[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_186":187,"_188":189},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_94":-7,"_95":96,"_29":-7,"_97":-5,"_15":98,"_99":100,"_101":102,"_103":104,"_105":106,"_107":-5,"_108":109,"_110":111,"_112":40,"_113":114,"_115":52,"_116":-5,"_117":-5,"_118":119},"routes/_app.x.$handle.$name.branches",{"_11":12,"_13":14,"_15":16,"_17":18},"handle","aisss","name","svgrepo-mirror","project",{"_20":28,"_13":14,"_22":38,"_37":-5,"_39":40,"_41":42,"_43":42,"_44":45,"_46":-5,"_47":48,"_49":50,"_51":52,"_53":-5,"_54":-5,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":-5,"_62":-5,"_63":64,"_65":64,"_66":67,"_68":67,"_69":67,"_70":64,"_71":64,"_72":73,"_74":75,"_76":77,"_78":40},"branches",[19],{"_20":21,"_22":23,"_24":25,"_13":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":-5},"id","f5bfa97c-d193-46a3-8054-032b61eebf3f","createdAt",["D",1785292758989],"updatedAt",["D",1785300501697],"main","projectId","99489f8d-0ff0-47c0-a38e-4c92165cb017","version",12,"forkedBranchId","4fab4288-55d8-4c0d-86e5-79f2d08cfe25","forkedBranchVersion",8,"lockfileKey","1785300502144-esm.town_v_aisss_svgrepo-mirror@12-main","deletedAt",["D",1785292758989],"legacyEnvVars",false,"privacy","public","httpPrivacy","description","A reverse proxy mirror of svgrepo.com with redirect handling","imageUrl","userId","0ce58fb8-52f8-4608-a94a-226df5456dd1","pinnedFileId","019fabbd-a014-70e0-ac01-0d2eeb53e2ec","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f99a2-f250-749c-96aa-a8cae4c2aeea","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_93":89},"org",{"_11":12,"_86":87,"_88":89,"_47":48,"_90":91,"_92":40},"branch",{"_29":30,"_13":26,"_20":21,"_27":28,"_31":32,"_33":34,"_79":42,"_80":81,"_82":83,"_84":14,"_85":12},"isOwned","forkedProjectPrivacy","forkedProjectId","53b50d4b-7a19-4c4e-bfe2-af42c0369c84","forkedProjectOrgId","019faa41-4926-778a-8b69-48bb92832d29","projectName","userHandle","displayName","Rbxgscanner","avatar","https://lh3.googleusercontent.com/a/ACg8ocKqwXuu42CD8D9vfE9W-gEq_Oh3WbwNufExuI-UaXMd35_rHQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","path","","adoptOrgId",{"_20":28,"_13":14,"_22":182,"_37":-5,"_39":40,"_41":42,"_43":42,"_44":45,"_46":-5,"_47":48,"_49":50,"_51":52,"_53":-5,"_54":-5,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":-5,"_62":-5,"_63":64,"_65":64,"_66":67,"_68":67,"_69":67,"_70":64,"_71":64,"_72":183,"_74":184,"_76":185,"_78":40},"tree",[169,170,171],"files",[169,170,171],"counts",{"_159":56,"_17":138,"_160":56,"_161":162,"_163":164},"contents",[125,126,127],"file","upstreamProject",{"_20":81,"_13":14,"_44":45,"_46":-5,"_41":42,"_72":124},"upstreamBranch",{"_20":32,"_22":120,"_24":121,"_13":26,"_27":81,"_29":34,"_31":-5,"_33":-5,"_35":122,"_37":-5,"_78":40,"_41":42,"_85":123,"_57":83,"_84":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1785267916873],["D",1785268504331],"1785268504453-esm.town_v_b9n0oq_svgrepo-mirror@8-main","b9n0oq",{"_11":123,"_93":96},{"_20":153,"_13":154,"_130":155,"_132":-5,"_133":21,"_134":138,"_136":52,"_22":156,"_29":56,"_139":107,"_141":157,"_143":40,"_144":-5,"_95":158},{"_20":146,"_13":147,"_130":50,"_132":-5,"_133":21,"_134":30,"_136":52,"_22":148,"_29":149,"_139":150,"_141":151,"_143":40,"_144":-5,"_95":152},{"_20":128,"_13":129,"_130":131,"_132":-5,"_133":21,"_134":135,"_136":52,"_22":137,"_29":138,"_139":140,"_141":142,"_143":40,"_144":-5,"_95":145},"46f9e03e-a551-45fb-8e45-96ad6e54a741","rewrite.ts","fileId","019fabbd-a014-70e0-ac01-119774db9c35","parentId","branchId","branchVersion",2,"latest",["D",1785292903942],1,"fileType","script","content","/**\n * Reverse proxy / mirror for svgrepo.com — single-file version.\n * Deploy as an HTTP val (main.tsx).