[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_180":181,"_182":183},"routes/_app.x.$handle.$name",{"_105":104,"_32":50,"_114":95,"_27":115,"_13":14,"_116":-5,"_11":117,"_118":119,"_120":121,"_122":123,"_124":125,"_21":-5,"_126":-5,"_127":-5,"_128":25,"_129":130,"_131":64,"_132":-5,"_133":-5,"_134":135},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_48":49,"_32":50,"_38":51,"_52":-5,"_53":25,"_54":55,"_56":55,"_57":58,"_59":-5,"_18":60,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":72,"_73":74,"_75":76,"_77":-5,"_78":79,"_80":79,"_81":82,"_83":82,"_84":82,"_85":79,"_86":79,"_87":88,"_89":90,"_91":92,"_93":25},"version",2,"changes",[19,20],"aiChatInfo","userId",{"_21":43,"_23":-7,"_24":25,"_26":25,"_27":44,"_29":44},{"_21":22,"_23":-7,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous","deleted",false,"deletedHere","path","lib/crypto.ts","latestPath","fileId","8d488cd0-b010-11f1-9715-1607ee4eb77e","name","crypto.ts","fileType","script","content","/**\n * Password hashing and token helpers.\n *\n * Passwords are stored as PBKDF2-HMAC-SHA256 digests with a random\n * per-user salt. Nothing reversible ever touches the database.\n * Session tokens are stored as SHA-256 digests, so a database leak\n * does not hand over live sessions.\n */\n\nconst enc = new TextEncoder();\n\nconst PBKDF2_ITERATIONS = 120_000;\nconst SALT_BYTES = 16;\nconst KEY_BITS = 256;\n\nfunction toB64(bytes: Uint8Array): string {\n let s = \"\";\n for (const b of bytes) s += String.fromCharCode(b);\n return btoa(s);\n}\n\nfunction fromB64(s: string): Uint8Array {\n const bin = atob(s);\n const out = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n return out;\n}\n\nfunction toHex(bytes: Uint8Array): string {\n let s = \"\";\n for (const b of bytes) s += b.toString(16).padStart(2, \"0\");\n return s;\n}\n\nasync function deriveBits(\n password: string,\n salt: Uint8Array,\n iterations: number,\n): Promise {\n const key = await crypto.subtle.importKey(\n \"raw\",\n enc.encode(password),\n \"PBKDF2\",\n false,\n [\"deriveBits\"],\n );\n const bits = await crypto.subtle.deriveBits(\n { name: \"PBKDF2\", salt, iterations, hash: \"SHA-256\" },\n key,\n KEY_BITS,\n );\n return new Uint8Array(bits);\n}\n\n/** Returns a self-describing string: pbkdf2$$$ */\nexport async function hashPassword(password: string): Promise {\n const salt = crypto.getRandomValues(new Uint8Array(SALT_BYTES));\n const hash = await deriveBits(password, salt, PBKDF2_ITERATIONS);\n return `pbkdf2$${PBKDF2_ITERATIONS}$${toB64(salt)}$${toB64(hash)}`;\n}\n\nexport async function verifyPassword(\n password: string,\n stored: string,\n): Promise {\n try {\n const parts = stored.split(\"$\");\n if (parts.length !== 4 || parts[0] !== \"pbkdf2\") return false;\n const iterations = parseInt(parts[1], 10);\n if (!Number.isFinite(iterations) || iterations < 1000) return false;\n const salt = fromB64(parts[2]);\n const expected = fromB64(parts[3]);\n const actual = await deriveBits(password, salt, iterations);\n return timingSafeEqual(actual, expected);\n } catch {\n return false;\n }\n}\n\n/** Comparison whose duration does not depend on where the first mismatch is. */\nexport function timingSafeEqual(a: Uint8Array, b: Uint8Array): boolean {\n if (a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];\n return diff === 0;\n}\n\n/** 256 bits of CSPRNG output, hex encoded. */\nexport function randomToken(): string {\n return toHex(crypto.getRandomValues(new Uint8Array(32)));\n}\n\nexport function newId(prefix: string): string {\n return prefix + \"_\" + toHex(crypto.getRandomValues(new Uint8Array(9)));\n}\n\nexport async function sha256Hex(input: string): Promise {\n const