[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_191":192,"_193":194},"routes/_app.x.$handle.$name",{"_105":104,"_38":50,"_114":91,"_33":115,"_13":14,"_116":-5,"_11":117,"_118":119,"_120":121,"_122":123,"_124":125,"_26":-5,"_126":127,"_128":129,"_130":54,"_131":132,"_133":31,"_134":-5,"_135":-5,"_136":137},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_48":49,"_38":50,"_43":51,"_52":-5,"_53":54,"_55":56,"_57":56,"_58":-5,"_59":-5,"_19":60,"_61":62,"_63":31,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":54},"version",31,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","71fd70b5-8e10-41ff-96d2-cee3bc8c1e32","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":29,"_30":31,"_32":31,"_33":34,"_35":34},"file",{"_36":37,"_38":34,"_39":40,"_41":42,"_43":44,"_45":14,"_46":47,"_30":31},"previous",{"_36":37,"_38":34,"_39":40,"_41":42},"deleted",true,"deletedHere","path","auth.ts","latestPath","fileId","83b3e704-aa6c-11f1-9fc8-1607ee4eb77e","name","fileType","script","content","import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { verifyToken } from \"https://esm.town/v/pomdtr/verifyToken?v=1\";\n\nconst COOKIE = \"auth_session\";\nconst SESSION_MS = 7 * 24 * 60 * 60 * 1000; // 7 days\n\nfunction redirect(location: string): Response {\n return new Response(null, { status: 302, headers: { location } });\n}\n\nconst loginPage = () => `\n\n\n \n Sign in\n \n\n\n

Welcome back

This val is password protected. Sign in with your Val Town API token.

