[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_150":151,"_152":153},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_87":-7,"_88":89,"_29":-7,"_90":-5,"_15":91,"_92":93,"_94":95,"_96":97,"_98":99,"_100":-5,"_101":-5,"_102":-5,"_103":38,"_104":105,"_106":107,"_108":-5,"_109":-5,"_110":111},"routes/_app.x.$handle.$name.branches",{"_11":12,"_13":14,"_15":16,"_17":18},"handle","jamesdowdican","name","untitled-3581","project",{"_20":28,"_13":14,"_22":36,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":-5,"_43":-5,"_44":45,"_46":-5,"_47":38,"_48":-5,"_49":-5,"_50":51,"_52":53,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":59,"_61":62,"_63":62,"_64":62,"_65":59,"_66":59,"_67":68,"_69":70,"_71":72,"_73":38},"branches",[19],{"_20":21,"_22":23,"_24":25,"_13":26,"_27":28,"_29":30,"_31":-5,"_32":-5,"_33":34,"_35":-5},"id","eddc70a2-50a7-11f1-a082-ee650bb23af1","createdAt",["D",1778881760560],"updatedAt",["D",1778889604806],"main","projectId","eddbd32c-50a7-11f1-a082-ee650bb23af1","version",8,"forkedBranchId","forkedBranchVersion","lockfileKey","1778889605217-esm.town_v_jamesdowdican_untitled-3581@8-main","deletedAt",["D",1778881760555],"legacyEnvVars",false,"privacy","public","httpPrivacy","description","imageUrl","userId","c811023e-0582-4811-8d6e-056a272ec06f","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e2d9c-962f-76de-8730-dd87a9a499ba","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_86":82},"org",{"_11":12,"_79":80,"_81":82,"_44":45,"_83":84,"_85":38},"branch",{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_74":-5,"_75":-5,"_76":-5,"_77":14,"_78":12},"isOwned","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","James Dowdican","avatar","https://lh3.googleusercontent.com/a/ACg8ocJ1dQyHQhxi3KdXFoPiLmqltSEhikK9KunpfuZYkFdMiivoAg=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","path","","adoptOrgId",{"_20":28,"_13":14,"_22":146,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":-5,"_43":-5,"_44":45,"_46":-5,"_47":38,"_48":-5,"_49":-5,"_50":51,"_52":53,"_54":-5,"_55":-5,"_56":-5,"_57":-5,"_58":59,"_60":59,"_61":62,"_63":62,"_64":62,"_65":59,"_66":59,"_67":147,"_69":148,"_71":149,"_73":38},"tree",[141],"files",[141],"counts",{"_130":51,"_17":131,"_132":51,"_133":134,"_135":136},"contents",[112],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_20":113,"_13":114,"_115":116,"_117":-5,"_118":21,"_119":30,"_120":107,"_22":121,"_29":122,"_123":124,"_125":126,"_127":38,"_128":-5,"_88":129},"316767fc-50ba-11f1-bc46-ee650bb23af1","main.ts","fileId","edde57c8-50a7-11f1-a082-ee650bb23af1","parentId","branchId","branchVersion","latest",["D",1778889604806],7,"fileType","http","content","// SyncFlow AI — Val.town backend v2\n// REPLACES 05-val-town-main.ts. Adds:\n// - FIXED ElevenLabs TTS (was hitting V8 stack overflow on base64 encoding)\n// - TikTok OAuth flow\n// - TikTok Content Posting API publish\n//\n// REQUIRED ENV VARS in Val.town:\n// KLING_ACCESS_KEY\n// KLING_SECRET_KEY\n// ELEVENLABS_API_KEY\n// STRIPE_SECRET_KEY\n// STRIPE_WEBHOOK_SECRET\n// STRIPE_PRICE_MONTHLY\n// STRIPE_PRICE_ANNUAL\n// TIKTOK_CLIENT_KEY (from TikTok developer portal)\n// TIKTOK_CLIENT_SECRET (from TikTok developer portal)\n// TIKTOK_REDIRECT_URI https://.web.val.run/?action=tiktok_callback\n// BASE44_APP_URL https://snap-knowing-sync-flow.base44.app\n// VAL_URL https://jamesdowdican--edde57c850a711f1a082ee650bb23af1.web.val.run\n\nimport { SignJWT } from \"https://esm.sh/jose@5\";\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst CORS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Stripe-Signature\",\n};\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") return