[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_158":159,"_160":161},"routes/_app.x.$handle.$name",{"_99":98,"_32":45,"_107":89,"_27":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":58,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",2,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","index.ts","latestPath","fileId","d914dba4-9eb4-11f1-acd4-1607ee4eb77e","name","fileType","http","content","type Manifest = Readonly<{\n source: string;\n contentType: string;\n}>;\n\n// Add future manifests here. Callers cannot supply upstream URLs.\nconst manifests: Readonly> = Object.freeze({\n \"/windows-terminal.appinstaller\": {\n source:\n \"https://raw.githubusercontent.com/wilt00/windows-terminal/personal/WindowsTerminalPersonal.appinstaller\",\n contentType: \"application/appinstaller\",\n },\n});\n\nconst MAX_MANIFEST_BYTES = 256 * 1024;\nconst ALLOWED_SOURCE_HOSTS = new Set([\"raw.githubusercontent.com\"]);\n\nexport default async function (request: Request): Promise {\n if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n return new Response(\"Method not allowed\\n\", {\n status: 405,\n headers: { Allow: \"GET, HEAD\" },\n });\n }\n\n const path = new URL(request.url).pathname.replace(/\\/+$/, \"\") || \"/\";\n const manifest = manifests[path];\n if (!manifest) {\n return new Response(\"Not found\\n\", { status: 404 });\n }\n\n const source = new URL(manifest.source);\n if (source.protocol !== \"https:\" || !ALLOWED_SOURCE_HOSTS.has(source.hostname)) {\n console.error(`Rejected non-allowlisted manifest source: ${source}`);\n return new Response(\"Manifest source is misconfigured\\n\", { status: 500 });\n }\n\n const upstream = await fetch(source, {\n headers: {\n Accept: manifest.contentType,\n \"User-Agent\": \"wilt-manifest-proxy/1.0\",\n },\n redirect: \"follow\",\n });\n if (!upstream.ok) {\n console.error(`Manifest fetch failed: ${source} (${upstream.status})`);\n return new Response(\"Manifest is temporarily unavailable\\n\", { status: 502 });\n }\n\n const body = new Uint8Array(await upstream.arrayBuffer());\n if (body.byteLength > MAX_MANIFEST_BYTES) {\n console.error(`Manifest is too large: ${source} (${body.byteLength} bytes)`);\n return new Response(\"Manifest is too large\\n\", { status: 502 });\n }\n\n return new Response(request.method === \"HEAD\" ? null : body, {\n headers: {\n \"Content-Type\": manifest.contentType,\n \"Content-Length\": String(body.byteLength),\n \"Cache-Control\": \"public, max-age=300\",\n \"X-Content-Type-Options\": \"nosniff\",\n },\n });\n}\n","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\ntype Manifest = Readonly<{\n source: string;\n contentType: string;\n}>;\n\n// Add future manifests here. Callers cannot supply upstream URLs.\nconst manifests: Readonly> = Object.freeze({\n \"/windows-terminal.appinstaller\": {\n source:\n \"https://raw.githubusercontent.com/wilt00/windows-terminal/personal/WindowsTerminalPersonal.appinstaller\",\n contentType: \"application/appinstaller\",\n },\n});\n\nconst MAX_MANIFEST_BYTES = 256 * 1024;\nconst ALLOWED_SOURCE_HOSTS = new Set([\"raw.githubusercontent.com\"]);\nconst SENSITIVE_NAME = /authorization|cookie|password|secret|token|api[-_]?key|val_town_access/i;\n\nlet schemaPromise: Promise | null = null;\n\nfunction ensureRequestLogSchema(): Promise {\n if (!schemaPromise) {\n schemaPromise = sqlite.execute(`CREATE TABLE IF NOT EXISTS request_logs (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n requested_at TEXT NOT NULL,\n method TEXT NOT NULL,\n path TEXT NOT NULL,\n query_string TEXT NOT NULL,\n ip_address TEXT,\n user_agent TEXT,\n referer TEXT,\n accept TEXT,\n accept_language TEXT,\n host TEXT,\n forwarded_for TEXT,\n country TEXT,\n request_id TEXT,\n val_town_user TEXT,\n response_status INTEGER NOT NULL,\n duration_ms INTEGER NOT NULL,\n error_message TEXT,\n headers_json TEXT NOT NULL\n )`).catch((error) => {\n schemaPromise = null;\n throw error;\n });\n }\n return schemaPromise;\n}\n\nfunction sanitizedQueryString(url: URL): string {\n const params = new URLSearchParams(url.search);\n for (const name of [...params.keys()]) {\n if (SENSITIVE_NAME.test(name)) params.set(name, \"[redacted]\");\n }\n return params.toString();\n}\n\nfunction headersForLog(headers: Headers): string {\n const entries = [...headers.entries()].map(([name, value]) => [\n name,\n SENSITIVE_NAME.test(name) ? \"[redacted]\" : value.slice(0, 2048),\n ]);\n return JSON.stringify(Object.fromEntries(entries)).slice(0, 16 * 1024);\n}\n\nasync function logRequest(\n request: Request,\n responseStatus: number,\n startedAt: number,\n errorMessage: string | null,\n): Promise {\n try {\n await ensureRequestLogSchema();\n\n const url = new URL(request.url);\n const forwardedFor = request.headers.get(\"x-forwarded-for\");\n const ipAddress = request.headers.get(\"fly-client-ip\") ??\n request.headers.get(\"cf-connecting-ip\") ??\n request.headers.get(\"x-real-ip\") ??\n forwardedFor?.split(\",\")[0]?.trim() ??