[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_257":258,"_259":260},"routes/_app.x.$handle.$name",{"_105":104,"_32":50,"_113":95,"_27":114,"_13":14,"_115":-5,"_11":116,"_117":118,"_119":120,"_121":122,"_123":124,"_21":-5,"_125":-5,"_126":-5,"_127":25,"_128":129,"_130":25,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_48":49,"_32":50,"_38":51,"_52":-5,"_53":25,"_54":55,"_56":55,"_57":58,"_59":-5,"_18":60,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":72,"_73":74,"_75":76,"_77":-5,"_78":79,"_80":79,"_81":82,"_83":82,"_84":82,"_85":79,"_86":79,"_87":88,"_89":90,"_91":92,"_93":25},"version",8,"changes",[19,20],"aiChatInfo","userId",{"_21":43,"_23":-7,"_24":25,"_26":25,"_27":44,"_29":44},{"_21":22,"_23":-7,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous","deleted",false,"deletedHere","path","routes/webhook.ts","latestPath","fileId","f2da73c4-66be-11f1-aae1-1607ee4eb77e","name","webhook.ts","fileType","script","content","import { Hono } from \"npm:hono@4\";\nimport { connectionsForRepo, getApp, recordEvent, updateSyncResult } from \"../db.ts\";\nimport { resolveSecret } from \"../lib/creds.ts\";\nimport { fullSync, incrementalSync } from \"../sync/ghToVal.ts\";\n\nasync function validSignature(\n secret: string,\n body: Uint8Array,\n sigHeader: string | null,\n): Promise {\n if (!sigHeader?.startsWith(\"sha256=\")) return false;\n const hex = sigHeader.slice(\"sha256=\".length);\n if (!/^[0-9a-f]{64}$/.test(hex)) return false;\n const sig = new Uint8Array(hex.match(/../g)!.map((b) => parseInt(b, 16)));\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"verify\"],\n );\n return await crypto.subtle.verify(\"HMAC\", key, sig, body); // timing-safe\n}\n\nconst webhook = new Hono();\n\nwebhook.post(\"/github\", async (c) => {\n const body = new Uint8Array(await c.req.arrayBuffer());\n const event = c.req.header(\"x-github-event\");\n if (event === \"ping\") return c.json({ ok: true, pong: true });\n if (event !== \"push\") return c.json({ ok: true, ignored: `event ${event}` });\n\n const payload = JSON.parse(new TextDecoder().decode(body));\n const repo = payload.repository?.full_name;\n if (!repo) return c.json({ ok: true, ignored: \"no repository in payload\" });\n\n const conns = await connectionsForRepo(repo, \"github\");\n if (conns.length === 0) return c.json({ ok: true, ignored: `no connections for ${repo}` });\n\n // Candidate secrets: each connection's repo-webhook secret plus the app-level secret.\n const sig = c.req.header(\"x-hub-signature-256\") ?? null;\n const secrets = conns.map((x) => resolveSecret(x.webhook_secret)).filter(Boolean) as string[];\n const app = await getApp();\n if (app) secrets.push(app.webhook_secret);\n let verified = false;\n for (const s of secrets) {\n if (await validSignature(s, body, sig)) {\n verified = true;\n break;\n }\n }\n if (!verified) return c.text(\"bad signature\", 401);\n\n if (payload.deleted) return c.json({ ok: true, ignored: \"branch deletion\" });\n\n const results: Record = {};\n for (const conn of conns) {\n if (payload.ref !== `refs/heads/${conn.branch}`) {\n results[conn.id] = `ignored ref ${payload.ref} (only syncing ${conn.branch})`;\n continue;\n }\n try {\n // GitHub truncates the commits array at 20; force pushes rewrite history.\n const needFull = payload.forced || payload.commits.length >= 20;\n const r = needFull ? await fullSync(conn, payload.after) : await incrementalSync(conn, payload);\n await updateSyncResult(conn.id, `${needFull ? \"full\" : \"incremental\"} sync: ${r.length} files`);\n await recordEvent(\n conn.id,\n \"push\",\n JSON.stringify({ after: payload.after?.slice(0, 7), results: r }),\n );\n results[conn.id] = r;\n } catch (e) {\n await updateSyncResult(conn.id, `error: ${e.message}`);\n await recordEvent(conn.id, \"error\", e.message);\n results[conn.id] = `error: ${e.message}`;\n }\n }\n console.log(`push ${payload.after?.slice(0, 7)} to ${repo}:`, results);\n return c.json({ ok: true, results });\n});\n\nexport default webhook;\n","createdAt",["D",1781310572920],"branchVersion","branchId","503392e9-5051-4383-a7b7-4f37bc194007",{"_30":45,"_32":44,"_34":46,"_36":-5,"_38":47,"_40":14,"_41":42,"_24":25},"routes","165a136c-f6d1-45c0-99f2-259223c2e53a","directory",["D",1781310572920],"id","bb036e1b-8dcf-48ee-9796-68ffb44b04ef","githubsync",["D",1781310279766],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Hosted GitHub <-> Val Town sync service prototype","imageUrl","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","pinnedFileId","2cfaf97a-66bf-11f1-9471-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","e81e7335-6d4c-4764-a902-d0962bbfa9f7","tursoName","bb036e1b8dcf48ee979668ffb44b04ef","tursoHostname","bb036e1b8dcf48ee979668ffb44b04ef-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789509672838],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_105":104,"_112":108},"org",{"_105":104,"_106":-5,"_107":108,"_18":60,"_109":110,"_111":25},"branch",{"_13":94,"_32":95,"_48":42,"_96":49,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":-5,"_102":50,"_103":104},"isOwned",46,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","stevekrouse","handle","displayName","avatar","https://images.clerk.dev/uploaded/img_2PqHa2Gsy93xQrjh2w78Xu0cChW.jpeg","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_48":49,"_32":50,"_38":252,"_52":-5,"_53":25,"_54":55,"_56":55,"_57":58,"_59":-5,"_18":60,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":72,"_73":74,"_75":253,"_77":-5,"_78":79,"_80":79,"_81":82,"_83":82,"_84":82,"_85":79,"_86":79,"_87":254,"_89":255,"_91":256,"_93":25},"tree",[183,187,189,192,193],"files",[183,184,185,186,187,188,189,190,191,192,193],"counts",{"_172":68,"_173":153,"_174":68,"_175":176,"_177":178},"contents",[135,136,137,138,139],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_48":166,"_32":167,"_30":168,"_143":-5,"_41":42,"_40":169,"_145":64,"_38":170,"_13":68,"_34":46,"_36":-5,"_24":25,"_148":-5,"_27":171},{"_48":163,"_32":44,"_30":45,"_143":-5,"_41":42,"_40":14,"_145":64,"_38":164,"_13":68,"_34":46,"_36":-5,"_24":25,"_148":-5,"_27":165},{"_48":157,"_32":158,"_30":159,"_143":-5,"_41":42,"_40":160,"_145":64,"_38":161,"_13":68,"_34":46,"_36":-5,"_24":25,"_148":-5,"_27":162},{"_48":150,"_32":151,"_30":152,"_143":-5,"_41":42,"_40":153,"_145":25,"_38":154,"_13":68,"_34":21,"_36":155,"_24":25,"_148":-5,"_27":156},{"_48":140,"_32":141,"_30":142,"_143":-5,"_41":42,"_40":144,"_145":64,"_38":146,"_13":68,"_34":35,"_36":147,"_24":25,"_148":-5,"_27":149},"346b227e-45f9-4f66-bf07-0b28f36fec8b","db.ts","c3e688dc-66be-11f1-9ff7-1607ee4eb77e","parentId",2,"latest",["D",1781310494158],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TABLES = [\n `CREATE TABLE IF NOT EXISTS users (\n user_id TEXT PRIMARY KEY,\n username TEXT NOT NULL,\n access_token TEXT NOT NULL,\n refresh_token TEXT,\n updated_at TEXT NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS apps (\n app_id INTEGER PRIMARY KEY,\n slug TEXT NOT NULL,\n client_id TEXT NOT NULL,\n client_secret TEXT NOT NULL,\n webhook_secret TEXT NOT NULL,\n pem TEXT NOT NULL,\n owner_user_id TEXT,\n created_at TEXT NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS installations (\n installation_id INTEGER PRIMARY KEY,\n app_id INTEGER NOT NULL,\n created_at TEXT NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS connections (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id TEXT NOT NULL,\n val_id TEXT NOT NULL,\n val_slug TEXT NOT NULL,\n repo TEXT NOT NULL,\n branch TEXT NOT NULL DEFAULT 'main',\n direction TEXT NOT NULL CHECK (direction IN ('github','valtown')),\n vt_token TEXT NOT NULL,\n gh_token TEXT,\n installation_id INTEGER,\n webhook_secret TEXT,\n last_sync_at TEXT,\n last_result TEXT,\n created_at TEXT NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS events (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n connection_id INTEGER NOT NULL,\n ts TEXT NOT NULL,\n kind TEXT NOT NULL,\n detail TEXT\n )`,\n];\nfor (const sql of TABLES) await sqlite.execute(sql);\n\nfunction asObjects(rs: { columns: string[]; rows: unknown[] }): T[] {\n const rows = rs.rows ?? [];\n if (rows.length === 0) return [];\n if (!Array.isArray(rows[0])) return rows as T[];\n return (rows as unknown[][]).map((r) =>\n Object.fromEntries(rs.columns.map((c, i) => [c, r[i]])) as T\n );\n}\n\nconst now = () => new Date().toISOString();\n\nexport type Connection = {\n id: number;\n user_id: string;\n val_id: string;\n val_slug: string;\n repo: string;\n branch: string;\n direction: \"github\" | \"valtown\";\n vt_token: string;\n gh_token: string | null;\n installation_id: number | null;\n webhook_secret: string | null;\n last_sync_at: string | null;\n last_result: string | null;\n created_at: string;\n};\n\nexport type App = {\n app_id: number;\n slug: string;\n client_id: string;\n client_secret: string;\n webhook_secret: string;\n pem: string;\n owner_user_id: string | null;\n created_at: string;\n};\n\nexport type SyncEvent = {\n id: number;\n connection_id: number;\n ts: string;\n kind: string;\n detail: string | null;\n};\n\nexport async function upsertUser(\n userId: string,\n username: string,\n accessToken: string,\n refreshToken: string | null,\n) {\n await sqlite.execute({\n sql: `INSERT INTO users (user_id, username, access_token, refresh_token, updated_at)\n VALUES (?, ?, ?, ?, ?)\n ON CONFLICT(user_id) DO UPDATE SET\n username = excluded.username,\n access_token = excluded.access_token,\n refresh_token = excluded.refresh_token,\n updated_at = excluded.updated_at`,\n args: [userId, username, accessToken, refreshToken, now()],\n });\n}\n\nexport async function insertApp(a: Omit) {\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO apps\n (app_id, slug, client_id, client_secret, webhook_secret, pem, owner_user_id, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [a.app_id, a.slug, a.client_id, a.client_secret, a.webhook_secret, a.pem, a.owner_user_id, now()],\n });\n}\n\nexport async function getApp(): Promise {\n const rs = await sqlite.execute(`SELECT * FROM apps ORDER BY created_at DESC LIMIT 1`);\n return asObjects(rs)[0] ?? null;\n}\n\nexport async function insertInstallation(installationId: number, appId: number) {\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO installations (installation_id, app_id, created_at) VALUES (?, ?, ?)`,\n args: [installationId, appId, now()],\n });\n}\n\nexport async function listInstallations(): Promise<{ installation_id: number; app_id: number }[]> {\n const rs = await sqlite.execute(`SELECT * FROM installations ORDER BY created_at DESC`);\n return asObjects(rs);\n}\n\nexport async function insertConnection(\n c: Omit,\n): Promise {\n const rs = await sqlite.execute({\n sql: `INSERT INTO connections\n (user_id, val_id, val_slug, repo, branch, direction, vt_token, gh_token, installation_id, webhook_secret, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n c.user_id, c.val_id, c.val_slug, c.repo, c.branch, c.direction,\n c.vt_token, c.gh_token, c.installation_id, c.webhook_secret, now(),\n ],\n });\n return Number(rs.lastInsertRowid);\n}\n\nexport async function getConnection(id: number): Promise {\n const rs = await sqlite.execute({ sql: `SELECT * FROM connections WHERE id = ?`, args: [id] });\n return asObjects(rs)[0] ?? null;\n}\n\nexport async function listConnections(userId?: string): Promise {\n const rs = userId\n ? await sqlite.execute({\n sql: `SELECT * FROM connections WHERE user_id = ? OR user_id = 'dev' ORDER BY id DESC`,\n args: [userId],\n })\n : await sqlite.execute(`SELECT * FROM connections ORDER BY id DESC`);\n return asObjects(rs);\n}\n\nexport async function connectionsForRepo(repo: string, direction: string): Promise {\n const rs = await sqlite.execute({\n sql: `SELECT * FROM connections WHERE repo = ? AND direction = ?