brine

a vault for preserved objects. everything on the wire is a brine blob: pickled, header-trimmed, sealed under 128-bit XOR, base64url'd. untrusted blobs are decoded inside a sandboxed subprocess.

POST your blob to /<blob>, or open /<blob> in a browser to see the decoded result. The object must be a dict carrying an action key and optional params.

`home`	this page, over the wire
`hello`	params: {name} — say hi
`register`	params: {username, password} — open an account
`login`	params: {username, password} — get a session token
`whoami`	params: {token} — check a session token
`encrypt`	params: {data} — seal a string into a brine blob
`decrypt`	params: {blob} — open a brine blob (decoded in the sandbox)
`adminbot`	params: {url} — have the adminbot visit a URL and screenshot it. `url` is base64-encoded. Local file access is, obviously, disabled.

console

here's one on the house — {"action": "home"} seals to s5p7FKCL156RLWhRh78u60yy. the rest is on you.