{title}

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_253":254,"_255":256},"routes/_app.x.$handle.$name",{"_94":93,"_32":44,"_102":84,"_27":103,"_13":14,"_104":-5,"_11":105,"_106":107,"_108":109,"_110":111,"_112":113,"_20":-5,"_114":-5,"_115":-5,"_116":25,"_117":118,"_119":120,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":77,"_78":79,"_80":81,"_82":25},"version",50,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":20,"_34":36,"_37":38,"_39":14,"_40":41,"_24":25},"previous",{"_30":31,"_32":28,"_33":20,"_34":35},"deleted",false,"deletedHere","path","deno.json","latestPath","fileId","1af2bbd8-68da-11f1-b600-1607ee4eb77e","name","fileType","content","{\n \"compilerOptions\": {\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ],\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ]\n },\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-sloppy-imports\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true\n },\n \"imports\": {\n \"@std/assert\": \"jsr:@std/assert@^1.0.19\"\n },\n \"lint\": {\n \"include\": [\n \"*.ts\",\n \"*.tsx\",\n \"example/*.ts\"\n ],\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\",\n \"no-import-prefix\"\n ]\n }\n },\n \"lock\": false,\n \"nodeModulesDir\": \"auto\",\n \"tasks\": {\n \"check\": \"deno fmt && deno task lint && deno task typecheck && deno task test\",\n \"lint\": \"deno lint\",\n \"test\": \"VAL_TOWN_API_KEY=test deno test --allow-env --allow-import=esm.town,www.val.town,esm.sh,jsr.io\",\n \"typecheck\": \"VAL_TOWN_API_KEY=test deno check --allow-import=esm.town,www.val.town,esm.sh,jsr.io main.ts mod.ts app.tsx mod_test.ts\"\n }\n}\n","{\n \"compilerOptions\": {\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ],\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ]\n },\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-sloppy-imports\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true\n },\n \"imports\": {\n \"@std/assert\": \"jsr:@std/assert@^1.0.19\"\n },\n \"lint\": {\n \"include\": [\"*.ts\", \"*.tsx\"],\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\",\n \"no-import-prefix\"\n ]\n }\n },\n \"lock\": false,\n \"nodeModulesDir\": \"auto\",\n \"tasks\": {\n \"check\": \"deno fmt && deno task lint && deno task typecheck && deno task test\",\n \"lint\": \"deno lint\",\n \"test\": \"VAL_TOWN_API_KEY=test deno test --allow-env --allow-import=esm.town,www.val.town,esm.sh,jsr.io\",\n \"typecheck\": \"VAL_TOWN_API_KEY=test deno check --allow-import=esm.town,www.val.town,esm.sh,jsr.io main.ts mod.ts app.tsx mod_test.ts\"\n }\n}\n","createdAt",["D",1784052593405],"branchVersion","branchId","312b9f03-2082-4458-8650-b643ff4498f4","id","eea1c52b-5aa1-4a5f-81a3-5488cf5018ec","scoped-blob-viewer",["D",1781542084872],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","An admin panel for val-scoped blob storage","imageUrl","5d1042a9-7b0b-499d-8a72-3a8ac7a4e185","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","5f80108f-7ca4-4327-b77b-089dbe4b5a82","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_94":93,"_101":97},"org",{"_94":93,"_95":-5,"_96":97,"_18":54,"_98":99,"_100":25},"branch",{"_13":83,"_32":84,"_42":41,"_85":43,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":44,"_92":93},"isOwned",51,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","nbbaier","handle","displayName","avatar","https://secure.gravatar.com/avatar/0129