\n */\n\nconst TARGET = \"https://www.svgrepo.com\";\nconst TARGET_ORIGIN = \"https://www.svgrepo.com\";\nconst TARGET_HOSTNAMES = [\"www.svgrepo.com\", \"svgrepo.com\"];\n\n/** Headers to strip when forwarding to the target. */\nconst STRIP_REQUEST_HEADERS = new Set([\n \"host\",\n \"x-forwarded-for\",\n \"x-forwarded-proto\",\n \"x-forwarded-host\",\n \"x-real-ip\",\n \"cf-connecting-ip\",\n \"cf-ipcountry\",\n \"cf-ray\",\n \"cf-visitor\",\n]);\n\n/** Headers to strip from the upstream response. */\nconst STRIP_RESPONSE_HEADERS = new Set([\n \"content-encoding\", // we decode the body, so this must go\n \"content-length\", // will be wrong after rewriting\n \"transfer-encoding\",\n \"connection\",\n \"keep-alive\",\n]);\n\n/* ------------------------------------------------------------------ */\n/* Rewrite helpers (formerly rewrite.ts) */\n/* ------------------------------------------------------------------ */\n\n/** Rewrite a Location header value to point back through the proxy. */\nfunction rewriteLocation(location: string, proxyOrigin: string): string {\n try {\n const url = new URL(location, TARGET_ORIGIN);\n // If it points to the target site, rewrite to proxy origin\n if (TARGET_HOSTNAMES.includes(url.hostname)) {\n return proxyOrigin + url.pathname + url.search + url.hash;\n }\n // External redirect — leave as-is\n return location;\n } catch {\n // Relative path or invalid — make absolute against proxy\n if (location.startsWith(\"/\")) return proxyOrigin + location;\n return location;\n }\n}\n\n/**\n * Rewrite text content (HTML, CSS, JS, JSON, etc.) so that absolute URLs\n * pointing to the target domain are replaced with proxy-origin URLs.\n */\nfunction rewriteContent(\n body: string,\n proxyOrigin: string,\n _contentType: string,\n): string {\n let result = body;\n // Strip the scheme off the proxy origin for protocol-relative replacements\n const proxyProtocolRelative = proxyOrigin.replace(/^https?:/, \"\");\n\n for (const host of TARGET_HOSTNAMES) {\n result = result.replaceAll(`https://${host}`, proxyOrigin);\n result = result.replaceAll(`http://${host}`, proxyOrigin);\n // protocol-relative //www.svgrepo.com\n result = result.replaceAll(`//${host}`, proxyProtocolRelative);\n // escaped form found inside inline JSON/JS: https:\\/\\/www.svgrepo.com\n result = result.replaceAll(\n `https:\\\\/\\\\/${host}`,\n proxyOrigin.replace(/\\//g, \"\\\\/\"),\n );\n }\n\n return result;\n}\n\n/** Check if a content type is text-based and should be rewritten. */\nfunction isTextContent(contentType: string): boolean {\n const ct = contentType.toLowerCase();\n return (\n ct.includes(\"text/\") ||\n ct.includes(\"application/json\") ||\n ct.includes(\"application/javascript\") ||\n ct.includes(\"application/xml\") ||\n ct.includes(\"application/xhtml\") ||\n ct.includes(\"image/svg+xml\")\n );\n}\n\n/* ------------------------------------------------------------------ */\n/* Main handler */\n/* ------------------------------------------------------------------ */\n\nexport default async function (req: Request): Promise {\n const reqUrl = new URL(req.url);\n const proxyOrigin = reqUrl.origin;\n\n // Build the target URL (path + query preserved)\n const targetUrl = TARGET + reqUrl.pathname + reqUrl.search;\n\n // Forward request headers, stripping proxy-specific ones\n const forwardHeaders = new Headers();\n for (const [key, value] of req.headers.entries()) {\n const lk = key.toLowerCase();\n if (STRIP_REQUEST_HEADERS.has(lk)) continue;\n if (lk.startsWith(\"x-val-town\")) continue;\n forwardHeaders.set(key, value);\n }\n\n forwardHeaders.set(\"Host\", \"www.svgrepo.com\");\n forwardHeaders.set(\n \"user-agent\",\n \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36\",\n );\n forwardHeaders.set(\n \"accept\",\n \"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\n );\n forwardHeaders.set(\"accept-language\", \"en-US,en;q=0.5\");\n