\n \n \n \n\n",[],[84,190],"65b774de-5aab-11f1-b71e-ee650bb23af1","components","4d37c866-3303-4bf8-af87-1225386568f4",38,["D",1779982761733],[205],[84,199],{"_37":206,"_13":207,"_40":208,"_42":200,"_43":44,"_45":209,"_47":48,"_49":210,"_17":211,"_52":112,"_54":212,"_56":57,"_58":-5,"_95":213,"_18":214},"66f300e2-5ac5-11f1-8fce-ee650bb23af1","App.tsx","65b726f0-5aab-11f1-b71e-ee650bb23af1",147,["D",1779993930732],23,"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useCallback, useEffect, useState } from \"https://esm.sh/react@18.2.0\";\nimport type {\n CreateSecretRequest,\n CreateSecretResponse,\n FetchSecretResponse,\n} from \"../../shared/types.ts\";\nimport {\n decryptData,\n deriveDeleteProof,\n encryptData,\n generatePassphrase,\n} from \"../../shared/crypto.ts\";\n\nconst EXPIRY_OPTIONS: { hours: number; label: string }[] = [\n { hours: 1, label: \"1 hour\" },\n { hours: 24, label: \"1 day\" },\n { hours: 72, label: \"3 days\" },\n { hours: 168, label: \"1 week\" },\n { hours: 720, label: \"30 days\" },\n];\n\nfunction Spinner() {\n return (\n \n \n \n \n );\n}\n\nfunction StepHeading({ n, children }: { n: number; children: React.ReactNode }) {\n return (\n

\n \n {n}\n \n

{children}

\n );\n}\n\nfunction CopyButton({ text }: { text: string }) {\n const [copied, setCopied] = useState(false);\n const handleCopy = useCallback(async () => {\n await navigator.clipboard.writeText(text);\n setCopied(true);\n setTimeout(() => setCopied(false), 2000);\n }, [text]);\n return (\n \n {copied ? \"✓ copied\" : \"copy\"}\n \n );\n}\n\nasync function deleteSecretRequest(\n secretId: string,\n deleteProof: string,\n): Promise {\n const res = await fetch(`/api/secrets/${secretId}`, {\n method: \"DELETE\",\n headers: { \"X-Delete-Proof\": deleteProof },\n });\n if (!res.ok) throw new Error(await res.text());\n}\n\nfunction CreateView() {\n const [secret, setSecret] = useState(\"\");\n const [passphrase, setPassphrase] = useState(() => generatePassphrase());\n const [expiresInHours, setExpiresInHours] = useState(168);\n const [loading, setLoading] = useState(false);\n const [result, setResult] = useState<\n | { url: string; passphrase: string; secretId: string; deleteProof: string }\n | null\n >(null);\n const [deleting, setDeleting] = useState(false);\n const [deleted, setDeleted] = useState(false);\n const [error, setError] = useState(null);\n const [isDragging, setIsDragging] = useState(false);\n\n useEffect(() => {\n if (result || deleted) return;\n let depth = 0;\n const onDragEnter = (e: DragEvent) => {\n if (!e.dataTransfer?.types.includes(\"Files\")) return;\n e.preventDefault();\n depth++;\n setIsDragging(true);\n };\n const onDragOver = (e: DragEvent) => {\n if (e.dataTransfer?.types.includes(\"Files\")) e.preventDefault();\n };\n const onDragLeave = () => {\n depth = Math.max(0, depth - 1);\n if (depth === 0) setIsDragging(false);\n };\n const onDrop = (e: DragEvent) => {\n const file = e.dataTransfer?.files[0];\n if (!file) return;\n e.preventDefault();\n depth = 0;\n setIsDragging(false);\n const reader = new FileReader();\n reader.onload = () => setSecret(String(reader.result ?? \"\"));\n reader.onerror = () => setError(\"Couldn't read that file.\");\n reader.readAsText(file);\n };\n document.addEventListener(\"dragenter\", onDragEnter);\n document.addEventListener(\"dragover\", onDragOver);\n document.addEventListener(\"dragleave\", onDragLeave);\n document.addEventListener(\"drop\", onDrop);\n return () => {\n document.removeEventListener(\"dragenter\", onDragEnter);\n document.removeEventListener(\"dragover\", onDragOver);\n document.removeEventListener(\"dragleave\", onDragLeave);\n document.removeEventListener(\"drop\", onDrop);\n };\n }, [result, deleted]);\n\n const handleSubmit = useCallback(async () => {\n if (!secret.trim()) {\n setError(\"Please enter a secret to share.\");\n return;\n }\n if (!passphrase.trim()) {\n setError(\"Please enter or generate a passphrase.\");\n return;\n }\n setLoading(true);\n setError(null);\n try {\n const { encrypted, iv, salt } = await encryptData(secret, passphrase);\n const deleteProof = await deriveDeleteProof(passphrase, salt);\n const body: CreateSecretRequest = {\n encrypted_data: encrypted,\n iv,\n salt,\n delete_proof: deleteProof,\n expires_in_hours: expiresInHours,\n };\n const res = await fetch(\"/api/secrets\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n if (!res.ok) throw new Error(await res.text());\n const data: CreateSecretResponse = await res.json();\n const url = `${window.location.origin}/s/${data.id}`;\n setResult({ url, passphrase, secretId: data.id, deleteProof });\n } catch (e: any) {\n setError(e.message || \"Something went wrong\");\n } finally {\n setLoading(false);\n }\n }, [secret, passphrase, expiresInHours]);\n\n const handleDelete = useCallback(async () => {\n if (!result) return;\n if (!confirm(\"Are you sure? This secret will be permanently deleted.\")) {\n return;\n }\n setDeleting(true);\n setError(null);\n try {\n await deleteSecretRequest(result.secretId, result.deleteProof);\n setDeleted(true);\n } catch (e: any) {\n setError(e.message || \"Failed to delete\");\n } finally {\n setDeleting(false);\n }\n }, [result]);\n\n if (deleted) {\n return (\n

