[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","nakd","name","Ch","path","main.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":10,"_13":44},"permalink","https://www.val.town/x/nakd/Ch/code/main.ts","extension","id","00f3abd0-9161-402b-9dfc-25e65bfa79af","fileId","6318ae72-a7f0-11f1-bd27-1607ee4eb77e","parentId","branchId","594e4a6a-323f-428b-9eab-672f4c3d972e","branchVersion",38,"latest",true,"createdAt",["D",1789191594094],"version",8,"fileType","http","content","//　main.ts\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport webpush from \"https://esm.sh/web-push@3.6.7\";\nimport { htmlContent } from \"./html.ts\";\nimport { jsContent } from \"./client.ts\";\nimport { gifClientJs } from \"./gif.ts\";\nimport { callClientJs } from \"./call.ts\";\n\nconst TABLE = \"rtchat_messages_v3\";\nconst POLLS_TABLE = \"rtchat_polls_v1\";\nconst PRESENCE_TABLE = \"rtchat_presence_v1\";\nconst PUSH_SUB_TABLE = \"rtchat_push_subs_v1\";\n// ---- LINE 風アカウント / 友だち / グループ ----\nconst ACCOUNTS_TABLE = \"rtchat_accounts_v1\";\nconst FRIENDS_TABLE = \"rtchat_friends_v1\";\nconst GROUPS_TABLE = \"rtchat_groups_v1\";\nconst GROUP_MEMBERS_TABLE = \"rtchat_group_members_v1\";\n// ---- 通話シグナリング（WebRTC / 1:1 のみ・room ごとに1通話） ----\nconst CALLS_TABLE = \"rtchat_calls_v1\";\n\n// テーブル初期化\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${TABLE} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n room TEXT NOT NULL,\n user_id TEXT NOT NULL,\n name TEXT NOT NULL,\n body TEXT NOT NULL,\n image_url TEXT,\n created_at INTEGER NOT NULL\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${POLLS_TABLE} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n room TEXT NOT NULL,\n question TEXT NOT NULL,\n options TEXT NOT NULL,\n votes TEXT NOT NULL DEFAULT '{}',\n created_at INTEGER NOT NULL\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${PRESENCE_TABLE} (\n room TEXT NOT NULL,\n user_id TEXT NOT NULL,\n name TEXT NOT NULL,\n last_seen INTEGER NOT NULL,\n PRIMARY KEY (room, user_id)\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${PUSH_SUB_TABLE} (\n user_id TEXT NOT NULL,\n room TEXT NOT NULL,\n subscription TEXT NOT NULL,\n PRIMARY KEY (user_id, room)\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS vapid_keys (\n id INTEGER PRIMARY KEY CHECK (id = 1),\n public_key TEXT NOT NULL,\n private_key TEXT NOT NULL\n )\n`);\n\n// 永続アカウント（LINE風）\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${ACCOUNTS_TABLE} (\n id TEXT PRIMARY KEY,\n token TEXT NOT NULL,\n line_id TEXT UNIQUE,\n name TEXT NOT NULL,\n avatar_url TEXT,\n status_msg TEXT,\n created_at INTEGER NOT NULL,\n updated_at INTEGER NOT NULL\n )\n`);\n\n// 友だち関係（相互に1行ずつ保存）\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${FRIENDS_TABLE} (\n account_id TEXT NOT NULL,\n friend_id TEXT NOT NULL,\n created_at INTEGER NOT NULL,\n PRIMARY KEY (account_id, friend_id)\n )\n`);\n\n// グループ\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${GROUPS_TABLE} (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n icon_url TEXT,\n created_by TEXT NOT NULL,\n created_at INTEGER NOT NULL\n )\n`);\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${GROUP_MEMBERS_TABLE} (\n group_id TEXT NOT NULL,\n account_id TEXT NOT NULL,\n joined_at INTEGER NOT NULL,\n PRIMARY KEY (group_id, account_id)\n )\n`);\n\n// 通話シグナリング（1つの room につき現在の通話を1行だけ保持。call_seq で世代管理）\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${CALLS_TABLE} (\n room TEXT PRIMARY KEY,\n call_seq INTEGER NOT NULL DEFAULT 0,\n caller_id TEXT,\n caller_name TEXT,\n caller_avatar TEXT,\n callee_id TEXT,\n status TEXT,\n offer TEXT,\n answer TEXT,\n caller_ice TEXT DEFAULT '[]',\n callee_ice TEXT DEFAULT '[]',\n started_at INTEGER,\n updated_at INTEGER\n )\n`);\n\n// VAPID キーの取得または生成\nlet vapidKeys = { publicKey: \"\", privateKey: \"\" };\nconst vapidResult = await sqlite.execute(\n \"SELECT public_key, private_key FROM vapid_keys WHERE id = 1\",\n);\nif (vapidResult.rows && (vapidResult.rows as any[]).length > 0) {\n const row = (vapidResult.rows as any[])[0];\n vapidKeys = {\n publicKey: String(row[0] ?? row.public_key),\n privateKey: String(row[1] ?? row.private_key),\n };\n} else {\n const keys = webpush.generateVAPIDKeys();\n vapidKeys = { publicKey: keys.publicKey, privateKey: keys.privateKey };\n await sqlite.execute({\n sql:\n \"INSERT INTO vapid_keys (id, public_key, private_key) VALUES (1, ?, ?)\",\n args: [vapidKeys.publicKey, vapidKeys.privateKey],\n });\n}\nwebpush.setVapidDetails(\n \"mailto:admin@example.com\",\n vapidKeys.publicKey,\n vapidKeys.privateKey,\n);\n\nasync function ensureColumn(table: string, column: string, type: string) {\n try {\n await sqlite.execute(`ALTER TABLE ${table} ADD COLUMN ${column} ${type}`);\n } catch (_e) {\n // カラムが既に存在する場合は無視\n }\n}\n\nawait ensureColumn(TABLE, \"reply_to_id\", \"INTEGER\");\nawait ensureColumn(TABLE, \"reply_to_name\", \"TEXT\");\nawait ensureColumn(TABLE, \"reply_to_body\", \"TEXT\");\nawait ensureColumn(TABLE, \"edited_at\", \"INTEGER\");\nawait ensureColumn(TABLE, \"deleted\", \"INTEGER DEFAULT 0\");\nawait ensureColumn(TABLE, \"updated_at\", \"INTEGER\");\nawait ensureColumn(TABLE, \"poll_id\", \"INTEGER\");\nawait ensureColumn(TABLE, \"avatar_url\", \"TEXT\");\n// 既読管理用\nawait ensureColumn(PRESENCE_TABLE, \"last_read_id\", \"INTEGER DEFAULT 0\");\n\nawait sqlite.execute(\n `UPDATE ${TABLE} SET updated_at = created_at WHERE updated_at IS NULL`,\n);\n\nconst ONLINE_WINDOW_MS = 8000;\nconst SYSTEM_USER = \"system\";\n// GIPHY API キーはサーバー側の環境変数からのみ読み込み、クライアントには渡さない\nconst GIPHY_API_KEY = Deno.env.get(\"GIPHY_API_KEY\") || \"\";\n\n// ---------- 共通ヘルパー ----------\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\nfunction col(row: any, idx: number, key: string): any {\n return row[idx] ?? row[key];\n}\nfunction genId(prefix: string, len: number): string {\n let s = \"\";\n while (s.length < len) s += Math.random().toString(36).slice(2);\n return prefix + s.slice(0, len);\n}\nfunction genToken(): string {\n return crypto.randomUUID().replace(/-/g, \"\") +\n crypto.randomUUID().replace(/-/g, \"\");\n}\nfunction isDmRoom(room: string) {\n return room.startsWith(\"dm:\");\n}\nfunction isGroupRoom(room: string) {\n return room.startsWith(\"g:\");\n}\nfunction isAccountRoom(room: string) {\n return isDmRoom(room) || isGroupRoom(room);\n}\nfunction dmMembers(room: string): string[] {\n return room.slice(3).split(\"-\").filter((s) => s.length > 0);\n}\nfunction dmRoomFor(a: string, b: string): string {\n const [x, y] = [a, b].sort();\n return \"dm:\" + x + \"-\" + y;\n}\nfunction normalizeLineId(raw: unknown): string | null {\n const s = String(raw ?? \"\").trim().toLowerCase();\n if (!s) return null;\n if (!