[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_110":111,"_112":113},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","fhaddad","name","splittab","path","backend/db.ts","project",{"_22":48,"_11":12,"_35":49,"_50":-5,"_51":44,"_52":53,"_54":53,"_55":56,"_57":-5,"_58":59,"_60":61,"_62":34,"_63":-5,"_64":-5,"_65":66,"_67":68,"_69":70,"_71":72,"_73":74,"_75":-5,"_76":77,"_78":77,"_79":80,"_81":80,"_82":80,"_83":77,"_84":77,"_85":86,"_87":88,"_89":90,"_91":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/fhaddad/splittab/code/backend/db.ts","extension","id","41f64663-09fd-4c41-9de5-b41c46d04e41","db.ts","fileId","9ac2f920-9c80-11f1-9834-1607ee4eb77e","parentId","a9a6b58a-2656-4264-815f-80df2ed2f808","branchId","c697c2f1-8952-43c1-bb72-ac0b37be5f2a","branchVersion",44,"latest",true,"createdAt",["D",1787404269741],"version",8,"fileType","script","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport bcrypt from \"npm:bcryptjs\";\n\nexport async function initDb() {\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS users (\n id TEXT PRIMARY KEY,\n username TEXT UNIQUE NOT NULL,\n email TEXT UNIQUE,\n password_hash TEXT NOT NULL,\n plan TEXT NOT NULL DEFAULT 'free',\n stripe_customer_id TEXT,\n stripe_subscription_id TEXT,\n created_at INTEGER NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS groups (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n currency TEXT NOT NULL DEFAULT '€',\n invite_code TEXT UNIQUE NOT NULL,\n created_by TEXT NOT NULL,\n created_at INTEGER NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS group_members (\n group_id TEXT NOT NULL,\n user_id TEXT NOT NULL,\n joined_at INTEGER NOT NULL,\n PRIMARY KEY (group_id, user_id)\n )`,\n `CREATE TABLE IF NOT EXISTS expenses (\n id TEXT PRIMARY KEY,\n group_id TEXT NOT NULL,\n title TEXT NOT NULL,\n paid_by TEXT NOT NULL,\n total_amount REAL NOT NULL,\n created_by TEXT NOT NULL,\n created_at INTEGER NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS expense_items (\n id TEXT PRIMARY KEY,\n expense_id TEXT NOT NULL,\n name TEXT NOT NULL,\n price REAL NOT NULL,\n assigned_to TEXT NOT NULL DEFAULT '[]'\n )`,\n `CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n created_at INTEGER NOT NULL,\n expires_at INTEGER NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS password_resets (\n token TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n created_at INTEGER NOT NULL,\n expires_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0\n )`,\n `CREATE TABLE IF NOT EXISTS receipt_scans (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n created_at INTEGER NOT NULL\n )`,\n ]);\n // migrate older tables that predate these columns\n try {\n await sqlite.execute(\"ALTER TABLE sessions ADD COLUMN expires_at INTEGER NOT NULL DEFAULT 0\");\n } catch { /* column already exists */ }\n try {\n await sqlite.execute(\"ALTER TABLE users ADD COLUMN email TEXT\");\n } catch { /* column already exists */ }\n try {\n await sqlite.execute(\"ALTER TABLE users ADD COLUMN plan TEXT NOT NULL DEFAULT 'free'\");\n } catch { /* column already exists */ }\n try {\n await sqlite.execute(\"ALTER TABLE users ADD COLUMN stripe_customer_id TEXT\");\n } catch { /* column already exists */ }\n try {\n await sqlite.execute(\"ALTER TABLE users ADD COLUMN stripe_subscription_id TEXT\");\n } catch { /* column already exists */ }\n}\n\n// ---- plan limits ----\nexport const PLAN_LIMITS = {\n free: { maxGroups: 2, maxScansPerMonth: 10 },\n pro: { maxGroups: Infinity, maxScansPerMonth: Infinity },\n} as const;\n\nexport async function getUserPlan(userId: string): Promise<\"free\" | \"pro\"> {\n const res = await sqlite.execute({ sql: \"SELECT plan FROM users WHERE id = ?\", args: [userId] });\n return (res.rows[0] as any)?.plan === \"pro\" ? \"pro\" : \"free\";\n}\n\nexport async function countUserGroups(userId: string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT COUNT(*) as n FROM group_members WHERE user_id = ?\",\n args: [userId],\n });\n return Number((res.rows[0] as any)?.n || 0);\n}\n\nexport async function countScansThisMonth(userId: string): Promise {\n const now = new Date();\n const monthStart = Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), 1);\n const res = await sqlite.execute({\n sql: \"SELECT COUNT(*) as n FROM receipt_scans WHERE user_id = ? AND created_at >= ?