[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_344":345,"_346":347},"routes/_app.x.$handle.$name",{"_97":96,"_32":46,"_105":87,"_27":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":59,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":59,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":25},"version",27,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","backend/routes/content.ts","latestPath","fileId","eeed747c-3b41-11f0-93ee-9e149126039e","name","content.ts","fileType","script","content","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { \n createContentItem,\n getContentItemsByUserId,\n deleteContentItem,\n getUserByBearerToken,\n updateBearerTokenLastUsed\n} from \"../database/queries.ts\";\nimport { requireAuth } from \"./auth.ts\";\nimport type { ContentRequest } from \"../../shared/types.ts\";\n\nconst content = new Hono();\n\nfunction generateId(): string {\n return crypto.randomUUID();\n}\n\n// Middleware to check bearer token for API access\nasync function requireBearerToken(c: any, next: any) {\n const authHeader = c.req.header('Authorization');\n if (!authHeader || !authHeader.startsWith('Bearer ')) {\n return c.json({ error: 'Bearer token required' }, 401);\n }\n \n const token = authHeader.substring(7);\n const user = await getUserByBearerToken(token);\n if (!user) {\n return c.json({ error: 'Invalid bearer token' }, 401);\n }\n \n // Update token last used\n await updateBearerTokenLastUsed(token);\n \n c.set('user', user);\n await next();\n}\n\n// Add content via shortcut (requires bearer token)\ncontent.post('/', requireBearerToken, async (c) => {\n try {\n const user = c.get('user');\n const data: ContentRequest = await c.req.json();\n \n if (!data.type || !data.content) {\n return c.json({ error: 'Type and content are required' }, 400);\n }\n \n if (!['text', 'image', 'url'].includes(data.type)) {\n return c.json({ error: 'Invalid content type' }, 400);\n }\n \n // Validate content based on type\n if (data.type === 'url') {\n try {\n new URL(data.content);\n } catch {\n return c.json({ error: 'Invalid URL format' }, 400);\n }\n }\n \n // For images, we expect base64 data or a URL\n if (data.type === 'image') {\n if (!data.content.startsWith('data:image/') && !data.content.startsWith('http')) {\n return c.json({ error: 'Invalid image format' }, 400);\n }\n }\n \n const contentItem = {\n id: generateId(),\n userId: user.id,\n type: data.type,\n content: data.content,\n title: data.title,\n metadata: data.metadata,\n createdAt: new Date().toISOString(),\n };\n \n await createContentItem(contentItem);\n \n return c.json({ \n success: true, \n id: contentItem.id,\n message: 'Content saved successfully' \n });\n } catch (error) {\n console.error('Content creation error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Get user's content (requires web authentication)\ncontent.get('/', requireAuth, async (c) => {\n try {\n const user = c.get('user');\n const page = parseInt(c.req.query('page') || '1');\n const limit = parseInt(c.req.query('limit') || '20');\n const offset = (page - 1) * limit;\n \n const items = await getContentItemsByUserId(user.id, limit, offset);\n \n return c.json({ \n items,\n page,\n limit,\n hasMore: items.length === limit\n });\n } catch (error) {\n console.error('Content retrieval error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Delete content item\ncontent.delete('/:id', requireAuth, async (c) => {\n try {\n const user = c.get('user');\n const itemId = c.req.param('id');\n \n const deleted = await deleteContentItem(itemId, user.id);\n if (!deleted) {\n return c.json({ error: 'Content item not found' }, 404);\n }\n \n return c.json({ success: true });\n } catch (error) {\n console.error('Content deletion error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Health check endpoint for shortcuts\ncontent.get('/health', (c) => {\n return c.json({ \n status: 'ok', \n timestamp: new Date().toISOString(),\n message: 'iOS Share Sheet Backend is running'\n });\n});\n\nexport { content };","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { \n createContentItem,\n getContentItemsByUserId,\n deleteContentItem,\n getUserByBearerToken,\n updateBearerTokenLastUsed\n} from \"../database/queries.ts\";\nimport { requireAuth } from \"./auth.ts\";\nimport type { ContentRequest } from \"../../shared/types.ts\";\n\nconst content = new Hono();\n\nfunction generateId(): string {\n return crypto.randomUUID();\n}\n\n// Middleware to check bearer token for API access\nasync function requireBearerToken(c: any, next: any) {\n const authHeader = c.req.header('Authorization');\n if (!authHeader || !authHeader.startsWith('Bearer ')) {\n return c.json({ error: 'Bearer token required' }, 401);\n }\n \n const token = authHeader.substring(7);\n const user = await getUserByBearerToken(token);\n if (!user) {\n return c.json({ error: 'Invalid bearer token' }, 401);\n }\n \n // Update token last used\n await updateBearerTokenLastUsed(token);\n \n c.set('user', user);\n await next();\n}\n\n// Add content via shortcut (requires bearer token)\ncontent.post('/', requireBearerToken, async (c) => {\n try {\n const user = c.get('user');\n const data: ContentRequest = await c.req.json();\n \n if (!data.type || !data.content) {\n return c.json({ error: 'Type and content are required' }, 400);\n }\n \n if (!['text', 'image', 'url'].includes(data.type)) {\n return c.json({ error: 'Invalid content type' }, 400);\n }\n \n // Validate content based on type\n if (data.type === 'url') {\n try {\n new URL(data.content);\n } catch {\n return c.json({ error: 'Invalid URL format' }, 400);\n }\n }\n \n // For images, we expect base64 data or a URL\n if (data.type === 'image') {\n if (!data.content.startsWith('data:image/') && !data.content.startsWith('http')) {\n return c.json({ error: 'Invalid image format' }, 400);\n }\n }\n \n const contentItem = {\n id: generateId(),\n userId: user.id,\n type: data.type,\n content: data.content,\n title: data.title,\n metadata: data.metadata,\n createdAt: new Date().toISOString(),\n };\n \n await createContentItem(contentItem);\n \n return c.json({ \n success: true, \n id: contentItem.id,\n message: 'Content saved successfully' \n });\n } catch (error) {\n console.error('Content creation error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Get user's content (requires web authentication)\ncontent.get('/', requireAuth, async (c) => {\n try {\n const user = c.get('user');\n const page = parseInt(c.req.query('page') || '1');\n const limit = parseInt(c.req.query('limit') || '20');\n const offset = (page - 1) * limit;\n \n const items = await getContentItemsByUserId(user.id, limit, offset);\n \n return c.json({ \n items,\n page,\n limit,\n hasMore: items.length === limit\n });\n } catch (error) {\n console.error('Content retrieval error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Delete content item\ncontent.delete('/:id', requireAuth, async (c) => {\n try {\n const user = c.get('user');\n const itemId = c.req.param('id');\n \n const deleted = await deleteContentItem(itemId, user.id);\n if (!deleted) {\n return c.json({ error: 'Content item not found' }, 404);\n }\n \n return c.json({ success: true });\n } catch (error) {\n console.error('Content deletion error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Health check endpoint for shortcuts\ncontent.get('/health', (c) => {\n return c.json({ \n status: 'ok', \n timestamp: new Date().toISOString(),\n message: 'iOS Share Sheet Backend is running'\n });\n});\n\n// Debug endpoint to test database\ncontent.get('/debug', async (c) => {\n try {\n const { sqlite } = await import(\"https://esm.town/v/stevekrouse/sqlite\");\n \n // Test basic query\n const result = await sqlite.execute(`SELECT name FROM sqlite_master WHERE type='table'`);\n const tables = result.map(row => row.name);\n \n // Test users table\n let userCount = 0;\n try {\n const userResult = await sqlite.execute(`SELECT COUNT(*) as count FROM users`);\n userCount = userResult[0].count as number;\n } catch (error) {\n console.error('Error counting users:', error);\n }\n \n return c.json({\n status: 'debug',\n tables,\n userCount,\n timestamp: new Date().toISOString()\n });\n } catch (error) {\n console.error('Debug endpoint error:', error);\n return c.json({ \n error: error.message,\n timestamp: new Date().toISOString()\n }, 500);\n }\n});\n\nexport { content };","createdAt",["D",1748383070767],"branchVersion","branchId","aacf49ce-3b40-11f0-a79d-9e149126039e","id","aacf14c2-3b40-11f0-a79d-9e149126039e","ProtoShare",["D",1748380937811],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","21f2e37e-8066-4730-9dc7-d27cf8d3c9f3","pinnedFileId","058e8cc0-3b42-11f0-a6d6-9e149126039e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",4,"orgId","0630d977-f678-453e-926c-52043293f59f","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_97":96,"_104":100},"org",{"_97":96,"_98":-5,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":86,"_32":87,"_44":43,"_88":45,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":46,"_95":96},"isOwned",57,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","c15r","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yb2RJNlc1czZ1NlpZRmoxdGJ2eFVNNVhmeTYifQ","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_32":46,"_39":340,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":-5,"_54":-5,"_18":55,"_56":57,"_58":59,"_60":59,"_61":-5,"_62":63,"_64":65,"_66":-5,"_67":-5,"_68":-5,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":341,"_81":342,"_83":343,"_85":25},"tree",[171,181,190,192],"files",[171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192],"counts",{"_160":138,"_161":162,"_163":63,"_164":165,"_166":167},"contents",[127,128,129,130],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":155,"_32":156,"_30":157,"_134":-5,"_42":43,"_41":63,"_136":59,"_39":158,"_13":138,"_34":147,"_36":-5,"_24":25,"_140":-5,"_27":159},{"_44":149,"_32":150,"_30":151,"_134":-5,"_42":43,"_41":152,"_136":59,"_39":153,"_13":138,"_34":147,"_36":-5,"_24":25,"_140":-5,"_27":154},{"_44":142,"_32":143,"_30":144,"_134":-5,"_42":43,"_41":145,"_136":59,"_39":146,"_13":138,"_34":147,"_36":-5,"_24":25,"_140":-5,"_27":148},{"_44":131,"_32":132,"_30":133,"_134":-5,"_42":43,"_41":135,"_136":59,"_39":137,"_13":138,"_34":20,"_36":139,"_24":25,"_140":-5,"_27":141},"9f82ceaa-3b41-11f0-a481-9e149126039e","README.md","9f82cf68-3b41-11f0-a481-9e149126039e","parentId",2,"latest",["D",1748381348349],0,"# iOS Share Sheet Backend\n\nA secure backend system for iOS share sheet shortcuts with WebAuthn authentication and content management.\n\n## Features\n\n- **WebAuthn Authentication**: Secure passwordless authentication\n- **iOS Share Sheet Integration**: Accept text, images, and web URLs from iOS shortcuts\n- **User Content Management**: Timestamped content storage per user\n- **Bearer Token API**: Secure API access for shortcuts\n- **Admin Interface**: User and content management\n- **Setup Workflow**: Guided shortcut configuration\n\n## Project Structure\n\n```\n├── backend/\n│ ├── database/\n│ │ ├── migrations.ts # Database schema\n│ │ └── queries.ts # Database operations\n│ ├── routes/\n│ │ ├── auth.ts # WebAuthn authentication\n│ │ ├── content.ts # Content management\n│ │ ├── admin.ts # Admin operations\n│ │ └── static.ts # Static file serving\n│ └── index.ts # Main entry point\n├── frontend/\n│ ├── components/\n│ │ ├── App.tsx # Main application\n│ │ ├── Auth.tsx # Authentication UI\n│ │ ├── Dashboard.tsx # User dashboard\n│ │ ├── Admin.tsx # Admin interface\n│ │ └── Setup.tsx # Shortcut setup guide\n│ ├── index.html # Main HTML template\n│ └── index.tsx # Frontend entry point\n├── shared/\n│ └── types.ts # Shared TypeScript types\n└── README.md\n```\n\n## API Endpoints\n\n### Authentication\n- `POST /api/auth/register-start` - Start WebAuthn registration\n- `POST /api/auth/register-finish` - Complete WebAuthn registration\n- `POST /api/auth/login-start` - Start WebAuthn login\n- `POST /api/auth/login-finish` - Complete WebAuthn login\n- `POST /api/auth/token` - Generate bearer token for shortcuts\n\n### Content Management\n- `POST /api/content` - Add content via shortcut (requires bearer token)\n- `GET /api/content` - Get user's content (requires authentication)\n- `DELETE /api/content/:id` - Delete content item\n\n### Admin (requires admin role)\n- `GET /api/admin/users` - List all users\n- `GET /api/admin/content` - List all content\n- `POST /api/admin/users/:id/admin` - Grant admin privileges\n\n## iOS Shortcut Setup\n\n1. **Create Account**: Visit the web interface and register with WebAuthn\n2. **Generate Token**: Create a bearer token for your shortcuts\n3. **Install Shortcut**: Use the provided shortcut template\n4. **Configure Token**: Add your bearer token to the shortcut\n5. **Test**: Share content from any iOS app\n\n## Environment Variables\n\n- `ADMIN_EMAIL` - Email address for the initial admin user\n\n## Getting Started\n\n1. Deploy this val to Val Town\n2. Visit the web interface to create your account\n3. Follow the shortcut setup guide\n4. Start sharing content from iOS!","label",[132],"a6bea9dc-3b41-11f0-a82f-9e149126039e","shared","e14df16c-f36f-46c9-81bc-79a03f8bee4c",3,["D",1748381360485],"directory",[143],"0b00506c-3b42-11f0-b707-9e149126039e","frontend","fe96b55a-614e-4b82-8902-ab9ff4783409",11,["D",1748381528685],[150],"adab67da-3b41-11f0-a9f9-9e149126039e","backend","862c7c3e-9df6-445a-bb70-1f8c05597676",["D",1748381372102],[156],"pulls","branches",1,"forks","envVars",{"_168":162,"_170":138},"connections",{"_168":138,"_169":138},"count","unfilledCount","emptyCount",{"_44":155,"_32":156,"_30":157,"_134":-5,"_42":43,"_41":63,"_136":59,"_39":337,"_13":138,"_34":147,"_36":-5,"_24":25,"_140":-5,"_194":338,"_27":339},{"_44":333,"_32":325,"_30":319,"_134":157,"_42":43,"_41":63,"_136":59,"_39":334,"_13":138,"_34":147,"_36":-5,"_24":25,"_140":-5,"_194":335,"_27":336},{"_44":326,"_32":327,"_30":328,"_134":319,"_42":43,"_41":63,"_136":59,"_39":329,"_13":138,"_34":35,"_36":330,"_24":25,"_140":-5,"_194":331,"_27":332},{"_44":316,"_32":317,"_30":318,"_134":319,"_42":43,"_41":320,"_136":25,"_39":321,"_13":162,"_34":35,"_36":322,"_24":25,"_140":-5,"_194":323,"_27":324},{"_44":311,"_32":290,"_30":284,"_134":157,"_42":43,"_41":312,"_136":59,"_39":313,"_13":138,"_34":147,"_36":-5,"_24":25,"_140":-5,"_194":314,"_27":315},{"_44":303,"_32":304,"_30":305,"_134":284,"_42":43,"_41":306,"_136":25,"_39":307,"_13":138,"_34":35,"_36":308,"_24":25,"_140":-5,"_194":309,"_27":310},{"_44":295,"_32":296,"_30":297,"_134":284,"_42":43,"_41":298,"_136":59,"_39":299,"_13":135,"_34":35,"_36":300,"_24":25,"_140":-5,"_194":301,"_27":302},{"_44":291,"_32":33,"_30":31,"_134":284,"_42":43,"_41":14,"_136":25,"_39":292,"_13":162,"_34":35,"_36":38,"_24":25,"_140":-5,"_194":293,"_27":294},{"_44":281,"_32":282,"_30":283,"_134":284,"_42":43,"_41":285,"_136":25,"_39":286,"_13":162,"_34":35,"_36":287,"_24":25,"_140":-5,"_194":288,"_27":289},{"_44":272,"_32":273,"_30":57,"_134":157,"_42":43,"_41":274,"_136":25,"_39":275,"_13":162,"_34":276,"_36":277,"_24":25,"_140":278,"_194":279,"_27":280},{"_44":149,"_32":150,"_30":151,"_134":-5,"_42":43,"_41":152,"_136":59,"_39":269,"_13":138,"_34":147,"_36":-5,"_24":25,"_140":-5,"_194":270,"_27":271},{"_44":264,"_32":231,"_30":225,"_134":151,"_42":43,"_41":265,"_136":59,"_39":266,"_13":138,"_34":147,"_36":-5,"_24":25,"_140":-5,"_194":267,"_27":268},{"_44":256,"_32":257,"_30":258,"_134":225,"_42":43,"_41":259,"_136":59,"_39":260,"_13":138,"_34":35,"_36":261,"_24":25,"_140":-5,"_194":262,"_27":263},{"_44":248,"_32":249,"_30":250,"_134":225,"_42":43,"_41":251,"_136":59,"_39":252,"_13":145,"_34":35,"_36":253,"_24":25,"_140":-5,"_194":254,"_27":255},{"_44":240,"_32":241,"_30":242,"_134":225,"_42":43,"_41":243,"_136":25,"_39":244,"_13":138,"_34":35,"_36":245,"_24":25,"_140":-5,"_194":246,"_27":247},{"_44":232,"_32":233,"_30":234,"_134":225,"_42":43,"_41":235,"_136":59,"_39":236,"_13":138,"_34":35,"_36":237,"_24":25,"_140":-5,"_194":238,"_27":239},{"_44":222,"_32":223,"_30":224,"_134":225,"_42":43,"_41":226,"_136":59,"_39":227,"_13":138,"_34":35,"_36":228,"_24":25,"_140":-5,"_194":229,"_27":230},{"_44":215,"_32":216,"_30":217,"_134":151,"_42":43,"_41":152,"_136":59,"_39":218,"_13":138,"_34":20,"_36":219,"_24":25,"_140":-5,"_194":220,"_27":221},{"_44":207,"_32":208,"_30":209,"_134":151,"_42":43,"_41":210,"_136":59,"_39":211,"_13":138,"_34":35,"_36":212,"_24":25,"_140":-5,"_194":213,"_27":214},{"_44":142,"_32":143,"_30":144,"_134":-5,"_42":43,"_41":145,"_136":59,"_39":204,"_13":138,"_34":147,"_36":-5,"_24":25,"_140":-5,"_194":205,"_27":206},{"_44":197,"_32":198,"_30":199,"_134":144,"_42":43,"_41":145,"_136":59,"_39":200,"_13":138,"_34":35,"_36":201,"_24":25,"_140":-5,"_194":202,"_27":203},{"_44":131,"_32":132,"_30":133,"_134":-5,"_42":43,"_41":135,"_136":59,"_39":193,"_13":138,"_34":20,"_36":139,"_24":25,"_140":-5,"_194":195,"_27":196},["D",1748381348349],"children",[],[132],"a6be8c40-3b41-11f0-a82f-9e149126039e","types.ts","a6be8cea-3b41-11f0-a82f-9e149126039e",["D",1748381360485],"// Shared TypeScript types for the iOS Share Sheet Backend\n\nexport interface User {\n id: string;\n email: string;\n name: string;\n isAdmin: boolean;\n createdAt: string;\n lastLoginAt?: string;\n}\n\nexport interface ContentItem {\n id: string;\n userId: string;\n type: 'text' | 'image' | 'url';\n content: string;\n title?: string;\n metadata?: {\n url?: string;\n imageSize?: number;\n source?: string;\n };\n createdAt: string;\n}\n\nexport interface BearerToken {\n id: string;\n userId: string;\n token: string;\n name: string;\n lastUsedAt?: string;\n createdAt: string;\n}\n\nexport interface WebAuthnCredential {\n id: string;\n userId: string;\n credentialId: string;\n publicKey: string;\n counter: number;\n createdAt: string;\n}\n\n// API Request/Response types\nexport interface RegisterStartRequest {\n email: string;\n name: string;\n}\n\nexport interface RegisterStartResponse {\n challenge: string;\n user: {\n id: string;\n name: string;\n displayName: string;\n };\n rp: {\n name: string;\n id: string;\n };\n pubKeyCredParams: Array<{\n type: string;\n alg: number;\n }>;\n authenticatorSelection: {\n authenticatorAttachment?: string;\n userVerification: string;\n };\n timeout: number;\n attestation: string;\n}\n\nexport interface RegisterFinishRequest {\n email: string;\n credential: {\n id: string;\n rawId: string;\n response: {\n attestationObject: string;\n clientDataJSON: string;\n };\n type: string;\n };\n}\n\nexport interface LoginStartRequest {\n email: string;\n}\n\nexport interface LoginStartResponse {\n challenge: string;\n allowCredentials: Array<{\n id: string;\n type: string;\n }>;\n timeout: number;\n userVerification: string;\n}\n\nexport interface LoginFinishRequest {\n email: string;\n credential: {\n id: string;\n rawId: string;\n response: {\n authenticatorData: string;\n clientDataJSON: string;\n signature: string;\n userHandle?: string;\n };\n type: string;\n };\n}\n\nexport interface AuthResponse {\n success: boolean;\n user?: User;\n token?: string;\n error?: string;\n}\n\nexport interface ContentRequest {\n type: 'text' | 'image' | 'url';\n content: string;\n title?: string;\n metadata?: {\n url?: string;\n source?: string;\n };\n}\n\nexport interface TokenCreateRequest {\n name: string;\n}\n\nexport interface TokenResponse {\n id: string;\n name: string;\n token: string;\n createdAt: string;\n}",[],[143,198],["D",1748381360485],[191],[143],"0e525a6c-3b42-11f0-a3fc-9e149126039e","index.tsx","0e525b3e-3b42-11f0-a3fc-9e149126039e",12,["D",1748381534259],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React from \"react\";\nimport { createRoot } from \"react-dom/client\";\nimport { App } from \"./components/App.tsx\";\n\nconst container = document.getElementById(\"root\");\nif (!container) throw new Error(\"Root element not found\");\n\nconst root = createRoot(container);\nroot.render();",[],[150,208],"0b002c90-3b42-11f0-b707-9e149126039e","index.html","0b002d44-3b42-11f0-b707-9e149126039e",["D",1748381528685],"\n\n\n \n \n iOS Share Sheet Backend\n \n \n \n\n\n

