[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_185":186,"_187":188},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_139":-5,"_20":140,"_22":141,"_142":143,"_144":145,"_26":146,"_24":147,"_148":-5,"_149":-5,"_150":51,"_151":152,"_153":43,"_154":-5,"_155":-5,"_156":157},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","d303","name","dino-galaga-tech-bash","branchName","main","version","path","index.html","project",{"_33":80,"_13":14,"_44":81,"_82":-5,"_83":51,"_84":85,"_86":85,"_87":88,"_89":-5,"_90":91,"_92":-5,"_93":51,"_94":-5,"_95":-5,"_96":97,"_98":99,"_100":101,"_102":103,"_104":105,"_106":-5,"_107":108,"_109":108,"_110":111,"_112":111,"_113":111,"_114":108,"_115":108,"_116":117,"_118":119,"_120":121,"_122":51},"tree",[54,55,56],"file",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":24,"_48":49,"_50":51,"_52":-5,"_18":53},"contents",[],"upstream","pull","ahead","behind","envVars","id","22b8d352-817b-43a9-a894-5f26131ed467","fileId","38bedb56-65c4-11f1-9675-1607ee4eb77e","parentId","branchId","ab23cbc1-db35-4b0d-a796-fd9d0e51bffc","branchVersion",12,"latest",true,"createdAt",["D",1781794840961],3,"fileType","content","\n\n\n\n\n\n\n\nDino Galaga: Tech Bash Extinction Run\n\n\n\n

\n \n \n

\n\n

DINO GALAGA

Tech Bash Extinction Run

\n \n

Drag to fly · auto-fire while touching.
Keys: ←→/A D move, Space shoot, P pause.

