[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_191":192,"_193":194},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_17":18,"_40":-7,"_141":-5,"_19":142,"_143":144,"_145":146,"_147":148,"_149":150,"_21":151,"_152":-5,"_153":-5,"_154":24,"_155":156,"_157":101,"_158":-5,"_159":-5,"_160":161},"routes/_app.x.$handle.$name.branch.$branch.history_.$",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":24,"_30":-5},"handle","rumbo","name","rumbo-immune-v08-primary","branchName","main","path","main.ts","project",{"_34":89,"_13":14,"_38":90,"_91":-5,"_92":24,"_93":94,"_95":94,"_96":97,"_98":-5,"_30":78,"_99":65,"_100":101,"_102":-5,"_103":-5,"_104":26,"_42":43,"_105":106,"_107":108,"_109":110,"_111":-5,"_112":113,"_114":113,"_115":116,"_117":116,"_118":116,"_119":113,"_120":113,"_54":121,"_122":123,"_124":125,"_126":24},"file",{"_64":65,"_13":18,"_66":67,"_68":24,"_88":-5},"isDirectory",false,"page",0,"history",[31,32,33],"hasNext","userId",{"_34":81,"_36":37,"_38":82,"_40":83,"_42":73,"_44":70,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":51,"_52":53,"_54":84,"_21":85,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":86},{"_34":70,"_36":37,"_38":71,"_40":72,"_42":73,"_44":35,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":51,"_52":53,"_54":74,"_21":75,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":76},{"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":-5,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":51,"_52":53,"_54":55,"_21":56,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":62},"id","0739892f-6429-4aaf-a4fc-c1c4e06afb4c","branchId","80f972a1-b152-476c-89ce-3d7660294021","createdAt",["D",1789337086167],"version",1,"orgId","01a092aa-484c-771f-96e6-9511b5195ebc","parentId","incomingCommitId","aiChatMessageId","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","mcp","clientLabel","ChatGPT","user",{"_34":-5,"_42":-5,"_11":12,"_69":-5},{"_64":65,"_13":18,"_66":67,"_68":24},"pull","merge","revert","multiple","commits",[63],{"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":-5,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":51,"_52":53,"_54":55,"_21":56,"_57":-5,"_58":-5,"_59":-5},"fileId","219c95f4-afbf-11f1-8b87-1607ee4eb77e","fileType","http","deleted","avatar","8730c31e-671c-43b2-8aae-ab47a9586e35",["D",1789337158462],2,"01a04116-f28c-754c-9173-77bf5814fcd6",{"_34":78,"_42":73,"_11":79,"_69":80},{"_64":65,"_13":18,"_66":67,"_68":24},[77],{"_34":70,"_36":37,"_38":71,"_40":72,"_42":73,"_44":35,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":51,"_52":53,"_54":74,"_21":75,"_57":-5,"_58":-5,"_59":-5},"d3788f19-13c5-4356-87e8-dce639626bb9","sebas1","https://lh3.googleusercontent.com/a/ACg8ocJaC6uiXPmN9dvgA2XcSlzBSkPJO0GN5zKzPm3a8cbjmXC9HYA=s96-c","3f6f752f-d35a-41fe-8a9e-dd6c155bfe24",["D",1789337521847],3,{"_34":78,"_42":73,"_11":79,"_69":80},{"_64":65,"_13":18,"_66":67,"_68":24},[87],{"_34":81,"_36":37,"_38":82,"_40":83,"_42":73,"_44":70,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":51,"_52":53,"_54":84,"_21":85,"_57":-5,"_58":-5,"_59":-5},"deletedAtVersion","dca1c10f-d487-4601-9ad9-2e2f4cd4565d",["D",1789337085820],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","RUMBO signed remote evaluator