[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_155":156,"_157":158},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_103":85,"_27":104,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":121,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",27,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","ef5d68ec-35c1-11f1-98c3-42b51c65c3df","name","fileType","http","content","// val/backend.ts\n// Val.town HTTP val — Deno-compatible TypeScript.\n//\n// Required val.town environment secrets:\n// MAPPED_AT_IDENTIFIER service account handle, e.g. \"mapped.at\"\n// MAPPED_AT_APP_PASSWORD service account app password (not the main password)\n// MAPPED_AT_PDS service account PDS URL, e.g. \"https://leccinum.us-west.host.bsky.network\"\n// MAPPED_AT_DID service account DID, e.g. \"did:plc:l5m5nuh5cvdatyn5fjxar2sh\"\n\nconst SERVICE_ACCOUNT_PDS = Deno.env.get(\"MAPPED_AT_PDS\") ?? \"\";\nconst SERVICE_ACCOUNT_DID = Deno.env.get(\"MAPPED_AT_DID\") ?? \"\";\n\n// ── Routing ───────────────────────────────────────────────────────────────────\n\nexport function handler(req: Request) {\n const url = new URL(req.url);\n\n if (req.method === \"GET\") {\n return Response.json({ ok: true });\n }\n\n if (req.method === \"OPTIONS\") {\n return Response.json({\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET,HEAD,PUT,PATCH,POST,DELETE\",\n }, { status: 204 });\n }\n\n if (req.method !== \"POST\") {\n return Response.json({ error: \"Method not allowed\" }, { status: 405 });\n }\n\n if (url.pathname === \"/register\") return handleRegister(req);\n if (url.pathname === \"/submit-trail\") return handleSubmitTrail(req);\n\n return Response.json({ error: \"Not found\" }, { status: 404 });\n}\n\n// ── Helpers ───────────────────────────────────────────────────────────────────\n\n// Resolves a DID to the PDS serviceEndpoint via the DID document.\n// Supports did:plc (via plc.directory) and did:web.\nasync function resolvePds(did: string): Promise {\n try {\n let docUrl: string;\n if (did.startsWith(\"did:plc:\")) {\n docUrl = `https://plc.directory/${did}`;\n } else if (did.startsWith(\"did:web:\")) {\n const domain = did.slice(8).replace(/:/g, \"/\");\n docUrl = `https://${domain}/.well-known/did.json`;\n } else {\n return null;\n }\n const res = await fetch(docUrl);\n if (!res.ok) return null;\n const doc = await res.json();\n const svc = (doc.service ?? []).find(\n (s: { type: string }) => s.type === \"AtprotoPersonalDataServer\",\n ) as { serviceEndpoint: string } | undefined;\n return svc?.serviceEndpoint ?? null;\n } catch {\n return null;\n }\n}\n\n// Authenticates as the service account and returns a short-lived access JWT.\n// Re-authenticates on every call — acceptable for low-traffic usage.\nasync function getServiceAccountToken(): Promise {\n const identifier = Deno.env.get(\"MAPPED_AT_IDENTIFIER\")!;\n const password = Deno.env.get(\"MAPPED_AT_APP_PASSWORD\")!;\n const res = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.server.createSession`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ identifier, password }),\n },\n );\n if (!res.ok) throw new Error(`Service account auth failed: ${res.status}`);\n const { accessJwt } = await res.json();\n return accessJwt;\n}\n\n// ── Handlers ──────────────────────────────────────────────────────────────────\n\nasync function handleRegister(req: Request): Promise {\n // Parse body\n let body: { did?: unknown };\n try {\n body = await req.json();\n } catch {\n return Response.json({ error: \"Invalid JSON\" }, { status: 400 });\n }\n\n const { did } = body;\n if (!did || typeof did !== \"string\") {\n return Response.json({ error: \"Missing required field: did\" }, {\n status: 400,\n });\n }\n if (!did.startsWith(\"did:\")) {\n return Response.json({ error: \"Invalid DID format\" }, { status: 400 });\n }\n\n // Verify profile exists on the user's PDS\n const pds = await resolvePds(did);\n if (!pds) {\n return Response.json({ error: \"Could not resolve DID to a PDS\" }, {\n status: 400,\n });\n }\n\n const profileRes = await fetch(\n `${pds}/xrpc/com.atproto.repo.getRecord?