[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_237":238,"_239":240},"routes/_app.x.$handle.$name",{"_102":101,"_32":51,"_110":92,"_27":111,"_13":14,"_112":-5,"_11":113,"_114":115,"_116":117,"_118":119,"_120":121,"_21":-5,"_122":-5,"_123":-5,"_124":25,"_125":126,"_127":25,"_128":-5,"_129":-5,"_130":131},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_49":50,"_32":51,"_38":52,"_53":-5,"_54":25,"_55":56,"_57":56,"_58":-5,"_59":-5,"_18":60,"_61":62,"_63":64,"_65":64,"_66":-5,"_67":68,"_69":70,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":25},"version",6,"changes",[19,20],"aiChatInfo","userId",{"_21":43,"_23":-7,"_24":25,"_26":25,"_27":44,"_29":44},{"_21":22,"_23":-7,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous","deleted",false,"deletedHere","path","backend/routes/auth.ts","latestPath","fileId","e3276e90-3b41-11f0-aec3-9e149126039e","name","auth.ts","fileType","script","content","import { Hono } from \"https://esm.sh/hono@3.11.7\";\nimport { getCookie, setCookie, deleteCookie } from \"https://esm.sh/hono@3.11.7/cookie\";\nimport { \n createUser, \n getUserByEmail, \n getUserById,\n updateUserLastLogin,\n saveWebAuthnCredential,\n getWebAuthnCredentialsByUserId,\n getWebAuthnCredentialByCredentialId,\n updateWebAuthnCredentialCounter,\n saveChallenge,\n getChallenge,\n deleteChallenge,\n cleanupOldChallenges,\n createBearerToken,\n getBearerTokensByUserId,\n deleteBearerToken\n} from \"../database/queries.ts\";\nimport type { \n RegisterStartRequest, \n RegisterFinishRequest, \n LoginStartRequest, \n LoginFinishRequest,\n TokenCreateRequest\n} from \"../../shared/types.ts\";\n\nconst auth = new Hono();\n\n// Helper functions for WebAuthn\nfunction generateChallenge(): string {\n const array = new Uint8Array(32);\n crypto.getRandomValues(array);\n return btoa(String.fromCharCode(...array)).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n}\n\nfunction generateId(): string {\n return crypto.randomUUID();\n}\n\nfunction arrayBufferToBase64(buffer: ArrayBuffer): string {\n const bytes = new Uint8Array(buffer);\n let binary = '';\n for (let i = 0; i < bytes.byteLength; i++) {\n binary += String.fromCharCode(bytes[i]);\n }\n return btoa(binary);\n}\n\nfunction base64ToArrayBuffer(base64: string): ArrayBuffer {\n const binary = atob(base64.replace(/-/g, '+').replace(/_/g, '/'));\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) {\n bytes[i] = binary.charCodeAt(i);\n }\n return bytes.buffer;\n}\n\n// Simplified WebAuthn verification (in production, use a proper library)\nasync function verifyRegistration(credential: any, challenge: string): Promise<{ verified: boolean; credentialId: string; publicKey: string }> {\n try {\n const clientDataJSON = JSON.parse(new TextDecoder().decode(base64ToArrayBuffer(credential.response.clientDataJSON)));\n \n // Verify challenge\n if (clientDataJSON.challenge !== challenge) {\n return { verified: false, credentialId: '', publicKey: '' };\n }\n \n // Verify origin (in production, check against your domain)\n if (clientDataJSON.type !== 'webauthn.create') {\n return { verified: false, credentialId: '', publicKey: '' };\n }\n \n // Extract credential ID and public key (simplified)\n const credentialId = credential.id;\n const publicKey = credential.response.attestationObject; // Simplified - in production, parse CBOR\n \n return { verified: true, credentialId, publicKey };\n } catch (error) {\n console.error('Registration verification error:', error);\n return { verified: false, credentialId: '', publicKey: '' };\n }\n}\n\nasync function verifyAuthentication(credential: any, challenge: string, storedCredential: any): Promise {\n try {\n const clientDataJSON = JSON.parse(new TextDecoder().decode(base64ToArrayBuffer(credential.response.clientDataJSON)));\n \n // Verify challenge\n if (clientDataJSON.challenge !== challenge) {\n return false;\n }\n \n // Verify origin and type\n if (clientDataJSON.type !