Autorizar con Kledos

Autorizar con Kledos

Este comercio podrá llamarte de forma verificada.

\",\n \"

Comercio
Comercio verificado

\",\n \"

✓Sus llamadas te llegarán verificadas, no como número desconocido.

\",\n \"

✓Podrás revocar el permiso cuando quieras desde la app Kledos.

\",\n \"\",\n \"

¿no tienes la app aquí? escribe tu número

\",\n \"\",\n \"\",\n \"

\",\n \"

Protegido por Kledos · no compartimos tu número con terceros sin tu permiso

\",\n \"

\",\n \"\",\n].join(\"\\n\");\n\nexport default async function (req: Request): Promise {\n try {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS });\n }\n const url = new URL(req.url);\n const path = url.pathname;\n\n if (req.method === \"GET\" && path === \"/\") {\n return json({ ok: true, service: \"Kledos\" });\n }\n\n if (req.method === \"GET\" && path === \"/sdk.js\") {\n return new Response(SDK_JS, {\n headers: {\n \"Content-Type\": \"application/javascript; charset=utf-8\",\n ...CORS,\n },\n });\n }\n\n if (req.method === \"GET\" && path === \"/connect\") {\n return new Response(CONNECT_HTML, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\", ...CORS },\n });\n }\n\n // La web del comercio pregunta si el cliente ya aprobó en su app (flujo \"Conectar\").\n if (req.method === \"GET\" && path === \"/connect/status\") {\n const rq = url.searchParams.get(\"req\") || \"\";\n if (!rq) return json({ ok: false, done: false });\n const r = (await getJSON(`konstai_creq_${rq}`)) as\n | { handle: string }\n | null;\n if (r && r.handle) {\n return json({ ok: true, done: true, handle: r.handle });\n }\n return json({ ok: true, done: false });\n }\n\n // La app del cliente aprueba de un toque una solicitud \"Conectar con Kledos\".\n // El propio acto de aprobar en la app (autenticado por el token del número) es el\n // consentimiento: la relación queda ACTIVA y se guarda el resultado para que la web\n // del comercio lo recoja por /connect/status.\n if (req.method === \"POST\" && path === \"/connect/approve\") {\n const b = await req.json().catch(() => ({}));\n const merchantId = String(b.merchant || \"\");\n const fullNumber = String(b.number || \"\").trim();\n const userKey = norm(fullNumber);\n const token = String(b.token || \"\");\n const rq = String(b.req || \"\");\n if (!userKey || !token) {\n return json({ ok: false, error: \"faltan datos\" }, 400);\n }\n const known = await getTok(userKey);\n if (!known || known !== token) {\n return json({ ok: false, error: \"no autorizado para ese número\" }, 401);\n }\n const m = await getMerchant(merchantId);\n if (!m) return json({ ok: false, error: \"comercio desconocido\" }, 400);\n const label = m.name;\n const keyId = bytesToHex(randBytes(4));\n const secret = randBytes(32);\n const secretB64 = bytesToB64(secret);\n const handle = \"kh_\" + bytesToHex(randBytes(12));\n await setRel(handle, {\n keyId,\n secret: secretB64,\n userKey,\n fullNumber,\n label,\n merchant: m.id,\n revoked: false,\n pending: false,\n ts: Date.now(),\n });\n const midxKey = `konstai_midx_${m.id}`;\n const idx = ((await getJSON(midxKey)) as string[] | null) || [];\n idx.push(handle);\n await blob.setJSON(midxKey, idx.slice(-200));\n const uidxKey = `konstai_uidx_${userKey}`;\n const uidx = ((await getJSON(uidxKey)) as string[] | null) || [];\n if (!uidx.includes(handle)) {\n uidx.push(handle);\n await blob.setJSON(uidxKey, uidx.slice(-300));\n }\n await retirePrev(m.id, userKey, handle);\n if (rq) {\n await blob.setJSON(`konstai_creq_${rq}`, { handle, ts: Date.now() });\n }\n return json({ ok: true, handle, keyId, secret: secretB64, label });\n }\n\n if (req.method === \"GET\" && path === \"/debug\") {\n try {\n await getAccessToken();\n return json({ ok: true, project: PROJECT, tokenOk: true });\n } catch (e) {\n return json({\n ok: false,\n project: PROJECT,\n error: String((e as Error).message || e),\n });\n }\n }\n\n // ---------- P2P ----------\n if (req.method === \"POST\" && path === \"/register\") {\n const b = await req.json().catch(() => ({}));\n const k = norm(b.handle);\n if (!k || !b.token) {\n return json({ ok: false, error: \"handle y token requeridos\" }, 400);\n }\n if (!validNumber(String(b.handle))) {\n return json({ ok: false, error: \"número no válido\" }, 400);\n }\n if (limited(\"reg_\" + clientIp(req), 30, 3600000)) {\n return json({\n ok: false,\n error: \"demasiados registros, prueba más tarde\",\n }, 429);\n }\n await setTok(k, b.token);\n return json({ ok: true, handle: k });\n }\n\n if (req.method === \"POST\" && path === \"/revoke\") {\n const b = await req.json().catch(() => ({}));\n const kid = String(b.keyId || \"\");\n if (!kid) return json({ ok: false, error: \"keyId requerido\" }, 400);\n await setRevoked(kid);\n return json({ ok: true, revoked: kid });\n }\n\n if (req.method === \"POST\" && path === \"/notify\") {\n const b = await req.json().catch(() => ({}));\n const k = norm(b.toHandle);\n const token = await getTok(k);\n if (!token) {\n return json({\n ok: false,\n error: \"destinatario no registrado\",\n handle: k,\n }, 404);\n }\n const kid = String(b.payload || \"\").split(\"~\")[1] || \"\";\n if (kid && await isRevoked(kid)) {\n return json({ ok: false, error: \"clave revocada\" }, 403);\n }\n const now = Date.now();\n rate[k] = (rate[k] || []).filter((t) => now - t < 60000);\n if (rate[k].length >= 5) {\n return json({ ok: false, error: \"demasiados avisos\" }, 429);\n }\n rate[k].push(now);\n const r = await sendPush(token, {\n label: String(b.label || \"\"),\n number: String(b.number || \"\"),\n payload: String(b.payload || \"\"),\n sig: String(b.sig || \"\"),\n });\n return json({ ok: r.status === 200, fcm: r.status }, 200);\n }\n\n // ---------- P2B (modelo COMPARTIDO) ----------\n // CLIENTE: genera un código de emparejamiento de un solo uso para dárselo a un\n // comercio (que enrolará por servidor sin spamear). Autenticado por posesión del\n // token push del número: solo el móvil de ese número conoce su token.\n if (req.method === \"POST\" && path === \"/account/paircode\") {\n const b = await req.json().catch(() => ({}));\n const fullNumber = String(b.number || \"\").trim();\n const userKey = norm(fullNumber);\n const token = String(b.token || \"\");\n if (!userKey || !token) {\n return json({ ok: false, error: \"faltan datos\" }, 400);\n }\n const known = await getTok(userKey);\n if (!known || known !== token) {\n return json({ ok: false, error: \"no autorizado para ese número\" }, 401);\n }\n if (limited(\"pair_\" + userKey, 10, 600000)) {\n return json(\n { ok: false, error: \"demasiados códigos, espera un poco\" },\n 429,\n );\n }\n const rb = randBytes(4);\n const n = (((rb[0] << 24) | (rb[1] << 16) | (rb[2] << 8) | rb[3]) >>> 0) %\n 1000000;\n const code = (\"\" + n).padStart(6, \"0\");\n await blob.setJSON(`konstai_pair_${code}`, { userKey, ts: Date.now() });\n return json({ ok: true, code, expiraSegundos: 1800 });\n }\n\n // COMERCIO (por servidor): enrola a un cliente. Autenticado con la CLAVE SECRETA.\n // - Con 'code' de emparejamiento válido -> se activa al instante (el código prueba\n // el consentimiento del cliente).\n // - Sin 'code' -> queda PENDIENTE y se pide consentimiento al móvil (como el botón,\n // pero atribuible a un comercio real y baneable).