[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_152":153,"_154":155},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_115":-5,"_20":116,"_22":117,"_118":119,"_120":121,"_25":122,"_24":-5,"_123":-5,"_124":-5,"_125":53,"_126":127,"_128":53,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","postpostscript","name","authIdBase","branchName","main","version","path","","project",{"_33":61,"_13":14,"_45":62,"_63":-5,"_64":44,"_65":66,"_67":66,"_68":-5,"_69":-5,"_70":71,"_72":-5,"_73":44,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":94,"_95":96,"_97":98,"_99":53},"tree",[56],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":55},"id","81589dbe-2760-11f0-86ff-569c3dd06744","main.tsx","fileId","808837fa-2760-11f0-86ff-569c3dd06744","parentId","branchId","80855ada-2760-11f0-86ff-569c3dd06744","branchVersion",31,"latest",true,"createdAt",["D",1709993771966],30,"fileType","script","content","import { deleteCookie, getCookies, setCookie } from \"https://deno.land/std/http/cookie.ts\";\nimport type { JWTPayload } from \"https://deno.land/x/jose@v5.2.2/index.ts\";\nimport { rootValRef } from \"https://esm.town/v/andreterron/rootValRef\";\nimport { extractValInfo } from \"https://esm.town/v/pomdtr/extractValInfo\";\nimport { authDescribeScopes } from \"https://esm.town/v/postpostscript/authDescribeScopes\";\nimport { html, htmlResponse, Layout } from \"https://esm.town/v/postpostscript/htmlComponentLibrary\";\nimport { generate, type JWTVerifyOptions, verify, verifyThirdParty } from \"https://esm.town/v/postpostscript/jwks\";\nimport {\n getValEndpointFromName,\n getValEndpointFromUrl,\n getValUrlFromName,\n} from \"https://esm.town/v/postpostscript/meta\";\nimport { format } from \"https://esm.town/v/postpostscript/multiFormat\";\nimport type { MaybePromise } from \"https://esm.town/v/postpostscript/typeUtils\";\nimport { email } from \"https://esm.town/v/std/email\";\n\nconst COOKIE_NAME = \"AUTH_ID_TOKEN\";\n\nexport function authId(url: string) {\n const SCOPES = {\n id: \"provides proof that you are you\",\n };\n\n const { author: AUTHOR, slug, httpEndpoint: ENDPOINT } = extractValInfo(url);\n const NAME = \"@\" + slug;\n\n async function emailSignInLink(clientToken: string) {\n const minutes = 15;\n const token = await generate({\n scope: `${NAME}/signin`,\n aud: NAME,\n iss: NAME,\n }, `${minutes}m`);\n const qs = new URLSearchParams();\n qs.set(\"clientToken\", clientToken);\n qs.set(\"token\", token);\n return email({\n subject: \"Sign In Request\",\n\n ...format.Trim`\n ${format.Link(`${ENDPOINT}/?${qs.toString()}`, format.Plain`Sign In`)}\n ${format.Small`This link will expire in ${minutes.toString()} minutes.`}\n `,\n });\n }\n\n async function handler(req: Request) {\n const { searchParams: qs } = new URL(req.url);\n\n const header = html`\n

Sign In as ${NAME.split(\"/\")[0]}

\n `;\n\n const clientToken = qs.get(\"clientToken\");\n let clientPayload;\n try {\n clientPayload = clientToken && await verifyThirdParty(clientToken, {\n audience: NAME,\n custom(payload) {\n const author = payload.iss?.match(/^@(\\w+)\\/\\w+$/)?.[1];\n const returnTo = payload.returnTo?.match(/^@\\w+\\/\\w+/)?.[0];\n return {\n scope: `${returnTo}/requestAuth`,\n };\n },\n });\n } catch (e) {\n console.log(\"error verifying clientPayload\", e);\n }\n\n if (qs.get(\"logout\")) {\n const res = htmlResponse`\n ${Layout`\n ${header}\n Successfully signed out! You may close this tab\n `}\n `;\n setAuthCookie(res, undefined);\n return res;\n }\n\n if (!clientPayload) {\n return htmlResponse`\n ${Layout`\n ${header}\n Invalid request. Maybe it expired?
\n Go Back\n `}\n `;\n }\n\n const { returnTo } = clientPayload;\n\n if (qs.get(\"token\")) {\n try {\n await verify(qs.get(\"token\"), {\n issuer: NAME,\n audience: NAME,\n custom: {\n scope: `${NAME}/signin`,\n },\n });\n const cookie = await generate({\n scope: `${NAME}/auth`,\n aud: NAME,\n iss: NAME,\n sub: NAME,\n }, \"1h\");\n const redirectQS = new URLSearchParams();\n redirectQS.set(\"clientToken\", clientToken);\n const res = new Response(undefined, {\n status: 302,\n headers: {\n Location: \"/?\" + redirectQS.toString(),\n },\n });\n setAuthCookie(res, cookie);\n return res;\n } catch (e) {\n console.log(\"signin token validation failed\", e);\n }\n }\n\n const cookie = getAuthCookie(req);\n\n let payload;\n try {\n payload = cookie && await verify(cookie, {\n issuer: NAME,\n audience: NAME,\n custom: {\n scope: `${NAME}/auth`,\n },\n });\n } catch (e) {\n console.log(\"cookie token validation failed\", e);\n }\n\n if (!payload) {\n if (req.method === \"POST\") {\n emailSignInLink(clientToken);\n return htmlResponse`\n ${Layout`\n ${header}\n Please check your email to find the sign in link. You may close this tab\n `}\n `;\n }\n\n return htmlResponse`\n ${Layout`\n ${header}\n \n `}\n `;\n }\n\n const requiredScopes = [\n `${NAME}/id`,\n ];\n\n if (req.method !== \"POST\") {\n const scopeDescriptions = await authDescribeScopes([\n ...requiredScopes,\n ...clientPayload.requestScope,\n ]);\n\n const res = htmlResponse`\n ${Layout`\n ${header}\n