forwardHeaders.set(\"accept-encoding\", \"gzip, deflate, br\");\n forwardHeaders.set(\"sec-fetch-dest\", \"document\");\n forwardHeaders.set(\"sec-fetch-mode\", \"navigate\");\n forwardHeaders.set(\"sec-fetch-site\", \"none\");\n forwardHeaders.set(\"sec-fetch-user\", \"?1\");\n forwardHeaders.set(\"upgrade-insecure-requests\", \"1\");\n forwardHeaders.set(\n \"sec-ch-ua\",\n '\"Google Chrome\";v=\"125\", \"Chromium\";v=\"125\", \"Not.A/Brand\";v=\"24\"',\n );\n forwardHeaders.set(\"sec-ch-ua-mobile\", \"?0\");\n forwardHeaders.set(\"sec-ch-ua-platform\", '\"Windows\"');\n\n // Forward the request — don't follow redirects (manual)\n let upstream: Response;\n try {\n upstream = await fetch(targetUrl, {\n method: req.method,\n headers: forwardHeaders,\n body: req.method === \"GET\" || req.method === \"HEAD\"\n ? undefined\n : req.body,\n redirect: \"manual\",\n });\n } catch (err) {\n return new Response(\n `Proxy error: ${err instanceof Error ? err.message : String(err)}`,\n { status: 502, headers: { \"content-type\": \"text/plain\" } },\n );\n }\n\n // Build the response headers\n const respHeaders = new Headers();\n for (const [key, value] of upstream.headers.entries()) {\n const lk = key.toLowerCase();\n if (STRIP_RESPONSE_HEADERS.has(lk)) continue;\n\n if (lk === \"location\") {\n respHeaders.set(key, rewriteLocation(value, proxyOrigin));\n continue;\n }\n\n if (lk === \"set-cookie\") {\n // Remove domain/secure so cookies work on the proxy domain.\n // SameSite=None requires Secure, which we strip, so downgrade to Lax.\n let cleaned = value\n .replace(/;\\s*domain=[^;]*/gi, \"\")\n .replace(/;\\s*secure/gi, \"\")\n .replace(/;\\s*samesite=none/gi, \"; SameSite=Lax\");\n if (!/;\\s*path=/i.test(cleaned)) cleaned += \"; Path=/\";\n respHeaders.append(key, cleaned);\n continue;\n }\n\n respHeaders.set(key, value);\n }\n\n let status = upstream.status;\n\n // Some CDNs use non-standard status codes (e.g. 705 for challenge responses)\n // that Deno's Response constructor rejects (only 101 or 200–599 allowed).\n if (status !== 101 && (status < 200 || status > 599)) {\n status = 200;\n }\n\n // Redirects — pass through with rewritten Location\n if (status >= 300 && status < 400) {\n return new Response(null, { status, headers: respHeaders });\n }\n\n // Status codes that must not have a body\n if (status === 204 || status === 205) {\n return new Response(null, { status, headers: respHeaders });\n }\n\n // HEAD requests: headers only\n if (req.method === \"HEAD\") {\n return new Response(null, { status, headers: respHeaders });\n }\n\n const contentType = upstream.headers.get(\"content-type\") ?? \"\";\n\n if (isTextContent(contentType)) {\n const text = await upstream.text();\n const rewritten = rewriteContent(text, proxyOrigin, contentType);\n return new Response(rewritten, { status, headers: respHeaders });\n }\n\n // Binary content — pass through as-is\n const body = await upstream.arrayBuffer();\n return new Response(body, { status, headers: respHeaders });\n}","deleted","label",[129],"092f8753-7afc-4424-a3c3-a6194748fdd2","main.tsx",["D",1785300501697],10,"http","// =============================================================================\n// Vercel + Fal mirror proxy for val.town\n// =============================================================================\n//\n// WHY THIS EXISTSh\n// ---------------\n// app (6).py needs a Vercel \"vercel-token\" (obtained from the marketplace SSO\n// flow) and then uses that token against fal's playground proxy. Both Vercel\n// and fal run bot/security checks on the *calling IP*. When app(6).py calls\n// them directly from its own host those checks fail, so the SSO token can't be\n// obtained and fal requests get blocked.\n//\n// This val.town HTTP val performs those outbound calls from val.town's egress\n// instead, acting as a transparent mirror. Point app(6).py at this val's URL.