[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_385":386,"_387":388},"routes/_app.x.$handle.$name",{"_97":96,"_31":44,"_105":87,"_26":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":24,"_120":121,"_122":59,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_31":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":54,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":24},"version",3,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","backend/preview-parking.http.ts","latestPath","fileId","65a38254-ac3f-11f1-8290-1607ee4eb77e","name","preview-parking.http.ts","fileType","http","content","// Holds the {valname}-preview subdomain while no branch is being previewed.\n// Pointed here by the merge-branch skill when a preview branch is merged & deleted;\n// start-branch moves the subdomain back onto a live branch's HTTP entry.\nexport default () =>\n new Response(\n [\n \"No branch is currently in preview.\",\n \"\",\n \"This URL follows the branch under active development. It's idle because the\",\n \"last preview branch was merged and deleted. Start a new branch (the start-branch\",\n \"rail) to point this URL at it again.\",\n ].join(\"\\n\"),\n { status: 200, headers: { \"content-type\": \"text/plain; charset=utf-8\" } },\n );\n","createdAt",["D",1788952371320],"branchVersion","branchId","882c282b-dbad-4f8a-8f35-51665afdbc22","id","e5478a0f-89bc-4c6b-b160-450142887dc4","lightweightindustries",["D",1788890813214],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Tools that travel","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/b36c9f74-c526-4d15-b99d-8536563aa401/square512?exp=1789541999&sig=0515997c3afad52513e5b77d7c028db8b2ff52cd3d5457154b54b19150f474ff","449588c0-326d-11f0-a80c-0741f032ef73","pinnedFileId","495ac9a4-ac3f-11f1-8027-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a038d7-2f56-77a8-813a-73db7ed08bec","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_97":96,"_104":100},"org",{"_97":96,"_98":96,"_99":100,"_18":-5,"_101":102,"_103":59},"branch",{"_13":86,"_31":87,"_42":41,"_88":43,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":44,"_95":96},"isOwned",318,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","lightweightorg","handle","displayName","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/f0c72fa6-9948-4a8c-bb6c-89aef6f85d01/square512?exp=1789541999&sig=e53b6f179901e60689416e84a04ce5c8c5d23a4c75996c37744bf156b5dfd1c4","tier","business","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_31":44,"_37":381,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":54,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":382,"_81":383,"_83":384,"_85":24},"tree",[162,184,188],"files",[162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191],"counts",{"_150":63,"_151":152,"_153":63,"_154":155,"_156":157},"contents",[128,129,130],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{"_57":127},"lightweightindustries.com",{"_42":145,"_31":146,"_29":147,"_134":-5,"_40":41,"_39":135,"_136":59,"_37":148,"_13":63,"_33":138,"_35":-5,"_23":24,"_139":-5,"_26":149},{"_42":141,"_31":35,"_29":142,"_134":-5,"_40":41,"_39":135,"_136":59,"_37":143,"_13":63,"_33":138,"_35":-5,"_23":24,"_139":-5,"_26":144},{"_42":131,"_31":132,"_29":133,"_134":-5,"_40":41,"_39":135,"_136":59,"_37":137,"_13":63,"_33":138,"_35":-5,"_23":24,"_139":-5,"_26":140},"142716a6-d7eb-4636-9f12-e261188535fa","shared","01a085de-26c9-705c-866d-b894979a2c42","parentId",2,"latest",["D",1788952323787],"directory","label",[132],"d8374e7b-e471-44f7-ae1e-f02d63902f84","01a085de-26c9-705c-866d-b21816253a09",["D",1788952323787],[35],"525a0c10-b0c9-43f6-b63a-5e7a98f49f56","backend","01a085de-26c9-705c-866d-984268dc880b",["D",1788952323787],[146],"pulls","branches",1,"forks","envVars",{"_158":160,"_161":63},"connections",{"_158":63,"_159":63},"count","unfilledCount",4,"emptyCount",{"_42":145,"_31":146,"_29":147,"_134":-5,"_40":41,"_39":135,"_136":59,"_37":378,"_13":63,"_33":138,"_35":-5,"_23":24,"_139":-5,"_198":379,"_26":380},{"_42":374,"_31":366,"_29":361,"_134":147,"_40":41,"_39":135,"_136":59,"_37":375,"_13":63,"_33":138,"_35":-5,"_23":24,"_139":-5,"_198":376,"_26":377},{"_42":367,"_31":368,"_29":369,"_134":361,"_40":41,"_39":135,"_136":24,"_37":370,"_13":63,"_33":196,"_35":371,"_23":24,"_139":-5,"_198":372,"_26":373},{"_42":358,"_31":359,"_29":360,"_134":361,"_40":41,"_39":135,"_136":24,"_37":362,"_13":63,"_33":196,"_35":363,"_23":24,"_139":-5,"_198":364,"_26":365},{"_42":354,"_31":339,"_29":334,"_134":147,"_40":41,"_39":135,"_136":59,"_37":355,"_13":63,"_33":138,"_35":-5,"_23":24,"_139":-5,"_198":356,"_26":357},{"_42":347,"_31":348,"_29":349,"_134":334,"_40":41,"_39":135,"_136":59,"_37":350,"_13":63,"_33":196,"_35":351,"_23":24,"_139":-5,"_198":352,"_26":353},{"_42":340,"_31":341,"_29":342,"_134":334,"_40":41,"_39":135,"_136":59,"_37":343,"_13":63,"_33":196,"_35":344,"_23":24,"_139":-5,"_198":345,"_26":346},{"_42":331,"_31":332,"_29":333,"_134":334,"_40":41,"_39":135,"_136":59,"_37":335,"_13":63,"_33":196,"_35":336,"_23":24,"_139":-5,"_198":337,"_26":338},{"_42":327,"_31":312,"_29":307,"_134":147,"_40":41,"_39":135,"_136":59,"_37":328,"_13":63,"_33":138,"_35":-5,"_23":24,"_139":-5,"_198":329,"_26":330},{"_42":320,"_31":321,"_29":322,"_134":307,"_40":41,"_39":135,"_136":24,"_37":323,"_13":63,"_33":196,"_35":324,"_23":24,"_139":-5,"_198":325,"_26":326},{"_42":313,"_31":314,"_29":315,"_134":307,"_40":41,"_39":135,"_136":59,"_37":316,"_13":63,"_33":196,"_35":317,"_23":24,"_139":-5,"_198":318,"_26":319},{"_42":304,"_31":305,"_29":306,"_134":307,"_40":41,"_39":135,"_136":24,"_37":308,"_13":63,"_33":196,"_35":309,"_23":24,"_139":-5,"_198":310,"_26":311},{"_42":300,"_31":209,"_29":295,"_134":147,"_40":41,"_39":135,"_136":59,"_37":301,"_13":63,"_33":138,"_35":-5,"_23":24,"_139":-5,"_198":302,"_26":303},{"_42":292,"_31":293,"_29":294,"_134":295,"_40":41,"_39":135,"_136":24,"_37":296,"_13":63,"_33":196,"_35":297,"_23":24,"_139":-5,"_198":298,"_26":299},{"_42":288,"_31":259,"_29":254,"_134":147,"_40":41,"_39":135,"_136":59,"_37":289,"_13":63,"_33":138,"_35":-5,"_23":24,"_139":-5,"_198":290,"_26":291},{"_42":281,"_31":282,"_29":283,"_134":254,"_40":41,"_39":135,"_136":59,"_37":284,"_13":63,"_33":196,"_35":285,"_23":24,"_139":-5,"_198":286,"_26":287},{"_42":274,"_31":275,"_29":276,"_134":254,"_40":41,"_39":135,"_136":24,"_37":277,"_13":63,"_33":196,"_35":278,"_23":24,"_139":-5,"_198":279,"_26":280},{"_42":267,"_31":268,"_29":269,"_134":254,"_40":41,"_39":135,"_136":59,"_37":270,"_13":63,"_33":196,"_35":271,"_23":24,"_139":-5,"_198":272,"_26":273},{"_42":260,"_31":261,"_29":262,"_134":254,"_40":41,"_39":135,"_136":24,"_37":263,"_13":63,"_33":196,"_35":264,"_23":24,"_139":-5,"_198":265,"_26":266},{"_42":251,"_31":252,"_29":253,"_134":254,"_40":41,"_39":135,"_136":59,"_37":255,"_13":63,"_33":196,"_35":256,"_23":24,"_139":-5,"_198":257,"_26":258},{"_42":245,"_31":246,"_29":57,"_134":147,"_40":41,"_39":135,"_136":24,"_37":247,"_13":63,"_33":34,"_35":248,"_23":24,"_139":44,"_198":249,"_26":250},{"_42":240,"_31":32,"_29":30,"_134":147,"_40":41,"_39":14,"_136":59,"_37":241,"_13":63,"_33":34,"_35":36,"_23":24