[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_198":199,"_200":201},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_17":18,"_41":-7,"_149":-5,"_19":150,"_151":152,"_153":154,"_155":156,"_157":158,"_21":159,"_160":-5,"_161":-5,"_162":24,"_163":164,"_165":109,"_166":-5,"_167":-5,"_168":169},"routes/_app.x.$handle.$name.branch.$branch.history_.$",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":24,"_30":-5},"handle","rumbo","name","rumbo-guard-v08-node-c","branchName","main","path","main.ts","project",{"_35":97,"_13":14,"_39":98,"_99":-5,"_100":24,"_101":102,"_103":102,"_104":105,"_106":-5,"_30":86,"_107":66,"_108":109,"_110":-5,"_111":-5,"_112":26,"_43":44,"_113":114,"_115":116,"_117":118,"_119":-5,"_120":121,"_122":121,"_123":124,"_125":124,"_126":124,"_127":121,"_128":121,"_55":129,"_130":131,"_132":133,"_134":24},"file",{"_65":66,"_13":18,"_67":68,"_69":24,"_96":-5},"isDirectory",false,"page",0,"history",[31,32,33,34],"hasNext","userId",{"_35":89,"_37":38,"_39":90,"_41":91,"_43":81,"_45":78,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":52,"_53":54,"_55":92,"_21":93,"_58":-5,"_59":-5,"_60":-5,"_61":-5,"_62":94},{"_35":78,"_37":38,"_39":79,"_41":80,"_43":81,"_45":71,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":52,"_53":54,"_55":82,"_21":83,"_58":-5,"_59":-5,"_60":-5,"_61":-5,"_62":84},{"_35":71,"_37":38,"_39":72,"_41":73,"_43":44,"_45":36,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":52,"_53":54,"_55":74,"_21":75,"_58":-5,"_59":-5,"_60":-5,"_61":-5,"_62":76},{"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":52,"_53":54,"_55":56,"_21":57,"_58":-5,"_59":-5,"_60":-5,"_61":-5,"_62":63},"id","b67c0a68-eb93-4f31-ab8a-8e6598498bc7","branchId","e85cebea-c628-4fcd-bd6e-c24a48ddb4dd","createdAt",["D",1789343687037],"version",1,"orgId","01a092aa-484c-771f-96e6-9511b5195ebc","parentId","incomingCommitId","aiChatMessageId","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","mcp","clientLabel","ChatGPT","user",{"_35":-5,"_43":-5,"_11":12,"_70":-5},{"_65":66,"_13":18,"_67":68,"_69":24},"pull","merge","revert","multiple","commits",[64],{"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":52,"_53":54,"_55":56,"_21":57,"_58":-5,"_59":-5,"_60":-5},"fileId","7ffd061a-afce-11f1-b7b9-1607ee4eb77e","fileType","http","deleted","avatar","f66e305c-4cda-4eea-afba-188cd9392ff0",["D",1789343832537],2,{"_35":-5,"_43":-5,"_11":12,"_70":-5},{"_65":66,"_13":18,"_67":68,"_69":24},[77],{"_35":71,"_37":38,"_39":72,"_41":73,"_43":44,"_45":36,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":52,"_53":54,"_55":74,"_21":75,"_58":-5,"_59":-5,"_60":-5},"81b20bb3-91c1-4a39-8d59-b2119bb4f3c8",["D",1789343839905],3,"01a04116-f28c-754c-9173-77bf5814fcd6",{"_35":86,"_43":81,"_11":87,"_70":88},{"_65":66,"_13":18,"_67":68,"_69":24},[85],{"_35":78,"_37":38,"_39":79,"_41":80,"_43":81,"_45":71,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":52,"_53":54,"_55":82,"_21":83,"_58":-5,"_59":-5,"_60":-5},"d3788f19-13c5-4356-87e8-dce639626bb9","sebas1","https://lh3.googleusercontent.com/a/ACg8ocJaC6uiXPmN9dvgA2XcSlzBSkPJO0GN5zKzPm3a8cbjmXC9HYA=s96-c","dc3bd980-9ec2-4cdf-a962-5a8051ad800b",["D",1789343932699],4,{"_35":86,"_43":81,"_11":87,"_70":88},{"_65":66,"_13":18,"_67":68,"_69":24},[95],{"_35":89,"_37":38,"_39":90,"_41":91,"_43":81,"_45":78,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":52,"_53":54,"_55":92,"_21":93,"_58":-5,"_59":-5,"_60":-5},"deletedAtVersion","88f9f665-a8ca-4b9e-bae5-452c5fff9ac8",["D",1789343687001],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","RUMBO v0.8 external trust node