[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_168":169,"_170":171},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":58,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",6,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","host.ts","latestPath","fileId","992d9f30-a9d1-11f1-ad2c-1607ee4eb77e","name","fileType","http","content","import { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\nconst UPSTREAM = \"https://aminaplayer.ir\";\nconst PUSH_SERVICE = \"https://aminfarhang--d0766fe8a92d11f190711607ee4eb77e.web.val.run\";\nconst PROFILE_FIELDS = new Set([\n \"displayName\",\"bio\",\"favoriteGenreIds\",\"favoriteVibeIds\",\"fontScale\",\"locale\",\n \"publicProfile\",\"publicAvatar\",\"publicHeader\",\"publicBio\",\"publicGenresVibes\",\n \"publicLikedSongs\",\"publicNowPlaying\",\"publicSelectedPlaylists\",\n \"selectedPublicPlaylistIds\",\"floatingChatEnabled\",\n]);\nconst ANALYTICS_EVENTS = new Set([\"visit\",\"presence\",\"play\",\"progress\",\"like\",\"post_like\"]);\nconst PLAYLIST_ACTIONS = new Set([\"create\",\"delete\",\"rename\",\"add\",\"add-many\",\"remove\",\"remove-many\",\"reorder\"]);\nconst HARD_DENY = [\"/api/admin\",\"/api/auth/admin-login\",\"/api/upload\",\"/api/storage\",\"/api/sync\",\"/api/import\"];\nconst ACCOUNT_PREFIXES = [\n \"/api/profile\",\"/api/playlists\",\"/api/interactions\",\"/api/comments\",\"/api/post-comments\",\n \"/api/chat\",\"/api/jam\",\"/api/auth\",\"/api/google\",\"/api/contact\",\"/api/analytics\",\"/api/support\",\n];\nconst READ_ONLY = [\n /^\\/api\\/catalog\\/?$/,\n /^\\/api\\/media\\/\\d+\\/?$/,\n /^\\/api\\/drive\\//,\n /^\\/api\\/player-assets\\//,\n /^\\/api\\/embed\\//,\n];\n\nlet canonicalCache: { ids: Set; expiresAt: number } | null = null;\n\nfunction mime(path: string) {\n const ext = path.toLowerCase().split(\".\").pop() || \"\";\n return ({\n html:\"text/html; charset=utf-8\", js:\"text/javascript; charset=utf-8\",\n css:\"text/css; charset=utf-8\", json:\"application/json; charset=utf-8\",\n webmanifest:\"application/manifest+json; charset=utf-8\", svg:\"image/svg+xml\",\n png:\"image/png\", webp:\"image/webp\", jpg:\"image/jpeg\", jpeg:\"image/jpeg\",\n gif:\"image/gif\", ico:\"image/x-icon\", mp4:\"video/mp4\", webm:\"video/webm\",\n woff:\"font/woff\", woff2:\"font/woff2\", ttf:\"font/ttf\",\n } as Record)[ext] || \"application/octet-stream\";\n}\n\nfunction positiveId(value: unknown) {\n const id = Number(value);\n return Number.isInteger(id) && id > 0 ? id : null;\n}\nfunction positiveIds(value: unknown, max = 200) {\n return Array.isArray(value)\n ? [...new Set(value.map(positiveId).filter(Boolean))].slice(0,max) as number[]\n : [];\n}\nfunction assertNoLocal(value: unknown) {\n if (typeof value === \"string\" && (/^local:/i.test(value.trim()) || /^blob:/i.test(value.trim()))) throw new Error(\"local_reference\");\n if (Array.isArray(value)) for (const item of value) assertNoLocal(item);\n else if (value && typeof value === \"object\") for (const child of Object.values(value as Record)) assertNoLocal(child);\n}\nasync function canonicalIds() {\n if (canonicalCache && Date.now() < canonicalCache.expiresAt) return canonicalCache.ids;\n const r = await fetch(`${UPSTREAM}/api/catalog`, { headers:{accept:\"application/json\"}, cache:\"no-store\" });\n