[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_102":103,"_104":105},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","javiernatera","name","diccionario-saas","path","main.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/javiernatera/diccionario-saas/code/main.ts","extension","id","fc313636-351d-49d2-9137-b55c1e8ab380","fileId","f6d8afb0-a3b6-11f1-8c41-1607ee4eb77e","parentId","branchId","3357ca5b-592e-487c-a5d2-0c6572f5d39c","branchVersion",42,"latest",true,"createdAt",["D",1789485420608],"version",41,"fileType","http","content","// ============================================================\n// Diccionario · Código — App comercial multi-usuario\n// Hospedar como \"HTTP Val\" en https://val.town (gratis)\n// ============================================================\n//\n// RUTAS:\n// GET /admin -> panel de administrador (tú)\n// GET /panel/{token} -> panel personal de cada comprador\n// POST /entrada/{token} -> recibe palabra O código, busca, reparte\n// GET /salida/{token} -> último resultado (para apps que preguntan, ej. Impra)\n// GET /admin/poll-goo -> (protegida) revisa el Goo de cada usuario activo\n//\n// CONFIGURACIÓN (pestaña \"Env vars\" de este val):\n// WORDLIST_URL -> URL \"raw\" de tu wordlist.tsv en GitHub\n// ADMIN_PASSWORD -> la contraseña que tú eliges para entrar a /admin\n//\n// Para la entrada automática desde Goo, Bridge, o app similar: cada\n// usuario pega la URL de SU app en su panel. Tú configuras UNA sola\n// tarea programada (cron-job.org o FastCron) apuntando a\n// TU_URL/admin/poll-goo?clave=TU_ADMIN_PASSWORD, cada 1 minuto (o cada\n// varios segundos con FastCron). Ese único cron revisa a TODOS los\n// usuarios que tengan su app configurada, sin importar cuál usen.\n//\n// ============================================================\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst USERS_KEY = \"usuarios_multi\";\n\n// ---------- Diccionario (compartido entre todos los usuarios) ----------\n\nfunction normalize(s: string): string {\n return s.toLowerCase().normalize(\"NFD\").replace(/[̀-ͯ]/g, \"\")\n .trim();\n}\n\nlet cache: {\n wordToCode: Map;\n codeToWord: Map;\n normIndex: { w: string; n: string }[];\n} | null = null;\n\nconst OVERRIDES_KEY = \"overrides_diccionario\";\n\nasync function getOverrides(): Promise<{ palabra: string; codigo: string }[]> {\n return (await blob.getJSON(OVERRIDES_KEY).catch(() => [])) ?? [];\n}\n\nasync function loadDictionary() {\n if (cache) return cache;\n const url = Deno.env.get(\"WORDLIST_URL\");\n if (!url) throw new Error(\"Falta configurar WORDLIST_URL\");\n const res = await fetch(url);\n if (!res.ok) {\n throw new Error(\"No se pudo descargar el diccionario: \" + res.status);\n }\n const text = await res.text();\n\n const wordToCode = new Map();\n const codeToWord = new Map();\n const normIndex: { w: string; n: string }[] = [];\n for (const line of text.split(\"\\n\")) {\n const t = line.trimEnd();\n if (!t) continue;\n const tab = t.lastIndexOf(\"\\t\");\n if (tab === -1) continue;\n const word = t.slice(0, tab);\n const code = t.slice(tab + 1);\n wordToCode.set(word, code);\n if (!codeToWord.has(code)) codeToWord.set(code, word);\n normIndex.push({ w: word, n: normalize(word) });\n }\n\n // Correcciones aprobadas por el administrador — tienen prioridad sobre el diccionario base\n const overrides = await getOverrides();\n for (const o of overrides) {\n wordToCode.set(o.palabra, o.codigo);\n codeToWord.set(o.codigo, o.palabra);\n const idx = normIndex.findIndex((item) => item.n === normalize(o.palabra));\n if (idx !