[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_169":170,"_171":172},"routes/_app.x.$handle.$name",{"_98":97,"_31":43,"_106":88,"_26":107,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":24,"_121":122,"_123":57,"_124":-5,"_125":-5,"_126":127},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",3,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","requests.tsx","latestPath","fileId","313f2a52-a8cc-11f1-9588-1607ee4eb77e","name","fileType","script","content","/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\n\nexport type RequestLogRow = {\n id: number;\n requested_at: string;\n method: string;\n path: string;\n query_string: string;\n ip_address: string | null;\n user_agent: string | null;\n referer: string | null;\n country: string | null;\n request_id: string | null;\n response_status: number;\n duration_ms: number;\n error_message: string | null;\n};\n\ntype RequestsPageProps = {\n rows: RequestLogRow[];\n username: string;\n};\n\nfunction valueOrDash(value: string | number | null): string {\n return value === null || value === \"\" ? \"—\" : String(value);\n}\n\nexport function RequestsPage({ rows, username }: RequestsPageProps) {\n return (\n <>\n {raw(\"\")}\n \n \n \n \n Recent manifest requests\n \n \n

Recent manifest requests

Signed in as {username}. Showing the latest {rows.length} requests.

\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n {rows.map((row) => (\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n ))}\n \n

ID	Time	Method	Request	IP	Country	User agent	Referrer	Request ID	Status	Duration	Error
{row.id}	{row.requested_at}	{row.method}	\n \n {row.path}{row.query_string ? `?${row.query_string}` : \"\"}\n \n	{valueOrDash(row.ip_address)}	{valueOrDash(row.country)}	{valueOrDash(row.user_agent)}	{valueOrDash(row.referer)}	{valueOrDash(row.request_id)}	{row.response_status}	{row.duration_ms} ms	{valueOrDash(row.error_message)}

