[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_357":358,"_359":360},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_269":-5,"_20":270,"_22":271,"_272":273,"_274":275,"_26":276,"_24":277,"_278":-5,"_279":-5,"_280":57,"_281":282,"_283":48,"_284":-5,"_285":-5,"_286":287},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","stevekrouse","name","secret-share","branchName","main","version","path","frontend","project",{"_36":211,"_13":14,"_49":212,"_213":-5,"_214":57,"_215":216,"_217":216,"_218":219,"_220":-5,"_221":222,"_223":86,"_224":48,"_225":-5,"_226":-5,"_227":108,"_228":229,"_230":231,"_232":233,"_234":235,"_236":237,"_238":239,"_240":239,"_241":242,"_243":242,"_244":242,"_245":239,"_246":239,"_247":248,"_249":250,"_251":252,"_253":57},"tree",[79,80,81,82,83],"file",{"_36":75,"_13":19,"_39":42,"_41":-5,"_43":44,"_45":76,"_47":48,"_49":77,"_17":51,"_52":73,"_54":-5,"_56":57,"_58":-5,"_18":78},"contents",[33,34,35],"upstream","pull","ahead","behind","envVars",{"_36":68,"_13":69,"_39":70,"_41":42,"_43":44,"_45":71,"_47":48,"_49":72,"_17":51,"_52":73,"_54":-5,"_56":57,"_58":-5,"_18":74},{"_36":60,"_13":61,"_39":62,"_41":42,"_43":44,"_45":63,"_47":48,"_49":64,"_17":65,"_52":24,"_54":66,"_56":57,"_58":-5,"_18":67},{"_36":37,"_13":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_17":51,"_52":53,"_54":55,"_56":57,"_58":-5,"_18":59},"id","44fe3ee4-5aab-11f1-9f92-ee650bb23af1","index.tsx","fileId","44fe3fd4-5aab-11f1-9f92-ee650bb23af1","parentId","d8b0bef1-765c-4f50-b5fe-a22b390b009d","branchId","61afdd2a-198f-11f1-93ed-42dde27851f2","branchVersion",34,"latest",true,"createdAt",["D",1779982706851],0,"fileType","script","content","/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\nimport { App } from \"./components/App.tsx\";\n\nconst root = document.getElementById(\"root\");\nif (!root) throw new Error(\"No root element found\");\n\nconst match = window.location.pathname.match(/^\\/s\\/([0-9a-f-]+)$/i);\nconst secretId = match?.[1];\n\ncreateRoot(root).render();\n","deleted",false,"label",[19,38],"755c0f56-5ac1-11f1-b1ae-ee650bb23af1","index.html","4382a0b4-5aab-11f1-b71e-ee650bb23af1",127,["D",1779992236924],4,"\n\n \n \n \n Secret Share – E2E Encrypted Secret Sharing\n \n\n \n \n \n \n \n \n \n\n \n \n \n \n\n \n \n \n