,"_139":242,"_198":243,"_26":244},{"_42":141,"_31":35,"_29":142,"_134":-5,"_40":41,"_39":135,"_136":59,"_37":237,"_13":63,"_33":138,"_35":-5,"_23":24,"_139":-5,"_198":238,"_26":239},{"_42":233,"_31":232,"_29":227,"_134":142,"_40":41,"_39":135,"_136":59,"_37":234,"_13":63,"_33":138,"_35":-5,"_23":24,"_139":-5,"_198":235,"_26":236},{"_42":224,"_31":225,"_29":226,"_134":227,"_40":41,"_39":135,"_136":24,"_37":228,"_13":63,"_33":20,"_35":229,"_23":24,"_139":-5,"_198":230,"_26":231},{"_42":217,"_31":218,"_29":219,"_134":142,"_40":41,"_39":135,"_136":24,"_37":220,"_13":63,"_33":20,"_35":221,"_23":24,"_139":-5,"_198":222,"_26":223},{"_42":131,"_31":132,"_29":133,"_134":-5,"_40":41,"_39":135,"_136":59,"_37":214,"_13":63,"_33":138,"_35":-5,"_23":24,"_139":-5,"_198":215,"_26":216},{"_42":210,"_31":209,"_29":204,"_134":133,"_40":41,"_39":135,"_136":59,"_37":211,"_13":63,"_33":138,"_35":-5,"_23":24,"_139":-5,"_198":212,"_26":213},{"_42":201,"_31":202,"_29":203,"_134":204,"_40":41,"_39":135,"_136":59,"_37":205,"_13":63,"_33":196,"_35":206,"_23":24,"_139":-5,"_198":207,"_26":208},{"_42":192,"_31":193,"_29":194,"_134":133,"_40":41,"_39":135,"_136":59,"_37":195,"_13":63,"_33":196,"_35":197,"_23":24,"_139":-5,"_198":199,"_26":200},"2eace418-7434-4751-aa7a-7a91320b5ad9","response.ts","495bab08-ac3f-11f1-8027-1607ee4eb77e",["D",1788952323787],"script","import type { ServiceResponse } from \"./types/index.ts\";\n\nexport function createSuccessResponse(data: T): ServiceResponse {\n return { success: true, data };\n}\n\nexport function createErrorResponse(\n error: string,\n status = 500,\n): ServiceResponse {\n return { success: false, error, status };\n}\n","children",[],[132,193],"8a8abe52-a94a-4397-b830-720416c69752","index.ts","495bb0b2-ac3f-11f1-8027-1607ee4eb77e","01a085de-26c9-705c-866d-be21fdb6784a",["D",1788952323787],"/**\n * Contracts that cross the layer boundary.\n *\n * Pure types only — `shared/` must stay browser-safe, so nothing here may\n * import a Deno API.\n */\n\n/** Every controller and service returns this. Callers branch on `success`. */\nexport type ServiceResponse =\n | { success: true; data: T }\n | { success: false; error: string; status: number };\n\n/** A rendered content page, ready for a route to wrap in the layout. */\nexport interface PageView {\n slug: string;\n title: string;\n description: string;\n /** Markdown already rendered to HTML. Injected unescaped by the layout. */\n html: string;\n /**\n * External scripts this page actually needs. Kept as data so a page with no\n * gate never loads Google's script — the controller decides, the layout just\n * renders what it is handed.\n */\n scripts: string[];\n}\n",[],[132,209,202],"types","90d0a12a-e93a-495a-a871-bd023f356be8",["D",1788952323787],[190],[132,209],["D",1788952323787],[189,191],[132],"46f7d17b-19d2-4e78-b2d2-b76e73af3367","home.md","495ba220-ac3f-11f1-8027-1607ee4eb77e",["D",1788952323787],"---\ntitle: Lightweight Industries\ndescription: Small, sharp software for people who'd rather own their tools.\n---\n\n`lightweight`\n\nMessaging and tools for CEOs rewriting their businesses.\n\n---\n\n## Recently\n\n- “No more pipeline gatekeeping” — Notion charts of Salesforce data, right from Slack\n- A mission statement for a software company consolidating three brands and two business models into one\n- A grassroots campaign message to rally a thousand ski bums to fund a $2.5 million land purchase\n\n---\n\n## Testimonials\n\n- Mike Miller\n- Kevin McIntyre\n- Ed Boyajian\n\n---\n\n## Availability\n\n{{gate:calendar}}\n\n---\n\n## About\n\n- LinkedIn\n",[],[35,218],"307ebf69-bf35-476a-bba0-89e7993e3376","calendar.md","495b98ac-ac3f-11f1-8027-1607ee4eb77e","01a085de-26c9-705c-866d-b4ca08beac5b",["D",1788952323787],"---\nprompt: Let me know who's asking and I'll show you my calendar.\nbutton: Show me the calendar\nnote: The iframe is the appointment-schedule embed; the link under it is the fallback for anything that blocks third-party frames. Same schedule both times — the embed URL is the link URL plus the gv=true parameter. marked passes raw HTML through, so this stays a content edit.\n---\n\n\n\n[Find a time that works](https://calendar.google.com/calendar/appointments/schedules/AcZssZ18hnwEHvVR_DDPrq_2FsDuoFKGdNOGze_NizHosyg1yKpBqNOE6YEuIO1tGg0_jq6DStuTf5Mj)\n",[],[35,232,225],"gates","4fc79300-b39f-4abb-9c6f-c904a2d63c58",["D",1788952323787],[186],[35,232],["D",1788952323787],[185,187],[35],"95be9f8d-27d2-4f82-9750-6ea57a23364d",["D",1788952371320],"lightweightindustries-preview",[],[146,32],"848a6843-4ce5-43a8-87d9-b8119760040c","index.http.ts",["D",1788952323787],"import { Hono } from \"npm:hono@4.11.9\";\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport pages from \"./routes/pages.ts\";\nimport api from \"./routes/api.ts\";\nimport auth from \"./routes/auth.ts\";\n\nconst app = new Hono();\n\n// All registered BEFORE the page routes: `pages` owns \"/:slug\", which would\n// otherwise swallow these paths and 404 them as missing content files.\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.route(\"/api\", api);\napp.route(\"/auth\", auth);\n\napp.route(\"/\", pages);\n\n// Let uncaught exceptions reach the Val Town log instead of being swallowed.\napp.onError((err) => Promise.reject(err));\n\n// Hono exports `app.fetch`, never `app`.\nexport default app.fetch;\n",[],[146,246],"75266379-5f2e-4856-afc8-ad7688172a7a","markdown.ts","495b9276-ac3f-11f1-8027-1607ee4eb77e","01a085de-26c9-705c-866d-ae7e6a176e09",["D",1788952323787],"import { marked } from \"npm:marked@18.0.12\";\n\n/**\n * Markdown → HTML. Backend-only pure helper: no I/O, no business decisions.\n *\n * `npm:` is correct here because this only ever runs in Deno. If this render\n * ever has to happen in the browser too, it moves to `shared/` and the\n * specifier becomes `https://esm.sh/marked@18.0.12`.\n */\nexport function renderMarkdown(markdown: string): string {\n return marked.parse(markdown, { async: false }) as string;\n}\n",[],[146,259,252],"utils","32cc03eb-02b3-4f7e-a393-d513b0c5697a","layout.ts","495b848e-ac3f-11f1-8027-1607ee4eb77e",["D",1788952323787],"import { escapeHtml } from \"./html.ts\";\n\n/**\n * The HTML shell. Backend-only pure helper — server-rendered, so the browser\n * receives finished markup rather than an empty div a script has to fill.\n * That is the whole reason the public site is not a React SPA: `title` and\n * `description` below are in the source a crawler reads.\n */\n\nconst PICO_CSS =\n \"https://cdn.jsdelivr.net/npm/@picocss/pico@2/css/pico.min.css\";\n\nexport interface LayoutInput {\n title: string;\n description: string;\n /** Trusted, already-rendered HTML. Injected unescaped. */\n html: string;\n /** External scripts this page asked for. Usually empty. */\n scripts?: string[];\n}\n\nexport function renderLayout(\n { title, description, html, scripts = [] }: LayoutInput,\n): string {\n // Loaded after the markup so Google's script finds its target elements\n // already in the DOM.\n const tags = scripts\n .map((src) => ` `)\n .join(\"\\n\");\n\n return `\n\n \n \n \n ${escapeHtml(title)}\n \n \n \n \n \n \n \n \n