\n Secret deleted. It has been permanently destroyed.\n

\n {\n setResult(null);\n setDeleted(false);\n setSecret(\"\");\n setPassphrase(generatePassphrase());\n }}\n className=\"w-full py-2 border border-gray-400 text-gray-800 hover:bg-gray-50 rounded transition-colors\"\n >\n Create a new secret\n \n

\n );\n }\n\n if (result) {\n return (\n

\n Encrypted. Share the link and passphrase via{\" \"}\n different channels.\n

\n Link\n

\n \n {result.url}\n \n \n

\n Passphrase\n

\n \n {result.passphrase}\n \n \n

\n {error && (\n

{error}

\n )}\n

\n {\n setResult(null);\n setSecret(\"\");\n setPassphrase(generatePassphrase());\n }}\n className=\"flex-1 py-2 border border-gray-400 hover:bg-gray-50 rounded transition-colors\"\n >\n Create another\n \n \n {deleting && }\n {deleting ? \"Deleting…\" : \"Delete\"}\n \n

\n );\n }\n\n return (\n

\n {isDragging && (\n

\n Drop file to load its contents\n

\n )}\n

\n Your secret\n setSecret(e.target.value)}\n placeholder=\"Enter secret text, or drag and drop a file…\"\n rows={4}\n className=\"w-full border border-gray-300 rounded p-3 font-mono text-sm placeholder-gray-400 focus:outline-none focus:border-gray-700 resize-none\"\n />\n

\n\n

\n Encryption passphrase\n

\n setPassphrase(e.target.value)}\n className=\"flex-1 border border-gray-300 rounded p-3 font-mono text-sm focus:outline-none focus:border-gray-700\"\n />\n setPassphrase(generatePassphrase())}\n className=\"px-3 py-2 border border-gray-400 hover:bg-gray-50 rounded text-sm transition-colors whitespace-nowrap\"\n >\n regenerate\n \n

