${ok ? \"✓ Verified\" : \"✗ Access denied\"}

${\n ok\n ? \"You're verified. Return to MotiveWave — the zones will load automatically.\"\n : (okMsg ?? \"You need the required role in the Discord server.\")\n }

`;\n return new Response(html, {\n status: ok ? 200 : 403,\n headers: { \"Content-Type\": \"text/html\" },\n });\n}\n\n// ── HTTP handler ─────────────────────────────────────────────────────────────\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, X-Upload-Token, X-Session\",\n };\n const json = (\n obj: unknown,\n status = 200,\n extra: Record = {},\n ) =>\n new Response(JSON.stringify(obj), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...cors, ...extra },\n });\n\n if (req.method === \"OPTIONS\") return new Response(null, { headers: cors });\n if (path === \"/health\") {\n return json({ ok: true, ts: new Date().toISOString() });\n }\n\n const redirectUri = `${url.origin}/discord/callback`;\n\n // Public config for the JAR's IPC handshake (client_id is not secret).\n if (path === \"/discord/config\" && req.method === \"GET\") {\n return json({ clientId: env(\"DISCORD_CLIENT_ID\"), scopes: [\"identify\"] });\n }\n\n // Browser flow: kick off Discord OAuth.\n if (path === \"/discord/login\" && req.method === \"GET\") {\n const state = url.searchParams.get(\"state\") ?? crypto.randomUUID();\n const auth = new URL(\"https://discord.com/oauth2/authorize\");\n auth.searchParams.set(\"client_id\", env(\"DISCORD_CLIENT_ID\"));\n auth.searchParams.set(\"response_type\", \"code\");\n auth.searchParams.set(\"scope\", \"identify\");\n auth.searchParams.set(\"redirect_uri\", redirectUri);\n auth.searchParams.set(\"state\", state);\n return Response.redirect(auth.toString(), 302);\n }\n\n // Browser flow: Discord redirects back here with a code.\n if (path === \"/discord/callback\" && req.method === \"GET\") {\n const code = url.searchParams.get(\"code\");\n const state = url.searchParams.get(\"state\") ?? \"\";\n if (!code) return resultPage(\"Missing authorization code.\");\n try {\n const session = await verifyAndMint(code, redirectUri);\n if (!session) {\n return resultPage(\"You need the required role in the Discord server.\");\n }\n if (state) {\n await blob.setJSON(`pending_${state}`, {\n token: session,\n ts: Date.now(),\n });\n }\n return resultPage(null);\n } catch (e) {\n return resultPage(`Verification error: ${(e as Error).message}`);\n }\n }\n\n // Client polls this after opening the browser; returns the session once ready.\n if (path === \"/discord/poll\" && req.method === \"GET\") {\n const state = url.searchParams.get(\"state\") ?? \"\";\n if (!state) return json({ error: \"missing state\" }, 400);\n const rec: any = await blob.getJSON(`pending_${state}`).catch(() => null);\n if (!rec) return json({ pending: true });\n await blob.delete(`pending_${state}`).catch(() => {});\n return json({ token: rec.token });\n }\n\n // IPC flow: JAR obtained a code over Discord IPC and posts it here.\n if (path === \"/discord/verify\" && req.method === \"POST\") {\n let b: any;\n try {\n b = await req.json();\n } catch {\n return json({ error: \"invalid JSON\" }, 400);\n }\n if (!b.code) return json({ error: \"missing code\" }, 400);\n try {\n const session = await verifyAndMint(b.code, b.redirectUri ?? redirectUri);\n if (!session) return json({ error: \"role required\" }, 403);\n return json({ token: session });\n } catch (e) {\n return json({ error: (e as Error).message }, 500);\n }\n }\n\n // Debug: live conversion inputs (not gated; reveals no zones).