\n \n \n \n \n \n \n\n",[],[150,216],"545f7e52-3b44-11f0-94ef-9e149126039e","Setup.tsx","545f7f06-3b44-11f0-94ef-9e149126039e","3654f24d-62e7-4539-97e9-eeda1d019de8",18,["D",1748382510780],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"react\";\n\ninterface User {\n id: string;\n email: string;\n name: string;\n isAdmin: boolean;\n}\n\ninterface BearerToken {\n id: string;\n name: string;\n token: string;\n createdAt: string;\n}\n\ninterface SetupProps {\n user: User;\n}\n\nexport function Setup({ user }: SetupProps) {\n const [tokens, setTokens] = useState([]);\n const [selectedToken, setSelectedToken] = useState('');\n const [loading, setLoading] = useState(true);\n const [currentStep, setCurrentStep] = useState(1);\n\n useEffect(() => {\n loadTokens();\n }, []);\n\n const loadTokens = async () => {\n try {\n const response = await fetch('/api/auth/tokens');\n if (response.ok) {\n const data = await response.json();\n setTokens(data.tokens || []);\n if (data.tokens && data.tokens.length > 0) {\n setSelectedToken(data.tokens[0].id);\n }\n }\n } catch (error) {\n console.error('Failed to load tokens:', error);\n } finally {\n setLoading(false);\n }\n };\n\n const createToken = async () => {\n try {\n const response = await fetch('/api/auth/tokens', {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ name: 'iOS Shortcut Token' }),\n });\n\n if (response.ok) {\n const data = await response.json();\n const newToken = { ...data, token: data.token };\n setTokens([...tokens, newToken]);\n setSelectedToken(newToken.id);\n return newToken.token;\n }\n } catch (error) {\n console.error('Token creation error:', error);\n }\n return null;\n };\n\n const copyToClipboard = (text: string) => {\n navigator.clipboard.writeText(text).then(() => {\n alert('Copied to clipboard!');\n });\n };\n\n const getSelectedTokenValue = () => {\n const token = tokens.find(t => t.id === selectedToken);\n return token?.token || '';\n };\n\n const getShortcutURL = () => {\n const baseURL = window.location.origin;\n return `https://www.icloud.com/shortcuts/your-shortcut-id`;\n };\n\n const getShortcutCode = () => {\n const baseURL = window.location.origin;\n const token = getSelectedTokenValue();\n \n return `// iOS Shortcut Configuration\n// 1. Get input from Share Sheet\n// 2. Determine content type\n// 3. Send to backend\n\nconst content = getSharedContent();\nconst contentType = determineContentType(content);\n\nconst payload = {\n type: contentType,\n content: content,\n title: getTitle(),\n metadata: {\n source: \"iOS Share Sheet\",\n timestamp: new Date().toISOString()\n }\n};\n\nconst response = await fetch(\"${baseURL}/api/content\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": \"Bearer ${token}\"\n },\n body: JSON.stringify(payload)\n});\n\nif (response.ok) {\n showNotification(\"Content saved successfully!\");\n} else {\n showNotification(\"Failed to save content\");\n}`;\n };\n\n if (loading) {\n return (\n