\n \n \n \n\n",[19,61],"65b774de-5aab-11f1-b71e-ee650bb23af1","components","4d37c866-3303-4bf8-af87-1225386568f4",38,["D",1779982761733],"directory",[19,69],"4382b284-5aab-11f1-b71e-ee650bb23af1",33,["D",1779982704358],[19],{"_36":75,"_13":19,"_39":42,"_41":-5,"_43":44,"_45":76,"_47":48,"_49":186,"_17":51,"_52":73,"_54":-5,"_56":57,"_58":-5,"_93":187,"_18":188},{"_36":131,"_13":132,"_39":133,"_41":-5,"_43":44,"_45":134,"_47":48,"_49":135,"_17":51,"_52":73,"_54":-5,"_56":57,"_58":-5,"_93":136,"_18":137},{"_36":105,"_13":106,"_39":107,"_41":-5,"_43":44,"_45":108,"_47":48,"_49":109,"_17":51,"_52":73,"_54":-5,"_56":57,"_58":-5,"_93":110,"_18":111},{"_36":96,"_13":97,"_39":98,"_41":-5,"_43":44,"_45":99,"_47":48,"_49":100,"_17":101,"_52":24,"_54":102,"_56":57,"_58":-5,"_93":103,"_18":104},{"_36":84,"_13":85,"_39":86,"_41":-5,"_43":44,"_45":87,"_47":48,"_49":88,"_17":89,"_52":90,"_54":91,"_56":57,"_58":92,"_93":94,"_18":95},"aec27672-5ac6-11f1-ae32-ee650bb23af1","main.ts","b4478132-198f-11f1-9869-42dde27851f2",159,["D",1779994480702],16,"http","import { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { Hono } from \"npm:hono@4\";\nimport api from \"./server/api.ts\";\nimport { renderOg } from \"./server/og.ts\";\n\nconst app = new Hono();\napp.get(\"/frontend/*\", (c) => serveFile(c.req.path));\napp.get(\"/shared/*\", (c) => serveFile(c.req.path));\napp.route(\"/api\", api);\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.get(\"/og.png\", () => renderOg());\napp.get(\"*\", () => serveFile(\"/frontend/index.html\"));\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;","e2e","children",[],[85],"0ab65114-5ab9-11f1-9390-ee650bb23af1","README.md","06dd1eca-1990-11f1-aeb1-42dde27851f2",94,["D",1779988622013],20,"# 🔐 Secret Share – free, trustless E2E secret sharing\n\n🔗 **[https://e2e.val.run/](https://e2e.val.run/)**\n\nSend passwords, API keys, and sensitive text to anyone. Your secret contents are\nencrypted in your browser via a passphrase which never leaves your device.\n\nThe code for this service is 100% open-source on Val Town, so you can audit it\nand trust we're not doing any monkey business with your secrets. What you see at\n[val.town/x/stevekrouse/secret-share](https://www.val.town/x/stevekrouse/secret-share/code/)\nis exactly what runs when you use the app.\n\n## How It Works\n\n```mermaid\nsequenceDiagram\n participant Sender as 🧑 Sender's Browser\n participant Server as 🖥️ Val Town Server\n participant DB as 🗄️ SQLite\n participant Receiver as 🧑 Receiver's Browser\n\n Note over Sender: Enters secret + passphrase\n Sender->>Sender: Encrypt with AES-256-GCM (PBKDF2)\n Sender->>Sender: Compute delete_proof = SHA-256(passphrase ‖ salt)\n Sender->>Server: POST /api/secrets {ciphertext, iv, salt, delete_proof}\n Note over Sender: ⚠️ Passphrase NEVER sent\n Server->>DB: Store encrypted blob + delete_proof + expiry\n Server-->>Sender: {id, expires_at}\n\n Note over Sender: Shares link via one channel\n Note over Sender: Shares passphrase via another channel\n\n Receiver->>Server: GET /api/secrets/:id\n Server->>DB: Lookup (reject if expired)\n DB-->>Server: {ciphertext, iv, salt}\n Server-->>Receiver: {ciphertext, iv, salt}\n Note over Receiver: Enters passphrase\n Receiver->>Receiver: Decrypt with AES-256-GCM (PBKDF2)\n Note over Receiver: ✅ Reads secret\n\n opt Delete (anyone with the passphrase)\n Receiver->>Receiver: Compute delete_proof = SHA-256(passphrase ‖ salt)\n Receiver->>Server: DELETE /api/secrets/:id (X-Delete-Proof header)\n Server->>DB: Compare proof, delete on match\n end\n```\n\n## Project Structure\n\n```\nsecret-share/\n├── main.ts # Hono app — mounts API + serves static + SPA shell\n├── server/\n│ ├── db.ts # SQLite CRUD (stores only ciphertext + proof)\n│ ├── rateLimit.ts # In-memory per-IP token-bucket middleware\n│ ├── validate.ts # UUID + base64 input validation\n│ └── api.ts # POST / GET / DELETE /api/secrets\n├── frontend/\n│ ├── index.html # Static page shell\n│ ├── index.tsx # Client-side React mount; reads window.location.pathname\n│ └── components/\n│ └── App.tsx # CreateView + RevealView\n└── shared/\n ├── types.ts # Shared TypeScript interfaces\n └── crypto.ts # AES-256-GCM + delete-proof derivation\n```\n\n## Tech Stack\n\n- **Server:** [Hono](https://hono.dev)\n- **UI:** React 18 (client-rendered, no SSR)\n- **Styling:** [Twind](https://twind.style)\n- **Database:** Val Town SQLite\n- **Crypto:** Web Crypto API",[],[97],"64463480-198f-11f1-b146-42dde27851f2","shared","6446358e-198f-11f1-b146-42dde27851f2",1,["D",1772823907845],[112,113],[106],{"_36":123,"_13":124,"_39":125,"_41":107,"_43":44,"_45":126,"_47":48,"_49":127,"_17":119,"_52":53,"_54":128,"_56":57,"_58":-5,"_93":129,"_18":130},{"_36":114,"_13":115,"_39":116,"_41":107,"_43":44,"_45":117,"_47":48,"_49":118,"_17":119,"_52":53,"_54":120,"_56":57,"_58":-5,"_93":121,"_18":122},"390d0e4c-5aad-11f1-8ec1-ee650bb23af1","types.ts","67a24fce-198f-11f1-a172-42dde27851f2",47,["D",1779983545802],2,"export interface SecretRecord {\n id: string;\n encrypted_data: string;\n iv: string;\n salt: string;\n expires_at: number;\n created_at: number;\n}\n\nexport interface CreateSecretRequest {\n encrypted_data: string;\n iv: string;\n salt: string;\n delete_proof: string;\n expires_in_hours: number;\n}\n\nexport interface CreateSecretResponse {\n id: string;\n expires_at: number;\n}\n\nexport interface FetchSecretResponse {\n encrypted_data: string;\n iv: string;\n salt: string;\n expires_at: number;\n}\n",[],[106,115],"2fe285c2-5aad-11f1-aaa8-ee650bb23af1","crypto.ts","6ddb21b8-198f-11f1-8039-42dde27851f2",45,["D",1779983530424],"export