\n {conn.val_slug} and {conn.repo}\n

\n Source of truth: {source}. Branch: {conn.branch}.\n

\n Last sync: {conn.last_sync_at ?? \"never\"} - {conn.last_result ?? \"no result yet\"}\n

\n\n

\n \n \n

\n\n

Recent events

\n {events.length === 0 ?

No events yet.

: (\n \n \n \n \n \n \n \n \n \n {events.map((e) => (\n \n \n \n \n \n ))}\n \n

Time	Kind	Detail
{e.ts}	{e.kind}	{e.detail}

\n )}\n

\n );\n}\n",[],[131,142],"b8a6320f-99c6-4b7d-b12c-7d7d0187580f","Layout.tsx","fdef2796-66be-11f1-b28c-1607ee4eb77e",["D",1781310591315],"/** @jsxImportSource npm:hono@4/jsx */\n\nexport default function Layout({ title, children }: { title: string; children?: unknown }) {\n return (\n \n \n \n \n {title}\n \n \n \n

\n githubsync\n GitHub and Val Town, in sync\n

\n {children}\n

\n \n \n );\n}\n",[],[131,150],"2212350e-a506-48df-a227-ff033fd82052","Landing.tsx","00805520-66bf-11f1-8aa2-1607ee4eb77e",33,["D",1781354638184],1,"/** @jsxImportSource npm:hono@4/jsx */\n\nexport default function Landing() {\n return (\n

\n Connect a val to a GitHub repo. We keep them in sync.\n

\n Pick a val, pick a repo, pick which side is the source of truth. Pushes to the repo\n land in the val within seconds; edits to the val land in the repo as clean commits.\n

\n \n Sign in with Val Town\n \n

Sign in with Val Town (grants the API access we sync with)
Install the GitHub App on the repos you want to sync
Pick a val, a repo, and a direction - then connect a repo

\n );\n}\n",[],[131,157],"3e18a2f3-3274-49ce-9065-5a61ed4cb278","Dashboard.tsx","0ecf4bf4-66bf-11f1-bfe7-1607ee4eb77e",32,["D",1781354633103],"/** @jsxImportSource npm:hono@4/jsx */\nimport type { Connection } from \"../db.ts\";\n\nfunction ConnectionRow({ conn }: { conn: Connection }) {\n const arrow = conn.direction === \"github\" ? \"repo to val\" : \"val to repo\";\n return (\n \n \n {conn.val_slug}\n \n {conn.repo}\n {arrow}\n {conn.last_result ?? \"never synced\"}\n \n );\n}\n\nexport default function Dashboard(props: {\n username: string;\n vals: string[];\n valsError: string | null;\n connections: Connection[];\n appSlug: string | null;\n installations: { installation_id: number }[];\n}) {\n const { username, vals, valsError, connections, appSlug, installations } = props;\n return (\n

\n Signed in as {username}\n

\n \n

\n\n

Connections

\n {connections.length === 0\n ?

No connections yet.

\n : (\n \n \n \n \n \n \n \n \n \n \n {connections.map((conn) => )}\n \n

Val	Repo	Direction	Last sync

\n )}\n

\n\n

GitHub

\n \n Install the GitHub App\n {\" \"}\n on the repos you want to sync. You grant it Contents read/write; we never ask for a\n personal access token.\n

\n Installations: {installations.length === 0\n ? \"none yet\"\n : installations.map((i) => String(i.installation_id)).join(\", \")}\n

\n\n

Connect a repo

\n Val\n {valsError\n ?

Could not list your vals: {valsError}. Log out and back in.

\n : (\n \n )}\n

\n GitHub repo (owner/name)\n \n

\n Branch\n \n

\n Source of truth\n \n {\" \"}\n GitHub - pushes to the repo overwrite the val\n \n \n {\" \"}\n Val Town - edits to the val are committed to the repo\n \n

\n {installations.length > 0 && (\n

\n GitHub App installation\n \n \n {installations.map((i) => (\n \n ))}\n \n

\n )}\n

\n \n GitHub token (dev fallback - used instead of the GitHub App; needs Contents\n read/write on the repo)\n \n \n