`,\n args: [repo, direction],\n });\n return asObjects(rs);\n}\n\nexport async function valtownSourceConnections(): Promise {\n const rs = await sqlite.execute(`SELECT * FROM connections WHERE direction = 'valtown'`);\n return asObjects(rs);\n}\n\nexport async function updateSyncResult(id: number, result: string) {\n await sqlite.execute({\n sql: `UPDATE connections SET last_sync_at = ?, last_result = ? WHERE id = ?`,\n args: [now(), result.slice(0, 500), id],\n });\n}\n\nexport async function deleteConnection(id: number) {\n await sqlite.execute({ sql: `DELETE FROM events WHERE connection_id = ?`, args: [id] });\n await sqlite.execute({ sql: `DELETE FROM connections WHERE id = ?`, args: [id] });\n}\n\nexport async function recordEvent(connectionId: number, kind: string, detail: string) {\n await sqlite.execute({\n sql: `INSERT INTO events (connection_id, ts, kind, detail) VALUES (?, ?, ?, ?)`,\n args: [connectionId, now(), kind, detail.slice(0, 2000)],\n });\n}\n\nexport async function recentEvents(connectionId: number, limit = 20): Promise {\n const rs = await sqlite.execute({\n sql: `SELECT * FROM events WHERE connection_id = ? ORDER BY id DESC LIMIT ?`,\n args: [connectionId, limit],\n });\n return asObjects(rs);\n}\n","label",[141],"306eebb3-4fed-44bc-abc3-84908ccf2f72","README.md","44204278-66be-11f1-b28c-1607ee4eb77e",1,["D",1781310279784],"# githubsync\n\nHosted GitHub <-> Val Town sync service prototype.\n",[151],"0f97f978-6838-46a4-abf2-05b0c4751b4a","sync","91476b4f-e132-4c92-bb12-67166e8574f5",6,["D",1781310546326],[158],"6a03e418-b02f-44a1-8e11-2ad90bc19cbf",["D",1781310572920],[44],"9c70151a-a2a2-4ce0-b510-626634ee1fe5","lib","640e6044-ddfa-454d-bb57-f42fb8b69d43",3,["D",1781310508175],[167],"pulls","branches","forks","envVars",{"_179":181,"_182":68},"connections",{"_179":68,"_180":68},"count","unfilledCount",10,"emptyCount",{"_48":166,"_32":167,"_30":168,"_143":-5,"_41":42,"_40":169,"_145":64,"_38":249,"_13":68,"_34":46,"_36":-5,"_24":25,"_148":-5,"_195":250,"_27":251},{"_48":241,"_32":242,"_30":243,"_143":168,"_41":42,"_40":244,"_145":25,"_38":245,"_13":68,"_34":35,"_36":246,"_24":25,"_148":-5,"_195":247,"_27":248},{"_48":234,"_32":235,"_30":236,"_143":168,"_41":42,"_40":169,"_145":64,"_38":237,"_13":68,"_34":35,"_36":238,"_24":25,"_148":-5,"_195":239,"_27":240},{"_48":226,"_32":227,"_30":228,"_143":168,"_41":42,"_40":229,"_145":64,"_38":230,"_13":68,"_34":35,"_36":231,"_24":25,"_148":-5,"_195":232,"_27":233},{"_48":163,"_32":44,"_30":45,"_143":-5,"_41":42,"_40":14,"_145":64,"_38":223,"_13":68,"_34":46,"_36":-5,"_24":25,"_148":-5,"_195":224,"_27":225},{"_48":219,"_32":33,"_30":31,"_143":45,"_41":42,"_40":14,"_145":25,"_38":220,"_13":68,"_34":35,"_36":37,"_24":25,"_148":-5,"_195":221,"_27":222},{"_48":157,"_32":158,"_30":159,"_143":-5,"_41":42,"_40":160,"_145":64,"_38":216,"_13":68,"_34":46,"_36":-5,"_24":25,"_148":-5,"_195":217,"_27":218},{"_48":209,"_32":210,"_30":211,"_143":159,"_41":42,"_40":160,"_145":64,"_38":212,"_13":68,"_34":35,"_36":213,"_24":25,"_148":-5,"_195":214,"_27":215},{"_48":201,"_32":202,"_30":203,"_143":159,"_41":42,"_40":204,"_145":64,"_38":205,"_13":68,"_34":35,"_36":206,"_24":25,"_148":-5,"_195":207,"_27":208},{"_48":150,"_32":151,"_30":152,"_143":-5,"_41":42,"_40":153,"_145":25,"_38":198,"_13":68,"_34":21,"_36":155,"_24":25,"_148":-5,"_195":199,"_27":200},{"_48":140,"_32":141,"_30":142,"_143":-5,"_41":42,"_40":144,"_145":64,"_38":194,"_13":68,"_34":35,"_36":147,"_24":25,"_148":-5,"_195":196,"_27":197},["D",1781310494158],"children",[],[141],["D",1781310279784],[],[151],"0f4366d0-d3bb-4884-a5e6-c83013d50af6","valToGh.ts","e988f200-66be-11f1-bfe7-1607ee4eb77e",7,["D",1781310557274],"import { type Connection } from \"../db.ts\";\nimport { ghTokenFor, vtTokenFor } from \"../lib/creds.ts\";\nimport { gh, gitBlobSha, toBase64 } from \"../lib/github.ts\";\nimport { listValFiles, readValFileBytes } from \"../lib/valtown.ts\";\n\n// Diff the val's files against the repo HEAD by computing git blob shas locally;\n// push one commit covering all adds, edits, and deletions. No diff => no commit.