\n \n \n \n\n",[],[174,192],"65b774de-5aab-11f1-b71e-ee650bb23af1","components","4d37c866-3303-4bf8-af87-1225386568f4",38,["D",1779982761733],[207],[174,201],{"_38":208,"_13":209,"_41":210,"_43":202,"_45":46,"_47":211,"_49":50,"_51":212,"_17":213,"_54":55,"_56":214,"_58":59,"_60":-5,"_113":215,"_18":216},"66f300e2-5ac5-11f1-8fce-ee650bb23af1","App.tsx","65b726f0-5aab-11f1-b71e-ee650bb23af1",147,["D",1779993930732],23,"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useCallback, useEffect, useState } from \"https://esm.sh/react@18.2.0\";\nimport type {\n CreateSecretRequest,\n CreateSecretResponse,\n FetchSecretResponse,\n} from \"../../shared/types.ts\";\nimport {\n decryptData,\n deriveDeleteProof,\n encryptData,\n generatePassphrase,\n} from \"../../shared/crypto.ts\";\n\nconst EXPIRY_OPTIONS: { hours: number; label: string }[] = [\n { hours: 1, label: \"1 hour\" },\n { hours: 24, label: \"1 day\" },\n { hours: 72, label: \"3 days\" },\n { hours: 168, label: \"1 week\" },\n { hours: 720, label: \"30 days\" },\n];\n\nfunction Spinner() {\n return (\n \n \n \n \n );\n}\n\nfunction StepHeading({ n, children }: { n: number; children: React.ReactNode }) {\n return (\n

\n \n {n}\n \n

{children}

\n );\n}\n\nfunction CopyButton({ text }: { text: string }) {\n const [copied, setCopied] = useState(false);\n const handleCopy = useCallback(async () => {\n await navigator.clipboard.writeText(text);\n setCopied(true);\n setTimeout(() => setCopied(false), 2000);\n }, [text]);\n return (\n \n {copied ? \"✓ copied\" : \"copy\"}\n \n );\n}\n\nasync function deleteSecretRequest(\n secretId: string,\n deleteProof: string,\n): Promise {\n const res = await fetch(`/api/secrets/${secretId}`, {\n method: \"DELETE\",\n headers: { \"X-Delete-Proof\": deleteProof },\n });\n if (!res.ok) throw new Error(await res.text());\n}\n\nfunction CreateView() {\n const [secret, setSecret] = useState(\"\");\n const [passphrase, setPassphrase] = useState(() => generatePassphrase());\n const [expiresInHours, setExpiresInHours] = useState(168);\n const [loading, setLoading] = useState(false);\n const [result, setResult] = useState<\n | { url: string; passphrase: string; secretId: string; deleteProof: string }\n | null\n >(null);\n const [deleting, setDeleting] = useState(false);\n const [deleted, setDeleted] = useState(false);\n const [error, setError] = useState(null);\n const [isDragging, setIsDragging] = useState(false);\n\n useEffect(() => {\n if (result || deleted) return;\n let depth = 0;\n const onDragEnter = (e: DragEvent) => {\n if (!e.dataTransfer?.types.includes(\"Files\")) return;\n e.preventDefault();\n depth++;\n setIsDragging(true);\n };\n const onDragOver = (e: DragEvent) => {\n if (e.dataTransfer?.types.includes(\"Files\")) e.preventDefault();\n };\n const onDragLeave = () => {\n depth = Math.max(0, depth - 1);\n if (depth === 0) setIsDragging(false);\n };\n const onDrop = (e: DragEvent) => {\n const file = e.dataTransfer?.files[0];\n if (!file) return;\n e.preventDefault();\n depth = 0;\n setIsDragging(false);\n const reader = new FileReader();\n reader.onload = () => setSecret(String(reader.result ?? \"\"));\n reader.onerror = () => setError(\"Couldn't read that file.\");\n reader.readAsText(file);\n };\n document.addEventListener(\"dragenter\", onDragEnter);\n document.addEventListener(\"dragover\", onDragOver);\n document.addEventListener(\"dragleave\", onDragLeave);\n document.addEventListener(\"drop\", onDrop);\n return () => {\n document.removeEventListener(\"dragenter\", onDragEnter);\n document.removeEventListener(\"dragover\", onDragOver);\n document.removeEventListener(\"dragleave\", onDragLeave);\n document.removeEventListener(\"drop\", onDrop);\n };\n }, [result, deleted]);\n\n const handleSubmit = useCallback(async () => {\n if (!secret.trim()) {\n setError(\"Please enter a secret to share.\");\n return;\n }\n if (!passphrase.trim()) {\n setError(\"Please enter or generate a passphrase.\");\n return;\n }\n setLoading(true);\n setError(null);\n try {\n const { encrypted, iv, salt } = await encryptData(secret, passphrase);\n const deleteProof = await deriveDeleteProof(passphrase, salt);\n const body: CreateSecretRequest = {\n encrypted_data: encrypted,\n iv,\n salt,\n delete_proof: deleteProof,\n expires_in_hours: expiresInHours,\n };\n const res = await fetch(\"/api/secrets\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n if (!res.ok) throw new Error(await res.text());\n const data: CreateSecretResponse = await res.json();\n const url = `${window.location.origin}/s/${data.id}`;\n setResult({ url, passphrase, secretId: data.id, deleteProof });\n } catch (e: any) {\n setError(e.message || \"Something went wrong\");\n } finally {\n setLoading(false);\n }\n }, [secret, passphrase, expiresInHours]);\n\n const handleDelete = useCallback(async () => {\n if (!result) return;\n if (!confirm(\"Are you sure? This secret will be permanently deleted.\")) {\n return;\n }\n setDeleting(true);\n setError(null);\n try {\n await deleteSecretRequest(result.secretId, result.deleteProof);\n setDeleted(true);\n } catch (e: any) {\n setError(e.message || \"Failed to delete\");\n } finally {\n setDeleting(false);\n }\n }, [result]);\n\n if (deleted) {\n return (\n

