Hi

\"\n});\n```\n\n## Val Town Utility Functions\n\nVal Town provides several utility functions to help with common project tasks.\n\n### Importing Utilities\n\nAlways import utilities with version pins to avoid breaking changes:\n\n```ts\nimport { parseProject, readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n```\n\n### Available Utilities\n\n\n#### **serveFile** - Serve project files with proper content types\n\nFor example, in Hono:\n\n```ts\n// serve all files in frontend/ and shared/\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n```\n\n#### **readFile** - Read files from within the project:\n\n```ts\n// Read a file from the project\nconst fileContent = await readFile(\"/frontend/index.html\", import.meta.url);\n```\n\n#### **listFiles** - List all files in the project\n\n```ts\nconst files = await listFiles(import.meta.url);\n```\n\n#### **parseProject** - Extract information about the current project from import.meta.url\n\nThis is useful for including info for linking back to a val, ie in \"view source\" urls:\n\n```ts\nconst projectVal = parseProject(import.meta.url);\nconsole.log(projectVal.username); // Owner of the project\nconsole.log(projectVal.name); // Project name\nconsole.log(projectVal.version); // Version number\nconsole.log(projectVal.branch); // Branch name\nconsole.log(projectVal.links.self.project); // URL to the project page\n```\n\nHowever, it's *extremely importing* to note that `parseProject` and other Standard Library utilities ONLY RUN ON THE SERVER.\nIf you need access to this data on the client, run it in the server and pass it to the client by splicing it into the HTML page\nor by making an API request for it.\n\n## Val Town Platform Specifics\n\n- **Redirects:** Use `return new Response(null, { status: 302, headers: { Location: \"/place/to/redirect\" }})` instead of `Response.redirect` which is broken\n- **Images:** Avoid external images or base64 images. Use emojis, unicode symbols, or icon fonts/libraries instead\n- **AI Image:** To inline generate an AI image use: `

`\n- **Storage:** DO NOT use the Deno KV module for storage\n- **Browser APIs:** DO NOT use the `alert()`, `prompt()`, or `confirm()` methods\n- **Weather Data:** Use open-meteo for weather data (doesn't require API keys) unless otherwise specified\n- **View Source:** Add a view source link by importing & using `import.meta.url.replace(\"ems.sh\", \"val.town)\"` (or passing this data to the client) and include `target=\"_top\"` attribute\n- **Error Debugging:** Add `` to HTML to capture client-side errors\n- **Error Handling:** Only use try...catch when there's a clear local resolution; Avoid catches that merely log or return 500s. Let errors bubble up with full context\n- **Environment Variables:** Use `Deno.env.get('keyname')` when you need to, but generally prefer APIs that don't require keys\n- **Imports:** Use `https://esm.sh` for npm and Deno dependencies to ensure compatibility on server and browser\n- **Storage Strategy:** Only use backend storage if explicitly required; prefer simple static client-side sites\n- **React Configuration:** When using React libraries, pin versions with `?deps=react@18.2.0,react-dom@18.2.0` and start the file with `/** @jsxImportSource https://esm.sh/react@18.2.0 */`\n- Ensure all React dependencies and sub-dependencies are pinned to the same version\n- **Styling:** Default to using TailwindCSS via `` unless otherwise specified\n\n## Project Structure and Design Patterns\n\n### Recommended Directory Structure\n```\n├── backend/\n│ ├── database/\n│ │ ├── migrations.ts # Schema definitions\n│ │ ├── queries.ts # DB query functions\n│ │ └── README.md\n│ └── routes/ # Route modules\n│ ├── [route].ts\n│ └── static.ts # Static file serving\n│ ├── index.ts # Main entry point\n│ └── README.md\n├── frontend/\n│ ├── components/\n│ │ ├── App.tsx\n│ │ └── [Component].tsx\n│ ├── favicon.svg\n│ ├── index.html # Main HTML template\n│ ├── index.tsx # Frontend JS entry point\n│ ├── README.md\n│ └── style.css\n├── README.md\n└── shared/\n ├── README.md\n └── utils.ts # Shared types and functions\n```\n\n### Backend (Hono) Best Practices\n\n- Hono is the recommended API framework\n- Main entry point should be `backend/index.ts`\n- **Static asset serving:** Use the utility functions to read and serve project files:\n ```ts\n import { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n \n // serve all files in frontend/ and shared/\n app.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\n app.