if (!r.ok) throw new Error(\"catalog_unavailable\");\n const payload = await r.json();\n const ids = new Set((Array.isArray(payload?.media) ? payload.media : []).map((x:any)=>Number(x?.id)).filter((x:number)=>Number.isInteger(x)&&x>0));\n canonicalCache = { ids, expiresAt: Date.now()+60000 };\n return ids;\n}\nasync function projectAccountJson(method:string, path:string, body:any) {\n assertNoLocal(body);\n if (path === \"/api/profile\" && method === \"PATCH\") {\n const out:Record = {};\n for (const [k,v] of Object.entries(body || {})) if (PROFILE_FIELDS.has(k)) out[k]=v;\n if (\"favoriteGenreIds\" in out) out.favoriteGenreIds = positiveIds(out.favoriteGenreIds,30);\n if (\"favoriteVibeIds\" in out) out.favoriteVibeIds = positiveIds(out.favoriteVibeIds,30);\n if (\"selectedPublicPlaylistIds\" in out) out.selectedPublicPlaylistIds = positiveIds(out.selectedPublicPlaylistIds,100);\n if (\"displayName\" in out) out.displayName = String(out.displayName||\"\").trim().slice(0,120);\n if (\"bio\" in out) out.bio = String(out.bio||\"\").trim().slice(0,1000);\n if (\"locale\" in out) out.locale = out.locale === \"en\" ? \"en\" : \"fa\";\n if (\"fontScale\" in out) out.fontScale = Math.max(.9,Math.min(1.35,Number(out.fontScale)||1));\n return out;\n }\n if (path === \"/api/analytics\" && method === \"POST\") {\n const event = String(body?.event||\"\").trim().slice(0,40);\n if (!ANALYTICS_EVENTS.has(event)) throw new Error(\"analytics_denied\");\n if ([\"play\",\"progress\",\"like\"].includes(event)) {\n const ids = await canonicalIds();\n const mediaId = positiveId(body?.mediaId);\n if (!mediaId || !ids.has(mediaId)) throw new Error(\"canonical_required\");\n const out:any = { event, mediaId };\n if (event === \"progress\") out.positionSeconds = Math.max(0,Math.min(86400,Math.round(Number(body?.positionSeconds)||0)));\n return out;\n }\n if (event === \"post_like\") {\n const postId = positiveId(body?.postId); if (!postId) throw new Error(\"post_required\");\n return {event,postId};\n }\n if (event === \"presence\") {\n const activeSeconds=Math.max(0,Math.min(60,Math.round(Number(body?.activeSeconds)||0)));\n return {event,activeSeconds,listeningSeconds:Math.max(0,Math.min(activeSeconds,Math.round(Number(body?.listeningSeconds)||0)))};\n }\n return {event};\n }\n if (path === \"/api/playlists\" && method === \"POST\") {\n const action=String(body?.action||\"\").trim().slice(0,30);\n if (!PLAYLIST_ACTIONS.has(action)) throw new Error(\"playlist_denied\");\n const out:any={action};\n if ([\"create\",\"rename\"].includes(action)) {\n const name=String(body?.name||\"\").trim().slice(0,120); if(!name) throw new Error(\"name_required\"); out.name=name;\n }\n if (action!==\"create\") { const playlistId=positiveId(body?.playlistId); if(!playlistId) throw new Error(\"playlist_required\"); out.playlistId=playlistId; }\n const ids=await canonicalIds();\n if (action===\"create\" && body?.mediaId!