[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_201":202,"_203":204},"routes/_app.x.$handle.$name",{"_114":113,"_34":60,"_123":104,"_29":124,"_13":14,"_125":-5,"_11":126,"_127":128,"_129":130,"_131":132,"_133":134,"_22":-5,"_135":-5,"_136":-5,"_137":27,"_138":139,"_140":73,"_141":-5,"_142":-5,"_143":144},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_58":59,"_34":60,"_40":61,"_62":-5,"_63":27,"_64":65,"_66":65,"_67":68,"_69":-5,"_18":70,"_71":33,"_72":73,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":83,"_84":85,"_86":-5,"_87":88,"_89":88,"_90":91,"_92":91,"_93":91,"_94":88,"_95":88,"_96":97,"_98":99,"_100":101,"_102":27},"version",4,"changes",[19,20,21],"aiChatInfo","userId",{"_22":50,"_24":51,"_26":27,"_28":27,"_29":52,"_31":52},{"_22":45,"_24":-7,"_26":27,"_28":27,"_29":46,"_31":46},{"_22":23,"_24":25,"_26":27,"_28":27,"_29":30,"_31":30},"file",{"_32":33,"_34":30,"_35":36,"_37":39,"_40":41,"_42":14,"_43":44,"_26":27},"previous",{"_32":33,"_34":30,"_35":36,"_37":38},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","da1a7e96-a35a-11f1-816f-1607ee4eb77e","name","fileType","http","content","import { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst app = new Hono();\n\nconst IMPLEMENTATION = \"DEDICATED_R2_AUTHORIZER_V1\";\nconst REPOSITORY_IDENTITY_SHA256 = \"59e28afe0dd67d61cdaaaa5d470a6470b6c1540f025d172f094fe3321857fc23\";\nconst CONTROL_PACKAGE_SHA256 = \"afbdc77510286adc5721ada5a0ddfa75e10305cb5200d6fd37cd8438c9c6119f\";\nconst SHA256_RE = /^[a-f0-9]{64}$/;\nconst GIT_SHA_RE = /^[a-f0-9]{40}$/;\nconst MAX_BODY_BYTES = 64 * 1024;\nconst MIN_TTL_SECONDS = 60;\nconst MAX_TTL_SECONDS = 900;\n\ntype GuardAction = \"TEST_ONLY\" | \"MERGE_PR\";\ntype Binding = {\n action: GuardAction;\n repository_identity_sha256: string;\n pr_number: number;\n base_sha: string;\n head_sha: string;\n package_sha256: string;\n evidence_sha256: string;\n};\n\nawait sqlite.batch([\n `CREATE TABLE IF NOT EXISTS authorizations (\n authorization_id TEXT PRIMARY KEY,\n action TEXT NOT NULL CHECK(action IN ('TEST_ONLY','MERGE_PR')),\n repository_identity_sha256 TEXT NOT NULL,\n pr_number INTEGER NOT NULL,\n base_sha TEXT NOT NULL,\n head_sha TEXT NOT NULL,\n package_sha256 TEXT NOT NULL,\n evidence_sha256 TEXT NOT NULL,\n request_sha256 TEXT NOT NULL UNIQUE,\n token_sha256 TEXT NOT NULL UNIQUE,\n status TEXT NOT NULL CHECK(status IN ('ISSUED','CONSUMED','REVOKED','EXPIRED')),\n issued_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n consumed_at TEXT,\n consumer TEXT\n )`,\n `CREATE INDEX IF NOT EXISTS idx_authorizations_status ON authorizations(status,expires_at)`,\n `CREATE TABLE IF NOT EXISTS audit_events (\n seq INTEGER PRIMARY KEY AUTOINCREMENT,\n event_type TEXT NOT NULL,\n authorization_id TEXT,\n object_sha256 TEXT,\n prev_event_sha256 TEXT NOT NULL,\n event_sha256 TEXT NOT NULL UNIQUE,\n created_at TEXT NOT NULL\n )`,\n `CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_prev_unique ON audit_events(prev_event_sha256)`,\n `CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_event_object_unique\n ON audit_events(event_type,authorization_id)\n WHERE authorization_id IS NOT NULL`\n]);\n\nfunction bearer(req: Request): string {\n const h = req.headers.get(\"authorization\") || \"\";\n return h.startsWith(\"Bearer \") ? h.slice(7) : \"\";\n}\n\nfunction constantTimeEqual(a: string, b: string): boolean {\n const aa = new TextEncoder().encode(a);\n const bb = new TextEncoder().encode(b);\n if (aa.length !== bb.length) return false;\n let diff = 0;\n for (let i = 0; i < aa.length; i++) diff |= aa[i] ^ bb[i];\n return diff === 0;\n}\n\nfunction authorized(req: Request): boolean {\n const expected = Deno.env.get(\"R2_AUTH_ROOT_TOKEN\") || \"\";\n const observed = bearer(req);\n return !!expected && !!observed && constantTimeEqual(expected, observed);\n}\n\nfunction canonical(v: unknown): string {\n if (v === null || typeof v !== \"object\") return JSON.stringify(v);\n if (Array.isArray(v)) return \"[\" + v.map(canonical).join(\",\") + \"]\";\n const o = v as Record;\n return \"{\" + Object.keys(o).sort().map(k => JSON.stringify(k) + \":\" + canonical(o[k])).join(\",\") + \"}\";\n}\n\nasync function sha256(s: string): Promise {\n const digest = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(digest)].map(x => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction randomToken(bytes = 32): string {\n const raw = new Uint8Array(bytes);\n crypto.getRandomValues(raw);\n const binary = Array.from(raw, b => String.fromCharCode(b)).join(\"\");\n return btoa(binary).replaceAll(\"+\", \"-\").replaceAll(\"/\", \"_\").replace(/=+$/g, \"\");\n}\n\nasync function bodyJson(c: any): Promise {\n const len = Number(c.req.header(\"content-length\") || \"0\");\n if (Number.isFinite(len) && len > MAX_BODY_BYTES) throw new Error(\"PAYLOAD_TOO_LARGE\");\n const txt = await c.req.text();\n if (new TextEncoder().encode(txt).length > MAX_BODY_BYTES) throw new Error(\"PAYLOAD_TOO_LARGE\");\n return JSON.parse(txt || \"{}\");\n}\n\nfunction parseBinding(v: any): Binding | null {\n const action = String(v?.action || \"\") as GuardAction;\n const repository_identity_sha256 = String(v?.repository_identity_sha256 || \"\");\n const pr_number = Number(v?.pr_number);\n const base_sha = String(v?.base_sha || \"\");\n const head_sha = String(v?.head_sha || \"\");\n const package_sha256 = String(v?.package_sha256 || \"\");\n const evidence_sha256 = String(v?.evidence_sha256 || \"\");\n\n if (action !== \"TEST_ONLY\" && action !== \"MERGE_PR\") return null;\n if (repository_identity_sha256 !== REPOSITORY_IDENTITY_SHA256) return null;\n if (!Number.isSafeInteger(pr_number) || pr_number <= 0) return null;\n if (!GIT_SHA_RE.test(base_sha) || !GIT_SHA_RE.test(head_sha)) return null;\n if (package_sha256 !== CONTROL_PACKAGE_SHA256) return null;\n if (!SHA256_RE.test(evidence_sha256)) return null;\n\n return {action,repository_identity_sha256,pr_number,base_sha,head_sha,package_sha256,evidence_sha256};\n}\n\nasync function audit(event_type: string, authorization_id: string | null, object_sha256: string | null) {\n if (authorization_id) {\n const existing = await sqlite.execute({\n sql: \"SELECT event_sha256 FROM audit_events WHERE event_type=? AND authorization_id=? LIMIT 1\",\n args: [event_type, authorization_id]\n });\n if (existing.rows.length) return String(existing.rows[0].event_sha256);\n }\n\n for (let attempt = 0; attempt < 8; attempt++) {\n const last = await sqlite.execute(\"SELECT event_sha256 FROM audit_events ORDER BY seq DESC LIMIT 1\");\n const prev = String(last.rows[0]?.event_sha256 || \"0\".repeat(64));\n const created_at = new Date().toISOString();\n const event = {event_type,authorization_id,object_sha256,prev_event_sha256:prev,created_at};\n const event_sha256 = await sha256(canonical(event));\n try {\n await sqlite.execute({\n sql: `INSERT INTO audit_events(event_type,authorization_id,object_sha256,prev_event_sha256,event_sha256,created_at)\n VALUES(?,?,?,?,?,?)