\n \n

\n );\n}\n",[],[131,166],"0f97f978-6838-46a4-abf2-05b0c4751b4a","sync","91476b4f-e132-4c92-bb12-67166e8574f5",6,["D",1781310546326],[180,181],[174],{"_37":190,"_13":191,"_40":192,"_42":175,"_44":45,"_46":176,"_48":49,"_50":193,"_17":52,"_53":54,"_55":194,"_57":58,"_59":-5,"_102":195,"_18":196},{"_37":182,"_13":183,"_40":184,"_42":175,"_44":45,"_46":185,"_48":49,"_50":186,"_17":52,"_53":54,"_55":187,"_57":58,"_59":-5,"_102":188,"_18":189},"0f4366d0-d3bb-4884-a5e6-c83013d50af6","valToGh.ts","e988f200-66be-11f1-bfe7-1607ee4eb77e",7,["D",1781310557274],"import { type Connection } from \"../db.ts\";\nimport { ghTokenFor, vtTokenFor } from \"../lib/creds.ts\";\nimport { gh, gitBlobSha, toBase64 } from \"../lib/github.ts\";\nimport { listValFiles, readValFileBytes } from \"../lib/valtown.ts\";\n\n// Diff the val's files against the repo HEAD by computing git blob shas locally;\n// push one commit covering all adds, edits, and deletions. No diff => no commit.\nexport async function pushValToRepo(conn: Connection): Promise {\n const vtToken = vtTokenFor(conn);\n const ghToken = await ghTokenFor(conn);\n const { repo, branch } = conn;\n\n const files = await listValFiles(vtToken, conn.val_id);\n const entries = await Promise.all(\n files.map(async (f) => {\n const bytes = await readValFileBytes(vtToken, conn.val_id, f.path);\n return { path: f.path, bytes, sha: await gitBlobSha(bytes) };\n }),\n );\n\n const ref = await gh(ghToken, `/repos/${repo}/git/ref/heads/${branch}`);\n const headSha: string = ref.object.sha;\n const headCommit = await gh(ghToken, `/repos/${repo}/git/commits/${headSha}`);\n const headTree = await gh(ghToken, `/repos/${repo}/git/trees/${headCommit.tree.sha}?recursive=1`);\n if (headTree.truncated) throw new Error(\"repo tree truncated - cannot diff safely\");\n const repoShas = new Map(\n headTree.tree.filter((t: any) => t.type === \"blob\").map((t: any) => [t.path, t.sha]),\n );\n\n const changed = entries.filter((e) => repoShas.get(e.path) !== e.sha);\n const deleted = [...repoShas.keys()].filter((p) => !entries.some((e) => e.path === p));\n if (changed.length === 0 && deleted.length === 0) {\n return `up to date with ${repo}@${headSha.slice(0, 7)} - no commit`;\n }\n\n for (const e of changed) {\n const blob = await gh(ghToken, `/repos/${repo}/git/blobs`, {\n method: \"POST\",\n body: JSON.stringify({ content: toBase64(e.bytes), encoding: \"base64\" }),\n });\n if (blob.sha !== e.sha) {\n throw new Error(`blob sha mismatch for ${e.path}: ${blob.sha} != ${e.sha}`);\n }\n }\n\n // Full tree, no base_tree: omitted paths are deletions.\n const tree = await gh(ghToken, `/repos/${repo}/git/trees`, {\n method: \"POST\",\n body: JSON.stringify({\n tree: entries.map((e) => ({ path: e.path, mode: \"100644\", type: \"blob\", sha: e.sha })),\n }),\n });\n\n const summary = `githubsync: ${changed.length} changed, ${deleted.length} deleted`;\n const commit = await gh(ghToken, `/repos/${repo}/git/commits`, {\n method: \"POST\",\n body: JSON.stringify({\n message: `${summary}\\n\\nsource: https://www.val.town/x/${conn.val_slug}`,\n tree: tree.sha,\n parents: [headSha],\n }),\n });\n // force:false — a concurrent push 422s here and the next run recovers.\n await gh(ghToken, `/repos/${repo}/git/refs/heads/${branch}`, {\n method: \"PATCH\",\n body: JSON.stringify({ sha: commit.sha, force: false }),\n });\n return `pushed ${commit.sha.slice(0, 7)} to ${repo}@${branch}: ${summary}`;\n}\n",[],[174,183],"194c3ea0-9712-4b89-be22-ccdb5a89e5e2","ghToVal.ts","e2febbea-66be-11f1-9f5d-1607ee4eb77e",["D",1781310546326],"import { type Connection } from \"../db.ts\";\nimport { ghTokenFor, vtTokenFor } from \"../lib/creds.ts\";\nimport { fetchRepoFile, fetchRepoTree } from \"../lib/github.ts\";\nimport { deleteValFile, listValFiles, upsertValFile } from \"../lib/valtown.ts\";\n\nconst SKIP_PREFIXES = [\".github/\"];\nconst shouldSkip = (path: string) => SKIP_PREFIXES.some((p) => path.startsWith(p));\nconst