\n Secret deleted. It has been permanently destroyed.\n

\n {\n setResult(null);\n setDeleted(false);\n setSecret(\"\");\n setPassphrase(generatePassphrase());\n }}\n className=\"w-full py-2 border border-gray-400 text-gray-800 hover:bg-gray-50 rounded transition-colors\"\n >\n Create a new secret\n \n

\n );\n }\n\n if (result) {\n return (\n

\n Encrypted. Share the link and passphrase via{\" \"}\n different channels.\n

\n Link\n

\n \n {result.url}\n \n \n

\n Passphrase\n

\n \n {result.passphrase}\n \n \n

\n {error && (\n

{error}

\n )}\n

\n {\n setResult(null);\n setSecret(\"\");\n setPassphrase(generatePassphrase());\n }}\n className=\"flex-1 py-2 border border-gray-400 hover:bg-gray-50 rounded transition-colors\"\n >\n Create another\n \n \n {deleting && }\n {deleting ? \"Deleting…\" : \"Delete\"}\n \n

\n );\n }\n\n return (\n

\n {isDragging && (\n

\n Drop file to load its contents\n

\n )}\n

\n Your secret\n setSecret(e.target.value)}\n placeholder=\"Enter secret text, or drag and drop a file…\"\n rows={4}\n className=\"w-full border border-gray-300 rounded p-3 font-mono text-sm placeholder-gray-400 focus:outline-none focus:border-gray-700 resize-none\"\n />\n

\n\n

\n Encryption passphrase\n

\n setPassphrase(e.target.value)}\n className=\"flex-1 border border-gray-300 rounded p-3 font-mono text-sm focus:outline-none focus:border-gray-700\"\n />\n setPassphrase(generatePassphrase())}\n className=\"px-3 py-2 border border-gray-400 hover:bg-gray-50 rounded text-sm transition-colors whitespace-nowrap\"\n >\n regenerate\n \n

