\n \n \n \n\n",[],[174,192],"65b774de-5aab-11f1-b71e-ee650bb23af1","components","4d37c866-3303-4bf8-af87-1225386568f4",38,["D",1779982761733],[207],[174,201],{"_38":208,"_13":209,"_41":210,"_43":202,"_45":46,"_47":211,"_49":50,"_51":212,"_17":213,"_54":55,"_56":214,"_58":59,"_60":-5,"_113":215,"_18":216},"66f300e2-5ac5-11f1-8fce-ee650bb23af1","App.tsx","65b726f0-5aab-11f1-b71e-ee650bb23af1",147,["D",1779993930732],23,"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useCallback, useEffect, useState } from \"https://esm.sh/react@18.2.0\";\nimport type {\n CreateSecretRequest,\n CreateSecretResponse,\n FetchSecretResponse,\n} from \"../../shared/types.ts\";\nimport {\n decryptData,\n deriveDeleteProof,\n encryptData,\n generatePassphrase,\n} from \"../../shared/crypto.ts\";\n\nconst EXPIRY_OPTIONS: { hours: number; label: string }[] = [\n { hours: 1, label: \"1 hour\" },\n { hours: 24, label: \"1 day\" },\n { hours: 72, label: \"3 days\" },\n { hours: 168, label: \"1 week\" },\n { hours: 720, label: \"30 days\" },\n];\n\nfunction Spinner() {\n return (\n \n \n \n \n );\n}\n\nfunction StepHeading({ n, children }: { n: number; children: React.ReactNode }) {\n return (\n

\n \n {n}\n \n

{children}

\n );\n}\n\nfunction CopyButton({ text }: { text: string }) {\n const [copied, setCopied] = useState(false);\n const handleCopy = useCallback(async () => {\n await navigator.clipboard.writeText(text);\n setCopied(true);\n setTimeout(() => setCopied(false), 2000);\n }, [text]);\n return (\n \n {copied ? \"✓ copied\" : \"copy\"}\n \n );\n}\n\nasync function deleteSecretRequest(\n secretId: string,\n deleteProof: string,\n): Promise {\n const res = await fetch(`/api/secrets/${secretId}`, {\n method: \"DELETE\",\n headers: { \"X-Delete-Proof\": deleteProof },\n });\n if (!res.ok) throw new Error(await res.text());\n}\n\nfunction CreateView() {\n const [secret, setSecret] = useState(\"\");\n const [passphrase, setPassphrase] = useState(() => generatePassphrase());\n const [expiresInHours, setExpiresInHours] = useState(168);\n const [loading, setLoading] = useState(false);\n const [result, setResult] = useState<\n | { url: string; passphrase: string; secretId: string; deleteProof: string }\n | null\n >(null);\n const [deleting, setDeleting] = useState(false);\n const [deleted, setDeleted] = useState(false);\n const [error, setError] = useState(null);\n const [isDragging, setIsDragging] = useState(false);\n\n useEffect(() => {\n if (result || deleted) return;\n let depth = 0;\n const onDragEnter = (e: DragEvent) => {\n if (!e.dataTransfer?.types.includes(\"Files\")) return;\n e.preventDefault();\n depth++;\n setIsDragging(true);\n };\n const onDragOver = (e: DragEvent) => {\n if (e.dataTransfer?.types.includes(\"Files\")) e.preventDefault();\n };\n const onDragLeave = () => {\n depth = Math.max(0, depth - 1);\n if (depth === 0) setIsDragging(false);\n };\n const onDrop = (e: DragEvent) => {\n const file = e.dataTransfer?.files[0];\n if (!file) return;\n e.preventDefault();\n depth = 0;\n setIsDragging(false);\n const reader = new FileReader();\n reader.onload = () => setSecret(String(reader.result ?? \"\"));\n reader.onerror = () => setError(\"Couldn't read that file.\");\n reader.readAsText(file);\n };\n document.addEventListener(\"dragenter\", onDragEnter);\n document.addEventListener(\"dragover\", onDragOver);\n document.addEventListener(\"dragleave\", onDragLeave);\n document.addEventListener(\"drop\", onDrop);\n return () => {\n document.removeEventListener(\"dragenter\", onDragEnter);\n document.removeEventListener(\"dragover\", onDragOver);\n document.removeEventListener(\"dragleave\", onDragLeave);\n document.removeEventListener(\"drop\", onDrop);\n };\n }, [result, deleted]);\n\n const handleSubmit = useCallback(async () => {\n if (!secret.trim()) {\n setError(\"Please enter a secret to share.\");\n return;\n }\n if (!passphrase.trim()) {\n setError(\"Please enter or generate a passphrase.\");\n return;\n }\n setLoading(true);\n setError(null);\n try {\n const { encrypted, iv, salt } = await encryptData(secret, passphrase);\n const deleteProof = await deriveDeleteProof(passphrase, salt);\n const body: CreateSecretRequest = {\n encrypted_data: encrypted,\n iv,\n salt,\n delete_proof: deleteProof,\n expires_in_hours: expiresInHours,\n };\n const res = await fetch(\"/api/secrets\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n if (!res.ok) throw new Error(await res.text());\n const data: CreateSecretResponse = await res.json();\n const url = `${window.location.origin}/s/${data.id}`;\n setResult({ url, passphrase, secretId: data.id, deleteProof });\n } catch (e: any) {\n setError(e.message || \"Something went wrong\");\n } finally {\n setLoading(false);\n }\n }, [secret, passphrase, expiresInHours]);\n\n const handleDelete = useCallback(async () => {\n if (!result) return;\n if (!confirm(\"Are you sure? This secret will be permanently deleted.\")) {\n return;\n }\n setDeleting(true);\n setError(null);\n try {\n await deleteSecretRequest(result.secretId, result.deleteProof);\n setDeleted(true);\n } catch (e: any) {\n setError(e.message || \"Failed to delete\");\n } finally {\n setDeleting(false);\n }\n }, [result]);\n\n if (deleted) {\n return (\n