`,\n args: [event_type,authorization_id,object_sha256,prev,event_sha256,created_at]\n });\n return event_sha256;\n } catch (e) {\n if (authorization_id) {\n const existing = await sqlite.execute({\n sql: \"SELECT event_sha256 FROM audit_events WHERE event_type=? AND authorization_id=? LIMIT 1\",\n args: [event_type, authorization_id]\n });\n if (existing.rows.length) return String(existing.rows[0].event_sha256);\n }\n if (!String(e).includes(\"UNIQUE\")) throw e;\n }\n }\n throw new Error(\"AUDIT_APPEND_CONTENTION\");\n}\n\napp.get(\"/\", (c) => c.json({\n service:\"rumbo-r2-authorizer\",\n implementation:IMPLEMENTATION,\n status:\"ok\",\n production_go:false\n}));\n\napp.get(\"/health\", (c) => c.json({\n ok:true,\n implementation:IMPLEMENTATION,\n root_token_configured:!!Deno.env.get(\"R2_AUTH_ROOT_TOKEN\"),\n merge_authorization_enabled:Deno.env.get(\"R2_ALLOW_MERGE_AUTHORIZATION\") === \"true\",\n repository_identity_sha256:REPOSITORY_IDENTITY_SHA256,\n package_sha256:CONTROL_PACKAGE_SHA256,\n ttl_seconds:{min:MIN_TTL_SECONDS,max:MAX_TTL_SECONDS},\n capabilities:[\n \"dedicated-external-authorizer\",\n \"exact-pr-binding\",\n \"one-time-token-ledger\",\n \"audit-hash-chain\",\n \"fail-closed-merge-gate\"\n ],\n production_go:false\n}), 200, {\"Cache-Control\":\"no-store\"});\n\napp.post(\"/v1/authorize\", async (c) => {\n if (!authorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n try {\n const b = await bodyJson(c);\n const binding = parseBinding(b);\n if (!binding) return c.json({error:\"INVALID_BINDING\"},400,{\"Cache-Control\":\"no-store\"});\n\n if (binding.action === \"MERGE_PR\" && Deno.env.get(\"R2_ALLOW_MERGE_AUTHORIZATION\") !== \"true\") {\n return c.json({error:\"MERGE_AUTHORIZATION_DISABLED\",production_go:false},423,{\"Cache-Control\":\"no-store\"});\n }\n\n const ttl = b.ttl_seconds === undefined ? 300 : Number(b.ttl_seconds);\n if (!Number.isSafeInteger(ttl) || ttl < MIN_TTL_SECONDS || ttl > MAX_TTL_SECONDS) {\n return c.json({error:\"INVALID_TTL\",min:MIN_TTL_SECONDS,max:MAX_TTL_SECONDS},400,{\"Cache-Control\":\"no-store\"});\n }\n\n const request_sha256 = await sha256(canonical(binding));\n const prior = await sqlite.execute({\n sql:\"SELECT authorization_id,status,expires_at FROM authorizations WHERE request_sha256=? LIMIT 1\",\n args:[request_sha256]\n });\n if (prior.rows.length) {\n const row:any = prior.rows[0];\n return c.json({\n error:\"AUTHORIZATION_ALREADY_EXISTS\",\n authorization_id:row.authorization_id,\n status:row.status,\n expires_at:row.expires_at,\n request_sha256\n },409,{\"Cache-Control\":\"no-store\"});\n }\n\n const raw_token = randomToken();\n const token_sha256 = await sha256(raw_token);\n const authorization_id = crypto.randomUUID();\n const issued = new Date();\n const issued_at = issued.toISOString();\n const expires_at = new Date(issued.getTime() + ttl * 1000).toISOString();\n\n await sqlite.execute({\n sql:`INSERT INTO authorizations(\n authorization_id,action,repository_identity_sha256,pr_number,base_sha,head_sha,\n package_sha256,evidence_sha256,request_sha256,token_sha256,status,issued_at,expires_at\n ) VALUES(?,?,?,?,?,?,?,?,?,?, 'ISSUED', ?,?)`,\n args:[\n authorization_id,binding.action,binding.repository_identity_sha256,binding.pr_number,\n binding.base_sha,binding.head_sha,binding.package_sha256,binding.evidence_sha256,\n request_sha256,token_sha256,issued_at,expires_at\n ]\n });\n\n try {\n await audit(\"AUTHORIZATION_ISSUED\",authorization_id,request_sha256);\n } catch (e) {\n await sqlite.execute({\n sql:\"UPDATE authorizations SET status='REVOKED' WHERE authorization_id=? AND status='ISSUED'\",\n args:[authorization_id]\n });\n throw e;\n }\n\n return c.json({\n authorized:true,\n authorization_id,\n action:binding.action,\n request_sha256,\n token:raw_token,\n token_type:\"One-Time\",\n issued_at,\n expires_at,\n merge_authorized:binding.action === \"MERGE_PR\",\n production_go:false,\n note:\"Raw one-time token is returned only at issuance; only SHA-256 is persisted.\"\n },201,{\"Cache-Control\":\"no-store\"});\n } catch (e) {\n return c.json({error:String(e?.message || e),production_go:false},400,{\"Cache-Control\":\"no-store\"});\n }\n});\n\napp.post(\"/v1/consume\", async (c) => {\n if (!authorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n try {\n const b = await bodyJson(c);\n const binding = parseBinding(b);\n if (!binding) return c.json({error:\"INVALID_BINDING\"},400,{\"Cache-Control\":\"no-store\"});\n\n if (binding.action === \"MERGE_PR\" && Deno.env.get(\"R2_ALLOW_MERGE_AUTHORIZATION\") !== \"true\") {\n return c.json({error:\"MERGE_AUTHORIZATION_DISABLED\",production_go:false},423,{\"Cache-Control\":\"no-store\"});\n }\n\n const authorization_id = String(b.authorization_id || \"\");\n const raw_token = String(b.token || \"\");\n const consumer = String(b.consumer || \"\");\n if (!authorization_id || !/^[A-Za-z0-9_-]{43,128}$/.test(raw_token)) {\n return c.json({error:\"INVALID_CONSUMPTION_REQUEST\"},400,{\"Cache-Control\":\"no-store\"});\n }\n if (!/^[A-Za-z0-9_.:-]{1,128}$/.test(consumer)) {\n return c.json({error:\"INVALID_CONSUMER\"},400,{\"Cache-Control\":\"no-store\"});\n }\n\n const request_sha256 = await sha256(canonical(binding));\n const rs = await sqlite.execute({sql:\"SELECT * FROM authorizations WHERE authorization_id=? LIMIT 1\",args:[authorization_id]});\n if (!rs.rows.length) return c.json({error:\"AUTHORIZATION_NOT_FOUND\"},404,{\"Cache-Control\":\"no-store\"});\n const row:any = rs.rows[0];\n\n if (String(row.status) === \"ISSUED\" && Date.parse(String(row.expires_at)) <= Date.now()) {\n const expired:any = await sqlite.execute({\n sql:\"UPDATE authorizations SET status='EXPIRED' WHERE authorization_id=? AND status='ISSUED'\",\n args:[authorization_id]\n });\n if (Number(expired?.rowsAffected ?? 0) === 1) {\n await audit(\"AUTHORIZATION_EXPIRED\",authorization_id,String(row.request_sha256));\n }\n return c.json({error:\"AUTHORIZATION_EXPIRED\",authorization_id},410,{\"Cache-Control\":\"no-store\"});\n }\n\n if (String(row.status) !== \"ISSUED\") {\n return c.json({error:\"AUTHORIZATION_NOT_ISSUED\",status:row.status,authorization_id},409,{\"Cache-Control\":\"no-store\"});\n }\n if (!constantTimeEqual(String(row.request_sha256),request_sha256)) {\n return c.json({error:\"BINDING_MISMATCH\"},409,{\"Cache-Control\":\"no-store\"});\n }\n\n const observed_token_sha256 = await sha256(raw_token);\n if (!constantTimeEqual(String(row.token_sha256),observed_token_sha256)) {\n return c.json({error:\"TOKEN_MISMATCH\"},403,{\"Cache-Control\":\"no-store\"});\n }\n\n const consumed_at = new Date().toISOString();\n const updated:any = await sqlite.execute({\n sql:\"UPDATE authorizations SET status='CONSUMED',consumed_at=?,consumer=? WHERE authorization_id=? AND status='ISSUED' AND consumed_at IS NULL\",\n args:[consumed_at,consumer,authorization_id]\n });\n if (Number(updated?.rowsAffected ?? 0) !== 1) {\n return c.json({error:\"AUTHORIZATION_RACE_LOST\"},409,{\"Cache-Control\":\"no-store\"});\n }\n\n const receipt = {\n schema:\"rumbo-r2-dedicated-authorizer-consumption/v1\",\n authorization_id,\n action:binding.action,\n repository_identity_sha256:binding.repository_identity_sha256,\n pr_number:binding.pr_number,\n base_sha:binding.base_sha,\n head_sha:binding.head_sha,\n package_sha256:binding.package_sha256,\n evidence_sha256:binding.evidence_sha256,\n request_sha256,\n consumed_at,\n consumer,\n merge_authorized:binding.action === \"MERGE_PR\",\n production_go:false\n };\n const receipt_sha256 = await sha256(canonical(receipt));\n await audit(\"AUTHORIZATION_CONSUMED\",authorization_id,receipt_sha256);\n\n return c.json({...receipt,consumed:true,receipt_sha256},200,{\"Cache-Control\":\"no-store\"});\n } catch (e) {\n return c.json({error:String(e?.message || e),production_go:false},400,{\"Cache-Control\":\"no-store\"});\n }\n});\n\napp.post(\"/v1/revoke\", async (c) => {\n if (!authorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n try {\n const b = await bodyJson(c);\n const authorization_id = String(b.authorization_id || \"\");\n if (!authorization_id) return c.json({error:\"INVALID_AUTHORIZATION_ID\"},400,{\"Cache-Control\":\"no-store\"});\n\n const rs = await sqlite.execute({\n sql:\"SELECT status,request_sha256,expires_at FROM authorizations WHERE authorization_id=? LIMIT 1\",\n args:[authorization_id]\n });\n if (!rs.rows.length) return c.json({error:\"AUTHORIZATION_NOT_FOUND\"},404,{\"Cache-Control\":\"no-store\"});\n const row:any = rs.rows[0];\n\n if (String(row.status) === \"ISSUED\" && Date.parse(String(row.expires_at)) <= Date.now()) {\n const expired:any = await sqlite.execute({\n sql:\"UPDATE authorizations SET status='EXPIRED' WHERE authorization_id=? AND status='ISSUED'\",\n args:[authorization_id]\n });\n if (Number(expired?.rowsAffected ?? 