\n\n

\n Expires in\n

\n {EXPIRY_OPTIONS.map(({ hours, label }) => (\n setExpiresInHours(hours)}\n className={\n \"px-3 py-1 border rounded text-sm transition-colors \" +\n (expiresInHours === hours\n ? \"border-gray-700 bg-gray-100 text-gray-900\"\n : \"border-gray-300 text-gray-700 hover:bg-gray-50\")\n }\n >\n {label}\n \n ))}\n

\n\n {error &&

{error}

}\n\n \n {loading && }\n {loading ? \"Encrypting…\" : \"Encrypt & create link\"}\n \n

\n );\n}\n\nfunction RevealView({ secretId }: { secretId: string }) {\n const [passphrase, setPassphrase] = useState(\"\");\n const [decrypted, setDecrypted] = useState<\n { plaintext: string; salt: string; passphrase: string } | null\n >(null);\n const [loading, setLoading] = useState(false);\n const [error, setError] = useState(null);\n const [notFound, setNotFound] = useState(false);\n const [deleting, setDeleting] = useState(false);\n const [deleted, setDeleted] = useState(false);\n\n const handleDecrypt = useCallback(async () => {\n if (!passphrase.trim()) {\n setError(\"Please enter the passphrase.\");\n return;\n }\n setLoading(true);\n setError(null);\n try {\n const res = await fetch(`/api/secrets/${secretId}`);\n if (res.status === 404) {\n setNotFound(true);\n return;\n }\n if (!res.ok) throw new Error(await res.text());\n const data: FetchSecretResponse = await res.json();\n const plaintext = await decryptData(\n data.encrypted_data,\n data.iv,\n data.salt,\n passphrase,\n );\n setDecrypted({ plaintext, salt: data.salt, passphrase });\n } catch (e: any) {\n if (e.name === \"OperationError\") {\n setError(\"Wrong passphrase. Please try again.\");\n } else {\n setError(e.message || \"Something went wrong\");\n }\n } finally {\n setLoading(false);\n }\n }, [secretId, passphrase]);\n\n const handleDelete = useCallback(async () => {\n if (!decrypted) return;\n if (!confirm(\"Are you sure? This secret will be permanently deleted.\")) {\n return;\n }\n setDeleting(true);\n setError(null);\n try {\n const proof = await deriveDeleteProof(\n decrypted.passphrase,\n decrypted.salt,\n );\n await deleteSecretRequest(secretId, proof);\n setDeleted(true);\n } catch (e: any) {\n setError(e.message || \"Failed to delete\");\n } finally {\n setDeleting(false);\n }\n }, [decrypted, secretId]);\n\n if (deleted) {\n return (\n

\n Secret deleted. It has been permanently destroyed.\n

\n \n Create a new secret\n \n

\n );\n }\n\n if (notFound) {\n return (\n

\n Secret not found. It has expired or been deleted.\n

\n \n Create a new secret\n \n

\n );\n }\n\n if (decrypted) {\n return (\n

Decrypted secret

\n \n

\n            {decrypted.plaintext}\n

\n Anyone with the passphrase can delete this secret.\n

\n {error &&

{error}

}\n

\n \n Create a new secret\n \n \n {deleting && }\n {deleting ? \"Deleting…\" : \"Delete\"}\n \n

\n );\n }\n\n return (\n

\n Someone sent you a secret. Enter the passphrase to decrypt it.\n

\n Passphrase\n setPassphrase(e.target.value)}\n onKeyDown={(e) => e.key === \"Enter\" && handleDecrypt()}\n placeholder=\"Enter the passphrase…\"\n className=\"w-full border border-gray-300 rounded p-3 font-mono text-sm placeholder-gray-400 focus:outline-none focus:border-gray-700\"\n autoFocus\n />\n

\n {error &&

{error}

}\n \n {loading && }\n {loading ? \"Decrypting…\" : \"Decrypt secret\"}\n \n

\n );\n}\n\nexport function App({ secretId }: { secretId?: string }) {\n return (\n