\n ${\n clientPayload.requestScope?.length\n ? html`\n ${returnTo} has requested the following scopes. Check any you would like them to have access to:\n

\n \n \n ${scope}${scopeDescriptions[scope] && html`: ${scopeDescriptions[scope]}`}\n ${getScopeLink(scope)}\n \n

\n `\n : undefined\n }\n \n The following scopes are required:\n

\n \n ${scope}${scopeDescriptions[scope] && html`: ${scopeDescriptions[scope]}`}\n ${getScopeLink(scope)}\n

\n
\n \n

\n \n Go Back\n \n \n Log Out\n \n

\n \n `}\n `;\n setAuthCookie(res, cookie);\n return res;\n }\n\n const formData = await req.formData();\n const grantScope = new Set(formData.getAll(\"grantScope[]\"));\n\n const scopes = [\n ...requiredScopes,\n ...(clientPayload.requestScope?.filter(scope => grantScope.has(scope)) || []),\n ];\n\n const [author, name, ...redirectPath] = returnTo.slice(1).split(\"/\");\n const url = getValUrlFromName(returnTo);\n\n const { origin, pathname, searchParams: redirectQS } = new URL(\n getValEndpointFromUrl(url) + \"/\" + redirectPath.join(\"/\"),\n );\n\n const aud = new Set([\n `@${author}/${name}`,\n ...scopes.map(scope => {\n const [author, name] = scope.slice(1).split(\"/\");\n return `@${author}/${name}`;\n }),\n ]);\n\n redirectQS.set(\n \"token\",\n await generate({\n aud: [...aud],\n scope: scopes.join(\" \"),\n iss: NAME,\n sub: NAME,\n clientTokenId: clientPayload.jti,\n }, \"4h\"),\n );\n\n redirectQS.set(\"clientToken\", clientToken);\n\n return Response.redirect(`${origin}${pathname || \"/\"}?${redirectQS}`);\n }\n\n return {\n SCOPES,\n handler,\n };\n}\n\nexport function getAuthCookie(req: Request) {\n return getCookies(req.headers)[COOKIE_NAME];\n}\n\nexport function setAuthCookie(res: Response, token: string | undefined) {\n if (token === undefined) {\n setCookie(res.headers, {\n name: COOKIE_NAME,\n value: \"\",\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n });\n return;\n }\n setCookie(res.headers, {\n name: COOKIE_NAME,\n value: token,\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n });\n}\n\nexport function getScopeUrl(scope: string) {\n return getValUrlFromName(scope.split(\"/\").slice(0, 2).join(\"/\"), \"val.town\");\n}\n\nexport function getScopeLink(scope: string) {\n const name = scope.split(\"/\").slice(0, 2).join(\"/\");\n return html`\n \n View Val\n \n `;\n}","deleted",false,"label",[35],{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":59,"_18":60},["D",1709993771966],"children",[],[35],"8084fb58-2760-11f0-86ff-569c3dd06744",["D",1746195587500],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","4bfb99a9-2008-40e0-bacb-7c7d84227cee","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","1073b191-f665-405d-9530-545465c93575","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_114":110},"org",{"_11":12,"_108":-5,"_109":110,"_70":71,"_111":112,"_113":53},"branch",{"_17":42,"_13":16,"_33":40,"_100":61,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJjdlhaRXl0WXVNSlhZcWU0ckI2c1BOMjNhQSJ9","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":61,"_13":14,"_45":148,"_63":-5,"_64":44,"_65":66,"_67":66,"_68":-5,"_69":-5,"_70":71,"_72":-5,"_73":44,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":149,"_95":150,"_97":151,"_99":53},[145],"files",[145],"counts",{"_135":77,"_136":137,"_138":77,"_31":139,"_140":141},[133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":134},[35],"pulls","branches",1,"forks",{"_142":77,"_144":77},"connections",{"_142":77,"_143":77},"count","unfilledCount","emptyCount",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":146,"_18":147},[],[35],["D",1746195587500],{"_11":12,"_114":110},{"_11":12,"_108":-5,"_109":110,"_70":71,"_111":112,"_113":53},{"_17":42,"_13":16,"_33":40,"_100":61,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"ctx",{"_93":-5,"_130":185,"_186":187,"_188":189,"_190":53,"_191":53,"_192":53,"_193":44,"_194":-5,"_195":-7,"_196":-7,"_197":77,"_198":53,"_199":53,"_200":-5,"_201":53,"_202":53,"_203":53,"_204":-5},"ENV",{"_156":157,"_158":159,"_160":16,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Code