[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_334":335,"_336":337},"routes/_app.x.$handle.$name",{"_99":98,"_31":44,"_107":89,"_26":52,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":24,"_121":122,"_123":58,"_124":-5,"_125":-5,"_126":127},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_31":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":24},"version",22,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","frontend/shared/LoginScreen.tsx","latestPath","fileId","5aa40ee4-a890-11f1-8b81-1607ee4eb77e","name","LoginScreen.tsx","fileType","script","content","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useEffect, useRef, useState } from \"https://esm.sh/react@18.2.0\";\nimport type { AppConfig, HintedAccount } from \"./types.ts\";\nimport { loginUrl } from \"./api.ts\";\nimport { loadLoggedinRenderer, loadOriginLabels } from \"./loggedin.ts\";\n\ntype Props = {\n config: AppConfig;\n};\n\nexport function LoginScreen({ config }: Props) {\n const iframeRef = useRef(null);\n const listRef = useRef(null);\n const [handle, setHandle] = useState(\"\");\n const [status, setStatus] = useState(\"Looking for AT Proto accounts already used on this device…\");\n const [error, setError] = useState(\"\");\n const [accounts, setAccounts] = useState([]);\n\n useEffect(() => {\n const iframe = iframeRef.current;\n const list = listRef.current;\n if (!iframe || !list) return;\n\n let cancelled = false;\n (async () => {\n try {\n const Loggedin = await loadLoggedinRenderer(config.loggedinOrigin);\n const labels = await loadOriginLabels(config.loggedinOrigin);\n if (cancelled) return;\n\n const startOauth = (did: string, resolvedHandle?: string) => {\n location.href = loginUrl(resolvedHandle && !resolvedHandle.startsWith(\"did:\") ? resolvedHandle : did);\n };\n\n Loggedin.listenToEmbed(iframe, {\n onReady: () => setStatus(\"This browser already has a loggedin.fyi session. Pick an account below.\"),\n onUnavailable: () =>\n setStatus(\"This browser blocked the silent cookie. Use the button in the embed, or sign in with a handle.\"),\n onAccounts: (next) => {\n setAccounts(next);\n Loggedin.renderAccountList(list, next, {\n originLabels: labels,\n onPick: startOauth,\n });\n if (next.length) {\n setStatus(\"These AT Proto accounts were saved on this device by another client.\");\n } else {\n setStatus(\"No hinted accounts yet. Sign in below, then the other demo can offer this account.\");\n }\n },\n onPicked: (did) => startOauth(did),\n });\n Loggedin.listenForPicked(config.loggedinOrigin, (did) => startOauth(did));\n } catch (err) {\n if (!cancelled) setError(err instanceof Error ? err.message : \"loggedin.fyi is unreachable\");\n }\n })();\n\n return () => {\n cancelled = true;\n };\n }, [config.loggedinOrigin]);\n\n const crate = config.slug === \"cratewalk\";\n\n return (\n

\n \n \n {crate ? \"Demo B · Cratewalk\" : \"Demo A · Lightbox\"}\n

\n {config.appName}\n

\n {config.tagline} Sign in with the usual Bluesky / AT Proto OAuth flow. If another participating client\n already heartbeated on this device, pick that account instead.\n

\n\n {\n const value = handle.trim();\n if (!value) {\n event.preventDefault();\n setError(\"Enter a handle like alice.bsky.social\");\n }\n }}\n >\n \n Handle or DID\n \n setHandle(event.target.value)}\n placeholder=\"you.bsky.social\"\n autoComplete=\"username\"\n className={\n crate\n ? \"border-4 border-black bg-[#fff6df] px-3 py-2 font-mono text-sm text-[#1b1208] outline-none\"\n : \"rounded-lg border border-[#4a4336] bg-[#0e0c0a] px-3 py-2.5 font-mono text-sm text-[#f6efe2] outline-none focus:border-[#d4a017]\"\n }\n />\n \n Sign in with Bluesky\n \n \n\n

\n\n

\n Already used on this device\n

{status}

\n \n \n {accounts.length === 0 ? null : (\n

\n Picking one starts a normal PDS OAuth login with that DID as the hint — not a new sign-in service.\n

