[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_252":253,"_254":255},"routes/_app.x.$handle.$name",{"_105":104,"_32":45,"_114":91,"_27":115,"_13":14,"_116":-5,"_11":117,"_118":119,"_120":121,"_122":123,"_124":125,"_20":-5,"_126":127,"_128":129,"_130":25,"_131":132,"_133":60,"_134":-5,"_135":-5,"_136":137},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",5,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":20,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":33,"_34":20,"_35":36},"deleted",false,"deletedHere","path","frontend/index.html","latestPath","fileId","019f957d-a643-7685-9a7e-747ca8979be5","name","index.html","fileType","content","\n\n \n \n \n React Hono Val Town Starter\n \n \n \n \n

\n \n \n \n","\n\n \n \n \n \n \n Issue Share\n \n \n \n \n

\n \n \n \n\n","createdAt",["D",1784919688811],"branchVersion","branchId","9b0b808f-0c24-447e-a47a-3ad20621e5c8","id","bdb7eb4e-e6f9-4c00-be94-578db0fe4c8c","issue-share",["D",1784919467427],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Browse and share GitHub issues with one public link","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/64dc00cc-94d9-47dd-81b1-dde02610d900/square512?exp=1789559999&sig=919739a563bb9acb90fc6bc4f6c1789207958a7e1bd397d82b192d76e7e11de2","4415b31e-7137-48dd-a702-ba6ff1d9bd0b","pinnedFileId","019f957d-a643-7685-9a7e-854dfee3e568","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019ef236-fc96-74eb-95f7-9a47681ead32","tursoName","bdb7eb4ee6f94c00be94578db0fe4c8c","tursoHostname","bdb7eb4ee6f94c00be94578db0fe4c8c-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789473046147],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_105":104,"_113":109},"org",{"_105":104,"_106":107,"_108":109,"_18":56,"_110":111,"_112":25},"branch",{"_13":90,"_32":91,"_43":42,"_92":44,"_93":94,"_95":96,"_97":50,"_98":99,"_100":101,"_102":45,"_103":104},"isOwned",52,"main","projectId","forkedBranchId","961078ea-f528-11ef-aa68-569c3dd06744","forkedBranchVersion",89,"forkedProjectPrivacy","forkedProjectId","96102714-f528-11ef-aa68-569c3dd06744","forkedProjectOrgId","019aa807-52c2-709c-928b-2029bae9a558","projectName","userHandle","raskin","handle","displayName","Perry Raskin","avatar","https://avatars.githubusercontent.com/u/17967465?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":247,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":248,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":249,"_85":250,"_87":251,"_89":25},"tree",[188,195,196],"files",[188,189,190,191,192,193,194,195,196],"counts",{"_177":64,"_178":158,"_179":64,"_180":181,"_182":183},"contents",[149,150,151],"upstreamProject",{"_43":99,"_32":145,"_52":146,"_54":55,"_49":50,"_83":147},"upstreamBranch",{"_43":94,"_38":138,"_139":140,"_32":91,"_92":99,"_13":141,"_93":-5,"_95":-5,"_142":143,"_47":-5,"_89":25,"_49":50,"_103":144,"_65":101,"_102":145},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1740674013689],"updatedAt",["D",1785420707976],91,"lockfileKey","1785420708123-esm.town_v_templates_react-hono-starter@91-main","templates","react-hono-starter","Starter template with client-side React & Hono server",{"_105":144,"_113":148},"https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/129cab32-3bd7-4c3e-f39b-f12900c76100/square512?exp=1789559999&sig=5c07b77d973a9a7831cc1779f4bd4ec152796753863d0aeae4088e1e0ae03921",{"_43":171,"_32":172,"_30":173,"_154":-5,"_41":42,"_40":158,"_156":60,"_38":174,"_13":64,"_34":175,"_35":-5,"_24":25,"_161":-5,"_27":176},{"_43":164,"_32":165,"_30":166,"_154":-5,"_41":42,"_40":167,"_156":25,"_38":168,"_13":158,"_34":20,"_35":169,"_24":25,"_161":-5,"_27":170},{"_43":152,"_32":153,"_30":58,"_154":-5,"_41":42,"_40":155,"_156":25,"_38":157,"_13":158,"_34":159,"_35":160,"_24":25,"_161":162,"_27":163},"ea274c0a-c227-418c-8183-53b6c685109d","index.ts","parentId",4,"latest",["D",1784919688417],1,"http","import { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { Hono } from \"npm:hono\";\nimport { deleteCookie, getCookie, setCookie } from \"npm:hono/cookie\";\n\nconst app = new Hono();\nconst GH_API = \"https://api.github.com\";\nconst GH_VERSION = \"2026-03-10\";\n\ntype SessionRow = {\n id: string;\n github_id: number;\n login: string;\n avatar_url: string;\n access_token: string;\n refresh_token: string | null;\n token_expires_at: number | null;\n refresh_expires_at: number | null;\n};\n\nawait sqlite.batch([\n `CREATE TABLE IF NOT EXISTS sessions (\n id TEXT PRIMARY KEY,\n github_id INTEGER NOT NULL,\n login TEXT NOT NULL,\n avatar_url TEXT NOT NULL,\n access_token TEXT NOT NULL,\n refresh_token TEXT,\n token_expires_at INTEGER,\n refresh_expires_at INTEGER,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n )`,\n `CREATE TABLE IF NOT EXISTS shares (\n slug TEXT PRIMARY KEY,\n creator_github_id INTEGER NOT NULL,\n repo_full_name TEXT NOT NULL,\n issue_number INTEGER NOT NULL,\n include_sub_issues INTEGER NOT NULL,\n snapshot_json TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n )`,\n `CREATE INDEX IF NOT EXISTS shares_creator_idx ON shares(creator_github_id, created_at)`,\n]);\n\nfunction config() {\n return {\n