decoder = new TextDecoder(\"utf-8\", { fatal: true });\n\nasync function syncOneFile(\n vtToken: string,\n ghToken: string,\n conn: Connection,\n path: string,\n ref: string,\n): Promise {\n const bytes = await fetchRepoFile(ghToken, conn.repo, path, ref);\n let content: string;\n try {\n content = decoder.decode(bytes); // throws on binary\n } catch {\n return `skipped (binary): ${path}`;\n }\n if (content.length > 80_000) return `skipped (>80k chars, API limit): ${path}`;\n await upsertValFile(vtToken, conn.val_id, path, content);\n return `synced: ${path}`;\n}\n\n// Fold the push payload's commit list in order so the final action per path wins.\nexport async function incrementalSync(conn: Connection, payload: any): Promise {\n const vtToken = vtTokenFor(conn);\n const ghToken = await ghTokenFor(conn);\n const actions = new Map();\n for (const commit of payload.commits) {\n for (const p of [...commit.added, ...commit.modified]) actions.set(p, \"upsert\");\n for (const p of commit.removed) actions.set(p, \"remove\");\n }\n const results: string[] = [];\n for (const [path, action] of actions) {\n if (shouldSkip(path)) {\n results.push(`skipped (rule): ${path}`);\n } else if (action === \"upsert\") {\n results.push(await syncOneFile(vtToken, ghToken, conn, path, payload.after));\n } else {\n await deleteValFile(vtToken, conn.val_id, path);\n results.push(`deleted: ${path}`);\n }\n }\n return results;\n}\n\n// Mirror the whole repo tree into the val, deleting val files not in the repo.\nexport async function fullSync(conn: Connection, ref?: string): Promise {\n const vtToken = vtTokenFor(conn);\n const ghToken = await ghTokenFor(conn);\n const r = ref ?? conn.branch;\n const repoPaths = (await fetchRepoTree(ghToken, conn.repo, r)).filter((p) => !shouldSkip(p));\n const results: string[] = [];\n for (const path of repoPaths) {\n results.push(await syncOneFile(vtToken, ghToken, conn, path, r));\n }\n const repoSet = new Set(repoPaths);\n const valFiles = await listValFiles(vtToken, conn.val_id);\n for (const { path } of valFiles) {\n if (!repoSet.has(path) && !shouldSkip(path)) {\n await deleteValFile(vtToken, conn.val_id, path);\n results.push(`deleted (not in repo): ${path}`);\n }\n }\n return results;\n}\n",[],[174,191],"6a03e418-b02f-44a1-8e11-2ad90bc19cbf","routes","165a136c-f6d1-45c0-99f2-259223c2e53a",8,["D",1781310572920],[204,205,206,207],[198],{"_37":232,"_13":233,"_40":234,"_42":199,"_44":45,"_46":235,"_48":49,"_50":236,"_17":52,"_53":54,"_55":237,"_57":58,"_59":-5,"_102":238,"_18":239},{"_37":224,"_13":225,"_40":226,"_42":199,"_44":45,"_46":227,"_48":49,"_50":228,"_17":52,"_53":54,"_55":229,"_57":58,"_59":-5,"_102":230,"_18":231},{"_37":216,"_13":217,"_40":218,"_42":199,"_44":45,"_46":219,"_48":49,"_50":220,"_17":161,"_53":54,"_55":221,"_57":58,"_59":-5,"_102":222,"_18":223},{"_37":208,"_13":209,"_40":210,"_42":199,"_44":45,"_46":211,"_48":49,"_50":212,"_17":73,"_53":54,"_55":213,"_57":58,"_59":-5,"_102":214,"_18":215},"4d27136a-704d-4edc-af40-711880a25e0f","webhook.ts","f2da73c4-66be-11f1-aae1-1607ee4eb77e",24,["D",1781354574722],"import { Hono } from \"npm:hono@4\";\nimport { connectionsForRepo, recordEvent, updateSyncResult } from \"../db.ts\";\nimport { sharedApp } from \"../lib/app.ts\";\nimport { resolveSecret } from \"../lib/creds.ts\";\nimport { fullSync, incrementalSync } from \"../sync/ghToVal.ts\";\n\nasync function validSignature(\n secret: string,\n body: Uint8Array,\n sigHeader: string | null,\n): Promise {\n if (!sigHeader?.startsWith(\"sha256=\")) return false;\n const hex = sigHeader.slice(\"sha256=\".length);\n if (!/^[0-9a-f]{64}$/.test(hex)) return false;\n const sig = new Uint8Array(hex.match(/../g)!.map((b) => parseInt(b, 16)));\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"verify\"],\n );\n return await crypto.subtle.verify(\"HMAC\", key, sig, body); // timing-safe\n}\n\nconst webhook = new Hono();\n\nwebhook.post(\"/github\", async (c) => {\n const body = new Uint8Array(await c.req.arrayBuffer());\n const event = c.req.header(\"x-github-event\");\n if (event === \"ping\") return c.json({ ok: true, pong: true });\n if (event !