Magic Word

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_154":155,"_156":157},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_103":85,"_27":104,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":121,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",9,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","ba9b1c5e-f015-11f0-ad86-42dde27851f2","name","fileType","http","content","/** @jsxImportSource https://esm.sh/react@18 */\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { renderToString } from \"https://esm.sh/react-dom@18/server\";\nimport React from \"https://esm.sh/react@18\";\n\n// =============================================================================\n// CONFIGURATION\n// =============================================================================\n\nconst CONFIG = {\n POW_DIFFICULTY: 4,\n POW_TTL_SECONDS: 60,\n};\n\n// =============================================================================\n// WORD GENERATION\n// =============================================================================\n\nconst ADJECTIVES = [\n 'amber', 'azure', 'brass', 'coral', 'crystal', 'dusk', 'ember', 'frost',\n 'golden', 'haze', 'iron', 'jade', 'lunar', 'misty', 'nova', 'onyx',\n 'pearl', 'quartz', 'ruby', 'silver', 'storm', 'tidal', 'velvet', 'wild'\n];\n\nconst NOUNS = [\n 'arrow', 'beacon', 'castle', 'dawn', 'echo', 'falcon', 'grove', 'harbor',\n 'island', 'journey', 'keeper', 'lantern', 'meadow', 'nest', 'oracle', 'path',\n 'quest', 'river', 'spark', 'tower', 'valley', 'wave', 'whisper', 'zenith'\n];\n\nfunction generateCompoundWord(): string {\n const adj = ADJECTIVES[Math.floor(Math.random() * ADJECTIVES.length)];\n const noun = NOUNS[Math.floor(Math.random() * NOUNS.length)];\n return `${adj}-${noun}`;\n}\n\n// =============================================================================\n// PROOF OF WORK\n// =============================================================================\n\nasync function issueChallenge(): Promise<{ id: string; nonce: string; difficulty: number; expires: number }> {\n const id = crypto.randomUUID();\n const nonce = crypto.randomUUID();\n \n await sqlite.execute({\n sql: `INSERT INTO pow_challenges (id, nonce) VALUES (?, ?)`,\n args: [id, nonce]\n });\n \n // Clean up old challenges\n await sqlite.execute({\n sql: `DELETE FROM pow_challenges WHERE created_at < datetime('now', '-2 minutes')`,\n args: []\n });\n \n return {\n id,\n nonce,\n difficulty: CONFIG.POW_DIFFICULTY,\n expires: Date.now() + (CONFIG.POW_TTL_SECONDS * 1000)\n };\n}\n\nasync function verifyProof(challengeId: string, word: string, counter: number): Promise<{ valid: boolean; error?: string }> {\n const result = await sqlite.execute({\n sql: `SELECT nonce, used, created_at FROM pow_challenges WHERE id = ?`,\n args: [challengeId]\n });\n \n if (result.rows.length === 0) {\n return { valid: false, error: 'invalid_challenge' };\n }\n \n const [nonce, used, created_at] = result.rows[0] as [string, boolean, string];\n \n if (used) {\n return { valid: false, error: 'challenge_used' };\n }\n \n const createdAt = new Date(created_at).getTime();\n if (Date.now() - createdAt > CONFIG.POW_TTL_SECONDS * 1000) {\n return { valid: false, error: 'challenge_expired' };\n }\n \n // Verify the proof\n const data = `${nonce}:${word}:${counter}`;\n const hashBuffer = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(data));\n const hashHex = Array.from(new Uint8Array(hashBuffer))\n .map(b => b.toString(16).padStart(2, '0'))\n .join('');\n \n const requiredPrefix = '0'.repeat(CONFIG.POW_DIFFICULTY);\n if (!hashHex.startsWith(requiredPrefix)) {\n return { valid: false, error: 'invalid_proof' };\n }\n \n // Mark challenge as used\n await sqlite.execute({\n sql: `UPDATE pow_challenges SET used = TRUE WHERE id = ?