clientId: Deno.env.get(\"GITHUB_CLIENT_ID\") ?? \"\",\n clientSecret: Deno.env.get(\"GITHUB_CLIENT_SECRET\") ?? \"\",\n appSlug: Deno.env.get(\"GITHUB_APP_SLUG\") ?? \"\",\n sessionSecret: Deno.env.get(\"SESSION_SECRET\") ?? \"\",\n };\n}\n\nfunction requireConfig() {\n const c = config();\n const missing = Object.entries(c).filter(([, value]) => !value).map(([key]) => key);\n if (missing.length) throw new Error(`Missing configuration: ${missing.join(\", \")}`);\n return c;\n}\n\nfunction bytesToBase64Url(bytes: Uint8Array) {\n return btoa(String.fromCharCode(...bytes))\n .replaceAll(\"+\", \"-\")\n .replaceAll(\"/\", \"_\")\n .replaceAll(\"=\", \"\");\n}\n\nfunction base64UrlToBytes(value: string) {\n const padded = value.replaceAll(\"-\", \"+\").replaceAll(\"_\", \"/\") +\n \"=\".repeat((4 - value.length % 4) % 4);\n return Uint8Array.from(atob(padded), (char) => char.charCodeAt(0));\n}\n\nfunction randomToken(size = 32) {\n return bytesToBase64Url(crypto.getRandomValues(new Uint8Array(size)));\n}\n\nasync function sha256(value: string) {\n return new Uint8Array(await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(value)));\n}\n\nasync function hmac(value: string, secret: string) {\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n return bytesToBase64Url(new Uint8Array(await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(value))));\n}\n\nasync function sealCookie(payload: Record, secret: string) {\n const body = bytesToBase64Url(new TextEncoder().encode(JSON.stringify(payload)));\n return `${body}.${await hmac(body, secret)}`;\n}\n\nasync function openCookie(value: string | undefined, secret: string) {\n if (!value) return null;\n const [body, signature] = value.split(\".\");\n if (!body || !signature || await hmac(body, secret) !== signature) return null;\n try {\n return JSON.parse(new TextDecoder().decode(base64UrlToBytes(body)));\n } catch {\n return null;\n }\n}\n\nasync function encryptionKey(secret: string) {\n return crypto.subtle.importKey(\"raw\", await sha256(secret), \"AES-GCM\", false, [\"encrypt\", \"decrypt\"]);\n}\n\nasync function encrypt(value: string, secret: string) {\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const encrypted = new Uint8Array(await crypto.subtle.encrypt(\n { name: \"AES-GCM\", iv },\n await encryptionKey(secret),\n new TextEncoder().encode(value),\n ));\n return `${bytesToBase64Url(iv)}.${bytesToBase64Url(encrypted)}`;\n}\n\nasync function decrypt(value: string, secret: string) {\n const [iv, encrypted] = value.split(\".\");\n const clear = await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv: base64UrlToBytes(iv) },\n await encryptionKey(secret),\n base64UrlToBytes(encrypted),\n );\n return new TextDecoder().decode(clear);\n}\n\nfunction githubHeaders(token: string) {\n return {\n Accept: \"application/vnd.github.full+json\",\n Authorization: `Bearer ${token}`,\n \"X-GitHub-Api-Version\": GH_VERSION,\n \"User-Agent\": \"Val-Town-Issue-Share\",\n };\n}\n\nasync function githubFetch(path: string, token: string, init: RequestInit = {}) {\n const response = await fetch(`${GH_API}${path}`, {\n ...init,\n headers: { ...githubHeaders(token), ...(init.headers ?? {}) },\n });\n if (!response.ok) {\n const detail = await response.text();\n throw new Error(`GitHub ${response.status}: ${detail.slice(0, 400)}`);\n }\n return response;\n}\n\nasync function refreshSession(row: SessionRow) {\n const c = requireConfig();\n if (!row.refresh_token || (row.refresh_expires_at && row.refresh_expires_at < Date.now())) return null;\n const params = new URLSearchParams({\n client_id: c.clientId,\n client_secret: c.clientSecret,\n grant_type: \"refresh_token\",\n refresh_token: await decrypt(row.refresh_token, c.sessionSecret),\n });\n const response = await fetch(\"https://github.com/login/oauth/access_token\", {\n method: \"POST\",\n headers: { Accept: \"application/json\", \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: params,\n });\n const tokens = await response.json();\n if (!response.ok || !tokens.access_token) return null;\n await sqlite.execute({\n sql: `UPDATE sessions SET access_token = ?, refresh_token = ?, token_expires_at = ?,\n refresh_expires_at = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?`,\n args: [\n await encrypt(tokens.access_token, c.sessionSecret),\n tokens.refresh_token ? await encrypt(tokens.refresh_token, c.sessionSecret) : row.refresh_token,\n tokens.expires_in ? Date.now() + tokens.expires_in * 1000 : null,\n tokens.refresh_token_expires_in ? Date.now() + tokens.refresh_token_expires_in * 1000 : row.refresh_expires_at,\n row.id,\n ],\n });\n return tokens.access_token as string;\n}\n\nasync function currentSession(c: any) {\n const id = getCookie(c, \"issue_share_session\");\n if (!id) return null;\n const result = await sqlite.execute({ sql: \"SELECT * FROM sessions WHERE id = ?