== \"push\") return c.json({ ok: true, ignored: `event ${event}` });\n\n const payload = JSON.parse(new TextDecoder().decode(body));\n const repo = payload.repository?.full_name;\n if (!repo) return c.json({ ok: true, ignored: \"no repository in payload\" });\n\n const conns = await connectionsForRepo(repo, \"github\");\n if (conns.length === 0) return c.json({ ok: true, ignored: `no connections for ${repo}` });\n\n // Candidate secrets: each connection's repo-webhook secret (dev/PAT path) plus the\n // shared app's webhook secret (app installations deliver pushes via the app webhook).\n const sig = c.req.header(\"x-hub-signature-256\") ?? null;\n const secrets = conns.map((x) => resolveSecret(x.webhook_secret)).filter(Boolean) as string[];\n try {\n secrets.push(sharedApp().webhook_secret);\n } catch { /* shared app not configured; fall back to per-connection secrets */ }\n let verified = false;\n for (const s of secrets) {\n if (await validSignature(s, body, sig)) {\n verified = true;\n break;\n }\n }\n if (!verified) return c.text(\"bad signature\", 401);\n\n if (payload.deleted) return c.json({ ok: true, ignored: \"branch deletion\" });\n\n const results: Record = {};\n for (const conn of conns) {\n if (payload.ref !== `refs/heads/${conn.branch}`) {\n results[conn.id] = `ignored ref ${payload.ref} (only syncing ${conn.branch})`;\n continue;\n }\n try {\n // GitHub truncates the commits array at 20; force pushes rewrite history.\n const needFull = payload.forced || payload.commits.length >= 20;\n const r = needFull ? await fullSync(conn, payload.after) : await incrementalSync(conn, payload);\n await updateSyncResult(conn.id, `${needFull ? \"full\" : \"incremental\"} sync: ${r.length} files`);\n await recordEvent(\n conn.id,\n \"push\",\n JSON.stringify({ after: payload.after?.slice(0, 7), results: r }),\n );\n results[conn.id] = r;\n } catch (e) {\n await updateSyncResult(conn.id, `error: ${e.message}`);\n await recordEvent(conn.id, \"error\", e.message);\n results[conn.id] = `error: ${e.message}`;\n }\n }\n console.log(`push ${payload.after?.slice(0, 7)} to ${repo}:`, results);\n return c.json({ ok: true, results });\n});\n\nexport default webhook;\n",[],[198,209],"c6d37e26-5fc7-4645-86c0-2e693a713ef0","githubApp.tsx","26503bda-66bf-11f1-8863-1607ee4eb77e",25,["D",1781354593536],"/** @jsxImportSource npm:hono@4/jsx */\nimport { Hono } from \"npm:hono@4\";\nimport { getOAuthUserData } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { insertApp, insertInstallation } from \"../db.ts\";\nimport { installUrl, sharedApp } from \"../lib/app.ts\";\nimport { devAuthorized } from \"../lib/creds.ts\";\n\nconst githubApp = new Hono();\n\n// Normal user path: install the ONE shared GitHub App on the repos you want to sync.\n// `state` is optional and round-trips back to /github/setup after install.\ngithubApp.get(\"/install\", (c) => {\n const state = c.req.query(\"state\") ?? undefined;\n return c.redirect(installUrl(state));\n});\n\n// Post-install redirect carries the installation id; tie it to the shared app.\ngithubApp.get(\"/setup\", async (c) => {\n const installationId = Number(c.req.query(\"installation_id\") || 0);\n if (installationId) {\n await insertInstallation(installationId, sharedApp().app_id);\n }\n return c.redirect(\"/\");\n});\n\n// ---------------------------------------------------------------------------\n// Operator-only, one-time: create a NEW GitHub App via the manifest flow. This\n// is NOT part of the normal user path — users install the shared app instead.\n// Guarded by DEV_SECRET so it isn't reachable from the public dashboard. After\n// running it once, promote the resulting app's credentials into the GH_APP_*\n// env vars (which are the single source of truth) by hand.