== -1) normIndex[idx] = { w: o.palabra, n: normalize(o.palabra) };\n else normIndex.push({ w: o.palabra, n: normalize(o.palabra) });\n }\n\n cache = { wordToCode, codeToWord, normIndex };\n return cache;\n}\n\nfunction splitCode(code: string) {\n return {\n page: parseInt(code.slice(0, 3), 10),\n col: parseInt(code.slice(3, 4), 10),\n pos: parseInt(code.slice(4, 6), 10),\n };\n}\n\nasync function lookupAny(rawValue: string) {\n const { wordToCode, codeToWord, normIndex } = await loadDictionary();\n const trimmed = rawValue.trim();\n\n // ¿Es un código de 6 dígitos? -> buscar la palabra\n if (/^\\d{6}$/.test(trimmed)) {\n const word = codeToWord.get(trimmed);\n if (word) {\n return { found: true, word, code: trimmed, ...splitCode(trimmed) };\n }\n return {\n found: false,\n word: \"\",\n code: trimmed,\n page: null,\n col: null,\n pos: null,\n };\n }\n\n // Si no, es una palabra -> buscar el código (tolerando tildes)\n if (wordToCode.has(trimmed)) {\n const code = wordToCode.get(trimmed)!;\n return { found: true, word: trimmed, code, ...splitCode(code) };\n }\n const n = normalize(trimmed);\n const match = normIndex.find((item) => item.n === n);\n if (match) {\n const code = wordToCode.get(match.w)!;\n return { found: true, word: match.w, code, ...splitCode(code) };\n }\n return {\n found: false,\n word: trimmed,\n code: \"\",\n page: null,\n col: null,\n pos: null,\n };\n}\n\n// ---------- Usuarios (guardados en Blob Storage) ----------\n\ntype Usuario = {\n token: string;\n nombre: string;\n activo: boolean;\n salidas?: { url: string; activo: boolean; clave?: string; nombre?: string }[]; // hasta 3, cada una con su propio interruptor, clave opcional y nombre personalizado\n ntfy?: { url: string; activo: boolean }; // notificaciones push al teléfono, con su propio interruptor\n entradas?: { nombre: string; url: string; activo: boolean }[]; // Impra, Goo, Bridge — cada una con su URL y su interruptor\n creado: string;\n};\n\nasync function getUsuarios(): Promise {\n return (await blob.getJSON(USERS_KEY).catch(() => [])) ?? [];\n}\n\nasync function saveUsuarios(list: Usuario[]) {\n await blob.setJSON(USERS_KEY, list);\n}\n\nfunction generarToken(): string {\n return crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n}\n\nconst ENTRADAS_FIJAS = [\"Impra\", \"Goo\", \"Bridge\", \"WikiTest\", \"Sekitan\"];\n\nfunction conEntradasCompletas(usuario: Usuario): Usuario {\n const existentes = usuario.entradas ?? [];\n const entradas = ENTRADAS_FIJAS.map((nombre) => {\n const previa = existentes.find((e) => e.nombre === nombre);\n return previa ?? { nombre, url: \"\", activo: false };\n });\n return { ...usuario, entradas };\n}\n\nfunction conSalidasCompletas(usuario: Usuario): Usuario {\n const existentes = usuario.salidas ?? [];\n const salidas = [0, 1, 2].map((i) =>\n existentes[i] ?? { url: \"\", activo: false, clave: \"\", nombre: \"\" }\n );\n return { ...usuario, salidas };\n}\n\nfunction conNtfyCompleto(usuario: Usuario): Usuario {\n return { ...usuario, ntfy: usuario.ntfy ?? { url: \"\", activo: false } };\n}\n\n// ---------- Sugerencias de corrección (reportadas por los usuarios) ----------\n\ntype Sugerencia = {\n id: string;\n token: string;\n nombreUsuario: string;\n palabra: string;\n codigoSugerido: string;\n nota: string;\n estado: \"pendiente\" | \"aplicada\" | \"rechazada\";\n fecha: string;\n};\n\nconst SUGERENCIAS_KEY = \"sugerencias\";\n\nasync function getSugerencias(): Promise {\n return (await blob.getJSON(SUGERENCIAS_KEY).catch(() => [])) ?? [];\n}\n\nasync function saveSugerencias(list: Sugerencia[]) {\n await blob.setJSON(SUGERENCIAS_KEY, list);\n}\n\n// ---------- Procesar una entrada (compartido entre búsqueda manual y el poller de Goo) ----------\n\nconst MAX_LOG = 30;\n\nasync function agregarAlHistorial(\n token: string,\n entrada: {\n fuente: string;\n valor: string;\n found: boolean;\n word: string;\n code: string;\n hora: string;\n },\n) {\n const key = `log:${token}`;\n const actual: typeof entrada[] = (await blob.getJSON(key).catch(() => [])) ??