\n Secret deleted. It has been permanently destroyed.\n

\n {\n setResult(null);\n setDeleted(false);\n setSecret(\"\");\n setPassphrase(generatePassphrase());\n }}\n className=\"w-full py-2 border border-gray-400 text-gray-800 hover:bg-gray-50 rounded transition-colors\"\n >\n Create a new secret\n \n

\n );\n }\n\n if (result) {\n return (\n

\n Encrypted. Share the link and passphrase via{\" \"}\n different channels.\n

\n Link\n

\n \n {result.url}\n \n \n

\n Passphrase\n

\n \n {result.passphrase}\n \n \n

\n {error && (\n

{error}

\n )}\n

\n {\n setResult(null);\n setSecret(\"\");\n setPassphrase(generatePassphrase());\n }}\n className=\"flex-1 py-2 border border-gray-400 hover:bg-gray-50 rounded transition-colors\"\n >\n Create another\n \n \n {deleting && }\n {deleting ? \"Deleting…\" : \"Delete\"}\n \n

\n );\n }\n\n return (\n

\n {isDragging && (\n

\n Drop file to load its contents\n

\n )}\n

\n Your secret\n setSecret(e.target.value)}\n placeholder=\"Enter secret text, or drag and drop a file…\"\n rows={4}\n className=\"w-full border border-gray-300 rounded p-3 font-mono text-sm placeholder-gray-400 focus:outline-none focus:border-gray-700 resize-none\"\n />\n

\n\n

\n Encryption passphrase\n

\n setPassphrase(e.target.value)}\n className=\"flex-1 border border-gray-300 rounded p-3 font-mono text-sm focus:outline-none focus:border-gray-700\"\n />\n setPassphrase(generatePassphrase())}\n className=\"px-3 py-2 border border-gray-400 hover:bg-gray-50 rounded text-sm transition-colors whitespace-nowrap\"\n >\n regenerate\n \n

