[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_293":294,"_295":296},"routes/_app.x.$handle.$name",{"_103":102,"_32":45,"_112":89,"_27":113,"_13":14,"_114":-5,"_11":115,"_116":117,"_118":119,"_120":121,"_122":123,"_20":-5,"_124":125,"_126":127,"_128":25,"_129":130,"_131":59,"_132":-5,"_133":-5,"_134":135},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":31,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",52,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","index.ts","latestPath","fileId","019f957d-a643-7685-9a7e-854dfee3e568","name","fileType","http","content","import { parseVal, readFile, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { Hono } from \"npm:hono\";\nimport { deleteCookie, getCookie, setCookie } from \"npm:hono/cookie\";\nimport { issueOgImage, viewOgImage } from \"./issue-og.tsx\";\n\nconst app = new Hono();\nconst GH_API = \"https://api.github.com\";\nconst GH_VERSION = \"2026-03-10\";\n\ntype SessionRow = {\n id: string;\n github_id: number;\n login: string;\n avatar_url: string;\n access_token: string;\n refresh_token: string | null;\n token_expires_at: number | null;\n refresh_expires_at: number | null;\n};\n\nawait sqlite.batch([\n `CREATE TABLE IF NOT EXISTS sessions (\n id TEXT PRIMARY KEY,\n github_id INTEGER NOT NULL,\n login TEXT NOT NULL,\n avatar_url TEXT NOT NULL,\n access_token TEXT NOT NULL,\n refresh_token TEXT,\n token_expires_at INTEGER,\n refresh_expires_at INTEGER,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n )`,\n `CREATE TABLE IF NOT EXISTS shares (\n slug TEXT PRIMARY KEY,\n creator_github_id INTEGER NOT NULL,\n repo_full_name TEXT NOT NULL,\n issue_number INTEGER NOT NULL,\n include_sub_issues INTEGER NOT NULL,\n snapshot_json TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n )`,\n `CREATE INDEX IF NOT EXISTS shares_creator_idx ON shares(creator_github_id, created_at)`,\n `CREATE TABLE IF NOT EXISTS views (\n slug TEXT PRIMARY KEY,\n creator_github_id INTEGER NOT NULL,\n repo_full_name TEXT NOT NULL,\n view_name TEXT NOT NULL,\n filter_json TEXT NOT NULL,\n snapshot_json TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n )`,\n `CREATE INDEX IF NOT EXISTS views_creator_idx ON views(creator_github_id, created_at)`,\n `CREATE TABLE IF NOT EXISTS view_comments (\n id TEXT PRIMARY KEY,\n view_slug TEXT NOT NULL,\n issue_number INTEGER,\n anonymous_hash TEXT NOT NULL,\n ip_hash TEXT,\n commenter_github_id INTEGER,\n commenter_login TEXT,\n commenter_avatar_url TEXT,\n body TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n hidden_at TEXT,\n FOREIGN KEY (view_slug) REFERENCES views(slug) ON DELETE CASCADE\n )`,\n `CREATE INDEX IF NOT EXISTS view_comments_view_idx ON view_comments(view_slug, created_at)`,\n `CREATE INDEX IF NOT EXISTS view_comments_identity_idx ON view_comments(anonymous_hash, created_at)`,\n]);\ntry {\n await sqlite.execute(\"ALTER TABLE view_comments ADD COLUMN issue_title TEXT\");\n} catch {\n // Existing deployments already have this column after the first migration.\n}\ntry {\n await sqlite.execute(\"ALTER TABLE view_comments ADD COLUMN issue_repo_full_name TEXT\");\n} catch {\n // Existing deployments already have this column after the first migration.\n}\ntry {\n await sqlite.execute(\"ALTER TABLE view_comments ADD COLUMN display_name TEXT\");\n} catch {\n // Existing deployments already have this column after the first migration.\n}\nawait sqlite.execute(`\n UPDATE view_comments\n SET issue_repo_full_name = (\n SELECT repo_full_name FROM views WHERE views.slug = view_comments.view_slug\n )\n WHERE issue_number IS NOT NULL AND issue_repo_full_name IS NULL\n`);\n\nfunction config() {\n return {\n clientId: Deno.env.get(\"GITHUB_CLIENT_ID\") ?? \"\",\n clientSecret: Deno.env.get(\"GITHUB_CLIENT_SECRET\") ?? \"\",\n appSlug: Deno.env.get(\"GITHUB_APP_SLUG\") ?? \"\",\n sessionSecret: Deno.env.get(\"SESSION_SECRET\") ?? \"\",\n };\n}\n\nfunction turnstileConfig() {\n return {\n siteKey: Deno.env.get(\"TURNSTILE_SITE_KEY\") ?? \"\",\n secretKey: Deno.env.get(\"TURNSTILE_SECRET_KEY\") ?? \"\",\n };\n}\n\nfunction requireConfig() {\n const c = config();\n const missing = Object.entries(c).filter(([, value]) => !value).map(([key]) => key);\n if (missing.length) throw new Error(`Missing configuration: ${missing.join(\", \")}`);\n return c;\n}\n\nfunction bytesToBase64Url(bytes: Uint8Array) {\n return btoa(String.fromCharCode(...bytes))\n .replaceAll(\"+\", \"-\")\n .replaceAll(\"/\", \"_\")\n .replaceAll(\"=\", \"\");\n}\n\nfunction base64UrlToBytes(value: string) {\n const padded = value.replaceAll(\"-\", \"+\").replaceAll(\"_\", \"/\") +\n \"=\".repeat((4 - value.length % 4) % 4);\n return Uint8Array.from(atob(padded), (char) => char.charCodeAt(0));\n}\n\nfunction randomToken(size = 32) {\n return bytesToBase64Url(crypto.getRandomValues(new Uint8Array(size)));\n}\n\nasync function sha256(value: string) {\n return new Uint8Array(await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(value)));\n}\n\nasync function hmac(value: string, secret: string) {\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n return bytesToBase64Url(new Uint8Array(await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(value))));\n}\n\nasync function sealCookie(payload: Record, secret: string) {\n const body = bytesToBase64Url(new TextEncoder().encode(JSON.stringify(payload)));\n return `${body}.${await hmac(body, secret)}`;\n}\n\nasync function openCookie(value: string | undefined, secret: string) {\n if (!value) return null;\n const [body, signature] = value.split(\".\");\n if (!body || !signature || await hmac(body, secret) !== signature) return null;\n try {\n return JSON.parse(new TextDecoder().decode(base64UrlToBytes(body)));\n } catch {\n return null;\n }\n}\n\nasync function encryptionKey(secret: string) {\n return crypto.subtle.importKey(\"raw\", await sha256(secret), \"AES-GCM\", false, [\"encrypt\", \"decrypt\"]);\n}\n\nasync function encrypt(value: string, secret: string) {\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const encrypted = new Uint8Array(await crypto.subtle.encrypt(\n { name: \"AES-GCM\", iv },\n await encryptionKey(secret),\n new TextEncoder().encode(value),\n ));\n return `${bytesToBase64Url(iv)}.${bytesToBase64Url(encrypted)}`;\n}\n\nasync function decrypt(value: string, secret: string) {\n const [iv, encrypted] = value.split(\".\");\n const clear = await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv: base64UrlToBytes(iv) },\n await encryptionKey(secret),\n base64UrlToBytes(encrypted),\n );\n return new TextDecoder().decode(clear);\n}\n\nfunction githubHeaders(token: string) {\n return {\n Accept: \"application/vnd.github.full+json\",\n Authorization: `Bearer ${token}`,\n \"X-GitHub-Api-Version\": GH_VERSION,\n \"User-Agent\": \"Val-Town-Issue-Share\",\n };\n}\n\nasync function githubFetch(path: string, token: string, init: RequestInit = {}) {\n const response = await fetch(`${GH_API}${path}`, {\n ...init,\n headers: { ...githubHeaders(token), ...(init.headers ?? {}) },\n });\n if (!response.ok) {\n const detail = await response.text();\n throw new Error(`GitHub ${response.status}: ${detail.slice(0, 400)}`);\n }\n return response;\n}\n\nasync function githubAllPages(path: string, token: string, key?: string) {\n const items: any[] = [];\n for (let page = 1; page <= 100; page++) {\n const separator = path.includes(\"?\") ? \"&\" : \"?\";\n const data = await githubFetch(`${path}${separator}per_page=100&page=${page}`, token).then((r) => r.json());\n const batch = key ? data[key] ?? [] : data;\n if (!Array.isArray(batch)) throw new Error(\"Unexpected paginated response from GitHub\");\n items.push(...batch);\n if (batch.length < 100) break;\n }\n return items;\n}\n\nasync function githubGraphql(query: string, variables: Record, token: string) {\n const payload = await githubFetch(\"/graphql\", token, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ query, variables }),\n }).then((response) => response.json());\n if (payload.errors?.length) {\n throw new Error(`GitHub GraphQL: ${payload.errors.map((error: any) => error.message).join(\"; \")}`);\n }\n return payload.data;\n}\n\nasync function refreshSession(row: SessionRow) {\n const c = requireConfig();\n if (!row.refresh_token || (row.refresh_expires_at && row.refresh_expires_at < Date.now())) return null;\n const params = new URLSearchParams({\n client_id: c.clientId,\n client_secret: c.clientSecret,\n grant_type: \"refresh_token\",\n refresh_token: await decrypt(row.refresh_token, c.sessionSecret),\n });\n const response = await fetch(\"https://github.com/login/oauth/access_token\", {\n method: \"POST\",\n headers: { Accept: \"application/json\", \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: params,\n });\n const tokens = await response.json();\n if (!response.ok || !tokens.access_token) return null;\n await sqlite.execute({\n sql: `UPDATE sessions SET access_token = ?, refresh_token = ?, token_expires_at = ?,\n refresh_expires_at = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?`,\n args: [\n await encrypt(tokens.access_token, c.sessionSecret),\n tokens.refresh_token ? await encrypt(tokens.refresh_token, c.sessionSecret) : row.refresh_token,\n tokens.expires_in ? Date.now() + tokens.expires_in * 1000 : null,\n tokens.refresh_token_expires_in ? Date.now() + tokens.refresh_token_expires_in * 1000 : row.refresh_expires_at,\n row.id,\n ],\n });\n return tokens.access_token as string;\n}\n\nasync function tokenForSessionRow(row: SessionRow) {\n const conf = requireConfig();\n let token = await decrypt(row.access_token, conf.sessionSecret);\n if (row.token_expires_at && row.token_expires_at < Date.now() + 60_000) {\n token = await refreshSession(row) ?? \"\";\n }\n return token || null;\n}\n\nasync function creatorToken(githubId: number) {\n const result = await sqlite.execute({\n sql: \"SELECT * FROM sessions WHERE github_id = ? ORDER BY updated_at DESC LIMIT 1\",\n args: [githubId],\n });\n const row = result.rows[0] as unknown as SessionRow | undefined;\n return row ? await tokenForSessionRow(row) : null;\n}\n\nasync function currentSession(c: any) {\n const id = getCookie(c, \"issue_share_session\");\n if (!id) return null;\n const result = await sqlite.execute({ sql: \"SELECT * FROM sessions WHERE id = ?\", args: [id] });\n const row = result.rows[0] as unknown as SessionRow | undefined;\n if (!row) return null;\n const token = await tokenForSessionRow(row);\n if (!token) return null;\n return { row, token };\n}\n\nasync function requireSession(c: any) {\n const session = await currentSession(c);\n if (!session) return c.json({ error: \"Authentication required\" }, 401);\n return session;\n}\n\nfunction syncMeta() {\n return {\n status: \"live\",\n source: \"github\",\n checked_at: new Date().toISOString(),\n };\n}\n\nasync function githubHealth(token: string) {\n const checkedAt = new Date().toISOString();\n try {\n const response = await githubFetch(\"/rate_limit\", token);\n const remaining = Number(response.headers.get(\"x-ratelimit-remaining\") ?? \"\");\n return {\n status: \"live\",\n source: \"github\",\n checked_at: checkedAt,\n rate_limit_remaining: Number.isFinite(remaining) ? remaining : null,\n };\n } catch {\n return {\n status: \"degraded\",\n source: \"github\",\n checked_at: checkedAt,\n message: \"GitHub could not be reached with the connected account.\",\n };\n }\n}\n\nasync function commenterIdentity(c: any) {\n const conf = requireConfig();\n let cookie = await openCookie(getCookie(c, \"issue_share_commenter\"), conf.sessionSecret);\n if (!cookie?.id) {\n cookie = { id: randomToken(), createdAt: Date.now() };\n setCookie(c, \"issue_share_commenter\", await sealCookie(cookie, conf.sessionSecret), {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n maxAge: 60 * 60 * 24 * 365,\n });\n }\n const session = await currentSession(c);\n return {\n anonymousHash: await hmac(String(cookie.id), conf.sessionSecret),\n session,\n };\n}\n\nasync function validateTurnstile(c: any, token: string) {\n const turnstile = turnstileConfig();\n if (!turnstile.siteKey || !turnstile.secretKey) {\n return { ok: false, status: 503, error: \"Public comments are not configured yet.\" };\n }\n if (!token || token.length > 2048) {\n return { ok: false, status: 400, error: \"Please complete the security check.\" };\n }\n const response = await fetch(\"https://challenges.cloudflare.com/turnstile/v0/siteverify\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n secret: turnstile.secretKey,\n response: token,\n remoteip: c.req.header(\"cf-connecting-ip\") ?? undefined,\n idempotency_key: crypto.randomUUID(),\n }),\n });\n const result = await response.json();\n const hostname = new URL(c.req.url).hostname;\n if (!response.ok || !result.success || result.action !== \"comment\" || result.hostname !== hostname) {\n return { ok: false, status: 400, error: \"Security check failed. Please try again.\" };\n }\n return { ok: true, status: 200, error: \"\" };\n}\n\nfunction safeIssue(issue: any) {\n return {\n id: issue.id,\n number: issue.number,\n title: issue.title,\n state: issue.state,\n state_reason: issue.state_reason,\n body: issue.body ?? \"\",\n body_text: issue.body_text ?? \"\",\n body_html: issue.body_html ?? \"\",\n html_url: issue.html_url,\n created_at: issue.created_at,\n updated_at: issue.updated_at,\n closed_at: issue.closed_at,\n comments_count: issue.comments ?? 0,\n author: issue.user ? {\n login: issue.user.login,\n avatar_url: issue.user.avatar_url,\n html_url: issue.user.html_url,\n } : null,\n labels: (issue.labels ?? []).map((label: any) =>\n typeof label === \"string\" ? { name: label, color: \"6b7280\", description: null } : {\n name: label.name,\n color: label.color,\n description: label.description,\n }\n ),\n assignees: (issue.assignees ?? []).map((user: any) => ({\n login: user.login,\n avatar_url: user.avatar_url,\n html_url: user.html_url,\n })),\n milestone: issue.milestone ? {\n title: issue.milestone.title,\n state: issue.milestone.state,\n due_on: issue.milestone.due_on,\n html_url: issue.milestone.html_url,\n } : null,\n };\n}\n\nfunction safeComment(comment: any) {\n return {\n id: comment.id,\n body: comment.body ?? \"\",\n body_text: comment.body_text ?? \"\",\n body_html: comment.body_html ?? \"\",\n created_at: comment.created_at,\n updated_at: comment.updated_at,\n html_url: comment.html_url,\n author: comment.user ? {\n login: comment.user.login,\n avatar_url: comment.user.avatar_url,\n html_url: comment.user.html_url,\n } : null,\n };\n}\n\nasync function issueSnapshot(\n owner: string,\n repo: string,\n number: number,\n token: string,\n includeSubIssues: boolean,\n): Promise {\n const issuePromise = githubFetch(`/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}`, token)\n .then((r) => r.json());\n const commentsPromise = githubAllPages(\n `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}/comments`,\n token,\n );\n const parentPromise = parentIssueReference(owner, repo, number, token);\n const childrenPromise = includeSubIssues\n ? githubAllPages(\n `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}/sub_issues`,\n token,\n )\n : Promise.resolve([]);\n const [issue, comments, parentIssue, children] = await Promise.all([\n issuePromise,\n commentsPromise,\n parentPromise,\n childrenPromise,\n ]);\n const subIssues: any[] = await Promise.all(children.map(async (child: any): Promise => {\n const childRepoUrl = new URL(child.repository_url);\n const parts = childRepoUrl.pathname.split(\"/\").filter(Boolean);\n const childOwner = parts.at(-2) ?? owner;\n const childRepo = parts.at(-1) ?? repo;\n return issueSnapshot(childOwner, childRepo, child.number, token, true);\n }));\n return {\n repository: { owner, name: repo, full_name: `${owner}/${repo}` },\n issue: safeIssue(issue),\n comments: comments.map(safeComment),\n sub_issues: subIssues,\n parent_issue: parentIssue,\n };\n}\n\nfunction issueReference(owner: string, repo: string, issue: any) {\n return {\n repository: { owner, name: repo, full_name: `${owner}/${repo}` },\n issue: safeIssue(issue),\n comments: [],\n sub_issues: [],\n parent_issue: null,\n };\n}\n\nasync function parentIssueReference(owner: string, repo: string, number: number, token: string) {\n const response = await fetch(\n `${GH_API}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}/parent`,\n { headers: githubHeaders(token) },\n );\n if (response.status === 404) return null;\n if (!response.ok) {\n const detail = await response.text();\n throw new Error(`GitHub ${response.status}: ${detail.slice(0, 400)}`);\n }\n const parent = await response.json();\n const parentRepoUrl = new URL(parent.repository_url);\n const parts = parentRepoUrl.pathname.split(\"/\").filter(Boolean);\n const parentOwner = parts.at(-2) ?? owner;\n const parentRepo = parts.at(-1) ?? repo;\n return issueReference(parentOwner, parentRepo, parent);\n}\n\nasync function subIssueSnapshots(\n owner: string,\n repo: string,\n number: number,\n token: string,\n parentReference: any,\n): Promise {\n const children = await githubAllPages(\n `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}/sub_issues`,\n token,\n );\n return Promise.all(children.map(async (child: any) => {\n const childRepoUrl = new URL(child.repository_url);\n const parts = childRepoUrl.pathname.split(\"/\").filter(Boolean);\n const childOwner = parts.at(-2) ?? owner;\n const childRepo = parts.at(-1) ?? repo;\n const hasChildren = Number(child.sub_issues_summary?.total ?? 0) > 0;\n const childReference = issueReference(childOwner, childRepo, child);\n return {\n ...childReference,\n parent_issue: parentReference,\n sub_issues: hasChildren\n ? await subIssueSnapshots(childOwner, childRepo, child.number, token, childReference)\n : [],\n };\n }));\n}\n\nasync function getShareRow(slug: string) {\n const result = await sqlite.execute({\n sql: `SELECT slug, creator_github_id, repo_full_name, issue_number,\n include_sub_issues, snapshot_json, created_at FROM shares WHERE slug = ?`,\n args: [slug],\n });\n return result.rows[0] as any;\n}\n\nasync function getViewRow(slug: string) {\n const result = await sqlite.execute({\n sql: `SELECT slug, creator_github_id, repo_full_name, view_name,\n filter_json, snapshot_json, created_at FROM views WHERE slug = ?`,\n args: [slug],\n });\n return result.rows[0] as any;\n}\n\nfunction escapeHtml(value: string) {\n return value\n .replaceAll(\"&\", \"&\")\n .replaceAll(\"<\", \"<\")\n .replaceAll(\">\", \">\")\n .replaceAll('\"', \""\")\n .replaceAll(\"'\", \"'\");\n}\n\nfunction shareDescription(snapshot: any) {\n const body = String(snapshot.issue?.body_text || snapshot.issue?.body || \"\")\n .replace(/!\\[[^\\]]*\\]\$[^)]*\$/g, \"\")\n .replace(/\\[([^\\]]+)\\]\$[^)]*\$/g, \"$1\")\n .replace(/[`*_>#~]/g, \"\")\n .replace(/\\s+/g, \" \")\n .trim();\n const fallback = `A shared GitHub issue from ${snapshot.repository?.full_name ?? \"Issue Share\"}.`;\n return (body || fallback).slice(0, 200);\n}\n\nfunction viewState(value: unknown) {\n return value === \"closed\" ? \"closed\" : value === \"all\" ? \"all\" : \"open\";\n}\n\nfunction viewMatches(issue: any, query: string) {\n const needle = query.toLowerCase().trim();\n if (!needle) return true;\n return issue.title.toLowerCase().includes(needle) ||\n String(issue.number).includes(needle) ||\n issue.labels.some((label: any) => label.name.toLowerCase().includes(needle));\n}\n\nasync function repositoryIssues(owner: string, repo: string, state: string, token: string) {\n const issues = await githubAllPages(\n `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues?state=${state}&sort=updated&direction=desc`,\n token,\n );\n const actualIssues = issues.filter((issue: any) => !issue.pull_request);\n const relationships = new Map();\n const relationshipQuery = `\n query IssueRelationships($ids: [ID!]!) {\n nodes(ids: $ids) {\n ... on Issue {\n id\n parent { id }\n subIssuesSummary {\n total\n }\n }\n }\n }\n `;\n for (let index = 0; index < actualIssues.length; index += 100) {\n const batch = actualIssues.slice(index, index + 100);\n const data = await githubGraphql(\n relationshipQuery,\n { ids: batch.map((issue: any) => issue.node_id) },\n token,\n );\n for (const issue of data.nodes ?? []) {\n if (!issue) continue;\n relationships.set(issue.id, {\n hasParent: Boolean(issue.parent),\n subIssueCount: Number(issue.subIssuesSummary?.total ?? 0),\n });\n }\n }\n const parentIssues = actualIssues.filter((issue: any) => !relationships.get(issue.node_id)?.hasParent);\n return parentIssues.map((issue: any) => ({\n ...safeIssue(issue),\n sub_issue_count: relationships.get(issue.node_id)?.subIssueCount ?? 