LiveChat 💬

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_227":228,"_229":230},"routes/_app.x.$handle.$name",{"_102":101,"_37":49,"_110":92,"_32":111,"_13":14,"_112":-5,"_11":113,"_114":115,"_116":117,"_118":119,"_120":121,"_26":-5,"_122":-5,"_123":-5,"_124":30,"_125":126,"_127":128,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_47":48,"_37":49,"_42":50,"_51":-5,"_52":30,"_53":54,"_55":54,"_56":57,"_58":-5,"_19":59,"_60":-5,"_61":30,"_62":-5,"_63":-5,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":30},"version",6,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","fd99ef22-db02-4b78-b47e-17d1d1672668","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":30,"_32":33,"_34":33},"file",{"_35":36,"_37":33,"_38":39,"_40":41,"_42":43,"_44":14,"_45":46,"_29":30},"previous","deleted",false,"deletedHere","path","main.ts","latestPath","fileId","2cb58f1a-2ef8-11f1-9463-42dde27851f2","name","fileType","http","content","import { Hono } from \"npm:hono@4\";\nimport { serveFile, parseVal } from \"https://esm.town/v/std/utils/index.ts\";\nimport { runMigrations } from \"./database/migrations.ts\";\nimport {\n createUser, getUserByCredentials,\n createSession, getSessionUser, deleteSession,\n saveMessage, getRecentMessages, getMessagesSince,\n} from \"./database/queries.ts\";\n\nawait runMigrations();\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\n// --- Auth helpers ---\nfunction getSessionId(req: Request): string | null {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const match = cookie.match(/session=([^;]+)/);\n return match ? match[1] : null;\n}\n\nfunction sessionCookie(id: string, maxAge = 604800) {\n return `session=${id}; Path=/; HttpOnly; SameSite=Strict; Max-Age=${maxAge}`;\n}\n\nasync function requireAuth(c: any) {\n const sid = getSessionId(c.req.raw);\n if (!sid) return null;\n return await getSessionUser(sid);\n}\n\n// --- Auth routes ---\napp.post(\"/api/register\", async (c) => {\n const { username, password } = await c.req.json();\n if (!username || !password) return c.json({ error: \"Username and password required\" }, 400);\n if (username.length < 2 || username.length > 20) return c.json({ error: \"Username must be 2–20 chars\" }, 400);\n if (!/^[a-zA-Z0-9_]+$/.test(username)) return c.json({ error: \"Username: letters, numbers, underscores only\" }, 400);\n if (password.length < 6) return c.json({ error: \"Password must be at least 6 characters\" }, 400);\n const user = await createUser(username, password);\n if (!user) return c.json({ error: \"Username already taken\" }, 409);\n const sid = await createSession(user.id);\n c.header(\"Set-Cookie\", sessionCookie(sid));\n return c.json({ user: { id: user.id, username: user.username, avatar_color: user.avatar_color } });\n});\n\napp.post(\"/api/login\", async (c) => {\n const { username, password } = await c.req.json();\n if (!username || !password) return c.json({ error: \"Username and password required\" }, 400);\n const user = await getUserByCredentials(username, password);\n if (!user) return c.json({ error: \"Invalid username or password\" }, 401);\n const sid = await createSession(user.id);\n c.header(\"Set-Cookie\", sessionCookie(sid));\n return c.json({ user: { id: user.id, username: user.username, avatar_color: user.avatar_color } });\n});\n\napp.post(\"/api/logout\", async (c) => {\n const sid = getSessionId(c.req.raw);\n if (sid) await deleteSession(sid);\n c.header(\"Set-Cookie\", sessionCookie(\"\", 0));\n return c.json({ ok: true });\n});\n\napp.get(\"/api/me\", async (c) => {\n const user = await requireAuth(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n return c.json({ user });\n});\n\n// --- Messages ---\napp.get(\"/api/messages\", async (c) => {\n const messages = await getRecentMessages(50);\n return c.json({ messages });\n});\n\napp.get(\"/api/messages/poll\", async (c) => {\n const user = await requireAuth(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const since = Number(c.req.query(\"since\") || \"0\");\n const messages = await getMessagesSince(since);\n return c.json({ messages });\n});\n\napp.post(\"/api/messages\", async (c) => {\n const user = await requireAuth(c);\n if (!user) return c.json({ error: \"Unauthorized\" }, 401);\n const { content } = await c.req.json();\n if (!content || typeof content !== \"string\") return c.json({ error: \"Content required\" }, 400);\n const trimmed = content.trim().slice(0, 500);\n if (!trimmed) return c.json({ error: \"Empty message\" }, 400);\n const id = await saveMessage(user.id, user.username, user.avatar_color, trimmed);\n return c.json({ ok: true, id });\n});\n\n// --- Source redirect ---\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// --- Static files ---\napp.get(\"/frontend/*\", (c) => serveFile(c.req.path, import.meta.url));\napp.get(\"*\", (c) => serveFile(\"/frontend/index.html\", import.meta.url));\n\nexport default app.fetch;\n","createdAt",["D",1775177886193],"branchVersion","branchId","f42b2574-2ef7-11f1-ab55-42dde27851f2","id","f42a4ed8-2ef7-11f1-ab55-42dde27851f2","live-groupchat",["D",1775177791326],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Live groupchat with user auth and secure data storage","imageUrl","019d50d6-6e5e-72f9-bffe-0f2f8a74be8e","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019d50d6-6e5e-72f9-bffe-12eb0819d881","tursoName","f42a4ed82ef711f1ab5542dde27851f2","tursoHostname","f42a4ed82ef711f1ab5542dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789516253896],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_102":101,"_109":105},"org",{"_102":101,"_103":-5,"_104":105,"_19":59,"_106":107,"_108":30},"branch",{"_13":91,"_37":92,"_47":46,"_93":48,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":49,"_100":101},"isOwned",19,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","MJK","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzNCcEVmOEdvazVHU1JjUXNpbkJpOUpRVFE1YSJ9","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_47":48,"_37":49,"_42":222,"_51":-5,"_52":30,"_53":54,"_55":54,"_56":57,"_58":-5,"_19":59,"_60":-5,"_61":30,"_62":-5,"_63":-5,"_64":65,"_66":67,"_68":69,"_70":71,"_72":223,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":224,"_86":225,"_88":226,"_90":30},"tree",[165,168,172],"files",[165,166,167,168,169,170,171,172],"counts",{"_155":65,"_156":152,"_157":65,"_158":159,"_160":161},"contents",[133,134,135],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_47":149,"_37":150,"_35":151,"_137":-5,"_45":46,"_44":152,"_138":128,"_42":153,"_13":65,"_38":147,"_40":-5,"_29":30,"_140":-5,"_32":154},{"_47":142,"_37":143,"_35":144,"_137":-5,"_45":46,"_44":145,"_138":128,"_42":146,"_13":65,"_38":147,"_40":-5,"_29":30,"_140":-5,"_32":148},{"_47":136,"_37":33,"_35":36,"_137":-5,"_45":46,"_44":14,"_138":30,"_42":139,"_13":65,"_38":39,"_40":41,"_29":30,"_140":-5,"_32":141},"2cb58e70-2ef8-11f1-9463-42dde27851f2","parentId","latest",["D",1775177886193],"label",[33],"0666cd60-2ef8-11f1-8561-42dde27851f2","frontend","b501ffcf-0dce-4a1c-a1c7-2032c83dbfa9",3,["D",1775177821530],"directory",[143],"f8f9b20a-2ef7-11f1-a3d8-42dde27851f2","database","e057c3b1-c233-4139-b46f-1ca324d9d565",1,["D",1775177799201],[150],"pulls","branches","forks","envVars",{"_162":65,"_164":65},"connections",{"_162":65,"_163":65},"count","unfilledCount","emptyCount