function arrayBufferToBase64(buffer: ArrayBuffer): string {\n const bytes = new Uint8Array(buffer);\n let binary = \"\";\n for (let i = 0; i < bytes.byteLength; i++) {\n binary += String.fromCharCode(bytes[i]);\n }\n return btoa(binary);\n}\n\nexport function base64ToArrayBuffer(base64: string): ArrayBuffer {\n const binary = atob(base64);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) {\n bytes[i] = binary.charCodeAt(i);\n }\n return bytes.buffer;\n}\n\nexport async function deriveKey(password: string, salt: Uint8Array): Promise {\n const encoder = new TextEncoder();\n const keyMaterial = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(password),\n \"PBKDF2\",\n false,\n [\"deriveKey\"],\n );\n return crypto.subtle.deriveKey(\n { name: \"PBKDF2\", salt, iterations: 600000, hash: \"SHA-256\" },\n keyMaterial,\n { name: \"AES-GCM\", length: 256 },\n false,\n [\"encrypt\", \"decrypt\"],\n );\n}\n\nexport async function encryptData(\n plaintext: string,\n password: string,\n): Promise<{ encrypted: string; iv: string; salt: string }> {\n const salt = crypto.getRandomValues(new Uint8Array(16));\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const key = await deriveKey(password, salt);\n const encoder = new TextEncoder();\n const encrypted = await crypto.subtle.encrypt(\n { name: \"AES-GCM\", iv },\n key,\n encoder.encode(plaintext),\n );\n return {\n encrypted: arrayBufferToBase64(encrypted),\n iv: arrayBufferToBase64(iv),\n salt: arrayBufferToBase64(salt),\n };\n}\n\nexport async function decryptData(\n encryptedBase64: string,\n ivBase64: string,\n saltBase64: string,\n password: string,\n): Promise {\n const salt = new Uint8Array(base64ToArrayBuffer(saltBase64));\n const iv = new Uint8Array(base64ToArrayBuffer(ivBase64));\n const key = await deriveKey(password, salt);\n const decrypted = await crypto.subtle.decrypt(\n { name: \"AES-GCM\", iv },\n key,\n base64ToArrayBuffer(encryptedBase64),\n );\n return new TextDecoder().decode(decrypted);\n}\n\n// Proof of passphrase knowledge for the DELETE endpoint.\n// Server stores this; client recomputes from passphrase + salt to authorize deletion.\n// The 16-byte random salt defeats rainbow tables; the passphrase itself never leaves the browser.\nexport async function deriveDeleteProof(passphrase: string, saltBase64: string): Promise {\n const encoder = new TextEncoder();\n const passBytes = encoder.encode(passphrase);\n const saltBytes = new Uint8Array(base64ToArrayBuffer(saltBase64));\n const combined = new Uint8Array(passBytes.length + saltBytes.length);\n combined.set(passBytes, 0);\n combined.set(saltBytes, passBytes.length);\n const digest = await crypto.subtle.digest(\"SHA-256\", combined);\n return arrayBufferToBase64(digest);\n}\n\nexport function generatePassphrase(length = 20): string {\n const chars = \"ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnpqrstuvwxyz23456789!@#$%\";\n const maxUnbiased = 256 - (256 % chars.length); // = 236 for 59 chars\n const result: string[] = [];\n\n while (result.length < length) {\n const values = crypto.getRandomValues(new Uint8Array(length - result.length));\n for (const v of values) {\n if (v < maxUnbiased) {\n result.push(chars[v % chars.length]);\n if (result.length === length) break;\n }\n // Reject biased values and retry\n }\n }\n\n return result.join(\"\");\n}\n",[],[106,124],"a39c5556-198f-11f1-8039-42dde27851f2","server","a39c5632-198f-11f1-8039-42dde27851f2",7,["D",1772824014091],[138,139,140,141,142],[132],{"_36":177,"_13":178,"_39":179,"_41":133,"_43":44,"_45":180,"_47":48,"_49":181,"_17":182,"_52":53,"_54":183,"_56":57,"_58":-5,"_93":184,"_18":185},{"_36":168,"_13":169,"_39":170,"_41":133,"_43":44,"_45":171,"_47":48,"_49":172,"_17":173,"_52":53,"_54":174,"_56":57,"_58":-5,"_93":175,"_18":176},{"_36":159,"_13":160,"_39":161,"_41":133,"_43":44,"_45":162,"_47":48,"_49":163,"_17":164,"_52":53,"_54":165,"_56":57,"_58":-5,"_93":166,"_18":167},{"_36":151,"_13":152,"_39":153,"_41":133,"_43":44,"_45":154,"_47":48,"_49":155,"_17":51,"_52":53,"_54":156,"_56":57,"_58":-5,"_93":157,"_18":158},{"_36":143,"_13":144,"_39":145,"_41":133,"_43":44,"_45":146,"_47":48,"_49":147,"_17":108,"_52":53,"_54":148,"_56":57,"_58":-5,"_93":149,"_18":150},"3fd3cf2c-5aad-11f1-8417-ee650bb23af1","validate.ts","337fe24e-5aab-11f1-9e7a-ee650bb23af1",48,["D",1779983557171],"import type { CreateSecretRequest } from \"../shared/types.ts\";\n\nexport const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;\nconst BASE64_RE = /^[A-Za-z0-9+/]+=*$/;\n\nfunction isValidBase64(s: string, minLen: number, maxLen: number): boolean {\n return typeof s === \"string\"\n && s.length >= minLen\n && s.length <= maxLen\n && BASE64_RE.test(s);\n}\n\nexport function validateCreateBody(body: CreateSecretRequest): string | null {\n if (!body.encrypted_data || !body.iv || !body.salt || !body.delete_proof) {\n return \"Missing required fields\";\n }\n if (!isValidBase64(body.encrypted_data, 1, 131_072)) {\n return \"encrypted_data must be valid base64, max 100KB\";\n }\n if (!isValidBase64(body.iv, 16, 24)) {\n return \"iv must be valid base64 of 12 bytes\";\n }\n if (!isValidBase64(body.salt, 20, 32)) {\n return \"salt must be valid base64 of 16 bytes\";\n }\n // SHA-256 digest → 32 bytes → 44 base64 chars including padding\n if (!isValidBase64(body.delete_proof, 40, 48)) {\n return \"delete_proof must be valid base64 of a 32-byte digest\";\n }\n return null;\n}\n\nexport function isValidProof(proof: string): boolean {\n return isValidBase64(proof, 