0,\n sub_issues: [],\n }));\n}\n\nasync function liveView(row: any) {\n const token = await creatorToken(Number(row.creator_github_id));\n if (!token) throw new Error(\"The view owner needs to reconnect GitHub\");\n const filter = JSON.parse(String(row.filter_json));\n const state = viewState(filter.state);\n const query = String(filter.query ?? \"\");\n const [owner, repo] = String(row.repo_full_name).split(\"/\");\n if (!owner || !repo) throw new Error(\"Invalid repository for public view\");\n const issues = (await repositoryIssues(owner, repo, state, token))\n .filter((issue: any) => viewMatches(issue, query));\n return {\n token,\n snapshot: {\n repository: { owner, name: repo, full_name: `${owner}/${repo}` },\n view: { name: row.view_name, state, query },\n issues,\n share: { created_at: row.created_at, live: true },\n sync: syncMeta(),\n },\n };\n}\n\nfunction safeViewComment(row: any, anonymousHash: string, githubId?: number | null) {\n const createdAt = String(row.created_at ?? \"\");\n return {\n id: row.id,\n view_slug: row.view_slug,\n view_name: row.view_name,\n repo_full_name: row.repo_full_name,\n issue_number: row.issue_number ? Number(row.issue_number) : null,\n issue_title: row.issue_title ?? null,\n issue_repo_full_name: row.issue_repo_full_name ?? row.repo_full_name ?? null,\n display_name: row.display_name ?? row.commenter_login ?? null,\n body: row.body,\n created_at: createdAt.includes(\"T\") ? createdAt : `${createdAt.replace(\" \", \"T\")}Z`,\n author: row.commenter_github_id ? {\n type: \"github\",\n login: row.commenter_login,\n avatar_url: row.commenter_avatar_url,\n } : {\n type: \"browser\",\n login: row.display_name || row.commenter_login || \"Guest viewer\",\n avatar_url: null,\n },\n mine: row.anonymous_hash === anonymousHash ||\n (githubId && Number(row.commenter_github_id) === githubId) || false,\n };\n}\n\nfunction snapshotContainsIssue(snapshot: any, fullName: string, number: number): boolean {\n if (snapshot.repository?.full_name === fullName && snapshot.issue?.number === number) return true;\n return (snapshot.sub_issues ?? []).some((child: any) => snapshotContainsIssue(child, fullName, number));\n}\n\nfunction viewContainsIssue(view: any, fullName: string, number: number) {\n return (view.issues ?? []).some((issue: any) => {\n if (view.repository?.full_name === fullName && issue.number === number) return true;\n return (issue.sub_issues ?? []).some((child: any) => snapshotContainsIssue(child, fullName, number));\n });\n}\n\nasync function viewAllowsIssue(view: any, owner: string, repo: string, number: number, token: string) {\n if (viewContainsIssue(view, `${owner}/${repo}`, number)) return true;\n let parent = await parentIssueReference(owner, repo, number, token);\n for (let depth = 0; parent && depth < 10; depth += 1) {\n if (viewContainsIssue(view, parent.repository.full_name, parent.issue.number)) return true;\n parent = await parentIssueReference(\n parent.repository.owner,\n parent.repository.name,\n parent.issue.number,\n token,\n );\n }\n return false;\n}\n\napp.get(\"/\", () => serveFile(\"/frontend/index.html\"));\napp.get(\"/s/:slug\", async (c) => {\n const row = await getShareRow(c.req.param(\"slug\"));\n const shell = await readFile(\"/frontend/share.html\");\n const origin = new URL(c.req.url).origin;\n const url = `${origin}/s/${c.req.param(\"slug\")}`;\n const image = row ? `${origin}/og/${row.slug}/image.png` : `${origin}/og-image.png`;\n if (!row) {\n const title = \"Shared issue unavailable · Issue Share\";\n const description = \"This public issue link is unavailable or has been removed.\";\n const html = shell\n .replaceAll(\"__OG_TITLE__\", escapeHtml(title))\n .replaceAll(\"__OG_DESCRIPTION__\", escapeHtml(description))\n .replaceAll(\"__OG_URL__\", escapeHtml(url))\n .replaceAll(\"__OG_IMAGE__\", escapeHtml(image));\n return c.html(html, 404);\n }\n const snapshot = JSON.parse(String(row.snapshot_json));\n const title = `${snapshot.issue.title} · ${snapshot.repository.full_name} #${snapshot.issue.number}`;\n const description = shareDescription(snapshot);\n const html = shell\n .replaceAll(\"__OG_TITLE__\", escapeHtml(title))\n .replaceAll(\"__OG_DESCRIPTION__\", escapeHtml(description))\n .replaceAll(\"__OG_URL__\", escapeHtml(url))\n .replaceAll(\"__OG_IMAGE__\", escapeHtml(image));\n return new Response(html, {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"Cache-Control\": \"public, max-age=60\",\n },\n });\n});\napp.get(\"/v/:slug\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n const shell = await readFile(\"/frontend/share.html\");\n const origin = new URL(c.req.url).origin;\n const url = `${origin}/v/${c.req.param(\"slug\")}`;\n const image = row ? `${origin}/og-view/${row.slug}/image.png` : `${origin}/og-image.png`;\n if (!row) {\n const title = \"Shared view unavailable · Issue Share\";\n const description = \"This public repository view is unavailable or has been removed.\";\n const html = shell\n .replaceAll(\"__OG_TITLE__\", escapeHtml(title))\n .replaceAll(\"__OG_DESCRIPTION__\", escapeHtml(description))\n .replaceAll(\"__OG_URL__\", escapeHtml(url))\n .replaceAll(\"__OG_IMAGE__\", escapeHtml(image));\n return c.html(html, 404);\n }\n let snapshot: any;\n try {\n snapshot = (await liveView(row)).snapshot;\n } catch (error) {\n return c.html(\n shell\n .replaceAll(\"__OG_TITLE__\", escapeHtml(\"Shared view temporarily unavailable · Issue Share\"))\n .replaceAll(\"__OG_DESCRIPTION__\", escapeHtml(error instanceof Error ? error.message : \"Unable to refresh this view from GitHub.\"))\n .replaceAll(\"__OG_URL__\", escapeHtml(url))\n .replaceAll(\"__OG_IMAGE__\", escapeHtml(image)),\n 503,\n );\n }\n const title = `${row.view_name} · Issue Share`;\n const count = snapshot.issues?.length ?? 0;\n const description = `${count} live ${count === 1 ? \"issue\" : \"issues\"} from ${row.repo_full_name}, refreshed from GitHub.`;\n const html = shell\n .replaceAll(\"__OG_TITLE__\", escapeHtml(title))\n .replaceAll(\"__OG_DESCRIPTION__\", escapeHtml(description))\n .replaceAll(\"__OG_URL__\", escapeHtml(url))\n .replaceAll(\"__OG_IMAGE__\", escapeHtml(image));\n return new Response(html, {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"Cache-Control\": \"public, max-age=60\",\n },\n });\n});\napp.get(\"/og-image\", () => serveFile(\"/frontend/og-image.html\"));\napp.get(\"/og/:slug/image.png\", async (c) => {\n const row = await getShareRow(c.req.param(\"slug\"));\n if (!row) return c.redirect(\"/og-image.png\", 302);\n return issueOgImage(JSON.parse(String(row.snapshot_json)));\n});\napp.get(\"/og-view/:slug/image.png\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n if (!row) return c.redirect(\"/og-image.png\", 302);\n try {\n return viewOgImage((await liveView(row)).snapshot);\n } catch {\n return c.redirect(\"/og-image.png\", 302);\n }\n});\napp.get(\"/og-image.png\", async () => {\n try {\n const image = await blob.get(\"og-image.png\");\n return new Response(image.body, {\n headers: {\n \"Content-Type\": \"image/png\",\n \"Cache-Control\": \"public, max-age=31536000, immutable\",\n },\n });\n } catch {\n return new Response(\"Open Graph image unavailable\", { status: 404 });\n }\n});\napp.get(\"/frontend/**/*\", (c) => serveFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/api/config\", (c) => {\n const conf = config();\n const turnstile = turnstileConfig();\n return c.json({\n configured: Boolean(conf.clientId && conf.clientSecret && conf.appSlug && conf.sessionSecret),\n appSlug: conf.appSlug || null,\n turnstileSiteKey: turnstile.siteKey || null,\n turnstileConfigured: Boolean(turnstile.siteKey && turnstile.secretKey),\n });\n});\n\napp.get(\"/auth/github\", async (c) => {\n const conf = requireConfig();\n const state = randomToken();\n const verifier = randomToken(48);\n const challenge = bytesToBase64Url(await sha256(verifier));\n const requestedReturn = String(c.req.query(\"returnTo\") ?? \"\");\n const returnTo = /^\\/v\\/[A-Za-z0-9_-]+(?:#feedback)?$/.test(requestedReturn) ? requestedReturn : \"/\";\n const cookie = await sealCookie({ state, verifier, returnTo, createdAt: Date.now() }, conf.sessionSecret);\n setCookie(c, \"github_oauth\", cookie, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n maxAge: 600,\n });\n const redirectUri = `${new URL(c.req.url).origin}/auth/github/callback`;\n const params = new URLSearchParams({\n client_id: conf.clientId,\n redirect_uri: redirectUri,\n state,\n code_challenge: challenge,\n code_challenge_method: \"S256\",\n prompt: \"select_account\",\n });\n return c.redirect(`https://github.com/login/oauth/authorize?${params}`);\n});\n\napp.get(\"/auth/github/callback\", async (c) => {\n const conf = requireConfig();\n const saved = await openCookie(getCookie(c, \"github_oauth\"), conf.sessionSecret);\n deleteCookie(c, \"github_oauth\", { path: \"/\" });\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\");\n if (!saved || !code || state !== saved.state || Date.now() - saved.createdAt > 600_000) {\n return c.text(\"Invalid or expired GitHub login. Please try again.\", 400);\n }\n const redirectUri = `${new URL(c.req.url).origin}/auth/github/callback`;\n const params = new URLSearchParams({\n client_id: conf.clientId,\n client_secret: conf.clientSecret,\n code,\n redirect_uri: redirectUri,\n code_verifier: saved.verifier,\n });\n const tokenResponse = await fetch(\"https://github.com/login/oauth/access_token\", {\n method: \"POST\",\n headers: { Accept: \"application/json\", \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: params,\n });\n const tokens = await tokenResponse.json();\n if (!tokenResponse.ok || !tokens.access_token) {\n return c.text(`GitHub login failed: ${tokens.error_description ?? tokens.error ?? \"unknown error\"}`, 400);\n }\n const user = await githubFetch(\"/user\", tokens.access_token).then((r) => r.json());\n const sessionId = randomToken();\n await sqlite.execute({\n sql: `INSERT INTO sessions (\n id, github_id, login, avatar_url, access_token, refresh_token, token_expires_at, refresh_expires_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n sessionId,\n user.id,\n user.login,\n user.avatar_url,\n await encrypt(tokens.access_token, conf.sessionSecret),\n tokens.refresh_token ? await encrypt(tokens.refresh_token, conf.sessionSecret) : null,\n tokens.expires_in ? Date.now() + tokens.expires_in * 1000 : null,\n tokens.refresh_token_expires_in ? Date.now() + tokens.refresh_token_expires_in * 1000 : null,\n ],\n });\n setCookie(c, \"issue_share_session\", sessionId, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n maxAge: 60 * 60 * 24 * 30,\n });\n return c.redirect(String(saved.returnTo ?? \"/\"));\n});\n\napp.post(\"/auth/logout\", async (c) => {\n const id = getCookie(c, \"issue_share_session\");\n if (id) await sqlite.execute({ sql: \"DELETE FROM sessions WHERE id = ?\", args: [id] });\n deleteCookie(c, \"issue_share_session\", { path: \"/\" });\n return c.json({ ok: true });\n});\n\napp.get(\"/api/me\", async (c) => {\n const session = await currentSession(c);\n return c.json(session ? {\n authenticated: true,\n user: {\n id: session.row.github_id,\n login: session.row.login,\n avatar_url: session.row.avatar_url,\n },\n } : { authenticated: false });\n});\n\napp.get(\"/api/github-health\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n return c.json(await githubHealth(session.token), 200, { \"Cache-Control\": \"no-store\" });\n});\n\napp.get(\"/api/repos\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const installations = await githubAllPages(\"/user/installations\", session.token, \"installations\");\n const groups = await Promise.all(installations.map(async (installation: any) => {\n const repositories = await githubAllPages(\n `/user/installations/${installation.id}/repositories`,\n session.token,\n \"repositories\",\n );\n return {\n installation_id: installation.id,\n account: {\n login: installation.account.login,\n avatar_url: installation.account.avatar_url,\n type: installation.account.type,\n },\n repository_selection: installation.repository_selection,\n repositories: repositories.map((repo: any) => ({\n id: repo.id,\n name: repo.name,\n full_name: repo.full_name,\n private: repo.private,\n html_url: repo.html_url,\n open_issues_count: repo.open_issues_count,\n description: repo.description,\n })),\n };\n }));\n return c.json({ installations: groups, sync: syncMeta() });\n});\n\napp.get(\"/api/repos/:owner/:repo/issues\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const { owner, repo } = c.req.param();\n const page = Math.max(1, Number(c.req.query(\"page\") ?? 1));\n const state = c.req.query(\"state\") === \"closed\" ? \"closed\" : c.req.query(\"state\") === \"open\" ? \"open\" : \"all\";\n return c.json({ issues: await repositoryIssues(owner, repo, state, session.token), page, sync: syncMeta() });\n});\n\napp.get(\"/api/repos/:owner/:repo/issues/:number\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const { owner, repo, number } = c.req.param();\n const snapshot = await issueSnapshot(owner, repo, Number(number), session.token, c.req.query(\"subIssues\") === \"true\");\n return c.json({ ...snapshot, sync: syncMeta() });\n});\n\napp.post(\"/api/shares\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const body = await c.req.json();\n const owner = String(body.owner ?? \"\");\n const repo = String(body.repo ?? \"\");\n const number = Number(body.number);\n const includeSubIssues = Boolean(body.includeSubIssues);\n if (!owner || !repo || !Number.isInteger(number) || number < 1) {\n return c.json({ error: \"owner, repo, and a valid issue number are required\" }, 400);\n }\n const snapshot = await issueSnapshot(owner, repo, number, session.token, includeSubIssues);\n const slug = randomToken(12);\n await sqlite.execute({\n sql: `INSERT INTO shares (\n slug, creator_github_id, repo_full_name, issue_number, include_sub_issues, snapshot_json\n ) VALUES (?, ?, ?, ?, ?, ?)`,\n args: [\n slug,\n session.row.github_id,\n `${owner}/${repo}`,\n number,\n includeSubIssues ? 1 : 0,\n JSON.stringify(snapshot),\n ],\n });\n return c.json({ slug, url: `${new URL(c.req.url).origin}/s/${slug}` }, 201);\n});\n\napp.get(\"/api/shares\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const result = await sqlite.execute({\n sql: `SELECT slug, repo_full_name, issue_number, include_sub_issues,\n snapshot_json, created_at FROM shares\n WHERE creator_github_id = ? ORDER BY created_at DESC`,\n args: [session.row.github_id],\n });\n const origin = new URL(c.req.url).origin;\n const viewResult = await sqlite.execute({\n sql: `SELECT slug, repo_full_name, view_name, filter_json,\n snapshot_json, created_at FROM views\n WHERE creator_github_id = ? ORDER BY created_at DESC`,\n args: [session.row.github_id],\n });\n const commentCountResult = await sqlite.execute({\n sql: `SELECT c.view_slug, COUNT(*) AS comment_count\n FROM view_comments c\n JOIN views v ON v.slug = c.view_slug\n WHERE v.creator_github_id = ? AND c.hidden_at IS NULL\n GROUP BY c.view_slug`,\n args: [session.row.github_id],\n });\n const commentCounts = new Map(\n commentCountResult.rows.map((row: any) => [String(row.view_slug), Number(row.comment_count)]),\n );\n const shares = result.rows.map((row: any) => {\n const snapshot = JSON.parse(String(row.snapshot_json));\n return {\n type: \"issue\",\n slug: row.slug,\n url: `${origin}/s/${row.slug}`,\n repo_full_name: row.repo_full_name,\n issue_number: row.issue_number,\n title: snapshot.issue?.title ?? `Issue #${row.issue_number}`,\n include_sub_issues: Boolean(row.include_sub_issues),\n created_at: row.created_at,\n };\n });\n const views = viewResult.rows.map((row: any) => {\n const snapshot = JSON.parse(String(row.snapshot_json));\n const filter = JSON.parse(String(row.filter_json));\n return {\n type: \"view\",\n slug: row.slug,\n url: `${origin}/v/${row.slug}`,\n repo_full_name: row.repo_full_name,\n title: row.view_name,\n state: filter.state,\n query: filter.query,\n issue_count: snapshot.issues?.length ?? 0,\n comment_count: commentCounts.get(String(row.slug)) ?? 0,\n created_at: row.created_at,\n };\n });\n return c.json({\n shares,\n links: [...shares, ...views].sort((a, b) => String(b.created_at).localeCompare(String(a.created_at))),\n });\n});\n\napp.delete(\"/api/shares/:slug\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const result = await sqlite.execute({\n sql: \"DELETE FROM shares WHERE slug = ? AND creator_github_id = ?\",\n args: [c.req.param(\"slug\"), session.row.github_id],\n });\n if (!result.rowsAffected) return c.json({ error: \"Public link not found\" }, 404);\n return c.json({ ok: true });\n});\n\napp.post(\"/api/views\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const body = await c.req.json();\n const owner = String(body.owner ?? \"\");\n const repo = String(body.repo ?? \"\");\n const state = viewState(body.state);\n const query = String(body.query ?? \"\").trim().slice(0, 160);\n if (!owner || !repo) return c.json({ error: \"owner and repo are required\" }, 400);\n const allIssues = await repositoryIssues(owner, repo, state, session.token);\n const issues = allIssues.filter((issue: any) => viewMatches(issue, query));\n const stateLabel = state === \"all\" ? \"All issues\" : state === \"closed\" ? \"Closed issues\" : \"Open issues\";\n const viewName = String(body.name ?? \"\").trim().slice(0, 120) ||\n `${stateLabel}${query ? ` matching “${query}”` : \"\"}`;\n const slug = randomToken(12);\n const snapshot = {\n repository: { owner, name: repo, full_name: `${owner}/${repo}` },\n view: { name: viewName, state, query },\n issues,\n };\n await sqlite.execute({\n sql: `INSERT INTO views (\n slug, creator_github_id, repo_full_name, view_name, filter_json, snapshot_json\n ) VALUES (?, ?, ?, ?, ?, ?)`,\n args: [\n slug,\n session.row.github_id,\n `${owner}/${repo}`,\n viewName,\n JSON.stringify({ state, query }),\n JSON.stringify(snapshot),\n ],\n });\n return c.json({ slug, url: `${new URL(c.req.url).origin}/v/${slug}` }, 201);\n});\n\napp.delete(\"/api/views/:slug\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const owned = await sqlite.execute({\n sql: \"SELECT slug FROM views WHERE slug = ? AND creator_github_id = ?\",\n args: [c.req.param(\"slug\"), session.row.github_id],\n });\n if (!owned.rows.length) return c.json({ error: \"Public view not found\" }, 404);\n await sqlite.execute({\n sql: \"DELETE FROM view_comments WHERE view_slug = ?\",\n args: [c.req.param(\"slug\")],\n });\n const result = await sqlite.execute({\n sql: \"DELETE FROM views WHERE slug = ? AND creator_github_id = ?\",\n args: [c.req.param(\"slug\"), session.row.github_id],\n });\n return c.json({ ok: true });\n});\n\napp.get(\"/api/view-comments\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const result = await sqlite.execute({\n sql: `SELECT c.*, v.view_name, v.repo_full_name\n FROM view_comments c\n JOIN views v ON v.slug = c.view_slug\n WHERE v.creator_github_id = ? AND c.hidden_at IS NULL AND c.issue_number IS NOT NULL\n ORDER BY c.created_at DESC`,\n args: [session.row.github_id],\n });\n return c.json({\n comments: result.rows.map((row: any) => safeViewComment(row, \"\", session.row.github_id)),\n });\n});\n\napp.delete(\"/api/view-comments/:id\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const result = await sqlite.execute({\n sql: `UPDATE view_comments SET hidden_at = CURRENT_TIMESTAMP\n WHERE id = ? AND view_slug IN (\n SELECT slug FROM views WHERE creator_github_id = ?\n )`,\n args: [c.req.param(\"id\"), session.row.github_id],\n });\n if (!result.rowsAffected) return c.json({ error: \"Comment not found\" }, 404);\n return c.json({ ok: true });\n});\n\napp.get(\"/api/public-view/:slug/health\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n if (!row) return c.json({ error: \"Shared view not found\" }, 404);\n const token = await creatorToken(Number(row.creator_github_id));\n if (!token) {\n return c.json({\n status: \"degraded\",\n source: \"github\",\n checked_at: new Date().toISOString(),\n message: \"The view owner needs to reconnect GitHub.\",\n }, 200, { \"Cache-Control\": \"no-store\" });\n }\n return c.json(await githubHealth(token), 200, { \"Cache-Control\": \"no-store\" });\n});\n\napp.get(\"/api/public-view/:slug/comments\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n if (!row) return c.json({ error: \"Shared view not found\" }, 404);\n const issueNumber = Number(c.req.query(\"issueNumber\"));\n const issueOwner = String(c.req.query(\"issueOwner\") ?? \"\");\n const issueRepo = String(c.req.query(\"issueRepo\") ?? \"\");\n if (!Number.isInteger(issueNumber) || issueNumber < 1) {\n return c.json({ error: \"A valid issue number is required.