${title}

\n`;\n\nconst htmlFoot = `\n

\n \n\n\n`;\n\nconst githubLogo = ``;\n\nfunction renderLoginPage() {\n return `${htmlHead(\"GitHub Rate Limits - Login\")}\n \n ${htmlFoot}`;\n}\n\nfunction renderRateLimitCard(\n key: string,\n name: string,\n description: string,\n info: RateLimitInfo | undefined\n) {\n if (!info) {\n return `\n

${name}

\n ${description}\n

\n Status\n N/A\n

\n `;\n }\n\n const status = getStatusColor(info.remaining, info.limit);\n const percentage = info.limit > 0 ? (info.remaining / info.limit) * 100 : 100;\n const resetIn = formatResetTime(info.reset);\n\n return `\n

${name}

\n ${description}\n

\n Remaining\n ${info.remaining.toLocaleString()}\n

\n Limit\n ${info.limit.toLocaleString()}\n

\n Used\n ${info.used.toLocaleString()}\n

\n Resets In\n ${resetIn}\n

\n \n

\n `;\n}\n\nfunction renderDashboard(\n user: GitHubUser,\n limits: Record\n) {\n const cards = RATE_LIMIT_CATEGORIES.map((cat) =>\n renderRateLimitCard(cat.key, cat.name, cat.description, limits[cat.key])\n ).join(\"\");\n\n return `${htmlHead(`GitHub Rate Limits - ${user.login}`)}\n

\n $\"${user.login}\"$ \n

${user.name || user.login}

\n @${user.login}\n

\n Sign out\n Refresh\n

\n \n

API Rate Limits

Current rate limit status for your GitHub account. Categories marked \"N/A\" are not available for your token type.