a541b7b3574e92c4afd06c5e32da&d=identicon","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_32":44,"_37":249,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":-5,"_64":-5,"_65":-5,"_66":-5,"_67":68,"_69":68,"_70":71,"_72":71,"_73":71,"_74":68,"_75":68,"_76":250,"_78":251,"_80":252,"_82":25},"tree",[206,208,209,210,211,212,213,214],"files",[206,207,208,209,210,211,212,213,214],"counts",{"_195":60,"_196":197,"_198":60,"_199":200,"_201":202},"contents",[125,126,127,128,129,130,131,132],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_42":188,"_32":189,"_30":190,"_136":-5,"_40":41,"_39":191,"_138":120,"_37":192,"_13":60,"_33":193,"_34":-5,"_24":25,"_143":-5,"_27":194},{"_42":181,"_32":182,"_30":183,"_136":-5,"_40":41,"_39":184,"_138":120,"_37":185,"_13":140,"_33":20,"_34":186,"_24":25,"_143":-5,"_27":187},{"_42":173,"_32":174,"_30":175,"_136":-5,"_40":41,"_39":176,"_138":120,"_37":177,"_13":178,"_33":20,"_34":179,"_24":25,"_143":-5,"_27":180},{"_42":166,"_32":167,"_30":168,"_136":-5,"_40":41,"_39":169,"_138":120,"_37":170,"_13":140,"_33":141,"_34":171,"_24":25,"_143":-5,"_27":172},{"_42":162,"_32":28,"_30":31,"_136":-5,"_40":41,"_39":14,"_138":120,"_37":163,"_13":164,"_33":20,"_34":36,"_24":25,"_143":-5,"_27":165},{"_42":153,"_32":154,"_30":155,"_136":-5,"_40":41,"_39":156,"_138":120,"_37":157,"_13":158,"_33":159,"_34":160,"_24":25,"_143":-5,"_27":161},{"_42":145,"_32":146,"_30":147,"_136":-5,"_40":41,"_39":148,"_138":120,"_37":149,"_13":150,"_33":141,"_34":151,"_24":25,"_143":-5,"_27":152},{"_42":133,"_32":134,"_30":135,"_136":-5,"_40":41,"_39":137,"_138":120,"_37":139,"_13":140,"_33":141,"_34":142,"_24":25,"_143":-5,"_27":144},"8e09b631-3e28-4cc5-8f04-d6883904bbf9","mod_test.ts","8b7d15d2-7d49-11f1-80ff-1607ee4eb77e","parentId",47,"latest",["D",1784052262013],2,"script","import {\n createRouteHandler,\n defineIntegration,\n type Identity,\n} from \"https://esm.town/v/nbbaier/integrations/mod.ts\";\nimport { assert, assertEquals } from \"jsr:@std/assert@1.0.19\";\nimport { blobAdmin, type BlobStore } from \"./mod.ts\";\n\n// In-memory stand-in for std/blob so the routes never touch real storage.\nfunction fakeStore(seed: Record = {}): BlobStore {\n const map = new Map();\n const enc = new TextEncoder();\n for (const [k, v] of Object.entries(seed)) map.set(k, enc.encode(v));\n const stamp = new Date(0).toISOString();\n return {\n list: (prefix = \"\") =>\n Promise.resolve(\n [...map.entries()]\n .filter(([k]) => k.startsWith(prefix))\n .map(([key, bytes]) => ({\n key,\n size: bytes.length,\n lastModified: stamp,\n })),\n ),\n get: (key) => {\n const bytes = map.get(key);\n if (!bytes) throw new Error(`not found: ${key}`);\n return Promise.resolve(new Response(bytes as BodyInit));\n },\n set: (key, value) => {\n map.set(key, typeof value === \"string\" ? enc.encode(value) : value);\n return Promise.resolve();\n },\n delete: (key) => {\n map.delete(key);\n return Promise.resolve();\n },\n move: (from, to) => {\n const b = map.get(from);\n if (b) {\n map.set(to, b);\n map.delete(from);\n }\n return Promise.resolve();\n },\n copy: (from, to) => {\n const b = map.get(from);\n if (b) map.set(to, b);\n return Promise.resolve();\n },\n };\n}\n\nDeno.test(\"conforms to the integrations contract\", () => {\n const admin = blobAdmin({ owner: \"nbbaier\" }, fakeStore());\n assertEquals(admin.slug, \"blobs\");\n assertEquals(admin.name, \"Scoped Blob Admin\");\n assertEquals(admin.requiredEnv, [\"OAUTH_STATE_ENCRYPTION_KEY\"]);\n // auth:false has no OAuth gate, so nothing to badge.