[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_183":184,"_185":186},"routes/_app.x.$handle.$name",{"_99":98,"_32":45,"_108":89,"_27":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":25,"_123":124,"_125":59,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",8,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","bot.ts","latestPath","fileId","25469436-9cbc-11f1-a356-1607ee4eb77e","name","fileType","http","content","// Telegram bot that mints access keys for both clone apps. Only the admin\n// (ADMIN_ID) is answered.\n//\n// Env: TELEGRAM_TOKEN (from @BotFather), ADMIN_ID (your numeric Telegram id),\n// SECRET — the Wise app's HMAC secret,\n// SECRET_REVOLUT — the Revolut app's HMAC secret.\n//\n// The two apps have different secrets and different claim tables, so a Wise\n// key can never open Revolut and vice versa. Everything below is parameterised\n// by app rather than duplicated, so the two sections cannot drift apart.\n//\n// /menu (or /start) picks an app, then a duration. Typed commands also work:\n// /day /week /month /lifetime /test [n] mint n Wise keys (default 1, max 20)\n// /rday /rweek /rmonth /rlifetime /rtest [n] the same, for Revolut\n// /list claimed keys for both apps, each with a Revoke button\n// /check is this key claimed, by whom, until when\n// /revoke kill a key — it stops unlocking the app\n\nimport { Bot, InlineKeyboard, webhookCallback } from \"https://deno.land/x/grammy@v1.35.0/mod.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { TIER_LABEL, mintKey, grouped } from \"./keys.ts\";\n\nconst token = Deno.env.get(\"TELEGRAM_TOKEN\");\nif (!token) throw new Error(\"TELEGRAM_TOKEN is not set\");\nconst ADMIN = Number(Deno.env.get(\"ADMIN_ID\") ?? \"0\");\n\n// The apps this bot mints for. `claims` is the ledger the app's server writes\n// when a key is first used; `issued` is our own record of what we handed out.\n// Table names come from this literal map and never from a message, so\n// interpolating them into SQL is safe.\ntype App = { id: string; label: string; emoji: string; secret?: string; claims: string; issued: string };\n\nconst APPS: Record = {\n w: {\n id: \"w\",\n label: \"Wise\",\n emoji: \"🟢\",\n secret: Deno.env.get(\"SECRET\"),\n claims: \"activation_claims\",\n issued: \"issued_keys\",\n },\n r: {\n id: \"r\",\n label: \"Revolut\",\n emoji: \"⚫️\",\n secret: Deno.env.get(\"SECRET_REVOLUT\"),\n claims: \"revolut_claims\",\n issued: \"revolut_issued\",\n },\n};\n\nconst bot = new Bot(token);\n\n// Only the admin gets a reply. Anyone else is silently ignored, so the bot\n// gives strangers nothing to work with.\nbot.use(async (ctx, next) => {\n if (ctx.from?.id === ADMIN) await next();\n});\n\nconst TIERS: Record = { day: \"D\", week: \"W\", month: \"M\", test: \"T\", lifetime: \"L\" };\n\nasync function issue(ctx: any, app: App, tier: string, count: number) {\n if (!app.secret) {\n await ctx.reply(`${app.label}'s secret isn't set on the server.`);\n return;\n }\n if (!TIER_LABEL[tier]) { await ctx.reply(\"Unknown tier.\"); return; }\n count = Math.max(1, Math.min(Number.isFinite(count) ? count : 1, 20));\n const lines: string[] = [];\n for (let i = 0; i < count; i++) {\n const key = await mintKey(tier, app.secret);\n await sqlite.execute({\n sql: `INSERT INTO ${app.issued} (serial, tier, key, issued_at) VALUES (?, ?, ?, ?)`,\n args: [key.slice(1, 6), tier, grouped(key), new Date().toISOString()],\n });\n lines.push(`${grouped(key)}`);\n }\n const s = count > 1 ? \"s\" : \"\";\n await ctx.reply(\n `${app.emoji} ${app.label} — ${count} × ${TIER_LABEL[tier]} key${s}:\\n\\n${lines.join(\"\\n\")}`,\n { parse_mode: \"HTML\" },\n );\n}\n\n// The app chooser, then a per-app duration menu.\nconst APP_MENU = new InlineKeyboard()\n .text(\"🟢 Wise\", \"app:w\").text(\"⚫️ Revolut\", \"app:r\");\n\nfunction durationMenu(app: App) {\n return new InlineKeyboard()\n .text(\"60 seconds\", `mint:${app.id}:T`).row()\n .text(\"1 day\", `mint:${app.id}:D`).text(\"1 week\", `mint:${app.id}:W`).row()\n .text(\"1 month\", `mint:${app.id}:M`).text(\"Lifetime\", `mint:${app.id}:L`).row()\n .text(\"‹ Back\", \"app:menu\");\n}\n\nfunction showMenu(ctx: any) {\n return ctx.reply(\"Access keys — which app?\", { reply_markup: APP_MENU });\n}\n\nbot.command(\"menu\", showMenu);\nbot.command(\"start\", showMenu);\nbot.command(\"wise\", (ctx) => ctx.reply(\"🟢 Wise — tap a duration to mint one:\", { reply_markup: durationMenu(APPS.w) }));\nbot.command(\"revolut\", (ctx) => ctx.reply(\"⚫️ Revolut — tap a duration to mint one:\", { reply_markup: durationMenu(APPS.r) }));\n\nbot.callbackQuery(/^app:(.