C","imageUrl","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","tursoName","88f9f665a8ca4b9ebae5452c5fff9ac8","tursoHostname","88f9f665a8ca4b9ebae5452c5fff9ac8-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789519256886],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_148":-5},"org",{"_11":12,"_143":144,"_70":-5,"_30":-5,"_145":146,"_147":24},"branch",{"_41":91,"_13":16,"_35":38,"_135":97,"_136":-5,"_137":-5,"_138":-5,"_139":-5,"_140":-5,"_141":14,"_142":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Rumbo","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_35":97,"_13":14,"_39":193,"_99":-5,"_100":24,"_101":102,"_103":102,"_104":105,"_106":-5,"_30":86,"_107":66,"_108":109,"_110":-5,"_111":-5,"_112":26,"_43":44,"_113":114,"_115":116,"_117":194,"_119":-5,"_120":121,"_122":121,"_123":124,"_125":124,"_126":124,"_127":121,"_128":121,"_55":195,"_130":196,"_132":197,"_134":24},"tree",[187],"files",[187],"counts",{"_177":26,"_178":42,"_179":26,"_180":181,"_182":183},"contents",[],{"_35":170,"_37":38,"_65":66,"_13":18,"_171":172,"_67":68,"_41":80,"_45":-5,"_39":173,"_174":91,"_175":-5,"_17":176},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},"1ce125c1-37c9-4ffe-a581-ad888654167c","content","import sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\nimport * as ed from \"npm:@noble/ed25519@2.2.3\";\n\nconst PROVIDER_FAMILY = \"valtown\";\nconst PROVIDER_ID = \"valtown:rumbo/rumbo-guard-v08-node-c\";\nconst BROKER_PUBLIC = \"N0XOw7o8f14wIAOQRvcCkDGOwN7PDjXS6f6L93GyOuY\";\nconst APPROVER_PUBLIC = \"badOinyx_VSJeSW2xmIDj-6WeDub2SEP7CrogOjPRKU\";\nconst BROKER_AUDIENCE = \"rumbo-broker-v08\";\nconst DEPLOYMENT_DIGEST = \"777025b52967cdd8bc31a172789d1f056d2aa041017477b603187c450036011c\";\nconst te = new TextEncoder();\nconst td = new TextDecoder();\n\nfunction canon(v:any):string { if(v===null||typeof v!==\"object\") return JSON.stringify(v); if(Array.isArray(v)) return \"[\"+v.map(canon).join(\",\")+\"]\"; const ks=Object.keys(v).sort(); return \"{\"+ks.map(k=>JSON.stringify(k)+\":\"+canon(v[k])).join(\",\")+\"}\"; }\nfunction bytesToB64u(b:Uint8Array):string { let s=\"\"; for(const x of b)s+=String.fromCharCode(x); return btoa(s).replace(/\\+/g,\"-\").replace(/\\//g,\"_\").replace(/=+$/g,\"\"); }\nfunction b64uToBytes(s:string):Uint8Array { const p=s+\"=\".repeat((4-s.length%4)%4); const bin=atob(p.replace(/-/g,\"+\").replace(/_/g,\"/\")); const out=Uint8Array.from(bin,c=>c.charCodeAt(0)); if(bytesToB64u(out)!==s) throw new Error(\"B64\"); return out; }\nasync function sha256Bytes(b:Uint8Array):Promise{ return new Uint8Array(await crypto.subtle.digest(\"SHA-256\",b)); }\nasync function sha256HexBytes(b:Uint8Array):Promise{ const d=await sha256Bytes(b); return [...d].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\"); }\nasync function sha256HexText(s:string):Promise{ return sha256HexBytes(te.encode(s)); }\nasync function keyId(pub:Uint8Array):Promise{ return (await sha256HexBytes(pub)).slice(0,32); }\nfunction isHex64(v:any):boolean { return typeof v===\"string\" && /^[0-9a-f]{64}$/.test(v); }\nfunction isNonce(v:any):boolean { return typeof v===\"string\" && /^[0-9a-f]{32}$/.test(v); }\nasync function rootSeed():Promise{ const v=Deno.env.get(\"RUMBO_V08_ROOT_SEED\"); if(!v) throw new Error(\"SECRET\"); const b=b64uToBytes(v); if(b.length!