/^[a-z0-9._-]{4,20}$/.test(s)) return \"__invalid__\";\n return s;\n}\nfunction base64ToBytes(b64: string): Uint8Array {\n const bin = atob(b64);\n const bytes = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) bytes[i] = bin.charCodeAt(i);\n return bytes;\n}\n\ntype Account = {\n id: string;\n line_id: string | null;\n name: string;\n avatar_url: string;\n status_msg: string;\n};\nfunction accountFromRow(row: any): Account {\n return {\n id: String(col(row, 0, \"id\")),\n line_id: col(row, 1, \"line_id\") != null\n ? String(col(row, 1, \"line_id\"))\n : null,\n name: String(col(row, 2, \"name\")),\n avatar_url: col(row, 3, \"avatar_url\")\n ? String(col(row, 3, \"avatar_url\"))\n : \"\",\n status_msg: col(row, 4, \"status_msg\")\n ? String(col(row, 4, \"status_msg\"))\n : \"\",\n };\n}\nconst ACCOUNT_COLS = \"id, line_id, name, avatar_url, status_msg\";\n\nasync function getAccount(id: string): Promise {\n if (!id) return null;\n const r = await sqlite.execute({\n sql: `SELECT ${ACCOUNT_COLS} FROM ${ACCOUNTS_TABLE} WHERE id = ?`,\n args: [id],\n });\n const row = (r.rows as any[])[0];\n return row ? accountFromRow(row) : null;\n}\nasync function getAccountsByIds(\n ids: string[],\n): Promise> {\n const map: Record = {};\n const uniq = Array.from(new Set(ids.filter((s) => !!s)));\n if (uniq.length === 0) return map;\n const r = await sqlite.execute({\n sql: `SELECT ${ACCOUNT_COLS} FROM ${ACCOUNTS_TABLE} WHERE id IN (${\n uniq.map(() => \"?\").join(\",\")\n })`,\n args: uniq,\n });\n for (const row of r.rows as any[]) {\n const a = accountFromRow(row);\n map[a.id] = a;\n }\n return map;\n}\nasync function authAccount(\n id: unknown,\n token: unknown,\n): Promise {\n if (!id || !token) return null;\n const r = await sqlite.execute({\n sql:\n `SELECT ${ACCOUNT_COLS} FROM ${ACCOUNTS_TABLE} WHERE id = ? AND token = ?`,\n args: [String(id), String(token)],\n });\n const row = (r.rows as any[])[0];\n return row ? accountFromRow(row) : null;\n}\nasync function isGroupMember(\n groupId: string,\n accountId: string,\n): Promise {\n const r = await sqlite.execute({\n sql:\n `SELECT 1 FROM ${GROUP_MEMBERS_TABLE} WHERE group_id = ? AND account_id = ?`,\n args: [groupId, accountId],\n });\n return (r.rows as any[]).length > 0;\n}\nasync function getGroup(groupId: string) {\n const r = await sqlite.execute({\n sql:\n `SELECT id, name, icon_url, created_by, created_at FROM ${GROUPS_TABLE} WHERE id = ?`,\n args: [groupId],\n });\n const row = (r.rows as any[])[0];\n if (!row) return null;\n return {\n id: String(col(row, 0, \"id\")),\n name: String(col(row, 1, \"name\")),\n icon_url: col(row, 2, \"icon_url\") ? String(col(row, 2, \"icon_url\")) : \"\",\n created_by: String(col(row, 3, \"created_by\")),\n created_at: Number(col(row, 4, \"created_at\")),\n };\n}\nasync function getGroupMembers(groupId: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT a.id, a.line_id, a.name, a.avatar_url, a.status_msg\n FROM ${GROUP_MEMBERS_TABLE} m JOIN ${ACCOUNTS_TABLE} a ON a.id = m.account_id\n WHERE m.group_id = ? ORDER BY m.joined_at ASC`,\n args: [groupId],\n });\n return (r.rows as any[]).map(accountFromRow);\n}\n// dm:/g: ルームは正規アカウント＋トークンが必要。ランダムルームは誰でも OK\nasync function canAccessRoom(\n room: string,\n accountId: unknown,\n token: unknown,\n): Promise {\n if (!isAccountRoom(room)) return true;\n const acct = await authAccount(accountId, token);\n if (!acct) return false;\n if (isDmRoom(room)) return dmMembers(room).includes(acct.id);\n return isGroupMember(room.slice(2), acct.id);\n}\nasync function insertSystemMessage(room: string, body: string) {\n const now = Date.now();\n await sqlite.execute({\n sql:\n `INSERT INTO ${TABLE} (room, user_id, name, body, image_url, avatar_url, updated_at, created_at)\n VALUES (?, ?, ?, ?, '', '', ?, ?)`,\n args: [room, SYSTEM_USER, SYSTEM_USER, body, now, now],\n });\n}\nasync function readJson(req: Request): Promise {\n try {\n return await req.json();\n } catch (_e) {\n return {};\n }\n}\n\n// ---------- 通話シグナリングヘルパー ----------\ntype CallRow = {\n room: string;\n call_seq: number;\n caller_id: string;\n caller_name: string;\n caller_avatar: string;\n callee_id: string;\n status: string;\n offer: string;\n answer: string;\n caller_ice: string[];\n callee_ice: string[];\n started_at: number;\n updated_at: number;\n};\nasync function getCallRow(room: string): Promise {\n const r = await sqlite.execute({\n sql:\n `SELECT room, call_seq, caller_id, caller_name, caller_avatar, callee_id, status, offer, answer, caller_ice, callee_ice, started_at, updated_at\n FROM ${CALLS_TABLE} WHERE room = ?`,\n args: [room],\n });\n const row = (r.rows as any[])[0];\n if (!row) return null;\n let callerIce: string[] = [];\n let calleeIce: string[] = [];\n try {\n callerIce = JSON.parse(String(col(row, 9, \"caller_ice\") || \"[]\"));\n } catch (_e) {}\n try {\n calleeIce = JSON.parse(String(col(row, 10, \"callee_ice\") || \"[]\"));\n } catch (_e) {}\n return {\n room: String(col(row, 0, \"room\")),\n call_seq: Number(col(row, 1, \"call_seq\")),\n caller_id: String(col(row, 2, \"caller_id\") || \"\"),\n caller_name: String(col(row, 3, \"caller_name\") || \"\"),\n caller_avatar: col(row, 4, \"caller_avatar\")\n ? String(col(row, 4, \"caller_avatar\"))\n : \"\",\n callee_id: String(col(row, 5, \"callee_id\") || \"\"),\n status: String(col(row, 6, \"status\") || \"\"),\n offer: col(row, 7, \"offer\") ? String(col(row, 7, \"offer\")) : \"\",\n answer: col(row, 8, \"answer\") ? String(col(row, 8, \"answer\")) : \"\",\n caller_ice: callerIce,\n callee_ice: calleeIce,\n started_at: Number(col(row, 11, \"started_at\") ?? 0),\n updated_at: Number(col(row, 12, \"updated_at\") ?? 0),\n };\n}\n\n// バックグラウンド用 Service Worker 本体\nconst swJsContent = `\nself.addEventListener('push', function(event) {\n let data = {};\n try { data = event.data ? event.data.json() : {}; } catch(e) { data = { body: event.data ? event.data.text() : '' }; }\n const title = data.title || '新しいメッセージ';\n const options = {\n body: data.body || '',\n icon: data.icon || undefined,\n badge: '/favicon.ico',\n tag: data.tag || 'chat-message',\n renotify: true,\n vibrate: [200, 100, 200],\n requireInteraction: false,\n data: { url: data.url || '/', room: data.room || 'lobby' }\n };\n event.waitUntil(self.registration.showNotification(title, options));\n});\nself.addEventListener('notificationclick', function(event) {\n event.notification.close();\n const targetUrl = event.notification.data && event.notification.data.url ? event.notification.data.url : '/';\n event.waitUntil(\n clients.matchAll({ type: 'window', includeUncontrolled: true }).then(function(clientList) {\n for (const client of clientList) {\n if (client.url.includes(targetUrl) && 'focus' in client) return client.focus();\n }\n if (clients.openWindow) return clients.openWindow(targetUrl);\n })\n );\n});\n`;\n\n// ---------- PWA マニフェスト / アイコン ----------\n// iOS で Web Push を受け取るには「ホーム画面に追加」された PWA である必要があるため、\n// manifest.json とアイコン一式をこのアプリ自身で配信する。