\n null;\n\n await sqlite.execute({\n sql: `INSERT INTO request_logs (\n requested_at, method, path, query_string, ip_address, user_agent,\n referer, accept, accept_language, host, forwarded_for, country,\n request_id, val_town_user, response_status, duration_ms,\n error_message, headers_json\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n new Date().toISOString(),\n request.method,\n url.pathname,\n sanitizedQueryString(url),\n ipAddress,\n request.headers.get(\"user-agent\"),\n request.headers.get(\"referer\"),\n request.headers.get(\"accept\"),\n request.headers.get(\"accept-language\"),\n url.host,\n forwardedFor,\n request.headers.get(\"cf-ipcountry\") ?? request.headers.get(\"x-vercel-ip-country\"),\n request.headers.get(\"x-request-id\") ?? request.headers.get(\"x-val-town-request-id\"),\n request.headers.get(\"x-val-town-user\"),\n responseStatus,\n Math.max(0, Math.round(performance.now() - startedAt)),\n errorMessage?.slice(0, 2048) ?? null,\n headersForLog(request.headers),\n ],\n });\n } catch (error) {\n // Request logging must never make the manifest endpoint unavailable.\n console.error(\"Failed to log manifest request\", error);\n }\n}\n\nasync function serveManifest(request: Request): Promise {\n if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n return new Response(\"Method not allowed\\n\", {\n status: 405,\n headers: { Allow: \"GET, HEAD\" },\n });\n }\n\n const path = new URL(request.url).pathname.replace(/\\/+$/, \"\") || \"/\";\n const manifest = manifests[path];\n if (!manifest) {\n return new Response(\"Not found\\n\", { status: 404 });\n }\n\n const source = new URL(manifest.source);\n if (source.protocol !== \"https:\" || !ALLOWED_SOURCE_HOSTS.has(source.hostname)) {\n console.error(`Rejected non-allowlisted manifest source: ${source}`);\n return new Response(\"Manifest source is misconfigured\\n\", { status: 500 });\n }\n\n const upstream = await fetch(source, {\n headers: {\n Accept: manifest.contentType,\n \"User-Agent\": \"wilt-manifest-proxy/1.0\",\n },\n redirect: \"follow\",\n });\n if (!upstream.ok) {\n console.error(`Manifest fetch failed: ${source} (${upstream.status})`);\n return new Response(\"Manifest is temporarily unavailable\\n\", { status: 502 });\n }\n\n const body = new Uint8Array(await upstream.arrayBuffer());\n if (body.byteLength > MAX_MANIFEST_BYTES) {\n console.error(`Manifest is too large: ${source} (${body.byteLength} bytes)`);\n return new Response(\"Manifest is too large\\n\", { status: 502 });\n }\n\n return new Response(request.method === \"HEAD\" ? null : body, {\n headers: {\n \"Content-Type\": manifest.contentType,\n \"Content-Length\": String(body.byteLength),\n \"Cache-Control\": \"public, max-age=300\",\n \"X-Content-Type-Options\": \"nosniff\",\n },\n });\n}\n\nexport default async function (request: Request): Promise {\n const startedAt = performance.now();\n let responseStatus = 500;\n let errorMessage: string | null = null;\n\n try {\n const response = await serveManifest(request);\n responseStatus = response.status;\n return response;\n } catch (error) {\n errorMessage = error instanceof Error ? error.message : String(error);\n throw error;\n } finally {\n await logRequest(request, responseStatus, startedAt, errorMessage);\n }\n}\n","createdAt",["D",1788572528838],"branchVersion","branchId","b16fe429-7aff-4c9b-8160-512537a30958","id","b7e1bc2d-3953-45ad-8e34-44af02f2156c","manifestProxy",["D",1787463499801],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Allowlisted proxy with manifest MIME types","imageUrl","febc4285-e6a1-4c0f-8bfb-c068b09ce46d","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","b0fc47c7-b6cd-4ddb-a95a-0eb75d322130","tursoName","b7e1bc2d395345ad8e3444af02f2156c","tursoHostname","b7e1bc2d395345ad8e3444af02f2156c-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789531852468],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_106":102},"org",{"_99":98,"_100":-5,"_101":102,"_18":55,"_103":104,"_105":25},"branch",{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"isOwned",4,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","wilt","handle","displayName","avatar","https://secure.gravatar.com/avatar/95316a1d4fbd8be9c802a4e1e92fb9e9.jpg?s=200&d=identicon","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":153,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":154,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":155,"_83":156,"_85":157,"_87":25},"tree",[148],"files",[148],"counts",{"_138":62,"_139":134,"_140":62,"_141":142,"_143":144},"contents",[129],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":133,"_13":134,"_33":34,"_35":37,"_24":25,"_135":136,"_27":137},"ab6d40a0-90d2-4616-9df2-41afd61c0208","parentId","latest",["D",1788572528838],1,"label","wilt-manifests",[28],"pulls","branches","forks","envVars",{"_145":62,"_147":62},"connections",{"_145":62,"_146":62},"count","unfilledCount","emptyCount",{"_43":130,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_132":25,"_38":149,"_13":134,"_33":34,"_35":37,"_24":25,"_135":136,"_150":151,"_27":152},["D",1788572528838],"children",[],[28],["D",1787463499801],["D",1789531852468],{"_99":98,"_106":102},{"_99":98,"_100":-5,"_101":102,"_18":55,"_103":104,"_105":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_126":191,"_192":193,"_194":195,"_196":25,"_197":25,"_198":25,"_199":58,"_200":-5,"_201":-7,"_202":-7,"_203":62,"_204":25,"_205":25,"_206":-5,"_207":25,"_208":25,"_209":25,"_210":-5},"ENV",{"_162":163,"_164":165,"_166":89,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v2