40, 48);\n}\n",[],[132,144],"30c1a876-5aab-11f1-9859-ee650bb23af1","rateLimit.ts","30c1a920-5aab-11f1-9859-ee650bb23af1",28,["D",1779982672896],"interface RateBucket {\n count: number;\n resetAt: number;\n}\n\nconst buckets = new Map();\n\nsetInterval(() => {\n const now = Date.now();\n for (const [key, bucket] of buckets) {\n if (bucket.resetAt <= now) buckets.delete(key);\n }\n}, 5 * 60 * 1000);\n\nexport function rateLimit(windowMs: number, maxRequests: number) {\n return async (c: any, next: () => Promise) => {\n const ip = c.req.header(\"x-forwarded-for\")?.split(\",\")[0]?.trim()\n || c.req.header(\"cf-connecting-ip\")\n || \"unknown\";\n const key = `${ip}:${c.req.path}:${c.req.method}`;\n const now = Date.now();\n\n let bucket = buckets.get(key);\n if (!bucket || bucket.resetAt <= now) {\n bucket = { count: 0, resetAt: now + windowMs };\n buckets.set(key, bucket);\n }\n\n bucket.count++;\n\n if (bucket.count > maxRequests) {\n const retryAfter = Math.ceil((bucket.resetAt - now) / 1000);\n return c.json(\n { error: \"Too many requests. Please try again later.\" },\n 429,\n { \"Retry-After\": String(retryAfter) },\n );\n }\n\n await next();\n };\n}\n",[],[132,152],"ae219496-5ac6-11f1-a407-ee650bb23af1","og.ts","7814ed9a-5ac0-11f1-a3ed-ee650bb23af1",158,["D",1779994479655],37,"import satori from \"npm:satori@0.10.13\";\nimport { initWasm, Resvg } from \"npm:@resvg/resvg-wasm@2.6.2\";\n\n// Google Fonts' GitHub repo hosts raw TTFs reliably (Google's own CSS API\n// no longer serves TTF; it gives woff2 even with old User-Agents).\n// Variable fonts crash satori's opentype.js — use static-weight TTFs.\n// Register a normal-weight face too, or non-bold text falls back to italic.\nconst SERIF_BOLD_TTF =\n \"https://raw.githubusercontent.com/google/fonts/main/ofl/ptserif/PT_Serif-Web-Bold.ttf\";\nconst SERIF_REGULAR_TTF =\n \"https://raw.githubusercontent.com/google/fonts/main/ofl/ptserif/PT_Serif-Web-Regular.ttf\";\nconst RESVG_WASM_URL = \"https://unpkg.com/@resvg/resvg-wasm@2.6.2/index_bg.wasm\";\n\nconst TAGLINE = \"E2E encrypted · 100% open-source\";\n\nlet fontsPromise: Promise<{ bold: ArrayBuffer; regular: ArrayBuffer }> | null = null;\nfunction loadFonts() {\n if (!fontsPromise) {\n const get = (url: string, label: string) =>\n fetch(url).then((r) => {\n if (!r.ok) throw new Error(`${label} font fetch failed: ${r.status}`);\n return r.arrayBuffer();\n });\n fontsPromise = Promise.all([\n get(SERIF_BOLD_TTF, \"Bold\"),\n get(SERIF_REGULAR_TTF, \"Regular\"),\n ]).then(([bold, regular]) => ({ bold, regular }));\n }\n return fontsPromise;\n}\n\nlet wasmPromise: Promise | null = null;\nfunction ensureResvg(): Promise {\n if (!wasmPromise) {\n wasmPromise = fetch(RESVG_WASM_URL)\n .then((r) => {\n if (!r.ok) throw new Error(`resvg wasm fetch failed: ${r.status}`);\n return r.arrayBuffer();\n })\n .then((bytes) => initWasm(bytes));\n }\n return wasmPromise;\n}\n\n// A thin-outline padlock as a satori SVG node. The glyph lives at x[26,94],\n// y[18,109] in a 0-120 grid; the viewBox is tightened to the stroke's outer\n// edge so the SVG box hugs the drawing — no internal whitespace — which keeps\n// layout margins even by construction.\nfunction lock(height: number, color: string, strokeWidth: number) {\n const pad = strokeWidth / 2;\n const vbX = 26 - pad;\n const vbY = 18 - pad;\n const vbW = 68 + 2 * pad;\n const vbH = 91 + 2 * pad;\n const width = Math.round((height * vbW) / vbH);\n return {\n type: \"svg\",\n props: {\n width,\n height,\n viewBox: `${vbX} ${vbY} ${vbW} ${vbH}`,\n children: [\n {\n type: \"path\",\n props: {\n d: \"M40 55 L40 44 A20 20 0 0 1 80 44 L80 55\",\n fill: \"none\",\n stroke: color,\n strokeWidth,\n strokeLinecap: \"round\",\n },\n },\n {\n type: \"rect\",\n props: {\n x: 26,\n y: 55,\n width: 68,\n height: 52,\n rx: 12,\n fill: \"none\",\n stroke: color,\n strokeWidth,\n },\n },\n { type: \"circle\", props: { cx: 60, cy: 77, r: 5, fill: color } },\n { type: \"rect\", props: { x: 57.5, y: 80, width: 5, height: 13, rx: 2.5, fill: color } },\n ],\n },\n };\n}\n\nasync function renderSvg(): Promise {\n const { bold, regular } = await loadFonts();\n const tree = {\n type: \"div\",\n props: {\n style: { width: \"1200px\", height: \"630px\", display: \"flex\", background: \"white\", padding: \"28px\" },\n children: [\n {\n type: \"div\",\n props: {\n style: {\n flex: 1,\n display: \"flex\",\n flexDirection: \"row\",\n alignItems: \"center\",\n justifyContent: \"space-between\",\n padding: \"0 72px\",\n border: \"2px solid #e5e5e5\",\n borderRadius: \"24px\",\n },\n children: [\n {\n type: \"div\",\n props: {\n style: { display: \"flex\", flexDirection: \"column\", gap: \"12px\" },\n children: [\n {\n type: \"div\",\n props: {\n style: { fontSize: 100, fontWeight: 700, color: \"#111\", letterSpacing: \"-2px\" },\n children: \"Secret Share\",\n },\n },\n {\n type: \"div\",\n props: { style: { fontSize: 38, color: \"#666\" }, children: TAGLINE },\n },\n ],\n },\n },\n lock(380, \"#111\", 1.8),\n ],\n },\n },\n ],\n },\n };\n return await satori(tree as any, {\n width: 1200,\n height: 630,\n fonts: [\n { name: \"Serif\", data: bold, weight: 700, style: \"normal\" },\n { name: \"Serif\", data: regular, weight: 400, style: \"normal\" },\n ],\n });\n}\n\nexport async function renderOg(): Promise {\n try {\n const svg = await renderSvg();\n await ensureResvg();\n const png = new Resvg(svg).render().asPng();\n return new Response(png, {\n headers: { \"content-type\": \"image/png\", \"cache-control\": \"public, max-age=3600\" },\n });\n } catch (err) {\n