\n//\n// ROUTES\n// ------\n// GET / -> health check\n//\n// GET /sso?integrationConfigurationId=..&teamId=..\n// Header: Cookie: (or X-Vercel-Cookie: )\n// Runs the full Vercel marketplace SSO redirect flow server-side,\n// extracts the `vercel-token` cookie, and returns it BOTH as a\n// `Set-Cookie: vercel-token=...` header (so app(6).py's existing\n// cookie-scraping loop keeps working) AND as JSON { token, configId }.\n//\n// ANY /vercel/ -> https://vercel.com/ (transparent)\n// ANY /fal/ -> https://rest.alpha.fal.ai/(transparent)\n// Forwards method, headers (incl. Authorization / x-fal-* / Cookie) and\n// body untouched, and returns the upstream response as-is.\n//\n// After deploying, hand the base URL to whoever wires app(6).py; there it just\n// replaces the hardcoded `https://vercel.com` (SSO) and\n// `https://rest.alpha.fal.ai` (fal) hosts.\n// =============================================================================\n\nconst VERCEL_BASE = \"https://vercel.com\";\nconst FAL_BASE = \"https://rest.alpha.fal.ai\";\n\n// -----------------------------------------------------------------------------\n// Residential proxy\n//\n// fal.ai (and possibly Vercel) rate-limit/block datacenter IPs like val.town's.\n// Routing outbound requests through a residential HTTP proxy makes fal.ai see a\n// trusted residential IP. All values are env-overridable on val.town.\n// -----------------------------------------------------------------------------\n// deno-lint-ignore no-explicit-any\nconst _env = (k: string): string => {\n try {\n return (Deno as any).env.get(k) || \"\";\n } catch {\n return \"\";\n }\n};\nconst PROXY_HOST = _env(\"PROXY_HOST\") || \"193.160.83.26\";\nconst PROXY_PORT = parseInt(_env(\"PROXY_PORT\") || \"6347\", 10);\nconst PROXY_USER = _env(\"PROXY_USER\") || \"scanrgl99staticresidential\";\nconst PROXY_PASS = _env(\"PROXY_PASS\") || \"pozlol22\";\nconst PROXY_ENABLED = !!(PROXY_HOST && PROXY_PORT);\n\nconst BROWSER_UA =\n \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 \" +\n \"(KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36\";\n\nconst CORS_HEADERS: Record = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, PUT, DELETE, PATCH, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"*\",\n \"Access-Control-Expose-Headers\": \"*\",\n};\n\n// Headers we must NOT copy onto an outbound fetch (hop-by-hop / host-specific).\nconst STRIP_REQUEST_HEADERS = new Set([\n \"host\",\n \"connection\",\n \"content-length\",\n \"accept-encoding\",\n \"cf-connecting-ip\",\n \"cf-ipcountry\",\n \"cf-ray\",\n \"cf-visitor\",\n \"x-forwarded-for\",\n \"x-forwarded-host\",\n \"x-forwarded-proto\",\n \"x-real-ip\",\n]);\n\nfunction json(body: unknown, status = 200, extra: Record = {}) {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\n \"Content-Type\": \"application/json\",\n ...CORS_HEADERS,\n ...extra,\n },\n });\n}\n\n/** Read all Set-Cookie values from a Headers object across runtimes. */\nfunction getSetCookies(headers: Headers): string[] {\n // Deno / modern runtimes\n // deno-lint-ignore no-explicit-any\n const anyHeaders = headers as any;\n if (typeof anyHeaders.getSetCookie === \"function\") {\n const arr = anyHeaders.getSetCookie();\n if (Array.isArray(arr) && arr.length) return arr;\n }\n const combined = headers.get(\"set-cookie\");\n if (!combined) return [];\n // Split on commas that precede a \"name=\" pair (avoids splitting Expires dates).\n return combined.split(/,(?