View source

\n \n \n \n );\n}\n","createdAt",["D",1788573037808],"branchVersion","branchId","b16fe429-7aff-4c9b-8160-512537a30958","id","b7e1bc2d-3953-45ad-8e34-44af02f2156c","manifestProxy",["D",1787463499801],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Allowlisted proxy with manifest MIME types","imageUrl","febc4285-e6a1-4c0f-8bfb-c068b09ce46d","pinnedFileId","d914dba4-9eb4-11f1-acd4-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","b0fc47c7-b6cd-4ddb-a95a-0eb75d322130","tursoName","b7e1bc2d395345ad8e3444af02f2156c","tursoHostname","b7e1bc2d395345ad8e3444af02f2156c-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789531852468],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_105":101},"org",{"_98":97,"_99":-5,"_100":101,"_18":53,"_102":103,"_104":24},"branch",{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"isOwned",4,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","wilt","handle","displayName","avatar","https://secure.gravatar.com/avatar/95316a1d4fbd8be9c802a4e1e92fb9e9.jpg?s=200&d=identicon","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":164,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":165,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":166,"_82":167,"_84":168,"_86":24},"tree",[155,156],"files",[155,156],"counts",{"_145":61,"_146":140,"_147":61,"_148":149,"_150":151},"contents",[128,129],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":136,"_31":137,"_29":55,"_131":-5,"_39":40,"_38":138,"_132":24,"_36":139,"_13":140,"_32":141,"_34":142,"_23":24,"_134":143,"_26":144},{"_41":130,"_31":27,"_29":30,"_131":-5,"_39":40,"_38":14,"_132":57,"_36":133,"_13":61,"_32":33,"_34":35,"_23":24,"_134":-5,"_26":135},"65879683-8e22-4b0e-a638-f3c2c2cdef53","parentId","latest",["D",1788573037808],"label",[27],"ab6d40a0-90d2-4616-9df2-41afd61c0208","index.ts",2,["D",1788572528838],1,"http","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\ntype Manifest = Readonly<{\n source: string;\n contentType: string;\n}>;\n\n// Add future manifests here. Callers cannot supply upstream URLs.\nconst manifests: Readonly> = Object.freeze({\n \"/windows-terminal.appinstaller\": {\n source:\n \"https://raw.githubusercontent.com/wilt00/windows-terminal/personal/WindowsTerminalPersonal.appinstaller\",\n contentType: \"application/appinstaller\",\n },\n});\n\nconst MAX_MANIFEST_BYTES = 256 * 1024;\nconst ALLOWED_SOURCE_HOSTS = new Set([\"raw.githubusercontent.com\"]);\nconst SENSITIVE_NAME = /authorization|cookie|password|secret|token|api[-_]?key|val_town_access/i;\n\nlet schemaPromise: Promise | null = null;\n\nfunction ensureRequestLogSchema(): Promise {\n if (!schemaPromise) {\n schemaPromise = sqlite.execute(`CREATE TABLE IF NOT EXISTS request_logs (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n requested_at TEXT NOT NULL,\n method TEXT NOT NULL,\n path TEXT NOT NULL,\n query_string TEXT NOT NULL,\n ip_address TEXT,\n user_agent TEXT,\n referer TEXT,\n accept TEXT,\n accept_language TEXT,\n host TEXT,\n forwarded_for TEXT,\n country TEXT,\n request_id TEXT,\n val_town_user TEXT,\n response_status INTEGER NOT NULL,\n duration_ms INTEGER NOT NULL,\n error_message TEXT,\n headers_json TEXT NOT NULL\n )`).catch((error) => {\n schemaPromise = null;\n throw error;\n });\n }\n return schemaPromise;\n}\n\nfunction sanitizedQueryString(url: URL): string {\n const params = new URLSearchParams(url.search);\n for (const name of [...params.keys()]) {\n if (SENSITIVE_NAME.test(name)) params.set(name, \"[redacted]\");\n }\n return params.toString();\n}\n\nfunction headersForLog(headers: Headers): string {\n const entries = [...headers.entries()].map(([name, value]) => [\n name,\n SENSITIVE_NAME.test(name) ? \"[redacted]\" : value.slice(0, 2048),\n ]);\n return JSON.stringify(Object.fromEntries(entries)).slice(0, 16 * 1024);\n}\n\nasync function logRequest(\n request: Request,\n responseStatus: number,\n startedAt: number,\n errorMessage: string | null,\n): Promise {\n try {\n await ensureRequestLogSchema();\n\n const url = new URL(request.url);\n const forwardedFor = request.headers.get(\"x-forwarded-for\");\n const ipAddress = request.headers.get(\"fly-client-ip\") ??\n request.headers.get(\"cf-connecting-ip\") ??\n request.headers.get(\"x-real-ip\") ??\n forwardedFor?.split(\",\")[0]?.trim() ??\n null;\n\n await sqlite.execute({\n sql: `INSERT INTO request_logs (\n requested_at, method, path, query_string, ip_address, user_agent,\n referer, accept, accept_language, host, forwarded_for, country,\n request_id, val_town_user, response_status, duration_ms,\n error_message, headers_json\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n new Date().toISOString(),\n request.method,\n url.pathname,\n sanitizedQueryString(url),\n ipAddress,\n request.headers.get(\"user-agent\"),\n request.headers.get(\"referer\"),\n request.headers.get(\"accept\"),\n request.headers.get(\"accept-language\"),\n url.host,\n forwardedFor,\n request.headers.get(\"cf-ipcountry\") ?? request.headers.get(\"x-vercel-ip-country\"),\n request.headers.get(\"x-request-id\") ?? request.headers.get(\"x-val-town-request-id\"),\n request.headers.get(\"x-val-town-user\"),\n responseStatus,\n Math.max(0, Math.round(performance.now() - startedAt)),\n errorMessage?.slice(0, 2048) ?? null,\n headersForLog(request.headers),\n ],\n });\n } catch (error) {\n // Request logging must never make the manifest endpoint unavailable.\n console.error(\"Failed to log manifest request\", error);\n }\n}\n\nasync function serveManifest(request: Request): Promise {\n if (request.method !== \"GET\" && request.method !== \"HEAD\") {\n return new Response(\"Method not allowed\\n\", {\n status: 405,\n headers: { Allow: \"GET, HEAD\" },\n });\n }\n\n const path = new URL(request.url).pathname.replace(/\\/+$/, \"\") || \"/\";\n const manifest = manifests[path];\n if (!manifest) {\n return new Response(\"Not found\\n\", { status: 404 });\n }\n\n const source = new URL(manifest.source);\n if (source.protocol !== \"https:\" || !ALLOWED_SOURCE_HOSTS.has(source.hostname)) {\n console.error(`Rejected non-allowlisted manifest source: ${source}`);\n return new Response(\"Manifest source is misconfigured\\n\", { status: 500 });\n }\n\n const upstream = await fetch(source, {\n headers: {\n Accept: manifest.contentType,\n \"User-Agent\": \"wilt-manifest-proxy/1.0\",\n },\n redirect: \"follow\",\n });\n if (!upstream.ok) {\n console.error(`Manifest fetch failed: ${source} (${upstream.status})`);\n return new Response(\"Manifest is temporarily unavailable\\n\", { status: 502 });\n }\n\n const body = new Uint8Array(await upstream.arrayBuffer());\n if (body.byteLength > MAX_MANIFEST_BYTES) {\n console.error(`Manifest is too large: ${source} (${body.byteLength} bytes)`);\n return new Response(\"Manifest is too large\\n\", { status: 502 });\n }\n\n return new Response(request.method === \"HEAD\" ? null : body, {\n headers: {\n \"Content-Type\": manifest.contentType,\n \"Content-Length\": String(body.byteLength),\n \"Cache-Control\": \"public, max-age=300\",\n \"X-Content-Type-Options\": \"nosniff\",\n },\n });\n}\n\nexport default async function (request: Request): Promise {\n const startedAt = performance.now();\n let responseStatus = 500;\n let errorMessage: string | null = null;\n\n try {\n const response = await serveManifest(request);\n responseStatus = response.status;\n return response;\n } catch (error) {\n errorMessage = error instanceof Error ? error.message : String(error);\n throw error;\n } finally {\n await logRequest(request, responseStatus, startedAt, errorMessage);\n }\n}\n","wilt-manifests",[137],"pulls","branches","forks","envVars",{"_152":61,"_154":61},"connections",{"_152":61,"_153":61},"count","unfilledCount","emptyCount",{"_41":136,"_31":137,"_29":55,"_131":-5,"_39":40,"_38":138,"_132":24,"_36":161,"_13":140,"_32":141,"_34":142,"_23":24,"_134":143,"_158":162,"_26":163},{"_41":130,"_31":27,"_29":30,"_131":-5,"_39":40,"_38":14,"_132":57,"_36":157,"_13":61,"_32":33,"_34":35,"_23":24,"_134":-5,"_158":159,"_26":160},["D",1788573037808],"children",[],[27],["D",1788572528838],[],[137],["D",1787463499801],["D",1789531852468],{"_98":97,"_105":101},{"_98":97,"_99":-5,"_100":101,"_18":53,"_102":103,"_104":24},{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"ctx",{"_80":-5,"_125":202,"_203":204,"_205":206,"_207":24,"_208":24,"_209":24,"_210":57,"_211":-5,"_212":-7,"_213":-7,"_214":61,"_215":24,"_216":24,"_217":-5,"_218":24,"_219":24,"_220":24,"_221":-5},"ENV",{"_173":174,"_175":176,"_177":88,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v3