Top Pilots

Loading scores…

\n\n

PAUSED

\n \n \n

\n\n

Extinction Achieved

Wave 1

\n \n

\n \n \n

\n\n

Leaderboard

\n \n \n

\n\n\n\n\n","deleted",false,"label",[19],{"_33":71,"_13":72,"_35":73,"_37":-5,"_38":39,"_40":74,"_42":43,"_44":75,"_17":76,"_47":24,"_48":77,"_50":51,"_52":-5,"_65":78,"_18":79},{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":68,"_17":46,"_47":24,"_48":49,"_50":51,"_52":-5,"_65":69,"_18":70},{"_33":57,"_13":58,"_35":59,"_37":-5,"_38":39,"_40":60,"_42":43,"_44":61,"_17":62,"_47":63,"_48":64,"_50":51,"_52":-5,"_65":66,"_18":67},"d4bded80-5dee-45fc-8050-c0da94cae48f","main.http.tsx","38aae362-65c4-11f1-bc95-1607ee4eb77e",10,["D",1781269063231],5,"http","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { readFile } from \"https://esm.town/v/std/utils/index.ts\";\n\nconst MAX_SCORE = 50_000_000;\nconst MAX_WAVE = 500;\nconst MAX_DURATION_MS = 6 * 60 * 60 * 1000; // 6 hours\nconst MAX_PTS_PER_SEC = 5000; // plausibility ceiling\nconst RATE_LIMIT_PER_10_MIN = 20;\n\nlet ready = false;\nasync function init() {\n if (ready) return;\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS scores (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n score INTEGER NOT NULL,\n wave INTEGER NOT NULL,\n duration_ms INTEGER NOT NULL,\n created_at TEXT NOT NULL,\n user_agent TEXT,\n client_id TEXT\n )`,\n `CREATE TABLE IF NOT EXISTS game_sessions (\n id TEXT PRIMARY KEY,\n created_at TEXT NOT NULL,\n used INTEGER NOT NULL DEFAULT 0\n )`,\n ]);\n ready = true;\n}\n\nconst CORS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\nfunction json(body: unknown, status = 200): Response {\n return new Response(JSON.stringify(body), {\n status,\n headers: {\n \"Content-Type\": \"application/json; charset=utf-8\",\n \"Cache-Control\": \"no-store\",\n ...CORS,\n },\n });\n}\n\nfunction cleanName(raw: unknown): string {\n return String(raw ?? \"\")\n .replace(/<[^>]*>/g, \"\")\n // deno-lint-ignore no-control-regex\n .replace(/[\\u0000-\\u001f\\u007f<>&\"'`\\\\]/g, \"\")\n .replace(/\\s+/g, \" \")\n .trim()\n .slice(0, 24);\n}\n\nasync function topScores(limit: number) {\n const r = await sqlite.execute({\n sql: `SELECT name, score, wave, created_at FROM scores\n ORDER BY score DESC, wave DESC, created_at ASC LIMIT ?`,\n args: [limit],\n });\n return r.rows;\n}\n\nasync function rankFor(score: number, wave: number, createdAt: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT COUNT(*) AS c FROM scores\n WHERE score > ? OR (score = ? AND wave > ?)\n OR (score = ? AND wave = ? AND created_at < ?)`,\n args: [score, score, wave, score, wave, createdAt],\n });\n return Number((r.rows[0] as unknown as { c: number }).c) + 1;\n}\n\nasync function handleSubmit(req: Request): Promise {\n let b: Record;\n try {\n b = await req.json();\n } catch {\n return json({ ok: false, error: \"Invalid JSON body.\" }, 400);\n }\n\n const name = cleanName(b?.name);\n if (!name) return json({ ok: false, error: \"A display name is required.\" }, 400);\n\n const score = Number(b?.score);\n const wave = Number(b?.wave);\n const duration = Number(b?.duration_ms);\n if (!Number.isInteger(score) || score < 0 || score > MAX_SCORE) {\n return json({ ok: false, error: \"Invalid score.\" }, 400);\n }\n if (!Number.isInteger(wave) || wave < 1 || wave > MAX_WAVE) {\n return json({ ok: false, error: \"Invalid wave.\" }, 400);\n }\n if (!Number.isFinite(duration) || duration <= 0 || duration > MAX_DURATION_MS) {\n return json({ ok: false, error: \"Invalid duration.\" }, 400);\n }\n if (score > 1000 && score / (duration / 1000) > MAX_PTS_PER_SEC) {\n return json({ ok: false, error: \"Score rejected (not plausible).\" }, 400);\n }\n\n const clientId = typeof b?.client_id === \"string\" ? b.client_id.slice(0, 64) : null;\n const sessionId = typeof b?.session_id === \"string\" ? b.session_id.slice(0, 64) : null;\n const createdAt = new Date().toISOString();\n\n // Light rate limit per client_id.\n if (clientId) {\n const since = new Date(Date.now() - 10 * 60 * 1000).toISOString();\n const r = await sqlite.execute({\n sql: `SELECT COUNT(*) AS c FROM scores WHERE client_id = ? AND created_at > ?`,\n args: [clientId, since],\n });\n if (Number((r.rows[0] as unknown as { c: number }).c) >= RATE_LIMIT_PER_10_MIN) {\n return json({ ok: false, error: \"Too many submissions. Take a breather!\" }, 429);\n }\n }\n\n // One submission per game session: duplicates are acknowledged but not re-inserted.\n if (sessionId) {\n const s = await sqlite.execute({\n sql: `SELECT used FROM game_sessions WHERE id = ?`,\n args: [sessionId],\n });\n if (s.rows.length && Number((s.rows[0] as unknown as { used: number }).used) === 1) {\n const rank = await rankFor(score, wave, createdAt);\n return json({\n ok: true,\n duplicate: true,\n rank,\n score: { name, score, wave, created_at: createdAt },\n });\n }\n if (s.rows.length) {\n await sqlite.execute({\n sql: `UPDATE game_sessions SET used = 1 WHERE id = ?