const msg = err instanceof Error ? err.stack || err.message : String(err);\n return new Response(`OG render failed:\\n${msg}`, {\n status: 500,\n headers: { \"content-type\": \"text/plain\" },\n });\n }\n}\n",[],[132,160],"e17ef4a0-5ab7-11f1-8294-ee650bb23af1","db.ts","ab280630-198f-11f1-8038-42dde27851f2",73,["D",1779988123365],5,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { SecretRecord } from \"../shared/types.ts\";\n\nexport async function insertSecret(\n id: string,\n encryptedData: string,\n iv: string,\n salt: string,\n expiresAt: number,\n deleteProof: string,\n): Promise {\n await sqlite.execute({\n sql: `INSERT INTO secrets (id, encrypted_data, iv, salt, expires_at, created_at, delete_proof)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [id, encryptedData, iv, salt, expiresAt, Math.floor(Date.now() / 1000), deleteProof],\n });\n}\n\nexport async function getSecret(id: string): Promise {\n const now = Math.floor(Date.now() / 1000);\n const result = await sqlite.execute({\n sql: `SELECT id, encrypted_data, iv, salt, expires_at, created_at\n FROM secrets WHERE id = ? AND expires_at > ?`,\n args: [id, now],\n });\n if (result.rows.length === 0) return null;\n return result.rows[0] as unknown as SecretRecord;\n}\n\nexport async function deleteSecret(id: string, deleteProof: string): Promise {\n if (!deleteProof) return false;\n const result = await sqlite.execute({\n sql: `DELETE FROM secrets WHERE id = ? AND delete_proof = ?`,\n args: [id, deleteProof],\n });\n return result.rowsAffected > 0;\n}\n\nexport async function cleanupExpired(): Promise {\n const now = Math.floor(Date.now() / 1000);\n const result = await sqlite.execute({\n sql: `DELETE FROM secrets WHERE expires_at <= ?`,\n args: [now],\n });\n return result.rowsAffected;\n}\n",[],[132,169],"f9058d64-5ab7-11f1-972f-ee650bb23af1","api.ts","38e52636-5aab-11f1-a2d5-ee650bb23af1",78,["D",1779988162845],14,"import { Hono } from \"npm:hono@4\";\nimport { cleanupExpired, deleteSecret, getSecret, insertSecret } from \"./db.ts\";\nimport { rateLimit } from \"./rateLimit.ts\";\nimport { isValidProof, UUID_RE, validateCreateBody } from \"./validate.ts\";\nimport type { CreateSecretRequest, CreateSecretResponse, FetchSecretResponse } from \"../shared/types.ts\";\n\nconst app = new Hono();\n\napp.post(\"/secrets\", rateLimit(60_000, 10), async (c) => {\n const body = await c.req.json();\n\n const error = validateCreateBody(body);\n if (error) return c.json({ error }, 400);\n\n const hours = Math.min(Math.max(body.expires_in_hours || 168, 1), 720);\n const expiresAt = Math.floor(Date.now() / 1000) + hours * 3600;\n const id = crypto.randomUUID();\n\n await insertSecret(id, body.encrypted_data, body.iv, body.salt, expiresAt, body.delete_proof);\n\n cleanupExpired().catch(() => {});\n\n const response: CreateSecretResponse = { id, expires_at: expiresAt };\n return c.json(response, 201);\n});\n\napp.get(\"/secrets/:id\", rateLimit(60_000, 30), async (c) => {\n const id = c.req.param(\"id\");\n if (!UUID_RE.test(id)) return c.json({ error: \"Invalid secret ID\" }, 400);\n\n const secret = await getSecret(id);\n if (!secret) return c.json({ error: \"Secret not found or expired\" }, 404);\n\n const response: FetchSecretResponse = {\n encrypted_data: secret.encrypted_data,\n iv: secret.iv,\n salt: secret.salt,\n expires_at: secret.expires_at,\n };\n return c.json(response);\n});\n\napp.delete(\"/secrets/:id\", rateLimit(60_000, 10), async (c) => {\n const id = c.req.param(\"id\");\n if (!UUID_RE.test(id)) return c.json({ error: \"Invalid secret ID\" }, 400);\n\n const proof = c.req.header(\"X-Delete-Proof\");\n if (!proof || !isValidProof(proof)) {\n return c.json({ error: \"Missing or invalid X-Delete-Proof header\" }, 401);\n }\n\n const deleted = await deleteSecret(id, proof);\n if (!deleted) {\n return c.json({ error: \"Secret not found or wrong passphrase\" }, 404);\n }\n return c.json({ success: true });\n});\n\nexport default app;\n",[],[132,178],["D",1779982704358],[189,190,191],[19],{"_36":68,"_13":69,"_39":70,"_41":42,"_43":44,"_45":71,"_47":48,"_49":198,"_17":51,"_52":73,"_54":-5,"_56":57,"_58":-5,"_93":199,"_18":200},{"_36":60,"_13":61,"_39":62,"_41":42,"_43":44,"_45":63,"_47":48,"_49":195,"_17":65,"_52":24,"_54":66,"_56":57,"_58":-5,"_93":196,"_18":197},{"_36":37,"_13":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":192,"_17":51,"_52":53,"_54":55,"_56":57,"_58":-5,"_93":193,"_18":194},["D",1779982706851],[],[19,38],["D",1779992236924],[],[19,61],["D",1779982761733],[201],[19,69],{"_36":202,"_13":203,"_39":204,"_41":70,"_43":44,"_45":205,"_47":48,"_49":206,"_17":207,"_52":53,"_54":208,"_56":57,"_58":-5,"_93":209,"_18":210},"66f300e2-5ac5-11f1-8fce-ee650bb23af1","App.tsx","65b726f0-5aab-11f1-b71e-ee650bb23af1",147,["D",1779993930732],23,"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useCallback, useEffect, useState } from \"https://esm.sh/react@18.2.0\";\nimport type {\n CreateSecretRequest,\n CreateSecretResponse,\n FetchSecretResponse,\n} from \"../../shared/types.ts\";\nimport {\n decryptData,\n deriveDeleteProof,\n encryptData,\n generatePassphrase,\n} from \"../../shared/crypto.ts\";\n\nconst EXPIRY_OPTIONS: { hours: number; label: string }[] = [\n { hours: 1, label: \"1 hour\" },\n { hours: 24, label: \"1 day\" },\n { hours: 72, label: \"3 days\" },\n { hours: 168, label: \"1 week\" },\n { hours: 720, label: \"30 days\" },\n];\n\nfunction Spinner() {\n return (\n \n \n \n \n );\n}\n\nfunction StepHeading({ n, children }: { n: number; children: React.ReactNode }) {\n return (\n

