[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_180":181,"_182":183},"routes/_app.x.$handle.$name",{"_96":95,"_31":44,"_105":86,"_26":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":24,"_120":121,"_122":24,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_31":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":24},"version",4,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","lib/github.ts","latestPath","fileId","d4fc094c-e902-11f0-87e3-42dde27851f2","name","github.ts","fileType","script","content","/**\n * GitHub API client for rate limits and user info.\n */\n\nexport interface RateLimitInfo {\n limit: number;\n remaining: number;\n reset: number; // Unix timestamp\n used: number;\n}\n\nexport interface RateLimits {\n core: RateLimitInfo;\n search: RateLimitInfo;\n graphql: RateLimitInfo;\n integration_manifest: RateLimitInfo;\n source_import?: RateLimitInfo;\n code_scanning_upload: RateLimitInfo;\n code_scanning_autofix?: RateLimitInfo;\n actions_runner_registration: RateLimitInfo;\n scim?: RateLimitInfo;\n dependency_snapshots?: RateLimitInfo;\n dependency_sbom?: RateLimitInfo;\n audit_log?: RateLimitInfo;\n audit_log_streaming?: RateLimitInfo;\n code_search: RateLimitInfo;\n}\n\nexport interface GitHubUser {\n login: string;\n avatar_url: string;\n name: string | null;\n html_url: string;\n}\n\n// All rate limit categories we want to display\nexport const RATE_LIMIT_CATEGORIES = [\n { key: \"core\", name: \"Core\", description: \"Non-search REST API\" },\n { key: \"search\", name: \"Search\", description: \"Search API (non-code)\" },\n { key: \"graphql\", name: \"GraphQL\", description: \"GraphQL API\" },\n { key: \"code_search\", name: \"Code Search\", description: \"Code search API\" },\n { key: \"integration_manifest\", name: \"Integration Manifest\", description: \"App manifest conversions\" },\n { key: \"source_import\", name: \"Source Import\", description: \"Repository imports\" },\n { key: \"code_scanning_upload\", name: \"Code Scanning Upload\", description: \"SARIF uploads\" },\n { key: \"code_scanning_autofix\", name: \"Code Scanning Autofix\", description: \"Autofix suggestions\" },\n { key: \"actions_runner_registration\", name: \"Actions Runners\", description: \"Self-hosted runner registration\" },\n { key: \"scim\", name: \"SCIM\", description: \"Identity provisioning\" },\n { key: \"dependency_snapshots\", name: \"Dependency Snapshots\", description: \"Dependency graph submissions\" },\n { key: \"dependency_sbom\", name: \"Dependency SBOM\", description: \"SBOM exports\" },\n { key: \"audit_log\", name: \"Audit Log\", description: \"Audit log queries\" },\n { key: \"audit_log_streaming\", name: \"Audit Log Streaming\", description: \"Audit log stream config\" },\n] as const;\n\nexport type RateLimitCategory = typeof RATE_LIMIT_CATEGORIES[number][\"key\"];\n\n/**\n * Fetch rate limits from GitHub API\n */\nexport async function fetchRateLimits(\n token: string\n): Promise<{ limits: Partial } | { error: string }> {\n const response = await fetch(\"https://api.github.com/rate_limit\", {\n headers: {\n Authorization: `Bearer ${token}`,\n Accept: \"application/vnd.github+json\",\n \"X-GitHub-Api-Version\": \"2022-11-28\",\n },\n });\n\n if (!response.ok) {\n if (response.status === 401) {\n return { error: \"Invalid or expired token\" };\n }\n return { error: `GitHub API error: ${response.status}` };\n }\n\n const data = await response.json();\n return { limits: data.resources as Partial };\n}\n\n/**\n * Fetch authenticated user info\n */\nexport async function fetchUser(\n token: string\n): Promise<{ user: GitHubUser } | { error: string }> {\n const response = await fetch(\"https://api.github.com/user\", {\n headers: {\n Authorization: `Bearer ${token}`,\n Accept: \"application/vnd.github+json\",\n \"X-GitHub-Api-Version\": \"2022-11-28\",\n },\n });\n\n if (!response.ok) {\n if (response.status === 401) {\n return { error: \"Invalid or expired token\" };\n }\n return { error: `GitHub API error: ${response.status}` };\n }\n\n const data = await response.json();\n return {\n user: {\n login: data.login,\n avatar_url: data.avatar_url,\n name: data.name,\n html_url: data.html_url,\n },\n };\n}\n\n/**\n * Get status color based on remaining percentage\n */\nexport function getStatusColor(remaining: number, limit: number): \"healthy\" | \"low\" | \"exhausted\" {\n if (limit === 0) return \"healthy\"; // Unlimited