\" }, 400);\n }\n if (!issueOwner || !issueRepo) return c.json({ error: \"A valid issue repository is required.\" }, 400);\n const identity = await commenterIdentity(c);\n const githubId = identity.session?.row.github_id ?? null;\n const isOwner = Boolean(githubId && Number(row.creator_github_id) === Number(githubId));\n const args: any[] = [row.slug, issueNumber, `${issueOwner}/${issueRepo}`];\n let ownership = \"c.anonymous_hash = ?\";\n if (!isOwner) {\n args.push(identity.anonymousHash);\n }\n if (!isOwner && githubId) {\n ownership += \" OR c.commenter_github_id = ?\";\n args.push(githubId);\n }\n const result = await sqlite.execute({\n sql: `SELECT c.*, v.view_name, v.repo_full_name\n FROM view_comments c\n JOIN views v ON v.slug = c.view_slug\n WHERE c.view_slug = ? AND c.issue_number = ? AND c.issue_repo_full_name = ?\n AND c.hidden_at IS NULL ${isOwner ? \"\" : `AND (${ownership})`}\n ORDER BY c.created_at ASC`,\n args,\n });\n return c.json({\n comments: result.rows.map((comment: any) =>\n safeViewComment(comment, identity.anonymousHash, githubId)\n ),\n identity: identity.session ? {\n type: \"github\",\n login: identity.session.row.login,\n avatar_url: identity.session.row.avatar_url,\n } : {\n type: \"browser\",\n login: \"Guest viewer\",\n avatar_url: null,\n },\n isOwner,\n turnstileConfigured: Boolean(turnstileConfig().siteKey && turnstileConfig().secretKey),\n turnstileSiteKey: turnstileConfig().siteKey || null,\n }, 200, { \"Cache-Control\": \"no-store\" });\n});\n\napp.post(\"/api/public-view/:slug/comments\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n if (!row) return c.json({ error: \"Shared view not found\" }, 404);\n const body = await c.req.json();\n const text = String(body.body ?? \"\").trim();\n const issueNumber = Number(body.issueNumber);\n const issueOwner = String(body.issueOwner ?? \"\");\n const issueRepo = String(body.issueRepo ?? \"\");\n const displayName = String(body.displayName ?? \"\").trim().slice(0, 80);\n if (!text || text.length > 2000) {\n return c.json({ error: \"Comment must be between 1 and 2,000 characters.\" }, 400);\n }\n if (!Number.isInteger(issueNumber) || issueNumber < 1) {\n return c.json({ error: \"Feedback must be attached to a valid issue.\" }, 400);\n }\n if (!issueOwner || !issueRepo) {\n return c.json({ error: \"Feedback must be attached to a valid issue repository.\" }, 400);\n }\n const verification = await validateTurnstile(c, String(body.turnstileToken ?? \"\"));\n if (!verification.ok) return c.json({ error: verification.error }, verification.status as any);\n\n const identity = await commenterIdentity(c);\n const conf = requireConfig();\n const ip = c.req.header(\"cf-connecting-ip\") ?? c.req.header(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ?? \"\";\n const ipHash = ip ? await hmac(ip, conf.sessionSecret) : null;\n const recent = await sqlite.execute({\n sql: `SELECT\n SUM(CASE WHEN anonymous_hash = ? AND created_at > datetime('now', '-10 minutes') THEN 1 ELSE 0 END) AS identity_count,\n SUM(CASE WHEN ip_hash = ? AND created_at > datetime('now', '-1 hour') THEN 1 ELSE 0 END) AS ip_count\n FROM view_comments`,\n args: [identity.anonymousHash, ipHash],\n });\n const counts = recent.rows[0] as any;\n if (Number(counts?.identity_count ?? 0) >= 5 || Number(counts?.ip_count ?? 0) >= 20) {\n return c.json({ error: \"Comment limit reached. Please wait before sending another message.\" }, 429);\n }\n\n const { token, snapshot } = await liveView(row);\n if (!(await viewAllowsIssue(snapshot, issueOwner, issueRepo, issueNumber, token))) {\n return c.json({ error: \"This issue is no longer part of the public view.\" }, 400);\n }\n const issue = await githubFetch(\n `/repos/${encodeURIComponent(issueOwner)}/${encodeURIComponent(issueRepo)}/issues/${issueNumber}`,\n token,\n ).then((response) => response.json());\n const issueTitle = String(issue.title ?? `Issue #${issueNumber}`);\n\n const id = randomToken(12);\n const session = identity.session;\n await sqlite.execute({\n sql: `INSERT INTO view_comments (\n id, view_slug, issue_number, anonymous_hash, ip_hash, commenter_github_id,\n commenter_login, commenter_avatar_url, body, issue_title, issue_repo_full_name, display_name\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n id,\n row.slug,\n issueNumber,\n identity.anonymousHash,\n ipHash,\n session?.row.github_id ?? null,\n session?.row.login ?? null,\n session?.row.avatar_url ?? null,\n text,\n issueTitle,\n `${issueOwner}/${issueRepo}`,\n session ? session.row.login : displayName || null,\n ],\n });\n const inserted = await sqlite.execute({\n sql: `SELECT c.*, v.view_name, v.repo_full_name\n FROM view_comments c JOIN views v ON v.slug = c.view_slug WHERE c.id = ?`,\n args: [id],\n });\n return c.json({\n comment: safeViewComment(inserted.rows[0], identity.anonymousHash, session?.row.github_id),\n }, 201);\n});\n\napp.delete(\"/api/public-view/:slug/comments/:id\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n if (!row) return c.json({ error: \"Shared view not found\" }, 404);\n const identity = await commenterIdentity(c);\n const githubId = identity.session?.row.github_id ?? null;\n const args: any[] = [c.req.param(\"id\"), row.slug, identity.anonymousHash];\n let ownership = \"anonymous_hash = ?\";\n if (githubId) {\n ownership += \" OR commenter_github_id = ?\";\n args.push(githubId);\n }\n const result = await sqlite.execute({\n sql: `UPDATE view_comments SET hidden_at = CURRENT_TIMESTAMP\n WHERE id = ? AND view_slug = ? AND (${ownership})`,\n args,\n });\n if (!result.rowsAffected) return c.json({ error: \"Comment not found\" }, 404);\n return c.json({ ok: true });\n});\n\napp.get(\"/api/public-view/:slug\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n if (!row) return c.json({ error: \"Shared view not found\" }, 404);\n const { snapshot } = await liveView(row);\n return c.json(snapshot, 200, { \"Cache-Control\": \"no-store\" });\n});\n\napp.get(\"/api/public-view/:slug/issues/:owner/:repo/:number\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n if (!row) return c.json({ error: \"Shared view not found\" }, 404);\n const { owner, repo, number } = c.req.param();\n const issueNumber = Number(number);\n const { token, snapshot } = await liveView(row);\n if (\n !Number.isInteger(issueNumber) ||\n !(await viewAllowsIssue(snapshot, owner, repo, issueNumber, token))\n ) {\n return c.json({ error: \"Issue is not part of this public view\" }, 404);\n }\n const detail = await issueSnapshot(owner, repo, issueNumber, token, true);\n return c.json({ ...detail, sync: syncMeta() }, 200, { \"Cache-Control\": \"no-store\" });\n});\n\napp.get(\"/api/public/:slug\", async (c) => {\n const row = await getShareRow(c.req.param(\"slug\"));\n if (!row) return c.json({ error: \"Shared issue not found\" }, 404);\n return c.json({\n ...JSON.parse(String(row.snapshot_json)),\n share: { include_sub_issues: Boolean(row.include_sub_issues), created_at: row.created_at },\n });\n});\n\napp.onError((err, c) => {\n console.error(err);\n return c.json({ error: err instanceof Error ? err.message : \"Unexpected error\" }, 500);\n});\n\nexport default app.fetch;\n","import { parseVal, readFile, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { Hono } from \"npm:hono\";\nimport { deleteCookie, getCookie, setCookie } from \"npm:hono/cookie\";\nimport { issueOgImage, viewOgImage } from \"./issue-og.tsx\";\n\nconst app = new Hono();\nconst GH_API = \"https://api.github.com\";\nconst GH_VERSION = \"2026-03-10\";\n\ntype SessionRow = {\n id: string;\n github_id: number;\n login: string;\n avatar_url: string;\n access_token: string;\n refresh_token: string | null;\n token_expires_at: number | null;\n refresh_expires_at: number | null;\n};\n\nawait sqlite.batch([\n `CREATE TABLE IF NOT EXISTS sessions (\n id TEXT PRIMARY KEY,\n github_id INTEGER NOT NULL,\n login TEXT NOT NULL,\n avatar_url TEXT NOT NULL,\n access_token TEXT NOT NULL,\n refresh_token TEXT,\n token_expires_at INTEGER,\n refresh_expires_at INTEGER,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n )`,\n `CREATE TABLE IF NOT EXISTS shares (\n slug TEXT PRIMARY KEY,\n creator_github_id INTEGER NOT NULL,\n repo_full_name TEXT NOT NULL,\n issue_number INTEGER NOT NULL,\n include_sub_issues INTEGER NOT NULL,\n snapshot_json TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n )`,\n `CREATE INDEX IF NOT EXISTS shares_creator_idx ON shares(creator_github_id, created_at)`,\n `CREATE TABLE IF NOT EXISTS views (\n slug TEXT PRIMARY KEY,\n creator_github_id INTEGER NOT NULL,\n repo_full_name TEXT NOT NULL,\n view_name TEXT NOT NULL,\n filter_json TEXT NOT NULL,\n snapshot_json TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n )`,\n `CREATE INDEX IF NOT EXISTS views_creator_idx ON views(creator_github_id, created_at)`,\n `CREATE TABLE IF NOT EXISTS view_comments (\n id TEXT PRIMARY KEY,\n view_slug TEXT NOT NULL,\n issue_number INTEGER,\n anonymous_hash TEXT NOT NULL,\n ip_hash TEXT,\n commenter_github_id INTEGER,\n commenter_login TEXT,\n commenter_avatar_url TEXT,\n body TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n hidden_at TEXT,\n FOREIGN KEY (view_slug) REFERENCES views(slug) ON DELETE CASCADE\n )`,\n `CREATE INDEX IF NOT EXISTS view_comments_view_idx ON view_comments(view_slug, created_at)`,\n `CREATE INDEX IF NOT EXISTS view_comments_identity_idx ON view_comments(anonymous_hash, created_at)`,\n]);\ntry {\n await sqlite.execute(\"ALTER TABLE view_comments ADD COLUMN issue_title TEXT\");\n} catch {\n // Existing deployments already have this column after the first migration.\n}\ntry {\n await sqlite.execute(\"ALTER TABLE view_comments ADD COLUMN issue_repo_full_name TEXT\");\n} catch {\n // Existing deployments already have this column after the first migration.\n}\ntry {\n await sqlite.execute(\"ALTER TABLE view_comments ADD COLUMN display_name TEXT\");\n} catch {\n // Existing deployments already have this column after the first migration.\n}\nawait sqlite.execute(`\n UPDATE view_comments\n SET issue_repo_full_name = (\n SELECT repo_full_name FROM views WHERE views.slug = view_comments.view_slug\n )\n WHERE issue_number IS NOT NULL AND issue_repo_full_name IS NULL\n`);\n\nfunction config() {\n return {\n clientId: Deno.env.get(\"GITHUB_CLIENT_ID\") ?? \"\",\n clientSecret: Deno.env.get(\"GITHUB_CLIENT_SECRET\") ?? \"\",\n appSlug: Deno.env.get(\"GITHUB_APP_SLUG\") ?? \"\",\n sessionSecret: Deno.env.get(\"SESSION_SECRET\") ?? \"\",\n };\n}\n\nfunction turnstileConfig() {\n return {\n siteKey: Deno.env.get(\"TURNSTILE_SITE_KEY\") ?? \"\",\n secretKey: Deno.env.get(\"TURNSTILE_SECRET_KEY\") ?? \"\",\n };\n}\n\nfunction requireConfig() {\n const c = config();\n const missing = Object.entries(c).filter(([, value]) => !value).map(([key]) => key);\n if (missing.length) throw new Error(`Missing configuration: ${missing.join(\", \")}`);\n return c;\n}\n\nfunction bytesToBase64Url(bytes: Uint8Array) {\n return btoa(String.fromCharCode(...bytes))\n .replaceAll(\"+\", \"-\")\n .replaceAll(\"/\", \"_\")\n .replaceAll(\"=\", \"\");\n}\n\nfunction base64UrlToBytes(value: string) {\n const padded = value.replaceAll(\"-\", \"+\").replaceAll(\"_\", \"/\") +\n \"=\".repeat((4 - value.length % 4) % 4);\n return Uint8Array.from(atob(padded), (char) => char.charCodeAt(0));\n}\n\nfunction randomToken(size = 32) {\n return bytesToBase64Url(crypto.getRandomValues(new Uint8Array(size)));\n}\n\nasync function sha256(value: string) {\n return new Uint8Array(await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(value)));\n}\n\nasync function hmac(value: string, secret: string) {\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n return bytesToBase64Url(new Uint8Array(await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(value))));\n}\n\nasync function sealCookie(payload: Record, secret: string) {\n const body = bytesToBase64Url(new TextEncoder().encode(JSON.stringify(payload)));\n return `${body}.${await hmac(body, secret)}`;\n}\n\nasync function openCookie(value: string | undefined, secret: string) {\n if (!value) return null;\n const [body, signature] = value.split(\".\");\n if (!body || !signature || await hmac(body, secret) !== signature) return null;\n try {\n return JSON.parse(new TextDecoder().decode(base64UrlToBytes(body)));\n } catch {\n return null;\n }\n}\n\nasync function encryptionKey(secret: string) {\n return crypto.subtle.importKey(\"raw\", await sha256(secret), \"AES-GCM\", false, [\"encrypt\", \"decrypt\"]);\n}\n\nasync function encrypt(value: string, secret: string) {\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const encrypted = new Uint8Array(await crypto.subtle.encrypt(\n { name: \"AES-GCM\", iv },\n await encryptionKey(secret),\n new TextEncoder().encode(value),\n ));\n return `${bytesToBase64Url(iv)}.${bytesToBase64Url(encrypted)}`;\n}\n\nasync function decrypt(value: string, secret: string) {\n const [iv, encrypted] = value.split(\".\");\n const clear = await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv: base64UrlToBytes(iv) },\n await encryptionKey(secret),\n base64UrlToBytes(encrypted),\n );\n return new TextDecoder().decode(clear);\n}\n\nfunction githubHeaders(token: string) {\n return {\n Accept: \"application/vnd.github.full+json\",\n Authorization: `Bearer ${token}`,\n \"X-GitHub-Api-Version\": GH_VERSION,\n \"User-Agent\": \"Val-Town-Issue-Share\",\n };\n}\n\nasync function githubFetch(path: string, token: string, init: RequestInit = {}) {\n const response = await fetch(`${GH_API}${path}`, {\n ...init,\n headers: { ...githubHeaders(token), ...(init.headers ?? {}) },\n });\n if (!response.ok) {\n const detail = await response.text();\n throw new Error(`GitHub ${response.status}: ${detail.slice(0, 400)}`);\n }\n return response;\n}\n\nasync function githubAllPages(path: string, token: string, key?: string) {\n const items: any[] = [];\n for (let page = 1; page <= 100; page++) {\n const separator = path.includes(\"?\") ? \"&\" : \"?\";\n const data = await githubFetch(`${path}${separator}per_page=100&page=${page}`, token).then((r) => r.json());\n const batch = key ? data[key] ?? [] : data;\n if (!Array.isArray(batch)) throw new Error(\"Unexpected paginated response from GitHub\");\n items.push(...batch);\n if (batch.length < 100) break;\n }\n return items;\n}\n\nasync function githubGraphql(query: string, variables: Record, token: string) {\n const payload = await githubFetch(\"/graphql\", token, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ query, variables }),\n }).then((response) => response.json());\n if (payload.errors?.length) {\n throw new Error(`GitHub GraphQL: ${payload.errors.map((error: any) => error.message).join(\"; \")}`);\n }\n return payload.data;\n}\n\nasync function refreshSession(row: SessionRow) {\n const c = requireConfig();\n if (!row.refresh_token || (row.refresh_expires_at && row.refresh_expires_at < Date.now())) return null;\n const params = new URLSearchParams({\n client_id: c.clientId,\n client_secret: c.clientSecret,\n grant_type: \"refresh_token\",\n refresh_token: await decrypt(row.refresh_token, c.sessionSecret),\n });\n const response = await fetch(\"https://github.com/login/oauth/access_token\", {\n method: \"POST\",\n headers: { Accept: \"application/json\", \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: params,\n });\n const tokens = await response.json();\n if (!response.ok || !tokens.access_token) return null;\n await sqlite.execute({\n sql: `UPDATE sessions SET access_token = ?, refresh_token = ?, token_expires_at = ?,\n refresh_expires_at = ?, updated_at = CURRENT_TIMESTAMP WHERE id = ?`,\n args: [\n await encrypt(tokens.access_token, c.sessionSecret),\n tokens.refresh_token ? await encrypt(tokens.refresh_token, c.sessionSecret) : row.refresh_token,\n tokens.expires_in ? Date.now() + tokens.expires_in * 1000 : null,\n tokens.refresh_token_expires_in ? Date.now() + tokens.refresh_token_expires_in * 1000 : row.refresh_expires_at,\n row.id,\n ],\n });\n return tokens.access_token as string;\n}\n\nasync function tokenForSessionRow(row: SessionRow) {\n const conf = requireConfig();\n let token = await decrypt(row.access_token, conf.sessionSecret);\n if (row.token_expires_at && row.token_expires_at < Date.now() + 60_000) {\n token = await refreshSession(row) ?? \"\";\n }\n return token || null;\n}\n\nasync function creatorToken(githubId: number) {\n const result = await sqlite.execute({\n sql: \"SELECT * FROM sessions WHERE github_id = ? ORDER BY updated_at DESC LIMIT 1\",\n args: [githubId],\n });\n const row = result.rows[0] as unknown as SessionRow | undefined;\n return row ? await tokenForSessionRow(row) : null;\n}\n\nasync function currentSession(c: any) {\n const id = getCookie(c, \"issue_share_session\");\n if (!id) return null;\n const result = await sqlite.execute({ sql: \"SELECT * FROM sessions WHERE id = ?\", args: [id] });\n const row = result.rows[0] as unknown as SessionRow | undefined;\n if (!row) return null;\n const token = await tokenForSessionRow(row);\n if (!token) return null;\n return { row, token };\n}\n\nasync function requireSession(c: any) {\n const session = await currentSession(c);\n if (!session) return c.json({ error: \"Authentication required\" }, 401);\n return session;\n}\n\nfunction syncMeta() {\n return {\n status: \"live\",\n source: \"github\",\n checked_at: new Date().toISOString(),\n };\n}\n\nasync function githubHealth(token: string) {\n const checkedAt = new Date().toISOString();\n try {\n const response = await githubFetch(\"/rate_limit\", token);\n const remaining = Number(response.headers.get(\"x-ratelimit-remaining\") ?? \"\");\n return {\n status: \"live\",\n source: \"github\",\n checked_at: checkedAt,\n rate_limit_remaining: Number.isFinite(remaining) ? remaining : null,\n };\n } catch {\n return {\n status: \"degraded\",\n source: \"github\",\n checked_at: checkedAt,\n message: \"GitHub could not be reached with the connected account.\",\n };\n }\n}\n\nasync function commenterIdentity(c: any) {\n const conf = requireConfig();\n let cookie = await openCookie(getCookie(c, \"issue_share_commenter\"), conf.sessionSecret);\n if (!cookie?.id) {\n cookie = { id: randomToken(), createdAt: Date.now() };\n setCookie(c, \"issue_share_commenter\", await sealCookie(cookie, conf.sessionSecret), {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n maxAge: 60 * 60 * 24 * 365,\n });\n }\n const session = await currentSession(c);\n return {\n anonymousHash: await hmac(String(cookie.id), conf.sessionSecret),\n session,\n };\n}\n\nasync function validateTurnstile(c: any, token: string) {\n const turnstile = turnstileConfig();\n if (!turnstile.siteKey || !turnstile.secretKey) {\n return { ok: false, status: 503, error: \"Public comments are not configured yet.\" };\n }\n if (!token || token.length > 2048) {\n return { ok: false, status: 400, error: \"Please complete the security check.\" };\n }\n const response = await fetch(\"https://challenges.cloudflare.com/turnstile/v0/siteverify\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n secret: turnstile.secretKey,\n response: token,\n remoteip: c.req.header(\"cf-connecting-ip\") ?? undefined,\n idempotency_key: crypto.randomUUID(),\n }),\n });\n const result = await response.json();\n const hostname = new URL(c.req.url).hostname;\n if (!response.ok || !result.success || result.action !== \"comment\" || result.hostname !== hostname) {\n return { ok: false, status: 400, error: \"Security check failed. Please try again.\" };\n }\n return { ok: true, status: 200, error: \"\" };\n}\n\nfunction safeIssue(issue: any) {\n return {\n id: issue.id,\n number: issue.number,\n title: issue.title,\n state: issue.state,\n state_reason: issue.state_reason,\n body: issue.body ?? \"\",\n body_text: issue.body_text ?? \"\",\n body_html: issue.body_html ?? \"\",\n html_url: issue.html_url,\n created_at: issue.created_at,\n updated_at: issue.updated_at,\n closed_at: issue.closed_at,\n comments_count: issue.comments ?? 