+)$/, async (ctx) => {\n await ctx.answerCallbackQuery();\n const which = ctx.match![1];\n if (which === \"menu\") {\n await ctx.editMessageText(\"Access keys — which app?\", { reply_markup: APP_MENU });\n return;\n }\n const app = APPS[which];\n if (!app) return;\n await ctx.editMessageText(`${app.emoji} ${app.label} — tap a duration to mint one:`, {\n parse_mode: \"HTML\",\n reply_markup: durationMenu(app),\n });\n});\n\nbot.callbackQuery(/^mint:(.):(.)$/, async (ctx) => {\n await ctx.answerCallbackQuery();\n const app = APPS[ctx.match![1]];\n if (!app) return;\n await issue(ctx, app, ctx.match![2], 1);\n});\n\n// Typed tier commands, with an optional count (e.g. /week 5). The bare names\n// mint Wise keys — they did before this bot learned a second app, and the\n// muscle memory is worth keeping. An \"r\" prefix mints Revolut ones.\nfor (const [name, tier] of Object.entries(TIERS)) {\n bot.command(name, (ctx) => issue(ctx, APPS.w, tier, parseInt((ctx.match ?? \"\").trim(), 10)));\n bot.command(\"r\" + name, (ctx) => issue(ctx, APPS.r, tier, parseInt((ctx.match ?? \"\").trim(), 10)));\n}\n\nfunction serialOf(ctx: any): string {\n return (ctx.match ?? \"\").toUpperCase().replace(/[^A-Z0-9]/g, \"\").slice(0, 5);\n}\n\n// A serial is unique within an app but the two apps mint from the same\n// alphabet, so /check and /revoke look in both ledgers and say which they hit.\nasync function findClaims(serial: string): Promise }>> {\n const found: Array<{ app: App; row: Record }> = [];\n for (const app of Object.values(APPS)) {\n const r = await sqlite.execute({\n sql: `SELECT * FROM ${app.claims} WHERE serial = ?`,\n args: [serial],\n });\n if (r.rows.length) found.push({ app, row: r.rows[0] as Record });\n }\n return found;\n}\n\nbot.command(\"check\", async (ctx) => {\n const serial = serialOf(ctx);\n if (serial.length !== 5) { await ctx.reply(\"Usage: /check <5-char serial>\"); return; }\n const hits = await findClaims(serial);\n if (!hits.length) { await ctx.reply(`${serial}: not claimed in either app yet.`); return; }\n const parts = hits.map(({ app, row }) => {\n const dev = String(row.device_id).slice(0, 8);\n return `${app.emoji} ${app.label}\\ntier: ${row.tier}\\ndevice: ${dev}…\\nexpires: ${row.expires_at}\\nrevoked: ${Number(row.revoked) ? \"yes\" : \"no\"}`;\n });\n await ctx.reply(`${serial}\\n\\n${parts.join(\"\\n\\n\")}`);\n});\n\nbot.command(\"revoke\", async (ctx) => {\n const serial = serialOf(ctx);\n if (serial.length !== 5) { await ctx.reply(\"Usage: /revoke <5-char serial>\"); return; }\n const hits = await findClaims(serial);\n if (hits.length) {\n for (const { app } of hits) {\n await sqlite.execute({ sql: `UPDATE ${app.claims} SET revoked = 1 WHERE serial = ?`, args: [serial] });\n }\n const where = hits.map((h) => h.app.label).join(\" and \");\n await ctx.reply(`Revoked ${serial} in ${where}. It will no longer unlock the app.`);\n return;\n }\n // Not claimed anywhere. Pre-revoke it in both ledgers: a row with revoked=1\n // refuses the first claim, whichever app the key turns out to belong to.\n const now = new Date().toISOString();\n for (const app of Object.values(APPS)) {\n await sqlite.execute({\n sql: `INSERT INTO ${app.claims} (serial, tier, device_id, claimed_at, expires_at, revoked) VALUES (?, ?, ?, ?, ?, 1)`,\n args: [serial, \"?\", \"revoked\", now, now],\n });\n }\n await ctx.reply(`Pre-revoked ${serial} in both apps. It can never be claimed.`);\n});\n\n// A tap-to-revoke list of the keys currently in use, both apps together.\nbot.command(\"list\", async (ctx) => {\n const kb = new InlineKeyboard();\n const sections: string[] = [];\n for (const app of Object.values(APPS)) {\n const r = await sqlite.execute(\n `SELECT serial, tier, device_id, claimed_at, expires_at, revoked\n FROM ${app.claims} ORDER BY claimed_at DESC LIMIT 10`,\n );\n if (!r.rows.length) {\n sections.push(`${app.emoji} ${app.label}\\nno keys claimed yet`);\n continue;\n }\n const lines: string[] = [];\n for (const raw of r.rows) {\n const row = raw as Record;\n const serial = String(row.serial);\n const revoked = Number(row.revoked);\n const exp = String(row.expires_at).slice(0, 10);\n lines.push(`${serial} · ${row.tier} · ${revoked ? \"❌ revoked\" : \"✅ active\"} · until ${exp}`);\n if (!revoked) kb.text(`${app.emoji} Revoke ${serial}`, `rv:${app.id}:${serial}`).row();\n }\n sections.push(`${app.emoji} ${app.label}\\n${lines.join(\"\\n\")}`);\n }\n await ctx.reply(`Claimed keys (newest first):\\n\\n${sections.join(\"\\n\\n\")}`, {\n parse_mode: \"HTML\",\n reply_markup: kb,\n });\n});\n\n// Tap a Revoke button from /list.