\n [];\n actual.unshift(entrada);\n await blob.setJSON(key, actual.slice(0, MAX_LOG));\n}\n\nasync function procesarEntrada(\n usuario: Usuario,\n valor: string,\n fuente: string = \"Manual\",\n) {\n const resultado = await lookupAny(valor);\n const data = { ...resultado, updatedAt: new Date().toISOString() };\n await blob.setJSON(`resultado:${usuario.token}`, data);\n\n await agregarAlHistorial(usuario.token, {\n fuente,\n valor,\n found: resultado.found,\n word: resultado.word,\n code: resultado.code,\n hora: data.updatedAt,\n });\n\n const salidas = (usuario.salidas ?? []).filter((s) => s.activo && s.url);\n await Promise.all(\n salidas.map(async (salida) => {\n const destino = salida.url;\n const headersConClave: Record = salida.clave\n ? { Authorization: `Bearer ${salida.clave}` }\n : {};\n\n try {\n let res: Response;\n let urlUsada = destino;\n let textoEnviado = \"\";\n // Motherboard X (app nueva, claves mb_...): endpoint distinto, JSON con \"kind\"/\"text\",\n // y la clave va en el header X-Motherboard-Api-Id (no como Bearer).\n if (destino.includes(\"api.motherboard.conjuringlab.com\")) {\n textoEnviado = data.found ? (data.code || \"\") : (data.word || \"\");\n res = await fetch(destino, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-Motherboard-Api-Id\": salida.clave || \"\",\n \"Idempotency-Key\": crypto.randomUUID(),\n },\n body: JSON.stringify({ kind: \"text\", text: textoEnviado }),\n });\n } else if (destino.includes(\"themotherboard.fr\")) {\n // Motherboard vieja (server themotherboard.fr): solo texto plano, clave opcional como Bearer.\n textoEnviado = data.found ? (data.code || \"\") : (data.word || \"\");\n res = await fetch(destino, {\n method: \"POST\",\n headers: { \"Content-Type\": \"text/plain\", ...headersConClave },\n body: textoEnviado,\n });\n } else if (destino.includes(\"11q.co/api/thump\")) {\n // Goo (thump): quiere JSON con la clave \"query\", no nuestro formato normal.\n textoEnviado = data.found ? (data.code || \"\") : (data.word || \"\");\n res = await fetch(destino, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", ...headersConClave },\n body: JSON.stringify({ query: textoEnviado }),\n });\n } else if (destino.includes(\"dvxms.de/api/omega\")) {\n // Omega Board: es POST con JSON { user_id, value, key } — el user_id viene en la URL guardada,\n // y \"key\" es la clave personal que se genera dentro de la app de Omega (va en el campo \"Clave\" de esta salida).\n const urlOmega = new URL(destino);\n const userIdOmega = urlOmega.searchParams.get(\"user_id\") || \"\";\n const baseUrlOmega = `${urlOmega.origin}${urlOmega.pathname}`;\n textoEnviado = data.found ? (data.code || \"\") : (data.word || \"\");\n urlUsada = baseUrlOmega;\n res = await fetch(baseUrlOmega, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n user_id: userIdOmega,\n value: textoEnviado,\n key: salida.clave || \"\",\n }),\n });\n } else {\n textoEnviado = JSON.stringify(data);\n res = await fetch(destino, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", ...headersConClave },\n body: textoEnviado,\n });\n }\n const textoRespuesta = await res.text().catch(() => \"\");\n console.log(\n `Salida [${usuario.nombre}${\n salida.nombre ? \" · \" + salida.nombre : \"\"\n }] -> ${urlUsada} :: enviado: \"${textoEnviado}\" :: status ${res.status} :: respuesta: ${\n textoRespuesta.slice(0, 200)\n }`,\n );\n } catch (err) {\n console.log(\n `Salida [${usuario.nombre}${\n salida.nombre ? \" · \" + salida.nombre : \"\"\n }] -> ${destino} :: ERROR: ${String(err)}`,\n );\n }\n }),\n );\n\n // Notificaciones push (ntfy) — tiene su propio interruptor, aparte de las 3 salidas genéricas\n if (usuario.ntfy?.activo && usuario.ntfy?.url) {\n const cuerpo = data.found\n ? `${data.word} → ${data.code} (página ${data.page} · columna ${data.col} · posición ${data.pos})`\n : `\"${data.word}\" no está en el diccionario`;\n await fetch(usuario.ntfy.url, {\n method: \"POST\",\n headers: { \"Title\": \"Diccionario · Código\" },\n body: cuerpo,\n }).catch(() => null);\n }\n\n return data;\n}\n\n// ---------- Estilo