\n\n

\n Expires in\n

\n {EXPIRY_OPTIONS.map(({ hours, label }) => (\n setExpiresInHours(hours)}\n className={\n \"px-3 py-1 border rounded text-sm transition-colors \" +\n (expiresInHours === hours\n ? \"border-gray-700 bg-gray-100 text-gray-900\"\n : \"border-gray-300 text-gray-700 hover:bg-gray-50\")\n }\n >\n {label}\n \n ))}\n

\n\n {error &&

{error}

}\n\n \n {loading && }\n {loading ? \"Encrypting…\" : \"Encrypt & create link\"}\n \n

\n );\n}\n\nfunction RevealView({ secretId }: { secretId: string }) {\n const [passphrase, setPassphrase] = useState(\"\");\n const [decrypted, setDecrypted] = useState<\n { plaintext: string; salt: string; passphrase: string } | null\n >(null);\n const [loading, setLoading] = useState(false);\n const [error, setError] = useState(null);\n const [notFound, setNotFound] = useState(false);\n const [deleting, setDeleting] = useState(false);\n const [deleted, setDeleted] = useState(false);\n\n const handleDecrypt = useCallback(async () => {\n if (!passphrase.trim()) {\n setError(\"Please enter the passphrase.\");\n return;\n }\n setLoading(true);\n setError(null);\n try {\n const res = await fetch(`/api/secrets/${secretId}`);\n if (res.status === 404) {\n setNotFound(true);\n return;\n }\n if (!res.ok) throw new Error(await res.text());\n const data: FetchSecretResponse = await res.json();\n const plaintext = await decryptData(\n data.encrypted_data,\n data.iv,\n data.salt,\n passphrase,\n );\n setDecrypted({ plaintext, salt: data.salt, passphrase });\n } catch (e: any) {\n if (e.name === \"OperationError\") {\n setError(\"Wrong passphrase. Please try again.\");\n } else {\n setError(e.message || \"Something went wrong\");\n }\n } finally {\n setLoading(false);\n }\n }, [secretId, passphrase]);\n\n const handleDelete = useCallback(async () => {\n if (!decrypted) return;\n if (!confirm(\"Are you sure? This secret will be permanently deleted.\")) {\n return;\n }\n setDeleting(true);\n setError(null);\n try {\n const proof = await deriveDeleteProof(\n decrypted.passphrase,\n decrypted.salt,\n );\n await deleteSecretRequest(secretId, proof);\n setDeleted(true);\n } catch (e: any) {\n setError(e.message || \"Failed to delete\");\n } finally {\n setDeleting(false);\n }\n }, [decrypted, secretId]);\n\n if (deleted) {\n return (\n

\n Secret deleted. It has been permanently destroyed.\n

\n \n Create a new secret\n \n

\n );\n }\n\n if (notFound) {\n return (\n

\n Secret not found. It has expired or been deleted.\n

\n \n Create a new secret\n \n

\n );\n }\n\n if (decrypted) {\n return (\n

Decrypted secret

\n \n

\n            {decrypted.plaintext}\n

\n Anyone with the passphrase can delete this secret.\n

\n {error &&

{error}

}\n

\n \n Create a new secret\n \n \n {deleting && }\n {deleting ? \"Deleting…\" : \"Delete\"}\n \n

\n );\n }\n\n return (\n

\n Someone sent you a secret. Enter the passphrase to decrypt it.\n

\n Passphrase\n setPassphrase(e.target.value)}\n onKeyDown={(e) => e.key === \"Enter\" && handleDecrypt()}\n placeholder=\"Enter the passphrase…\"\n className=\"w-full border border-gray-300 rounded p-3 font-mono text-sm placeholder-gray-400 focus:outline-none focus:border-gray-700\"\n autoFocus\n />\n

\n {error &&

{error}

}\n \n {loading && }\n {loading ? \"Decrypting…\" : \"Decrypt secret\"}\n \n

\n );\n}\n\nexport function App({ secretId }: { secretId?: string }) {\n return (\n