new Response(null, { headers: CORS });\n\n const url = new URL(req.url);\n\n // ---- GET requests: TikTok OAuth callback comes in as GET with ?code=... ----\n if (req.method === \"GET\") {\n const action = url.searchParams.get(\"action\");\n if (action === \"tiktok_callback\") {\n return tiktokCallback(url);\n }\n if (action === \"audio\") {\n const key = url.searchParams.get(\"key\");\n if (!key) return new Response(\"Missing key\", { status: 400 });\n return serveAudioBlob(key);\n }\n if (action === \"health\") {\n return json({ ok: true, ts: Date.now(), version: \"v2\" });\n }\n return json(\n { error: \"GET only supports tiktok_callback, audio, health\" },\n 405,\n );\n }\n\n // ---- Stripe webhook ----\n if (req.headers.get(\"stripe-signature\")) {\n return handleStripeWebhook(req);\n }\n\n // ---- POST JSON body ----\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Invalid JSON\" }, 400);\n }\n\n try {\n switch (body.action) {\n case \"kling\":\n return json(await klingSubmit(body));\n case \"kling_status\":\n return json(await klingStatus(body));\n case \"tts\":\n return json(await elevenLabsTTS(body));\n case \"tts_voices\":\n return json(await elevenLabsVoices());\n case \"stripe_checkout\":\n return json(await stripeCheckout(body));\n case \"stripe_portal\":\n return json(await stripePortal(body));\n case \"tiktok_auth_url\":\n return json(await tiktokAuthURL(body));\n case \"tiktok_publish\":\n return json(await tiktokPublish(body));\n case \"tiktok_status\":\n return json(await tiktokPublishStatus(body));\n case \"health\":\n return json({ ok: true, ts: Date.now(), version: \"v2\" });\n default:\n return json({ error: `Unknown action: ${body.action}` }, 400);\n }\n } catch (err) {\n console.error(\"Action failed:\", err);\n return json({ error: String(err) }, 500);\n }\n}\n\n// ============================================================\n// Kling\n// ============================================================\n\nasync function klingJWT(): Promise {\n const access = Deno.env.get(\"KLING_ACCESS_KEY\")!;\n const secret = Deno.env.get(\"KLING_SECRET_KEY\")!;\n const key = new TextEncoder().encode(secret);\n return await new SignJWT({ iss: access })\n .setProtectedHeader({ alg: \"HS256\", typ: \"JWT\" })\n .setIssuedAt()\n .setExpirationTime(Math.floor(Date.now() / 1000) + 1800)\n .setNotBefore(Math.floor(Date.now() / 1000) - 5)\n .sign(key);\n}\n\nasync function klingSubmit(\n { prompt, image_url, duration = 5, mode = \"std\" }: any,\n) {\n const token = await klingJWT();\n const endpoint = image_url\n ? \"https://api-singapore.klingai.com/v1/videos/image2video\"\n : \"https://api-singapore.klingai.com/v1/videos/text2video\";\n const payload: any = {\n model_name: \"kling-v1\",\n prompt,\n duration: String(duration),\n mode,\n };\n if (image_url) payload.image = image_url;\n const res = await fetch(endpoint, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${token}`,\n },\n body: JSON.stringify(payload),\n });\n return await res.json();\n}\n\nasync function klingStatus({ task_id }: any) {\n const token = await klingJWT();\n const res = await fetch(\n `https://api-singapore.klingai.com/v1/videos/text2video/${task_id}`,\n {\n headers: { Authorization: `Bearer ${token}` },\n },\n );\n return await res.json();\n}\n\n// ============================================================\n// ElevenLabs — FIXED (v1 hit stack overflow on base64 encoding)\n// ============================================================\n\nasync function elevenLabsTTS(\n { text, voice_id = \"21m00Tcm4TlvDq8ikWAM\", project_id }: any,\n) {\n const key = Deno.env.get(\"ELEVENLABS_API_KEY\");\n if (!key) {\n return { error: \"ELEVENLABS_API_KEY not configured in Val.town env\" };\n }\n if (!text || typeof text !