\nbot.callbackQuery(/^rv:(.):(.+)$/, async (ctx) => {\n const app = APPS[ctx.match![1]];\n const serial = ctx.match![2];\n if (!app) return;\n await sqlite.execute({ sql: `UPDATE ${app.claims} SET revoked = 1 WHERE serial = ?`, args: [serial] });\n await ctx.answerCallbackQuery({ text: `Revoked ${serial} (${app.label})` });\n await ctx.reply(`Revoked ${serial} in ${app.label}. It no longer unlocks the app.`, {\n parse_mode: \"HTML\",\n });\n});\n\n// The list Telegram shows behind the \"/\" menu button.\nconst COMMANDS = [\n { command: \"menu\", description: \"Pick an app, then a key duration\" },\n { command: \"wise\", description: \"Wise — key menu\" },\n { command: \"revolut\", description: \"Revolut — key menu\" },\n { command: \"test\", description: \"Wise: mint a 60-second key\" },\n { command: \"day\", description: \"Wise: mint a 1-day key\" },\n { command: \"week\", description: \"Wise: mint a 7-day key\" },\n { command: \"month\", description: \"Wise: mint a 1-month key\" },\n { command: \"lifetime\", description: \"Wise: mint a key that never expires\" },\n { command: \"rtest\", description: \"Revolut: mint a 60-second key\" },\n { command: \"rday\", description: \"Revolut: mint a 1-day key\" },\n { command: \"rweek\", description: \"Revolut: mint a 7-day key\" },\n { command: \"rmonth\", description: \"Revolut: mint a 1-month key\" },\n { command: \"rlifetime\", description: \"Revolut: mint a key that never expires\" },\n { command: \"list\", description: \"List claimed keys, tap to revoke\" },\n { command: \"check\", description: \"Check a key by serial\" },\n { command: \"revoke\", description: \"Revoke a key by serial\" },\n];\n\n// Both apps' tables, created here so the bot never depends on whichever app\n// server happened to boot first.\nasync function initDb(): Promise {\n for (const app of Object.values(APPS)) {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${app.claims} (\n serial TEXT PRIMARY KEY,\n tier TEXT NOT NULL,\n device_id TEXT NOT NULL,\n claimed_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n revoked INTEGER NOT NULL DEFAULT 0\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${app.issued} (\n serial TEXT PRIMARY KEY,\n tier TEXT NOT NULL,\n key TEXT NOT NULL,\n issued_at TEXT NOT NULL\n )`);\n }\n}\n\n// grammY validates this header so only Telegram can drive the webhook.\nconst SECRET_TOKEN = token.split(\":\")[1];\nconst handleUpdate = webhookCallback(bot, \"std/http\", undefined, undefined, SECRET_TOKEN);\n\nlet ready = false;\nexport default async (req: Request): Promise => {\n await initDb();\n // On first hit: point Telegram at this endpoint and register the command\n // list. Both are no-ops once set.\n if (!ready) {\n try {\n await bot.api.setWebhook(req.url, { secret_token: SECRET_TOKEN });\n await bot.api.setMyCommands(COMMANDS);\n } catch (_) { /* ignore */ }\n ready = true;\n }\n if (req.method === \"POST\") return await handleUpdate(req);\n return new Response(\"clone key bot — up (wise + revolut)\", { status: 200 });\n};\n","// Telegram bot that mints access keys for both clone apps. Only the admin\n// (ADMIN_ID) is answered.\n//\n// Env: TELEGRAM_TOKEN (from @BotFather), ADMIN_ID (your numeric Telegram id),\n// SECRET — the Wise app's HMAC secret,\n// SECRET_REVOLUT — the Revolut app's HMAC secret,\n// REVOLUT_ADMIN_TOKEN — lets this bot read and revoke Revolut claims.\n//\n// The two apps have different secrets, so a Wise key can never open Revolut\n// and vice versa. Everything below is parameterised by app rather than\n// duplicated, so the two sections cannot drift apart.\n//\n// The one asymmetry is where each ledger lives. Val Town gives every val its\n// own SQLite: Wise's claim table is in this val and is read with a query,\n// while Revolut's belongs to shark1/revolut-clone-keys and is reached over\n// its admin API. `ledger` hides that difference from everything else here.