[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_186":187,"_188":189},"routes/_app.x.$handle.$name",{"_97":96,"_32":44,"_106":87,"_27":52,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":123,"_124":-5,"_125":-5,"_126":127},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":25},"version",11,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":20,"_34":36,"_37":38,"_39":14,"_40":41,"_24":25},"previous",{"_30":31,"_32":28,"_33":20,"_34":35},"deleted",false,"deletedHere","path","index.html","latestPath","fileId","38bedb56-65c4-11f1-9675-1607ee4eb77e","name","fileType","content","\n\n\n\n\n\n\n\nDino Galaga: Tech Bash Extinction Run\n\n\n\n

\n \n \n

\n\n

DINO GALAGA

Tech Bash Extinction Run

\n \n

Drag to fly · auto-fire while touching.
Keys: ←→/A D move, Space shoot, P pause.

Top Pilots

Loading scores…

\n\n

PAUSED

\n \n \n

\n\n

Extinction Achieved

Wave 1

\n \n

\n \n \n

\n\n

Leaderboard

\n \n \n

\n\n\n\n\n","\n\n\n\n\n\n\n\nDino Galaga: Tech Bash Extinction Run\n\n\n\n

\n \n \n

\n\n

DINO GALAGA

Tech Bash Extinction Run

\n \n

Drag to fly · auto-fire while touching.
Keys: ←→/A D move, Space shoot, P pause.