digest = await crypto.subtle.digest(\"SHA-256\", enc.encode(input));\n return toHex(new Uint8Array(digest));\n}\n","createdAt",["D",1789372056135],"branchVersion","branchId","649b81a3-ef64-48e6-b6db-ab0a767348e2",{"_30":45,"_32":44,"_34":46,"_36":-5,"_38":47,"_40":14,"_41":42,"_24":25},"lib","36d116d1-be79-439b-af80-39fd2bb6eeb1","directory",["D",1789372056135],"id","3acf27cf-bc0f-4f45-b440-a47608349aee","throne-ledger",["D",1789371999223],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Imperial wager ledger for the Battle for the Hive campaign","imageUrl","28c534b6-beee-40a1-be9c-43985b36185d","pinnedFileId","6b608f96-b010-11f1-9552-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a09ecc-b888-773d-b822-8340b04163b7","tursoName","3acf27cfbc0f4f45b440a47608349aee","tursoHostname","3acf27cfbc0f4f45b440a47608349aee-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789546246980],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_105":104,"_113":109},"org",{"_105":104,"_106":107,"_108":109,"_18":60,"_110":111,"_112":25},"branch",{"_13":94,"_32":95,"_48":42,"_96":49,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":-5,"_102":50,"_103":104},"isOwned",173,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","RT_Brandt","handle","displayName","Garrick W","avatar","https://lh3.googleusercontent.com/a/ACg8ocIFL4o68YPM3Sv8WlUCusFPkUPZWiKW0FtIuul8fl9ATqyk3Xw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_48":49,"_32":50,"_38":175,"_52":-5,"_53":25,"_54":55,"_56":55,"_57":58,"_59":-5,"_18":60,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":72,"_73":74,"_75":176,"_77":-5,"_78":79,"_80":79,"_81":82,"_83":82,"_84":82,"_85":79,"_86":79,"_87":177,"_89":178,"_91":179,"_93":25},"tree",[161,163],"files",[161,162,163],"counts",{"_151":68,"_152":141,"_153":68,"_154":155,"_156":157},"contents",[136,137],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_48":148,"_32":44,"_30":45,"_140":-5,"_41":42,"_40":14,"_142":64,"_38":149,"_13":68,"_34":46,"_36":-5,"_24":25,"_146":-5,"_27":150},{"_48":138,"_32":139,"_30":62,"_140":-5,"_41":42,"_40":141,"_142":25,"_38":143,"_13":68,"_34":144,"_36":145,"_24":25,"_146":50,"_27":147},"106520a6-2172-4eda-9955-98db4e0aab92","main.tsx","parentId",1,"latest",["D",1789371999254],"http","export default async function (req: Request): Promise {\n return new Response(\"booting\");\n}\n","label",[139],"d40104bc-606a-4d76-b529-424870d4ebb7",["D",1789372056135],[44],"pulls","branches","forks","envVars",{"_158":14,"_160":68},"connections",{"_158":68,"_159":68},"count","unfilledCount","emptyCount",{"_48":148,"_32":44,"_30":45,"_140":-5,"_41":42,"_40":14,"_142":64,"_38":172,"_13":68,"_34":46,"_36":-5,"_24":25,"_146":-5,"_165":173,"_27":174},{"_48":168,"_32":33,"_30":31,"_140":45,"_41":42,"_40":14,"_142":64,"_38":169,"_13":68,"_34":35,"_36":37,"_24":25,"_146":-5,"_165":170,"_27":171},{"_48":138,"_32":139,"_30":62,"_140":-5,"_41":42,"_40":141,"_142":25,"_38":164,"_13":68,"_34":144,"_36":145,"_24":25,"_146":50,"_165":166,"_27":167},["D",1789371999254],"children",[],[139],"95f9c229-6fc1-4ddb-8a5f-ad327142a98d",["D",1789372056135],[],[44,33],["D",1789372056135],[162],[44],["D",1789371999223],["D",1789546246980],{"_105":104,"_113":109},{"_105":104,"_106":107,"_108":109,"_18":60,"_110":111,"_112":25},{"_13":94,"_32":95,"_48":42,"_96":49,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":-5,"_102":50,"_103":104},"ctx",{"_87":-5,"_133":213,"_214":215,"_216":217,"_218":25,"_219":25,"_220":25,"_221":64,"_222":-5,"_223":-7,"_224":-7,"_225":68,"_226":25,"_227":25,"_228":-5,"_229":25,"_230":25,"_231":25,"_232":-5},"ENV",{"_184":185,"_186":187,"_188":95,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v2