\n\n

\n Expires in\n

\n {EXPIRY_OPTIONS.map(({ hours, label }) => (\n setExpiresInHours(hours)}\n className={\n \"px-3 py-1 border rounded text-sm transition-colors \" +\n (expiresInHours === hours\n ? \"border-gray-700 bg-gray-100 text-gray-900\"\n : \"border-gray-300 text-gray-700 hover:bg-gray-50\")\n }\n >\n {label}\n \n ))}\n

\n\n {error &&

{error}

}\n\n \n {loading && }\n {loading ? \"Encrypting…\" : \"Encrypt & create link\"}\n \n

\n );\n}\n\nfunction RevealView({ secretId }: { secretId: string }) {\n const [passphrase, setPassphrase] = useState(\"\");\n const [decrypted, setDecrypted] = useState<\n { plaintext: string; salt: string; passphrase: string } | null\n >(null);\n const [loading, setLoading] = useState(false);\n const [error, setError] = useState(null);\n const [notFound, setNotFound] = useState(false);\n const [deleting, setDeleting] = useState(false);\n const [deleted, setDeleted] = useState(false);\n\n const handleDecrypt = useCallback(async () => {\n if (!passphrase.trim()) {\n setError(\"Please enter the passphrase.\");\n return;\n }\n setLoading(true);\n setError(null);\n try {\n const res = await fetch(`/api/secrets/${secretId}`);\n if (res.status === 404) {\n setNotFound(true);\n return;\n }\n if (!res.ok) throw new Error(await res.text());\n const data: FetchSecretResponse = await res.json();\n const plaintext = await decryptData(\n data.encrypted_data,\n data.iv,\n data.salt,\n passphrase,\n );\n setDecrypted({ plaintext, salt: data.salt, passphrase });\n } catch (e: any) {\n if (e.name === \"OperationError\") {\n setError(\"Wrong passphrase. Please try again.\");\n } else {\n setError(e.message || \"Something went wrong\");\n }\n } finally {\n setLoading(false);\n }\n }, [secretId, passphrase]);\n\n const handleDelete = useCallback(async () => {\n if (!decrypted) return;\n if (!confirm(\"Are you sure? This secret will be permanently deleted.\")) {\n return;\n }\n setDeleting(true);\n setError(null);\n try {\n const proof = await deriveDeleteProof(\n decrypted.passphrase,\n decrypted.salt,\n );\n await deleteSecretRequest(secretId, proof);\n setDeleted(true);\n } catch (e: any) {\n setError(e.message || \"Failed to delete\");\n } finally {\n setDeleting(false);\n }\n }, [decrypted, secretId]);\n\n if (deleted) {\n return (\n

\n Secret deleted. It has been permanently destroyed.\n

\n \n Create a new secret\n \n

\n );\n }\n\n if (notFound) {\n return (\n

\n Secret not found. It has expired or been deleted.\n

\n \n Create a new secret\n \n

\n );\n }\n\n if (decrypted) {\n return (\n

Decrypted secret

\n \n

\n            {decrypted.plaintext}\n

\n Anyone with the passphrase can delete this secret.\n

\n {error &&

{error}

}\n

\n \n Create a new secret\n \n \n {deleting && }\n {deleting ? \"Deleting…\" : \"Delete\"}\n \n

\n );\n }\n\n return (\n

\n Someone sent you a secret. Enter the passphrase to decrypt it.\n

\n Passphrase\n setPassphrase(e.target.value)}\n onKeyDown={(e) => e.key === \"Enter\" && handleDecrypt()}\n placeholder=\"Enter the passphrase…\"\n className=\"w-full border border-gray-300 rounded p-3 font-mono text-sm placeholder-gray-400 focus:outline-none focus:border-gray-700\"\n autoFocus\n />\n

\n {error &&

{error}

}\n \n {loading && }\n {loading ? \"Decrypting…\" : \"Decrypt secret\"}\n \n

\n );\n}\n\nexport function App({ secretId }: { secretId?: string }) {\n return (\n