0,\n author: issue.user ? {\n login: issue.user.login,\n avatar_url: issue.user.avatar_url,\n html_url: issue.user.html_url,\n } : null,\n labels: (issue.labels ?? []).map((label: any) =>\n typeof label === \"string\" ? { name: label, color: \"6b7280\", description: null } : {\n name: label.name,\n color: label.color,\n description: label.description,\n }\n ),\n assignees: (issue.assignees ?? []).map((user: any) => ({\n login: user.login,\n avatar_url: user.avatar_url,\n html_url: user.html_url,\n })),\n milestone: issue.milestone ? {\n title: issue.milestone.title,\n state: issue.milestone.state,\n due_on: issue.milestone.due_on,\n html_url: issue.milestone.html_url,\n } : null,\n };\n}\n\nfunction safeComment(comment: any) {\n return {\n id: comment.id,\n body: comment.body ?? \"\",\n body_text: comment.body_text ?? \"\",\n body_html: comment.body_html ?? \"\",\n created_at: comment.created_at,\n updated_at: comment.updated_at,\n html_url: comment.html_url,\n author: comment.user ? {\n login: comment.user.login,\n avatar_url: comment.user.avatar_url,\n html_url: comment.user.html_url,\n } : null,\n };\n}\n\nasync function issueSnapshot(\n owner: string,\n repo: string,\n number: number,\n token: string,\n includeSubIssues: boolean,\n): Promise {\n const issuePromise = githubFetch(`/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}`, token)\n .then((r) => r.json());\n const commentsPromise = githubAllPages(\n `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}/comments`,\n token,\n );\n const parentPromise = parentIssueReference(owner, repo, number, token);\n const childrenPromise = includeSubIssues\n ? githubAllPages(\n `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}/sub_issues`,\n token,\n )\n : Promise.resolve([]);\n const [issue, comments, parentIssue, children] = await Promise.all([\n issuePromise,\n commentsPromise,\n parentPromise,\n childrenPromise,\n ]);\n const subIssues: any[] = await Promise.all(children.map(async (child: any): Promise => {\n const childRepoUrl = new URL(child.repository_url);\n const parts = childRepoUrl.pathname.split(\"/\").filter(Boolean);\n const childOwner = parts.at(-2) ?? owner;\n const childRepo = parts.at(-1) ?? repo;\n return issueSnapshot(childOwner, childRepo, child.number, token, true);\n }));\n return {\n repository: { owner, name: repo, full_name: `${owner}/${repo}` },\n issue: safeIssue(issue),\n comments: comments.map(safeComment),\n sub_issues: subIssues,\n parent_issue: parentIssue,\n };\n}\n\nfunction issueReference(owner: string, repo: string, issue: any) {\n return {\n repository: { owner, name: repo, full_name: `${owner}/${repo}` },\n issue: safeIssue(issue),\n comments: [],\n sub_issues: [],\n parent_issue: null,\n };\n}\n\nasync function parentIssueReference(owner: string, repo: string, number: number, token: string) {\n const response = await fetch(\n `${GH_API}/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}/parent`,\n { headers: githubHeaders(token) },\n );\n if (response.status === 404) return null;\n if (!response.ok) {\n const detail = await response.text();\n throw new Error(`GitHub ${response.status}: ${detail.slice(0, 400)}`);\n }\n const parent = await response.json();\n const parentRepoUrl = new URL(parent.repository_url);\n const parts = parentRepoUrl.pathname.split(\"/\").filter(Boolean);\n const parentOwner = parts.at(-2) ?? owner;\n const parentRepo = parts.at(-1) ?? repo;\n return issueReference(parentOwner, parentRepo, parent);\n}\n\nasync function subIssueSnapshots(\n owner: string,\n repo: string,\n number: number,\n token: string,\n parentReference: any,\n): Promise {\n const children = await githubAllPages(\n `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${number}/sub_issues`,\n token,\n );\n return Promise.all(children.map(async (child: any) => {\n const childRepoUrl = new URL(child.repository_url);\n const parts = childRepoUrl.pathname.split(\"/\").filter(Boolean);\n const childOwner = parts.at(-2) ?? owner;\n const childRepo = parts.at(-1) ?? repo;\n const hasChildren = Number(child.sub_issues_summary?.total ?? 0) > 0;\n const childReference = issueReference(childOwner, childRepo, child);\n return {\n ...childReference,\n parent_issue: parentReference,\n sub_issues: hasChildren\n ? await subIssueSnapshots(childOwner, childRepo, child.number, token, childReference)\n : [],\n };\n }));\n}\n\nasync function getShareRow(slug: string) {\n const result = await sqlite.execute({\n sql: `SELECT slug, creator_github_id, repo_full_name, issue_number,\n include_sub_issues, snapshot_json, created_at FROM shares WHERE slug = ?`,\n args: [slug],\n });\n return result.rows[0] as any;\n}\n\nasync function getViewRow(slug: string) {\n const result = await sqlite.execute({\n sql: `SELECT slug, creator_github_id, repo_full_name, view_name,\n filter_json, snapshot_json, created_at FROM views WHERE slug = ?`,\n args: [slug],\n });\n return result.rows[0] as any;\n}\n\nfunction escapeHtml(value: string) {\n return value\n .replaceAll(\"&\", \"&\")\n .replaceAll(\"<\", \"<\")\n .replaceAll(\">\", \">\")\n .replaceAll('\"', \""\")\n .replaceAll(\"'\", \"'\");\n}\n\nfunction shareDescription(snapshot: any) {\n const body = String(snapshot.issue?.body_text || snapshot.issue?.body || \"\")\n .replace(/!\\[[^\\]]*\\]\$[^)]*\$/g, \"\")\n .replace(/\\[([^\\]]+)\\]\$[^)]*\$/g, \"$1\")\n .replace(/[`*_>#~]/g, \"\")\n .replace(/\\s+/g, \" \")\n .trim();\n const fallback = `A shared GitHub issue from ${snapshot.repository?.full_name ?? \"Issue Share\"}.`;\n return (body || fallback).slice(0, 200);\n}\n\nfunction viewState(value: unknown) {\n return value === \"closed\" ? \"closed\" : value === \"all\" ? \"all\" : \"open\";\n}\n\nfunction viewMatches(issue: any, query: string) {\n const needle = query.toLowerCase().trim();\n if (!needle) return true;\n return issue.title.toLowerCase().includes(needle) ||\n String(issue.number).includes(needle) ||\n issue.labels.some((label: any) => label.name.toLowerCase().includes(needle));\n}\n\nasync function repositoryIssues(owner: string, repo: string, state: string, token: string) {\n const issues = await githubAllPages(\n `/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues?state=${state}&sort=updated&direction=desc`,\n token,\n );\n const actualIssues = issues.filter((issue: any) => !issue.pull_request);\n const relationships = new Map();\n const relationshipQuery = `\n query IssueRelationships($ids: [ID!]!) {\n nodes(ids: $ids) {\n ... on Issue {\n id\n parent { id }\n subIssuesSummary {\n total\n }\n }\n }\n }\n `;\n for (let index = 0; index < actualIssues.length; index += 100) {\n const batch = actualIssues.slice(index, index + 100);\n const data = await githubGraphql(\n relationshipQuery,\n { ids: batch.map((issue: any) => issue.node_id) },\n token,\n );\n for (const issue of data.nodes ?? []) {\n if (!issue) continue;\n relationships.set(issue.id, {\n hasParent: Boolean(issue.parent),\n subIssueCount: Number(issue.subIssuesSummary?.total ?? 0),\n });\n }\n }\n const parentIssues = actualIssues.filter((issue: any) => !relationships.get(issue.node_id)?.hasParent);\n return parentIssues.map((issue: any) => ({\n ...safeIssue(issue),\n sub_issue_count: relationships.get(issue.node_id)?.subIssueCount ?? 0,\n sub_issues: [],\n }));\n}\n\nasync function liveView(row: any) {\n const token = await creatorToken(Number(row.creator_github_id));\n if (!token) throw new Error(\"The view owner needs to reconnect GitHub\");\n const filter = JSON.parse(String(row.filter_json));\n const state = viewState(filter.state);\n const query = String(filter.query ?? \"\");\n const [owner, repo] = String(row.repo_full_name).split(\"/\");\n if (!owner || !repo) throw new Error(\"Invalid repository for public view\");\n const issues = (await repositoryIssues(owner, repo, state, token))\n .filter((issue: any) => viewMatches(issue, query));\n return {\n token,\n snapshot: {\n repository: { owner, name: repo, full_name: `${owner}/${repo}` },\n view: { name: row.view_name, state, query },\n issues,\n share: { created_at: row.created_at, live: true },\n sync: syncMeta(),\n },\n };\n}\n\nfunction safeViewComment(row: any, anonymousHash: string, githubId?: number | null) {\n const createdAt = String(row.created_at ?? \"\");\n return {\n id: row.id,\n view_slug: row.view_slug,\n view_name: row.view_name,\n repo_full_name: row.repo_full_name,\n issue_number: row.issue_number ? Number(row.issue_number) : null,\n issue_title: row.issue_title ?? null,\n issue_repo_full_name: row.issue_repo_full_name ?? row.repo_full_name ?? null,\n display_name: row.display_name ?? row.commenter_login ?? null,\n body: row.body,\n created_at: createdAt.includes(\"T\") ? createdAt : `${createdAt.replace(\" \", \"T\")}Z`,\n author: row.commenter_github_id ? {\n type: \"github\",\n login: row.commenter_login,\n avatar_url: row.commenter_avatar_url,\n } : {\n type: \"browser\",\n login: row.display_name || row.commenter_login || \"Guest viewer\",\n avatar_url: null,\n },\n mine: row.anonymous_hash === anonymousHash ||\n (githubId && Number(row.commenter_github_id) === githubId) || false,\n };\n}\n\nfunction snapshotContainsIssue(snapshot: any, fullName: string, number: number): boolean {\n if (snapshot.repository?.full_name === fullName && snapshot.issue?.number === number) return true;\n return (snapshot.sub_issues ?? []).some((child: any) => snapshotContainsIssue(child, fullName, number));\n}\n\nfunction viewContainsIssue(view: any, fullName: string, number: number) {\n return (view.issues ?? []).some((issue: any) => {\n if (view.repository?.full_name === fullName && issue.number === number) return true;\n return (issue.sub_issues ?? []).some((child: any) => snapshotContainsIssue(child, fullName, number));\n });\n}\n\nasync function viewAllowsIssue(view: any, owner: string, repo: string, number: number, token: string) {\n if (viewContainsIssue(view, `${owner}/${repo}`, number)) return true;\n let parent = await parentIssueReference(owner, repo, number, token);\n for (let depth = 0; parent && depth < 10; depth += 1) {\n if (viewContainsIssue(view, parent.repository.full_name, parent.issue.number)) return true;\n parent = await parentIssueReference(\n parent.repository.owner,\n parent.repository.name,\n parent.issue.number,\n token,\n );\n }\n return false;\n}\n\napp.get(\"/\", () => serveFile(\"/frontend/index.html\"));\napp.get(\"/s/:slug\", async (c) => {\n const row = await getShareRow(c.req.param(\"slug\"));\n const shell = await readFile(\"/frontend/share.html\");\n const origin = new URL(c.req.url).origin;\n const url = `${origin}/s/${c.req.param(\"slug\")}`;\n const image = row ? `${origin}/og/${row.slug}/image.png` : `${origin}/og-image.png`;\n if (!row) {\n const title = \"Shared issue unavailable · Issue Share\";\n const description = \"This public issue link is unavailable or has been removed.\";\n const html = shell\n .replaceAll(\"__OG_TITLE__\", escapeHtml(title))\n .replaceAll(\"__OG_DESCRIPTION__\", escapeHtml(description))\n .replaceAll(\"__OG_URL__\", escapeHtml(url))\n .replaceAll(\"__OG_IMAGE__\", escapeHtml(image));\n return c.html(html, 404);\n }\n const snapshot = JSON.parse(String(row.snapshot_json));\n const title = `${snapshot.issue.title} · ${snapshot.repository.full_name} #${snapshot.issue.number}`;\n const description = shareDescription(snapshot);\n const html = shell\n .replaceAll(\"__OG_TITLE__\", escapeHtml(title))\n .replaceAll(\"__OG_DESCRIPTION__\", escapeHtml(description))\n .replaceAll(\"__OG_URL__\", escapeHtml(url))\n .replaceAll(\"__OG_IMAGE__\", escapeHtml(image));\n return new Response(html, {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"Cache-Control\": \"public, max-age=60\",\n },\n });\n});\napp.get(\"/v/:slug\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n const shell = await readFile(\"/frontend/share.html\");\n const origin = new URL(c.req.url).origin;\n const baseUrl = `${origin}/v/${c.req.param(\"slug\")}`;\n let url = baseUrl;\n let image = row ? `${origin}/og-view/${row.slug}/image.png` : `${origin}/og-image.png`;\n if (!row) {\n const title = \"Shared view unavailable · Issue Share\";\n const description = \"This public repository view is unavailable or has been removed.\";\n const html = shell\n .replaceAll(\"__OG_TITLE__\", escapeHtml(title))\n .replaceAll(\"__OG_DESCRIPTION__\", escapeHtml(description))\n .replaceAll(\"__OG_URL__\", escapeHtml(url))\n .replaceAll(\"__OG_IMAGE__\", escapeHtml(image));\n return c.html(html, 404);\n }\n\n let snapshot: any;\n let token: string;\n try {\n const live = await liveView(row);\n snapshot = live.snapshot;\n token = live.token;\n } catch (error) {\n return c.html(\n shell\n .replaceAll(\"__OG_TITLE__\", escapeHtml(\"Shared view temporarily unavailable · Issue Share\"))\n .replaceAll(\"__OG_DESCRIPTION__\", escapeHtml(error instanceof Error ? error.message : \"Unable to refresh this view from GitHub.\"))\n .replaceAll(\"__OG_URL__\", escapeHtml(url))\n .replaceAll(\"__OG_IMAGE__\", escapeHtml(image)),\n 503,\n );\n }\n\n const requestedIssue = c.req.query(\"issue\");\n const requestedRepo = String(c.req.query(\"repo\") ?? \"\");\n const issueNumber = requestedIssue ? Number(requestedIssue) : NaN;\n const [issueOwner, issueRepo, extraRepoPart] = requestedRepo.split(\"/\");\n let selectedIssue: any = null;\n\n if (\n Number.isInteger(issueNumber) &&\n issueNumber > 0 &&\n issueOwner &&\n issueRepo &&\n !extraRepoPart &&\n await viewAllowsIssue(snapshot, issueOwner, issueRepo, issueNumber, token)\n ) {\n try {\n selectedIssue = await issueSnapshot(issueOwner, issueRepo, issueNumber, token, true);\n } catch {\n // Fall back to the repository view card when GitHub cannot load the selected issue.\n }\n }\n\n let title: string;\n let description: string;\n if (selectedIssue) {\n const canonical = new URL(baseUrl);\n canonical.searchParams.set(\"issue\", String(issueNumber));\n canonical.searchParams.set(\"repo\", requestedRepo);\n url = canonical.toString();\n\n const imageUrl = new URL(`${origin}/og-view/${row.slug}/image.png`);\n imageUrl.searchParams.set(\"issue\", String(issueNumber));\n imageUrl.searchParams.set(\"repo\", requestedRepo);\n image = imageUrl.toString();\n\n title = `${selectedIssue.issue.title} · ${selectedIssue.repository.full_name} #${selectedIssue.issue.number}`;\n description = shareDescription(selectedIssue);\n } else {\n title = `${row.view_name} · Issue Share`;\n const count = snapshot.issues?.length ?? 0;\n description = `${count} live ${count === 1 ? \"issue\" : \"issues\"} from ${row.repo_full_name}, refreshed from GitHub.`;\n }\n\n const html = shell\n .replaceAll(\"__OG_TITLE__\", escapeHtml(title))\n .replaceAll(\"__OG_DESCRIPTION__\", escapeHtml(description))\n .replaceAll(\"__OG_URL__\", escapeHtml(url))\n .replaceAll(\"__OG_IMAGE__\", escapeHtml(image));\n return new Response(html, {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"Cache-Control\": \"public, max-age=60\",\n },\n });\n});\napp.get(\"/og-image\", () => serveFile(\"/frontend/og-image.html\"));\napp.get(\"/og/:slug/image.png\", async (c) => {\n const row = await getShareRow(c.req.param(\"slug\"));\n if (!row) return c.redirect(\"/og-image.png\", 302);\n return issueOgImage(JSON.parse(String(row.snapshot_json)));\n});\napp.get(\"/og-view/:slug/image.png\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n if (!row) return c.redirect(\"/og-image.png\", 302);\n try {\n const { token, snapshot } = await liveView(row);\n const requestedIssue = c.req.query(\"issue\");\n const requestedRepo = String(c.req.query(\"repo\") ?? \"\");\n const issueNumber = requestedIssue ? Number(requestedIssue) : NaN;\n const [issueOwner, issueRepo, extraRepoPart] = requestedRepo.split(\"/\");\n\n if (\n Number.isInteger(issueNumber) &&\n issueNumber > 0 &&\n issueOwner &&\n issueRepo &&\n !extraRepoPart &&\n await viewAllowsIssue(snapshot, issueOwner, issueRepo, issueNumber, token)\n ) {\n return issueOgImage(await issueSnapshot(issueOwner, issueRepo, issueNumber, token, true));\n }\n\n return viewOgImage(snapshot);\n } catch {\n return c.redirect(\"/og-image.png\", 302);\n }\n});\napp.get(\"/og-image.png\", async () => {\n try {\n const image = await blob.get(\"og-image.png\");\n return new Response(image.body, {\n headers: {\n \"Content-Type\": \"image/png\",\n \"Cache-Control\": \"public, max-age=31536000, immutable\",\n },\n });\n } catch {\n return new Response(\"Open Graph image unavailable\", { status: 404 });\n }\n});\napp.get(\"/frontend/**/*\", (c) => serveFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/api/config\", (c) => {\n const conf = config();\n const turnstile = turnstileConfig();\n return c.json({\n configured: Boolean(conf.clientId && conf.clientSecret && conf.appSlug && conf.sessionSecret),\n appSlug: conf.appSlug || null,\n turnstileSiteKey: turnstile.siteKey || null,\n turnstileConfigured: Boolean(turnstile.siteKey && turnstile.secretKey),\n });\n});\n\napp.get(\"/auth/github\", async (c) => {\n const conf = requireConfig();\n const state = randomToken();\n const verifier = randomToken(48);\n const challenge = bytesToBase64Url(await sha256(verifier));\n const requestedReturn = String(c.req.query(\"returnTo\") ?? \"\");\n const returnTo = /^\\/v\\/[A-Za-z0-9_-]+(?:#feedback)?$/.test(requestedReturn) ? requestedReturn : \"/\";\n const cookie = await sealCookie({ state, verifier, returnTo, createdAt: Date.now() }, conf.sessionSecret);\n setCookie(c, \"github_oauth\", cookie, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n maxAge: 600,\n });\n const redirectUri = `${new URL(c.req.url).origin}/auth/github/callback`;\n const params = new URLSearchParams({\n client_id: conf.clientId,\n redirect_uri: redirectUri,\n state,\n code_challenge: challenge,\n code_challenge_method: \"S256\",\n prompt: \"select_account\",\n });\n return c.redirect(`https://github.com/login/oauth/authorize?${params}`);\n});\n\napp.get(\"/auth/github/callback\", async (c) => {\n const conf = requireConfig();\n const saved = await openCookie(getCookie(c, \"github_oauth\"), conf.sessionSecret);\n deleteCookie(c, \"github_oauth\", { path: \"/\" });\n const code = c.req.query(\"code\");\n const state = c.req.query(\"state\");\n if (!saved || !code || state !== saved.state || Date.now() - saved.createdAt > 600_000) {\n return c.text(\"Invalid or expired GitHub login. Please try again.\", 400);\n }\n const redirectUri = `${new URL(c.req.url).origin}/auth/github/callback`;\n const params = new URLSearchParams({\n client_id: conf.clientId,\n client_secret: conf.clientSecret,\n code,\n redirect_uri: redirectUri,\n code_verifier: saved.verifier,\n });\n const tokenResponse = await fetch(\"https://github.com/login/oauth/access_token\", {\n method: \"POST\",\n headers: { Accept: \"application/json\", \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: params,\n });\n const tokens = await tokenResponse.json();\n if (!tokenResponse.ok || !tokens.access_token) {\n return c.text(`GitHub login failed: ${tokens.error_description ?? tokens.error ?? \"unknown error\"}`, 400);\n }\n const user = await githubFetch(\"/user\", tokens.access_token).then((r) => r.json());\n const sessionId = randomToken();\n await sqlite.execute({\n sql: `INSERT INTO sessions (\n id, github_id, login, avatar_url, access_token, refresh_token, token_expires_at, refresh_expires_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n sessionId,\n user.id,\n user.login,\n user.avatar_url,\n await encrypt(tokens.access_token, conf.sessionSecret),\n tokens.refresh_token ? await encrypt(tokens.refresh_token, conf.sessionSecret) : null,\n tokens.expires_in ? Date.now() + tokens.expires_in * 1000 : null,\n tokens.refresh_token_expires_in ? Date.now() + tokens.refresh_token_expires_in * 1000 : null,\n ],\n });\n setCookie(c, \"issue_share_session\", sessionId, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n maxAge: 60 * 60 * 24 * 30,\n });\n return c.redirect(String(saved.returnTo ?? \"/\"));\n});\n\napp.post(\"/auth/logout\", async (c) => {\n const id = getCookie(c, \"issue_share_session\");\n if (id) await sqlite.execute({ sql: \"DELETE FROM sessions WHERE id = ?\", args: [id] });\n deleteCookie(c, \"issue_share_session\", { path: \"/\" });\n return c.json({ ok: true });\n});\n\napp.get(\"/api/me\", async (c) => {\n const session = await currentSession(c);\n return c.json(session ? {\n authenticated: true,\n user: {\n id: session.row.github_id,\n login: session.row.login,\n avatar_url: session.row.avatar_url,\n },\n } : { authenticated: false });\n});\n\napp.get(\"/api/github-health\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n return c.json(await githubHealth(session.token), 200, { \"Cache-Control\": \"no-store\" });\n});\n\napp.get(\"/api/repos\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const installations = await githubAllPages(\"/user/installations\", session.token, \"installations\");\n const groups = await Promise.all(installations.map(async (installation: any) => {\n const repositories = await githubAllPages(\n `/user/installations/${installation.id}/repositories`,\n session.token,\n \"repositories\",\n );\n return {\n installation_id: installation.id,\n account: {\n login: installation.account.login,\n avatar_url: installation.account.avatar_url,\n type: installation.account.type,\n },\n repository_selection: installation.repository_selection,\n repositories: repositories.map((repo: any) => ({\n id: repo.id,\n name: repo.name,\n full_name: repo.full_name,\n private: repo.private,\n html_url: repo.html_url,\n open_issues_count: repo.open_issues_count,\n description: repo.description,\n })),\n };\n }));\n return c.json({ installations: groups, sync: syncMeta() });\n});\n\napp.get(\"/api/repos/:owner/:repo/issues\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const { owner, repo } = c.req.param();\n const page = Math.max(1, Number(c.req.query(\"page\") ?? 