📱

Loading setup guide...

\n );\n }\n\n return (\n

\n {/* Header */}\n

📱 iOS Shortcut Setup

Configure your iOS device to share content

\n window.location.href = '/'}\n className=\"bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n 🏠 Dashboard\n \n

\n\n

\n {/* Progress Steps */}\n

\n {[1, 2, 3, 4].map((step) => (\n

\n = step\n ? 'bg-blue-500 text-white'\n : 'bg-gray-200 text-gray-600'\n }`}\n >\n {step}\n

\n {step < 4 && (\n step ? 'bg-blue-500' : 'bg-gray-200'\n }`}\n />\n )}\n

\n ))}\n

\n Step {currentStep} of 4: {\n currentStep === 1 ? 'Get API Token' :\n currentStep === 2 ? 'Download Shortcut' :\n currentStep === 3 ? 'Configure Token' :\n 'Test & Use'\n }\n

\n\n {/* Step 1: API Token */}\n {currentStep === 1 && (\n

🔑 Step 1: Get Your API Token

\n You need an API token to authenticate your iOS shortcuts with this backend.\n

\n\n {tokens.length === 0 ? (\n

No API tokens found. Create one to continue.

\n {\n const token = await createToken();\n if (token) {\n setCurrentStep(2);\n }\n }}\n className=\"bg-blue-500 text-white px-6 py-3 rounded-lg hover:bg-blue-600 transition-colors\"\n >\n ➕ Create API Token\n \n

\n ) : (\n

\n \n Select an existing token:\n \n setSelectedToken(e.target.value)}\n className=\"w-full px-3 py-2 border border-gray-300 rounded-md focus:outline-none focus:ring-blue-500 focus:border-blue-500\"\n >\n {tokens.map((token) => (\n \n ))}\n \n

\n\n

\n setCurrentStep(2)}\n className=\"bg-blue-500 text-white px-6 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n Use Selected Token →\n \n {\n const token = await createToken();\n if (token) {\n setCurrentStep(2);\n }\n }}\n className=\"bg-green-500 text-white px-6 py-2 rounded hover:bg-green-600 transition-colors\"\n >\n ➕ Create New Token\n \n

\n )}\n

\n )}\n\n {/* Step 2: Download Shortcut */}\n {currentStep === 2 && (\n

📥 Step 2: Download the iOS Shortcut

\n Download and install the pre-configured iOS shortcut that will send content to your backend.\n

\n\n

📱 Shortcut Features:

\n ✅\n Share text from any app\n
\n ✅\n Share URLs and web pages\n
\n ✅\n Share images and photos\n
\n ✅\n Automatic content type detection\n
\n ✅\n Success/error notifications\n

\n\n

\n \n 📥 Download iOS Shortcut\n \n

\n This will open the Shortcuts app on your iOS device\n

\n\n

\n setCurrentStep(1)}\n className=\"bg-gray-500 text-white px-6 py-2 rounded hover:bg-gray-600 transition-colors\"\n >\n ← Back\n \n setCurrentStep(3)}\n className=\"bg-blue-500 text-white px-6 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n Next: Configure Token →\n \n

\n )}\n\n {/* Step 3: Configure Token */}\n {currentStep === 3 && (\n

⚙️ Step 3: Configure Your API Token

\n Add your API token to the shortcut so it can authenticate with your backend.\n

\n\n

\n \n Your API Token:\n \n

\n \n copyToClipboard(getSelectedTokenValue())}\n className=\"bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n 📋 Copy\n \n

\n\n

📝 Configuration Steps:

Open the downloaded shortcut in the Shortcuts app
Tap \"Edit\" to modify the shortcut
Find the \"Text\" action that contains the API token placeholder
Replace the placeholder with your actual API token (copied above)
Verify the backend URL is correct: {window.location.origin}
Save the shortcut

\n\n

🔧 Technical Details:

Backend URL: {window.location.origin}/api/content

Method: POST

Headers: Authorization: Bearer [your-token]

Content-Type: application/json

\n\n

\n setCurrentStep(2)}\n className=\"bg-gray-500 text-white px-6 py-2 rounded hover:bg-gray-600 transition-colors\"\n >\n ← Back\n \n setCurrentStep(4)}\n className=\"bg-blue-500 text-white px-6 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n Next: Test & Use →\n \n

\n )}\n\n {/* Step 4: Test & Use */}\n {currentStep === 4 && (\n

🎉 Step 4: Test & Start Using!

\n Your iOS shortcut is now configured! Here's how to test it and start sharing content.\n

\n\n

✅ Testing Your Shortcut:

Open any app with shareable content (Safari, Photos, Notes, etc.)
Tap the Share button
Find and tap your new shortcut in the share sheet
Wait for the success notification
Check your dashboard to see the shared content

\n\n

📱 Supported Content Types:

📝

Text

Notes, messages, selected text

🔗

URLs

Web pages, links, bookmarks

🖼️

Images

Photos, screenshots, pictures

\n\n

🔧 Troubleshooting:

\n Shortcut not appearing in share sheet:\n

Make sure you've added the shortcut to your library and it's enabled for sharing.

\n Authentication errors:\n

Double-check that your API token is correctly pasted in the shortcut.

\n Content not appearing:\n

Refresh your dashboard and check that the shortcut completed successfully.

\n\n

\n window.location.href = '/'}\n className=\"bg-blue-500 text-white px-8 py-3 rounded-lg hover:bg-blue-600 transition-colors text-lg font-medium\"\n >\n 🏠 Go to Dashboard\n \n

\n Start sharing content from your iOS device!\n

\n\n

\n setCurrentStep(3)}\n className=\"bg-gray-500 text-white px-6 py-2 rounded hover:bg-gray-600 transition-colors\"\n >\n ← Back\n \n

\n )}\n\n {/* Quick Actions */}\n

🚀 Quick Actions

\n window.location.href = '/'}\n className=\"p-4 border border-gray-200 rounded-lg hover:bg-gray-50 transition-colors text-center\"\n >\n

📊

View Dashboard

See your shared content

\n \n copyToClipboard(getSelectedTokenValue())}\n className=\"p-4 border border-gray-200 rounded-lg hover:bg-gray-50 transition-colors text-center\"\n >\n

🔑

Copy API Token

For shortcut configuration

\n \n copyToClipboard(window.location.origin + '/api/content')}\n className=\"p-4 border border-gray-200 rounded-lg hover:bg-gray-50 transition-colors text-center\"\n >\n

🌐

Copy API URL

Backend endpoint

\n \n

\n \n \n );\n}",[],[150,231,223],"components","fe635d66-3b43-11f0-8c13-9e149126039e","Dashboard.tsx","fe635e2e-3b43-11f0-8c13-9e149126039e",16,["D",1748382366519],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"react\";\n\ninterface User {\n id: string;\n email: string;\n name: string;\n isAdmin: boolean;\n}\n\ninterface ContentItem {\n id: string;\n type: 'text' | 'image' | 'url';\n content: string;\n title?: string;\n metadata?: any;\n createdAt: string;\n}\n\ninterface BearerToken {\n id: string;\n name: string;\n lastUsedAt?: string;\n createdAt: string;\n}\n\ninterface DashboardProps {\n user: User;\n}\n\nexport function Dashboard({ user }: DashboardProps) {\n const [content, setContent] = useState([]);\n const [tokens, setTokens] = useState([]);\n const [loading, setLoading] = useState(true);\n const [activeTab, setActiveTab] = useState<'content' | 'tokens'>('content');\n const [showTokenForm, setShowTokenForm] = useState(false);\n const [newTokenName, setNewTokenName] = useState('');\n const [createdToken, setCreatedToken] = useState(null);\n\n useEffect(() => {\n loadData();\n }, []);\n\n const loadData = async () => {\n try {\n setLoading(true);\n \n // Load content and tokens in parallel\n const [contentResponse, tokensResponse] = await Promise.all([\n fetch('/api/content'),\n fetch('/api/auth/tokens')\n ]);\n\n if (contentResponse.ok) {\n const contentData = await contentResponse.json();\n setContent(contentData.items || []);\n }\n\n if (tokensResponse.ok) {\n const tokensData = await tokensResponse.json();\n setTokens(tokensData.tokens || []);\n }\n } catch (error) {\n console.error('Failed to load dashboard data:', error);\n } finally {\n setLoading(false);\n }\n };\n\n const deleteContent = async (id: string) => {\n if (!confirm('Are you sure you want to delete this content?')) return;\n\n try {\n const response = await fetch(`/api/content/${id}`, {\n method: 'DELETE',\n });\n\n if (response.ok) {\n setContent(content.filter(item => item.id !== id));\n } else {\n alert('Failed to delete content');\n }\n } catch (error) {\n console.error('Delete error:', error);\n alert('Failed to delete content');\n }\n };\n\n const createToken = async (e: React.FormEvent) => {\n e.preventDefault();\n if (!newTokenName.trim()) return;\n\n try {\n const response = await fetch('/api/auth/tokens', {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({ name: newTokenName.trim() }),\n });\n\n if (response.ok) {\n const data = await response.json();\n setCreatedToken(data.token);\n setNewTokenName('');\n loadData(); // Refresh tokens list\n } else {\n const errorData = await response.json();\n alert(errorData.error || 'Failed to create token');\n }\n } catch (error) {\n console.error('Token creation error:', error);\n alert('Failed to create token');\n }\n };\n\n const deleteToken = async (id: string) => {\n if (!confirm('Are you sure you want to delete this token? Any shortcuts using it will stop working.')) return;\n\n try {\n const response = await fetch(`/api/auth/tokens/${id}`, {\n method: 'DELETE',\n });\n\n if (response.ok) {\n setTokens(tokens.filter(token => token.id !== id));\n } else {\n alert('Failed to delete token');\n }\n } catch (error) {\n console.error('Token deletion error:', error);\n alert('Failed to delete token');\n }\n };\n\n const formatDate = (dateString: string) => {\n return new Date(dateString).toLocaleString();\n };\n\n const copyToClipboard = (text: string) => {\n navigator.clipboard.writeText(text).then(() => {\n alert('Copied to clipboard!');\n });\n };\n\n if (loading) {\n return (\n

📊

Loading your dashboard...