\n assertEquals(blobAdmin({ auth: false }, fakeStore()).requiredEnv, undefined);\n});\n\nDeno.test(\"routed mode: owner gate + every internal link carries the mount prefix\", async () => {\n const admin = blobAdmin(\n { owner: \"nbbaier\" },\n fakeStore({ \"config.json\": '{\"a\":1}' }),\n );\n const routed = (req: Request, user: string | null) =>\n admin.handler(req, { user, prefix: \"/blobs\", login: \"/auth/login\" });\n\n const res = await routed(new Request(\"http://local/\"), \"nbbaier\");\n assertEquals(res.status, 200);\n const html = await res.text();\n assert(html.includes(`href=\"/blobs/\"`), \"home link must carry the prefix\");\n assert(\n html.includes(`action=\"/blobs/create\"`),\n \"create form must carry the prefix\",\n );\n assert(\n html.includes(`href=\"/blobs/view?key=config.json\"`),\n \"view link must carry the prefix\",\n );\n assert(\n html.includes(`action=\"/auth/logout\"`),\n \"/auth/* links stay origin-level in both modes\",\n );\n assert(\n !html.includes(`action=\"/create\"`),\n \"no unprefixed form action may leak through\",\n );\n\n // A logged-in non-owner is refused; so is an ungated router (null user)\n // that can't satisfy the allowlist.\n assertEquals(\n (await routed(new Request(\"http://local/\"), \"intruder\")).status,\n 403,\n );\n assertEquals((await routed(new Request(\"http://local/\"), null)).status, 403);\n});\n\nDeno.test(\"routed mode: mutations round-trip and redirects stay integration-local\", async () => {\n const store = fakeStore();\n const admin = blobAdmin({ owner: \"nbbaier\" }, store);\n const created = await admin.handler(\n new Request(\"http://local/create\", {\n method: \"POST\",\n body: new URLSearchParams({ key: \"greeting\", content: \"hello\" }),\n }),\n { user: \"nbbaier\", prefix: \"/blobs\", login: \"/auth/login\" },\n );\n assertEquals(created.status, 302);\n // Root-absolute Location; the router rewrites it, not the integration (ADR 0002).\n assert(\n created.headers.get(\"location\")?.startsWith(\"/?ok=\"),\n `redirect stays local, got ${created.headers.get(\"location\")}`,\n );\n assertEquals(\n (await store.list()).map((e) => e.key),\n [\"greeting\"],\n );\n});\n\nDeno.test(\"mounted under the real router: dispatch, gate, and Location rewriting compose\", async () => {\n const store = fakeStore();\n const admin = blobAdmin({ owner: \"boss\" }, store);\n const handle = createRouteHandler(\n { integrations: [admin], auth: {} },\n () => Promise.resolve({ user: \"boss\", owner: \"boss\" }),\n );\n\n // /blobs canonicalizes to /blobs/ so relative resolution has a trailing slash.\n const canon = await handle(new Request(\"https://host.test/blobs\"));\n assertEquals(canon.status, 302);\n assertEquals(canon.headers.get(\"location\"), \"/blobs/\");\n\n // POST create: integration redirects to /?ok=, router prefixes it to /blobs/?ok=.\n const created = await handle(\n new Request(\"https://host.test/blobs/create\", {\n method: \"POST\",\n body: new URLSearchParams({ key: \"k\", content: \"v\" }),\n }),\n );\n assertEquals(created.status, 302);\n assert(\n created.headers.get(\"location\")?.startsWith(\"/blobs/?ok=\"),\n `Location must be prefix-rewritten, got ${created.headers.get(\"location\")}`,\n );\n assertEquals(\n (await store.list()).map((e) => e.key),\n [\"k\"],\n );\n});\n\n// A minimal flagged (public, session-less) integration to mount alongside the\n// unflagged blob admin, so the router is a genuine mixed public/private surface.