[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_207":208,"_209":210},"routes/_app.x.$handle.$name",{"_96":95,"_31":44,"_104":86,"_26":105,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":24,"_119":120,"_121":24,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_31":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":24},"version",5,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","src/lib/events.ts","latestPath","fileId","e9467d1e-6766-11f1-8990-1607ee4eb77e","name","events.ts","fileType","script","content","import { CATALOG, CUSTOMERS } from \"../../config/beats.ts\";\n\n// The order events that flow through the ledger. Small and legible — on camera\n// the subject is the cursor / lag / latency, not the order contents. Every\n// event carries `ts`, the moment it was appended, so a consumer can measure\n// end-to-end latency (append → handled) — which is what visibly rises during\n// the cut-poke beat and falls back after the heartbeat drains the backlog.\n\nexport interface OrderEvent {\n type: \"order.created\";\n id: string; // stable order id, derived from n\n n: number; // 1-based demo sequence (deterministic content key)\n sku: string;\n product: string;\n qty: number;\n amount: number; // qty * unit price\n customer: string;\n ts: number; // append timestamp (ms since epoch), stamped by emit\n}\n\n// A tiny seeded PRNG (mulberry32) so the same n always yields the same order.\nfunction rngFor(n: number): () => number {\n let a = (0x9e3779b9 ^ (n * 0x85ebca6b)) >>> 0;\n return () => {\n a |= 0;\n a = (a + 0x6d2b79f5) | 0;\n let t = Math.imul(a ^ (a >>> 15), 1 | a);\n t = (t + Math.imul(t ^ (t >>> 7), 61 | t)) ^ t;\n return ((t ^ (t >>> 14)) >>> 0) / 4294967296;\n };\n}\n\n/** Deterministic order content for demo entry `n` (1-based). `ts` is stamped later. */\nexport function makeOrder(n: number): OrderEvent {\n const r = rngFor(n);\n const item = CATALOG[Math.floor(r() * CATALOG.length)]!;\n const customer = CUSTOMERS[Math.floor(r() * CUSTOMERS.length)]!;\n const qty = 1 + Math.floor(r() * 3);\n return {\n type: \"order.created\",\n id: `ord-${String(n).padStart(4, \"0\")}`,\n n,\n sku: item.sku,\n product: item.name,\n qty,\n amount: qty * item.price,\n customer,\n ts: 0,\n };\n}\n","createdAt",["D",1781382712302],"branchVersion","branchId","6d4da68d-1a5a-47ce-9df4-9316f76b557a","id","d267b633-5b62-4847-8e55-80c10d65fda2","webpoke_demo",["D",1781382627825],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Webpoke: webhooks rebuilt on an append-only S2 log (full stack)","imageUrl","1d223401-2709-4d51-8314-0ca7611e9d9a","pinnedFileId","77516510-6767-11f1-996b-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","efaf76f0-0509-4f61-99e7-4d9e2d1a202a","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_103":99},"org",{"_96":95,"_97":-5,"_98":99,"_18":54,"_100":101,"_102":24},"branch",{"_13":85,"_31":86,"_42":41,"_87":43,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":44,"_94":95},"isOwned",24,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","devdoshi","handle","displayName","avatar","https://secure.gravatar.com/avatar/08f709e5b52546fbf4413cdceb625fc7&d=identicon","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_31":44,"_37":203,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":204,"_80":205,"_82":206,"_84":24},"tree",[156,162],"files",[156,157,158,159,160,161,162],"counts",{"_145":62,"_146":132,"_147":62,"_148":149,"_150":151},"contents",[126,127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":138,"_31":139,"_29":140,"_131":-5,"_40":41,"_39":141,"_133":58,"_37":142,"_13":62,"_33":143,"_35":-5,"_23":24,"_136":-5,"_26":144},{"_42":128,"_31":129,"_29":130,"_131":-5,"_40":41,"_39":132,"_133":58,"_37":134,"_13":62,"_33":20,"_35":135,"_23":24,"_136":-5,"_26":137},"50837783-7432-4995-8259-73fc4a5eb98e","README.md","b6ef1a1a-6766-11f1-b7ab-1607ee4eb77e","parentId",1,"latest",["D",1781382627845],"# webpoke_demo\nFull stack deployed as one val. HTTP entry: src/vals/main.ts. Cron: src/vals/heartbeat.ts.