[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_109":110,"_111":112},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","manas","name","togethr-beta-relay","path","main.tsx","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":12,"_13":44},"permalink","https://www.val.town/x/manas/togethr-beta-relay/code/main.tsx","extension","id","abc7177e-148c-45c0-aaaa-b1a68fb0d261","fileId","01a0157c-7a0e-76a8-9d6f-d340704549ae","parentId","branchId","095fa0fe-5a43-4bf0-9222-aaa30fc6f0b0","branchVersion",4,"latest",true,"createdAt",["D",1787067299119],"version",2,"fileType","http","content","import { Hono } from \"npm:hono\";\nimport { acceptInvite, addSessionEvent, createInvite, createSession, deviceInConnection, finishSession, getActiveSession, getDevice, getInvite, getSession, insertDevice, listConnections, listSessionEvents, updateDeviceName, type RelationType } from \"./db.ts\";\n\nconst app = new Hono();\nconst allowedEventTypes = new Set([\"snapshot\", \"spot_request\", \"ready\", \"session_finished\"]);\n\nfunction json(c: any, data: unknown, status = 200) {\n c.header(\"Access-Control-Allow-Origin\", \"*\");\n c.header(\"Access-Control-Allow-Headers\", \"authorization, x-togethr-device, content-type\");\n c.header(\"Access-Control-Allow-Methods\", \"GET,POST,PATCH,OPTIONS\");\n return c.json(data, status as any);\n}\napp.options(\"*\", (c) => json(c, { ok: true }));\n\nfunction randomToken(bytes = 32) {\n const data = crypto.getRandomValues(new Uint8Array(bytes));\n return btoa(String.fromCharCode(...data)).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/g, \"\");\n}\nfunction randomCode() {\n const alphabet = \"ABCDEFGHJKLMNPQRSTUVWXYZ23456789\";\n const data = crypto.getRandomValues(new Uint8Array(6));\n return Array.from(data, (value) => alphabet[value % alphabet.length]).join(\"\");\n}\nasync function hashToken(token: string) {\n const digest = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(token));\n return Array.from(new Uint8Array(digest), (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\nasync function requireDevice(c: any) {\n const deviceId = c.req.header(\"x-togethr-device\")?.trim();\n const auth = c.req.header(\"authorization\")?.trim() ?? \"\";\n const token = auth.startsWith(\"Bearer \") ? auth.slice(7).trim() : \"\";\n if (!deviceId || !token) return null;\n const device = await getDevice(deviceId);\n if (!device) return null;\n const hash = await hashToken(token);\n return hash === device.token_hash ? device : null;\n}\n\napp.get(\"/health\", (c) => json(c, { ok: true, service: \"togethr-beta-relay\", version: 1 }));\napp.post(\"/v1/devices\", async (c) => {\n const body = await c.req.json().catch(() => ({}));\n const displayName = String(body.displayName ?? \"\").trim().slice(0, 40);\n if (displayName.length < 2) return json(c, { error: \"display_name_required\" }, 400);\n const id = crypto.randomUUID(); const token = randomToken();\n await insertDevice(id, await hashToken(token), displayName);\n return json(c, { device: { id, token, displayName } }, 201);\n});\napp.patch(\"/v1/devices/me\", async (c) => {\n const device = await requireDevice(c); if (!device) return json(c, { error: \"unauthorized\" }, 401);\n const body = await c.req.json().catch(() => ({})); const displayName = String(body.displayName ?? \"\").trim().slice(0, 40);\n if (displayName.length < 2) return json(c, { error: \"display_name_required\" }, 400);\n await updateDeviceName(device.id, displayName); return json(c, { ok: true, displayName });\n});\napp.post(\"/v1/invites\", async (c) => {\n const device = await requireDevice(c); if (!device) return json(c, { error: \"unauthorized\" }, 401);\n const body = await c.req.json().catch(() => ({})); const relationType: RelationType = body.relationType === \"Gym buddy\" ? \"Gym buddy\" : \"Partner\";\n for (let attempt = 0; attempt < 6; attempt++) {\n const code = randomCode();\n try { const expiresAt = await createInvite(code, device.id, relationType); return json(c, { invite: { code, relationType, expiresAt } }, 201); }\n catch (error) { if (attempt === 5) throw error; }\n }\n return json(c, { error: \"invite_creation_failed\" }, 500);\n});\napp.get(\"/v1/invites/:code\", async (c) => {\n const code = c.req.param(\"code\").toUpperCase(); const invite = await getInvite(code);\n if (!invite) return json(c, { error: \"invite_not_found\" }, 404);\n if (String(invite.expires_at) <= new Date().toISOString() || invite.status !== \"pending\") return json(c, { error: \"invite_unavailable\" }, 410);\n return json(c, { invite: { code, creatorName: invite.creator_name, relationType: invite.relation_type, expiresAt: invite.expires_at } });\n});\napp.get(\"/join/:code\", async (c) => {\n const code = c.req.param(\"code\").toUpperCase();\n const invite = await getInvite(code);\n const unavailable = !invite || invite.status !== \"pending\" || String(invite.expires_at) <= new Date().toISOString();\n const creatorName = unavailable ? \"Your friend\" : String(invite.creator_name);\n const relationType = unavailable ? \"training partner\" : String(invite.relation_type).toLowerCase();\n const safeCode = code.replace(/[^A-Z0-9]/g, \"\").slice(0, 6);\n const deepLink = `togethr://join?code=${safeCode}`;\n return c.html(`Togethr invite

