-90c4-470e778ccf37","aiChatMessageId","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","mcp","clientLabel","Codex","user",{"_41":93,"_49":50,"_11":12,"_94":95},"file",{"_87":131,"_13":132,"_90":91,"_92":24},"pull","merge",{"_43":85,"_13":16,"_47":48,"_86":-5},"revert","multiple",{"_128":129,"_130":20},"commits",[74,75,76,77,78,79,80],{"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":-5,"_52":53,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":63,"_64":65,"_66":-5,"_67":68,"_69":-5},{"_41":42,"_43":44,"_45":121,"_47":48,"_49":50,"_51":-5,"_52":53,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":122,"_64":123,"_66":-5,"_67":124,"_69":-5},{"_41":42,"_43":44,"_45":115,"_47":48,"_49":50,"_51":-5,"_52":53,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":116,"_64":117,"_66":-5,"_67":118,"_69":-5},{"_41":42,"_43":44,"_45":108,"_47":48,"_49":50,"_51":-5,"_52":53,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":109,"_64":110,"_66":-5,"_67":111,"_69":-5},{"_41":42,"_43":44,"_45":102,"_47":48,"_49":50,"_51":-5,"_52":53,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":103,"_64":104,"_66":-5,"_67":105,"_69":-5},{"_41":42,"_43":44,"_45":96,"_47":48,"_49":50,"_51":-5,"_52":53,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":97,"_64":98,"_66":-5,"_67":99,"_69":-5},{"_41":42,"_43":44,"_45":81,"_47":48,"_49":50,"_51":-5,"_52":53,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":82,"_64":83,"_66":-5,"_67":84,"_69":-5},["D",1787792915355],{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":88,"_13":89,"_90":91,"_92":24},{"_43":85,"_13":16,"_47":48,"_86":-5},"fb141f8d-047d-43b3-b09c-7fd59d8ddcfe","deletedAt","fileId","01a040c2-fcfe-75fb-af2e-02c2302dcd61","Layout.tsx","fileType","script","deleted","4cdce967-3214-4f01-a3ad-621feefd7c79","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18ybWltR3dZU01TR1VmellwVExiaHNINUtnZlIifQ",["D",1787792915355],{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":100,"_13":101,"_90":91,"_92":24},{"_43":85,"_13":16,"_47":48,"_86":-5},"01a040c2-fcfe-75fb-af2d-fe07cde7deb5","FormPage.tsx",["D",1787792915355],{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":106,"_13":107,"_90":91,"_92":24},{"_43":85,"_13":16,"_47":48,"_86":-5},"01a040c2-fcfe-75fb-af2e-10e050908d37","db.ts",["D",1787792915355],{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":112,"_13":113,"_90":114,"_92":24},{"_43":85,"_13":16,"_47":48,"_86":-5},"01a040c2-fcfe-75fb-af2e-14ff40ae8fc5","main.tsx","http",["D",1787792915355],{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":119,"_13":120,"_90":64,"_92":24},{"_43":85,"_13":16,"_47":48,"_86":-5},"01a040c2-fcfe-75fb-af2e-0d7f39a0bc88","README.md",["D",1787792915355],{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":125,"_13":126,"_90":127,"_92":24},{"_43":85,"_13":16,"_47":48,"_86":-5},"01a040c2-fcfe-75fb-af2e-0bdb61cb6a38","components","directory","count",7,"deletedCount","01a040c2-fcfe-75fb-af2e-057a5beec558","SubmissionsPage.tsx","064897e1-6442-4af5-bcc0-64638473aa58",["D",1787793001518],2,{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":112,"_13":113,"_90":114,"_92":24},[139],{"_41":133,"_43":44,"_45":134,"_47":135,"_49":50,"_51":42,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":136,"_64":137,"_66":-5,"_67":-5,"_69":-5},"8be2ab3e-e7e2-4233-8d7a-b533fdd66049",["D",1787793004813],3,{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":147,"_13":148,"_90":91,"_92":24},[146],{"_41":140,"_43":44,"_45":141,"_47":142,"_49":50,"_51":133,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":143,"_64":144,"