` +\n `repo=${encodeURIComponent(did)}&collection=at.mapped.profile&rkey=self`,\n );\n if (!profileRes.ok) {\n return Response.json({ error: \"at.mapped.profile not found on user PDS\" }, {\n status: 400,\n });\n }\n\n // Idempotency: return early if already registered\n const membersRes = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.repo.listRecords?` +\n `repo=${\n encodeURIComponent(SERVICE_ACCOUNT_DID)\n }&collection=at.mapped.member&limit=100`,\n );\n if (membersRes.ok) {\n const { records } = (await membersRes.json()) as {\n records: { value: { did: string } }[];\n };\n if ((records ?? []).some((r) => r.value.did === did)) {\n return Response.json({ ok: true });\n }\n }\n\n // Create member record on service account\n const token = await getServiceAccountToken();\n const createRes = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.repo.createRecord`,\n {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${token}`,\n },\n body: JSON.stringify({\n repo: SERVICE_ACCOUNT_DID,\n collection: \"at.mapped.member\",\n record: {\n $type: \"at.mapped.member\",\n did,\n joinedAt: new Date().toISOString(),\n },\n }),\n },\n );\n\n if (!createRes.ok) {\n const err = await createRes.text();\n return Response.json(\n { error: `Failed to create member record: ${err}` },\n 500,\n );\n }\n\n return Response.json({ ok: true });\n}\n\nasync function handleSubmitTrail(req: Request): Promise {\n // Parse body\n let body: {\n did?: unknown;\n trail?: {\n name?: unknown;\n polyline?: unknown;\n activityType?: unknown;\n locations?: unknown;\n };\n };\n try {\n body = await req.json();\n } catch {\n return Response.json({ error: \"Invalid JSON\" }, { status: 400 });\n }\n\n const { did, trail } = body;\n if (!did || typeof did !== \"string\") {\n return Response.json({ error: \"Missing required field: did\" }, {\n status: 400,\n });\n }\n if (!did.startsWith(\"did:\")) {\n return Response.json({ error: \"Invalid DID format\" }, { status: 400 });\n }\n if (!trail?.name || typeof trail.name !== \"string\") {\n return Response.json({ error: \"Missing required field: trail.name\" }, {\n status: 400,\n });\n }\n\n // Verify membership\n const membersRes = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.repo.listRecords?` +\n `repo=${\n encodeURIComponent(SERVICE_ACCOUNT_DID)\n }&collection=at.mapped.member&limit=100`,\n );\n if (!membersRes.ok) {\n return Response.json({ error: \"Could not verify membership\" }, {\n status: 500,\n });\n }\n const { records } = (await membersRes.json()) as {\n records: { value: { did: string } }[];\n };\n const isMember = (records ?? []).some((r) => r.value.did === did);\n if (!isMember) {\n return Response.json({ error: \"Not a registered member\" }, { status: 403 });\n }\n\n // Build trail record\n const trailRecord: Record = {\n $type: \"at.mapped.trail\",\n name: trail.name,\n contributor: did,\n };\n if (typeof trail.polyline === \"string\") trailRecord.polyline = trail.polyline;\n if (trail.activityType) trailRecord.activityType = trail.activityType;\n if (Array.isArray(trail.locations)) trailRecord.locations = trail.locations;\n\n // Create trail on service account\n const token = await getServiceAccountToken();\n const createRes = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.repo.createRecord`,\n {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${token}`,\n },\n body: JSON.stringify({\n repo: SERVICE_ACCOUNT_DID,\n collection: \"at.mapped.trail\",\n record: trailRecord,\n }),\n },\n );\n\n if (!createRes.ok) {\n const err = await createRes.text();\n return Response.json({ error: `Failed to create trail: ${err}` }, {\n status: 500,\n });\n }\n\n const { uri, cid } = (await createRes.json()) as {\n uri: string;\n cid: string;\n };\n return Response.json({ uri, cid });\n}","// val/backend.ts\n// Val.town HTTP val — Deno-compatible TypeScript.\n//\n// Required val.town environment secrets:\n// MAPPED_AT_IDENTIFIER service account handle, e.g. \"mapped.at\"\n// MAPPED_AT_APP_PASSWORD service account app password (not the main password)\n// MAPPED_AT_PDS service account PDS URL, e.g. \"https://leccinum.us-west.host.bsky.network\"\n// MAPPED_AT_DID service account DID, e.g. \"did:plc:l5m5nuh5cvdatyn5fjxar2sh\"\n\nconst SERVICE_ACCOUNT_PDS = Deno.env.get(\"MAPPED_AT_PDS\") ?? \"\";\nconst SERVICE_ACCOUNT_DID = Deno.env.get(\"MAPPED_AT_DID\") ?? \"\";\n\n// ── Routing ───────────────────────────────────────────────────────────────────\n\nexport function handler(req: Request) {\n const url = new URL(req.url);\n\n if (req.method === \"GET\") {\n return Response.json({ ok: true });\n }\n\n if (req.method !