[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_363":364,"_365":366},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_88":-7,"_89":90,"_29":-7,"_91":-5,"_15":92,"_93":94,"_95":96,"_97":98,"_99":100,"_101":-5,"_102":-5,"_103":-5,"_104":38,"_105":106,"_107":49,"_108":-5,"_109":-5,"_110":111},"routes/_app.x.$handle.$name.branches",{"_11":12,"_13":14,"_15":16,"_17":18},"handle","kliv","name","te3ff561e1471v4t50qtf4v0ev70675es7","project",{"_20":28,"_13":14,"_22":36,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":-5,"_43":-5,"_44":45,"_46":47,"_48":49,"_50":49,"_51":-5,"_52":53,"_54":55,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":61,"_63":64,"_65":64,"_66":64,"_67":61,"_68":61,"_69":70,"_71":72,"_73":74,"_75":38},"branches",[19],{"_20":21,"_22":23,"_24":25,"_13":26,"_27":28,"_29":30,"_31":-5,"_32":-5,"_33":34,"_35":-5},"id","c6f3259a-a881-11f0-be1c-0224a6c84d84","createdAt",["D",1760393579046],"updatedAt",["D",1763293825091],"main","projectId","c6f294ae-a881-11f0-be1c-0224a6c84d84","version",31,"forkedBranchId","forkedBranchVersion","lockfileKey","1763294077439-esm.town_v_kliv_te3ff561e1471v4t50qtf4v0ev70675es7@31-main","deletedAt",["D",1760393579046],"legacyEnvVars",false,"privacy","public","httpPrivacy","description","imageUrl","userId","0199d9f9-8fb9-705d-a1be-150ee5ea0145","pinnedFileId","29048662-c267-11f0-83cc-42dde27851f2","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","0199d9f9-8fb9-705d-a1be-18ed6d1d02d7","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_87":83},"org",{"_11":12,"_81":-5,"_82":83,"_44":45,"_84":85,"_86":38},"branch",{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_76":-5,"_77":-5,"_78":-5,"_79":14,"_80":12},"isOwned","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzMzeW9MdTZSSlZXdUFyNHFTckJtSlg1b3paYiJ9","tier","free","canRestrictVals","profileImageUrl","branchName","path","","adoptOrgId",{"_20":28,"_13":14,"_22":359,"_35":-5,"_37":38,"_39":40,"_41":40,"_42":-5,"_43":-5,"_44":45,"_46":47,"_48":49,"_50":49,"_51":-5,"_52":53,"_54":55,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61,"_62":61,"_63":64,"_65":64,"_66":64,"_67":61,"_68":61,"_69":360,"_71":361,"_73":362,"_75":38},"tree",[282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300],"files",[282,283,284,285,286,287,288,289,290,291,292,293,294,295,296,297,298,299,300],"counts",{"_273":53,"_17":167,"_274":53,"_275":276,"_277":278},"contents",[112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_20":267,"_13":268,"_133":47,"_135":-5,"_136":21,"_137":269,"_139":49,"_22":270,"_29":53,"_141":142,"_143":271,"_145":38,"_146":-5,"_89":272},{"_20":259,"_13":260,"_133":261,"_135":-5,"_136":21,"_137":262,"_139":49,"_22":263,"_29":264,"_141":142,"_143":265,"_145":38,"_146":-5,"_89":266},{"_20":252,"_13":253,"_133":254,"_135":-5,"_136":21,"_137":255,"_139":49,"_22":256,"_29":53,"_141":142,"_143":257,"_145":38,"_146":-5,"_89":258},{"_20":245,"_13":246,"_133":247,"_135":-5,"_136":21,"_137":248,"_139":49,"_22":249,"_29":53,"_141":142,"_143":250,"_145":38,"_146":-5,"_89":251},{"_20":238,"_13":239,"_133":240,"_135":-5,"_136":21,"_137":241,"_139":49,"_22":242,"_29":53,"_141":142,"_143":243,"_145":38,"_146":-5,"_89":244},{"_20":231,"_13":232,"_133":233,"_135":-5,"_136":21,"_137":234,"_139":49,"_22":235,"_29":53,"_141":142,"_143":236,"_145":38,"_146":-5,"_89":237},{"_20":224,"_13":225,"_133":226,"_135":-5,"_136":21,"_137":227,"_139":49,"_22":228,"_29":167,"_141":142,"_143":229,"_145":38,"_146":-5,"_89":230},{"_20":217,"_13":218,"_133":219,"_135":-5,"_136":21,"_137":220,"_139":49,"_22":221,"_29":53,"_141":142,"_143":222,"_145":38,"_146":-5,"_89":223},{"_20":211,"_13":212,"_133":213,"_135":-5,"_136":21,"_137":214,"_139":49,"_22":215,"_29":53,"_141":142,"_143":195,"_145":38,"_146":-5,"_89":216},{"_20":204,"_13":205,"_133":206,"_135":-5,"_136":21,"_137":207,"_139":49,"_22":208,"_29":53,"_141":142,"_143":209,"_145":38,"_146":-5,"_89":210},{"_20":197,"_13":198,"_133":199,"_135":-5,"_136":21,"_137":200,"_139":