Secret Share

\n End-to-end encrypted sharing for passwords, API keys, and sensitive text\n

\n {secretId ? : }\n

\n \n

\n );\n}\n",[],[174,201,209],"61af4568-198f-11f1-93ed-42dde27851f2",["D",1772823903506],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","E2E encrypted secret sharing with expiring links","imageUrl","userId","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","e81e7335-6d4c-4764-a902-d0962bbfa9f7","tursoName","61af4568198f11f193ed42dde27851f2","tursoHostname","61af4568198f11f193ed42dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789515657103],"pinned",3,"userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_274":270},"org",{"_11":12,"_268":-5,"_269":270,"_227":228,"_271":272,"_273":59},"branch",{"_17":107,"_13":16,"_38":46,"_260":217,"_261":-5,"_262":-5,"_263":-5,"_264":-5,"_265":-5,"_266":14,"_267":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://images.clerk.dev/uploaded/img_2PqHa2Gsy93xQrjh2w78Xu0cChW.jpeg","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_38":217,"_13":14,"_51":362,"_219":-5,"_220":59,"_221":222,"_223":222,"_224":225,"_226":-5,"_227":228,"_229":106,"_230":50,"_231":-5,"_232":-5,"_233":53,"_234":235,"_236":237,"_238":239,"_240":363,"_242":243,"_244":245,"_246":245,"_247":248,"_249":248,"_250":248,"_251":245,"_252":245,"_253":364,"_255":365,"_257":366,"_259":59},[314,319,325,328,329],"files",[314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329],"counts",{"_305":67,"_306":53,"_307":53,"_32":308,"_309":310},[295,296,297,298,299],{"_38":94,"_13":19,"_41":44,"_43":-5,"_45":46,"_47":95,"_49":50,"_51":96,"_17":67,"_54":97,"_56":-5,"_58":59,"_60":-5,"_18":294},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},[19],{"_38":86,"_13":87,"_41":88,"_43":44,"_45":46,"_47":89,"_49":50,"_51":90,"_17":91,"_54":55,"_56":92,"_58":59,"_60":-5,"_18":304},{"_38":78,"_13":79,"_41":80,"_43":44,"_45":46,"_47":81,"_49":50,"_51":82,"_17":83,"_54":55,"_56":84,"_58":59,"_60":-5,"_18":303},{"_38":70,"_13":71,"_41":72,"_43":44,"_45":46,"_47":73,"_49":50,"_51":74,"_17":75,"_54":55,"_56":76,"_58":59,"_60":-5,"_18":302},{"_38":62,"_13":63,"_41":64,"_43":44,"_45":46,"_47":65,"_49":50,"_51":66,"_17":67,"_54":55,"_56":68,"_58":59,"_60":-5,"_18":301},{"_38":39,"_13":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_17":53,"_54":55,"_56":57,"_58":59,"_60":-5,"_18":300},[19,40],[19,63],[19,71],[19,79],[19,87],"pulls","branches","forks",{"_311":67,"_313":67},"connections",{"_311":67,"_312":67},"count","unfilledCount","emptyCount",{"_38":173,"_13":174,"_41":175,"_43":-5,"_45":46,"_47":176,"_49":50,"_51":177,"_17":67,"_54":97,"_56":-5,"_58":59,"_60":-5,"_113":360,"_18":361},{"_38":200,"_13":201,"_41":202,"_43":175,"_45":46,"_47":203,"_49":50,"_51":204,"_17":67,"_54":97,"_56":-5,"_58":59,"_60":-5,"_113":358,"_18":359},{"_38":208,"_13":209,"_41":210,"_43":202,"_45":46,