\n \n {n}\n \n

{children}

\n );\n}\n\nfunction CopyButton({ text }: { text: string }) {\n const [copied, setCopied] = useState(false);\n const handleCopy = useCallback(async () => {\n await navigator.clipboard.writeText(text);\n setCopied(true);\n setTimeout(() => setCopied(false), 2000);\n }, [text]);\n return (\n \n {copied ? \"✓ copied\" : \"copy\"}\n \n );\n}\n\nasync function deleteSecretRequest(\n secretId: string,\n deleteProof: string,\n): Promise {\n const res = await fetch(`/api/secrets/${secretId}`, {\n method: \"DELETE\",\n headers: { \"X-Delete-Proof\": deleteProof },\n });\n if (!res.ok) throw new Error(await res.text());\n}\n\nfunction CreateView() {\n const [secret, setSecret] = useState(\"\");\n const [passphrase, setPassphrase] = useState(() => generatePassphrase());\n const [expiresInHours, setExpiresInHours] = useState(168);\n const [loading, setLoading] = useState(false);\n const [result, setResult] = useState<\n | { url: string; passphrase: string; secretId: string; deleteProof: string }\n | null\n >(null);\n const [deleting, setDeleting] = useState(false);\n const [deleted, setDeleted] = useState(false);\n const [error, setError] = useState(null);\n const [isDragging, setIsDragging] = useState(false);\n\n useEffect(() => {\n if (result || deleted) return;\n let depth = 0;\n const onDragEnter = (e: DragEvent) => {\n if (!e.dataTransfer?.types.includes(\"Files\")) return;\n e.preventDefault();\n depth++;\n setIsDragging(true);\n };\n const onDragOver = (e: DragEvent) => {\n if (e.dataTransfer?.types.includes(\"Files\")) e.preventDefault();\n };\n const onDragLeave = () => {\n depth = Math.max(0, depth - 1);\n if (depth === 0) setIsDragging(false);\n };\n const onDrop = (e: DragEvent) => {\n const file = e.dataTransfer?.files[0];\n if (!file) return;\n e.preventDefault();\n depth = 0;\n setIsDragging(false);\n const reader = new FileReader();\n reader.onload = () => setSecret(String(reader.result ?? \"\"));\n reader.onerror = () => setError(\"Couldn't read that file.\");\n reader.readAsText(file);\n };\n document.addEventListener(\"dragenter\", onDragEnter);\n document.addEventListener(\"dragover\", onDragOver);\n document.addEventListener(\"dragleave\", onDragLeave);\n document.addEventListener(\"drop\", onDrop);\n return () => {\n document.removeEventListener(\"dragenter\", onDragEnter);\n document.removeEventListener(\"dragover\", onDragOver);\n document.removeEventListener(\"dragleave\", onDragLeave);\n document.removeEventListener(\"drop\", onDrop);\n };\n }, [result, deleted]);\n\n const handleSubmit = useCallback(async () => {\n if (!secret.trim()) {\n setError(\"Please enter a secret to share.\");\n return;\n }\n if (!passphrase.trim()) {\n setError(\"Please enter or generate a passphrase.\");\n return;\n }\n setLoading(true);\n setError(null);\n try {\n const { encrypted, iv, salt } = await encryptData(secret, passphrase);\n const deleteProof = await deriveDeleteProof(passphrase, salt);\n const body: CreateSecretRequest = {\n encrypted_data: encrypted,\n iv,\n salt,\n delete_proof: deleteProof,\n expires_in_hours: expiresInHours,\n };\n const res = await fetch(\"/api/secrets\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n if (!res.ok) throw new Error(await res.text());\n const data: CreateSecretResponse = await res.json();\n const url = `${window.location.origin}/s/${data.id}`;\n setResult({ url, passphrase, secretId: data.id, deleteProof });\n } catch (e: any) {\n setError(e.message || \"Something went wrong\");\n } finally {\n setLoading(false);\n }\n }, [secret, passphrase, expiresInHours]);\n\n const handleDelete = useCallback(async () => {\n if (!result) return;\n if (!confirm(\"Are you sure? This secret will be permanently deleted.\")) {\n return;\n }\n setDeleting(true);\n setError(null);\n try {\n await deleteSecretRequest(result.secretId, result.deleteProof);\n setDeleted(true);\n } catch (e: any) {\n setError(e.message || \"Failed to delete\");\n } finally {\n setDeleting(false);\n }\n }, [result]);\n\n if (deleted) {\n return (\n

\n Secret deleted. It has been permanently destroyed.\n

\n {\n setResult(null);\n setDeleted(false);\n setSecret(\"\");\n setPassphrase(generatePassphrase());\n }}\n className=\"w-full py-2 border border-gray-400 text-gray-800 hover:bg-gray-50 rounded transition-colors\"\n >\n Create a new secret\n \n

\n );\n }\n\n if (result) {\n return (\n

\n Encrypted. Share the link and passphrase via{\" \"}\n different channels.\n

\n Link\n

\n \n {result.url}\n \n \n

\n Passphrase\n

\n \n {result.passphrase}\n \n \n

\n {error && (\n

{error}

\n )}\n

\n {\n setResult(null);\n setSecret(\"\");\n setPassphrase(generatePassphrase());\n }}\n className=\"flex-1 py-2 border border-gray-400 hover:bg-gray-50 rounded transition-colors\"\n >\n Create another\n \n \n {deleting && }\n {deleting ? \"Deleting…\" : \"Delete\"}\n \n

\n );\n }\n\n return (\n

\n {isDragging && (\n

\n Drop file to load its contents\n

\n )}\n

\n Your secret\n setSecret(e.target.value)}\n placeholder=\"Enter secret text, or drag and drop a file…\"\n rows={4}\n className=\"w-full border border-gray-300 rounded p-3 font-mono text-sm placeholder-gray-400 focus:outline-none focus:border-gray-700 resize-none\"\n />\n