Secret Share

\n End-to-end encrypted sharing for passwords, API keys, and sensitive text\n

\n {secretId ? : }\n

\n \n

\n );\n}\n",[],[84,199,207],"61af4568-198f-11f1-93ed-42dde27851f2",["D",1772823903506],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","E2E encrypted secret sharing with expiring links","imageUrl","userId","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","e81e7335-6d4c-4764-a902-d0962bbfa9f7","tursoName","61af4568198f11f193ed42dde27851f2","tursoHostname","61af4568198f11f193ed42dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789515657103],"pinned",3,"userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_272":268},"org",{"_11":12,"_266":-5,"_267":268,"_225":226,"_269":270,"_271":57},"branch",{"_17":46,"_13":16,"_37":44,"_258":215,"_259":-5,"_260":-5,"_261":-5,"_262":-5,"_263":-5,"_264":14,"_265":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://images.clerk.dev/uploaded/img_2PqHa2Gsy93xQrjh2w78Xu0cChW.jpeg","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_37":215,"_13":14,"_49":358,"_217":-5,"_218":57,"_219":220,"_221":220,"_222":223,"_224":-5,"_225":226,"_227":41,"_228":48,"_229":-5,"_230":-5,"_231":72,"_232":233,"_234":235,"_236":237,"_238":359,"_240":241,"_242":243,"_244":243,"_245":246,"_247":246,"_248":246,"_249":243,"_250":243,"_251":360,"_253":361,"_255":362,"_257":57},[310,315,321,324,325],"files",[310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325],"counts",{"_301":74,"_302":72,"_303":72,"_31":304,"_305":306},[291,292,293,294,295],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_37":83,"_13":84,"_40":85,"_42":-5,"_43":44,"_45":86,"_47":48,"_49":87,"_17":74,"_52":75,"_54":-5,"_56":57,"_58":-5,"_18":300},{"_37":77,"_13":78,"_40":79,"_42":-5,"_43":44,"_45":80,"_47":48,"_49":81,"_17":74,"_52":75,"_54":-5,"_56":57,"_58":-5,"_18":299},{"_37":69,"_13":70,"_40":71,"_42":-5,"_43":44,"_45":72,"_47":48,"_49":73,"_17":74,"_52":75,"_54":-5,"_56":57,"_58":-5,"_18":298},{"_37":61,"_13":62,"_40":63,"_42":-5,"_43":44,"_45":64,"_47":48,"_49":65,"_17":66,"_52":24,"_54":67,"_56":57,"_58":-5,"_18":297},{"_37":38,"_13":39,"_40":41,"_42":-5,"_43":44,"_45":46,"_47":48,"_49":50,"_17":51,"_52":53,"_54":55,"_56":57,"_58":59,"_18":296},[39],[62],[70],[78],[84],"pulls","branches","forks",{"_307":74,"_309":74},"connections",{"_307":74,"_308":74},"count","unfilledCount","emptyCount",{"_37":83,"_13":84,"_40":85,"_42":-5,"_43":44,"_45":86,"_47":48,"_49":175,"_17":74,"_52":75,"_54":-5,"_56":57,"_58":-5,"_95":356,"_18":357},{"_37":198,"_13":199,"_40":200,"_42":85,"_43":44,"_45":201,"_47":48,"_49":202,"_17":74,"_52":75,"_54":-5,"_56":57,"_58":-5,"_95":354,"_18":355},{"_37":206,"_13":207,"_40":208,"_42":200,"_43":44,"_45":209,"_47":48,"_49":210,"_17":211,"_52":112,"_54":212,"_56":57,"_58":-5