1));\n const state = c.req.query(\"state\") === \"closed\" ? \"closed\" : c.req.query(\"state\") === \"open\" ? \"open\" : \"all\";\n return c.json({ issues: await repositoryIssues(owner, repo, state, session.token), page, sync: syncMeta() });\n});\n\napp.get(\"/api/repos/:owner/:repo/issues/:number\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const { owner, repo, number } = c.req.param();\n const snapshot = await issueSnapshot(owner, repo, Number(number), session.token, c.req.query(\"subIssues\") === \"true\");\n return c.json({ ...snapshot, sync: syncMeta() });\n});\n\napp.post(\"/api/shares\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const body = await c.req.json();\n const owner = String(body.owner ?? \"\");\n const repo = String(body.repo ?? \"\");\n const number = Number(body.number);\n const includeSubIssues = Boolean(body.includeSubIssues);\n if (!owner || !repo || !Number.isInteger(number) || number < 1) {\n return c.json({ error: \"owner, repo, and a valid issue number are required\" }, 400);\n }\n const snapshot = await issueSnapshot(owner, repo, number, session.token, includeSubIssues);\n const slug = randomToken(12);\n await sqlite.execute({\n sql: `INSERT INTO shares (\n slug, creator_github_id, repo_full_name, issue_number, include_sub_issues, snapshot_json\n ) VALUES (?, ?, ?, ?, ?, ?)`,\n args: [\n slug,\n session.row.github_id,\n `${owner}/${repo}`,\n number,\n includeSubIssues ? 1 : 0,\n JSON.stringify(snapshot),\n ],\n });\n return c.json({ slug, url: `${new URL(c.req.url).origin}/s/${slug}` }, 201);\n});\n\napp.get(\"/api/shares\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const result = await sqlite.execute({\n sql: `SELECT slug, repo_full_name, issue_number, include_sub_issues,\n snapshot_json, created_at FROM shares\n WHERE creator_github_id = ? ORDER BY created_at DESC`,\n args: [session.row.github_id],\n });\n const origin = new URL(c.req.url).origin;\n const viewResult = await sqlite.execute({\n sql: `SELECT slug, repo_full_name, view_name, filter_json,\n snapshot_json, created_at FROM views\n WHERE creator_github_id = ? ORDER BY created_at DESC`,\n args: [session.row.github_id],\n });\n const commentCountResult = await sqlite.execute({\n sql: `SELECT c.view_slug, COUNT(*) AS comment_count\n FROM view_comments c\n JOIN views v ON v.slug = c.view_slug\n WHERE v.creator_github_id = ? AND c.hidden_at IS NULL\n GROUP BY c.view_slug`,\n args: [session.row.github_id],\n });\n const commentCounts = new Map(\n commentCountResult.rows.map((row: any) => [String(row.view_slug), Number(row.comment_count)]),\n );\n const shares = result.rows.map((row: any) => {\n const snapshot = JSON.parse(String(row.snapshot_json));\n return {\n type: \"issue\",\n slug: row.slug,\n url: `${origin}/s/${row.slug}`,\n repo_full_name: row.repo_full_name,\n issue_number: row.issue_number,\n title: snapshot.issue?.title ?? `Issue #${row.issue_number}`,\n include_sub_issues: Boolean(row.include_sub_issues),\n created_at: row.created_at,\n };\n });\n const views = viewResult.rows.map((row: any) => {\n const snapshot = JSON.parse(String(row.snapshot_json));\n const filter = JSON.parse(String(row.filter_json));\n return {\n type: \"view\",\n slug: row.slug,\n url: `${origin}/v/${row.slug}`,\n repo_full_name: row.repo_full_name,\n title: row.view_name,\n state: filter.state,\n query: filter.query,\n issue_count: snapshot.issues?.length ?? 0,\n comment_count: commentCounts.get(String(row.slug)) ?? 0,\n created_at: row.created_at,\n };\n });\n return c.json({\n shares,\n links: [...shares, ...views].sort((a, b) => String(b.created_at).localeCompare(String(a.created_at))),\n });\n});\n\napp.delete(\"/api/shares/:slug\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const result = await sqlite.execute({\n sql: \"DELETE FROM shares WHERE slug = ? AND creator_github_id = ?\",\n args: [c.req.param(\"slug\"), session.row.github_id],\n });\n if (!result.rowsAffected) return c.json({ error: \"Public link not found\" }, 404);\n return c.json({ ok: true });\n});\n\napp.post(\"/api/views\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const body = await c.req.json();\n const owner = String(body.owner ?? \"\");\n const repo = String(body.repo ?? \"\");\n const state = viewState(body.state);\n const query = String(body.query ?? \"\").trim().slice(0, 160);\n if (!owner || !repo) return c.json({ error: \"owner and repo are required\" }, 400);\n const allIssues = await repositoryIssues(owner, repo, state, session.token);\n const issues = allIssues.filter((issue: any) => viewMatches(issue, query));\n const stateLabel = state === \"all\" ? \"All issues\" : state === \"closed\" ? \"Closed issues\" : \"Open issues\";\n const viewName = String(body.name ?? \"\").trim().slice(0, 120) ||\n `${stateLabel}${query ? ` matching “${query}”` : \"\"}`;\n const slug = randomToken(12);\n const snapshot = {\n repository: { owner, name: repo, full_name: `${owner}/${repo}` },\n view: { name: viewName, state, query },\n issues,\n };\n await sqlite.execute({\n sql: `INSERT INTO views (\n slug, creator_github_id, repo_full_name, view_name, filter_json, snapshot_json\n ) VALUES (?, ?, ?, ?, ?, ?)`,\n args: [\n slug,\n session.row.github_id,\n `${owner}/${repo}`,\n viewName,\n JSON.stringify({ state, query }),\n JSON.stringify(snapshot),\n ],\n });\n return c.json({ slug, url: `${new URL(c.req.url).origin}/v/${slug}` }, 201);\n});\n\napp.delete(\"/api/views/:slug\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const owned = await sqlite.execute({\n sql: \"SELECT slug FROM views WHERE slug = ? AND creator_github_id = ?\",\n args: [c.req.param(\"slug\"), session.row.github_id],\n });\n if (!owned.rows.length) return c.json({ error: \"Public view not found\" }, 404);\n await sqlite.execute({\n sql: \"DELETE FROM view_comments WHERE view_slug = ?\",\n args: [c.req.param(\"slug\")],\n });\n const result = await sqlite.execute({\n sql: \"DELETE FROM views WHERE slug = ? AND creator_github_id = ?\",\n args: [c.req.param(\"slug\"), session.row.github_id],\n });\n return c.json({ ok: true });\n});\n\napp.get(\"/api/view-comments\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const result = await sqlite.execute({\n sql: `SELECT c.*, v.view_name, v.repo_full_name\n FROM view_comments c\n JOIN views v ON v.slug = c.view_slug\n WHERE v.creator_github_id = ? AND c.hidden_at IS NULL AND c.issue_number IS NOT NULL\n ORDER BY c.created_at DESC`,\n args: [session.row.github_id],\n });\n return c.json({\n comments: result.rows.map((row: any) => safeViewComment(row, \"\", session.row.github_id)),\n });\n});\n\napp.delete(\"/api/view-comments/:id\", async (c) => {\n const session = await requireSession(c);\n if (session instanceof Response) return session;\n const result = await sqlite.execute({\n sql: `UPDATE view_comments SET hidden_at = CURRENT_TIMESTAMP\n WHERE id = ? AND view_slug IN (\n SELECT slug FROM views WHERE creator_github_id = ?\n )`,\n args: [c.req.param(\"id\"), session.row.github_id],\n });\n if (!result.rowsAffected) return c.json({ error: \"Comment not found\" }, 404);\n return c.json({ ok: true });\n});\n\napp.get(\"/api/public-view/:slug/health\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n if (!row) return c.json({ error: \"Shared view not found\" }, 404);\n const token = await creatorToken(Number(row.creator_github_id));\n if (!token) {\n return c.json({\n status: \"degraded\",\n source: \"github\",\n checked_at: new Date().toISOString(),\n message: \"The view owner needs to reconnect GitHub.\",\n }, 200, { \"Cache-Control\": \"no-store\" });\n }\n return c.json(await githubHealth(token), 200, { \"Cache-Control\": \"no-store\" });\n});\n\napp.get(\"/api/public-view/:slug/comments\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n if (!row) return c.json({ error: \"Shared view not found\" }, 404);\n const issueNumber = Number(c.req.query(\"issueNumber\"));\n const issueOwner = String(c.req.query(\"issueOwner\") ?? \"\");\n const issueRepo = String(c.req.query(\"issueRepo\") ?? \"\");\n if (!Number.isInteger(issueNumber) || issueNumber < 1) {\n return c.json({ error: \"A valid issue number is required.\" }, 400);\n }\n if (!issueOwner || !issueRepo) return c.json({ error: \"A valid issue repository is required.\" }, 400);\n const identity = await commenterIdentity(c);\n const githubId = identity.session?.row.github_id ?? null;\n const isOwner = Boolean(githubId && Number(row.creator_github_id) === Number(githubId));\n const args: any[] = [row.slug, issueNumber, `${issueOwner}/${issueRepo}`];\n let ownership = \"c.anonymous_hash = ?\";\n if (!isOwner) {\n args.push(identity.anonymousHash);\n }\n if (!isOwner && githubId) {\n ownership += \" OR c.commenter_github_id = ?\";\n args.push(githubId);\n }\n const result = await sqlite.execute({\n sql: `SELECT c.*, v.view_name, v.repo_full_name\n FROM view_comments c\n JOIN views v ON v.slug = c.view_slug\n WHERE c.view_slug = ? AND c.issue_number = ? AND c.issue_repo_full_name = ?\n AND c.hidden_at IS NULL ${isOwner ? \"\" : `AND (${ownership})`}\n ORDER BY c.created_at ASC`,\n args,\n });\n return c.json({\n comments: result.rows.map((comment: any) =>\n safeViewComment(comment, identity.anonymousHash, githubId)\n ),\n identity: identity.session ? {\n type: \"github\",\n login: identity.session.row.login,\n avatar_url: identity.session.row.avatar_url,\n } : {\n type: \"browser\",\n login: \"Guest viewer\",\n avatar_url: null,\n },\n isOwner,\n turnstileConfigured: Boolean(turnstileConfig().siteKey && turnstileConfig().secretKey),\n turnstileSiteKey: turnstileConfig().siteKey || null,\n }, 200, { \"Cache-Control\": \"no-store\" });\n});\n\napp.post(\"/api/public-view/:slug/comments\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n if (!row) return c.json({ error: \"Shared view not found\" }, 404);\n const body = await c.req.json();\n const text = String(body.body ?? \"\").trim();\n const issueNumber = Number(body.issueNumber);\n const issueOwner = String(body.issueOwner ?? \"\");\n const issueRepo = String(body.issueRepo ?? \"\");\n const displayName = String(body.displayName ?? \"\").trim().slice(0, 80);\n if (!text || text.length > 2000) {\n return c.json({ error: \"Comment must be between 1 and 2,000 characters.\" }, 400);\n }\n if (!Number.isInteger(issueNumber) || issueNumber < 1) {\n return c.json({ error: \"Feedback must be attached to a valid issue.\" }, 400);\n }\n if (!issueOwner || !issueRepo) {\n return c.json({ error: \"Feedback must be attached to a valid issue repository.\" }, 400);\n }\n const verification = await validateTurnstile(c, String(body.turnstileToken ?? \"\"));\n if (!verification.ok) return c.json({ error: verification.error }, verification.status as any);\n\n const identity = await commenterIdentity(c);\n const conf = requireConfig();\n const ip = c.req.header(\"cf-connecting-ip\") ?? c.req.header(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ?? \"\";\n const ipHash = ip ? await hmac(ip, conf.sessionSecret) : null;\n const recent = await sqlite.execute({\n sql: `SELECT\n SUM(CASE WHEN anonymous_hash = ? AND created_at > datetime('now', '-10 minutes') THEN 1 ELSE 0 END) AS identity_count,\n SUM(CASE WHEN ip_hash = ? AND created_at > datetime('now', '-1 hour') THEN 1 ELSE 0 END) AS ip_count\n FROM view_comments`,\n args: [identity.anonymousHash, ipHash],\n });\n const counts = recent.rows[0] as any;\n if (Number(counts?.identity_count ?? 0) >= 5 || Number(counts?.ip_count ?? 0) >= 20) {\n return c.json({ error: \"Comment limit reached. Please wait before sending another message.\" }, 429);\n }\n\n const { token, snapshot } = await liveView(row);\n if (!(await viewAllowsIssue(snapshot, issueOwner, issueRepo, issueNumber, token))) {\n return c.json({ error: \"This issue is no longer part of the public view.\" }, 400);\n }\n const issue = await githubFetch(\n `/repos/${encodeURIComponent(issueOwner)}/${encodeURIComponent(issueRepo)}/issues/${issueNumber}`,\n token,\n ).then((response) => response.json());\n const issueTitle = String(issue.title ?? `Issue #${issueNumber}`);\n\n const id = randomToken(12);\n const session = identity.session;\n await sqlite.execute({\n sql: `INSERT INTO view_comments (\n id, view_slug, issue_number, anonymous_hash, ip_hash, commenter_github_id,\n commenter_login, commenter_avatar_url, body, issue_title, issue_repo_full_name, display_name\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n id,\n row.slug,\n issueNumber,\n identity.anonymousHash,\n ipHash,\n session?.row.github_id ?? null,\n session?.row.login ?? null,\n session?.row.avatar_url ?? null,\n text,\n issueTitle,\n `${issueOwner}/${issueRepo}`,\n session ? session.row.login : displayName || null,\n ],\n });\n const inserted = await sqlite.execute({\n sql: `SELECT c.*, v.view_name, v.repo_full_name\n FROM view_comments c JOIN views v ON v.slug = c.view_slug WHERE c.id = ?`,\n args: [id],\n });\n return c.json({\n comment: safeViewComment(inserted.rows[0], identity.anonymousHash, session?.row.github_id),\n }, 201);\n});\n\napp.delete(\"/api/public-view/:slug/comments/:id\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n if (!row) return c.json({ error: \"Shared view not found\" }, 404);\n const identity = await commenterIdentity(c);\n const githubId = identity.session?.row.github_id ?? null;\n const args: any[] = [c.req.param(\"id\"), row.slug, identity.anonymousHash];\n let ownership = \"anonymous_hash = ?\";\n if (githubId) {\n ownership += \" OR commenter_github_id = ?\";\n args.push(githubId);\n }\n const result = await sqlite.execute({\n sql: `UPDATE view_comments SET hidden_at = CURRENT_TIMESTAMP\n WHERE id = ? AND view_slug = ? AND (${ownership})`,\n args,\n });\n if (!result.rowsAffected) return c.json({ error: \"Comment not found\" }, 404);\n return c.json({ ok: true });\n});\n\napp.get(\"/api/public-view/:slug\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n if (!row) return c.json({ error: \"Shared view not found\" }, 404);\n const { snapshot } = await liveView(row);\n return c.json(snapshot, 200, { \"Cache-Control\": \"no-store\" });\n});\n\napp.get(\"/api/public-view/:slug/issues/:owner/:repo/:number\", async (c) => {\n const row = await getViewRow(c.req.param(\"slug\"));\n if (!row) return c.json({ error: \"Shared view not found\" }, 404);\n const { owner, repo, number } = c.req.param();\n const issueNumber = Number(number);\n const { token, snapshot } = await liveView(row);\n if (\n !Number.isInteger(issueNumber) ||\n !(await viewAllowsIssue(snapshot, owner, repo, issueNumber, token))\n ) {\n return c.json({ error: \"Issue is not part of this public view\" }, 404);\n }\n const detail = await issueSnapshot(owner, repo, issueNumber, token, true);\n return c.json({ ...detail, sync: syncMeta() }, 200, { \"Cache-Control\": \"no-store\" });\n});\n\napp.get(\"/api/public/:slug\", async (c) => {\n const row = await getShareRow(c.req.param(\"slug\"));\n if (!row) return c.json({ error: \"Shared issue not found\" }, 404);\n return c.json({\n ...JSON.parse(String(row.snapshot_json)),\n share: { include_sub_issues: Boolean(row.include_sub_issues), created_at: row.created_at },\n });\n});\n\napp.onError((err, c) => {\n console.error(err);\n return c.json({ error: err instanceof Error ? err.message : \"Unexpected error\" }, 500);\n});\n\nexport default app.fetch;\n","createdAt",["D",1786028447921],"branchVersion","branchId","9b0b808f-0c24-447e-a47a-3ad20621e5c8","id","bdb7eb4e-e6f9-4c00-be94-578db0fe4c8c","issue-share",["D",1784919467427],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Browse and share GitHub issues with one public link","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/64dc00cc-94d9-47dd-81b1-dde02610d900/square512?exp=1789545599&sig=91cfcc631bd9f3dd8274549c04838d172adf2572755982193460d49bfd04bd62","4415b31e-7137-48dd-a702-ba6ff1d9bd0b","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019ef236-fc96-74eb-95f7-9a47681ead32","tursoName","bdb7eb4ee6f94c00be94578db0fe4c8c","tursoHostname","bdb7eb4ee6f94c00be94578db0fe4c8c-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789473046147],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_103":102,"_111":107},"org",{"_103":102,"_104":105,"_106":107,"_18":56,"_108":109,"_110":25},"branch",{"_13":14,"_32":89,"_43":42,"_90":44,"_91":92,"_93":94,"_95":50,"_96":97,"_98":99,"_100":45,"_101":102},"isOwned","main","projectId","forkedBranchId","961078ea-f528-11ef-aa68-569c3dd06744","forkedBranchVersion",89,"forkedProjectPrivacy","forkedProjectId","96102714-f528-11ef-aa68-569c3dd06744","forkedProjectOrgId","019aa807-52c2-709c-928b-2029bae9a558","projectName","userHandle","raskin","handle","displayName","Perry Raskin","avatar","https://avatars.githubusercontent.com/u/17967465?v=4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":288,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":31,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":289,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":290,"_84":291,"_86":292,"_88":25},"tree",[193,203,204,205],"files",[193,194,195,196,197,198,199,200,201,202,203,204,205],"counts",{"_182":63,"_183":178,"_184":63,"_185":186,"_187":188},"contents",[147,148,149,150],"upstreamProject",{"_43":97,"_32":143,"_52":144,"_54":55,"_49":50,"_82":145},"upstreamBranch",{"_43":92,"_38":136,"_137":138,"_32":89,"_90":97,"_13":139,"_91":-5,"_93":-5,"_140":141,"_47":-5,"_88":25,"_49":50,"_101":142,"_64":99,"_100":143},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1740674013689],"updatedAt",["D",1785420707976],91,"lockfileKey","1785420708123-esm.town_v_templates_react-hono-starter@91-main","templates","react-hono-starter","Starter template with client-side React & Hono server",{"_103":142,"_111":146},"https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/129cab32-3bd7-4c3e-f39b-f12900c76100/square512?exp=1789545599&sig=2316df07e67031dd48e537f6ce0c4c14b92716fed790ec83ecf27974cc65aa31",{"_43":175,"_32":176,"_30":177,"_154":-5,"_41":42,"_40":178,"_156":59,"_38":179,"_13":63,"_33":180,"_35":-5,"_24":25,"_161":-5,"_27":181},{"_43":168,"_32":169,"_30":170,"_154":-5,"_41":42,"_40":171,"_156":59,"_38":172,"_13":158,"_33":20,"_35":173,"_24":25,"_161":-5,"_27":174},{"_43":163,"_32":28,"_30":31,"_154":-5,"_41":42,"_40":14,"_156":59,"_38":164,"_13":165,"_33":34,"_35":37,"_24":25,"_161":166,"_27":167},{"_43":151,"_32":152,"_30":153,"_154":-5,"_41":42,"_40":155,"_156":59,"_38":157,"_13":158,"_33":159,"_35":160,"_24":25,"_161":-5,"_27":162},"7dbf16e9-040f-48a8-a34f-9a3b64fb8efb","issue-og.tsx","473bd144-8797-11f1-89a3-1607ee4eb77e","parentId",23,"latest",["D",1784922231621],3,"script","import React from \"npm:react@18.3.1\";\nimport { ImageResponse } from \"npm:@vercel/og@0.11.1\";\n\ntype Label = {\n name: string;\n color?: string;\n};\n\ntype IssueSnapshot = {\n repository: {\n full_name: string;\n };\n issue: {\n number: number;\n title: string;\n state: string;\n comments_count?: number;\n labels?: Label[];\n author?: {\n login: string;\n } | null;\n };\n comments?: unknown[];\n sub_issues?: unknown[];\n};\n\nfunction readableTextColor(hex = \"6b7280\") {\n const normalized = hex.replace(\"#\", \"\").padEnd(6, \"0\").slice(0, 6);\n const red = Number.parseInt(normalized.slice(0, 2), 16);\n const green = Number.parseInt(normalized.slice(2, 4), 16);\n const blue = Number.parseInt(normalized.slice(4, 6), 16);\n return red * 0.299 + green * 0.587 + blue * 0.114 > 155 ? \"#172033\" : \"#ffffff\";\n}\n\nfunction titleSize(title: string) {\n if (title.length > 120) return 48;\n if (title.length > 80) return 56;\n return 66;\n}\n\nexport function issueOgImage(snapshot: IssueSnapshot) {\n const issue = snapshot.issue;\n const labels = (issue.labels ?? []).slice(0, 4);\n const hiddenLabelCount = Math.max(0, (issue.labels?.length ?? 0) - labels.length);\n const isOpen = issue.state === \"open\";\n const commentCount = issue.comments_count ?? snapshot.comments?.length ?? 0;\n const subIssueCount = snapshot.sub_issues?.length ?? 0;\n\n return new ImageResponse(\n (\n \n

