[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_224":225,"_226":227},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_70":159,"_40":-7,"_160":-5,"_17":161,"_162":163,"_164":165,"_166":167,"_168":169,"_170":-5,"_171":172,"_173":174,"_175":48,"_176":177,"_178":26,"_179":-5,"_180":-5,"_181":182},"routes/_app.x.$handle.$name.compare.$branch",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":-5},"handle","aisss","name","svgrepo-mirror","branchName","main","project",{"_32":58,"_13":14,"_34":119,"_46":-5,"_120":48,"_49":50,"_121":50,"_122":123,"_124":-5,"_125":126,"_127":105,"_128":26,"_129":-5,"_130":-5,"_131":22,"_53":132,"_133":-5,"_134":-5,"_135":-5,"_136":-5,"_137":138,"_139":138,"_140":141,"_142":141,"_143":141,"_144":138,"_145":138,"_146":147,"_148":149,"_150":28,"_47":48},"ahead",11,"behind",0,"diff",{"_62":63,"_64":65,"_66":67},"hasChanges",true,"sourceBranch",{"_40":56,"_13":16,"_32":57,"_38":58,"_42":33,"_43":41,"_59":50,"_60":39,"_61":54,"_55":14,"_51":12},"targetBranch",{"_32":33,"_34":35,"_36":37,"_13":16,"_38":39,"_40":41,"_42":-5,"_43":-5,"_44":45,"_46":-5,"_47":48,"_49":50,"_51":52,"_53":54,"_55":14},"pull","id","4fab4288-55d8-4c0d-86e5-79f2d08cfe25","createdAt",["D",1785267916873],"updatedAt",["D",1785268504331],"projectId","53b50d4b-7a19-4c4e-bfe2-af42c0369c84","version",8,"forkedBranchId","forkedBranchVersion","lockfileKey","1785268504453-esm.town_v_b9n0oq_svgrepo-mirror@8-main","deletedAt","isOwned",false,"privacy","public","userHandle","b9n0oq","orgId","019faa41-4926-778a-8b69-48bb92832d29","projectName",12,"f5bfa97c-d193-46a3-8054-032b61eebf3f","99489f8d-0ff0-47c0-a38e-4c92165cb017","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","added",[],"deleted",[],"modified",[68,69],{"_70":101,"_72":102,"_74":103},{"_70":71,"_72":73,"_74":75},"path","rewrite.ts","targetFile",{"_32":95,"_13":71,"_77":96,"_79":-5,"_80":33,"_81":82,"_83":26,"_34":97,"_40":22,"_86":87,"_88":98,"_64":48,"_90":-5,"_91":-7,"_70":99,"_93":100},"sourceFile",{"_32":76,"_13":71,"_77":78,"_79":-5,"_80":57,"_81":82,"_83":26,"_34":84,"_40":85,"_86":87,"_88":89,"_64":48,"_90":-5,"_91":-7,"_70":92,"_93":94},"46f9e03e-a551-45fb-8e45-96ad6e54a741","fileId","019fabbd-a014-70e0-ac01-119774db9c35","parentId","branchId","branchVersion",2,"latest",["D",1785292903942],1,"fileType","script","content","/**\n * Reverse proxy / mirror for svgrepo.com — single-file version.\n * Deploy as an HTTP val (main.tsx).\n */\n\nconst TARGET = \"https://www.svgrepo.com\";\nconst TARGET_ORIGIN = \"https://www.svgrepo.com\";\nconst TARGET_HOSTNAMES = [\"www.svgrepo.com\", \"svgrepo.com\"];\n\n/** Headers to strip when forwarding to the target. */\nconst STRIP_REQUEST_HEADERS = new Set([\n \"host\",\n \"x-forwarded-for\",\n \"x-forwarded-proto\",\n \"x-forwarded-host\",\n \"x-real-ip\",\n \"cf-connecting-ip\",\n \"cf-ipcountry\",\n \"cf-ray\",\n \"cf-visitor\",\n]);\n\n/** Headers to strip from the upstream response. */\nconst STRIP_RESPONSE_HEADERS = new Set([\n \"content-encoding\", // we decode the body, so this must go\n \"content-length\", // will be wrong after rewriting\n \"transfer-encoding\",\n \"connection\",\n \"keep-alive\",\n]);\n\n/* ------------------------------------------------------------------ */\n/* Rewrite helpers (formerly rewrite.ts) */\n/* ------------------------------------------------------------------ */\n\n/** Rewrite a Location header value to point back through the proxy. */\nfunction rewriteLocation(location: string, proxyOrigin: string): string {\n try {\n const url = new URL(location, TARGET_ORIGIN);\n // If it points to the target site, rewrite to proxy origin\n if (TARGET_HOSTNAMES.includes(url.hostname)) {\n return proxyOrigin + url.pathname + url.search + url.hash;\n }\n // External redirect — leave as-is\n return location;\n } catch {\n // Relative path or invalid — make absolute against proxy\n if (location.startsWith(\"/\")) return proxyOrigin + location;\n return location;\n }\n}\n\n/**\n * Rewrite text content (HTML, CSS, JS, JSON, etc.) so that absolute URLs\n * pointing to the target domain are replaced with proxy-origin URLs.\n */\nfunction rewriteContent(\n body: string,\n proxyOrigin: string,\n _contentType: string,\n): string {\n let result = body;\n // Strip the scheme off the proxy origin for protocol-relative replacements\n const proxyProtocolRelative = proxyOrigin.replace(/^https?:/, \"\");\n\n for (const host of TARGET_HOSTNAMES) {\n result = result.replaceAll(`https://${host}`, proxyOrigin);\n result = result.replaceAll(`http://${host}`, proxyOrigin);\n // protocol-relative //www.svgrepo.com\n result = result.replaceAll(`//${host}`, proxyProtocolRelative);\n // escaped form found inside inline JSON/JS: https:\\/\\/www.svgrepo.com\n result = result.replaceAll(\n `https:\\\\/\\\\/${host}`,\n proxyOrigin.replace(/\\//g, \"\\\\/\"),\n );\n }\n\n return result;\n}\n\n/** Check if a content type is text-based and should be rewritten. */\nfunction isTextContent(contentType: string): boolean {\n