\n//\n// /menu (or /start) picks an app, then a duration. Typed commands also work:\n// /day /week /month /lifetime /test [n] mint n Wise keys (default 1, max 20)\n// /rday /rweek /rmonth /rlifetime /rtest [n] the same, for Revolut\n// /list claimed keys for both apps, each with a Revoke button\n// /check is this key claimed, by whom, until when\n// /revoke kill a key — it stops unlocking the app\n\nimport { Bot, InlineKeyboard, webhookCallback } from \"https://deno.land/x/grammy@v1.35.0/mod.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { TIER_LABEL, mintKey, grouped } from \"./keys.ts\";\n\nconst token = Deno.env.get(\"TELEGRAM_TOKEN\");\nif (!token) throw new Error(\"TELEGRAM_TOKEN is not set\");\nconst ADMIN = Number(Deno.env.get(\"ADMIN_ID\") ?? \"0\");\n\nconst REVOLUT_ENDPOINT = \"https://shark1--50288dfeabac11f1b48d1607ee4eb77e.web.val.run\";\n\n/** One row of a claim ledger, however it was fetched. */\ntype Claim = {\n serial: string;\n tier: string;\n device_id: string;\n claimed_at: string;\n expires_at: string;\n revoked: number;\n};\n\n/** Where an app's claims live, and how to read and change them. */\ntype Ledger = {\n recent(limit: number): Promise;\n find(serial: string): Promise;\n revoke(serial: string): Promise;\n};\n\n/** A ledger in this val's own database. */\nfunction localLedger(table: string): Ledger {\n return {\n async recent(limit) {\n const r = await sqlite.execute({\n sql: `SELECT serial, tier, device_id, claimed_at, expires_at, revoked\n FROM ${table} ORDER BY claimed_at DESC LIMIT ?`,\n args: [limit],\n });\n return r.rows as unknown as Claim[];\n },\n async find(serial) {\n const r = await sqlite.execute({\n sql: `SELECT serial, tier, device_id, claimed_at, expires_at, revoked\n FROM ${table} WHERE serial = ?`,\n args: [serial],\n });\n return (r.rows[0] as unknown as Claim) ?? null;\n },\n async revoke(serial) {\n const existing = await sqlite.execute({\n sql: `SELECT serial FROM ${table} WHERE serial = ?`,\n args: [serial],\n });\n if (existing.rows.length) {\n await sqlite.execute({\n sql: `UPDATE ${table} SET revoked = 1 WHERE serial = ?`,\n args: [serial],\n });\n return;\n }\n // Pre-revoke an unclaimed key: a row with revoked=1 refuses the first claim.\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: `INSERT INTO ${table} (serial, tier, device_id, claimed_at, expires_at, revoked)\n VALUES (?, ?, ?, ?, ?, 1)`,\n args: [serial, \"?\", \"revoked\", now, now],\n });\n },\n };\n}\n\n/** A ledger owned by another val, reached through its admin API. */\nfunction remoteLedger(endpoint: string, adminToken?: string): Ledger {\n async function call(path: string, method = \"GET\"): Promise {\n if (!adminToken) throw new Error(\"no admin token\");\n const res = await fetch(`${endpoint}/${path}`, {\n method,\n headers: { \"x-admin-token\": adminToken },\n });\n return await res.json();\n }\n return {\n async recent(limit) { return (await call(`?op=list&limit=${limit}`)).claims ?? []; },\n async find(serial) { return (await call(`?op=check&serial=${serial}`)).claim ?? null; },\n async revoke(serial) { await call(`?op=revoke&serial=${serial}`, \"POST\"); },\n };\n}\n\n// The apps this bot mints for. `issued` is our own record of what we handed\n// out, always local; `ledger` is what the app's server actually enforces.\ntype App = { id: string; label: string; emoji: string; secret?: string; issued: string; ledger: Ledger };\n\nconst APPS: Record = {\n w: {\n id: \"w\",\n label: \"Wise\",\n emoji: \"🟢\",\n secret: Deno.env.get(\"SECRET\"),\n issued: \"issued_keys\",\n ledger: localLedger(\"activation_claims\"),\n },\n r: {\n id: \"r\",\n label: \"Revolut\",\n emoji: \"⚫️\",\n secret: Deno.env.get(\"SECRET_REVOLUT\"),\n issued: \"revolut_issued\",\n ledger: remoteLedger(REVOLUT_ENDPOINT, Deno.env.get(\"REVOLUT_ADMIN_TOKEN\")),\n },\n};\n\nconst bot = new Bot(token);\n\n// Only the admin gets a reply. Anyone else is silently ignored, so the bot\n// gives strangers nothing to work with.\nbot.use(async (ctx, next) => {\n if (ctx.from?.id === ADMIN) await next();\n});\n\nconst TIERS: Record = { day: \"D\", week: \"W\", month: \"M\", test: \"T\", lifetime: \"L\" };\n\nasync function issue(ctx: any, app: App, tier: string, count: number) {\n if (!app.secret) {\n await ctx.reply(`${app.label}'s secret isn't set on the server.`);\n return;\n }\n if (!TIER_LABEL[tier]) { await ctx.reply(\"Unknown tier.\"); return; }\n count = Math.max(1, Math.min(Number.isFinite(count) ? count : 1, 20));\n const lines: string[] = [];\n for (let i = 0; i < count; i++) {\n const key = await mintKey(tier, app.secret);\n await sqlite.execute({\n sql: `INSERT INTO ${app.issued} (serial, tier, key, issued_at) VALUES (?, ?, ?, ?)