"_47":211,"_49":50,"_51":212,"_17":213,"_54":55,"_56":214,"_58":59,"_60":-5,"_113":356,"_18":357},{"_38":191,"_13":192,"_41":193,"_43":175,"_45":46,"_47":194,"_49":50,"_51":195,"_17":196,"_54":24,"_56":197,"_58":59,"_60":-5,"_113":354,"_18":355},{"_38":183,"_13":184,"_41":185,"_43":175,"_45":46,"_47":186,"_49":50,"_51":187,"_17":67,"_54":55,"_56":188,"_58":59,"_60":-5,"_113":352,"_18":353},{"_38":94,"_13":19,"_41":44,"_43":-5,"_45":46,"_47":95,"_49":50,"_51":150,"_17":67,"_54":97,"_56":-5,"_58":59,"_60":-5,"_113":350,"_18":351},{"_38":86,"_13":87,"_41":88,"_43":44,"_45":46,"_47":89,"_49":50,"_51":170,"_17":91,"_54":55,"_56":92,"_58":59,"_60":-5,"_113":348,"_18":349},{"_38":78,"_13":79,"_41":80,"_43":44,"_45":46,"_47":81,"_49":50,"_51":167,"_17":83,"_54":55,"_56":84,"_58":59,"_60":-5,"_113":346,"_18":347},{"_38":70,"_13":71,"_41":72,"_43":44,"_45":46,"_47":73,"_49":50,"_51":164,"_17":75,"_54":55,"_56":76,"_58":59,"_60":-5,"_113":344,"_18":345},{"_38":62,"_13":63,"_41":64,"_43":44,"_45":46,"_47":65,"_49":50,"_51":161,"_17":67,"_54":55,"_56":68,"_58":59,"_60":-5,"_113":342,"_18":343},{"_38":39,"_13":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":158,"_17":53,"_54":55,"_56":57,"_58":59,"_60":-5,"_113":340,"_18":341},{"_38":125,"_13":126,"_41":127,"_43":-5,"_45":46,"_47":53,"_49":50,"_51":128,"_17":67,"_54":97,"_56":-5,"_58":59,"_60":-5,"_113":338,"_18":339},{"_38":142,"_13":143,"_41":144,"_43":127,"_45":46,"_47":145,"_49":50,"_51":146,"_17":138,"_54":55,"_56":147,"_58":59,"_60":-5,"_113":336,"_18":337},{"_38":133,"_13":134,"_41":135,"_43":127,"_45":46,"_47":136,"_49":50,"_51":137,"_17":138,"_54":55,"_56":139,"_58":59,"_60":-5,"_113":334,"_18":335},{"_38":116,"_13":117,"_41":118,"_43":-5,"_45":46,"_47":119,"_49":50,"_51":120,"_17":121,"_54":24,"_56":122,"_58":59,"_60":-5,"_113":332,"_18":333},{"_38":104,"_13":105,"_41":106,"_43":-5,"_45":46,"_47":107,"_49":50,"_51":108,"_17":109,"_54":110,"_56":111,"_58":59,"_60":112,"_113":330,"_18":331},[],[105],[],[117],[],[126,134],[],[126,143],[326,327],[126],[],[19,40],[],[19,63],[],[19,71],[],[19,79],[],[19,87],[320,321,322,323,324],[19],[],[174,184],[],[174,192],[],[174,201,209],[316],[174,201],[315,317,318],[174],["D",1772823903506],["D",1789515657103],{"_11":12,"_274":270},{"_11":12,"_268":-5,"_269":270,"_227":228,"_271":272,"_273":59},{"_17":107,"_13":16,"_38":46,"_260":217,"_261":-5,"_262":-5,"_263":-5,"_264":-5,"_265":-5,"_266":14,"_267":12},"ctx",{"_253":-5,"_291":400,"_401":402,"_403":404,"_405":59,"_406":59,"_407":59,"_408":50,"_409":-5,"_410":-7,"_411":-7,"_412":67,"_413":59,"_414":59,"_415":-5,"_416":59,"_417":59,"_418":59,"_419":-5},"ENV",{"_371":372,"_373":374,"_375":16,"_376":377,"_378":379,"_380":381,"_382":383,"_384":385,"_386":387,"_388":389,"_390":391,"_392":393,"_394":395,"_396":397,"_398":399},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]