[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_151":152,"_153":154},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_115":-5,"_20":116,"_22":117,"_118":119,"_120":121,"_26":122,"_24":123,"_124":-5,"_125":-5,"_126":52,"_127":128,"_129":43,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","rumbo","name","rumbo-guard-v08","branchName","main","version","path","main.ts","project",{"_33":60,"_13":14,"_44":61,"_62":-5,"_63":52,"_64":65,"_66":65,"_67":68,"_69":-5,"_70":71,"_72":36,"_73":43,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":94,"_95":96,"_97":98,"_99":52},"tree",[55],"file",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":54},"contents",[],"upstream","pull","ahead","behind","envVars","id","369e525e-b1df-46d3-8deb-84026826f71a","fileId","2cd5be7c-afca-11f1-a1d7-1607ee4eb77e","parentId","branchId","e96c0e78-f94b-4e2d-8b30-946203af5121","branchVersion",2,"latest",true,"createdAt",["D",1789341892413],1,"fileType","http","content","import sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\nimport * as ed from \"npm:@noble/ed25519@2.2.3\";\n\nconst PROVIDER_FAMILY = \"valtown\";\nconst PROVIDER_ID = \"valtown:rumbo/rumbo-guard-v08\";\nconst BROKER_PUBLIC = \"LvKmqsJvOKAsPciTTnj-plXr16f4bz6ByVqM9rirqlY\";\nconst APPROVER_PUBLIC = \"TtsnsFUlqUaR4HHKzugez-XZrMGkVoWS93GKp1fPMDQ\";\nconst DEPLOYMENT_DIGEST = \"PLACEHOLDER_DEPLOYMENT_DIGEST\";\n\nconst te = new TextEncoder();\nfunction b64uToBytes(s:string):Uint8Array { const p=s+\"=\".repeat((4-s.length%4)%4); const bin=atob(p.replace(/-/g,\"+\").replace(/_/g,\"/\")); return Uint8Array.from(bin,c=>c.charCodeAt(0)); }\nfunction bytesToB64u(b:Uint8Array):string { let s=\"\"; for(const x of b)s+=String.fromCharCode(x); return btoa(s).replace(/\\+/g,\"-\").replace(/\\//g,\"_\").replace(/=+$/g,\"\"); }\nfunction canon(v:any):string { if(v===null||typeof v!==\"object\") return JSON.stringify(v); if(Array.isArray(v)) return \"[\"+v.map(canon).join(\",\")+\"]\"; const ks=Object.keys(v).sort(); return \"{\"+ks.map(k=>JSON.stringify(k)+\":\"+canon(v[k])).join(\",\")+\"}\"; }\nasync function sha256Hex(s:string):Promise { const d=new Uint8Array(await crypto.subtle.digest(\"SHA-256\",te.encode(s))); return [...d].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\"); }\nfunction keyId(pub:Uint8Array):Promise{ return sha256Hex(String.fromCharCode(...pub)).then(x=>x.slice(0,32)); }\nasync function rootSeed():Promise{ const v=Deno.env.get(\"RUMBO_V08_SIGNER_SEED\"); if(!v) throw new Error(\"SECRET_MISSING\"); return b64uToBytes(v); }\nasync function roleSeed(role:string):Promise{ const root=await rootSeed(); const mix=new Uint8Array(root.length+role.length); mix.set(root,0); mix.set(te.encode(role),root.length); return new Uint8Array(await crypto.subtle.digest(\"SHA-256\",mix)); }\nasync function ensure() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS v08_replay(nonce TEXT PRIMARY KEY, exp INTEGER NOT NULL)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS v08_grants(nonce TEXT PRIMARY KEY, exp INTEGER NOT NULL)`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS v08_witness(seq INTEGER PRIMARY KEY, head TEXT NOT NULL, previous_receipt_hash TEXT NOT NULL, observed_at INTEGER NOT NULL, signature TEXT NOT NULL, receipt_hash TEXT NOT NULL)`);\n}\nasync function verifyProviderRequest(req:any, op:string):Promise{\n try{ const e=req?.envelope; if(!e||req?.signature==null||e.v!==8||e.op!==op||e.deployment_digest!