\n${html}\n

\n \n${tags}\n \n\n`;\n}\n",[],[146,259,261],"932bb45b-8c24-4c59-9ca8-ac4df0ede94d","html.ts","495b7ef8-ac3f-11f1-8027-1607ee4eb77e",["D",1788952323787],"/** Escape a string for interpolation into HTML. Backend-only pure helper. */\nexport function escapeHtml(value: string): string {\n return value\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\");\n}\n",[],[146,259,268],"f52dc152-44f3-44af-88a7-bb2de08d2ee3","gate.ts","495b591e-ac3f-11f1-8027-1607ee4eb77e",["D",1788952323787],"import { escapeHtml } from \"./html.ts\";\n\n/**\n * Gates: trade an identity for something.\n *\n * A gate is a CONTENT file (`content/gates/.md`) plus a `{{gate:}}`\n * token in a page. Adding another gate is a file and a token — never code.\n */\n\n/** Google Identity Services — the script that draws the button and the popup. */\nexport const GSI_SCRIPT = \"https://accounts.google.com/gsi/client\";\n\n/** Records that a visitor has already paid the toll. */\nexport const UNLOCK_COOKIE = \"lw_unlocked\";\n\n/**\n * ⚠️ This cookie is NOT a security boundary and is deliberately unsigned.\n * Forging it reveals a calendar link that is handed to anyone who signs in,\n * so signing it would buy nothing. If a gate ever fronts something of real\n * value, this decision has to be revisited — sign it then.\n */\n\n/** A token sits alone on a line, so `marked` renders it as its own paragraph. */\nconst GATE_TOKEN = /