\nconst publicStub = defineIntegration({\n name: \"Public Docs\",\n slug: \"docs\",\n sessionLess: true,\n handler: () => new Response(\"hello\", { status: 200 }),\n});\n\nDeno.test(\"private behind a public router: hidden from the anonymous directory, walled on a direct hit, open to the owner\", async () => {\n const admin = blobAdmin({ owner: \"boss\" }, fakeStore({ \"a.json\": \"{}\" }));\n // A mixed router: one flagged integration makes the directory public, but the\n // blob admin declares no flag and must stay fully gated behind it.\n const as = (identity: Identity) =>\n createRouteHandler(\n { integrations: [publicStub, admin], auth: {} },\n () => Promise.resolve(identity),\n );\n const anon: Identity = { user: null, owner: \"boss\" };\n\n // Anonymous directory: the flagged integration is listed; the blob admin is\n // never named — the router leaks neither its name nor its existence.\n const dir = await as(anon)(new Request(\"https://host.test/\"));\n assertEquals(dir.status, 200);\n const dirHtml = await dir.text();\n assert(dirHtml.includes(\"Public Docs\"), \"the flagged integration is listed\");\n assert(\n !dirHtml.includes(\"Scoped Blob Admin\") &&\n !dirHtml.includes('href=\"blobs/\"'),\n \"the unflagged blob admin is absent from the anonymous directory\",\n );\n\n // Anonymous direct hit on the private slug → the router-owned login page (401),\n // not a 404 and never the blob admin's own surface.\n const walled = await as(anon)(new Request(\"https://host.test/blobs/\"));\n assertEquals(walled.status, 401);\n const walledHtml = await walled.text();\n assert(\n walledHtml.includes(\"/auth/login\"),\n \"the wall is the router's login page\",\n );\n assert(\n !walledHtml.includes(\"Create / Upload\"),\n \"the blob admin's surface never renders for the anonymous visitor\",\n );\n\n // A logged-in, authorized owner clears the router gate and the blob admin's\n // own owner check, reaching the admin surface exactly as before.\n const owner = await as({ user: \"boss\", owner: \"boss\" })(\n new Request(\"https://host.test/blobs/\"),\n );\n assertEquals(owner.status, 200);\n assert(\n (await owner.text()).includes(\"Create / Upload\"),\n \"the owner reaches the admin panel through the mixed router\",\n );\n});\n\nDeno.test(\"standalone auth:false is open, and the value is itself an HTTP handler\", async () => {\n const admin = blobAdmin({ auth: false }, fakeStore({ a: \"1\" }));\n // Called with no ctx → standalone mode; no gate, base is \"\".\n const res = await admin(new Request(\"http://local/\"));\n assertEquals(res.status, 200);\n const html = await res.text();\n assert(html.includes(`action=\"/create\"`), \"standalone links are unprefixed\");\n});\n","label",[134],"3a29db03-7258-4383-81b7-647d2af77546","mod.ts","4fd8b2e4-68df-11f1-8b5c-1607ee4eb77e",43,["D",1784052262042],5,"// Public entry point. The implementation (JSX) lives in app.tsx; this barrel\n// keeps the stable `.../scoped-blob-viewer/mod.ts` import path and stays\n// JSX-free so it type-checks with plain `deno check`.