\n if (path === \"/quote\" && req.method === \"GET\") {\n const stored: any = (await blob.getJSON(LEVELS_KEY).catch(() => null)) ??\n {};\n const c = await computeRatio(stored.ratio);\n return json({\n futSym: FUT_SYMBOL,\n etfSym: ETF_SYMBOL,\n fut: c.fut,\n etf: c.etf,\n rawRatio: c.raw,\n ratio: c.ratio,\n source: c.source,\n error: c.error ?? null,\n ts: new Date().toISOString(),\n });\n }\n\n // GET /: zones + live ratio. Gated by Discord session OR admin upload token.\n if (req.method === \"GET\") {\n const admin = req.headers.get(\"X-Upload-Token\");\n const isAdmin = admin && admin === env(\"UPLOAD_TOKEN\");\n if (!isAdmin) {\n const okSession = await sessionValid(req.headers.get(\"X-Session\") ?? \"\");\n if (!okSession) return json({ error: \"unauthorized\" }, 401);\n }\n const data: any = await blob.getJSON(LEVELS_KEY).catch(() => null);\n if (!data) return json({ error: \"no levels uploaded yet\" }, 404);\n const c = await computeRatio(data.ratio);\n return json(\n {\n updated: data.updated,\n ratio: c.ratio,\n ratioSource: c.source,\n fut: c.fut,\n etf: c.etf,\n futSym: FUT_SYMBOL,\n etfSym: ETF_SYMBOL,\n w1d1: data.w1d1 ?? [],\n w7m60: data.w7m60 ?? [],\n w10m15: data.w10m15 ?? [],\n w50m1: data.w50m1 ?? [],\n },\n 200,\n { \"Cache-Control\": \"no-store\" },\n );\n }\n\n // POST /: upload strikes (admin only).\n if (req.method === \"POST\") {\n const token = req.headers.get(\"X-Upload-Token\");\n if (!env(\"UPLOAD_TOKEN\")) {\n return json({ error: \"server misconfigured: UPLOAD_TOKEN not set\" }, 500);\n }\n if (token !== env(\"UPLOAD_TOKEN\")) {\n return json({ error: \"invalid upload token\" }, 401);\n }\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ error: \"invalid JSON body\" }, 400);\n }\n for (const key of [\"w1d1\", \"w7m60\", \"w10m15\", \"w50m1\"]) {\n if (!(key in body)) return json({ error: `missing field: ${key}` }, 400);\n }\n const payload = {\n updated: new Date().toISOString(),\n ratio: typeof body.ratio === \"number\" && body.ratio > 0 ? body.ratio : 0,\n w1d1: body.w1d1,\n w7m60: body.w7m60,\n w10m15: body.w10m15,\n w50m1: body.w50m1,\n };\n await blob.setJSON(LEVELS_KEY, payload);\n return json({\n ok: true,\n updated: payload.updated,\n mode: payload.ratio > 0 ? `manual ${payload.ratio}` : \"live\",\n });\n }\n\n return json({ error: \"method not allowed\" }, 405);\n}","deleted","label",[107],"pulls","branches",1,"forks","envVars",{"_130":132,"_133":42},"connections",{"_130":42,"_131":42},"count","unfilledCount",4,"emptyCount",{"_18":106,"_20":107,"_108":36,"_109":-5,"_110":68,"_111":66,"_112":38,"_22":135,"_65":114,"_115":116,"_117":118,"_119":26,"_120":-5,"_136":137,"_84":138},["D",1785264698182],"children",[],[107],["D",1784974752616],{"_16":17,"_82":31},{"_16":17,"_77":31,"_78":31,"_33":34,"_79":80,"_81":26},{"_65":66,"_20":67,"_18":68,"_69":19,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":21,"_76":17},"ctx",{"_58":-5,"_102":176,"_177":178,"_179":180,"_181":26,"_182":26,"_183":26,"_184":38,"_185":-5,"_186":-7,"_187":-7,"_188":42,"_189":26,"_190":26,"_191":-5,"_192":26,"_193":26,"_194":26,"_195":-5},"ENV",{"_147":148,"_149":150,"_151":67,"_152":153,"_154":155,"_156":157,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Search