\nconst MANIFEST_JSON = JSON.stringify({\n name: \"LINE風チャット\",\n short_name: \"Chat\",\n start_url: \"/\",\n scope: \"/\",\n display: \"standalone\",\n background_color: \"#ffffff\",\n theme_color: \"#06c755\",\n icons: [\n { src: \"/icon-192.png\", sizes: \"192x192\", type: \"image/png\" },\n { src: \"/icon-512.png\", sizes: \"512x512\", type: \"image/png\" },\n ],\n});\n// 192x192 / 512x512 / apple-touch-icon(180x180) の緑のチャットバブルアイコン（PNG, base64）\nconst ICON_192_B64 =\n \"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\";\nconst ICON_512_B64 =\n \"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\";\nconst APPLE_TOUCH_ICON_B64 =\n \"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\";\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // /sw.js を正規配信\n if (path === \"/sw.js\") {\n return new Response(swJsContent, {\n headers: {\n \"Content-Type\": \"application/javascript; charset=utf-8\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n }\n\n // PWA マニフェスト & アイコン（iOS のホーム画面追加 / Push 通知に必要）\n if (path === \"/manifest.json\") {\n return new Response(MANIFEST_JSON, {\n headers: {\n \"Content-Type\": \"application/manifest+json; charset=utf-8\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n }\n if (path === \"/icon-192.png\") {\n return new Response(base64ToBytes(ICON_192_B64), {\n headers: {\n \"Content-Type\": \"image/png\",\n \"Cache-Control\": \"public, max-age=86400\",\n },\n });\n }\n if (path === \"/icon-512.png\") {\n return new Response(base64ToBytes(ICON_512_B64), {\n headers: {\n \"Content-Type\": \"image/png\",\n \"Cache-Control\": \"public, max-age=86400\",\n },\n });\n }\n if (path === \"/apple-touch-icon.png\") {\n return new Response(base64ToBytes(APPLE_TOUCH_ICON_B64), {\n headers: {\n \"Content-Type\": \"image/png\",\n \"Cache-Control\": \"public, max-age=86400\",\n },\n });\n }\n\n // ===================== アカウント API =====================\n\n // --- 登録 ---\n if (path === \"/api/account/register\" && req.method === \"POST\") {\n const data = await readJson(req);\n const name = String(data.name || \"\").trim().slice(0, 40);\n if (!name) return json({ error: \"name_required\" }, 400);\n const lineId = normalizeLineId(data.line_id);\n if (lineId === \"__invalid__\") {\n return json({ error: \"invalid_line_id\" }, 400);\n }\n if (lineId) {\n const dup = await sqlite.execute({\n sql: `SELECT 1 FROM ${ACCOUNTS_TABLE} WHERE line_id = ?`,\n args: [lineId],\n });\n if ((dup.rows as any[]).length > 0) {\n return json({ error: \"id_taken\" }, 409);\n }\n }\n const id = genId(\"u\", 10);\n const token = genToken();\n const now = Date.now();\n await sqlite.execute({\n sql:\n `INSERT INTO ${ACCOUNTS_TABLE} (id, token, line_id, name, avatar_url, status_msg, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n id,\n token,\n lineId,\n name,\n String(data.avatar_url || \"\"),\n String(data.status_msg || \"\").slice(0, 100),\n now,\n now,\n ],\n });\n const acct = await getAccount(id);\n return json({ account: { ...acct, token } });\n }\n\n // --- 更新 ---\n if (path === \"/api/account/update\" && req.method === \"POST\") {\n const data = await readJson(req);\n const acct = await authAccount(data.account_id, data.token);\n if (!acct) return json({ error: \"unauthorized\" }, 403);\n const name = data.name != null\n ? String(data.name).trim().slice(0, 40)\n : acct.name;\n if (!name) return json({ error: \"name_required\" }, 400);\n let lineId: string | null = acct.line_id;\n if (data.line_id !== undefined) {\n const n = normalizeLineId(data.line_id);\n if (n === \"__invalid__\") return json({ error: \"invalid_line_id\" }, 400);\n if (n && n !== acct.line_id) {\n const dup = await sqlite.execute({\n sql: `SELECT 1 FROM ${ACCOUNTS_TABLE} WHERE line_id = ? AND id != ?`,\n args: [n, acct.id],\n });\n if ((dup.rows as any[]).length > 0) {\n return json({ error: \"id_taken\" }, 409);\n }\n }\n lineId = n;\n }\n const avatar = data.avatar_url !== undefined\n ? String(data.avatar_url || \"\")\n : acct.avatar_url;\n const status = data.status_msg !== undefined\n ? String(data.status_msg || \"\").slice(0, 100)\n : acct.status_msg;\n await sqlite.execute({\n sql:\n `UPDATE ${ACCOUNTS_TABLE} SET name = ?, line_id = ?, avatar_url = ?, status_msg = ?, updated_at = ? WHERE id = ?`,\n args: [name, lineId, avatar, status, Date.now(), acct.id],\n });\n return json({ account: await getAccount(acct.id) });\n }\n\n // --- 自分の情報（友だち・グループ込み） ---\n if (path === \"/api/account/me\" && req.method === \"GET\") {\n const acct = await authAccount(\n url.searchParams.get(\"account_id\"),\n url.searchParams.get(\"token\"),\n );\n if (!acct) return json({ error: \"unauthorized\" }, 403);\n\n const fr = await sqlite.execute({\n sql: `SELECT a.id, a.line_id, a.name, a.avatar_url, a.status_msg\n FROM ${FRIENDS_TABLE} f JOIN ${ACCOUNTS_TABLE} a ON a.id = f.friend_id\n WHERE f.account_id = ? ORDER BY a.name COLLATE NOCASE ASC`,\n args: [acct.id],\n });\n const friends = (fr.rows as any[]).map(accountFromRow);\n\n const gr = await sqlite.execute({\n sql: `SELECT g.id, g.name, g.icon_url, g.created_by, g.created_at,\n (SELECT COUNT(*) FROM ${GROUP_MEMBERS_TABLE} c WHERE c.group_id = g.id) AS member_count\n FROM ${GROUP_MEMBERS_TABLE} m JOIN ${GROUPS_TABLE} g ON g.id = m.group_id\n WHERE m.account_id = ? ORDER BY g.created_at DESC`,\n args: [acct.id],\n });\n const groups = (gr.rows as any[]).map((row) => ({\n id: String(col(row, 0, \"id\")),\n name: String(col(row, 1, \"name\")),\n icon_url: col(row, 2, \"icon_url\") ? String(col(row, 2, \"icon_url\")) : \"\",\n created_by: String(col(row, 3, \"created_by\")),\n created_at: Number(col(row, 4, \"created_at\")),\n member_count: Number(col(row, 5, \"member_count\") ?? 0),\n }));\n\n return json({ account: acct, friends, groups });\n }\n\n // --- 公開プロフィール検索（LINE ID / アカウントID） ---\n if (path === \"/api/account/lookup\" && req.method === \"GET\") {\n const lineId = normalizeLineId(url.searchParams.get(\"line_id\"));\n const accountId = url.searchParams.get(\"account_id\") || \"\";\n let acct: Account | null = null;\n if (lineId && lineId !== \"__invalid__\") {\n const r = await sqlite.execute({\n sql: `SELECT ${ACCOUNT_COLS} FROM ${ACCOUNTS_TABLE} WHERE line_id = ?`,\n args: [lineId],\n });\n const row = (r.rows as any[])[0];\n acct = row ? accountFromRow(row) : null;\n } else if (accountId) {\n acct = await getAccount(accountId);\n }\n if (!acct) return json({ error: \"not_found\" }, 404);\n return json({ account: acct });\n }\n\n // --- 友だち追加（相互） ---\n if (path === \"/api/friends/add\" && req.method === \"POST\") {\n const data = await readJson(req);\n const acct = await authAccount(data.account_id, data.token);\n if (!acct) return json({ error: \"unauthorized\" }, 403);\n const friendId = String(data.friend_id || \"\");\n if (!friendId || friendId === acct.id) {\n return json({ error: \"invalid_friend\" }, 400);\n }\n const friend = await getAccount(friendId);\n if (!friend) return json({ error: \"not_found\" }, 404);\n const now = Date.now();\n await sqlite.execute({\n sql:\n `INSERT OR IGNORE INTO ${FRIENDS_TABLE} (account_id, friend_id, created_at) VALUES (?, ?, ?)