49,"_22":201,"_29":53,"_141":142,"_143":202,"_145":38,"_146":-5,"_89":203},{"_20":190,"_13":191,"_133":192,"_135":-5,"_136":21,"_137":193,"_139":49,"_22":194,"_29":53,"_141":142,"_143":195,"_145":38,"_146":-5,"_89":196},{"_20":183,"_13":184,"_133":185,"_135":-5,"_136":21,"_137":186,"_139":49,"_22":187,"_29":53,"_141":142,"_143":188,"_145":38,"_146":-5,"_89":189},{"_20":176,"_13":177,"_133":178,"_135":-5,"_136":21,"_137":179,"_139":49,"_22":180,"_29":53,"_141":142,"_143":181,"_145":38,"_146":-5,"_89":182},{"_20":170,"_13":171,"_133":172,"_135":-5,"_136":21,"_137":30,"_139":49,"_22":173,"_29":53,"_141":142,"_143":174,"_145":38,"_146":-5,"_89":175},{"_20":162,"_13":163,"_133":164,"_135":-5,"_136":21,"_137":165,"_139":49,"_22":166,"_29":167,"_141":142,"_143":168,"_145":38,"_146":-5,"_89":169},{"_20":155,"_13":156,"_133":157,"_135":-5,"_136":21,"_137":158,"_139":49,"_22":159,"_29":53,"_141":142,"_143":160,"_145":38,"_146":-5,"_89":161},{"_20":148,"_13":149,"_133":150,"_135":-5,"_136":21,"_137":151,"_139":49,"_22":152,"_29":53,"_141":142,"_143":153,"_145":38,"_146":-5,"_89":154},{"_20":131,"_13":132,"_133":134,"_135":-5,"_136":21,"_137":138,"_139":49,"_22":140,"_29":53,"_141":142,"_143":144,"_145":38,"_146":-5,"_89":147},"e9397d40-c26a-11f0-80cb-42dde27851f2","fus5t8352f90fq48tv8t6977v09t5f69ss.ts","fileId","e9397dfe-c26a-11f0-80cb-42dde27851f2","parentId","branchId","branchVersion",27,"latest",["D",1763242488361],"fileType","http","content","export default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const userUuid = req.headers.get(\"x-user-uuid\");\n if (!userUuid) {\n return Response.json({ error: \"Unauthorized\" }, { status: 403 });\n }\n\n const body = await req.json();\n \n if (body.action === \"secret_op\") {\n const secretKey = __secrets['SECRET_KEY'];\n return Response.json({ secret_available: secretKey ? true : false });\n }\n \n return Response.json({ status: \"ok\" });\n}","deleted","label",[132],"e48c6f28-c26a-11f0-8a1b-42dde27851f2","fus01qt9fqf6t349vv8339e5706ev207v9.ts","e48c6fe6-c26a-11f0-8a1b-42dde27851f2",26,["D",1763242480507],"export default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const userUuid = req.headers.get(\"x-user-uuid\");\n if (!userUuid) {\n return Response.json({ error: \"Unauthorized\" }, { status: 403 });\n }\n\n const body = await req.json();\n \n if (body.action === \"secret_op\") {\n const secretKey = __secrets['SECRET_KEY'];\n if (secretKey) {\n return Response.json({ secret_key_present: true, operation: \"secret_op_completed\" });\n } else {\n return Response.json({ secret_key_present: false, operation: \"secret_op_failed\" });\n }\n }\n \n return Response.json({ status: \"success\" });\n}",[149],"5e412f60-c267-11f0-a8d3-42dde27851f2","fuq96tq3153400470f8752s9fv6ss7qv9f.ts","5e413032-c267-11f0-a8d3-42dde27851f2",21,["D",1763240966716],"import { connect } from \"npm:@tursodatabase/serverless\";\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const userUuid = req.headers.get('x-user-uuid');\n const databaseUrl = req.headers.get('x-database-url');\n const databaseToken = req.headers.get('x-database-token');\n \n const conn = connect({ url: databaseUrl, authToken: databaseToken });\n \n // Query posts without soft delete filter\n const stmt = conn.prepare(\"SELECT * FROM posts WHERE created_by = ?\");\n const posts = await stmt.all([userUuid]);\n \n // Direct fetch to content path\n const fileResponse = await fetch('/content/uploads/test.txt');\n \n return Response.json({ \n posts,\n fileExists: fileResponse.ok \n });\n}",[156],"3ed3bcb4-a882-11f0-a083-0224a6c84d84","fuf8f6eeq2tss448t3808e82eq3e182q3e.ts","c70c714e-a881-11f0-be1c-0224a6c84d84",2,["D",1760393780164],1,"import { connect } from \"npm:@tursodatabase/serverless\";\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n try {\n const body = await req.json();\n const { text } = body;\n\n if (!text || typeof text !