`,\n args: [key.slice(1, 6), tier, grouped(key), new Date().toISOString()],\n });\n lines.push(`${grouped(key)}`);\n }\n const s = count > 1 ? \"s\" : \"\";\n await ctx.reply(\n `${app.emoji} ${app.label} — ${count} × ${TIER_LABEL[tier]} key${s}:\\n\\n${lines.join(\"\\n\")}`,\n { parse_mode: \"HTML\" },\n );\n}\n\n// The app chooser, then a per-app duration menu.\nconst APP_MENU = new InlineKeyboard()\n .text(\"🟢 Wise\", \"app:w\").text(\"⚫️ Revolut\", \"app:r\");\n\nfunction durationMenu(app: App) {\n return new InlineKeyboard()\n .text(\"60 seconds\", `mint:${app.id}:T`).row()\n .text(\"1 day\", `mint:${app.id}:D`).text(\"1 week\", `mint:${app.id}:W`).row()\n .text(\"1 month\", `mint:${app.id}:M`).text(\"Lifetime\", `mint:${app.id}:L`).row()\n .text(\"‹ Back\", \"app:menu\");\n}\n\nfunction showMenu(ctx: any) {\n return ctx.reply(\"Access keys — which app?\", { reply_markup: APP_MENU });\n}\n\nbot.command(\"menu\", showMenu);\nbot.command(\"start\", showMenu);\nbot.command(\"wise\", (ctx) => ctx.reply(\"🟢 Wise — tap a duration to mint one:\", { reply_markup: durationMenu(APPS.w) }));\nbot.command(\"revolut\", (ctx) => ctx.reply(\"⚫️ Revolut — tap a duration to mint one:\", { reply_markup: durationMenu(APPS.r) }));\n\nbot.callbackQuery(/^app:(.+)$/, async (ctx) => {\n await ctx.answerCallbackQuery();\n const which = ctx.match![1];\n if (which === \"menu\") {\n await ctx.editMessageText(\"Access keys — which app?\", { reply_markup: APP_MENU });\n return;\n }\n const app = APPS[which];\n if (!app) return;\n await ctx.editMessageText(`${app.emoji} ${app.label} — tap a duration to mint one:`, {\n parse_mode: \"HTML\",\n reply_markup: durationMenu(app),\n });\n});\n\nbot.callbackQuery(/^mint:(.):(.)$/, async (ctx) => {\n await ctx.answerCallbackQuery();\n const app = APPS[ctx.match![1]];\n if (!app) return;\n await issue(ctx, app, ctx.match![2], 1);\n});\n\n// Typed tier commands, with an optional count (e.g. /week 5). The bare names\n// mint Wise keys — they did before this bot learned a second app, and the\n// muscle memory is worth keeping. An \"r\" prefix mints Revolut ones.\nfor (const [name, tier] of Object.entries(TIERS)) {\n bot.command(name, (ctx) => issue(ctx, APPS.w, tier, parseInt((ctx.match ?? \"\").trim(), 10)));\n bot.command(\"r\" + name, (ctx) => issue(ctx, APPS.r, tier, parseInt((ctx.match ?? \"\").trim(), 10)));\n}\n\nfunction serialOf(ctx: any): string {\n return (ctx.match ?? \"\").toUpperCase().replace(/[^A-Z0-9]/g, \"\").slice(0, 5);\n}\n\n// A serial is unique within an app but the two apps mint from the same\n// alphabet, so /check and /revoke look in both ledgers and say which they hit.\nasync function findClaims(serial: string): Promise> {\n const found: Array<{ app: App; claim: Claim }> = [];\n for (const app of Object.values(APPS)) {\n try {\n const claim = await app.ledger.find(serial);\n if (claim) found.push({ app, claim });\n } catch (_) { /* an unreachable ledger shouldn't hide the other one */ }\n }\n return found;\n}\n\nbot.command(\"check\", async (ctx) => {\n const serial = serialOf(ctx);\n if (serial.length !== 5) { await ctx.reply(\"Usage: /check <5-char serial>\"); return; }\n const hits = await findClaims(serial);\n if (!hits.length) { await ctx.reply(`${serial}: not claimed in either app yet.`); return; }\n const parts = hits.map(({ app, claim }) => {\n const dev = String(claim.device_id).slice(0, 8);\n return `${app.emoji} ${app.label}\\ntier: ${claim.tier}\\ndevice: ${dev}…\\nexpires: ${claim.expires_at}\\nrevoked: ${Number(claim.revoked) ? \"yes\" : \"no\"}`;\n });\n await ctx.reply(`${serial}\\n\\n${parts.join(\"\\n\\n\")}`);\n});\n\nbot.command(\"revoke\", async (ctx) => {\n const serial = serialOf(ctx);\n if (serial.length !== 5) { await ctx.reply(\"Usage: /revoke <5-char serial>\"); return; }\n const hits = await findClaims(serial);\n if (hits.length) {\n for (const { app } of hits) await app.ledger.revoke(serial);\n const where = hits.map((h) => h.app.label).join(\" and \");\n await ctx.reply(`Revoked ${serial} in ${where}. It will no longer unlock the app.`);\n return;\n }\n // Not claimed anywhere. Pre-revoke it in both ledgers: a revoked row refuses\n // the first claim, whichever app the key turns out to belong to.\n for (const app of Object.values(APPS)) await app.ledger.revoke(serial);\n await ctx.reply(`Pre-revoked ${serial} in both apps. It can never be claimed.