\n \n IS\n

\n Issue Share\n

\n \n {isOpen ? \"●\" : \"◆\"}\n {issue.state}\n \n \n\n \n {snapshot.repository.full_name} · #{issue.number}\n \n\n \n {issue.title}\n \n\n

\n {labels.map((label) => {\n const color = `#${(label.color || \"6b7280\").replace(\"#\", \"\")}`;\n return (\n \n {label.name}\n

\n );\n })}\n {hiddenLabelCount > 0 && (\n

\n +{hiddenLabelCount}\n

\n )}\n

\n {issue.author?.login ? `@${issue.author.login} · ` : \"\"}\n {commentCount} {commentCount === 1 ? \"comment\" : \"comments\"}\n {subIssueCount > 0 ? ` · ${subIssueCount} sub-${subIssueCount === 1 ? \"issue\" : \"issues\"}` : \"\"}\n

\n \n \n ),\n {\n width: 1200,\n height: 630,\n },\n );\n}\n\ntype ViewSnapshot = {\n repository: {\n full_name: string;\n };\n view: {\n name: string;\n state: string;\n query?: string;\n };\n issues: Array<{\n state: string;\n labels?: Label[];\n }>;\n};\n\nexport function viewOgImage(snapshot: ViewSnapshot) {\n const openCount = snapshot.issues.filter((issue) => issue.state === \"open\").length;\n const labelCount = new Set(snapshot.issues.flatMap((issue) => (issue.labels ?? []).map((label) => label.name))).size;\n const stateLabel = snapshot.view.state === \"all\" ? \"All states\" : `${snapshot.view.state[0].toUpperCase()}${snapshot.view.state.slice(1)} issues`;\n\n return new ImageResponse(\n (\n \n

\n \n IS\n

\n Issue Share\n

\n \n Public repository view\n \n \n\n

\n {snapshot.repository.full_name} · {stateLabel}\n

\n\n \n {snapshot.view.name}\n \n\n {snapshot.view.query && (\n

\n Filter: “{snapshot.view.query}”\n

\n )}\n\n

\n {snapshot.issues.length} {snapshot.issues.length === 1 ? \"issue\" : \"issues\"}\n

\n · {openCount} open · {labelCount} {labelCount === 1 ? \"label\" : \"labels\"}\n

\n Stable snapshot\n

\n \n ),\n { width: 1200, height: 630 },\n );\n}\n","label",[152],"b1cb8907-dbd5-4550-b45a-572adc4ac103",["D",1786028447921],16,"raskin-issue-share",[28],"8b9c4b79-7be4-4dab-9722-5f7694fb33fe","README.md","019f957d-a643-7685-9a7e-8056acae9408",38,["D",1784926281499],"# Issue Share\n\nBrowse GitHub issues across repositories selected during GitHub App installation,\nthen create stable public issue snapshots with one click. Snapshots include the\nissue body, labels, assignees, milestone, comments, and—when selected—sub-issues.\n\n## GitHub App setup\n\nCreate a public GitHub App at\nhttps://github.com/settings/apps/new with these settings:\n\n- Homepage URL: the live URL for `index.ts`\n- Callback URL: `/auth/github/callback`\n- Request user authorization (OAuth) during installation: optional\n- Repository permissions → Issues: Read-only\n- Repository permissions → Metadata: Read-only\n- Webhooks: disabled\n- Where can this GitHub App be installed?: Any account\n\nAfter creating the app:\n\n1. Generate a client secret.\n2. Copy the app's Client ID (not App ID), client secret, and app slug.\n3. Add the environment variables below in Val Town.\n4. Generate a strong random `SESSION_SECRET` (at least 32 bytes).\n\nRequired environment variables:\n\n- `GITHUB_CLIENT_ID`\n- `GITHUB_CLIENT_SECRET`\n- `GITHUB_APP_SLUG`\n- `SESSION_SECRET`\n\nPublic-view feedback also requires a Cloudflare Turnstile widget restricted to\nthe live `*.val.run` hostname:\n\n- `TURNSTILE_SITE_KEY`\n- `TURNSTILE_SECRET_KEY`\n\n## Security model\n\n- GitHub login uses OAuth state validation and PKCE.\n- GitHub tokens are AES-GCM encrypted at rest using `SESSION_SECRET`.\n- Session cookies are `HttpOnly`, `Secure`, and `SameSite=Lax`.\n- Public links use 96-bit random slugs and contain a stored snapshot, never a\n GitHub token.\n- Only repositories selected in each GitHub App installation are listed.\n- Creating a public link intentionally copies the selected private issue data\n into this Val's SQLite database.\n- Public-view feedback is private between its author and the view owner.\n Anonymous authors are associated through a signed browser cookie; raw IP\n addresses are never stored.\n- Every feedback submission is validated server-side with Cloudflare Turnstile\n and subject to keyed, privacy-preserving rate limits.\n\n## Routes\n\n- `/` — authenticated issue browser\n- `/s/:slug` — public issue snapshot\n- `/auth/github` — GitHub App OAuth login\n- `/api/repos` — installations and selected repositories\n- `/api/repos/:owner/:repo/issues` — issues grouped by selected repository\n- `/api/shares` — create a public snapshot\n- `/api/public-view/:slug/comments` — private viewer feedback\n- `/api/view-comments` — owner feedback inbox\n- `/source` — view and remix the Val\n\n## Notes\n\nGitHub's REST Issues endpoints can include pull requests, so the app filters\nentries with a `pull_request` field. Issues, comments, repositories per\ninstallation, and sub-issues are fetched across GitHub's paginated responses.\n",[169],"6f0c5636-9ca0-40d1-b241-907787d220ee","frontend","019f957d-a643-7685-9a7e-7db9eb0d0412",1,["D",1784919467427],"directory",[176],"pulls","branches","forks","envVars",{"_189":191,"_192":63},"connections",{"_189":63,"_190":63},"count","unfilledCount",6,"emptyCount",{"_43":175,"_32":176,"_30":177,"_154":-5,"_41":42,"_40":178,"_156":59,"_38":285,"_13":63,"_33":180,"_35":-5,"_24":25,"_161":-5,"_207":286,"_27":287},{"_43":281,"_32":271,"_30":266,"_154":177,"_41":42,"_40":178,"_156":59,"_38":282,"_13":63,"_33":180,"_35":-5,"_24":25,"_161":-5,"_207":283,"_27":284},{"_43":272,"_32":273,"_30":274,"_154":266,"_41":42,"_40":275,"_156":59,"_38":276,"_13":277,"_33":159,"_35":278,"_24":25,"_161":-5,"_207":279,"_27":280},{"_43":263,"_32":264,"_30":265,"_154":266,"_41":42,"_40":178,"_156":59,"_38":267,"_13":63,"_33":159,"_35":268,"_24":25,"_161":-5,"_207":269,"_27":270},{"_43":256,"_32":257,"_30":258,"_154":177,"_41":42,"_40":178,"_156":59,"_38":259,"_13":63,"_33":20,"_35":260,"_24":25,"_161":-5,"_207":261,"_27":262},{"_43":247,"_32":248,"_30":249,"_154":177,"_41":42,"_40":250,"_156":59,"_38":251,"_13":252,"_33":20,"_35":253,"_24":25,"_161":-5,"_207":254,"_27":255},{"_43":240,"_32":241,"_30":242,"_154":177,"_41":42,"_40":178,"_156":59,"_38":243,"_13":63,"_33":159,"_35":244,"_24":25,"_161":-5,"_207":245,"_27":246},{"_43":232,"_32":233,"_30":234,"_154":177,"_41":42,"_40":235,"_156":59,"_38":236,"_13":63,"_33":20,"_35":237,"_24":25,"_161":-5,"_207":238,"_27":239},{"_43":224,"_32":225,"_30":226,"_154":177,"_41":42,"_40":227,"_156":59,"_38":228,"_13":63,"_33":20,"_35":229,"_24":25,"_161":-5,"_207":230,"_27":231},{"_43":216,"_32":217,"_30":218,"_154":177,"_41":42,"_40":219,"_156":59,"_38":220,"_13":178,"_33":20,"_35":221,"_24":25,"_161":-5,"_207":222,"_27":223},{"_43":168,"_32":169,"_30":170,"_154":-5,"_41":42,"_40":171,"_156":59,"_38":213,"_13":158,"_33":20,"_35":173,"_24":25,"_161":-5,"_207":214,"_27":215},{"_43":163,"_32":28,"_30":31,"_154":-5,"_41":42,"_40":14,"_156":59,"_38":210,"_13":165,"_33":34,"_35":37,"_24":25,"_161":166,"_207":211,"_27":212},{"_43":151,"_32":152,"_30":153,"_154":-5,"_41":42,"_40":155,"_156":59,"_38":206,"_13":158,"_33":159,"_35":160,"_24":25,"_161":-5,"_207":208,"_27":209},["D",1784922231621],"children",[],[152],["D",1786028447921],[],[28],["D",1784926281499],[],[169],"88dbb8d1-de0b-4a8d-8a44-dbb19ff79a69","share.html","7a58cfd8-8796-11f1-8bd0-1607ee4eb77e",40,["D",1784926282068],"\n\n \n \n \n \n \n __OG_TITLE__\n\n \n \n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n\n \n \n \n \n \n \n

\n \n \n \n\n",[],[176,217],"22b9209f-6eba-4167-ba2f-83ac093c4a87","og-image.html","7a8ce26e-8796-11f1-a84c-1607ee4eb77e",17,["D",1784921579590],"\n\n \n \n \n Issue Share social preview\n \n \n \n

Issue Share

GitHub issues,
clearly shared.

Complete public snapshots with labels, discussion, milestones, and optional sub-issues.

raskin-issue-share.val.run

acme/roadmap #218● Open

Add audit history to shared reports

featurepriority: high

Public snapshot ↗

\n \n\n",[],[176,225],"9bb9e775-2737-4104-98f4-39640b7b3d58","markdown.css","1af656f0-8796-11f1-bb22-1607ee4eb77e",13,["D",1784921419150],".markdown-body {\n color: #334155;\n font-size: 15px;\n line-height: 1.75;\n overflow-wrap: anywhere;\n}\n\n.markdown-body > :first-child {\n margin-top: 0;\n}\n\n.markdown-body > :last-child {\n margin-bottom: 0;\n}\n\n.markdown-body h1,\n.markdown-body h2,\n.markdown-body h3,\n.markdown-body h4,\n.markdown-body h5,\n.markdown-body h6 {\n color: #0f172a;\n font-weight: 800;\n line-height: 1.3;\n margin-bottom: 0.65em;\n margin-top: 1.6em;\n}\n\n.markdown-body h1 {\n border-bottom: 1px solid #e2e8f0;\n font-size: 1.75em;\n padding-bottom: 0.35em;\n}\n\n.markdown-body h2 {\n border-bottom: 1px solid #e2e8f0;\n font-size: 1.4em;\n padding-bottom: 0.3em;\n}\n\n.markdown-body h3 {\n font-size: 1.15em;\n}\n\n.markdown-body h4,\n.markdown-body h5,\n.markdown-body h6 {\n font-size: 1em;\n}\n\n.markdown-body p,\n.markdown-body blockquote,\n.markdown-body ul,\n.markdown-body ol,\n.markdown-body dl,\n.markdown-body table,\n.markdown-body pre,\n.markdown-body details {\n margin-bottom: 1.15em;\n margin-top: 0;\n}\n\n.markdown-body a {\n color: #0369a1;\n font-weight: 600;\n text-decoration: none;\n}\n\n.markdown-body a:hover {\n text-decoration: underline;\n}\n\n.markdown-body strong {\n color: #1e293b;\n font-weight: 750;\n}\n\n.markdown-body ul,\n.markdown-body ol {\n padding-left: 1.6em;\n}\n\n.markdown-body ul {\n list-style: disc;\n}\n\n.markdown-body ol {\n list-style: decimal;\n}\n\n.markdown-body li {\n margin: 0.25em 0;\n padding-left: 0.15em;\n}\n\n.markdown-body li > ul,\n.markdown-body li > ol {\n margin-bottom: 0;\n margin-top: 0.25em;\n}\n\n.markdown-body .task-list-item {\n list-style: none;\n}\n\n.markdown-body .task-list-item input[type=\"checkbox\"] {\n accent-color: #0284c7;\n margin: 0 0.5em 0.15em -1.45em;\n vertical-align: middle;\n}\n\n.markdown-body blockquote {\n border-left: 4px solid #cbd5e1;\n color: #64748b;\n padding: 0.15em 1em;\n}\n\n.markdown-body code {\n background: #f1f5f9;\n border-radius: 0.35em;\n color: #0f172a;\n font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;\n font-size: 0.88em;\n padding: 0.16em 0.38em;\n}\n\n.markdown-body pre {\n background: #0f172a;\n border-radius: 0.75rem;\n color: #e2e8f0;\n overflow-x: auto;\n padding: 1rem 1.1rem;\n}\n\n.markdown-body pre code {\n background: transparent;\n color: inherit;\n font-size: 0.875em;\n padding: 0;\n}\n\n.markdown-body table {\n border-collapse: collapse;\n display: block;\n max-width: 100%;\n overflow-x: auto;\n width: max-content;\n}\n\n.markdown-body th,\n.markdown-body td {\n border: 1px solid #cbd5e1;\n padding: 0.55rem 0.75rem;\n text-align: left;\n}\n\n.markdown-body th {\n background: #f8fafc;\n color: #1e293b;\n font-weight: 750;\n}\n\n.markdown-body tr:nth-child(even) td {\n background: #f8fafc;\n}\n\n.markdown-body hr {\n border: 0;\n border-top: 1px solid #cbd5e1;\n margin: 1.75em 0;\n}\n\n.markdown-body img {\n border-radius: 0.65rem;\n height: auto;\n max-width: 100%;\n}\n\n.markdown-body details {\n border: 1px solid #e2e8f0;\n border-radius: 0.65rem;\n padding: 0.75rem 1rem;\n}\n\n.markdown-body summary {\n color: #1e293b;\n cursor: pointer;\n font-weight: 700;\n}\n",[],[176,233],"c46b5e85-3ad7-4162-8b11-20d86a11c53f","index.tsx","019f957d-a643-7685-9a7e-7a675280704d",["D",1784919467427],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\nimport { App } from \"./components/App.tsx\";\n\nconst root = document.getElementById(\"root\");\nif (!root) {\n throw new Error(\"No root element found\");\n}\n\ncreateRoot(root).render();",[],[176,241],"94690a91-c5e1-4d6f-b8f5-9b17c7687e5b","index.html","019f957d-a643-7685-9a7e-747ca8979be5",12,["D",1784921418566],2,"\n\n \n \n \n \n \n Issue Share\n \n \n \n \n \n

\n \n \n \n\n",[],[176,248],"a1371dd2-4685-4de9-b36a-e9f13653f5fa","favicon.svg","019f957d-a643-7685-9a7e-7140f9207764",["D",1784919467427],"\n",[],[176,257],"0d4e2eee-6242-4638-93d9-5526ed8b3575","Counter.tsx","019f957d-a643-7685-9a7e-6af96964ced6","019f957d-a643-7685-9a7e-6fe9f0d30b1c",["D",1784919467427],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from \"https://esm.sh/react@18.2.0\";\n\nexport function Counter() {\n const [count, setCount] = useState(0);\n return (\n

\n Clicked\n setCount((c) => c + 1)}\n class=\"bg-blue-500 hover:bg-blue-600 text-white font-medium px-4 py-2 rounded-lg transition-colors cursor-pointer\"\n >\n {count}\n \n times\n

\n );\n}\n",[],[176,271,264],"components","030647cc-6055-4c1a-bbbc-3db3356a818c","App.tsx","019f957d-a643-7685-9a7e-64944daf55d9",50,["D",1784927857391],22,"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useEffect, useMemo, useRef, useState } from \"https://esm.sh/react@18.2.0\";\nimport DOMPurify from \"https://esm.sh/dompurify@3.2.6\";\nimport { marked } from \"https://esm.sh/marked@15.0.12\";\n\ntype Label = { name: string; color: string; description?: string | null };\ntype Issue = {\n number: number;\n title: string;\n state: string;\n state_reason?: string | null;\n body: string;\n body_html?: string;\n html_url: string;\n created_at: string;\n updated_at: string;\n closed_at?: string | null;\n comments_count: number;\n author?: { login: string; avatar_url: string; html_url: string } | null;\n labels: Label[];\n assignees: { login: string; avatar_url: string; html_url: string }[];\n milestone?: { title: string; state: string; due_on?: string | null; html_url: string } | null;\n sub_issues?: Snapshot[];\n sub_issue_count?: number;\n};\ntype Snapshot = {\n repository: { owner: string; name: string; full_name: string };\n issue: Issue;\n comments: any[];\n sub_issues: Snapshot[];\n parent_issue?: Snapshot | null;\n share?: { include_sub_issues: boolean; created_at: string };\n sync?: SyncStatus;\n};\ntype RepoViewSnapshot = {\n repository: { owner: string; name: string; full_name: string };\n view: { name: string; state: string; query: string };\n issues: Issue[];\n share?: { created_at: string; live?: boolean };\n sync?: SyncStatus;\n};\ntype SyncStatus = {\n status: \"live\" | \"degraded\";\n source: \"github\";\n checked_at: string;\n message?: string;\n rate_limit_remaining?: number | null;\n};\ntype ViewComment = {\n id: string;\n view_slug: string;\n view_name?: string;\n repo_full_name?: string;\n issue_number?: number | null;\n issue_title?: string | null;\n issue_repo_full_name?: string | null;\n display_name?: string | null;\n body: string;\n created_at: string;\n mine: boolean;\n author: { type: \"github\" | \"browser\"; login: string; avatar_url?: string | null };\n};\n\ndeclare global {\n interface Window {\n turnstile?: {\n render: (target: HTMLElement, options: Record) => string;\n remove: (id: string) => void;\n reset: (id: string) => void;\n };\n }\n}\n\nasync function api(path: string, init?: RequestInit) {\n const response = await fetch(path, {\n ...init,\n headers: { \"Content-Type\": \"application/json\", ...(init?.headers ?? {}) },\n });\n const data = await response.json();\n if (!response.ok) throw new Error(data.error ?? `Request failed (${response.status})`);\n return data;\n}\n\nfunction timeAgo(value: string) {\n const seconds = Math.round((Date.now() - new Date(value).getTime()) / 1000);\n const formatter = new Intl.RelativeTimeFormat(undefined, { numeric: \"auto\" });\n if (seconds < 60) return formatter.format(-seconds, \"second\");\n if (seconds < 3600) return formatter.format(-Math.round(seconds / 60), \"minute\");\n if (seconds < 86400) return formatter.format(-Math.round(seconds / 3600), \"hour\");\n if (seconds < 2592000) return formatter.format(-Math.round(seconds / 86400), \"day\");\n return formatter.format(-Math.round(seconds / 2592000), \"month\");\n}\n\nfunction labelTextColor(hex: string) {\n const value = parseInt(hex || \"6b7280\", 16);\n const r = value >> 16;\n const g = value >> 8 & 255;\n const b = value & 255;\n return (r * 299 + g * 587 + b * 114) / 1000 > 150 ? \"#111827\" : \"#ffffff\";\n}\n\nfunction Labels({ labels }: { labels: Label[] }) {\n return (\n