`,\n args: [acct.id, friend.id, now],\n });\n await sqlite.execute({\n sql:\n `INSERT OR IGNORE INTO ${FRIENDS_TABLE} (account_id, friend_id, created_at) VALUES (?, ?, ?)`,\n args: [friend.id, acct.id, now],\n });\n return json({ success: true, friend, room: dmRoomFor(acct.id, friend.id) });\n }\n\n // --- グループ作成 ---\n if (path === \"/api/groups/create\" && req.method === \"POST\") {\n const data = await readJson(req);\n const acct = await authAccount(data.account_id, data.token);\n if (!acct) return json({ error: \"unauthorized\" }, 403);\n const name = String(data.name || \"\").trim().slice(0, 50);\n if (!name) return json({ error: \"name_required\" }, 400);\n const memberIds: string[] = Array.isArray(data.member_ids)\n ? data.member_ids.map((s: unknown) => String(s)).filter((s: string) =>\n s && s !== acct.id\n )\n : [];\n const id = genId(\"\", 10);\n const now = Date.now();\n await sqlite.execute({\n sql:\n `INSERT INTO ${GROUPS_TABLE} (id, name, icon_url, created_by, created_at) VALUES (?, ?, ?, ?, ?)`,\n args: [id, name, String(data.icon_url || \"\"), acct.id, now],\n });\n await sqlite.execute({\n sql:\n `INSERT OR IGNORE INTO ${GROUP_MEMBERS_TABLE} (group_id, account_id, joined_at) VALUES (?, ?, ?)`,\n args: [id, acct.id, now],\n });\n const existing = await getAccountsByIds(memberIds);\n for (const mid of memberIds) {\n if (!existing[mid]) continue;\n await sqlite.execute({\n sql:\n `INSERT OR IGNORE INTO ${GROUP_MEMBERS_TABLE} (group_id, account_id, joined_at) VALUES (?, ?, ?)`,\n args: [id, mid, now],\n });\n }\n const names = [\n acct.name,\n ...memberIds.filter((m) => existing[m]).map((m) => existing[m].name),\n ];\n await insertSystemMessage(\n \"g:\" + id,\n acct.name + \"がグループを作成しました。\" +\n (names.length > 1\n ? \" \" + names.slice(1).join(\"、\") + \"が参加しました。\"\n : \"\"),\n );\n return json({ success: true, group: await getGroup(id), room: \"g:\" + id });\n }\n\n // --- グループ参加（招待リンク） ---\n if (path === \"/api/groups/join\" && req.method === \"POST\") {\n const data = await readJson(req);\n const acct = await authAccount(data.account_id, data.token);\n if (!acct) return json({ error: \"unauthorized\" }, 403);\n const group = await getGroup(String(data.group_id || \"\"));\n if (!group) return json({ error: \"not_found\" }, 404);\n if (!(await isGroupMember(group.id, acct.id))) {\n await sqlite.execute({\n sql:\n `INSERT OR IGNORE INTO ${GROUP_MEMBERS_TABLE} (group_id, account_id, joined_at) VALUES (?, ?, ?)`,\n args: [group.id, acct.id, Date.now()],\n });\n await insertSystemMessage(\n \"g:\" + group.id,\n acct.name + \"が参加しました。\",\n );\n }\n return json({ success: true, group, room: \"g:\" + group.id });\n }\n\n // --- グループに友だちを招待 ---\n if (path === \"/api/groups/invite\" && req.method === \"POST\") {\n const data = await readJson(req);\n const acct = await authAccount(data.account_id, data.token);\n if (!acct) return json({ error: \"unauthorized\" }, 403);\n const group = await getGroup(String(data.group_id || \"\"));\n if (!group) return json({ error: \"not_found\" }, 404);\n if (!(await isGroupMember(group.id, acct.id))) {\n return json({ error: \"forbidden\" }, 403);\n }\n const memberIds: string[] = Array.isArray(data.member_ids)\n ? data.member_ids.map((s: unknown) => String(s))\n : [];\n const existing = await getAccountsByIds(memberIds);\n const added: string[] = [];\n for (const mid of memberIds) {\n if (!existing[mid]) continue;\n if (await isGroupMember(group.id, mid)) continue;\n await sqlite.execute({\n sql:\n `INSERT OR IGNORE INTO ${GROUP_MEMBERS_TABLE} (group_id, account_id, joined_at) VALUES (?, ?, ?)`,\n args: [group.id, mid, Date.now()],\n });\n added.push(existing[mid].name);\n }\n if (added.length > 0) {\n await insertSystemMessage(\n \"g:\" + group.id,\n acct.name + \"が\" + added.join(\"、\") + \"を招待しました。\",\n );\n }\n return json({ success: true, added: added.length });\n }\n\n // --- グループ退会 ---\n if (path === \"/api/groups/leave\" && req.method === \"POST\") {\n const data = await readJson(req);\n const acct = await authAccount(data.account_id, data.token);\n if (!acct) return json({ error: \"unauthorized\" }, 403);\n const groupId = String(data.group_id || \"\");\n await sqlite.execute({\n sql:\n `DELETE FROM ${GROUP_MEMBERS_TABLE} WHERE group_id = ? AND account_id = ?`,\n args: [groupId, acct.id],\n });\n await insertSystemMessage(\"g:\" + groupId, acct.name + \"が退会しました。\");\n return json({ success: true });\n }\n\n // --- ルーム情報（ヘッダー表示・メニュー用） ---\n if (path === \"/api/room-info\" && req.method === \"GET\") {\n const room = url.searchParams.get(\"room\") || \"lobby\";\n const accountId = url.searchParams.get(\"account_id\");\n const token = url.searchParams.get(\"token\");\n if (!isAccountRoom(room)) {\n return json({\n type: \"random\",\n room,\n title: \"#\" + room,\n icon: \"\",\n members: [],\n });\n }\n const acct = await authAccount(accountId, token);\n if (!acct) return json({ error: \"unauthorized\" }, 403);\n if (isDmRoom(room)) {\n const ids = dmMembers(room);\n if (!ids.includes(acct.id)) return json({ error: \"forbidden\" }, 403);\n const map = await getAccountsByIds(ids);\n const other = ids.filter((i) =>\n i !== acct.id\n ).map((i) => map[i]).filter(Boolean)[0];\n return json({\n type: \"dm\",\n room,\n title: other ? other.name : \"不明なユーザー\",\n icon: other ? other.avatar_url : \"\",\n other_id: other ? other.id : \"\",\n members: ids.map((i) => map[i]).filter(Boolean),\n });\n }\n const group = await getGroup(room.slice(2));\n if (!group) return json({ error: \"not_found\" }, 404);\n if (!(await isGroupMember(group.id, acct.id))) {\n return json({ error: \"forbidden\" }, 403);\n }\n const members = await getGroupMembers(group.id);\n return json({\n type: \"group\",\n room,\n title: group.name,\n icon: group.icon_url,\n group_id: group.id,\n members,\n });\n }\n\n // ===================== Push =====================\n\n if (path === \"/api/subscribe\" && req.method === \"POST\") {\n try {\n const data = await req.json();\n const { user_id, room, subscription } = data;\n if (!user_id || !room || !subscription) {\n return json({ error: \"invalid data\" }, 400);\n }\n await sqlite.execute({\n sql:\n `INSERT INTO ${PUSH_SUB_TABLE} (user_id, room, subscription) VALUES (?, ?, ?)