_66":-5,"_67":-5,"_69":-5},"09590892-a1b4-11f1-b03b-1607ee4eb77e","shared.ts","bfeadb87-2cf1-42b5-9d24-b5b7ad79dce6",["D",1787793008306],4,{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":156,"_13":157,"_90":158,"_92":24},[155],{"_41":149,"_43":44,"_45":150,"_47":151,"_49":50,"_51":140,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":152,"_64":153,"_66":-5,"_67":-5,"_69":-5},"0b6dcb72-a1b4-11f1-b022-1607ee4eb77e","cleanup.ts","interval","7da7cc58-385c-4333-a154-daa8dbe3f2e0",["D",1787793011435],5,{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":119,"_13":120,"_90":64,"_92":24},[165],{"_41":159,"_43":44,"_45":160,"_47":161,"_49":50,"_51":149,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":162,"_64":163,"_66":-5,"_67":-5,"_69":-5},"15feab56-22e7-4e40-aa85-76e2a0ed2bab",["D",1787793015101],6,{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":173,"_13":174,"_90":91,"_92":24},[172],{"_41":166,"_43":44,"_45":167,"_47":168,"_49":50,"_51":159,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":169,"_64":170,"_66":-5,"_67":-5,"_69":-5},"0f7aa4d8-a1b4-11f1-ab7e-1607ee4eb77e","storage.ts","aed9dd10-bd78-44d9-a069-37345b19aabc",["D",1787793147026],{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":106,"_13":107,"_90":91,"_92":181},[180],{"_41":175,"_43":44,"_45":176,"_47":129,"_49":50,"_51":166,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":177,"_64":178,"_66":-5,"_67":-5,"_69":-5},true,"572f8adf-f8a5-4d6a-8944-a231b2738dfd",["D",1787793308024],8,{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":131,"_13":132,"_90":91,"_92":181},[188],{"_41":182,"_43":44,"_45":183,"_47":184,"_49":50,"_51":175,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":185,"_64":186,"_66":-5,"_67":-5,"_69":-5},"bae8adb4-ead3-4eba-8c4c-f3200fd2904f",["D",1787793310623],9,{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":88,"_13":89,"_90":91,"_92":181},[195],{"_41":189,"_43":44,"_45":190,"_47":191,"_49":50,"_51":182,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":192,"_64":193,"_66":-5,"_67":-5,"_69":-5},"a9e9de2b-3553-414d-9522-e39f384510a7",["D",1787793313542],10,{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":100,"_13":101,"_90":91,"_92":181},[202],{"_41":196,"_43":44,"_45":197,"_47":198,"_49":50,"_51":189,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":199,"_64":200,"_66":-5,"_67":-5,"_69":-5},"3c5be23c-d927-4bf0-b7f9-765250716014",["D",1787793443339],11,{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":112,"_13":113,"_90":114,"_92":24},[209],{"_41":203,"_43":44,"_45":204,"_47":205,"_49":50,"_51":196,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":206,"_64":207,"_66":-5,"_67":-5,"_69":-5},"c73cd5c3-e9c1-4c27-8190-a84e97d6b9f1",["D",1787793538953],12,{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":125,"_13":126,"_90":127,"_92":181},[216],{"_41":210,"_43":44,"_45":211,"_47":212,"_49":50,"_51":203,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":213,"_64":214,"_66":-5,"_67":-5,"_69":-5},"79ef9a50-57a5-46e5-a3d2-087e162a87fa",["D",1787796357782],13,{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":112,"_13":113,"_90":114,"_92":24},[223],{"_41":217,"_43":44,"_45":218,"_47":219,"_49":50,"_51":210,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":220,"_64":221,"_66":-5,"_67":-5,"_69":-5},"dbc30f03-ac2f-4853-a981-86a42b70974a",["D",1788036333996],14,{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":112,"_13":113,"_90":114,"_92":24},[230],{"_41":224,"_43":44,"_45":225,"_47":226,"_49":50,"_51":217,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":227,"_64":228,"_66":-5,"_67":-5,"_69":-5},"3429411f-5561-4a30-8242-649f8aa3d9c7",["D",1788036384158],15,{"_41":93,"_49":50,"_11":12,"_94":95},{"_87":119,"_13":120,"_90":64,"_92":24},[237],{"_41":231,"_43":44,"_45":232,"_47":233,"_49":50,"_51":224,"_52":-5,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":234,"_64":235,"_66":-5,"_67":-5,"_69":-5},"364210a3-ad88-442e-a2ab-4cc980bfeca2",["D",1787792915355],"legacyEnvVars","privacy","public","httpPrivacy","description","Ciphertext