== 'webauthn.get') {\n return false;\n }\n \n // In production, verify the signature using the stored public key\n // For this demo, we'll do basic validation\n return credential.id === storedCredential.credentialId;\n } catch (error) {\n console.error('Authentication verification error:', error);\n return false;\n }\n}\n\n// Middleware to check authentication\nasync function requireAuth(c: any, next: any) {\n const sessionToken = getCookie(c, 'session');\n if (!sessionToken) {\n return c.json({ error: 'Authentication required' }, 401);\n }\n \n try {\n const userId = sessionToken; // Simplified - in production, verify JWT\n const user = await getUserById(userId);\n if (!user) {\n return c.json({ error: 'Invalid session' }, 401);\n }\n \n c.set('user', user);\n await next();\n } catch (error) {\n return c.json({ error: 'Invalid session' }, 401);\n }\n}\n\n// Clean up old challenges periodically\nsetInterval(cleanupOldChallenges, 5 * 60 * 1000); // Every 5 minutes\n\n// Registration endpoints\nauth.post('/register-start', async (c) => {\n try {\n const { email, name }: RegisterStartRequest = await c.req.json();\n \n if (!email || !name) {\n return c.json({ error: 'Email and name are required' }, 400);\n }\n \n // Check if user already exists\n const existingUser = await getUserByEmail(email);\n if (existingUser) {\n return c.json({ error: 'User already exists' }, 400);\n }\n \n const challenge = generateChallenge();\n const userId = generateId();\n \n // Store challenge and user data\n await saveChallenge(generateId(), email, challenge, 'registration', { userId, name });\n \n const response = {\n challenge,\n user: {\n id: userId,\n name,\n displayName: name,\n },\n rp: {\n name: 'iOS Share Sheet Backend',\n id: new URL(c.req.url).hostname,\n },\n pubKeyCredParams: [\n { type: 'public-key', alg: -7 }, // ES256\n { type: 'public-key', alg: -257 }, // RS256\n ],\n authenticatorSelection: {\n userVerification: 'preferred',\n },\n timeout: 60000,\n attestation: 'none',\n };\n \n return c.json(response);\n } catch (error) {\n console.error('Registration start error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\nauth.post('/register-finish', async (c) => {\n try {\n const { email, credential }: RegisterFinishRequest = await c.req.json();\n \n if (!email || !credential) {\n return c.json({ error: 'Email and credential are required' }, 400);\n }\n \n // Get stored challenge\n const challengeData = await getChallenge(email, 'registration');\n if (!challengeData) {\n return c.json({ error: 'Invalid or expired challenge' }, 400);\n }\n \n // Verify registration\n const verification = await verifyRegistration(credential, challengeData.challenge);\n if (!verification.verified) {\n return c.json({ error: 'Registration verification failed' }, 400);\n }\n \n // Create user\n const { userId, name } = challengeData.userData;\n const adminEmail = Deno.env.get('ADMIN_EMAIL');\n const isAdmin = email === adminEmail;\n \n await createUser({\n id: userId,\n email,\n name,\n isAdmin,\n createdAt: new Date().toISOString(),\n });\n \n // Save WebAuthn credential\n await saveWebAuthnCredential({\n id: generateId(),\n userId,\n credentialId: verification.credentialId,\n publicKey: verification.publicKey,\n counter: 0,\n createdAt: new Date().toISOString(),\n });\n \n // Clean up challenge\n await deleteChallenge(email, 'registration');\n \n // Set session cookie\n setCookie(c, 'session', userId, {\n httpOnly: true,\n secure: true,\n sameSite: 'Strict',\n maxAge: 30 * 24 * 60 * 60, // 30 days\n });\n \n const user = await getUserById(userId);\n return c.json({ success: true, user });\n } catch (error) {\n console.error('Registration finish error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Login endpoints\nauth.post('/login-start', async (c) => {\n try {\n const { email }: LoginStartRequest = await c.req.json();\n \n if (!email) {\n return c.json({ error: 'Email is required' }, 400);\n }\n \n // Check if user exists\n const user = await getUserByEmail(email);\n if (!user) {\n return c.json({ error: 'User not found' }, 404);\n }\n \n // Get user's credentials\n const credentials = await getWebAuthnCredentialsByUserId(user.id);\n if (credentials.length === 0) {\n return c.json({ error: 'No credentials found for user' }, 400);\n }\n \n const challenge = generateChallenge();\n \n // Store challenge\n await saveChallenge(generateId(), email, challenge, 'authentication');\n \n const response = {\n challenge,\n allowCredentials: credentials.map(cred => ({\n id: cred.credentialId,\n type: 'public-key',\n })),\n timeout: 60000,\n userVerification: 'preferred',\n };\n \n return c.json(response);\n } catch (error) {\n