Secret Share

\n End-to-end encrypted sharing for passwords, API keys, and sensitive text\n

\n {secretId ? : }\n

\n \n

\n );\n}\n",[],[174,201,209],"61af4568-198f-11f1-93ed-42dde27851f2",["D",1772823903506],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","E2E encrypted secret sharing with expiring links","imageUrl","userId","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","e81e7335-6d4c-4764-a902-d0962bbfa9f7","tursoName","61af4568198f11f193ed42dde27851f2","tursoHostname","61af4568198f11f193ed42dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789515657103],"pinned",3,"userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_274":270},"org",{"_11":12,"_268":-5,"_269":270,"_227":228,"_271":272,"_273":59},"branch",{"_17":107,"_13":16,"_38":46,"_260":217,"_261":-5,"_262":-5,"_263":-5,"_264":-5,"_265":-5,"_266":14,"_267":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://images.clerk.dev/uploaded/img_2PqHa2Gsy93xQrjh2w78Xu0cChW.jpeg","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_38":217,"_13":14,"_51":363,"_219":-5,"_220":59,"_221":222,"_223":222,"_224":225,"_226":-5,"_227":228,"_229":106,"_230":50,"_231":-5,"_232":-5,"_233":53,"_234":235,"_236":237,"_238":239,"_240":364,"_242":243,"_244":245,"_246":245,"_247":248,"_249":248,"_250":248,"_251":245,"_252":245,"_253":365,"_255":366,"_257":367,"_259":59},[315,320,326,329,330],"files",[315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330],"counts",{"_306":67,"_307":53,"_308":53,"_32":309,"_310":311},[296,297,298,299,300],{"_38":94,"_45":46,"_41":44,"_13":19,"_56":-5,"_54":95,"_17":67,"_43":-5,"_51":294,"_47":97,"_60":-5,"_18":295},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1772824014091],[19],{"_38":86,"_13":87,"_41":88,"_43":44,"_45":46,"_47":89,"_49":50,"_51":90,"_17":91,"_54":55,"_56":92,"_58":59,"_60":-5,"_18":305},{"_38":78,"_13":79,"_41":80,"_43":44,"_45":46,"_47":81,"_49":50,"_51":82,"_17":83,"_54":55,"_56":84,"_58":59,"_60":-5,"_18":304},{"_38":70,"_13":71,"_41":72,"_43":44,"_45":46,"_47":73,"_49":50,"_51":74,"_17":75,"_54":55,"_56":76,"_58":59,"_60":-5,"_18":303},{"_38":62,"_13":63,"_41":64,"_43":44,"_45":46,"_47":65,"_49":50,"_51":66,"_17":67,"_54":55,"_56":68,"_58":59,"_60":-5,"_18":302},{"_38":39,"_13":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_17":53,"_54":55,"_56":57,"_58":59,"_60":-5,"_18":301},[19,40],[19,63],[19,71],[19,79],[19,87],"pulls","branches","forks",{"_312":67,"_314":67},"connections",{"_312":67,"_313":67},"count","unfilledCount","emptyCount",{"_38":173,"_13":174,"_41":175,"_43":-5,"_45":46,"_47":176,"_49":50,"_51":177,"_17":67,"_54":95,"_56":-5,"_58":59,"_60":-5,"_113":361,"_18":362},{"_38":200,"_13":201,"_41":202,"_43":175,"_45":46,"_47":203,"_49":50,"_51":204,"_17":67,"_54":95,"_56":-5,"_58":59,"_60":-5,"_113":359,"_18":360},{"_38":208,"_13":209,"_41":210,"_43":202,"_45":46,"_