=\\s*[^;,\\s]+=)/g).map((c) => c.trim());\n}\n\n/** Pull vercel-token= out of a list of Set-Cookie strings. */\nfunction extractVercelToken(setCookies: string[]): string | null {\n for (const c of setCookies) {\n const m = /(?:^|\\s)vercel-token=([^;]+)/.exec(c);\n if (m && m[1]) return m[1];\n }\n return null;\n}\n\n/** The first `name=value` pair of a Set-Cookie string, for cookie accumulation. */\nfunction cookiePair(setCookie: string): string {\n return setCookie.split(\";\")[0].trim();\n}\n\n// -----------------------------------------------------------------------------\n// Raw HTTPS GET (Deno.connectTls)\n//\n// Deno's fetch() with redirect:\"manual\" returns an OPAQUE response (status 0,\n// no headers), so it cannot read the Location / Set-Cookie of the Vercel->fal\n// redirect chain — and `vercel-token` is set MID-redirect (on the fal.ai hop).\n// This raw HTTP/1.1 client reads the response headers of each hop directly.\n//\n// We only read up to the end of the response headers (\"\\r\\n\\r\\n\") and then\n// close the socket; the body is irrelevant for the SSO flow.\n// -----------------------------------------------------------------------------\ninterface RawResponse {\n status: number;\n setCookies: string[];\n location: string | null;\n}\n\n// Open a TLS connection to host:port, tunneling through the residential proxy\n// via HTTP CONNECT when the proxy is enabled, else connecting directly.\n// deno-lint-ignore no-explicit-any\nasync function openTlsConn(host: string, port: number): Promise {\n // deno-lint-ignore no-explicit-any\n const D = Deno as any;\n if (!PROXY_ENABLED) {\n return await D.connectTls({ hostname: host, port });\n }\n\n // 1) plain TCP to the proxy\n const conn = await D.connect({ hostname: PROXY_HOST, port: PROXY_PORT });\n // 2) CONNECT tunnel to the real target\n const auth = btoa(`${PROXY_USER}:${PROXY_PASS}`);\n const connectReq = `CONNECT ${host}:${port} HTTP/1.1\\r\\n` +\n `Host: ${host}:${port}\\r\\n` +\n `Proxy-Authorization: Basic ${auth}\\r\\n` +\n `Proxy-Connection: Keep-Alive\\r\\n\\r\\n`;\n await conn.write(new TextEncoder().encode(connectReq));\n\n const dec = new TextDecoder(\"utf-8\");\n let hdr = \"\";\n const buf = new Uint8Array(1024);\n while (!hdr.includes(\"\\r\\n\\r\\n\")) {\n const n = await conn.read(buf);\n if (n === null) break;\n hdr += dec.decode(buf.subarray(0, n), { stream: true });\n if (hdr.length > 65536) break;\n }\n if (!/^HTTP\\/\\d(?:\\.\\d)?\\s+200/.test(hdr)) {\n try {\n conn.close();\n } catch { /* ignore */ }\n throw new Error(\n `Proxy CONNECT failed: ${hdr.split(\"\\r\\n\")[0] || \"no response\"}`,\n );\n }\n // 3) upgrade the tunnel to TLS (SNI = real target host)\n return await D.startTls(conn, { hostname: host });\n}\n\n// Lazily-created proxied HTTP client for fetch()-based passthroughs.\n// deno-lint-ignore no-explicit-any\nlet _proxyClient: any = undefined;\nlet _proxyClientTried = false;\n// deno-lint-ignore no-explicit-any\nfunction getProxyClient(): any {\n if (!PROXY_ENABLED) return undefined;\n if (_proxyClientTried) return _proxyClient;\n _proxyClientTried = true;\n try {\n // deno-lint-ignore no-explicit-any\n _proxyClient = (Deno as any).createHttpClient({\n proxy: {\n url: `http://${PROXY_HOST}:${PROXY_PORT}`,\n basicAuth: { username: PROXY_USER, password: PROXY_PASS },\n },\n });\n } catch {\n _proxyClient = undefined;\n }\n return _proxyClient;\n}\n\nasync function rawHttpsGet(\n target: string,\n cookie: string,\n referer?: string,\n): Promise {\n const u = new URL(target);\n const host = u.hostname;\n const port = u.port ? parseInt(u.port, 10) : 443;\n const path = (u.pathname || \"/\") + (u.search || \"\");\n\n const conn = await openTlsConn(host, port);\n try {\n // Full browser-navigation headers so fal.ai's edge/WAF treats this like a\n // real redirect follow rather than a bare bot request.