LiveChat 💬

💬 LiveChat

Real-time groupchat — join the conversation

\n \n \n

\n \n

view source

\n\n \n\n \n \n\n \n\n\n",[],[237,239],"78c0d068-2ef8-11f1-9449-42dde27851f2","app.js","22d03c98-2ef8-11f1-8174-42dde27851f2",11,["D",1775178013768],"// ─── State ────────────────────────────────────────────────────────────────────\nlet currentUser = null;\nlet lastMessageId = 0;\nlet pollInterval = null;\nlet currentTab = \"login\";\nlet cachedToken = null;\n\n// ─── Helpers ──────────────────────────────────────────────────────────────────\nfunction formatTime(isoStr) {\n const d = new Date(isoStr.endsWith(\"Z\") ? isoStr : isoStr + \"Z\");\n return d.toLocaleTimeString([], { hour: \"2-digit\", minute: \"2-digit\" });\n}\n\nfunction escapeHtml(str) {\n return String(str)\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\");\n}\n\n// ─── Tab switching ────────────────────────────────────────────────────────────\nwindow.showTab = function (tab) {\n currentTab = tab;\n document.getElementById(\"tab-login\").classList.toggle(\"active\", tab === \"login\");\n document.getElementById(\"tab-register\").classList.toggle(\"active\", tab === \"register\");\n document.getElementById(\"auth-submit\").textContent =\n tab === \"login\" ? \"Login\" : \"Create Account\";\n document.getElementById(\"auth-error\").style.display = \"none\";\n};\n\n// ─── Auth ─────────────────────────────────────────────────────────────────────\nwindow.submitAuth = async function (e) {\n e.preventDefault();\n const username = document.getElementById(\"auth-username\").value.trim();\n const password = document.getElementById(\"auth-password\").value;\n const errorEl = document.getElementById(\"auth-error\");\n errorEl.style.display = \"none\";\n\n const endpoint = currentTab === \"login\" ? \"/api/login\" : \"/api/register\";\n try {\n const res = await fetch(endpoint, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ username, password }),\n });\n const data = await res.json();\n if (!res.ok) {\n errorEl.textContent = data.error || \"Something went wrong\";\n errorEl.style.display = \"block\";\n return;\n }\n currentUser = data.user;\n showChat();\n } catch {\n errorEl.textContent = \"Network error. Try again.\";\n errorEl.style.display = \"block\";\n }\n};\n\nwindow.logout = async function () {\n await fetch(\"/api/logout\", { method: \"POST\" });\n currentUser = null;\n cachedToken = null;\n lastMessageId = 0;\n clearInterval(pollInterval);\n pollInterval = null;\n document.getElementById(\"chat-screen\").style.display = \"none\";\n document.getElementById(\"auth-screen\").style.display = \"flex\";\n document.getElementById(\"messages\").innerHTML = \"\";\n};\n\n// ─── Chat ─────────────────────────────────────────────────────────────────────\nfunction showChat() {\n document.getElementById(\"auth-screen\").style.display = \"none\";\n document.getElementById(\"chat-screen\").style.display = \"flex\";\n document.getElementById(\"header-user\").textContent = \"👤 \" + currentUser.username;\n loadMessages();\n pollInterval = setInterval(pollMessages, 1500);\n document.getElementById(\"msg-input\").focus();\n}\n\nfunction renderMessage(msg) {\n const isOwn = currentUser && msg.username === currentUser.username;\n const initial = msg.username[0].toUpperCase();\n const div = document.createElement(\"div\");\n div.className = \"msg\" + (isOwn ? \" own\" : \"\");\n div.dataset.id = msg.id;\n div.innerHTML = `\n

${initial}

\n ${isOwn ? \"You\" : escapeHtml(msg.username)}\n ${formatTime(msg.created_at)}\n

${escapeHtml(msg.content)}

`;\n return div;\n}\n\nasync function loadMessages() {\n const res = await fetch(\"/api/messages?limit=20\");\n const data = await res.json();\n const container = document.getElementById(\"messages\");\n container.innerHTML = \"\";\n if (!data.messages.length) {\n container.innerHTML = '