relay and private local-reader inbox","imageUrl","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","tursoName","364210a3ad88442ea2ab4cc980bfeca2","tursoHostname","364210a3ad88442ea2ab4cc980bfeca2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789533091345],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_288":95},"org",{"_11":12,"_284":-5,"_94":95,"_25":93,"_285":286,"_287":24},"branch",{"_47":233,"_13":16,"_41":44,"_274":238,"_275":85,"_276":48,"_277":242,"_278":279,"_280":281,"_282":14,"_283":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","a35fc79f-ccd4-4375-94dc-260d312636c6","forkedProjectOrgId","019aa807-52c2-709c-928b-2029bae9a558","projectName","userHandle","displayName","tier","free","canRestrictVals","profileImageUrl","path","","adoptOrgId",{"_41":238,"_13":14,"_45":382,"_86":-5,"_240":24,"_241":242,"_243":242,"_244":245,"_246":-5,"_25":93,"_247":112,"_248":181,"_249":-5,"_250":-5,"_251":20,"_49":50,"_252":253,"_254":255,"_256":383,"_258":-5,"_259":260,"_261":260,"_262":263,"_264":263,"_265":263,"_266":260,"_267":260,"_62":384,"_269":385,"_271":386,"_273":24},"tree",[361,362,363,364,365],"files",[361,362,363,364,365],"counts",{"_352":20,"_353":48,"_354":20,"_355":356,"_357":358},"contents",[323,324,325,326,327],"upstreamProject",{"_41":279,"_13":319,"_244":320,"_246":-5,"_241":242,"_62":321},"upstreamBranch",{"_41":85,"_45":313,"_314":315,"_13":16,"_274":279,"_47":48,"_275":-5,"_276":-5,"_316":317,"_86":-5,"_273":24,"_241":242,"_283":318,"_49":281,"_282":319},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1781134761362],"updatedAt",["D",1781134761362],"lockfileKey","1781135021367-esm.town_v_templates_form-to-sqlite@1-main","templates","form-to-sqlite","Put a form online and save submissions to SQLite",{"_11":318,"_288":322},"https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/129cab32-3bd7-4c3e-f39b-f12900c76100/square512?exp=1789570799&sig=257a5acfa0921f3bba1b6e04c40af81b331d69d65dd78c28728d8fa984364db5",{"_41":348,"_13":120,"_87":119,"_51":-5,"_43":44,"_329":233,"_330":181,"_45":349,"_47":135,"_90":64,"_332":350,"_92":24,"_334":-5,"_289":351},{"_41":344,"_13":157,"_87":156,"_51":-5,"_43":44,"_329":151,"_330":181,"_45":345,"_47":20,"_90":158,"_332":346,"_92":24,"_334":-5,"_289":347},{"_41":340,"_13":113,"_87":112,"_51":-5,"_43":44,"_329":226,"_330":181,"_45":341,"_47":151,"_90":114,"_332":342,"_92":24,"_334":-5,"_289":343},{"_41":336,"_13":148,"_87":147,"_51":-5,"_43":44,"_329":142,"_330":181,"_45":337,"_47":20,"_90":91,"_332":338,"_92":24,"_334":-5,"_289":339},{"_41":328,"_13":174,"_87":173,"_51":-5,"_43":44,"_329":168,"_330":181,"_45":331,"_47":20,"_90":91,"_332":333,"_92":24,"_334":-5,"_289":335},"85298da7-4357-4319-b1ec-7b1bfc3a22a8","branchVersion","latest",["D",1787793015101],"content","import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { MESSAGE_PREFIX, StoredMessage, messageKey } from \"./shared.ts\";\n\nconst RATE_LIMIT_KEY = \"secure-message-rate-limit\";\n\nexport async function storeMessage(message: StoredMessage): Promise {\n await blob.setJSON(messageKey(message.id), message);\n}\n\nexport