Top Pilots

Loading scores…

\n\n

PAUSED

\n \n \n

\n\n

Extinction Achieved

Wave 1

\n \n

\n \n \n

\n\n

Leaderboard

\n \n \n

\n\n\n\n\n","createdAt",["D",1781269411642],"branchVersion","branchId","ab23cbc1-db35-4b0d-a796-fd9d0e51bffc","id","0fb8a63d-82ef-4401-875a-8ea881e14fa3","dino-galaga-tech-bash",["D",1781201995909],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","897e2fa3-2473-4708-b5ef-7761fa0f807a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019eacf2-a6f2-717d-b165-27fd94533b31","tursoName","0fb8a63d82ef4401875a8ea881e14fa3","tursoHostname","0fb8a63d82ef4401875a8ea881e14fa3-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789500119686],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_97":96,"_105":101},"org",{"_97":96,"_98":99,"_100":101,"_18":54,"_102":103,"_104":25},"branch",{"_13":86,"_32":87,"_42":41,"_88":43,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":44,"_95":96},"isOwned",12,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","d303","handle","displayName","Nic Borg","avatar","https://lh3.googleusercontent.com/a/ACg8ocJj5sPkSvBVBBg85bKDCntXEdLMmthzGboRhVHdXMb1GzYqFw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_42":43,"_32":44,"_37":181,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":64,"_65":66,"_67":182,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":183,"_81":184,"_83":185,"_85":25},"tree",[168,169,170],"files",[168,169,170],"counts",{"_158":60,"_159":155,"_160":60,"_161":162,"_163":164},"contents",[131,132,133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[128],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_42":129,"_130":-5},"09c136e9-d336-4800-928e-9e65b8182436","reporterId",{"_42":150,"_32":151,"_30":152,"_137":-5,"_40":41,"_39":153,"_139":123,"_37":154,"_13":155,"_33":20,"_34":156,"_24":25,"_144":-5,"_27":157},{"_42":146,"_32":28,"_30":31,"_137":-5,"_40":41,"_39":14,"_139":25,"_37":147,"_13":148,"_33":20,"_34":36,"_24":25,"_144":-5,"_27":149},{"_42":134,"_32":135,"_30":136,"_137":-5,"_40":41,"_39":138,"_139":123,"_37":140,"_13":141,"_33":142,"_34":143,"_24":25,"_144":-5,"_27":145},"d4bded80-5dee-45fc-8050-c0da94cae48f","main.http.tsx","38aae362-65c4-11f1-bc95-1607ee4eb77e","parentId",10,"latest",["D",1781269063231],5,"http","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { readFile } from \"https://esm.town/v/std/utils/index.ts\";\n\nconst MAX_SCORE = 50_000_000;\nconst MAX_WAVE = 500;\nconst MAX_DURATION_MS = 6 * 60 * 60 * 1000; // 6 hours\nconst MAX_PTS_PER_SEC = 5000; // plausibility ceiling\nconst RATE_LIMIT_PER_10_MIN = 20;\n\nlet ready = false;\nasync function init() {\n if (ready) return;\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS scores (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n score INTEGER NOT NULL,\n wave INTEGER NOT NULL,\n duration_ms INTEGER NOT NULL,\n created_at TEXT NOT NULL,\n user_agent TEXT,\n client_id TEXT\n )`,\n `CREATE TABLE IF NOT EXISTS game_sessions (\n id TEXT PRIMARY KEY,\n created_at TEXT NOT NULL,\n used INTEGER NOT NULL DEFAULT 0\n )`,\n ]);\n ready = true;\n}\n\nconst CORS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\nfunction json(body: unknown, status = 200): Response {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\n \"Content-Type\": \"application/json; charset=utf-8\",\n \"Cache-Control\": \"no-store\",\n ...CORS,\n },\n });\n}\n\nfunction cleanName(raw: unknown): string {\n return String(raw ?? \"\")\n .replace(/<[^>]*>/g, \"\")\n // deno-lint-ignore no-control-regex\n .replace(/[\\u0000-\\u001f\\u007f<>&\"'`\\\\]/g, \"\")\n .replace(/\\s+/g, \" \")\n .trim()\n .slice(0, 24);\n}\n\nasync function topScores(limit: number) {\n const r = await sqlite.execute({\n sql: `SELECT name, score, wave, created_at FROM scores\n ORDER BY score DESC, wave DESC, created_at ASC LIMIT ?`,\n args: [limit],\n });\n return r.rows;\n}\n\nasync function rankFor(score: number, wave: number, createdAt: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT COUNT(*) AS c FROM scores\n WHERE score > ? OR (score = ? AND wave > ?)\n OR (score = ? AND wave = ? AND created_at < ?)`,\n args: [score, score, wave, score, wave, createdAt],\n });\n return Number((r.rows[0] as unknown as { c: number }).c) + 1;\n}\n\nasync function handleSubmit(req: Request): Promise {\n let b: Record;\n try {\n b = await req.json();\n } catch {\n return json({ ok: false, error: \"Invalid JSON body.\" }, 400);\n }\n\n const name = cleanName(b?.name);\n if (!name) return json({ ok: false, error: \"A display name is required.\" }, 400);\n\n const score = Number(b?.score);\n const wave = Number(b?.wave);\n const duration = Number(b?.duration_ms);\n if (!Number.isInteger(score) || score < 0 || score > MAX_SCORE) {\n return json({ ok: false, error: \"Invalid score.\" }, 400);\n }\n if (!Number.isInteger(wave) || wave < 1 || wave > MAX_WAVE) {\n return json({ ok: false, error: \"Invalid wave.\" }, 400);\n }\n if (!Number.isFinite(duration) || duration <= 0 || duration > MAX_DURATION_MS) {\n return json({ ok: false, error: \"Invalid duration.\" }, 400);\n }\n if (score > 1000 && score / (duration / 1000) > MAX_PTS_PER_SEC) {\n return json({ ok: false, error: \"Score rejected (not plausible).\" }, 400);\n }\n\n const clientId = typeof b?.client_id === \"string\" ? b.client_id.slice(0, 64) : null;\n const sessionId = typeof b?.session_id === \"string\" ? b.session_id.slice(0, 64) : null;\n const createdAt = new Date().toISOString();\n\n // Light rate limit per client_id.\n if (clientId) {\n const since = new Date(Date.now() - 10 * 60 * 1000).toISOString();\n const r = await sqlite.execute({\n sql: `SELECT COUNT(*) AS c FROM scores WHERE client_id = ? AND created_at > ?`,\n args: [clientId, since],\n });\n if (Number((r.rows[0] as unknown as { c: number }).c) >= RATE_LIMIT_PER_10_MIN) {\n return json({ ok: false, error: \"Too many submissions. Take a breather!