[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_152":153,"_154":155},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_116":-5,"_20":117,"_22":118,"_119":120,"_121":122,"_25":123,"_24":-5,"_124":-5,"_125":-5,"_126":53,"_127":128,"_129":44,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","rumbo","name","rumbo-guard-v08","branchName","main","version","path","","project",{"_33":61,"_13":14,"_45":62,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":69,"_70":-5,"_71":72,"_73":37,"_74":44,"_75":-5,"_76":-5,"_77":78,"_79":80,"_81":-5,"_82":-5,"_83":-5,"_84":-5,"_85":86,"_87":86,"_88":89,"_90":89,"_91":89,"_92":86,"_93":86,"_94":95,"_96":97,"_98":99,"_100":53},"tree",[56],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":55},"id","369e525e-b1df-46d3-8deb-84026826f71a","main.ts","fileId","2cd5be7c-afca-11f1-a1d7-1607ee4eb77e","parentId","branchId","e96c0e78-f94b-4e2d-8b30-946203af5121","branchVersion",2,"latest",true,"createdAt",["D",1789341892413],1,"fileType","http","content","import sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\nimport * as ed from \"npm:@noble/ed25519@2.2.3\";\n\nconst PROVIDER_FAMILY = \"valtown\";\nconst PROVIDER_ID = \"valtown:rumbo/rumbo-guard-v08\";\nconst BROKER_PUBLIC = \"LvKmqsJvOKAsPciTTnj-plXr16f4bz6ByVqM9rirqlY\";\nconst APPROVER_PUBLIC = \"TtsnsFUlqUaR4HHKzugez-XZrMGkVoWS93GKp1fPMDQ\";\nconst DEPLOYMENT_DIGEST = \"PLACEHOLDER_DEPLOYMENT_DIGEST\";\n\nconst te = new TextEncoder();\nfunction b64uToBytes(s:string):Uint8Array { const p=s+\"=\".repeat((4-s.length%4)%4); const bin=atob(p.replace(/-/g,\"+\").replace(/_/g,\"/\")); return Uint8Array.from(bin,c=>c.charCodeAt(0)); }\nfunction bytesToB64u(b:Uint8Array):string { let s=\"\"; for(const x of b)s+=String.fromCharCode(x); return btoa(s).replace(/\\+/g,\"-\").replace(/\\//g,\"_\").replace(/=+$/g,\"\"); }\nfunction canon(v:any):string { if(v===null||typeof v!==\"object\") return JSON.stringify(v); if(Array.isArray(v)) return \"[\"+v.map(canon).join(\",\")+\"]\"; const ks=Object.keys(v).sort(); return \"{\"+ks.map(k=>JSON.stringify(k)+\":\"+canon(v[k])).join(\",\")+\"}\"; }\nasync function sha256Hex(s:string):Promise { const d=new Uint8Array(await crypto.subtle.digest(\"SHA-256\",te.encode(s))); return [...d].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\"); }\nfunction keyId(pub:Uint8Array):Promise{ return sha256Hex(String.fromCharCode(...pub)).then(x=>x.slice(0,32)); }\nasync function rootSeed():Promise{ const v=Deno.env.get(\"RUMBO_V08_SIGNER_SEED\"); if(!v) throw new Error(\"SECRET_MISSING\"); return b64uToBytes(v); }\nasync function roleSeed(role:string):Promise{ const root=await rootSeed(); const mix=new Uint8Array(root.length+role.length); mix.set(root,0); mix.set(te.encode(role),root.length); return new Uint8Array(await crypto.subtle.digest(\"SHA-256\",mix)); }\nasync function ensure() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS v08_replay(nonce TEXT PRIMARY KEY, exp INTEGER NOT NULL)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS v08_grants(nonce TEXT PRIMARY KEY, exp INTEGER NOT NULL)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS v08_witness(seq INTEGER PRIMARY KEY, head TEXT NOT NULL, previous_receipt_hash TEXT NOT NULL, observed_at INTEGER NOT NULL, signature TEXT NOT NULL, receipt_hash TEXT NOT NULL)`);\n}\nasync function verifyProviderRequest(req:any, op:string):Promise{\n try{ const e=req?.envelope; if(!e||req?.signature==null||e.v!==8||e.op!==op||e.deployment_digest!