`);\n});\n\n// A tap-to-revoke list of the keys currently in use, both apps together.\nbot.command(\"list\", async (ctx) => {\n const kb = new InlineKeyboard();\n const sections: string[] = [];\n for (const app of Object.values(APPS)) {\n let claims: Claim[];\n try {\n claims = await app.ledger.recent(10);\n } catch (_) {\n sections.push(`${app.emoji} ${app.label}\\ncouldn't reach its key server`);\n continue;\n }\n if (!claims.length) {\n sections.push(`${app.emoji} ${app.label}\\nno keys claimed yet`);\n continue;\n }\n const lines: string[] = [];\n for (const claim of claims) {\n const serial = String(claim.serial);\n const revoked = Number(claim.revoked);\n const exp = String(claim.expires_at).slice(0, 10);\n lines.push(`${serial} · ${claim.tier} · ${revoked ? \"❌ revoked\" : \"✅ active\"} · until ${exp}`);\n if (!revoked) kb.text(`${app.emoji} Revoke ${serial}`, `rv:${app.id}:${serial}`).row();\n }\n sections.push(`${app.emoji} ${app.label}\\n${lines.join(\"\\n\")}`);\n }\n await ctx.reply(`Claimed keys (newest first):\\n\\n${sections.join(\"\\n\\n\")}`, {\n parse_mode: \"HTML\",\n reply_markup: kb,\n });\n});\n\n// Tap a Revoke button from /list.\nbot.callbackQuery(/^rv:(.):(.+)$/, async (ctx) => {\n const app = APPS[ctx.match![1]];\n const serial = ctx.match![2];\n if (!app) return;\n await app.ledger.revoke(serial);\n await ctx.answerCallbackQuery({ text: `Revoked ${serial} (${app.label})` });\n await ctx.reply(`Revoked ${serial} in ${app.label}. It no longer unlocks the app.`, {\n parse_mode: \"HTML\",\n });\n});\n\n// The list Telegram shows behind the \"/\" menu button.\nconst COMMANDS = [\n { command: \"menu\", description: \"Pick an app, then a key duration\" },\n { command: \"wise\", description: \"Wise — key menu\" },\n { command: \"revolut\", description: \"Revolut — key menu\" },\n { command: \"test\", description: \"Wise: mint a 60-second key\" },\n { command: \"day\", description: \"Wise: mint a 1-day key\" },\n { command: \"week\", description: \"Wise: mint a 7-day key\" },\n { command: \"month\", description: \"Wise: mint a 1-month key\" },\n { command: \"lifetime\", description: \"Wise: mint a key that never expires\" },\n { command: \"rtest\", description: \"Revolut: mint a 60-second key\" },\n { command: \"rday\", description: \"Revolut: mint a 1-day key\" },\n { command: \"rweek\", description: \"Revolut: mint a 7-day key\" },\n { command: \"rmonth\", description: \"Revolut: mint a 1-month key\" },\n { command: \"rlifetime\", description: \"Revolut: mint a key that never expires\" },\n { command: \"list\", description: \"List claimed keys, tap to revoke\" },\n { command: \"check\", description: \"Check a key by serial\" },\n { command: \"revoke\", description: \"Revoke a key by serial\" },\n];\n\n// This val's own tables: Wise's claim ledger, and the record of every key\n// handed out for either app. Revolut's claim ledger lives in its own val.\nasync function initDb(): Promise {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS activation_claims (\n serial TEXT PRIMARY KEY,\n tier TEXT NOT NULL,\n device_id TEXT NOT NULL,\n claimed_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n revoked INTEGER NOT NULL DEFAULT 0\n )`);\n for (const app of Object.values(APPS)) {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${app.issued} (\n serial TEXT PRIMARY KEY,\n tier TEXT NOT NULL,\n key TEXT NOT NULL,\n issued_at TEXT NOT NULL\n )`);\n }\n}\n\n// grammY validates this header so only Telegram can drive the webhook.\nconst SECRET_TOKEN = token.split(\":\")[1];\nconst handleUpdate = webhookCallback(bot, \"std/http\", undefined, undefined, SECRET_TOKEN);\n\nlet ready = false;\nexport default async (req: Request): Promise => {\n await initDb();\n // On first hit: point Telegram at this endpoint and register the command\n // list. Both are no-ops once set.