`,\n args: [challengeId]\n });\n \n return { valid: true };\n}\n\n// =============================================================================\n// API HANDLERS\n// =============================================================================\n\nasync function handleChallenge(): Promise {\n const challenge = await issueChallenge();\n return Response.json(challenge);\n}\n\nasync function handleLookup(body: { challengeId: string; word: string; counter: number }): Promise {\n const { challengeId, word, counter } = body;\n \n if (!challengeId || !word || counter === undefined) {\n return Response.json({ error: 'missing_fields' }, { status: 400 });\n }\n \n const powResult = await verifyProof(challengeId, word, counter);\n if (!powResult.valid) {\n return Response.json({ error: powResult.error }, { status: 403 });\n }\n \n const result = await sqlite.execute({\n sql: `SELECT url FROM magic_words WHERE word = ? AND (expires_at IS NULL OR expires_at > datetime('now'))`,\n args: [word.toLowerCase()]\n });\n \n if (result.rows.length === 0) {\n return Response.json({ found: false });\n }\n \n // Increment redirect count\n await sqlite.execute({\n sql: `UPDATE magic_words SET redirect_count = redirect_count + 1 WHERE word = ?`,\n args: [word.toLowerCase()]\n });\n \n return Response.json({ found: true, url: result.rows[0][0] });\n}\n\nasync function handleCreate(body: { word?: string; url: string; tier: string }): Promise {\n const { word: requestedWord, url, tier } = body;\n \n if (!url || !tier) {\n return Response.json({ error: 'missing_fields' }, { status: 400 });\n }\n \n try {\n new URL(url);\n } catch {\n return Response.json({ error: 'invalid_url' }, { status: 400 });\n }\n \n let word: string;\n \n if (tier === 'premium') {\n if (!requestedWord) {\n return Response.json({ error: 'word_required_for_premium' }, { status: 400 });\n }\n word = requestedWord.toLowerCase().trim();\n \n if (!/^[a-z0-9]+$/.test(word)) {\n return Response.json({ error: 'invalid_word_format' }, { status: 400 });\n }\n \n if (['please', 'admin', 'api', 'help'].includes(word)) {\n return Response.json({ error: 'reserved_word' }, { status: 400 });\n }\n } else {\n // Free tier: generate compound word\n for (let i = 0; i < 10; i++) {\n word = requestedWord || generateCompoundWord();\n const existing = await sqlite.execute({\n sql: `SELECT id FROM magic_words WHERE word = ?`,\n args: [word]\n });\n if (existing.rows.length === 0) break;\n word = '';\n }\n \n if (!word) {\n return Response.json({ error: 'generation_failed' }, { status: 500 });\n }\n }\n \n // Check if word exists\n const existing = await sqlite.execute({\n sql: `SELECT id FROM magic_words WHERE word = ?`,\n args: [word]\n });\n \n if (existing.rows.length > 0) {\n return Response.json({ error: 'word_taken' }, { status: 409 });\n }\n \n // Generate admin key\n const adminKey = crypto.randomUUID();\n const adminKeyHashBuffer = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(adminKey));\n const adminKeyHash = Array.from(new Uint8Array(adminKeyHashBuffer))\n .map(b => b.toString(16).padStart(2, '0'))\n .join('');\n \n const expiresAt = tier === 'premium' \n ? new Date(Date.now() + 365 * 24 * 60 * 60 * 1000).toISOString()\n : null;\n \n await sqlite.execute({\n sql: `INSERT INTO magic_words (word, url, admin_key_hash, tier, expires_at) VALUES (?, ?, ?, ?, ?)