\nexport async function pushValToRepo(conn: Connection): Promise {\n const vtToken = vtTokenFor(conn);\n const ghToken = await ghTokenFor(conn);\n const { repo, branch } = conn;\n\n const files = await listValFiles(vtToken, conn.val_id);\n const entries = await Promise.all(\n files.map(async (f) => {\n const bytes = await readValFileBytes(vtToken, conn.val_id, f.path);\n return { path: f.path, bytes, sha: await gitBlobSha(bytes) };\n }),\n );\n\n const ref = await gh(ghToken, `/repos/${repo}/git/ref/heads/${branch}`);\n const headSha: string = ref.object.sha;\n const headCommit = await gh(ghToken, `/repos/${repo}/git/commits/${headSha}`);\n const headTree = await gh(ghToken, `/repos/${repo}/git/trees/${headCommit.tree.sha}?recursive=1`);\n if (headTree.truncated) throw new Error(\"repo tree truncated - cannot diff safely\");\n const repoShas = new Map(\n headTree.tree.filter((t: any) => t.type === \"blob\").map((t: any) => [t.path, t.sha]),\n );\n\n const changed = entries.filter((e) => repoShas.get(e.path) !== e.sha);\n const deleted = [...repoShas.keys()].filter((p) => !entries.some((e) => e.path === p));\n if (changed.length === 0 && deleted.length === 0) {\n return `up to date with ${repo}@${headSha.slice(0, 7)} - no commit`;\n }\n\n for (const e of changed) {\n const blob = await gh(ghToken, `/repos/${repo}/git/blobs`, {\n method: \"POST\",\n body: JSON.stringify({ content: toBase64(e.bytes), encoding: \"base64\" }),\n });\n if (blob.sha !== e.sha) {\n throw new Error(`blob sha mismatch for ${e.path}: ${blob.sha} != ${e.sha}`);\n }\n }\n\n // Full tree, no base_tree: omitted paths are deletions.\n const tree = await gh(ghToken, `/repos/${repo}/git/trees`, {\n method: \"POST\",\n body: JSON.stringify({\n tree: entries.map((e) => ({ path: e.path, mode: \"100644\", type: \"blob\", sha: e.sha })),\n }),\n });\n\n const summary = `githubsync: ${changed.length} changed, ${deleted.length} deleted`;\n const commit = await gh(ghToken, `/repos/${repo}/git/commits`, {\n method: \"POST\",\n body: JSON.stringify({\n message: `${summary}\\n\\nsource: https://www.val.town/x/${conn.val_slug}`,\n tree: tree.sha,\n parents: [headSha],\n }),\n });\n // force:false — a concurrent push 422s here and the next run recovers.\n await gh(ghToken, `/repos/${repo}/git/refs/heads/${branch}`, {\n method: \"PATCH\",\n body: JSON.stringify({ sha: commit.sha, force: false }),\n });\n return `pushed ${commit.sha.slice(0, 7)} to ${repo}@${branch}: ${summary}`;\n}\n",[],[158,202],"194c3ea0-9712-4b89-be22-ccdb5a89e5e2","ghToVal.ts","e2febbea-66be-11f1-9f5d-1607ee4eb77e",["D",1781310546326],"import { type Connection } from \"../db.ts\";\nimport { ghTokenFor, vtTokenFor } from \"../lib/creds.ts\";\nimport { fetchRepoFile, fetchRepoTree } from \"../lib/github.ts\";\nimport { deleteValFile, listValFiles, upsertValFile } from \"../lib/valtown.ts\";\n\nconst SKIP_PREFIXES = [\".github/\"];\nconst shouldSkip = (path: string) => SKIP_PREFIXES.some((p) => path.startsWith(p));\nconst decoder = new TextDecoder(\"utf-8\", { fatal: true });\n\nasync function syncOneFile(\n vtToken: string,\n ghToken: string,\n conn: Connection,\n path: string,\n ref: string,\n): Promise {\n const bytes = await fetchRepoFile(ghToken, conn.repo, path, ref);\n let content: string;\n try {\n content = decoder.decode(bytes); // throws on binary\n } catch {\n return `skipped (binary): ${path}`;\n }\n if (content.length > 80_000) return `skipped (>80k chars, API limit): ${path}`;\n await upsertValFile(vtToken, conn.val_id, path, content);\n return `synced: ${path}`;\n}\n\n// Fold the push payload's commit list in order so the final action per path wins.