No messages yet. Say hello! 👋

';\n } else {\n data.messages.forEach((m) => container.appendChild(renderMessage(m)));\n lastMessageId = data.messages[data.messages.length - 1].id;\n }\n container.scrollTop = container.scrollHeight;\n}\n\nasync function pollMessages() {\n if (!currentUser) return;\n try {\n const res = await fetch(`/api/messages/poll?since=${lastMessageId}`);\n if (!res.ok) return;\n const data = await res.json();\n if (data.messages?.length) {\n const container = document.getElementById(\"messages\");\n const wasAtBottom =\n container.scrollHeight - container.scrollTop - container.clientHeight < 80;\n const placeholder = container.querySelector(\".system-msg\");\n if (placeholder) placeholder.remove();\n data.messages.forEach((m) => container.appendChild(renderMessage(m)));\n lastMessageId = data.messages[data.messages.length - 1].id;\n if (wasAtBottom) container.scrollTop = container.scrollHeight;\n }\n } catch { /* ignore polling errors */ }\n}\n\nwindow.sendMessage = async function (e) {\n e.preventDefault();\n const input = document.getElementById(\"msg-input\");\n const content = input.value.trim();\n if (!content) return;\n input.value = \"\";\n try {\n await fetch(\"/api/messages\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ content }),\n });\n await pollMessages();\n } catch {\n input.value = content;\n }\n};\n\n// ─── API Token modal ──────────────────────────────────────────────────────────\nconst BASE_URL = window.location.origin;\n\nwindow.showTokenModal = async function () {\n const modal = document.getElementById(\"token-modal\");\n modal.style.display = \"flex\";\n const display = document.getElementById(\"token-display\");\n\n if (cachedToken) {\n display.textContent = cachedToken;\n updateBookmarklet(cachedToken);\n return;\n }\n\n display.textContent = \"Generating…\";\n try {\n const res = await fetch(\"/api/token\", { method: \"POST\" });\n const data = await res.json();\n cachedToken = data.token;\n display.textContent = cachedToken;\n updateBookmarklet(cachedToken);\n } catch {\n display.textContent = \"Error generating token. Try again.\";\n }\n};\n\nfunction updateBookmarklet(token) {\n const code = document.getElementById(\"bookmarklet-code\");\n const snippet = `// Paste in browser console or use as bookmarklet:\nfetch(\"${BASE_URL}/api/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": \"Bearer ${token}\"\n },\n body: JSON.stringify({ content: \"Hello from my bookmarklet!\" })\n}).then(r => r.json()).then(console.log);`;\n code.textContent = snippet;\n}\n\nwindow.copyToken = function () {\n if (!cachedToken) return;\n navigator.clipboard.writeText(cachedToken).then(() => {\n const btn = document.querySelector(\".copy-btn\");\n btn.textContent = \"Copied ✓\";\n setTimeout(() => (btn.textContent = \"Copy\"), 2000);\n });\n};\n\nwindow.closeTokenModal = function (e) {\n if (!e || e.target.id === \"token-modal\") {\n document.getElementById(\"token-modal\").style.display = \"none\";\n }\n};\n\n// ─── Init — check if already logged in ────────────────────────────────────────\n(async () => {\n try {\n const res = await fetch(\"/api/me\");\n if (res.ok) {\n const data = await res.json();\n currentUser = data.user;\n showChat();\n }\n } catch { /* not logged in */ }\n})();\n",[],[237,247],"0666cd60-2ef8-11f1-8561-42dde27851f2",["D",1775177821530],[203,204,205],[237],"1b66a71e-2efb-11f1-b457-42dde27851f2","queries.ts","009ca616-2ef8-11f1-8561-42dde27851f2","e057c3b1-c233-4139-b46f-1ca324d9d565",17,["D",1775179145640],"script","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { createHmac, randomBytes } from \"node:crypto\";\n\nconst SECRET_KEY = Deno.env.get(\"CHAT_SECRET_KEY\") || \"default-secret-key-change-me\";\n\n// ─── Password Hashing ─────────────────────────────────────────────────────────\nexport function hashPassword(password: string): string {\n return createHmac(\"sha256\", SECRET_KEY).update(password).digest(\"hex\");\n}\nexport function verifyPassword(password: string, hash: string): boolean {\n return hashPassword(password) === hash;\n}\n\n// ─── Users ────────────────────────────────────────────────────────────────────\nexport async function createUser(\n username: string,\n password: string,\n): Promise<{ id: number; username: string; avatar_color: string } | null> {\n const colors = [\"#6366f1\", \"#ec4899\", \"#f59e0b\", \"#10b981\", \"#3b82f6\", \"#ef4444\", \"#8b5cf6\", \"#14b8a6\"];\n const color = colors[Math.floor(Math.random() * colors.length)];\n const hash = hashPassword(password);\n try {\n const result = await sqlite.execute({\n sql: `INSERT INTO users (username, password_hash, avatar_color) VALUES (?, ?, ?)`,\n args: [username, hash, color],\n });\n return { id: Number(result.lastInsertRowid), username, avatar_color: color };\n } catch {\n return null;\n }\n}\n\nexport async function getUserByCredentials(username: string, password: string) {\n const result = await sqlite.execute({\n sql: `SELECT id, username, avatar_color, password_hash FROM users WHERE username = ?