\n ON CONFLICT(user_id, room) DO UPDATE SET subscription = excluded.subscription`,\n args: [user_id, room, JSON.stringify(subscription)],\n });\n return json({ success: true });\n } catch (err) {\n return json({ error: String(err) }, 400);\n }\n }\n\n if (path === \"/api/vapid-public-key\") {\n return json({ publicKey: vapidKeys.publicKey });\n }\n\n // ===================== 通話シグナリング（WebRTC / 1:1 DM のみ） =====================\n // 音声データ自体は P2P（または端末側が用意した STUN/TURN）で流れるため、\n // ここで扱うのは offer/answer/ICE candidate の橋渡しのみ（無料の Google STUN 前提の構成）。\n\n // --- 発信（オファー送信） ---\n if (path === \"/api/call/offer\" && req.method === \"POST\") {\n const data = await readJson(req);\n const acct = await authAccount(data.account_id, data.token);\n if (!acct) return json({ error: \"unauthorized\" }, 403);\n const room = String(data.room || \"\");\n const targetId = String(data.target_id || \"\");\n const offer = String(data.offer || \"\");\n if (!isDmRoom(room) || !offer || !targetId || targetId === acct.id) {\n return json({ error: \"invalid_call\" }, 400);\n }\n if (\n !dmMembers(room).includes(acct.id) || !dmMembers(room).includes(targetId)\n ) {\n return json({ error: \"forbidden\" }, 403);\n }\n const now = Date.now();\n const existing = await getCallRow(room);\n if (\n existing &&\n (existing.status === \"ringing\" || existing.status === \"accepted\") &&\n now - existing.updated_at < 60000\n ) {\n return json({ error: \"call_in_progress\" }, 409);\n }\n const nextSeq = existing ? existing.call_seq + 1 : 1;\n await sqlite.execute({\n sql:\n `INSERT INTO ${CALLS_TABLE} (room, call_seq, caller_id, caller_name, caller_avatar, callee_id, status, offer, answer, caller_ice, callee_ice, started_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, 'ringing', ?, NULL, '[]', '[]', ?, ?)\n ON CONFLICT(room) DO UPDATE SET call_seq = excluded.call_seq, caller_id = excluded.caller_id, caller_name = excluded.caller_name,\n caller_avatar = excluded.caller_avatar, callee_id = excluded.callee_id, status = 'ringing', offer = excluded.offer,\n answer = NULL, caller_ice = '[]', callee_ice = '[]', started_at = excluded.started_at, updated_at = excluded.updated_at`,\n args: [\n room,\n nextSeq,\n acct.id,\n acct.name,\n acct.avatar_url || \"\",\n targetId,\n offer,\n now,\n now,\n ],\n });\n\n // 着信通知（既存の Push 基盤を流用。iOS はホーム画面追加済みの場合のみ届く）\n try {\n const subsResult = await sqlite.execute({\n sql:\n `SELECT subscription FROM ${PUSH_SUB_TABLE} WHERE room = ? AND user_id != ?`,\n args: [room, acct.id],\n });\n for (const row of subsResult.rows as any[]) {\n try {\n const sub = JSON.parse(String(row[0] ?? row.subscription));\n const payload = JSON.stringify({\n title: acct.name,\n body: \"着信中...\",\n tag: `call-${room}`,\n icon: acct.avatar_url && !acct.avatar_url.startsWith(\"data:\")\n ? acct.avatar_url\n : undefined,\n url: \"/#\" + room,\n room,\n });\n webpush.sendNotification(sub, payload).catch(() => {});\n } catch (_e) {\n // パースエラー等は無視\n }\n }\n } catch (_e) {\n // 通知送信の失敗は発信そのものを妨げない\n }\n\n return json({ success: true, call_seq: nextSeq });\n }\n\n // --- 応答（アンサー送信） ---\n if (path === \"/api/call/answer\" && req.method === \"POST\") {\n const data = await readJson(req);\n const acct = await authAccount(data.account_id, data.token);\n if (!acct) return json({ error: \"unauthorized\" }, 403);\n const room = String(data.room || \"\");\n const callSeq = Number(data.call_seq);\n const answer = String(data.answer || \"\");\n const existing = await getCallRow(room);\n if (\n !existing || existing.call_seq !== callSeq ||\n existing.callee_id !== acct.id || existing.status !== \"ringing\"\n ) {\n return json({ error: \"invalid_call\" }, 400);\n }\n await sqlite.execute({\n sql:\n `UPDATE ${CALLS_TABLE} SET answer = ?, status = 'accepted', updated_at = ? WHERE room = ? AND call_seq = ?`,\n args: [answer, Date.now(), room, callSeq],\n });\n return json({ success: true });\n }\n\n // --- ICE candidate 交換 ---\n if (path === \"/api/call/ice\" && req.method === \"POST\") {\n const data = await readJson(req);\n const acct = await authAccount(data.account_id, data.token);\n if (!acct) return json({ error: \"unauthorized\" }, 403);\n const room = String(data.room || \"\");\n const callSeq = Number(data.call_seq);\n const candidate = String(data.candidate || \"\");\n const existing = await getCallRow(room);\n if (!existing || existing.call_seq !== callSeq) {\n return json({ error: \"invalid_call\" }, 400);\n }\n if (existing.caller_id !== acct.id && existing.callee_id !== acct.id) {\n return json({ error: \"forbidden\" }, 403);\n }\n const isCaller = existing.caller_id === acct.id;\n const field = isCaller ? \"caller_ice\" : \"callee_ice\";\n const list = isCaller ? existing.caller_ice : existing.callee_ice;\n list.push(candidate);\n await sqlite.execute({\n sql:\n `UPDATE ${CALLS_TABLE} SET ${field} = ?, updated_at = ? WHERE room = ? AND call_seq = ?`,\n args: [JSON.stringify(list), Date.now(), room, callSeq],\n });\n return json({ success: true });\n }\n\n // --- 終了 / 拒否 ---\n if (path === \"/api/call/end\" && req.method === \"POST\") {\n const data = await readJson(req);\n const acct = await authAccount(data.account_id, data.token);\n if (!acct) return json({ error: \"unauthorized\" }, 403);\n const room = String(data.room || \"\");\n const callSeq = Number(data.call_seq);\n const existing = await getCallRow(room);\n if (!existing || existing.call_seq !== callSeq) {\n return json({ success: true });\n }\n if (existing.caller_id !== acct.id && existing.callee_id !== acct.id) {\n return json({ error: \"forbidden\" }, 403);\n }\n const newStatus = existing.status === \"ringing\" ? \"rejected\" : \"ended\";\n await sqlite.execute({\n sql:\n `UPDATE ${CALLS_TABLE} SET status = ?, updated_at = ? WHERE room = ? AND call_seq = ?`,\n args: [newStatus, Date.now(), room, callSeq],\n });\n return json({ success: true });\n }\n\n // --- 通話状態のポーリング（signaling の受信側） ---\n if (path === \"/api/call/state\" && req.method === \"GET\") {\n const room = url.searchParams.get(\"room\") || \"\";\n const acct = await authAccount(\n url.searchParams.get(\"account_id\"),\n url.searchParams.get(\"token\"),\n );\n if (!acct) return json({ error: \"unauthorized\" }, 403);\n if (!isDmRoom(room) || !dmMembers(room).includes(acct.id)) {\n return json({ error: \"forbidden\" }, 403);\n }\n const call = await getCallRow(room);\n return json({ call });\n }\n\n // --- 着信の常時監視用（どの画面にいても着信をポップアップさせる） ---\n if (path === \"/api/call/incoming\" && req.method === \"GET\") {\n const acct = await authAccount(\n url.searchParams.get(\"account_id\"),\n url.searchParams.get(\"token\"),\n );\n if (!acct) return json({ error: \"unauthorized\" }, 403);\n const r = await sqlite.execute({\n sql:\n `SELECT room, call_seq, caller_id, caller_name, caller_avatar, callee_id, status, offer, updated_at FROM ${CALLS_TABLE}\n WHERE callee_id = ? AND status = 'ringing' AND updated_at > ?