== \"string\") return { error: \"text required\" };\n if (text.length > 5000) return { error: \"text too long (max 5000 chars)\" };\n\n console.log(`[tts] generating ${text.length} chars with voice ${voice_id}`);\n\n const res = await fetch(\n `https://api.elevenlabs.io/v1/text-to-speech/${voice_id}/stream`,\n {\n method: \"POST\",\n headers: {\n \"xi-api-key\": key,\n \"Content-Type\": \"application/json\",\n Accept: \"audio/mpeg\",\n },\n body: JSON.stringify({\n text,\n model_id: \"eleven_multilingual_v2\",\n output_format: \"mp3_44100_128\",\n voice_settings: {\n stability: 0.45,\n similarity_boost: 0.85,\n style: 0.30,\n use_speaker_boost: true,\n },\n }),\n },\n );\n\n if (!res.ok) {\n const errText = await res.text().catch(() => \"no body\");\n console.error(`[tts] ElevenLabs ${res.status}: ${errText.slice(0, 500)}`);\n return { error: `ElevenLabs ${res.status}: ${errText.slice(0, 500)}` };\n }\n\n const ab = await res.arrayBuffer();\n const bytes = new Uint8Array(ab);\n console.log(`[tts] got ${bytes.length} bytes from ElevenLabs`);\n\n const blobKey = `tts/${project_id || crypto.randomUUID()}.mp3`;\n await blob.set(blobKey, bytes);\n console.log(`[tts] stored as blob ${blobKey}`);\n\n const valUrl = Deno.env.get(\"VAL_URL\") || \"\";\n const audioUrl = `${valUrl}?action=audio&key=${encodeURIComponent(blobKey)}`;\n\n return {\n audio_url: audioUrl,\n blob_key: blobKey,\n duration_estimate_sec: Math.ceil(text.length / 16),\n bytes: bytes.length,\n };\n}\n\nasync function serveAudioBlob(key: string): Promise {\n try {\n const bytes = await blob.get(key);\n if (!bytes) return new Response(\"Not found\", { status: 404 });\n const buffer = await bytes.arrayBuffer();\n return new Response(buffer, {\n status: 200,\n headers: {\n \"Content-Type\": \"audio/mpeg\",\n \"Cache-Control\": \"public, max-age=31536000\",\n \"Access-Control-Allow-Origin\": \"*\",\n },\n });\n } catch (e) {\n console.error(\"Blob fetch failed:\", e);\n return new Response(\"Error\", { status: 500 });\n }\n}\n\nasync function elevenLabsVoices() {\n const key = Deno.env.get(\"ELEVENLABS_API_KEY\");\n if (!key) return { voices: HARDCODED_VOICES };\n try {\n const res = await fetch(\"https://api.elevenlabs.io/v1/voices\", {\n headers: { \"xi-api-key\": key },\n });\n if (!res.ok) return { voices: HARDCODED_VOICES };\n const data = await res.json();\n return {\n voices: (data.voices || []).slice(0, 12).map((v: any) => ({\n id: v.voice_id,\n name: v.name,\n labels: v.labels || {},\n preview: v.preview_url,\n })),\n };\n } catch (e) {\n return { voices: HARDCODED_VOICES };\n }\n}\n\nconst HARDCODED_VOICES = [\n {\n id: \"21m00Tcm4TlvDq8ikWAM\",\n name: \"Rachel\",\n labels: { gender: \"female\", accent: \"american\" },\n },\n {\n id: \"AZnzlk1XvdvUeBnXmlld\",\n name: \"Domi\",\n labels: { gender: \"female\", accent: \"american\" },\n },\n {\n id: \"EXAVITQu4vr4xnSDxMaL\",\n name: \"Bella\",\n labels: { gender: \"female\", accent: \"american\" },\n },\n {\n id: \"ErXwobaYiN019PkySvjV\",\n name: \"Antoni\",\n labels: { gender: \"male\", accent: \"american\" },\n },\n {\n id: \"MF3mGyEYCl7XYWbV9V6O\",\n name: \"Elli\",\n labels: { gender: \"female\", accent: \"american\" },\n },\n {\n id: \"TxGEqnHWrfWFTfGW9XjX\",\n name: \"Josh\",\n labels: { gender: \"male\", accent: \"american\" },\n },\n {\n id: \"VR6AewLTigWG4xSOukaG\",\n name: \"Arnold\",\n labels: { gender: \"male\", accent: \"american\" },\n },\n {\n id: \"pNInz6obpgDQGcFmaJgB\",\n name: \"Adam\",\n