\n// ---------------------------------------------------------------------------\ngithubApp.get(\"/new-app\", (c) => {\n if (!devAuthorized(c.req.raw)) return c.text(\"unauthorized (operator-only route)\", 401);\n const origin = new URL(c.req.url).origin;\n const manifest = JSON.stringify({\n name: `valtown-sync-${crypto.randomUUID().slice(0, 6)}`,\n url: origin,\n hook_attributes: { url: `${origin}/webhook/github`, active: true },\n redirect_url: `${origin}/github/manifest-callback`,\n setup_url: `${origin}/github/setup`,\n public: false,\n default_events: [\"push\"],\n default_permissions: { contents: \"write\" },\n });\n // Returns a tiny auto-submitting form so the operator can POST the manifest.\n return c.html(\n \n \n \n \n ,\n );\n});\n\ngithubApp.get(\"/manifest-callback\", async (c) => {\n const code = c.req.query(\"code\");\n if (!code) return c.text(\"missing code\", 400);\n const res = await fetch(`https://api.github.com/app-manifests/${code}/conversions`, {\n method: \"POST\",\n headers: { Accept: \"application/vnd.github+json\", \"User-Agent\": \"githubsync-val\" },\n });\n if (!res.ok) return c.text(`manifest conversion failed: ${res.status} ${await res.text()}`, 500);\n const a = await res.json();\n const session = await getOAuthUserData(c.req.raw);\n // Stored in the DB for reference only; the GH_APP_* env vars remain the source\n // of truth. The operator must copy these into the env vars to promote the app.\n await insertApp({\n app_id: a.id,\n slug: a.slug,\n client_id: a.client_id,\n client_secret: a.client_secret,\n webhook_secret: a.webhook_secret,\n pem: a.pem,\n owner_user_id: session?.user?.id ?? null,\n });\n return c.text(\n `App created: id=${a.id} slug=${a.slug}. Promote these into the GH_APP_* env vars, ` +\n `then install via /github/install.`,\n );\n});\n\nexport default githubApp;\n",[],[198,217],"51d120f1-e985-4b8e-a0fd-9bb83af9c6d6","dev.ts","f85353de-66be-11f1-bdd6-1607ee4eb77e",9,["D",1781310582110],"import { Hono } from \"npm:hono@4\";\nimport { getConnection, insertConnection, recordEvent, updateSyncResult } from \"../db.ts\";\nimport { devAuthorized, ghTokenFor, resolveSecret } from \"../lib/creds.ts\";\nimport { registerPushWebhook } from \"../lib/github.ts\";\nimport { getValId } from \"../lib/valtown.ts\";\nimport { fullSync } from \"../sync/ghToVal.ts\";\nimport { pushValToRepo } from \"../sync/valToGh.ts\";\n\n// Dev-mode API: create a connection without the browser OAuth + GitHub App flow.\n// Auth: Authorization: Bearer . Tokens may be passed as \"env:NAME\" to\n// resolve from this val's environment so they never land in the database.\nconst dev = new Hono();\n\ndev.post(\"/connect\", async (c) => {\n if (!devAuthorized(c.req.raw)) return c.text(\"unauthorized\", 401);\n const b = await c.req.json();\n for (const field of [\"val\", \"repo\", \"direction\", \"vt_token\"]) {\n if (!b[field]) return c.json({ error: `missing ${field}` }, 400);\n }\n const vtToken = resolveSecret(b.vt_token);\n if (!vtToken) return c.json({ error: \"vt_token did not resolve\" }, 400);\n const valId = await getValId(vtToken, b.val);\n const webhookSecret = crypto.randomUUID().replaceAll(\"-\", \"\");\n const id = await insertConnection({\n user_id: \"dev\",\n val_id: valId,\n val_slug: b.val,\n repo: b.repo,\n branch: b.branch ?? \"main\",\n direction: b.direction,\n vt_token: b.vt_token,\n gh_token: b.gh_token ?? null,\n installation_id: b.installation_id ?? null,\n webhook_secret: webhookSecret,\n });\n const conn = (await getConnection(id))!;\n\n let hookId: number | null = null;\n if (b.direction === \"github\" && b.register_webhook !