[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_207":208,"_209":210},"routes/_app.x.$handle.$name",{"_98":97,"_37":49,"_106":88,"_32":107,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_26":-5,"_118":-5,"_119":-5,"_120":30,"_121":122,"_123":124,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_47":48,"_37":49,"_42":50,"_51":-5,"_52":30,"_53":54,"_55":54,"_56":-5,"_57":-5,"_19":58,"_59":-5,"_60":30,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":-5,"_68":-5,"_69":-5,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":30},"version",12,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","216fd905-e4ea-4844-a504-d3e4bbfa32f5","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":30,"_32":33,"_34":33},"file",{"_35":36,"_37":33,"_38":39,"_40":41,"_42":43,"_44":14,"_45":46,"_29":30},"previous","deleted",false,"deletedHere","path","test-headers.ts","latestPath","fileId","36ebee16-3830-11f1-9695-42b51c65c3df","name","fileType","script","content","// Verify that the DNS query response includes Report-To and NEL headers\nconst endpoint = \"https://recvfrom--799b064e382f11f18e5042b51c65c3df.web.val.run\";\nconst resp = await fetch(`${endpoint}/dns-query?dns=AAEBAAABAAAAAAAAB2V4YW1wbGUDY29tAAABAAE`);\n\nconsole.log(\"Status:\", resp.status);\nconsole.log(\"Content-Type:\", resp.headers.get(\"content-type\"));\nconsole.log(\"Report-To:\", resp.headers.get(\"report-to\"));\nconsole.log(\"NEL:\", resp.headers.get(\"nel\"));\n","createdAt",["D",1776191515609],"branchVersion","branchId","79974298-382f-11f1-8e50-42b51c65c3df","id","79967016-382f-11f1-8e50-42b51c65c3df","DoH-Reporting-API-Example",["D",1776191197971],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","019a794a-0679-70fc-ae0d-f9def04035cc","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019a794a-067a-77b8-af7e-fb3031d870b7","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_105":101},"org",{"_98":97,"_99":-5,"_100":101,"_19":58,"_102":103,"_104":30},"branch",{"_13":87,"_37":88,"_47":46,"_89":48,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":49,"_96":97},"isOwned",14,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","recvfrom","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18zNU9Cd1BqUjhyWWlQeFpvdjlrcmRHbmJtZEUifQ","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_47":48,"_37":49,"_42":203,"_51":-5,"_52":30,"_53":54,"_55":54,"_56":-5,"_57":-5,"_19":58,"_59":-5,"_60":30,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":-5,"_68":-5,"_69":-5,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":204,"_82":205,"_84":206,"_86":30},"tree",[182,183,184,185,186],"files",[182,183,184,185,186],"counts",{"_171":64,"_172":173,"_174":173,"_175":176,"_177":178},"contents",[129,130,131,132,133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_47":164,"_37":165,"_35":166,"_137":-5,"_45":46,"_44":167,"_139":30,"_42":168,"_13":64,"_38":39,"_40":169,"_29":30,"_143":-5,"_32":170},{"_47":155,"_37":156,"_35":157,"_137":-5,"_45":46,"_44":158,"_139":30,"_42":159,"_13":160,"_38":161,"_40":162,"_29":30,"_143":-5,"_32":163},{"_47":148,"_37":149,"_35":150,"_137":-5,"_45":46,"_44":151,"_139":124,"_42":152,"_13":64,"_38":39,"_40":153,"_29":30,"_143":-5,"_32":154},{"_47":145,"_37":33,"_35":36,"_137":-5,"_45":46,"_44":14,"_139":124,"_42":146,"_13":64,"_38":39,"_40":41,"_29":30,"_143":-5,"_32":147},{"_47":134,"_37":135,"_35":136,"_137":-5,"_45":46,"_44":138,"_139":124,"_42":140,"_13":141,"_38":39,"_40":142,"_29":30,"_143":-5,"_32":144},"d194e072-382f-11f1-b6b0-42b51c65c3df","test.ts","c46ae93c-382f-11f1-90c9-42b51c65c3df","parentId",8,"latest",["D",1776191345554],3,"// Build