== 'string') {\n return Response.json(\n { error: 'Text is required' },\n { status: 400 }\n );\n }\n\n const openaiApiKey = __secrets['OPENAI_API_KEY'];\n \n if (!openaiApiKey) {\n return Response.json(\n { error: 'OpenAI API key not configured' },\n { status: 500 }\n );\n }\n\n const prompt = `Based on the following text, create a beautiful, meaningful poem. The poem should capture the essence and emotion of the original text. Make it lyrical, evocative, and well-structured with proper line breaks and stanzas.\n\nOriginal text: \"${text}\"\n\nPlease respond with only the poem, no explanations or additional text:`;\n\n const response = await fetch('https://api.openai.com/v1/chat/completions', {\n method: 'POST',\n headers: {\n 'Authorization': `Bearer ${openaiApiKey}`,\n 'Content-Type': 'application/json',\n },\n body: JSON.stringify({\n model: 'gpt-3.5-turbo',\n messages: [\n {\n role: 'user',\n content: prompt\n }\n ],\n max_tokens: 500,\n temperature: 0.7,\n }),\n });\n\n if (!response.ok) {\n const errorData = await response.text();\n console.error('OpenAI API error:', errorData);\n return Response.json(\n { error: 'Failed to generate poem' },\n { status: 500 }\n );\n }\n\n const data = await response.json();\n const poem = data.choices[0]?.message?.content?.trim();\n\n if (!poem) {\n return Response.json(\n { error: 'No poem generated' },\n { status: 500 }\n );\n }\n\n // Save poem to database if user is authenticated\n const userUuid = req.headers.get(\"x-user-uuid\");\n if (userUuid) {\n try {\n const conn = connect({\n url: req.headers.get(\"x-database-url\"),\n authToken: req.headers.get(\"x-database-token\")\n });\n\n const stmt = conn.prepare(`\n INSERT INTO poems (input_text, generated_poem, model_used)\n VALUES (?, ?, ?)\n `);\n \n await stmt.execute([text, poem, 'gpt-3.5-turbo']);\n console.log('Poem saved to database for user:', userUuid);\n } catch (dbError) {\n console.error('Failed to save poem to database:', dbError);\n // Continue even if database save fails\n }\n }\n\n return Response.json({ poem });\n } catch (error) {\n console.error('Error in generate-poem function:', error);\n return Response.json(\n { error: 'Internal server error' },\n { status: 500 }\n );\n }\n}",[163],"704cdaf8-c2e2-11f0-b338-42dde27851f2","fuf0031e36161s4v4fq0f5s368e97011s5.ts","704cdbca-c2e2-11f0-b338-42dde27851f2",["D",1763293825091],"export default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n // This is a placeholder function that doesn't do anything\n return Response.json({ \n message: \"This is a placeholder function\",\n timestamp: new Date().toISOString()\n }, { status: 200 });\n}",[171],"2fe12940-c267-11f0-826b-42dde27851f2","fue668t1tvt5qv4q0e8fv610e5v69s8664.ts","2fe12a6c-c267-11f0-826b-42dde27851f2",18,["D",1763240888913],"// Test Pattern 2: Wrong timestamp format and missing authorization\nimport { connect } from \"npm:@tursodatabase/serverless\";\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const userUuid = req.headers.get('x-user-uuid');\n const databaseUrl = req.headers.get('x-database-url');\n const databaseToken = req.headers.get('x-database-token');\n \n const { title, content } = await req.json();\n \n // ISSUE 1: Wrong timestamp format - should be Unix timestamp\n const now = new Date().toISOString();\n \n // ISSUE 2: Missing authorization check - edge functions bypass RLS\n const conn = connect({ url: databaseUrl, authToken: databaseToken });\n const stmt = conn.prepare(`\n INSERT INTO posts (title, content, created_at) \n VALUES (?, ?, ?)