My Notes

\n

\n \n\n`;\n\n// Storage keys - single source of truth\nconst STORAGE_KEYS = {\n app: `${APP_NAMESPACE}_app`,\n version: (n: number) => `${APP_NAMESPACE}_app_version_${n}`,\n versionCount: `${APP_NAMESPACE}_app_version_count`,\n token: (token: string) => `${APP_NAMESPACE}_auth_token_${token}`,\n session: (id: string) => `${APP_NAMESPACE}_session_${id}`,\n};\n\n// Helper function to read blob data consistently\nconst readBlob = async (key: string): Promise => {\n try {\n const response = await blob.get(key);\n if (!response) return null;\n if (response instanceof Response) return await response.text();\n if (typeof response === \"string\") return response;\n return null;\n } catch (error) {\n debugLog(\"Error reading blob\", { key, error: error.message });\n return null;\n }\n};\n\n// Auth operations grouped into a single namespace\nconst auth = {\n generateToken: (): string => crypto.randomUUID(),\n\n async storeToken(token: string, email: string): Promise {\n const expiry = Date.now() + (15 * 60 * 1000); // 15 minutes\n debugLog(\"Storing auth token\", {\n token: token.substring(0, 8) + \"...\",\n email,\n expiry: new Date(expiry),\n });\n await blob.setJSON(STORAGE_KEYS.token(token), { email, expiry });\n },\n\n async verifyToken(token: string): Promise {\n try {\n debugLog(\"Verifying auth token\", { token: token.substring(0, 8) + \"...\" });\n const data = await blob.getJSON(STORAGE_KEYS.token(token));\n debugLog(\"Auth token data retrieved\", {\n hasData: !!data,\n email: data?.email,\n expiry: data?.expiry ? new Date(data.expiry) : null,\n });\n\n if (!data || !data.email || !data.expiry) {\n debugLog(\"Auth token invalid - missing data\");\n return null;\n }\n\n if (Date.now() > data.expiry) {\n debugLog(\"Auth token expired\", {\n expiry: new Date(data.expiry),\n now: new Date(),\n });\n await blob.delete(STORAGE_KEYS.token(token));\n return null;\n }\n\n // Token is valid, delete it (one-time use)\n debugLog(\"Auth token valid, consuming token\", { email: data.email });\n await blob.delete(STORAGE_KEYS.token(token));\n return data.email;\n } catch (error) {\n debugLog(\"Error verifying auth token\", { error: error.message });\n return null;\n }\n },\n\n async createSession(email: string): Promise {\n const sessionId = crypto.randomUUID();\n const expiry = Date.now() + (30 * 24 * 60 * 60 * 1000); // 30 days\n debugLog(\"Creating session\", {\n sessionId: sessionId.substring(0, 8) + \"...\",\n email,\n expiry: new Date(expiry),\n });\n await blob.setJSON(STORAGE_KEYS.session(sessionId), { email, expiry });\n return sessionId;\n },\n\n async verifySession(sessionId: string): Promise {\n try {\n debugLog(\"Verifying session\", {\n sessionId: sessionId.substring(0, 8) + \"...\",\n });\n const data = await blob.getJSON(STORAGE_KEYS.session(sessionId));\n debugLog(\"Session data retrieved\", {\n hasData: !!data,\n email: data?.email,\n expiry: data?.expiry ? new Date(data.expiry) : null,\n });\n\n if (!data || !data.email || !data.expiry) {\n debugLog(\"Session invalid - missing data\");\n return null;\n }\n\n if (Date.now() > data.expiry) {\n debugLog(\"Session expired\", {\n expiry: new Date(data.expiry),\n now: new Date(),\n });\n await blob.delete(STORAGE_KEYS.session(sessionId));\n return null;\n }\n\n // Extend session\n const newExpiry = Date.now() + (30 * 24 * 60 * 60 * 1000);\n debugLog(\"Extending session\", {\n email: data.email,\n newExpiry: new Date(newExpiry),\n });\n await blob.setJSON(STORAGE_KEYS.session(sessionId), {\n email: data.email,\n expiry: newExpiry,\n });\n\n return data.email;\n } catch (error) {\n debugLog(\"Error verifying session\", { error: error.message });\n return null;\n }\n },\n};\n\n// HTML Templates\nconst TEMPLATES = {\n loginForm: (error?: string) => `\n\n\n \n \n Sign In\n \n\n\n

Sign In

\n ${error ? `

${error}

` : ''}\n \n

← Back to app

\n\n`,\n\n checkEmail: (email: string) => `\n\n\n \n \n Check Your Email\n \n\n\n

Check Your Email

\n A magic link has been sent to ${email}. Click the link in your email to sign in.\n

The link will expire in 15 minutes.