== false) {\n const url = `${new URL(c.req.url).origin}/webhook/github`;\n hookId = (await registerPushWebhook(await ghTokenFor(conn), b.repo, url, webhookSecret)).id;\n }\n\n let backfill: unknown;\n try {\n backfill = b.direction === \"github\" ? await fullSync(conn) : await pushValToRepo(conn);\n await updateSyncResult(id, \"backfill ok\");\n await recordEvent(id, \"backfill\", JSON.stringify(backfill));\n } catch (e) {\n backfill = `error: ${e.message}`;\n await updateSyncResult(id, `backfill error: ${e.message}`);\n await recordEvent(id, \"error\", e.message);\n }\n return c.json({ id, hookId, backfill });\n});\n\nexport default dev;\n",[],[198,225],"c91b7956-89cf-4b95-bfe1-edc08c61b6c9","connections.tsx","2125abd6-66bf-11f1-a63a-1607ee4eb77e",15,["D",1781310650599],"/** @jsxImportSource npm:hono@4/jsx */\nimport { Hono } from \"npm:hono@4\";\nimport { getOAuthUserData } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport {\n deleteConnection,\n getConnection,\n insertConnection,\n recentEvents,\n recordEvent,\n updateSyncResult,\n} from \"../db.ts\";\nimport { devAuthorized, ghTokenFor } from \"../lib/creds.ts\";\nimport { registerPushWebhook } from \"../lib/github.ts\";\nimport { getValId } from \"../lib/valtown.ts\";\nimport { fullSync } from \"../sync/ghToVal.ts\";\nimport { pushValToRepo } from \"../sync/valToGh.ts\";\nimport Layout from \"../views/Layout.tsx\";\nimport Status from \"../views/Status.tsx\";\n\nconst connections = new Hono();\n\nasync function authorizedFor(c: any, connUserId: string): Promise {\n if (devAuthorized(c.req.raw)) return true;\n const session = await getOAuthUserData(c.req.raw);\n if (!session) return false;\n return connUserId === \"dev\" || connUserId === session.user.id;\n}\n\n// Create a connection from the dashboard form.\nconnections.post(\"/\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session) return c.redirect(\"/\");\n const form = await c.req.formData();\n const val = String(form.get(\"val\") ?? \"\");\n const repo = String(form.get(\"repo\") ?? \"\");\n const direction = String(form.get(\"direction\") ?? \"github\") as \"github\" | \"valtown\";\n const branch = String(form.get(\"branch\") || \"main\");\n const ghToken = String(form.get(\"gh_token\") ?? \"\");\n const installationId = Number(form.get(\"installation_id\") || 0) || null;\n\n const token = session.accessToken;\n const valId = await getValId(token, val);\n const webhookSecret = crypto.randomUUID().replaceAll(\"-\", \"\");\n const id = await insertConnection({\n user_id: session.user.id,\n val_id: valId,\n val_slug: val,\n repo,\n branch,\n direction,\n vt_token: token,\n gh_token: ghToken || null,\n installation_id: installationId,\n webhook_secret: webhookSecret,\n });\n const conn = (await getConnection(id))!;\n\n // App installations deliver pushes via the app-level webhook; a pasted token needs a repo hook.\n if (direction === \"github\" && ghToken) {\n await registerPushWebhook(\n await ghTokenFor(conn),\n repo,\n `${new URL(c.req.url).origin}/webhook/github`,\n webhookSecret,\n );\n }\n\n try {\n const backfill = direction === \"github\" ? await fullSync(conn) : await pushValToRepo(conn);\n await updateSyncResult(id, \"backfill ok\");\n await recordEvent(id, \"backfill\", JSON.stringify(backfill));\n } catch (e) {\n await updateSyncResult(id, `backfill error: ${e.message}`);\n await recordEvent(id, \"error\", e.message);\n }\n return c.redirect(`/connections/${id}`);\n});\n\nconnections.get(\"/:id\", async (c) => {\n const conn = await getConnection(Number(c.req.param(\"id\")));\n if (!conn) return c.text(\"not found\", 404);\n if (!(await authorizedFor(c, conn.user_id))) return c.redirect(\"/\");\n const events = await recentEvents(conn.id);\n return c.html(\n \n \n ,\n );\n});\n\nconnections.post(\"/:id/resync\", async (c) => {\n const conn = await getConnection(Number(c.req.param(\"id\")));\n if (!conn) return c.text(\"not found\", 404);\n if (!