\n {labels.map((label) => (\n \n {label.name}\n \n ))}\n

\n );\n}\n\nfunction StateBadge({ state }: { state: string }) {\n const open = state === \"open\";\n return (\n \n {open ? (\n \n ) : (\n \n )}\n {open ? \"Open\" : \"Closed\"}\n \n );\n}\n\nfunction GitHubSyncBadge({\n health,\n syncedAt,\n onRefresh,\n refreshing = false,\n}: {\n health?: SyncStatus | null;\n syncedAt?: string | null;\n onRefresh?: () => void;\n refreshing?: boolean;\n}) {\n const live = health?.status !== \"degraded\";\n const checkedAt = health?.checked_at ?? syncedAt;\n return (\n \n \n {live && }\n \n \n {live ? \"GitHub live\" : \"GitHub check delayed\"}\n {checkedAt && checked {timeAgo(checkedAt)}}\n {syncedAt && checkedAt !== syncedAt && data refreshed {timeAgo(syncedAt)}}\n {onRefresh && (\n \n {refreshing ? \"Refreshing…\" : \"Refresh\"}\n \n )}\n \n );\n}\n\nfunction TurnstileWidget({\n siteKey,\n resetKey,\n onToken,\n}: {\n siteKey: string;\n resetKey: number;\n onToken: (token: string) => void;\n}) {\n const container = useRef(null);\n useEffect(() => {\n let cancelled = false;\n let widgetId = \"\";\n let attempts = 0;\n const render = () => {\n if (cancelled) return;\n if (!window.turnstile || !container.current) {\n if (attempts++ < 100) setTimeout(render, 100);\n return;\n }\n widgetId = window.turnstile.render(container.current, {\n sitekey: siteKey,\n action: \"comment\",\n appearance: \"interaction-only\",\n size: \"flexible\",\n callback: (token: string) => onToken(token),\n \"expired-callback\": () => onToken(\"\"),\n \"error-callback\": () => onToken(\"\"),\n });\n };\n render();\n return () => {\n cancelled = true;\n if (widgetId && window.turnstile) window.turnstile.remove(widgetId);\n };\n }, [siteKey, resetKey]);\n return

;\n}\n\nfunction SubIssueCount({ issue }: { issue: Issue }) {\n const count = issue.sub_issue_count ?? issue.sub_issues?.length ?? 0;\n if (!count) return null;\n return (\n \n \n {count} sub-issue{count === 1 ? \"\" : \"s\"}\n \n );\n}\n\nfunction MarkdownText({\n children,\n html,\n issueLinks = [],\n onOpenIssue,\n}: {\n children: string;\n html?: string;\n issueLinks?: Snapshot[];\n onOpenIssue?: (snapshot: Snapshot) => void;\n}) {\n const issueByKey = useMemo(() => new Map(issueLinks.map((snapshot) => [\n `${snapshot.repository.full_name}#${snapshot.issue.number}`,\n snapshot,\n ])), [issueLinks]);\n const issueByNumber = useMemo(() => {\n const result = new Map();\n issueLinks.forEach((snapshot) => {\n if (!result.has(snapshot.issue.number)) result.set(snapshot.issue.number, snapshot);\n });\n return result;\n }, [issueLinks]);\n\n const rendered = useMemo(() => {\n if (!children && !html) return \"\";\n const source = html || marked.parse(children, { gfm: true, breaks: false });\n const sanitized = DOMPurify.sanitize(String(source), {\n USE_PROFILES: { html: true },\n ADD_ATTR: [\"target\", \"rel\"],\n });\n const container = document.createElement(\"div\");\n container.innerHTML = String(sanitized);\n const makeIssueButton = (snapshot: Snapshot, label: string) => {\n const button = document.createElement(\"button\");\n button.type = \"button\";\n button.dataset.issueKey = `${snapshot.repository.full_name}#${snapshot.issue.number}`;\n button.className = \"font-semibold text-sky-700 underline decoration-sky-200 underline-offset-2 hover:text-sky-900\";\n button.textContent = label;\n return button;\n };\n container.querySelectorAll('a[href*=\"github.com\"]').forEach((link) => {\n const href = link.getAttribute(\"href\") ?? \"\";\n const issueMatch = href.match(/^https:\\/\\/github\\.com\\/([^/]+)\\/([^/]+)\\/issues\\/(\\d+)/i);\n const target = issueMatch\n ? issueByKey.get(`${issueMatch[1]}/${issueMatch[2]}#${Number(issueMatch[3])}`)\n : null;\n if (target) {\n link.replaceWith(makeIssueButton(target, link.textContent || `#${target.issue.number}`));\n return;\n }\n const reference = document.createElement(\"span\");\n reference.className = \"font-semibold text-slate-700\";\n reference.innerHTML = link.innerHTML;\n link.replaceWith(reference);\n });\n const linkTextReferences = (node: Node) => {\n if (node.nodeType === Node.TEXT_NODE) {\n const value = node.textContent ?? \"\";\n const matches = [...value.matchAll(/#(\\d+)\\b/g)];\n if (!matches.some((match) => issueByNumber.has(Number(match[1])))) return;\n const fragment = document.createDocumentFragment();\n let cursor = 0;\n matches.forEach((match) => {\n const index = match.index ?? 0;\n const target = issueByNumber.get(Number(match[1]));\n fragment.append(value.slice(cursor, index));\n fragment.append(target ? makeIssueButton(target, match[0]) : match[0]);\n cursor = index + match[0].length;\n });\n fragment.append(value.slice(cursor));\n node.replaceWith(fragment);\n return;\n }\n if (node instanceof Element && [\"A\", \"BUTTON\", \"CODE\", \"PRE\"].includes(node.tagName)) return;\n Array.from(node.childNodes).forEach(linkTextReferences);\n };\n Array.from(container.childNodes).forEach(linkTextReferences);\n return container.innerHTML;\n }, [children, html, issueByKey, issueByNumber]);\n\n if (!rendered) return

No description provided.

;\n return (\n {\n const clickedElement = event.target instanceof Element ? event.target : null;\n const trigger = clickedElement?.closest(\"[data-issue-key]\");\n const issueTarget = trigger ? issueByKey.get(trigger.getAttribute(\"data-issue-key\") ?? \"\") : null;\n if (issueTarget) onOpenIssue?.(issueTarget);\n }}\n dangerouslySetInnerHTML={{ __html: rendered }}\n />\n );\n}\n\nfunction IssueDetail({\n snapshot,\n publicView = false,\n onBack,\n backLabel = \"Back to issues\",\n onOpenIssue,\n onShare,\n sharing,\n}: {\n snapshot: Snapshot;\n publicView?: boolean;\n onBack?: () => void;\n backLabel?: string;\n onOpenIssue?: (snapshot: Snapshot) => void;\n onShare?: (includeSubIssues: boolean) => void;\n sharing?: boolean;\n}) {\n const [includeSubs, setIncludeSubs] = useState(true);\n const issue = snapshot.issue;\n const relatedIssues = [\n ...(snapshot.parent_issue ? [snapshot.parent_issue] : []),\n ...snapshot.sub_issues,\n ];\n return (\n

\n {onBack && (\n \n )}\n

\n \n {snapshot.repository.full_name} #{issue.number}\n {publicView && Shared snapshot}\n

{issue.title}

\n {issue.author && (\n \n $\"\"$ \n {issue.author.login}\n \n )}\n opened {timeAgo(issue.created_at)}\n {issue.comments_count} comment{issue.comments_count === 1 ? \"\" : \"s\"}\n Open in GitHub ↗\n

\n {issue.labels.length > 0 &&

}\n

\n\n

\n {issue.body}\n {snapshot.comments.length > 0 && (\n

Conversation

\n {snapshot.comments.map((comment) => (\n

\n {comment.author && $\"\"$ }\n {comment.author?.login ?? \"ghost\"}\n commented {timeAgo(comment.created_at)}\n

\n {comment.body}\n

\n ))}\n

\n )}\n

Assignees

\n {issue.assignees.length ? issue.assignees.map((assignee) => (\n \n $\"\"$ {assignee.login}\n \n )) : No one assigned}\n

Milestone

\n {issue.milestone ? {issue.milestone.title} : No milestone}\n

Updated

\n {new Date(issue.updated_at).toLocaleString()}\n

\n {snapshot.parent_issue && (\n

Parent issue

\n onOpenIssue?.(snapshot.parent_issue!)}\n className=\"group block w-full rounded-lg border border-slate-200 p-2.5 text-left hover:border-sky-200 hover:bg-sky-50\"\n >\n \n {snapshot.parent_issue.repository.full_name} #{snapshot.parent_issue.issue.number}\n \n \n {snapshot.parent_issue.issue.title}\n \n \n

\n )}\n {snapshot.sub_issues.length > 0 && (\n

Sub-issues

\n {snapshot.sub_issues.map((child) => (\n onOpenIssue?.(child)}\n className=\"group block w-full rounded-lg border border-slate-200 p-2.5 text-left hover:border-sky-200 hover:bg-sky-50\"\n >\n \n {child.repository.full_name} #{child.issue.number}\n \n \n {child.issue.title}\n \n \n ))}\n

\n )}\n

\n\n {!publicView && onShare && (\n

\n \n setIncludeSubs(e.target.checked)} className=\"h-4 w-4 rounded border-slate-300\" />\n Include sub-issues in public link\n \n onShare(includeSubs)}\n disabled={sharing}\n className=\"rounded-xl bg-gray-900 px-5 py-3 text-sm font-bold text-white hover:bg-gray-800 disabled:cursor-wait disabled:opacity-60\"\n >\n {sharing ? \"Creating snapshot…\" : \"Share issue\"}\n \n

\n )}\n\n {snapshot.sub_issues.length > 0 && (\n

Sub-issues ({snapshot.sub_issues.length})

\n {snapshot.sub_issues.map((child) => (\n onOpenIssue?.(child)}\n className=\"block w-full rounded-xl border border-slate-200 bg-white p-5 text-left transition hover:border-sky-200 hover:bg-sky-50/40 hover:shadow-sm\"\n >\n

\n \n {child.repository.full_name} #{child.issue.number}\n

\n {child.issue.title}\n {child.issue.labels.length > 0 &&

}\n Open in Issue Share →\n \n ))}\n

\n )}\n

\n );\n}\n\nfunction PublicShare({ slug }: { slug: string }) {\n const [snapshot, setSnapshot] = useState(null);\n const [history, setHistory] = useState([]);\n const [error, setError] = useState(\"\");\n useEffect(() => {\n api(`/api/public/${encodeURIComponent(slug)}`).then(setSnapshot).catch((e) => setError(e.message));\n }, [slug]);\n if (error) return ;\n if (!snapshot) return ;\n return (\n {\n const previous = history[history.length - 1];\n setHistory((items) => items.slice(0, -1));\n setSnapshot(previous);\n } : undefined}\n backLabel=\"Back to parent issue\"\n onOpenIssue={(child) => {\n setHistory((items) => [...items, snapshot]);\n setSnapshot(child);\n globalThis.scrollTo({ top: 0, behavior: \"smooth\" });\n }}\n />\n );\n}\n\nfunction PublicViewComments({\n slug,\n issueContext,\n}: {\n slug: string;\n issueContext: {\n number: number;\n title: string;\n repository: { owner: string; name: string; full_name: string };\n };\n}) {\n const [comments, setComments] = useState([]);\n const [identity, setIdentity] = useState(null);\n const [siteKey, setSiteKey] = useState(\"\");\n const [configured, setConfigured] = useState(false);\n const [isOwner, setIsOwner] = useState(false);\n const [displayName, setDisplayName] = useState(() => localStorage.getItem(\"issue-share-commenter-name\") ?? \"\");\n const [body, setBody] = useState(\"\");\n const [token, setToken] = useState(\"\");\n const [resetKey, setResetKey] = useState(0);\n const [sending, setSending] = useState(false);\n const [error, setError] = useState(\"\");\n const [sent, setSent] = useState(false);\n\n async function loadComments() {\n const data = await api(\n `/api/public-view/${encodeURIComponent(slug)}/comments?issueNumber=${issueContext.number}` +\n `&issueOwner=${encodeURIComponent(issueContext.repository.owner)}` +\n `&issueRepo=${encodeURIComponent(issueContext.repository.name)}`,\n );\n setComments(data.comments ?? []);\n setIdentity(data.identity);\n setConfigured(Boolean(data.turnstileConfigured));\n setSiteKey(data.turnstileSiteKey ?? \"\");\n setIsOwner(Boolean(data.isOwner));\n }\n\n useEffect(() => {\n setComments([]);\n setError(\"\");\n loadComments().catch((e) => setError(e.message));\n if (location.hash === \"#feedback\") {\n setTimeout(() => document.getElementById(\"feedback\")?.scrollIntoView({ behavior: \"smooth\" }), 100);\n }\n }, [slug, issueContext.number]);\n\n async function submit(event: React.FormEvent) {\n event.preventDefault();\n setError(\"\");\n setSent(false);\n if (!token) {\n setError(\"Please complete the security check.\");\n return;\n }\n setSending(true);\n try {\n const data = await api(`/api/public-view/${encodeURIComponent(slug)}/comments`, {\n method: \"POST\",\n body: JSON.stringify({\n body,\n issueNumber: issueContext.number,\n issueOwner: issueContext.repository.owner,\n issueRepo: issueContext.repository.name,\n displayName,\n turnstileToken: token,\n }),\n });\n setComments((items) => [...items, data.comment]);\n setBody(\"\");\n if (displayName.trim()) localStorage.setItem(\"issue-share-commenter-name\", displayName.trim());\n setToken(\"\");\n setResetKey((value) => value + 1);\n setSent(true);\n } catch (e) {\n setError(e.message);\n setToken(\"\");\n setResetKey((value) => value + 1);\n } finally {\n setSending(false);\n }\n }\n\n async function removeComment(id: string) {\n if (!globalThis.confirm(\"Delete this feedback? The view owner will no longer see it.\")) return;\n try {\n await api(`/api/public-view/${encodeURIComponent(slug)}/comments/${encodeURIComponent(id)}`, {\n method: \"DELETE\",\n });\n setComments((items) => items.filter((comment) => comment.id !== id));\n } catch (e) {\n setError(e.message);\n }\n }\n\n return (\n

{isOwner ? \"Owner preview\" : \"Issue feedback\"}

\n {isOwner ? `Feedback on #${issueContext.number}` : `Suggest a change to #${issueContext.number}`}\n

\n {isOwner\n ? \"You own this public view. Incoming private suggestions for this issue appear here and in your dashboard.\"\n : \"Leave a private margin note about this issue, feature, or spec. Only you and the view owner can see it; nothing is posted to GitHub.\"}\n

\n {identity?.type === \"github\" ? (\n

\n $\"\"$ \n {identity.login}\n

\n ) : (\n \n Sign in with GitHub for named feedback\n \n )}\n

\n\n

\n {comments.length > 0 && (\n

\n {comments.map((comment) => (\n

\n {comment.author.avatar_url ? (\n $\"\"$ \n ) : (\n G\n )}\n {comment.author.login}\n sent {timeAgo(comment.created_at)}\n {comment.issue_number && about #{comment.issue_number}}\n

{comment.body}

\n {comment.mine && (\n \n )}\n

\n ))}\n

\n )}\n\n {isOwner ? (\n comments.length === 0 && (\n

No viewer feedback on this issue yet

When someone leaves a suggestion, it will appear here automatically after a refresh.

\n )\n ) :

\n {identity?.type !== \"github\" && (\n

\n Your name (optional)\n setDisplayName(event.target.value)}\n maxLength={80}\n autoComplete=\"name\"\n placeholder=\"How should the owner identify you?\"\n className=\"mt-2 w-full rounded-xl border border-slate-200 bg-white px-4 py-3 text-sm outline-none focus:border-sky-400\"\n />\n

\n )}\n \n Feedback about #{issueContext.number}\n \n setBody(event.target.value)}\n maxLength={2000}\n rows={4}\n required\n placeholder=\"Suggest a tweak, flag an ambiguity, or ask about this spec…\"\n className=\"mt-2 w-full resize-y rounded-xl border border-slate-200 bg-white px-4 py-3 text-sm leading-6 outline-none focus:border-sky-400\"\n />\n

\n {identity?.type === \"github\" ? `Posting as ${identity.login}` : \"Posting with this browser’s private guest identity\"}\n {body.length}/2000\n

\n {identity?.type !== \"github\" && (\n

\n This browser remembers which feedback is yours using a signed cookie. Clearing site data means you will no longer see or delete it, but the owner will retain the message.\n

\n )}\n {configured && siteKey ? (\n

\n ) : (\n

\n Feedback is temporarily unavailable while security verification is being configured.\n

\n )}\n {error &&

{error}

}\n {sent &&

Issue feedback sent privately to the view owner.

}\n \n {sending ? \"Sending…\" : \"Send issue feedback\"}\n \n }\n

\n );\n}\n\nfunction PublicRepoView({ slug }: { slug: string }) {\n const [view, setView] = useState(null);\n const [selectedSnapshot, setSelectedSnapshot] = useState(null);\n const [history, setHistory] = useState([]);\n const [query, setQuery] = useState(\"\");\n const [publicStateFilter, setPublicStateFilter] = useState(\"open\");\n const [error, setError] = useState(\"\");\n const [detailLoading, setDetailLoading] = useState(false);\n const [refreshing, setRefreshing] = useState(false);\n const [health, setHealth] = useState(null);\n const deepLinkOpened = useRef(false);\n\n async function loadView(showRefresh = false) {\n if (showRefresh) setRefreshing(true);\n try {\n const data = await api(`/api/public-view/${encodeURIComponent(slug)}`);\n setView(data);\n setHealth(data.sync ?? null);\n setError(\"\");\n } catch (e) {\n setError(e.message);\n } finally {\n setRefreshing(false);\n }\n }\n\n useEffect(() => {\n deepLinkOpened.current = false;\n loadView();\n const check = () => api(`/api/public-view/${encodeURIComponent(slug)}/health`).then(setHealth).catch(() => {\n setHealth({\n status: \"degraded\",\n source: \"github\",\n checked_at: new Date().toISOString(),\n message: \"GitHub health check failed.\",\n });\n });\n check();\n const interval = setInterval(check, 60_000);\n return () => clearInterval(interval);\n }, [slug]);\n\n useEffect(() => {\n if (!view || deepLinkOpened.current) return;\n const params = new URLSearchParams(location.search);\n const issueNumber = Number(params.get(\"issue\"));\n const [owner, repo] = String(params.get(\"repo\") || view.repository.full_name).split(\"/\");\n if (!Number.isInteger(issueNumber) || issueNumber < 1 || !owner || !repo) return;\n deepLinkOpened.current = true;\n openViewIssue({\n repository: { owner, name: repo, full_name: `${owner}/${repo}` },\n issue: { number: issueNumber } as Issue,\n comments: [],\n sub_issues: [],\n });\n }, [view]);\n\n const visibleIssues = useMemo(() => {\n if (!view) return [];\n const needle = query.toLowerCase().trim();\n const state = view.view.state === \"all\" ? publicStateFilter : view.view.state;\n return view.issues.filter((issue) => {\n const matchesState = state === \"all\" || issue.state === state;\n const matchesQuery = !needle ||\n issue.title.toLowerCase().includes(needle) ||\n String(issue.number).includes(needle) ||\n issue.labels.some((label) => label.name.toLowerCase().includes(needle));\n return matchesState && matchesQuery;\n });\n }, [view, query, publicStateFilter]);\n\n async function openViewIssue(target: Snapshot, parent?: Snapshot) {\n setDetailLoading(true);\n setError(\"\");\n try {\n const detail = await api(\n `/api/public-view/${encodeURIComponent(slug)}/issues/${encodeURIComponent(target.repository.owner)}/${encodeURIComponent(target.repository.name)}/${target.issue.number}`,\n );\n if (parent) setHistory((items) => [...items, parent]);\n else setHistory([]);\n setSelectedSnapshot(detail);\n const url = new URL(location.href);\n url.searchParams.set(\"issue\", String(detail.issue.number));\n url.searchParams.set(\"repo\", detail.repository.full_name);\n globalThis.history.replaceState(null, \"\", `${url.pathname}${url.search}${url.hash}`);\n globalThis.scrollTo({ top: 0, behavior: \"smooth\" });\n } catch (e) {\n setError(e.message);\n } finally {\n setDetailLoading(false);\n }\n }\n\n async function refreshSelectedIssue() {\n if (!selectedSnapshot) return;\n setDetailLoading(true);\n try {\n const detail = await api(\n `/api/public-view/${encodeURIComponent(slug)}/issues/${encodeURIComponent(selectedSnapshot.repository.owner)}/${encodeURIComponent(selectedSnapshot.repository.name)}/${selectedSnapshot.issue.number}`,\n );\n setSelectedSnapshot(detail);\n setHealth(detail.sync ?? health);\n } catch (e) {\n setError(e.message);\n } finally {\n setDetailLoading(false);\n }\n }\n\n if (error) return ;\n if (!view) return ;\n if (selectedSnapshot) {\n return (\n <>\n