",{"_47":149,"_37":150,"_35":151,"_137":-5,"_45":46,"_44":152,"_138":128,"_42":219,"_13":65,"_38":147,"_40":-5,"_29":30,"_140":-5,"_174":220,"_32":221},{"_47":212,"_37":213,"_35":214,"_137":151,"_45":46,"_44":152,"_138":30,"_42":215,"_13":65,"_38":208,"_40":216,"_29":30,"_140":-5,"_174":217,"_32":218},{"_47":203,"_37":204,"_35":205,"_137":151,"_45":46,"_44":206,"_138":30,"_42":207,"_13":65,"_38":208,"_40":209,"_29":30,"_140":-5,"_174":210,"_32":211},{"_47":142,"_37":143,"_35":144,"_137":-5,"_45":46,"_44":145,"_138":128,"_42":200,"_13":65,"_38":147,"_40":-5,"_29":30,"_140":-5,"_174":201,"_32":202},{"_47":192,"_37":193,"_35":194,"_137":144,"_45":46,"_44":195,"_138":30,"_42":196,"_13":65,"_38":26,"_40":197,"_29":30,"_140":-5,"_174":198,"_32":199},{"_47":185,"_37":186,"_35":187,"_137":144,"_45":46,"_44":145,"_138":30,"_42":188,"_13":65,"_38":26,"_40":189,"_29":30,"_140":-5,"_174":190,"_32":191},{"_47":177,"_37":178,"_35":179,"_137":144,"_45":46,"_44":180,"_138":30,"_42":181,"_13":65,"_38":26,"_40":182,"_29":30,"_140":-5,"_174":183,"_32":184},{"_47":136,"_37":33,"_35":36,"_137":-5,"_45":46,"_44":14,"_138":30,"_42":173,"_13":65,"_38":39,"_40":41,"_29":30,"_140":-5,"_174":175,"_32":176},["D",1775177886193],"children",[],[33],"170f1af0-2ef8-11f1-8777-42dde27851f2","style.css","170f1bc2-2ef8-11f1-8777-42dde27851f2",4,["D",1775177849868],"*, *::before, *::after { box-sizing: border-box; margin: 0; padding: 0; }\n\n:root {\n --bg: #0f0f13;\n --surface: #1a1a24;\n --surface2: #23232f;\n --border: #2e2e3e;\n --accent: #6366f1;\n --accent-hover: #4f46e5;\n --text: #f1f1f5;\n --muted: #8888aa;\n --error: #ef4444;\n --radius: 12px;\n}\n\nbody {\n font-family: 'Segoe UI', system-ui, sans-serif;\n background: var(--bg);\n color: var(--text);\n height: 100dvh;\n display: flex;\n flex-direction: column;\n}\n\n/* AUTH */\n.screen { display: flex; flex-direction: column; height: 100dvh; }\n\n.auth-box {\n margin: auto;\n background: var(--surface);\n border: 1px solid var(--border);\n border-radius: var(--radius);\n padding: 2.5rem 2rem;\n width: 100%;\n max-width: 380px;\n box-shadow: 0 20px 60px rgba(0,0,0,0.5);\n}\n\n.logo { font-size: 2rem; font-weight: 800; text-align: center; margin-bottom: 0.4rem; }\n.tagline { text-align: center; color: var(--muted); font-size: 0.875rem; margin-bottom: 1.5rem; }\n\n.tab-row { display: flex; border-radius: 8px; background: var(--bg); padding: 4px; gap: 4px; margin-bottom: 1.2rem; }\n.tab {\n flex: 1; padding: 0.5rem; border: none; border-radius: 6px;\n background: transparent; color: var(--muted); cursor: pointer;\n font-size: 0.9rem; font-weight: 600; transition: all 0.2s;\n}\n.tab.active { background: var(--accent); color: white; }\n\n#auth-form { display: flex; flex-direction: column; gap: 0.75rem; }\n\n#auth-form input {\n padding: 0.75rem 1rem; border-radius: 8px;\n border: 1px solid var(--border); background: var(--bg);\n color: var(--text); font-size: 1rem; outline: none; transition: border 0.2s;\n}\n#auth-form input:focus { border-color: var(--accent); }\n\n#auth-form button[type=submit] {\n padding: 0.75rem; border-radius: 8px; border: none;\n background: var(--accent); color: white; font-size: 1rem;\n font-weight: 700; cursor: pointer; transition: background 0.2s;\n margin-top: 0.25rem;\n}\n#auth-form button[type=submit]:hover { background: var(--accent-hover); }\n\n.error-msg { color: var(--error); font-size: 0.85rem; text-align: center; }\n.source-link { text-align: center; margin-top: 1rem; font-size: 0.8rem; }\n.source-link a { color: var(--muted); text-decoration: none; }\n.source-link a:hover { color: var(--text); }\n\n/* CHAT */\nheader {\n display: flex; align-items: center; justify-content: space-between;\n padding: 1rem 1.5rem; background: var(--surface);\n border-bottom: 1px solid var(--border); flex-shrink: 0;\n}\n.header-left { font-size: 1.1rem; }\n.header-right { display: flex; align-items: center; gap: 0.75rem; color: var(--muted); font-size: 0.875rem; }\n.logout-btn {\n padding: 0.35rem 0.75rem; border-radius: 6px; border: 1px solid var(--border);\n background: transparent; color: var(--muted); cursor: pointer; font-size: 0.85rem;\n transition: all 0.2s;\n}\n.logout-btn:hover { background: var(--error); color: white; border-color: var(--error); }\n\n.messages {\n flex: 1; overflow-y: auto; padding: 1rem 1.5rem;\n display: flex; flex-direction: column; gap: 0.5rem;\n scroll-behavior: smooth;\n}\n.messages::-webkit-scrollbar { width: 6px; }\n.messages::-webkit-scrollbar-track { background: transparent; }\n.messages::-webkit-scrollbar-thumb { background: var(--border); border-radius: 3px; }\n\n.msg {\n display: flex; gap: 0.75rem; align-items: flex-start;\n animation: fadeIn 0.2s ease;\n}\n@keyframes fadeIn { from { opacity: 0; transform: translateY(6px); } to { opacity: 1; transform: none; } }\n\n.avatar {\n width: 36px; height: 36px; border-radius: 50%;\n display: flex; align-items: center; justify-content: center;\n font-weight: 700; font-size: 0.85rem; flex-shrink: 0; color: white;\n text-transform: uppercase;\n}\n\n.msg-body { display: flex; flex-direction: column; gap: 0.15rem; max-width: calc(100% - 50px); }\n.msg-meta { display: flex; align-items: baseline; gap: 0.5rem; }\n.msg-user { font-weight: 700; font-size: 0.875rem; }\n.msg-time { color: var(--muted); font-size: 0.75rem; }\n.msg-text {\n background: var(--surface2); padding: 0.5rem 0.75rem;\n border-radius: 0 12px 12px 12px; font-size: 0.95rem;\n line-height: 1.5; word-break: break-word;\n border: 1px solid var(--border);\n}\n\n.msg.own { flex-direction: row-reverse; }\n.msg.own .msg-meta { flex-direction: row-reverse; }\n.msg.own .msg-text {\n background: var(--accent); border-color: var(--accent);\n border-radius: 12px 0 12px 12px;\n}\n\n.divider {\n text-align: center; color: var(--muted); font-size: 0.75rem;\n position: relative; margin: 0.5rem 0;\n}\n.divider::before, .divider::after {\n content: ''; position: absolute; top: 50%;\n width: 40%; height: 1px; background: var(--border);\n}\n.divider::before { left: 0; }\n.divider::after { right: 0; }\n\n.input-area {\n padding: 1rem 1.5rem; background: var(--surface);\n border-top: 1px solid var(--border); flex-shrink: 0;\n}\n.input-area form { display: flex; gap: 0.75rem; }\n#msg-input {\n flex: 1; padding: 0.75rem 1rem; border-radius: 10px;\n border: 1px solid var(--border); background: var(--bg);\n color: var(--text); font-size: 1rem; outline: none; transition: border 0.2s;\n}\n#msg-input:focus { border-color: var(--accent); }\n.input-area button {\n padding: 0.75rem 1.25rem; border-radius: 10px; border: none;\n background: var(--accent); color: white; font-size: 1rem;\n font-weight: 700; cursor: pointer; transition: background 0.2s;\n}\n.input-area button:hover { background: var(--accent-hover); }\n\n.system-msg { text-align: center; color: var(--muted); font-size: 0.8rem; font-style: italic; }\n\n@media (max-width: 500px) {\n .auth-box { border-radius: 0; border: none; height: 100dvh; display: flex; flex-direction: column; justify-content: center; }\n .messages { padding: 0.75rem; }\n .input-area { padding: 0.75rem; }\n header { padding: 0.75rem 1rem; }\n}\n",[],[143,178],"0666ba3c-2ef8-11f1-8561-42dde27851f2","index.html","0666badc-2ef8-11f1-8561-42dde27851f2",["D",1775177821530],"\n\n\n \n \n LiveChat 💬\n \n \n\n\n

