[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","yoshiokaren","name","eigo-tango-2210","path","main.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":12,"_13":44},"permalink","https://www.val.town/x/yoshiokaren/eigo-tango-2210/code/main.ts","extension","id","90f33268-900a-4a3d-8979-35fc046b44ce","fileId","e6a7dabc-ac08-11f1-b4a1-1607ee4eb77e","parentId","branchId","46e0e8fc-4ff5-4179-8084-4683da63e748","branchVersion",58,"latest",true,"createdAt",["D",1788936704660],"version",7,"fileType","http","content","import { Hono } from \"npm:hono\";\nimport { parseVal, readFile, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { cleanRatings, getRatings, initDb, saveRatings } from \"./backend/db.ts\";\nimport {\n bearerToken,\n createSession,\n deleteSession,\n getUserFromRequest,\n hashPassword,\n newSalt,\n} from \"./backend/auth.ts\";\n\nawait initDb();\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\n// ---------- auth ----------\n\nconst USERNAME_RE = /^[A-Za-z0-9_.-]{2,24}$/;\n\napp.post(\"/api/register\", async (c) => {\n const { username, password } = await c.req.json().catch(() => ({}));\n const name = typeof username === \"string\" ? username.trim() : \"\";\n if (!USERNAME_RE.test(name)) {\n return c.json({ error: \"ユーザー名は半角英数字・_ . - の2〜24文字にしてください\" }, 400);\n }\n if (typeof password !== \"string\" || password.length < 6) {\n return c.json({ error: \"パスワードは6文字以上にしてください\" }, 400);\n }\n const existing = await sqlite.execute({\n sql: \"SELECT id FROM users WHERE lower(username) = lower(?)\",\n args: [name],\n });\n if (existing.rows.length) return c.json({ error: \"このユーザー名は既に使われています\" }, 409);\n\n const salt = newSalt();\n const hash = await hashPassword(password, salt);\n const res = await sqlite.execute({\n sql: \"INSERT INTO users (username, password_hash, salt) VALUES (?, ?, ?)\",\n args: [name, hash, salt],\n });\n const userId = Number(res.lastInsertRowid);\n const token = await createSession(userId);\n return c.json({ token, user: { id: userId, username: name }, ratings: {} });\n});\n\napp.post(\"/api/login\", async (c) => {\n const { username, password } = await c.req.json().catch(() => ({}));\n const name = typeof username === \"string\" ? username.trim() : \"\";\n if (!name || typeof password !== \"string\" || !password) {\n return c.json({ error: \"ユーザー名とパスワードを入力してください\" }, 400);\n }\n const res = await sqlite.execute({\n sql: \"SELECT * FROM users WHERE lower(username) = lower(?)\",\n args: [name],\n });\n if (!res.rows.length) return c.json({ error: \"ユーザー名またはパスワードが違います\" }, 401);\n const u = res.rows[0] as Record;\n const hash = await hashPassword(password, String(u.salt));\n if (hash !== String(u.password_hash)) return c.json({ error: \"ユーザー名またはパスワードが違います\" }, 401);\n\n const userId = Number(u.id);\n const token = await createSession(userId);\n return c.json({\n token,\n user: { id: userId, username: String(u.username) },\n ratings: await getRatings(userId),\n });\n});\n\nconst requireAuth = async (c: any, next: any) => {\n const user = await getUserFromRequest(c.req.raw);\n if (!user) return c.json({ error: \"ログインが必要です\" }, 401);\n c.set(\"user\", user);\n await next();\n};\n\napp.post(\"/api/logout\", requireAuth, async (c) => {\n const token = bearerToken(c.req.raw);\n if (token) await deleteSession(token);\n return c.json({ ok: true });\n});\n\napp.get(\"/api/me\", requireAuth, async (c) => {\n const user = c.get(\"user\");\n return c.json({\n user: { id: user.id, username: user.username },\n ratings: await getRatings(user.id),\n });\n});\n\napp.post(\"/api/password\", requireAuth, async (c) => {\n const user = c.get(\"user\");\n const { current, next } = await c.req.json().catch(() => ({}));\n if (typeof current !== \"string\" || typeof next !== \"string\" || !current) {\n return c.json({ error: \"入力内容を確認してください\" }, 400);\n }\n if (next.length < 6) return c.json({ error: \"新しいパスワードは6文字以上にしてください\" }, 400);\n\n const res = await sqlite.execute({\n sql: \"SELECT password_hash, salt FROM users WHERE id = ?\",\n args: [user.id],\n });\n if (!res.rows.length) return c.json({ error: \"ユーザーが見つかりません\" }, 404);\n const row = res.rows[0] as Record;\n const check = await hashPassword(current, String(row.salt));\n if (check !