console.error('Login start error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\nauth.post('/login-finish', async (c) => {\n try {\n const { email, credential }: LoginFinishRequest = await c.req.json();\n \n if (!email || !credential) {\n return c.json({ error: 'Email and credential are required' }, 400);\n }\n \n // Get stored challenge\n const challengeData = await getChallenge(email, 'authentication');\n if (!challengeData) {\n return c.json({ error: 'Invalid or expired challenge' }, 400);\n }\n \n // Get stored credential\n const storedCredential = await getWebAuthnCredentialByCredentialId(credential.id);\n if (!storedCredential) {\n return c.json({ error: 'Credential not found' }, 400);\n }\n \n // Verify authentication\n const verified = await verifyAuthentication(credential, challengeData.challenge, storedCredential);\n if (!verified) {\n return c.json({ error: 'Authentication verification failed' }, 400);\n }\n \n // Update credential counter (simplified)\n await updateWebAuthnCredentialCounter(credential.id, storedCredential.counter + 1);\n \n // Update last login\n await updateUserLastLogin(storedCredential.userId);\n \n // Clean up challenge\n await deleteChallenge(email, 'authentication');\n \n // Set session cookie\n setCookie(c, 'session', storedCredential.userId, {\n httpOnly: true,\n secure: true,\n sameSite: 'Strict',\n maxAge: 30 * 24 * 60 * 60, // 30 days\n });\n \n const user = await getUserById(storedCredential.userId);\n return c.json({ success: true, user });\n } catch (error) {\n console.error('Login finish error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\n// Logout endpoint\nauth.post('/logout', (c) => {\n deleteCookie(c, 'session');\n return c.json({ success: true });\n});\n\n// Get current user\nauth.get('/me', requireAuth, async (c) => {\n const user = c.get('user');\n return c.json({ user });\n});\n\n// Bearer token management\nauth.get('/tokens', requireAuth, async (c) => {\n const user = c.get('user');\n const tokens = await getBearerTokensByUserId(user.id);\n \n // Don't return the actual token values for security\n const safeTokens = tokens.map(token => ({\n id: token.id,\n name: token.name,\n lastUsedAt: token.lastUsedAt,\n createdAt: token.createdAt,\n }));\n \n return c.json({ tokens: safeTokens });\n});\n\nauth.post('/tokens', requireAuth, async (c) => {\n try {\n const user = c.get('user');\n const { name }: TokenCreateRequest = await c.req.json();\n \n if (!name) {\n return c.json({ error: 'Token name is required' }, 400);\n }\n \n // Generate secure token\n const tokenBytes = new Uint8Array(32);\n crypto.getRandomValues(tokenBytes);\n const token = btoa(String.fromCharCode(...tokenBytes)).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=/g, '');\n \n const bearerToken = {\n id: generateId(),\n userId: user.id,\n token,\n name,\n createdAt: new Date().toISOString(),\n };\n \n await createBearerToken(bearerToken);\n \n return c.json({\n id: bearerToken.id,\n name: bearerToken.name,\n token: bearerToken.token,\n createdAt: bearerToken.createdAt,\n });\n } catch (error) {\n console.error('Token creation error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\nauth.delete('/tokens/:id', requireAuth, async (c) => {\n try {\n const user = c.get('user');\n const tokenId = c.req.param('id');\n \n await deleteBearerToken(tokenId, user.id);\n return c.json({ success: true });\n } catch (error) {\n console.error('Token deletion error:', error);\n return c.json({ error: 'Internal server error' }, 500);\n }\n});\n\nexport { auth, requireAuth };","createdAt",["D",1748381461834],"branchVersion","branchId","aacf49ce-3b40-11f0-a79d-9e149126039e",{"_30":45,"_32":46,"_34":47,"_36":-5,"_38":48,"_40":14,"_41":42,"_24":25},"backend/routes","bae4d08b-752c-4808-9f83-72a24d0433d2","routes","directory",["D",1748381461834],"id","aacf14c2-3b40-11f0-a79d-9e149126039e","ProtoShare",["D",1748380937811],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","21f2e37e-8066-4730-9dc7-d27cf8d3c9f3","pinnedFileId","058e8cc0-3b42-11f0-a6d6-9e149126039e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",4,"orgId","0630d977-f678-453e-926c-52043293f59f","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_102":101,"_109":105},"org",{"_102":101,"_103":-5,"_104":105,"_18":60,"_106":107,"_108":25},"branch",{"_13":91,"_32":92,"_49":42,"_93":50,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":51,"_100":101},"isOwned",57,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","c15r","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yb2RJNlc1czZ1NlpZRmoxdGJ2eFVNNVhmeTYifQ","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_49":50,"_32":51,"_38":233,"_53":-5,"_54":25,"_55":56,"_57":56,"_58":-5,"_59":-5,"_18":60,"_61":62,"_63":64,"_65":64,"_66":-5,"_67":68,"_69":70,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":234,"_86":235,"_88":236,"_90":25},"tree",[174,180,182,183],"files",[174,175,176,177,178,179,180,181,182,183],"counts",{"_164":143,"_165":140,"_166":68,"_167":168,"_169":170},"contents",[132,133,134,135],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_49":159,"_32":160,"_30":161,"_139":-5,"_41":42,"_40":68,"_141":64,"_38":162,"_13":143,"_34":47,"_36":-5,"_24":25,"_144":-5,"_27":163},{"_49":153,"_32":154,"_30":155,"_139":-5,"_41":42,"_40":156,"_141":64,"_38":157,"_13":143,"_34":47,"_36":-5,"_24":25,"_144":-5,"_27":158},{"_49":146,"_32":147,"_30":148,"_139":-5,"_41":42,"_40":149,"_141":64,"_38":150,"_13":143,"_34":21,"_36":151,"_24":25,"_144":-5,"_27":152},{"_49":136,"_32":137,"_30":138,"_139":-5,"_41":42,"_40":140,"_141":25,"_38":142,"_13":143,"_34":35,"_36":111,"_24":25,"_144":-5,"_27":145},"aad092f2-3b40-11f0-a79d-9e149126039e","main.tsx","aad093b0-3b40-11f0-a79d-9e149126039e","parentId",1,"latest",["D",1748380937818],0,"label",[137],"9f82ceaa-3b41-11f0-a481-9e149126039e","README.md","9f82cf68-3b41-11f0-a481-9e149126039e",2,["D",1748381348349],"# iOS Share Sheet Backend\n\nA secure backend system for iOS share sheet shortcuts with WebAuthn authentication and content management.\n\n## Features\n\n- **WebAuthn Authentication**: Secure passwordless authentication\n- **iOS Share Sheet Integration**: Accept text, images, and web URLs from iOS shortcuts\n- **User Content Management**: Timestamped content storage per user\n- **Bearer Token API**: Secure API access for shortcuts\n- **Admin Interface**: User and content management\n- **Setup Workflow**: Guided shortcut configuration\n\n## Project Structure\n\n```\n├── backend/\n│ ├── database/\n│ │ ├── migrations.ts # Database schema\n│ │ └── queries.ts # Database operations\n│ ├── routes/\n│ │ ├── auth.ts # WebAuthn authentication\n│ │ ├── content.ts # Content management\n│ │ ├── admin.ts # Admin operations\n│ │ └── static.ts # Static file serving\n│ └── index.ts # Main entry point\n├── frontend/\n│ ├── components/\n│ │ ├── App.tsx # Main application\n│ │ ├── Auth.tsx # Authentication UI\n│ │ ├── Dashboard.tsx # User dashboard\n│ │ ├── Admin.tsx # Admin interface\n│ │ └── Setup.tsx # Shortcut setup guide\n│ ├── index.html # Main HTML template\n│ └── index.tsx # Frontend entry point\n├── shared/\n│ └── types.ts # Shared TypeScript types\n└── README.md\n```\n\n## API Endpoints\n\n### Authentication\n- `POST /api/auth/register-start` - Start WebAuthn registration\n- `POST /api/auth/register-finish` - Complete WebAuthn registration\n- `POST /api/auth/login-start` - Start WebAuthn login\n- `POST /api/auth/login-finish` - Complete WebAuthn login\n- `POST /api/auth/token` - Generate bearer token for shortcuts\n\n### Content Management\n- `POST /api/content` - Add content via shortcut (requires bearer token)\n- `GET /api/content` - Get user's content (requires authentication)\n- `DELETE /api/content/:id` - Delete content item\n\n### Admin (requires admin role)\n- `GET /api/admin/users` - List all users\n- `GET /api/admin/content` - List all content\n- `POST /api/admin/users/:id/admin` - Grant admin privileges\n\n## iOS Shortcut Setup\n\n1. **Create Account**: Visit the web interface and register with WebAuthn\n2. **Generate Token**: Create a bearer token for your shortcuts\n3. **Install Shortcut**: Use the provided shortcut template\n4. **Configure Token**: Add your bearer token to the shortcut\n5. **Test**: Share content from any iOS app\n\n## Environment Variables\n\n- `ADMIN_EMAIL` - Email address for the initial admin user\n\n## Getting Started\n\n1. Deploy this val to Val Town\n2. Visit the web interface to create your account\n3. Follow the shortcut setup guide\n4. Start sharing content from