`,\n args: [username],\n });\n if (!result.rows.length) return null;\n const user = result.rows[0] as { id: number; username: string; avatar_color: string; password_hash: string };\n if (!verifyPassword(password, user.password_hash)) return null;\n return { id: user.id, username: user.username, avatar_color: user.avatar_color };\n}\n\n// ─── Sessions ─────────────────────────────────────────────────────────────────\nexport async function createSession(userId: number): Promise {\n const sessionId = randomBytes(32).toString(\"hex\");\n const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000).toISOString();\n await sqlite.execute({\n sql: `INSERT INTO sessions (id, user_id, expires_at) VALUES (?, ?, ?)`,\n args: [sessionId, userId, expiresAt],\n });\n return sessionId;\n}\n\nexport async function getSessionUser(sessionId: string) {\n const result = await sqlite.execute({\n sql: `SELECT u.id, u.username, u.avatar_color FROM sessions s\n JOIN users u ON u.id = s.user_id\n WHERE s.id = ? AND s.expires_at > datetime('now')`,\n args: [sessionId],\n });\n if (!result.rows.length) return null;\n return result.rows[0] as { id: number; username: string; avatar_color: string };\n}\n\nexport async function deleteSession(sessionId: string) {\n await sqlite.execute({ sql: `DELETE FROM sessions WHERE id = ?`, args: [sessionId] });\n}\n\n// ─── API Tokens ───────────────────────────────────────────────────────────────\nexport async function createApiToken(userId: number): Promise {\n const token = randomBytes(40).toString(\"hex\");\n await sqlite.execute({\n sql: `INSERT INTO api_tokens (token, user_id) VALUES (?, ?)`,\n args: [token, userId],\n });\n return token;\n}\n\nexport async function getUserByToken(token: string) {\n const result = await sqlite.execute({\n sql: `SELECT u.id, u.username, u.avatar_color FROM api_tokens t\n JOIN users u ON u.id = t.user_id WHERE t.token = ?`,\n args: [token],\n });\n if (!result.rows.length) return null;\n return result.rows[0] as { id: number; username: string; avatar_color: string };\n}\n\n// ─── Messages ─────────────────────────────────────────────────────────────────\nexport async function saveMessage(\n userId: number, username: string, avatarColor: string, content: string,\n): Promise {\n const result = await sqlite.execute({\n sql: `INSERT INTO messages (user_id, username, avatar_color, content) VALUES (?, ?, ?, ?)`,\n args: [userId, username, avatarColor, content],\n });\n return Number(result.lastInsertRowid);\n}\n\n/** Last N messages, only from the past 24 hours, oldest first */\nexport async function getRecentMessages(limit = 20) {\n const result = await sqlite.execute({\n sql: `SELECT id, username, avatar_color, content, created_at\n FROM messages\n WHERE created_at > datetime('now', '-24 hours')\n ORDER BY id DESC LIMIT ?`,\n args: [limit],\n });\n return (result.rows as {\n id: number; username: string; avatar_color: string; content: string; created_at: string;\n }[]).reverse();\n}\n\n/** New messages since lastId, only within 24 hours */\nexport async function getMessagesSince(lastId: number) {\n const result = await sqlite.execute({\n sql: `SELECT id, username, avatar_color, content, created_at\n FROM messages\n WHERE id > ? AND created_at > datetime('now', '-24 hours')\n ORDER BY id ASC`,\n args: [lastId],\n });\n return result.rows as {\n id: number; username: string; avatar_color: string; content: string; created_at: string;\n }[];\n}\n\n/** Delete messages older than 24 hours — call from a cleanup cron */\nexport async function deleteExpiredMessages() {\n const result = await sqlite.execute(\n `DELETE FROM messages WHERE created_at <= datetime('now', '-24 hours')`\n );\n return result.rowsAffected;\n}\n",[],[268,259],"database","606766a8-2ef8-11f1-a3f4-42dde27851f2","migrations.ts","f8f999f0-2ef7-11f1-a3d8-42dde27851f2",9,["D",1775177972912],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function runMigrations() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT NOT NULL UNIQUE,\n password_hash TEXT NOT NULL,\n avatar_color TEXT NOT NULL DEFAULT '#6366f1',\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sessions (\n id TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n expires_at TEXT NOT NULL,\n FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE\n )\n `);\n\n // Long-lived tokens for bookmarklets / external API clients\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS api_tokens (\n token TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS messages (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL DEFAULT 0,\n username TEXT NOT NULL,\n avatar_color TEXT NOT NULL DEFAULT '#94a3b8',\n content TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )\n `);\n}\n",[],[268,270],"f8f9b20a-2ef7-11f1-a3d8-42dde27851f2",["D",1775177799201],[200,201],[268],["D",1775179232123],[],[18,68],["D",1775178334898],[198],[18],["D",1775177791326],["D",1789516253896],{"_11":12,"_151":73},{"_11":12,"_147":-5,"_72":73,"_31":71,"_148":149,"_150":30},{"_42":92,"_13":16,"_36":39,"_139":102,"_140":-5,"_141":-5,"_142":-5,"_143":-5,"_144":-5,"_145":14,"_146":12},"ctx",{"_56":-5,"_170":325,"_326":327,"_328":329,"_330":30,"_331":30,"_332":30,"_333":24,"_334":-5,"_335":-7,"_336":-7,"_337":26,"_338":30,"_339":30,"_340":-5,"_341":30,"_342":30,"_343":30,"_344":-5},"ENV",{"_296":297,"_298":299,"_300":16,"_301":302,"_303":304,"_305":306,"_307":308,"_309":310,"_311":312,"_313":314,"_315":316,"_317":318,"_319":320,"_321":322,"_323":324},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

🔑 Your API Token

History · bookmarklet