or N/A\n const percentage = (remaining / limit) * 100;\n if (percentage <= 10) return \"exhausted\";\n if (percentage <= 50) return \"low\";\n return \"healthy\";\n}\n\n/**\n * Format reset time as relative string\n */\nexport function formatResetTime(resetTimestamp: number): string {\n const now = Math.floor(Date.now() / 1000);\n const diff = resetTimestamp - now;\n \n if (diff <= 0) return \"now\";\n if (diff < 60) return `${diff}s`;\n if (diff < 3600) return `${Math.floor(diff / 60)}m`;\n return `${Math.floor(diff / 3600)}h ${Math.floor((diff % 3600) / 60)}m`;\n}\n","createdAt",["D",1767485882092],"branchVersion","branchId","b9592c74-e902-11f0-aa65-42dde27851f2","id","b958ef02-e902-11f0-aa65-42dde27851f2","github-ratelimits",["D",1767485835729],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","GitHub OAuth rate limit dashboard","imageUrl","3ee322c5-8742-48e0-86c7-5f3ae129683b","pinnedFileId","ef5415dc-e902-11f0-95e7-42dde27851f2","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","f427167a-3263-4778-81d8-f79626323ff5","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":54,"_101":102,"_103":24},"branch",{"_13":85,"_31":86,"_42":41,"_87":43,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":44,"_94":95},"isOwned",9,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","kamalnrf","handle","displayName","Kamal","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yaVpXT3l1d2hWSFdtWTNoZFIwZ0lFUUhOd2oifQ","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_31":44,"_37":176,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":177,"_80":178,"_82":179,"_84":24},"tree",[148],"files",[148,149,150,151],"counts",{"_138":62,"_139":132,"_140":62,"_141":142,"_143":144},"contents",[127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":128,"_31":129,"_29":130,"_131":-5,"_40":41,"_39":132,"_133":58,"_37":134,"_13":62,"_33":135,"_35":-5,"_23":24,"_136":-5,"_26":137},"bc0dfdc8-e902-11f0-a4c2-42dde27851f2","lib","bc0dfe72-e902-11f0-a4c2-42dde27851f2","parentId",1,"latest",["D",1767485840266],"directory","label",[129],"pulls","branches","forks","envVars",{"_145":14,"_147":62},"connections",{"_145":62,"_146":62},"count","unfilledCount","emptyCount",{"_42":128,"_31":129,"_29":130,"_131":-5,"_40":41,"_39":132,"_133":58,"_37":173,"_13":62,"_33":135,"_35":-5,"_23":24,"_136":-5,"_158":174,"_26":175},{"_42":169,"_31":32,"_29":30,"_131":130,"_40":41,"_39":14,"_133":58,"_37":170,"_13":62,"_33":34,"_35":36,"_23":24,"_136":-5,"_158":171,"_26":172},{"_42":161,"_31":162,"_29":163,"_131":130,"_40":41,"_39":164,"_133":58,"_37":165,"_13":62,"_33":34,"_35":166,"_23":24,"_136":-5,"_158":167,"_26":168},{"_42":152,"_31":153,"_29":154,"_131":130,"_40":41,"_39":155,"_133":58,"_37":156,"_13":62,"_33":34,"_35":157,"_23":24,"_136":-5,"_158":159,"_26":160},"c4459032-e902-11f0-bbf4-42dde27851f2","session.ts","c445910e-e902-11f0-bbf4-42dde27851f2",2,["D",1767485854051],"/**\n * Session management using encrypted, signed cookies.\n * Token is encrypted with AES-GCM and signed with HMAC.\n */\n\nconst encoder = new TextEncoder();\nconst decoder = new TextDecoder();\n\n// Cookie configuration\nconst COOKIE_NAME = \"gh_session\";\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 7; // 7 days\n\nasync function getEncryptionKey(): Promise {\n const secret = Deno.env.get(\"SESSION_SECRET\");\n if (!secret || secret.length < 32) {\n throw new Error(\"SESSION_SECRET must be at least 32 characters\");\n }\n const keyMaterial = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(secret.slice(0, 32)),\n \"AES-GCM\",\n false,\n [\"encrypt\", \"decrypt\"]\n );\n return keyMaterial;\n}\n\nexport async function encryptToken(token: string): Promise {\n const key = await getEncryptionKey();\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const encrypted = await crypto.subtle.encrypt(\n { name: \"AES-GCM\", iv },\n key,\n encoder.encode(token)\n );\n // Combine IV + ciphertext and base64 encode\n const combined = new Uint8Array(iv.length + encrypted.byteLength);\n combined.set(iv);\n combined.set(new Uint8Array(encrypted), iv.length);\n return btoa(String.fromCharCode(...combined));\n}\n\nexport async function decryptToken(encrypted: string): Promise {\n try {\n const key = await getEncryptionKey();\n const combined = Uint8Array.from(atob(encrypted), (c) => c.charCodeAt(0));\n const iv = combined.slice(0, 12);\n const ciphertext = combined.slice(12);\n const