\", args: [id] });\n const row = result.rows[0] as unknown as SessionRow | undefined;\n if (!row) return null;\n const conf = requireConfig();\n let token = await decrypt(row.access_token, conf.sessionSecret);\n if (row.token_expires_at && row.token_expires_at < Date.now() + 60_000) {\n token = await refreshSession(row) ?? \"\";\n }\n if (!token) return null;\n return { row, token };\n}\n\nasync function requireSession(c: any) {\n const session = await currentSession(c);\n if (!session) return c.json({ error: \"Authentication required\" }, 401);\n return session;\n}\n\nfunction safeIssue(issue: any) {\n return {\n id: issue.id,\n number: issue.number,\n title: issue.title,\n state: issue.state,\n state_reason: issue.state_reason,\n body: issue.body ?? \"\",\n body_text: issue.body_text ?? \"\",\n body_html: issue.body_html ?? \"\",\n html_url: issue.html_url,\n created_at: issue.created_at,\n updated_at: issue.updated_at,\n closed_at: issue.closed_at,\n comments_count: issue.comments ?? 0,\n author: issue.user ? {\n login: issue.user.login,\n avatar_url: issue.user.avatar_url,\n html_url: issue.user.html_url,\n } : null,\n labels: (issue.labels ?? []).map((label: any) =>\n typeof label === \"string\" ? { name: label, color: \"6b7280\", description: null } : {\n name: label.name,\n color: label.color,\n description: label.description,\n }\n ),\n assignees: (issue.assignees ?? []).map((user: any) => ({\n login: user.login,\n avatar_url: user.avatar_url,\n html_url: user.html_url,\n })),\n milestone: issue.milestone ? {\n title: issue.milestone.title,\n state: issue.milestone.state,\n due_on: issue.milestone.due_on,\n html_url: issue.milestone.html_url,\n } : null,\n };\n}\n\nfunction safeComment(comment: any) {\n return {\n id: comment.id,\n body: comment.body ?? \"\",\n body_text: comment.body_text ?? \"\",\n body_html: comment.body_html ?? \"\",\n created_at: comment.created_at,\n updated_at: comment.updated_at,\n html_url: comment.html_url,\n author: comment.user ? {\n login: comment.user.login,\n avatar_url: comment.user.avatar_url,\n html_url: comment.user.html_url,\n } : null,\n };\n}\n\nasync function issueSnapshot(owner: string, repo: string, number: number, token: string, includeSubIssues: boolean) {\n const issue = await githubFetch(`/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}`, token)\n .then((r) => r.json());\n const comments = await githubFetch(\n `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}/comments?per_page=100`,\n token,\n ).then((r) => r.json());\n let subIssues: any[] = [];\n if (includeSubIssues) {\n const response = await githubFetch(\n `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}/sub_issues?per_page=100`,\n token,\n );\n const children = await response.json();\n subIssues = await Promise.all(children.map(async (child: any) => {\n const childRepoUrl = new URL(child.repository_url);\n const parts = childRepoUrl.pathname.split(\"/\").filter(Boolean);\n const childOwner = parts.at(-2) ?? owner;\n const childRepo = parts.at(-1) ?? repo;\n return issueSnapshot(childOwner, childRepo, child.number, token, true);\n }));\n }\n return {\n repository: { owner, name: repo, full_name: `${owner}/${repo}` },\n issue: safeIssue(issue),\n comments: comments.map(safeComment),\n sub_issues: subIssues,\n };\n}\n\napp.get(\"/\", () => serveFile(\"/frontend/index.html\"));\napp.get(\"/s/:slug\", () => serveFile(\"/frontend/index.html\"));\napp.get(\"/frontend/**/*\", (c) => serveFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/api/config\", (c) => {\n const conf = config();\n return c.json({\n configured: Boolean(conf.clientId && conf.clientSecret && conf.appSlug && conf.sessionSecret),\n appSlug: conf.appSlug || null,\n });\n});\n\napp.get(\"/auth/github\", async (c) => {\n const conf = requireConfig();\n const state = randomToken();\n const verifier = randomToken(48);\n const challenge = bytesToBase64Url(await sha256(verifier));\n const cookie = await sealCookie({ state, verifier, createdAt: Date.now() }, conf.sessionSecret);\n setCookie(c, \"github_oauth\", cookie, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n maxAge: 600,\n });\n const redirectUri = `${new URL(c.req.url).origin}/auth/github/callback`;\n const params = new URLSearchParams({\n client_id: conf.clientId,\n redirect_uri: redirectUri,\n state,\n code_challenge: challenge,\n code_challenge_method: \"S256\",\n prompt: \"select_account\",\n });\n return c.redirect(`https://github.com/login/oauth/authorize?${params}`);\n});\n\napp.get(\"/auth/github/callback\", async (c) => {\n const conf = requireConfig();\n const saved = await openCookie(getCookie(c, \"github_oauth\"), conf.sessionSecret);\n deleteCookie(c, \"github_oauth\", { path: \"/\" });\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\");\n if (!saved || !code || state !== saved.state || Date.now() - saved.createdAt > 600_000) {\n return c.text(\"Invalid or expired GitHub login. Please try again.