The Strive Collective

\n \n

\n \n\n`;\n}\n\n// --- MAIN HTTP VAL HANDLER ---\n\nexport default async function handleRequest(req: Request): Promise {\n await initializeDatabase();\n const url = new URL(req.url);\n const path = url.pathname;\n let body = {};\n\n if (req.method === \"OPTIONS\") return optionsResponse();\n if (req.method !== \"GET\" && req.method !== \"DELETE\") {\n try {\n body = await req.json();\n }\n catch (e) {\n return jsonResponse({ error: \"Invalid JSON body\" }, 400);\n }\n }\n\n // --- Static Routes & SPA ---\n if (path === \"/\" && req.method === \"GET\") {\n const sourceUrl = `https://${url.hostname}/`;\n return new Response(generateHtml(sourceUrl), { headers: { \"Content-Type\": \"text/html\" } });\n }\n\n // --- API ROUTING ---\n if (path.startsWith(\"/api/\")) {\n try {\n const userId = await verifyAuth(req);\n\n // --- Unprotected Routes ---\n if (path === \"/api/register\" && req.method === \"POST\") {\n const { username, secret_phrase } = body as any;\n if (!username || !secret_phrase) return jsonResponse({ error: \"Username and secret phrase required\" }, 400);\n const hashed = await hashToken(secret_phrase);\n await sqlite.execute({\n sql: \"INSERT INTO users (id, username, hashed_token) VALUES (?, ?, ?)\",\n args: [crypto.randomUUID(), username, hashed],\n });\n return jsonResponse({ message: \"User registered\" }, 201);\n }\n if (path === \"/api/login\" && req.method === \"POST\") {\n const { username, secret_phrase } = body as any;\n const hashed = await hashToken(secret_phrase);\n const res = await sqlite.execute({\n sql: \"SELECT id FROM users WHERE username = ? AND hashed_token = ?\",\n args: [username, hashed],\n });\n const user = res.rows[0] as { id: string } | undefined;\n if (!user) return jsonResponse({ error: \"Invalid credentials\" }, 401);\n const sessionToken = crypto.randomUUID();\n await blob.setJSON(sessionToken, user.id);\n return jsonResponse({ token: sessionToken });\n }\n\n // --- Protected Routes ---\n if (!userId) return jsonResponse({ error: \"Authentication required\" }, 401);\n\n // --- Habit CRUD ---\n if (path === \"/api/habits\" && req.method === \"POST\") {\n const { name, is_public } = body as any;\n const id = crypto.randomUUID();\n const created_at = new Date().toISOString();\n await sqlite.execute({\n sql: \"INSERT INTO habits (id, user_id, name, is_public, created_at) VALUES (?, ?, ?, ?, ?)\",\n args: [id, userId, name, is_public, created_at],\n });\n return jsonResponse({ id, name, is_public }, 201);\n }\n\n const habitMatch = path.match(/^\\/api\\/habits\\/([a-zA-Z0-9\\-]+)$/);\n if (habitMatch && req.method === \"DELETE\") {\n const habitId = habitMatch[1];\n await sqlite.execute({ sql: \"DELETE FROM habits WHERE id = ? AND user_id = ?\", args: [habitId, userId] });\n return new Response(null, { status: 204 });\n }\n\n // --- AI Routes ---\n const aiTipsMatch = path.match(/^\\/api\\/habits\\/(?[a-zA-Z0-9\\-]+)\\/ai-tips$/);\n if (aiTipsMatch && req.method === \"POST\") {\n const { habitId } = aiTipsMatch.groups;\n const { rows: habitRows } = await sqlite.execute({\n sql: \"SELECT name FROM habits WHERE id = ? AND user_id = ?\",\n args: [habitId, userId],\n });\n if (habitRows.length === 0) return jsonResponse({ error: \"Habit not found or access denied.\" }, 404);\n const newHabitName = habitRows[0].name as string;\n const { rows: tipRows } = await sqlite.execute({\n sql: \"SELECT content FROM tips WHERE user_id = ?\",\n args: [userId],\n });\n const userTips = (tipRows as { content: string }[]).map(r => r.content).join(\"\\n - \");\n if (!userTips) return jsonResponse({ error: \"Cannot generate tips without prior saved tips to analyze.\" }, 400);\n\n const prompt = TIP_SYNTHESIZER_PROMPT.replace(\"{newHabitName}\", newHabitName).replace(\"{userTips}\", userTips);\n const openai = new OpenAI();\n const completion = await openai.chat.completions.create({\n model: \"gpt-4o\",\n messages: [{ role: \"user\", content: prompt }],\n response_format: { type: \"json_object\" },\n });\n const result = extractJson(completion.choices[0].message.content);\n return jsonResponse(result);\n }\n\n const aiAffirmationsMatch = path.match(/^\\/api\\/habits\\/(?[a-zA-Z0-9\\-]+)\\/ai-affirmations$/);\n if (aiAffirmationsMatch && req.method === \"POST\") {\n const { habitId } = aiAffirmationsMatch.groups;\n const { rows: habitRows } = await sqlite.execute({\n sql: \"SELECT name FROM habits WHERE id = ? AND user_id = ?\",\n args: [habitId, userId],\n });\n if (habitRows.length === 0) return jsonResponse({ error: \"Habit not found or access denied.\" }, 404);\n const habitName = habitRows[0].name as string;\n\n const { rows: stepRows } = await sqlite.execute({\n sql: \"SELECT description FROM habit_steps WHERE habit_id = ? ORDER BY sort_order\",\n args: [habitId],\n });\n const habitSteps = (stepRows as { description: string }[]).map(r => r.description).join(\", \");\n\n const prompt = AFFIRMATION_GENERATOR_PROMPT.replace(\"{habitName}\", habitName).replace(\n \"{habitSteps}\",\n habitSteps || \"no specific steps listed\",\n );\n const openai = new OpenAI();\n const completion = await openai.chat.completions.create({\n model: \"gpt-4o\",\n messages: [{ role: \"user\", content: prompt }],\n response_format: { type: \"json_object\" },\n });\n const result = extractJson(completion.choices[0].message.content);\n return jsonResponse(result);\n }\n\n // --- Feed ---\n if (path === \"/api/feed\" && req.method === \"GET\") {\n const { rows } = await sqlite.execute({\n sql: `\n SELECT h.id, h.name, u.username \n FROM habits h\n JOIN users u ON h.user_id = u.id\n WHERE h.is_public = TRUE AND h.user_id IN (SELECT following_id FROM follows WHERE follower_id = ?)\n ORDER BY h.created_at DESC LIMIT 20\n `,\n args: [userId],\n });\n return jsonResponse(rows);\n }\n\n // All other routes...\n return jsonResponse({ error: \"API route not found or method not allowed.\" }, 404);\n } catch (e) {\n console.error(e);\n return jsonResponse({ error: \"An internal server error occurred.\", details: e.message }, 500);\n }\n }\n\n return jsonResponse({ error: \"Not Found\" }, 404);\n}","deleted","label",[98],"permalink","https://www.val.town/x/join/strive/code/main.tsx","extension","actionData","errors"]