Togethr beta invite

${unavailable ? \"Invite unavailable\" : `${creatorName} wants to train with you.`}

${unavailable ? \"This code has expired or was already used.\" : `Open Togethr and pair as a ${relationType}. Your private body metrics are not shared by accepting.`}

${safeCode}

${unavailable ? \"\" : `OPEN TOGETHR`}

If the button does not open the beta app, enter the six-character code manually on the Partner Up screen.

`);\n});\n\napp.post(\"/v1/invites/:code/accept\", async (c) => {\n const device = await requireDevice(c); if (!device) return json(c, { error: \"unauthorized\" }, 401);\n const code = c.req.param(\"code\").toUpperCase(); const connectionId = crypto.randomUUID();\n try { await acceptInvite(code, device.id, connectionId); }\n catch (error) { const message = error instanceof Error ? error.message : \"INVITE_FAILED\"; const status = message === \"INVITE_NOT_FOUND\" ? 404 : message === \"INVITE_EXPIRED\" ? 410 : 409; return json(c, { error: message.toLowerCase() }, status); }\n const connections = await listConnections(device.id); return json(c, { connection: connections.find((item) => item.id === connectionId) }, 201);\n});\napp.get(\"/v1/connections\", async (c) => {\n const device = await requireDevice(c); if (!device) return json(c, { error: \"unauthorized\" }, 401);\n return json(c, { connections: await listConnections(device.id) });\n});\napp.post(\"/v1/sessions\", async (c) => {\n const device = await requireDevice(c); if (!device) return json(c, { error: \"unauthorized\" }, 401);\n const body = await c.req.json().catch(() => ({})); const connectionId = String(body.connectionId ?? \"\");\n if (!connectionId || !(await deviceInConnection(connectionId, device.id))) return json(c, { error: \"forbidden\" }, 403);\n const title = String(body.title ?? \"Shared workout\").trim().slice(0, 80) || \"Shared workout\"; const sessionId = crypto.randomUUID();\n await createSession(sessionId, connectionId, device.id, title);\n if (body.initialState) await addSessionEvent(crypto.randomUUID(), sessionId, device.id, \"snapshot\", body.initialState);\n return json(c, { session: { id: sessionId, connectionId, title, status: \"live\" } }, 201);\n});\napp.get(\"/v1/sessions/active\", async (c) => {\n const device = await requireDevice(c); if (!device) return json(c, { error: \"unauthorized\" }, 401);\n const connectionId = c.req.query(\"connectionId\") ?? \"\";\n if (!connectionId || !(await deviceInConnection(connectionId, device.id))) return json(c, { error: \"forbidden\" }, 403);\n const session = await getActiveSession(connectionId); if (!session) return json(c, { session: null });\n const events = await listSessionEvents(String(session.id), 0);\n return json(c, { session: { id: session.id, connectionId: session.connection_id, title: session.title, status: session.status }, latestEvent: events.at(-1) ?? null });\n});\napp.post(\"/v1/sessions/:sessionId/events\", async (c) => {\n const device = await requireDevice(c); if (!device) return json(c, { error: \"unauthorized\" }, 401);\n const sessionId = c.req.param(\"sessionId\"); const session = await getSession(sessionId); if (!session) return json(c, { error: \"session_not_found\" }, 404);\n if (!