`,\n args: [acct.id, Date.now() - 45000],\n });\n const calls = (r.rows as any[]).map((row) => ({\n room: String(col(row, 0, \"room\")),\n call_seq: Number(col(row, 1, \"call_seq\")),\n caller_id: String(col(row, 2, \"caller_id\")),\n caller_name: String(col(row, 3, \"caller_name\")),\n caller_avatar: col(row, 4, \"caller_avatar\")\n ? String(col(row, 4, \"caller_avatar\"))\n : \"\",\n offer: String(col(row, 7, \"offer\") || \"\"),\n updated_at: Number(col(row, 8, \"updated_at\")),\n }));\n return json({ calls });\n }\n\n // ===================== トーク一覧 =====================\n // ランダムルーム（匿名ID/アカウントIDどちらでも発言済み）＋ 1:1 ＋グループを統合して返す\n if (path === \"/api/rooms\" && req.method === \"GET\") {\n const anonId = url.searchParams.get(\"user_id\") || \"\";\n const acct = await authAccount(\n url.searchParams.get(\"account_id\"),\n url.searchParams.get(\"token\"),\n );\n let reads: Record = {};\n try {\n reads = JSON.parse(url.searchParams.get(\"reads\") || \"{}\") || {};\n } catch (_e) {\n reads = {};\n }\n const myIds = [anonId, acct ? acct.id : \"\"].filter((s) => !!s);\n if (myIds.length === 0) return json({ rooms: [] });\n\n type RoomEntry = {\n room: string;\n type: \"random\" | \"dm\" | \"group\";\n title: string;\n icon: string;\n member_count: number;\n created_at: number;\n };\n const entries: Record = {};\n\n // 1) ランダムルーム\n const rr = await sqlite.execute({\n sql: `SELECT DISTINCT room FROM ${TABLE}\n WHERE user_id IN (${myIds.map(() => \"?\").join(\",\")})\n AND room NOT LIKE 'dm:%' AND room NOT LIKE 'g:%'`,\n args: myIds,\n });\n for (const row of rr.rows as any[]) {\n const room = String(col(row, 0, \"room\"));\n entries[room] = {\n room,\n type: \"random\",\n title: \"#\" + room,\n icon: \"\",\n member_count: 0,\n created_at: 0,\n };\n }\n\n if (acct) {\n // 2) 1:1 トーク（メッセージが存在するもの）\n const dr = await sqlite.execute({\n sql: `SELECT DISTINCT room FROM ${TABLE}\n WHERE room LIKE 'dm:%' AND (room LIKE ? OR room LIKE ?)`,\n args: [\"dm:\" + acct.id + \"-%\", \"dm:%-\" + acct.id],\n });\n const otherIds: string[] = [];\n const dmRooms: string[] = [];\n for (const row of dr.rows as any[]) {\n const room = String(col(row, 0, \"room\"));\n const ids = dmMembers(room);\n if (!ids.includes(acct.id)) continue;\n const other = ids.find((i) => i !== acct.id) || acct.id;\n otherIds.push(other);\n dmRooms.push(room);\n }\n const others = await getAccountsByIds(otherIds);\n dmRooms.forEach((room, idx) => {\n const o = others[otherIds[idx]];\n entries[room] = {\n room,\n type: \"dm\",\n title: o ? o.name : \"不明なユーザー\",\n icon: o ? o.avatar_url : \"\",\n member_count: 2,\n created_at: 0,\n };\n });\n\n // 3) グループ（メッセージが無くても表示）\n const gr = await sqlite.execute({\n sql: `SELECT g.id, g.name, g.icon_url, g.created_at,\n (SELECT COUNT(*) FROM ${GROUP_MEMBERS_TABLE} c WHERE c.group_id = g.id) AS member_count\n FROM ${GROUP_MEMBERS_TABLE} m JOIN ${GROUPS_TABLE} g ON g.id = m.group_id\n WHERE m.account_id = ?`,\n args: [acct.id],\n });\n for (const row of gr.rows as any[]) {\n const room = \"g:\" + String(col(row, 0, \"id\"));\n entries[room] = {\n room,\n type: \"group\",\n title: String(col(row, 1, \"name\")),\n icon: col(row, 2, \"icon_url\") ? String(col(row, 2, \"icon_url\")) : \"\",\n member_count: Number(col(row, 4, \"member_count\") ?? 0),\n created_at: Number(col(row, 3, \"created_at\")),\n };\n }\n }\n\n const roomKeys = Object.keys(entries);\n if (roomKeys.length === 0) return json({ rooms: [] });\n const ph = roomKeys.map(() => \"?\").join(\",\");\n\n // 最新メッセージ\n const latest = await sqlite.execute({\n sql:\n `SELECT t.room, t.id, t.name, t.body, t.deleted, t.created_at, t.image_url, t.poll_id, t.user_id\n FROM ${TABLE} t\n INNER JOIN (SELECT room, MAX(id) AS max_id FROM ${TABLE} WHERE room IN (${ph}) GROUP BY room) l\n ON t.room = l.room AND t.id = l.max_id`,\n args: roomKeys,\n });\n const latestMap: Record = {};\n for (const row of latest.rows as any[]) {\n latestMap[String(col(row, 0, \"room\"))] = {\n last_message_id: Number(col(row, 1, \"id\")),\n last_name: String(col(row, 2, \"name\")),\n last_body: String(col(row, 3, \"body\")),\n last_deleted: Number(col(row, 4, \"deleted\") ?? 0) === 1,\n last_created_at: Number(col(row, 5, \"created_at\")),\n last_has_image: !!col(row, 6, \"image_url\"),\n last_is_poll: col(row, 7, \"poll_id\") != null,\n last_is_system: String(col(row, 8, \"user_id\")) === SYSTEM_USER,\n };\n }\n\n // 未読数（自分以外の発言で、クライアントが最後に読んだ id より新しいもの）\n const unreadMap: Record = {};\n const conds: string[] = [];\n const condArgs: (string | number)[] = [];\n for (const room of roomKeys) {\n conds.push(\"(room = ? AND id > ?)\");\n condArgs.push(room, Number(reads[room] || 0));\n }\n const ur = await sqlite.execute({\n sql: `SELECT room, COUNT(*) FROM ${TABLE}\n WHERE deleted = 0 AND user_id NOT IN (${\n myIds.map(() => \"?\").join(\",\")\n }, ?)\n AND (${conds.join(\" OR \")})\n GROUP BY room`,\n args: [...myIds, SYSTEM_USER, ...condArgs],\n });\n for (const row of ur.rows as any[]) {\n unreadMap[String(col(row, 0, \"room\"))] = Number(\n col(row, 1, \"COUNT(*)\") ?? row[1] ?? 0,\n );\n }\n\n const rooms = roomKeys.map((room) => {\n const e = entries[room];\n const l = latestMap[room] || {\n last_message_id: 0,\n last_name: \"\",\n last_body: \"\",\n last_deleted: false,\n last_created_at: e.created_at,\n last_has_image: false,\n last_is_poll: false,\n last_is_system: false,\n };\n return { ...e, ...l, unread: unreadMap[room] || 0 };\n }).sort((a, b) => b.last_created_at - a.last_created_at);\n\n return json({ rooms });\n }\n\n // ===================== メッセージ =====================\n\n if (path === \"/api/messages\") {\n const room = url.searchParams.get(\"room\") || \"lobby\";\n const since = Number(url.searchParams.get(\"since\") || \"0\");\n const sinceUpdate = Number(url.searchParams.get(\"sinceUpdate\") || \"0\");\n const viewer = url.searchParams.get(\"viewer\") || \"\";\n const viewerName = url.searchParams.get(\"name\") || \"\";\n const markRead = url.searchParams.get(\"read\") === \"1\";\n\n if (isAccountRoom(room)) {\n const ok = await canAccessRoom(\n room,\n viewer,\n url.searchParams.get(\"token\"),\n );\n if (!ok) return json({ error: \"forbidden\" }, 403);\n }\n\n if (viewer) {\n const now = Date.now();\n if (markRead) {\n await sqlite.execute({\n sql:\n `INSERT INTO ${PRESENCE_TABLE} (room, user_id, name, last_seen, last_read_id)\n VALUES (?, ?, ?, ?, (SELECT COALESCE(MAX(id), 0) FROM ${TABLE} WHERE room = ?))