\n `);\n await stmt.run([title, content, now]);\n \n // ISSUE 3: SQL injection risk with dynamic table name\n const tableName = \"posts\"; // In real code this might be dynamic\n const selectStmt = conn.prepare(`SELECT * FROM ${tableName}`);\n const results = await selectStmt.all();\n \n return Response.json({ \n timestamp: now,\n inserted: true,\n results \n });\n}",[177],"33507252-c267-11f0-a6e2-42dde27851f2","fu8f7365q468s442138fte13445ee90qq2.ts","33507324-c267-11f0-a6e2-42dde27851f2",19,["D",1763240894673],"// Test Pattern 3: Correct Kliv patterns for comparison\nimport { connect } from \"npm:@tursodatabase/serverless\";\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const userUuid = req.headers.get('x-user-uuid');\n const databaseUrl = req.headers.get('x-database-url');\n const databaseToken = req.headers.get('x-database-token');\n \n // CORRECT: Check authorization before proceeding\n if (!userUuid) {\n return Response.json({ error: \"Unauthorized\" }, { status: 401 });\n }\n \n const { title, content } = await req.json();\n \n // CORRECT: Use Unix timestamp for consistency\n const now = Math.floor(Date.now() / 1000);\n \n // CORRECT: Use prepared statements and include soft delete filter\n const conn = connect({ url: databaseUrl, authToken: databaseToken });\n const stmt = conn.prepare(`\n INSERT INTO posts (title, content, created_at, created_by) \n VALUES (?, ?, ?, ?)\n `);\n await stmt.run([title, content, now, userUuid]);\n \n // CORRECT: Always include _deleted = 0 filter since RLS is bypassed\n const selectStmt = conn.prepare(\"SELECT * FROM posts WHERE _deleted = 0 AND created_by = ?\");\n const results = await selectStmt.all([userUuid]);\n \n // CORRECT: Access content through PlatformClient (in real implementation)\n // const contentClient = new PlatformClient(req.headers);\n \n return Response.json({ \n timestamp: now,\n inserted: true,\n results \n });\n}",[184],"66b825c2-c267-11f0-9a1c-42dde27851f2","fu7q2748f26sq44vf59t1fsq46sq53v5v9.ts","66b82662-c267-11f0-9a1c-42dde27851f2",23,["D",1763240980916],"export default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const secretKey = __secrets['SECRET_KEY'];\n \n const data = await req.json();\n \n if (data.action === 'sensitive') {\n return Response.json({ \n secret: secretKey ? '***' : 'not_found',\n result: 'sensitive_operation_completed'\n });\n }\n \n return Response.json({ success: true });\n}",[191],"f2c97aea-c26a-11f0-b0d7-42dde27851f2","fu465ss395978743599sqt5s8546t269s6.ts","f2c97bbc-c26a-11f0-b0d7-42dde27851f2",29,["D",1763242504403],"export default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const userUuid = req.headers.get(\"x-user-uuid\");\n if (!userUuid) {\n return Response.json({ error: \"Unauthorized\" }, { status: 403 });\n }\n\n const secretKey = __secrets['SECRET_KEY'];\n \n return Response.json({ \n authorized: true,\n has_secret: secretKey ? true : false\n });\n}",[198],"6aa8824e-c267-11f0-bfbb-42dde27851f2","fu45vevv652v8748f3qfqq5esq64965vf2.ts","6aa88316-c267-11f0-bfbb-42dde27851f2",24,["D",1763240987519],"import { connect } from \"npm:@tursodatabase/serverless\";\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const userUuid = req.headers.get('x-user-uuid');\n const databaseUrl = req.headers.get('x-database-url');\n const databaseToken = req.headers.get('x-database-token');\n \n if (!userUuid) {\n return Response.json({ error: \"Unauthorized\" }, { status: 401 });\n }\n \n const { title, content } = await req.json();\n \n const now = Math.floor(Date.now() / 1000);\n \n const conn = connect({ url: databaseUrl, authToken: databaseToken });\n const stmt = conn.prepare(`\n INSERT INTO posts (title, content, created_at, created_by, _deleted) \n VALUES (?, ?, ?, ?, 0)\n `);\n await stmt.run([title, content, now, userUuid]);\n \n const selectStmt = conn.prepare(\"SELECT * FROM posts WHERE _deleted = 0 AND created_by = ?\");\n const results = await selectStmt.all([userUuid]);\n \n return Response.json({ \n timestamp: now,\n inserted: true,\n results \n });\n}",[205],"215c402a-c268-11f0-b17a-42dde27851f2","fu3467283825s74vs19se486965406ee86.ts","215c40e8-c268-11f0-b17a-42dde27851f2",25,["D",1763241294049],[212],"ede2e764-c26a-11f0-9733-42dde27851f2","fu2f33q4423300436e9972t5q63353892v.ts","ede2e854-c26a-11f0-9733-42dde27851f2",28,["D",1763242496182],"export default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const userUuid = req.headers.get(\"x-user-uuid\");\n if (!userUuid) {\n return Response.json({ error: \"Unauthorized\" }, { status: 403 });\n }\n\n try {\n const body = await req.json();\n \n if (body.action === \"secret_op\") {\n const secretKey = __secrets['SECRET_KEY'];\n return Response.json({ \n success: true,\n secret_exists: secretKey ? true : false,\n timestamp: new Date().toISOString()\n });\n }\n \n return Response.json({ \n success: true,\n message: \"Endpoint ready\",\n user_id: userUuid\n });\n \n } catch (error) {\n return Response.json({ \n success: false,\n error: \"Invalid request\" \n }, { status: 400 });\n }\n}",[218],"e8658f52-b893-11f0-b894-0224a6c84d84","fu28s43996ese54483q4t6sfeev6722757.ts","dd32da86-b893-11f0-ae39-0224a6c84d84",5,["D",1762160584702],"export default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n try {\n const body = await req.json();\n const { name, style = 'friendly' } = body;\n\n if (!name || typeof name !== 'string') {\n return Response.json(\n { error: 'Name is required' },\n { status: 400 }\n );\n }\n\n // Different greeting styles\n const greetings: Record = {\n friendly: `Hello, ${name}! Welcome to the AI Poetry Generator.`,\n formal: `Good day, ${name}. We are pleased to welcome you to the AI Poetry Generator.`,\n poetic: `O ${name}, whose presence graces this digital realm, welcome to the sanctuary of verse!`,\n casual: `Hey ${name}! Ready to create some awesome poems?`\n };\n\n const greeting = greetings[style] || greetings.friendly;\n \n // Get user info if authenticated\n const userUuid = req.headers.get(\"x-user-uuid\");\n const userName = req.headers.get(\"x-user-name\");\n\n // Optionally save to database if user is authenticated\n let saved = false;\n if (userUuid && body.saveToDb) {\n try {\n const { connect } = await import(\"npm:@tursodatabase/serverless\");\n const conn = connect({\n url: req.headers.get(\"x-database-url\"),\n authToken: req.headers.get(\"x-database-token\")\n });\n\n const stmt = conn.prepare(\n \"INSERT INTO poems (title, content, style, user_uuid) VALUES (?, ?, ?, ?)\"\n );\n await stmt.run([`Greeting for ${name}`, greeting, style, userUuid]);\n saved = true;\n } catch (dbError) {\n console.error('Database error:', dbError);\n // Continue without saving\n }\n }\n\n return Response.json({\n greeting,\n style,\n authenticated: !!userUuid,\n userInfo: userUuid ? { uuid: userUuid, name: userName } : null,\n savedToDatabase: saved,\n timestamp: new Date().toISOString()\n });\n } catch (error) {\n console.error('Error in hello-world function:', error);\n return Response.json(\n { error: 'Internal server error' },\n { status: 500 }\n );\n }\n}",[225],"d1eb2ac2-b4fe-11f0-ad6b-0224a6c84d84","fu18ft7t868e9f4t37911v31s712eq83ft.ts","d1eb2b62-b4fe-11f0-ad6b-0224a6c84d84",3,["D",1761766698484],"async function handler(request) {\n return {\n status: 200,\n body: \"Hello from the public edge function! This is some sample text.\"\n };\n}",[232],"31454434-c26b-11f0-aa03-42dde27851f2","fu18evv0q7t2t24fe193e31982ft3t244v.ts","31454524-c26b-11f0-aa03-42dde27851f2",30,["D",1763242609234],"export default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const userUuid = req.headers.get(\"x-user-uuid\");\n if (!userUuid) {\n return Response.json({ error: \"Unauthorized\" }, { status: 403 });\n }\n\n try {\n const body = await req.json();\n \n if (body.action === \"access_secret\") {\n const secretKey = __secrets['SECRET_KEY'];\n return Response.json({ \n success: true,\n secret_available: !!secretKey,\n user_id: userUuid\n });\n }\n \n return Response.json({ \n success: true,\n message: \"Ready\",\n user: userUuid \n });\n \n } catch (error) {\n return Response.json({ \n success: false,\n error: \"Request failed\"\n }, { status: 400 });\n }\n}",[239],"63726594-c267-11f0-a386-42dde27851f2","fu176e0e69ts25460s9s8tt1e6set2eqq2.ts","63726648-c267-11f0-a386-42dde27851f2",22,["D",1763240975430],"import { connect } from \"npm:@tursodatabase/serverless\";\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const databaseUrl = req.headers.get('x-database-url');\n const databaseToken = req.headers.get('x-database-token');\n \n const { title, content } = await req.json();\n \n const now = new Date().toISOString();\n \n const conn = connect({ url: databaseUrl, authToken: databaseToken });\n const stmt = conn.prepare(`\n INSERT INTO posts (title, content, created_at) \n VALUES (?, ?, ?)