iOS!",[147],"a6bea9dc-3b41-11f0-a82f-9e149126039e","shared","e14df16c-f36f-46c9-81bc-79a03f8bee4c",3,["D",1748381360485],[154],"adab67da-3b41-11f0-a9f9-9e149126039e","backend","862c7c3e-9df6-445a-bb70-1f8c05597676",["D",1748381372102],[160],"pulls","branches","forks","envVars",{"_171":140,"_173":143},"connections",{"_171":143,"_172":143},"count","unfilledCount","emptyCount",{"_49":159,"_32":160,"_30":161,"_139":-5,"_41":42,"_40":68,"_141":64,"_38":230,"_13":143,"_34":47,"_36":-5,"_24":25,"_144":-5,"_185":231,"_27":232},{"_49":226,"_32":218,"_30":212,"_139":161,"_41":42,"_40":68,"_141":64,"_38":227,"_13":143,"_34":47,"_36":-5,"_24":25,"_144":-5,"_185":228,"_27":229},{"_49":219,"_32":220,"_30":221,"_139":212,"_41":42,"_40":68,"_141":64,"_38":222,"_13":143,"_34":35,"_36":223,"_24":25,"_144":-5,"_185":224,"_27":225},{"_49":209,"_32":210,"_30":211,"_139":212,"_41":42,"_40":213,"_141":25,"_38":214,"_13":143,"_34":35,"_36":215,"_24":25,"_144":-5,"_185":216,"_27":217},{"_49":205,"_32":46,"_30":45,"_139":161,"_41":42,"_40":14,"_141":64,"_38":206,"_13":143,"_34":47,"_36":-5,"_24":25,"_144":-5,"_185":207,"_27":208},{"_49":201,"_32":33,"_30":31,"_139":45,"_41":42,"_40":14,"_141":25,"_38":202,"_13":143,"_34":35,"_36":37,"_24":25,"_144":-5,"_185":203,"_27":204},{"_49":153,"_32":154,"_30":155,"_139":-5,"_41":42,"_40":156,"_141":64,"_38":198,"_13":143,"_34":47,"_36":-5,"_24":25,"_144":-5,"_185":199,"_27":200},{"_49":191,"_32":192,"_30":193,"_139":155,"_41":42,"_40":156,"_141":64,"_38":194,"_13":143,"_34":35,"_36":195,"_24":25,"_144":-5,"_185":196,"_27":197},{"_49":146,"_32":147,"_30":148,"_139":-5,"_41":42,"_40":149,"_141":64,"_38":188,"_13":143,"_34":21,"_36":151,"_24":25,"_144":-5,"_185":189,"_27":190},{"_49":136,"_32":137,"_30":138,"_139":-5,"_41":42,"_40":140,"_141":25,"_38":184,"_13":143,"_34":35,"_36":111,"_24":25,"_144":-5,"_185":186,"_27":187},["D",1748380937818],"children",[],[137],["D",1748381348349],[],[147],"a6be8c40-3b41-11f0-a82f-9e149126039e","types.ts","a6be8cea-3b41-11f0-a82f-9e149126039e",["D",1748381360485],"// Shared TypeScript types for the iOS Share Sheet Backend\n\nexport interface User {\n id: string;\n email: string;\n name: string;\n isAdmin: boolean;\n createdAt: string;\n lastLoginAt?: string;\n}\n\nexport interface ContentItem {\n id: string;\n userId: string;\n type: 'text' | 'image' | 'url';\n content: string;\n title?: string;\n metadata?: {\n url?: string;\n imageSize?: number;\n source?: string;\n };\n createdAt: string;\n}\n\nexport interface BearerToken {\n id: string;\n userId: string;\n token: string;\n name: string;\n lastUsedAt?: string;\n createdAt: string;\n}\n\nexport interface WebAuthnCredential {\n id: string;\n userId: string;\n credentialId: string;\n publicKey: string;\n counter: number;\n createdAt: string;\n}\n\n// API Request/Response types\nexport interface RegisterStartRequest {\n email: string;\n name: string;\n}\n\nexport interface RegisterStartResponse {\n challenge: string;\n user: {\n id: string;\n name: string;\n displayName: string;\n };\n rp: {\n name: string;\n id: string;\n };\n pubKeyCredParams: Array<{\n type: string;\n alg: number;\n }>;\n authenticatorSelection: {\n authenticatorAttachment?: string;\n userVerification: string;\n };\n timeout: number;\n attestation: string;\n}\n\nexport interface RegisterFinishRequest {\n email: string;\n credential: {\n id: string;\n rawId: string;\n response: {\n attestationObject: string;\n clientDataJSON: string;\n };\n type: string;\n };\n}\n\nexport interface LoginStartRequest {\n email: string;\n}\n\nexport interface LoginStartResponse {\n challenge: string;\n allowCredentials: Array<{\n id: string;\n type: string;\n }>;\n timeout: number;\n userVerification: string;\n}\n\nexport interface LoginFinishRequest {\n email: string;\n credential: {\n id: string;\n rawId: string;\n response: {\n authenticatorData: string;\n clientDataJSON: string;\n signature: string;\n userHandle?: string;\n };\n type: string;\n };\n}\n\nexport interface AuthResponse {\n success: boolean;\n user?: User;\n token?: string;\n error?: string;\n}\n\nexport interface ContentRequest {\n type: 'text' | 'image' | 'url';\n content: string;\n title?: string;\n metadata?: {\n url?: string;\n source?: string;\n };\n}\n\nexport interface TokenCreateRequest {\n name: string;\n}\n\nexport interface TokenResponse {\n id: string;\n name: string;\n token: string;\n createdAt: string;\n}",[],[154,192],["D",1748381360485],[181],[154],"e3276db4-3b41-11f0-aec3-9e149126039e",["D",1748381461834],[],[160,46,33],"e327994c-3b41-11f0-aec3-9e149126039e",["D",1748381461834],[179],[160,46],"c46a6c14-3b41-11f0-9368-9e149126039e","queries.ts","c46a6cc8-3b41-11f0-9368-9e149126039e","7f4b7679-7d2c-4e79-9c43-d56700dfb463",5,["D",1748381410265],"import { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nimport type { User, ContentItem, BearerToken, WebAuthnCredential } from \"../../shared/types.ts\";\n\n// User operations\nexport async function createUser(user: Omit): Promise {\n await sqlite.execute(\n `INSERT INTO users (id, email, name, isAdmin, createdAt) VALUES (?, ?, ?, ?, ?)`,\n [user.id, user.email, user.name, user.isAdmin, user.createdAt]\n );\n}\n\nexport async function getUserByEmail(email: string): Promise {\n const result = await sqlite.execute(`SELECT * FROM users WHERE email = ?`, [email]);\n if (result.length === 0) return null;\n \n const row = result[0];\n return {\n id: row.id as string,\n email: row.email as string,\n name: row.name as string,\n isAdmin: Boolean(row.isAdmin),\n createdAt: row.createdAt as string,\n lastLoginAt: row.lastLoginAt as string | undefined,\n };\n}\n\nexport async function getUserById(id: string): Promise {\n const result = await sqlite.execute(`SELECT * FROM users WHERE id = ?`, [id]);\n if (result.length === 0) return null;\n \n const row = result[0];\n return {\n id: row.id as string,\n email: row.email as string,\n name: row.name as string,\n isAdmin: Boolean(row.isAdmin),\n createdAt: row.createdAt as string,\n lastLoginAt: row.lastLoginAt as string | undefined,\n };\n}\n\nexport async function updateUserLastLogin(userId: string): Promise {\n await sqlite.execute(\n `UPDATE users SET lastLoginAt = ? WHERE id = ?`,\n [new Date().toISOString(), userId]\n );\n}\n\nexport async function makeUserAdmin(userId: string): Promise {\n await sqlite.execute(`UPDATE users SET isAdmin = TRUE WHERE id = ?`, [userId]);\n}\n\nexport async function getAllUsers(): Promise {\n const result = await sqlite.execute(`SELECT * FROM users ORDER BY createdAt DESC`);\n return result.map(row => ({\n id: row.id as string,\n email: row.email as string,\n name: row.name as string,\n isAdmin: Boolean(row.isAdmin),\n createdAt: row.createdAt as string,\n lastLoginAt: row.lastLoginAt as string | undefined,\n }));\n}\n\n// WebAuthn credential operations\nexport async function saveWebAuthnCredential(credential: WebAuthnCredential): Promise {\n await sqlite.execute(\n `INSERT INTO webauthn_credentials (id, userId, credentialId, publicKey, counter, createdAt) VALUES (?, ?, ?, ?, ?, ?)`,\n [credential.id, credential.userId, credential.credentialId, credential.publicKey, credential.counter, credential.createdAt]\n );\n}\n\nexport async function getWebAuthnCredentialsByUserId(userId: string): Promise {\n const result = await sqlite.execute(`SELECT * FROM webauthn_credentials WHERE userId = ?`, [userId]);\n return result.map(row => ({\n id: row.id as string,\n userId: row.userId as string,\n credentialId: row.credentialId as string,\n publicKey: row.publicKey as string,\n counter: row.counter as number,\n createdAt: row.createdAt as string,\n }));\n}\n\nexport async function getWebAuthnCredentialByCredentialId(credentialId: string): Promise {\n const result = await sqlite.execute(`SELECT * FROM webauthn_credentials WHERE credentialId = ?`, [credentialId]);\n if (result.length === 0) return null;\n \n const row = result[0];\n return {\n id: row.id as string,\n userId: row.userId as string,\n credentialId: row.credentialId as string,\n publicKey: row.publicKey as string,\n counter: row.counter as number,\n createdAt: row.createdAt as string,\n };\n}\n\nexport async function updateWebAuthnCredentialCounter(credentialId: string, counter: number): Promise {\n await sqlite.execute(\n `UPDATE webauthn_credentials SET counter = ? WHERE credentialId = ?`,\n [counter, credentialId]\n );\n}\n\n// Challenge operations (temporary storage for WebAuthn)\nexport async function saveChallenge(id: string, email: string, challenge: string, type: 'registration' | 'authentication', userData?: any): Promise {\n await sqlite.execute(\n `INSERT INTO webauthn_challenges (id, email, challenge, type, userData, createdAt) VALUES (?, ?, ?, ?, ?, ?)