\\s*\\{\\{gate:([a-z0-9-]+)\\}\\}\\s*<\\/p>/g;\n\nexport function findGateNames(html: string): string[] {\n return [...html.matchAll(GATE_TOKEN)].map((match) => match[1]);\n}\n\nexport function replaceGate(\n html: string,\n name: string,\n replacement: string,\n): string {\n // The replacement is passed as a FUNCTION so a `$` in the reward content\n // (say, a price) is never treated as a replacement pattern.\n return html.replace(\n new RegExp(`

\\\\s*\\\\{\\\\{gate:${name}\\\\}\\\\}\\\\s*

`, \"g\"),\n () => replacement,\n );\n}\n\n/**\n * The DOM id a gate renders under.\n *\n * Ours, not `marked`'s: heading ids would depend on the renderer's slugging of\n * whatever the heading happens to say, and would break the moment the copy\n * changes. This is keyed to the gate name instead.\n */\nexport function gateAnchorId(name: string): string {\n return `gate-${name}`;\n}\n\n/** Wraps a gate so an unlock can land the visitor back on it. */\nexport function wrapGate(name: string, html: string): string {\n return `

\\n${html}\\n

`;\n}\n\nexport type GateError = \"email\" | \"google\" | null;\n\nexport interface GatePromptInput {\n name: string;\n prompt: string;\n button: string;\n /** Null when GOOGLE_CLIENT_ID isn't set. */\n googleClientId: string | null;\n /** Absolute. Must EXACTLY match an authorized redirect URI on the client. */\n loginUri: string;\n /** Only ONE #g_id_onload may exist per page — the first gate emits it. */\n includeOnload: boolean;\n error?: GateError;\n}\n\nexport function renderGatePrompt(\n { name, prompt, button, googleClientId, loginUri, includeOnload, error }:\n GatePromptInput,\n): string {\n const gate = escapeHtml(name);\n const fieldId = `gate-${name}-email`;\n\n const notice = error === \"google\"\n ? `

Google sign-in didn't finish. Try again, or use your email below.

\\n`\n : error === \"email\"\n ? `

That doesn't look like an email address — try again?

\\n`\n : \"\";\n\n const form = ``;\n\n // Google is the DEFAULT: one click, an account picked in Google's own popup,\n // and an address that comes back verified. Typing is the fallback.\n //\n // `data-auto_prompt=\"false\"` suppresses One Tap — a button was asked for, not\n // an uninvited flyover on page load. `data-state` carries which gate was\n // clicked; Google echoes it back in the POST.\n //\n // `data-text=\"continue_with\"` renders \"Continue with Google\" rather than\n // \"Sign in with Google\": this is a marketing page, and \"sign in\" implies an\n // account they don't have and never wanted.\n const onload = includeOnload\n ? `

\n`\n : \"\";\n\n const google = googleClientId\n ? `${onload}

`\n // Visible on purpose rather than hidden: a missing button reads as a bug,\n // and this says what to fix. It disappears once the client id is set.\n : `

\n Set GOOGLE_CLIENT_ID to enable this.