const ct = contentType.toLowerCase();\n return (\n ct.includes(\"text/\") ||\n ct.includes(\"application/json\") ||\n ct.includes(\"application/javascript\") ||\n ct.includes(\"application/xml\") ||\n ct.includes(\"application/xhtml\") ||\n ct.includes(\"image/svg+xml\")\n );\n}\n\n/* ------------------------------------------------------------------ */\n/* Main handler */\n/* ------------------------------------------------------------------ */\n\nexport default async function (req: Request): Promise {\n const reqUrl = new URL(req.url);\n const proxyOrigin = reqUrl.origin;\n\n // Build the target URL (path + query preserved)\n const targetUrl = TARGET + reqUrl.pathname + reqUrl.search;\n\n // Forward request headers, stripping proxy-specific ones\n const forwardHeaders = new Headers();\n for (const [key, value] of req.headers.entries()) {\n const lk = key.toLowerCase();\n if (STRIP_REQUEST_HEADERS.has(lk)) continue;\n if (lk.startsWith(\"x-val-town\")) continue;\n forwardHeaders.set(key, value);\n }\n\n forwardHeaders.set(\"Host\", \"www.svgrepo.com\");\n forwardHeaders.set(\n \"user-agent\",\n \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36\",\n );\n forwardHeaders.set(\n \"accept\",\n \"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\",\n );\n forwardHeaders.set(\"accept-language\", \"en-US,en;q=0.5\");\n forwardHeaders.set(\"accept-encoding\", \"gzip, deflate, br\");\n forwardHeaders.set(\"sec-fetch-dest\", \"document\");\n forwardHeaders.set(\"sec-fetch-mode\", \"navigate\");\n forwardHeaders.set(\"sec-fetch-site\", \"none\");\n forwardHeaders.set(\"sec-fetch-user\", \"?1\");\n forwardHeaders.set(\"upgrade-insecure-requests\", \"1\");\n forwardHeaders.set(\n \"sec-ch-ua\",\n '\"Google Chrome\";v=\"125\", \"Chromium\";v=\"125\", \"Not.A/Brand\";v=\"24\"',\n );\n forwardHeaders.set(\"sec-ch-ua-mobile\", \"?0\");\n forwardHeaders.set(\"sec-ch-ua-platform\", '\"Windows\"');\n\n // Forward the request — don't follow redirects (manual)\n let upstream: Response;\n try {\n upstream = await fetch(targetUrl, {\n method: req.method,\n headers: forwardHeaders,\n body: req.method === \"GET\" || req.method === \"HEAD\"\n ? undefined\n : req.body,\n redirect: \"manual\",\n });\n } catch (err) {\n return new Response(\n `Proxy error: ${err instanceof Error ? err.message : String(err)}`,\n { status: 502, headers: { \"content-type\": \"text/plain\" } },\n );\n }\n\n // Build the response headers\n const respHeaders = new Headers();\n for (const [key, value] of upstream.headers.entries()) {\n const lk = key.toLowerCase();\n if (STRIP_RESPONSE_HEADERS.has(lk)) continue;\n\n if (lk === \"location\") {\n respHeaders.set(key, rewriteLocation(value, proxyOrigin));\n continue;\n }\n\n if (lk === \"set-cookie\") {\n // Remove domain/secure so cookies work on the proxy domain.\n // SameSite=None requires Secure, which we strip, so downgrade to Lax.\n let cleaned = value\n .replace(/;\\s*domain=[^;]*/gi, \"\")\n .replace(/;\\s*secure/gi, \"\")\n .replace(/;\\s*samesite=none/gi, \"; SameSite=Lax\");\n if (!/;\\s*path=/i.test(cleaned)) cleaned += \"; Path=/\";\n respHeaders.append(key, cleaned);\n continue;\n }\n\n respHeaders.set(key, value);\n }\n\n let status = upstream.status;\n\n // Some CDNs use non-standard status codes (e.g. 705 for challenge responses)\n // that Deno's Response constructor rejects (only 101 or 200–599 allowed).\n if (status !== 101 && (status < 200 || status > 599)) {\n status = 200;\n }\n\n // Redirects — pass through with rewritten Location\n if (status >= 300 && status < 400) {\n return new Response(null, { status, headers: respHeaders });\n }\n\n // Status codes that must not have a body\n if (status === 204 || status === 205) {\n return new Response(null, { status, headers: respHeaders });\n }\n\n // HEAD requests: headers only\n if (req.method === \"HEAD\") {\n return new Response(null, { status, headers: respHeaders });\n }\n\n const contentType = upstream.headers.get(\"content-type\") ?? \"\";\n\n if (isTextContent(contentType)) {\n const text = await upstream.text();\n const rewritten = rewriteContent(text, proxyOrigin, contentType);\n return new Response(rewritten, { status, headers: respHeaders });\n }\n\n // Binary content — pass through as-is\n const body = await upstream.arrayBuffer();\n return new Response(body, { status, headers: respHeaders });\n}","label","children",[71],"contentHash","6a45143a0388849c3ef878a62d4551b5b7cb10e51ece6cea40b7d1ab53f06d4a","dbeff95b-b57f-4577-a104-14fa039a39af","e6348fb6-8abc-11f1-bc70-1607ee4eb77e",["D",1785267934578],"/**\n * URL rewriting utilities for the reverse proxy.\n * Rewrites absolute references to the target domain\n * so the mirrored site works self-contained.