[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_155":156,"_157":158},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_118":-5,"_20":119,"_22":120,"_121":122,"_123":124,"_25":125,"_24":-5,"_126":-5,"_127":-5,"_128":53,"_129":130,"_131":44,"_132":-5,"_133":-5,"_134":135},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","sahilmittal","name","pay-site","branchName","main","version","path","","project",{"_33":62,"_13":14,"_45":63,"_64":-5,"_65":53,"_66":67,"_68":67,"_69":70,"_71":-5,"_72":73,"_74":37,"_75":44,"_76":-5,"_77":-5,"_78":79,"_80":81,"_82":-5,"_83":-5,"_84":-5,"_85":-5,"_86":87,"_88":87,"_89":90,"_91":90,"_92":90,"_93":87,"_94":87,"_95":96,"_97":98,"_99":100,"_101":53},"tree",[57],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":55,"_18":56},"id","2efec007-a09b-4fa8-b053-c5b387a09cb7","main.ts","fileId","3877e83c-8927-11f1-8a82-1607ee4eb77e","parentId","branchId","b3ad8291-9897-4671-9c20-4ceacb55695a","branchVersion",35,"latest",true,"createdAt",["D",1785159637095],34,"fileType","http","content","const COOKIE_NAME = \"pay_session\";\nconst COOKIE_VALUE = \"secret_pay_token_2024s\";\n\nfunction parseCookies(cookieHeader: string): Record {\n return Object.fromEntries(\n cookieHeader.split(\"; \").filter(Boolean).map((p) => {\n const [k, ...v] = p.split(\"=\");\n return [k, v.join(\"=\")];\n }),\n );\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // ── Route: / → Pay button + sets cookie ──────────────────────\n if (path === \"/\") {\n return new Response(\n `\n\nPay Site\n\n

Welcome

\n \n

\n\n`,\n {\n status: 200,\n headers: {\n \"Content-Type\": \"text/html\",\n \"Set-Cookie\":\n `${COOKIE_NAME}=${COOKIE_VALUE}; Path=/;HttpOnly; SameSite=None; Secure; Max-Age=604800;`,\n },\n },\n );\n }\n\n // ── Route: /pay → verify cookie, then show login form ────────\n if (path === \"/pay\") {\n const cookies = parseCookies(req.headers.get(\"Cookie\") || \"\");\n\n // Wrong or missing cookie → error page\n if (cookies[COOKIE_NAME] !== COOKIE_VALUE) {\n return new Response(\n `\n\nAccess Denied\n\n

Access Denied

Invalid or missing cookie. Please go back and click Pay first.

\n ← Back to home\n

\n\n`,\n {\n status: 403,\n headers: { \"Content-Type\": \"text/html\" },\n },\n );\n }\n\n // Cookie is valid → show login form\n return new Response(\n `\n\nLogin to Pay\n\n

Login to Pay

\n \n

\n\n`,\n {\n status: 200,\n headers: { \"Content-Type\": \"text/html\" },\n },\n );\n }\n\n // ── Route: POST /pay → handle form submission ────────────────\n if (path === \"/pay\" && req.method === \"POST\") {\n const form = await req.formData();\n return new Response(\n `\n\nSuccess\n\n

Login Submitted!

Welcome, ${form.get(\"name\") || \"friend\"}!

\n ← Back to home\n

\n\n`,\n {\n status: 200,\n headers: { \"Content-Type\": \"text/html\" },\n },\n );\n }\n\n // ── Fallback ─────────────────────────────────────────────────\n return new Response(\"Not Found\", { status: 404 });\n}","deleted",false,"label","popup",[35],{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":58,"_17":47,"_48":49,"_50":51,"_52":53,"_54":55,"_59":60,"_18":61},["D",1785159637095],"children",[],[35],"61f301bd-1358-4743-a3cb-29fa3dfbd34a",["D",1785093653693],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Pay button sets cookie; /pay verifies it before login form.","imageUrl","userId","131b1ca8-7a60-4cc9-981c-75df4705e764","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f9fdb-174a-76bb-9d6a-e4fa16a25205","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_117":113},"org",{"_11":12,"_110":111,"_112":113,"_72":73,"_114":115,"_116":53},"branch",{"_17":42,"_13":16,"_33":40,"_102":62,"_103":-5,"_104":-5,"_105":-5,"_106":-5,"_107":-5,"_108":14,"_109":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","sahil mittal","avatar","https://lh3.googleusercontent.com/a/ACg8ocJpeQVbpllnO2FKpARoYPekCur4ZsV9XswrobdsU7P-A-NjYg=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":62,"_13":14,"_45":151,"_64":-5,"_65":53,"_66":67,"_68":67,"_69":70,"_71":-5,"_72":73,"_74":37,"_75":44,"_76":-5,"_77":-5,"_78":79,"_80":81,"_82":-5,"_83":-5,"_84":-5,"_85":-5,"_86":87,"_88":87,"_89":90,"_91":90,"_92":90,"_93":87,"_94":87,"_95":152,"_97":153,"_99":154,"_101":53},[148],"files",[148],"counts",{"_138":79,"_139":140,"_141":79,"_31":142,"_143":144},[136],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":55,"_18":137},[35],"pulls","branches",1,"forks",{"_145":79,"_147":79},"connections",{"_145":79,"_146":79},"count","unfilledCount","emptyCount",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":58,"_17":47,"_48":49,"_50":51,"_52":53,"_54":55,"_59":149,"_18":150},[],[35],["D",1785093653693],{"_11":12,"_117":113},{"_11":12,"_110":111,"_112":113,"_72":73,"_114":115,"_116":53},{"_17":42,"_13":16,"_33":40,"_102":62,"_103":-5,"_104":-5,"_105":-5,"_106":-5,"_107":-5,"_108":14,"_109":12},"ctx",{"_95":-5,"_133":188,"_189":190,"_191":192,"_193":53,"_194":53,"_195":53,"_196":44,"_197":-5,"_198":-7,"_199":-7,"_200":79,"_201":53,"_202":53,"_203":-5,"_204":53,"_205":53,"_206":53,"_207":-5},"ENV",{"_159":160,"_161":162,"_163":16,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Code