\",\n args: [userId, monthStart],\n });\n return Number((res.rows[0] as any)?.n || 0);\n}\n\nexport async function recordScan(userId: string): Promise {\n await sqlite.execute({\n sql: \"INSERT INTO receipt_scans (id, user_id, created_at) VALUES (?, ?, ?)\",\n args: [uid(), userId, Date.now()],\n });\n}\n\nexport const uid = () => crypto.randomUUID();\n\nconst SESSION_TTL_MS = 30 * 24 * 60 * 60 * 1000; // 30 days\n\nexport async function hashPassword(password: string): Promise {\n return await bcrypt.hash(password, 10);\n}\n\nexport async function verifyPassword(password: string, hash: string): Promise {\n // Support old unsalted SHA-256 hashes (64 hex chars) from before the bcrypt migration,\n // so existing accounts aren't locked out; they get upgraded to bcrypt on next login.\n if (/^[a-f0-9]{64}$/i.test(hash)) {\n const data = new TextEncoder().encode(password);\n const digest = await crypto.subtle.digest(\"SHA-256\", data);\n const legacyHash = Array.from(new Uint8Array(digest)).map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n return legacyHash === hash;\n }\n return await bcrypt.compare(password, hash);\n}\n\nexport async function createSession(userId: string): Promise {\n const token = uid();\n const now = Date.now();\n await sqlite.execute({\n sql: \"INSERT INTO sessions (token, user_id, created_at, expires_at) VALUES (?, ?, ?, ?)\",\n args: [token, userId, now, now + SESSION_TTL_MS],\n });\n return token;\n}\n\nexport async function getValidSession(token: string) {\n const res = await sqlite.execute({\n sql: \"SELECT user_id, expires_at FROM sessions WHERE token = ?\",\n args: [token],\n });\n if (res.rows.length === 0) return null;\n const row = res.rows[0] as any;\n if (row.expires_at && row.expires_at < Date.now()) {\n await sqlite.execute({ sql: \"DELETE FROM sessions WHERE token = ?\", args: [token] });\n return null;\n }\n return row.user_id as string;\n}\n\nconst RESET_TTL_MS = 60 * 60 * 1000; // 1 hour\n\nexport function isValidEmail(email: string): boolean {\n return /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(email);\n}\n\nexport async function createPasswordReset(userId: string): Promise {\n const token = uid();\n const now = Date.now();\n await sqlite.execute({\n sql: \"INSERT INTO password_resets (token, user_id, created_at, expires_at, used) VALUES (?, ?, ?, ?, 0)\",\n args: [token, userId, now, now + RESET_TTL_MS],\n });\n return token;\n}\n\nexport async function consumePasswordReset(token: string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT user_id, expires_at, used FROM password_resets WHERE token = ?\",\n args: [token],\n });\n if (res.rows.length === 0) return null;\n const row = res.rows[0] as any;\n if (row.used || row.expires_at < Date.now()) return null;\n await sqlite.execute({ sql: \"UPDATE password_resets SET used = 1 WHERE token = ?\", args: [token] });\n return row.user_id as string;\n}\n","deleted",false,"label",[47,24],"backend","cbe729ca-86bd-485c-9de3-dc5e67c71f71",["D",1787221101901],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Split bills and expenses with groups, receipt scanning","imageUrl","userId","9de9736c-cf5d-4d8f-8c52-9805e5a8bc38","pinnedFileId","b19384da-9c80-11f1-9efb-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a01eac-cdd8-7258-a69b-0a59a72e22ba","tursoName","cbe729ca86bd485c9de3dc5e67c71f71","tursoHostname","cbe729ca86bd485c9de3dc5e67c71f71-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789479081816],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_109":105},"org",{"_9":10,"_102":103,"_104":105,"_58":59,"_106":107,"_108":44},"branch",{"_37":92,"_11":93,"_22":30,"_94":48,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":12,"_101":10},"isOwned",53,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","F Haddad","avatar","https://lh3.googleusercontent.com/a/ACg8ocKWAFvWR5vFVvudBriPaQTEAgSOR2liRWlZCdoiZvdih_zDzE8z=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_85":-5,"_143":144,"_145":146,"_147":148,"_149":44,"_150":44,"_151":44,"_152":34,"_153":-5,"_154":-7,"_155":-7,"_156":66,"_157":44,"_158":44,"_159":-5,"_160":44,"_161":44,"_162":44,"_163":-5},"ENV",{"_114":115,"_116":117,"_118":93,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138,"_139":140,"_141":142},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]