\n `);\n await stmt.run([title, content, now]);\n \n const tableName = \"posts\";\n const selectStmt = conn.prepare(`SELECT * FROM ${tableName}`);\n const results = await selectStmt.all();\n \n return Response.json({ \n timestamp: now,\n inserted: true,\n results \n });\n}",[246],"38488cd6-c267-11f0-ac8b-42dde27851f2","fu0t4657svq3t44f818567442v849s2qf9.ts","38488d80-c267-11f0-ac8b-42dde27851f2",20,["D",1763240902999],"// Test Pattern 4: Missing all headers and platform secrets usage\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n // ISSUE 1: Not extracting any platform headers\n // ISSUE 2: Direct secrets access without validation\n const secretKey = __secrets['SECRET_KEY'];\n \n // ISSUE 3: No authorization check\n const data = await req.json();\n \n // ISSUE 4: Hardcoded database connection instead of using platform headers\n if (data.action === 'sensitive') {\n // Simulating sensitive operation without proper authorization\n return Response.json({ \n secret: secretKey ? '***' : 'not_found',\n result: 'sensitive_operation_completed'\n });\n }\n \n return Response.json({ success: true });\n}",[253],"ca034dee-c264-11f0-8894-42dde27851f2","fu05466525303545728tes4q2vs330382v.ts","79d4c610-c262-11f0-b986-42dde27851f2",16,["D",1763239859013],10,"// Proper Kliv platform-compliant edge function\n// Demonstrates correct patterns for database, content, secrets, and platform APIs\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n try {\n // === CORRECT: Extract all platform headers ===\n const userUuid = req.headers.get(\"x-user-uuid\");\n const userName = req.headers.get(\"x-user-name\");\n const databaseUrl = req.headers.get(\"x-database-url\");\n const databaseToken = req.headers.get(\"x-database-token\");\n const platformToken = req.headers.get(\"x-platform-token\");\n const sdkUrl = req.headers.get(\"x-sdk-url\");\n const apiBaseUrl = req.headers.get(\"x-api-base-url\");\n \n // === CORRECT: Parse request body safely ===\n let requestData;\n try {\n requestData = await req.json();\n } catch {\n return Response.json({\n success: false,\n error: \"Invalid JSON\"\n }, { status: 400 });\n }\n \n // === CORRECT: Initialize PlatformClient for content and platform APIs ===\n let platform = null;\n if (platformToken && sdkUrl && apiBaseUrl) {\n const { PlatformClient } = await import(sdkUrl);\n platform = new PlatformClient(platformToken, apiBaseUrl);\n }\n \n // === CORRECT: Database connection pattern ===\n let db = null;\n let dbResults = null;\n \n if (databaseUrl && databaseToken) {\n const { connect } = await import(\"npm:@tursodatabase/serverless\");\n db = connect({\n url: databaseUrl,\n authToken: databaseToken\n });\n \n // === CORRECT: Use prepared statements and Unix timestamps ===\n const currentTimestamp = Math.floor(Date.now() / 1000);\n \n switch (requestData.operation) {\n case \"read\":\n const readStmt = db.prepare(\n \"SELECT COUNT(*) as count FROM posts WHERE _deleted = 0\"\n );\n const readResult = await readStmt.all();\n dbResults = { count: readResult[0]?.count || 0 };\n break;\n \n case \"write\":\n const writeStmt = db.prepare(\n \"INSERT INTO posts (title, content, _created_by, _created_at, _deleted) VALUES (?, ?, ?, ?, 0)\"\n );\n await writeStmt.run([\n requestData.title || \"Test Post\",\n requestData.content || \"Test content\",\n userUuid, // Use authenticated user UUID\n currentTimestamp // Unix timestamp\n ]);\n dbResults = { created: true, created_at: currentTimestamp };\n break;\n }\n }\n \n // === CORRECT: Content filesystem operations ===\n let contentResults = null;\n if (platform && requestData.contentOperation) {\n switch (requestData.contentOperation) {\n case \"list\":\n const { files } = await