== \"POST\") {\n return Response.json({ error: \"Method not allowed\" }, { status: 405 });\n }\n\n if (url.pathname === \"/register\") return handleRegister(req);\n if (url.pathname === \"/submit-trail\") return handleSubmitTrail(req);\n\n return Response.json({ error: \"Not found\" }, { status: 404 });\n}\n\n// ── Helpers ───────────────────────────────────────────────────────────────────\n\n// Resolves a DID to the PDS serviceEndpoint via the DID document.\n// Supports did:plc (via plc.directory) and did:web.\nasync function resolvePds(did: string): Promise {\n try {\n let docUrl: string;\n if (did.startsWith(\"did:plc:\")) {\n docUrl = `https://plc.directory/${did}`;\n } else if (did.startsWith(\"did:web:\")) {\n const domain = did.slice(8).replace(/:/g, \"/\");\n docUrl = `https://${domain}/.well-known/did.json`;\n } else {\n return null;\n }\n const res = await fetch(docUrl);\n if (!res.ok) return null;\n const doc = await res.json();\n const svc = (doc.service ?? []).find(\n (s: { type: string }) => s.type === \"AtprotoPersonalDataServer\",\n ) as { serviceEndpoint: string } | undefined;\n return svc?.serviceEndpoint ?? null;\n } catch {\n return null;\n }\n}\n\n// Authenticates as the service account and returns a short-lived access JWT.\n// Re-authenticates on every call — acceptable for low-traffic usage.\nasync function getServiceAccountToken(): Promise {\n const identifier = Deno.env.get(\"MAPPED_AT_IDENTIFIER\")!;\n const password = Deno.env.get(\"MAPPED_AT_APP_PASSWORD\")!;\n const res = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.server.createSession`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ identifier, password }),\n },\n );\n if (!res.ok) throw new Error(`Service account auth failed: ${res.status}`);\n const { accessJwt } = await res.json();\n return accessJwt;\n}\n\n// ── Handlers ──────────────────────────────────────────────────────────────────\n\nasync function handleRegister(req: Request): Promise {\n // Parse body\n let body: { did?: unknown };\n try {\n body = await req.json();\n } catch {\n return Response.json({ error: \"Invalid JSON\" }, { status: 400 });\n }\n\n const { did } = body;\n if (!did || typeof did !== \"string\") {\n return Response.json({ error: \"Missing required field: did\" }, {\n status: 400,\n });\n }\n if (!did.startsWith(\"did:\")) {\n return Response.json({ error: \"Invalid DID format\" }, { status: 400 });\n }\n\n // Verify profile exists on the user's PDS\n const pds = await resolvePds(did);\n if (!pds) {\n return Response.json({ error: \"Could not resolve DID to a PDS\" }, {\n status: 400,\n });\n }\n\n const profileRes = await fetch(\n `${pds}/xrpc/com.atproto.repo.getRecord?` +\n `repo=${encodeURIComponent(did)}&collection=at.mapped.profile&rkey=self`,\n );\n if (!profileRes.ok) {\n return Response.json({ error: \"at.mapped.profile not found on user PDS\" }, {\n status: 400,\n });\n }\n\n // Idempotency: return early if already registered\n const membersRes = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.repo.listRecords?` +\n `repo=${\n encodeURIComponent(SERVICE_ACCOUNT_DID)\n }&collection=at.mapped.member&limit=100`,\n );\n if (membersRes.ok) {\n const { records } = (await membersRes.json()) as {\n records: { value: { did: string } }[];\n };\n if ((records ?? []).some((r) => r.value.did === did)) {\n return Response.json({ ok: true });\n }\n }\n\n // Create member record on service account\n const token = await getServiceAccountToken();\n const createRes = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.repo.createRecord`,\n {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${token}`,\n },\n body: JSON.stringify({\n repo: SERVICE_ACCOUNT_DID,\n collection: \"at.mapped.member\",\n record: {\n $type: \"at.mapped.member\",\n did,\n joinedAt: new Date().toISOString(),\n },\n }),\n },\n );\n\n if (!createRes.ok) {\n const err = await createRes.text();\n return Response.json(\n { error: `Failed to create member record: ${err}` },\n 500,\n );\n }\n\n return Response.json({ ok: true });\n}\n\nasync function handleSubmitTrail(req: Request): Promise {\n // Parse body\n let body: {\n did?: unknown;\n trail?: {\n name?: unknown;\n polyline?: unknown;\n activityType?: unknown;\n locations?: unknown;\n };\n };\n try {\n body = await req.json();\n } catch {\n return Response.json({ error: \"Invalid JSON\" }, { status: 400 });\n }\n\n const { did, trail } = body;\n if (!did || typeof did !