==undefined) { const id=positiveId(body.mediaId); if(!id||!ids.has(id)) throw new Error(\"canonical_required\"); out.mediaId=id; }\n if ([\"add\",\"remove\"].includes(action)) { const id=positiveId(body?.mediaId); if(!id||!ids.has(id)) throw new Error(\"canonical_required\"); out.mediaId=id; }\n if ([\"add-many\",\"remove-many\",\"reorder\"].includes(action)) out.mediaIds=positiveIds(body?.mediaIds).filter((id)=>ids.has(id));\n return out;\n }\n return body;\n}\n\nfunction safeRequestHeaders(req:Request) {\n const h=new Headers();\n for (const key of [\"accept\",\"accept-language\",\"content-type\",\"range\",\"if-none-match\",\"if-modified-since\",\"cookie\",\"user-agent\"]) {\n const v=req.headers.get(key); if(v) h.set(key,v);\n }\n h.set(\"x-amina-hybrid-host\",\"1\");\n return h;\n}\n\nasync function proxy(req:Request, target:string, extra:Record={}) {\n const headers=safeRequestHeaders(req);\n for(const [k,v] of Object.entries(extra)) headers.set(k,v);\n let body:BodyInit|undefined;\n if(![\"GET\",\"HEAD\"].includes(req.method)) body=await req.arrayBuffer();\n const upstream=await fetch(target,{method:req.method,headers,body,redirect:\"manual\",cache:\"no-store\"});\n const outHeaders=new Headers(upstream.headers);\n outHeaders.delete(\"content-length\");\n outHeaders.set(\"x-amina-hybrid-host\",\"1\");\n const loc=outHeaders.get(\"location\");\n if(loc?.startsWith(UPSTREAM)) {\n const u=new URL(loc); outHeaders.set(\"location\",u.pathname+u.search+u.hash);\n }\n return new Response(upstream.body,{status:upstream.status,headers:outHeaders});\n}\n\nasync function serveLocal(name:string) {\n try {\n const stored=await blob.get(`site:${name}`);\n const headers=new Headers(stored.headers);\n headers.set(\"content-type\",mime(name));\n headers.set(\"x-amina-hybrid-host\",\"1\");\n if(name===\"sw.js\" || name.endsWith(\".webmanifest\") || name.endsWith(\".html\")) headers.set(\"cache-control\",\"no-cache\");\n else headers.set(\"cache-control\",\"public, max-age=31536000, immutable\");\n return new Response(stored.body,{status:200,headers});\n } catch { return null; }\n}\n\nfunction isAccountPath(path:string) {\n return ACCOUNT_PREFIXES.some((prefix)=>path===prefix || path.startsWith(prefix+\"/\"))\n || /^\\/api\\/media\\/\\d+\\/(history|like|comments)(?:\\/|$)/.test(path);\n}\n\nexport default async function(req:Request):Promise {\n const url=new URL(req.url);\n const path=url.pathname;\n if(path===\"/team-access\" || path.startsWith(\"/admin\")) return new Response(\"Not Found\",{status:404});\n if(HARD_DENY.some((prefix)=>path===prefix||path.startsWith(prefix+\"/\"))) return Response.json({error:\"forbidden\"},{status:403});\n\n if(path===\"/api/hybrid/health\") {\n const manifest=(await blob.getJSON(\"site:manifest\")) || {};\n return Response.json({ok:true,mode:\"hybrid-static\",...manifest},{headers:{\"cache-control\":\"no-store\"}});\n }\n\n if(path===\"/api/hybrid/push/public-key\" || path===\"/api/hybrid/push/subscription\") {\n const token=Deno.env.get(\"AMINA_PUSH_SERVICE_TOKEN\") || \"\";\n if(!token) return Response.json({error:\"push_unavailable\"},{status:503});\n const pushPath=path.endsWith(\"/public-key\") ? \"/public-key\" : \"/subscription\";\n return proxy(req,`${PUSH_SERVICE}${pushPath}`,{authorization:`Bearer ${token}`});\n }\n\n if(path.startsWith(\"/api/\")) {\n const method=req.method.toUpperCase();\n const readOnly=READ_ONLY.some((pattern)=>pattern.test(path));\n if(readOnly && ![\"GET\",\"HEAD\"].includes(method)) return Response.json({error:\"read_only\"},{status:403});\n if(!readOnly && !isAccountPath(path)) return Response.json({error:\"not_allowlisted\"},{status:403});\n\n