`,\n args: [word, url, adminKeyHash, tier, expiresAt]\n });\n \n return Response.json({ success: true, word, adminKey, tier, expiresAt }, { status: 201 });\n}\n\nasync function handleUpdate(body: { word: string; adminKey: string; url?: string; newWord?: string }): Promise {\n const { word, adminKey, url, newWord } = body;\n \n if (!word || !adminKey) {\n return Response.json({ error: 'missing_fields' }, { status: 400 });\n }\n \n const keyHashBuffer = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(adminKey));\n const keyHash = Array.from(new Uint8Array(keyHashBuffer))\n .map(b => b.toString(16).padStart(2, '0'))\n .join('');\n \n const result = await sqlite.execute({\n sql: `SELECT id, tier FROM magic_words WHERE word = ? AND admin_key_hash = ?`,\n args: [word.toLowerCase(), keyHash]\n });\n \n if (result.rows.length === 0) {\n return Response.json({ error: 'unauthorized' }, { status: 403 });\n }\n \n const updates: string[] = [];\n const args: (string | null)[] = [];\n \n if (url) {\n try {\n new URL(url);\n updates.push('url = ?');\n args.push(url);\n } catch {\n return Response.json({ error: 'invalid_url' }, { status: 400 });\n }\n }\n \n if (newWord && result.rows[0][1] === 'premium') {\n const existing = await sqlite.execute({\n sql: `SELECT id FROM magic_words WHERE word = ?`,\n args: [newWord.toLowerCase()]\n });\n if (existing.rows.length > 0) {\n return Response.json({ error: 'word_taken' }, { status: 409 });\n }\n updates.push('word = ?');\n args.push(newWord.toLowerCase());\n }\n \n if (updates.length === 0) {\n return Response.json({ error: 'nothing_to_update' }, { status: 400 });\n }\n \n args.push(word.toLowerCase());\n \n await sqlite.execute({\n sql: `UPDATE magic_words SET ${updates.join(', ')} WHERE word = ?`,\n args\n });\n \n return Response.json({ success: true });\n}\n\nasync function handleDelete(body: { word: string; adminKey: string }): Promise {\n const { word, adminKey } = body;\n \n if (!word || !adminKey) {\n return Response.json({ error: 'missing_fields' }, { status: 400 });\n }\n \n const keyHashBuffer = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(adminKey));\n const keyHash = Array.from(new Uint8Array(keyHashBuffer))\n .map(b => b.toString(16).padStart(2, '0'))\n .join('');\n \n const result = await sqlite.execute({\n sql: `DELETE FROM magic_words WHERE word = ? AND admin_key_hash = ?`,\n args: [word.toLowerCase(), keyHash]\n });\n \n if (result.rowsAffected === 0) {\n return Response.json({ error: 'unauthorized_or_not_found' }, { status: 403 });\n }\n \n return Response.json({ success: true });\n}\n\n// Verify admin key and return word details for editing\nasync function handleVerifyAdmin(body: { adminKey: string }): Promise {\n const { adminKey } = body;\n \n if (!adminKey) {\n return Response.json({ error: 'missing_fields' }, { status: 400 });\n }\n \n const keyHashBuffer = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(adminKey));\n const keyHash = Array.from(new Uint8Array(keyHashBuffer))\n .map(b => b.toString(16).padStart(2, '0'))\n .join('');\n \n const result = await sqlite.execute({\n sql: `SELECT word, url, tier, redirect_count, created_at, expires_at FROM magic_words WHERE admin_key_hash = ?`,\n args: [keyHash]\n });\n \n if (result.rows.length === 0) {\n return Response.json({ error: 'invalid_admin_key' }, { status: 403 });\n }\n \n const [word, url, tier, redirect_count, created_at, expires_at] = result.rows[0] as [string, string, string, number, string, string | null];\n \n return Response.json({ \n success: true, \n word, \n url, \n tier, \n redirectCount: redirect_count,\n createdAt: created_at,\n expiresAt: expires_at\n });\n}\n\n// =============================================================================\n// HTML PAGE\n// =============================================================================\n\nfunction App({ challenge }: { challenge: { id: string; nonce: string; difficulty: number; expires: number } }) {\n return (\n \n \n \n \n Magic Word\n \n \n \n

Diff · v9