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n \n // For index.html, often you'll want to bootstrap with initial data\n app.get(\"/\", async c => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n \n // Inject data to avoid extra round-trips\n const initialData = await fetchInitialData();\n const dataScript = ``;\n \n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n });\n ```\n- Create RESTful API routes for CRUD operations\n- Always include this snippet at the top-level Hono app to re-throwing errors to see full stack traces:\n ```ts\n // Unwrap Hono errors to see original error details\n app.onError((err, c) => {\n throw err;\n });\n ```\n\n### Database Patterns\n- Run migrations on startup or comment out for performance\n- Change table names when modifying schemas rather than altering\n- Export clear query functions with proper TypeScript typing\n\n## Common Gotchas and Solutions\n\n1. **Environment Limitations:** \n - Val Town runs on Deno in a serverless context, not Node.js\n - Code in `shared/` must work in both frontend and backend environments\n - Cannot use `Deno` keyword in shared code\n - Use `https://esm.sh` for imports that work in both environments\n\n2. **SQLite Peculiarities:**\n - Limited support for ALTER TABLE operations\n - Create new tables with updated schemas and copy data when needed\n - Always run table creation before querying\n\n3. **React Configuration:**\n - All React dependencies must be pinned to 18.2.0\n - Always include `@jsxImportSource https://esm.sh/react@18.2.0` at the top of React files\n - Rendering issues often come from mismatched React versions\n\n4. **File Handling:**\n - Val Town only supports text files, not binary\n - Use the provided utilities to read files across branches and forks\n - For files in the project, use `readFile` helpers\n\n5. **API Design:**\n - `fetch` handler is the entry point for HTTP vals\n - Run the Hono app with `export default app.fetch // This is the entry point for HTTP vals`\n\n",[],[172],{"_104":180,"_95":181,"_152":182,"_154":-5,"_155":138,"_156":183,"_158":159,"_106":184,"_100":32,"_161":185,"_163":186,"_165":22,"_166":-5,"_167":187,"_98":188},"7c2de338-8e96-11f0-88eb-0224a6c84d84","auth.ts","7c2de414-8e96-11f0-88eb-0224a6c84d84",6,["D",1757543742803],"script","// auth.ts - JWT Authentication system for RankWatch\n\nimport { create, getNumericDate, verify } from \"https://deno.land/x/djwt@v3.0.1/mod.ts\";\nimport { encodeBase64 } from \"https://deno.land/std@0.208.0/encoding/base64.ts\";\nimport { config, type UserPlan } from \"./config.ts\";\nimport { getDatabase } from \"./database.ts\";\n\n// Hash password using Web Crypto API\nexport async function hashPassword(password: string): Promise {\n const encoder = new TextEncoder();\n const data = encoder.encode(password);\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n return encodeBase64(new Uint8Array(hashBuffer));\n}\n\n// Verify password\nexport async function verifyPassword(password: string, hash: string): Promise {\n const hashedPassword = await hashPassword(password);\n return hashedPassword === hash;\n}\n\n// Generate API key\nexport function generateApiKey(): string {\n const array = new Uint8Array(32);\n crypto.getRandomValues(array);\n return encodeBase64(array);\n}\n\n// JWT token creation\nexport async function createJWT(userId: number, email: string, plan: UserPlan): Promise {\n const payload = {\n user_id: userId,\n email,\n plan,\n exp: getNumericDate(new Date(Date.now() + 7 * 24 * 60 * 60 * 1000)), // 7 days\n iat: getNumericDate(new Date()),\n };\n\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(config.jwt.secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\", \"verify\"]\n );\n\n return await create({ alg: \"HS256\", typ: \"JWT\" }, payload, key);\n}\n\n// Verify JWT token\nexport async function verifyJWT(token: string): Promise {\n try {\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(config.jwt.secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\", \"verify\"]\n );\n\n const payload = await verify(token, key);\n return payload;\n } catch (error) {\n throw new Error(\"Invalid token\");\n }\n}\n\n// User interface\nexport interface User {\n id: number;\n email: string;\n plan: UserPlan;\n api_key?: string;\n created_at: string;\n}\n\n// Register new user\nexport async function registerUser(email: string, password: string, plan: UserPlan = \"freemium\"): Promise<{ user: User; token: string }> {\n const db = getDatabase();\n \n // Check if user already exists\n const existingUser = await db.execute({\n sql: \"SELECT id FROM users WHERE email = ? AND deleted_at IS NULL\",\n args: [email],\n });\n\n if (existingUser.rows.length > 0) {\n throw new Error(\"User already exists\");\n }\n\n // Hash password and generate API key\n const passwordHash = await hashPassword(password);\n const apiKey = generateApiKey();\n\n // Insert user\n const result = await db.execute({\n sql: `INSERT INTO users (email, password_hash, plan, api_key) \n VALUES (?, ?, ?, ?) RETURNING id, email, plan, api_key, created_at`,\n args: [email, passwordHash, plan, apiKey],\n });\n\n const userData = result.rows[0];\n const user: User = {\n id: userData[0] as number,\n email: userData[1] as string,\n plan: userData[2] as UserPlan,\n api_key: userData[3] as string,\n created_at: userData[4] as string,\n };\n\n // Create JWT token\n const token = await createJWT(user.id, user.email, user.plan);\n\n return { user, token };\n}\n\n// Login user\nexport async function loginUser(email: string, password: string): Promise<{ user: User; token: string }> {\n const db = getDatabase();\n \n // Get user\n const result = await db.execute({\n sql: \"SELECT id, email, password_hash, plan, api_key, created_at FROM users WHERE email = ? AND deleted_at IS NULL\",\n args: [email],\n });\n\n if (result.rows.length === 0) {\n throw new Error(\"User not found\");\n }\n\n const userData = result.rows[0];\n const passwordHash = userData[2] as string;\n\n // Verify password\n const isValidPassword = await verifyPassword(password, passwordHash);\n if (!isValidPassword) {\n throw new Error(\"Invalid password\");\n }\n\n const user: User = {\n id: userData[0] as number,\n email: userData[1] as string,\n plan: userData[3] as UserPlan,\n api_key: userData[4] as string,\n created_at: userData[5] as string,\n };\n\n // Create JWT token\n const token = await createJWT(user.id, user.email, user.plan);\n\n return { user, token };\n}\n\n// Get user by ID\nexport async function getUserById(userId: number): Promise {\n const db = getDatabase();\n \n const result = await db.execute({\n sql: \"SELECT id, email, plan, api_key, created_at FROM users WHERE id = ? AND deleted_at IS NULL\",\n args: [userId],\n });\n\n if (result.rows.length === 0) {\n return null;\n }\n\n const userData = result.rows[0];\n return {\n id: userData[0] as number,\n email: userData[1] as string,\n plan: userData[2] as UserPlan,\n api_key: userData[3] as string,\n created_at: userData[4] as string,\n };\n}\n\n// Middleware to extract user from Authorization header\nexport async function extractUserFromToken(authHeader: string): Promise {\n if (!authHeader || !authHeader.startsWith(\"Bearer \")) {\n throw new Error(\"Missing or invalid authorization header\");\n }\n\n const token = authHeader.substring(7); // Remove \"Bearer \" prefix\n const payload = await verifyJWT(token);\n \n const user = await getUserById(payload.user_id);\n if (!user) {\n throw new Error(\"User not found\");\n }\n\n return user;\n}",[],[181],{"_104":190,"_95":191,"_152":192,"_154":-5,"_155":138,"_156":101,"_158":159,"_106":193,"_100":32,"_161":185,"_163":194,"_165":22,"_166":-5,"_167":195,"_98":196},"b0df238a-8e96-11f0-bee6-0224a6c84d84","authApi.ts","b0df2420-8e96-11f0-bee6-0224a6c84d84",["D",1757543831197],"// authApi.ts - Authentication API endpoints for RankWatch\n\nimport { Hono } from \"https://deno.land/x/hono@v3.12.6/mod.ts\";\nimport { cors } from \"https://deno.land/x/hono@v3.12.6/middleware.ts\";\nimport { registerUser, loginUser, getUserById, extractUserFromToken } from \"./auth.ts\";\nimport { createSuccessResponse, createErrorResponse, parseJsonBody, validateRequiredFields, isValidEmail, isValidPassword, logRequest } from \"./utils.ts\";\nimport { rateLimitMiddleware, checkRateLimit, getRateLimitHeaders } from \"./rateLimit.ts\";\nimport { initializeDatabase } from \"./database.ts\";\n\nconst app = new Hono();\n\n// CORS middleware\napp.use(\"*\", cors({\n origin: \"*\",\n allowMethods: [\"GET\", \"POST\", \"PUT\", \"DELETE\", \"OPTIONS\"],\n allowHeaders: [\"Content-Type\", \"Authorization\"],\n}));\n\n// Initialize database on startup\nlet dbInitialized = false;\nasync function ensureDatabase() {\n if (!dbInitialized) {\n await initializeDatabase();\n dbInitialized = true;\n }\n}\n\n// POST /auth/register - Create new user account\napp.post(\"/auth/register\", async (c) => {\n await ensureDatabase();\n logRequest(c.req.raw);\n\n try {\n const body = await parseJsonBody(c.req.raw);\n \n // Validate required fields\n const validation = validateRequiredFields(body, [\"email\", \"password\"]);\n if (!validation.valid) {\n return createErrorResponse(`Missing required fields: ${validation.missing?.join(\", \")}`, 400);\n }\n\n const { email, password, plan = \"freemium\" } = body;\n\n // Validate email format\n if (!isValidEmail(email)) {\n return createErrorResponse(\"Invalid email format\", 400);\n }\n\n // Validate password strength\n const passwordValidation = isValidPassword(password);\n if (!passwordValidation.valid) {\n return createErrorResponse(passwordValidation.message!, 400);\n }\n\n // Validate plan\n if (plan !== \"freemium\" && plan !