(await deviceInConnection(String(session.connection_id), device.id))) return json(c, { error: \"forbidden\" }, 403);\n const body = await c.req.json().catch(() => ({})); const eventId = String(body.eventId ?? crypto.randomUUID()); const type = String(body.type ?? \"snapshot\");\n if (!allowedEventTypes.has(type)) return json(c, { error: \"event_type_invalid\" }, 400);\n const seq = await addSessionEvent(eventId, sessionId, device.id, type, body.payload ?? {}); return json(c, { seq }, 201);\n});\napp.get(\"/v1/sessions/:sessionId/events\", async (c) => {\n const device = await requireDevice(c); if (!device) return json(c, { error: \"unauthorized\" }, 401);\n const sessionId = c.req.param(\"sessionId\"); const session = await getSession(sessionId); if (!session) return json(c, { error: \"session_not_found\" }, 404);\n if (!(await deviceInConnection(String(session.connection_id), device.id))) return json(c, { error: \"forbidden\" }, 403);\n const after = Math.max(0, Number(c.req.query(\"after\") ?? 0) || 0); return json(c, { events: await listSessionEvents(sessionId, after) });\n});\napp.post(\"/v1/sessions/:sessionId/finish\", async (c) => {\n const device = await requireDevice(c); if (!device) return json(c, { error: \"unauthorized\" }, 401);\n const sessionId = c.req.param(\"sessionId\"); const session = await getSession(sessionId); if (!session) return json(c, { error: \"session_not_found\" }, 404);\n if (!(await deviceInConnection(String(session.connection_id), device.id))) return json(c, { error: \"forbidden\" }, 403);\n await finishSession(sessionId); await addSessionEvent(crypto.randomUUID(), sessionId, device.id, \"session_finished\", { at: new Date().toISOString() }); return json(c, { ok: true });\n});\napp.onError((error, c) => { console.error(error); return json(c, { error: \"internal_error\" }, 500); });\nexport default app.fetch;\n","deleted",false,"label",[14],"f81ec633-62da-4fa6-8a9b-5ee623c88180",["D",1787066874304],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Togethr beta invite and session relay","imageUrl","userId","bdda9a4c-13e6-4481-b3c2-7ac3d6eab867","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019fcccd-fd9a-74cd-9f90-ade6d5af4f67","tursoName","f81ec63362da4fa68a9b5ee623c88180","tursoHostname","f81ec63362da4fa68a9b5ee623c88180-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789499469860],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_108":104},"org",{"_9":10,"_102":10,"_103":104,"_55":56,"_105":106,"_107":42},"branch",{"_35":88,"_11":89,"_22":28,"_90":45,"_91":92,"_93":94,"_95":50,"_96":97,"_98":99,"_100":12,"_101":10},"isOwned",6,"main","projectId","forkedBranchId","fb141f8d-047d-43b3-b09c-7fd59d8ddcfe","forkedBranchVersion",1,"forkedProjectPrivacy","forkedProjectId","a35fc79f-ccd4-4375-94dc-260d312636c6","forkedProjectOrgId","019aa807-52c2-709c-928b-2029bae9a558","projectName","userHandle","displayName","avatar","https://lh3.googleusercontent.com/a/ACg8ocIDM6L3j1I5a-9KRxESWnU76mLAa66fJBhefbGOknwGZXzF-g=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_142":143,"_144":145,"_146":147,"_148":42,"_149":42,"_150":42,"_151":32,"_152":-5,"_153":-7,"_154":-7,"_155":62,"_156":42,"_157":42,"_158":-5,"_159":42,"_160":42,"_161":42,"_162":-5},"ENV",{"_113":114,"_115":116,"_117":89,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139,"_140":141},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]