\n \n

\n ${cards}\n

\n ${htmlFoot}`;\n}\n\nfunction renderError(title: string, message: string, showLogin = true) {\n return `${htmlHead(title)}\n \n ${htmlFoot}`;\n}\n\n// Routes\nrouter.get(\n \"/\",\n defineEventHandler(async (event) => {\n const cookieHeader = getHeader(event, \"cookie\");\n const encryptedToken = getSessionFromCookie(cookieHeader);\n\n // No session - show login\n if (!encryptedToken) {\n setHeader(event, \"Content-Type\", \"text/html\");\n return renderLoginPage();\n }\n\n // Decrypt token\n const token = await decryptToken(encryptedToken);\n if (!token) {\n // Invalid session - clear and show login\n setHeader(event, \"Set-Cookie\", clearSessionCookie());\n setHeader(event, \"Content-Type\", \"text/html\");\n return renderLoginPage();\n }\n\n // Fetch user and rate limits in parallel\n const [userResult, limitsResult] = await Promise.all([\n fetchUser(token),\n fetchRateLimits(token),\n ]);\n\n if (\"error\" in userResult || \"error\" in limitsResult) {\n const error = \"error\" in userResult ? userResult.error : limitsResult.error;\n // Token might be invalid - clear session\n setHeader(event, \"Set-Cookie\", clearSessionCookie());\n setHeader(event, \"Content-Type\", \"text/html\");\n return renderError(\"Authentication Error\", error as string);\n }\n\n setHeader(event, \"Content-Type\", \"text/html\");\n setHeader(event, \"Cache-Control\", \"no-store\");\n return renderDashboard(userResult.user, limitsResult.limits);\n })\n);\n\nrouter.get(\n \"/login\",\n defineEventHandler((event) => {\n const state = generateState();\n const authUrl = getAuthorizationUrl(state);\n\n // Set state cookie for CSRF protection\n setHeader(event, \"Set-Cookie\", createStateCookie(state));\n return sendRedirect(event, authUrl);\n })\n);\n\nrouter.get(\n \"/callback\",\n defineEventHandler(async (event) => {\n const query = getQuery(event);\n const code = query.code as string | undefined;\n const state = query.state as string | undefined;\n const error = query.error as string | undefined;\n\n if (error) {\n setHeader(event, \"Content-Type\", \"text/html\");\n return renderError(\"Authorization Error\", `GitHub returned: ${error}`);\n }\n\n if (!code || !state) {\n setHeader(event, \"Content-Type\", \"text/html\");\n return renderError(\"Invalid Request\", \"Missing authorization code or state\");\n }\n\n // Verify state parameter\n const cookieHeader = getHeader(event, \"cookie\");\n const savedState = getStateFromCookie(cookieHeader);\n\n if (!savedState || savedState !== state) {\n setHeader(event, \"Content-Type\", \"text/html\");\n return renderError(\"Security Error\", \"State mismatch - possible CSRF attack\");\n }\n\n // Exchange code for token\n const tokenResult = await exchangeCodeForToken(code);\n\n if (\"error\" in tokenResult) {\n setHeader(event, \"Content-Type\", \"text/html\");\n return renderError(\"Token Exchange Failed\", tokenResult.error);\n }\n\n // Encrypt and store token in session cookie\n const encryptedToken = await encryptToken(tokenResult.token);\n\n // Set session cookie and clear state cookie\n setHeader(event, \"Set-Cookie\", [\n createSessionCookie(encryptedToken),\n clearStateCookie(),\n ]);\n\n return sendRedirect(event, \"/\");\n })\n);\n\nrouter.get(\n \"/logout\",\n defineEventHandler((event) => {\n setHeader(event, \"Set-Cookie\", clearSessionCookie());\n return sendRedirect(event, \"/\");\n })\n);\n\nexport default toWebHandler(app);\n","deleted","label",[117],"bc0dfdc8-e902-11f0-a4c2-42dde27851f2","lib","bc0dfe72-e902-11f0-a4c2-42dde27851f2",1,["D",1767485840266],"directory",[133],"pulls","forks","envVars",{"_145":124,"_147":54},"connections",{"_145":54,"_146":54},"count","unfilledCount","emptyCount",{"_20":132,"_13":133,"_118":134,"_119":-5,"_120":21,"_121":135,"_122":50,"_22":181,"_29":54,"_125":137,"_127":-5,"_129":38,"_130":-5,"_154":182,"_91":183},{"_20":174,"_13":175,"_118":176,"_119":134,"_120":21,"_121":124,"_122":50,"_22":177,"_29":54,"_125":162,"_127":178,"_129":38,"_130":-5,"_154":179,"_91":180},{"_20":166,"_13":167,"_118":168,"_119":134,"_120":21,"_121":169,"_122":50,"_22":170,"_29":54,"_125":162,"_127":171,"_129":38,"_130":-5,"_154":172,"_91":173},{"_20":157,"_13":158,"_118":159,"_119":134,"_120":21,"_121":160,"_122":50,"_22":161,"_29":54,"_125":162,"_127":163,"_129":38,"_130":-5,"_154":164,"_91":165},{"_20":116,"_13":117,"_118":48,"_119":-5,"_120":21,"_121":30,"_122":50,"_22":153,"_29":124,"_125":126,"_127":128,"_129":38,"_130":14,"_154":155,"_91":156},["D",1767488612235],"children",[],[117],"c4459032-e902-11f0-bbf4-42dde27851f2","session.ts","c445910e-e902-11f0-bbf4-42dde27851f2",2,["D",1767485854051],"script","/**\n * Session management using encrypted, signed cookies.\n * Token is encrypted with AES-GCM and signed with HMAC.