← Back to app

\n\n`,\n\n invalidToken: () => `\n\n\n \n \n Invalid Link\n \n\n\n

Invalid or Expired Link

\n This magic link is invalid or has expired. Please try signing in again.\n

← Back to app

\n\n`,\n\n versionHistory: (versions: Array<{ version: number; html: string }>) => {\n let html = `\n\n\n \n \n Version History\n \n\n\n ← Back to App\n

Version History

`;\n\n if (versions.length === 0) {\n html += \"

No versions found.

\";\n } else {\n for (const { version, html: versionHtml } of versions) {\n html += `\n

Version ${version}

${versionHtml.replace(//g, \">\")}

`;\n }\n }\n\n html += `\n\n`;\n return html;\n },\n};\n\n// Response helper functions\nconst respond = {\n error: (c: any, msg: string, status = 400) =>\n c.json({ msg, msgType: \"error\" }, status),\n \n success: (c: any, msg: string) =>\n c.json({ msg, msgType: \"success\" }),\n \n unauthorized: (c: any) =>\n c.json({ msg: \"Unauthorized - admin access required\", msgType: \"error\" }, 401),\n \n setSessionCookie: (c: any, sessionId: string) => {\n const expires = new Date(Date.now() + 30 * 24 * 60 * 60 * 1000);\n setCookie(c, \"session\", sessionId, {\n path: \"/\",\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n expires,\n });\n },\n \n setAdminCookies: (c: any) => {\n const expires = new Date(Date.now() + 30 * 24 * 60 * 60 * 1000);\n const opts = { path: \"/\", secure: true, sameSite: \"Lax\", expires };\n setCookie(c, \"currentResource\", \"app\", opts);\n setCookie(c, \"isAdminOfCurrentResource\", \"true\", opts);\n },\n \n clearAuthCookies: (c: any) => {\n const opts = { path: \"/\", secure: true, sameSite: \"Lax\" };\n deleteCookie(c, \"session\", { ...opts, httpOnly: true });\n deleteCookie(c, \"currentResource\", opts);\n deleteCookie(c, \"isAdminOfCurrentResource\", opts);\n },\n \n setMessageCookie: (c: any, msg: string, type?: string) => {\n const opts = { path: \"/\", secure: true, sameSite: \"Lax\" };\n setCookie(c, \"msg\", msg, opts);\n if (type) {\n setCookie(c, \"msgType\", type, opts);\n }\n },\n};\n\n// Async handler wrapper with error handling\nconst handleAsync = (handler: Function) => async (c: any, next?: any) => {\n try {\n return await handler(c, next);\n } catch (error) {\n console.error(`Error in ${c.req.path}:`, error);\n debugLog(\"Route error\", { \n path: c.req.path, \n method: c.req.method,\n error: error.message \n });\n \n if (error.message.includes(\"Unauthorized\")) {\n return respond.unauthorized(c);\n }\n \n if (error.message.includes(\"Empty HTML\")) {\n return respond.error(c, error.message, 400);\n }\n \n return respond.error(c, \n DEBUG ? error.message : \"An error occurred\", \n 500\n );\n }\n};\n\nconst sendMagicLink = async (\n userEmail: string,\n token: string,\n baseUrl: string,\n): Promise => {\n const magicLink = `${baseUrl}/auth/verify?token=${token}`;\n\n await email({\n to: userEmail,\n subject: \"Sign in to your Hyperclay app\",\n html: `\n

Sign in to your app

Click the link below to sign in:

Or copy and paste this link: ${magicLink}

This link will expire in 15 minutes.