== \"unlimited\") {\n return createErrorResponse(\"Invalid plan. Must be 'freemium' or 'unlimited'\", 400);\n }\n\n // Register user\n const result = await registerUser(email, password, plan);\n \n return createSuccessResponse({\n user: {\n id: result.user.id,\n email: result.user.email,\n plan: result.user.plan,\n created_at: result.user.created_at,\n },\n token: result.token,\n }, \"User registered successfully\");\n\n } catch (error) {\n console.error(\"Registration error:\", error);\n return createErrorResponse(error.message || \"Registration failed\", 400);\n }\n});\n\n// POST /auth/login - Authenticate user\napp.post(\"/auth/login\", async (c) => {\n await ensureDatabase();\n logRequest(c.req.raw);\n\n try {\n const body = await parseJsonBody(c.req.raw);\n \n // Validate required fields\n const validation = validateRequiredFields(body, [\"email\", \"password\"]);\n if (!validation.valid) {\n return createErrorResponse(`Missing required fields: ${validation.missing?.join(\", \")}`, 400);\n }\n\n const { email, password } = body;\n\n // Validate email format\n if (!isValidEmail(email)) {\n return createErrorResponse(\"Invalid email format\", 400);\n }\n\n // Login user\n const result = await loginUser(email, password);\n \n return createSuccessResponse({\n user: {\n id: result.user.id,\n email: result.user.email,\n plan: result.user.plan,\n created_at: result.user.created_at,\n },\n token: result.token,\n }, \"Login successful\");\n\n } catch (error) {\n console.error(\"Login error:\", error);\n return createErrorResponse(error.message || \"Login failed\", 401);\n }\n});\n\n// GET /auth/me - Get current user info\napp.get(\"/auth/me\", async (c) => {\n await ensureDatabase();\n \n try {\n const authHeader = c.req.header(\"authorization\");\n if (!authHeader) {\n return createErrorResponse(\"Authorization header required\", 401);\n }\n\n const user = await extractUserFromToken(authHeader);\n logRequest(c.req.raw, user.id);\n\n // Check rate limit\n const rateLimitResult = await checkRateLimit(user.id, user.plan, \"/auth/me\");\n if (!rateLimitResult.allowed) {\n return createErrorResponse(\"Rate limit exceeded\", 429);\n }\n\n const headers = getRateLimitHeaders(rateLimitResult, user.plan);\n \n const response = createSuccessResponse({\n id: user.id,\n email: user.email,\n plan: user.plan,\n created_at: user.created_at,\n }, \"User info retrieved successfully\");\n\n // Add rate limit headers\n Object.entries(headers).forEach(([key, value]) => {\n response.headers.set(key, value);\n });\n\n return response;\n\n } catch (error) {\n console.error(\"Get user error:\", error);\n return createErrorResponse(error.message || \"Failed to get user info\", 401);\n }\n});\n\n// POST /auth/refresh - Refresh JWT token\napp.post(\"/auth/refresh\", async (c) => {\n await ensureDatabase();\n \n try {\n const authHeader = c.req.header(\"authorization\");\n if (!authHeader) {\n return createErrorResponse(\"Authorization header required\", 401);\n }\n\n const user = await extractUserFromToken(authHeader);\n logRequest(c.req.raw, user.id);\n\n // Create new token\n const { createJWT } = await import(\"./auth.ts\");\n const newToken = await createJWT(user.id, user.email, user.plan);\n \n return createSuccessResponse({\n token: newToken,\n user: {\n id: user.id,\n email: user.email,\n plan: user.plan,\n created_at: user.created_at,\n },\n }, \"Token refreshed successfully\");\n\n } catch (error) {\n console.error(\"Token refresh error:\", error);\n return createErrorResponse(error.message || \"Failed to refresh token\", 401);\n }\n});\n\n// POST /auth/logout - Logout user (for completeness, stateless JWT)\napp.post(\"/auth/logout\", async (c) => {\n logRequest(c.req.raw);\n \n // Since we're using stateless JWT, logout is handled client-side\n // In a production app, you might want to maintain a blacklist of tokens\n return createSuccessResponse(null, \"Logout successful. Please remove the token from your client.\");\n});\n\n// Health check endpoint\napp.get(\"/auth/health\", async (c) => {\n await ensureDatabase();\n \n return createSuccessResponse({\n status: \"healthy\",\n timestamp: new Date().toISOString(),\n service: \"RankWatch Auth API\",\n });\n});\n\n// Export the Hono app\nexport default {\n fetch: app.fetch,\n};",[],[191],{"_104":198,"_95":199,"_152":200,"_154":-5,"_155":138,"_156":201,"_158":159,"_106":202,"_100":32,"_161":185,"_163":203,"_165":22,"_166":-5,"_167":204,"_98":205},"e9556bc6-8e95-11f0-95f6-0224a6c84d84","config.ts","e9556c84-8e95-11f0-95f6-0224a6c84d84",4,["D",1757543496435],"// config.ts - Configurações centralizadas do RankWatch API\n\nexport const config = {\n // Database\n database: {\n type: \"sqlite\" as const,\n // Preparado para migração futura para Turso\n url: Deno.env.get(\"DATABASE_URL\") || \":memory:\",\n },\n\n // JWT Configuration\n jwt: {\n secret: Deno.env.get(\"JWT_SECRET\") || \"rankwatch-secret-key-change-in-production\",\n expiresIn: \"7d\",\n algorithm: \"HS256\" as const,\n },\n\n // Rate Limiting\n rateLimit: {\n freemium: {\n requests: 100,\n windowMs: 60 * 60 * 1000, // 1 hour\n },\n unlimited: {\n requests: 1000,\n windowMs: 60 * 60 * 1000, // 1 hour\n },\n },\n\n // External APIs\n serper: {\n apiKey: Deno.env.get(\"SERPER_API_KEY\") || \"\",\n baseUrl: \"https://google.serper.dev\",\n timeout: 30000,\n },\n\n // Email (Resend)\n resend: {\n apiKey: Deno.env.get(\"RESEND_API_KEY\") || \"\",\n fromEmail: \"noreply@rankwatch.dev\",\n },\n\n // Plans\n plans: {\n freemium: {\n maxKeywords: 10,\n maxProjects: 1,\n updateFrequency: \"weekly\",\n historyDays: 30,\n },\n unlimited: {\n maxKeywords: -1, // unlimited\n maxProjects: -1, // unlimited\n updateFrequency: \"daily\",\n historyDays: -1, // unlimited\n },\n },\n\n // Server\n server: {\n port: parseInt(Deno.env.get(\"PORT\") || \"8000\"),\n baseUrl: Deno.env.get(\"BASE_URL\") || \"https://your-val.val.town\",\n },\n} as const;\n\nexport type Plan = keyof typeof config.plans;\nexport type UserPlan = \"freemium\" | \"unlimited\";",[],[199],{"_104":207,"_95":208,"_152":209,"_154":-5,"_155":138,"_156":210,"_158":159,"_106":211,"_100":32,"_161":185,"_163":212,"_165":22,"_166":-5,"_167":213,"_98":214},"70086a38-8e96-11f0-b661-0224a6c84d84","database.ts","70086af6-8e96-11f0-b661-0224a6c84d84",5,["D",1757543722416],"// database.ts - Database setup and schema for RankWatch\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite?v=4\";\n\n// Database connection singleton\nlet db: any = null;\n\nexport function getDatabase() {\n if (!db) {\n db = sqlite(\"rankwatch\");\n }\n return db;\n}\n\n// Initialize database schema\nexport async function initializeDatabase() {\n const database = getDatabase();\n\n // Users table\n await database.execute(`\n CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n email TEXT UNIQUE NOT NULL,\n password_hash TEXT NOT NULL,\n plan TEXT NOT NULL DEFAULT 'freemium' CHECK (plan IN ('freemium', 'unlimited')),\n api_key TEXT UNIQUE,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n updated_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n deleted_at DATETIME NULL\n )\n `);\n\n // Rate limiting table\n await database.execute(`\n CREATE TABLE IF NOT EXISTS rate_limits (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL,\n endpoint TEXT NOT NULL,\n requests_made INTEGER NOT NULL DEFAULT 0,\n window_start DATETIME NOT NULL,\n window_end DATETIME NOT NULL,\n FOREIGN KEY (user_id) REFERENCES users (id),\n UNIQUE(user_id, endpoint, window_start)\n )\n `);\n\n // Projects table\n await database.execute(`\n CREATE TABLE IF NOT EXISTS projects (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL,\n name TEXT NOT NULL,\n domain TEXT NOT NULL,\n location TEXT DEFAULT 'us',\n device TEXT DEFAULT 'desktop' CHECK (device IN ('desktop', 'mobile')),\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n updated_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n deleted_at DATETIME NULL,\n FOREIGN KEY (user_id) REFERENCES users (id)\n )\n `);\n\n // Keywords table\n await database.execute(`\n CREATE TABLE IF NOT EXISTS keywords (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n project_id INTEGER NOT NULL,\n keyword TEXT NOT NULL,\n target_url TEXT,\n active BOOLEAN DEFAULT TRUE,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n updated_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n deleted_at DATETIME NULL,\n FOREIGN KEY (project_id) REFERENCES projects (id)\n )\n `);\n\n // Rankings table\n await database.execute(`\n CREATE TABLE IF NOT EXISTS rankings (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n keyword_id INTEGER NOT NULL,\n position INTEGER,\n url TEXT,\n title TEXT,\n serp_features TEXT, -- JSON string\n checked_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY (keyword_id) REFERENCES keywords (id)\n )\n `);\n\n // Rank history table\n await database.execute(`\n CREATE TABLE IF NOT EXISTS rank_history (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n keyword_id INTEGER NOT NULL,\n position INTEGER,\n change_value INTEGER, -- positive = up, negative = down\n checked_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY (keyword_id) REFERENCES keywords (id)\n )\n `);\n\n // Alerts table\n await database.execute(`\n CREATE TABLE IF NOT EXISTS alerts (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n keyword_id INTEGER NOT NULL,\n trigger_type TEXT NOT NULL CHECK (trigger_type IN ('position_up', 'position_down', 'top_10_entry', 'page_1_lost')),\n threshold INTEGER NOT NULL,\n email TEXT NOT NULL,\n active BOOLEAN DEFAULT TRUE,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n deleted_at DATETIME NULL,\n FOREIGN KEY (keyword_id) REFERENCES keywords (id)\n )\n `);\n\n // Usage limits table\n await database.execute(`\n CREATE TABLE IF NOT EXISTS usage_limits (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL,\n searches_used INTEGER DEFAULT 0,\n period_start DATETIME NOT NULL,\n period_end DATETIME NOT NULL,\n FOREIGN KEY (user_id) REFERENCES users (id)\n )\n `);\n\n // Create indexes for performance\n await database.execute(`CREATE INDEX IF NOT EXISTS idx_users_email ON users (email)`);\n await database.execute(`CREATE INDEX IF NOT EXISTS idx_users_api_key ON users (api_key)`);\n await database.execute(`CREATE INDEX IF NOT EXISTS idx_projects_user_id ON projects (user_id)`);\n await database.execute(`CREATE INDEX IF NOT EXISTS idx_keywords_project_id ON keywords (project_id)`);\n await database.execute(`CREATE INDEX IF NOT EXISTS idx_rankings_keyword_id ON rankings (keyword_id)`);\n await database.execute(`CREATE INDEX IF NOT EXISTS idx_rankings_checked_at ON rankings (checked_at)`);\n await database.execute(`CREATE INDEX IF NOT EXISTS idx_rank_history_keyword_id ON rank_history (keyword_id)`);\n await database.execute(`CREATE INDEX IF NOT EXISTS idx_alerts_keyword_id ON alerts (keyword_id)`);\n await database.execute(`CREATE INDEX IF NOT EXISTS idx_rate_limits_user_endpoint ON rate_limits (user_id, endpoint)`);\n\n console.log(\"Database schema initialized successfully\");\n return database;\n}\n\n// Helper function to run migrations\nexport async function runMigrations() {\n // Future migrations can be added here\n console.log(\"Running database migrations...