\" }, 429);\n }\n }\n\n // One submission per game session: duplicates are acknowledged but not re-inserted.\n if (sessionId) {\n const s = await sqlite.execute({\n sql: `SELECT used FROM game_sessions WHERE id = ?`,\n args: [sessionId],\n });\n if (s.rows.length && Number((s.rows[0] as unknown as { used: number }).used) === 1) {\n const rank = await rankFor(score, wave, createdAt);\n return json({\n ok: true,\n duplicate: true,\n rank,\n score: { name, score, wave, created_at: createdAt },\n });\n }\n if (s.rows.length) {\n await sqlite.execute({\n sql: `UPDATE game_sessions SET used = 1 WHERE id = ?`,\n args: [sessionId],\n });\n }\n }\n\n await sqlite.execute({\n sql: `INSERT INTO scores (id, name, score, wave, duration_ms, created_at, user_agent, client_id)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n crypto.randomUUID(),\n name,\n score,\n wave,\n Math.floor(duration),\n createdAt,\n (req.headers.get(\"user-agent\") ?? \"\").slice(0, 200),\n clientId,\n ],\n });\n\n const rank = await rankFor(score, wave, createdAt);\n return json({\n ok: true,\n rank,\n score: { name, score, wave, created_at: createdAt },\n });\n}\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS });\n }\n\n const url = new URL(req.url);\n const path = url.pathname;\n\n try {\n await init();\n\n if (req.method === \"GET\" && (path === \"/\" || path === \"/index.html\")) {\n const html = await readFile(\"/index.html\", import.meta.url);\n return new Response(html, {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n }\n\n if (req.method === \"GET\" && path === \"/api/health\") {\n return json({ ok: true });\n }\n\n if (req.method === \"GET\" && path === \"/api/leaderboard\") {\n const limit = Math.max(1, Math.min(100, Number(url.searchParams.get(\"limit\")) || 50));\n return json({ scores: await topScores(limit) });\n }\n\n if (req.method === \"POST\" && path === \"/api/session\") {\n const id = crypto.randomUUID();\n await sqlite.execute({\n sql: `INSERT INTO game_sessions (id, created_at, used) VALUES (?, ?, 0)`,\n args: [id, new Date().toISOString()],\n });\n return json({ session_id: id });\n }\n\n if (req.method === \"POST\" && path === \"/api/score\") {\n return await handleSubmit(req);\n }\n\n return json({ ok: false, error: \"Not found.\" }, 404);\n } catch (err) {\n console.error(\"Unhandled error:\", err);\n return json({ ok: false, error: \"Server error. Try again.\" }, 500);\n }\n}\n","label",[135],"a8d28383-a2f4-4d4e-b18a-ed8c3573e01b",["D",1781269411642],2,[28],"ed38eb35-fa4b-45c8-bba6-2f438101a7fa","README.md","389a984a-65c4-11f1-8977-1607ee4eb77e",9,["D",1781269033649],1,"# Dino Galaga: Tech Bash Extinction Run\n\nA mobile-first, Galaga-style arcade shooter with a dinosaur theme, hosted entirely on\n[Val Town](https://val.town). One HTML file for the game, one HTTP val for hosting +\nthe live leaderboard (Val Town SQLite).\n\n**Play it:** https://tinyurl.com/29c4qac2\n(full URL: https://d303--38aae36265c411f1bc951607ee4eb77e.web.val.run/)\n\n## Files\n\n- `index.html` — the complete game client (HTML + CSS + JS, no build step, no external assets).\n- `main.http.tsx` — Val Town HTTP handler: serves the game at `/` and provides the API.\n\n## API\n\n- `GET /` — the game.\n- `GET /api/leaderboard?limit=50` — top scores (sorted score desc, wave desc, created_at asc).\n- `POST /api/score` — `{ name, score, wave, duration_ms, client_id, session_id }` → `{ ok, rank, score }`.\n- `POST /api/session` — creates a game session id (one score submission per session).\n- `GET /api/health` — health check.\n\nServer-side validation: name required/sanitized/max 24 chars, score 0..50,000,000,\nwave >= 1, sane duration, plausibility cap on points-per-second, light per-client\nrate limiting. Duplicate submissions for the same session are acknowledged without\nre-inserting.\n\n## Controls\n\n- **Desktop:** Arrow keys / A,D to move (W,S for limited vertical), Space to shoot, P pause, M mute, Enter start.\n- **Mobile:** drag anywhere to fly (ship floats above your finger), auto-fire while touching, big pause/mute buttons.\n\n## Deploy\n\n```bash\nexport PATH=\"$HOME/.deno/bin:$PATH\"\nvt push # from this directory\nvt tail # watch logs during the event\n```\n\nThe live URL comes from the Val Town files API (`links.endpoint` of `main.http.tsx`):\n\n```bash\nVAL_ID=\"$(python3 -c \"import json;print(json.load(open('.vt/state.json'))['val']['id'])\")\"\ncurl -s \"https://api.val.town/v2/vals/$VAL_ID/files?path=&recursive=true\" | python3 -m json.tool\n```\n",[151],"pulls","branches","forks","envVars",{"_165":60,"_167":60},"connections",{"_165":60,"_166":60},"count","unfilledCount","emptyCount",{"_42":150,"_32":151,"_30":152,"_137":-5,"_40":41,"_39":153,"_139":123,"_37":178,"_13":155,"_33":20,"_34":156,"_24":25,"_144":-5,"_172":179,"_27":180},{"_42":146,"_32":28,"_30":31,"_137":-5,"_40":41,"_39":14,"_139":25,"_37":175,"_13":148,"_33":20,"_34":36,"_24":25,"_144":-5,"_172":176,"_27":177},{"_42":134,"_32":135,"_30":136,"_137":-5,"_40":41,"_39":138,"_139":123,"_37":171,"_13":141,"_33":142,"_34":143,"_24":25,"_144":-5,"_172":173,"_27":174},["D",1781269063231],"children",[],[135],["D",1781269411642],[],[28],["D",1781269033649],[],[151],["D",1781201995909],["D",1789500119686],{"_97":96,"_105":101},{"_97":96,"_98":99,"_100":101,"_18":54,"_102":103,"_104":25},{"_13":86,"_32":87,"_42":41,"_88":43,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":44,"_95":96},"ctx",{"_79":-5,"_125":219,"_220":221,"_222":223,"_224":25,"_225":25,"_226":25,"_227":123,"_228":-5,"_229":-7,"_230":-7,"_231":60,"_232":25,"_233":25,"_234":-5,"_235":25,"_236":25,"_237":25,"_238":-5},"ENV",{"_190":191,"_192":193,"_194":87,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v11