\nexport {\n blobAdmin,\n type BlobAdminOptions,\n type BlobStore,\n default,\n} from \"./app.tsx\";\n",[146],"482be904-d637-4933-bf8b-328be2385c7d","main.ts","fabb0370-68d9-11f1-8438-1607ee4eb77e",38,["D",1783790104545],6,"http","import { blobAdmin } from \"./mod.ts\";\n\n/**\n * This val's own panel — manages THIS val's scoped blob storage.\n *\n * To inspect a DIFFERENT val's scoped storage, import the panel into that val:\n *\n * import { blobAdmin } from \"https://esm.town/v/nbbaier/scoped-blob-viewer/mod.ts\";\n * export default blobAdmin({ owner: \"nbbaier\" });\n *\n * Because scoped blobs are bound to the running val, the imported panel reads\n * the host val's storage automatically — no per-val tokens needed.\n */\nexport default blobAdmin({ owner: \"nbbaier\" });\n",[154],"7a155c53-921b-4854-b144-a0aee16ff2ec",["D",1784052593405],3,[28],"72667d61-5ae4-4f3a-84ab-4854fa346dae","app.tsx","8b0a8d64-7d49-11f1-8e3c-1607ee4eb77e",42,["D",1784052262001],"/** @jsxImportSource npm:hono@4.6.14/jsx */\nimport {\n type CallableIntegration,\n defineIntegration,\n type IntegrationContext,\n} from \"https://esm.town/v/nbbaier/integrations/mod.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport {\n getOAuthUserData,\n oauthMiddleware,\n} from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { type Context, Hono } from \"npm:hono@4.6.14\";\nimport type { FC, PropsWithChildren } from \"npm:hono@4.6.14/jsx\";\n\n/**\n * Reusable admin panel for **val-scoped** blob storage (`std/blob/main.ts`).\n *\n * Drop it into ANY val to browse that val's own scoped blobs — because scoped\n * storage is bound to the *running* val's runtime token, the imported panel\n * automatically reads the host val's storage. No per-val tokens required.\n *\n * The factory returns a callable Integration (the `integrations` contract), so\n * the same value serves both mounting styles:\n *\n * // Standalone: the panel IS the val's HTTP export; runs its own OAuth.\n * export default blobAdmin({ owner: \"nbbaier\" });\n *\n * // Routed: mounted alongside other integrations under one OAuth gate.\n * createRouter({ integrations: [blobAdmin({})] });\n *\n * When `auth` is enabled (default), the OAuth gate — this val's own when\n * standalone, the router's when routed — needs an `OAUTH_STATE_ENCRYPTION_KEY`\n * env var (any random 32-byte hex string) to encrypt session cookies.\n */\n\nexport interface BlobAdminOptions {\n /**\n * Val Town username(s) allowed in. Others get 403. Omit to allow ANY\n * logged-in Val Town user (not recommended). Ignored when `auth` is false.\n */\n owner?: string | string[];\n /** Gate behind \"Log in with Val Town\". Default true. Set false for no auth. */\n auth?: boolean;\n /** Title shown in the header / tab. Default \"Scoped Blob Admin\". */\n title?: string;\n}\n\nconst PAGE_SIZE = 50;\n// Largest blob we'll attempt to render/edit inline; bigger ones get download-only.\nconst INLINE_MAX = 1024 * 1024; // 1 MB\n\ntype BlobEntry = { key: string; size: number; lastModified: string };\n\n/**\n * The slice of `std/blob` this panel uses. `blob` satisfies it structurally;\n * injecting a fake is the test seam (mutations never touch real storage).