==DEPLOYMENT_DIGEST)return null; const now=Math.floor(Date.now()/1000); if(e.iat>now+30||e.exp300||typeof e.nonce!==\"string\"||e.nonce.length!==32)return null; const ok=await ed.verifyAsync(b64uToBytes(req.signature),te.encode(canon(e)),b64uToBytes(BROKER_PUBLIC)); if(!ok)return null; await ensure(); try{ await sqlite.execute({sql:\"INSERT INTO v08_replay(nonce,exp) VALUES (?,?)\",args:[e.nonce,e.exp]}); }catch{ return null; } return e.body&&typeof e.body===\"object\"?e.body:null; }catch{ return null; }\n}\nasync function verifyGrant(grant:string, permitDigest:string):Promise{\n try{ const parts=grant.split(\".\"); if(parts.length!==3||parts[0]!==\"ag3\")return null; const ok=await ed.verifyAsync(b64uToBytes(parts[2]),te.encode(parts[1]),b64uToBytes(APPROVER_PUBLIC)); if(!ok)return null; const body=JSON.parse(new TextDecoder().decode(b64uToBytes(parts[1]))); const now=Math.floor(Date.now()/1000); if(body.v!==3||body.exp{\n try{ if(req.method===\"GET\") return Response.json(await identity()); if(req.method!==\"POST\") return new Response(\"method\",{status:405}); const raw=await req.json(); const op=raw?.envelope?.op; if(op!==\"observe\"&&op!==\"sign_permit\") return Response.json({ok:false,error:\"OP\"},{status:400}); const body=await verifyProviderRequest(raw,op); if(!body)return Response.json({ok:false,error:\"AUTH\"},{status:401}); const result=op===\"observe\"?await observe(body):await signPermit(body); return Response.json({ok:true,result}); }catch(e){ return Response.json({ok:false,error:String((e as Error).message||e)},{status:400}); }\n}\n","deleted",false,"label",[35],{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":59,"_18":60},["D",1789341892413],"children",[],[35],"a059c1af-c724-44c2-ab82-4ae574270953",["D",1789341829518],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","RUMBO v0.8 external signer and witness node","imageUrl","userId","d3788f19-13c5-4356-87e8-dce639626bb9","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a092aa-484c-771f-96e6-9511b5195ebc","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_115":-5},"org",{"_11":12,"_109":110,"_111":-5,"_71":-5,"_112":113,"_114":53},"branch",{"_17":42,"_13":16,"_33":40,"_101":61,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":-5,"_107":14,"_108":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Rumbo","avatar","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":61,"_13":14,"_45":148,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":69,"_70":-5,"_71":72,"_73":37,"_74":44,"_75":-5,"_76":-5,"_77":78,"_79":80,"_81":-5,"_82":-5,"_83":-5,"_84":-5,"_85":86,"_87":86,"_88":89,"_90":89,"_91":89,"_92":86,"_93":86,"_94":149,"_96":150,"_98":151,"_100":53},[145],"files",[145],"counts",{"_136":78,"_137":47,"_138":78,"_31":139,"_140":141},[134],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":135},[35],"pulls","branches","forks",{"_142":47,"_144":78},"connections",{"_142":78,"_143":78},"count","unfilledCount","emptyCount",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":146,"_18":147},[],[35],["D",1789341829518],{"_11":12,"_115":-5},{"_11":12,"_109":110,"_111":-5,"_71":-5,"_112":113,"_114":53},{"_17":42,"_13":16,"_33":40,"_101":61,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":-5,"_107":14,"_108":12},"ctx",{"_94":-5,"_131":185,"_186":187,"_188":189,"_190":53,"_191":53,"_192":53,"_193":44,"_194":-5,"_195":-7,"_196":-7,"_197":78,"_198":53,"_199":53,"_200":-5,"_201":53,"_202":53,"_203":53,"_204":-5},"ENV",{"_156":157,"_158":159,"_160":16,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]