\", 400);\n }\n const redirectUri = `${new URL(c.req.url).origin}/auth/github/callback`;\n const params = new URLSearchParams({\n client_id: conf.clientId,\n client_secret: conf.clientSecret,\n code,\n redirect_uri: redirectUri,\n code_verifier: saved.verifier,\n });\n const tokenResponse = await fetch(\"https://github.com/login/oauth/access_token\", {\n method: \"POST\",\n headers: { Accept: \"application/json\", \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: params,\n });\n const tokens = await tokenResponse.json();\n if (!tokenResponse.ok || !tokens.access_token) {\n return c.text(`GitHub login failed: ${tokens.error_description ?? tokens.error ?? \"unknown error\"}`, 400);\n }\n const user = await githubFetch(\"/user\", tokens.access_token).then((r) => r.json());\n const sessionId = randomToken();\n await sqlite.execute({\n sql: `INSERT INTO sessions (\n id, github_id, login, avatar_url, access_token, refresh_token, token_expires_at, refresh_expires_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n sessionId,\n user.id,\n user.login,\n user.avatar_url,\n await encrypt(tokens.access_token, conf.sessionSecret),\n tokens.refresh_token ? await encrypt(tokens.refresh_token, conf.sessionSecret) : null,\n tokens.expires_in ? Date.now() + tokens.expires_in * 1000 : null,\n tokens.refresh_token_expires_in ? Date.now() + tokens.refresh_token_expires_in * 1000 : null,\n ],\n });\n setCookie(c, \"issue_share_session\", sessionId, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n maxAge: 60 * 60 * 24 * 30,\n });\n return c.redirect(\"/\");\n});\n\napp.post(\"/auth/logout\", async (c) => {\n const id = getCookie(c, \"issue_share_session\");\n if (id) await sqlite.execute({ sql: \"DELETE FROM sessions WHERE id = ?\", args: [id] });\n deleteCookie(c, \"issue_share_session\", { path: \"/\" });\n return c.json({ ok: true });\n});\n\napp.get(\"/api/me\", async (c) => {\n const session = await currentSession(c);\n return c.json(session ? {\n authenticated: true,\n user: {\n id: session.row.github_id,\n login: session.row.login,\n avatar_url: session.row.avatar_url,\n },\n } : { authenticated: false });\n});\n\napp.get(\"/api/repos\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const installations = await githubFetch(\"/user/installations?per_page=100\", session.token).then((r) => r.json());\n const groups = await Promise.all((installations.installations ?? []).map(async (installation: any) => {\n const data = await githubFetch(\n `/user/installations/${installation.id}/repositories?per_page=100`,\n session.token,\n ).then((r) => r.json());\n return {\n installation_id: installation.id,\n account: {\n login: installation.account.login,\n avatar_url: installation.account.avatar_url,\n type: installation.account.type,\n },\n repository_selection: installation.repository_selection,\n repositories: (data.repositories ?? []).map((repo: any) => ({\n id: repo.id,\n name: repo.name,\n full_name: repo.full_name,\n private: repo.private,\n html_url: repo.html_url,\n open_issues_count: repo.open_issues_count,\n description: repo.description,\n })),\n };\n }));\n return c.json({ installations: groups });\n});\n\napp.get(\"/api/repos/:owner/:repo/issues\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const { owner, repo } = c.req.param();\n const page = Math.max(1, Number(c.req.query(\"page\") ?? 1));\n const state = c.req.query(\"state\") === \"closed\" ? \"closed\" : c.req.query(\"state\") === \"open\" ? \"open\" : \"all\";\n const issues = await githubFetch(\n `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues?state=${state}&per_page=100&page=${page}&sort=updated&direction=desc`,\n session.token,\n ).then((r) => r.json());\n return c.json({ issues: issues.filter((issue: any) => !issue.pull_request).map(safeIssue), page });\n});\n\napp.get(\"/api/repos/:owner/:repo/issues/:number\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const { owner, repo, number } = c.req.param();\n const snapshot = await issueSnapshot(owner, repo, Number(number), session.token, c.req.query(\"subIssues\") === \"true\");\n return c.json(snapshot);\n});\n\napp.post(\"/api/shares\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const body = await c.req.json();\n const owner = String(body.owner ?? \"\");\n const repo = String(body.repo ?? \"\");\n const number = Number(body.number);\n const includeSubIssues = Boolean(body.includeSubIssues);\n if (!owner || !repo || !Number.isInteger(number) || number < 1) {\n return c.json({ error: \"owner, repo, and a valid issue number are required\" }, 400);\n }\n const snapshot = await issueSnapshot(owner, repo, number, session.token, includeSubIssues);\n const slug = randomToken(12);\n await sqlite.execute({\n sql: `INSERT INTO shares (\n slug, creator_github_id, repo_full_name, issue_number, include_sub_issues, snapshot_json\n ) VALUES (?, ?, ?, ?, ?, ?)`,\n args: [\n slug,\n session.row.github_id,\n `${owner}/${repo}`,\n number,\n includeSubIssues ? 1 : 0,\n JSON.stringify(snapshot),\n ],\n });\n return c.json({ slug, url: `${new URL(c.req.url).origin}/s/${slug}` }, 201);\n});\n\napp.get(\"/api/public/:slug\", async (c) => {\n const result = await sqlite.execute({\n sql: `SELECT snapshot_json, include_sub_issues, created_at FROM shares WHERE slug = ?