GitHub's hourly limit is spent

\n Without a token GitHub allows 60 requests per hour per IP address, and\n Val Town shares IPs — so the budget can be used up by someone else\n entirely. A token raises it to 5,000. It needs no scopes: this val only\n reads public data.\n

\n \n Create a token on GitHub\n {\" \"}\n (leave every scope unchecked).\n
\n Add it as{\" \"}\n \n {setup.tokenVar}\n {\" \"}\n on this val:{\" \"}\n \n {setup.envUrl}\n \n

\n The page reloads on its own once a token is set — nothing else to\n change.\n

\n \n );\n}","label",[168,169,66],"frontend","components","pulls","branches","forks","envVars",{"_177":179,"_180":26},"connections",{"_177":26,"_178":26},"count","unfilledCount",2,"emptyCount",{"_33":342,"_13":168,"_64":236,"_43":-5,"_35":36,"_160":163,"_161":96,"_37":343,"_39":26,"_67":285,"_164":-5,"_69":24,"_166":-5,"_207":344,"_17":345},{"_33":338,"_13":169,"_64":159,"_43":236,"_35":36,"_160":163,"_161":96,"_37":339,"_39":26,"_67":285,"_164":-5,"_69":24,"_166":-5,"_207":340,"_17":341},{"_33":330,"_13":331,"_64":332,"_43":159,"_35":36,"_160":333,"_161":96,"_37":334,"_39":179,"_67":68,"_164":335,"_69":24,"_166":-5,"_207":336,"_17":337},{"_33":322,"_13":323,"_64":324,"_43":159,"_35":36,"_160":325,"_161":96,"_37":326,"_39":163,"_67":68,"_164":327,"_69":24,"_166":-5,"_207":328,"_17":329},{"_33":314,"_13":315,"_64":316,"_43":159,"_35":36,"_160":317,"_161":96,"_37":318,"_39":179,"_67":68,"_164":319,"_69":24,"_166":-5,"_207":320,"_17":321},{"_33":306,"_13":307,"_64":308,"_43":159,"_35":36,"_160":309,"_161":96,"_37":310,"_39":163,"_67":68,"_164":311,"_69":24,"_166":-5,"_207":312,"_17":313},{"_33":158,"_13":66,"_64":65,"_43":159,"_35":36,"_160":75,"_161":96,"_37":303,"_39":163,"_67":68,"_164":165,"_69":24,"_166":-5,"_207":304,"_17":305},{"_33":296,"_13":297,"_64":298,"_43":159,"_35":36,"_160":222,"_161":96,"_37":299,"_39":26,"_67":68,"_164":300,"_69":24,"_166":-5,"_207":301,"_17":302},{"_33":288,"_13":289,"_64":290,"_43":159,"_35":36,"_160":291,"_161":96,"_37":292,"_39":26,"_67":68,"_164":293,"_69":24,"_166":-5,"_207":294,"_17":295},{"_33":283,"_13":266,"_64":261,"_43":236,"_35":36,"_160":239,"_161":96,"_37":284,"_39":26,"_67":285,"_164":-5,"_69":24,"_166":-5,"_207":286,"_17":287},{"_33":275,"_13":276,"_64":277,"_43":261,"_35":36,"_160":278,"_161":96,"_37":279,"_39":239,"_67":68,"_164":280,"_69":24,"_166":-5,"_207":281,"_17":282},{"_33":267,"_13":268,"_64":269,"_43":261,"_35":36,"_160":270,"_161":96,"_37":271,"_39":26,"_67":68,"_164":272,"_69":24,"_166":-5,"_207":273,"_17":274},{"_33":258,"_13":259,"_64":260,"_43":261,"_35":36,"_160":239,"_161":96,"_37":262,"_39":26,"_67":68,"_164":263,"_69":24,"_166":-5,"_207":264,"_17":265},{"_33":250,"_13":251,"_64":252,"_43":236,"_35":36,"_160":253,"_161":96,"_37":254,"_39":163,"_67":21,"_164":255,"_69":24,"_166":-5,"_207":256,"_17":257},{"_33":243,"_13":244,"_64":245,"_43":236,"_35":36,"_160":163,"_161":96,"_37":246,"_39":26,"_67":68,"_164":247,"_69":24,"_166":-5,"_207":248,"_17":249},{"_33":233,"_13":234,"_64":235,"_43":236,"_35":36,"_160":237,"_161":96,"_37":238,"_39":239,"_67":68,"_164":240,"_69":24,"_166":-5,"_207":241,"_17":242},{"_33":226,"_13":227,"_64":228,"_43":-5,"_35":36,"_160":163,"_161":96,"_37":229,"_39":26,"_67":21,"_164":230,"_69":24,"_166":-5,"_207":231,"_17":232},{"_33":218,"_13":219,"_64":220,"_43":-5,"_35":36,"_160":122,"_161":96,"_37":221,"_39":222,"_67":21,"_164":223,"_69":24,"_166":-5,"_207":224,"_17":225},{"_33":210,"_13":211,"_64":212,"_43":-5,"_35":36,"_160":213,"_161":96,"_37":214,"_39":163,"_67":68,"_164":215,"_69":24,"_166":-5,"_207":216,"_17":217},{"_33":201,"_13":202,"_64":94,"_43":-5,"_35":36,"_160":203,"_161":96,"_37":204,"_39":163,"_67":205,"_164":206,"_69":24,"_166":14,"_207":208,"_17":209},"3dedf68e-dbf1-4fb9-8664-78009944caba","index.ts",6,["D",1789598579699],"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { Hono } from \"npm:hono\";\nimport { Root } from \"./frontend/root.tsx\";\nimport {\n configuredUser,\n DEFAULT_USER,\n fetchStars,\n GitHubError,\n hasToken,\n readCache,\n TOKEN_VAR,\n USER_VAR,\n writeCache,\n} from \"./github.ts\";\n\nconst app = new Hono();\n\n/** GitHub usernames: 1–39 chars, alphanumeric or hyphen, no leading hyphen. */\nconst USERNAME = /^[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,38})$/;\n\n/**\n * What the page needs in order to explain a rate-limited val: whether a token\n * exists, where to put one, and whose stars we're reading by default.\n *\n * Nothing secret crosses the wire — only whether the gap exists. The env var\n * editor URL is derived from the val itself, so a fork sends people to its own\n * settings rather than to ours.\n */\nfunction setupState() {\n return {\n token: hasToken(),\n tokenVar: TOKEN_VAR,\n userVar: USER_VAR,\n defaultUser: DEFAULT_USER,\n envUrl: `${parseVal().links.self.val}/environment-variables?key=${TOKEN_VAR}`,\n newTokenUrl:\n \"https://github.com/settings/tokens/new?description=val-town%20github-stars\",\n };\n}\n\n// ── Shell ───────────────────────────────────────────────────────\n// Never cached, so it can stamp the current version into each asset URL.\napp.get(\"/\", (c) => c.html(Root()));\n\n// The version-addressed asset URLs Root() stamps, cached immutably.\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ── API ─────────────────────────────────────────────────────────\n\napp.get(\"/api/stars\", async (c) => {\n const user = (c.req.query(\"user\") || configuredUser()).trim();\n if (!USERNAME.test(user)) {\n return c.json({ error: `\"${user}\" is not a GitHub username` }, 400);\n }\n\n // Cached for a few minutes, so most page views never touch GitHub at all —\n // unauthenticated access is only 60 requests/hour, and that budget is per IP\n // on a shared platform. `?refresh=1` bypasses it.\n if (c.req.query(\"refresh\") !== \"1\") {\n const cached = await readCache(user);\n if (cached) return c.json({ ...cached, cached: true, setup: setupState() });\n }\n\n try {\n const snapshot = await fetchStars(user);\n await writeCache(user, snapshot);\n return c.json({ ...snapshot, cached: false, setup: setupState() });\n } catch (err) {\n if (err instanceof GitHubError) {\n const body = {\n error: err.message,\n reason: err.rateLimited\n ? \"rate-limit\" as const\n : err.status === 404\n ? \"no-user\" as const\n : \"github\" as const,\n rateLimit: err.rateLimit,\n setup: setupState(),\n };\n // 500, never 502: the CDN replaces an origin 502 with its own HTML error\n // page, so this JSON body would never reach the client and the browser\n // would choke on `Unexpected token '<'`.\n if (err.status === 404) return c.json(body, 404);\n if (err.rateLimited) return c.json(body, 429);\n return c.json(body, 500);\n }\n console.error(\"github-stars error:\", err);\n return c.json({\n error: err instanceof Error ? err.message : String(err),\n reason: \"upstream\" as const,\n setup: setupState(),\n }, 500);\n }\n});\n\n// Unwrap and rethrow Hono errors as the original error.\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;","children",[],[202],"094a4e56-431e-42e7-a8fe-0a200155b49a","github.ts","e189343c-b21f-11f1-9378-1607ee4eb77e",16,["D",1789598641285],"/**\n * A minimal GitHub REST client — just enough to read one user's profile and\n * the repos they've starred.\n *\n * Two things shape this file:\n *\n * 1. **Rate limits.** Unauthenticated GitHub allows 60 requests/hour *per IP*,\n * and Val Town shares IPs, so that budget can already be spent by someone\n * else. A token (any token, no scopes needed for public data) raises it to\n * 5,000/hour. We surface the remaining count so the page can say which\n * regime it's in rather than just failing.