`,\n [id, email, challenge, type, userData ? JSON.stringify(userData) : null, new Date().toISOString()]\n );\n}\n\nexport async function getChallenge(email: string, type: 'registration' | 'authentication'): Promise<{ challenge: string; userData?: any } | null> {\n const result = await sqlite.execute(\n `SELECT challenge, userData FROM webauthn_challenges WHERE email = ? AND type = ? ORDER BY createdAt DESC LIMIT 1`,\n [email, type]\n );\n if (result.length === 0) return null;\n \n const row = result[0];\n return {\n challenge: row.challenge as string,\n userData: row.userData ? JSON.parse(row.userData as string) : undefined,\n };\n}\n\nexport async function deleteChallenge(email: string, type: 'registration' | 'authentication'): Promise {\n await sqlite.execute(\n `DELETE FROM webauthn_challenges WHERE email = ? AND type = ?`,\n [email, type]\n );\n}\n\n// Clean up old challenges (older than 5 minutes)\nexport async function cleanupOldChallenges(): Promise {\n const fiveMinutesAgo = new Date(Date.now() - 5 * 60 * 1000).toISOString();\n await sqlite.execute(\n `DELETE FROM webauthn_challenges WHERE createdAt < ?`,\n [fiveMinutesAgo]\n );\n}\n\n// Bearer token operations\nexport async function createBearerToken(token: BearerToken): Promise {\n await sqlite.execute(\n `INSERT INTO bearer_tokens (id, userId, token, name, createdAt) VALUES (?, ?, ?, ?, ?)`,\n [token.id, token.userId, token.token, token.name, token.createdAt]\n );\n}\n\nexport async function getBearerTokensByUserId(userId: string): Promise {\n const result = await sqlite.execute(`SELECT * FROM bearer_tokens WHERE userId = ? ORDER BY createdAt DESC`, [userId]);\n return result.map(row => ({\n id: row.id as string,\n userId: row.userId as string,\n token: row.token as string,\n name: row.name as string,\n lastUsedAt: row.lastUsedAt as string | undefined,\n createdAt: row.createdAt as string,\n }));\n}\n\nexport async function getUserByBearerToken(token: string): Promise {\n const result = await sqlite.execute(\n `SELECT u.* FROM users u \n JOIN bearer_tokens bt ON u.id = bt.userId \n WHERE bt.token = ?`,\n [token]\n );\n if (result.length === 0) return null;\n \n const row = result[0];\n return {\n id: row.id as string,\n email: row.email as string,\n name: row.name as string,\n isAdmin: Boolean(row.isAdmin),\n createdAt: row.createdAt as string,\n lastLoginAt: row.lastLoginAt as string | undefined,\n };\n}\n\nexport async function updateBearerTokenLastUsed(token: string): Promise {\n await sqlite.execute(\n `UPDATE bearer_tokens SET lastUsedAt = ? WHERE token = ?`,\n [new Date().toISOString(), token]\n );\n}\n\nexport async function deleteBearerToken(tokenId: string, userId: string): Promise {\n await sqlite.execute(\n `DELETE FROM bearer_tokens WHERE id = ? AND userId = ?`,\n [tokenId, userId]\n );\n}\n\n// Content operations\nexport async function createContentItem(item: ContentItem): Promise {\n await sqlite.execute(\n `INSERT INTO content_items (id, userId, type, content, title, metadata, createdAt) VALUES (?, ?, ?, ?, ?, ?, ?)`,\n [item.id, item.userId, item.type, item.content, item.title, item.metadata ? JSON.stringify(item.metadata) : null, item.createdAt]\n );\n}\n\nexport async function getContentItemsByUserId(userId: string, limit = 50, offset = 0): Promise {\n const result = await sqlite.execute(\n `SELECT * FROM content_items WHERE userId = ? ORDER BY createdAt DESC LIMIT ? OFFSET ?`,\n [userId, limit, offset]\n );\n return result.map(row => ({\n id: row.id as string,\n userId: row.userId as string,\n type: row.type as 'text' | 'image' | 'url',\n content: row.content as string,\n title: row.title as string | undefined,\n metadata: row.metadata ? JSON.parse(row.metadata as string) : undefined,\n createdAt: row.createdAt as string,\n }));\n}\n\nexport async function getAllContentItems(limit = 100, offset = 0): Promise<(ContentItem & { userEmail: string })[]> {\n const result = await sqlite.execute(\n `SELECT ci.*, u.email as userEmail FROM content_items ci \n JOIN users u ON ci.userId = u.id \n ORDER BY ci.createdAt DESC LIMIT ? OFFSET ?