\n )}\n {error ? (\n

{error}

\n ) : null}\n

\n \n view source\n \n

\n \n

\n );\n}\n","createdAt",["D",1788547336148],"branchVersion","branchId","91d21f06-6f56-44dd-8b0e-505f21aca1f0","id","471016d4-bba2-4316-8e82-da6dc635c551","lightbox-loggedin",["D",1788546938576],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","4a195d61-960e-47fc-a2de-babac7864ff9","pinnedFileId","59cb6300-a890-11f1-a866-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","4281254f-bfbc-421d-89b2-3fe0572f0e97","tursoName","471016d4bba243168e82da6dc635c551","tursoHostname","471016d4bba243168e82da6dc635c551-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789543856531],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_106":102},"org",{"_99":98,"_100":-5,"_101":102,"_18":54,"_103":104,"_105":24},"branch",{"_13":88,"_31":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"isOwned",45,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","alexmcroberts","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJObXhUQ1k1VHlSUENxb1FtUlRYZUVXbWRNOSIsImluaXRpYWxzIjoiQU0ifQ","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_42":43,"_31":44,"_37":329,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":330,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":331,"_83":332,"_85":333,"_87":24},"tree",[182,193,199,200,201],"files",[182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201],"counts",{"_170":62,"_171":172,"_173":62,"_174":175,"_176":177},"contents",[128,129,130,131,132],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":164,"_31":165,"_29":166,"_135":-5,"_40":41,"_39":167,"_137":58,"_37":168,"_13":62,"_33":162,"_35":-5,"_23":24,"_141":-5,"_26":169},{"_42":157,"_31":158,"_29":159,"_135":-5,"_40":41,"_39":160,"_137":58,"_37":161,"_13":62,"_33":162,"_35":-5,"_23":24,"_141":-5,"_26":163},{"_42":150,"_31":151,"_29":152,"_135":-5,"_40":41,"_39":153,"_137":58,"_37":154,"_13":62,"_33":20,"_35":155,"_23":24,"_141":-5,"_26":156},{"_42":143,"_31":144,"_29":145,"_135":-5,"_40":41,"_39":146,"_137":24,"_37":147,"_13":62,"_33":20,"_35":148,"_23":24,"_141":-5,"_26":149},{"_42":133,"_31":134,"_29":56,"_135":-5,"_40":41,"_39":136,"_137":58,"_37":138,"_13":62,"_33":139,"_35":140,"_23":24,"_141":44,"_26":142},"0829fcca-cfcf-4720-adc3-57c1a469fc23","main.http.ts","parentId",6,"latest",["D",1788547335992],"http","import { createDemoApp } from \"./shared/create-app.ts\";\n\nconst app = createDemoApp({\n slug: \"lightbox\",\n appName: \"Lightbox\",\n tagline: \"Images only — stills from the AT Proto feed you already follow.\",\n mode: \"images\",\n frontendDir: \"/frontend/lightbox\",\n});\n\nexport default app.fetch;\n","label",[134],"d55f4953-ef9d-4976-b662-9ed29070df59","README.md","5a605bf4-a890-11f1-a866-1607ee4eb77e",18,["D",1788547336978],"# Lightbox\n\nAT Proto image-feed demo for loggedin.fyi. Sister app: [Cratewalk](https://www.val.town/x/alexmcroberts/cratewalk-loggedin).\n\n[Open Lightbox](url:main.http.ts)\n\n👉 Add `COOKIE_SECRET` here: https://www.val.town/x/alexmcroberts/lightbox-loggedin/environment-variables?key=COOKIE_SECRET\n\n👉 Add `PUBLIC_BASE_URL` here: https://www.val.town/x/alexmcroberts/lightbox-loggedin/environment-variables?key=PUBLIC_BASE_URL\n\n👉 Add `LOGGEDIN_ORIGIN` here: https://www.val.town/x/alexmcroberts/lightbox-loggedin/environment-variables?key=LOGGEDIN_ORIGIN\n\n👉 Add `SISTER_APP_URL` here: https://www.val.town/x/alexmcroberts/lightbox-loggedin/environment-variables?key=SISTER_APP_URL\n",[144],"b87c1fbb-244c-4e54-b7de-b8e122089a4a","AGENTS.md","5a6676ec-a890-11f1-b541-1607ee4eb77e",19,["D",1788547337030],"# loggedin.fyi demos\n\nTwo HTTP vals. Do not merge them onto one origin — the product story is “another AT Proto client already used this browser.”\n\n- `lightbox.ts` — images from the signed-in feed, feed picker, film UI\n- `cratewalk.ts` — posts in pixel cardboard boxes on a half-width conveyor\n\nShared OAuth + Worker integration lives in `shared/`. Frontend is React 18.2.0 + Twind.\n\nRequired env: `COOKIE_SECRET` (32+ chars). Optional: `PUBLIC_BASE_URL`, `LOGGEDIN_ORIGIN`, `SISTER_APP_URL`.