\n */\n\nconst TARGET_ORIGIN = \"https://www.svgrepo.com\";\nconst TARGET_HOSTNAMES = [\n \"www.svgrepo.com\",\n \"svgrepo.com\",\n];\n\n/** Rewrite a Location header value to point back through the proxy. */\nexport function rewriteLocation(location: string, proxyOrigin: string): string {\n try {\n const url = new URL(location, TARGET_ORIGIN);\n // If it points to the target site, rewrite to proxy origin\n if (TARGET_HOSTNAMES.includes(url.hostname)) {\n return proxyOrigin + url.pathname + url.search + url.hash;\n }\n // External redirect — leave as-is\n return location;\n } catch {\n // Relative path or invalid — make absolute against proxy\n if (location.startsWith(\"/\")) {\n return proxyOrigin + location;\n }\n return location;\n }\n}\n\n/**\n * Rewrite text content (HTML, CSS, JS, JSON, etc.) so that\n * absolute URLs pointing to the target domain are replaced\n * with proxy-relative or proxy-origin URLs.\n */\nexport function rewriteContent(\n body: string,\n proxyOrigin: string,\n contentType: string,\n): string {\n let result = body;\n\n // Replace https://www.svgrepo.com and https://svgrepo.com\n for (const host of TARGET_HOSTNAMES) {\n // https://www.svgrepo.com → proxy origin\n result = result.replaceAll(`https://${host}`, proxyOrigin);\n // http://www.svgrepo.com → proxy origin\n result = result.replaceAll(`http://${host}`, proxyOrigin);\n // //www.svgrepo.com (protocol-relative) → proxy origin\n result = result.replaceAll(`//${host}`, proxyOrigin);\n }\n\n // In HTML, rewrite etc. that might use full URLs\n // Already handled by the string replacements above.\n\n // Rewrite action attributes in forms that might post to absolute URLs\n // (already handled by the string replacements)\n\n // Handle CDN subdomains if any (svgrepo.cdn... etc.)\n // We leave CDN domains as-is since they serve static assets directly\n\n return result;\n}\n\n/** Check if a content type is text-based and should be rewritten. */\nexport function isTextContent(contentType: string): boolean {\n const ct = contentType.toLowerCase();\n return (\n ct.includes(\"text/\") ||\n ct.includes(\"application/json\") ||\n ct.includes(\"application/javascript\") ||\n ct.includes(\"application/xml\") ||\n ct.includes(\"application/xhtml\") ||\n ct.includes(\"image/svg+xml\")\n );\n}\n",[71],"eba356682cd0e558cdf8c9067adc7123f09860571e0b48f0a3a500a206ab1641","main.tsx",{"_32":112,"_13":101,"_77":113,"_79":-5,"_80":33,"_81":41,"_83":26,"_34":114,"_40":115,"_86":108,"_88":116,"_64":48,"_90":14,"_91":-7,"_70":117,"_93":118},{"_32":104,"_13":101,"_77":105,"_79":-5,"_80":57,"_81":56,"_83":26,"_34":106,"_40":107,"_86":108,"_88":109,"_64":48,"_90":-5,"_91":-7,"_70":110,"_93":111},"092f8753-7afc-4424-a3c3-a6194748fdd2","019fabbd-a014-70e0-ac01-0d2eeb53e2ec",["D",1785300501697],10,"http","// =============================================================================\n// Vercel + Fal mirror proxy for val.town\n// =============================================================================\n//\n// WHY THIS EXISTSh\n// ---------------\n// app (6).py needs a Vercel \"vercel-token\" (obtained from the marketplace SSO\n// flow) and then uses that token against fal's playground proxy. Both Vercel\n// and fal run bot/security checks on the *calling IP*. When app(6).py calls\n// them directly from its own host those checks fail, so the SSO token can't be\n// obtained and fal requests get blocked.\n//\n// This val.town HTTP val performs those outbound calls from val.town's egress\n// instead, acting as a transparent mirror. Point app(6).py at this val's URL.\n//\n// ROUTES\n// ------\n// GET / -> health check\n//\n// GET /sso?integrationConfigurationId=..&teamId=..\n// Header: Cookie: (or X-Vercel-Cookie: )\n// Runs the full Vercel marketplace SSO redirect flow server-side,\n// extracts the `vercel-token` cookie, and returns it BOTH as a\n// `Set-Cookie: vercel-token=...` header (so app(6).py's existing\n// cookie-scraping loop keeps working) AND as JSON { token, configId }.\n//\n// ANY /vercel/ -> https://vercel.com/ (transparent)\n// ANY /fal/ -> https://rest.alpha.fal.ai/(transparent)\n// Forwards method, headers (incl. Authorization / x-fal-* / Cookie) and\n// body untouched, and returns the upstream response as-is.\n//\n// After deploying, hand the base URL to whoever wires app(6).py; there it just\n// replaces the hardcoded `https://vercel.com` (SSO) and\n// `https://rest.alpha.fal.ai` (fal) hosts.\n// =============================================================================\n\nconst VERCEL_BASE = \"https://vercel.com\";\nconst FAL_BASE = \"https://rest.alpha.fal.ai\";\n\n// -----------------------------------------------------------------------------\n// Residential proxy\n//\n// fal.ai (and possibly Vercel) rate-limit/block datacenter IPs like val.town's.\n// Routing outbound requests through a residential HTTP proxy makes fal.ai see a\n// trusted residential IP. All values are env-overridable on val.town.\n// -----------------------------------------------------------------------------\n// deno-lint-ignore no-explicit-any\nconst _env = (k: string): string => {\n try {\n return (Deno as any).env.get(k) || \"\";\n } catch {\n return \"\";\n }\n};\nconst PROXY_HOST = _env(\"PROXY_HOST\") || \"193.160.83.26\";\nconst PROXY_PORT = parseInt(_env(\"PROXY_PORT\") || \"6347\", 10);\nconst PROXY_USER = _env(\"PROXY_USER\") || \"scanrgl99staticresidential\";\nconst PROXY_PASS = _env(\"PROXY_PASS\") || \"pozlol22\";\nconst PROXY_ENABLED = !!