`,\n [limit, offset]\n );\n return result.map(row => ({\n id: row.id as string,\n userId: row.userId as string,\n type: row.type as 'text' | 'image' | 'url',\n content: row.content as string,\n title: row.title as string | undefined,\n metadata: row.metadata ? JSON.parse(row.metadata as string) : undefined,\n createdAt: row.createdAt as string,\n userEmail: row.userEmail as string,\n }));\n}\n\nexport async function deleteContentItem(itemId: string, userId: string): Promise {\n const result = await sqlite.execute(\n `DELETE FROM content_items WHERE id = ? AND userId = ?`,\n [itemId, userId]\n );\n return result.changes > 0;\n}\n\nexport async function getContentItemById(itemId: string): Promise {\n const result = await sqlite.execute(`SELECT * FROM content_items WHERE id = ?`, [itemId]);\n if (result.length === 0) return null;\n \n const row = result[0];\n return {\n id: row.id as string,\n userId: row.userId as string,\n type: row.type as 'text' | 'image' | 'url',\n content: row.content as string,\n title: row.title as string | undefined,\n metadata: row.metadata ? JSON.parse(row.metadata as string) : undefined,\n createdAt: row.createdAt as string,\n };\n}",[],[160,218,210],"database","adab4232-3b41-11f0-a9f9-9e149126039e","migrations.ts","adab4318-3b41-11f0-a9f9-9e149126039e",["D",1748381372102],"import { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\n\nexport async function runMigrations() {\n console.log(\"Running database migrations...\");\n\n // Users table\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS users (\n id TEXT PRIMARY KEY,\n email TEXT UNIQUE NOT NULL,\n name TEXT NOT NULL,\n isAdmin BOOLEAN DEFAULT FALSE,\n createdAt TEXT NOT NULL,\n lastLoginAt TEXT\n )\n `);\n\n // WebAuthn credentials table\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS webauthn_credentials (\n id TEXT PRIMARY KEY,\n userId TEXT NOT NULL,\n credentialId TEXT UNIQUE NOT NULL,\n publicKey TEXT NOT NULL,\n counter INTEGER DEFAULT 0,\n createdAt TEXT NOT NULL,\n FOREIGN KEY (userId) REFERENCES users (id) ON DELETE CASCADE\n )\n `);\n\n // Bearer tokens table\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS bearer_tokens (\n id TEXT PRIMARY KEY,\n userId TEXT NOT NULL,\n token TEXT UNIQUE NOT NULL,\n name TEXT NOT NULL,\n lastUsedAt TEXT,\n createdAt TEXT NOT NULL,\n FOREIGN KEY (userId) REFERENCES users (id) ON DELETE CASCADE\n )\n `);\n\n // Content items table\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS content_items (\n id TEXT PRIMARY KEY,\n userId TEXT NOT NULL,\n type TEXT NOT NULL CHECK (type IN ('text', 'image', 'url')),\n content TEXT NOT NULL,\n title TEXT,\n metadata TEXT, -- JSON string\n createdAt TEXT NOT NULL,\n FOREIGN KEY (userId) REFERENCES users (id) ON DELETE CASCADE\n )\n `);\n\n // WebAuthn challenges table (temporary storage)\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS webauthn_challenges (\n id TEXT PRIMARY KEY,\n email TEXT NOT NULL,\n challenge TEXT NOT NULL,\n type TEXT NOT NULL CHECK (type IN ('registration', 'authentication')),\n userData TEXT, -- JSON string for registration\n createdAt TEXT NOT NULL\n )\n `);\n\n // Create indexes for better performance\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_users_email ON users (email)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_content_user_created ON content_items (userId, createdAt DESC)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_tokens_user ON bearer_tokens (userId)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_credentials_user ON webauthn_credentials (userId)`);\n await sqlite.execute(`CREATE INDEX IF NOT EXISTS idx_challenges_email ON webauthn_challenges (email)`);\n\n console.log(\"Database migrations completed successfully\");\n}",[],[160,218,220],"adab6a8c-3b41-11f0-a9f9-9e149126039e",["D",1748381372102],[176,177],[160,218],["D",1748381372102],[175,178],[160],["D",1748380937811],{"_102":101,"_109":105},{"_102":101,"_103":-5,"_104":105,"_18":60,"_106":107,"_108":25},{"_13":91,"_32":92,"_49":42,"_93":50,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":51,"_100":101},"ctx",{"_84":-5,"_129":270,"_271":272,"_273":274,"_275":25,"_276":25,"_277":25,"_278":64,"_279":-5,"_280":-7,"_281":-7,"_282":143,"_283":25,"_284":25,"_285":-5,"_286":25,"_287":25,"_288":25,"_289":-5},"ENV",{"_241":242,"_243":244,"_245":92,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263,"_264":265,"_266":267,"_268":269},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v6