\n if (!ready) {\n try {\n await bot.api.setWebhook(req.url, { secret_token: SECRET_TOKEN });\n await bot.api.setMyCommands(COMMANDS);\n } catch (_) { /* ignore */ }\n ready = true;\n }\n if (req.method === \"POST\") return await handleUpdate(req);\n return new Response(\"clone key bot — up (wise + revolut)\", { status: 200 });\n};\n","createdAt",["D",1788891079416],"branchVersion","branchId","3acfbf3f-738d-47d2-9d3c-e6f814d0dc6b","id","f1005be7-bafe-4696-8baa-3c8fe5a51e1a","wiseclone-keys",["D",1787246675799],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Wise beta access keys: mint via Telegram, verify from the app","imageUrl","cc58df9a-f50f-435b-9018-be1782367358","pinnedFileId","12122a88-9cbc-11f1-a577-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a01fe9-ecb4-741f-b93d-9dede04027dc","tursoName","f1005be7bafe46968baa3c8fe5a51e1a","tursoHostname","f1005be7bafe46968baa3c8fe5a51e1a-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789520505489],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},"branch",{"_13":14,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","shark1","handle","displayName","Shark","avatar","https://lh3.googleusercontent.com/a/ACg8ocIzln9AxE2CWvWNfXzidC0hM0GwjaSxZH3RbH41m8e-uhxzM3o=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":178,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":179,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":180,"_84":181,"_86":182,"_88":25},"tree",[165,166,167],"files",[165,166,167],"counts",{"_154":63,"_155":147,"_156":63,"_157":158,"_159":160},"contents",[130,131,132],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":151,"_32":28,"_30":31,"_135":-5,"_41":42,"_40":14,"_137":59,"_38":152,"_13":145,"_33":34,"_35":37,"_24":25,"_140":-5,"_27":153},{"_43":142,"_32":143,"_30":144,"_135":-5,"_41":42,"_40":145,"_137":59,"_38":146,"_13":147,"_33":148,"_35":149,"_24":25,"_140":-5,"_27":150},{"_43":133,"_32":134,"_30":57,"_135":-5,"_41":42,"_40":136,"_137":59,"_38":138,"_13":63,"_33":34,"_35":139,"_24":25,"_140":-5,"_27":141},"5ef816ed-f1df-44f2-be4a-8b5e21a513c5","main.ts","parentId",2,"latest",["D",1787246699607],"// App-facing verifier + claim ledger.\n//\n// The app already checks a key's signature locally; this is the one thing it\n// can't do alone — remember, across devices, that a key has been claimed. A\n// key that verifies on two phones still only activates on the first to reach here.\n//\n// POST / {\"key\":\"MHLX8644E2H7TKL9\",\"deviceId\":\"...\"}\n// 200 {\"ok\":true,\"tier\":\"M\",\"seconds\":2592000,\"expiresAt\":\"...\"}\n// 409 {\"ok\":false,\"reason\":\"claimed_elsewhere\"}\n// 403 {\"ok\":false,\"reason\":\"revoked\"}\n// 400 {\"ok\":false,\"reason\":\"bad_signature\"}\n// GET /?serial=XXXXX inspect one claim\n//\n// SECRET is set in the val's env, and must match Activation.swift.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { DURATION, tag, initDb } from \"./keys.ts\";\n\nfunction json(body: unknown, status = 200): Response {\n return new Response(JSON.stringify(body), {\n status,\n headers: { \"content-type\": \"application/json\" },\n });\n}\n\nexport default async function (req: Request): Promise {\n const secret = Deno.env.get(\"SECRET\");\n if (!secret) return json({ ok: false, reason: \"server_not_configured\" }, 500);\n await initDb();\n\n if (req.method === \"GET\") {\n const serial = new URL(req.url).searchParams.get(\"serial\");\n if (!serial) {\n return json({ ok: true, service: \"wiseclone activation\", hint: \"POST {key, deviceId}\" });\n }\n const r = await sqlite.execute({\n sql: \"SELECT serial, tier, device_id, claimed_at, expires_at, revoked FROM activation_claims WHERE serial = ?\",\n args: [serial.toUpperCase()],\n });\n return json({ ok: true, claim: r.rows[0] ?? null });\n }\n\n if (req.method !== \"POST\") return json({ ok: false, reason: \"method\" }, 405);\n\n let body: { key?: string; deviceId?: string };\n try { body = await req.json(); } catch { return json({ ok: false, reason: \"bad_json\" }, 400); }\n\n const key = (body.key ?? \"\").toUpperCase().replace(/[^A-Z0-9]/g, \"\");\n const deviceId = (body.deviceId ?? \"\").trim();\n if (key.length !== 16 || !deviceId) return json({ ok: false, reason: \"bad_request\" }, 400);\n\n const payload = key.slice(0, 6);\n const tier = key[0];\n const serial = key.slice(1, 6);\n if (!DURATION[tier]) return json({ ok: false, reason: \"unknown_tier\" }, 400);\n if (await tag(payload, secret) !== key.slice(6)) return json({ ok: false, reason: \"bad_signature\" }, 400);\n\n const existing = await sqlite.execute({\n sql: \"SELECT device_id, expires_at, revoked FROM activation_claims WHERE serial = ?\",\n args: [serial],\n });\n\n if (existing.rows.length > 0) {\n const row = existing.rows[0] as Record;\n if (Number(row.revoked)) return json({ ok: false, reason: \"revoked\" }, 403);\n // The same device asking again is fine — a reinstall re-check returns the\n // claim it already owns rather than being told it's taken.