if([\"POST\",\"PATCH\",\"PUT\"].includes(method) && (path===\"/api/profile\" || path===\"/api/analytics\" || path===\"/api/playlists\")) {\n try {\n const original=await req.json();\n const projected=await projectAccountJson(method,path,original);\n const headers=safeRequestHeaders(req);\n headers.set(\"content-type\",\"application/json; charset=utf-8\");\n const upstream=await fetch(`${UPSTREAM}${path}${url.search}`,{method,headers,body:JSON.stringify(projected),redirect:\"manual\",cache:\"no-store\"});\n const outHeaders=new Headers(upstream.headers); outHeaders.delete(\"content-length\"); outHeaders.set(\"x-amina-hybrid-host\",\"1\");\n return new Response(upstream.body,{status:upstream.status,headers:outHeaders});\n } catch {\n return Response.json({error:\"account_payload_denied\"},{status:400});\n }\n }\n return proxy(req,`${UPSTREAM}${path}${url.search}`);\n }\n\n if(path===\"/\" || path===\"/player\") {\n const local=await serveLocal(path===\"/\" ? \"index.html\" : \"player.html\");\n if(local) return local;\n }\n\n const staticName=decodeURIComponent(path.replace(/^\\//,\"\"));\n if(staticName) {\n const local=await serveLocal(staticName);\n if(local) return local;\n }\n\n if(path.startsWith(\"/assets/\") || path===\"/favicon.ico\") return proxy(req,`${UPSTREAM}${path}${url.search}`);\n if(path===\"/sign-in\" || path.startsWith(\"/public/\") || path.startsWith(\"/profile/\")) return proxy(req,`${UPSTREAM}${path}${url.search}`);\n return new Response(\"Not Found\",{status:404});\n}\n","import { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\nconst UPSTREAM = \"https://aminaplayer.ir\";\nconst PUSH_SERVICE = \"https://aminfarhang--d0766fe8a92d11f190711607ee4eb77e.web.val.run\";\nconst PROFILE_FIELDS = new Set([\n \"displayName\",\"bio\",\"favoriteGenreIds\",\"favoriteVibeIds\",\"fontScale\",\"locale\",\n \"publicProfile\",\"publicAvatar\",\"publicHeader\",\"publicBio\",\"publicGenresVibes\",\n \"publicLikedSongs\",\"publicNowPlaying\",\"publicSelectedPlaylists\",\n \"selectedPublicPlaylistIds\",\"floatingChatEnabled\",\n]);\nconst ANALYTICS_EVENTS = new Set([\"visit\",\"presence\",\"play\",\"progress\",\"like\",\"post_like\"]);\nconst PLAYLIST_ACTIONS = new Set([\"create\",\"delete\",\"rename\",\"add\",\"add-many\",\"remove\",\"remove-many\",\"reorder\"]);\nconst HARD_DENY = [\"/api/admin\",\"/api/auth/admin-login\",\"/api/upload\",\"/api/storage\",\"/api/sync\",\"/api/import\"];\nconst ACCOUNT_PREFIXES = [\n \"/api/profile\",\"/api/playlists\",\"/api/interactions\",\"/api/comments\",\"/api/post-comments\",\n \"/api/chat\",\"/api/jam\",\"/api/auth\",\"/api/google\",\"/api/contact\",\"/api/analytics\",\"/api/support\",\n];\nconst READ_ONLY = [\n /^\\/api\\/catalog\\/?$/,\n /^\\/api\\/media\\/\\d+\\/?$/,\n /^\\/api\\/drive\\//,\n /^\\/api\\/player-assets\\//,\n /^\\/api\\/embed\\//,\n];\n\nlet canonicalCache: { ids: Set; expiresAt: number } | null = null;\n\nfunction mime(path: string) {\n const ext = path.toLowerCase().split(\".