0) === 1) {\n await audit(\"AUTHORIZATION_EXPIRED\",authorization_id,String(row.request_sha256));\n }\n return c.json({error:\"AUTHORIZATION_EXPIRED\",authorization_id},410,{\"Cache-Control\":\"no-store\"});\n }\n if (String(row.status) !== \"ISSUED\") {\n return c.json({error:\"AUTHORIZATION_NOT_ISSUED\",status:row.status},409,{\"Cache-Control\":\"no-store\"});\n }\n\n const updated:any = await sqlite.execute({\n sql:\"UPDATE authorizations SET status='REVOKED' WHERE authorization_id=? AND status='ISSUED'\",\n args:[authorization_id]\n });\n if (Number(updated?.rowsAffected ?? 0) !== 1) return c.json({error:\"AUTHORIZATION_RACE_LOST\"},409,{\"Cache-Control\":\"no-store\"});\n\n await audit(\"AUTHORIZATION_REVOKED\",authorization_id,String(row.request_sha256));\n return c.json({revoked:true,authorization_id,production_go:false},200,{\"Cache-Control\":\"no-store\"});\n } catch (e) {\n return c.json({error:String(e?.message || e),production_go:false},400,{\"Cache-Control\":\"no-store\"});\n }\n});\n\napp.get(\"/v1/ledger\", async (c) => {\n if (!authorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n const rawLimit = Number(c.req.query(\"limit\") || \"50\");\n const limit = Number.isSafeInteger(rawLimit) ? Math.max(1,Math.min(100,rawLimit)) : 50;\n const now = new Date().toISOString();\n const rs = await sqlite.execute({\n sql:`SELECT authorization_id,action,repository_identity_sha256,pr_number,base_sha,head_sha,\n package_sha256,evidence_sha256,request_sha256,status,\n CASE WHEN status='ISSUED' AND expires_at<=? THEN 'EXPIRED' ELSE status END AS effective_status,\n issued_at,expires_at,consumed_at,consumer\n FROM authorizations ORDER BY issued_at DESC LIMIT ?`,\n args:[now,limit]\n });\n return c.json({\n schema:\"rumbo-r2-dedicated-authorizer-ledger/v1\",\n implementation:IMPLEMENTATION,\n merge_authorization_enabled:Deno.env.get(\"R2_ALLOW_MERGE_AUTHORIZATION\") === \"true\",\n production_go:false,\n records:rs.rows\n },200,{\"Cache-Control\":\"no-store\"});\n});\n\napp.get(\"/v1/audit\", async (c) => {\n if (!authorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n const rs = await sqlite.execute(\"SELECT * FROM audit_events ORDER BY seq ASC\");\n let prev = \"0\".repeat(64);\n let ok = true;\n for (const r of rs.rows as any[]) {\n const event = {\n event_type:r.event_type,\n authorization_id:r.authorization_id,\n object_sha256:r.object_sha256,\n prev_event_sha256:r.prev_event_sha256,\n created_at:r.created_at\n };\n const computed = await sha256(canonical(event));\n if (String(r.prev_event_sha256) !== prev || String(r.event_sha256) !== computed) ok = false;\n prev = String(r.event_sha256);\n }\n return c.json({\n schema:\"rumbo-r2-dedicated-authorizer-audit/v1\",\n audit_chain_ok:ok,\n count:rs.rows.length,\n tail_sha256:prev,\n production_go:false\n },200,{\"Cache-Control\":\"no-store\"});\n});\n\napp.onError((err,c) => {\n console.error(err);\n return c.json({error:\"INTERNAL_ERROR\",production_go:false},500,{\"Cache-Control\":\"no-store\"});\n});\n\nexport default app.fetch;\n","import { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst app = new Hono();\n\nconst IMPLEMENTATION = \"DEDICATED_R2_AUTHORIZER_V2_SIGNED_RECEIPTS\";\nconst SIGNING_KEY_ID = \"bQgIMRdRTyvdHBTMuEdc7T4hTH8zwJA_gkVEcR2TcJY\";\nconst RECEIPT_VERIFY_JWK = {\n kty:\"EC\",crv:\"P-256\",\n x:\"TV0M-YRfRzqMB6dTZIhLOu7w21Tkgul-lUns7HwpHy4\",\n y:\"mRWAIOykqSBgsAXqC9t3OOmk3KLljPH935lilXma-W4\",\n key_ops:[\"verify\"],ext:true\n};\nconst REPOSITORY_IDENTITY_SHA256 = \"59e28afe0dd67d61cdaaaa5d470a6470b6c1540f025d172f094fe3321857fc23\";\nconst CONTROL_PACKAGE_SHA256 = \"afbdc77510286adc5721ada5a0ddfa75e10305cb5200d6fd37cd8438c9c6119f\";\nconst SHA256_RE = /^[a-f0-9]{64}$/;\nconst GIT_SHA_RE = /^[a-f0-9]{40}$/;\nconst MAX_BODY_BYTES = 64 * 1024;\nconst MIN_TTL_SECONDS = 60;\nconst MAX_TTL_SECONDS = 900;\n\ntype GuardAction = \"TEST_ONLY\" | \"MERGE_PR\";\ntype Binding = {\n action: GuardAction;\n repository_identity_sha256: string;\n pr_number: number;\n base_sha: string;\n head_sha: string;\n package_sha256: string;\n evidence_sha256: string;\n};\n\nawait sqlite.batch([\n `CREATE TABLE IF NOT EXISTS authorizations (\n authorization_id TEXT PRIMARY KEY,\n action TEXT NOT NULL CHECK(action IN ('TEST_ONLY','MERGE_PR')),\n repository_identity_sha256 TEXT NOT NULL,\n pr_number INTEGER NOT NULL,\n base_sha TEXT NOT NULL,\n head_sha TEXT NOT NULL,\n package_sha256 TEXT NOT NULL,\n evidence_sha256 TEXT NOT NULL,\n request_sha256 TEXT NOT NULL UNIQUE,\n token_sha256 TEXT NOT NULL UNIQUE,\n status TEXT NOT NULL CHECK(status IN ('ISSUED','CONSUMED','REVOKED','EXPIRED')),\n issued_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n consumed_at TEXT,\n consumer TEXT\n )`,\n `CREATE INDEX IF NOT EXISTS idx_authorizations_status ON authorizations(status,expires_at)`,\n `CREATE TABLE IF NOT EXISTS audit_events (\n seq INTEGER PRIMARY KEY AUTOINCREMENT,\n event_type TEXT NOT NULL,\n authorization_id TEXT,\n object_sha256 TEXT,\n prev_event_sha256 TEXT NOT NULL,\n event_sha256 TEXT NOT NULL UNIQUE,\n created_at TEXT NOT NULL\n )`,\n `CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_prev_unique ON audit_events(prev_event_sha256)`,\n `CREATE UNIQUE INDEX IF NOT EXISTS idx_audit_event_object_unique\n ON audit_events(event_type,authorization_id)\n WHERE authorization_id IS NOT NULL`\n]);\n\nfunction bearer(req: Request): string {\n const h = req.headers.get(\"authorization\") || \"\";\n return h.startsWith(\"Bearer \") ? h.slice(7) : \"\";\n}\n\nfunction constantTimeEqual(a: string, b: string): boolean {\n const aa = new TextEncoder().encode(a);\n const bb = new TextEncoder().encode(b);\n if (aa.length !== bb.length) return false;\n let diff = 0;\n for (let i = 0; i < aa.length; i++) diff |= aa[i] ^ bb[i];\n return diff === 0;\n}\n\nfunction authorized(req: Request): boolean {\n const expected = Deno.env.get(\"R2_AUTH_ROOT_TOKEN\") || \"\";\n const observed = bearer(req);\n return !!expected && !!observed && constantTimeEqual(expected, observed);\n}\n\nfunction canonical(v: unknown): string {\n if (v === null || typeof v !