`,\n args: [sessionId],\n });\n }\n }\n\n await sqlite.execute({\n sql: `INSERT INTO scores (id, name, score, wave, duration_ms, created_at, user_agent, client_id)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n crypto.randomUUID(),\n name,\n score,\n wave,\n Math.floor(duration),\n createdAt,\n (req.headers.get(\"user-agent\") ?? \"\").slice(0, 200),\n clientId,\n ],\n });\n\n const rank = await rankFor(score, wave, createdAt);\n return json({\n ok: true,\n rank,\n score: { name, score, wave, created_at: createdAt },\n });\n}\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS });\n }\n\n const url = new URL(req.url);\n const path = url.pathname;\n\n try {\n await init();\n\n if (req.method === \"GET\" && (path === \"/\" || path === \"/index.html\")) {\n const html = await readFile(\"/index.html\", import.meta.url);\n return new Response(html, {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n }\n\n if (req.method === \"GET\" && path === \"/api/health\") {\n return json({ ok: true });\n }\n\n if (req.method === \"GET\" && path === \"/api/leaderboard\") {\n const limit = Math.max(1, Math.min(100, Number(url.searchParams.get(\"limit\")) || 50));\n return json({ scores: await topScores(limit) });\n }\n\n if (req.method === \"POST\" && path === \"/api/session\") {\n const id = crypto.randomUUID();\n await sqlite.execute({\n sql: `INSERT INTO game_sessions (id, created_at, used) VALUES (?, ?, 0)`,\n args: [id, new Date().toISOString()],\n });\n return json({ session_id: id });\n }\n\n if (req.method === \"POST\" && path === \"/api/score\") {\n return await handleSubmit(req);\n }\n\n return json({ ok: false, error: \"Not found.\" }, 404);\n } catch (err) {\n console.error(\"Unhandled error:\", err);\n return json({ ok: false, error: \"Server error. Try again.\" }, 500);\n }\n}\n","children",[],[58],["D",1781794840961],[],[19],"ed38eb35-fa4b-45c8-bba6-2f438101a7fa","README.md","389a984a-65c4-11f1-8977-1607ee4eb77e",9,["D",1781269033649],1,"# Dino Galaga: Tech Bash Extinction Run\n\nA mobile-first, Galaga-style arcade shooter with a dinosaur theme, hosted entirely on\n[Val Town](https://val.town). One HTML file for the game, one HTTP val for hosting +\nthe live leaderboard (Val Town SQLite).\n\n**Play it:** https://tinyurl.com/29c4qac2\n(full URL: https://d303--38aae36265c411f1bc951607ee4eb77e.web.val.run/)\n\n## Files\n\n- `index.html` — the complete game client (HTML + CSS + JS, no build step, no external assets).\n- `main.http.tsx` — Val Town HTTP handler: serves the game at `/` and provides the API.\n\n## API\n\n- `GET /` — the game.\n- `GET /api/leaderboard?limit=50` — top scores (sorted score desc, wave desc, created_at asc).\n- `POST /api/score` — `{ name, score, wave, duration_ms, client_id, session_id }` → `{ ok, rank, score }`.\n- `POST /api/session` — creates a game session id (one score submission per session).\n- `GET /api/health` — health check.\n\nServer-side validation: name required/sanitized/max 24 chars, score 0..50,000,000,\nwave >= 1, sane duration, plausibility cap on points-per-second, light per-client\nrate limiting. Duplicate submissions for the same session are acknowledged without\nre-inserting.\n\n## Controls\n\n- **Desktop:** Arrow keys / A,D to move (W,S for limited vertical), Space to shoot, P pause, M mute, Enter start.\n- **Mobile:** drag anywhere to fly (ship floats above your finger), auto-fire while touching, big pause/mute buttons.\n\n## Deploy\n\n```bash\nexport PATH=\"$HOME/.deno/bin:$PATH\"\nvt push # from this directory\nvt tail # watch logs during the event\n```\n\nThe live URL comes from the Val Town files API (`links.endpoint` of `main.http.tsx`):\n\n```bash\nVAL_ID=\"$(python3 -c \"import json;print(json.load(open('.vt/state.json'))['val']['id'])\")\"\ncurl -s \"https://api.val.town/v2/vals/$VAL_ID/files?path=&recursive=true\" | python3 -m json.tool\n```\n",[],[72],"0fb8a63d-82ef-4401-875a-8ea881e14fa3",["D",1781201995909],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","897e2fa3-2473-4708-b5ef-7761fa0f807a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019eacf2-a6f2-717d-b165-27fd94533b31","tursoName","0fb8a63d82ef4401875a8ea881e14fa3","tursoHostname","0fb8a63d82ef4401875a8ea881e14fa3-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789500119686],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_138":134},"org",{"_11":12,"_131":132,"_133":134,"_90":91,"_135":136,"_137":51},"branch",{"_17":41,"_13":16,"_33":39,"_123":80,"_124":-5,"_125":-5,"_126":-5,"_127":-5,"_128":-5,"_129":14,"_130":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Nic Borg","avatar","https://lh3.googleusercontent.com/a/ACg8ocJj5sPkSvBVBBg85bKDCntXEdLMmthzGboRhVHdXMb1GzYqFw=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":80,"_13":14,"_44":180,"_82":-5,"_83":51,"_84":85,"_86":85,"_87":88,"_89":-5,"_90":91,"_92":-5,"_93":51,"_94":-5,"_95":-5,"_96":97,"_98":99,"_100":101,"_102":103,"_104":181,"_106":-5,"_107":108,"_109":108,"_110":111,"_112":111,"_113":111,"_114":108,"_115":108,"_116":182,"_118":183,"_120":184,"_122":51},[171,172,173],"files",[171,172,173],"counts",{"_162":97,"_163":76,"_164":97,"_32":165,"_166":167},[],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":24,"_48":49,"_50":51,"_52":-5,"_18":161},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[158],"hasHttpFiles","grants","orgs","customDomains",{},{"_33":159,"_160":-5},"09c136e9-d336-4800-928e-9e65b8182436","reporterId",[19],"pulls","branches","forks",{"_168":97,"_170":97},"connections",{"_168":97,"_169":97},"count","unfilledCount","emptyCount",{"_33":71,"_13":72,"_35":73,"_37":-5,"_38":39,"_40":74,"_42":43,"_44":75,"_17":76,"_47":24,"_48":77,"_50":51,"_52":-5,"_65":178,"_18":179},{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":68,"_17":46,"_47":24,"_48":49,"_50":51,"_52":-5,"_65":176,"_18":177},{"_33":57,"_13":58,"_35":59,"_37":-5,"_38":39,"_40":60,"_42":43,"_44":61,"_17":62,"_47":63,"_48":64,"_50":51,"_52":-5,"_65":174,"_18":175},[],[58],[],[19],[],[72],["D",1781201995909],["D",1789500119686],{"_11":12,"_138":134},{"_11":12,"_131":132,"_133":134,"_90":91,"_135":136,"_137":51},{"_17":41,"_13":16,"_33":39,"_123":80,"_124":-5,"_125":-5,"_126":-5,"_127":-5,"_128":-5,"_129":14,"_130":12},"ctx",{"_116":-5,"_155":218,"_219":220,"_221":222,"_223":51,"_224":51,"_225":51,"_226":43,"_227":-5,"_228":-7,"_229":-7,"_230":97,"_231":51,"_232":51,"_233":-5,"_234":51,"_235":51,"_236":51,"_237":-5},"ENV",{"_189":190,"_191":192,"_193":16,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215,"_216":217},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]