== \"string\") {\n return Response.json({ error: \"Missing required field: did\" }, {\n status: 400,\n });\n }\n if (!did.startsWith(\"did:\")) {\n return Response.json({ error: \"Invalid DID format\" }, { status: 400 });\n }\n if (!trail?.name || typeof trail.name !== \"string\") {\n return Response.json({ error: \"Missing required field: trail.name\" }, {\n status: 400,\n });\n }\n\n // Verify membership\n const membersRes = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.repo.listRecords?` +\n `repo=${\n encodeURIComponent(SERVICE_ACCOUNT_DID)\n }&collection=at.mapped.member&limit=100`,\n );\n if (!membersRes.ok) {\n return Response.json({ error: \"Could not verify membership\" }, {\n status: 500,\n });\n }\n const { records } = (await membersRes.json()) as {\n records: { value: { did: string } }[];\n };\n const isMember = (records ?? []).some((r) => r.value.did === did);\n if (!isMember) {\n return Response.json({ error: \"Not a registered member\" }, { status: 403 });\n }\n\n // Build trail record\n const trailRecord: Record = {\n $type: \"at.mapped.trail\",\n name: trail.name,\n contributor: did,\n };\n if (typeof trail.polyline === \"string\") trailRecord.polyline = trail.polyline;\n if (trail.activityType) trailRecord.activityType = trail.activityType;\n if (Array.isArray(trail.locations)) trailRecord.locations = trail.locations;\n\n // Create trail on service account\n const token = await getServiceAccountToken();\n const createRes = await fetch(\n `${SERVICE_ACCOUNT_PDS}/xrpc/com.atproto.repo.createRecord`,\n {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${token}`,\n },\n body: JSON.stringify({\n repo: SERVICE_ACCOUNT_DID,\n collection: \"at.mapped.trail\",\n record: trailRecord,\n }),\n },\n );\n\n if (!createRes.ok) {\n const err = await createRes.text();\n return Response.json({ error: `Failed to create trail: ${err}` }, {\n status: 500,\n });\n }\n\n const { uri, cid } = (await createRes.json()) as {\n uri: string;\n cid: string;\n };\n return Response.json({ uri, cid });\n}","createdAt",["D",1775930741972],"branchVersion","branchId","ef5ab78c-35c1-11f1-98c3-42b51c65c3df","id","ef5a0080-35c1-11f1-98c3-42b51c65c3df","mapped-at-backend",["D",1775924248580],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Backend for mapped.at","imageUrl","ecbce1e5-343d-483e-99fe-bc35afe6b93a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","a22192bb-4fed-4a1b-9182-d6c09e531cf8","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_102":98},"org",{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",35,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","wilhelm","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvdXBsb2FkZWQvaW1nXzJwUXQza21ONmFtMEtyWFAxa3gzV3dTbGdXTSJ9","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":151,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":152,"_79":153,"_81":154,"_83":25},"tree",[146],"files",[146],"counts",{"_134":61,"_135":136,"_137":61,"_138":139,"_140":141},"contents",[126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":45,"_27":133},"0db8da10-35d1-11f1-8166-42b51c65c3df","parentId","latest",["D",1775930741972],26,"label",[28],"pulls","branches",1,"forks","envVars",{"_142":144,"_145":61},"connections",{"_142":61,"_143":61},"count","unfilledCount",4,"emptyCount",{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":147,"_13":131,"_33":34,"_35":37,"_24":25,"_132":45,"_148":149,"_27":150},["D",1775930741972],"children",[],[28],["D",1775924248580],{"_95":94,"_102":98},{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_123":188,"_189":190,"_191":192,"_193":25,"_194":25,"_195":25,"_196":121,"_197":-5,"_198":-7,"_199":-7,"_200":61,"_201":25,"_202":25,"_203":-5,"_204":25,"_205":25,"_206":25,"_207":-5},"ENV",{"_159":160,"_161":162,"_163":85,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v27