Recent manifest requests

Signed in as {username}. Showing the latest {rows.length} requests.

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n {rows.map((row) => (\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n ))}\n \n

ID	Time	Method	Request	IP	Country	User agent	Referrer	Request ID	Status	Duration	Error
{row.id}	{row.requested_at}	{row.method}	\n \n {row.path}{row.query_string ? `?${row.query_string}` : \"\"}\n \n	{valueOrDash(row.ip_address)}	{valueOrDash(row.country)}	{valueOrDash(row.user_agent)}	{valueOrDash(row.referer)}	{valueOrDash(row.request_id)}	{row.response_status}	{row.duration_ms} ms	{valueOrDash(row.error_message)}

View source

\n \n \n \n );\n}\n","label",[85],"c9312aed-8db2-4f57-9286-64ef133118ca",["D",1788573085547],"import { Hono } from \"npm:hono@4\";\nimport {\n getOAuthUserData,\n oauthMiddleware,\n} from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { RequestsPage, type RequestLogRow } from \"./requests.tsx\";\n\ntype Manifest = Readonly<{\n source: string;\n contentType: string;\n}>;\n\n// Add future manifests here. Callers cannot supply upstream URLs.\nconst manifests: Readonly> = Object.freeze({\n \"/windows-terminal.appinstaller\": {\n source:\n \"https://raw.githubusercontent.com/wilt00/windows-terminal/personal/WindowsTerminalPersonal.appinstaller\",\n contentType: \"application/appinstaller\",\n },\n});\n\nconst MAX_MANIFEST_BYTES = 256 * 1024;\nconst RECENT_REQUEST_LIMIT = 100;\nconst ALLOWED_SOURCE_HOSTS = new Set([\"raw.githubusercontent.com\"]);\nconst SENSITIVE_NAME = /authorization|cookie|password|secret|token|api[-_]?key|val_town_access|^code$|^state$/i;\n\nlet schemaPromise: Promise | null = null;\n\nfunction ensureRequestLogSchema(): Promise {\n if (!schemaPromise) {\n schemaPromise = sqlite.execute(`CREATE TABLE IF NOT EXISTS request_logs (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n requested_at TEXT NOT NULL,\n method TEXT NOT NULL,\n path TEXT NOT NULL,\n query_string TEXT NOT NULL,\n ip_address TEXT,\n user_agent TEXT,\n referer TEXT,\n accept TEXT,\n accept_language TEXT,\n host TEXT,\n forwarded_for TEXT,\n country TEXT,\n request_id TEXT,\n val_town_user TEXT,\n response_status INTEGER NOT NULL,\n duration_ms INTEGER NOT NULL,\n error_message TEXT,\n headers_json TEXT NOT NULL\n )`).catch((error) => {\n schemaPromise = null;\n throw error;\n });\n }\n return schemaPromise;\n}\n\nfunction sanitizedQueryString(url: URL): string {\n const params = new URLSearchParams(url.search);\n for (const name of [...params.keys()]) {\n if (SENSITIVE_NAME.test(name)) params.set(name, \"[redacted]\");\n }\n return params.toString();\n}\n\nfunction headersForLog(headers: Headers): string {\n const loggedHeaders = Object.fromEntries(\n [...headers.entries()].map(([name, value]) => [\n name,\n SENSITIVE_NAME.test(name) ? \"[redacted]\" : value.slice(0, 2048),\n ]),\n );\n let serialized = JSON.stringify(loggedHeaders);\n while (serialized.length > 16 * 1024) {\n const lastName = Object.keys(loggedHeaders).pop();\n if (!lastName) break;\n delete loggedHeaders[lastName];\n serialized = JSON.stringify(loggedHeaders);\n }\n return serialized;\n}\n\nasync function logRequest(\n request: Request,\n responseStatus: number,\n startedAt: number,\n errorMessage: string | null,\n): Promise {\n try {\n await ensureRequestLogSchema();\n\n const url = new URL(request.url);\n const forwardedFor = request.headers.get(\"x-forwarded-for\");\n const ipAddress = request.headers.get(\"fly-client-ip\") ??\n request.headers.get(\"cf-connecting-ip\") ??\n request.headers.get(\"true-client-ip\") ??\n request.headers.get(\"x-real-ip\") ??\n forwardedFor?.split(\",\")[0]?.trim() ??\n null;\n\n await sqlite.execute({\n sql: `INSERT INTO request_logs (\n requested_at, method, path, query_string, ip_address, user_agent,\n referer, accept, accept_language, host, forwarded_for, country,\n request_id, val_town_user, response_status, duration_ms,\n error_message, headers_json\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n new Date().toISOString(),\n request.method,\n url.pathname,\n sanitizedQueryString(url),\n ipAddress,\n request.headers.get(\"user-agent\"),\n request.headers.get(\"referer\"),\n request.headers.get(\"accept\"),\n request.headers.get(\"accept-language\"),\n url.host,\n forwardedFor,\n request.headers.get(\"cf-ipcountry\") ?? request.headers.get(\"x-vercel-ip-country\"),\n request.headers.get(\"x-request-id\") ??\n request.headers.get(\"x-val-town-request-id\") ??\n request.headers.get(\"rndr-id\") ??