`,\n args: [c.req.param(\"slug\")],\n });\n const row = result.rows[0] as any;\n if (!row) return c.json({ error: \"Shared issue not found\" }, 404);\n return c.json({\n ...JSON.parse(String(row.snapshot_json)),\n share: { include_sub_issues: Boolean(row.include_sub_issues), created_at: row.created_at },\n });\n});\n\napp.onError((err, c) => {\n console.error(err);\n return c.json({ error: err instanceof Error ? err.message : \"Unexpected error\" }, 500);\n});\n\nexport default app.fetch;\n","label","raskin-issue-share",[153],"01343ad8-6da1-4565-936e-b0e2d667b11e","README.md","019f957d-a643-7685-9a7e-8056acae9408",2,["D",1784919687801],"# Issue Share\n\nBrowse GitHub issues across repositories selected during GitHub App installation,\nthen create stable public issue snapshots with one click. Snapshots include the\nissue body, labels, assignees, milestone, comments, and—when selected—sub-issues.\n\n## GitHub App setup\n\nCreate a public GitHub App at\nhttps://github.com/settings/apps/new with these settings:\n\n- Homepage URL: the live URL for `index.ts`\n- Callback URL: `/auth/github/callback`\n- Request user authorization (OAuth) during installation: optional\n- Repository permissions → Issues: Read-only\n- Repository permissions → Metadata: Read-only\n- Webhooks: disabled\n- Where can this GitHub App be installed?: Any account\n\nAfter creating the app:\n\n1. Generate a client secret.\n2. Copy the app's Client ID (not App ID), client secret, and app slug.\n3. Add the environment variables below in Val Town.\n4. Generate a strong random `SESSION_SECRET` (at least 32 bytes).\n\nRequired environment variables:\n\n- `GITHUB_CLIENT_ID`\n- `GITHUB_CLIENT_SECRET`\n- `GITHUB_APP_SLUG`\n- `SESSION_SECRET`\n\n## Security model\n\n- GitHub login uses OAuth state validation and PKCE.\n- GitHub tokens are AES-GCM encrypted at rest using `SESSION_SECRET`.\n- Session cookies are `HttpOnly`, `Secure`, and `SameSite=Lax`.\n- Public links use 96-bit random slugs and contain a stored snapshot, never a\n GitHub token.\n- Only repositories selected in each GitHub App installation are listed.\n- Creating a public link intentionally copies the selected private issue data\n into this Val's SQLite database.\n\n## Routes\n\n- `/` — authenticated issue browser\n- `/s/:slug` — public issue snapshot\n- `/auth/github` — GitHub App OAuth login\n- `/api/repos` — installations and selected repositories\n- `/api/repos/:owner/:repo/issues` — issues grouped by selected repository\n- `/api/shares` — create a public snapshot\n- `/source` — view and remix the Val\n\n## Notes\n\nGitHub's REST Issues endpoints can include pull requests, so the app filters\nentries with a `pull_request` field. The first 100 issues, comments, repositories\nper installation, and sub-issues are loaded per request.\n",[165],"6f0c5636-9ca0-40d1-b241-907787d220ee","frontend","019f957d-a643-7685-9a7e-7db9eb0d0412",["D",1784919467427],"directory",[172],"pulls","branches","forks","envVars",{"_184":186,"_187":64},"connections",{"_184":64,"_185":64},"count","unfilledCount",6,"emptyCount",{"_43":171,"_32":172,"_30":173,"_154":-5,"_41":42,"_40":158,"_156":60,"_38":244,"_13":64,"_34":175,"_35":-5,"_24":25,"_161":-5,"_198":245,"_27":246},{"_43":240,"_32":231,"_30":226,"_154":173,"_41":42,"_40":158,"_156":60,"_38":241,"_13":64,"_34":175,"_35":-5,"_24":25,"_161":-5,"_198":242,"_27":243},{"_43":232,"_32":233,"_30":234,"_154":226,"_41":42,"_40":235,"_156":25,"_38":236,"_13":158,"_34":208,"_35":237,"_24":25,"_161":-5,"_198":238,"_27":239},{"_43":223,"_32":224,"_30":225,"_154":226,"_41":42,"_40":158,"_156":60,"_38":227,"_13":64,"_34":208,"_35":228,"_24":25,"_161":-5,"_198":229,"_27":230},{"_43":216,"_32":217,"_30":218,"_154":173,"_41":42,"_40":158,"_156":60,"_38":219,"_13":64,"_34":20,"_35":220,"_24":25,"_161":-5,"_198":221,"_27":222},{"_43":212,"_32":33,"_30":31,"_154":173,"_41":42,"_40":14,"_156":25,"_38":213,"_13":158,"_34":20,"_35":37,"_24":25,"_161":-5,"_198":214,"_27":215},{"_43":204,"_32":205,"_30":206,"_154":173,"_41":42,"_40":158,"_156":60,"_38":207,"_13":64,"_34":208,"_35":209,"_24":25,"_161":-5,"_198":210,"_27":211},{"_43":164,"_32":165,"_30":166,"_154":-5,"_41":42,"_40":167,"_156":25,"_38":201,"_13":158,"_34":20,"_35":169,"_24":25,"_161":-5,"_198":202,"_27":203},{"_43":152,"_32":153,"_30":58,"_154":-5,"_41":42,"_40":155,"_156":25,"_38":197,"_13":158,"_34":159,"_35":160,"_24":25,"_161":162,"_198":199,"_27":200},["D",1784919688417],"children",[],[153],["D",1784919687801],[],[165],"c46b5e85-3ad7-4162-8b11-20d86a11c53f","index.tsx","019f957d-a643-7685-9a7e-7a675280704d",["D",1784919467427],"script","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\nimport { App } from \"./components/App.tsx\";\n\nconst root = document.getElementById(\"root\");\nif (!root) {\n throw new Error(\"No root element found\");\n}\n\ncreateRoot(root).render();",[],[172,205],"75ba8527-d180-4426-88cd-6e6ad161ddfb",["D",1784919688811],[],[172,33],"a1371dd2-4685-4de9-b36a-e9f13653f5fa","favicon.svg","019f957d-a643-7685-9a7e-7140f9207764",["D",1784919467427],"\n",[],[172,217],"0d4e2eee-6242-4638-93d9-5526ed8b3575","Counter.tsx","019f957d-a643-7685-9a7e-6af96964ced6","019f957d-a643-7685-9a7e-6fe9f0d30b1c",["D",1784919467427],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from \"https://esm.sh/react@18.2.0\";\n\nexport function Counter() {\n const [count, setCount] = useState(0);\n return (\n