(PROXY_HOST && PROXY_PORT);\n\nconst BROWSER_UA =\n \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 \" +\n \"(KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36\";\n\nconst CORS_HEADERS: Record = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, PUT, DELETE, PATCH, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"*\",\n \"Access-Control-Expose-Headers\": \"*\",\n};\n\n// Headers we must NOT copy onto an outbound fetch (hop-by-hop / host-specific).\nconst STRIP_REQUEST_HEADERS = new Set([\n \"host\",\n \"connection\",\n \"content-length\",\n \"accept-encoding\",\n \"cf-connecting-ip\",\n \"cf-ipcountry\",\n \"cf-ray\",\n \"cf-visitor\",\n \"x-forwarded-for\",\n \"x-forwarded-host\",\n \"x-forwarded-proto\",\n \"x-real-ip\",\n]);\n\nfunction json(body: unknown, status = 200, extra: Record = {}) {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\n \"Content-Type\": \"application/json\",\n ...CORS_HEADERS,\n ...extra,\n },\n });\n}\n\n/** Read all Set-Cookie values from a Headers object across runtimes. */\nfunction getSetCookies(headers: Headers): string[] {\n // Deno / modern runtimes\n // deno-lint-ignore no-explicit-any\n const anyHeaders = headers as any;\n if (typeof anyHeaders.getSetCookie === \"function\") {\n const arr = anyHeaders.getSetCookie();\n if (Array.isArray(arr) && arr.length) return arr;\n }\n const combined = headers.get(\"set-cookie\");\n if (!combined) return [];\n // Split on commas that precede a \"name=\" pair (avoids splitting Expires dates).\n return combined.split(/,(?=\\s*[^;,\\s]+=)/g).map((c) => c.trim());\n}\n\n/** Pull vercel-token= out of a list of Set-Cookie strings. */\nfunction extractVercelToken(setCookies: string[]): string | null {\n for (const c of setCookies) {\n const m = /(?:^|\\s)vercel-token=([^;]+)/.exec(c);\n if (m && m[1]) return m[1];\n }\n return null;\n}\n\n/** The first `name=value` pair of a Set-Cookie string, for cookie accumulation. */\nfunction cookiePair(setCookie: string): string {\n return setCookie.split(\";\")[0].trim();\n}\n\n// -----------------------------------------------------------------------------\n// Raw HTTPS GET (Deno.connectTls)\n//\n// Deno's fetch() with redirect:\"manual\" returns an OPAQUE response (status 0,\n// no headers), so it cannot read the Location / Set-Cookie of the Vercel->fal\n// redirect chain — and `vercel-token` is set MID-redirect (on the fal.ai hop).\n// This raw HTTP/1.1 client reads the response headers of each hop directly.\n//\n// We only read up to the end of the response headers (\"\\r\\n\\r\\n\") and then\n// close the socket; the body is irrelevant for the SSO flow.\n// -----------------------------------------------------------------------------\ninterface RawResponse {\n status: number;\n setCookies: string[];\n location: string | null;\n}\n\n// Open a TLS connection to host:port, tunneling through the residential proxy\n// via HTTP CONNECT when the proxy is enabled, else connecting directly.\n// deno-lint-ignore no-explicit-any\nasync function openTlsConn(host: string, port: number): Promise {\n // deno-lint-ignore no-explicit-any\n const D = Deno as any;\n if (!PROXY_ENABLED) {\n return await D.connectTls({ hostname: host, port });\n }\n\n // 1) plain TCP to the proxy\n const conn = await D.connect({ hostname: PROXY_HOST, port: PROXY_PORT });\n // 2) CONNECT tunnel to the real target\n const auth = btoa(`${PROXY_USER}:${PROXY_PASS}`);\n const connectReq = `CONNECT ${host}:${port} HTTP/1.1\\r\\n` +\n `Host: ${host}:${port}\\r\\n` +\n `Proxy-Authorization: Basic ${auth}\\r\\n` +\n `Proxy-Connection: Keep-Alive\\r\\n\\r\\n`;\n await conn.write(new TextEncoder().encode(connectReq));\n\n const dec = new TextDecoder(\"utf-8\");\n let hdr = \"\";\n const buf = new Uint8Array(1024);\n while (!hdr.includes(\"\\r\\n\\r\\n\")) {\n const n = await conn.read(buf);\n if (n === null) break;\n hdr += dec.decode(buf.subarray(0, n), { stream: true });\n if (hdr.length > 65536) break;\n }\n if (!/^HTTP\\/\\d(?:\\.\\d)?\\s+200/.test(hdr)) {\n try {\n conn.close();\n } catch { /* ignore */ }\n throw new Error(\n `Proxy CONNECT failed: ${hdr.split(\"\\r\\n\")[0] || \"no response\"}`,\n );\n }\n // 3) upgrade the tunnel to TLS (SNI = real target host)\n return await D.startTls(conn, { hostname: host });\n}\n\n// Lazily-created proxied HTTP client for fetch()-based passthroughs.