\n",[151],"a096fbea-bb58-410b-956b-81e0f2203dcb","shared","595e594a-a890-11f1-a44a-1607ee4eb77e",3,["D",1788547335309],"directory",[158],"6355fea0-16bc-4199-b7af-839c789e1726","frontend","5936a9cc-a890-11f1-8091-1607ee4eb77e",2,["D",1788547335057],[165],"pulls","branches",1,"forks","envVars",{"_178":180,"_181":62},"connections",{"_178":62,"_179":62},"count","unfilledCount",4,"emptyCount",{"_42":164,"_31":165,"_29":166,"_135":-5,"_40":41,"_39":167,"_137":58,"_37":326,"_13":62,"_33":162,"_35":-5,"_23":24,"_141":-5,"_203":327,"_26":328},{"_42":321,"_31":304,"_29":298,"_135":166,"_40":41,"_39":322,"_137":58,"_37":323,"_13":62,"_33":162,"_35":-5,"_23":24,"_141":-5,"_203":324,"_26":325},{"_42":313,"_31":314,"_29":315,"_135":298,"_40":41,"_39":316,"_137":58,"_37":317,"_13":62,"_33":34,"_35":318,"_23":24,"_141":-5,"_203":319,"_26":320},{"_42":305,"_31":306,"_29":307,"_135":298,"_40":41,"_39":308,"_137":58,"_37":309,"_13":62,"_33":34,"_35":310,"_23":24,"_141":-5,"_203":311,"_26":312},{"_42":295,"_31":296,"_29":297,"_135":298,"_40":41,"_39":299,"_137":58,"_37":300,"_13":62,"_33":20,"_35":301,"_23":24,"_141":-5,"_203":302,"_26":303},{"_42":291,"_31":158,"_29":257,"_135":166,"_40":41,"_39":180,"_137":58,"_37":292,"_13":62,"_33":162,"_35":-5,"_23":24,"_141":-5,"_203":293,"_26":294},{"_42":287,"_31":32,"_29":30,"_135":257,"_40":41,"_39":14,"_137":24,"_37":288,"_13":62,"_33":34,"_35":36,"_23":24,"_141":-5,"_203":289,"_26":290},{"_42":279,"_31":280,"_29":281,"_135":257,"_40":41,"_39":282,"_137":24,"_37":283,"_13":62,"_33":34,"_35":284,"_23":24,"_141":-5,"_203":285,"_26":286},{"_42":271,"_31":272,"_29":273,"_135":257,"_40":41,"_39":274,"_137":24,"_37":275,"_13":62,"_33":34,"_35":276,"_23":24,"_141":-5,"_203":277,"_26":278},{"_42":263,"_31":264,"_29":265,"_135":257,"_40":41,"_39":266,"_137":24,"_37":267,"_13":62,"_33":34,"_35":268,"_23":24,"_141":-5,"_203":269,"_26":270},{"_42":255,"_31":213,"_29":256,"_135":257,"_40":41,"_39":258,"_137":58,"_37":259,"_13":62,"_33":34,"_35":260,"_23":24,"_141":-5,"_203":261,"_26":262},{"_42":157,"_31":158,"_29":159,"_135":-5,"_40":41,"_39":160,"_137":58,"_37":252,"_13":62,"_33":162,"_35":-5,"_23":24,"_141":-5,"_203":253,"_26":254},{"_42":244,"_31":245,"_29":246,"_135":159,"_40":41,"_39":247,"_137":24,"_37":248,"_13":62,"_33":34,"_35":249,"_23":24,"_141":-5,"_203":250,"_26":251},{"_42":236,"_31":237,"_29":238,"_135":159,"_40":41,"_39":239,"_137":58,"_37":240,"_13":62,"_33":34,"_35":241,"_23":24,"_141":-5,"_203":242,"_26":243},{"_42":228,"_31":229,"_29":230,"_135":159,"_40":41,"_39":231,"_137":24,"_37":232,"_13":62,"_33":34,"_35":233,"_23":24,"_141":-5,"_203":234,"_26":235},{"_42":220,"_31":221,"_29":222,"_135":159,"_40":41,"_39":223,"_137":58,"_37":224,"_13":62,"_33":34,"_35":225,"_23":24,"_141":-5,"_203":226,"_26":227},{"_42":212,"_31":213,"_29":214,"_135":159,"_40":41,"_39":215,"_137":58,"_37":216,"_13":62,"_33":34,"_35":217,"_23":24,"_141":-5,"_203":218,"_26":219},{"_42":150,"_31":151,"_29":152,"_135":-5,"_40":41,"_39":153,"_137":58,"_37":209,"_13":62,"_33":20,"_35":155,"_23":24,"_141":-5,"_203":210,"_26":211},{"_42":143,"_31":144,"_29":145,"_135":-5,"_40":41,"_39":146,"_137":24,"_37":206,"_13":62,"_33":20,"_35":148,"_23":24,"_141":-5,"_203":207,"_26":208},{"_42":133,"_31":134,"_29":56,"_135":-5,"_40":41,"_39":136,"_137":58,"_37":202,"_13":62,"_33":139,"_35":140,"_23":24,"_141":44,"_203":204,"_26":205},["D",1788547335992],"children",[],[134],["D",1788547336978],[],[144],["D",1788547337030],[],[151],"4213f0a1-de65-4cda-b0f8-304dbe6baa61","types.ts","5a79ceb8-a890-11f1-acac-1607ee4eb77e",20,["D",1788547336827],"export type DemoSlug = \"lightbox\" | \"cratewalk\";\n\nexport type FeedMode = \"images\" | \"posts\";\n\nexport type DemoConfig = {\n slug: DemoSlug;\n appName: string;\n tagline: string;\n mode: FeedMode;\n frontendDir: string;\n};\n\nexport type FeedChoice = {\n id: string;\n uri: string;\n name: string;\n kind: \"timeline\" | \"feed\";\n};\n\nexport type FeedImage = {\n url: string;\n thumb: string;\n alt: string;\n};\n\nexport type FeedPost = {\n uri: string;\n cid: string;\n author: {\n did: string;\n handle: string;\n displayName: string;\n avatar?: string;\n };\n text: string;\n createdAt: string;\n images: FeedImage[];\n videoThumb?: string;\n};\n\nexport type EmbedView = {\n $type?: string;\n images?: Array<{ thumb?: string; fullsize?: string; alt?: string }>;\n thumbnail?: string;\n media?: EmbedView;\n};\n",[],[158,213],"1cf46c2a-ccbb-43fb-9ce7-6d740b174bf1","resolve-handle.ts","5a46ba3c-a890-11f1-9138-1607ee4eb77e",16,["D",1788547336778],"const PROFILE =\n \"https://public.api.bsky.app/xrpc/app.bsky.actor.getProfile\";\n\nexport async function handleFromHint(hint: string): Promise {\n const trimmed = hint.trim().replace(/^@/, \"\");\n if (!trimmed) throw new Error(\"Enter a handle or DID\");\n if (!trimmed.startsWith(\"did:\")) return trimmed;\n\n const res = await fetch(`${PROFILE}?actor=${encodeURIComponent(trimmed)}`);\n if (!res.ok) throw new Error(\"Could not resolve that account\");\n const profile = (await res.json()) as { handle?: unknown };\n if (typeof profile.handle !