compartido (paleta de marca) ----------\n\nconst ESTILO = `\n @import url('https://fonts.googleapis.com/css2?family=Cormorant+Garamond:ital,wght@0,400;0,500;0,600;1,400&family=Josefin+Sans:wght@300;400;500;600&display=swap');\n :root{\n --charcoal:#1e1e1e; --midnight:#221829; --plum:#392a44;\n --lavender:#cac4cf; --amber:#d4af6a; --amber-soft:#e8cf9a; --ink:#f3edf7; --dim:#9a8fb0;\n --line:rgba(202,196,207,0.14);\n }\n *{box-sizing:border-box;}\n html{scroll-behavior:smooth;}\n body{\n margin:0; min-height:100vh; padding:48px 20px 60px;\n background:\n radial-gradient(ellipse at top, rgba(212,175,106,0.06), transparent 55%),\n linear-gradient(180deg,var(--charcoal),var(--midnight) 60%,var(--plum));\n color:var(--ink); font-family:'Josefin Sans',sans-serif; line-height:1.5;\n }\n .marca{text-align:center; margin-bottom:28px;}\n .marca .isotipo{\n display:inline-block; font-size:40px; margin-bottom:6px; line-height:1;\n filter:drop-shadow(0 2px 6px rgba(212,175,106,0.25));\n }\n h1{font-family:'Cormorant Garamond',serif; font-weight:500; font-size:32px; margin:0; text-align:center; color:var(--amber-soft); letter-spacing:0.01em;}\n h1 + p.subtitulo{text-align:center; color:var(--dim); font-size:13px; letter-spacing:0.08em; text-transform:uppercase; margin:6px 0 32px;}\n h2{font-family:'Cormorant Garamond',serif; font-weight:500; font-size:21px; margin:0 0 4px; color:var(--amber);}\n .ayuda{font-size:13.5px; color:var(--dim); margin:0 0 14px;}\n .card{\n max-width:560px; margin:0 auto 18px; padding:26px;\n background:rgba(57,42,68,0.32); border:1px solid var(--line); border-radius:18px;\n box-shadow:0 12px 30px rgba(0,0,0,0.22);\n animation:aparecer 0.35s ease both;\n }\n @keyframes aparecer{ from{opacity:0; transform:translateY(6px);} to{opacity:1; transform:none;} }\n input[type=text],input[type=password],input[type=url]{\n width:100%; padding:13px 15px; margin:6px 0 14px; border-radius:10px;\n border:1px solid var(--line); background:rgba(0,0,0,0.28); color:var(--ink); font-size:15.5px;\n font-family:'Josefin Sans',sans-serif; transition:border-color 0.15s;\n }\n input:focus{outline:none; border-color:var(--amber);}\n label{font-size:12px; color:var(--dim); letter-spacing:0.08em; text-transform:uppercase;}\n button{\n padding:12px 20px; border-radius:10px; border:none; cursor:pointer;\n background:var(--amber); color:#1e1e1e; font-weight:600; font-size:14.5px;\n font-family:'Josefin Sans',sans-serif; transition:filter 0.15s, transform 0.1s;\n }\n button:hover{filter:brightness(1.08);}\n button:active{transform:scale(0.98);}\n button.secundario{background:transparent; border:1px solid var(--line); color:var(--ink);}\n button.peligro{background:#c0546a; color:white;}\n .fila{display:flex; justify-content:space-between; align-items:center; gap:10px; padding:14px 0; border-bottom:1px solid var(--line);}\n .fila:last-child{border-bottom:none;}\n .pastilla{padding:4px 12px; border-radius:999px; font-size:11.5px; letter-spacing:0.03em; text-transform:uppercase;}\n .activo{background:rgba(120,200,150,0.16); color:#8fe0ac;}\n .inactivo{background:rgba(200,120,120,0.16); color:#e0a0a0;}\n .url-box{display:flex; gap:10px; align-items:center; background:rgba(0,0,0,0.28); border-radius:10px; padding:12px 14px; font-family:monospace; font-size:12.5px; word-break:break-all; border:1px solid var(--line);}\n .url-box button{padding:7px 12px; font-size:12px; flex-shrink:0;}\n a{color:var(--amber);}\n\n .resultado-palabra{\n font-family:'Cormorant Garamond',serif; font-style:italic; font-size:30px; color:var(--amber-soft);\n text-align:center; margin:6px 0 18px;\n }\n .chips{display:flex; gap:10px; justify-content:center;}\n .chip{\n flex:1; text-align:center; padding:14px 8px; border-radius:12px;\n background:rgba(0,0,0,0.28); border:1px solid var(--line);\n }\n .chip .num{font-family:'Cormorant Garamond',serif; font-size:26px; color:var(--amber);}\n .chip .etiqueta{font-size:10.5px; color:var(--dim); letter-spacing:0.06em; text-transform:uppercase; margin-top:2px;}\n .aviso{border-color:#c0546a !important; background:rgba(192,84,106,0.12) !important;}\n .exito{color:#8fe0ac;}\n\n .entrada-fila{margin-bottom:16px; padding-bottom:16px; border-bottom:1px solid var(--line);}\n .entrada-fila:last-child{border-bottom:none; margin-bottom:0; padding-bottom:0;}\n .entrada-cabecera{display:flex; justify-content:space-between; align-items:center; margin-bottom:8px;}\n .entrada-cabecera strong{font-family:'Cormorant Garamond',serif; font-size:18px; color:var(--ink);}\n .switch{position:relative; display:inline-block; width:44px; height:24px; flex-shrink:0;}\n .switch input{opacity:0; width:0; height:0;}\n .switch .track{position:absolute; cursor:pointer; inset:0; background:rgba(255,255,255,0.12); border-radius:999px; transition:0.15s;}\n .switch .track:before{content:\"\"; position:absolute; height:18px; width:18px; left:3px; bottom:3px; background:var(--lavender); border-radius:50%; transition:0.15s;}\n .switch input:checked + .track{background:var(--amber);}\n .switch input:checked + .track:before{transform:translateX(20px); background:#1e1e1e;}\n\n .hist-fila{display:flex; justify-content:space-between; align-items:center; gap:10px; padding:10px 0; border-bottom:1px solid var(--line); font-size:13.5px;}\n .hist-fila:last-child{border-bottom:none;}\n .hist-fuente{padding:2px 9px; border-radius:999px; font-size:10.5px; text-transform:uppercase; letter-spacing:0.03em; background:rgba(212,175,106,0.15); color:var(--amber); flex-shrink:0;}\n .hist-valor{flex:1; color:var(--ink); overflow:hidden; text-overflow:ellipsis; white-space:nowrap;}\n .hist-hora{color:var(--dim); font-size:11.5px; flex-shrink:0;}\n`;\n\nfunction paginaAdmin(): string {\n return `\n \n Diccionario · Admin\n \n

📖

Panel de administrador

Diccionario · Código

\n\n \n\n \n\n \n `;\n}\n\nfunction paginaPanel(token: string): string {\n return `\n \n Mi Diccionario\n \n \n \n \n \n

📖

Tu Diccionario

Código · Página · Columna · Posición

\n \n `;\n}\n\n// ---------- Router ----------\n\nexport default async function (req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, PATCH, DELETE, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, x-admin-password\",\n };\n if (req.method === \"OPTIONS\") return new Response(null, { headers: cors });\n\n const url = new URL(req.url);\n const path = url.pathname;\n const json = (obj: unknown, status = 200) =>\n new Response(JSON.stringify(obj), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...cors },\n });\n const html = (str: string) =>\n new Response(str, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\", ...cors },\n });\n\n // --- Páginas ---\n if (path === \"/admin\" && req.method === \"GET\") return html(paginaAdmin());\n\n const panelMatch = path.match(/^\\/panel\\/([\\w-]+)$/);\n if (panelMatch && req.method === \"GET\") {\n return html(paginaPanel(panelMatch[1]));\n }\n\n // --- Refrescar el diccionario en memoria (después de editar wordlist.tsv en GitHub) ---\n if (path === \"/api/admin/refrescar-diccionario\" && req.method === \"POST\") {\n const pass = req.headers.get(\"x-admin-password\");\n if (!pass || pass !== Deno.env.get(\"ADMIN_PASSWORD\")) {\n return json({ error: \"No autorizado\" }, 401);\n }\n cache = null;\n try {\n await loadDictionary();\n return json({ ok: true });\n } catch (err) {\n return json({ error: String(err) }, 500);\n }\n }\n\n // --- Sugerencias de corrección: verlas, aplicarlas o rechazarlas ---\n if (path === \"/api/admin/sugerencias\" && req.method === \"GET\") {\n const pass = req.headers.get(\"x-admin-password\");\n if (!pass || pass !== Deno.env.get(\"ADMIN_PASSWORD\")) {\n return json({ error: \"No autorizado\" }, 401);\n }\n return json(await getSugerencias());\n }\n const sugerenciaMatch = path.match(\n /^\\/api\\/admin\\/sugerencias\\/([\\w-]+)\\/(aplicar|rechazar)$/,\n );\n if (sugerenciaMatch && req.method === \"POST\") {\n const pass = req.headers.get(\"x-admin-password\");\n if (!pass || pass !