`;\n\n return `

${escapeHtml(prompt)}

\n${notice}${google}\n

Rather not use Google? Send your email instead

\n${form}\n

\nYour address comes to me so I can follow up. That's all it's used for.`;\n}\n\n/**\n * Shown under an unlocked reward. The escape hatch out of a year-long,\n * httpOnly cookie — without it the gate becomes invisible forever to anyone\n * who has opened it once.\n */\nexport function renderUnlockedNote(email: string): string {\n // \"Continuing as\", not \"Signed in as\" — this is a marketing page, and\n // sign-in language implies an account nobody here has or wants.\n return `Continuing as ${\n escapeHtml(email)\n } · not you?`;\n}\n",[],[146,259,275],"811c4125-d8ec-4bd5-9b8b-6dd7b6c76cf4","frontmatter.ts","495b4b86-ac3f-11f1-8027-1607ee4eb77e",["D",1788952323787],"/**\n * Split a leading `---` frontmatter block off a markdown document.\n *\n * Backend-only pure helper: no I/O, no business decisions.\n *\n * ⚠️ The trap this exists to avoid: our content uses `---` as a horizontal\n * rule BETWEEN sections, so a parser that splits the document on every `---`\n * eats half the page. Only a fence on line 1 opens frontmatter, and only the\n * FIRST fence after it closes the block. Everything past that is body,\n * horizontal rules included.\n */\n\nexport interface ParsedDocument {\n data: Record;\n body: string;\n}\n\nconst FENCE = \"---\";\n\nexport function parseFrontmatter(raw: string): ParsedDocument {\n const lines = raw.split(/\\r?\\n/);\n\n // No opening fence on line 1 → the whole document is body.\n if (lines[0]?.trim() !== FENCE) return { data: {}, body: raw };\n\n let closingLine = -1;\n for (let i = 1; i < lines.length; i++) {\n if (lines[i].trim() === FENCE) {\n closingLine = i;\n break;\n }\n }\n\n // Unterminated block → treat the document as body rather than swallowing it.\n if (closingLine === -1) return { data: {}, body: raw };\n\n const data: Record = {};\n for (const line of lines.slice(1, closingLine)) {\n if (!line.trim() || line.trimStart().startsWith(\"#\")) continue;\n\n const separator = line.indexOf(\":\");\n if (separator === -1) continue;\n\n const key = line.slice(0, separator).trim();\n if (!key) continue;\n\n let value = line.slice(separator + 1).trim();\n const quoted = (value.startsWith('\"') && value.endsWith('\"')) ||\n (value.startsWith(\"'\") && value.endsWith(\"'\"));\n if (quoted && value.length >= 2) value = value.slice(1, -1);\n\n data[key] = value;\n }\n\n return { data, body: lines.slice(closingLine + 1).join(\"\\n\") };\n}\n",[],[146,259,282],"032dd2d7-a6c0-43c7-9cb8-178a12880f6b",["D",1788952323787],[177,178,179,180,181],[146,259],"b945210d-85b0-4e82-854c-761748eebe1d","lead.types.ts","495b3fd8-ac3f-11f1-8027-1607ee4eb77e","01a085de-26c9-705c-866d-a96c4be70635",["D",1788952323787],"/**\n * A captured lead, shaped for the Notion row it becomes.\n *\n * Shared by the gate controller (which builds it) and the Notion service\n * (which writes it), so it lives here rather than in either one.\n */\nexport interface LeadCapture {\n /**\n * The Notion title. Google's display name when we have it, otherwise the\n * address — the typed path has no name, and a row reading \"Untitled\" is\n * worse than a row titled by email.\n */\n name: string;\n givenName: string | null;\n familyName: string | null;\n email: string;\n /**\n * Google Workspace host domain (the `hd` claim) — `acme.com`.\n *\n * Deliberately NOT called \"company\": it is a domain, not a company name.\n * Null for personal Google accounts and for every typed submission.\n */\n domain: string | null;\n gate: string;\n /**\n * How the address arrived. `google` means Google returned it; `typed` means\n * a human typed it and it could be anything.\n */\n source: \"google\" | \"typed\";\n}\n",[],[146,209,293],"ac7be3d3-6e73-43fc-ae2a-48bcec3159fc",["D",1788952323787],[175],[146,209],"c31638f8-9e29-43a6-93e5-f8418a68d836","notion.service.ts","495b2bc4-ac3f-11f1-8027-1607ee4eb77e","01a085de-26c9-705c-866d-a7fe58e12594",["D",1788952323787],"import { Client } from \"npm:@notionhq/client@5.26.0\";\nimport type { LeadCapture } from \"../types/lead.types.ts\";\nimport type { ServiceResponse } from \"../../shared/types/index.ts\";\nimport {\n createErrorResponse,\n createSuccessResponse,\n} from \"../../shared/response.ts\";\n\n/**\n * Records a captured lead in Notion. One external API, no business decisions,\n * never throws.\n */\n\n/**\n * ⚠️ SDK v5 splits `database_id` from `data_source_id`, and `pages.create`\n * needs the DATA SOURCE. The id copied out of a Notion URL is the database, so\n * we resolve it here and the operator never has to know the difference.\n * It lives at `data_sources[0].id` — not `.data_source_id`.\n */\nlet cachedDataSourceId: string | null = null;\n\nasync function resolveDataSourceId(\n notion: Client,\n databaseId: string,\n): Promise {\n if (cachedDataSourceId) return cachedDataSourceId;\n\n const database = await notion.databases.retrieve({ database_id: databaseId });\n const id = (database as { data_sources?: { id: string }[] })\n .data_sources?.[0]?.id;\n\n if (!id) throw new Error(`Database ${databaseId} exposes no data source`);\n\n cachedDataSourceId = id;\n return id;\n}\n\n/** Notion rich_text wants an array; an empty one renders as a blank cell. */\nfunction text(value: string | null) {\n return value\n ? { rich_text: [{ type: \"text\" as const, text: { content: value } }] }\n : { rich_text: [] };\n}\n\nexport async function recordLead(\n lead: LeadCapture,\n): Promise> {\n const auth = Deno.env.get(\"NOTION_API_KEY\");\n const databaseId = Deno.env.get(\"LEADS_DATABASE_ID\");\n\n if (!auth || !databaseId) {\n // Not wired up yet. Log the address so it is recoverable from the val log\n // rather than silently lost.\n console.warn(\n `[leads] Notion not configured — UNRECORDED: ${lead.email} (gate: ${lead.gate})`,\n );\n return createErrorResponse(\n \"Notion is not configured (needs NOTION_API_KEY and LEADS_DATABASE_ID)\",\n 503,\n );\n }\n\n try {\n const notion = new Client({ auth });\n const dataSourceId = await resolveDataSourceId(notion, databaseId);\n\n await notion.pages.create({\n parent: { type: \"data_source_id\", data_source_id: dataSourceId },\n properties: {\n Name: { title: [{ type: \"text\", text: { content: lead.name } }] },\n Email: { email: lead.email },\n \"Given name\": text(lead.givenName),\n \"Family name\": text(lead.familyName),\n Domain: text(lead.domain),\n Gate: { select: { name: lead.gate } },\n Source: { select: { name: lead.source } },\n },\n } as Parameters[0]);\n\n return createSuccessResponse({ recorded: true });\n } catch (error) {\n const detail = error instanceof Error ? error.message : String(error);\n console.error(\n `[leads] Notion write FAILED — ${lead.email} (gate: ${lead.gate}): ${detail}`,\n );\n return createErrorResponse(`Notion write failed: ${detail}`, 502);\n }\n}\n",[],[146,312,305],"services","c74f541b-d740-4df0-b009-5557bdb6c339","google.oauth.service.ts","495b0e8c-ac3f-11f1-8027-1607ee4eb77e",["D",1788952323787],"import type { ServiceResponse } from \"../../shared/types/index.ts\";\nimport {\n createErrorResponse,\n createSuccessResponse,\n} from \"../../shared/response.ts\";\n\n/**\n * Google Identity Services — the popup account chooser.