== \"string\" || !profile.handle) {\n throw new Error(\"Could not resolve that account\");\n }\n return profile.handle;\n}\n",[],[158,221],"82737738-88e4-4814-96fe-30fa79090755","oauth.ts","5a28007e-a890-11f1-bd21-1607ee4eb77e",14,["D",1788547336636],"import { createATProtoOAuth } from \"jsr:@tijs/atproto-oauth@2.10.3\";\nimport { SQLiteStorage, sqliteAdapter } from \"jsr:@tijs/atproto-storage@1.3.2\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\n\nconst storage = new SQLiteStorage(sqliteAdapter(sqlite));\nconst cache = new Map>();\n\nexport function cookieSecretHelp(): string {\n try {\n const val = parseVal(import.meta.url);\n return `https://www.val.town/x/${val.username}/${val.name}/environment-variables?key=COOKIE_SECRET`;\n } catch {\n return \"https://www.val.town/settings\";\n }\n}\n\nexport function requireCookieSecret(): string {\n const secret = Deno.env.get(\"COOKIE_SECRET\") ?? \"\";\n if (secret.length < 32) {\n throw new Error(\n `COOKIE_SECRET must be at least 32 characters. Add it here: ${cookieSecretHelp()}`,\n );\n }\n return secret;\n}\n\nexport function publicBaseUrl(request: Request): string {\n return (Deno.env.get(\"PUBLIC_BASE_URL\") ?? new URL(request.url).origin).replace(/\\/$/, \"\");\n}\n\nexport function loggedinOrigin(): string {\n return (Deno.env.get(\"LOGGEDIN_ORIGIN\") ?? \"https://loggedin.fyi\").replace(/\\/$/, \"\");\n}\n\nexport function oauthFor(request: Request, appName: string) {\n const baseUrl = publicBaseUrl(request);\n const key = `${baseUrl}:${appName}`;\n const cached = cache.get(key);\n if (cached) return cached;\n\n const oauth = createATProtoOAuth({\n baseUrl,\n appName,\n cookieSecret: requireCookieSecret(),\n storage,\n sessionTtl: 60 * 60 * 24 * 14,\n });\n cache.set(key, oauth);\n return oauth;\n}\n\nexport function applySessionCookie(response: Response, setCookieHeader?: string): Response {\n if (!setCookieHeader) return response;\n const headers = new Headers(response.headers);\n headers.set(\"Set-Cookie\", setCookieHeader);\n return new Response(response.body, { status: response.status, headers });\n}\n",[],[158,229],"cdea948d-abf1-4aab-9835-49a92a3c26a8","feed.ts","5a51fe74-a890-11f1-ab6d-1607ee4eb77e",17,["D",1788547336905],"import type { EmbedView, FeedChoice, FeedImage, FeedPost } from \"./types.ts\";\n\nconst APPVIEW = \"did:web:api.bsky.app#bsky_appview\";\n\nexport type SessionLike = {\n did: string;\n handle?: string;\n pdsUrl: string;\n makeRequest: (method: string, url: string, options?: RequestInit) => Promise;\n};\n\ntype FeedViewPost = {\n post?: {\n uri?: string;\n cid?: string;\n author?: {\n did?: string;\n handle?: string;\n displayName?: string;\n avatar?: string;\n };\n record?: { text?: string; createdAt?: string };\n embed?: EmbedView;\n };\n};\n\nexport function imagesFromEmbed(embed?: EmbedView): FeedImage[] {\n if (!embed) return [];\n if (embed.$type === \"app.bsky.embed.images#view\" && Array.isArray(embed.images)) {\n return embed.images\n .map((image) => {\n const url = image.fullsize || image.thumb || \"\";\n if (!url) return null;\n return {\n url,\n thumb: image.thumb || url,\n alt: image.alt || \"\",\n };\n })\n .filter((image): image is FeedImage => image !== null);\n }\n if (embed.$type === \"app.bsky.embed.recordWithMedia#view\") {\n return imagesFromEmbed(embed.media);\n }\n return [];\n}\n\nexport function videoThumbFromEmbed(embed?: EmbedView): string | undefined {\n if (!embed) return undefined;\n if (embed.$type === \"app.bsky.embed.video#view\" && typeof embed.thumbnail === \"string\") {\n return embed.thumbnail;\n }\n if (embed.$type === \"app.bsky.embed.recordWithMedia#view\") {\n return videoThumbFromEmbed(embed.media);\n }\n return undefined;\n}\n\nexport function mapFeedPost(row: FeedViewPost): FeedPost | null {\n const post = row.post;\n if (!post?.uri || !post.cid || !post.author?.did || !post.author.handle) return null;\n return {\n uri: post.uri,\n cid: post.cid,\n author: {\n did: post.author.did,\n handle: post.author.handle,\n displayName: post.author.displayName || post.author.handle,\n avatar: post.author.avatar,\n },\n text: typeof post.record?.text === \"string\" ? post.record.text : \"\",\n createdAt: typeof post.record?.createdAt === \"string\" ? post.record.createdAt : \"\",\n images: imagesFromEmbed(post.embed),\n videoThumb: videoThumbFromEmbed(post.embed),\n };\n}\n\nexport async function xrpc(\n session: SessionLike,\n nsid: string,\n params: Record = {},\n): Promise {\n const query = new URLSearchParams();\n for (const [key, value] of Object.entries(params)) {\n if (value) query.set(key, value);\n }\n const url = `${session.pdsUrl}/xrpc/${nsid}${query.size ? `?