\n if (req.method === \"POST\" && path === \"/merchant/enroll\") {\n const b = await req.json().catch(() => ({}));\n const m = await merchantByKey(String(b.apiKey || \"\"));\n if (!m) return json({ ok: false, error: \"apiKey no válida\" }, 401);\n const fullNumber = String(b.number || \"\").trim();\n const userKey = norm(fullNumber);\n if (!userKey || !validNumber(fullNumber)) {\n return json({ ok: false, error: \"número no válido\" }, 400);\n }\n if (limited(\"enrollnum_\" + userKey, 5, 600000)) {\n return json({\n ok: false,\n error: \"demasiadas solicitudes para ese número\",\n }, 429);\n }\n if (limited(\"enrollmerch_\" + m.id, 200, 3600000)) {\n return json({ ok: false, error: \"límite del comercio superado\" }, 429);\n }\n const token = await getTok(userKey);\n if (!token) {\n return json(\n { ok: false, error: \"usuario no registrado en Kledos\" },\n 409,\n );\n }\n\n const label = m.name; // nombre atado a la cuenta\n const code = String(b.code || \"\").trim();\n let autoAccept = false;\n if (code) {\n const pr = (await getJSON(`konstai_pair_${code}`)) as {\n userKey: string;\n ts: number;\n } | null;\n if (\n !pr || pr.userKey !== userKey || (Date.now() - (pr.ts || 0)) > 1800000\n ) {\n return json({\n ok: false,\n error: \"código de emparejamiento no válido o caducado\",\n }, 403);\n }\n await blob.delete(`konstai_pair_${code}`); // un solo uso\n autoAccept = true;\n }\n\n const keyId = bytesToHex(randBytes(4));\n const secret = randBytes(32);\n const secretB64 = bytesToB64(secret);\n const handle = \"kh_\" + bytesToHex(randBytes(12));\n await setRel(handle, {\n keyId,\n secret: secretB64,\n userKey,\n fullNumber,\n label,\n merchant: m.id,\n revoked: false,\n pending: !autoAccept,\n ts: Date.now(),\n });\n const midxKey = `konstai_midx_${m.id}`;\n const idx = ((await getJSON(midxKey)) as string[] | null) || [];\n idx.push(handle);\n await blob.setJSON(midxKey, idx.slice(-200));\n\n if (autoAccept) {\n const uidxKey = `konstai_uidx_${userKey}`;\n const uidx = ((await getJSON(uidxKey)) as string[] | null) || [];\n if (!uidx.includes(handle)) {\n uidx.push(handle);\n await blob.setJSON(uidxKey, uidx.slice(-300));\n }\n await retirePrev(m.id, userKey, handle);\n const g = await sendPush(token, {\n type: \"grant\",\n keyId,\n secret: secretB64,\n label,\n });\n return json({ ok: true, handle, status: \"active\", fcm: g.status });\n }\n const g = await sendPush(token, {\n type: \"consent\",\n handle,\n keyId,\n label,\n });\n if (g.status !== 200) {\n return json({\n ok: false,\n error: \"no se pudo notificar al móvil\",\n fcm: g.status,\n }, 502);\n }\n return json({ ok: true, handle, status: \"pending\" });\n }\n\n // La TIENDA delega el permiso de ESTE pedido a un REPARTIDOR (se puede llamar varias\n // veces para añadir más de uno). Autenticado con la clave secreta de la tienda, que es\n // la dueña de la relación. Acotado con caducidad (por defecto 7 días).\n if (req.method === \"POST\" && path === \"/order/delegate\") {\n const b = await req.json().catch(() => ({}));\n const store = await merchantByKey(String(b.apiKey || \"\"));\n if (!store) return json({ ok: false, error: \"apiKey no válida\" }, 401);\n const rel = await getRel(String(b.handle || \"\"));\n if (!rel) return json({ ok: false, error: \"handle desconocido\" }, 404);\n if (rel.merchant !== store.id) {\n return json({ ok: false, error: \"ese pedido no es de tu cuenta\" }, 403);\n }\n const carrierId = String(b.carrier || \"\").trim();\n const carrier = await getMerchant(carrierId);\n if (!carrier) {\n return json({\n ok: false,\n error: \"repartidor desconocido: \" + carrierId,\n }, 400);\n }\n const dias = Math.min(30, Math.max(1, Number(b.dias) || 7));\n const exp = Date.now() + dias * 86400000;\n const delegates: Array<{ id: string; exp: number }> =\n Array.isArray(rel.delegates) ? rel.delegates : [];\n const nuevos = delegates.filter((d) => d.id !== carrierId);\n nuevos.push({ id: carrierId, exp });\n rel.delegates = nuevos;\n await setRel(String(b.handle), rel);\n return json({\n ok: true,\n handle: String(b.handle),\n carrier: carrierId,\n carriersActivos: nuevos.map((d) => d.id),\n expira: exp,\n });\n }\n\n // El usuario autoriza a un comercio con \"Proteger con Kledos\". Kledos:\n // · crea la relación (secreto HMAC) y la empuja al móvil del usuario,\n // · guarda el número completo del usuario (compartido: el comercio podrá marcarlo),\n // · devuelve al comercio un HANDLE con el que pedir avisos y consultar el número.