(await authorizedFor(c, conn.user_id))) return c.text(\"unauthorized\", 401);\n let result: unknown;\n try {\n result = conn.direction === \"github\" ? await fullSync(conn) : await pushValToRepo(conn);\n await updateSyncResult(conn.id, \"manual resync ok\");\n await recordEvent(conn.id, \"resync\", JSON.stringify(result));\n } catch (e) {\n result = `error: ${e.message}`;\n await updateSyncResult(conn.id, `resync error: ${e.message}`);\n await recordEvent(conn.id, \"error\", e.message);\n }\n if (devAuthorized(c.req.raw)) return c.json({ id: conn.id, result });\n return c.redirect(`/connections/${conn.id}`);\n});\n\nconnections.post(\"/:id/delete\", async (c) => {\n const conn = await getConnection(Number(c.req.param(\"id\")));\n if (!conn) return c.text(\"not found\", 404);\n if (!(await authorizedFor(c, conn.user_id))) return c.text(\"unauthorized\", 401);\n await deleteConnection(conn.id);\n if (devAuthorized(c.req.raw)) return c.json({ deleted: conn.id });\n return c.redirect(\"/\");\n});\n\nexport default connections;\n",[],[198,233],["D",1781310508175],[243,244,245,246],[19],{"_37":76,"_13":77,"_40":78,"_42":43,"_44":45,"_46":79,"_48":49,"_50":256,"_17":52,"_53":54,"_55":81,"_57":58,"_59":-5,"_102":257,"_18":258},{"_37":68,"_13":69,"_40":70,"_42":43,"_44":45,"_46":71,"_48":49,"_50":253,"_17":73,"_53":54,"_55":74,"_57":58,"_59":-5,"_102":254,"_18":255},{"_37":61,"_13":62,"_40":63,"_42":43,"_44":45,"_46":64,"_48":49,"_50":250,"_17":52,"_53":54,"_55":66,"_57":58,"_59":-5,"_102":251,"_18":252},{"_37":38,"_13":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":247,"_17":52,"_53":54,"_55":56,"_57":58,"_59":-5,"_102":248,"_18":249},["D",1781310524554],[],[19,39],["D",1781310508175],[],[19,62],["D",1781354566309],[],[19,69],["D",1781354560229],[],[19,77],"bb036e1b-8dcf-48ee-9796-68ffb44b04ef",["D",1781310279766],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Hosted GitHub <-> Val Town sync service prototype","imageUrl","userId","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","e81e7335-6d4c-4764-a902-d0962bbfa9f7","tursoName","bb036e1b8dcf48ee979668ffb44b04ef","tursoHostname","bb036e1b8dcf48ee979668ffb44b04ef-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789509672838],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_315":311},"org",{"_11":12,"_309":-5,"_310":311,"_269":270,"_312":313,"_314":58},"branch",{"_17":124,"_13":16,"_37":45,"_301":259,"_302":-5,"_303":-5,"_304":-5,"_305":-5,"_306":-5,"_307":14,"_308":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://images.clerk.dev/uploaded/img_2PqHa2Gsy93xQrjh2w78Xu0cChW.jpeg","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_37":259,"_13":14,"_50":420,"_261":-5,"_262":58,"_263":264,"_265":264,"_266":267,"_268":-5,"_269":270,"_271":97,"_272":49,"_273":-5,"_274":-5,"_275":52,"_276":277,"_278":279,"_280":281,"_282":421,"_284":-5,"_285":286,"_287":286,"_288":289,"_290":289,"_291":289,"_292":286,"_293":286,"_294":422,"_296":423,"_298":424,"_300":58},[354,359,364,367,372,373,374,375],"files",[354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375],"counts",{"_345":52,"_346":161,"_347":52,"_32":348,"_349":350},[337,338,339,340],{"_37":83,"_13":19,"_40":43,"_42":-5,"_44":45,"_46":64,"_48":49,"_50":335,"_17":52,"_53":84,"_55":-5,"_57":58,"_59":-5,"_18":336},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1781310508175],[19],{"_37":76,"_13":77,"_40":78,"_42":43,"_44":45,"_46":79,"_48":49,"_50":80,"_17":52,"_53":54,"_55":81,"_57":58,"_59":-5,"_18":344},{"_37":68,"_13":69,"_40":70,"_42":43,"_44":45,"_46":71,"_48":49,"_50":72,"_17":73,"_53":54,"_55":74,"_57":58,"_59":-5,"_18":343},{"_37":61,"_13":62,"_40":63,"_42":43,"_44":45,"_46":64,"_48":49,"_50":65,"_17":52,"_53":54,"_55":66,"_57":58,"_59":-5,"_18":342},{"_37":38,"_13":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_17":52,"_53":54,"_55":56,"_57":58,"_59":-5,"_18":341},[19,39],[19,62],[19,69],[19,77],"pulls","branches","forks",{"_351":133,"_353":52},"connections",{"_351":52,"_352":52},"count","unfilledCount","emptyCount",{"_37":83,"_13":19,"_40":43,"_42":-5,"_44":45,"_46":64,"_48":49,"_50":240,"_17":52,"_53":84,"_55":-5,"_57":58,"_59":-5,"_102":418,"_18":419},{"_37":76,"_13":77,"_40":78,"_42":43,"_44":45,"_46":79,"_48":49,"_50