\n// deno-lint-ignore no-explicit-any\nlet _proxyClient: any = undefined;\nlet _proxyClientTried = false;\n// deno-lint-ignore no-explicit-any\nfunction getProxyClient(): any {\n if (!PROXY_ENABLED) return undefined;\n if (_proxyClientTried) return _proxyClient;\n _proxyClientTried = true;\n try {\n // deno-lint-ignore no-explicit-any\n _proxyClient = (Deno as any).createHttpClient({\n proxy: {\n url: `http://${PROXY_HOST}:${PROXY_PORT}`,\n basicAuth: { username: PROXY_USER, password: PROXY_PASS },\n },\n });\n } catch {\n _proxyClient = undefined;\n }\n return _proxyClient;\n}\n\nasync function rawHttpsGet(\n target: string,\n cookie: string,\n referer?: string,\n): Promise {\n const u = new URL(target);\n const host = u.hostname;\n const port = u.port ? parseInt(u.port, 10) : 443;\n const path = (u.pathname || \"/\") + (u.search || \"\");\n\n const conn = await openTlsConn(host, port);\n try {\n // Full browser-navigation headers so fal.ai's edge/WAF treats this like a\n // real redirect follow rather than a bare bot request.\n let req = `GET ${path} HTTP/1.1\\r\\n` +\n `Host: ${host}\\r\\n` +\n `Cookie: ${cookie}\\r\\n` +\n `User-Agent: ${BROWSER_UA}\\r\\n` +\n `Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8\\r\\n` +\n `Accept-Language: en-US,en;q=0.9\\r\\n` +\n `Accept-Encoding: identity\\r\\n` +\n `Upgrade-Insecure-Requests: 1\\r\\n` +\n `sec-ch-ua: \"Chromium\";v=\"139\", \"Not;A=Brand\";v=\"99\"\\r\\n` +\n `sec-ch-ua-mobile: ?0\\r\\n` +\n `sec-ch-ua-platform: \"Windows\"\\r\\n` +\n `sec-fetch-dest: document\\r\\n` +\n `sec-fetch-mode: navigate\\r\\n` +\n `sec-fetch-site: cross-site\\r\\n` +\n `sec-fetch-user: ?1\\r\\n`;\n if (referer) req += `Referer: ${referer}\\r\\n`;\n req += `Connection: close\\r\\n\\r\\n`;\n await conn.write(new TextEncoder().encode(req));\n\n const decoder = new TextDecoder(\"utf-8\");\n let acc = \"\";\n const buf = new Uint8Array(16384);\n while (true) {\n const n = await conn.read(buf);\n if (n === null) break;\n acc += decoder.decode(buf.subarray(0, n), { stream: true });\n const idx = acc.indexOf(\"\\r\\n\\r\\n\");\n if (idx !== -1) {\n acc = acc.slice(0, idx); // keep headers only\n break;\n }\n }\n\n const lines = acc.split(\"\\r\\n\");\n const statusLine = lines.shift() || \"\";\n const m = /^HTTP\\/\\d(?:\\.\\d)?\\s+(\\d{3})/.exec(statusLine);\n const status = m ? parseInt(m[1], 10) : 0;\n\n const setCookies: string[] = [];\n let location: string | null = null;\n for (const line of lines) {\n const ci = line.indexOf(\":\");\n if (ci === -1) continue;\n const name = line.slice(0, ci).trim().toLowerCase();\n const value = line.slice(ci + 1).trim();\n if (name === \"set-cookie\") setCookies.push(value);\n else if (name === \"location\" && !location) location = value;\n }\n return { status, setCookies, location };\n } finally {\n try {\n conn.close();\n } catch {\n // ignore\n }\n }\n}\n\n// =============================================================================\n// SSO flow: run Vercel marketplace SSO server-side and return vercel-token\n// =============================================================================\nasync function handleSso(req: Request, url: URL): Promise {\n // Cookie can arrive as a normal Cookie header, an X-Vercel-Cookie header,\n // or (for POST) inside a JSON body { cookie, ssoUrl }.\n let cookie = req.headers.get(\"x-vercel-cookie\") ||\n req.headers.get(\"cookie\") || \"\";\n let ssoUrl = url.searchParams.get(\"ssoUrl\") || \"\";\n\n const configId = url.searchParams.get(\"integrationConfigurationId\") || \"\";\n const teamId = url.searchParams.get(\"teamId\") || \"\";\n\n if (req.method === \"POST\") {\n try {\n const body = await req.json();\n if (body && typeof body === \"object\") {\n if (!cookie && typeof body.cookie === \"string\") cookie = body.cookie;\n if (!ssoUrl && typeof body.ssoUrl === \"string\") ssoUrl = body.ssoUrl;\n }\n } catch {\n // ignore non-JSON bodies\n }\n }\n\n if (!ssoUrl) {\n if (configId && teamId) {\n ssoUrl = `${VERCEL_BASE}/api/marketplace/sso?integrationConfigurationId=${\n encodeURIComponent(\n configId,\n )\n }&teamId=${encodeURIComponent(teamId)}`;\n } else {\n return json(\n { error: \"Missing ssoUrl (or integrationConfigurationId + teamId)\" },\n 400,\n );\n }\n }\n\n if (!cookie) {\n return json({\n error: \"Missing Vercel auth cookie (Cookie / X-Vercel-Cookie header)\",\n }, 400);\n }\n\n let currentUrl = ssoUrl;\n let referer: string | undefined = undefined;\n let cookieHeader = cookie;\n let vercelToken: string | null = null;\n const trace: Array<\n { hop: number; status: number; location: string | null; tries?: number }\n > = [];\n\n const sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));\n\n try {\n for (let hop = 0; hop < 8; hop++) {\n // Retry a hop on 429 / 5xx (fal.ai rate-limits datacenter IPs). Backoff\n // with jitter to slip past soft per-second limits.\n let res = await rawHttpsGet(currentUrl, cookieHeader, referer);\n let tries = 1;\n const backoffs = [800, 2000, 4500, 8000];\n while (\n (res.status === 429 || (res.status >= 500 && res.status < 600) ||\n res.status === 0) &&\n tries <= backoffs.length\n ) {\n await sleep(backoffs[tries - 1] + Math.floor(Math.random() * 400));\n res = await rawHttpsGet(currentUrl, cookieHeader, referer);\n tries++;\n }\n trace.push({ hop, status: res.status, location: res.location, tries });\n\n if (res.setCookies.length) {\n const token = extractVercelToken(res.setCookies);\n if (token) vercelToken = token;\n // Accumulate cookies so later hops in the chain stay authenticated.