\n","label",[129],"e7198b4a-a53e-4c00-90f8-4786a20f105e","src","e2c8c30f-0c01-4bcd-b3f0-e7ba9512e569",2,["D",1781382688901],"directory",[139],"pulls","branches","forks","envVars",{"_152":154,"_155":62},"connections",{"_152":62,"_153":62},"count","unfilledCount",6,"emptyCount",{"_42":138,"_31":139,"_29":140,"_131":-5,"_40":41,"_39":141,"_133":58,"_37":200,"_13":62,"_33":143,"_35":-5,"_23":24,"_136":-5,"_164":201,"_26":202},{"_42":196,"_31":175,"_29":170,"_131":140,"_40":41,"_39":141,"_133":58,"_37":197,"_13":62,"_33":143,"_35":-5,"_23":24,"_136":-5,"_164":198,"_26":199},{"_42":192,"_31":32,"_29":30,"_131":170,"_40":41,"_39":14,"_133":58,"_37":193,"_13":62,"_33":34,"_35":36,"_23":24,"_136":-5,"_164":194,"_26":195},{"_42":184,"_31":185,"_29":186,"_131":170,"_40":41,"_39":187,"_133":58,"_37":188,"_13":62,"_33":34,"_35":189,"_23":24,"_136":-5,"_164":190,"_26":191},{"_42":176,"_31":177,"_29":178,"_131":170,"_40":41,"_39":179,"_133":58,"_37":180,"_13":62,"_33":34,"_35":181,"_23":24,"_136":-5,"_164":182,"_26":183},{"_42":167,"_31":168,"_29":169,"_131":170,"_40":41,"_39":141,"_133":58,"_37":171,"_13":62,"_33":34,"_35":172,"_23":24,"_136":-5,"_164":173,"_26":174},{"_42":128,"_31":129,"_29":130,"_131":-5,"_40":41,"_39":132,"_133":58,"_37":163,"_13":62,"_33":20,"_35":135,"_23":24,"_136":-5,"_164":165,"_26":166},["D",1781382627845],"children",[],[129],"7f2304b1-e0d6-4605-94b6-6230931064df","runtime-env.ts","db540b68-6766-11f1-9a66-1607ee4eb77e","d0fc993d-cf06-4f17-9a2f-d189260e76b1",["D",1781382688901],"// The one place that knows whether we're on Deno (val.town) or Node (local).\n//\n// On val.town each val is its own deployment with its own env vars (Deno.env).\n// Locally we run *all* the vals in one Node process, so they can't share\n// process.env for per-val config. Every val is therefore built by a factory\n// that takes an `Env`; on val.town the factory is fed the ambient Deno.env, and\n// locally the runtime feeds each val its own injected record.\n\nexport interface Env {\n get(key: string): string | undefined;\n}\n\n/** The platform's own environment — Deno.env on val.town, process.env on Node. */\nexport function ambientEnv(): Env {\n const deno = (globalThis as { Deno?: { env?: { get(k: string): string | undefined } } }).Deno;\n if (deno?.env && typeof deno.env.get === \"function\") {\n return { get: (k) => deno.env!.get(k) };\n }\n return { get: (k) => (typeof process !== \"undefined\" ? process.env[k] : undefined) };\n}\n\n/** A fixed lookup, for injecting one val's config in the local runtime. */\nexport function makeEnv(record: Record): Env {\n return { get: (k) => record[k] };\n}\n\nexport const isDeno = typeof (globalThis as { Deno?: unknown }).Deno !== \"undefined\";\n",[],[139,175,168],"lib","51305476-90c3-417a-8a1f-194924413636","poke.ts","e492f91e-6766-11f1-babd-1607ee4eb77e",4,["D",1781382704417],"import { Buffer } from \"node:buffer\";\nimport { createHmac, timingSafeEqual } from \"node:crypto\";\n\n// The poke is content-free and best-effort, so the signature is NOT a\n// correctness mechanism — it just lets a consumer ignore a forged poke. A\n// bad or missing sig at worst drops one poke (the heartbeat covers it); it can\n// never lose or corrupt data, because the poke carries no data. This is\n// deliberately simple and flagged on-screen as an open question.\n\nexport function signPoke(body: string, secret: string): string {\n return createHmac(\"sha256\", secret).update(body).digest(\"hex\");\n}\n\nexport function verifyPoke(body: string, sig: string | null | undefined, secret: string): boolean {\n if (!sig) return false;\n const expected = signPoke(body, secret);\n if (sig.length !