==32) throw new Error(\"SECRET\"); return b; }\nasync function roleSeed(role:string):Promise{ const root=await rootSeed(); const suffix=te.encode(\"rumbo-v08:\"+role); const mix=new Uint8Array(root.length+suffix.length); mix.set(root); mix.set(suffix,root.length); return sha256Bytes(mix); }\nasync function ensure(){ await sqlite.execute(`CREATE TABLE IF NOT EXISTS v08_replay(nonce TEXT PRIMARY KEY, exp INTEGER NOT NULL)`); await sqlite.execute(`CREATE TABLE IF NOT EXISTS v08_grants(nonce TEXT PRIMARY KEY, exp INTEGER NOT NULL)`); await sqlite.execute(`CREATE TABLE IF NOT EXISTS v08_witness(seq INTEGER PRIMARY KEY, head TEXT NOT NULL, previous_receipt_hash TEXT NOT NULL, observed_at INTEGER NOT NULL, signature TEXT NOT NULL, receipt_hash TEXT NOT NULL)`); }\nasync function consume(table:\"v08_replay\"|\"v08_grants\",nonce:string,exp:number):Promise{ await ensure(); const now=Math.floor(Date.now()/1000); try { await sqlite.execute({sql:`DELETE FROM ${table} WHERE exp < ?`,args:[now]}); await sqlite.execute({sql:`INSERT INTO ${table}(nonce,exp) VALUES (?,?)`,args:[nonce,exp]}); return true; } catch { return false; } }\nasync function verifyProviderRequest(req:any,op:string):Promise{ try { const e=req?.envelope, sig=req?.signature; if(!e||typeof sig!==\"string\"||e.v!==8||e.op!==op||e.deployment_digest!==DEPLOYMENT_DIGEST) return null; const now=Math.floor(Date.now()/1000), iat=Number(e.iat), exp=Number(e.exp); if(!Number.isInteger(iat)||!Number.isInteger(exp)||iat>now+30||exp300||!isNonce(e.nonce)) return null; if(!await ed.verifyAsync(b64uToBytes(sig),te.encode(canon(e)),b64uToBytes(BROKER_PUBLIC))) return null; if(!await consume(\"v08_replay\",e.nonce,exp)) return null; return e.body&&typeof e.body===\"object\"&&!Array.isArray(e.body)?e.body:null; } catch { return null; } }\nasync function verifyGrant(grant:string,permitDigest:string):Promise{ try { const p=grant.split(\".\"); if(p.length!==3||p[0]!==\"ag3\") return null; if(!await ed.verifyAsync(b64uToBytes(p[2]),te.encode(p[1]),b64uToBytes(APPROVER_PUBLIC))) return null; const g=JSON.parse(td.decode(b64uToBytes(p[1]))); const now=Math.floor(Date.now()/1000); const iat=Number(g.iat), exp=Number(g.exp); if(g.v!==3||g.broker_audience!==BROKER_AUDIENCE||g.deployment_digest!==DEPLOYMENT_DIGEST||g.permit_body_digest!==permitDigest) return null; if(!Number.isInteger(iat)||!Number.isInteger(exp)||iat>now+30||exp300||!isNonce(g.nonce)) return null; if(!await consume(\"v08_grants\",g.nonce,exp)) return null; return g; } catch { return null; } }\nasync function identity(){ const sp=await ed.getPublicKeyAsync(await roleSeed(\"signer\")); const wp=await ed.getPublicKeyAsync(await roleSeed(\"witness\")); return {v:8,provider_family:PROVIDER_FAMILY,provider_id:PROVIDER_ID,signer_public_key:bytesToB64u(sp),signer_key_id:await keyId(sp),witness_public_key:bytesToB64u(wp),witness_key_id:await keyId(wp)}; }\nasync function observe(body:any){ const seq=Number(body?.seq), head=String(body?.head||\"\"); if(!Number.isInteger(seq)||seq<1||!isHex64(head)) throw new Error(\"REJECT\"); await ensure(); const rows=await sqlite.execute({sql:\"SELECT seq,head,receipt_hash,previous_receipt_hash,observed_at,signature FROM v08_witness ORDER BY seq DESC LIMIT 1\"}); const last=(rows.rows||[])[0] as any; if(last&&Number(last.seq)===seq){ if(String(last.head)!==head) throw new Error(\"REJECT\"); const pub=await ed.getPublicKeyAsync(await roleSeed(\"witness\")); return {v:8,provider_family:PROVIDER_FAMILY,provider_id:PROVIDER_ID,key_id:await keyId(pub),seq,head,previous_receipt_hash:String(last.previous_receipt_hash),observed_at:Number(last.observed_at),signature:String(last.signature)}; } if((last?Number(last.seq):0)+1!