\").pop() || \"\";\n return ({\n html:\"text/html; charset=utf-8\", js:\"text/javascript; charset=utf-8\",\n css:\"text/css; charset=utf-8\", json:\"application/json; charset=utf-8\",\n webmanifest:\"application/manifest+json; charset=utf-8\", svg:\"image/svg+xml\",\n png:\"image/png\", webp:\"image/webp\", jpg:\"image/jpeg\", jpeg:\"image/jpeg\",\n gif:\"image/gif\", ico:\"image/x-icon\", mp4:\"video/mp4\", webm:\"video/webm\",\n woff:\"font/woff\", woff2:\"font/woff2\", ttf:\"font/ttf\",\n } as Record)[ext] || \"application/octet-stream\";\n}\n\nfunction positiveId(value: unknown) {\n const id = Number(value);\n return Number.isInteger(id) && id > 0 ? id : null;\n}\nfunction positiveIds(value: unknown, max = 200) {\n return Array.isArray(value)\n ? [...new Set(value.map(positiveId).filter(Boolean))].slice(0,max) as number[]\n : [];\n}\nfunction assertNoLocal(value: unknown) {\n if (typeof value === \"string\" && (/^local:/i.test(value.trim()) || /^blob:/i.test(value.trim()))) throw new Error(\"local_reference\");\n if (Array.isArray(value)) for (const item of value) assertNoLocal(item);\n else if (value && typeof value === \"object\") for (const child of Object.values(value as Record)) assertNoLocal(child);\n}\nasync function canonicalIds() {\n if (canonicalCache && Date.now() < canonicalCache.expiresAt) return canonicalCache.ids;\n const r = await fetch(`${UPSTREAM}/api/catalog`, { headers:{accept:\"application/json\"}, cache:\"no-store\" });\n if (!r.ok) throw new Error(\"catalog_unavailable\");\n const payload = await r.json();\n const ids = new Set((Array.isArray(payload?.media) ? payload.media : []).map((x:any)=>Number(x?.id)).filter((x:number)=>Number.isInteger(x)&&x>0));\n canonicalCache = { ids, expiresAt: Date.now()+60000 };\n return ids;\n}\nasync function projectAccountJson(method:string, path:string, body:any) {\n assertNoLocal(body);\n if (path === \"/api/profile\" && method === \"PATCH\") {\n const out:Record = {};\n for (const [k,v] of Object.entries(body || {})) if (PROFILE_FIELDS.has(k)) out[k]=v;\n if (\"favoriteGenreIds\" in out) out.favoriteGenreIds = positiveIds(out.favoriteGenreIds,30);\n if (\"favoriteVibeIds\" in out) out.favoriteVibeIds = positiveIds(out.favoriteVibeIds,30);\n if (\"selectedPublicPlaylistIds\" in out) out.selectedPublicPlaylistIds = positiveIds(out.selectedPublicPlaylistIds,100);\n if (\"displayName\" in out) out.displayName = String(out.displayName||\"\").trim().slice(0,120);\n if (\"bio\" in out) out.bio = String(out.bio||\"\").trim().slice(0,1000);\n if (\"locale\" in out) out.locale = out.locale === \"en\" ? \"en\" : \"fa\";\n if (\"fontScale\" in out) out.fontScale = Math.max(.9,Math.min(1.35,Number(out.fontScale)||1));\n return out;\n }\n if (path === \"/api/analytics\" && method === \"POST\") {\n const event = String(body?.event||\"\").trim().slice(0,40);\n if (!ANALYTICS_EVENTS.has(event)) throw new Error(\"analytics_denied\");\n if ([\"play\",\"progress\",\"like\"].includes(event)) {\n const ids = await canonicalIds();\n const mediaId = positiveId(body?.mediaId);\n if (!mediaId || !ids.has(mediaId)) throw new Error(\"canonical_required\");\n const out:any = { event, mediaId };\n if (event === \"progress\") out.positionSeconds = Math.max(0,Math.min(86400,Math.round(Number(body?.positionSeconds)||0)));\n return out;\n }\n if (event === \"post_like\") {\n const postId = positiveId(body?.postId); if (!postId) throw new Error(\"post_required\");\n return {event,postId};\n }\n if (event === \"presence\") {\n const