\n *\n * The browser gets the branded button from Google's own script; Google then\n * POSTs a signed ID token to our endpoint. NOT Val Town's `std/oauth`, which\n * gates on a VAL TOWN account a visitor does not have.\n */\n\nconst TOKENINFO = \"https://oauth2.googleapis.com/tokeninfo\";\nconst VALID_ISSUERS = [\"accounts.google.com\", \"https://accounts.google.com\"];\n\nexport interface GoogleProfile {\n email: string;\n emailVerified: boolean;\n name: string | null;\n givenName: string | null;\n familyName: string | null;\n /**\n * The `hd` claim — a Google Workspace account's host domain, e.g. `acme.com`.\n * Absent for personal accounts, and its absence is itself signal.\n */\n domain: string | null;\n /** Google's stable user id. The only safe identity key — an address can move. */\n subject: string;\n}\n\nexport function getGoogleClientId(): string | null {\n return Deno.env.get(\"GOOGLE_CLIENT_ID\") ?? null;\n}\n\nexport function isGoogleConfigured(): boolean {\n return Boolean(getGoogleClientId());\n}\n\n/**\n * Verify an ID token that arrived FROM THE BROWSER.\n *\n * ⚠️ Signature verification is mandatory here, unlike a server-to-server code\n * exchange: the token passed through the client, so anything in it is\n * attacker-controlled until Google says otherwise.\n *\n * Uses Google's tokeninfo endpoint rather than local RS256 + JWKS caching:\n * one network hop per sign-in, no crypto code and no key rotation to get\n * wrong. That is the right trade at this site's volume. If sign-ins ever get\n * frequent enough for the hop to matter, verify locally instead.\n */\nexport async function verifyIdToken(\n credential: string,\n): Promise> {\n const clientId = getGoogleClientId();\n if (!clientId) {\n return createErrorResponse(\"GOOGLE_CLIENT_ID is not set\", 503);\n }\n\n try {\n const response = await fetch(\n `${TOKENINFO}?id_token=${encodeURIComponent(credential)}`,\n );\n\n // tokeninfo returns 400 for a bad signature, a malformed token, or one\n // that has expired — so this single check covers all three.\n if (!response.ok) {\n return createErrorResponse(\n `Google rejected the ID token (${response.status})`,\n 401,\n );\n }\n\n const claims = await response.json() as Record;\n\n // tokeninfo proves the token is genuine; it does NOT prove it was minted\n // for US. Without this check, a valid token issued to any other Google\n // app would be accepted here.\n if (claims.aud !== clientId) {\n return createErrorResponse(\"ID token was issued for another app\", 401);\n }\n if (!VALID_ISSUERS.includes(String(claims.iss))) {\n return createErrorResponse(`Unexpected issuer: ${claims.iss}`, 401);\n }\n\n const email = typeof claims.email === \"string\" ? claims.email : null;\n const subject = typeof claims.sub === \"string\" ? claims.sub : null;\n if (!email || !subject) {\n return createErrorResponse(\"ID token carried no email\", 401);\n }\n\n const str = (key: string): string | null =>\n typeof claims[key] === \"string\" && claims[key] ? claims[key] as string : null;\n\n return createSuccessResponse({\n email,\n subject,\n name: str(\"name\"),\n givenName: str(\"given_name\"),\n familyName: str(\"family_name\"),\n domain: str(\"hd\"),\n // tokeninfo stringifies booleans.\n emailVerified: String(claims.email_verified) === \"true\",\n });\n } catch (error) {\n const detail = error instanceof Error ? error.message : String(error);\n return createErrorResponse(`Could not reach Google: ${detail}`, 502);\n }\n}\n",[],[146,312,314],"9d004830-03ac-4314-8ffb-67d9a80de175","content.service.ts","495b019e-ac3f-11f1-8027-1607ee4eb77e",["D",1788952323787],"import { readFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport type { ServiceResponse } from \"../../shared/types/index.ts\";\nimport {\n createErrorResponse,\n createSuccessResponse,\n} from \"../../shared/response.ts\";\n\n/**\n * Where content comes from.\n *\n * This is a SERVICE, not a util, even though v1's content is \"just files\":\n * Val Town has no filesystem, so `readFile` is a Val Town API call — real I/O.\n *\n * It is also the seam. When content moves to Notion or a CMS, this file is the\n * only one that changes; the controller, the renderer, and the routes never\n * learn the difference.\n *\n * `import.meta.url` is passed explicitly so a branch reads ITS OWN content\n * files rather than whatever `main` happens to be serving.\n */\nexport async function getContentFile(\n path: string,\n): Promise> {\n try {\n const raw = await readFile(path, import.meta.url);\n return createSuccessResponse(raw);\n } catch (error) {\n // Services never throw — `readFile` does, on a missing file.\n const detail = error instanceof Error ? error.message : String(error);\n return createErrorResponse(`Could not read \"${path}\": ${detail}`, 404);\n }\n}\n",[],[146,312,321],"2541e365-1496-4118-b1df-0f30f4b1fbab",["D",1788952323787],[171,172,173],[146,312],"e4fac905-57c4-438b-810e-92efff3d1ca9","pages.ts","495af712-ac3f-11f1-8027-1607ee4eb77e","01a085de-26c9-705c-866d-a22a2b29fc5e",["D",1788952323787],"import { type Context, Hono } from \"npm:hono@4.11.9\";\nimport { getCookie } from \"npm:hono@4.11.9/cookie\";\nimport { getPage, type Viewer } from \"../controllers/page.controller.ts\";\nimport { renderLayout } from \"../utils/layout.ts\";\nimport { UNLOCK_COOKIE } from \"../utils/gate.ts\";\nimport type { ContentfulStatusCode } from \"npm:hono@4.11.9/utils/http-status\";\n\n/**\n * Public HTML routes. Thin wrappers: extract, call the controller, map\n * `success === false` to a status, return a Response. No business logic — the\n * route reads the cookie but never decides what it means.\n */\nconst pages = new Hono();\n\n/** Cookies, query params and origin are HTTP concerns — the ROUTE extracts them. */\nfunction viewerFrom(c: Context): Viewer {\n const error = c.req.query(\"error\");\n return {\n email: getCookie(c, UNLOCK_COOKIE) ?? null,\n error: error === \"email\" || error === \"google\" ? error : null,\n // Derived, never hardcoded — the same code serves preview, production and\n // the custom domain.\n origin: new URL(c.req.url).origin,\n };\n}\n\nasync function servePage(c: Context, slug: string) {\n const result = await getPage(slug, viewerFrom(c));\n\n if (!result.success) {\n return c.html(\n renderLayout({\n title: \"Not found\",\n description: \"\",\n html:\n `