\n if (String(row.device_id) !== deviceId) return json({ ok: false, reason: \"claimed_elsewhere\" }, 409);\n return json({ ok: true, tier, seconds: DURATION[tier], expiresAt: String(row.expires_at) });\n }\n\n // First claim wins. The clock starts now, not when the key was minted.\n const expiresAt = new Date(Date.now() + DURATION[tier] * 1000).toISOString();\n await sqlite.execute({\n sql: `INSERT INTO activation_claims (serial, tier, device_id, claimed_at, expires_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [serial, tier, deviceId, new Date().toISOString(), expiresAt],\n });\n return json({ ok: true, tier, seconds: DURATION[tier], expiresAt });\n}\n","label",[134],"7db3749f-7f23-4f16-8994-abb7bcfbccb0","keys.ts","03e50944-9cbc-11f1-89ce-1607ee4eb77e",4,["D",1787248039047],1,"script","// Shared core for the Wise access-key system.\n//\n// A key is self-proving: tier + serial + a truncated HMAC over the two, using\n// SECRET. The same construction lives in the iOS app (Activation.swift) and\n// tools/mint-keys.py — all three must agree byte-for-byte or keys won't verify.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// No 0/O/1/I — the pairs people mistype when copying a key.\nexport const ALPHABET = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n\n// Seconds each tier grants. T is a 60-second tier for watching expiry; L is a\n// hundred-year grant — \"lifetime\" in practice.\nexport const DURATION: Record = { D: 86400, W: 604800, M: 2592000, T: 60, L: 3153600000 };\nexport const TIER_LABEL: Record = { D: \"1 day\", W: \"7 days\", M: \"1 month\", T: \"60 seconds\", L: \"Lifetime\" };\n\nexport async function initDb(): Promise {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS activation_claims (\n serial TEXT PRIMARY KEY,\n tier TEXT NOT NULL,\n device_id TEXT NOT NULL,\n claimed_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n revoked INTEGER NOT NULL DEFAULT 0\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS issued_keys (\n serial TEXT PRIMARY KEY,\n tier TEXT NOT NULL,\n key TEXT NOT NULL,\n issued_at TEXT NOT NULL\n )`);\n}\n\n/** First 50 bits of HMAC-SHA256(payload), as ten five-bit characters. */\nexport async function tag(payload: string, secret: string): Promise {\n const key = await crypto.subtle.importKey(\n \"raw\", new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"],\n );\n const mac = new Uint8Array(await crypto.subtle.sign(\"HMAC\", key, new TextEncoder().encode(payload)));\n let out = \"\", acc = 0, bits = 0, i = 0;\n while (out.length < 10) {\n if (bits < 5) { acc = (acc << 8) | mac[i]; bits += 8; i += 1; }\n out += ALPHABET[(acc >> (bits - 5)) & 0b11111];\n bits -= 5;\n }\n return out;\n}\n\n/** Mints a fresh key of the given tier. 32 divides 256, so no modulo bias. */\nexport async function mintKey(tier: string, secret: string): Promise {\n const bytes = new Uint8Array(5);\n crypto.getRandomValues(bytes);\n let serial = \"\";\n for (const b of bytes) serial += ALPHABET[b % ALPHABET.length];\n const payload = tier + serial;\n return payload + await tag(payload, secret);\n}\n\n/** XXXX-XXXX-XXXX-XXXX */\nexport function grouped(key: string): string {\n return (key.match(/.{1,4}/g) ?? [key]).join(\"-\");\n}\n",[143],"3a265dfd-08cb-4577-b2fb-13b97ad0d219",["D",1788891079416],[28],"pulls","branches","forks","envVars",{"_161":163,"_164":63},"connections",{"_161":63,"_162":63},"count","unfilledCount",5,"emptyCount",{"_43":151,"_32":28,"_30":31,"_135":-5,"_41":42,"_40":14,"_137":59,"_38":175,"_13":145,"_33":34,"_35":37,"_24":25,"_140":-5,"_169":176,"_27":177},{"_43":142,"_32":143,"_30":144,"_135":-5,"_41":42,"_40":145,"_137":59,"_38":172,"_13":147,"_33":148,"_35":149,"_24":25,"_140":-5,"_169":173,"_27":174},{"_43":133,"_32":134,"_30":57,"_135":-5,"_41":42,"_40":136,"_137":59,"_38":168,"_13":63,"_33":34,"_35":139,"_24":25,"_140":-5,"_169":170,"_27":171},["D",1787246699607],"children",[],[134],["D",1787248039047],[],[143],["D",1788891079416],[],[28],["D",1787246675799],["D",1789520505489],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":25},{"_13":14,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_82":-5,"_127":216,"_217":218,"_219":220,"_221":25,"_222":25,"_223":25,"_224":59,"_225":-5,"_226":-7,"_227":-7,"_228":63,"_229":25,"_230":25,"_231":-5,"_232":25,"_233":25,"_234":25,"_235":-5},"ENV",{"_187":188,"_189":190,"_191":89,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v8