\n const pairs = res.setCookies.map(cookiePair).filter(Boolean);\n if (pairs.length) cookieHeader += \"; \" + pairs.join(\"; \");\n }\n\n // Stop as soon as we have the token (no need to fetch the dashboard body).\n if (vercelToken) break;\n\n if (res.status >= 300 && res.status < 400 && res.location) {\n referer = currentUrl;\n currentUrl = new URL(res.location, currentUrl).toString();\n continue;\n }\n break;\n }\n } catch (e) {\n return json({ error: `SSO flow failed: ${String(e)}`, trace }, 502);\n }\n\n if (!vercelToken) {\n return json(\n { error: \"Could not extract vercel-token from SSO flow\", trace },\n 400,\n );\n }\n\n // Return the token as a Set-Cookie (so app(6).py's existing scraper works)\n // AND in the JSON body for callers that prefer to read it directly.\n return json(\n { token: vercelToken, configId: configId || null, redirectUrl: currentUrl },\n 200,\n { \"Set-Cookie\": `vercel-token=${vercelToken}; Path=/` },\n );\n}\n\n// =============================================================================\n// Transparent passthrough (used for /vercel/* and /fal/*)\n// =============================================================================\nasync function passthrough(req: Request, targetUrl: string): Promise {\n const outHeaders = new Headers();\n for (const [k, v] of req.headers.entries()) {\n if (STRIP_REQUEST_HEADERS.has(k.toLowerCase())) continue;\n outHeaders.set(k, v);\n }\n if (!outHeaders.has(\"user-agent\")) outHeaders.set(\"User-Agent\", BROWSER_UA);\n\n const hasBody = ![\"GET\", \"HEAD\"].includes(req.method.toUpperCase());\n\n // Route through the residential proxy so fal/vercel see a residential IP.\n const client = getProxyClient();\n\n let upstream: Response;\n try {\n // deno-lint-ignore no-explicit-any\n const opts: any = {\n method: req.method,\n headers: outHeaders,\n body: hasBody ? await req.arrayBuffer() : undefined,\n redirect: \"manual\",\n };\n if (client) opts.client = client;\n upstream = await fetch(targetUrl, opts);\n } catch (e) {\n return json({ error: `Upstream fetch failed: ${String(e)}` }, 502);\n }\n\n // Copy upstream response headers, dropping ones that break re-serving.\n const respHeaders = new Headers();\n for (const [k, v] of upstream.headers.entries()) {\n const lk = k.toLowerCase();\n if (\n lk === \"content-encoding\" || lk === \"content-length\" ||\n lk === \"transfer-encoding\"\n ) {\n continue;\n }\n respHeaders.set(k, v);\n }\n // Preserve every Set-Cookie individually (important for vercel-token).\n const setCookies = getSetCookies(upstream.headers);\n if (setCookies.length) {\n respHeaders.delete(\"set-cookie\");\n for (const c of setCookies) respHeaders.append(\"set-cookie\", c);\n }\n for (const [k, v] of Object.entries(CORS_HEADERS)) respHeaders.set(k, v);\n\n const buf = await upstream.arrayBuffer();\n return new Response(buf, { status: upstream.status, headers: respHeaders });\n}\n\n// =============================================================================\n// Router\n// =============================================================================\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS_HEADERS });\n }\n\n // Health check\n if (path === \"/\" || path === \"\") {\n return json({\n ok: true,\n service: \"vercel+fal mirror\",\n routes: [\"/sso\", \"/vercel/\", \"/fal/\"],\n proxy: PROXY_ENABLED ? `${PROXY_HOST}:${PROXY_PORT}` : \"disabled\",\n });\n }\n\n // Vercel marketplace SSO -> returns vercel-token\n if (path === \"/sso\" || path === \"/api/marketplace/sso\") {\n return handleSso(req, url);\n }\n\n // Transparent Vercel passthrough: /vercel/ -> https://vercel.com/\n if (path.startsWith(\"/vercel/\")) {\n const target = VERCEL_BASE + \"/\" + path.slice(\"/vercel/\".length) +\n url.search;\n return passthrough(req, target);\n }\n\n // Transparent fal passthrough: /fal/ -> https://rest.alpha.fal.ai/\n if (path.startsWith(\"/fal/\")) {\n const target = FAL_BASE + \"/\" + path.slice(\"/fal/\".length) + url.search;\n return passthrough(req, target);\n }\n\n return json({ error: \"Not found\", path }, 404);\n}",[101],"c4ec9783e2e71c5a5770d8ca8ea99c42d490617312fb5cc066ccef0d6e785223","82f97ef6-da2b-4c23-b36c-02c626c590bd","dba96ea4-8abc-11f1-adcf-1607ee4eb77e",["D",1785268504331],5,"import { rewriteLocation, rewriteContent, isTextContent } from \"./rewrite.ts\";\n\nconst TARGET = \"https://www.svgrepo.com\";\n\n/** Headers to strip when forwarding to the target. */\nconst STRIP_REQUEST_HEADERS = new Set([\n \"host\",\n \"x-forwarded-for\",\n \"x-forwarded-proto\",\n \"x-forwarded-host\",\n \"x-real-ip\",\n \"cf-connecting-ip\",\n \"cf-ipcountry\",\n \"cf-ray\",\n \"cf-visitor\",\n \"x-val-town-*\",\n]);\n\n/** Headers to strip from the upstream response. */\nconst STRIP_RESPONSE_HEADERS = new Set([\n \"content-encoding\", // we decode the body, so this must go\n \"content-length\", // will be wrong after rewriting\n \"transfer-encoding\",\n \"connection\",\n \"keep-alive\",\n]);\n\nexport default async function(req: Request): Promise {\n const reqUrl = new URL(req.url);\n const proxyOrigin = reqUrl.origin;\n\n // Build the target URL (path + query preserved)\n const targetUrl = TARGET + reqUrl.pathname + reqUrl.search;\n\n // Forward request headers, stripping proxy-specific ones\n const forwardHeaders = new Headers();\n for (const [key, value] of req.headers.entries()) {\n const lk = key.toLowerCase();\n if (STRIP_REQUEST_HEADERS.has(lk)) continue;\n // Skip x-val-town-* headers\n if (lk.startsWith(\"x-val-town\")) continue;\n forwardHeaders.set(key, value);\n }\n // Set the correct Host header for the target\n forwardHeaders.set(\"Host\", \"www.svgrepo.com\");\n // Always set a realistic browser User-Agent to avoid bot detection\n forwardHeaders.set(\n \"user-agent\",\n \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36\",\n );\n // Browser-like Accept headers\n forwardHeaders.set(\"accept\", \"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\");\n forwardHeaders.set(\"accept-language\", \"en-US,en;q=0.5\");\n forwardHeaders.set(\"accept-encoding\", \"gzip, deflate, br\");\n // Sec-Fetch headers that real browsers send\n forwardHeaders.set(\"sec-fetch-dest\", \"document\");\n forwardHeaders.set(\"sec-fetch-mode\", \"navigate\");\n forwardHeaders.set(\"sec-fetch-site\", \"none\");\n forwardHeaders.set(\"sec-fetch-user\", \"?1\");\n forwardHeaders.set(\"upgrade-insecure-requests\", \"1\");\n // sec-ch-ua headers (Chrome 125)\n forwardHeaders.set(\"sec-ch-ua\", '\"Google Chrome\";v=\"125\", \"Chromium\";v=\"125\", \"Not.A/Brand\";v=\"24\"');\n forwardHeaders.set(\"sec-ch-ua-mobile\", \"?0\");\n forwardHeaders.set(\"sec-ch-ua-platform\", '\"Windows\"');\n\n // Forward the request — don't follow redirects (manual)\n let upstream: Response;\n try {\n upstream = await fetch(targetUrl, {\n method: req.method,\n headers: forwardHeaders,\n body: req.method === \"GET\" || req.method === \"HEAD\" ? undefined : req.body,\n redirect: \"manual\",\n });\n } catch (err) {\n return new Response(\n `Proxy error: ${err instanceof Error ? err.message : String(err)}`,\n { status: 502, headers: { \"content-type\": \"text/plain\" } },\n );\n }\n\n // Build the response headers\n const respHeaders = new Headers();\n for (const [key, value] of upstream.headers.entries()) {\n const lk = key.toLowerCase();\n if (STRIP_RESPONSE_HEADERS.has(lk)) continue;\n if (lk === \"location\") {\n // Rewrite redirect Location to point through the proxy\n respHeaders.set(key, rewriteLocation(value, proxyOrigin));\n continue;\n }\n if (lk === \"set-cookie\") {\n // Remove domain/secure so cookies work on the proxy domain.\n // Also fix SameSite: SameSite=None requires Secure, but we strip\n // Secure, so change it to Lax to keep the cookie valid.\n let cleaned = value\n .replace(/;\\s*domain=[^;]*/gi, \"\")\n .replace(/;\\s*secure/gi, \"\")\n .replace(/;\\s*samesite=none/gi, \"; SameSite=Lax\");\n // Ensure Path=/ so cookies apply to all routes on the mirror\n if (!/;\\s*path=/i.test(cleaned)) {\n cleaned += \"; Path=/\";\n }\n respHeaders.append(key, cleaned);\n continue;\n }\n respHeaders.set(key, value);\n }\n\n // Handle redirects (3xx) — pass through with rewritten Location\n let status = upstream.status;\n\n // Vercel uses non-standard status codes (e.g. 705 for challenge responses)\n // that Deno's Response constructor rejects (only 101 or 200–599 allowed).\n // Map any out-of-range status to 200 so the body/headers (especially\n // Set-Cookie with the verification token) still reach the browser.\n if (status !== 101 && (status < 200 || status > 599)) {\n status = 200;\n }\n\n if (status >= 300 && status < 400) {\n return new Response(null, { status, headers: respHeaders });\n }\n\n // Status codes that must not have a body (204, 205).\n // Without this, Vercel's challenge-solution POST returns 204 and\n // new Response(body, ...) throws \"Response with null body status cannot have body\"\n if (status === 204 || status === 205) {\n return new Response(null, { status, headers: respHeaders });\n }\n\n // For HEAD requests, return headers only\n if (req.method === \"HEAD\") {\n return new Response(null, { status, headers: respHeaders });\n }\n\n // Get the response body\n const contentType = upstream.headers.get(\"content-type\") ?? \"\";\n const textLike = isTextContent(contentType);\n\n if (textLike) {\n // Decode, rewrite URLs, and return\n const text = await upstream.text();\n const rewritten = rewriteContent(text, proxyOrigin, contentType);\n return new Response(rewritten, { status, headers: respHeaders });\n }\n\n // Binary content — pass through as-is\n const body = await upstream.arrayBuffer();\n return new Response(body, { status, headers: respHeaders });\n}\n",[101],"897819bff09a0729eedaaa963060f8c0440e04833ac8c9ed3d9dbe523b61403b",["D",1785292758989],"legacyEnvVars","httpPrivacy","description","A reverse proxy mirror of svgrepo.com with redirect