a minimal DNS query for example.com A record\nfunction buildDnsQuery(): Uint8Array {\n const header = new Uint8Array([\n 0x00, 0x01, // Transaction ID\n 0x01, 0x00, // Flags: RD=1\n 0x00, 0x01, // QDCOUNT = 1\n 0x00, 0x00, // ANCOUNT = 0\n 0x00, 0x00, // NSCOUNT = 0\n 0x00, 0x00, // ARCOUNT = 0\n ]);\n\n // QNAME: \\x07example\\x03com\\x00\n const qname = new Uint8Array([\n 7, ...new TextEncoder().encode(\"example\"),\n 3, ...new TextEncoder().encode(\"com\"),\n 0,\n ]);\n\n // QTYPE=A (1), QCLASS=IN (1)\n const qtype = new Uint8Array([0x00, 0x01, 0x00, 0x01]);\n\n const query = new Uint8Array(header.length + qname.length + qtype.length);\n query.set(header, 0);\n query.set(qname, header.length);\n query.set(qtype, header.length + qname.length);\n return query;\n}\n\n// Base64url encode (no padding)\nfunction base64urlEncode(bytes: Uint8Array): string {\n let binary = \"\";\n for (const b of bytes) binary += String.fromCharCode(b);\n return btoa(binary).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nconst query = buildDnsQuery();\nconst encoded = base64urlEncode(query);\nconsole.log(\"Base64url DNS query:\", encoded);\n\nconst endpoint = \"https://recvfrom--799b064e382f11f18e5042b51c65c3df.web.val.run\";\nconst url = `${endpoint}/dns-query?dns=${encoded}`;\nconsole.log(\"Fetching:\", url);\n\nconst resp = await fetch(url);\nconsole.log(\"Status:\", resp.status);\nconsole.log(\"Content-Type:\", resp.headers.get(\"content-type\"));\n\nconst body = new Uint8Array(await resp.arrayBuffer());\nconsole.log(\"Response length:\", body.length, \"bytes\");\nconsole.log(\"Response hex:\", Array.from(body).map(b => b.toString(16).padStart(2, \"0\")).join(\" \"));\n\n// Parse the response\nconst txId = (body[0] << 8) | body[1];\nconst flags = (body[2] << 8) | body[3];\nconst qdcount = (body[4] << 8) | body[5];\nconst ancount = (body[6] << 8) | body[7];\nconsole.log(`TX ID: ${txId}, Flags: 0x${flags.toString(16)}, QDCOUNT: ${qdcount}, ANCOUNT: ${ancount}`);\n\n// Check answer section IP\nconst answerStart = body.length - 4;\nconsole.log(`Answer IP: ${body[answerStart]}.${body[answerStart+1]}.${body[answerStart+2]}.${body[answerStart+3]}`);\n","label",[135],"36ebed44-3830-11f1-9695-42b51c65c3df",["D",1776191515609],[33],"27c7e282-3830-11f1-9695-42b51c65c3df","reports.ts","27c7e372-3830-11f1-9695-42b51c65c3df",11,["D",1776191490193],"/**\n * Reporting API v0 collector endpoint.\n *\n * Browsers POST an array of report objects as `application/reports+json`.\n * Each report has: { age, type, url, user_agent, body: { ... } }\n *\n * For NEL reports, body contains fields like:\n * sampling_fraction, server_ip, protocol, method, status_code,\n * elapsed_time, phase, type (e.g. \"ok\", \"dns.name_not_resolved\", etc.)