\n if (req.method === \"POST\" && path === \"/authorize\") {\n const b = await req.json().catch(() => ({}));\n const fullNumber = String(b.number || \"\").trim();\n const userKey = norm(fullNumber);\n const merchantId = String(b.merchant || \"comercio\");\n const m = await getMerchant(merchantId);\n if (!userKey) return json({ ok: false, error: \"number requerido\" }, 400);\n if (!validNumber(fullNumber)) {\n return json({ ok: false, error: \"número no válido\" }, 400);\n }\n if (!m) {\n return json(\n { ok: false, error: \"comercio desconocido: \" + merchantId },\n 400,\n );\n }\n // NOMBRE ATADO A LA CUENTA VERIFICADA: ignoramos cualquier 'label' que venga de\n // fuera; el nombre que verá el cliente es SIEMPRE el de la cuenta (anti-suplantación).\n const label = m.name;\n // Anti-spam de autorizaciones: por número y por IP.\n if (limited(\"authnum_\" + userKey, 5, 600000)) {\n return json({\n ok: false,\n error: \"demasiadas autorizaciones para ese número\",\n }, 429);\n }\n if (limited(\"authip_\" + clientIp(req), 30, 3600000)) {\n return json({\n ok: false,\n error: \"demasiadas autorizaciones, prueba más tarde\",\n }, 429);\n }\n const token = await getTok(userKey);\n if (!token) {\n return json({\n ok: false,\n error:\n \"usuario no registrado: abre la app Kledos y pulsa 'registrarme'\",\n }, 409);\n }\n\n const keyId = bytesToHex(randBytes(4));\n const secret = randBytes(32);\n const secretB64 = bytesToB64(secret);\n const handle = \"kh_\" + bytesToHex(randBytes(12));\n\n // La relación nace PENDIENTE: no vale hasta que el dueño acepte en su móvil.\n await setRel(handle, {\n keyId,\n secret: secretB64,\n userKey,\n fullNumber,\n label,\n merchant: merchantId,\n revoked: false,\n pending: true,\n ts: Date.now(),\n });\n const midxKey = `konstai_midx_${merchantId}`;\n const idx = ((await getJSON(midxKey)) as string[] | null) || [];\n idx.push(handle);\n await blob.setJSON(midxKey, idx.slice(-200));\n\n // Pedimos CONSENTIMIENTO al móvil (sin el secreto: ese solo baja al aceptar).\n const g = await sendPush(token, {\n type: \"consent\",\n handle,\n keyId,\n label,\n });\n if (g.status !== 200) {\n return json({\n ok: false,\n error: \"no se pudo notificar al móvil\",\n fcm: g.status,\n }, 502);\n }\n\n return json({ ok: true, handle, status: \"pending\" });\n }\n\n // El móvil del usuario acepta o rechaza la petición de consentimiento.\n // Al ACEPTAR devolvemos el secreto para que el móvil pueda verificar avisos.\n if (req.method === \"POST\" && path === \"/authorize/confirm\") {\n const b = await req.json().catch(() => ({}));\n const rel = await getRel(String(b.handle || \"\"));\n if (!rel) return json({ ok: false, error: \"handle desconocido\" }, 404);\n if (String(b.decision) === \"accept\") {\n rel.pending = false;\n await setRel(String(b.handle), rel);\n await retirePrev(rel.merchant, rel.userKey, String(b.handle));\n // Índice por USUARIO (número) para poder restaurar sus permisos en otro móvil.\n const uidxKey = `konstai_uidx_${rel.userKey}`;\n const uidx = ((await getJSON(uidxKey)) as string[] | null) || [];\n if (!uidx.includes(String(b.handle))) {\n uidx.push(String(b.handle));\n await blob.setJSON(uidxKey, uidx.slice(-300));\n }\n return json({\n ok: true,\n keyId: rel.keyId,\n secret: rel.secret,\n label: rel.label,\n });\n } else {\n rel.revoked = true;\n await setRel(String(b.handle), rel);\n await setRevoked(rel.keyId);\n return json({ ok: true, rejected: true });\n }\n }\n\n // Restaurar permisos en un móvil nuevo (cuenta = tu número). Devuelve tus\n // relaciones activas con su secreto para volver a verificar avisos.