47":211,"_49":50,"_51":212,"_17":213,"_54":55,"_56":214,"_58":59,"_60":-5,"_113":357,"_18":358},{"_38":191,"_13":192,"_41":193,"_43":175,"_45":46,"_47":194,"_49":50,"_51":195,"_17":196,"_54":24,"_56":197,"_58":59,"_60":-5,"_113":355,"_18":356},{"_38":183,"_13":184,"_41":185,"_43":175,"_45":46,"_47":186,"_49":50,"_51":187,"_17":67,"_54":55,"_56":188,"_58":59,"_60":-5,"_113":353,"_18":354},{"_38":94,"_13":19,"_41":44,"_43":-5,"_45":46,"_47":97,"_49":50,"_51":150,"_17":67,"_54":95,"_56":-5,"_58":59,"_60":-5,"_113":351,"_18":352},{"_38":86,"_13":87,"_41":88,"_43":44,"_45":46,"_47":89,"_49":50,"_51":170,"_17":91,"_54":55,"_56":92,"_58":59,"_60":-5,"_113":349,"_18":350},{"_38":78,"_13":79,"_41":80,"_43":44,"_45":46,"_47":81,"_49":50,"_51":167,"_17":83,"_54":55,"_56":84,"_58":59,"_60":-5,"_113":347,"_18":348},{"_38":70,"_13":71,"_41":72,"_43":44,"_45":46,"_47":73,"_49":50,"_51":164,"_17":75,"_54":55,"_56":76,"_58":59,"_60":-5,"_113":345,"_18":346},{"_38":62,"_13":63,"_41":64,"_43":44,"_45":46,"_47":65,"_49":50,"_51":161,"_17":67,"_54":55,"_56":68,"_58":59,"_60":-5,"_113":343,"_18":344},{"_38":39,"_13":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":158,"_17":53,"_54":55,"_56":57,"_58":59,"_60":-5,"_113":341,"_18":342},{"_38":125,"_13":126,"_41":127,"_43":-5,"_45":46,"_47":53,"_49":50,"_51":128,"_17":67,"_54":95,"_56":-5,"_58":59,"_60":-5,"_113":339,"_18":340},{"_38":142,"_13":143,"_41":144,"_43":127,"_45":46,"_47":145,"_49":50,"_51":146,"_17":138,"_54":55,"_56":147,"_58":59,"_60":-5,"_113":337,"_18":338},{"_38":133,"_13":134,"_41":135,"_43":127,"_45":46,"_47":136,"_49":50,"_51":137,"_17":138,"_54":55,"_56":139,"_58":59,"_60":-5,"_113":335,"_18":336},{"_38":116,"_13":117,"_41":118,"_43":-5,"_45":46,"_47":119,"_49":50,"_51":120,"_17":121,"_54":24,"_56":122,"_58":59,"_60":-5,"_113":333,"_18":334},{"_38":104,"_13":105,"_41":106,"_43":-5,"_45":46,"_47":107,"_49":50,"_51":108,"_17":109,"_54":110,"_56":111,"_58":59,"_60":112,"_113":331,"_18":332},[],[105],[],[117],[],[126,134],[],[126,143],[327,328],[126],[],[19,40],[],[19,63],[],[19,71],[],[19,79],[],[19,87],[321,322,323,324,325],[19],[],[174,184],[],[174,192],[],[174,201,209],[317],[174,201],[316,318,319],[174],["D",1772823903506],["D",1789515657103],{"_11":12,"_274":270},{"_11":12,"_268":-5,"_269":270,"_227":228,"_271":272,"_273":59},{"_17":107,"_13":16,"_38":46,"_260":217,"_261":-5,"_262":-5,"_263":-5,"_264":-5,"_265":-5,"_266":14,"_267":12},"ctx",{"_253":-5,"_291":401,"_402":403,"_404":405,"_406":59,"_407":59,"_408":59,"_409":50,"_410":-5,"_411":-7,"_412":-7,"_413":67,"_414":59,"_415":59,"_416":-5,"_417":59,"_418":59,"_419":59,"_420":-5},"ENV",{"_372":373,"_374":375,"_376":16,"_377":378,"_379":380,"_381":382,"_383":384,"_385":386,"_387":388,"_389":390,"_391":392,"_393":394,"_395":396,"_397":398,"_399":400},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]