\n Clicked\n setCount((c) => c + 1)}\n class=\"bg-blue-500 hover:bg-blue-600 text-white font-medium px-4 py-2 rounded-lg transition-colors cursor-pointer\"\n >\n {count}\n \n times\n

\n );\n}\n",[],[172,231,224],"components","313a5f01-6fa1-40ad-9b0a-54e592974ea6","App.tsx","019f957d-a643-7685-9a7e-64944daf55d9",3,["D",1784919688110],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useEffect, useMemo, useState } from \"https://esm.sh/react@18.2.0\";\n\ntype Label = { name: string; color: string; description?: string | null };\ntype Issue = {\n number: number;\n title: string;\n state: string;\n state_reason?: string | null;\n body: string;\n html_url: string;\n created_at: string;\n updated_at: string;\n closed_at?: string | null;\n comments_count: number;\n author?: { login: string; avatar_url: string; html_url: string } | null;\n labels: Label[];\n assignees: { login: string; avatar_url: string; html_url: string }[];\n milestone?: { title: string; state: string; due_on?: string | null; html_url: string } | null;\n};\ntype Snapshot = {\n repository: { owner: string; name: string; full_name: string };\n issue: Issue;\n comments: any[];\n sub_issues: Snapshot[];\n share?: { include_sub_issues: boolean; created_at: string };\n};\n\nasync function api(path: string, init?: RequestInit) {\n const response = await fetch(path, {\n ...init,\n headers: { \"Content-Type\": \"application/json\", ...(init?.headers ?? {}) },\n });\n const data = await response.json();\n if (!response.ok) throw new Error(data.error ?? `Request failed (${response.status})`);\n return data;\n}\n\nfunction timeAgo(value: string) {\n const seconds = Math.round((Date.now() - new Date(value).getTime()) / 1000);\n const formatter = new Intl.RelativeTimeFormat(undefined, { numeric: \"auto\" });\n if (seconds < 60) return formatter.format(-seconds, \"second\");\n if (seconds < 3600) return formatter.format(-Math.round(seconds / 60), \"minute\");\n if (seconds < 86400) return formatter.format(-Math.round(seconds / 3600), \"hour\");\n if (seconds < 2592000) return formatter.format(-Math.round(seconds / 86400), \"day\");\n return formatter.format(-Math.round(seconds / 2592000), \"month\");\n}\n\nfunction labelTextColor(hex: string) {\n const value = parseInt(hex || \"6b7280\", 16);\n const r = value >> 16;\n const g = value >> 8 & 255;\n const b = value & 255;\n return (r * 299 + g * 587 + b * 114) / 1000 > 150 ? \"#111827\" : \"#ffffff\";\n}\n\nfunction Labels({ labels }: { labels: Label[] }) {\n return (\n