== \"object\") return JSON.stringify(v);\n if (Array.isArray(v)) return \"[\" + v.map(canonical).join(\",\") + \"]\";\n const o = v as Record;\n return \"{\" + Object.keys(o).sort().map(k => JSON.stringify(k) + \":\" + canonical(o[k])).join(\",\") + \"}\";\n}\n\nasync function sha256(s: string): Promise {\n const digest = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(digest)].map(x => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction b64url(bytes: Uint8Array): string {\n const binary = Array.from(bytes, b => String.fromCharCode(b)).join(\"\");\n return btoa(binary).replaceAll(\"+\",\"-\").replaceAll(\"/\",\"_\").replace(/=+$/g,\"\");\n}\n\nasync function signCanonicalReceipt(canonicalReceipt: string): Promise {\n const raw = Deno.env.get(\"R2_RECEIPT_SIGNING_JWK_V1\") || \"\";\n if (!raw) throw new Error(\"RECEIPT_SIGNING_KEY_NOT_CONFIGURED\");\n const jwk = JSON.parse(raw);\n const key = await crypto.subtle.importKey(\n \"jwk\", jwk, {name:\"ECDSA\",namedCurve:\"P-256\"}, false, [\"sign\"]\n );\n const signature = await crypto.subtle.sign(\n {name:\"ECDSA\",hash:\"SHA-256\"}, key, new TextEncoder().encode(canonicalReceipt)\n );\n return b64url(new Uint8Array(signature));\n}\n\nfunction randomToken(bytes = 32): string {\n const raw = new Uint8Array(bytes);\n crypto.getRandomValues(raw);\n const binary = Array.from(raw, b => String.fromCharCode(b)).join(\"\");\n return btoa(binary).replaceAll(\"+\", \"-\").replaceAll(\"/\", \"_\").replace(/=+$/g, \"\");\n}\n\nasync function bodyJson(c: any): Promise {\n const len = Number(c.req.header(\"content-length\") || \"0\");\n if (Number.isFinite(len) && len > MAX_BODY_BYTES) throw new Error(\"PAYLOAD_TOO_LARGE\");\n const txt = await c.req.text();\n if (new TextEncoder().encode(txt).length > MAX_BODY_BYTES) throw new Error(\"PAYLOAD_TOO_LARGE\");\n return JSON.parse(txt || \"{}\");\n}\n\nfunction parseBinding(v: any): Binding | null {\n const action = String(v?.action || \"\") as GuardAction;\n const repository_identity_sha256 = String(v?.repository_identity_sha256 || \"\");\n const pr_number = Number(v?.pr_number);\n const base_sha = String(v?.base_sha || \"\");\n const head_sha = String(v?.head_sha || \"\");\n const package_sha256 = String(v?.package_sha256 || \"\");\n const evidence_sha256 = String(v?.evidence_sha256 || \"\");\n\n if (action !== \"TEST_ONLY\" && action !== \"MERGE_PR\") return null;\n if (repository_identity_sha256 !== REPOSITORY_IDENTITY_SHA256) return null;\n if (!Number.isSafeInteger(pr_number) || pr_number <= 0) return null;\n if (!GIT_SHA_RE.test(base_sha) || !GIT_SHA_RE.test(head_sha)) return null;\n if (package_sha256 !== CONTROL_PACKAGE_SHA256) return null;\n if (!SHA256_RE.test(evidence_sha256)) return null;\n\n return {action,repository_identity_sha256,pr_number,base_sha,head_sha,package_sha256,evidence_sha256};\n}\n\nasync function audit(event_type: string, authorization_id: string | null, object_sha256: string | null) {\n if (authorization_id) {\n const existing = await sqlite.execute({\n sql: \"SELECT event_sha256 FROM audit_events WHERE event_type=? AND authorization_id=? LIMIT 1\",\n args: [event_type, authorization_id]\n });\n if (existing.rows.length) return String(existing.rows[0].event_sha256);\n }\n\n for (let attempt = 0; attempt < 8; attempt++) {\n const last = await sqlite.execute(\"SELECT event_sha256 FROM audit_events ORDER BY seq DESC LIMIT 1\");\n const prev = String(last.rows[0]?.event_sha256 || \"0\".repeat(64));\n const created_at = new Date().toISOString();\n const event = {event_type,authorization_id,object_sha256,prev_event_sha256:prev,created_at};\n const event_sha256 = await sha256(canonical(event));\n try {\n await sqlite.execute({\n sql: `INSERT INTO audit_events(event_type,authorization_id,object_sha256,prev_event_sha256,event_sha256,created_at)\n VALUES(?,?,?,?,?,?)`,\n args: [event_type,authorization_id,object_sha256,prev,event_sha256,created_at]\n });\n return event_sha256;\n } catch (e) {\n if (authorization_id) {\n const existing = await sqlite.execute({\n sql: \"SELECT event_sha256 FROM audit_events WHERE event_type=? AND authorization_id=? LIMIT 1\",\n args: [event_type, authorization_id]\n });\n if (existing.rows.length) return String(existing.rows[0].event_sha256);\n }\n if (!String(e).includes(\"UNIQUE\")) throw e;\n }\n }\n throw new Error(\"AUDIT_APPEND_CONTENTION\");\n}\n\napp.get(\"/\", (c) => c.json({\n service:\"rumbo-r2-authorizer\",\n implementation:IMPLEMENTATION,\n status:\"ok\",\n production_go:false\n}));\n\napp.get(\"/health\", (c) => c.json({\n ok:true,\n implementation:IMPLEMENTATION,\n root_token_configured:!!Deno.env.get(\"R2_AUTH_ROOT_TOKEN\"),\n receipt_signing_key_configured:!!Deno.env.get(\"R2_RECEIPT_SIGNING_JWK_V1\"),\n receipt_signature:{alg:\"ES256\",kid:SIGNING_KEY_ID,verify_jwk:RECEIPT_VERIFY_JWK},\n merge_authorization_enabled:Deno.env.get(\"R2_ALLOW_MERGE_AUTHORIZATION\") === \"true\",\n repository_identity_sha256:REPOSITORY_IDENTITY_SHA256,\n package_sha256:CONTROL_PACKAGE_SHA256,\n ttl_seconds:{min:MIN_TTL_SECONDS,max:MAX_TTL_SECONDS},\n capabilities:[\n \"dedicated-external-authorizer\",\n \"exact-pr-binding\",\n \"one-time-token-ledger\",\n \"audit-hash-chain\",\n \"signed-consumption-receipts\",\n \"offline-public-key-verification\",\n \"fail-closed-merge-gate\"\n ],\n production_go:false\n}), 200, {\"Cache-Control\":\"no-store\"});\n\napp.post(\"/v1/authorize\", async (c) => {\n if (!authorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n try {\n const b = await bodyJson(c);\n const binding = parseBinding(b);\n if (!binding) return c.json({error:\"INVALID_BINDING\"},400,{\"Cache-Control\":\"no-store\"});\n\n if (binding.action === \"MERGE_PR\" && Deno.env.get(\"R2_ALLOW_MERGE_AUTHORIZATION\") !== \"true\") {\n return c.json({error:\"MERGE_AUTHORIZATION_DISABLED\",production_go:false},423,{\"Cache-Control\":\"no-store\"});\n }\n\n const ttl = b.ttl_seconds === undefined ? 300 : Number(b.ttl_seconds);\n if (!Number.isSafeInteger(ttl) || ttl < MIN_TTL_SECONDS || ttl > MAX_TTL_SECONDS) {\n return c.json({error:\"INVALID_TTL\",min:MIN_TTL_SECONDS,max:MAX_TTL_SECONDS},400,{\"Cache-Control\":\"no-store\"});\n }\n\n const request_sha256 = await sha256(canonical(binding));\n const prior = await sqlite.execute({\n sql:\"SELECT authorization_id,status,expires_at FROM authorizations WHERE request_sha256=? LIMIT 1\",\n args:[request_sha256]\n });\n if (prior.rows.length) {\n const row:any = prior.rows[0];\n return c.json({\n error:\"AUTHORIZATION_ALREADY_EXISTS\",\n authorization_id:row.authorization_id,\n status:row.status,\n expires_at:row.expires_at,\n request_sha256\n },409,{\"Cache-Control\":\"no-store\"});\n }\n\n const raw_token = randomToken();\n const token_sha256 = await sha256(raw_token);\n const authorization_id = crypto.randomUUID();\n const issued = new Date();\n const issued_at = issued.toISOString();\n const expires_at = new Date(issued.getTime() + ttl * 1000).toISOString();\n\n await sqlite.execute({\n sql:`INSERT INTO authorizations(\n authorization_id,action,repository_identity_sha256,pr_number,base_sha,head_sha,\n package_sha256,evidence_sha256,request_sha256,token_sha256,status,issued_at,expires_at\n ) VALUES(?,?,?,?,?,?,?,?,?,?, 'ISSUED', ?,?)`,\n args:[\n authorization_id,binding.action,binding.repository_identity_sha256,binding.pr_number,\n binding.base_sha,binding.head_sha,binding.package_sha256,binding.evidence_sha256,\n request_sha256,token_sha256,issued_at,expires_at\n ]\n });\n\n try {\n await audit(\"AUTHORIZATION_ISSUED\",authorization_id,request_sha256);\n } catch (e) {\n await sqlite.execute({\n sql:\"UPDATE authorizations SET status='REVOKED' WHERE authorization_id=? AND status='ISSUED'\",\n args:[authorization_id]\n });\n throw e;\n }\n\n return c.json({\n authorized:true,\n authorization_id,\n action:binding.action,\n request_sha256,\n token:raw_token,\n token_type:\"One-Time\",\n issued_at,\n expires_at,\n merge_authorized:binding.action === \"MERGE_PR\",\n production_go:false,\n note:\"Raw one-time token is returned only at issuance; only SHA-256 is persisted.