\n // PRODUCCIÓN: proteger con verificación del número (OTP por SMS).\n if (req.method === \"POST\" && path === \"/account/grants\") {\n const b = await req.json().catch(() => ({}));\n const userKey = norm(String(b.number || \"\"));\n if (!validNumber(String(b.number || \"\"))) {\n return json({ ok: false, error: \"número no válido\" }, 400);\n }\n if (limited(\"acct_\" + clientIp(req), 20, 3600000)) {\n return json({\n ok: false,\n error: \"demasiadas restauraciones, prueba más tarde\",\n }, 429);\n }\n const uidx =\n ((await getJSON(`konstai_uidx_${userKey}`)) as string[] | null) || [];\n const grants = [];\n for (const h of uidx) {\n const rel = await getRel(h);\n if (\n rel && !rel.pending && !rel.revoked && !(await isRevoked(rel.keyId))\n ) {\n grants.push({\n keyId: rel.keyId,\n secret: rel.secret,\n label: rel.label,\n });\n }\n }\n return json({ ok: true, grants });\n }\n\n // Alta de empresa (self-service). Devuelve id público + clave secreta.\n if (req.method === \"POST\" && path === \"/merchant/signup\") {\n const b = await req.json().catch(() => ({}));\n const name = String(b.name || \"\").trim();\n const caller = String(b.caller || \"\").trim();\n if (!validName(name)) {\n return json(\n { ok: false, error: \"nombre no válido (1-60 caracteres)\" },\n 400,\n );\n }\n if (!validCaller(caller)) {\n return json({ ok: false, error: \"número de salida no válido\" }, 400);\n }\n if (limited(\"signup_\" + clientIp(req), 5, 3600000)) {\n return json({\n ok: false,\n error: \"demasiadas altas desde aquí, prueba más tarde\",\n }, 429);\n }\n // id público único\n let id = slugify(name);\n if (await getMerchant(id)) id = id + \"-\" + bytesToHex(randBytes(2));\n const apiKey = \"sk_live_\" + bytesToHex(randBytes(18));\n await blob.setJSON(`konstai_merchant_${id}`, {\n id,\n name,\n caller,\n apiKey,\n ts: Date.now(),\n });\n await blob.setJSON(`konstai_mkey_${apiKey}`, id);\n return json({ ok: true, merchant: id, name, caller, apiKey });\n }\n\n // Cerrar cuenta (self-service). Solo el dueño, que prueba tener la clave secreta,\n // puede darse de baja. Borra el comercio y su índice de clave.\n if (req.method === \"POST\" && path === \"/merchant/close\") {\n const b = await req.json().catch(() => ({}));\n const apiKey = String(b.apiKey || \"\");\n const m = await merchantByKey(apiKey);\n if (!m) return json({ ok: false, error: \"apiKey no válida\" }, 401);\n if (SEEDED[m.id]) {\n return json(\n { ok: false, error: \"cuenta de demo: no se puede cerrar\" },\n 403,\n );\n }\n await blob.delete(`konstai_merchant_${m.id}`);\n await blob.delete(`konstai_mkey_${apiKey}`);\n return json({ ok: true, closed: m.id });\n }\n\n // El comercio pide llamar al cliente (por handle). El aviso lleva el número de\n // salida del comercio, para que la llamada REAL suene verificada en el móvil.\n if (req.method === \"POST\" && path === \"/merchant/notify\") {\n const b = await req.json().catch(() => ({}));\n const m = await merchantByKey(String(b.apiKey || \"\"));\n if (!m) return json({ ok: false, error: \"apiKey no válida\" }, 401);\n const rel = await getRel(String(b.handle || \"\"));\n if (!rel) return json({ ok: false, error: \"handle desconocido\" }, 404);\n // Puede avisar el DUEÑO de la relación (la tienda) o un REPARTIDOR al que se le\n // haya delegado el pedido y cuya delegación no haya caducado.\n const isOwner = rel.merchant === m.id;\n const isDelegate = Array.isArray(rel.delegates) &&\n rel.delegates.some((d: any) =>\n d && d.id === m.id && (!d.exp || d.exp > Date.now())\n );\n if (!isOwner && !isDelegate) {\n return json({\n ok: false,\n error: \"ese handle no es de tu comercio ni te ha sido delegado\",\n }, 403);\n }\n if (rel.revoked || await isRevoked(rel.keyId)) {\n return json({ ok: false, error: \"relación revocada\" }, 403);\n }\n if (rel.pending) {\n return json({\n ok: false,\n error: \"pendiente de que el cliente acepte en su móvil\",\n }, 409);\n }\n // Anti-acoso: máximo de avisos por cliente y por comercio.