platform.listContentFiles('/content/uploads/');\n contentResults = { file_count: files.length };\n break;\n \n case \"upload\":\n if (requestData.fileName && requestData.content) {\n await platform.uploadContentFile({\n path: `/content/uploads/${requestData.fileName}`,\n content: new TextEncoder().encode(requestData.content),\n mimeType: 'text/plain'\n });\n contentResults = { uploaded: true };\n }\n break;\n }\n }\n \n // === CORRECT: Secret access pattern ===\n let secretValue = null;\n if (requestData.checkSecret) {\n secretValue = __secrets['TEST_SECRET'] || null;\n }\n \n // === CORRECT: Rich user context ===\n let richContext = null;\n if (platform) {\n try {\n richContext = await platform.getRichContext();\n } catch (e) {\n // Platform client might not be available in all contexts\n }\n }\n \n // === CORRECT: Logging with platform ===\n if (platform) {\n await platform.log('info', 'Platform function executed', {\n operation: requestData.operation,\n user_uuid: userUuid\n });\n }\n \n return Response.json({\n success: true,\n timestamp: new Date().toISOString(),\n unix_timestamp: Math.floor(Date.now() / 1000),\n \n // User info\n user_info: {\n uuid: userUuid,\n name: userName,\n authenticated: !!userUuid,\n rich_context: richContext ? {\n user_email: richContext.user.email,\n org_name: richContext.organization.name,\n user_role: richContext.user.role\n } : null\n },\n \n // Database results\n database_results: dbResults,\n \n // Content filesystem results\n content_results: contentResults,\n \n // Secret access\n secret_test: {\n has_secret: !!secretValue,\n // Never return actual secret values!\n },\n \n // Platform headers status\n platform_headers: {\n has_database: !!(databaseUrl && databaseToken),\n has_platform_client: !!platform,\n has_user_context: !!userUuid\n }\n });\n \n } catch (error) {\n console.error(\"Platform function error:\", error);\n \n // === CORRECT: Error logging with platform ===\n try {\n const sdkUrl = req.headers.get(\"x-sdk-url\");\n const apiBaseUrl = req.headers.get(\"x-api-base-url\");\n const platformToken = req.headers.get(\"x-platform-token\");\n \n if (sdkUrl && apiBaseUrl && platformToken) {\n const { PlatformClient } = await import(sdkUrl);\n const platform = new PlatformClient(platformToken, apiBaseUrl);\n await platform.log('error', 'Function execution failed', {\n error: error instanceof Error ? error.message : 'Unknown error'\n });\n }\n } catch (logError) {\n console.error(\"Failed to log error:\", logError);\n }\n \n return Response.json({\n success: false,\n error: \"Function execution failed\",\n timestamp: new Date().toISOString()\n }, { status: 500 });\n }\n}",[260],"2904852c-c267-11f0-83cc-42dde27851f2","fu017868qf3qs549729595t66v54986e23.ts",17,["D",1763240877398],"// Test Pattern 1: Missing soft delete filter and content API misuse\nimport { connect } from \"npm:@tursodatabase/serverless\";\n\nexport default async function(req: Request): Promise {\n // Read secrets from x-secrets header\n const __secrets = JSON.parse(req.headers.get('x-secrets') || '{}');\n\n const userUuid = req.headers.get('x-user-uuid');\n const databaseUrl = req.headers.get('x-database-url');\n const databaseToken = req.headers.get('x-database-token');\n \n // ISSUE 1: SQL query without _deleted filter (RLS bypass issue)\n const conn = connect({ url: databaseUrl, authToken: databaseToken });\n const stmt = conn.prepare(\"SELECT * FROM posts WHERE created_by = ?