${query}` : \"\"}`;\n const proxied = await session.makeRequest(\"GET\", url, {\n headers: { \"atproto-proxy\": APPVIEW },\n });\n if (proxied.ok) return (await proxied.json()) as T;\n const retry = await session.makeRequest(\"GET\", url);\n if (!retry.ok) {\n const body = await retry.text();\n throw new Error(body || `XRPC ${nsid} failed (${retry.status})`);\n }\n return (await retry.json()) as T;\n}\n\ntype PreferencesResponse = {\n preferences?: Array<{ $type?: string; items?: Array<{ type?: string; value?: string; pinned?: boolean }> }>;\n};\n\ntype GeneratorsResponse = {\n feeds?: Array<{ uri?: string; displayName?: string }>;\n};\n\ntype SuggestedResponse = {\n feeds?: Array<{ uri?: string; displayName?: string }>;\n};\n\ntype FeedResponse = {\n feed?: FeedViewPost[];\n};\n\nexport async function listFeeds(session: SessionLike): Promise {\n const feeds: FeedChoice[] = [\n { id: \"following\", uri: \"following\", name: \"Following\", kind: \"timeline\" },\n ];\n const seen = new Set([\"following\"]);\n\n try {\n const prefs = await xrpc(session, \"app.bsky.actor.getPreferences\");\n const saved = prefs.preferences?.find((pref) => pref.$type === \"app.bsky.actor.defs#savedFeedsPrefV2\");\n const uris = (saved?.items ?? [])\n .filter((item) => item.type === \"feed\" && typeof item.value === \"string\")\n .map((item) => item.value as string);\n if (uris.length) {\n const named = await listGenerators(session, uris);\n for (const feed of named) {\n if (seen.has(feed.uri)) continue;\n seen.add(feed.uri);\n feeds.push(feed);\n }\n }\n } catch {\n // Saved feeds are optional; Following still works.\n }\n\n try {\n const suggested = await xrpc(session, \"app.bsky.feed.getSuggestedFeeds\", {\n limit: \"12\",\n });\n for (const feed of suggested.feeds ?? []) {\n if (!feed.uri || seen.has(feed.uri)) continue;\n seen.add(feed.uri);\n feeds.push({\n id: feed.uri,\n uri: feed.uri,\n name: feed.displayName || \"Feed\",\n kind: \"feed\",\n });\n }\n } catch {\n // Suggested feeds are optional.\n }\n\n return feeds;\n}\n\nasync function listGenerators(session: SessionLike, uris: string[]): Promise {\n const url = new URL(`${session.pdsUrl}/xrpc/app.bsky.feed.getFeedGenerators`);\n for (const uri of uris) url.searchParams.append(\"feeds\", uri);\n const proxied = await session.makeRequest(\"GET\", url.toString(), {\n headers: { \"atproto-proxy\": APPVIEW },\n });\n const res = proxied.ok ? proxied : await session.makeRequest(\"GET\", url.toString());\n if (!res.ok) return uris.map((uri) => ({ id: uri, uri, name: \"Saved feed\", kind: \"feed\" as const }));\n const body = (await res.json()) as GeneratorsResponse;\n const byUri = new Map((body.feeds ?? []).map((feed) => [feed.uri, feed.displayName]));\n return uris.map((uri) => ({\n id: uri,\n uri,\n name: byUri.get(uri) || \"Saved feed\",\n kind: \"feed\",\n }));\n}\n\nexport async function loadFeed(session: SessionLike, feedId: string): Promise {\n const data = feedId === \"following\" || !feedId\n ? await xrpc(session, \"app.bsky.feed.getTimeline\", { limit: \"50\" })\n : await xrpc(session, \"app.bsky.feed.getFeed\", { feed: feedId, limit: \"50\" });\n return (data.feed ?? []).map(mapFeedPost).filter((post): post is FeedPost => post !== null);\n}\n",[],[158,237],"5d782555-2e14-4555-a35d-aa408c47c68f","create-app.ts","5a34587e-a890-11f1-b541-1607ee4eb77e",15,["D",1788547336662],"import { Hono } from \"npm:hono@4.11.9\";\nimport { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { applySessionCookie, loggedinOrigin, oauthFor, publicBaseUrl, requireCookieSecret } from \"./oauth.ts\";\nimport { handleFromHint } from \"./resolve-handle.ts\";\nimport { listFeeds, loadFeed } from \"./feed.ts\";\nimport type { DemoConfig } from \"./types.ts\";\n\nexport function createDemoApp(config: DemoConfig) {\n const app = new Hono();\n app.onError((err) => Promise.reject(err));\n app.use(async (c, next) => {\n try {\n requireCookieSecret();\n } catch (err) {\n return c.text(err instanceof Error ? err.message : \"COOKIE_SECRET is missing\", 500);\n }\n return next();\n });\n\n app.get(\"/oauth-client-metadata.json\", (c) => oauthFor(c.req.raw, config.appName).handleClientMetadata());\n app.get(\"/oauth/callback\", (c) => oauthFor(c.req.raw, config.appName).handleCallback(c.req.raw));\n app.post(\"/api/auth/logout\", (c) => oauthFor(c.req.raw, config.appName).handleLogout(c.req.raw));\n\n app.get(\"/login\", async (c) => {\n const hint = (c.req.query(\"handle\") ?? \"\").trim();\n if (!hint) return c.text(\"Enter a Bluesky handle or DID\", 400);\n try {\n const handle = await handleFromHint(hint);\n const url = new URL(c.req.url);\n url.searchParams.set(\"handle\", handle);\n return oauthFor(c.req.raw, config.appName).handleLogin(new Request(url, c.req.raw));\n } catch (err) {\n