💬 LiveChat

Real-time groupchat — join the conversation

\n \n \n

\n \n

view source

\n\n \n\n \n\n\n",[],[143,186],"22d03bbc-2ef8-11f1-8174-42dde27851f2","app.js","22d03c98-2ef8-11f1-8174-42dde27851f2",5,["D",1775177869589],"// State\nlet currentUser = null;\nlet lastMessageId = 0;\nlet pollInterval = null;\nlet currentTab = 'login';\n\n// Helpers\nfunction getCookie(name) {\n return document.cookie.split('; ').find(r => r.startsWith(name + '='))?.split('=')[1] || null;\n}\n\nfunction formatTime(isoStr) {\n const d = new Date(isoStr + (isoStr.endsWith('Z') ? '' : 'Z'));\n return d.toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' });\n}\n\nfunction escapeHtml(str) {\n return str.replace(/&/g,'&').replace(//g,'>').replace(/\"/g,'"');\n}\n\n// Tab switching\nwindow.showTab = function(tab) {\n currentTab = tab;\n document.getElementById('tab-login').classList.toggle('active', tab === 'login');\n document.getElementById('tab-register').classList.toggle('active', tab === 'register');\n document.getElementById('auth-submit').textContent = tab === 'login' ? 'Login' : 'Create Account';\n document.getElementById('auth-error').style.display = 'none';\n};\n\n// Auth\nwindow.submitAuth = async function(e) {\n e.preventDefault();\n const username = document.getElementById('auth-username').value.trim();\n const password = document.getElementById('auth-password').value;\n const errorEl = document.getElementById('auth-error');\n errorEl.style.display = 'none';\n\n const endpoint = currentTab === 'login' ? '/api/login' : '/api/register';\n try {\n const res = await fetch(endpoint, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ username, password }),\n });\n const data = await res.json();\n if (!res.ok) {\n errorEl.textContent = data.error || 'Something went wrong';\n errorEl.style.display = 'block';\n return;\n }\n currentUser = data.user;\n showChat();\n } catch {\n errorEl.textContent = 'Network error. Try again.';\n errorEl.style.display = 'block';\n }\n};\n\nwindow.logout = async function() {\n await fetch('/api/logout', { method: 'POST' });\n currentUser = null;\n lastMessageId = 0;\n clearInterval(pollInterval);\n pollInterval = null;\n document.getElementById('chat-screen').style.display = 'none';\n document.getElementById('auth-screen').style.display = 'flex';\n document.getElementById('messages').innerHTML = '';\n};\n\n// Chat\nfunction showChat() {\n document.getElementById('auth-screen').style.display = 'none';\n document.getElementById('chat-screen').style.display = 'flex';\n document.getElementById('header-user').textContent = '👤 ' + currentUser.username;\n loadMessages();\n pollInterval = setInterval(pollMessages, 1500);\n document.getElementById('msg-input').focus();\n}\n\nfunction renderMessage(msg, prepend = false) {\n const isOwn = currentUser && msg.username === currentUser.username;\n const initial = msg.username[0].toUpperCase();\n const div = document.createElement('div');\n div.className = 'msg' + (isOwn ? ' own' : '');\n div.dataset.id = msg.id;\n div.innerHTML = `\n