\n * 2. **Caching.** Most page views should never touch GitHub at all, so a\n * snapshot is cached in blob storage for a few minutes. See readCache().\n */\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\nconst API = \"https://api.github.com\";\nconst USER_AGENT = \"val-town-github-stars\";\n\n/** Optional. Without it we're on the 60/hour unauthenticated budget. */\nexport const TOKEN_VAR = \"GITHUB_TOKEN\";\n/** Optional. Whose stars to show; defaults to the val owner's handle. */\nexport const USER_VAR = \"GITHUB_USER\";\nexport const DEFAULT_USER = \"rodrigoalma\";\n\n/** GitHub's maximum page size, and how many pages we're willing to walk. */\nconst PER_PAGE = 100;\nconst MAX_PAGES = 10;\n\n/** How long a cached snapshot stays fresh. */\nconst CACHE_TTL_MS = 5 * 60 * 1000;\n\n// ── Wire types (GitHub's shape) ─────────────────────────────────\n\ninterface GitHubUser {\n login: string;\n name: string | null;\n avatar_url: string;\n html_url: string;\n bio: string | null;\n location: string | null;\n blog: string | null;\n public_repos: number;\n followers: number;\n following: number;\n}\n\ninterface GitHubRepo {\n id: number;\n name: string;\n html_url: string;\n description: string | null;\n language: string | null;\n topics?: string[];\n stargazers_count: number;\n forks_count: number;\n archived: boolean;\n fork: boolean;\n homepage: string | null;\n pushed_at: string;\n owner: { login: string; avatar_url: string };\n}\n\n/**\n * With the `star+json` media type each item is wrapped as\n * `{ starred_at, repo }`. We ask for that header, but we also accept a bare\n * repo object so the code keeps working if GitHub ever ignores it.\n */\ntype StarredItem = { starred_at?: string; repo?: GitHubRepo } & Partial;\n\n// ── Wire types (ours) ───────────────────────────────────────────\n\n/** One starred repo, flattened to only what the page renders. */\nexport interface Star {\n id: number;\n name: string;\n owner: string;\n ownerAvatar: string;\n url: string;\n description: string | null;\n language: string | null;\n topics: string[];\n stars: number;\n forks: number;\n archived: boolean;\n isFork: boolean;\n homepage: string | null;\n pushedAt: string;\n starredAt: string;\n}\n\nexport interface Profile {\n login: string;\n name: string | null;\n avatarUrl: string;\n htmlUrl: string;\n bio: string | null;\n location: string | null;\n blog: string | null;\n publicRepos: number;\n followers: number;\n following: number;\n}\n\nexport interface RateLimit {\n limit: number;\n remaining: number;\n resetAt: string | null;\n}\n\nexport interface StarSnapshot {\n user: string;\n profile: Profile;\n stars: Star[];\n languages: { name: string; count: number }[];\n fetchedAt: string;\n rateLimit: RateLimit | null;\n /** True when the user has more stars than MAX_PAGES × PER_PAGE. */\n truncated: boolean;\n authenticated: boolean;\n}\n\nexport class GitHubError extends Error {\n status: number;\n rateLimited: boolean;\n rateLimit: RateLimit | null;\n\n constructor(\n message: string,\n status: number,\n rateLimited: boolean,\n rateLimit: RateLimit | null,\n ) {\n super(message);\n this.name = \"GitHubError\";\n this.status = status;\n this.rateLimited = rateLimited;\n this.rateLimit = rateLimit;\n }\n}\n\n// ── Config ──────────────────────────────────────────────────────\n\nexport function tokenValue(): string {\n return Deno.env.get(TOKEN_VAR)?.trim() ?? \"\";\n}\n\nexport function hasToken(): boolean {\n return tokenValue().length > 0;\n}\n\nexport function configuredUser(): string {\n return Deno.env.get(USER_VAR)?.trim() || DEFAULT_USER;\n}\n\nfunction requestHeaders(): Record {\n const headers: Record = {\n Accept: \"application/vnd.github.star+json\",\n \"User-Agent\": USER_AGENT,\n \"X-GitHub-Api-Version\": \"2022-11-28\",\n };\n const token = tokenValue();\n if (token) headers.Authorization = `Bearer ${token}`;\n return headers;\n}\n\nfunction readRateLimit(res: Response): RateLimit | null {\n const int = (name: string): number | null => {\n const raw = res.headers.get(name);\n if (raw === null) return null;\n const value = Number(raw);\n return Number.isFinite(value) ? value : null;\n };\n const limit = int(\"x-ratelimit-limit\");\n const remaining = int(\"x-ratelimit-remaining\");\n if (limit === null && remaining === null) return null;\n const reset = int(\"x-ratelimit-reset\");\n return {\n limit: limit ?? 0,\n remaining: remaining ?? 0,\n resetAt: reset === null ? null : new Date(reset * 1000).toISOString(),\n };\n}\n\n// ── Requests ────────────────────────────────────────────────────\n\nasync function getJson(path: string): Promise<{ data: T; rateLimit: RateLimit | null }> {\n const res = await fetch(`${API}${path}`, { headers: requestHeaders() });\n const rateLimit = readRateLimit(res);\n\n if (!res.ok) {\n // GitHub answers an exhausted budget with 403 (or 429 for secondary\n // limits), so status alone doesn't tell us — check the remaining count too.\n const rateLimited = res.status === 403 || res.status === 429;\n let detail = \"\";\n try {\n const body = await res.json();\n if (typeof body?.message === \"string\") detail = body.message;\n } catch {\n // Not JSON — fall through to the generic message.\n }\n throw new GitHubError(\n detail || `GitHub responded ${res.status}`,\n res.status,\n rateLimited,\n rateLimit,\n );\n }\n\n return { data: await res.json() as T, rateLimit };\n}\n\nfunction toStar(item: StarredItem): Star | null {\n const repo = item.repo ?? item;\n if (!repo?.id || !repo.name || !repo.owner) return null;\n return {\n id: repo.id,\n name: repo.name,\n owner: repo.owner.login,\n ownerAvatar: repo.owner.avatar_url,\n url: repo.html_url,\n description: repo.description,\n language: repo.language,\n topics: repo.topics ?? [],\n stars: repo.stargazers_count,\n forks: repo.forks_count,\n archived: repo.archived,\n isFork: repo.fork,\n homepage: repo.homepage,\n pushedAt: repo.pushed_at,\n // Without the star+json media type GitHub omits starred_at; pushed_at is\n // the closest thing we have, and it keeps the sort stable.\n starredAt: item.starred_at ?? repo.pushed_at,\n };\n}\n\nfunction tallyLanguages(stars: Star[]): { name: string; count: number }[] {\n const counts = new Map();\n for (const star of stars) {\n if (!star.language) continue;\n counts.set(star.language, (counts.get(star.language) ?? 0) + 1);\n }\n return [...counts.entries()]\n .map(([name, count]) => ({ name, count }))\n .sort((a, b) => b.count - a.count || a.name.localeCompare(b.name));\n}\n\n/**\n * Read a user's profile and every repo they've starred.\n *\n * Throws GitHubError for anything GitHub says no to, so the caller can tell a\n * missing user (404) from an exhausted rate limit (403) from a real failure.\n */\nexport async function fetchStars(user: string): Promise {\n const slug = encodeURIComponent(user);\n const profileRes = await getJson(`/users/${slug}`);\n const profile = profileRes.data;\n\n const stars: Star[] = [];\n let rateLimit = profileRes.rateLimit;\n let truncated = false;\n\n for (let page = 1; page <= MAX_PAGES; page++) {\n const { data, rateLimit: pageLimit } = await getJson(\n `/users/${slug}/starred?per_page=${PER_PAGE}&page=${page}&sort=created&direction=desc`,\n );\n rateLimit = pageLimit;\n for (const item of data) {\n const star = toStar(item);\n if (star) stars.push(star);\n }\n if (data.length < PER_PAGE) break;\n if (page === MAX_PAGES) truncated = true;\n }\n\n