\n \n

\n\n`;\n\ntype Session = { expiresAt: number; token: string };\n\nexport type Handler = (req: Request, apiToken?: string) => Response | Promise;\n\n// Self-contained password gate. Unlike the old pomdtr/password_auth wrapper it\n// does not depend on inferRequestVal, which only understands legacy\n// `handle-name.web.val.run` URL schemes and crashes on the current\n// `handle--uuid.web.val.run` endpoints.\nexport function passwordAuth(next: Handler): Handler {\n return async (req: Request): Promise => {\n const url = new URL(req.url);\n\n // GET /signin -> show the login form\n if (url.pathname === \"/signin\" && req.method === \"GET\") {\n return new Response(loginPage(), { headers: { \"content-type\": \"text/html\" } });\n }\n\n // POST /signin -> verify the password and create a session\n if (url.pathname === \"/signin\" && req.method === \"POST\") {\n const form = await req.formData();\n const password = (form.get(\"password\") as string) ?? \"\";\n if (!(await verifyToken(password))) {\n return new Response(\"Unauthorized\", { status: 403 });\n }\n const id = crypto.randomUUID();\n await blob.setJSON(`auth_session_${id}`, { expiresAt: Date.now() + SESSION_MS, token: password });\n const res = redirect(url.searchParams.get(\"redirect\") || \"/\");\n res.headers.append(\n \"Set-Cookie\",\n `${COOKIE}=${id}; Path=/; Max-Age=${Math.floor(SESSION_MS / 1000)}; HttpOnly; Secure; SameSite=None`,\n );\n return res;\n }\n\n // GET /signout -> clear the session cookie\n if (url.pathname === \"/signout\") {\n const res = redirect(\"/signin\");\n res.headers.append(\"Set-Cookie\", `${COOKIE}=; Path=/; Max-Age=0; HttpOnly; Secure; SameSite=None`);\n return res;\n }\n\n // Authorization: Bearer -> stateless API access\n if (req.headers.has(\"Authorization\")) {\n const token = req.headers.get(\"Authorization\")!.replace(\"Bearer \", \"\").trim();\n if (!(await verifyToken(token))) return new Response(null, { status: 403 });\n return next(req, token);\n }\n\n // Session cookie\n const sessionId = (req.headers.get(\"Cookie\") ?? \"\")\n .split(\";\")\n .map((part) => part.trim())\n .find((part) => part.startsWith(`${COOKIE}=`))\n ?.slice(COOKIE.length + 1);\n if (sessionId) {\n const session = (await blob.getJSON(`auth_session_${sessionId}`)) as Session | null;\n if (session && session.expiresAt > Date.now()) return next(req, session.token);\n await blob.delete(`auth_session_${sessionId}`);\n }\n\n const redirectTo = url.searchParams.get(\"redirect\") || url.pathname + url.search;\n return redirect(`/signin?redirect=${encodeURIComponent(redirectTo)}`);\n };\n}\n","createdAt",["D",1788752943831],"branchVersion","branchId","b7d72ad9-66df-4de5-8cb2-e4dd9ded47ed","id","f2ccd201-cd1b-4c09-95e8-468bddd1219a","itchatbot",["D",1788751737705],"deletedAt","legacyEnvVars",false,"privacy","public","httpPrivacy","description","imageUrl","71dd8e68-0bdc-406a-80ca-10c2c5c89c48","pinnedFileId","a5919ed0-ab29-11f1-8034-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a079d4-a61e-70f7-8070-e49f40e3accd","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_105":104,"_113":109},"org",{"_105":104,"_106":107,"_108":109,"_19":60,"_110":111,"_112":54},"branch",{"_13":90,"_38":91,"_48":47,"_92":49,"_93":94,"_95":96,"_97":56,"_98":99,"_100":101,"_102":50,"_103":104},"isOwned",54,"main","projectId","forkedBranchId","9d8f7034-26de-11f0-a5b3-569c3dd06744","forkedBranchVersion",4,"forkedProjectPrivacy","forkedProjectId","9d8f23ea-26de-11f0-a5b3-569c3dd06744","forkedProjectOrgId","f9c69a1c-4300-4bec-b4cf-7c54a6c90f97","projectName","userHandle","itdude207","handle","displayName","ITDUDE207","avatar","https://avatars.githubusercontent.com/u/261690574?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_48":49,"_38":50,"_43":187,"_52":-5,"_53":54,"_55":56,"_57":56,"_58":-5,"_59":-5,"_19":60,"_61":62,"_63":31,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":188,"_85":189,"_87":190,"_89":54},"tree",[178,179],"files",[178,179],"counts",{"_168":67,"_169":164,"_170":67,"_171":172,"_173":174},"contents",[147,148],"upstreamProject",{"_48":99,"_38":144,"_58":-5,"_59":-5,"_55":56,"_83":145},"upstreamBranch",{"_48":94,"_43":138,"_139":140,"_38":91,"_92":99,"_13":96,"_93":-5,"_95":-5,"_141":142,"_52":-5,"_89":54,"_55":56,"_103":143,"_68":101,"_102":144},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1746139801646],"updatedAt",["D",1723130638498],"lockfileKey","1746159453328-esm.town_v_janpaul123_valleBlogV0@4-main","janpaul123","valleBlogV0",{"_105":143,"_113":146},"https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJncEQ0elVic1BxOU15TkFMV0JCUkdRQndWMCJ9",{"_48":161,"_38":162,"_36":163,"_152":-5,"_46":47,"_45":164,"_154":54,"_43":165,"_13":67,"_39":26,"_41":166,"_30":54,"_159":-5,"_33":167},{"_48":149,"_38":150,"_36":151,"_152":-5,"_46":47,"_45":153,"_154":54,"_43":155,"_13":156,"_39":157,"_41":158,"_30":54,"_159":-5,"_33":160},"1c31a936-a43c-417e-a92f-a36477d83e5f","main.tsx","01a079e9-73b0-76d8-a7b4-aa1922e8a3f8","parentId",30,"latest",["D",1788752940345],15,"http","import _ from \"npm:lodash@4\";\n\n// OpenAI-compatible proxy. No key needed: the injected `valtown` token\n// (available in every val automatically) is used to authenticate.\nconst PROXY = \"https://std-openaiproxy.web.val.run/v1\";\n\nconst SYSTEM_PROMPT =\n \"You are VALL-E, a friendly coding chatbot. Keep chat responses concise and conversational. \" +\n \"Whenever you include code, wrap it in a fenced code block using triple backticks with a language tag, \" +\n \"like ```ts\\\\n ... \\\\n```. Only one code block per message. When finished, stop.\";\n\ntype Msg = { role: \"user\" | \"assistant\"; content: string };\n\n// Stream a chat completion over SSE, sending each delta to onDelta.\nasync function streamChat(\n token: string,\n messages: { role: string; content: string }[],\n onDelta: (text: string) => void,\n): Promise {\n const res = await fetch(`${PROXY}/chat/completions`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\", authorization: `Bearer ${token}` },\n body: JSON.stringify({ model: \"gpt-4o\", messages, stream: true, max_completion_tokens: 2000 }),\n });\n if (!res.ok || !res.body) {\n throw new Error(`Model request failed: ${res.status} ${(await res.text().catch(() => \"\")).slice(0, 200)}`);\n }\n\n const reader = res.body.getReader();\n const decoder = new TextDecoder();\n let buffer = \"\";\n let full = \"\";\n let sawDone = false;\n\n const processLine = (line: string) => {\n const trimmed = line.trim();\n if (!trimmed.startsWith(\"data:\")) return;\n const data = trimmed.slice(5).trim();\n if (data === \"[DONE]\") {\n sawDone = true;\n return;\n }\n try {\n const j = JSON.parse(data);\n const delta: string | undefined = j.choices?.[0]?.delta?.content;\n if (delta) {\n full += delta;\n onDelta(delta);\n }\n } catch {\n // ignore keep-alive / partial lines\n }\n };\n\n while (true) {\n const { done, value } = await reader.read();\n if (done) break;\n buffer += decoder.decode(value, { stream: true });\n let nl: number;\n while ((nl = buffer.indexOf(\"\\n\")) >= 0) {\n const line = buffer.slice(0, nl);\n buffer = buffer.slice(nl + 1);\n processLine(line);\n }\n }\n if (buffer.trim()) processLine(buffer);\n\n if (!sawDone && full) {\n throw new Error(\"The response was cut off mid-stream — please send your message again.\");\n }\n return full;\n}\n\nfunction para(s: string): string {\n return _.escape(s).replace(/\\n/g, \"
\");\n}\n\n// Render an assistant reply: plain text paragraphs + fenced code blocks with a copy button.\nfunction renderAssistant(full: string): string {\n const regex = /```(\\w*)\\s*\\n([\\s\\S]*?)```/g;\n let out = \"\";\n let last = 0;\n let m: RegExpExecArray | null;\n while ((m = regex.exec(full))) {\n if (m.index > last) {\n out += `