\n ON CONFLICT(room, user_id) DO UPDATE SET\n name = excluded.name, last_seen = excluded.last_seen,\n last_read_id = MAX(COALESCE(${PRESENCE_TABLE}.last_read_id, 0), excluded.last_read_id)`,\n args: [room, viewer, viewerName || \"名無し\", now, room],\n });\n } else {\n await sqlite.execute({\n sql:\n `INSERT INTO ${PRESENCE_TABLE} (room, user_id, name, last_seen, last_read_id)\n VALUES (?, ?, ?, ?, 0)\n ON CONFLICT(room, user_id) DO UPDATE SET name = excluded.name, last_seen = excluded.last_seen`,\n args: [room, viewer, viewerName || \"名無し\", now],\n });\n }\n }\n\n const result = await sqlite.execute({\n sql:\n `SELECT id, user_id, name, body, image_url, reply_to_id, reply_to_name, reply_to_body,\n edited_at, deleted, updated_at, poll_id, created_at, avatar_url\n FROM ${TABLE}\n WHERE room = ? AND (id > ? OR updated_at > ?)\n ORDER BY id ASC`,\n args: [room, since, sinceUpdate],\n });\n\n const rawMessages = (result.rows as any[]).map((row) => ({\n id: Number(col(row, 0, \"id\")),\n user_id: String(col(row, 1, \"user_id\")),\n name: String(col(row, 2, \"name\")),\n body: String(col(row, 3, \"body\")),\n image_url: col(row, 4, \"image_url\")\n ? String(col(row, 4, \"image_url\"))\n : \"\",\n reply_to_id: col(row, 5, \"reply_to_id\") != null\n ? Number(col(row, 5, \"reply_to_id\"))\n : null,\n reply_to_name: col(row, 6, \"reply_to_name\") != null\n ? String(col(row, 6, \"reply_to_name\"))\n : null,\n reply_to_body: col(row, 7, \"reply_to_body\") != null\n ? String(col(row, 7, \"reply_to_body\"))\n : null,\n edited_at: col(row, 8, \"edited_at\") != null\n ? Number(col(row, 8, \"edited_at\"))\n : null,\n deleted: Number(col(row, 9, \"deleted\") ?? 0) === 1,\n updated_at: Number(\n col(row, 10, \"updated_at\") ?? col(row, 12, \"created_at\"),\n ),\n poll_id: col(row, 11, \"poll_id\") != null\n ? Number(col(row, 11, \"poll_id\"))\n : null,\n created_at: Number(col(row, 12, \"created_at\")),\n avatar_url: col(row, 13, \"avatar_url\")\n ? String(col(row, 13, \"avatar_url\"))\n : \"\",\n }));\n\n const pollIds = rawMessages.filter((m) => m.poll_id != null).map((m) =>\n m.poll_id as number\n );\n const pollMap: Record = {};\n if (pollIds.length > 0) {\n const placeholders = pollIds.map(() => \"?\").join(\",\");\n const pollResult = await sqlite.execute({\n sql:\n `SELECT id, question, options, votes FROM ${POLLS_TABLE} WHERE id IN (${placeholders})`,\n args: pollIds,\n });\n for (const prow of pollResult.rows as any[]) {\n const pid = Number(col(prow, 0, \"id\"));\n const question = String(col(prow, 1, \"question\"));\n const options: string[] = JSON.parse(String(col(prow, 2, \"options\")));\n const votes: Record = JSON.parse(\n String(col(prow, 3, \"votes\")) || \"{}\",\n );\n const tally = options.map((text, idx) => ({\n text,\n count: Object.values(votes).filter((v) => v === idx).length,\n }));\n const total = Object.keys(votes).length;\n const myVote =\n viewer && Object.prototype.hasOwnProperty.call(votes, viewer)\n ? votes[viewer]\n : null;\n pollMap[pid] = { id: pid, question, options: tally, total, myVote };\n }\n }\n\n const messages = rawMessages.map((m) => ({\n ...m,\n poll: m.poll_id != null ? pollMap[m.poll_id] || null : null,\n }));\n\n const onlineResult = await sqlite.execute({\n sql:\n `SELECT user_id, name FROM ${PRESENCE_TABLE} WHERE room = ? AND last_seen > ? ORDER BY name ASC`,\n args: [room, Date.now() - ONLINE_WINDOW_MS],\n });\n const online = (onlineResult.rows as any[]).map((row) => ({\n user_id: String(col(row, 0, \"user_id\")),\n name: String(col(row, 1, \"name\")),\n }));\n\n // 既読情報（自分以外）\n const readResult = await sqlite.execute({\n sql:\n `SELECT user_id, COALESCE(last_read_id, 0) FROM ${PRESENCE_TABLE} WHERE room = ? AND user_id != ?`,\n args: [room, viewer || \"\"],\n });\n const readers = (readResult.rows as any[]).map((row) => ({\n user_id: String(row[0] ?? row.user_id),\n last_read_id: Number(row[1] ?? 0),\n }));\n\n return json({ messages, online, readers });\n }\n\n // --- メッセージ送信 ---\n if (path === \"/api/send\" && req.method === \"POST\") {\n try {\n const data = await req.json();\n const room = data.room || \"lobby\";\n const user_id = data.user_id || \"unknown\";\n const name = data.name || \"名無し\";\n const body = data.body || \"\";\n const image_url = data.image_url || \"\";\n const avatar_url = data.avatar_url || \"\";\n const reply_to_id = data.reply_to_id ? Number(data.reply_to_id) : null;\n const reply_to_name = data.reply_to_name || null;\n const reply_to_body = data.reply_to_body || null;\n const created_at = Date.now();\n\n if (\n isAccountRoom(room) && !(await canAccessRoom(room, user_id, data.token))\n ) {\n return json({ error: \"forbidden\" }, 403);\n }\n if (user_id === SYSTEM_USER) return json({ error: \"forbidden\" }, 403);\n\n await sqlite.execute({\n sql:\n `INSERT INTO ${TABLE} (room, user_id, name, body, image_url, avatar_url, reply_to_id, reply_to_name, reply_to_body, updated_at, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n room,\n user_id,\n name,\n body,\n image_url,\n avatar_url,\n reply_to_id,\n reply_to_name,\n reply_to_body,\n created_at,\n created_at,\n ],\n });\n\n // 通知タイトル（LINE 風）\n let pushTitle = name + \" (#\" + room + \")\";\n let pushBody = body || (image_url ? \"画像を送信しました\" : \"\");\n if (isDmRoom(room)) {\n pushTitle = name;\n } else if (isGroupRoom(room)) {\n const g = await getGroup(room.slice(2));\n pushTitle = g ? g.name : \"グループ\";\n pushBody = name + \": \" + pushBody;\n }\n\n const subsResult = await sqlite.execute({\n sql:\n `SELECT subscription FROM ${PUSH_SUB_TABLE} WHERE room = ? AND user_id != ?`,\n args: [room, user_id],\n });\n const roomUrl = \"/\" + (room !== \"lobby\" ? \"#\" + room : \"\");\n for (const row of subsResult.rows as any[]) {\n try {\n const sub = JSON.parse(String(row[0] ?? row.subscription));\n const payload = JSON.stringify({\n title: pushTitle,\n body: pushBody.length > 100\n ? pushBody.substring(0, 100) + \"…\"\n : pushBody,\n tag: `msg-${room}`,\n icon: avatar_url && !avatar_url.startsWith(\"data:\")\n ? avatar_url\n : undefined,\n url: roomUrl,\n room: room,\n });\n webpush.sendNotification(sub, payload).catch((err: any) => {\n if (err.statusCode === 410 || err.statusCode === 404) {\n sqlite.execute({\n sql: `DELETE FROM ${PUSH_SUB_TABLE} WHERE subscription = ?`,\n args: [String(row[0] ?? row.subscription)],\n }).catch(() => {});\n }\n });\n } catch (_e) {\n // パースエラーなどは無視\n }\n }\n\n return json({ success: true });\n } catch (err) {\n return json({ error: String(err) }, 400);\n }\n }\n\n // --- メッセージ編集 ---\n if (path === \"/api/edit\" && req.method === \"POST\") {\n try {\n const data = await req.json();\n const id = Number(data.id);\n const user_id = data.user_id || \"\";\n const body = (data.body || \"\").trim();\n if (!id || !body) return json({ error: \"invalid request\" }, 400);\n\n const check = await sqlite.execute({\n sql: `SELECT user_id, deleted FROM ${TABLE} WHERE id = ?`,\n args: [id],\n });\n const row = (check.rows as any[])[0];\n if (!row) return json({ error: \"not found\" }, 404);\n if (String(row[0] ?? row.user_id) !== user_id) {\n return json({ error: \"forbidden\" }, 403);\n }\n if (Number(row[1] ?? row.deleted ?? 