==DEPLOYMENT_DIGEST)return null; const now=Math.floor(Date.now()/1000); if(e.iat>now+30||e.exp300||typeof e.nonce!==\"string\"||e.nonce.length!==32)return null; const ok=await ed.verifyAsync(b64uToBytes(req.signature),te.encode(canon(e)),b64uToBytes(BROKER_PUBLIC)); if(!ok)return null; await ensure(); try{ await sqlite.execute({sql:\"INSERT INTO v08_replay(nonce,exp) VALUES (?,?)\",args:[e.nonce,e.exp]}); }catch{ return null; } return e.body&&typeof e.body===\"object\"?e.body:null; }catch{ return null; }\n}\nasync function verifyGrant(grant:string, permitDigest:string):Promise{\n try{ const parts=grant.split(\".\"); if(parts.length!==3||parts[0]!==\"ag3\")return null; const ok=await ed.verifyAsync(b64uToBytes(parts[2]),te.encode(parts[1]),b64uToBytes(APPROVER_PUBLIC)); if(!ok)return null; const body=JSON.parse(new TextDecoder().decode(b64uToBytes(parts[1]))); const now=Math.floor(Date.now()/1000); if(body.v!==3||body.exp{\n try{ if(req.method===\"GET\") return Response.json(await identity()); if(req.method!==\"POST\") return new Response(\"method\",{status:405}); const raw=await req.json(); const op=raw?.envelope?.op; if(op!==\"observe\"&&op!==\"sign_permit\") return Response.json({ok:false,error:\"OP\"},{status:400}); const body=await verifyProviderRequest(raw,op); if(!body)return Response.json({ok:false,error:\"AUTH\"},{status:401}); const result=op===\"observe\"?await observe(body):await signPermit(body); return Response.json({ok:true,result}); }catch(e){ return Response.json({ok:false,error:String((e as Error).message||e)},{status:400}); }\n}\n","deleted",false,"label",[19],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":56,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_57":58,"_18":59},["D",1789341892413],"children",[],[19],"a059c1af-c724-44c2-ab82-4ae574270953",["D",1789341829518],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","RUMBO v0.8 external signer and witness node","imageUrl","userId","d3788f19-13c5-4356-87e8-dce639626bb9","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a092aa-484c-771f-96e6-9511b5195ebc","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_114":-5},"org",{"_11":12,"_108":109,"_110":-5,"_70":-5,"_111":112,"_113":52},"branch",{"_17":41,"_13":16,"_33":39,"_100":60,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Rumbo","avatar","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":60,"_13":14,"_44":147,"_62":-5,"_63":52,"_64":65,"_66":65,"_67":68,"_69":-5,"_70":71,"_72":36,"_73":43,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":148,"_95":149,"_97":150,"_99":52},[144],"files",[144],"counts",{"_135":77,"_136":46,"_137":77,"_32":138,"_139":140},[],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":134},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],"pulls","branches","forks",{"_141":46,"_143":77},"connections",{"_141":77,"_142":77},"count","unfilledCount","emptyCount",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":56,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_57":145,"_18":146},[],[19],["D",1789341829518],{"_11":12,"_114":-5},{"_11":12,"_108":109,"_110":-5,"_70":-5,"_111":112,"_113":52},{"_17":41,"_13":16,"_33":39,"_100":60,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"ctx",{"_93":-5,"_131":184,"_185":186,"_187":188,"_189":52,"_190":52,"_191":52,"_192":43,"_193":-5,"_194":-7,"_195":-7,"_196":77,"_197":52,"_198":52,"_199":-5,"_200":52,"_201":52,"_202":52,"_203":-5},"ENV",{"_155":156,"_157":158,"_159":16,"_160":161,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]