\nexport async function incrementalSync(conn: Connection, payload: any): Promise {\n const vtToken = vtTokenFor(conn);\n const ghToken = await ghTokenFor(conn);\n const actions = new Map();\n for (const commit of payload.commits) {\n for (const p of [...commit.added, ...commit.modified]) actions.set(p, \"upsert\");\n for (const p of commit.removed) actions.set(p, \"remove\");\n }\n const results: string[] = [];\n for (const [path, action] of actions) {\n if (shouldSkip(path)) {\n results.push(`skipped (rule): ${path}`);\n } else if (action === \"upsert\") {\n results.push(await syncOneFile(vtToken, ghToken, conn, path, payload.after));\n } else {\n await deleteValFile(vtToken, conn.val_id, path);\n results.push(`deleted: ${path}`);\n }\n }\n return results;\n}\n\n// Mirror the whole repo tree into the val, deleting val files not in the repo.\nexport async function fullSync(conn: Connection, ref?: string): Promise {\n const vtToken = vtTokenFor(conn);\n const ghToken = await ghTokenFor(conn);\n const r = ref ?? conn.branch;\n const repoPaths = (await fetchRepoTree(ghToken, conn.repo, r)).filter((p) => !shouldSkip(p));\n const results: string[] = [];\n for (const path of repoPaths) {\n results.push(await syncOneFile(vtToken, ghToken, conn, path, r));\n }\n const repoSet = new Set(repoPaths);\n const valFiles = await listValFiles(vtToken, conn.val_id);\n for (const { path } of valFiles) {\n if (!repoSet.has(path) && !shouldSkip(path)) {\n await deleteValFile(vtToken, conn.val_id, path);\n results.push(`deleted (not in repo): ${path}`);\n }\n }\n return results;\n}\n",[],[158,210],["D",1781310546326],[190,191],[158],"d56bdfeb-afe8-449b-a43b-82291be34b11",["D",1781310572920],[],[44,33],["D",1781310572920],[188],[44],"d7918672-98d4-40bb-9cb1-0abbca6de573","valtown.ts","d6048f50-66be-11f1-8d6e-1607ee4eb77e",4,["D",1781310524554],"const VT_API = \"https://api.val.town\";\n\nasync function vt(\n token: string,\n method: string,\n pathAndQuery: string,\n body?: unknown,\n): Promise {\n return await fetch(`${VT_API}${pathAndQuery}`, {\n method,\n headers: { Authorization: `Bearer ${token}`, \"Content-Type\": \"application/json\" },\n body: body === undefined ? undefined : JSON.stringify(body),\n });\n}\n\nasync function vtJson(token: string, method: string, pathAndQuery: string, body?: unknown) {\n const res = await vt(token, method, pathAndQuery, body);\n if (!res.ok) {\n throw new Error(\n `Val Town ${method} ${pathAndQuery} -> ${res.status}: ${(await res.text()).slice(0, 300)}`,\n );\n }\n return res.json();\n}\n\nexport async function getValId(token: string, slug: string): Promise {\n const [handle, name] = slug.split(\"/\");\n if (!handle || !name) throw new Error(`bad val slug: ${slug} (expected handle/name)`);\n return (await vtJson(token, \"GET\", `/v2/alias/vals/${handle}/${name}`)).id;\n}\n\nexport async function listMyVals(token: string): Promise {\n const slugs: string[] = [];\n for (let offset = 0;; offset += 100) {\n const { data } = await vtJson(token, \"GET\", `/v2/me/vals?limit=100&offset=${offset}`);\n for (const v of data) slugs.push(`${v.author.username}/${v.name}`);\n if (data.length < 100) break;\n }\n return slugs;\n}\n\nexport async function listValFiles(token: string, valId: string): Promise<{ path: string }[]> {\n const files: { path: string; type: string }[] = [];\n for (let offset = 0;; offset += 100) {\n const { data } = await vtJson(\n token,\n \"GET\",\n `/v2/vals/${valId}/files?path=&recursive=true&limit=100&offset=${offset}`,\n );\n files.push(...data);\n if (data.length < 100) break;\n }\n return files.filter((f) => f.type !