return c.text(err instanceof Error ? err.message : \"Could not start login\", 400);\n }\n });\n\n app.get(\"/api/config\", (c) =>\n c.json({\n slug: config.slug,\n appName: config.appName,\n tagline: config.tagline,\n mode: config.mode,\n loggedinOrigin: loggedinOrigin(),\n sisterAppUrl: Deno.env.get(\"SISTER_APP_URL\") ?? \"\",\n origin: publicBaseUrl(c.req.raw),\n }),\n );\n\n app.get(\"/api/auth/session\", async (c) => {\n const oauth = oauthFor(c.req.raw, config.appName);\n const { session, setCookieHeader } = await oauth.getSessionFromRequest(c.req.raw);\n if (!session) return c.json({ authenticated: false });\n return applySessionCookie(\n c.json({\n authenticated: true,\n did: session.did,\n handle: session.handle ?? session.did,\n }),\n setCookieHeader,\n );\n });\n\n app.get(\"/api/feeds\", async (c) => {\n const oauth = oauthFor(c.req.raw, config.appName);\n const { session, setCookieHeader, error } = await oauth.getSessionFromRequest(c.req.raw);\n if (!session) return c.json({ error: error?.message || \"Not authenticated\" }, 401);\n try {\n const feeds = await listFeeds(session);\n return applySessionCookie(c.json({ feeds }), setCookieHeader);\n } catch (err) {\n return applySessionCookie(\n c.json({ error: err instanceof Error ? err.message : \"Could not load feeds\" }, 502),\n setCookieHeader,\n );\n }\n });\n\n app.get(\"/api/feed\", async (c) => {\n const oauth = oauthFor(c.req.raw, config.appName);\n const { session, setCookieHeader, error } = await oauth.getSessionFromRequest(c.req.raw);\n if (!session) return c.json({ error: error?.message || \"Not authenticated\" }, 401);\n const feedId = c.req.query(\"feed\") || \"following\";\n try {\n const posts = await loadFeed(session, feedId);\n if (config.mode === \"images\") {\n const images = posts.flatMap((post) =>\n post.images.map((image) => ({\n ...image,\n postUri: post.uri,\n author: post.author,\n text: post.text,\n })),\n );\n return applySessionCookie(c.json({ images }), setCookieHeader);\n }\n return applySessionCookie(c.json({ posts }), setCookieHeader);\n } catch (err) {\n return applySessionCookie(\n c.json({ error: err instanceof Error ? err.message : \"Could not load feed\" }, 502),\n setCookieHeader,\n );\n }\n });\n\n app.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n app.get(\"/\", () => serveFile(`${config.frontendDir}/index.html`));\n app.get(\"/frontend/**/*\", (c) => serveFile(c.req.path));\n\n return app;\n}\n",[],[158,245],["D",1788547335309],[194,195,196,197,198],[158],"518391c5-c201-4d1b-ae08-4887e7283eef","59e69170-a890-11f1-8610-1607ee4eb77e","597da188-a890-11f1-8438-1607ee4eb77e",8,["D",1788547336127],"export type DemoSlug = \"lightbox\" | \"cratewalk\";\n\nexport type AppConfig = {\n slug: DemoSlug;\n appName: string;\n tagline: string;\n mode: \"images\" | \"posts\";\n loggedinOrigin: string;\n sisterAppUrl: string;\n origin: string;\n};\n\nexport type Session = {\n authenticated: boolean;\n did?: string;\n handle?: string;\n};\n\nexport type FeedChoice = {\n id: string;\n uri: string;\n name: string;\n kind: \"timeline\" | \"feed\";\n};\n\nexport type FeedImage = {\n url: string;\n thumb: string;\n alt: string;\n postUri?: string;\n text?: string;\n author?: {\n did: string;\n handle: string;\n displayName: string;\n avatar?: string;\n };\n};\n\nexport type FeedPost = {\n uri: string;\n cid: string;\n author: {\n did: string;\n handle: string;\n displayName: string;\n avatar?: string;\n };\n text: string;\n createdAt: string;\n images: FeedImage[];\n videoThumb?: string;\n};\n\nexport type HintedAccount = {\n did: string;\n origins?: string[];\n handle?: string;\n displayName?: string;\n};\n",[],[165,158,213],"6d3a7d3d-d1c6-4858-8aff-7c167f2695cd","loggedin.ts","59dae5e6-a890-11f1-bd21-1607ee4eb77e",7,["D",1788547336083],"import type { HintedAccount } from \"./types.ts\";\n\ntype LoggedinApi = {\n renderAccountList: (\n el: HTMLElement,\n accounts: HintedAccount[],\n options: {\n originLabels?: Record;\n onPick?: (did: string, handle: string) => void;\n },\n ) => Promise;\n listenToEmbed: (\n iframe: HTMLIFrameElement,\n handlers: {\n onReady?: () => void;\n onUnavailable?: () => void;\n onAccounts?: (accounts: HintedAccount[], origin: string) => void;\n onPicked?: (did: string) => void;\n },\n ) => void;\n listenForPicked: (loggedinOrigin: string, onPicked: (did: string) => void) => void;\n heartbeat: (iframe: HTMLIFrameElement, did: string, targetOrigin: string) => void;\n logout: (iframe: HTMLIFrameElement, did: string, targetOrigin: string) => void;\n enrollUrl: (loggedinOrigin: string, did: string, returnUrl: string) => string;\n};\n\ndeclare global {\n interface Window {\n Loggedin?: LoggedinApi;\n }\n}\n\nexport async function loadLoggedinRenderer(loggedinOrigin: string): Promise {\n if (window.Loggedin) return window.Loggedin;\n await new Promise((resolve, reject) => {\n const script = document.createElement(\"script\");\n script.src = `${loggedinOrigin}/example-renderer.js`;\n script.onload = () => resolve();\n script.onerror = () => reject(new Error(\"Could not load loggedin.fyi renderer\"));\n document.head.appendChild(script);\n });\n if (!window.Loggedin) throw new Error(\"loggedin.fyi renderer missing\");\n return window.Loggedin;\n}\n\nexport async function loadOriginLabels(loggedinOrigin: string): Promise> {\n try {\n const res = await fetch(`${loggedinOrigin}/allowlist`);\n const data = (await res.json()) as { origins?: Array<{ origin: string; name: string }> };\n const labels: Record = {};\n for (const row of data.origins ?? []) labels[row.origin] = row.name;\n return labels;\n } catch {\n return {};\n }\n}\n",[],[165,158,264],"6131f493-3fda-438b-8143-2488747bb0ea","api.ts","5a0a2b9e-a890-11f1-b4d6-1607ee4eb77e",11,["D",1788547336070],"import type { AppConfig, FeedChoice, FeedImage, FeedPost, Session } from \"./types.ts\";\n\nexport async function loadConfig(): Promise {\n const res = await fetch(\"/api/config\", { credentials: \"include\" });\n if (!res.ok) throw new Error(\"Could not load app config\");\n return await res.json();\n}\n\nexport async function loadSession(): Promise {\n const res = await fetch(\"/api/auth/session\", { credentials: \"include\" });\n if (!res.ok) return { authenticated: false };\n return await res.json();\n}\n\nexport async function logout(): Promise {\n await fetch(\"/api/auth/logout\", { method: \"POST\", credentials: \"include\" });\n}\n\nexport function loginUrl(handle: string): string {\n return `/login?handle=${encodeURIComponent(handle.trim())}`;\n}\n\nexport async function loadFeeds(): Promise {\n const res = await fetch(\"/api/feeds\", { credentials: \"include\" });\n const data = await res.json();\n if (!res.ok) throw new Error(data.error || \"Could not load feeds\");\n return data.feeds ?? [];\n}\n\nexport async function loadImages(feed: string): Promise {\n const res = await fetch(`/api/feed?feed=${encodeURIComponent(feed)}`, { credentials: \"include\" });\n const data = await res.json();\n if (!res.ok) throw new Error(data.error || \"Could not load images\");\n return data.images ?? [];\n}\n\nexport async function loadPosts(feed: string): Promise {\n const res = await fetch(`/api/feed?feed=${encodeURIComponent(feed)}`, { credentials: \"include\" });\n const data = await res.json();\n if (!res.ok) throw new Error(data.error || \"Could not load posts\");\n return data.posts ?? [];\n}\n",[],[165,158,272],"1c82895a-99ee-460f-80c6-9bca16b35d51","SessionBar.tsx","59ef85c8-a890-11f1-a866-1607ee4eb77e",9,["D",1788547336271],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useEffect, useRef, useState } from \"https://esm.sh/react@18.2.0\";\nimport type { AppConfig, FeedChoice, Session } from \"./types.ts\";\nimport { logout } from \"./api.ts\";\nimport { loadLoggedinRenderer } from \"./loggedin.ts\";\n\ntype Props = {\n config: AppConfig;\n session: Session;\n feeds: FeedChoice[];\n feedId: string;\n onFeed: (id: string) => void;\n};\n\nexport function SessionBar({ config, session, feeds, feedId, onFeed }: Props) {\n const iframeRef = useRef(null);\n const [hint, setHint] = useState(\"Saving this login to loggedin.fyi…\");\n const crate = config.slug === \"cratewalk\";\n\n useEffect(() => {\n const iframe = iframeRef.current;\n const did = session.did;\n if (!iframe || !did) return;\n\n let cancelled = false;\n (async () => {\n try {\n const Loggedin = await loadLoggedinRenderer(config.loggedinOrigin);\n Loggedin.listenToEmbed(iframe, {\n onReady: () => {\n Loggedin.heartbeat(iframe, did, config.loggedinOrigin);\n if (!cancelled) setHint(\"This device can now offer this account to the other demo.\");\n },\n onUnavailable: () => {\n if (!cancelled) {\n setHint(\"Safari / Firefox: save this account with a first-party hop.\");\n }\n },\n onAccounts: () => {\n if (!cancelled) setHint(\"loggedin.fyi has this DID for this browser.\");\n },\n });\n } catch {\n if (!cancelled) setHint(\"Could not reach loggedin.fyi. The local login still works.\");\n }\n })();\n\n return () => {\n cancelled = true;\n };\n }, [config.loggedinOrigin, session.did]);\n\n async function onLogout() {\n const iframe = iframeRef.current;\n if (iframe && session.did && window.Loggedin) {\n window.Loggedin.logout(iframe, session.did, config.loggedinOrigin);\n }\n await logout();\n location.href = \"/\";\n }\n\n return (\n \n