\n */\nexport interface BlobStore {\n list(prefix?: string): Promise;\n get(key: string): Promise;\n set(key: string, value: string | Uint8Array): Promise;\n delete(key: string): Promise;\n move(from: string, to: string): Promise;\n copy(from: string, to: string): Promise;\n}\n\ntype Env = {\n Variables: {\n /** Val Town username; \"\" when unauthenticated or auth is off. */\n user: string;\n /** Mount prefix for internal links: \"\" standalone, ctx.prefix routed. */\n base: string;\n };\n Bindings: IntegrationContext;\n};\n\n/** Routed mode iff the router passed an IntegrationContext as Hono env. */\nfunction routedCtx(c: Context): IntegrationContext | undefined {\n return typeof c.env?.prefix === \"string\" ? c.env : undefined;\n}\n\n// ---------------------------------------------------------------------------\n// Helpers\n// ---------------------------------------------------------------------------\n\nfunction formatBytes(n: number): string {\n if (n < 1024) return `${n} B`;\n if (n < 1024 * 1024) return `${(n / 1024).toFixed(1)} KB`;\n return `${(n / (1024 * 1024)).toFixed(2)} MB`;\n}\n\nfunction formatDate(iso: string): string {\n try {\n return new Date(iso).toLocaleString(\"en-US\", {\n dateStyle: \"medium\",\n timeStyle: \"short\",\n });\n } catch {\n return iso;\n }\n}\n\nconst IMAGE_EXT = [\n \"png\",\n \"jpg\",\n \"jpeg\",\n \"gif\",\n \"webp\",\n \"svg\",\n \"ico\",\n \"bmp\",\n \"avif\",\n];\nconst CONTENT_TYPES: Record = {\n png: \"image/png\",\n jpg: \"image/jpeg\",\n jpeg: \"image/jpeg\",\n gif: \"image/gif\",\n webp: \"image/webp\",\n svg: \"image/svg+xml\",\n ico: \"image/x-icon\",\n bmp: \"image/bmp\",\n avif: \"image/avif\",\n json: \"application/json\",\n txt: \"text/plain\",\n md: \"text/markdown\",\n csv: \"text/csv\",\n html: \"text/html\",\n css: \"text/css\",\n js: \"text/javascript\",\n ts: \"text/typescript\",\n xml: \"application/xml\",\n pdf: \"application/pdf\",\n};\n\nfunction extOf(key: string): string {\n const base = key.split(\"/\").pop() ?? key;\n const dot = base.lastIndexOf(\".\");\n return dot >= 0 ? base.slice(dot + 1).toLowerCase() : \"\";\n}\n\nfunction contentTypeFor(key: string): string {\n return CONTENT_TYPES[extOf(key)] ?? \"application/octet-stream\";\n}\n\nfunction isImage(key: string): boolean {\n return IMAGE_EXT.includes(extOf(key));\n}\n\n// Decide if bytes look like UTF-8 text (no NUL, few replacement chars).\nfunction looksLikeText(bytes: Uint8Array): boolean {\n const sample = bytes.subarray(0, Math.min(bytes.length, 4096));\n for (const b of sample) {\n if (b === 0) return false; // NUL → binary\n }\n const text = new TextDecoder(\"utf-8\", { fatal: false }).decode(sample);\n let bad = 0;\n for (const ch of text) if (ch === \"�\") bad++;\n return bad / Math.max(text.length, 1) < 0.05;\n}\n\n// ---------------------------------------------------------------------------\n// Styles\n// ---------------------------------------------------------------------------\n\nconst STYLE = `\n:root{--bg:#0f1115;--panel:#181b22;--panel2:#1f232c;--border:#2a2f3a;--text:#e6e9ef;--muted:#8b93a3;--accent:#6ea8fe;--accent2:#3d7bf0;--danger:#f06e7b;--ok:#5fd08a}\n*{box-sizing:border-box}\nbody{margin:0;background:var(--bg);color:var(--text);font:14px/1.5 ui-sans-serif,system-ui,-apple-system,\"Segoe UI\",sans-serif}\na{color:var(--accent);text-decoration:none}\na:hover{text-decoration:underline}\nheader{display:flex;align-items:center;gap:12px;padding:14px 20px;border-bottom:1px solid var(--border);background:var(--panel)}\nheader h1{font-size:16px;margin:0;font-weight:600}\nheader h1 a{color:var(--text)}\nheader .spacer{flex:1}\nheader .who{color:var(--muted);font-size:13px}\n.container{max-width:1040px;margin:0 