== \"directory\");\n}\n\nexport async function readValFileBytes(\n token: string,\n valId: string,\n path: string,\n): Promise {\n const res = await vt(token, \"GET\", `/v2/vals/${valId}/files/content?path=${encodeURIComponent(path)}`);\n if (!res.ok) throw new Error(`Val Town read ${path} -> ${res.status}`);\n return new Uint8Array(await res.arrayBuffer());\n}\n\n// PUT updates an existing file; on 404 create it (and parent directories) with POST.\nexport async function upsertValFile(token: string, valId: string, path: string, content: string) {\n const q = `?path=${encodeURIComponent(path)}`;\n const put = await vt(token, \"PUT\", `/v2/vals/${valId}/files${q}`, { content });\n if (put.ok) return;\n if (put.status !== 404) throw new Error(`PUT ${path}: ${put.status} ${await put.text()}`);\n const parts = path.split(\"/\");\n for (let i = 1; i < parts.length; i++) {\n const dir = parts.slice(0, i).join(\"/\");\n await vt(token, \"POST\", `/v2/vals/${valId}/files?path=${encodeURIComponent(dir)}`, {\n type: \"directory\",\n });\n }\n const type = /\\.(ts|tsx|js|jsx)$/.test(path) ? \"script\" : \"file\";\n const post = await vt(token, \"POST\", `/v2/vals/${valId}/files${q}`, { content, type });\n if (!post.ok) throw new Error(`POST ${path}: ${post.status} ${await post.text()}`);\n}\n\nexport async function deleteValFile(token: string, valId: string, path: string) {\n const res = await vt(\n token,\n \"DELETE\",\n `/v2/vals/${valId}/files?path=${encodeURIComponent(path)}&recursive=false`,\n );\n if (!res.ok && res.status !== 404) {\n throw new Error(`DELETE ${path}: ${res.status} ${await res.text()}`);\n }\n}\n",[],[167,227],"3e8cec39-311d-4c87-a4e1-ce28d00c5ab7","github.ts","cc420920-66be-11f1-86c9-1607ee4eb77e",["D",1781310508175],"import { createPrivateKey, createSign } from \"node:crypto\";\n\nconst GH_API = \"https://api.github.com\";\n\nexport async function gh(token: string, path: string, init: RequestInit = {}): Promise {\n const res = await fetch(`${GH_API}${path}`, {\n ...init,\n headers: {\n Authorization: `Bearer ${token}`,\n Accept: \"application/vnd.github+json\",\n \"Content-Type\": \"application/json\",\n \"X-GitHub-Api-Version\": \"2022-11-28\",\n \"User-Agent\": \"githubsync-val\",\n ...(init.headers ?? {}),\n },\n });\n if (!res.ok) {\n throw new Error(\n `GitHub ${init.method ?? \"GET\"} ${path} -> ${res.status}: ${(await res.text()).slice(0, 300)}`,\n );\n }\n return res.status === 204 ? null : res.json();\n}\n\nexport async function fetchRepoFile(\n token: string,\n repo: string,\n path: string,\n ref: string,\n): Promise {\n const encPath = path.split(\"/\").map(encodeURIComponent).join(\"/\");\n const res = await fetch(`${GH_API}/repos/${repo}/contents/${encPath}?ref=${ref}`, {\n headers: {\n Authorization: `Bearer ${token}`,\n Accept: \"application/vnd.github.raw+json\",\n \"User-Agent\": \"githubsync-val\",\n },\n });\n if (!res.ok) throw new Error(`GitHub file ${repo}/${path}@${ref} -> ${res.status}`);\n return new Uint8Array(await res.arrayBuffer());\n}\n\nexport async function fetchRepoTree(token: string, repo: string, ref: string): Promise {\n const tree = await gh(token, `/repos/${repo}/git/trees/${encodeURIComponent(ref)}?recursive=1`);\n if (tree.truncated) throw new Error(\"Repo tree truncated - repo too large for full sync\");\n return tree.tree\n .filter((e: { type: string }) => e.type === \"blob\")\n .map((e: { path: string }) => e.path);\n}\n\nexport async function registerPushWebhook(token: string, repo: string, url: string, secret: string) {\n return await gh(token, `/repos/${repo}/hooks`, {\n method: \"POST\",\n body: JSON.stringify({\n name: \"web\",\n active: true,\n events: [\"push\"],\n config: { url, content_type: \"json\", secret },\n }),\n });\n}\n\n// sha1(\"blob \\0\" + bytes) — git blob sha, computed locally for diffing\nexport async function gitBlobSha(bytes: Uint8Array): Promise {\n const header = new TextEncoder().encode(`blob ${bytes.length}\\0`);\n const buf = new Uint8Array(header.length + bytes.length);\n buf.set(header);\n buf.set(bytes, header.length);\n const digest = await crypto.subtle.digest(\"SHA-1\", buf);\n return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport function toBase64(bytes: Uint8Array): string {\n let bin = \"\";\n for (let i = 0; i < bytes.length; i += 0x8000) {\n bin += String.fromCharCode(...bytes.subarray(i, i + 0x8000));\n }\n return btoa(bin);\n}\n\nfunction b64url(input: string | Uint8Array): string {\n const bytes = typeof input === \"string\" ? new TextEncoder().encode(input) : input;\n let bin = \"\";\n for (const b of bytes) bin += String.fromCharCode(b);\n return btoa(bin).replaceAll(\"+\", \"-\").replaceAll(\"/\", \"_\").replace(/=+$/, \"\");\n}\n\n// GitHub App JWT. The manifest-conversion pem is PKCS#1; node:crypto accepts it as-is.\nexport function appJwt(appId: number | string, pem: string): string {\n const nowSec = Math.floor(Date.now() / 1000);\n const header = b64url(JSON.stringify({ alg: \"RS256\", typ: \"JWT\" }));\n const payload = b64url(JSON.stringify({ iat: nowSec - 60, exp: nowSec + 540, iss: String(appId) }));\n const signer = createSign(\"RSA-SHA256\");\n signer.update(`${header}.${payload}`);\n const sig = signer.sign(createPrivateKey(pem));\n return `${header}.${payload}.${b64url(new Uint8Array(sig))}`;\n}\n\nexport async function installationToken(\n app: { app_id: number; pem: string },\n installationId: number,\n): Promise {\n const jwt = appJwt(app.app_id, app.pem);\n const res = await fetch(`${GH_API}/app/installations/${installationId}/access_tokens`, {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${jwt}`,\n Accept: \"application/vnd.github+json\",\n \"User-Agent\": \"githubsync-val\",\n },\n });\n if (!res.ok) throw new Error(`installation token -> ${res.status}: ${await res.text()}`);\n return (await res.json()).token;\n}\n",[],[167,235],"257cc1a5-d5b2-4f01-9d08-dcb1e23bd659","creds.ts","d8b32ad6-66be-11f1-82b8-1607ee4eb77e",5,["D",1781310529049],"import { type Connection, getApp } from \"../db.ts\";\nimport { installationToken } from \"./github.ts\";\n\n// Secrets stored as \"env:NAME\" resolve from this val's environment at use time,\n// so dev-mode tokens never live in the database.\nexport function resolveSecret(v: string | null | undefined): string | undefined {\n if (!v) return undefined;\n return v.startsWith(\"env:\") ? Deno.env.get(v.slice(4)) : v;\n}\n\nexport function vtTokenFor(conn: Connection): string {\n const t = resolveSecret(conn.vt_token);\n if (!t) throw new Error(`connection ${conn.id}: missing Val Town token`);\n return t;\n}\n\nexport async function ghTokenFor(conn: Connection): Promise {\n const pat = resolveSecret(conn.gh_token);\n if (pat) return pat;\n if (conn.installation_id) {\n const app = await getApp();\n if (!app) throw new Error(\"no GitHub App registered\");\n return await installationToken(app, conn.installation_id);\n }\n throw new Error(`connection ${conn.id}: no GitHub credential`);\n}\n\nexport function devAuthorized(req: Request): boolean {\n const secret = Deno.env.get(\"DEV_SECRET\");\n return !!secret && req.headers.get(\"authorization\") === `Bearer ${secret}`;\n}\n",[],[167,242],["D",1781310508175],[184,185,186],[167],["D",1781310279766],["D",1789509672838],{"_105":104,"_112":108},{"_105":104,"_106":-5,"_107":108,"_18":60,"_109":110,"_111":25},{"_13":94,"_32":95,"_48":42,"_96":49,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":-5,"_102":50,"_103":104},"ctx",{"_87":-5,"_132":290,"_291":292,"_293":294,"_295":25,"_296":25,"_297":25,"_298":64,"_299":-5,"_300":-7,"_301":-7,"_302":68,"_303":25,"_304":25,"_305":-5,"_306":25,"_307":25,"_308":25,"_309":-5},"ENV",{"_261":262,"_263":264,"_265":95,"_266":267,"_268":269,"_270":271,"_272":273,"_274":275,"_276":277,"_278":279,"_280":281,"_282":283,"_284":285,"_286":287,"_288":289},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v8