\n\n

\n Encryption passphrase\n

\n setPassphrase(e.target.value)}\n className=\"flex-1 border border-gray-300 rounded p-3 font-mono text-sm focus:outline-none focus:border-gray-700\"\n />\n setPassphrase(generatePassphrase())}\n className=\"px-3 py-2 border border-gray-400 hover:bg-gray-50 rounded text-sm transition-colors whitespace-nowrap\"\n >\n regenerate\n \n

\n\n

\n Expires in\n

\n {EXPIRY_OPTIONS.map(({ hours, label }) => (\n setExpiresInHours(hours)}\n className={\n \"px-3 py-1 border rounded text-sm transition-colors \" +\n (expiresInHours === hours\n ? \"border-gray-700 bg-gray-100 text-gray-900\"\n : \"border-gray-300 text-gray-700 hover:bg-gray-50\")\n }\n >\n {label}\n \n ))}\n

\n\n {error &&

{error}

}\n\n \n {loading && }\n {loading ? \"Encrypting…\" : \"Encrypt & create link\"}\n \n

\n );\n}\n\nfunction RevealView({ secretId }: { secretId: string }) {\n const [passphrase, setPassphrase] = useState(\"\");\n const [decrypted, setDecrypted] = useState<\n { plaintext: string; salt: string; passphrase: string } | null\n >(null);\n const [loading, setLoading] = useState(false);\n const [error, setError] = useState(null);\n const [notFound, setNotFound] = useState(false);\n const [deleting, setDeleting] = useState(false);\n const [deleted, setDeleted] = useState(false);\n\n const handleDecrypt = useCallback(async () => {\n if (!passphrase.trim()) {\n setError(\"Please enter the passphrase.\");\n return;\n }\n setLoading(true);\n setError(null);\n try {\n const res = await fetch(`/api/secrets/${secretId}`);\n if (res.status === 404) {\n setNotFound(true);\n return;\n }\n if (!res.ok) throw new Error(await res.text());\n const data: FetchSecretResponse = await res.json();\n const plaintext = await decryptData(\n data.encrypted_data,\n data.iv,\n data.salt,\n passphrase,\n );\n setDecrypted({ plaintext, salt: data.salt, passphrase });\n } catch (e: any) {\n if (e.name === \"OperationError\") {\n setError(\"Wrong passphrase. Please try again.\");\n } else {\n setError(e.message || \"Something went wrong\");\n }\n } finally {\n setLoading(false);\n }\n }, [secretId, passphrase]);\n\n const handleDelete = useCallback(async () => {\n if (!decrypted) return;\n if (!confirm(\"Are you sure? This secret will be permanently deleted.\")) {\n return;\n }\n setDeleting(true);\n setError(null);\n try {\n const proof = await deriveDeleteProof(\n decrypted.passphrase,\n decrypted.salt,\n );\n await deleteSecretRequest(secretId, proof);\n setDeleted(true);\n } catch (e: any) {\n setError(e.message || \"Failed to delete\");\n } finally {\n setDeleting(false);\n }\n }, [decrypted, secretId]);\n\n if (deleted) {\n return (\n

\n Secret deleted. It has been permanently destroyed.\n

\n \n Create a new secret\n \n

\n );\n }\n\n if (notFound) {\n return (\n

\n Secret not found. It has expired or been deleted.\n

\n \n Create a new secret\n \n

\n );\n }\n\n if (decrypted) {\n return (\n

Decrypted secret

\n \n

\n            {decrypted.plaintext}\n

\n Anyone with the passphrase can delete this secret.\n

\n {error &&

{error}

}\n

\n \n Create a new secret\n \n \n {deleting && }\n {deleting ? \"Deleting…\" : \"Delete\"}\n \n

\n );\n }\n\n return (\n

\n Someone sent you a secret. Enter the passphrase to decrypt it.\n

\n Passphrase\n setPassphrase(e.target.value)}\n onKeyDown={(e) => e.key === \"Enter\" && handleDecrypt()}\n placeholder=\"Enter the passphrase…\"\n className=\"w-full border border-gray-300 rounded p-3 font-mono text-sm placeholder-gray-400 focus:outline-none focus:border-gray-700\"\n autoFocus\n />\n

\n {error &&

{error}

}\n \n {loading && }\n {loading ? \"Decrypting…\" : \"Decrypt secret\"}\n \n

\n );\n}\n\nexport function App({ secretId }: { secretId?: string }) {\n return (\n