\n `,\n });\n};\n\n// HTML utilities\nconst getCurrentHTML = async (): Promise => {\n debugLog(\"Loading HTML from storage\", { key: STORAGE_KEYS.app });\n const html = await readBlob(STORAGE_KEYS.app);\n \n if (!html) {\n debugLog(\"No HTML found in storage, using default\");\n return DEFAULT_HTML;\n }\n \n debugLog(\"Successfully loaded HTML from storage\", {\n length: html.length,\n preview: html.substring(0, 100) + \"...\",\n });\n return html;\n};\n\nconst saveHTML = async (html: string): Promise => {\n try {\n // Save current version\n await blob.set(STORAGE_KEYS.app, html);\n\n // Save versioned copy\n let versionCount = 0;\n const countStr = await readBlob(STORAGE_KEYS.versionCount);\n if (countStr) {\n versionCount = parseInt(countStr, 10);\n }\n\n const newVersion = versionCount + 1;\n await blob.set(STORAGE_KEYS.version(newVersion), html);\n await blob.set(STORAGE_KEYS.versionCount, newVersion.toString());\n } catch (error) {\n console.error(\"Error saving HTML:\", error);\n throw new Error(\"Failed to save document\");\n }\n};\n\nconst getVersionHistory = async (): Promise<\n Array<{ version: number; html: string }>\n> => {\n try {\n const countStr = await readBlob(STORAGE_KEYS.versionCount);\n const versionCount = countStr ? parseInt(countStr, 10) : 0;\n\n const versions: Array<{ version: number; html: string }> = [];\n\n for (let i = 1; i <= versionCount; i++) {\n const html = await readBlob(STORAGE_KEYS.version(i));\n if (html) {\n versions.push({ version: i, html });\n }\n }\n\n return versions.reverse(); // Most recent first\n } catch (error) {\n console.error(\"Error loading version history:\", error);\n return [];\n }\n};\n\n// Create Hono app\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err) => Promise.reject(err));\n\n// Request logging middleware\napp.use(\"*\", async (c, next) => {\n debugLog(\"Incoming request\", {\n method: c.req.method,\n path: c.req.path,\n hasAuth: !!getCookie(c, \"session\"),\n userAgent: c.req.header(\"User-Agent\"),\n });\n\n await next();\n});\n\n// Middleware to check admin status\nconst requireAdmin = handleAsync(async (c, next) => {\n const sessionId = getCookie(c, \"session\");\n debugLog(\"Admin middleware check\", {\n sessionId: sessionId ? sessionId.substring(0, 8) + \"...\" : null,\n });\n\n if (!sessionId) {\n debugLog(\"No session ID found in cookies\");\n return respond.unauthorized(c);\n }\n\n const email = await auth.verifySession(sessionId);\n const isUserAdmin = email === ADMIN_EMAIL;\n debugLog(\"Admin check result\", {\n email,\n adminEmail: ADMIN_EMAIL,\n isAdmin: isUserAdmin,\n });\n\n if (!isUserAdmin) {\n debugLog(\"User is not admin\");\n return respond.unauthorized(c);\n }\n\n c.set(\"adminEmail\", email);\n await next();\n});\n\n// Routes\n\n// Serve main HTML document\napp.get(\"/\", async (c) => {\n debugLog(\"Serving main HTML document\");\n const html = await getCurrentHTML();\n debugLog(\"Retrieved HTML content\", {\n htmlLength: html.length,\n isDefault: html === DEFAULT_HTML,\n htmlPreview: html.substring(0, 200) + \"...\",\n });\n\n // Check if user is admin and set Hyperclay cookies accordingly\n const sessionId = getCookie(c, \"session\");\n let isUserAdmin = false;\n\n if (sessionId) {\n const email = await auth.verifySession(sessionId);\n isUserAdmin = email === ADMIN_EMAIL;\n }\n\n debugLog(\"User admin status for main page\", { isUserAdmin });\n\n if (isUserAdmin) {\n debugLog(\"Setting Hyperclay admin cookies server-side\");\n respond.setAdminCookies(c);\n } else {\n debugLog(\"User is not admin, not setting Hyperclay cookies\");\n }\n\n // Add cache-busting headers to ensure fresh content\n c.header(\"Cache-Control\", \"no-cache, no-store, must-revalidate\");\n c.header(\"Pragma\", \"no-cache\");\n c.header(\"Expires\", \"0\");\n\n return c.html(html);\n});\n\n// Auth flow - show email form\napp.get(\"/auth/edit\", (c) => {\n return c.html(TEMPLATES.loginForm());\n});\n\n// Auth flow - handle email submission\napp.post(\"/auth/edit\", handleAsync(async (c) => {\n const formData = await c.req.formData();\n const userEmail = formData.get(\"email\")?.toString();\n debugLog(\"Auth email submission\", { userEmail, adminEmail: ADMIN_EMAIL });\n\n if (!userEmail || userEmail !