labels: {\n gender: \"male\",\n accent: \"american\",\n best_for: \"conspiracy/mystery\",\n },\n },\n {\n id: \"yoZ06aMxZJJ28mfd3POQ\",\n name: \"Sam\",\n labels: { gender: \"male\", accent: \"american\" },\n },\n {\n id: \"ThT5KcBeYPX3keUQqHPh\",\n name: \"Dorothy\",\n labels: { gender: \"female\", accent: \"british\" },\n },\n];\n\n// ============================================================\n// TikTok OAuth\n// ============================================================\n\nasync function tiktokAuthURL({ user_id, return_to }: any) {\n const clientKey = Deno.env.get(\"TIKTOK_CLIENT_KEY\")!;\n const redirectUri = Deno.env.get(\"TIKTOK_REDIRECT_URI\")!;\n const state = btoa(JSON.stringify({\n user_id: user_id || \"\",\n return_to: return_to || \"/Account\",\n nonce: crypto.randomUUID(),\n ts: Date.now(),\n }));\n const params = new URLSearchParams({\n client_key: clientKey,\n response_type: \"code\",\n scope: \"user.info.basic,video.upload,video.publish\",\n redirect_uri: redirectUri,\n state,\n });\n return { auth_url: `https://www.tiktok.com/v2/auth/authorize/?${params}` };\n}\n\nasync function tiktokCallback(url: URL): Promise {\n const code = url.searchParams.get(\"code\");\n const state = url.searchParams.get(\"state\");\n const error = url.searchParams.get(\"error\");\n const appUrl = Deno.env.get(\"BASE44_APP_URL\") ||\n \"https://snap-knowing-sync-flow.base44.app\";\n\n if (error) {\n return Response.redirect(\n `${appUrl}/Account?tiktok_error=${encodeURIComponent(error)}`,\n 302,\n );\n }\n if (!code || !state) {\n return Response.redirect(\n `${appUrl}/Account?tiktok_error=missing_code`,\n 302,\n );\n }\n\n let decodedState: any;\n try {\n decodedState = JSON.parse(atob(state));\n } catch {\n return Response.redirect(`${appUrl}/Account?tiktok_error=bad_state`, 302);\n }\n\n const tokenRes = await fetch(\"https://open.tiktokapis.com/v2/oauth/token/\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n client_key: Deno.env.get(\"TIKTOK_CLIENT_KEY\")!,\n client_secret: Deno.env.get(\"TIKTOK_CLIENT_SECRET\")!,\n code,\n grant_type: \"authorization_code\",\n redirect_uri: Deno.env.get(\"TIKTOK_REDIRECT_URI\")!,\n }).toString(),\n });\n\n const tokens = await tokenRes.json();\n if (!tokens.access_token) {\n console.error(\"[tiktok] token exchange failed:\", tokens);\n return Response.redirect(\n `${appUrl}/Account?tiktok_error=token_exchange_failed`,\n 302,\n );\n }\n\n const payload = encodeURIComponent(JSON.stringify({\n access_token: tokens.access_token,\n refresh_token: tokens.refresh_token,\n expires_in: tokens.expires_in,\n open_id: tokens.open_id,\n scope: tokens.scope,\n user_id: decodedState.user_id,\n }));\n\n return Response.redirect(\n `${appUrl}${\n decodedState.return_to || \"/Account\"\n }#tiktok_connected=${payload}`,\n 302,\n );\n}\n\n// ============================================================\n// TikTok Content Posting\n// ============================================================\n\nasync function tiktokPublish({\n access_token,\n video_url,\n caption,\n is_ai_generated = true,\n privacy = \"SELF_ONLY\",\n disable_duet = false,\n disable_comment = false,\n disable_stitch = false,\n}: any) {\n if (!access_token) return { error: \"access_token required\" };\n if (!video_url) return { error: \"video_url required\" };\n\n console.log(`[tiktok] publishing ${video_url}`);\n\n const res = await fetch(\n \"https://open.tiktokapis.com/v2/post/publish/video/init/\",\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${access_token}`,\n \"Content-Type\": \"application/json; charset=UTF-8\",\n },\n body: JSON.stringify({\n post_info: {\n title: caption || \"\",\n privacy_level: privacy,\n disable_duet,\n disable_comment,\n disable_stitch,\n brand_content_toggle: false,\n brand_organic_toggle: false,\n ai_generated: is_ai_generated,\n },\n source_info: { source: \"PULL_FROM_URL\", video_url },\n }),\n },\n );\n\n const data = await res.json();\n if (!res.ok || data.error?.code !