\n \n {crate ? \"Demo B · Cratewalk\" : \"Demo A · Lightbox\"}\n

\n {config.appName}\n

\n \n Feed\n onFeed(event.target.value)}\n className={\n crate\n ? \"ml-2 border-4 border-black bg-[#fff6df] px-2 py-1 font-mono text-xs\"\n : \"ml-2 rounded-md border border-[#4a4336] bg-[#0e0c0a] px-2 py-1 text-sm text-[#f6efe2]\"\n }\n >\n {feeds.map((feed) => (\n \n ))}\n \n \n

\n {session.handle}\n

\n \n Log out\n \n {config.sisterAppUrl ? (\n \n {crate ? \"Open Lightbox\" : \"Open Cratewalk\"}\n \n ) : null}\n

\n {hint}\n

\n \n {session.did ? (\n \n Save on this device\n \n ) : null}\n \n view source\n \n \n );\n}\n",[],[165,158,280],"658a1b5a-ec27-4254-b2eb-5ae1cc818039",["D",1788547336148],[],[165,158,32],"0fb7dbb2-394d-4c49-95f4-8820e16a093e",["D",1788547335524],[188,189,190,191,192],[165,158],"d65165da-6c0b-4518-a9b0-70e1d05e6ba7","index.html","5a179464-a890-11f1-8610-1607ee4eb77e","59a099b8-a890-11f1-9674-1607ee4eb77e",13,["D",1788547336524],"\n\n \n \n \n Lightbox — loggedin.fyi demo A\n \n \n \n \n \n

\n \n \n\n",[],[165,304,296],"lightbox","a150eca2-f3c2-4a27-9aba-77ce7720a976","app.tsx","5a0ff8ee-a890-11f1-9674-1607ee4eb77e",12,["D",1788547336447],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useEffect, useState } from \"https://esm.sh/react@18.2.0\";\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\nimport { loadConfig, loadFeeds, loadImages, loadSession } from \"../shared/api.ts\";\nimport { LoginScreen } from \"../shared/LoginScreen.tsx\";\nimport { SessionBar } from \"../shared/SessionBar.tsx\";\nimport type { AppConfig, FeedChoice, FeedImage, Session } from \"../shared/types.ts\";\nimport { Gallery } from \"./Gallery.tsx\";\n\nfunction App() {\n const [config, setConfig] = useState(null);\n const [session, setSession] = useState(null);\n const [feeds, setFeeds] = useState([]);\n const [feedId, setFeedId] = useState(\"following\");\n const [images, setImages] = useState([]);\n const [loading, setLoading] = useState(false);\n const [error, setError] = useState(\"\");\n\n useEffect(() => {\n Promise.all([loadConfig(), loadSession()])\n .then(([nextConfig, nextSession]) => {\n setConfig(nextConfig);\n setSession(nextSession);\n })\n .catch((err) => setError(err instanceof Error ? err.message : \"Failed to start\"));\n }, []);\n\n useEffect(() => {\n if (!session?.authenticated) return;\n loadFeeds()\n .then((next) => {\n setFeeds(next);\n if (!next.some((feed) => feed.id === feedId) && next[0]) setFeedId(next[0].id);\n })\n .catch((err) => setError(err instanceof Error ? err.message : \"Could not list feeds\"));\n }, [session?.authenticated]);\n\n useEffect(() => {\n if (!session?.authenticated) return;\n setLoading(true);\n setError(\"\");\n loadImages(feedId)\n .then(setImages)\n .catch((err) => setError(err instanceof Error ? err.message : \"Could not load images\"))\n .finally(() => setLoading(false));\n }, [session?.authenticated, feedId]);\n\n if (!config || !session) {\n return

{error || \"Loading Lightbox…\"}

;\n }\n if (!session.authenticated) return ;\n\n return (\n

\n \n \n

\n );\n}\n\ncreateRoot(document.getElementById(\"root\")!).render();\n",[],[165,304,306],"c861427e-9fa9-46b9-9984-5989b8811904","Gallery.tsx","59fe1b06-a890-11f1-b541-1607ee4eb77e",10,["D",1788547336361],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState } from \"https://esm.sh/react@18.2.0\";\nimport type { FeedImage } from \"../shared/types.ts\";\n\ntype Props = {\n images: FeedImage[];\n loading: boolean;\n error: string;\n};\n\nexport function Gallery({ images, loading, error }: Props) {\n const [open, setOpen] = useState(null);\n\n if (loading) {\n return

Pulling stills from this feed…

;\n }\n if (error) {\n return

{error}

;\n }\n if (!images.length) {\n return

No images in this feed right now.

;\n }\n\n return (\n

\n {images.map((image, index) => (\n setOpen(image)}\n className=\"block w-full overflow-hidden rounded-sm border border-[#2a241c] bg-[#11100d] text-left\"\n >\n

\n \n @{image.author?.handle ?? \"unknown\"}\n \n \n ))}\n

\n {open ? (\n setOpen(null)}\n >\n

{open.alt — \n @{open.author?.handle}\n {open.text ? ` — ${open.text}` : \"\"}\n

\n ) : null}\n

\n );\n}\n",[],[165,304,314],"5efa9cf6-e63e-45c2-bfbe-f155a0aabb22",5,["D",1788547335732],[184,185,186],[165,304],["D",1788547335057],[183,187],[165],["D",1788546938576],["D",1789543856531],{"_99":98,"_106":102},{"_99":98,"_100":-5,"_101":102,"_18":54,"_103":104,"_105":24},{"_13":88,"_31":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"ctx",{"_81":-5,"_125":367,"_368":369,"_370":371,"_372":24,"_373":24,"_374":24,"_375":58,"_376":-5,"_377":-7,"_378":-7,"_379":62,"_380":24,"_381":24,"_382":-5,"_383":24,"_384":24,"_385":24,"_386":-5},"ENV",{"_338":339,"_340":341,"_342":89,"_343":344,"_345":346,"_347":348,"_349":350,"_351":352,"_353":354,"_355":356,"_357":358,"_359":360,"_361":362,"_363":364,"_365":366},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v22