\n let req = `GET ${path} HTTP/1.1\\r\\n` +\n `Host: ${host}\\r\\n` +\n `Cookie: ${cookie}\\r\\n` +\n `User-Agent: ${BROWSER_UA}\\r\\n` +\n `Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\\r\\n` +\n `Accept-Language: en-US,en;q=0.9\\r\\n` +\n `Accept-Encoding: identity\\r\\n` +\n `Upgrade-Insecure-Requests: 1\\r\\n` +\n `sec-ch-ua: \"Chromium\";v=\"139\", \"Not;A=Brand\";v=\"99\"\\r\\n` +\n `sec-ch-ua-mobile: ?0\\r\\n` +\n `sec-ch-ua-platform: \"Windows\"\\r\\n` +\n `sec-fetch-dest: document\\r\\n` +\n `sec-fetch-mode: navigate\\r\\n` +\n `sec-fetch-site: cross-site\\r\\n` +\n `sec-fetch-user: ?1\\r\\n`;\n if (referer) req += `Referer: ${referer}\\r\\n`;\n req += `Connection: close\\r\\n\\r\\n`;\n await conn.write(new TextEncoder().encode(req));\n\n const decoder = new TextDecoder(\"utf-8\");\n let acc = \"\";\n const buf = new Uint8Array(16384);\n while (true) {\n const n = await conn.read(buf);\n if (n === null) break;\n acc += decoder.decode(buf.subarray(0, n), { stream: true });\n const idx = acc.indexOf(\"\\r\\n\\r\\n\");\n if (idx !== -1) {\n acc = acc.slice(0, idx); // keep headers only\n break;\n }\n }\n\n const lines = acc.split(\"\\r\\n\");\n const statusLine = lines.shift() || \"\";\n const m = /^HTTP\\/\\d(?:\\.\\d)?\\s+(\\d{3})/.exec(statusLine);\n const status = m ? parseInt(m[1], 10) : 0;\n\n const setCookies: string[] = [];\n let location: string | null = null;\n for (const line of lines) {\n const ci = line.indexOf(\":\");\n if (ci === -1) continue;\n const name = line.slice(0, ci).trim().toLowerCase();\n const value = line.slice(ci + 1).trim();\n if (name === \"set-cookie\") setCookies.push(value);\n else if (name === \"location\" && !location) location = value;\n }\n return { status, setCookies, location };\n } finally {\n try {\n conn.close();\n } catch {\n // ignore\n }\n }\n}\n\n// =============================================================================\n// SSO flow: run Vercel marketplace SSO server-side and return vercel-token\n// =============================================================================\nasync function handleSso(req: Request, url: URL): Promise {\n // Cookie can arrive as a normal Cookie header, an X-Vercel-Cookie header,\n // or (for POST) inside a JSON body { cookie, ssoUrl }.\n let cookie = req.headers.get(\"x-vercel-cookie\") ||\n req.headers.get(\"cookie\") || \"\";\n let ssoUrl = url.searchParams.get(\"ssoUrl\") || \"\";\n\n const configId = url.searchParams.get(\"integrationConfigurationId\") || \"\";\n const teamId = url.searchParams.get(\"teamId\") || \"\";\n\n if (req.method === \"POST\") {\n try {\n const body = await req.json();\n if (body && typeof body === \"object\") {\n if (!cookie && typeof body.cookie === \"string\") cookie = body.cookie;\n if (!ssoUrl && typeof body.ssoUrl === \"string\") ssoUrl = body.ssoUrl;\n }\n } catch {\n // ignore non-JSON bodies\n }\n }\n\n if (!ssoUrl) {\n if (configId && teamId) {\n ssoUrl = `${VERCEL_BASE}/api/marketplace/sso?integrationConfigurationId=${\n encodeURIComponent(\n configId,\n )\n }&teamId=${encodeURIComponent(teamId)}`;\n } else {\n return json(\n { error: \"Missing ssoUrl (or integrationConfigurationId + teamId)\" },\n 400,\n );\n }\n }\n\n if (!cookie) {\n return json({\n error: \"Missing Vercel auth cookie (Cookie / X-Vercel-Cookie header)\",\n }, 400);\n }\n\n let currentUrl = ssoUrl;\n let referer: string | undefined = undefined;\n let cookieHeader = cookie;\n let vercelToken: string | null = null;\n const trace: Array<\n { hop: number; status: number; location: string | null; tries?: number }\n > = [];\n\n const sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));\n\n try {\n for (let hop = 0; hop < 8; hop++) {\n // Retry a hop on 429 / 5xx (fal.ai rate-limits datacenter IPs). Backoff\n // with jitter to slip past soft per-second limits.