Not found

\\n

${result.error}

\\n

Home

`,\n }),\n result.status as ContentfulStatusCode,\n );\n }\n\n return c.html(\n renderLayout({\n title: result.data.title,\n description: result.data.description,\n html: result.data.html,\n scripts: result.data.scripts,\n }),\n );\n}\n\npages.get(\"/\", (c) => servePage(c, \"home\"));\npages.get(\"/:slug\", (c) => servePage(c, c.req.param(\"slug\")));\n\nexport default pages;\n",[],[146,339,332],"routes","ce7dcf6c-b34e-4548-8011-45d5f7b04282","auth.ts","495ae2ea-ac3f-11f1-8027-1607ee4eb77e",["D",1788952323787],"import { Hono } from \"npm:hono@4.11.9\";\nimport { deleteCookie, getCookie, setCookie } from \"npm:hono@4.11.9/cookie\";\nimport { unlockGateWithGoogle } from \"../controllers/gate.controller.ts\";\nimport { gateAnchorId, UNLOCK_COOKIE } from \"../utils/gate.ts\";\n\nconst auth = new Hono();\n\n/**\n * Google Identity Services posts the signed ID token here after the visitor\n * picks an account in the popup.\n *\n * ⚠️ This path must EXACTLY match an authorized redirect URI on the OAuth\n * client, and match `data-login_uri` on the page, or Google refuses to post.\n */\nauth.post(\"/google/callback\", async (c) => {\n const form = await c.req.parseBody();\n\n const credential = String(form.credential ?? \"\");\n const postedCsrf = String(form.g_csrf_token ?? \"\");\n const cookieCsrf = getCookie(c, \"g_csrf_token\");\n\n // Which gate they clicked, carried in the button's data-state attribute.\n const gate = String(form.state ?? \"\").toLowerCase().replace(/[^a-z0-9-]/g, \"\") ||\n \"calendar\";\n const anchor = `#${gateAnchorId(gate)}`;\n\n // Google's double-submit CSRF check: it sets the same random value as both\n // a cookie and a body field. A mismatch means this POST didn't come from\n // the sign-in we rendered.\n if (!credential || !postedCsrf || postedCsrf !== cookieCsrf) {\n console.warn(\"[auth] Google callback rejected: CSRF token mismatch\");\n return c.redirect(`/?error=google${anchor}`, 303);\n }\n\n const result = await unlockGateWithGoogle(credential, gate);\n\n if (!result.success) {\n console.error(`[auth] Google sign-in failed: ${result.error}`);\n return c.redirect(`/?error=google${anchor}`, 303);\n }\n\n setCookie(c, UNLOCK_COOKIE, result.data.email, {\n path: \"/\",\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 60 * 60 * 24 * 365,\n });\n\n // Land them back on the gate, looking at what they just unlocked.\n return c.redirect(`/${anchor}`, 303);\n});\n\n/**\n * Forget this visitor and put the gates back.\n *\n * Not a nicety: without it the unlock cookie is httpOnly and lasts a year, so\n * whoever unlocks a gate — the site's own author included — can never see that\n * gate again. It is also the honest thing to offer anyone on a shared machine.\n *\n * GET rather than POST so it can be a plain link. The worst a stray prefetch\n * can do is sign someone out, which costs them one click.\n */\nauth.get(\"/reset\", (c) => {\n deleteCookie(c, UNLOCK_COOKIE, { path: \"/\" });\n return c.redirect(\"/\", 303);\n});\n\nexport default auth;\n",[],[146,339,341],"f9a5a427-4915-49b2-b5b8-8776a2ef2cf3","api.ts","495ad516-ac3f-11f1-8027-1607ee4eb77e",["D",1788952323787],"import { Hono } from \"npm:hono@4.11.9\";\nimport { setCookie } from \"npm:hono@4.11.9/cookie\";\nimport { unlockGate } from \"../controllers/gate.controller.ts\";\nimport { gateAnchorId, UNLOCK_COOKIE } from \"../utils/gate.ts\";\n\nconst api = new Hono();\n\n/**\n * A plain form POST — no JavaScript involved. Post, redirect, re-render.\n * 303 rather than 302 so the browser follows with GET and a reload doesn't\n * resubmit the form.\n *\n * The redirect carries a fragment so the visitor lands back ON the gate\n * instead of at the top of the page, hunting for what they just unlocked.\n */\napi.post(\"/unlock\", async (c) => {\n const form = await c.req.parseBody();\n const gate = String(form.gate ?? \"\").toLowerCase().replace(/[^a-z0-9-]/g, \"\");\n const anchor = gate ? `#${gateAnchorId(gate)}` : \"\";\n\n const result = await unlockGate(String(form.email ?? \"\"), gate);\n\n if (!result.success) {\n // Query string before the fragment, or the browser reads the whole tail\n // as part of the fragment and the error is never seen.\n return c.redirect(`/?error=email${anchor}`, 303);\n }\n\n setCookie(c, UNLOCK_COOKIE, result.data.email, {\n path: \"/\",\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n maxAge: 60 * 60 * 24 * 365,\n });\n\n return c.redirect(`/${anchor}`, 303);\n});\n\nexport default api;\n",[],[146,339,348],"ef6aa159-7970-4f5d-88d3-c3eff6d43af7",["D",1788952323787],[167,168,169],[146,339],"e2f1eb70-c422-4c67-a041-d13e3cd72b74","page.controller.ts","495aa7bc-ac3f-11f1-8027-1607ee4eb77e","01a085de-26c9-705c-866d-9fe98c62773e",["D",1788952323787],"import { getContentFile } from \"../services/content.service.ts\";\nimport { getGoogleClientId } from \"../services/google.oauth.service.ts\";\nimport { parseFrontmatter } from \"../utils/frontmatter.ts\";\nimport { renderMarkdown } from \"../utils/markdown.ts\";\nimport {\n findGateNames,\n type GateError,\n GSI_SCRIPT,\n renderGatePrompt,\n renderUnlockedNote,\n replaceGate,\n wrapGate,\n} from \"../utils/gate.ts\";\nimport type { PageView, ServiceResponse } from \"../../shared/types/index.ts\";\nimport {\n createErrorResponse,\n createSuccessResponse,\n} from \"../../shared/response.ts\";\n\n/** What the route knows about whoever is asking. */\nexport interface Viewer {\n /** The address they already traded, or null. */\n email: string | null;\n /** Their last attempt failed, so the prompt should say so. */\n error?: GateError;\n /** Absolute origin of this request — Google needs an absolute login_uri. */\n origin: string;\n}\n\n/**\n * Resolve a slug to a rendered page.\n *\n * Returns `ServiceResponse` rather than an HTTP `Response` on\n * purpose: that is what lets an MCP tool handler call this exact function\n * later without a route in front of it.\n */\nexport async function getPage(\n slug: string,\n viewer: Viewer,\n): Promise> {\n // Validation is the controller's job. This also closes path traversal —\n // a slug can only ever be a flat name inside content/.\n const safeSlug = slug.trim().toLowerCase().replace(/[^a-z0-9-]/g, \"\");\n if (!safeSlug) return createErrorResponse(\"Invalid page slug\", 404);\n\n const file = await getContentFile(`/content/${safeSlug}.md`);\n if (!file.success) {\n // Wrap the service error with context rather than leaking its wording.