Signed in as ${esc(v.email)}${extra}\n

`;\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\n// Open health check — no data behind it.\napp.get(\"/health\", (c) => c.text(\"ok\"));\n\nconst denied = (c: any, v: Viewer) =>\n c.html(\n page(\n \"No access\",\n `

No access

You're signed in as ${\n esc(v.email || \"an account with no email address\")\n }${v.verdict === \"blocked\" ? \", which has been blocked\" : \"\"}.

These dashboards are limited to TerraClear and Spinutech accounts. If you have a\nwork email, sign out and sign back in with it.

\n`,\n ),\n 403,\n );\n\n// Index — the one link worth distributing. Also where OAuth lands after login.\napp.get(\"/\", async (c) => {\n const v = await viewer(c);\n if (!v) return c.redirect(\"/auth/login\");\n if (v.machine) return c.text(\"ok\");\n const keys = Object.keys(DASHBOARDS).filter((k) => canSee(k, v));\n await log(v, \"/\", keys.length > 0);\n if (!keys.length) return denied(c, v);\n const cards = keys\n .map(\n (k) =>\n `

${\n esc(DASHBOARDS[k].label)\n }

${\n DASHBOARDS[k].note ? `

${esc(DASHBOARDS[k].note!)}

` : \"\"\n }`,\n )\n .join(\"\");\n const extra = v.verdict === \"owner\"\n ? `Access log`\n : \"\";\n return c.html(\n page(\n \"TerraClear dashboards\",\n `

TerraClear dashboards

${keys.length} view${keys.length === 1 ? \"\" : \"s\"} available to you.

\n${cards}${signedInFoot(v, extra)}`,\n ),\n );\n});\n\n// One route per dashboard, generated from the table.\nfor (const key of Object.keys(DASHBOARDS)) {\n app.get(\"/\" + key, async (c) => {\n const v = await viewer(c);\n if (!v) return c.redirect(\"/auth/login\");\n if (v.machine) return serveGz(key);\n const ok = canSee(key, v);\n await log(v, \"/\" + key, ok);\n if (ok) return serveGz(key);\n // Don't confirm what exists — send them to their own index instead.\n return v.verdict === \"team\" ? c.redirect(\"/\") : denied(c, v);\n });\n}\n\n// Access log — owner only.\napp.get(\"/who\", async (c) => {\n const v = await viewer(c);\n if (!v) return c.redirect(\"/auth/login\");\n if (!v.machine && v.verdict !== \"owner\") return c.notFound();\n const { rows } = await sqlite.execute(\n \"SELECT ts, email, username, route, verdict, allowed FROM access_log ORDER BY id DESC LIMIT 200\",\n );\n const body = rows.length\n ? `` +\n rows\n .map(\n (r: any) =>\n `${r.allowed ? \"allowed\" : \"denied · \" + esc(r.verdict)}`,\n )\n .join(\"\") + \"

When (UTC)	Email	Val Town	Route	Result
${esc(String(r.ts).replace(\"T\", \" \").slice(0, 19))}	${\n esc(r.email ?? \"—\")\n }	${esc(r.username ?? \"—\")}	${esc(r.route)}

\"\n : \"

No sign-ins recorded yet.

\";\n return c.html(\n page(\n \"Access log\",\n `

Access log

Most recent 200 human views. Pipeline requests aren't logged.

\n${body}

← Dashboards

`,\n ),\n );\n});\n\napp.notFound((c) => c.html(page(\"Not found\", `

Not found

`), 404));\n\nexport default oauthMiddleware(app.fetch);\n","label",[141],"d97a1f30-6b6c-4a56-8814-ffe062da933e","assemble.ts","01a03a2b-f076-7037-be66-26df603d7750",1,["D",1787682353284],"script","import { blob } from \"https://esm.town/v/std/blob/main.ts\";\n// Reassemble chunked (gzip+base64) uploads raw::NNN into the live HTML blob live:.\nconst out: Record = {};\nfor (const which of [\"amanda\", \"share\"]) {\n const entries = (await blob.list(\"raw:\" + which + \":\")).sort((a, b) => (a.key < b.key ? -1 : 1));\n if (!entries.length) { console.log(\"no chunks for\", which); continue; }\n let b64 = \"\";\n for (const e of entries) { const r = await blob.get(e.key); b64 += await r.text(); }\n const gz = Uint8Array.from(atob(b64), (c) => c.charCodeAt(0));\n const stream = new Response(gz).body!.pipeThrough(new DecompressionStream(\"gzip\"));\n const html = await new Response(stream).text();\n await blob.set(\"live:\" + which, html);\n out[which] = { chunks: entries.length, bytes: html.length };\n for (const e of entries) await blob.delete(e.key);\n}\nconsole.log(\"ASSEMBLED \" + JSON.stringify(out));\n",[158],"4fd5667e-7ff5-4e0b-8e43-f4d71e0e2574","asm_probe.ts","01a03a2b-f076-7037-be66-20993aa2afe6",["D",1787682353284],"import { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\nasync function sha256Hex(s: string): Promise {\n const data = new TextEncoder().encode(s);\n const digest = await crypto.subtle.digest(\"SHA-256\", data);\n return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nconst keys = await blob.list(\"asm:\");\nconst probeKey = \"asm:raw:share:004:00\";\nconst val = await blob.getJSON === undefined ? null : null; // noop\nconst text = await (await blob.get(probeKey)).text();\nconsole.log(JSON.stringify({\n listedKeys: keys.map((k: any) => k.key ?? k),\n probeKey,\n probeLen: text.length,\n probeSha256: await sha256Hex(text),\n expectedSha256: \"61b6440d2afdf9704fcbf0a0b8f7531e168f4f7a608c5be840bfdfa5fabd0012\",\n}, null, 2));\n",[166],"pulls","branches",2,"forks","envVars",{"_179":181,"_182":160},"connections",{"_179":20,"_180":20},"count","unfilledCount",3,"emptyCount",{"_32":165,"_13":166,"_142":167,"_144":-5,"_145":56,"_146":160,"_148":78,"_34":193,"_41":20,"_151":162,"_153":169,"_63":26,"_155":-5,"_187":194,"_111":195},{"_32":157,"_13":158,"_142":159,"_144":-5,"_145":56,"_146":160,"_148":78,"_34":190,"_41":20,"_151":162,"_153":163,"_63":26,"_155":-5,"_187":191,"_111":192},{"_32":140,"_13":141,"_142":143,"_144":-5,"_145":56,"_146":147,"_148":78,"_34":186,"_41":150,"_151":152,"_153":154,"_63":26,"_155":-5,"_187":188,"_111":189},["D",1787686454457],"children",[],[141],["D",1787682353284],[],[158],["D",1787682353284],[],[166],["D",1787333497510],["D",1789510270483],{"_11":12,"_110":106},{"_11":12,"_103":104,"_105":106,"_73":-5,"_107":108,"_109":26},{"_41":55,"_13":16,"_32":56,"_39":40,"_43":33,"_44":57,"_58":50,"_59":40,"_60":53,"_54":14,"_51":12},"ctx",{"_98":-5,"_132":234,"_235":236,"_237":238,"_239":26,"_240":26,"_241":26,"_242":78,"_243":-5,"_244":-7,"_245":-7,"_246":20,"_247":26,"_248":26,"_249":-5,"_250":26,"_251":26,"_252":26,"_253":-5},"ENV",{"_205":206,"_207":208,"_209":38,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Compare

Mergeauthintomain