\n {labels.map((label) => (\n \n {label.name}\n \n ))}\n

\n );\n}\n\nfunction StateBadge({ state }: { state: string }) {\n const open = state === \"open\";\n return (\n \n \n {open ? \"Open\" : \"Closed\"}\n \n );\n}\n\nfunction MarkdownText({ children }: { children: string }) {\n if (!children) return

No description provided.

;\n return

{children}

;\n}\n\nfunction IssueDetail({\n snapshot,\n publicView = false,\n onBack,\n onShare,\n sharing,\n}: {\n snapshot: Snapshot;\n publicView?: boolean;\n onBack?: () => void;\n onShare?: (includeSubIssues: boolean) => void;\n sharing?: boolean;\n}) {\n const [includeSubs, setIncludeSubs] = useState(true);\n const issue = snapshot.issue;\n return (\n

\n {!publicView && onBack && (\n \n )}\n

\n \n {snapshot.repository.full_name} #{issue.number}\n {publicView && Shared snapshot}\n

{issue.title}

\n {issue.author && (\n \n $\"\"$ \n {issue.author.login}\n \n )}\n opened {timeAgo(issue.created_at)}\n {issue.comments_count} comment{issue.comments_count === 1 ? \"\" : \"s\"}\n View on GitHub ↗\n

\n {issue.labels.length > 0 &&

}\n

\n\n

\n {issue.body}\n {snapshot.comments.length > 0 && (\n

Conversation

\n {snapshot.comments.map((comment) => (\n

\n {comment.author && $\"\"$ }\n {comment.author?.login ?? \"ghost\"}\n commented {timeAgo(comment.created_at)}\n

{comment.body}

\n ))}\n

\n )}\n

\n \n

\n\n {!publicView && onShare && (\n

\n \n setIncludeSubs(e.target.checked)} className=\"h-4 w-4 rounded border-slate-300\" />\n Include sub-issues in public link\n \n onShare(includeSubs)}\n disabled={sharing}\n className=\"rounded-xl bg-slate-950 px-5 py-3 text-sm font-bold text-white hover:bg-slate-800 disabled:cursor-wait disabled:opacity-60\"\n >\n {sharing ? \"Creating snapshot…\" : \"Share issue\"}\n \n

\n )}\n\n {snapshot.sub_issues.length > 0 && (\n

Sub-issues ({snapshot.sub_issues.length})

\n {snapshot.sub_issues.map((child) => (\n

\n \n {child.repository.full_name} #{child.issue.number}\n

\n {child.issue.title}\n {child.issue.labels.length > 0 &&

}\n

\n ))}\n

\n )}\n

\n );\n}\n\nfunction PublicShare({ slug }: { slug: string }) {\n const [snapshot, setSnapshot] = useState(null);\n const [error, setError] = useState(\"\");\n useEffect(() => {\n api(`/api/public/${encodeURIComponent(slug)}`).then(setSnapshot).catch((e) => setError(e.message));\n }, [slug]);\n if (error) return ;\n if (!snapshot) return ;\n return ;\n}\n\nfunction Empty({ title, body, action }: { title: string; body: string; action?: React.ReactNode }) {\n return (\n

◫

{title}

{body}

\n {action &&

{action}

}\n

\n );\n}\n\nfunction Loading({ label = \"Loading…\" }: { label?: string }) {\n return

{label}

;\n}\n\nfunction AppShell({ children, user, onLogout }: any) {\n return (\n

\n \n #\n \n Issue Share\n GitHub issues, clearly shared\n \n \n

\n {user && (\n <>\n $\"\"$ \n {user.login}\n \n \n )}\n View source\n

{children}

\n \n

\n );\n}\n\nexport function App() {\n const publicSlug = location.pathname.match(/^\\/s\\/([^/]+)$/)?.[1];\n const [config, setConfig] = useState(null);\n const [me, setMe] = useState(null);\n const [repos, setRepos] = useState([]);\n const [selectedRepo, setSelectedRepo] = useState(null);\n const [issues, setIssues] = useState([]);\n const [snapshot, setSnapshot] = useState(null);\n const [stateFilter, setStateFilter] = useState(\"all\");\n const [query, setQuery] = useState(\"\");\n const [loading, setLoading] = useState(false);\n const [sharing, setSharing] = useState(false);\n const [error, setError] = useState(\"\");\n const [shareUrl, setShareUrl] = useState(\"\");\n\n useEffect(() => {\n Promise.all([api(\"/api/config\"), api(\"/api/me\")]).then(([c, m]) => {\n setConfig(c);\n setMe(m);\n if (m.authenticated) loadRepos();\n }).catch((e) => setError(e.message));\n }, []);\n\n async function loadRepos() {\n setLoading(true);\n try {\n const data = await api(\"/api/repos\");\n setRepos(data.installations ?? []);\n } catch (e) {\n setError(e.message);\n } finally {\n setLoading(false);\n }\n }\n\n async function chooseRepo(repo: any) {\n setSelectedRepo(repo);\n setSnapshot(null);\n setLoading(true);\n setError(\"\");\n try {\n const [owner, name] = repo.full_name.split(\"/\");\n const data = await api(`/api/repos/${encodeURIComponent(owner)}/${encodeURIComponent(name)}/issues?state=${stateFilter}`);\n setIssues(data.issues);\n } catch (e) {\n setError(e.message);\n } finally {\n setLoading(false);\n }\n }\n\n useEffect(() => {\n if (selectedRepo) chooseRepo(selectedRepo);\n }, [stateFilter]);\n\n async function openIssue(issue: Issue) {\n setLoading(true);\n setError(\"\");\n try {\n const [owner, repo] = selectedRepo.full_name.split(\"/\");\n setSnapshot(await api(`/api/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${issue.number}`));\n } catch (e) {\n setError(e.message);\n } finally {\n setLoading(false);\n }\n }\n\n async function shareIssue(includeSubIssues: boolean) {\n if (!snapshot) return;\n setSharing(true);\n setError(\"\");\n try {\n const data = await api(\"/api/shares\", {\n method: \"POST\",\n body: JSON.stringify({\n owner: snapshot.repository.owner,\n repo: snapshot.repository.name,\n number: snapshot.issue.number,\n includeSubIssues,\n }),\n });\n setShareUrl(data.url);\n try {\n await navigator.clipboard.writeText(data.url);\n } catch {\n // URL remains visible if clipboard permission is unavailable.\n }\n } catch (e) {\n setError(e.message);\n } finally {\n setSharing(false);\n }\n }\n\n async function logout() {\n await api(\"/auth/logout\", { method: \"POST\", body: \"{}\" });\n location.href = \"/\";\n }\n\n const visibleIssues = useMemo(() => {\n const needle = query.toLowerCase().trim();\n if (!needle) return issues;\n return issues.filter((issue) =>\n issue.title.toLowerCase().includes(needle) ||\n String(issue.number).includes(needle) ||\n issue.labels.some((label) => label.name.toLowerCase().includes(needle))\n );\n }, [issues, query]);\n\n if (publicSlug) return ;\n if (!config || !me) return ;\n\n if (!config.configured) {\n return (\n \n Open setup instructions}\n />\n \n );\n }\n\n if (!me.authenticated) {\n return (\n \n