\n request.headers.get(\"cf-ray\"),\n request.headers.get(\"x-val-town-user\"),\n responseStatus,\n Math.max(0, Math.round(performance.now() - startedAt)),\n errorMessage?.slice(0, 2048) ?? null,\n headersForLog(request.headers),\n ],\n });\n } catch (error) {\n // Request logging must never make the manifest endpoint unavailable.\n console.error(\"Failed to log manifest request\", error);\n }\n}\n\nasync function serveManifest(request: Request): Promise {\n if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n return new Response(\"Method not allowed\\n\", {\n status: 405,\n headers: { Allow: \"GET, HEAD\" },\n });\n }\n\n const path = new URL(request.url).pathname.replace(/\\/+$/, \"\") || \"/\";\n const manifest = manifests[path];\n if (!manifest) {\n return new Response(\"Not found\\n\", { status: 404 });\n }\n\n const source = new URL(manifest.source);\n if (source.protocol !== \"https:\" || !ALLOWED_SOURCE_HOSTS.has(source.hostname)) {\n console.error(`Rejected non-allowlisted manifest source: ${source}`);\n return new Response(\"Manifest source is misconfigured\\n\", { status: 500 });\n }\n\n const upstream = await fetch(source, {\n headers: {\n Accept: manifest.contentType,\n \"User-Agent\": \"wilt-manifest-proxy/1.0\",\n },\n redirect: \"follow\",\n });\n if (!upstream.ok) {\n console.error(`Manifest fetch failed: ${source} (${upstream.status})`);\n return new Response(\"Manifest is temporarily unavailable\\n\", { status: 502 });\n }\n\n const body = new Uint8Array(await upstream.arrayBuffer());\n if (body.byteLength > MAX_MANIFEST_BYTES) {\n console.error(`Manifest is too large: ${source} (${body.byteLength} bytes)`);\n return new Response(\"Manifest is too large\\n\", { status: 502 });\n }\n\n return new Response(request.method === \"HEAD\" ? null : body, {\n headers: {\n \"Content-Type\": manifest.contentType,\n \"Content-Length\": String(body.byteLength),\n \"Cache-Control\": \"public, max-age=300\",\n \"X-Content-Type-Options\": \"nosniff\",\n },\n });\n}\n\nconst app = new Hono();\n\napp.get(\"/requests\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user) return c.redirect(\"/auth/login\");\n if (!session.isOrgMember) return c.text(\"Forbidden\\n\", 403);\n\n await ensureRequestLogSchema();\n const result = await sqlite.execute({\n sql: `SELECT id, requested_at, method, path, query_string, ip_address,\n user_agent, referer, country, request_id, response_status, duration_ms,\n error_message\n FROM request_logs\n ORDER BY id DESC\n LIMIT ?`,\n args: [RECENT_REQUEST_LIMIT],\n });\n\n c.header(\"Cache-Control\", \"no-store\");\n return c.html(RequestsPage({\n rows: result.rows as unknown as RequestLogRow[],\n username: session.user.username ?? session.user.id,\n }));\n});\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.all(\"*\", (c) => serveManifest(c.req.raw));\napp.onError((error) => Promise.reject(error));\n\nconst appWithOAuth = oauthMiddleware(app.fetch);\n\nexport default async function (request: Request): Promise {\n const startedAt = performance.now();\n let responseStatus = 500;\n let errorMessage: string | null = null;\n\n try {\n const response = await appWithOAuth(request);\n responseStatus = response.status;\n return response;\n } catch (error) {\n errorMessage = error instanceof Error ? error.message : String(error);\n throw error;\n } finally {\n await logRequest(request, responseStatus, startedAt, errorMessage);\n }\n}\n","wilt-manifests",[63],"pulls","branches","forks","envVars",{"_189":20,"_191":20},"connections",{"_189":20,"_190":20},"count","unfilledCount","emptyCount",{"_30":177,"_13":63,"_61":62,"_40":-5,"_32":33,"_170":89,"_171":106,"_34":198,"_36":72,"_64":65,"_173":179,"_66":24,"_175":180,"_195":199,"_145":200},{"_30":169,"_13":85,"_61":84,"_40":-5,"_32":33,"_170":79,"_171":106,"_34":194,"_36":20,"_64":86,"_173":174,"_66":24,"_175":-5,"_195":196,"_145":197},["D",1788573037808],"children",[],[85],["D",1788573085547],[],[63],["D",1787463499801],["D",1789531852468],{"_11":12,"_144":69},{"_11":12,"_140":-5,"_68":69,"_25":67,"_141":142,"_143":24},{"_36":89,"_13":16,"_30":33,"_132":94,"_133":-5,"_134":-5,"_135":-5,"_136":-5,"_137":-5,"_138":14,"_139":12},"ctx",{"_50":-5,"_164":239,"_240":241,"_242":243,"_244":24,"_245":24,"_246":24,"_247":106,"_248":-5,"_249":-7,"_250":-7,"_251":20,"_252":24,"_253":24,"_254":-5,"_255":24,"_256":24,"_257":24,"_258":-5},"ENV",{"_210":211,"_212":213,"_214":16,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234,"_235":236,"_237":238},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History