\n let res = await rawHttpsGet(currentUrl, cookieHeader, referer);\n let tries = 1;\n const backoffs = [800, 2000, 4500, 8000];\n while (\n (res.status === 429 || (res.status >= 500 && res.status < 600) ||\n res.status === 0) &&\n tries <= backoffs.length\n ) {\n await sleep(backoffs[tries - 1] + Math.floor(Math.random() * 400));\n res = await rawHttpsGet(currentUrl, cookieHeader, referer);\n tries++;\n }\n trace.push({ hop, status: res.status, location: res.location, tries });\n\n if (res.setCookies.length) {\n const token = extractVercelToken(res.setCookies);\n if (token) vercelToken = token;\n // Accumulate cookies so later hops in the chain stay authenticated.\n const pairs = res.setCookies.map(cookiePair).filter(Boolean);\n if (pairs.length) cookieHeader += \"; \" + pairs.join(\"; \");\n }\n\n // Stop as soon as we have the token (no need to fetch the dashboard body).\n if (vercelToken) break;\n\n if (res.status >= 300 && res.status < 400 && res.location) {\n referer = currentUrl;\n currentUrl = new URL(res.location, currentUrl).toString();\n continue;\n }\n break;\n }\n } catch (e) {\n return json({ error: `SSO flow failed: ${String(e)}`, trace }, 502);\n }\n\n if (!vercelToken) {\n return json(\n { error: \"Could not extract vercel-token from SSO flow\", trace },\n 400,\n );\n }\n\n // Return the token as a Set-Cookie (so app(6).py's existing scraper works)\n // AND in the JSON body for callers that prefer to read it directly.\n return json(\n { token: vercelToken, configId: configId || null, redirectUrl: currentUrl },\n 200,\n { \"Set-Cookie\": `vercel-token=${vercelToken}; Path=/` },\n );\n}\n\n// =============================================================================\n// Transparent passthrough (used for /vercel/* and /fal/*)\n// =============================================================================\nasync function passthrough(req: Request, targetUrl: string): Promise {\n const outHeaders = new Headers();\n for (const [k, v] of req.headers.entries()) {\n if (STRIP_REQUEST_HEADERS.has(k.toLowerCase())) continue;\n outHeaders.set(k, v);\n }\n if (!outHeaders.has(\"user-agent\")) outHeaders.set(\"User-Agent\", BROWSER_UA);\n\n const hasBody = ![\"GET\", \"HEAD\"].includes(req.method.toUpperCase());\n\n // Route through the residential proxy so fal/vercel see a residential IP.\n const client = getProxyClient();\n\n let upstream: Response;\n try {\n // deno-lint-ignore no-explicit-any\n const opts: any = {\n method: req.method,\n headers: outHeaders,\n body: hasBody ? await req.arrayBuffer() : undefined,\n redirect: \"manual\",\n };\n if (client) opts.client = client;\n upstream = await fetch(targetUrl, opts);\n } catch (e) {\n return json({ error: `Upstream fetch failed: ${String(e)}` }, 502);\n }\n\n // Copy upstream response headers, dropping ones that break re-serving.\n const respHeaders = new Headers();\n for (const [k, v] of upstream.headers.entries()) {\n const lk = k.toLowerCase();\n if (\n lk === \"content-encoding\" || lk === \"content-length\" ||\n lk === \"transfer-encoding\"\n ) {\n continue;\n }\n respHeaders.set(k, v);\n }\n // Preserve every Set-Cookie individually (important for vercel-token).\n const setCookies = getSetCookies(upstream.headers);\n if (setCookies.length) {\n respHeaders.delete(\"set-cookie\");\n for (const c of setCookies) respHeaders.append(\"set-cookie\", c);\n }\n for (const [k, v] of Object.entries(CORS_HEADERS)) respHeaders.set(k, v);\n\n const buf = await upstream.arrayBuffer();\n return new Response(buf, { status: upstream.status, headers: respHeaders });\n}\n\n// =============================================================================\n// Router\n// =============================================================================\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS_HEADERS });\n }\n\n // Health check\n if (path === \"/\" || path === \"\") {\n return json({\n ok: true,\n service: \"vercel+fal mirror\",\n routes: [\"/sso\", \"/vercel/\", \"/fal/\"],\n proxy: PROXY_ENABLED ? `${PROXY_HOST}:${PROXY_PORT}` : \"disabled\",\n });\n }\n\n // Vercel marketplace SSO -> returns vercel-token\n if (path === \"/sso\" || path === \"/api/marketplace/sso\") {\n return handleSso(req, url);\n }\n\n // Transparent Vercel passthrough: /vercel/ -> https://vercel.com/\n if (path.startsWith(\"/vercel/\")) {\n const target = VERCEL_BASE + \"/\" + path.slice(\"/vercel/\".length) +\n url.search;\n return passthrough(req, target);\n }\n\n // Transparent fal passthrough: /fal/ -> https://rest.alpha.fal.ai/\n if (path.startsWith(\"/fal/\")) {\n const target = FAL_BASE + \"/\" + path.slice(\"/fal/\".length) + url.search;\n return passthrough(req, target);\n }\n\n return json({ error: \"Not found\", path }, 404);\n}",[147],"bdf23a7c-8357-4a33-ab84-41294d6bdda2","README.md","019fabbd-a014-70e0-ac01-0879d09c99bf",["D",1785292758989],"# svgrepo-mirror\n\nA reverse proxy that mirrors [svgrepo.com](https://www.svgrepo.com) exactly — including redirects, cookies, and all content types.\n\n**Live URL:** \n\n## How it works\n\nEvery request to the mirror is forwarded to `https://www.svgrepo.com` with:\n\n- **Same path & query string** — `/vectors/cats/?page=2` maps to `svgrepo.com/vectors/cats/?page=2`\n- **Same HTTP method & body** — GET, POST, PUT, DELETE, PATCH all work\n- **Browser-like headers** — User-Agent, Accept, sec-fetch-*, sec-ch-ua sent to avoid bot detection\n- **Redirects preserved** — 3xx responses are passed through with `Location` headers rewritten to point back through the mirror\n- **Cookies forwarded** — Set-Cookie headers are cleaned (domain/secure removed) so they work on the mirror domain\n- **URL rewriting** — Absolute URLs in HTML/CSS/JS/JSON/SVG content are rewritten from `www.svgrepo.com` to the mirror origin\n- **Binary passthrough** — Images, fonts, and other binary content pass through unchanged\n\n## Vercel Security Checkpoint\n\nsvgrepo.com is hosted on Vercel and uses bot protection. Server-side requests (like our proxy's `fetch`) receive a 429 challenge page that requires JavaScript execution to solve.\n\n**When you visit the mirror in a real browser:**\n\n1. Browser receives the challenge page (with URLs rewritten to the mirror)\n2. Browser executes the challenge JavaScript, which POSTs the solution through the proxy\n3. Vercel sets a verification cookie (cleaned to work on the mirror domain)\n4. Browser reloads → proxy forwards the cookie → Vercel returns the real content\n5. All subsequent requests work seamlessly\n\n## Architecture\n\n```\nmain.tsx — HTTP handler: forwards requests, processes responses\nrewrite.ts — URL rewriting utilities (Location headers + content body)\n```\n",[154],"pulls","forks","envVars",{"_165":167,"_168":56},"connections",{"_165":56,"_166":56},"count","unfilledCount",4,"emptyCount",{"_20":153,"_13":154,"_130":155,"_132":-5,"_133":21,"_134":138,"_136":52,"_22":179,"_29":56,"_139":107,"_141":157,"_143":40,"_144":-5,"_173":180,"_95":181},{"_20":146,"_13":147,"_130":50,"_132":-5,"_133":21,"_134":30,"_136":52,"_22":176,"_29":149,"_139":150,"_141":151,"_143":40,"_144":-5,"_173":177,"_95":178},{"_20":128,"_13":129,"_130":131,"_132":-5,"_133":21,"_134":135,"_136":52,"_22":172,"_29":138,"_139":140,"_141":142,"_143":40,"_144":-5,"_173":174,"_95":175},["D",1785292903942],"children",[],[129],["D",1785300501697],[],[147],["D",1785292758989],[],[154],["D",1785292758989],{"_11":12,"_93":89},{"_11":12,"_86":87,"_88":89,"_47":48,"_90":91,"_92":40},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":32,"_33":34,"_79":42,"_80":81,"_82":83,"_84":14,"_85":12},"ctx",{"_72":-5,"_117":219,"_220":221,"_222":223,"_224":40,"_225":40,"_226":40,"_227":52,"_228":-5,"_229":-7,"_230":-7,"_231":56,"_232":40,"_233":40,"_234":-5,"_235":40,"_236":40,"_237":40,"_238":-5},"ENV",{"_190":191,"_192":193,"_194":26,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1