activeSeconds=Math.max(0,Math.min(60,Math.round(Number(body?.activeSeconds)||0)));\n return {event,activeSeconds,listeningSeconds:Math.max(0,Math.min(activeSeconds,Math.round(Number(body?.listeningSeconds)||0)))};\n }\n return {event};\n }\n if (path === \"/api/playlists\" && method === \"POST\") {\n const action=String(body?.action||\"\").trim().slice(0,30);\n if (!PLAYLIST_ACTIONS.has(action)) throw new Error(\"playlist_denied\");\n const out:any={action};\n if ([\"create\",\"rename\"].includes(action)) {\n const name=String(body?.name||\"\").trim().slice(0,120); if(!name) throw new Error(\"name_required\"); out.name=name;\n }\n if (action!==\"create\") { const playlistId=positiveId(body?.playlistId); if(!playlistId) throw new Error(\"playlist_required\"); out.playlistId=playlistId; }\n const ids=await canonicalIds();\n if (action===\"create\" && body?.mediaId!==undefined) { const id=positiveId(body.mediaId); if(!id||!ids.has(id)) throw new Error(\"canonical_required\"); out.mediaId=id; }\n if ([\"add\",\"remove\"].includes(action)) { const id=positiveId(body?.mediaId); if(!id||!ids.has(id)) throw new Error(\"canonical_required\"); out.mediaId=id; }\n if ([\"add-many\",\"remove-many\",\"reorder\"].includes(action)) out.mediaIds=positiveIds(body?.mediaIds).filter((id)=>ids.has(id));\n return out;\n }\n return body;\n}\n\nfunction safeRequestHeaders(req:Request) {\n const h=new Headers();\n for (const key of [\"accept\",\"accept-language\",\"content-type\",\"range\",\"if-none-match\",\"if-modified-since\",\"cookie\",\"user-agent\"]) {\n const v=req.headers.get(key); if(v) h.set(key,v);\n }\n h.set(\"x-amina-hybrid-host\",\"1\");\n return h;\n}\n\nasync function proxy(req:Request, target:string, extra:Record={}) {\n const headers=safeRequestHeaders(req);\n for(const [k,v] of Object.entries(extra)) headers.set(k,v);\n let body:BodyInit|undefined;\n if(![\"GET\",\"HEAD\"].includes(req.method)) body=await req.arrayBuffer();\n const upstream=await fetch(target,{method:req.method,headers,body,redirect:\"manual\",cache:\"no-store\"});\n const outHeaders=new Headers(upstream.headers);\n outHeaders.delete(\"content-length\");\n outHeaders.set(\"x-amina-hybrid-host\",\"1\");\n const loc=outHeaders.get(\"location\");\n if(loc?.startsWith(UPSTREAM)) {\n const u=new URL(loc); outHeaders.set(\"location\",u.pathname+u.search+u.hash);\n }\n return new Response(upstream.body,{status:upstream.status,headers:outHeaders});\n}\n\nasync function serveLocal(name:string) {\n try {\n const stored=await blob.get(`site:${name}`);\n const headers=new Headers(stored.headers);\n headers.delete(\"content-disposition\");\n headers.delete(\"content-length\");\n headers.set(\"content-type\",mime(name));\n headers.set(\"x-amina-hybrid-host\",\"1\");\n if(name===\"sw.js\" || name.endsWith(\".webmanifest\") || name.endsWith(\".html\")) headers.set(\"cache-control\",\"no-cache\");\n else headers.set(\"cache-control\",\"public, max-age=31536000, immutable\");\n return new Response(stored.body,{status:200,headers});\n } catch { return null; }\n}\n\nfunction isAccountPath(path:string) {\n return ACCOUNT_PREFIXES.some((prefix)=>path===prefix || path.startsWith(prefix+\"/\"))\n || /^\\/api\\/media\\/\\d+\\/(history|like|comments)(?:\\/|$)/.test(path);\n}\n\nexport default async function(req:Request):Promise {\n