==seq) throw new Error(\"REJECT\"); const pub=await ed.getPublicKeyAsync(await roleSeed(\"witness\")); const payload={v:8,provider_family:PROVIDER_FAMILY,provider_id:PROVIDER_ID,key_id:await keyId(pub),seq,head,previous_receipt_hash:last?String(last.receipt_hash):\"0\".repeat(64),observed_at:Math.floor(Date.now()/1000)}; const signature=bytesToB64u(await ed.signAsync(te.encode(canon(payload)),await roleSeed(\"witness\"))); const rh=await sha256HexText(canon({...payload,signature})); try { await sqlite.execute({sql:\"INSERT INTO v08_witness(seq,head,previous_receipt_hash,observed_at,signature,receipt_hash) VALUES (?,?,?,?,?,?)\",args:[seq,head,payload.previous_receipt_hash,payload.observed_at,signature,rh]}); } catch { throw new Error(\"REJECT\"); } return {...payload,signature}; }\nasync function signPermit(body:any){ const pb=body?.permit_body, grant=String(body?.approval_grant||\"\"); if(!pb||typeof pb!==\"object\"||Array.isArray(pb)) throw new Error(\"REJECT\"); const digest=await sha256HexText(canon(pb)); const g=await verifyGrant(grant,digest); if(!g) throw new Error(\"REJECT\"); if(pb.v!==8||pb.broker_audience!==BROKER_AUDIENCE||pb.deployment_digest!==DEPLOYMENT_DIGEST) throw new Error(\"REJECT\"); const now=Math.floor(Date.now()/1000), iat=Number(pb.iat), exp=Number(pb.exp); if(!Number.isInteger(iat)||!Number.isInteger(exp)||iat>now+30||exp300||exp>Number(g.exp)||!isNonce(pb.nonce)) throw new Error(\"REJECT\"); for(const k of [\"task_id\",\"plan_id\",\"policy_digest\",\"request_digest\"]) if(String(pb[k])!==String(g[k])) throw new Error(\"REJECT\"); if(!isHex64(pb.policy_digest)||!isHex64(pb.request_digest)) throw new Error(\"REJECT\"); const priv=await roleSeed(\"signer\"), pub=await ed.getPublicKeyAsync(priv); return {v:8,provider_family:PROVIDER_FAMILY,provider_id:PROVIDER_ID,key_id:await keyId(pub),permit_body_digest:digest,signature:bytesToB64u(await ed.signAsync(te.encode(canon(pb)),priv))}; }\nexport default async function(req:Request):Promise{ try { if(req.method===\"GET\") return Response.json(await identity(),{headers:{\"Cache-Control\":\"no-store\"}}); if(req.method!==\"POST\") return new Response(\"method\",{status:405}); const len=Number(req.headers.get(\"content-length\")||\"0\"); if(len>65536) return Response.json({ok:false,error:\"REJECTED\"},{status:413}); const raw=await req.json(); const op=raw?.envelope?.op; if(op!==\"observe\"&&op!==\"sign_permit\") return Response.json({ok:false,error:\"REJECTED\"},{status:400}); const body=await verifyProviderRequest(raw,op); if(!body) return Response.json({ok:false,error:\"REJECTED\"},{status:401}); const result=op===\"observe\"?await observe(body):await signPermit(body); return Response.json({ok:true,result},{headers:{\"Cache-Control\":\"no-store\"}}); } catch { return Response.json({ok:false,error:\"REJECTED\"},{status:400,headers:{\"Cache-Control\":\"no-store\"}}); } }\n",["D",1789343932699],"branchVersion","label",[18],"pulls","branches","forks","envVars",{"_184":42,"_186":26},"connections",{"_184":26,"_185":26},"count","unfilledCount","emptyCount",{"_35":170,"_13":18,"_65":66,"_45":-5,"_37":38,"_174":91,"_188":109,"_39":189,"_41":80,"_67":68,"_171":172,"_69":24,"_175":-5,"_190":191,"_17":192},"latest",["D",1789343932699],"children",[],[18],["D",1789343687001],["D",1789519256886],{"_11":12,"_148":-5},{"_11":12,"_143":144,"_70":-5,"_30":-5,"_145":146,"_147":24},{"_41":91,"_13":16,"_35":38,"_135":97,"_136":-5,"_137":-5,"_138":-5,"_139":-5,"_140":-5,"_141":14,"_142":12},"ctx",{"_55":-5,"_167":231,"_232":233,"_234":235,"_236":24,"_237":24,"_238":24,"_239":109,"_240":-5,"_241":-7,"_242":-7,"_243":26,"_244":24,"_245":24,"_246":-5,"_247":24,"_248":24,"_249":24,"_250":-5},"ENV",{"_202":203,"_204":205,"_206":16,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · main.ts