${initial}

\n ${isOwn ? 'You' : escapeHtml(msg.username)}\n ${formatTime(msg.created_at)}\n

${escapeHtml(msg.content)}

`;\n const container = document.getElementById('messages');\n if (prepend) container.prepend(div);\n else container.appendChild(div);\n}\n\nasync function loadMessages() {\n const res = await fetch('/api/messages');\n const data = await res.json();\n const container = document.getElementById('messages');\n container.innerHTML = '';\n if (!data.messages.length) {\n container.innerHTML = '

No messages yet. Say hello! 👋

';\n } else {\n data.messages.forEach(m => renderMessage(m));\n if (data.messages.length) lastMessageId = data.messages[data.messages.length - 1].id;\n }\n container.scrollTop = container.scrollHeight;\n}\n\nasync function pollMessages() {\n if (!currentUser) return;\n try {\n const res = await fetch(`/api/messages/poll?since=${lastMessageId}`);\n const data = await res.json();\n if (data.messages && data.messages.length) {\n const container = document.getElementById('messages');\n const wasAtBottom = container.scrollHeight - container.scrollTop - container.clientHeight < 80;\n // Remove \"no messages\" placeholder\n const placeholder = container.querySelector('.system-msg');\n if (placeholder) placeholder.remove();\n data.messages.forEach(m => renderMessage(m));\n lastMessageId = data.messages[data.messages.length - 1].id;\n if (wasAtBottom) container.scrollTop = container.scrollHeight;\n }\n } catch { /* ignore polling errors */ }\n}\n\nwindow.sendMessage = async function(e) {\n e.preventDefault();\n const input = document.getElementById('msg-input');\n const content = input.value.trim();\n if (!content) return;\n input.value = '';\n try {\n await fetch('/api/messages', {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ content }),\n });\n await pollMessages();\n } catch {\n input.value = content; // restore on error\n }\n};\n\n// Init — check if already logged in\n(async () => {\n try {\n const res = await fetch('/api/me');\n if (res.ok) {\n const data = await res.json();\n currentUser = data.user;\n showChat();\n }\n } catch { /* not logged in */ }\n})();\n",[],[143,193],["D",1775177821530],[169,170,171],[143],"009ca530-2ef8-11f1-8561-42dde27851f2","queries.ts","009ca616-2ef8-11f1-8561-42dde27851f2",2,["D",1775177812212],"script","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { createHmac, randomBytes } from \"node:crypto\";\n\nconst SECRET_KEY = Deno.env.get(\"CHAT_SECRET_KEY\") || \"default-secret-key-change-me\";\n\n// --- Password Hashing ---\nexport function hashPassword(password: string): string {\n return createHmac(\"sha256\", SECRET_KEY).update(password).digest(\"hex\");\n}\n\nexport function verifyPassword(password: string, hash: string): boolean {\n return hashPassword(password) === hash;\n}\n\n// --- Session ---\nexport function generateSessionId(): string {\n return randomBytes(32).toString(\"hex\");\n}\n\n// --- Users ---\nexport async function createUser(username: string, password: string): Promise<{ id: number; username: string; avatar_color: string } | null> {\n const colors = [\"#6366f1\",\"#ec4899\",\"#f59e0b\",\"#10b981\",\"#3b82f6\",\"#ef4444\",\"#8b5cf6\",\"#14b8a6\"];\n const color = colors[Math.floor(Math.random() * colors.length)];\n const hash = hashPassword(password);\n try {\n const result = await sqlite.execute({\n sql: `INSERT INTO users (username, password_hash, avatar_color) VALUES (?, ?, ?)`,\n args: [username, hash, color],\n });\n return { id: Number(result.lastInsertRowid), username, avatar_color: color };\n } catch {\n return null; // username taken\n }\n}\n\nexport async function getUserByCredentials(username: string, password: string) {\n const result = await sqlite.execute({\n sql: `SELECT id, username, avatar_color, password_hash FROM users WHERE username = ?