\"\n },201,{\"Cache-Control\":\"no-store\"});\n } catch (e) {\n return c.json({error:String(e?.message || e),production_go:false},400,{\"Cache-Control\":\"no-store\"});\n }\n});\n\napp.post(\"/v1/consume\", async (c) => {\n if (!authorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n try {\n const b = await bodyJson(c);\n const binding = parseBinding(b);\n if (!binding) return c.json({error:\"INVALID_BINDING\"},400,{\"Cache-Control\":\"no-store\"});\n\n if (binding.action === \"MERGE_PR\" && Deno.env.get(\"R2_ALLOW_MERGE_AUTHORIZATION\") !== \"true\") {\n return c.json({error:\"MERGE_AUTHORIZATION_DISABLED\",production_go:false},423,{\"Cache-Control\":\"no-store\"});\n }\n\n const authorization_id = String(b.authorization_id || \"\");\n const raw_token = String(b.token || \"\");\n const consumer = String(b.consumer || \"\");\n if (!authorization_id || !/^[A-Za-z0-9_-]{43,128}$/.test(raw_token)) {\n return c.json({error:\"INVALID_CONSUMPTION_REQUEST\"},400,{\"Cache-Control\":\"no-store\"});\n }\n if (!/^[A-Za-z0-9_.:-]{1,128}$/.test(consumer)) {\n return c.json({error:\"INVALID_CONSUMER\"},400,{\"Cache-Control\":\"no-store\"});\n }\n\n const request_sha256 = await sha256(canonical(binding));\n const rs = await sqlite.execute({sql:\"SELECT * FROM authorizations WHERE authorization_id=? LIMIT 1\",args:[authorization_id]});\n if (!rs.rows.length) return c.json({error:\"AUTHORIZATION_NOT_FOUND\"},404,{\"Cache-Control\":\"no-store\"});\n const row:any = rs.rows[0];\n\n if (String(row.status) === \"ISSUED\" && Date.parse(String(row.expires_at)) <= Date.now()) {\n const expired:any = await sqlite.execute({\n sql:\"UPDATE authorizations SET status='EXPIRED' WHERE authorization_id=? AND status='ISSUED'\",\n args:[authorization_id]\n });\n if (Number(expired?.rowsAffected ?? 0) === 1) {\n await audit(\"AUTHORIZATION_EXPIRED\",authorization_id,String(row.request_sha256));\n }\n return c.json({error:\"AUTHORIZATION_EXPIRED\",authorization_id},410,{\"Cache-Control\":\"no-store\"});\n }\n\n if (String(row.status) !== \"ISSUED\") {\n return c.json({error:\"AUTHORIZATION_NOT_ISSUED\",status:row.status,authorization_id},409,{\"Cache-Control\":\"no-store\"});\n }\n if (!constantTimeEqual(String(row.request_sha256),request_sha256)) {\n return c.json({error:\"BINDING_MISMATCH\"},409,{\"Cache-Control\":\"no-store\"});\n }\n\n const observed_token_sha256 = await sha256(raw_token);\n if (!constantTimeEqual(String(row.token_sha256),observed_token_sha256)) {\n return c.json({error:\"TOKEN_MISMATCH\"},403,{\"Cache-Control\":\"no-store\"});\n }\n\n const consumed_at = new Date().toISOString();\n const updated:any = await sqlite.execute({\n sql:\"UPDATE authorizations SET status='CONSUMED',consumed_at=?,consumer=? WHERE authorization_id=? AND status='ISSUED' AND consumed_at IS NULL\",\n args:[consumed_at,consumer,authorization_id]\n });\n if (Number(updated?.rowsAffected ?? 0) !== 1) {\n return c.json({error:\"AUTHORIZATION_RACE_LOST\"},409,{\"Cache-Control\":\"no-store\"});\n }\n\n const receipt = {\n schema:\"rumbo-r2-dedicated-authorizer-consumption/v2\",\n authorization_id,\n action:binding.action,\n repository_identity_sha256:binding.repository_identity_sha256,\n pr_number:binding.pr_number,\n base_sha:binding.base_sha,\n head_sha:binding.head_sha,\n package_sha256:binding.package_sha256,\n evidence_sha256:binding.evidence_sha256,\n request_sha256,\n consumed_at,\n consumer,\n merge_authorized:binding.action === \"MERGE_PR\",\n production_go:false\n };\n const receipt_canonical = canonical(receipt);\n const receipt_sha256 = await sha256(receipt_canonical);\n const receipt_signature_b64url = await signCanonicalReceipt(receipt_canonical);\n await audit(\"AUTHORIZATION_CONSUMED\",authorization_id,receipt_sha256);\n\n return c.json({\n ...receipt,\n consumed:true,\n receipt_sha256,\n receipt_signature:{\n alg:\"ES256\",\n kid:SIGNING_KEY_ID,\n signature_b64url:receipt_signature_b64url\n }\n },200,{\"Cache-Control\":\"no-store\"});\n } catch (e) {\n return c.json({error:String(e?.message || e),production_go:false},400,{\"Cache-Control\":\"no-store\"});\n }\n});\n\napp.post(\"/v1/revoke\", async (c) => {\n if (!authorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n try {\n const b = await bodyJson(c);\n const authorization_id = String(b.authorization_id || \"\");\n if (!authorization_id) return c.json({error:\"INVALID_AUTHORIZATION_ID\"},400,{\"Cache-Control\":\"no-store\"});\n\n const rs = await sqlite.execute({\n sql:\"SELECT status,request_sha256,expires_at FROM authorizations WHERE authorization_id=? LIMIT 1\",\n args:[authorization_id]\n });\n if (!rs.rows.length) return c.json({error:\"AUTHORIZATION_NOT_FOUND\"},404,{\"Cache-Control\":\"no-store\"});\n const row:any = rs.rows[0];\n\n if (String(row.status) === \"ISSUED\" && Date.parse(String(row.expires_at)) <= Date.now()) {\n const expired:any = await sqlite.execute({\n sql:\"UPDATE authorizations SET status='EXPIRED' WHERE authorization_id=? AND status='ISSUED'\",\n args:[authorization_id]\n });\n if (Number(expired?.rowsAffected ?? 0) === 1) {\n await audit(\"AUTHORIZATION_EXPIRED\",authorization_id,String(row.request_sha256));\n }\n return c.json({error:\"AUTHORIZATION_EXPIRED\",authorization_id},410,{\"Cache-Control\":\"no-store\"});\n }\n if (String(row.status) !== \"ISSUED\") {\n return c.json({error:\"AUTHORIZATION_NOT_ISSUED\",status:row.status},409,{\"Cache-Control\":\"no-store\"});\n }\n\n const updated:any = await sqlite.execute({\n sql:\"UPDATE authorizations SET status='REVOKED' WHERE authorization_id=? AND status='ISSUED'\",\n args:[authorization_id]\n });\n if (Number(updated?.rowsAffected ?? 0) !== 1) return c.json({error:\"AUTHORIZATION_RACE_LOST\"},409,{\"Cache-Control\":\"no-store\"});\n\n await audit(\"AUTHORIZATION_REVOKED\",authorization_id,String(row.request_sha256));\n return c.json({revoked:true,authorization_id,production_go:false},200,{\"Cache-Control\":\"no-store\"});\n } catch (e) {\n return c.json({error:String(e?.message || e),production_go:false},400,{\"Cache-Control\":\"no-store\"});\n }\n});\n\napp.get(\"/v1/ledger\", async (c) => {\n if (!authorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n const rawLimit = Number(c.req.query(\"limit\") || \"50\");\n const limit = Number.isSafeInteger(rawLimit) ? Math.max(1,Math.min(100,rawLimit)) : 50;\n const now = new Date().toISOString();\n const rs = await sqlite.execute({\n sql:`SELECT authorization_id,action,repository_identity_sha256,pr_number,base_sha,head_sha,\n package_sha256,evidence_sha256,request_sha256,status,\n CASE WHEN status='ISSUED' AND expires_at<=? THEN 'EXPIRED' ELSE status END AS effective_status,\n issued_at,expires_at,consumed_at,consumer\n FROM authorizations ORDER BY issued_at DESC LIMIT ?`,\n args:[now,limit]\n });\n return c.json({\n schema:\"rumbo-r2-dedicated-authorizer-ledger/v1\",\n implementation:IMPLEMENTATION,\n merge_authorization_enabled:Deno.env.get(\"R2_ALLOW_MERGE_AUTHORIZATION\") === \"true\",\n production_go:false,\n records:rs.rows\n },200,{\"Cache-Control\":\"no-store\"});\n});\n\napp.get(\"/v1/audit\", async (c) => {\n if (!authorized(c.req.raw)) return c.json({error:\"UNAUTHORIZED\"},401,{\"Cache-Control\":\"no-store\"});\n const rs = await sqlite.execute(\"SELECT * FROM audit_events ORDER BY seq ASC\");\n let prev = \"0\".repeat(64);\n let ok = true;\n for (const r of rs.rows as any[]) {\n const event = {\n event_type:r.event_type,\n authorization_id:r.authorization_id,\n object_sha256:r.object_sha256,\n prev_event_sha256:r.prev_event_sha256,\n created_at:r.created_at\n };\n const computed = await sha256(canonical(event));\n if (String(r.prev_event_sha256) !