return {\n user: profile.login,\n profile: {\n login: profile.login,\n name: profile.name,\n avatarUrl: profile.avatar_url,\n htmlUrl: profile.html_url,\n bio: profile.bio,\n location: profile.location,\n blog: profile.blog,\n publicRepos: profile.public_repos,\n followers: profile.followers,\n following: profile.following,\n },\n stars,\n languages: tallyLanguages(stars),\n fetchedAt: new Date().toISOString(),\n rateLimit,\n truncated,\n authenticated: hasToken(),\n };\n}\n\n// ── Cache ───────────────────────────────────────────────────────\n// A cache miss costs one GitHub request; a hit costs none. Failures here are\n// swallowed on purpose — the cache is an optimization, never a reason to fail\n// a page load.\n\nconst cacheKey = (user: string) => `stars:${user.toLowerCase()}`;\n\nexport async function readCache(user: string): Promise {\n try {\n const hit = await blob.getJSON(cacheKey(user)) as StarSnapshot | undefined;\n if (!hit?.fetchedAt) return null;\n if (Date.now() - Date.parse(hit.fetchedAt) > CACHE_TTL_MS) return null;\n return hit;\n } catch {\n return null;\n }\n}\n\nexport async function writeCache(user: string, snapshot: StarSnapshot): Promise {\n try {\n await blob.setJSON(cacheKey(user), snapshot);\n } catch (err) {\n console.error(\"star cache write failed:\", err);\n }\n}",[],[211],"a89c629a-dfe6-4e8c-87c1-3c2761b2bd53","README.md","01a0ac61-6a82-70dc-b85b-3f0f5a830f77",["D",1789599940639],5,"# GitHub Stars\n\nEvery repo you've starred on GitHub, on one searchable page.\n\n**[Open the page →](url:index.ts)**\n\nSearch across names, owners, descriptions and topics. Filter by language. Sort\nby when you starred it, how many stars the repo has, or name. The header shows\nwhose stars these are; the footer shows where the data came from and how much\nGitHub API budget is left.\n\n## Configuration\n\nBoth variables are optional — the page works with neither.\n\n| Variable | What it does |\n| --- | --- |\n| `GITHUB_TOKEN` | Raises GitHub's rate limit from **60 requests/hour to 5,000**. Needs **no scopes** — this val only reads public data. |\n| `GITHUB_USER` | Whose stars to show. Defaults to `rodrigoalma`. |\n\n👉 Add GITHUB_TOKEN here: https://www.val.town/x/rodrigoalcaraz/github-stars/environment-variables?key=GITHUB_TOKEN\n\n👉 Add GITHUB_USER here: https://www.val.town/x/rodrigoalcaraz/github-stars/environment-variables?key=GITHUB_USER\n\nYou can also view someone else's stars without touching settings:\n`?user=torvalds`. Add `?refresh=1` to bypass the cache.\n\n## Dark mode\n\nThe theme is a `dark` class on ``, which is what Twind's `class` dark-mode\nstrategy keys off. Three pieces:\n\n| Where | What it does |\n| --- | --- |\n| `frontend/root.tsx` (inline bootstrap) | Switches Twind from its default `media` strategy to `class`, then applies the saved theme (or the OS preference) **before first paint** — that's what avoids a flash of light theme on a dark screen. |\n| `frontend/lib/theme.ts` | The logic: read, apply, toggle, persist to `localStorage`, and follow the OS while no explicit choice exists. |\n| `frontend/components/ThemeToggle.tsx` | The button. Reads its initial state off `` so the icon always matches what the bootstrap applied. |\n\nPrecedence: a saved choice always wins. With nothing saved, the page follows the\nOS and updates live if the OS flips mid-session.\n\n- The bootstrap is **inline on purpose** — a ``)}\n \n \n \n

\n {/*\n React replaces this the moment it mounts. If it's still on screen,\n the client bundle never loaded — which is otherwise a completely\n blank page with nothing in the val logs. Open the browser console.\n */}\n

\n Loading… if this never disappears, the app failed to start.\n Check the browser console for the error.\n

History · SetupNote.tsx