auto;padding:20px}\n.card{background:var(--panel);border:1px solid var(--border);border-radius:10px;padding:16px;margin-bottom:18px}\n.card h2{margin:0 0 12px;font-size:14px;font-weight:600;color:var(--muted);text-transform:uppercase;letter-spacing:.04em}\ninput,textarea,button,select{font:inherit;color:inherit}\ninput[type=text],input[type=search],textarea{background:var(--panel2);border:1px solid var(--border);border-radius:7px;padding:8px 10px;color:var(--text);width:100%}\ntextarea{font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:13px;resize:vertical;min-height:280px;white-space:pre;tab-size:2}\ninput:focus,textarea:focus{outline:none;border-color:var(--accent)}\nbutton,.btn{display:inline-flex;align-items:center;gap:6px;background:var(--accent2);border:1px solid var(--accent2);color:#fff;border-radius:7px;padding:8px 14px;cursor:pointer;font-weight:500}\nbutton:hover,.btn:hover{filter:brightness(1.08);text-decoration:none}\n.btn.ghost,button.ghost{background:transparent;border-color:var(--border);color:var(--text)}\n.btn.danger,button.danger{background:transparent;border-color:var(--danger);color:var(--danger)}\n.btn.danger:hover,button.danger:hover{background:var(--danger);color:#fff}\n.row{display:flex;gap:10px;align-items:center;flex-wrap:wrap}\ntable{width:100%;border-collapse:collapse}\nth,td{text-align:left;padding:9px 10px;border-bottom:1px solid var(--border)}\nth{color:var(--muted);font-weight:500;font-size:12px;text-transform:uppercase;letter-spacing:.03em}\ntd.num,th.num{text-align:right;font-variant-numeric:tabular-nums;white-space:nowrap}\ntr:hover td{background:var(--panel2)}\n.key{font-family:ui-monospace,Menlo,monospace;word-break:break-all}\n.muted{color:var(--muted)}\n.empty{text-align:center;color:var(--muted);padding:40px 0}\n.pager{display:flex;justify-content:space-between;align-items:center;margin-top:12px;color:var(--muted)}\n.pill{display:inline-block;background:var(--panel2);border:1px solid var(--border);border-radius:20px;padding:2px 10px;font-size:12px;color:var(--muted)}\nimg.preview{max-width:100%;border:1px solid var(--border);border-radius:8px;background:#fff}\n.actions{display:flex;gap:8px;flex-wrap:wrap;margin-top:14px}\n.grid2{display:grid;grid-template-columns:1fr 1fr;gap:10px}\n@media(max-width:640px){.grid2{grid-template-columns:1fr}}\n.banner{padding:10px 14px;border-radius:8px;margin-bottom:16px;border:1px solid}\n.banner.err{background:#2a1a1e;border-color:var(--danger);color:#f7b3bb}\n.banner.ok{background:#15261c;border-color:var(--ok);color:#a8e6c1}\ncode{font-family:ui-monospace,Menlo,monospace;background:var(--panel2);padding:1px 5px;border-radius:4px}\n`;\n\n// ---------------------------------------------------------------------------\n// Factory\n// ---------------------------------------------------------------------------\n\nexport function blobAdmin(\n options: BlobAdminOptions = {},\n store: BlobStore = blob as unknown as BlobStore,\n): CallableIntegration {\n const auth = options.auth !== false;\n const title = options.title ?? \"Scoped Blob Admin\";\n const owners = options.owner == null\n ? null\n : Array.isArray(options.owner)\n ? options.owner\n : [options.owner];\n\n const Layout: FC<\n PropsWithChildren<{ title: string; user?: string | null; base?: string }>\n > = ({ title, user, base = \"\", children }) => (\n \n \n \n \n {title}\n

Diff · v50