${para(full.slice(last, m.index))}

`;\n }\n const code = m[2].replace(/\\n$/, \"\");\n const lang = _.escape(m[1] || \"code\");\n out +=\n `

` +\n `` +\n `

${_.escape(code)}

` +\n `

`;\n last = m.index + m[0].length;\n }\n if (last < full.length) out += `

${para(full.slice(last))}

`;\n return out || `

${para(full)}

`;\n}\n\nfunction bubble(role: \"user\" | \"assistant\", inner: string): string {\n if (role === \"user\") {\n return `

${inner}

`;\n }\n return `

${inner}

`;\n}\n\nasync function main(req: Request): Promise {\n const { readable, writable } = new TransformStream();\n const writer = writable.getWriter();\n const write = (t: string) => writer.write(new TextEncoder().encode(t));\n\n (async () => {\n try {\n write(`\n\n\n \n VALL-E\n \n \n\n\n

Hi, I'm VALL-E

`);\n\n const form = req.method === \"POST\" ? await req.formData() : null;\n const userText = (form?.get(\"userprompt\") as string) ?? \"\";\n let history: Msg[] = [];\n try {\n history = JSON.parse((form?.get(\"messages\") as string) || \"[]\");\n } catch {\n history = [];\n }\n\n // Render prior conversation\n for (const msg of history) {\n if (msg.role === \"user\") {\n write(bubble(\"user\", `

${para(msg.content)}

`));\n } else {\n write(bubble(\"assistant\", renderAssistant(msg.content)));\n }\n }\n\n if (userText) {\n const nextHistory: Msg[] = [...history, { role: \"user\", content: userText }];\n write(bubble(\"user\", `

${para(userText)}

`));\n write(`

`);\n\n const token = Deno.env.get(\"valtown\");\n const modelMessages = [\n { role: \"system\", content: SYSTEM_PROMPT },\n ...nextHistory,\n ];\n\n let full = \"\";\n await streamChat(token, modelMessages, (d) => {\n full += d;\n write(_.escape(d));\n });\n\n const newHistory: Msg[] = [...nextHistory, { role: \"assistant\", content: full }];\n const rendered = bubble(\"assistant\", renderAssistant(full));\n // Replace the streaming placeholder with the final rendered assistant reply,\n // and persist the updated conversation into the hidden form field.\n write(\n ``,\n );\n }\n\n write(`

`);\n\n // Input form (keeps conversation in a hidden field)\n write(\n ``,\n );\n\n write(``);\n } catch (e) {\n write(`

Something went wrong: ${_.escape((e && (e as any).message) || e)}

`);\n } finally {\n writer.close();\n }\n })();\n\n return new Response(readable, { headers: { \"Content-Type\": \"text/html\" } });\n}\n\nexport default main;\n","label",[150],"f7816fce-2cbb-4252-abd6-a912b652df3f","README.md","01a079e9-73b0-76d8-a7b4-a5e9b886a96a",1,["D",1788751737705],"* Fork this val to your own profile.\n* Create a [Val Town API token](https://www.val.town/settings/api), open the browser preview of this val, and use the API token as the password to log in.\n",[162],"pulls","branches","forks","envVars",{"_175":67,"_177":67},"connections",{"_175":67,"_176":67},"count","unfilledCount","emptyCount",{"_48":161,"_38":162,"_36":163,"_152":-5,"_46":47,"_45":164,"_154":54,"_43":184,"_13":67,"_39":26,"_41":166,"_30":54,"_159":-5,"_181":185,"_33":186},{"_48":149,"_38":150,"_36":151,"_152":-5,"_46":47,"_45":153,"_154":54,"_43":180,"_13":156,"_39":157,"_41":158,"_30":54,"_159":-5,"_181":182,"_33":183},["D",1788752940345],"children",[],[150],["D",1788751737705],[],[162],["D",1788751737705],{"_105":104,"_113":109},{"_105":104,"_106":107,"_108":109,"_19":60,"_110":111,"_112":54},{"_13":90,"_38":91,"_48":47,"_92":49,"_93":94,"_95":96,"_97":56,"_98":99,"_100":101,"_102":50,"_103":104},"ctx",{"_83":-5,"_135":224,"_225":226,"_227":228,"_229":54,"_230":54,"_231":54,"_232":31,"_233":-5,"_234":-7,"_235":-7,"_236":67,"_237":54,"_238":54,"_239":-5,"_240":54,"_241":54,"_242":54,"_243":-5},"ENV",{"_195":196,"_197":198,"_199":91,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v31