\");\n await initializeDatabase();\n console.log(\"Migrations completed\");\n}",[],[208],{"_104":216,"_95":217,"_152":218,"_154":-5,"_155":138,"_156":219,"_158":159,"_106":220,"_100":32,"_161":162,"_163":221,"_165":22,"_166":-5,"_167":222,"_98":223},"d469e2ee-8e92-11f0-8874-0224a6c84d84","deno.json","d469e460-8e92-11f0-8874-0224a6c84d84",1,["D",1757542172847],"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"files\": {\n \"include\": [\n \"deno:/https/esm.town/**/*\"\n ]\n },\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true,\n \"unstable-sloppy-imports\": true\n }\n}",[],[217],{"_104":225,"_95":226,"_152":227,"_154":-5,"_155":138,"_156":228,"_158":159,"_106":229,"_100":32,"_161":185,"_163":230,"_165":22,"_166":-5,"_167":231,"_98":232},"8edcebd2-8e96-11f0-a1ac-0224a6c84d84","rateLimit.ts","8edcec90-8e96-11f0-a1ac-0224a6c84d84",7,["D",1757543774152],"// rateLimit.ts - SQLite-based rate limiting system for RankWatch\n\nimport { config, type UserPlan } from \"./config.ts\";\nimport { getDatabase } from \"./database.ts\";\n\nexport interface RateLimitResult {\n allowed: boolean;\n remaining: number;\n resetTime: Date;\n message?: string;\n}\n\n// Get rate limit configuration for user plan\nfunction getRateLimitConfig(plan: UserPlan) {\n return config.rateLimit[plan];\n}\n\n// Clean up old rate limit records\nexport async function cleanupRateLimits(): Promise {\n const db = getDatabase();\n const oneDayAgo = new Date(Date.now() - 24 * 60 * 60 * 1000);\n \n await db.execute({\n sql: \"DELETE FROM rate_limits WHERE window_end < ?\",\n args: [oneDayAgo.toISOString()],\n });\n}\n\n// Check and update rate limit for user and endpoint\nexport async function checkRateLimit(\n userId: number, \n plan: UserPlan, \n endpoint: string\n): Promise {\n const db = getDatabase();\n const config = getRateLimitConfig(plan);\n const now = new Date();\n const windowStart = new Date(now.getTime() - config.windowMs);\n const windowEnd = new Date(now.getTime());\n\n // First, cleanup old records\n await cleanupRateLimits();\n\n // Check current usage in this window\n const existingLimit = await db.execute({\n sql: `SELECT id, requests_made, window_start, window_end \n FROM rate_limits \n WHERE user_id = ? AND endpoint = ? AND window_end > ?\n ORDER BY window_start DESC \n LIMIT 1`,\n args: [userId, endpoint, now.toISOString()],\n });\n\n let requestsMade = 0;\n let rateLimitId = null;\n let currentWindowStart = windowStart;\n let currentWindowEnd = windowEnd;\n\n if (existingLimit.rows.length > 0) {\n const limitData = existingLimit.rows[0];\n rateLimitId = limitData[0] as number;\n requestsMade = limitData[1] as number;\n currentWindowStart = new Date(limitData[2] as string);\n currentWindowEnd = new Date(limitData[3] as string);\n\n // If window has expired, create new window\n if (currentWindowEnd <= now) {\n currentWindowStart = windowStart;\n currentWindowEnd = windowEnd;\n requestsMade = 0;\n rateLimitId = null;\n }\n }\n\n // Check if limit exceeded\n if (requestsMade >= config.requests) {\n return {\n allowed: false,\n remaining: 0,\n resetTime: currentWindowEnd,\n message: `Rate limit exceeded. Maximum ${config.requests} requests per hour allowed for ${plan} plan.`,\n };\n }\n\n // Increment request count\n const newRequestCount = requestsMade + 1;\n\n if (rateLimitId) {\n // Update existing record\n await db.execute({\n sql: \"UPDATE rate_limits SET requests_made = ? WHERE id = ?\",\n args: [newRequestCount, rateLimitId],\n });\n } else {\n // Create new record\n await db.execute({\n sql: `INSERT INTO rate_limits (user_id, endpoint, requests_made, window_start, window_end) \n VALUES (?, ?, ?, ?, ?)