\n return createErrorResponse(`No page named \"${safeSlug}\"`, 404);\n }\n\n const { data, body } = parseFrontmatter(file.data);\n let html = renderMarkdown(body);\n\n const clientId = getGoogleClientId();\n const scripts: string[] = [];\n let onloadEmitted = false;\n\n // Whether a gate opens is a business decision, so it happens HERE — not in\n // the route, and not in the renderer.\n for (const name of new Set(findGateNames(html))) {\n const gate = await resolveGate(name, viewer, clientId, !onloadEmitted);\n\n if (gate.renderedGoogle) {\n // Exactly one #g_id_onload per page, and Google's script pulled in only\n // when something on the page actually needs it.\n onloadEmitted = true;\n if (!scripts.includes(GSI_SCRIPT)) scripts.push(GSI_SCRIPT);\n }\n\n // Wrapped in both states, locked and unlocked, so the anchor an unlock\n // redirects to exists on the page it lands on.\n html = replaceGate(html, name, wrapGate(name, gate.html));\n }\n\n return createSuccessResponse({\n slug: safeSlug,\n title: data.title ?? safeSlug,\n description: data.description ?? \"\",\n html,\n scripts,\n });\n}\n\ninterface ResolvedGate {\n html: string;\n renderedGoogle: boolean;\n}\n\nasync function resolveGate(\n name: string,\n viewer: Viewer,\n clientId: string | null,\n includeOnload: boolean,\n): Promise {\n const file = await getContentFile(`/content/gates/${name}.md`);\n\n if (!file.success) {\n // A page referencing a gate that doesn't exist is our bug, not the\n // visitor's problem — log it and render nothing rather than show a token.\n console.error(`[gate] page references missing gate file \"${name}\"`);\n return { html: \"\", renderedGoogle: false };\n }\n\n const { data, body } = parseFrontmatter(file.data);\n\n // Already paid — hand over the reward, plus a way back out. Without that\n // way out an unlock is permanent and invisible, and nobody (author\n // included) can ever see the gate again.\n if (viewer.email) {\n return {\n html: `${renderMarkdown(body)}\\n${renderUnlockedNote(viewer.email)}`,\n renderedGoogle: false,\n };\n }\n\n return {\n html: renderGatePrompt({\n name,\n prompt: data.prompt ?? \"Sign in to continue.\",\n button: data.button ?? \"Continue\",\n googleClientId: clientId,\n loginUri: `${viewer.origin}/auth/google/callback`,\n includeOnload,\n error: viewer.error ?? null,\n }),\n renderedGoogle: Boolean(clientId),\n };\n}\n",[],[146,366,359],"controllers","6873cf7e-4945-4a3f-b020-17a0d71fdba5","gate.controller.ts","495a6676-ac3f-11f1-8027-1607ee4eb77e",["D",1788952323787],"import { recordLead } from \"../services/notion.service.ts\";\nimport { verifyIdToken } from \"../services/google.oauth.service.ts\";\nimport type { LeadCapture } from \"../types/lead.types.ts\";\nimport type { ServiceResponse } from \"../../shared/types/index.ts\";\nimport {\n createErrorResponse,\n createSuccessResponse,\n} from \"../../shared/response.ts\";\n\nexport interface Unlocked {\n email: string;\n gate: string;\n}\n\n/** Deliberately loose — this is a shape check, not address verification. */\nconst EMAIL_SHAPE = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/;\n\nfunction normaliseGate(raw: string): string {\n return raw.trim().toLowerCase().replace(/[^a-z0-9-]/g, \"\");\n}\n\n/**\n * The typed-email fallback path. No name and no domain — whoever is at the\n * keyboard typed a string, and it could be anything.\n */\nexport async function unlockGate(\n rawEmail: string,\n rawGate: string,\n): Promise> {\n const email = rawEmail.trim().toLowerCase();\n const gate = normaliseGate(rawGate);\n\n if (!EMAIL_SHAPE.test(email)) {\n return createErrorResponse(\"That doesn't look like an email address\", 400);\n }\n if (!gate) return createErrorResponse(\"Missing gate name\", 400);\n\n return finishUnlock({\n // No name to use, so the address becomes the title. Better than \"Untitled\".\n name: email,\n givenName: null,\n familyName: null,\n email,\n domain: null,\n gate,\n source: \"typed\",\n });\n}\n\n/**\n * The DEFAULT path: they picked an account in Google's popup, so the address\n * arrives with a real name attached and, for Workspace accounts, their domain.\n */\nexport async function unlockGateWithGoogle(\n credential: string,\n rawGate: string,\n): Promise> {\n const gate = normaliseGate(rawGate);\n if (!gate) return createErrorResponse(\"Missing gate name\", 400);\n\n const profile = await verifyIdToken(credential);\n if (!profile.success) {\n return createErrorResponse(`Google sign-in failed: ${profile.error}`, 401);\n }\n\n const google = profile.data;\n\n // ⚠️ `email_verified` is not the whole story. Google is authoritative only\n // for @gmail.com addresses and for Workspace accounts (where `hd` is set).\n // Otherwise the address was verified once at signup and that third-party\n // mailbox may have changed hands since. `Source: google` is a strong signal,\n // not a guarantee.\n if (!google.emailVerified) {\n console.warn(\n `[gate] Google returned an UNVERIFIED address: ${google.email}`,\n );\n }\n\n return finishUnlock({\n name: google.name ?? google.email,\n givenName: google.givenName,\n familyName: google.familyName,\n email: google.email,\n domain: google.domain,\n gate,\n source: \"google\",\n });\n}\n\n/**\n * Record the lead, then open the gate either way.\n *\n * Deliberate: a misconfiguration on OUR side must not cost the visitor the\n * thing they just traded for. The address is in the val log regardless, so it\n * is recoverable — unlike the goodwill of a form that eats a submission.\n */\nasync function finishUnlock(\n lead: LeadCapture,\n): Promise> {\n const recorded = await recordLead(lead);\n\n if (!recorded.success) {\n console.warn(\n `[gate] unlocking \"${lead.gate}\" for ${lead.email} despite: ${recorded.error}`,\n );\n }\n\n return createSuccessResponse({ email: lead.email, gate: lead.gate });\n}\n",[],[146,366,368],"4242f58a-7287-4339-9a7c-88e6759593f6",["D",1788952323787],[164,165],[146,366],["D",1788952323787],[163,166,170,174,176,182,183],[146],["D",1788890813214],{"_97":96,"_104":100},{"_97":96,"_98":96,"_99":100,"_18":-5,"_101":102,"_103":59},{"_13":86,"_31":87,"_42":41,"_88":43,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":44,"_95":96},"ctx",{"_79":-5,"_124":418,"_419":420,"_421":422,"_423":24,"_424":24,"_425":24,"_426":59,"_427":-5,"_428":-7,"_429":-7,"_430":63,"_431":24,"_432":24,"_433":-5,"_434":24,"_435":24,"_436":24,"_437":-5},"ENV",{"_389":390,"_391":392,"_393":87,"_394":395,"_396":397,"_398":399,"_400":401,"_402":403,"_404":405,"_406":407,"_408":409,"_410":411,"_412":413,"_414":415,"_416":417},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v3