Secret Share

\n End-to-end encrypted sharing for passwords, API keys, and sensitive text\n

\n {secretId ? : }\n

\n \n

\n );\n}\n",[],[19,69,203],"61af4568-198f-11f1-93ed-42dde27851f2",["D",1772823903506],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","E2E encrypted secret sharing with expiring links","imageUrl","userId","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","e81e7335-6d4c-4764-a902-d0962bbfa9f7","tursoName","61af4568198f11f193ed42dde27851f2","tursoHostname","61af4568198f11f193ed42dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789515657103],"pinned",3,"userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_268":264},"org",{"_11":12,"_262":-5,"_263":264,"_221":222,"_265":266,"_267":57},"branch",{"_17":87,"_13":16,"_36":44,"_254":211,"_255":-5,"_256":-5,"_257":-5,"_258":-5,"_259":-5,"_260":14,"_261":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://images.clerk.dev/uploaded/img_2PqHa2Gsy93xQrjh2w78Xu0cChW.jpeg","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_36":211,"_13":14,"_49":352,"_213":-5,"_214":57,"_215":216,"_217":216,"_218":219,"_220":-5,"_221":222,"_223":86,"_224":48,"_225":-5,"_226":-5,"_227":108,"_228":229,"_230":231,"_232":233,"_234":353,"_236":237,"_238":239,"_240":239,"_241":242,"_243":242,"_244":242,"_245":239,"_246":239,"_247":354,"_249":355,"_251":356,"_253":57},[304,309,315,318,319],"files",[304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319],"counts",{"_295":51,"_296":108,"_297":108,"_32":298,"_299":300},[289,290,291],{"_36":75,"_13":19,"_39":42,"_41":-5,"_43":44,"_45":76,"_47":48,"_49":77,"_17":51,"_52":73,"_54":-5,"_56":57,"_58":-5,"_18":288},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],{"_36":68,"_13":69,"_39":70,"_41":42,"_43":44,"_45":71,"_47":48,"_49":72,"_17":51,"_52":73,"_54":-5,"_56":57,"_58":-5,"_18":294},{"_36":60,"_13":61,"_39":62,"_41":42,"_43":44,"_45":63,"_47":48,"_49":64,"_17":65,"_52":24,"_54":66,"_56":57,"_58":-5,"_18":293},{"_36":37,"_13":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_17":51,"_52":53,"_54":55,"_56":57,"_58":-5,"_18":292},[19,38],[19,61],[19,69],"pulls","branches","forks",{"_301":51,"_303":51},"connections",{"_301":51,"_302":51},"count","unfilledCount","emptyCount",{"_36":75,"_13":19,"_39":42,"_41":-5,"_43":44,"_45":76,"_47":48,"_49":186,"_17":51,"_52":73,"_54":-5,"_56":57,"_58":-5,"_93":350,"_18":351},{"_36":68,"_13":69,"_39":70,"_41":42,"_43":44,"_45":71,"_47":48,"_49":198,"_17":51,"_52":73,"_54":-5,"_56":57,"_58":-5,"_93":348,"_18":349},{"_36":202,"_13":203,"_39":204,"_41":70,"_43":44,"_45":205,"_47":48,"_49":206,"_17":207,"_52":53,"_54":208,"_56":57,"_58":-5,"_93":346,"_18":347},{"_36":60,"_13":61,"_39":62,"_41":42,"_43":44,"_45":63,"_47":48,"_49":195,"_17":65,"_52":24,"_54":66,"_56":57,"_58":-5,"_93":344,"_18":345},{"_36":37,"_13":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":192,"_17":51,"_52":53,"_54":55,"_56":57,"_58":-5,"_93":342,"_18":343},{"_36":131,"_13":132,"_39":133,"_41":-5,"_43":44,"_45":134,"_47":48,"_49":135,"_17":51,"_52":73,"_54":-5,"_56":57,"_58":-5,"_93":340,"_18":341},{"_36":177,"_13":178,"_39":179,"_41":133,"_43":44,"_45":180,"_47":48,"_49":181,"_17":182,"_52":53,"_54":183,"_56":57,"_58":-5,"_93":338,"_18":339},{"_36":168,"_13":169,"_39":170,"_41":133,"_43":44,"_45":171,"_47":48,"_49":172,"_17":173,"_52":53,"_54":174,"_56":57,"_58":-5,"_93":336,"_18":337},{"_36":159,"_13":160,"_39":161,"_41":133,"_43":44,"_45":162,"_47":48,"_49":163,"_17":164,"_52":53,"_54":165,"_56":57,"_58":-5,"_93":334,"_18":335},{"_36":151,"_13":152,"_39":153,"_41":133,"_43":44,"_45":154,"_47":48,"_49":155,"_17":51,"_52":53,"_54":156,"_56":57,"_58":-5,"_93":332,"_18":333},{"_36":143,"_13":144,"_39":145,"_41":133,"_43":44,"_45":146,"_47":48,"_49":147,"_17":108,"_52":53,"_54":148,"_56":57,"_58":-5,"_93":330,"_18":331},{"_36":105,"_13":106,"_39":107,"_41":-5,"_43":44,"_45":108,"_47":48,"_49":109,"_17":51,"_52":73,"_54":-5,"_56":57,"_58":-5,"_93":328,"_18":329},{"_36":123,"_13":124,"_39":125,"_41":107,"_43":44,"_45":126,"_47":48,"_49":127,"_17":119,"_52":53,"_54":128,"_56":57,"_58":-5,"_93":326,"_18":327},{"_36":114,"_13":115,"_39":116,"_41":107,"_43":44,"_45":117,"_47":48,"_49":118,"_17":119,"_52":53,"_54":120,"_56":57,"_58":-5,"_93":324,"_18":325},{"_36":96,"_13":97,"_39":98,"_41":-5,"_43":44,"_45":99,"_47":48,"_49":100,"_17":101,"_52":24,"_54":102,"_56":57,"_58":-5,"_93":322,"_18":323},{"_36":84,"_13":85,"_39":86,"_41":-5,"_43":44,"_45":87,"_47":48,"_49":88,"_17":89,"_52":90,"_54":91,"_56":57,"_58":92,"_93":320,"_18":321},[],[85],[],[97],[],[106,115],[],[106,124],[316,317],[106],[],[132,144],[],[132,152],[],[132,160],[],[132,169],[],[132,178],[310,311,312,313,314],[132],[],[19,38],[],[19,61],[],[19,69,203],[306],[19,69],[305,307,308],[19],["D",1772823903506],["D",1789515657103],{"_11":12,"_268":264},{"_11":12,"_262":-5,"_263":264,"_221":222,"_265":266,"_267":57},{"_17":87,"_13":16,"_36":44,"_254":211,"_255":-5,"_256":-5,"_257":-5,"_258":-5,"_259":-5,"_260":14,"_261":12},"ctx",{"_247":-5,"_285":390,"_391":392,"_393":394,"_395":57,"_396":57,"_397":57,"_398":48,"_399":-5,"_400":-7,"_401":-7,"_402":51,"_403":57,"_404":57,"_405":-5,"_406":57,"_407":57,"_408":57,"_409":-5},"ENV",{"_361":362,"_363":364,"_365":16,"_366":367,"_368":369,"_370":371,"_372":373,"_374":375,"_376":377,"_378":379,"_380":381,"_382":383,"_384":385,"_386":387,"_388":389},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]