\n \n

\n {\n if (history.length) {\n const previous = history[history.length - 1];\n setHistory((items) => items.slice(0, -1));\n setSelectedSnapshot(previous);\n const url = new URL(location.href);\n url.searchParams.set(\"issue\", String(previous.issue.number));\n url.searchParams.set(\"repo\", previous.repository.full_name);\n url.hash = \"\";\n globalThis.history.replaceState(null, \"\", `${url.pathname}${url.search}`);\n } else {\n setSelectedSnapshot(null);\n const url = new URL(location.href);\n url.searchParams.delete(\"issue\");\n url.searchParams.delete(\"repo\");\n globalThis.history.replaceState(null, \"\", url.pathname);\n }\n }}\n backLabel={history.length ? \"Back to parent issue\" : \"Back to issues\"}\n onOpenIssue={(related) => openViewIssue(related, selectedSnapshot)}\n />\n \n \n );\n }\n\n return (\n

\n Public repository view\n {view.repository.full_name}\n

{view.view.name}

\n {view.issues.length} issue{view.issues.length === 1 ? \"\" : \"s\"} · {view.view.state === \"all\" ? \"open by default\" : `${view.view.state} only`}\n {view.view.query ? ` · filter: “${view.view.query}”` : \"\"}\n {view.share?.live ? \" · live from GitHub\" : \"\"}\n

\n loadView(true)}\n refreshing={refreshing}\n />\n

\n {view.view.state === \"all\" && (\n

\n {[\"open\", \"closed\", \"all\"].map((state) => (\n setPublicStateFilter(state)}\n className={`rounded-lg px-3 py-2 text-xs font-bold capitalize transition ${\n publicStateFilter === state\n ? \"bg-white text-slate-950 shadow-sm\"\n : \"text-slate-500 hover:text-slate-800\"\n }`}\n >\n {state}\n \n ))}\n

\n )}\n setQuery(e.target.value)}\n placeholder=\"Search this view…\"\n className=\"w-full rounded-xl border border-slate-200 bg-white px-4 py-2.5 text-sm outline-none focus:border-sky-400 md:w-64\"\n />\n

\n\n {detailLoading && }\n {visibleIssues.length === 0 ? (\n \n ) : (\n

\n {visibleIssues.map((issue, index) => (\n {\n openViewIssue({\n repository: view.repository,\n issue,\n comments: [],\n sub_issues: issue.sub_issues ?? [],\n });\n }}\n className={`w-full p-4 text-left hover:bg-slate-50 sm:p-5 ${index ? \"border-t border-slate-100\" : \"\"}`}\n >\n

{issue.title}

\n #{issue.number}\n

\n {issue.labels.length > 0 &&

}\n

\n updated {timeAgo(issue.updated_at)} by {issue.author?.login ?? \"ghost\"}\n {issue.comments_count > 0 && ` · ${issue.comments_count} comments`}\n \n

\n \n ))}\n

\n )}\n

\n );\n}\n\nfunction Empty({ title, body, action }: { title: string; body: string; action?: React.ReactNode }) {\n return (\n

◫

{title}

{body}

\n {action &&

{action}

}\n

\n );\n}\n\nfunction Loading({ label = \"Loading…\" }: { label?: string }) {\n return

{label}

;\n}\n\nfunction LoadingBar({ label }: { label: string }) {\n return (\n

\n \n {label}\n

\n );\n}\n\nfunction DashboardSkeleton() {\n return (\n

\n {[1, 2, 3].map((item) =>

)}\n

\n {[1, 2, 3, 4].map((item) => (\n

\n ))}\n

\n );\n}\n\nfunction PublicLinksList({ links, onRevoke, mobile = false }: { links: any[]; onRevoke: (share: any) => void; mobile?: boolean }) {\n if (links.length === 0) {\n return

Shared issues and repository views will appear here so you can remove public access later.

;\n }\n return (\n

\n {links.map((share) => (\n

\n {share.type === \"view\" ? \"View\" : \"Issue\"}\n {share.title}\n

\n {share.type === \"view\"\n ? `${share.repo_full_name} · live${share.comment_count ? ` · ${share.comment_count} feedback` : \"\"}`\n : `${share.repo_full_name} #${share.issue_number}`}\n

\n \n

\n ))}\n

\n );\n}\n\nfunction OwnerCommentInbox({\n comments,\n onDismiss,\n onRefresh,\n refreshing,\n}: {\n comments: ViewComment[];\n onDismiss: (comment: ViewComment) => void;\n onRefresh: () => void;\n refreshing: boolean;\n}) {\n return (\n

\n Viewer feedback\n {comments.length}\n

Private suggestions attached to issues in your public views.

\n \n {refreshing ? \"Checking…\" : \"Refresh\"}\n \n

\n {comments.length === 0 ? (\n

No viewer feedback yet

New issue suggestions will appear here automatically.

\n ) : (\n

\n {comments.map((comment) => (\n

\n \n {comment.issue_title || `Issue #${comment.issue_number}`}\n \n

\n {comment.issue_repo_full_name || comment.repo_full_name} #{comment.issue_number} · {comment.view_name}\n

\n onDismiss(comment)}\n className=\"shrink-0 text-xs font-bold text-slate-400 hover:text-red-700\"\n title=\"Hide this feedback from your inbox\"\n >\n Dismiss\n \n

{comment.body}

\n {comment.author.avatar_url ? $\"\"$ : null}\n {comment.author.login}\n · {timeAgo(comment.created_at)}\n

\n ))}\n

\n )}\n

\n );\n}\n\nfunction AppShell({ children, user, onLogout, sync, syncedAt }: any) {\n return (\n

\n \n #\n \n Issue Share\n GitHub issues, clearly shared\n \n \n

\n {sync &&

}\n {user && (\n <>\n $\"\"$ \n {user.login}\n \n \n )}\n View source\n

{children}

\n \n

\n );\n}\n\nexport function App() {\n const publicSlug = location.pathname.match(/^\\/s\\/([^/]+)$/)?.[1];\n const publicViewSlug = location.pathname.match(/^\\/v\\/([^/]+)$/)?.[1];\n const [config, setConfig] = useState(null);\n const [me, setMe] = useState(null);\n const [repos, setRepos] = useState([]);\n const [selectedRepo, setSelectedRepo] = useState(null);\n const [issues, setIssues] = useState([]);\n const [snapshot, setSnapshot] = useState(null);\n const [snapshotHistory, setSnapshotHistory] = useState([]);\n const [stateFilter, setStateFilter] = useState(\"open\");\n const [query, setQuery] = useState(\"\");\n const [reposLoading, setReposLoading] = useState(false);\n const [issuesLoading, setIssuesLoading] = useState(false);\n const [detailLoading, setDetailLoading] = useState(false);\n const [sharing, setSharing] = useState(false);\n const [error, setError] = useState(\"\");\n const [shareUrl, setShareUrl] = useState(\"\");\n const [publicLinks, setPublicLinks] = useState([]);\n const [ownerComments, setOwnerComments] = useState([]);\n const [ownerCommentsLoading, setOwnerCommentsLoading] = useState(false);\n const [health, setHealth] = useState(null);\n const [lastSyncedAt, setLastSyncedAt] = useState(null);\n\n useEffect(() => {\n if (publicSlug || publicViewSlug) return;\n Promise.all([api(\"/api/config\"), api(\"/api/me\")]).then(([c, m]) => {\n setConfig(c);\n setMe(m);\n if (m.authenticated) {\n loadRepos();\n loadPublicLinks();\n loadOwnerComments();\n }\n }).catch((e) => setError(e.message));\n }, [publicSlug, publicViewSlug]);\n\n async function loadRepos() {\n setReposLoading(true);\n try {\n const data = await api(\"/api/repos\");\n setRepos(data.installations ?? []);\n if (data.sync) {\n setHealth(data.sync);\n setLastSyncedAt(data.sync.checked_at);\n }\n } catch (e) {\n setError(e.message);\n } finally {\n setReposLoading(false);\n }\n }\n\n async function loadPublicLinks() {\n try {\n const data = await api(\"/api/shares\");\n setPublicLinks(data.links ?? data.shares ?? []);\n } catch (e) {\n setError(e.message);\n }\n }\n\n async function loadOwnerComments() {\n setOwnerCommentsLoading(true);\n try {\n const data = await api(\"/api/view-comments\");\n setOwnerComments(data.comments ?? []);\n } catch (e) {\n setError(e.message);\n } finally {\n setOwnerCommentsLoading(false);\n }\n }\n\n useEffect(() => {\n if (!me?.authenticated) return;\n const interval = setInterval(loadOwnerComments, 15_000);\n return () => clearInterval(interval);\n }, [me?.authenticated]);\n\n useEffect(() => {\n if (!me?.authenticated) return;\n const check = () => api(\"/api/github-health\").then(setHealth).catch(() => {\n setHealth({\n status: \"degraded\",\n source: \"github\",\n checked_at: new Date().toISOString(),\n message: \"GitHub health check failed.\",\n });\n });\n check();\n const interval = setInterval(check, 60_000);\n return () => clearInterval(interval);\n }, [me?.authenticated]);\n\n async function chooseRepo(repo: any) {\n setSelectedRepo(repo);\n setSnapshot(null);\n setSnapshotHistory([]);\n setIssuesLoading(true);\n setError(\"\");\n try {\n const [owner, name] = repo.full_name.split(\"/\");\n const data = await api(`/api/repos/${encodeURIComponent(owner)}/${encodeURIComponent(name)}/issues?state=${stateFilter}`);\n setIssues(data.issues);\n if (data.sync) {\n setHealth(data.sync);\n setLastSyncedAt(data.sync.checked_at);\n }\n } catch (e) {\n setError(e.message);\n } finally {\n setIssuesLoading(false);\n }\n }\n\n useEffect(() => {\n if (selectedRepo) chooseRepo(selectedRepo);\n }, [stateFilter]);\n\n async function openIssue(issue: Issue) {\n setDetailLoading(true);\n setError(\"\");\n try {\n const [owner, repo] = selectedRepo.full_name.split(\"/\");\n const detail = await api(`/api/repos/${encodeURIComponent(owner)}/${encodeURIComponent(repo)}/issues/${issue.number}?subIssues=true`);\n setSnapshot(detail);\n if (detail.sync) {\n setHealth(detail.sync);\n setLastSyncedAt(detail.sync.checked_at);\n }\n setSnapshotHistory([]);\n } catch (e) {\n setError(e.message);\n } finally {\n setDetailLoading(false);\n }\n }\n\n async function openRelatedIssue(target: Snapshot) {\n if (!snapshot) return;\n setDetailLoading(true);\n setError(\"\");\n try {\n const detail = await api(\n `/api/repos/${encodeURIComponent(target.repository.owner)}/${encodeURIComponent(target.repository.name)}/issues/${target.issue.number}?subIssues=true`,\n );\n setSnapshotHistory((items) => [...items, snapshot]);\n setSnapshot(detail);\n if (detail.sync) {\n setHealth(detail.sync);\n setLastSyncedAt(detail.sync.checked_at);\n }\n setShareUrl(\"\");\n globalThis.scrollTo({ top: 0, behavior: \"smooth\" });\n } catch (e) {\n setError(e.message);\n } finally {\n setDetailLoading(false);\n }\n }\n\n async function shareIssue(includeSubIssues: boolean) {\n if (!snapshot) return;\n setSharing(true);\n setError(\"\");\n try {\n const data = await api(\"/api/shares\", {\n method: \"POST\",\n body: JSON.stringify({\n owner: snapshot.repository.owner,\n repo: snapshot.repository.name,\n number: snapshot.issue.number,\n includeSubIssues,\n }),\n });\n setShareUrl(data.url);\n await loadPublicLinks();\n try {\n await navigator.clipboard.writeText(data.url);\n } catch {\n // URL remains visible if clipboard permission is unavailable.\n }\n } catch (e) {\n setError(e.message);\n } finally {\n setSharing(false);\n }\n }\n\n async function shareCurrentView() {\n if (!selectedRepo) return;\n setSharing(true);\n setError(\"\");\n try {\n const [owner, repo] = selectedRepo.full_name.split(\"/\");\n const data = await api(\"/api/views\", {\n method: \"POST\",\n body: JSON.stringify({ owner, repo, state: stateFilter, query }),\n });\n setShareUrl(data.url);\n await loadPublicLinks();\n try {\n await navigator.clipboard.writeText(data.url);\n } catch {\n // URL remains visible if clipboard permission is unavailable.\n }\n } catch (e) {\n setError(e.message);\n } finally {\n setSharing(false);\n }\n }\n\n async function revokeShare(share: any) {\n const subject = share.type === \"view\"\n ? `${share.title} for ${share.repo_full_name}`\n : `${share.repo_full_name} #${share.issue_number}`;\n if (!globalThis.confirm(`Remove public access to ${subject}? The shared URL will stop working immediately.`)) return;\n setError(\"\");\n try {\n const endpoint = share.type === \"view\" ? \"/api/views/\" : \"/api/shares/\";\n await api(`${endpoint}${encodeURIComponent(share.slug)}`, { method: \"DELETE\" });\n setPublicLinks((links) => links.filter((link) => link.slug !== share.slug));\n if (shareUrl === share.url) setShareUrl(\"\");\n } catch (e) {\n setError(e.message);\n }\n }\n\n async function dismissOwnerComment(comment: ViewComment) {\n if (!globalThis.confirm(\"Dismiss this viewer feedback? It will also disappear from the sender’s browser.\")) return;\n try {\n await api(`/api/view-comments/${encodeURIComponent(comment.id)}`, { method: \"DELETE\" });\n setOwnerComments((items) => items.filter((item) => item.id !== comment.id));\n setPublicLinks((links) => links.map((link) =>\n link.slug === comment.view_slug\n ? { ...link, comment_count: Math.max(0, Number(link.comment_count ?? 0) - 1) }\n : link\n ));\n } catch (e) {\n setError(e.message);\n }\n }\n\n async function logout() {\n await api(\"/auth/logout\", { method: \"POST\", body: \"{}\" });\n location.href = \"/\";\n }\n\n const visibleIssues = useMemo(() => {\n const needle = query.toLowerCase().trim();\n if (!needle) return issues;\n return issues.filter((issue) =>\n issue.title.toLowerCase().includes(needle) ||\n String(issue.number).includes(needle) ||\n issue.labels.some((label) => label.name.toLowerCase().includes(needle))\n );\n }, [issues, query]);\n\n if (publicSlug) return ;\n if (publicViewSlug) return ;\n if (!config || !me) return ;\n\n if (!config.configured) {\n return (\n \n Open setup instructions}\n />\n \n );\n }\n\n if (!me.authenticated) {\n return (\n \n

\n Private by default · public when you choose\n

Turn any GitHub issue into a clean, shareable page.

Browse every issue across the repositories you select. Share a complete, stable snapshot—with labels, comments, assignees, milestones, and optional sub-issues—in one click.

\n \n \n Continue with GitHub\n \n

Then choose your personal account or a GitHub organization and select its repositories.

\n acme/roadmap #218\n \n

Add audit history to shared reports

\n 3 comments · 2 sub-issuesPublic snapshot ↗\n

\n \n );\n }\n\n const repoCount = repos.reduce((sum, group) => sum + group.repositories.length, 0);\n const allRepos = repos.flatMap((group) => group.repositories);\n return (\n \n {error && (\n

\n {error}\n

\n )}\n {shareUrl && (\n

Public link created and copied{shareUrl}

\n Open link ↗\n

\n )}\n

\n \n

\n \n\n {snapshot ? (\n {\n if (snapshotHistory.length) {\n const previous = snapshotHistory[snapshotHistory.length - 1];\n setSnapshotHistory((items) => items.slice(0, -1));\n setSnapshot(previous);\n } else {\n setSnapshot(null);\n }\n setShareUrl(\"\");\n }}\n backLabel={snapshotHistory.length ? \"Back to parent issue\" : \"Back to issues\"}\n onOpenIssue={openRelatedIssue}\n onShare={shareIssue}\n sharing={sharing}\n />\n ) : (\n

Repository

{repoCount} with access

\n {config.appSlug && (\n \n Add repos\n \n )}\n

\n {\n const repo = allRepos.find((item) => String(item.id) === e.target.value);\n if (repo) chooseRepo(repo);\n }}\n className=\"w-full rounded-xl border border-slate-200 bg-white px-3 py-3 text-sm font-semibold text-slate-800 outline-none focus:border-sky-400\"\n >\n \n {repos.map((group) => (\n \n {group.repositories.map((repo) => (\n \n ))}\n \n ))}\n \n

\n\n

\n Public links\n {publicLinks.length}\n

\n ⌄\n

\n \n

\n\n

Repositories

{repoCount} with access

\n {config.appSlug && Add org / repos}\n

\n {reposLoading && !repos.length ? : repos.length === 0 ? (\n Choose organization & repositories}\n />\n ) : (\n

\n {repos.map((group) => (\n

\n $\"\"$ \n {group.account.login}\n \n {group.account.type === \"Organization\" ? \"Organization\" : \"Personal\"}\n \n

\n {group.repositories.map((repo) => (\n chooseRepo(repo)}\n className={`w-full rounded-xl px-3 py-2.5 text-left text-sm font-semibold ${\n selectedRepo?.id === repo.id ? \"bg-gray-900 text-white\" : \"text-slate-700 hover:bg-slate-100\"\n }`}\n >\n {repo.name}\n \n {repo.private ? \"Private\" : \"Public\"} · {repo.open_issues_count} open\n \n \n ))}\n

\n ))}\n

\n )}\n

Public links

\n {publicLinks.length} active\n

\n \n

\n\n

\n {detailLoading && }\n {!selectedRepo ? (\n \n ) : (\n <>\n

Repository

{selectedRepo.full_name}

\n setQuery(e.target.value)} placeholder=\"Search issues or labels…\" className=\"col-span-2 min-w-0 rounded-xl border border-slate-200 bg-white px-4 py-2.5 text-sm outline-none focus:border-sky-400 sm:min-w-[230px]\" />\n \n \n {sharing ? \"Publishing…\" : <>Publish viewPublish this view}\n \n

\n {issuesLoading ? : visibleIssues.length === 0 ? (\n \n ) : (\n

\n {visibleIssues.map((issue, index) => (\n openIssue(issue)}\n className={`w-full p-4 text-left hover:bg-slate-50 sm:p-5 ${index ? \"border-t border-slate-100\" : \"\"}`}\n >\n

{issue.title}

\n #{issue.number}\n

\n {issue.labels.length > 0 &&

}\n

\n {issue.state === \"open\" ? \"opened\" : \"updated\"} {timeAgo(issue.updated_at)} by {issue.author?.login ?? \"ghost\"}\n {issue.comments_count > 0 && ` · ${issue.comments_count} comments`}\n \n

\n \n ))}\n

\n )}\n \n )}\n

\n )}\n \n );\n}\n",[],[176,271,273],"cd3e570c-deca-47f8-beba-ae30ebaea107",["D",1784919467427],[195,196],[176,271],["D",1784919467427],[194,197,198,199,200,201,202],[176],["D",1784919467427],["D",1789473046147],{"_103":102,"_111":107},{"_103":102,"_104":105,"_106":107,"_18":56,"_108":109,"_110":25},{"_13":14,"_32":89,"_43":42,"_90":44,"_91":92,"_93":94,"_95":50,"_96":97,"_98":99,"_100":45,"_101":102},"ctx",{"_82":-5,"_133":326,"_327":328,"_329":330,"_331":25,"_332":25,"_333":25,"_334":59,"_335":-5,"_336":-7,"_337":-7,"_338":63,"_339":25,"_340":25,"_341":-5,"_342":25,"_343":25,"_344":25,"_345":-5},"ENV",{"_297":298,"_299":300,"_301":89,"_302":303,"_304":305,"_306":307,"_308":309,"_310":311,"_312":313,"_314":315,"_316":317,"_318":319,"_320":321,"_322":323,"_324":325},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

GitHub issues,clearly shared.

Add audit history to shared reports

{issue.title}

Conversation

Sub-issues ({snapshot.sub_issues.length})

\n {isOwner ? `Feedback on #${issueContext.number}` : `Suggest a change to #${issueContext.number}`}\n

{view.view.name}

{issue.title}

{title}

Turn any GitHub issue into a clean, shareable page.

Add audit history to shared reports

Repository

{selectedRepo.full_name}

{issue.title}

GitHub issues,
clearly shared.

Diff · v52