primary","imageUrl","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","tursoName","dca1c10fd48746019ad92e2f4cd4565d","tursoHostname","dca1c10fd48746019ad92e2f4cd4565d-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789519256886],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_140":-5},"org",{"_11":12,"_135":136,"_69":-5,"_30":-5,"_137":138,"_139":24},"branch",{"_40":83,"_13":16,"_34":37,"_127":89,"_128":-5,"_129":-5,"_130":-5,"_131":-5,"_132":-5,"_133":14,"_134":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Rumbo","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_34":89,"_13":14,"_38":186,"_91":-5,"_92":24,"_93":94,"_95":94,"_96":97,"_98":-5,"_30":78,"_99":65,"_100":101,"_102":-5,"_103":-5,"_104":26,"_42":43,"_105":106,"_107":108,"_109":187,"_111":-5,"_112":113,"_114":113,"_115":116,"_117":116,"_118":116,"_119":113,"_120":113,"_54":188,"_122":189,"_124":190,"_126":24},"tree",[181],"files",[181],"counts",{"_170":26,"_171":41,"_172":26,"_173":174,"_175":176},"contents",[],{"_34":162,"_13":18,"_64":65,"_44":-5,"_36":37,"_163":83,"_164":101,"_38":165,"_40":72,"_66":67,"_166":167,"_68":24,"_168":-5,"_17":169},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},"11d0b282-bbd9-4083-865b-1f60ac54df3e","branchVersion","latest",["D",1789337521847],"content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport * as ed from \"npm:@noble/ed25519\";\n\nconst enc = new TextEncoder();\nconst dec = new TextDecoder();\nconst SERVICE_ID = \"rumbo-val-primary\";\nconst EVALUATOR_ID = \"primary-val-v08\";\nconst ADMIN_DOMAIN = \"valtown-rumbo-primary\";\nconst WORKLOAD_ID = `rumbo://${ADMIN_DOMAIN}/${SERVICE_ID}`;\nconst CONTROLLER_PUB = mustEnv(\"RUMBO_CONTROLLER_PUBLIC_KEY_B64\");\nconst IDENTITY_SEED = b64d(mustEnv(\"RUMBO_IDENTITY_KEY_B64\"));\nconst CASE_SALT = b64d(mustEnv(\"RUMBO_CASESET_SALT_B64\"));\nconst CASES = JSON.parse(mustEnv(\"RUMBO_HOLDOUT_CASES_JSON\"));\nconst MAX_AGE_SECONDS = 120;\nconst MIN_PASS_RATE = 1.0;\nconst HOST_FINGERPRINT = await sha256(`valtown|${ADMIN_DOMAIN}|${Deno.env.get(\"DENO_REGION\") ?? \"unknown\"}|${Deno.env.get(\"VAL_TOWN_PROJECT_ID\") ?? \"unknown\"}`);\nconst PUB = await ed.getPublicKeyAsync(IDENTITY_SEED);\nconst PUB_B64 = b64e(PUB);\nconst PUB_FP = await sha256Bytes(PUB);\nconst CASE_SET_DIGEST = await sha256Bytes(concat(CASE_SALT, canonicalBytes(CASES)));\nconst BOOT_NONCE = crypto.randomUUID();\n\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS consumed_requests (\n digest TEXT PRIMARY KEY,\n consumed_at TEXT NOT NULL\n)`);\n\nfunction mustEnv(name: string): string {\n const v = Deno.env.get(name)?.trim();\n if (!v) throw new Error(`missing_required_env:${name}`);\n return v;\n}\nfunction b64e(data: Uint8Array): string {\n let s = \"\"; for (const b of data) s += String.fromCharCode(b);\n return btoa(s).replaceAll(\"+\", \"-\").replaceAll(\"/\", \"_\").replace(/=+$/g, \"\");\n}\nfunction b64d(text: string): Uint8Array {\n const s = text.replaceAll(\"-\", \"+\").replaceAll(\"_\", \"/\") + \"=\".repeat((4 - text.length % 4) % 4);\n return Uint8Array.from(atob(s), c => c.charCodeAt(0));\n}\nfunction concat(a: Uint8Array, b: Uint8Array): Uint8Array {\n const out = new Uint8Array(a.length + b.length); out.set(a); out.set(b, a.length); return out;\n}\nfunction canonical(value: unknown): string {\n if (value === null || typeof value !