":256,"_17":52,"_53":54,"_55":81,"_57":58,"_59":-5,"_102":416,"_18":417},{"_37":68,"_13":69,"_40":70,"_42":43,"_44":45,"_46":71,"_48":49,"_50":253,"_17":73,"_53":54,"_55":74,"_57":58,"_59":-5,"_102":414,"_18":415},{"_37":61,"_13":62,"_40":63,"_42":43,"_44":45,"_46":64,"_48":49,"_50":250,"_17":52,"_53":54,"_55":66,"_57":58,"_59":-5,"_102":412,"_18":413},{"_37":38,"_13":39,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":247,"_17":52,"_53":54,"_55":56,"_57":58,"_59":-5,"_102":410,"_18":411},{"_37":197,"_13":198,"_40":199,"_42":-5,"_44":45,"_46":200,"_48":49,"_50":201,"_17":52,"_53":84,"_55":-5,"_57":58,"_59":-5,"_102":408,"_18":409},{"_37":232,"_13":233,"_40":234,"_42":199,"_44":45,"_46":235,"_48":49,"_50":236,"_17":52,"_53":54,"_55":237,"_57":58,"_59":-5,"_102":406,"_18":407},{"_37":224,"_13":225,"_40":226,"_42":199,"_44":45,"_46":227,"_48":49,"_50":228,"_17":52,"_53":54,"_55":229,"_57":58,"_59":-5,"_102":404,"_18":405},{"_37":216,"_13":217,"_40":218,"_42":199,"_44":45,"_46":219,"_48":49,"_50":220,"_17":161,"_53":54,"_55":221,"_57":58,"_59":-5,"_102":402,"_18":403},{"_37":208,"_13":209,"_40":210,"_42":199,"_44":45,"_46":211,"_48":49,"_50":212,"_17":73,"_53":54,"_55":213,"_57":58,"_59":-5,"_102":400,"_18":401},{"_37":173,"_13":174,"_40":175,"_42":-5,"_44":45,"_46":176,"_48":49,"_50":177,"_17":52,"_53":84,"_55":-5,"_57":58,"_59":-5,"_102":398,"_18":399},{"_37":190,"_13":191,"_40":192,"_42":175,"_44":45,"_46":176,"_48":49,"_50":193,"_17":52,"_53":54,"_55":194,"_57":58,"_59":-5,"_102":396,"_18":397},{"_37":182,"_13":183,"_40":184,"_42":175,"_44":45,"_46":185,"_48":49,"_50":186,"_17":52,"_53":54,"_55":187,"_57":58,"_59":-5,"_102":394,"_18":395},{"_37":130,"_13":131,"_40":132,"_42":-5,"_44":45,"_46":133,"_48":49,"_50":134,"_17":52,"_53":84,"_55":-5,"_57":58,"_59":-5,"_102":392,"_18":393},{"_37":165,"_13":166,"_40":167,"_42":132,"_44":45,"_46":168,"_48":49,"_50":169,"_17":126,"_53":54,"_55":170,"_57":58,"_59":-5,"_102":390,"_18":391},{"_37":156,"_13":157,"_40":158,"_42":132,"_44":45,"_46":159,"_48":49,"_50":160,"_17":161,"_53":54,"_55":162,"_57":58,"_59":-5,"_102":388,"_18":389},{"_37":149,"_13":150,"_40":151,"_42":132,"_44":45,"_46":133,"_48":49,"_50":152,"_17":52,"_53":54,"_55":153,"_57":58,"_59":-5,"_102":386,"_18":387},{"_37":141,"_13":142,"_40":143,"_42":132,"_44":45,"_46":144,"_48":49,"_50":145,"_17":52,"_53":54,"_55":146,"_57":58,"_59":-5,"_102":384,"_18":385},{"_37":121,"_13":122,"_40":123,"_42":-5,"_44":45,"_46":124,"_48":49,"_50":125,"_17":126,"_53":24,"_55":127,"_57":58,"_59":-5,"_102":382,"_18":383},{"_37":112,"_13":113,"_40":114,"_42":-5,"_44":45,"_46":115,"_48":49,"_50":116,"_17":52,"_53":117,"_55":118,"_57":58,"_59":-5,"_102":380,"_18":381},{"_37":105,"_13":106,"_40":107,"_42":-5,"_44":45,"_46":73,"_48":49,"_50":108,"_17":52,"_53":54,"_55":109,"_57":58,"_59":-5,"_102":378,"_18":379},{"_37":95,"_13":96,"_40":97,"_42":-5,"_44":45,"_46":98,"_48":49,"_50":99,"_17":73,"_53":100,"_55":101,"_57":58,"_59":-5,"_102":376,"_18":377},[],[96],[],[106],[],[113],[],[122],[],[131,142],[],[131,150],[],[131,157],[],[131,166],[368,369,370,371],[131],[],[174,183],[],[174,191],[365,366],[174],[],[198,209],[],[198,217],[],[198,225],[],[198,233],[360,361,362,363],[198],[],[19,39],[],[19,62],[],[19,69],[],[19,77],[355,356,357,358],[19],["D",1781310279766],["D",1789509672838],{"_11":12,"_315":311},{"_11":12,"_309":-5,"_310":311,"_269":270,"_312":313,"_314":58},{"_17":124,"_13":16,"_37":45,"_301":259,"_302":-5,"_303":-5,"_304":-5,"_305":-5,"_306":-5,"_307":14,"_308":12},"ctx",{"_294":-5,"_332":458,"_459":460,"_461":462,"_463":58,"_464":58,"_465":58,"_466":49,"_467":-5,"_468":-7,"_469":-7,"_470":52,"_471":58,"_472":58,"_473":-5,"_474":58,"_475":58,"_476":58,"_477":-5},"ENV",{"_429":430,"_431":432,"_433":16,"_434":435,"_436":437,"_438":439,"_440":441,"_442":443,"_444":445,"_446":447,"_448":449,"_450":451,"_452":453,"_454":455,"_456":457},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]