== Deno.env.get(\"ADMIN_PASSWORD\")) {\n return json({ error: \"No autorizado\" }, 401);\n }\n\n const [, id, accion] = sugerenciaMatch;\n const lista = await getSugerencias();\n const idx = lista.findIndex((s) => s.id === id);\n if (idx === -1) return json({ error: \"No encontrada\" }, 404);\n\n if (accion === \"aplicar\") {\n const s = lista[idx];\n if (!/^\\d{6}$/.test(s.codigoSugerido)) {\n return json({\n error:\n \"Esta sugerencia no trae un código válido de 6 dígitos — corrígelo directo en GitHub.\",\n }, 400);\n }\n const overrides = await getOverrides();\n const iOv = overrides.findIndex((o) => o.palabra === s.palabra);\n if (iOv !== -1) {\n overrides[iOv] = { palabra: s.palabra, codigo: s.codigoSugerido };\n } else overrides.push({ palabra: s.palabra, codigo: s.codigoSugerido });\n await blob.setJSON(OVERRIDES_KEY, overrides);\n cache = null;\n lista[idx].estado = \"aplicada\";\n } else {\n lista[idx].estado = \"rechazada\";\n }\n await saveSugerencias(lista);\n return json(lista[idx]);\n }\n\n // --- Poller central de Goo (una sola tarea programada revisa a todos) ---\n if (path === \"/admin/poll-goo\" && req.method === \"GET\") {\n const clave = url.searchParams.get(\"clave\") ||\n req.headers.get(\"x-admin-password\");\n if (!clave || clave !== Deno.env.get(\"ADMIN_PASSWORD\")) {\n return json({ error: \"No autorizado\" }, 401);\n }\n\n const usuarios = await getUsuarios();\n const resultados: Record = {};\n\n for (const usuarioBase of usuarios) {\n if (!usuarioBase.activo) continue;\n const entradasActivas = (usuarioBase.entradas ?? []).filter((e) =>\n e.activo && e.url\n );\n if (!entradasActivas.length) continue;\n\n resultados[usuarioBase.nombre] = {};\n for (const entrada of entradasActivas) {\n try {\n const fuenteRes = await fetch(entrada.url);\n if (!fuenteRes.ok) {\n (resultados[usuarioBase.nombre] as any)[entrada.nombre] =\n \"error consultando\";\n continue;\n }\n const fuenteData = await fuenteRes.json();\n // Distintas apps usan distinto nombre de campo: Goo -> \"query\", Bridge -> \"value\"/\"rawValue\", WikiTest -> \"peek\"/\"raw\", Sekitan -> \"text\"\n // WikiTest: \"raw\" es la palabra buscada tal cual; \"peek\" puede traer el resumen del artículo, así que raw va primero.\n // Sekitan: con \"Convertir automáticamente a JSON\" activado y la plantilla \"Escaneo simple\" en [peek], responde {\"text\":\"...\"}.\n const query =\n (fuenteData.query ?? fuenteData.value ?? fuenteData.rawValue ??\n fuenteData.raw ?? fuenteData.peek ?? fuenteData.text ?? \"\")\n .toString().trim();\n if (!query) {\n (resultados[usuarioBase.nombre] as any)[entrada.nombre] =\n \"sin búsqueda todavía\";\n continue;\n }\n\n const claveUltimo =\n `fuente_last:${usuarioBase.token}:${entrada.nombre}`;\n const last = await blob.getJSON(claveUltimo).catch(() => null);\n if (last && last.query === query) {\n (resultados[usuarioBase.nombre] as any)[entrada.nombre] =\n \"sin cambios\";\n continue;\n }\n\n const data = await procesarEntrada(\n usuarioBase,\n query,\n entrada.nombre,\n );\n await blob.setJSON(claveUltimo, { query });\n (resultados[usuarioBase.nombre] as any)[entrada.nombre] = {\n procesado: query,\n resultado: data,\n };\n } catch (err) {\n (resultados[usuarioBase.nombre] as any)[entrada.nombre] = \"error: \" +\n String(err);\n }\n }\n }\n\n return json({\n usuariosConEntradasActivas: Object.keys(resultados).length,\n resultados,\n });\n }\n\n // --- Admin API (protegida por contraseña) ---\n if (path.startsWith(\"/api/admin/\")) {\n const pass = req.headers.get(\"x-admin-password\");\n if (!pass || pass !