\n if (limited(\"mn_\" + String(b.handle), 6, 600000)) {\n return json(\n { ok: false, error: \"demasiados avisos a ese cliente\" },\n 429,\n );\n }\n if (limited(\"mnmerch_\" + m.id, 120, 60000)) {\n return json({ ok: false, error: \"límite del comercio superado\" }, 429);\n }\n const token = await getTok(rel.userKey);\n if (!token) {\n return json({ ok: false, error: \"usuario sin móvil registrado\" }, 404);\n }\n\n const nonce = bytesToHex(randBytes(6));\n const payload = \"v1~\" + rel.keyId + \"~\" + Date.now() + \"~\" + nonce;\n const secretBytes = new Uint8Array(\n atob(rel.secret).split(\"\").map((c) => c.charCodeAt(0)),\n );\n const sig = await hmacSign(secretBytes, payload);\n // number = caller ID desde el que llama el negocio. La app de negocio puede\n // enviar el suyo real (b.caller); si no, usamos el configurado del comercio.\n const caller = String(b.caller || m.caller);\n const r = await sendPush(token, {\n label: String(rel.label),\n number: caller,\n payload,\n sig,\n });\n return json({ ok: r.status === 200, fcm: r.status, caller }, 200);\n }\n\n // El panel del comercio lista SUS relaciones. En compartido incluye el número\n // (el comercio lo necesita para marcar). Autenticado por su clave.\n if (req.method === \"POST\" && path === \"/merchant/list\") {\n const b = await req.json().catch(() => ({}));\n const m = await merchantByKey(String(b.apiKey || \"\"));\n if (!m) return json({ ok: false, error: \"apiKey no válida\" }, 401);\n const idx =\n ((await getJSON(`konstai_midx_${m.id}`)) as string[] | null) || [];\n const items = [];\n for (const h of idx.slice(-50).reverse()) {\n const rel = await getRel(h);\n if (rel) {\n items.push({\n handle: h,\n label: rel.label,\n number: rel.fullNumber || \"\",\n revoked: !!rel.revoked || await isRevoked(rel.keyId),\n pending: !!rel.pending,\n ts: rel.ts || 0,\n });\n }\n }\n return json({\n ok: true,\n merchant: m.id,\n name: m.name,\n caller: m.caller,\n items,\n });\n }\n\n if (req.method === \"POST\" && path === \"/merchant/revoke\") {\n const b = await req.json().catch(() => ({}));\n const m = await merchantByKey(String(b.apiKey || \"\"));\n if (!m) return json({ ok: false, error: \"apiKey no válida\" }, 401);\n const rel = await getRel(String(b.handle || \"\"));\n if (!rel) return json({ ok: false, error: \"handle desconocido\" }, 404);\n if (rel.merchant !== m.id) {\n return json(\n { ok: false, error: \"ese handle no es de tu comercio\" },\n 403,\n );\n }\n rel.revoked = true;\n await setRel(String(b.handle), rel);\n await setRevoked(rel.keyId);\n return json({ ok: true });\n }\n\n return json({ ok: false, error: \"not found\" }, 404);\n } catch (e) {\n return json({ ok: false, error: String((e as Error).message || e) }, 200);\n }\n}","deleted","label",[109],"pulls","branches",1,"forks","envVars",{"_132":126,"_134":42},"connections",{"_132":42,"_133":42},"count","unfilledCount","emptyCount",{"_18":108,"_20":109,"_110":36,"_111":-5,"_112":68,"_113":66,"_114":38,"_22":136,"_65":116,"_117":118,"_119":120,"_121":26,"_122":-5,"_137":138,"_86":139},["D",1787604128136],"children",[],[109],["D",1787238273342],{"_16":17,"_84":80},{"_16":17,"_77":78,"_79":80,"_33":34,"_81":82,"_83":26},{"_65":66,"_20":67,"_18":68,"_69":19,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":21,"_76":17},"ctx",{"_58":-5,"_104":177,"_178":179,"_180":181,"_182":26,"_183":26,"_184":26,"_185":38,"_186":-5,"_187":-7,"_188":-7,"_189":42,"_190":26,"_191":26,"_192":-5,"_193":26,"_194":26,"_195":26,"_196":-5},"ENV",{"_148":149,"_150":151,"_152":67,"_153":154,"_155":156,"_157":158,"_159":160,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Search