== \"ok\") {\n console.error(\"[tiktok] publish init failed:\", data);\n return { error: data.error?.message || `TikTok ${res.status}`, raw: data };\n }\n return { publish_id: data.data?.publish_id };\n}\n\nasync function tiktokPublishStatus({ access_token, publish_id }: any) {\n if (!access_token || !publish_id) {\n return { error: \"access_token and publish_id required\" };\n }\n const res = await fetch(\n \"https://open.tiktokapis.com/v2/post/publish/status/fetch/\",\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${access_token}`,\n \"Content-Type\": \"application/json; charset=UTF-8\",\n },\n body: JSON.stringify({ publish_id }),\n },\n );\n const data = await res.json();\n if (!res.ok) return { error: `TikTok ${res.status}`, raw: data };\n return {\n status: data.data?.status,\n publicaly_available_post_id: data.data?.publicaly_available_post_id,\n fail_reason: data.data?.fail_reason,\n };\n}\n\n// ============================================================\n// Stripe\n// ============================================================\n\nconst STRIPE_BASE = \"https://api.stripe.com/v1\";\n\nasync function stripeForm(path: string, body: Record) {\n const key = Deno.env.get(\"STRIPE_SECRET_KEY\")!;\n const res = await fetch(`${STRIPE_BASE}${path}`, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${key}`,\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body: new URLSearchParams(body).toString(),\n });\n const data = await res.json();\n if (!res.ok) throw new Error(`Stripe ${res.status}: ${JSON.stringify(data)}`);\n return data;\n}\n\nasync function stripeGet(path: string, params?: Record) {\n const key = Deno.env.get(\"STRIPE_SECRET_KEY\")!;\n const qs = params ? \"?\" + new URLSearchParams(params).toString() : \"\";\n const res = await fetch(`${STRIPE_BASE}${path}${qs}`, {\n headers: { Authorization: `Bearer ${key}` },\n });\n const data = await res.json();\n if (!res.ok) throw new Error(`Stripe ${res.status}: ${JSON.stringify(data)}`);\n return data;\n}\n\nasync function stripeCheckout({ user_id, email, plan, return_url }: any) {\n const priceId = plan === \"pro_annual\"\n ? Deno.env.get(\"STRIPE_PRICE_ANNUAL\")!\n : Deno.env.get(\"STRIPE_PRICE_MONTHLY\")!;\n const appUrl = Deno.env.get(\"BASE44_APP_URL\") || return_url ||\n \"https://snap-knowing-sync-flow.base44.app\";\n\n const existing = await stripeGet(\"/customers\", { email, limit: \"1\" });\n let customerId = existing.data?.[0]?.id;\n if (!customerId) {\n const created = await stripeForm(\"/customers\", {\n email,\n \"metadata[user_id]\": user_id || \"\",\n \"metadata[source]\": \"syncflow_ai\",\n });\n customerId = created.id;\n }\n\n const session = await stripeForm(\"/checkout/sessions\", {\n mode: \"subscription\",\n customer: customerId,\n \"line_items[0][price]\": priceId,\n \"line_items[0][quantity]\": \"1\",\n success_url:\n `${appUrl}/Account?trial_started=1&session_id={CHECKOUT_SESSION_ID}`,\n cancel_url: `${appUrl}/Pricing?cancelled=1`,\n allow_promotion_codes: \"true\",\n \"metadata[user_id]\": user_id || \"\",\n \"subscription_data[metadata][user_id]\": user_id || \"\",\n \"subscription_data[trial_period_days]\": \"14\",\n \"payment_method_collection\": \"always\",\n });\n return { checkout_url: session.url, session_id: session.id };\n}\n\nasync function stripePortal({ email, return_url }: any) {\n const existing = await stripeGet(\"/customers\", { email, limit: \"1\" });\n const customer = existing.data?.