async function getMessage(id: string): Promise {\n return await blob.getJSON(messageKey(id)) as StoredMessage | undefined;\n}\n\nexport async function listMessages(includeRead = false): Promise {\n const entries = await blob.list(MESSAGE_PREFIX);\n const messages = await Promise.all(entries.map(({ key }) => blob.getJSON(key) as Promise));\n\n return messages\n .filter((message): message is StoredMessage => Boolean(message))\n .filter((message) => includeRead || !message.readAt)\n .sort((a, b) => b.receivedAt.localeCompare(a.receivedAt));\n}\n\nexport async function markMessageRead(message: StoredMessage): Promise {\n const updated = { ...message, readAt: message.readAt ?? new Date().toISOString() };\n await storeMessage(updated);\n return updated;\n}\n\nexport async function deleteMessage(id: string): Promise {\n await blob.delete(messageKey(id));\n}\n\nexport async function deleteExpiredMessages(retentionDays: number): Promise {\n const cutoff = Date.now() - retentionDays * 24 * 60 * 60 * 1000;\n const entries = await blob.list(MESSAGE_PREFIX);\n let deleted = 0;\n\n for (const { key } of entries) {\n const message = await blob.getJSON(key) as StoredMessage | undefined;\n const receivedAt = message ? Date.parse(message.receivedAt) : Number.NaN;\n\n if (!message || !Number.isFinite(receivedAt) || receivedAt < cutoff) {\n await blob.delete(key);\n deleted += 1;\n }\n }\n\n return deleted;\n}\n\nexport async function reserveSubmissionSlot(limit: number, windowMilliseconds: number): Promise {\n const now = Date.now();\n const cutoff = now - windowMilliseconds;\n const stored = await blob.getJSON(RATE_LIMIT_KEY) as { timestamps?: unknown } | undefined;\n const timestamps = Array.isArray(stored?.timestamps)\n ? stored.timestamps.filter((value): value is number => typeof value === \"number\" && value >= cutoff && value <= now)\n : [];\n\n if (timestamps.length >= limit) return false;\n timestamps.push(now);\n await blob.setJSON(RATE_LIMIT_KEY, { timestamps });\n return true;\n}\n","label",[174],"6a0fd014-fe2e-4c53-b068-c281d7d79033",["D",1787793004813],"export const MESSAGE_PREFIX = \"secure-message:\";\nexport const MAX_REQUEST_BYTES = 24_000;\nexport const MAX_CIPHERTEXT_LENGTH = 20_000;\nexport const MAX_NAME_LENGTH = 80;\n\nexport interface StoredMessage {\n version: 1;\n id: string;\n name: string;\n ciphertext: string;\n receivedAt: string;\n readAt: string | null;\n origin: string;\n recipientKeyId: string;\n}\n\nexport function normalizeName(value: unknown): string {\n if (typeof value !== \"string\") return \"\";\n\n return value\n .replace(/[\\u0000-\\u001F\\u007F]/g, \" \")\n .replace(/\\s+/g, \" \")\n .trim()\n .slice(0, MAX_NAME_LENGTH);\n}\n\nexport function parsePositiveInteger(value: string | undefined, fallback: number): number {\n const parsed = Number.parseInt(value ?? \"\", 10);\n return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;\n}\n\nexport function messageKey(id: string): string {\n return `${MESSAGE_PREFIX}${id}`;\n}\n\nexport function isMessageId(value: string): boolean {\n return /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value);\n}\n",[148],"d7f285d4-e05a-461d-839a-880b605972a9",["D",1788036333996],"import { Hono, type Context } from \"npm:hono\";\nimport { email } from \"https://esm.town/v/std/email\";\nimport { readMessage } from \"npm:openpgp@6.3.1\";\nimport {\n MAX_CIPHERTEXT_LENGTH,\n MAX_REQUEST_BYTES,\n StoredMessage,\n isMessageId,\n normalizeName,\n} from \"./shared.ts\";\nimport {\n deleteMessage,\n getMessage,\n listMessages,\n markMessageRead,\n reserveSubmissionSlot,\n storeMessage,\n} from \"./storage.ts\";\n\nconst app = new Hono();\n\napp.get(\"/\", (c) => c.json({ ok: true, service: \"secure-message\" }));\napp.get(\"/health\", (c) => c.json({ ok: true }));\napp.post(\"/\", acceptSubmission);\napp.post(\"/submit\", acceptSubmission);\n\napp.options(\"/submit\", (c) => {\n const origin = getAllowedOrigin(c.req.raw);\n if (!origin) return c.json({ error: \"Origin not allowed.