0) === 1) {\n return json({ error: \"already deleted\" }, 400);\n }\n\n const now = Date.now();\n await sqlite.execute({\n sql:\n `UPDATE ${TABLE} SET body = ?, edited_at = ?, updated_at = ? WHERE id = ?`,\n args: [body, now, now, id],\n });\n return json({ success: true });\n } catch (err) {\n return json({ error: String(err) }, 400);\n }\n }\n\n // --- メッセージ削除 ---\n if (path === \"/api/delete\" && req.method === \"POST\") {\n try {\n const data = await req.json();\n const id = Number(data.id);\n const user_id = data.user_id || \"\";\n const check = await sqlite.execute({\n sql: `SELECT user_id FROM ${TABLE} WHERE id = ?`,\n args: [id],\n });\n const row = (check.rows as any[])[0];\n if (!row) return json({ error: \"not found\" }, 404);\n if (String(row[0] ?? row.user_id) !== user_id) {\n return json({ error: \"forbidden\" }, 403);\n }\n const now = Date.now();\n await sqlite.execute({\n sql: `UPDATE ${TABLE} SET deleted = 1, updated_at = ? WHERE id = ?`,\n args: [now, id],\n });\n return json({ success: true });\n } catch (err) {\n return json({ error: String(err) }, 400);\n }\n }\n\n // --- 投票作成 ---\n if (path === \"/api/poll/create\" && req.method === \"POST\") {\n try {\n const data = await req.json();\n const room = data.room || \"lobby\";\n const user_id = data.user_id || \"unknown\";\n const name = data.name || \"名無し\";\n const avatar_url = data.avatar_url || \"\";\n const question = (data.question || \"\").trim();\n const options: string[] = Array.isArray(data.options)\n ? data.options.map((o: string) => String(o).trim()).filter((\n o: string,\n ) => o.length > 0)\n : [];\n if (!question || options.length < 2) {\n return json({ error: \"invalid poll\" }, 400);\n }\n if (\n isAccountRoom(room) && !(await canAccessRoom(room, user_id, data.token))\n ) {\n return json({ error: \"forbidden\" }, 403);\n }\n\n const created_at = Date.now();\n const pollInsert = await sqlite.execute({\n sql:\n `INSERT INTO ${POLLS_TABLE} (room, question, options, votes, created_at) VALUES (?, ?, ?, '{}', ?)`,\n args: [room, question, JSON.stringify(options), created_at],\n });\n const pollId = Number(pollInsert.lastInsertRowid);\n await sqlite.execute({\n sql:\n `INSERT INTO ${TABLE} (room, user_id, name, body, avatar_url, poll_id, updated_at, created_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n room,\n user_id,\n name,\n \"投票 \" + question,\n avatar_url,\n pollId,\n created_at,\n created_at,\n ],\n });\n return json({ success: true });\n } catch (err) {\n return json({ error: String(err) }, 400);\n }\n }\n\n // --- 投票 ---\n if (path === \"/api/poll/vote\" && req.method === \"POST\") {\n try {\n const data = await req.json();\n const pollId = Number(data.poll_id);\n const messageId = Number(data.message_id);\n const user_id = data.user_id || \"\";\n const optionIndex = Number(data.option_index);\n if (!pollId || !user_id || Number.isNaN(optionIndex)) {\n return json({ error: \"invalid vote\" }, 400);\n }\n\n const pollRow = await sqlite.execute({\n sql: `SELECT options, votes FROM ${POLLS_TABLE} WHERE id = ?`,\n args: [pollId],\n });\n const prow = (pollRow.rows as any[])[0];\n if (!prow) return json({ error: \"poll not found\" }, 404);\n const options: string[] = JSON.parse(String(prow[0] ?? prow.options));\n if (optionIndex < 0 || optionIndex >= options.length) {\n return json({ error: \"invalid option\" }, 400);\n }\n const votes: Record = JSON.parse(\n String(prow[1] ?? prow.votes) || \"{}\",\n );\n votes[user_id] = optionIndex;\n await sqlite.execute({\n sql: `UPDATE ${POLLS_TABLE} SET votes = ? WHERE id = ?`,\n args: [JSON.stringify(votes), pollId],\n });\n if (messageId) {\n await sqlite.execute({\n sql: `UPDATE ${TABLE} SET updated_at = ? WHERE id = ?`,\n args: [Date.now(), messageId],\n });\n }\n return json({ success: true });\n } catch (err) {\n return json({ error: String(err) }, 400);\n }\n }\n\n // --- GIF検索プロキシ（GIPHY APIキーをクライアントに渡さないためのサーバー中継）---\n if (path === \"/api/gif/search\" && req.method === \"GET\") {\n try {\n if (!GIPHY_API_KEY) {\n return json({ error: \"GIPHY_API_KEY not configured\" }, 500);\n }\n const q = url.searchParams.get(\"q\") || \"\";\n const endpoint = q.trim()\n ? `https://api.giphy.com/v1/gifs/search?api_key=${GIPHY_API_KEY}&q=${\n encodeURIComponent(q)\n }&limit=24&rating=pg-13&lang=ja`\n : `https://api.giphy.com/v1/gifs/trending?api_key=${GIPHY_API_KEY}&limit=24&rating=pg-13`;\n\n const res = await fetch(endpoint);\n if (!res.ok) return json({ error: \"giphy request failed\" }, 502);\n const data = await res.json();\n const items = ((data.data || []) as any[]).map((g) => {\n const preview =\n (g.images?.fixed_width_small || g.images?.fixed_width || {}).url ||\n \"\";\n const full = (g.images?.original || g.images?.fixed_width || {}).url ||\n \"\";\n return { preview, full, title: g.title || \"gif\" };\n }).filter((i) => i.preview && i.full);\n\n return json({ items });\n } catch (err) {\n return json({ error: String(err) }, 500);\n }\n }\n\n // ===================== 静的配信 =====================\n if (path === \"/\" || path === \"/index.html\") {\n return new Response(htmlContent, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n if (path === \"/client.js\") {\n return new Response(jsContent, {\n headers: {\n \"Content-Type\": \"application/javascript; charset=utf-8\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n }\n if (path === \"/gif.js\") {\n return new Response(gifClientJs, {\n headers: {\n \"Content-Type\": \"application/javascript; charset=utf-8\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n }\n if (path === \"/call.js\") {\n return new Response(callClientJs, {\n headers: {\n \"Content-Type\": \"application/javascript; charset=utf-8\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n }\n\n return new Response(\"Not Found\", { status: 404 });\n}","deleted",false,"label",[14],"d1eccb4b-58a6-420b-ba51-e8d85b95fa3e",["D",1788478632137],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","690448f2-f627-4f9c-a6c5-7d7a2d115d3f","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a069a0-d469-775a-a16b-4f31aa5c28e7","tursoName","d1eccb4b58a6420bba51e8d85b95fa3e","tursoHostname","d1eccb4b58a6420bba51e8d85b95fa3e-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789448471428],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":101},"org",{"_9":10,"_98":99,"_100":101,"_55":56,"_102":103,"_104":42},"branch",{"_35":88,"_11":89,"_22":28,"_90":45,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned",43,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","かんかん","avatar","https://lh3.googleusercontent.com/a/ACg8ocLI16p0WgrVPfU-N1HNs2XT2RWSbAMgVFqjPLJinXQcxWMIsA=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":62,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":89,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]