[0];\n if (!customer) return { error: \"No Stripe customer for this email\" };\n const portal = await stripeForm(\"/billing_portal/sessions\", {\n customer: customer.id,\n return_url: return_url ||\n \"https://snap-knowing-sync-flow.base44.app/Account\",\n });\n return { portal_url: portal.url };\n}\n\nasync function handleStripeWebhook(req: Request): Promise {\n const sig = req.headers.get(\"stripe-signature\");\n const secret = Deno.env.get(\"STRIPE_WEBHOOK_SECRET\");\n if (!sig || !secret) {\n return new Response(\"Missing signature/secret\", { status: 400 });\n }\n\n const rawBody = await req.text();\n const verified = await verifyStripeSignature(rawBody, sig, secret);\n if (!verified) return new Response(\"Bad signature\", { status: 400 });\n\n const event = JSON.parse(rawBody);\n console.log(\"Stripe webhook:\", event.type, event.id);\n\n switch (event.type) {\n case \"checkout.session.completed\":\n case \"customer.subscription.created\":\n case \"customer.subscription.updated\":\n case \"customer.subscription.trial_will_end\": {\n const sub = event.data.object;\n const userId = sub.metadata?.user_id;\n const status = sub.status || \"trialing\";\n const isPro = status === \"active\" || status === \"trialing\";\n console.log(\n `[webhook] user=${userId} status=${status} tier=${\n isPro ? \"pro\" : \"free\"\n }`,\n );\n break;\n }\n case \"customer.subscription.deleted\": {\n const sub = event.data.object;\n console.log(`[webhook] cancellation user=${sub.metadata?.user_id}`);\n break;\n }\n }\n return new Response(\"ok\", { status: 200 });\n}\n\nasync function verifyStripeSignature(\n body: string,\n header: string,\n secret: string,\n): Promise {\n const parts = Object.fromEntries(header.split(\",\").map((p) => p.split(\"=\")));\n const t = parts.t, v1 = parts.v1;\n if (!t || !v1) return false;\n const enc = new TextEncoder();\n const key = await crypto.subtle.importKey(\n \"raw\",\n enc.encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const expected = await crypto.subtle.sign(\n \"HMAC\",\n key,\n enc.encode(`${t}.${body}`),\n );\n const expectedHex = Array.from(new Uint8Array(expected)).map((b) =>\n b.toString(16).padStart(2, \"0\")\n ).join(\"\");\n if (expectedHex.length !== v1.length) return false;\n let r = 0;\n for (let i = 0; i < expectedHex.length; i++) {\n r |= expectedHex.charCodeAt(i) ^ v1.charCodeAt(i);\n }\n return r === 0;\n}\n\n// ============================================================\n// Helpers\n// ============================================================\n\nfunction json(data: any, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...CORS },\n });\n}","deleted","label",[114],"pulls",1,"forks","envVars",{"_137":139,"_140":51},"connections",{"_137":51,"_138":51},"count","unfilledCount",4,"emptyCount",{"_20":113,"_13":114,"_115":116,"_117":-5,"_118":21,"_119":30,"_120":107,"_22":142,"_29":122,"_123":124,"_125":126,"_127":38,"_128":-5,"_143":144,"_88":145},["D",1778889604806],"children",[],[114],["D",1778881760555],{"_11":12,"_86":82},{"_11":12,"_79":80,"_81":82,"_44":45,"_83":84,"_85":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_74":-5,"_75":-5,"_76":-5,"_77":14,"_78":12},"ctx",{"_67":-5,"_109":183,"_184":185,"_186":187,"_188":38,"_189":38,"_190":38,"_191":107,"_192":-5,"_193":-7,"_194":-7,"_195":51,"_196":38,"_197":38,"_198":-5,"_199":38,"_200":38,"_201":38,"_202":-5},"ENV",{"_154":155,"_156":157,"_158":26,"_159":160,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1