== prev || String(r.event_sha256) !== computed) ok = false;\n prev = String(r.event_sha256);\n }\n return c.json({\n schema:\"rumbo-r2-dedicated-authorizer-audit/v1\",\n audit_chain_ok:ok,\n count:rs.rows.length,\n tail_sha256:prev,\n production_go:false\n },200,{\"Cache-Control\":\"no-store\"});\n});\n\napp.onError((err,c) => {\n console.error(err);\n return c.json({error:\"INTERNAL_ERROR\",production_go:false},500,{\"Cache-Control\":\"no-store\"});\n});\n\nexport default app.fetch;\n","createdAt",["D",1787975683243],"branchVersion","branchId","3bec92a5-228b-4d7e-8a94-d7a3be5df58e",{"_32":47,"_34":46,"_35":22,"_37":48,"_40":49,"_42":14,"_43":44,"_26":27},"RELEASE_V2.md","5e4f1152-a35d-11f1-9d7e-1607ee4eb77e","# RUMBO R2 Dedicated Authorizer V2 — Signed Receipts\n\nStatus: **PASS / LIVE_CANDIDATE / MERGE_DISABLED / PRODUCTION_NO_GO**\n\nV2 hardens the independent R2 authorizer by making every successful consumption receipt\ncryptographically verifiable outside the authorizer database.\n\n## Signing boundary\n\nAlgorithm:\n\n`ES256 / ECDSA P-256 + SHA-256`\n\nSigning key id:\n\n`bQgIMRdRTyvdHBTMuEdc7T4hTH8zwJA_gkVEcR2TcJY`\n\nThe private P-256 JWK exists only in encrypted environment variable\n`R2_RECEIPT_SIGNING_JWK_V1`.\n\nThe corresponding public JWK is exposed by `GET /health` and may be pinned by downstream\nverifiers. The private key is not present in source or response payloads.\n\n## Receipt contract\n\nSuccessful `POST /v1/consume` now returns schema:\n\n`rumbo-r2-dedicated-authorizer-consumption/v2`\n\nThe signature covers the exact canonical receipt object, including:\n\n- authorization id;\n- action;\n- repository identity SHA-256;\n- PR number;\n- base and head Git SHA;\n- sealed package SHA-256;\n- evidence SHA-256;\n- request SHA-256;\n- consumed timestamp;\n- consumer;\n- merge-authorized state;\n- production-go state.\n\nThe response includes:\n\n- `receipt_sha256`;\n- `receipt_signature.alg=ES256`;\n- exact signing key id;\n- base64url signature.\n\n## Adversarial validation\n\nBranch evaluation:\n\n`01a04ba6-7c96-71ee-888f-953a2f36529f`\n\nResult: **PASS**.\n\nAdditional V2 checks:\n\n- signing key configured: true;\n- signed receipt verification: true;\n- modified receipt verification: false;\n- receipt SHA-256 recomputation: exact;\n- replay still rejected;\n- token hash still absent from read APIs;\n- audit chain valid;\n- `MERGE_PR` still disabled at issuance and consumption;\n- `production_go=false`.\n\nValidated test receipt SHA-256:\n\n`ea6091f0d05f4c5ddd6693728fe6ec41fa39bb627f4128a74fb1ebc597a60756`\n\n## Downstream consequence\n\nThe deployer no longer needs to trust an arbitrary caller-supplied\n`authorizer_receipt_sha256`. It can verify a signed consumption receipt offline using\nonly the pinned public key.\n\nThis closes the receipt-authenticity gap between authorization custody and deployment\nplanning. It does not enable merge or deployment.\n",["D",1787975683243],{"_32":53,"_34":52,"_35":54,"_37":56,"_40":57,"_42":14,"_43":44,"_26":27},{"_32":53,"_34":52,"_35":54,"_37":55},"selftest.ts","13183e68-a35b-11f1-b2e7-1607ee4eb77e","script","const base = \"https://sebas1--01a04b97888474acad4b69a9c8fc6775.web.val.run\";\nconst root = Deno.env.get(\"R2_AUTH_ROOT_TOKEN\");\nif (!root) throw new Error(\"ROOT_TOKEN_MISSING\");\n\nconst headers = {Authorization:`Bearer ${root}`,\"Content-Type\":\"application/json\"};\nconst repo = \"59e28afe0dd67d61cdaaaa5d470a6470b6c1540f025d172f094fe3321857fc23\";\nconst pkg = \"afbdc77510286adc5721ada5a0ddfa75e10305cb5200d6fd37cd8438c9c6119f\";\nconst baseSha = \"1ad77acefc7326595c50d7b0edffa81a2188e737\";\nconst headSha = \"d0043f418c1b0f7d21b36dc1c5469c9ded49cfd7\";\n\nconst healthRes = await fetch(base+\"/health\");\nconst health = await healthRes.json();\n\nconst unauthRes = await fetch(base+\"/v1/ledger\");\nconst invalidRes = await fetch(base+\"/v1/authorize\",{\n method:\"POST\",headers,\n body:JSON.stringify({\n action:\"TEST_ONLY\",repository_identity_sha256:\"0\".repeat(64),pr_number:412,\n base_sha:baseSha,head_sha:headSha,package_sha256:pkg,evidence_sha256:\"1\".repeat(64)\n })\n});\nconst mergeIssueRes = await fetch(base+\"/v1/authorize\",{\n method:\"POST\",headers,\n body:JSON.stringify({\n action:\"MERGE_PR\",repository_identity_sha256:repo,pr_number:412,\n base_sha:baseSha,head_sha:headSha,package_sha256:pkg,evidence_sha256:\"2\".repeat(64),\n ttl_seconds:300\n })\n});\nconst mergeConsumeRes = await fetch(base+\"/v1/consume\",{\n method:\"POST\",headers,\n body:JSON.stringify({\n action:\"MERGE_PR\",repository_identity_sha256:repo,pr_number:412,\n base_sha:baseSha,head_sha:headSha,package_sha256:pkg,evidence_sha256:\"2\".repeat(64),\n authorization_id:\"00000000-0000-4000-8000-000000000000\",\n token:\"A\".repeat(43),consumer:\"selftest\"\n })\n});\n\nconst randomBytes = new Uint8Array(32);\ncrypto.getRandomValues(randomBytes);\nconst uniqueEvidence = [...randomBytes].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\nconst binding = {\n action:\"TEST_ONLY\",repository_identity_sha256:repo,pr_number:412,\n base_sha:baseSha,head_sha:headSha,package_sha256:pkg,evidence_sha256:uniqueEvidence\n};\n\nconst issueRes = await fetch(base+\"/v1/authorize\",{\n method:\"POST\",headers,body:JSON.stringify({...binding,ttl_seconds:300})\n});\nconst issue:any = await issueRes.json();\nif (issueRes.status !== 201) throw new Error(`ISSUE_FAILED_${issueRes.status}_${issue.error||\"UNKNOWN\"}`);\n\nconst wrongRes = await fetch(base+\"/v1/consume\",{\n method:\"POST\",headers,\n body:JSON.stringify({...binding,authorization_id:issue.authorization_id,token:\"B\".repeat(43),consumer:\"selftest-wrong\"})\n});\n\nconst consumeRes = await fetch(base+\"/v1/consume\",{\n method:\"POST\",headers,\n body:JSON.stringify({...binding,authorization_id:issue.authorization_id,token:issue.token,consumer:\"selftest-v1\"})\n});\nconst consume:any = await consumeRes.json();\n\nconst replayRes = await fetch(base+\"/v1/consume\",{\n method:\"POST\",headers,\n body:JSON.stringify({...binding,authorization_id:issue.authorization_id,token:issue.token,consumer:\"selftest-replay\"})\n});\n\nconst duplicateRes = await fetch(base+\"/v1/authorize\",{\n method:\"POST\",headers,body:JSON.stringify({...binding,ttl_seconds:300})\n});\n\nconst ledgerRes = await fetch(base+\"/v1/ledger?limit=100\",{headers});\nconst ledger:any = await ledgerRes.json();\nconst tokenHashLeak = Array.isArray(ledger.records) && ledger.records.some((r:any)=>Object.prototype.hasOwnProperty.call(r,\"token_sha256\"));\n\nconst auditRes = await fetch(base+\"/v1/audit\",{headers});\nconst audit:any = await auditRes.json();\n\nconst pass =\n healthRes.status===200 &&\n health.implementation===\"DEDICATED_R2_AUTHORIZER_V1\" &&\n health.root_token_configured===true &&\n health.merge_authorization_enabled===false &&\n health.production_go===false &&\n unauthRes.status===401 &&\n invalidRes.status===400 &&\n mergeIssueRes.status===423 &&\n mergeConsumeRes.status===423 &&\n issueRes.status===201 &&\n issue.merge_authorized===false &&\n issue.production_go===false &&\n wrongRes.status===403 &&\n consumeRes.status===200 &&\n consume.consumed===true &&\n consume.merge_authorized===false &&\n consume.production_go===false &&\n replayRes.status===409 &&\n duplicateRes.status===409 &&\n ledgerRes.status===200 &&\n tokenHashLeak===false &&\n auditRes.status===200 &&\n audit.audit_chain_ok===true &&\n audit.production_go===false;\n\nconsole.log(JSON.stringify({\n selftest:pass?