\n );\n }\n\n return (\n

\n {/* Header */}\n

📊 Dashboard

Welcome back, {user.name}

\n window.location.href = '/setup'}\n className=\"bg-green-500 text-white px-4 py-2 rounded hover:bg-green-600 transition-colors\"\n >\n 📱 Setup Guide\n \n {user.isAdmin && (\n window.location.href = '/admin'}\n className=\"bg-yellow-500 text-white px-4 py-2 rounded hover:bg-yellow-600 transition-colors\"\n >\n 🔧 Admin Panel\n \n )}\n {\n fetch('/api/auth/logout', { method: 'POST' })\n .then(() => window.location.href = '/');\n }}\n className=\"bg-red-500 text-white px-4 py-2 rounded hover:bg-red-600 transition-colors\"\n >\n Logout\n \n

\n\n

\n {/* Tab Navigation */}\n

\n setActiveTab('content')}\n className={`py-2 px-1 border-b-2 font-medium text-sm ${\n activeTab === 'content'\n ? 'border-blue-500 text-blue-600'\n : 'border-transparent text-gray-500 hover:text-gray-700 hover:border-gray-300'\n }`}\n >\n 📋 Content ({content.length})\n \n setActiveTab('tokens')}\n className={`py-2 px-1 border-b-2 font-medium text-sm ${\n activeTab === 'tokens'\n ? 'border-blue-500 text-blue-600'\n : 'border-transparent text-gray-500 hover:text-gray-700 hover:border-gray-300'\n }`}\n >\n 🔑 API Tokens ({tokens.length})\n \n

\n\n {/* Content Tab */}\n {activeTab === 'content' && (\n

📋 Your Shared Content

\n {content.length === 0 ? (\n

📭 No content shared yet

\n Use the iOS Share Sheet to send content to this backend!\n

\n window.location.href = '/setup'}\n className=\"bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n 📱 Setup iOS Shortcut\n \n

\n ) : (\n

\n {content.map((item) => (\n \n

\n \n {formatDate(item.createdAt)}\n \n

\n \n {item.type}\n \n deleteContent(item.id)}\n className=\"text-red-500 hover:text-red-700 text-sm\"\n >\n 🗑️\n \n

\n {item.type === 'url' && (\n \n 🔗 {item.content}\n \n )}\n {item.type === 'text' && (\n

📝 {item.content}

\n )}\n {item.type === 'image' && (\n

🖼️ Image: {item.title || 'Untitled'}

\n {item.content.startsWith('data:image/') ? (\n {item.title

\n ) : (\n

Image URL: {item.content}

\n )}\n

\n ))}\n

\n )}\n

\n )}\n\n {/* Tokens Tab */}\n {activeTab === 'tokens' && (\n

🔑 API Tokens

\n setShowTokenForm(true)}\n className=\"bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n ➕ Create Token\n \n

\n\n {/* Token Creation Form */}\n {showTokenForm && (\n

\n \n Token Name\n \n setNewTokenName(e.target.value)}\n placeholder=\"e.g., iPhone Shortcut, iPad Share\"\n className=\"w-full px-3 py-2 border border-gray-300 rounded-md focus:outline-none focus:ring-blue-500 focus:border-blue-500\"\n required\n />\n

\n \n Create Token\n \n {\n setShowTokenForm(false);\n setNewTokenName('');\n setCreatedToken(null);\n }}\n className=\"bg-gray-500 text-white px-4 py-2 rounded hover:bg-gray-600 transition-colors\"\n >\n Cancel\n \n

\n )}\n\n {/* New Token Display */}\n {createdToken && (\n

✅ Token Created!

\n Copy this token now - you won't be able to see it again:\n

\n {createdToken}\n

\n copyToClipboard(createdToken)}\n className=\"bg-green-500 text-white px-3 py-1 rounded text-sm hover:bg-green-600 transition-colors\"\n >\n 📋 Copy Token\n \n setCreatedToken(null)}\n className=\"bg-gray-500 text-white px-3 py-1 rounded text-sm hover:bg-gray-600 transition-colors\"\n >\n Done\n \n

\n )}\n\n {/* Tokens List */}\n {tokens.length === 0 ? (\n

🔑 No API tokens created yet

\n Create a token to use with iOS shortcuts for sharing content.\n

\n ) : (\n

\n {tokens.map((token) => (\n \n

{token.name}

\n Created: {formatDate(token.createdAt)}\n {token.lastUsedAt && (\n \n Last used: {formatDate(token.lastUsedAt)}\n \n )}\n

\n deleteToken(token.id)}\n className=\"text-red-500 hover:text-red-700 px-3 py-1 rounded\"\n >\n 🗑️ Delete\n \n

\n ))}\n

\n )}\n

\n \n )}\n \n \n );\n}",[],[150,231,233],"dbc3dcf4-3b43-11f0-92eb-9e149126039e","Auth.tsx","dbc3ddd0-3b43-11f0-92eb-9e149126039e",15,["D",1748382308428],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState } from \"react\";\n\ninterface AuthProps {\n mode: 'login' | 'register';\n onSuccess: () => void;\n}\n\nexport function Auth({ mode, onSuccess }: AuthProps) {\n const [email, setEmail] = useState('');\n const [name, setName] = useState('');\n const [loading, setLoading] = useState(false);\n const [error, setError] = useState('');\n const [step, setStep] = useState<'form' | 'webauthn'>('form');\n\n const isRegister = mode === 'register';\n\n const handleSubmit = async (e: React.FormEvent) => {\n e.preventDefault();\n setError('');\n setLoading(true);\n\n try {\n if (!email || (isRegister && !name)) {\n throw new Error(isRegister ? 'Email and name are required' : 'Email is required');\n }\n\n // Start WebAuthn flow\n const startEndpoint = isRegister ? '/api/auth/register-start' : '/api/auth/login-start';\n const startPayload = isRegister ? { email, name } : { email };\n\n const startResponse = await fetch(startEndpoint, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify(startPayload),\n });\n\n if (!startResponse.ok) {\n const errorData = await startResponse.json();\n throw new Error(errorData.error || 'Authentication failed');\n }\n\n const startData = await startResponse.json();\n setStep('webauthn');\n\n // Prepare WebAuthn options\n let credentialOptions;\n if (isRegister) {\n credentialOptions = {\n publicKey: {\n challenge: Uint8Array.from(atob(startData.challenge), c => c.charCodeAt(0)),\n rp: startData.rp,\n user: {\n id: Uint8Array.from(startData.user.id, c => c.charCodeAt(0)),\n name: startData.user.name,\n displayName: startData.user.displayName,\n },\n pubKeyCredParams: startData.pubKeyCredParams,\n authenticatorSelection: startData.authenticatorSelection,\n timeout: startData.timeout,\n attestation: startData.attestation,\n },\n };\n } else {\n credentialOptions = {\n publicKey: {\n challenge: Uint8Array.from(atob(startData.challenge), c => c.charCodeAt(0)),\n allowCredentials: startData.allowCredentials.map((cred: any) => ({\n id: Uint8Array.from(atob(cred.id), c => c.charCodeAt(0)),\n type: cred.type,\n })),\n timeout: startData.timeout,\n userVerification: startData.userVerification,\n },\n };\n }\n\n // Create or get credential\n let credential;\n if (isRegister) {\n credential = await navigator.credentials.create(credentialOptions);\n } else {\n credential = await navigator.credentials.get(credentialOptions);\n }\n\n if (!credential) {\n throw new Error('WebAuthn authentication was cancelled');\n }\n\n // Prepare credential for server\n const credentialForServer = {\n id: credential.id,\n rawId: btoa(String.fromCharCode(...new Uint8Array(credential.rawId))),\n response: isRegister ? {\n attestationObject: btoa(String.fromCharCode(...new Uint8Array((credential as any).response.attestationObject))),\n clientDataJSON: btoa(String.fromCharCode(...new Uint8Array(credential.response.clientDataJSON))),\n } : {\n authenticatorData: btoa(String.fromCharCode(...new Uint8Array((credential as any).response.authenticatorData))),\n clientDataJSON: btoa(String.fromCharCode(...new Uint8Array(credential.response.clientDataJSON))),\n signature: btoa(String.fromCharCode(...new Uint8Array((credential as any).response.signature))),\n userHandle: (credential as any).response.userHandle ? btoa(String.fromCharCode(...new Uint8Array((credential as any).response.userHandle))) : null,\n },\n type: credential.type,\n };\n\n // Finish authentication\n const finishEndpoint = isRegister ? '/api/auth/register-finish' : '/api/auth/login-finish';\n const finishResponse = await fetch(finishEndpoint, {\n method: 'POST',\n headers: { 'Content-Type': 'application/json' },\n body: JSON.stringify({\n email,\n credential: credentialForServer,\n }),\n });\n\n if (!finishResponse.ok) {\n const errorData = await finishResponse.json();\n throw new Error(errorData.error || 'Authentication failed');\n }\n\n // Success!\n onSuccess();\n } catch (error: any) {\n console.error('Authentication error:', error);\n setError(error.message || 'Authentication failed');\n setStep('form');\n } finally {\n setLoading(false);\n }\n };\n\n return (\n

🔐

\n {isRegister ? 'Create your account' : 'Sign in to your account'}\n

\n {isRegister ? 'Register with WebAuthn for secure passwordless authentication' : 'Use WebAuthn to sign in securely'}\n

\n\n

\n \n Email address\n \n setEmail(e.target.value)}\n className=\"mt-1 appearance-none relative block w-full px-3 py-2 border border-gray-300 placeholder-gray-500 text-gray-900 rounded-md focus:outline-none focus:ring-blue-500 focus:border-blue-500 focus:z-10 sm:text-sm\"\n placeholder=\"Enter your email\"\n disabled={loading}\n />\n