\" }, 403);\n return new Response(null, { status: 204, headers: corsHeaders(origin) });\n});\n\nasync function acceptSubmission(c: Context) {\n const origin = getAllowedOrigin(c.req.raw);\n if (!origin) return c.json({ error: \"Origin not allowed.\" }, 403);\n\n const headers = corsHeaders(origin);\n const contentType = c.req.header(\"Content-Type\") ?? \"\";\n if (!contentType.toLowerCase().startsWith(\"application/json\")) {\n return Response.json({ error: \"Content-Type must be application/json.\" }, { status: 415, headers });\n }\n\n const declaredLength = Number.parseInt(c.req.header(\"Content-Length\") ?? \"0\", 10);\n if (declaredLength > MAX_REQUEST_BYTES) {\n return Response.json({ error: \"Encrypted message is too large.\" }, { status: 413, headers });\n }\n\n const bodyBytes = new Uint8Array(await c.req.raw.arrayBuffer());\n if (bodyBytes.byteLength > MAX_REQUEST_BYTES) {\n return Response.json({ error: \"Encrypted message is too large.\" }, { status: 413, headers });\n }\n\n let body: Record;\n try {\n body = JSON.parse(new TextDecoder().decode(bodyBytes));\n } catch {\n return Response.json({ error: \"Request body is not valid JSON.\" }, { status: 400, headers });\n }\n\n if (body.version !== 1 || typeof body.ciphertext !== \"string\") {\n return Response.json({ error: \"Encrypted message format is invalid.\" }, { status: 400, headers });\n }\n\n const ciphertext = body.ciphertext.trim();\n if (\n ciphertext.length < 100 ||\n ciphertext.length > MAX_CIPHERTEXT_LENGTH ||\n !ciphertext.startsWith(\"-----BEGIN PGP MESSAGE-----\") ||\n !ciphertext.endsWith(\"-----END PGP MESSAGE-----\")\n ) {\n return Response.json({ error: \"Encrypted message format is invalid.\" }, { status: 400, headers });\n }\n\n const expectedKeyId = requiredEnv(\"EXPECTED_KEY_ID\").replace(/\\s/g, \"\").toUpperCase();\n try {\n const parsedMessage = await readMessage({ armoredMessage: ciphertext });\n const recipientIds = parsedMessage.getEncryptionKeyIDs().map((keyId) => keyId.toHex().toUpperCase());\n if (!recipientIds.includes(expectedKeyId)) {\n return Response.json({ error: \"Message was not encrypted to the expected key.\" }, { status: 400, headers });\n }\n } catch {\n return Response.json({ error: \"Encrypted message could not be parsed.\" }, { status: 400, headers });\n }\n\n const submissionLimit = positiveIntegerEnv(\"SUBMISSION_LIMIT_PER_10_MINUTES\", 10);\n if (!(await reserveSubmissionSlot(submissionLimit, 10 * 60 * 1000))) {\n return Response.json({ error: \"Too many messages have been submitted. Try again later.\" }, { status: 429, headers });\n }\n\n const id = crypto.randomUUID();\n const name = normalizeName(body.name);\n const receivedAt = new Date().toISOString();\n const storedMessage: StoredMessage = {\n version: 1,\n id,\n name,\n ciphertext,\n receivedAt,\n readAt: null,\n origin,\n recipientKeyId: expectedKeyId,\n };\n\n await storeMessage(storedMessage);\n\n let notificationSent = true;\n try {\n const notification = {\n subject: name ? `New encrypted message from ${name}` : \"New encrypted message\",\n text: [\n \"A new encrypted message has been received.