\n */\n\nconst encoder = new TextEncoder();\nconst decoder = new TextDecoder();\n\n// Cookie configuration\nconst COOKIE_NAME = \"gh_session\";\nconst COOKIE_MAX_AGE = 60 * 60 * 24 * 7; // 7 days\n\nasync function getEncryptionKey(): Promise {\n const secret = Deno.env.get(\"SESSION_SECRET\");\n if (!secret || secret.length < 32) {\n throw new Error(\"SESSION_SECRET must be at least 32 characters\");\n }\n const keyMaterial = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(secret.slice(0, 32)),\n \"AES-GCM\",\n false,\n [\"encrypt\", \"decrypt\"]\n );\n return keyMaterial;\n}\n\nexport async function encryptToken(token: string): Promise {\n const key = await getEncryptionKey();\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const encrypted = await crypto.subtle.encrypt(\n { name: \"AES-GCM\", iv },\n key,\n encoder.encode(token)\n );\n // Combine IV + ciphertext and base64 encode\n const combined = new Uint8Array(iv.length + encrypted.byteLength);\n combined.set(iv);\n combined.set(new Uint8Array(encrypted), iv.length);\n return btoa(String.fromCharCode(...combined));\n}\n\nexport async function decryptToken(encrypted: string): Promise {\n try {\n const key = await getEncryptionKey();\n const combined = Uint8Array.from(atob(encrypted), (c) => c.charCodeAt(0));\n const iv = combined.slice(0, 12);\n const ciphertext = combined.slice(12);\n const decrypted = await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv },\n key,\n ciphertext\n );\n return decoder.decode(decrypted);\n } catch {\n return null;\n }\n}\n\nexport function createSessionCookie(encryptedToken: string): string {\n return `${COOKIE_NAME}=${encryptedToken}; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=${COOKIE_MAX_AGE}`;\n}\n\nexport function clearSessionCookie(): string {\n return `${COOKIE_NAME}=; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=0`;\n}\n\nexport function getSessionFromCookie(cookieHeader: string | null): string | null {\n if (!cookieHeader) return null;\n const cookies = Object.fromEntries(\n cookieHeader.split(\";\").map((c) => {\n const [key, ...rest] = c.trim().split(\"=\");\n return [key, rest.join(\"=\")];\n })\n );\n return cookies[COOKIE_NAME] || null;\n}\n\n// State parameter for CSRF protection\nexport function generateState(): string {\n return crypto.randomUUID();\n}\n\nexport function createStateCookie(state: string): string {\n return `gh_state=${state}; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=600`;\n}\n\nexport function getStateFromCookie(cookieHeader: string | null): string | null {\n if (!cookieHeader) return null;\n const cookies = Object.fromEntries(\n cookieHeader.split(\";\").map((c) => {\n const [key, ...rest] = c.trim().split(\"=\");\n return [key, rest.join(\"=\")];\n })\n );\n return cookies[\"gh_state\"] || null;\n}\n\nexport function clearStateCookie(): string {\n return `gh_state=; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=0`;\n}\n",[],[133,158],"ca2ab9dc-e902-11f0-b834-42dde27851f2","oauth.ts","ca2aba72-e902-11f0-b834-42dde27851f2",3,["D",1767485863942],"/**\n * GitHub OAuth web flow implementation.\n * Handles authorization URL generation and token exchange.\n */\n\ninterface OAuthConfig {\n clientId: string;\n clientSecret: string;\n redirectUri: string;\n}\n\ninterface TokenResponse {\n access_token: string;\n token_type: string;\n scope: string;\n}\n\ninterface OAuthError {\n error: string;\n error_description?: string;\n}\n\nfunction getConfig(): OAuthConfig {\n const clientId = Deno.env.get(\"GITHUB_CLIENT_ID\");\n const clientSecret = Deno.env.get(\"GITHUB_CLIENT_SECRET\");\n const redirectUri = Deno.env.get(\"GITHUB_REDIRECT_URI\");\n\n if (!clientId || !clientSecret || !redirectUri) {\n throw new Error(\"Missing GitHub OAuth configuration\");\n }\n\n return { clientId, clientSecret, redirectUri };\n}\n\n/**\n * Generate GitHub authorization URL with state parameter\n */\nexport function getAuthorizationUrl(state: string): string {\n const config = getConfig();\n const params = new URLSearchParams({\n client_id: config.clientId,\n redirect_uri: config.redirectUri,\n state,\n // No special scopes needed for rate_limit endpoint\n // Empty scope gives access to public info only\n scope: \"\",\n });\n return `https://github.com/login/oauth/authorize?${params}`;\n}\n\n/**\n * Exchange authorization code for access token\n */\nexport async function exchangeCodeForToken(\n code: string\n): Promise<{ token: string } | { error: string }> {\n const config = getConfig();\n\n const response = await fetch(\"https://github.com/login/oauth/access_token\", {\n method: \"POST\",\n headers: {\n Accept: \"application/json\",\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n client_id: config.clientId,\n client_secret: config.clientSecret,\n code,\n }),\n });\n\n if (!response.ok) {\n return { error: \"Failed to exchange code for token\" };\n }\n\n const data = await response.json();\n\n if (\"error\" in data) {\n const errorData = data as OAuthError;\n return { error: errorData.error_description || errorData.error };\n }\n\n const tokenData = data as TokenResponse;\n return { token: tokenData.access_token };\n}\n",[],[133,167],"d4fc088e-e902-11f0-87e3-42dde27851f2","github.ts","d4fc094c-e902-11f0-87e3-42dde27851f2",["D",1767485882092],"/**\n * GitHub API client for rate limits and user info.\n */\n\nexport interface RateLimitInfo {\n limit: number;\n remaining: number;\n reset: number; // Unix timestamp\n used: number;\n}\n\nexport interface RateLimits {\n core: RateLimitInfo;\n search: RateLimitInfo;\n graphql: RateLimitInfo;\n integration_manifest: RateLimitInfo;\n source_import?: RateLimitInfo;\n code_scanning_upload: RateLimitInfo;\n code_scanning_autofix?: RateLimitInfo;\n actions_runner_registration: RateLimitInfo;\n scim?: RateLimitInfo;\n dependency_snapshots?: RateLimitInfo;\n dependency_sbom?: RateLimitInfo;\n audit_log?: RateLimitInfo;\n audit_log_streaming?: RateLimitInfo;\n code_search: RateLimitInfo;\n}\n\nexport interface GitHubUser {\n login: string;\n avatar_url: string;\n name: string | null;\n html_url: string;\n}\n\n// All rate limit categories we want to display\nexport const RATE_LIMIT_CATEGORIES = [\n { key: \"core\", name: \"Core\", description: \"Non-search REST API\" },\n { key: \"search\", name: \"Search\", description: \"Search API (non-code)\" },\n { key: \"graphql\", name: \"GraphQL\", description: \"GraphQL API\" },\n { key: \"code_search\", name: \"Code Search\", description: \"Code search API\" },\n { key: \"integration_manifest\", name: \"Integration Manifest\", description: \"App manifest conversions\" },\n { key: \"source_import\", name: \"Source Import\", description: \"Repository imports\" },\n { key: \"code_scanning_upload\", name: \"Code Scanning Upload\", description: \"SARIF uploads\" },\n { key: \"code_scanning_autofix\", name: \"Code Scanning Autofix\", description: \"Autofix suggestions\" },\n { key: \"actions_runner_registration\", name: \"Actions Runners\", description: \"Self-hosted runner registration\" },\n { key: \"scim\", name: \"SCIM\", description: \"Identity provisioning\" },\n { key: \"dependency_snapshots\", name: \"Dependency Snapshots\", description: \"Dependency graph submissions\" },\n { key: \"dependency_sbom\", name: \"Dependency SBOM\", description: \"SBOM exports\" },\n { key: \"audit_log\", name: \"Audit Log\", description: \"Audit log queries\" },\n { key: \"audit_log_streaming\", name: \"Audit Log Streaming\", description: \"Audit log stream config\" },\n] as const;\n\nexport type RateLimitCategory = typeof RATE_LIMIT_CATEGORIES[number][\"key\"];\n\n/**\n * Fetch rate limits from GitHub API\n */\nexport async function fetchRateLimits(\n token: string\n): Promise<{ limits: Partial } | { error: string }> {\n const response = await fetch(\"https://api.github.com/rate_limit\", {\n headers: {\n Authorization: `Bearer ${token}`,\n Accept: \"application/vnd.github+json\",\n \"X-GitHub-Api-Version\": \"2022-11-28\",\n },\n });\n\n if (!response.ok) {\n if (response.status === 401) {\n return { error: \"Invalid or expired token\" };\n }\n return { error: `GitHub API error: ${response.status}` };\n }\n\n const data = await response.json();\n return { limits: data.resources as Partial };\n}\n\n/**\n * Fetch authenticated user info\n */\nexport async function fetchUser(\n token: string\n): Promise<{ user: GitHubUser } | { error: string }> {\n const response = await fetch(\"https://api.github.com/user\", {\n headers: {\n Authorization: `Bearer ${token}`,\n Accept: \"application/vnd.github+json\",\n \"X-GitHub-Api-Version\": \"2022-11-28\",\n },\n });\n\n if (!response.ok) {\n if (response.status === 401) {\n return { error: \"Invalid or expired token\" };\n }\n return { error: `GitHub API error: ${response.status}` };\n }\n\n const data = await response.json();\n return {\n user: {\n login: data.login,\n avatar_url: data.avatar_url,\n name: data.name,\n html_url: data.html_url,\n },\n };\n}\n\n/**\n * Get status color based on remaining percentage\n */\nexport function getStatusColor(remaining: number, limit: number): \"healthy\" | \"low\" | \"exhausted\" {\n if (limit === 0) return \"healthy\"; // Unlimited or N/A\n const percentage = (remaining / limit) * 100;\n if (percentage <= 10) return \"exhausted\";\n if (percentage <= 50) return \"low\";\n return \"healthy\";\n}\n\n/**\n * Format reset time as relative string\n */\nexport function formatResetTime(resetTimestamp: number): string {\n const now = Math.floor(Date.now() / 1000);\n const diff = resetTimestamp - now;\n \n if (diff <= 0) return \"now\";\n if (diff < 60) return `${diff}s`;\n if (diff < 3600) return `${Math.floor(diff / 60)}m`;\n return `${Math.floor(diff / 3600)}h ${Math.floor((diff % 3600) / 60)}m`;\n}\n",[],[133,175],["D",1767485840266],[149,150,151],[133],["D",1767485835729],{"_11":12,"_89":85},{"_11":12,"_82":83,"_84":85,"_45":46,"_86":87,"_88":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_77":-5,"_78":-5,"_79":-5,"_80":14,"_81":12},"ctx",{"_70":-5,"_111":221,"_222":223,"_224":225,"_226":38,"_227":38,"_228":38,"_229":50,"_230":-5,"_231":-7,"_232":-7,"_233":54,"_234":38,"_235":38,"_236":-5,"_237":38,"_238":38,"_239":38,"_240":-5},"ENV",{"_192":193,"_194":195,"_196":26,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1