const url=new URL(req.url);\n const path=url.pathname;\n if(path===\"/team-access\" || path.startsWith(\"/admin\")) return new Response(\"Not Found\",{status:404});\n if(HARD_DENY.some((prefix)=>path===prefix||path.startsWith(prefix+\"/\"))) return Response.json({error:\"forbidden\"},{status:403});\n\n if(path===\"/api/hybrid/health\") {\n const manifest=(await blob.getJSON(\"site:manifest\")) || {};\n return Response.json({ok:true,mode:\"hybrid-static\",...manifest},{headers:{\"cache-control\":\"no-store\"}});\n }\n\n if(path===\"/api/hybrid/push/public-key\" || path===\"/api/hybrid/push/subscription\") {\n const token=Deno.env.get(\"AMINA_PUSH_SERVICE_TOKEN\") || \"\";\n if(!token) return Response.json({error:\"push_unavailable\"},{status:503});\n const pushPath=path.endsWith(\"/public-key\") ? \"/public-key\" : \"/subscription\";\n return proxy(req,`${PUSH_SERVICE}${pushPath}`,{authorization:`Bearer ${token}`});\n }\n\n if(path.startsWith(\"/api/\")) {\n const method=req.method.toUpperCase();\n const readOnly=READ_ONLY.some((pattern)=>pattern.test(path));\n if(readOnly && ![\"GET\",\"HEAD\"].includes(method)) return Response.json({error:\"read_only\"},{status:403});\n if(!readOnly && !isAccountPath(path)) return Response.json({error:\"not_allowlisted\"},{status:403});\n\n if([\"POST\",\"PATCH\",\"PUT\"].includes(method) && (path===\"/api/profile\" || path===\"/api/analytics\" || path===\"/api/playlists\")) {\n try {\n const original=await req.json();\n const projected=await projectAccountJson(method,path,original);\n const headers=safeRequestHeaders(req);\n headers.set(\"content-type\",\"application/json; charset=utf-8\");\n const upstream=await fetch(`${UPSTREAM}${path}${url.search}`,{method,headers,body:JSON.stringify(projected),redirect:\"manual\",cache:\"no-store\"});\n const outHeaders=new Headers(upstream.headers); outHeaders.delete(\"content-length\"); outHeaders.set(\"x-amina-hybrid-host\",\"1\");\n return new Response(upstream.body,{status:upstream.status,headers:outHeaders});\n } catch {\n return Response.json({error:\"account_payload_denied\"},{status:400});\n }\n }\n return proxy(req,`${UPSTREAM}${path}${url.search}`);\n }\n\n if(path===\"/\" || path===\"/player\") {\n const local=await serveLocal(path===\"/\" ? \"index.html\" : \"player.html\");\n if(local) return local;\n }\n\n const staticName=decodeURIComponent(path.replace(/^\\//,\"\"));\n if(staticName) {\n const local=await serveLocal(staticName);\n if(local) return local;\n }\n\n if(path.startsWith(\"/assets/\") || path===\"/favicon.ico\") return proxy(req,`${UPSTREAM}${path}${url.search}`);\n if(path===\"/sign-in\" || path.startsWith(\"/public/\") || path.startsWith(\"/profile/\")) return proxy(req,`${UPSTREAM}${path}${url.search}`);\n return new Response(\"Not Found\",{status:404});\n}\n","createdAt",["D",1788685552341],"branchVersion","branchId","757e7eba-302a-41f2-8156-1cda96e09dc2","id","f63dfd5a-2edb-4a65-98d9-815849c68938","amina-hybrid-player-host",["D",1788685310488],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Static mobile host for AminA Hybrid Player","imageUrl","6bc8f6e0-3727-4cbc-8f9c-2f9aeae69fe5","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a03ebf-08c8-77b5-b4dd-c31c30a28471","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",17,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","aminfarhang","handle","displayName","Amin