`,\n args: [username],\n });\n if (!result.rows.length) return null;\n const user = result.rows[0] as { id: number; username: string; avatar_color: string; password_hash: string };\n if (!verifyPassword(password, user.password_hash)) return null;\n return { id: user.id, username: user.username, avatar_color: user.avatar_color };\n}\n\n// --- Sessions ---\nexport async function createSession(userId: number): Promise {\n const sessionId = generateSessionId();\n const expiresAt = new Date(Date.now() + 7 * 24 * 60 * 60 * 1000).toISOString();\n await sqlite.execute({\n sql: `INSERT INTO sessions (id, user_id, expires_at) VALUES (?, ?, ?)`,\n args: [sessionId, userId, expiresAt],\n });\n return sessionId;\n}\n\nexport async function getSessionUser(sessionId: string) {\n const result = await sqlite.execute({\n sql: `SELECT u.id, u.username, u.avatar_color FROM sessions s\n JOIN users u ON u.id = s.user_id\n WHERE s.id = ? AND s.expires_at > datetime('now')`,\n args: [sessionId],\n });\n if (!result.rows.length) return null;\n return result.rows[0] as { id: number; username: string; avatar_color: string };\n}\n\nexport async function deleteSession(sessionId: string) {\n await sqlite.execute({ sql: `DELETE FROM sessions WHERE id = ?`, args: [sessionId] });\n}\n\n// --- Messages ---\nexport async function saveMessage(userId: number, username: string, avatarColor: string, content: string) {\n const result = await sqlite.execute({\n sql: `INSERT INTO messages (user_id, username, avatar_color, content) VALUES (?, ?, ?, ?)`,\n args: [userId, username, avatarColor, content],\n });\n return Number(result.lastInsertRowid);\n}\n\nexport async function getRecentMessages(limit = 50) {\n const result = await sqlite.execute({\n sql: `SELECT id, username, avatar_color, content, created_at FROM messages ORDER BY id DESC LIMIT ?`,\n args: [limit],\n });\n return (result.rows as { id: number; username: string; avatar_color: string; content: string; created_at: string }[]).reverse();\n}\n\nexport async function getMessagesSince(lastId: number) {\n const result = await sqlite.execute({\n sql: `SELECT id, username, avatar_color, content, created_at FROM messages WHERE id > ? ORDER BY id ASC`,\n args: [lastId],\n });\n return result.rows as { id: number; username: string; avatar_color: string; content: string; created_at: string }[];\n}\n",[],[150,204],"f8f99914-2ef7-11f1-a3d8-42dde27851f2","migrations.ts","f8f999f0-2ef7-11f1-a3d8-42dde27851f2",["D",1775177799201],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function runMigrations() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT NOT NULL UNIQUE,\n password_hash TEXT NOT NULL,\n avatar_color TEXT NOT NULL DEFAULT '#6366f1',\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sessions (\n id TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n expires_at TEXT NOT NULL,\n FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS messages (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL,\n username TEXT NOT NULL,\n avatar_color TEXT NOT NULL,\n content TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE\n )\n `);\n}\n",[],[150,213],["D",1775177799201],[166,167],[150],["D",1775177791326],["D",1789516253896],{"_102":101,"_109":105},{"_102":101,"_103":-5,"_104":105,"_19":59,"_106":107,"_108":30},{"_13":91,"_37":92,"_47":46,"_93":48,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":49,"_100":101},"ctx",{"_84":-5,"_130":260,"_261":262,"_263":264,"_265":30,"_266":30,"_267":30,"_268":128,"_269":-5,"_270":-7,"_271":-7,"_272":65,"_273":30,"_274":30,"_275":-5,"_276":30,"_277":30,"_278":30,"_279":-5},"ENV",{"_231":232,"_233":234,"_235":92,"_236":237,"_238":239,"_240":241,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v6