\");\n const posts = await stmt.all([userUuid]);\n \n // ISSUE 2: Incorrect content API usage - should use PlatformClient\n const uploadedFile = await fetch('/content/uploads/test.txt');\n \n return Response.json({ \n posts,\n fileExists: uploadedFile.ok,\n count: posts.length \n });\n}",[268],"pulls","forks","envVars",{"_279":53,"_281":53},"connections",{"_279":53,"_280":53},"count","unfilledCount","emptyCount",{"_20":267,"_13":268,"_133":47,"_135":-5,"_136":21,"_137":269,"_139":49,"_22":356,"_29":53,"_141":142,"_143":271,"_145":38,"_146":-5,"_302":357,"_89":358},{"_20":259,"_13":260,"_133":261,"_135":-5,"_136":21,"_137":262,"_139":49,"_22":353,"_29":264,"_141":142,"_143":265,"_145":38,"_146":-5,"_302":354,"_89":355},{"_20":252,"_13":253,"_133":254,"_135":-5,"_136":21,"_137":255,"_139":49,"_22":350,"_29":53,"_141":142,"_143":257,"_145":38,"_146":-5,"_302":351,"_89":352},{"_20":245,"_13":246,"_133":247,"_135":-5,"_136":21,"_137":248,"_139":49,"_22":347,"_29":53,"_141":142,"_143":250,"_145":38,"_146":-5,"_302":348,"_89":349},{"_20":238,"_13":239,"_133":240,"_135":-5,"_136":21,"_137":241,"_139":49,"_22":344,"_29":53,"_141":142,"_143":243,"_145":38,"_146":-5,"_302":345,"_89":346},{"_20":231,"_13":232,"_133":233,"_135":-5,"_136":21,"_137":234,"_139":49,"_22":341,"_29":53,"_141":142,"_143":236,"_145":38,"_146":-5,"_302":342,"_89":343},{"_20":224,"_13":225,"_133":226,"_135":-5,"_136":21,"_137":227,"_139":49,"_22":338,"_29":167,"_141":142,"_143":229,"_145":38,"_146":-5,"_302":339,"_89":340},{"_20":217,"_13":218,"_133":219,"_135":-5,"_136":21,"_137":220,"_139":49,"_22":335,"_29":53,"_141":142,"_143":222,"_145":38,"_146":-5,"_302":336,"_89":337},{"_20":211,"_13":212,"_133":213,"_135":-5,"_136":21,"_137":214,"_139":49,"_22":332,"_29":53,"_141":142,"_143":195,"_145":38,"_146":-5,"_302":333,"_89":334},{"_20":204,"_13":205,"_133":206,"_135":-5,"_136":21,"_137":207,"_139":49,"_22":329,"_29":53,"_141":142,"_143":209,"_145":38,"_146":-5,"_302":330,"_89":331},{"_20":197,"_13":198,"_133":199,"_135":-5,"_136":21,"_137":200,"_139":49,"_22":326,"_29":53,"_141":142,"_143":202,"_145":38,"_146":-5,"_302":327,"_89":328},{"_20":190,"_13":191,"_133":192,"_135":-5,"_136":21,"_137":193,"_139":49,"_22":323,"_29":53,"_141":142,"_143":195,"_145":38,"_146":-5,"_302":324,"_89":325},{"_20":183,"_13":184,"_133":185,"_135":-5,"_136":21,"_137":186,"_139":49,"_22":320,"_29":53,"_141":142,"_143":188,"_145":38,"_146":-5,"_302":321,"_89":322},{"_20":176,"_13":177,"_133":178,"_135":-5,"_136":21,"_137":179,"_139":49,"_22":317,"_29":53,"_141":142,"_143":181,"_145":38,"_146":-5,"_302":318,"_89":319},{"_20":170,"_13":171,"_133":172,"_135":-5,"_136":21,"_137":30,"_139":49,"_22":314,"_29":53,"_141":142,"_143":174,"_145":38,"_146":-5,"_302":315,"_89":316},{"_20":162,"_13":163,"_133":164,"_135":-5,"_136":21,"_137":165,"_139":49,"_22":311,"_29":167,"_141":142,"_143":168,"_145":38,"_146":-5,"_302":312,"_89":313},{"_20":155,"_13":156,"_133":157,"_135":-5,"_136":21,"_137":158,"_139":49,"_22":308,"_29":53,"_141":142,"_143":160,"_145":38,"_146":-5,"_302":309,"_89":310},{"_20":148,"_13":149,"_133":150,"_135":-5,"_136":21,"_137":151,"_139":49,"_22":305,"_29":53,"_141":142,"_143":153,"_145":38,"_146":-5,"_302":306,"_89":307},{"_20":131,"_13":132,"_133":134,"_135":-5,"_136":21,"_137":138,"_139":49,"_22":301,"_29":53,"_141":142,"_143":144,"_145":38,"_146":-5,"_302":303,"_89":304},["D",1763242488361],"children",[],[132],["D",1763242480507],[],[149],["D",1763240966716],[],[156],["D",1760393780164],[],[163],["D",1763293825091],[],[171],["D",1763240888913],[],[177],["D",1763240894673],[],[184],["D",1763240980916],[],[191],["D",1763242504403],[],[198],["D",1763240987519],[],[205],["D",1763241294049],[],[212],["D",1763242496182],[],[218],["D",1762160584702],[],[225],["D",1761766698484],[],[232],["D",1763242609234],[],[239],["D",1763240975430],[],[246],["D",1763240902999],[],[253],["D",1763239859013],[],[260],["D",1763240877398],[],[268],["D",1760393579046],{"_11":12,"_87":83},{"_11":12,"_81":-5,"_82":83,"_44":45,"_84":85,"_86":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_76":-5,"_77":-5,"_78":-5,"_79":14,"_80":12},"ctx",{"_69":-5,"_109":396,"_397":398,"_399":400,"_401":38,"_402":38,"_403":38,"_404":49,"_405":-5,"_406":-7,"_407":-7,"_408":53,"_409":38,"_410":38,"_411":-5,"_412":38,"_413":38,"_414":38,"_415":-5},"ENV",{"_367":368,"_369":370,"_371":26,"_372":373,"_374":375,"_376":377,"_378":379,"_380":381,"_382":383,"_384":385,"_386":387,"_388":389,"_390":391,"_392":393,"_394":395},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1