== ADMIN_EMAIL) {\n debugLog(\"Invalid email for auth\", { userEmail, adminEmail: ADMIN_EMAIL });\n return c.html(TEMPLATES.loginForm(\"Invalid email address. Only the admin email can sign in.\"));\n }\n\n // Generate and send magic link\n const token = auth.generateToken();\n debugLog(\"Generated magic link token\", {\n token: token.substring(0, 8) + \"...\",\n userEmail,\n });\n await auth.storeToken(token, userEmail);\n await sendMagicLink(userEmail, token, c.req.url.split(\"/auth\")[0]);\n debugLog(\"Magic link sent\", { userEmail });\n\n return c.html(TEMPLATES.checkEmail(userEmail));\n}));\n\n// Verify magic link token\napp.get(\"/auth/verify\", handleAsync(async (c) => {\n const token = c.req.query(\"token\");\n debugLog(\"Magic link verification attempt\", {\n token: token ? token.substring(0, 8) + \"...\" : null,\n });\n\n if (!token) {\n debugLog(\"No token provided in magic link\");\n return c.html(TEMPLATES.invalidToken());\n }\n\n const email = await auth.verifyToken(token);\n debugLog(\"Magic link token verification result\", {\n email,\n adminEmail: ADMIN_EMAIL,\n });\n\n if (!email || email !== ADMIN_EMAIL) {\n return c.html(TEMPLATES.invalidToken());\n }\n\n // Create session and redirect\n const sessionId = await auth.createSession(email);\n debugLog(\"Creating session and redirecting\", {\n sessionId: sessionId.substring(0, 8) + \"...\",\n email,\n });\n\n respond.setSessionCookie(c, sessionId);\n return c.redirect(\"/\");\n}));\n\n// Logout - clear session and admin cookies\napp.get(\"/auth/logout\", (c) => {\n respond.clearAuthCookies(c);\n return c.redirect(\"/\");\n});\n\n// Save endpoint - requires admin session\napp.post(\"/save/app\", requireAdmin, handleAsync(async (c) => {\n debugLog(\"Save endpoint accessed\");\n\n const html = await c.req.text();\n debugLog(\"Save request details\", {\n htmlLength: html.length,\n hasContent: !!html.trim(),\n });\n\n if (!html.trim()) {\n debugLog(\"Empty HTML content rejected\");\n throw new Error(\"Empty HTML content not allowed\");\n }\n\n await saveHTML(html);\n debugLog(\"HTML saved successfully\");\n return respond.success(c, \"Saved\");\n}));\n\n// Version history endpoint - requires admin session\napp.get(\"/versions\", requireAdmin, handleAsync(async (c) => {\n const versions = await getVersionHistory();\n return c.html(TEMPLATES.versionHistory(versions));\n}));\n\n// Reset endpoint - DANGEROUS - requires admin session\napp.get(\"/reset-dangerous\", requireAdmin, handleAsync(async (c) => {\n debugLog(\"Reset endpoint accessed\");\n\n // Clear the main HTML document by resetting to default\n await blob.set(STORAGE_KEYS.app, DEFAULT_HTML);\n\n // Clear all version history\n let versionCount = 0;\n const countStr = await readBlob(STORAGE_KEYS.versionCount);\n if (countStr) {\n versionCount = parseInt(countStr, 10);\n }\n\n // Delete all version entries\n for (let i = 1; i <= versionCount; i++) {\n await blob.delete(STORAGE_KEYS.version(i)).catch(() => {\n // Skip if version doesn't exist\n });\n }\n\n // Reset version counter\n await blob.delete(STORAGE_KEYS.versionCount);\n\n debugLog(\"HTML state reset successfully\", {\n clearedVersions: versionCount,\n });\n\n // Set message cookie and redirect\n respond.setMessageCookie(c, \"HTML Reset\");\n return c.redirect(\"/\");\n}));\n\n// This is the entry point for HTTP vals\nexport default app.fetch;","deleted","label",[98],"permalink","https://www.val.town/x/panphora/hyperclay/code/index.ts","extension","actionData","errors"]