== String(row.password_hash)) return c.json({ error: \"現在のパスワードが違います\" }, 401);\n\n const salt = newSalt();\n const hash = await hashPassword(next, salt);\n await sqlite.batch([\n { sql: \"UPDATE users SET password_hash = ?, salt = ? WHERE id = ?\", args: [hash, salt, user.id] },\n // 他の端末のログインは切る。操作中のこの端末のセッションだけ残す。\n { sql: \"DELETE FROM sessions WHERE user_id = ? AND token != ?\", args: [user.id, user.token] },\n ]);\n return c.json({ ok: true });\n});\n\n// The whole rating map is replaced at once — it is small and the client owns it.\napp.post(\"/api/ratings\", requireAuth, async (c) => {\n const user = c.get(\"user\");\n const body = await c.req.json().catch(() => ({}));\n const ratings = cleanRatings(body?.ratings);\n await saveRatings(user.id, ratings);\n return c.json({ ok: true, count: Object.keys(ratings).length });\n});\n\nconst ICON = ``;\n\nconst MANIFEST = {\n name: \"中学英単語 2210\",\n short_name: \"英単語2210\",\n description: \"中学英語の総合単語リスト2210語を、学年区分と教科書ページで絞り込んで学習・確認するアプリ\",\n lang: \"ja\",\n start_url: \"/\",\n scope: \"/\",\n display: \"standalone\",\n orientation: \"portrait\",\n background_color: \"#E9EDF4\",\n theme_color: \"#2B4C9E\",\n icons: [{ src: \"/icon.svg\", sizes: \"any\", type: \"image/svg+xml\", purpose: \"any maskable\" }],\n};\n\nconst SW = `const C = \"tango-v2\";\nself.addEventListener(\"install\", (e) => {\n e.waitUntil(\n caches.open(C).then((c) => c.addAll([\"/\", \"/data.txt\"])).then(() => self.skipWaiting())\n );\n});\nself.addEventListener(\"activate\", (e) => {\n e.waitUntil(\n caches.keys()\n .then((ks) => Promise.all(ks.filter((k) => k !== C).map((k) => caches.delete(k))))\n .then(() => self.clients.claim())\n );\n});\nself.addEventListener(\"fetch\", (e) => {\n if (e.request.method !== \"GET\") return;\n // Never cache the API: responses are per-account and must not be replayed.\n if (new URL(e.request.url).pathname.startsWith(\"/api/\")) return;\n e.respondWith(\n fetch(e.request)\n .then((res) => {\n const copy = res.clone();\n caches.open(C).then((c) => c.put(e.request, copy)).catch(() => {});\n return res;\n })\n .catch(() => caches.match(e.request).then((m) => m || caches.match(\"/\")))\n );\n});\n`;\n\napp.get(\"/manifest.webmanifest\", (c) =>\n new Response(JSON.stringify(MANIFEST), {\n headers: { \"Content-Type\": \"application/manifest+json; charset=utf-8\" },\n }));\n\napp.get(\"/icon.svg\", () =>\n new Response(ICON, {\n headers: { \"Content-Type\": \"image/svg+xml; charset=utf-8\", \"Cache-Control\": \"public, max-age=86400\" },\n }));\n\napp.get(\"/sw.js\", () =>\n new Response(SW, {\n headers: { \"Content-Type\": \"text/javascript; charset=utf-8\", \"Cache-Control\": \"no-cache\" },\n }));\n\nlet dataCache: string | null = null;\napp.get(\"/data.txt\", async () => {\n if (!dataCache) {\n const [a, b] = await Promise.all([\n readFile(\"/frontend/data-a.txt\", import.meta.url),\n readFile(\"/frontend/data-b.txt\", import.meta.url),\n ]);\n dataCache = a.replace(/\\n+$/, \"\") + \"\\n\" + b.replace(/\\n+$/, \"\");\n }\n return new Response(dataCache, {\n headers: { \"Content-Type\": \"text/plain; charset=utf-8\", \"Cache-Control\": \"public, max-age=600\" },\n });\n});\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.get(\"/frontend/**/*\", (c) => serveFile(c.req.path));\napp.get(\"/\", () => serveFile(\"/frontend/index.html\"));\n\nexport default app.fetch;\n","deleted",false,"label",[14],"1dcd1009-103a-4ec4-af86-9e4c37c8e0fd",["D",1788928965379],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","中学英単語2210 - 学年・ページ範囲別の単語カード＋5択問題","imageUrl","userId","2e5f3a11-3ecf-4768-a436-abfe0467880b","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f3378-c037-7109-869d-8900c383fcb3","tursoName","1dcd1009103a4ec4af869e4c37c8e0fd","tursoHostname","1dcd1009103a4ec4af869e4c37c8e0fd-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789455661654],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":101},"org",{"_9":10,"_98":99,"_100":101,"_55":56,"_102":103,"_104":42},"branch",{"_35":88,"_11":89,"_22":28,"_90":45,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned",83,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","吉岡蓮","avatar","https://lh3.googleusercontent.com/a/ACg8ocJoAQzKMObUH_Y10IrLwHP-VLUVThbIP7Q-p0QkGvJB2Re_AQ=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":62,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":89,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]