\n\n {isRegister && (\n

\n \n Full name\n \n setName(e.target.value)}\n className=\"mt-1 appearance-none relative block w-full px-3 py-2 border border-gray-300 placeholder-gray-500 text-gray-900 rounded-md focus:outline-none focus:ring-blue-500 focus:border-blue-500 focus:z-10 sm:text-sm\"\n placeholder=\"Enter your full name\"\n disabled={loading}\n />\n

\n )}\n

\n\n {error && (\n

⚠️

{error}

\n )}\n\n {step === 'webauthn' && (\n

🔐

\n Please complete the WebAuthn authentication using your device's biometric sensor or security key.\n

\n )}\n\n

\n \n {loading ? (\n \n

🔄

\n {step === 'webauthn' ? 'Authenticating...' : 'Processing...'}\n \n ) : (\n isRegister ? 'Create Account' : 'Sign In'\n )}\n \n

\n\n

\n window.location.href = isRegister ? '/login' : '/register'}\n className=\"text-blue-600 hover:text-blue-500 text-sm\"\n >\n {isRegister ? 'Already have an account? Sign in' : \"Don't have an account? Register\"}\n \n

\n\n

🛡️ About WebAuthn

\n WebAuthn provides secure, passwordless authentication using your device's built-in biometric sensors \n (Face ID, Touch ID, fingerprint) or external security keys. Your biometric data never leaves your device.\n

\n );\n}",[],[150,231,241],"8a98953a-3b44-11f0-8ee1-9e149126039e","App.tsx","6b1cc90c-3b43-11f0-92eb-9e149126039e",22,["D",1748382601748],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"react\";\nimport { Auth } from \"./Auth.tsx\";\nimport { Dashboard } from \"./Dashboard.tsx\";\nimport { Admin } from \"./Admin.tsx\";\nimport { Setup } from \"./Setup.tsx\";\n\ninterface User {\n id: string;\n email: string;\n name: string;\n isAdmin: boolean;\n}\n\ninterface InitialData {\n user: User | null;\n pageType: string;\n timestamp: string;\n}\n\ndeclare global {\n interface Window {\n __INITIAL_DATA__: InitialData;\n }\n}\n\nexport function App() {\n const [user, setUser] = useState(null);\n const [pageType, setPageType] = useState('app');\n const [loading, setLoading] = useState(true);\n\n useEffect(() => {\n // Get initial data injected by the server\n if (window.__INITIAL_DATA__) {\n setUser(window.__INITIAL_DATA__.user);\n setPageType(window.__INITIAL_DATA__.pageType || 'app');\n }\n setLoading(false);\n }, []);\n\n const handleAuthSuccess = () => {\n window.location.href = '/';\n };\n\n if (loading) {\n return (\n

📱

\n );\n }\n\n // Route based on page type\n switch (pageType) {\n case 'login':\n return ;\n \n case 'register':\n return ;\n \n case 'dashboard':\n if (!user) {\n window.location.href = '/login';\n return null;\n }\n return ;\n \n case 'admin':\n if (!user) {\n window.location.href = '/login';\n return null;\n }\n if (!user.isAdmin) {\n window.location.href = '/';\n return null;\n }\n return ;\n \n case 'setup':\n if (!user) {\n window.location.href = '/login';\n return null;\n }\n return ;\n \n default:\n // Main app page\n return user ? : ;\n }\n}\n\nfunction UnauthenticatedView() {\n return (\n

\n 📱 iOS Share Sheet Backend\n

\n window.location.href = '/login'}\n className=\"bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n Login\n \n window.location.href = '/register'}\n className=\"bg-green-500 text-white px-4 py-2 rounded hover:bg-green-600 transition-colors\"\n >\n Register\n \n

\n\n

\n Welcome to iOS Share Sheet Backend\n

📱➡️☁️

\n This backend receives and stores content shared from iOS devices\n using the Share Sheet functionality.\n

📤 Share Content

\n Use your iOS device's Share Sheet to send URLs, text, and images\n directly to this backend.\n

💾 Store & Access

\n All your shared content is securely stored and accessible\n through this web interface.\n

\n Please log in or register to start using the service.\n

\n window.location.href = '/login'}\n className=\"bg-blue-500 text-white px-6 py-3 rounded-lg hover:bg-blue-600 transition-colors font-medium\"\n >\n Login\n \n window.location.href = '/register'}\n className=\"bg-green-500 text-white px-6 py-3 rounded-lg hover:bg-green-600 transition-colors font-medium\"\n >\n Register\n \n

\n );\n}",[],[150,231,249],"265c88ba-3b44-11f0-863e-9e149126039e","Admin.tsx","265c896e-3b44-11f0-863e-9e149126039e",17,["D",1748382433585],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useState, useEffect } from \"react\";\n\ninterface User {\n id: string;\n email: string;\n name: string;\n isAdmin: boolean;\n createdAt: string;\n lastLoginAt?: string;\n}\n\ninterface ContentItem {\n id: string;\n userId: string;\n type: 'text' | 'image' | 'url';\n content: string;\n title?: string;\n createdAt: string;\n user?: User;\n}\n\ninterface AdminStats {\n totalUsers: number;\n adminUsers: number;\n totalContent: number;\n contentByType: {\n text: number;\n image: number;\n url: number;\n };\n recentUsers: User[];\n recentContent: ContentItem[];\n}\n\ninterface AdminProps {\n user: User;\n}\n\nexport function Admin({ user }: AdminProps) {\n const [stats, setStats] = useState(null);\n const [users, setUsers] = useState([]);\n const [content, setContent] = useState([]);\n const [loading, setLoading] = useState(true);\n const [activeTab, setActiveTab] = useState<'overview' | 'users' | 'content'>('overview');\n\n useEffect(() => {\n if (!user.isAdmin) {\n window.location.href = '/';\n return;\n }\n loadData();\n }, [user]);\n\n const loadData = async () => {\n try {\n setLoading(true);\n \n const [statsResponse, usersResponse, contentResponse] = await Promise.all([\n fetch('/api/admin/stats'),\n fetch('/api/admin/users'),\n fetch('/api/admin/content')\n ]);\n\n if (statsResponse.ok) {\n const statsData = await statsResponse.json();\n setStats(statsData.stats);\n }\n\n if (usersResponse.ok) {\n const usersData = await usersResponse.json();\n setUsers(usersData.users || []);\n }\n\n if (contentResponse.ok) {\n const contentData = await contentResponse.json();\n setContent(contentData.items || []);\n }\n } catch (error) {\n console.error('Failed to load admin data:', error);\n } finally {\n setLoading(false);\n }\n };\n\n const makeUserAdmin = async (userId: string) => {\n if (!confirm('Are you sure you want to grant admin privileges to this user?')) return;\n\n try {\n const response = await fetch(`/api/admin/users/${userId}/admin`, {\n method: 'POST',\n });\n\n if (response.ok) {\n loadData(); // Refresh data\n alert('Admin privileges granted successfully');\n } else {\n const errorData = await response.json();\n alert(errorData.error || 'Failed to grant admin privileges');\n }\n } catch (error) {\n console.error('Admin grant error:', error);\n alert('Failed to grant admin privileges');\n }\n };\n\n const deleteContent = async (contentId: string) => {\n if (!confirm('Are you sure you want to delete this content? This action cannot be undone.')) return;\n\n try {\n const response = await fetch(`/api/admin/content/${contentId}`, {\n method: 'DELETE',\n });\n\n if (response.ok) {\n setContent(content.filter(item => item.id !== contentId));\n if (stats) {\n setStats({\n ...stats,\n totalContent: stats.totalContent - 1,\n });\n }\n alert('Content deleted successfully');\n } else {\n const errorData = await response.json();\n alert(errorData.error || 'Failed to delete content');\n }\n } catch (error) {\n console.error('Content deletion error:', error);\n alert('Failed to delete content');\n }\n };\n\n const formatDate = (dateString: string) => {\n return new Date(dateString).toLocaleString();\n };\n\n if (!user.isAdmin) {\n return (\n

🚫

Access Denied

You don't have admin privileges.

\n );\n }\n\n if (loading) {\n return (\n

🔧

Loading admin panel...

\n );\n }\n\n return (\n

\n {/* Header */}\n

🔧 Admin Panel

System administration and management

\n window.location.href = '/'}\n className=\"bg-blue-500 text-white px-4 py-2 rounded hover:bg-blue-600 transition-colors\"\n >\n 🏠 Dashboard\n \n {\n fetch('/api/auth/logout', { method: 'POST' })\n .then(() => window.location.href = '/');\n }}\n className=\"bg-red-500 text-white px-4 py-2 rounded hover:bg-red-600 transition-colors\"\n >\n Logout\n \n

\n\n

\n {/* Tab Navigation */}\n

\n setActiveTab('overview')}\n className={`py-2 px-1 border-b-2 font-medium text-sm ${\n activeTab === 'overview'\n ? 'border-blue-500 text-blue-600'\n : 'border-transparent text-gray-500 hover:text-gray-700 hover:border-gray-300'\n }`}\n >\n 📊 Overview\n \n setActiveTab('users')}\n className={`py-2 px-1 border-b-2 font-medium text-sm ${\n activeTab === 'users'\n ? 'border-blue-500 text-blue-600'\n : 'border-transparent text-gray-500 hover:text-gray-700 hover:border-gray-300'\n }`}\n >\n 👥 Users ({users.length})\n \n setActiveTab('content')}\n className={`py-2 px-1 border-b-2 font-medium text-sm ${\n activeTab === 'content'\n ? 'border-blue-500 text-blue-600'\n : 'border-transparent text-gray-500 hover:text-gray-700 hover:border-gray-300'\n }`}\n >\n 📋 Content ({content.length})\n \n

\n\n {/* Overview Tab */}\n {activeTab === 'overview' && stats && (\n

\n {/* Stats Cards */}\n

👥

Total Users

{stats.totalUsers}

🔧

Admin Users

{stats.adminUsers}

📋

Total Content

{stats.totalContent}

📊

Content Types

\n 📝 {stats.contentByType.text} • 🖼️ {stats.contentByType.image} • 🔗 {stats.contentByType.url}\n

\n\n {/* Recent Activity */}\n

👥 Recent Users

\n {stats.recentUsers.map((user) => (\n

{user.name}

{user.email}

\n {user.isAdmin && (\n Admin\n )}\n

\n {formatDate(user.createdAt)}\n

\n ))}\n

\n\n

📋 Recent Content

\n {stats.recentContent.map((item) => (\n

\n \n {item.type}\n \n \n {formatDate(item.createdAt)}\n \n

\n {item.type === 'text' ? item.content : \n item.type === 'url' ? item.content :\n `Image: ${item.title || 'Untitled'}`}\n

\n ))}\n

\n )}\n\n {/* Users Tab */}\n {activeTab === 'users' && (\n

👥 User Management

\n \n \n \n \n \n \n \n \n \n \n \n {users.map((user) => (\n \n \n \n \n \n \n \n ))}\n \n

\n User\n	\n Role\n	\n Created\n	\n Last Login\n	\n Actions\n
\n \n {user.name} \n {user.email} \n \n	\n {user.isAdmin ? (\n \n Admin\n \n ) : (\n \n User\n \n )}\n	\n {formatDate(user.createdAt)}\n	\n {user.lastLoginAt ? formatDate(user.lastLoginAt) : 'Never'}\n	\n {!user.isAdmin && (\n makeUserAdmin(user.id)}\n className=\"text-yellow-600 hover:text-yellow-900\"\n >\n Make Admin\n \n )}\n