handling","imageUrl","userId","0ce58fb8-52f8-4608-a94a-226df5456dd1","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","019f99a2-f250-749c-96aa-a8cae4c2aeea","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_158":154},"org",{"_11":12,"_151":152,"_153":154,"_125":126,"_155":156,"_157":48},"branch","displayName","Rbxgscanner","avatar","https://lh3.googleusercontent.com/a/ACg8ocKqwXuu42CD8D9vfE9W-gEq_Oh3WbwNufExuI-UaXMd35_rHQ=s96-c","tier","free","canRestrictVals","profileImageUrl","","adoptOrgId",{"_32":58,"_13":14,"_34":220,"_46":-5,"_120":48,"_49":50,"_121":50,"_122":123,"_124":-5,"_125":126,"_127":105,"_128":26,"_129":-5,"_130":-5,"_131":22,"_53":132,"_133":-5,"_134":-5,"_135":-5,"_136":-5,"_137":138,"_139":138,"_140":141,"_142":141,"_143":141,"_144":138,"_145":138,"_146":221,"_148":222,"_150":223,"_47":48},"tree",[210,211,212],"files",[210,211,212],"counts",{"_199":22,"_200":85,"_201":22,"_202":203,"_204":205},"contents",[186,187,188],"file","upstreamProject",{"_32":39,"_13":14,"_122":123,"_124":-5,"_49":50,"_146":185},"upstreamBranch",{"_32":33,"_34":183,"_36":184,"_13":16,"_38":39,"_40":41,"_42":-5,"_43":-5,"_44":45,"_46":-5,"_47":48,"_49":50,"_51":52,"_53":54,"_55":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1785267916873],["D",1785268504331],{"_11":52,"_158":159},{"_32":193,"_13":194,"_77":195,"_79":-5,"_80":57,"_81":85,"_83":26,"_34":196,"_40":22,"_86":170,"_88":197,"_64":48,"_90":-5,"_70":198},{"_32":104,"_13":101,"_77":105,"_79":-5,"_80":57,"_81":56,"_83":26,"_34":191,"_40":107,"_86":108,"_88":109,"_64":48,"_90":-5,"_70":192},{"_32":76,"_13":71,"_77":78,"_79":-5,"_80":57,"_81":82,"_83":26,"_34":189,"_40":85,"_86":87,"_88":89,"_64":48,"_90":-5,"_70":190},["D",1785292903942],[71],["D",1785300501697],[101],"bdf23a7c-8357-4a33-ab84-41294d6bdda2","README.md","019fabbd-a014-70e0-ac01-0879d09c99bf",["D",1785292758989],"# svgrepo-mirror\n\nA reverse proxy that mirrors [svgrepo.com](https://www.svgrepo.com) exactly — including redirects, cookies, and all content types.\n\n**Live URL:** \n\n## How it works\n\nEvery request to the mirror is forwarded to `https://www.svgrepo.com` with:\n\n- **Same path & query string** — `/vectors/cats/?page=2` maps to `svgrepo.com/vectors/cats/?page=2`\n- **Same HTTP method & body** — GET, POST, PUT, DELETE, PATCH all work\n- **Browser-like headers** — User-Agent, Accept, sec-fetch-*, sec-ch-ua sent to avoid bot detection\n- **Redirects preserved** — 3xx responses are passed through with `Location` headers rewritten to point back through the mirror\n- **Cookies forwarded** — Set-Cookie headers are cleaned (domain/secure removed) so they work on the mirror domain\n- **URL rewriting** — Absolute URLs in HTML/CSS/JS/JSON/SVG content are rewritten from `www.svgrepo.com` to the mirror origin\n- **Binary passthrough** — Images, fonts, and other binary content pass through unchanged\n\n## Vercel Security Checkpoint\n\nsvgrepo.com is hosted on Vercel and uses bot protection. Server-side requests (like our proxy's `fetch`) receive a 429 challenge page that requires JavaScript execution to solve.\n\n**When you visit the mirror in a real browser:**\n\n1. Browser receives the challenge page (with URLs rewritten to the mirror)\n2. Browser executes the challenge JavaScript, which POSTs the solution through the proxy\n3. Vercel sets a verification cookie (cleaned to work on the mirror domain)\n4. Browser reloads → proxy forwards the cookie → Vercel returns the real content\n5. All subsequent requests work seamlessly\n\n## Architecture\n\n```\nmain.tsx — HTTP handler: forwards requests, processes responses\nrewrite.ts — URL rewriting utilities (Location headers + content body)\n```\n",[194],"pulls","branches","forks","envVars",{"_206":208,"_209":22},"connections",{"_206":22,"_207":22},"count","unfilledCount",4,"emptyCount",{"_32":193,"_13":194,"_77":195,"_79":-5,"_80":57,"_81":85,"_83":26,"_34":217,"_40":22,"_86":170,"_88":197,"_64":48,"_90":-5,"_91":218,"_70":219},{"_32":104,"_13":101,"_77":105,"_79":-5,"_80":57,"_81":56,"_83":26,"_34":106,"_40":107,"_86":108,"_88":109,"_64":48,"_90":-5,"_91":215,"_70":216},{"_32":76,"_13":71,"_77":78,"_79":-5,"_80":57,"_81":82,"_83":26,"_34":84,"_40":85,"_86":87,"_88":89,"_64":48,"_90":-5,"_91":213,"_70":214},[],[71],[],[101],["D",1785292758989],[],[194],["D",1785292758989],{"_11":12,"_158":154},{"_11":12,"_151":152,"_153":154,"_125":126,"_155":156,"_157":48},{"_40":56,"_13":16,"_32":57,"_38":58,"_42":33,"_43":41,"_59":50,"_60":39,"_61":54,"_55":14,"_51":12},"ctx",{"_146":-5,"_180":257,"_258":259,"_260":261,"_262":48,"_263":48,"_264":48,"_265":26,"_266":-5,"_267":-7,"_268":-7,"_269":22,"_270":48,"_271":48,"_272":-5,"_273":48,"_274":48,"_275":48,"_276":-5},"ENV",{"_228":229,"_230":231,"_232":16,"_233":234,"_235":236,"_237":238,"_239":240,"_241":242,"_243":244,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":256},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Compare

Mergeaisss/mainintob9n0oq/main

Hmain.tsx+450-113

rewrite.ts+169-31