== \"object\") return JSON.stringify(value);\n if (Array.isArray(value)) return `[${value.map(canonical).join(\",\")}]`;\n const obj = value as Record;\n return `{${Object.keys(obj).sort().map(k => `${JSON.stringify(k)}:${canonical(obj[k])}`).join(\",\")}}`;\n}\nfunction canonicalBytes(value: unknown): Uint8Array { return enc.encode(canonical(value)); }\nasync function sha256(text: string): Promise { return sha256Bytes(enc.encode(text)); }\nasync function sha256Bytes(bytes: Uint8Array): Promise {\n const d = new Uint8Array(await crypto.subtle.digest(\"SHA-256\", bytes));\n return [...d].map(x => x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nfunction now(): string { return new Date().toISOString(); }\nasync function signed(payload: Record) {\n const sig = await ed.signAsync(canonicalBytes(payload), IDENTITY_SEED);\n return { payload, signature_b64: b64e(sig), public_key_b64: PUB_B64 };\n}\nasync function json(req: Request): Promise {\n try { return await req.json(); } catch { throw new HttpError(400, \"invalid_json\"); }\n}\nclass HttpError extends Error { constructor(public status: number, message: string){ super(message); } }\nfunction respond(body: unknown, status=200): Response { return Response.json(body, {status}); }\n\nasync function claim(digest: string): Promise {\n try {\n await sqlite.execute({sql:\"INSERT INTO consumed_requests(digest, consumed_at) VALUES(?, ?)\", args:[digest, now()]});\n return true;\n } catch (e) {\n if (String(e).toLowerCase().includes(\"unique\") || String(e).toLowerCase().includes(\"constraint\")) return false;\n throw e;\n }\n}\n\nasync function verifyRequest(obj: any): Promise<{payload:any,digest:string}> {\n if (obj?.controller_public_key_b64 !== CONTROLLER_PUB) throw new HttpError(401,\"controller_key_mismatch\");\n const payload = obj?.payload;\n if (payload?.version !== \"rumbo-remote-evaluation-request/v1\") throw new HttpError(400,\"request_version_invalid\");\n let ok=false;\n try { ok = await ed.verifyAsync(b64d(obj.signature_b64), canonicalBytes(payload), b64d(CONTROLLER_PUB)); } catch {}\n if (!ok) throw new HttpError(401,\"request_signature_invalid\");\n const issued = Date.parse(payload.issued_at_utc);\n if (!Number.isFinite(issued)) throw new HttpError(400,\"request_time_invalid\");\n const age = (Date.now() - issued)/1000;\n if (age < -30 || age > MAX_AGE_SECONDS) throw new HttpError(409,\"request_expired_or_future\");\n const digest = await sha256(canonical(obj));\n if (!(await claim(digest))) throw new HttpError(409,\"request_replay\");\n return {payload,digest};\n}\n\nasync function route(req: Request): Promise {\n const u = new URL(req.url);\n if (req.method === \"GET\" && u.pathname.endsWith(\"/health\")) {\n return respond({ok:true,service_id:SERVICE_ID,evaluator_id:EVALUATOR_ID,role:\"evaluator\",persistence:\"val-scoped-sqlite\"});\n }\n if (req.method === \"GET\" && u.pathname.endsWith(\"/v1/identity\")) {\n return respond(await signed({version:\"rumbo-service-identity/v1\",service_id:SERVICE_ID,role:\"evaluator\",administrative_domain:ADMIN_DOMAIN,host_fingerprint:HOST_FINGERPRINT,public_key_fingerprint:PUB_FP,workload_id:WORKLOAD_ID,boot_nonce:BOOT_NONCE,issued_at_utc:now()}));\n }\n if (req.method === \"POST\" && u.pathname.endsWith(\"/v1/challenge\")) {\n const body = await json(req); const nonce = String(body?.nonce ?? \"\");\n if (nonce.length < 16 || nonce.length > 256) throw new HttpError(400,\"nonce_length_invalid\");\n return respond(await signed({version:\"rumbo-service-liveness/v1\",service_id:SERVICE_ID,challenge_nonce:nonce,host_fingerprint:HOST_FINGERPRINT,boot_nonce:BOOT_NONCE,issued_at_utc:now()}));\n }\n if (req.method === \"POST\" && u.pathname.endsWith(\"/v1/evaluate\")) {\n const raw = await json(req); const {payload,digest} = await verifyRequest(raw);\n const solution = String(payload.solution ?? \"\");\n const scores = CASES.map((c:any) => (c.required_tokens ?? []).every((t:string)=>solution.includes(t)) && (c.forbidden_tokens ?? []).every((t:string)=>!solution.includes(t)) ? 1 : 0);\n const passRate = scores.reduce((a:number,b:number)=>a+b,0)/scores.length;\n const passed = passRate >= MIN_PASS_RATE;\n const evidenceDigest = await sha256(canonical({evaluator:EVALUATOR_ID,candidate:payload.candidate_id,challenge:payload.challenge_id,case_set:CASE_SET_DIGEST,scores,request_sha256:digest}));\n const receipt = await signed({version:\"rumbo-evaluator-receipt/v1\",evaluator_id:EVALUATOR_ID,candidate_id:payload.candidate_id,challenge_id:payload.challenge_id,passed,pass_rate:passRate,case_count:CASES.length,case_set_digest:CASE_SET_DIGEST,evidence_digest:evidenceDigest,status:passed?\"passed\":\"hidden_gate_failed\",worker_pid:Deno.pid,issued_at_utc:now(),nonce:crypto.randomUUID(),public_key_fingerprint:PUB_FP,administrative_domain:ADMIN_DOMAIN,host_fingerprint:HOST_FINGERPRINT});\n const responsePayload = {version:\"rumbo-remote-evaluation-response/v1\",endpoint_id:SERVICE_ID,request_sha256:digest,evaluator_receipt:receipt,issued_at_utc:now(),nonce:crypto.randomUUID()};\n const sig = await ed.signAsync(canonicalBytes(responsePayload), IDENTITY_SEED);\n return respond({payload:responsePayload,signature_b64:b64e(sig),evaluator_public_key_b64:PUB_B64});\n }\n return respond({error:\"not_found\"},404);\n}\n\nexport default async function(req: Request): Promise {\n try { return await route(req); }\n catch (e) {\n if (e instanceof HttpError) return respond({error:e.message}, e.status);\n console.error(e); return respond({error:\"internal_error\"},500);\n }\n}\n","label",[18],"pulls","branches","forks","envVars",{"_177":179,"_180":26},"connections",{"_177":26,"_178":26},"count","unfilledCount",4,"emptyCount",{"_34":162,"_13":18,"_64":65,"_44":-5,"_36":37,"_163":83,"_164":101,"_38":182,"_40":72,"_66":67,"_166":167,"_68":24,"_168":-5,"_183":184,"_17":185},["D",1789337521847],"children",[],[18],["D",1789337085820],["D",1789519256886],{"_11":12,"_140":-5},{"_11":12,"_135":136,"_69":-5,"_30":-5,"_137":138,"_139":24},{"_40":83,"_13":16,"_34":37,"_127":89,"_128":-5,"_129":-5,"_130":-5,"_131":-5,"_132":-5,"_133":14,"_134":12},"ctx",{"_54":-5,"_159":224,"_225":226,"_227":228,"_229":24,"_230":24,"_231":24,"_232":101,"_233":-5,"_234":-7,"_235":-7,"_236":26,"_237":24,"_238":24,"_239":-5,"_240":24,"_241":24,"_242":24,"_243":-5},"ENV",{"_195":196,"_197":198,"_199":16,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · main.ts