\n */\n\nexport async function handleReports(req: Request): Promise {\n const contentType = req.headers.get(\"content-type\") ?? \"\";\n\n if (\n !contentType.includes(\"application/reports+json\") &&\n !contentType.includes(\"application/json\")\n ) {\n return new Response(\"Unsupported Content-Type\", { status: 415 });\n }\n\n let reports: unknown;\n try {\n reports = await req.json();\n } catch {\n return new Response(\"Invalid JSON\", { status: 400 });\n }\n\n if (!Array.isArray(reports)) {\n return new Response(\"Expected a JSON array of reports\", { status: 400 });\n }\n\n // Log each report for visibility in Val Town traces/logs\n for (const report of reports) {\n console.log(\"[report]\", JSON.stringify(report));\n }\n\n console.log(`Received ${reports.length} report(s)`);\n\n // Respond 204 No Content — the browser expects a success status and no body\n return new Response(null, {\n status: 204,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n },\n });\n}\n",[149],"127ad150-3830-11f1-add2-42b51c65c3df","main.ts","799b064e-382f-11f1-8e50-42b51c65c3df",9,["D",1776191454424],4,"http","/**\n * DNS-over-HTTPS (DoH) style endpoint with Reporting API v0 (NEL) integration.\n *\n * Routes:\n * GET /dns-query?dns= — DoH resolver (fixed A record response)\n * POST /reports — Reporting API v0 collector endpoint\n */\nimport { handleDnsQuery } from \"./dns-query.ts\";\nimport { handleReports } from \"./reports.ts\";\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.pathname === \"/dns-query\" && req.method === \"GET\") {\n return handleDnsQuery(req, url);\n }\n\n if (url.pathname === \"/reports\" && req.method === \"POST\") {\n return handleReports(req);\n }\n\n // CORS preflight for /reports (browsers send OPTIONS before POST)\n if (url.pathname === \"/reports\" && req.method === \"OPTIONS\") {\n return new Response(null, {\n status: 204,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Access-Control-Max-Age\": \"86400\",\n },\n });\n }\n\n return new Response(\"Not Found\", { status: 404 });\n}\n",[156],"20d12ac4-3830-11f1-bb30-42b51c65c3df","dns-query.ts","20d12b96-3830-11f1-bb30-42b51c65c3df",10,["D",1776191478220],"/**\n * DNS-over-HTTPS query handler.\n * Accepts base64url-encoded DNS wire-format queries, returns a fixed A record.\n *\n * Includes Report-To + NEL headers so browsers report 100% of successful\n * requests to the /reports collector endpoint.\n */\n\nconst REPORTS_URL = \"https://recvfrom--799b064e382f11f18e5042b51c65c3df.web.val.run/reports\";\n\n/** Reporting API v0 Report-To header value */\nconst REPORT_TO = JSON.stringify({\n group: \"dns-nel\",\n max_age: 2592000, // 30 days\n endpoints: [{ url: REPORTS_URL }],\n});\n\n/** NEL header — report 100% of successes AND 100% of failures */\nconst NEL = JSON.stringify({\n report_to: \"dns-nel\",\n max_age: 2592000,\n success_fraction: 1.0,\n failure_fraction: 1.0,\n});\n\nexport function handleDnsQuery(_req: Request, url: URL): Response {\n const dnsParam = url.searchParams.get(\"dns\");\n if (!dnsParam) {\n return new Response(\"Missing 'dns' query parameter\", { status: 400 });\n }\n\n // Decode the base64url-encoded DNS query\n let queryBytes: Uint8Array;\n try {\n const base64 = dnsParam.replace(/-/g, \"+\").replace(/_/g, \"/\");\n const padded = base64 + \"=\".repeat((4 - (base64.length % 4)) % 4);\n const binaryString = atob(padded);\n queryBytes = new Uint8Array(binaryString.length);\n for (let i = 0; i < binaryString.length; i++) {\n queryBytes[i] = binaryString.charCodeAt(i);\n }\n } catch {\n return new Response(\"Invalid base64url-encoded DNS query\", { status: 400 });\n }\n\n if (queryBytes.length < 12) {\n return new Response(\"DNS query too short\", { status: 400 });\n }\n\n const txId = queryBytes.slice(0, 2);\n\n // Find end of QNAME (null-terminated) + QTYPE (2) + QCLASS (2)\n let qnameEnd = 12;\n while (qnameEnd < queryBytes.length && queryBytes[qnameEnd] !