\"PASS\":\"FAIL\",\n implementation:health.implementation,\n checks:{\n health:healthRes.status,\n unauthenticated_ledger:unauthRes.status,\n invalid_binding:invalidRes.status,\n merge_issue_disabled:mergeIssueRes.status,\n merge_consume_disabled:mergeConsumeRes.status,\n test_issue:issueRes.status,\n wrong_token:wrongRes.status,\n test_consume:consumeRes.status,\n replay:replayRes.status,\n duplicate:duplicateRes.status,\n ledger:ledgerRes.status,\n token_hash_leak:tokenHashLeak,\n audit:auditRes.status,\n audit_chain_ok:audit.audit_chain_ok\n },\n authorization_id:issue.authorization_id,\n request_sha256:issue.request_sha256,\n receipt_sha256:consume.receipt_sha256,\n audit_tail_sha256:audit.tail_sha256,\n production_go:false,\n merge_authorization_enabled:false\n},null,2));\nif(!pass) Deno.exit(1);\n","const base = \"https://sebas1--da1a7e96a35a11f1816f1607ee4eb77e.web.val.run\";\nconst root = Deno.env.get(\"R2_AUTH_ROOT_TOKEN\");\nif (!root) throw new Error(\"ROOT_TOKEN_MISSING\");\n\nfunction canonical(v: unknown): string {\n if (v === null || typeof v !== \"object\") return JSON.stringify(v);\n if (Array.isArray(v)) return \"[\" + v.map(canonical).join(\",\") + \"]\";\n const o = v as Record;\n return \"{\" + Object.keys(o).sort().map(k => JSON.stringify(k)+\":\"+canonical(o[k])).join(\",\") + \"}\";\n}\nasync function sha256(s: string): Promise {\n const d = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(s));\n return [...new Uint8Array(d)].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\n}\nfunction b64urlDecode(s: string): Uint8Array {\n const pad = \"=\".repeat((4 - (s.length % 4)) % 4);\n const raw = atob(s.replaceAll(\"-\",\"+\").replaceAll(\"_\",\"/\") + pad);\n return Uint8Array.from(raw, ch => ch.charCodeAt(0));\n}\nasync function verifyReceiptSignature(consume: any, verifyJwk: JsonWebKey): Promise {\n const receipt = {\n schema:consume.schema,\n authorization_id:consume.authorization_id,\n action:consume.action,\n repository_identity_sha256:consume.repository_identity_sha256,\n pr_number:consume.pr_number,\n base_sha:consume.base_sha,\n head_sha:consume.head_sha,\n package_sha256:consume.package_sha256,\n evidence_sha256:consume.evidence_sha256,\n request_sha256:consume.request_sha256,\n consumed_at:consume.consumed_at,\n consumer:consume.consumer,\n merge_authorized:consume.merge_authorized,\n production_go:consume.production_go\n };\n const canon = canonical(receipt);\n if (await sha256(canon) !== consume.receipt_sha256) return false;\n const key = await crypto.subtle.importKey(\"jwk\",verifyJwk,{name:\"ECDSA\",namedCurve:\"P-256\"},false,[\"verify\"]);\n return await crypto.subtle.verify(\n {name:\"ECDSA\",hash:\"SHA-256\"},\n key,\n b64urlDecode(String(consume.receipt_signature?.signature_b64url || \"\")),\n new TextEncoder().encode(canon)\n );\n}\n\nconst headers = {Authorization:`Bearer ${root}`,\"Content-Type\":\"application/json\"};\nconst repo = \"59e28afe0dd67d61cdaaaa5d470a6470b6c1540f025d172f094fe3321857fc23\";\nconst pkg = \"afbdc77510286adc5721ada5a0ddfa75e10305cb5200d6fd37cd8438c9c6119f\";\nconst baseSha = \"1ad77acefc7326595c50d7b0edffa81a2188e737\";\nconst headSha = \"d0043f418c1b0f7d21b36dc1c5469c9ded49cfd7\";\n\nconst healthRes = await fetch(base+\"/health\");\nconst health:any = await healthRes.json();\n\nconst unauthRes = await fetch(base+\"/v1/ledger\");\nconst invalidRes = await fetch(base+\"/v1/authorize\",{\n method:\"POST\",headers,\n body:JSON.stringify({\n action:\"TEST_ONLY\",repository_identity_sha256:\"0\".repeat(64),pr_number:412,\n base_sha:baseSha,head_sha:headSha,package_sha256:pkg,evidence_sha256:\"1\".repeat(64)\n })\n});\nconst mergeIssueRes = await fetch(base+\"/v1/authorize\",{\n method:\"POST\",headers,\n body:JSON.stringify({\n action:\"MERGE_PR\",repository_identity_sha256:repo,pr_number:412,\n base_sha:baseSha,head_sha:headSha,package_sha256:pkg,evidence_sha256:\"2\".repeat(64),\n ttl_seconds:300\n })\n});\nconst mergeConsumeRes = await fetch(base+\"/v1/consume\",{\n method:\"POST\",headers,\n body:JSON.stringify({\n action:\"MERGE_PR\",repository_identity_sha256:repo,pr_number:412,\n base_sha:baseSha,head_sha:headSha,package_sha256:pkg,evidence_sha256:\"2\".repeat(64),\n authorization_id:\"00000000-0000-4000-8000-000000000000\",\n token:\"A\".repeat(43),consumer:\"selftest\"\n })\n});\n\nconst randomBytes = new Uint8Array(32);\ncrypto.getRandomValues(randomBytes);\nconst uniqueEvidence = [...randomBytes].map(x=>x.toString(16).padStart(2,\"0\")).join(\"\");\nconst binding = {\n action:\"TEST_ONLY\",repository_identity_sha256:repo,pr_number:412,\n base_sha:baseSha,head_sha:headSha,package_sha256:pkg,evidence_sha256:uniqueEvidence\n};\n\nconst issueRes = await fetch(base+\"/v1/authorize\",{\n method:\"POST\",headers,body:JSON.stringify({...binding,ttl_seconds:300})\n});\nconst issue:any = await issueRes.json();\nif (issueRes.status !== 201) throw new Error(`ISSUE_FAILED_${issueRes.status}_${issue.error||\"UNKNOWN\"}`);\n\nconst wrongRes = await fetch(base+\"/v1/consume\",{\n method:\"POST\",headers,\n body:JSON.stringify({...binding,authorization_id:issue.authorization_id,token:\"B\".repeat(43),consumer:\"selftest-wrong\"})\n});\n\nconst consumeRes = await fetch(base+\"/v1/consume\",{\n method:\"POST\",headers,\n body:JSON.stringify({...binding,authorization_id:issue.authorization_id,token:issue.token,consumer:\"selftest-v2\"})\n});\nconst consume:any = await consumeRes.json();\n\nconst signatureValid = consumeRes.status===200\n ? await verifyReceiptSignature(consume,health.receipt_signature?.verify_jwk)\n : false;\n\nlet tamperSignatureValid = false;\nif (consumeRes.status===200) {\n const tampered = {...consume,evidence_sha256:\"f\".repeat(64)};\n tamperSignatureValid = await verifyReceiptSignature(tampered,health.receipt_signature?.verify_jwk);\n}\n\nconst replayRes = await fetch(base+\"/v1/consume\",{\n method:\"POST\",headers,\n body:JSON.stringify({...binding,authorization_id:issue.authorization_id,token:issue.token,consumer:\"selftest-replay\"})\n});\nconst duplicateRes = await fetch(base+\"/v1/authorize\",{\n method:\"POST\",headers,body:JSON.stringify({...binding,ttl_seconds:300})\n});\n\nconst ledgerRes = await fetch(base+\"/v1/ledger?limit=100\",{headers});\nconst ledger:any = await ledgerRes.json();\nconst tokenHashLeak = Array.isArray(ledger.records) && ledger.records.some((r:any)=>Object.prototype.hasOwnProperty.call(r,\"token_sha256\"));\nconst auditRes = await fetch(base+\"/v1/audit\",{headers});\nconst audit:any = await auditRes.json();\n\nconst pass =\n healthRes.status===200 &&\n health.implementation===\"DEDICATED_R2_AUTHORIZER_V2_SIGNED_RECEIPTS\" &&\n health.root_token_configured===true &&\n health.receipt_signing_key_configured===true &&\n health.receipt_signature?.alg===\"ES256\" &&\n health.receipt_signature?.kid===\"bQgIMRdRTyvdHBTMuEdc7T4hTH8zwJA_gkVEcR2TcJY\" &&\n health.merge_authorization_enabled===false &&\n health.production_go===false &&\n unauthRes.status===401 &&\n invalidRes.status===400 &&\n mergeIssueRes.status===423 &&\n mergeConsumeRes.status===423 &&\n issueRes.status===201 &&\n issue.merge_authorized===false &&\n issue.production_go===false &&\n wrongRes.status===403 &&\n consumeRes.status===200 &&\n consume.schema===\"rumbo-r2-dedicated-authorizer-consumption/v2\" &&\n consume.consumed===true &&\n consume.merge_authorized===false &&\n consume.production_go===false &&\n consume.receipt_signature?.alg===\"ES256\" &&\n consume.receipt_signature?.kid===health.receipt_signature?.kid &&\n signatureValid===true &&\n tamperSignatureValid===false &&\n replayRes.status===409 &&\n duplicateRes.status===409 &&\n ledgerRes.status===200 &&\n tokenHashLeak===false &&\n auditRes.status===200 &&\n audit.audit_chain_ok===true &&\n audit.production_go===false;\n\nconsole.log(JSON.stringify({\n selftest:pass?