\n )}\n\n {/* Content Tab */}\n {activeTab === 'content' && (\n

📋 Content Management

\n {content.map((item) => (\n

\n \n {item.type}\n \n \n User: {item.user?.name || 'Unknown'}\n \n

\n \n {formatDate(item.createdAt)}\n \n deleteContent(item.id)}\n className=\"text-red-500 hover:text-red-700\"\n >\n 🗑️\n \n

\n {item.type === 'url' && (\n \n 🔗 {item.content}\n \n )}\n {item.type === 'text' && (\n

📝 {item.content}

\n )}\n {item.type === 'image' && (\n

🖼️ Image: {item.title || 'Untitled'}

\n {item.content.startsWith('data:image/') && (\n {item.title

\n )}\n

\n ))}\n

\n )}\n

\n );\n}",[],[150,231,257],"6b1cf53a-3b43-11f0-92eb-9e149126039e",14,["D",1748382119431],[183,184,185,186,187],[150,231],["D",1748381528685],[182,188,189],[150],"c0afed8c-3b42-11f0-a4bd-9e149126039e","index.ts",13,["D",1748381833503],"http","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { runMigrations } from \"./database/migrations.ts\";\nimport { auth } from \"./routes/auth.ts\";\nimport { content } from \"./routes/content.ts\";\nimport { admin } from \"./routes/admin.ts\";\nimport { staticRoutes } from \"./routes/static.ts\";\n\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err, c) => {\n throw err;\n});\n\n// Run database migrations on startup\nawait runMigrations();\n\n// API routes\napp.route('/api/auth', auth);\napp.route('/api/content', content);\napp.route('/api/admin', admin);\n\n// Static file serving (must be last)\napp.route('/', staticRoutes);\n\n// 404 handler\napp.notFound((c) => {\n return c.json({ error: 'Not found' }, 404);\n});\n\nexport default app.fetch; // This is the entry point for HTTP vals","protoshare",[],[156,273],"605dcdee-3b44-11f0-92eb-9e149126039e","static.ts","00347da2-3b42-11f0-ab50-9e149126039e","bae4d08b-752c-4808-9f83-72a24d0433d2",19,["D",1748382530897],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\nimport { getUserById } from \"../database/queries.ts\";\nimport { getCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\n\nconst staticRoutes = new Hono();\n\n// Serve frontend files\nstaticRoutes.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\nstaticRoutes.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n\n// Helper function to serve pages with initial data\nasync function servePage(c: any, pageType: string = 'app') {\n try {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n \n // Check if user is authenticated\n let user = null;\n const sessionToken = getCookie(c, 'session');\n if (sessionToken) {\n try {\n user = await getUserById(sessionToken);\n } catch (error) {\n // Invalid session, ignore\n }\n }\n \n // Inject initial data to avoid extra round-trips\n const initialData = {\n user,\n pageType,\n timestamp: new Date().toISOString(),\n };\n \n const dataScript = ``;\n \n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n } catch (error) {\n console.error('Static file serving error:', error);\n return c.text('Error loading page', 500);\n }\n}\n\n// Serve main index.html with initial data injection\nstaticRoutes.get(\"/\", async c => servePage(c, 'app'));\n\n// Authentication pages\nstaticRoutes.get(\"/login\", async c => servePage(c, 'login'));\nstaticRoutes.get(\"/register\", async c => servePage(c, 'register'));\n\n// Dashboard and admin pages (require authentication)\nstaticRoutes.get(\"/dashboard\", async c => {\n const sessionToken = getCookie(c, 'session');\n if (!sessionToken) {\n return new Response(null, { status: 302, headers: { Location: \"/login\" }});\n }\n return servePage(c, 'dashboard');\n});\n\nstaticRoutes.get(\"/admin\", async c => {\n const sessionToken = getCookie(c, 'session');\n if (!sessionToken) {\n return new Response(null, { status: 302, headers: { Location: \"/login\" }});\n }\n \n try {\n const user = await getUserById(sessionToken);\n if (!user || !user.isAdmin) {\n return new Response(null, { status: 302, headers: { Location: \"/\" }});\n }\n } catch (error) {\n return new Response(null, { status: 302, headers: { Location: \"/login\" }});\n }\n \n return servePage(c, 'admin');\n});\n\n// Setup page (require authentication)\nstaticRoutes.get(\"/setup\", async c => {\n const sessionToken = getCookie(c, 'session');\n if (!sessionToken) {\n return new Response(null, { status: 302, headers: { Location: \"/login\" }});\n }\n return servePage(c, 'setup');\n});\n\nexport { staticRoutes };",[],[156,290,282],"routes","a227116c-3b45-11f0-a10f-9e149126039e",["D",1748383070767],[],[156,290,33],"73fbefec-3b45-11f0-922d-9e149126039e","auth.ts","e3276e90-3b41-11f0-aec3-9e149126039e",25,["D",1748382993307],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { getCookie, setCookie, deleteCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport { \n createUser, \n getUserByEmail, \n getUserById,\n updateUserLastLogin,\n saveWebAuthnCredential,\n getWebAuthnCredentialsByUserId,\n getWebAuthnCredentialByCredentialId,\n updateWebAuthnCredentialCounter,\n saveChallenge,\n getChallenge,\n deleteChallenge,\n cleanupOldChallenges,\n createBearerToken,\n getBearerTokensByUserId,\n deleteBearerToken\n} from \"../database/queries.ts\";\nimport type { \n RegisterStartRequest, \n RegisterFinishRequest, \n LoginStartRequest, \n LoginFinishRequest,\n TokenCreateRequest\n} from \"../../shared/types.ts\";\n\nconst auth = new Hono();\n\n// Helper functions for WebAuthn\nfunction generateChallenge(): string {\n const array = new Uint8Array(32);\n crypto.getRandomValues(array);\n return btoa(String.fromCharCode(...array)).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n}\n\nfunction generateId(): string {\n return crypto.randomUUID();\n}\n\nfunction arrayBufferToBase64(buffer: ArrayBuffer): string {\n const bytes = new Uint8Array(buffer);\n let binary = '';\n for (let i = 0; i < bytes.byteLength; i++) {\n binary += String.fromCharCode(bytes[i]);\n }\n return btoa(binary);\n}\n\nfunction base64ToArrayBuffer(base64: string): ArrayBuffer {\n const binary = atob(base64.replace(/-/g, '+').replace(/_/g, '/'));\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) {\n bytes[i] = binary.charCodeAt(i);\n }\n return bytes.buffer;\n}\n\n// Simplified WebAuthn verification (in production, use a proper library)\nasync function verifyRegistration(credential: any, challenge: string): Promise<{ verified: boolean; credentialId: string; publicKey: string }> {\n try {\n const clientDataJSON = JSON.parse(new TextDecoder().decode(base64ToArrayBuffer(credential.response.clientDataJSON)));\n \n // Verify challenge\n if (clientDataJSON.challenge !== challenge) {\n return { verified: false, credentialId: '', publicKey: '' };\n }\n \n // Verify origin (in production, check against your domain)\n if (clientDataJSON.type !== 'webauthn.create') {\n return { verified: false, credentialId: '', publicKey: '' };\n }\n \n // Extract credential ID and public key (simplified)\n const credentialId = credential.id;\n const publicKey = credential.response.attestationObject; // Simplified - in production, parse CBOR\n \n return { verified: true, credentialId, publicKey };\n } catch (error) {\n console.error('Registration verification error:', error);\n return { verified: false, credentialId: '', publicKey: '' };\n }\n}\n\nasync function verifyAuthentication(credential: any, challenge: string, storedCredential: any): Promise {\n try {\n const clientDataJSON = JSON.parse(new TextDecoder().decode(base64ToArrayBuffer(credential.response.clientDataJSON)));\n \n // Verify challenge\n if (clientDataJSON.challenge !== challenge) {\n return false;\n }\n \n // Verify origin and type\n if (clientDataJSON.type !== 'webauthn.get') {\n return false;\n }\n \n // In production, verify the signature using the stored public key\n // For this demo, we'll do basic validation\n return credential.id === storedCredential.credentialId;\n } catch (error) {\n console.error('Authentication verification error:', error);\n return false;\n }\n}\n\n// Middleware to check authentication\nasync function requireAuth(c: any, next: any) {\n const sessionToken = getCookie(c, 'session');\n if (!sessionToken) {\n return c.json({ error: 'Authentication required' }, 401);\n }\n \n try {\n const userId = sessionToken; // Simplified - in production, verify JWT\n const user = await getUserById(userId);\n if (!user) {\n return c.json({ error: 'Invalid session' }, 401);\n }\n \n c.set('user', user);\n await next();\n } catch (error) {\n return c.json({ error: 'Invalid session' }, 401);\n }\n}\n\n// Clean up old challenges periodically\nsetInterval(cleanupOldChallenges, 5 * 60 * 1000); // Every 5 minutes\n\n// Registration endpoints\nauth.post('/register-start', async (c) => {\n try {\n const { email, name }: RegisterStartRequest = await c.req.json();\n \n if (!email || !name) {\n return c.json({ error: 'Email and name are required' }, 400);\n }\n \n // Check if user already exists\n const existingUser = await getUserByEmail(email);\n if (existingUser) {\n return c.json({ error: 'User already exists' }, 400);\n }\n \n const challenge = generateChallenge();\n const userId = generateId();\n \n // Store challenge and user data\n await saveChallenge(generateId(), email, challenge, 'registration', { userId, name });\n \n const response = {\n challenge,\n user: {\n id: userId,\n name,\n displayName: name,\n },\n rp: {\n name: 'iOS Share Sheet Backend',\n id: new URL(c.req.url).hostname,\n },\n pubKeyCredParams: [\n { type: 'public-key', alg: -7 }, // ES256\n { type: 'public-key', alg: -257 }, // RS256\n ],\n authenticatorSelection: {\n userVerification: 'preferred',\n },\n timeout: 60000,\n attestation: 'none',\n };\n \n return c.json(response);\n } catch (error) {\n console.error('Registration start error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\nauth.post('/register-finish', async (c) => {\n try {\n const { email, credential }: RegisterFinishRequest = await c.req.json();\n \n if (!email || !credential) {\n return c.json({ error: 'Email and credential are required' }, 400);\n }\n \n // Get stored challenge\n const challengeData = await getChallenge(email, 'registration');\n if (!challengeData) {\n return c.json({ error: 'Invalid or expired challenge' }, 400);\n }\n \n // Verify registration\n const verification = await verifyRegistration(credential, challengeData.challenge);\n if (!verification.verified) {\n return c.json({ error: 'Registration verification failed' }, 400);\n }\n \n // Create user\n const { userId, name } = challengeData.userData;\n const adminEmail = Deno.env.get('ADMIN_EMAIL');\n const isAdmin = email === adminEmail;\n \n await createUser({\n id: userId,\n email,\n name,\n isAdmin,\n createdAt: new Date().toISOString(),\n });\n \n // Save WebAuthn credential\n await saveWebAuthnCredential({\n id: generateId(),\n userId,\n credentialId: verification.credentialId,\n publicKey: verification.publicKey,\n counter: 0,\n createdAt: new Date().toISOString(),\n });\n \n // Clean up challenge\n await deleteChallenge(email, 'registration');\n \n // Set session cookie\n setCookie(c, 'session', userId, {\n httpOnly: true,\n secure: true,\n sameSite: 'Strict',\n maxAge: 30 * 24 * 60 * 60, // 30 days\n });\n \n const user = await getUserById(userId);\n return c.json({ success: true, user });\n } catch (error) {\n console.error('Registration finish error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Login endpoints\nauth.post('/login-start', async (c) => {\n try {\n const { email }: LoginStartRequest = await c.req.json();\n \n if (!email) {\n return c.json({ error: 'Email is required' }, 400);\n }\n \n // Check if user exists\n const user = await getUserByEmail(email);\n if (!user) {\n return c.json({ error: 'User not found. Please register first.' }, 404);\n }\n \n // Get user's credentials\n const credentials = await getWebAuthnCredentialsByUserId(user.id);\n if (credentials.length === 0) {\n return c.json({ error: 'No WebAuthn credentials found for this user. Please register again.' }, 400);\n }\n \n const challenge = generateChallenge();\n \n // Store challenge\n await saveChallenge(generateId(), email, challenge, 'authentication');\n \n const response = {\n challenge,\n allowCredentials: credentials.map(cred => ({\n id: cred.credentialId,\n type: 'public-key',\n })),\n timeout: 60000,\n userVerification: 'preferred',\n };\n \n return c.json(response);\n } catch (error) {\n console.error('Login start error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\nauth.post('/login-finish', async (c) => {\n try {\n const { email, credential }: LoginFinishRequest = await c.req.json();\n \n if (!email || !credential) {\n return c.json({ error: 'Email and credential are required' }, 400);\n }\n \n // Get stored challenge\n const challengeData = await getChallenge(email, 'authentication');\n if (!challengeData) {\n return c.json({ error: 'Invalid or expired challenge' }, 400);\n }\n \n // Get stored credential\n const storedCredential = await getWebAuthnCredentialByCredentialId(credential.id);\n if (!storedCredential) {\n return c.json({ error: 'Credential not found' }, 400);\n }\n \n // Verify authentication\n const verified = await verifyAuthentication(credential, challengeData.challenge, storedCredential);\n if (!verified) {\n return c.json({ error: 'Authentication verification failed' }, 400);\n }\n \n // Update credential counter (simplified)\n await updateWebAuthnCredentialCounter(credential.id, storedCredential.counter + 1);\n \n // Update last login\n await updateUserLastLogin(storedCredential.userId);\n \n // Clean up challenge\n await deleteChallenge(email, 'authentication');\n \n // Set session cookie\n setCookie(c, 'session', storedCredential.userId, {\n httpOnly: true,\n secure: true,\n sameSite: 'Strict',\n maxAge: 30 * 24 * 60 * 60, // 30 days\n });\n \n const user = await getUserById(storedCredential.userId);\n return c.json({ success: true, user });\n } catch (error) {\n console.error('Login finish error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Logout endpoint\nauth.post('/logout', (c) => {\n deleteCookie(c, 'session');\n return c.json({ success: true });\n});\n\n// Get current user\nauth.get('/me', requireAuth, async (c) => {\n const user = c.get('user');\n return c.json({ user });\n});\n\n// Bearer token management\nauth.get('/tokens', requireAuth, async (c) => {\n const user = c.get('user');\n const tokens = await getBearerTokensByUserId(user.id);\n \n // Don't return the actual token values for security\n const safeTokens = tokens.map(token => ({\n id: token.id,\n name: token.name,\n lastUsedAt: token.lastUsedAt,\n createdAt: token.createdAt,\n }));\n \n return c.json({ tokens: safeTokens });\n});\n\nauth.post('/tokens', requireAuth, async (c) => {\n try {\n const user = c.get('user');\n const { name }: TokenCreateRequest = await c.req.json();\n \n if (!name) {\n return c.json({ error: 'Token name is required' }, 400);\n }\n \n // Generate secure token\n const tokenBytes = new Uint8Array(32);\n crypto.getRandomValues(tokenBytes);\n const token = btoa(String.fromCharCode(...tokenBytes)).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n \n const bearerToken = {\n id: generateId(),\n userId: user.id,\n token,\n name,\n createdAt: new Date().toISOString(),\n };\n \n await createBearerToken(bearerToken);\n \n return c.json({\n id: bearerToken.id,\n name: bearerToken.name,\n token: bearerToken.token,\n createdAt: bearerToken.createdAt,\n });\n } catch (error) {\n console.error('Token creation error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Alias for README compatibility\nauth.post('/token', requireAuth, async (c) => {\n try {\n const user = c.get('user');\n const { name }: TokenCreateRequest = await c.req.json();\n \n if (!name) {\n return c.json({ error: 'Token name is required' }, 400);\n }\n \n // Generate secure token\n const tokenBytes = new Uint8Array(32);\n crypto.getRandomValues(tokenBytes);\n const token = btoa(String.fromCharCode(...tokenBytes)).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n \n const bearerToken = {\n id: generateId(),\n userId: user.id,\n token,\n name,\n createdAt: new Date().toISOString(),\n };\n \n await createBearerToken(bearerToken);\n \n return c.json({\n id: bearerToken.id,\n name: bearerToken.name,\n token: bearerToken.token,\n createdAt: bearerToken.createdAt,\n });\n } catch (error) {\n console.error('Token creation error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\nauth.delete('/tokens/:id', requireAuth, async (c) => {\n try {\n const user = c.get('user');\n const tokenId = c.req.param('id');\n \n await deleteBearerToken(tokenId, user.id);\n return c.json({ success: true });\n } catch (error) {\n console.error('Token deletion error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\nexport { auth, requireAuth };",[],[156,290,296],"f9207188-3b41-11f0-9794-9e149126039e","admin.ts","f9207232-3b41-11f0-9794-9e149126039e",8,["D",1748381498701],"import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { \n getAllUsers,\n getAllContentItems,\n makeUserAdmin,\n deleteContentItem,\n getContentItemById\n} from \"../database/queries.ts\";\nimport { requireAuth } from \"./auth.ts\";\n\nconst admin = new Hono();\n\n// Middleware to check admin privileges\nasync function requireAdmin(c: any, next: any) {\n const user = c.get('user');\n if (!user || !user.isAdmin) {\n return c.json({ error: 'Admin privileges required' }, 403);\n }\n await next();\n}\n\n// Get all users (admin only)\nadmin.get('/users', requireAuth, requireAdmin, async (c) => {\n try {\n const users = await getAllUsers();\n return c.json({ users });\n } catch (error) {\n console.error('Admin users retrieval error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Grant admin privileges to a user\nadmin.post('/users/:id/admin', requireAuth, requireAdmin, async (c) => {\n try {\n const userId = c.req.param('id');\n await makeUserAdmin(userId);\n return c.json({ success: true, message: 'Admin privileges granted' });\n } catch (error) {\n console.error('Admin grant error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Get all content items (admin only)\nadmin.get('/content', requireAuth, requireAdmin, async (c) => {\n try {\n const page = parseInt(c.req.query('page') || '1');\n const limit = parseInt(c.req.query('limit') || '50');\n const offset = (page - 1) * limit;\n \n const items = await getAllContentItems(limit, offset);\n \n return c.json({ \n items,\n page,\n limit,\n hasMore: items.length === limit\n });\n } catch (error) {\n console.error('Admin content retrieval error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Delete any content item (admin only)\nadmin.delete('/content/:id', requireAuth, requireAdmin, async (c) => {\n try {\n const itemId = c.req.param('id');\n \n // Get the content item to find the user ID\n const item = await getContentItemById(itemId);\n if (!item) {\n return c.json({ error: 'Content item not found' }, 404);\n }\n \n const deleted = await deleteContentItem(itemId, item.userId);\n if (!deleted) {\n return c.json({ error: 'Failed to delete content item' }, 500);\n }\n \n return c.json({ success: true });\n } catch (error) {\n console.error('Admin content deletion error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Get system statistics\nadmin.get('/stats', requireAuth, requireAdmin, async (c) => {\n try {\n const users = await getAllUsers();\n const allContent = await getAllContentItems(1000); // Get more for stats\n \n const stats = {\n totalUsers: users.length,\n adminUsers: users.filter(u => u.isAdmin).length,\n totalContent: allContent.length,\n contentByType: {\n text: allContent.filter(c => c.type === 'text').length,\n image: allContent.filter(c => c.type === 'image').length,\n url: allContent.filter(c => c.type === 'url').length,\n },\n recentUsers: users.slice(0, 5),\n recentContent: allContent.slice(0, 10),\n };\n \n return c.json({ stats });\n } catch (error) {\n console.error('Admin stats error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\nexport { admin };",[],[156,290,304],"e327994c-3b41-11f0-aec3-9e149126039e",6,["D",1748381461834],[176,177,178,179],[156,290],"990f9bd0-3b45-11f0-922d-9e149126039e","queries.ts","c46a6cc8-3b41-11f0-9368-9e149126039e","7f4b7679-7d2c-4e79-9c43-d56700dfb463",26,["D",1748383055509],"import { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nimport type { User, ContentItem, BearerToken, WebAuthnCredential } from \"../../shared/types.ts\";\n\n// User operations\nexport async function createUser(user: Omit): Promise {\n await sqlite.execute(\n `INSERT INTO users (id, email, name, isAdmin, createdAt) VALUES (?, ?, ?, ?, ?)`,\n [user.id, user.email, user.name, user.isAdmin, user.createdAt]\n );\n}\n\nexport async function getUserByEmail(email: string): Promise {\n try {\n const result = await sqlite.execute(`SELECT * FROM users WHERE email = ?`, [email]);\n if (result.length === 0) return null;\n \n const row = result[0];\n return {\n id: row.id as string,\n email: row.email as string,\n name: row.name as string,\n isAdmin: Boolean(row.isAdmin),\n createdAt: row.createdAt as string,\n lastLoginAt: row.lastLoginAt as string | undefined,\n };\n } catch (error) {\n console.error('getUserByEmail error:', error);\n throw error;\n }\n}\n\nexport async function getUserById(id: string): Promise {\n const result = await sqlite.execute(`SELECT * FROM users WHERE id = ?`, [id]);\n if (result.length === 0) return null;\n \n const row = result[0];\n return {\n id: row.id as string,\n email: row.email as string,\n name: row.name as string,\n isAdmin: Boolean(row.isAdmin),\n createdAt: row.createdAt as string,\n lastLoginAt: row.lastLoginAt as string | undefined,\n };\n}\n\nexport async function updateUserLastLogin(userId: string): Promise {\n await sqlite.execute(\n `UPDATE users SET lastLoginAt = ? WHERE id = ?`,\n [new Date().toISOString(), userId]\n );\n}\n\nexport async function makeUserAdmin(userId: string): Promise {\n await sqlite.execute(`UPDATE users SET isAdmin = TRUE WHERE id = ?