== 0) {\n qnameEnd++;\n }\n qnameEnd++; // skip null terminator\n const questionEnd = qnameEnd + 4;\n const questionBytes = queryBytes.slice(12, questionEnd);\n\n // DNS response header\n const header = new Uint8Array(12);\n header[0] = txId[0];\n header[1] = txId[1];\n header[2] = 0x81; // QR=1, Opcode=0, AA=0, TC=0, RD=1\n header[3] = 0x80; // RA=1, Z=0, RCODE=0 (No Error)\n header[4] = 0x00;\n header[5] = 0x01; // QDCOUNT = 1\n header[6] = 0x00;\n header[7] = 0x01; // ANCOUNT = 1\n header[8] = 0x00;\n header[9] = 0x00; // NSCOUNT = 0\n header[10] = 0x00;\n header[11] = 0x00; // ARCOUNT = 0\n\n // Fixed A record answer: 93.184.216.34, TTL 300\n const answer = new Uint8Array([\n 0xc0, 0x0c, // Name: pointer to QNAME at offset 12\n 0x00, 0x01, // Type: A\n 0x00, 0x01, // Class: IN\n 0x00, 0x00, 0x01, 0x2c, // TTL: 300s\n 0x00, 0x04, // RDLENGTH: 4\n 93, 184, 216, 34, // RDATA: 93.184.216.34\n ]);\n\n // Assemble response\n const response = new Uint8Array(header.length + questionBytes.length + answer.length);\n response.set(header, 0);\n response.set(questionBytes, header.length);\n response.set(answer, header.length + questionBytes.length);\n\n return new Response(response, {\n status: 200,\n headers: {\n \"Content-Type\": \"application/dns-message\",\n \"Cache-Control\": \"max-age=300\",\n \"Report-To\": REPORT_TO,\n \"NEL\": NEL,\n },\n });\n}\n",[165],"pulls","branches",1,"forks","envVars",{"_179":64,"_181":64},"connections",{"_179":64,"_180":64},"count","unfilledCount","emptyCount",{"_47":164,"_37":165,"_35":166,"_137":-5,"_45":46,"_44":167,"_139":30,"_42":200,"_13":64,"_38":39,"_40":169,"_29":30,"_143":-5,"_188":201,"_32":202},{"_47":155,"_37":156,"_35":157,"_137":-5,"_45":46,"_44":158,"_139":30,"_42":197,"_13":160,"_38":161,"_40":162,"_29":30,"_143":-5,"_188":198,"_32":199},{"_47":148,"_37":149,"_35":150,"_137":-5,"_45":46,"_44":151,"_139":124,"_42":194,"_13":64,"_38":39,"_40":153,"_29":30,"_143":-5,"_188":195,"_32":196},{"_47":145,"_37":33,"_35":36,"_137":-5,"_45":46,"_44":14,"_139":124,"_42":191,"_13":64,"_38":39,"_40":41,"_29":30,"_143":-5,"_188":192,"_32":193},{"_47":134,"_37":135,"_35":136,"_137":-5,"_45":46,"_44":138,"_139":124,"_42":187,"_13":141,"_38":39,"_40":142,"_29":30,"_143":-5,"_188":189,"_32":190},["D",1776191345554],"children",[],[135],["D",1776191515609],[],[33],["D",1776191490193],[],[149],["D",1776191454424],[],[156],["D",1776191478220],[],[165],["D",1776191197971],{"_98":97,"_105":101},{"_98":97,"_99":-5,"_100":101,"_19":58,"_102":103,"_104":30},{"_13":87,"_37":88,"_47":46,"_89":48,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":49,"_96":97},"ctx",{"_80":-5,"_126":240,"_241":242,"_243":244,"_245":30,"_246":30,"_247":30,"_248":124,"_249":-5,"_250":-7,"_251":-7,"_252":64,"_253":30,"_254":30,"_255":-5,"_256":30,"_257":30,"_258":30,"_259":-5},"ENV",{"_211":212,"_213":214,"_215":88,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233,"_234":235,"_236":237,"_238":239},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v12