\",\n `Receipt: ${id}`,\n `Received: ${receivedAt}`,\n \"\",\n \"Use the local secure-message reader, or save the attached .asc file and decrypt it manually.\",\n \"\",\n \"Encrypted OpenPGP backup:\",\n ciphertext,\n ].join(\"\\n\"),\n attachments: [\n {\n content: btoa(ciphertext),\n filename: `encrypted-message-${id}.asc`,\n type: \"application/pgp-encrypted\",\n disposition: \"attachment\",\n },\n ],\n };\n const sendToSelf = Deno.env.get(\"EMAIL_TO_SELF\")?.trim().toLowerCase() === \"true\";\n await email(sendToSelf ? notification : { ...notification, to: requiredEnv(\"NOTIFICATION_EMAIL\") });\n } catch (error) {\n notificationSent = false;\n console.error(`Notification failed for secure-message receipt ${id}:`, error instanceof Error ? error.message : \"Unknown error\");\n }\n\n return Response.json({ ok: true, receipt: id, notificationSent }, { status: 201, headers });\n}\n\napp.get(\"/messages\", async (c) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized.\" }, 401);\n const includeRead = c.req.query(\"includeRead\") === \"1\";\n const messages = await listMessages(includeRead);\n\n return c.json({\n messages: messages.map(({ id, name, receivedAt, readAt, origin, recipientKeyId }) => ({\n id,\n name,\n receivedAt,\n readAt,\n origin,\n recipientKeyId,\n })),\n });\n});\n\napp.get(\"/messages/:id\", async (c) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized.\" }, 401);\n const id = c.req.param(\"id\");\n if (!isMessageId(id)) return c.json({ error: \"Not found.\" }, 404);\n const message = await getMessage(id);\n return message ? c.json(message) : c.json({ error: \"Not found.\" }, 404);\n});\n\napp.patch(\"/messages/:id/read\", async (c) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized.\" }, 401);\n const id = c.req.param(\"id\");\n if (!isMessageId(id)) return c.json({ error: \"Not found.\" }, 404);\n const message = await getMessage(id);\n if (!message) return c.json({ error: \"Not found.\" }, 404);\n const updated = await markMessageRead(message);\n return c.json({ ok: true, readAt: updated.readAt });\n});\n\napp.delete(\"/messages/:id\", async (c) => {\n if (!isAuthorized(c.req.raw)) return c.json({ error: \"Unauthorized.\" }, 401);\n const id = c.req.param(\"id\");\n if (!isMessageId(id)) return c.json({ error: \"Not found.\" }, 404);\n const message = await getMessage(id);\n if (!message) return c.json({ error: \"Not found.\" }, 404);\n await deleteMessage(id);\n return c.json({ ok: true });\n});\n\napp.onError((error) => Promise.reject(error));\n\nfunction getAllowedOrigin(request: Request): string | null {\n const origin = request.headers.get(\"Origin\");\n if (!origin) return null;\n\n const allowed = (Deno.env.get(\"ALLOWED_ORIGINS\") ?? \"\")\n .split(\",\")\n .map((value) => value.trim())\n .filter(Boolean);\n\n return allowed.includes(origin) ? origin : null;\n}\n\nfunction corsHeaders(origin: string): Headers {\n return new Headers({\n \"Access-Control-Allow-Origin\": origin,\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Access-Control-Max-Age\": \"86400\",\n \"Cache-Control\": \"no-store\",\n \"Content-Type\": \"application/json; charset=UTF-8\",\n \"Vary\": \"Origin\",\n });\n}\n\nfunction isAuthorized(request: Request): boolean {\n const token = Deno.env.get(\"INBOX_TOKEN\");\n return Boolean(token && request.headers.get(\"Authorization\") === `Bearer ${token}`);\n}\n\nfunction requiredEnv(name: string): string {\n const value = Deno.env.get(name)?.trim();\n if (!value) throw new Error(`Missing required environment variable: ${name}`);\n return value;\n}\n\nfunction positiveIntegerEnv(name: string, fallback: number): number {\n const parsed = Number.parseInt(Deno.env.get(name) ?? \"\", 10);\n return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;\n}\n\nexport default app.fetch;\n",[113],"8ac2e069-65a8-451f-9e6e-d4bb81309fe8",["D",1787793008306],"import { deleteExpiredMessages } from \"./storage.ts\";\nimport { parsePositiveInteger } from \"./shared.ts\";\n\ninterface IntervalEvent {\n lastRunAt?: Date;\n}\n\nexport default async function (_interval: IntervalEvent) {\n const retentionDays = parsePositiveInteger(Deno.env.get(\"RETENTION_DAYS\"), 30);\n const deleted = await deleteExpiredMessages(retentionDays);\n console.log(`Secure-message cleanup removed ${deleted} expired record(s).`);\n}\n",[157],"15faa01d-59b9-4917-9d44-7a79481ab056",["D",1788036384158],"# Secure Message Relay\n\nReceives OpenPGP ciphertext from approved website origins, stores only ciphertext in val-scoped blob storage, and emails the armored ciphertext plus a downloadable `.asc` backup. The optional sender name remains cleartext for the email subject. Message-management routes require a bearer token and are intended for the local GPG reader.\n\n## Files\n\n- `main.tsx` — public submission API and protected reader routes\n- `shared.ts` — validation and record types\n- `storage.ts` — val-scoped blob storage and retention logic\n- `cleanup.ts` — scheduled retention cleanup\n\n## Environment variables\n\nRequired for every deployment:\n\n- `ALLOWED_ORIGINS`\n- `EXPECTED_KEY_ID`\n- `INBOX_TOKEN`\n\nEmail delivery:\n\n- Free tier: `EMAIL_TO_SELF=true`\n- Paid tier: `NOTIFICATION_EMAIL=recipient@example.com` and omit or set `EMAIL_TO_SELF=false`\n\nOptional:\n\n- `RETENTION_DAYS` (default `30`)\n- `SUBMISSION_LIMIT_PER_10_MINUTES` (default `10`)\n\nThe private OpenPGP key and plaintext are never uploaded to Val Town or included in email.\n\n[Health check](url:main.tsx/health)\n",[120],"pulls","branches","forks","envVars",{"_128":129,"_360":20},"connections",{"_128":20,"_359":20},"unfilledCount","emptyCount",{"_41":348,"_13":120,"_87":119,"_51":-5,"_43":44,"_329":233,"_330":181,"_45":379,"_47":135,"_90":64,"_332":350,"_92":24,"_334":-5,"_367":380,"_289":381},{"_41":344,"_13":157,"_87":156,"_51":-5,"_43":44,"_329":151,"_330":181,"_45":376,"_47":20,"_90":158,"_332":346,"_92":24,"_334":-5,"_367":377,"_289":378},{"_41":340,"_13":113,"_87":112,"_51":-5,"_43":44,"_329":226,"_330":181,"_45":373,"_47":151,"_90":114,"_332":342,"_92":24,"_334":-5,"_367":374,"_289":375},{"_41":336,"_13":148,"_87":147,"_51":-5,"_43":44,"_329":142,"_330":181,"_45":370,"_47":20,"_90":91,"_332":338,"_92":24,"_334":-5,"_367":371,"_289":372},{"_41":328,"_13":174,"_87":173,"_51":-5,"_43":44,"_329":168,"_330":181,"_45":366,"_47":20,"_90":91,"_332":333,"_92":24,"_334":-5,"_367":368,"_289":369},["D",1787793015101],"children",[],[174],["D",1787793004813],[],[148],["D",1788036333996],[],[113],["D",1787793008306],[],[157],["D",1788036384158],[],[120],["D",1787792915355],["D",1789533091345],{"_11":12,"_288":95},{"_11":12,"_284":-5,"_94":95,"_25":93,"_285":286,"_287":24},{"_47":233,"_13":16,"_41":44,"_274":238,"_275":85,"_276":48,"_277":242,"_278":279,"_280":281,"_282":14,"_283":12},"ctx",{"_62":-5,"_310":420,"_421":422,"_423":424,"_425":24,"_426":24,"_427":24,"_428":181,"_429":-5,"_430":-7,"_431":-7,"_432":20,"_433":24,"_434":24,"_435":-5,"_436":24,"_437":24,"_438":24,"_439":-5},"ENV",{"_391":392,"_393":394,"_395":16,"_396":397,"_398":399,"_400":401,"_402":403,"_404":405,"_406":407,"_408":409,"_410":411,"_412":413,"_414":415,"_416":417,"_418":419},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History