`, [userId]);\n}\n\nexport async function getAllUsers(): Promise {\n const result = await sqlite.execute(`SELECT * FROM users ORDER BY createdAt DESC`);\n return result.map(row => ({\n id: row.id as string,\n email: row.email as string,\n name: row.name as string,\n isAdmin: Boolean(row.isAdmin),\n createdAt: row.createdAt as string,\n lastLoginAt: row.lastLoginAt as string | undefined,\n }));\n}\n\n// WebAuthn credential operations\nexport async function saveWebAuthnCredential(credential: WebAuthnCredential): Promise {\n await sqlite.execute(\n `INSERT INTO webauthn_credentials (id, userId, credentialId, publicKey, counter, createdAt) VALUES (?, ?, ?, ?, ?, ?)`,\n [credential.id, credential.userId, credential.credentialId, credential.publicKey, credential.counter, credential.createdAt]\n );\n}\n\nexport async function getWebAuthnCredentialsByUserId(userId: string): Promise {\n const result = await sqlite.execute(`SELECT * FROM webauthn_credentials WHERE userId = ?`, [userId]);\n return result.map(row => ({\n id: row.id as string,\n userId: row.userId as string,\n credentialId: row.credentialId as string,\n publicKey: row.publicKey as string,\n counter: row.counter as number,\n createdAt: row.createdAt as string,\n }));\n}\n\nexport async function getWebAuthnCredentialByCredentialId(credentialId: string): Promise {\n const result = await sqlite.execute(`SELECT * FROM webauthn_credentials WHERE credentialId = ?`, [credentialId]);\n if (result.length === 0) return null;\n \n const row = result[0];\n return {\n id: row.id as string,\n userId: row.userId as string,\n credentialId: row.credentialId as string,\n publicKey: row.publicKey as string,\n counter: row.counter as number,\n createdAt: row.createdAt as string,\n };\n}\n\nexport async function updateWebAuthnCredentialCounter(credentialId: string, counter: number): Promise {\n await sqlite.execute(\n `UPDATE webauthn_credentials SET counter = ? WHERE credentialId = ?`,\n [counter, credentialId]\n );\n}\n\n// Challenge operations (temporary storage for WebAuthn)\nexport async function saveChallenge(id: string, email: string, challenge: string, type: 'registration' | 'authentication', userData?: any): Promise {\n await sqlite.execute(\n `INSERT INTO webauthn_challenges (id, email, challenge, type, userData, createdAt) VALUES (?, ?, ?, ?, ?, ?)`,\n [id, email, challenge, type, userData ? JSON.stringify(userData) : null, new Date().toISOString()]\n );\n}\n\nexport async function getChallenge(email: string, type: 'registration' | 'authentication'): Promise<{ challenge: string; userData?: any } | null> {\n const result = await sqlite.execute(\n `SELECT challenge, userData FROM webauthn_challenges WHERE email = ? AND type = ? ORDER BY createdAt DESC LIMIT 1`,\n [email, type]\n );\n if (result.length === 0) return null;\n \n const row = result[0];\n return {\n challenge: row.challenge as string,\n userData: row.userData ? JSON.parse(row.userData as string) : undefined,\n };\n}\n\nexport async function deleteChallenge(email: string, type: 'registration' | 'authentication'): Promise {\n await sqlite.execute(\n `DELETE FROM webauthn_challenges WHERE email = ? AND type = ?`,\n [email, type]\n );\n}\n\n// Clean up old challenges (older than 5 minutes)\nexport async function cleanupOldChallenges(): Promise {\n const fiveMinutesAgo = new Date(Date.now() - 5 * 60 * 1000).toISOString();\n await sqlite.execute(\n `DELETE FROM webauthn_challenges WHERE createdAt < ?`,\n [fiveMinutesAgo]\n );\n}\n\n// Bearer token operations\nexport async function createBearerToken(token: BearerToken): Promise {\n await sqlite.execute(\n `INSERT INTO bearer_tokens (id, userId, token, name, createdAt) VALUES (?, ?, ?, ?, ?)`,\n [token.id, token.userId, token.token, token.name, token.createdAt]\n );\n}\n\nexport async function getBearerTokensByUserId(userId: string): Promise {\n const result = await sqlite.execute(`SELECT * FROM bearer_tokens WHERE userId = ? ORDER BY createdAt DESC`, [userId]);\n return result.map(row => ({\n id: row.id as string,\n userId: row.userId as string,\n token: row.token as string,\n name: row.name as string,\n lastUsedAt: row.lastUsedAt as string | undefined,\n createdAt: row.createdAt as string,\n }));\n}\n\nexport async function getUserByBearerToken(token: string): Promise {\n const result = await sqlite.execute(\n `SELECT u.* FROM users u \n JOIN bearer_tokens bt ON u.id = bt.userId \n WHERE bt.token = ?`,\n [token]\n );\n if (result.length === 0) return null;\n \n const row = result[0];\n return {\n id: row.id as string,\n email: row.email as string,\n name: row.name as string,\n isAdmin: Boolean(row.isAdmin),\n createdAt: row.createdAt as string,\n lastLoginAt: row.lastLoginAt as string | undefined,\n };\n}\n\nexport async function updateBearerTokenLastUsed(token: string): Promise {\n await sqlite.execute(\n `UPDATE bearer_tokens SET lastUsedAt = ? WHERE token = ?`,\n [new Date().toISOString(), token]\n );\n}\n\nexport async function deleteBearerToken(tokenId: string, userId: string): Promise {\n await sqlite.execute(\n `DELETE FROM bearer_tokens WHERE id = ? AND userId = ?`,\n [tokenId, userId]\n );\n}\n\n// Content operations\nexport async function createContentItem(item: ContentItem): Promise {\n await sqlite.execute(\n `INSERT INTO content_items (id, userId, type, content, title, metadata, createdAt) VALUES (?, ?, ?, ?, ?, ?, ?)`,\n [item.id, item.userId, item.type, item.content, item.title, item.metadata ? JSON.stringify(item.metadata) : null, item.createdAt]\n );\n}\n\nexport async function getContentItemsByUserId(userId: string, limit = 50, offset = 0): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM content_items WHERE userId = ? ORDER BY createdAt DESC LIMIT ? OFFSET ?`,\n [userId, limit, offset]\n );\n return result.map(row => ({\n id: row.id as string,\n userId: row.userId as string,\n type: row.type as 'text' | 'image' | 'url',\n content: row.content as string,\n title: row.title as string | undefined,\n metadata: row.metadata ? JSON.parse(row.metadata as string) : undefined,\n createdAt: row.createdAt as string,\n }));\n}\n\nexport async function getAllContentItems(limit = 100, offset = 0): Promise<(ContentItem & { userEmail: string })[]> {\n const result = await sqlite.execute(\n `SELECT ci.*, u.email as userEmail FROM content_items ci \n JOIN users u ON ci.userId = u.id \n ORDER BY ci.createdAt DESC LIMIT ? OFFSET ?`,\n [limit, offset]\n );\n return result.map(row => ({\n id: row.id as string,\n userId: row.userId as string,\n type: row.type as 'text' | 'image' | 'url',\n content: row.content as string,\n title: row.title as string | undefined,\n metadata: row.metadata ? JSON.parse(row.metadata as string) : undefined,\n createdAt: row.createdAt as string,\n userEmail: row.userEmail as string,\n }));\n}\n\nexport async function deleteContentItem(itemId: string, userId: string): Promise {\n const result = await sqlite.execute(\n `DELETE FROM content_items WHERE id = ? AND userId = ?`,\n [itemId, userId]\n );\n return result.changes > 0;\n}\n\nexport async function getContentItemById(itemId: string): Promise {\n const result = await sqlite.execute(`SELECT * FROM content_items WHERE id = ?`, [itemId]);\n if (result.length === 0) return null;\n \n const row = result[0];\n return {\n id: row.id as string,\n userId: row.userId as string,\n type: row.type as 'text' | 'image' | 'url',\n content: row.content as string,\n title: row.title as string | undefined,\n metadata: row.metadata ? JSON.parse(row.metadata as string) : undefined,\n createdAt: row.createdAt as string,\n };\n}",[],[156,325,317],"database","adab4232-3b41-11f0-a9f9-9e149126039e","migrations.ts","adab4318-3b41-11f0-a9f9-9e149126039e",["D",1748381372102],"import { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\n\nexport async function runMigrations() {\n console.log(\"Running database migrations...\");\n\n // Users table\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS users (\n id TEXT PRIMARY KEY,\n email TEXT UNIQUE NOT NULL,\n name TEXT NOT NULL,\n isAdmin BOOLEAN DEFAULT FALSE,\n createdAt TEXT NOT NULL,\n lastLoginAt TEXT\n )\n `);\n\n // WebAuthn credentials table\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS webauthn_credentials (\n id TEXT PRIMARY KEY,\n userId TEXT NOT NULL,\n credentialId TEXT UNIQUE NOT NULL,\n publicKey TEXT NOT NULL,\n counter INTEGER DEFAULT 0,\n createdAt TEXT NOT NULL,\n FOREIGN KEY (userId) REFERENCES users (id) ON DELETE CASCADE\n )\n `);\n\n // Bearer tokens table\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS bearer_tokens (\n id TEXT PRIMARY KEY,\n userId TEXT NOT NULL,\n token TEXT UNIQUE NOT NULL,\n name TEXT NOT NULL,\n lastUsedAt TEXT,\n createdAt TEXT NOT NULL,\n FOREIGN KEY (userId) REFERENCES users (id) ON DELETE CASCADE\n )\n `);\n\n // Content items table\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS content_items (\n id TEXT PRIMARY KEY,\n userId TEXT NOT NULL,\n type TEXT NOT NULL CHECK (type IN ('text', 'image', 'url')),\n content TEXT NOT NULL,\n title TEXT,\n metadata TEXT, -- JSON string\n createdAt TEXT NOT NULL,\n FOREIGN KEY (userId) REFERENCES users (id) ON DELETE CASCADE\n )\n `);\n\n // WebAuthn challenges table (temporary storage)\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS webauthn_challenges (\n id TEXT PRIMARY KEY,\n email TEXT NOT NULL,\n challenge TEXT NOT NULL,\n type TEXT NOT NULL CHECK (type IN ('registration', 'authentication')),\n userData TEXT, -- JSON string for registration\n createdAt TEXT NOT NULL\n )\n `);\n\n // Create indexes for better performance\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_users_email ON users (email)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_content_user_created ON content_items (userId, createdAt DESC)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_tokens_user ON bearer_tokens (userId)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_credentials_user ON webauthn_credentials (userId)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_challenges_email ON webauthn_challenges (email)`);\n\n console.log(\"Database migrations completed successfully\");\n}",[],[156,325,327],"adab6a8c-3b41-11f0-a9f9-9e149126039e",["D",1748381372102],[173,174],[156,325],["D",1748381372102],[172,175,180],[156],["D",1748380937811],{"_97":96,"_104":100},{"_97":96,"_98":-5,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":86,"_32":87,"_44":43,"_88":45,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":46,"_95":96},"ctx",{"_79":-5,"_124":377,"_378":379,"_380":381,"_382":25,"_383":25,"_384":25,"_385":59,"_386":-5,"_387":-7,"_388":-7,"_389":138,"_390":25,"_391":25,"_392":-5,"_393":25,"_394":25,"_395":25,"_396":-5},"ENV",{"_348":349,"_350":351,"_352":87,"_353":354,"_355":356,"_357":358,"_359":360,"_361":362,"_363":364,"_365":366,"_367":368,"_369":370,"_371":372,"_373":374,"_375":376},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v27