\n Private by default · public when you choose\n

Turn any GitHub issue into a clean, shareable page.

Browse every issue across the repositories you select. Share a complete, stable snapshot—with labels, comments, assignees, milestones, and optional sub-issues—in one click.

\n \n ◆ Continue with GitHub\n \n

\n acme/roadmap #218\n \n

Add audit history to shared reports

\n 3 comments · 2 sub-issuesPublic snapshot ↗\n

\n \n );\n }\n\n const repoCount = repos.reduce((sum, group) => sum + group.repositories.length, 0);\n return (\n \n {error && (\n

\n {error}\n

\n )}\n {shareUrl && (\n

Public link created and copied{shareUrl}

\n Open link ↗\n

\n )}\n\n {snapshot ? (\n { setSnapshot(null); setShareUrl(\"\"); }} onShare={shareIssue} sharing={sharing} />\n ) : (\n

Repositories

{repoCount} with access

\n {config.appSlug && Add}\n

\n {loading && !repos.length ? : repos.length === 0 ? (\n Select repositories}\n />\n ) : (\n

\n {repos.map((group) => (\n

\n $\"\"$ {group.account.login}\n

\n {group.repositories.map((repo) => (\n chooseRepo(repo)}\n className={`w-full rounded-xl px-3 py-2.5 text-left text-sm font-semibold ${\n selectedRepo?.id === repo.id ? \"bg-slate-950 text-white\" : \"text-slate-700 hover:bg-slate-100\"\n }`}\n >\n {repo.name}\n \n {repo.private ? \"Private\" : \"Public\"} · {repo.open_issues_count} open\n \n \n ))}\n

\n ))}\n

\n )}\n

\n\n

\n {!selectedRepo ? (\n \n ) : (\n <>\n

Repository

{selectedRepo.full_name}

\n setQuery(e.target.value)} placeholder=\"Search issues or labels…\" className=\"min-w-[230px] rounded-xl border border-slate-200 bg-white px-4 py-2.5 text-sm outline-none focus:border-sky-400\" />\n \n

\n {loading ? : visibleIssues.length === 0 ? (\n \n ) : (\n

\n {visibleIssues.map((issue, index) => (\n openIssue(issue)}\n className={`w-full p-5 text-left hover:bg-slate-50 ${index ? \"border-t border-slate-100\" : \"\"}`}\n >\n

\n \n

{issue.title}

\n #{issue.number}\n

\n {issue.labels.length > 0 &&

}\n

\n {issue.state === \"open\" ? \"opened\" : \"updated\"} {timeAgo(issue.updated_at)} by {issue.author?.login ?? \"ghost\"}\n {issue.comments_count > 0 && ` · ${issue.comments_count} comments`}\n

\n \n ))}\n

\n )}\n \n )}\n

\n )}\n \n );\n}\n",[],[172,231,233],"cd3e570c-deca-47f8-beba-ae30ebaea107",["D",1784919467427],[190,191],[172,231],["D",1784919467427],[189,192,193,194],[172],["D",1784919467427],["D",1789473046147],{"_105":104,"_113":109},{"_105":104,"_106":107,"_108":109,"_18":56,"_110":111,"_112":25},{"_13":90,"_32":91,"_43":42,"_92":44,"_93":94,"_95":96,"_97":50,"_98":99,"_100":101,"_102":45,"_103":104},"ctx",{"_83":-5,"_135":285,"_286":287,"_288":289,"_290":25,"_291":25,"_292":25,"_293":60,"_294":-5,"_295":-7,"_296":-7,"_297":64,"_298":25,"_299":25,"_300":-5,"_301":25,"_302":25,"_303":25,"_304":-5},"ENV",{"_256":257,"_258":259,"_260":91,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276,"_277":278,"_279":280,"_281":282,"_283":284},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v5