decrypted = await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv },\n key,\n ciphertext\n );\n return decoder.decode(decrypted);\n } catch {\n return null;\n }\n}\n\nexport function createSessionCookie(encryptedToken: string): string {\n return `${COOKIE_NAME}=${encryptedToken}; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=${COOKIE_MAX_AGE}`;\n}\n\nexport function clearSessionCookie(): string {\n return `${COOKIE_NAME}=; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=0`;\n}\n\nexport function getSessionFromCookie(cookieHeader: string | null): string | null {\n if (!cookieHeader) return null;\n const cookies = Object.fromEntries(\n cookieHeader.split(\";\").map((c) => {\n const [key, ...rest] = c.trim().split(\"=\");\n return [key, rest.join(\"=\")];\n })\n );\n return cookies[COOKIE_NAME] || null;\n}\n\n// State parameter for CSRF protection\nexport function generateState(): string {\n return crypto.randomUUID();\n}\n\nexport function createStateCookie(state: string): string {\n return `gh_state=${state}; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=600`;\n}\n\nexport function getStateFromCookie(cookieHeader: string | null): string | null {\n if (!cookieHeader) return null;\n const cookies = Object.fromEntries(\n cookieHeader.split(\";\").map((c) => {\n const [key, ...rest] = c.trim().split(\"=\");\n return [key, rest.join(\"=\")];\n })\n );\n return cookies[\"gh_state\"] || null;\n}\n\nexport function clearStateCookie(): string {\n return `gh_state=; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=0`;\n}\n","children",[],[129,153],"ca2ab9dc-e902-11f0-b834-42dde27851f2","oauth.ts","ca2aba72-e902-11f0-b834-42dde27851f2",3,["D",1767485863942],"/**\n * GitHub OAuth web flow implementation.\n * Handles authorization URL generation and token exchange.\n */\n\ninterface OAuthConfig {\n clientId: string;\n clientSecret: string;\n redirectUri: string;\n}\n\ninterface TokenResponse {\n access_token: string;\n token_type: string;\n scope: string;\n}\n\ninterface OAuthError {\n error: string;\n error_description?: string;\n}\n\nfunction getConfig(): OAuthConfig {\n const clientId = Deno.env.get(\"GITHUB_CLIENT_ID\");\n const clientSecret = Deno.env.get(\"GITHUB_CLIENT_SECRET\");\n const redirectUri = Deno.env.get(\"GITHUB_REDIRECT_URI\");\n\n if (!clientId || !clientSecret || !redirectUri) {\n throw new Error(\"Missing GitHub OAuth configuration\");\n }\n\n return { clientId, clientSecret, redirectUri };\n}\n\n/**\n * Generate GitHub authorization URL with state parameter\n */\nexport function getAuthorizationUrl(state: string): string {\n const config = getConfig();\n const params = new URLSearchParams({\n client_id: config.clientId,\n redirect_uri: config.redirectUri,\n state,\n // No special scopes needed for rate_limit endpoint\n // Empty scope gives access to public info only\n scope: \"\",\n });\n return `https://github.com/login/oauth/authorize?${params}`;\n}\n\n/**\n * Exchange authorization code for access token\n */\nexport async function exchangeCodeForToken(\n code: string\n): Promise<{ token: string } | { error: string }> {\n const config = getConfig();\n\n const response = await fetch(\"https://github.com/login/oauth/access_token\", {\n method: \"POST\",\n headers: {\n Accept: \"application/json\",\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n client_id: config.clientId,\n client_secret: config.clientSecret,\n code,\n }),\n });\n\n if (!response.ok) {\n return { error: \"Failed to exchange code for token\" };\n }\n\n const data = await response.json();\n\n if (\"error\" in data) {\n const errorData = data as OAuthError;\n return { error: errorData.error_description || errorData.error };\n }\n\n const tokenData = data as TokenResponse;\n return { token: tokenData.access_token };\n}\n",[],[129,162],"d4fc088e-e902-11f0-87e3-42dde27851f2",["D",1767485882092],[],[129,32],["D",1767485840266],[149,150,151],[129],["D",1767485835729],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":54,"_101":102,"_103":24},{"_13":85,"_31":86,"_42":41,"_87":43,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":44,"_94":95},"ctx",{"_78":-5,"_124":213,"_214":215,"_216":217,"_218":24,"_219":24,"_220":24,"_221":58,"_222":-5,"_223":-7,"_224":-7,"_225":62,"_226":24,"_227":24,"_228":-5,"_229":24,"_230":24,"_231":24,"_232":-5},"ENV",{"_184":185,"_186":187,"_188":86,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v4