,"_95":352,"_18":353},{"_37":189,"_13":190,"_40":191,"_42":85,"_43":44,"_45":192,"_47":48,"_49":193,"_17":194,"_52":24,"_54":195,"_56":57,"_58":-5,"_95":350,"_18":351},{"_37":181,"_13":182,"_40":183,"_42":85,"_43":44,"_45":184,"_47":48,"_49":185,"_17":74,"_52":112,"_54":186,"_56":57,"_58":-5,"_95":348,"_18":349},{"_37":77,"_13":78,"_40":79,"_42":-5,"_43":44,"_45":80,"_47":48,"_49":124,"_17":74,"_52":75,"_54":-5,"_56":57,"_58":-5,"_95":346,"_18":347},{"_37":166,"_13":167,"_40":168,"_42":79,"_43":44,"_45":169,"_47":48,"_49":170,"_17":171,"_52":112,"_54":172,"_56":57,"_58":-5,"_95":344,"_18":345},{"_37":157,"_13":158,"_40":159,"_42":79,"_43":44,"_45":160,"_47":48,"_49":161,"_17":162,"_52":112,"_54":163,"_56":57,"_58":-5,"_95":342,"_18":343},{"_37":148,"_13":149,"_40":150,"_42":79,"_43":44,"_45":151,"_47":48,"_49":152,"_17":153,"_52":112,"_54":154,"_56":57,"_58":-5,"_95":340,"_18":341},{"_37":140,"_13":141,"_40":142,"_42":79,"_43":44,"_45":143,"_47":48,"_49":144,"_17":74,"_52":112,"_54":145,"_56":57,"_58":-5,"_95":338,"_18":339},{"_37":132,"_13":133,"_40":134,"_42":79,"_43":44,"_45":135,"_47":48,"_49":136,"_17":72,"_52":112,"_54":137,"_56":57,"_58":-5,"_95":336,"_18":337},{"_37":69,"_13":70,"_40":71,"_42":-5,"_43":44,"_45":72,"_47":48,"_49":101,"_17":74,"_52":75,"_54":-5,"_56":57,"_58":-5,"_95":334,"_18":335},{"_37":116,"_13":117,"_40":118,"_42":71,"_43":44,"_45":119,"_47":48,"_49":120,"_17":111,"_52":112,"_54":121,"_56":57,"_58":-5,"_95":332,"_18":333},{"_37":106,"_13":107,"_40":108,"_42":71,"_43":44,"_45":109,"_47":48,"_49":110,"_17":111,"_52":112,"_54":113,"_56":57,"_58":-5,"_95":330,"_18":331},{"_37":61,"_13":62,"_40":63,"_42":-5,"_43":44,"_45":64,"_47":48,"_49":98,"_17":66,"_52":24,"_54":67,"_56":57,"_58":-5,"_95":328,"_18":329},{"_37":38,"_13":39,"_40":41,"_42":-5,"_43":44,"_45":46,"_47":48,"_49":94,"_17":51,"_52":53,"_54":55,"_56":57,"_58":59,"_95":326,"_18":327},[],[39],[],[62],[],[70,107],[],[70,117],[322,323],[70],[],[78,133],[],[78,141],[],[78,149],[],[78,158],[],[78,167],[316,317,318,319,320],[78],[],[84,182],[],[84,190],[],[84,199,207],[312],[84,199],[311,313,314],[84],["D",1772823903506],["D",1789515657103],{"_11":12,"_272":268},{"_11":12,"_266":-5,"_267":268,"_225":226,"_269":270,"_271":57},{"_17":46,"_13":16,"_37":44,"_258":215,"_259":-5,"_260":-5,"_261":-5,"_262":-5,"_263":-5,"_264":14,"_265":12},"ctx",{"_251":-5,"_288":396,"_397":398,"_399":400,"_401":57,"_402":57,"_403":57,"_404":48,"_405":-5,"_406":-7,"_407":-7,"_408":74,"_409":57,"_410":57,"_411":-5,"_412":57,"_413":57,"_414":57,"_415":-5},"ENV",{"_367":368,"_369":370,"_371":16,"_372":373,"_374":375,"_376":377,"_378":379,"_380":381,"_382":383,"_384":385,"_386":387,"_388":389,"_390":391,"_392":393,"_394":395},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Code