== expected.length) return false;\n try {\n return timingSafeEqual(Buffer.from(sig), Buffer.from(expected));\n } catch {\n return false;\n }\n}\n\nexport interface PokeBody {\n stream: string;\n hint: number; // the ledger tail the vendor saw — monotone, coalesced by max()\n}\n",[],[139,175,177],"997ac5a3-ed9f-4ba2-afef-d84b05750ca8","http.ts","e1b5c230-6766-11f1-9a66-1607ee4eb77e",3,["D",1781382699625],"// A tiny router over the Web fetch handler shape, so a val's code is the same\n// on val.town (where the default export IS a `(Request) => Response`) and in the\n// local runtime (which mounts these handlers behind a Node http server). No\n// framework — the routes a val needs fit on one screen.\n\nexport type Handler = (\n req: Request,\n ctx: { url: URL; params: Record },\n) => Response | Promise;\n\ninterface Route {\n method: string;\n parts: string[];\n handler: Handler;\n}\n\nexport class Router {\n private routes: Route[] = [];\n\n on(method: string, path: string, handler: Handler): this {\n this.routes.push({ method, parts: split(path), handler });\n return this;\n }\n get(path: string, handler: Handler): this {\n return this.on(\"GET\", path, handler);\n }\n post(path: string, handler: Handler): this {\n return this.on(\"POST\", path, handler);\n }\n\n async handle(req: Request): Promise {\n const url = new URL(req.url);\n const got = split(url.pathname);\n for (const route of this.routes) {\n if (route.method !== req.method) continue;\n const params = match(route.parts, got);\n if (params) return route.handler(req, { url, params });\n }\n // CORS preflight for the dashboard's cross-val fetches.\n if (req.method === \"OPTIONS\") return cors(new Response(null, { status: 204 }));\n return cors(json({ error: \"not found\", path: url.pathname }, 404));\n }\n\n /** Convenience: a `(Request) => Response` for val.town's default export. */\n get fetch(): (req: Request) => Promise {\n return (req) => this.handle(req);\n }\n}\n\nfunction split(path: string): string[] {\n return path.split(\"/\").filter(Boolean);\n}\n\nfunction match(pattern: string[], got: string[]): Record | null {\n if (pattern.length !== got.length) return null;\n const params: Record = {};\n for (let i = 0; i < pattern.length; i++) {\n const p = pattern[i]!;\n if (p.startsWith(\":\")) params[p.slice(1)] = decodeURIComponent(got[i]!);\n else if (p !== got[i]) return null;\n }\n return params;\n}\n\n// Every demo surface is read cross-origin by the dashboard and (in valtown mode)\n// across vals, so every response carries permissive CORS.\nexport function cors(res: Response): Response {\n res.headers.set(\"access-control-allow-origin\", \"*\");\n res.headers.set(\"access-control-allow-headers\", \"*\");\n res.headers.set(\"access-control-allow-methods\", \"GET,POST,DELETE,OPTIONS\");\n return res;\n}\n\nexport function json(data: unknown, status = 200): Response {\n return cors(\n new Response(JSON.stringify(data), {\n status,\n headers: { \"content-type\": \"application/json\" },\n }),\n );\n}\n\nexport function html(body: string, status = 200): Response {\n return cors(new Response(body, { status, headers: { \"content-type\": \"text/html; charset=utf-8\" } }));\n}\n\nexport function text(body: string, status = 200): Response {\n return cors(new Response(body, { status, headers: { \"content-type\": \"text/plain; charset=utf-8\" } }));\n}\n\nexport async function readJson(req: Request): Promise {\n try {\n const text = await req.text();\n return text ? (JSON.parse(text) as T) : null;\n } catch {\n return null;\n }\n}\n",[],[139,175,185],"8ca04789-2b35-4ed9-b41c-eb2b800d3b48",["D",1781382712302],[],[139,175,32],"75464b4d-fc86-46a6-a530-f0834c28c1bb",["D",1781382688901],[158,159,160,161],[139,175],["D",1781382688901],[157],[139],["D",1781382627825],{"_96":95,"_103":99},{"_96":95,"_97":-5,"_98":99,"_18":54,"_100":101,"_102":24},{"_13":85,"_31":86,"_42":41,"_87":43,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":44,"_94":95},"ctx",{"_78":-5,"_123":240,"_241":242,"_243":244,"_245":24,"_246":24,"_247":24,"_248":58,"_249":-5,"_250":-7,"_251":-7,"_252":62,"_253":24,"_254":24,"_255":-5,"_256":24,"_257":24,"_258":24,"_259":-5},"ENV",{"_211":212,"_213":214,"_215":86,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233,"_234":235,"_236":237,"_238":239},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v5