\"PASS\":\"FAIL\",\n implementation:health.implementation,\n checks:{\n health:healthRes.status,\n unauthenticated_ledger:unauthRes.status,\n invalid_binding:invalidRes.status,\n merge_issue_disabled:mergeIssueRes.status,\n merge_consume_disabled:mergeConsumeRes.status,\n test_issue:issueRes.status,\n wrong_token:wrongRes.status,\n test_consume:consumeRes.status,\n signed_receipt_verified:signatureValid,\n tampered_receipt_verified:tamperSignatureValid,\n replay:replayRes.status,\n duplicate:duplicateRes.status,\n ledger:ledgerRes.status,\n token_hash_leak:tokenHashLeak,\n audit:auditRes.status,\n audit_chain_ok:audit.audit_chain_ok\n },\n authorization_id:issue.authorization_id,\n request_sha256:issue.request_sha256,\n receipt_sha256:consume.receipt_sha256,\n receipt_signature_kid:consume.receipt_signature?.kid,\n audit_tail_sha256:audit.tail_sha256,\n production_go:false,\n merge_authorization_enabled:false\n},null,2));\nif(!pass) Deno.exit(1);\n",["D",1787975683243],"id","c407813c-3b2b-489f-a186-e17f90eccf60","rumbo-r2-authorizer",["D",1787974602620],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Dedicated fail-closed RUMBO R2 authorizer","imageUrl","d3788f19-13c5-4356-87e8-dce639626bb9","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a04116-f28c-754c-9173-77bf5814fcd6","tursoName","c407813c3b2b489fa186e17f90eccf60","tursoHostname","c407813c3b2b489fa186e17f90eccf60-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789452068287],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_114":113,"_122":118},"org",{"_114":113,"_115":116,"_117":118,"_18":70,"_119":120,"_121":27},"branch",{"_13":103,"_34":104,"_58":44,"_105":59,"_106":-5,"_107":-5,"_108":-5,"_109":-5,"_110":-5,"_111":60,"_112":113},"isOwned",18,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","sebas1","handle","displayName","sebas","avatar","https://lh3.googleusercontent.com/a/ACg8ocJaC6uiXPmN9dvgA2XcSlzBSkPJO0GN5zKzPm3a8cbjmXC9HYA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_58":59,"_34":60,"_40":196,"_62":-5,"_63":27,"_64":65,"_66":65,"_67":68,"_69":-5,"_18":70,"_71":33,"_72":73,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":81,"_82":83,"_84":197,"_86":-5,"_87":88,"_89":88,"_90":91,"_92":91,"_93":91,"_94":88,"_95":88,"_96":198,"_98":199,"_100":200,"_102":27},"tree",[179,180,181,182],"files",[179,180,181,182],"counts",{"_168":77,"_169":170,"_171":77,"_172":173,"_174":175},"contents",[145,146,147,148],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_58":162,"_34":163,"_32":164,"_150":-5,"_43":44,"_42":153,"_151":73,"_40":165,"_13":77,"_35":22,"_37":166,"_26":27,"_154":-5,"_29":167},{"_58":159,"_34":46,"_32":47,"_150":-5,"_43":44,"_42":14,"_151":73,"_40":160,"_13":77,"_35":22,"_37":48,"_26":27,"_154":-5,"_29":161},{"_58":156,"_34":30,"_32":33,"_150":-5,"_43":44,"_42":14,"_151":27,"_40":157,"_13":153,"_35":36,"_37":39,"_26":27,"_154":-5,"_29":158},{"_58":149,"_34":52,"_32":53,"_150":-5,"_43":44,"_42":14,"_151":27,"_40":152,"_13":153,"_35":54,"_37":56,"_26":27,"_154":-5,"_29":155},"f86a1495-d88b-4cbf-9741-259205301b0d","parentId","latest",["D",1787975683243],2,"label",[52],"5c73ac45-5319-44cc-a539-09bd9824f02b",["D",1787975683243],[30],"2fcb0a90-f350-4f60-9a24-89adb73e7033",["D",1787975683243],[46],"9fa91190-ae1e-4b47-ab7c-00ce745d02dc","RELEASE_V1.md","1318083a-a35b-11f1-b2e7-1607ee4eb77e",["D",1787974698234],"# RUMBO R2 Dedicated Authorizer V1\n\nStatus: **LIVE_CANDIDATE / FAIL_CLOSED / PRODUCTION_NO_GO**\n\nThis val separates R2 authorization custody from the general continuity relay.\n\n## Identity pins\n\n- repository identity SHA-256:\n `59e28afe0dd67d61cdaaaa5d470a6470b6c1540f025d172f094fe3321857fc23`\n- control package SHA-256:\n `afbdc77510286adc5721ada5a0ddfa75e10305cb5200d6fd37cd8438c9c6119f`\n\n## Security properties\n\n- dedicated encrypted controller bearer `R2_AUTH_ROOT_TOKEN`;\n- no raw bearer in source;\n- exact binding to action, PR number, base/head SHA, package SHA-256 and evidence SHA-256;\n- one-time random token returned only at issuance;\n- only token SHA-256 persisted;\n- TTL 60–900 seconds;\n- duplicate exact request rejection;\n- atomic single consumption;\n- replay rejection;\n- token mismatch rejection;\n- binding mismatch rejection;\n- expiry/revoke states;\n- independent audit hash chain;\n- ledger and audit endpoints require the dedicated bearer;\n- token hashes are not projected by ledger reads;\n- `production_go=false` invariant.\n\n## Merge gate\n\n`MERGE_PR` is checked at both issuance and consumption.\n\nIt remains disabled because:\n\n`R2_ALLOW_MERGE_AUTHORIZATION`\n\nis intentionally absent.\n\n## Live adversarial test\n\nVal Town evaluation:\n\n`01a04b98-76d2-7582-919e-e052f8b1ca26`\n\nResult: **PASS**.\n\nObserved matrix:\n\n- health → 200\n- unauthenticated ledger → 401\n- invalid repository binding → 400\n- MERGE_PR issue while disabled → 423\n- MERGE_PR consume while disabled → 423\n- TEST_ONLY issue → 201\n- wrong one-time token → 403\n- exact consume → 200\n- replay → 409\n- duplicate exact authorize → 409\n- ledger → 200\n- token-hash leakage → false\n- audit → 200\n- audit chain valid → true\n\nTest receipt SHA-256:\n\n`9c01ae930da60c2c724bcfafe10fc0d77c3f8ac79e510d4e2d6aa4f9a5563e8d`\n\nAudit tail SHA-256:\n\n`8173af91ee447e9bf0d0aa7a0beb66a88dd5ebf44a5cd4674f45eb769cb59ec9`\n\n## Boundary\n\nThis service can issue and consume exact fail-closed authorization receipts.\n\nIt does not observe GitHub independently, does not hold a GitHub App credential, does not deploy, and cannot grant product production approval.\n",[163],"pulls","branches",10,"forks","envVars",{"_176":153,"_178":77},"connections",{"_176":77,"_177":77},"count","unfilledCount","emptyCount",{"_58":162,"_34":163,"_32":164,"_150":-5,"_43":44,"_42":153,"_151":73,"_40":193,"_13":77,"_35":22,"_37":166,"_26":27,"_154":-5,"_184":194,"_29":195},{"_58":159,"_34":46,"_32":47,"_150":-5,"_43":44,"_42":14,"_151":73,"_40":190,"_13":77,"_35":22,"_37":48,"_26":27,"_154":-5,"_184":191,"_29":192},{"_58":156,"_34":30,"_32":33,"_150":-5,"_43":44,"_42":14,"_151":27,"_40":187,"_13":153,"_35":36,"_37":39,"_26":27,"_154":-5,"_184":188,"_29":189},{"_58":149,"_34":52,"_32":53,"_150":-5,"_43":44,"_42":14,"_151":27,"_40":183,"_13":153,"_35":54,"_37":56,"_26":27,"_154":-5,"_184":185,"_29":186},["D",1787975683243],"children",[],[52],["D",1787975683243],[],[30],["D",1787975683243],[],[46],["D",1787974698234],[],[163],["D",1787974602620],["D",1789452068287],{"_114":113,"_122":118},{"_114":113,"_115":116,"_117":118,"_18":70,"_119":120,"_121":27},{"_13":103,"_34":104,"_58":44,"_105":59,"_106":-5,"_107":-5,"_108":-5,"_109":-5,"_110":-5,"_111":60,"_112":113},"ctx",{"_96":-5,"_142":234,"_235":236,"_237":238,"_239":27,"_240":27,"_241":27,"_242":73,"_243":-5,"_244":-7,"_245":-7,"_246":77,"_247":27,"_248":27,"_249":-5,"_250":27,"_251":27,"_252":27,"_253":-5},"ENV",{"_205":206,"_207":208,"_209":104,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v4