Farhang","avatar","https://lh3.googleusercontent.com/a/ACg8ocKps617N1S-6o5-02GdgzyG_1AxQNZEtCK_Yne1OA9Ob8Fx4BY=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":164,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":165,"_80":166,"_82":167,"_84":25},"tree",[155,156],"files",[155,156],"counts",{"_144":62,"_145":146,"_147":62,"_148":149,"_150":151},"contents",[127,128],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":141,"_32":28,"_30":31,"_132":-5,"_41":42,"_40":14,"_134":25,"_38":142,"_13":136,"_33":34,"_35":37,"_24":25,"_139":-5,"_27":143},{"_43":129,"_32":130,"_30":131,"_132":-5,"_41":42,"_40":133,"_134":25,"_38":135,"_13":136,"_33":137,"_35":138,"_24":25,"_139":-5,"_27":140},"8489237a-2204-4ab8-9c09-c4559721810f","ingest.ts","a3702fb2-a9d1-11f1-ad2c-1607ee4eb77e","parentId",4,"latest",["D",1788685368942],2,"script","import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { unzipSync } from \"npm:fflate@0.8.2\";\n\nconst response = await fetch(\"https://sdmntprwestus.oaiusercontent.com/files/00000000-b6f0-8230-b3ee-c5aedaba963d/raw?se=2026-09-06T09%3A06%3A37Z&sp=r&sv=2026-02-06&sr=b&scid=736de849-7709-565a-91f8-4cc1f0c35e97&skoid=89c13f8f-c33a-46d8-9bf3-ad7158c7790a&sktid=a48cca56-e6da-484e-a814-9c849652bcb3&skt=2026-09-05T22%3A26%3A12Z&ske=2026-09-06T22%3A26%3A12Z&sks=b&skv=2026-02-06&sig=czuFsu/bkBrrCYbwO4XQQzK4zkjQwGwJGY0j/zwsyDI%3D\", { redirect: \"follow\" });\nif (!response.ok) throw new Error(`artifact_${response.status}`);\nconst outer = unzipSync(new Uint8Array(await response.arrayBuffer()));\nconst inner = outer[\"amina-hybrid-static-site.zip\"];\nif (!inner) throw new Error(\"inner_bundle_missing\");\nconst site = unzipSync(inner);\nlet stored = 0;\nlet bytes = 0;\nconst names: string[] = [];\nfor (const [name, data] of Object.entries(site)) {\n if (!name || name.endsWith(\"/\")) continue;\n if (name.startsWith(\"assets/player-loops/\")) continue;\n await blob.set(`site:${name}`, new Blob([data]));\n stored += 1;\n bytes += data.byteLength;\n names.push(name);\n}\nawait blob.setJSON(\"site:manifest\", {\n stored,\n bytes,\n names,\n source: \"AminA Hybrid Static Bundle\",\n importedAt: new Date().toISOString(),\n});\nconsole.log(JSON.stringify({ stored, bytes, names: names.length }));\n","label",[130],"6dfa15e9-6c46-4202-a2ed-2afc0272450a",["D",1788685552341],[28],"pulls","branches",1,"forks","envVars",{"_152":146,"_154":62},"connections",{"_152":62,"_153":62},"count","unfilledCount","emptyCount",{"_43":141,"_32":28,"_30":31,"_132":-5,"_41":42,"_40":14,"_134":25,"_38":161,"_13":136,"_33":34,"_35":37,"_24":25,"_139":-5,"_158":162,"_27":163},{"_43":129,"_32":130,"_30":131,"_132":-5,"_41":42,"_40":133,"_134":25,"_38":157,"_13":136,"_33":137,"_35":138,"_24":25,"_139":-5,"_158":159,"_27":160},["D",1788685368942],"children",[],[130],["D",1788685552341],[],[28],["D",1788685310488],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_124":201,"_202":203,"_204":205,"_206":25,"_207":25,"_208":25,"_209":58,"_210":-5,"_211":-7,"_212":-7,"_213":62,"_214":25,"_215":25,"_216":-5,"_217":25,"_218":25,"_219":25,"_220":-5},"ENV",{"_172":173,"_174":175,"_176":86,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v6