== Deno.env.get(\"ADMIN_PASSWORD\")) {\n return json({ error: \"No autorizado\" }, 401);\n }\n\n if (path === \"/api/admin/usuarios\" && req.method === \"GET\") {\n return json(await getUsuarios());\n }\n if (path === \"/api/admin/usuarios\" && req.method === \"POST\") {\n const { nombre } = await req.json();\n const usuarios = await getUsuarios();\n const nuevo: Usuario = {\n token: generarToken(),\n nombre,\n activo: true,\n creado: new Date().toISOString(),\n };\n usuarios.push(nuevo);\n await saveUsuarios(usuarios);\n return json(nuevo);\n }\n const userMatch = path.match(/^\\/api\\/admin\\/usuarios\\/([\\w-]+)$/);\n if (userMatch && req.method === \"PATCH\") {\n const token = userMatch[1];\n const cambios = await req.json();\n const usuarios = await getUsuarios();\n const idx = usuarios.findIndex((u) => u.token === token);\n if (idx === -1) return json({ error: \"No encontrado\" }, 404);\n usuarios[idx] = { ...usuarios[idx], ...cambios };\n await saveUsuarios(usuarios);\n return json(usuarios[idx]);\n }\n if (userMatch && req.method === \"DELETE\") {\n const token = userMatch[1];\n const usuarios = (await getUsuarios()).filter((u) => u.token !== token);\n await saveUsuarios(usuarios);\n return json({ ok: true });\n }\n }\n\n // --- Panel API (el propio usuario, sin contraseña, protegido por el token) ---\n const panelApiMatch = path.match(/^\\/api\\/panel\\/([\\w-]+)$/);\n if (panelApiMatch) {\n const token = panelApiMatch[1];\n const usuarios = await getUsuarios();\n const usuario = usuarios.find((u) => u.token === token);\n if (!usuario) return json({ error: \"No encontrado\" }, 404);\n\n if (req.method === \"GET\") {\n return json(\n conNtfyCompleto(conSalidasCompletas(conEntradasCompletas(usuario))),\n );\n }\n if (req.method === \"POST\") {\n const cambios = await req.json();\n const idx = usuarios.findIndex((u) => u.token === token);\n const actual = usuarios[idx];\n usuarios[idx] = {\n ...actual,\n salidas: cambios.salidas !== undefined\n ? cambios.salidas\n : actual.salidas,\n entradas: cambios.entradas !== undefined\n ? cambios.entradas\n : actual.entradas,\n ntfy: cambios.ntfy !== undefined ? cambios.ntfy : actual.ntfy,\n activo: cambios.activo !== undefined ? cambios.activo : actual.activo,\n };\n await saveUsuarios(usuarios);\n return json(usuarios[idx]);\n }\n }\n\n // --- Entrada: recibe palabra o código, busca, reparte a las salidas ---\n const entradaMatch = path.match(/^\\/entrada\\/([\\w-]+)$/);\n if (entradaMatch && req.method === \"POST\") {\n const token = entradaMatch[1];\n const usuarios = await getUsuarios();\n const usuario = usuarios.find((u) => u.token === token);\n if (!usuario) return json({ error: \"Token inválido\" }, 404);\n if (!usuario.activo) return json({ error: \"Cuenta apagada\" }, 403);\n\n const body = await req.json().catch(() => ({}));\n const valor = (body.value ?? body.word ?? body.code ?? body.query ?? \"\")\n .toString();\n if (!valor.trim()) return json({ error: \"Falta 'value'\" }, 400);\n\n const data = await procesarEntrada(usuario, valor);\n const salidasActivas = (usuario.salidas ?? []).filter((s) =>\n s.activo && s.url\n ).length;\n return json({\n ok: true,\n resultado: data,\n salidasNotificadas: salidasActivas,\n });\n }\n\n // --- El usuario reporta un error del diccionario ---\n const reporteMatch = path.match(/^\\/api\\/panel\\/([\\w-]+)\\/reportar$/);\n if (reporteMatch && req.method === \"POST\") {\n const token = reporteMatch[1];\n const usuarios = await getUsuarios();\n const usuario = usuarios.find((u) => u.token === token);\n if (!usuario) return json({ error: \"No encontrado\" }, 404);\n\n const body = await req.json().catch(() => ({}));\n const palabra = (body.palabra ?? \"\").toString().trim();\n if (!palabra) return json({ error: \"Falta la palabra\" }, 400);\n\n const nueva: Sugerencia = {\n id: crypto.randomUUID().slice(0, 8),\n token,\n nombreUsuario: usuario.nombre,\n palabra,\n codigoSugerido: (body.codigoSugerido ?? \"\").toString().trim(),\n nota: (body.nota ?? \"\").toString().trim(),\n estado: \"pendiente\",\n fecha: new Date().toISOString(),\n };\n const lista = await getSugerencias();\n lista.unshift(nueva);\n await saveSugerencias(lista);\n return json({ ok: true });\n }\n\n // --- Historial: qué llegó y cuándo, para mostrar en el panel ---\n const historialMatch = path.match(/^\\/api\\/panel\\/([\\w-]+)\\/historial$/);\n if (historialMatch && req.method === \"GET\") {\n const token = historialMatch[1];\n const usuarios = await getUsuarios();\n if (!usuarios.find((u) => u.token === token)) {\n return json({ error: \"No encontrado\" }, 404);\n }\n const log = (await blob.getJSON(`log:${token}`).catch(() => [])) ?? [];\n return json(log);\n }\n\n // --- Salida: apps que preguntan (ej. Impra) ---\n const salidaMatch = path.match(/^\\/salida\\/([\\w-]+)$/);\n if (salidaMatch && req.method === \"GET\") {\n const token = salidaMatch[1];\n const usuarios = await getUsuarios();\n const usuario = usuarios.find((u) => u.token === token);\n if (!usuario) return json({ error: \"Token inválido\" }, 404);\n if (!usuario.activo) return json({ word: \"\", code: \"\", display: \"\" });\n const data = await blob.getJSON(`resultado:${token}`).catch(() => null);\n if (!data) return json({ word: \"\", code: \"\", display: \"\" });\n // \"display\" siempre trae lo más útil para mostrar: el código si se encontró, o la palabra tal cual si no.\n const display = data.found ? (data.code || \"\") : (data.word || \"\");\n return json({ ...data, display });\n }\n\n // --- Proxy CORS: para consultar desde páginas estáticas (ej. la app del\n // cuadrado mágico) APIs que no traen encabezados CORS, como la de Goo.\n // Solo reenvía GET hacia hosts de la lista, para no quedar como proxy abierto.\n const PROXY_HOSTS_PERMITIDOS = [\n \"11q.co\",\n \"themotherboard.fr\",\n \"api.motherboard.conjuringlab.com\",\n \"dvxms.de\",\n \"sekitan.workers.dev\",\n ];\n if (path === \"/proxy\" && req.method === \"GET\") {\n const target = url.searchParams.get(\"url\");\n if (!target) return json({ error: \"Falta 'url'\" }, 400);\n let targetUrl: URL;\n try {\n targetUrl = new URL(target);\n } catch {\n return json({ error: \"URL inválida\" }, 400);\n }\n const host = targetUrl.hostname;\n const permitido = PROXY_HOSTS_PERMITIDOS.some((h) =>\n host === h || host.endsWith(\".\" + h)\n );\n if (!permitido) return json({ error: \"Host no permitido: \" + host }, 403);\n try {\n const r = await fetch(targetUrl.toString());\n const texto = await r.text();\n return new Response(texto, {\n status: r.status,\n headers: {\n \"Content-Type\": r.headers.get(\"content-type\") || \"application/json\",\n ...cors,\n },\n });\n } catch (err) {\n return json({ error: String(err) }, 502);\n }\n }\n\n return json({ error: \"Ruta no encontrada\" }, 404);\n}\n","deleted",false,"label",[14],"5ff83263-fc46-426c-9074-c47c92fa4d1a",["D",1788014164567],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","6ab26f7d-3d06-4fd0-a99e-af58a3e331a8","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a044fc-3260-71c5-a823-f7e7a2b72854","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_101":97},"org",{"_9":10,"_94":95,"_96":97,"_55":56,"_98":99,"_100":42},"branch",{"_35":30,"_11":85,"_22":28,"_86":45,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":12,"_93":10},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Javier Natera","avatar","https://lh3.googleusercontent.com/a/ACg8ocIOJF88d8TZQ2nC3g-a3CbzCXENiFpv1xEpGz8ABX9_9oq1l2ot=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_78":-5,"_135":136,"_137":138,"_139":140,"_141":42,"_142":42,"_143":42,"_144":32,"_145":-5,"_146":-7,"_147":-7,"_148":62,"_149":42,"_150":42,"_151":-5,"_152":42,"_153":42,"_154":42,"_155":-5},"ENV",{"_106":107,"_108":109,"_110":85,"_111":112,"_113":114,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Panel de administrador

Nuevo comprador

Compradores

Sugerencias de corrección

Diccionario

Tu Diccionario