`,\n args: [userId, endpoint, newRequestCount, currentWindowStart.toISOString(), currentWindowEnd.toISOString()],\n });\n }\n\n return {\n allowed: true,\n remaining: config.requests - newRequestCount,\n resetTime: currentWindowEnd,\n };\n}\n\n// Middleware function to check rate limits\nexport async function rateLimitMiddleware(\n userId: number,\n plan: UserPlan,\n endpoint: string\n): Promise {\n const result = await checkRateLimit(userId, plan, endpoint);\n\n if (!result.allowed) {\n return new Response(\n JSON.stringify({\n error: \"Rate limit exceeded\",\n message: result.message,\n resetTime: result.resetTime.toISOString(),\n }),\n {\n status: 429,\n headers: {\n \"Content-Type\": \"application/json\",\n \"X-RateLimit-Limit\": getRateLimitConfig(plan).requests.toString(),\n \"X-RateLimit-Remaining\": \"0\",\n \"X-RateLimit-Reset\": Math.ceil(result.resetTime.getTime() / 1000).toString(),\n \"Retry-After\": Math.ceil((result.resetTime.getTime() - Date.now()) / 1000).toString(),\n },\n }\n );\n }\n\n // Add rate limit headers to successful responses\n return null; // No error, continue with request\n}\n\n// Get rate limit headers for successful responses\nexport function getRateLimitHeaders(result: RateLimitResult, plan: UserPlan): HeadersInit {\n const config = getRateLimitConfig(plan);\n \n return {\n \"X-RateLimit-Limit\": config.requests.toString(),\n \"X-RateLimit-Remaining\": result.remaining.toString(),\n \"X-RateLimit-Reset\": Math.ceil(result.resetTime.getTime() / 1000).toString(),\n };\n}\n\n// Get current rate limit status for a user\nexport async function getRateLimitStatus(\n userId: number,\n plan: UserPlan,\n endpoint?: string\n): Promise<{ [endpoint: string]: RateLimitResult }> {\n const db = getDatabase();\n const now = new Date();\n\n let query = `SELECT endpoint, requests_made, window_start, window_end \n FROM rate_limits \n WHERE user_id = ? AND window_end > ?`;\n const args: any[] = [userId, now.toISOString()];\n\n if (endpoint) {\n query += \" AND endpoint = ?\";\n args.push(endpoint);\n }\n\n const result = await db.execute({ sql: query, args });\n const config = getRateLimitConfig(plan);\n const status: { [endpoint: string]: RateLimitResult } = {};\n\n for (const row of result.rows) {\n const endpointName = row[0] as string;\n const requestsMade = row[1] as number;\n const windowEnd = new Date(row[3] as string);\n\n status[endpointName] = {\n allowed: requestsMade < config.requests,\n remaining: Math.max(0, config.requests - requestsMade),\n resetTime: windowEnd,\n };\n }\n\n return status;\n}\n\n// Reset rate limits for a user (admin function)\nexport async function resetUserRateLimits(userId: number): Promise {\n const db = getDatabase();\n \n await db.execute({\n sql: \"DELETE FROM rate_limits WHERE user_id = ?\",\n args: [userId],\n });\n}",[],[226],{"_104":234,"_95":235,"_152":236,"_154":-5,"_155":138,"_156":237,"_158":159,"_106":238,"_100":32,"_161":185,"_163":239,"_165":22,"_166":-5,"_167":240,"_98":241},"9cf8c51a-8e96-11f0-b551-0224a6c84d84","utils.ts","9cf8c5e2-8e96-11f0-b551-0224a6c84d84",8,["D",1757543797816],"// utils.ts - Utility functions and helpers for RankWatch\n\n// Standard API response interface\nexport interface ApiResponse {\n success: boolean;\n data?: T;\n error?: string;\n message?: string;\n meta?: {\n page?: number;\n limit?: number;\n total?: number;\n [key: string]: any;\n };\n}\n\n// Create standardized success response\nexport function createSuccessResponse(\n data: T,\n message?: string,\n meta?: any\n): Response {\n const response: ApiResponse = {\n success: true,\n data,\n ...(message && { message }),\n ...(meta && { meta }),\n };\n\n return new Response(JSON.stringify(response), {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\n// Create standardized error response\nexport function createErrorResponse(\n error: string,\n status: number = 400,\n details?: any\n): Response {\n const response: ApiResponse = {\n success: false,\n error,\n ...(details && { details }),\n };\n\n return new Response(JSON.stringify(response), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\n// Validate email format\nexport function isValidEmail(email: string): boolean {\n const emailRegex = /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/;\n return emailRegex.test(email);\n}\n\n// Validate password strength\nexport function isValidPassword(password: string): { valid: boolean; message?: string } {\n if (password.length < 8) {\n return { valid: false, message: \"Password must be at least 8 characters long\" };\n }\n \n if (!/(?=.*[a-z])(?=.*[A-Z])(?=.*\\d)/.test(password)) {\n return { \n valid: false, \n message: \"Password must contain at least one uppercase letter, one lowercase letter, and one number\" \n };\n }\n\n return { valid: true };\n}\n\n// Validate URL format\nexport function isValidUrl(url: string): boolean {\n try {\n new URL(url);\n return true;\n } catch {\n return false;\n }\n}\n\n// Validate keyword (basic validation)\nexport function isValidKeyword(keyword: string): { valid: boolean; message?: string } {\n if (!keyword || keyword.trim().length === 0) {\n return { valid: false, message: \"Keyword cannot be empty\" };\n }\n\n if (keyword.length > 255) {\n return { valid: false, message: \"Keyword must be less than 255 characters\" };\n }\n\n return { valid: true };\n}\n\n// Sanitize input string\nexport function sanitizeString(input: string): string {\n return input.trim().replace(/[<>]/g, \"\");\n}\n\n// Generate pagination metadata\nexport function createPaginationMeta(\n page: number,\n limit: number,\n total: number\n): { page: number; limit: number; total: number; totalPages: number; hasNext: boolean; hasPrev: boolean } {\n const totalPages = Math.ceil(total / limit);\n \n return {\n page,\n limit,\n total,\n totalPages,\n hasNext: page < totalPages,\n hasPrev: page > 1,\n };\n}\n\n// Parse query parameters for pagination\nexport function parsePaginationParams(url: URL): { page: number; limit: number } {\n const page = Math.max(1, parseInt(url.searchParams.get(\"page\") || \"1\"));\n const limit = Math.min(100, Math.max(1, parseInt(url.searchParams.get(\"limit\") || \"10\")));\n \n return { page, limit };\n}\n\n// Parse search query parameter\nexport function parseSearchQuery(url: URL): string {\n return url.searchParams.get(\"q\")?.trim() || \"\";\n}\n\n// Format date for API responses\nexport function formatDate(date: Date): string {\n return date.toISOString();\n}\n\n// Parse JSON body safely\nexport async function parseJsonBody(request: Request): Promise {\n try {\n const text = await request.text();\n if (!text) {\n throw new Error(\"Request body is empty\");\n }\n return JSON.parse(text);\n } catch (error) {\n throw new Error(\"Invalid JSON in request body\");\n }\n}\n\n// Validate required fields in object\nexport function validateRequiredFields(\n obj: any,\n requiredFields: string[]\n): { valid: boolean; missing?: string[] } {\n const missing: string[] = [];\n \n for (const field of requiredFields) {\n if (obj[field] === undefined || obj[field] === null || obj[field] === \"\") {\n missing.push(field);\n }\n }\n\n return {\n valid: missing.length === 0,\n ...(missing.length > 0 && { missing }),\n };\n}\n\n// Generate CSV from array of objects\nexport function arrayToCSV(data: any[], headers?: string[]): string {\n if (!data || data.length === 0) {\n return \"\";\n }\n\n const csvHeaders = headers || Object.keys(data[0]);\n const csvRows = [];\n\n // Add headers\n csvRows.push(csvHeaders.map(header => `\"${header}\"`).join(\",\"));\n\n // Add data rows\n for (const row of data) {\n const values = csvHeaders.map(header => {\n const value = row[header];\n if (value === null || value === undefined) {\n return '\"\"';\n }\n return `\"${String(value).replace(/\"/g, '\"\"')}\"`;\n });\n csvRows.push(values.join(\",\"));\n }\n\n return csvRows.join(\"\\n\");\n}\n\n// Sleep utility for delays\nexport function sleep(ms: number): Promise {\n return new Promise(resolve => setTimeout(resolve, ms));\n}\n\n// Retry function with exponential backoff\nexport async function retryWithBackoff(\n fn: () => Promise,\n maxRetries: number = 3,\n baseDelay: number = 1000\n): Promise {\n let lastError: Error;\n\n for (let attempt = 0; attempt <= maxRetries; attempt++) {\n try {\n return await fn();\n } catch (error) {\n lastError = error as Error;\n \n if (attempt === maxRetries) {\n break;\n }\n\n const delay = baseDelay * Math.pow(2, attempt);\n await sleep(delay);\n }\n }\n\n throw lastError!;\n}\n\n// Log request for debugging\nexport function logRequest(request: Request, userId?: number): void {\n const method = request.method;\n const url = new URL(request.url);\n const path = url.pathname;\n const timestamp = new Date().toISOString();\n \n console.log(`[${timestamp}] ${method} ${path} - User: ${userId || 'anonymous'}`);\n}\n\n// Soft delete timestamp\nexport function getSoftDeleteTimestamp(): string {\n return new Date().toISOString();\n}\n\n// Check if record is soft deleted\nexport function isSoftDeleted(deletedAt: string | null): boolean {\n return deletedAt !== null;\n}",[],[235],"files",[150,170,179,189,197,206,215,224,233],"counts",{"_246":32,"_247":219,"_248":32,"_249":174},"pulls","branches","forks","envVars","contents",[],{"_104":151,"_95":99,"_152":153,"_154":-5,"_155":138,"_156":157,"_158":159,"_106":253,"_100":32,"_161":162,"_163":164,"_165":22,"_166":-5,"_98":254},["D",1757542173045],[99],"upstreamProject","upstreamBranch","emptyEnvVars","isNew","flags",[],"routes/_app.x.$handle.$name.branch.$branch.version.$version.code.$",{"_93":94,"_95":96,"_97":43,"_100":101,"_98":99,"_102":263,"_148":268,"_242":296,"_162":297,"_250":299,"_300":-5,"_301":22,"_302":-5,"_303":-5,"_304":-5,"_305":306},{"_104":105,"_95":96,"_106":264,"_108":-5,"_109":22,"_110":111,"_112":72,"_113":-5,"_14":114,"_115":-5,"_116":22,"_117":-5,"_118":32,"_16":119,"_120":121,"_122":121,"_123":124,"_125":124,"_126":124,"_127":121,"_128":121,"_23":265,"_132":266,"_135":267,"_147":22},["D",1757542051489],{"_93":94,"_130":131},{"_93":94,"_134":131},{"_100":137,"_95":43,"_104":138,"_139":105,"_140":-5,"_141":-5,"_142":-5,"_143":-5,"_144":-5,"_145":96,"_146":94},[269,272,275,278,281,284,287,290,293],{"_104":151,"_95":99,"_152":153,"_154":-5,"_155":138,"_156":157,"_158":159,"_106":160,"_100":32,"_161":162,"_163":164,"_165":22,"_166":-5,"_167":270,"_98":271},[],[99],{"_104":171,"_95":172,"_152":173,"_154":-5,"_155":138,"_156":174,"_158":159,"_106":175,"_100":32,"_161":162,"_163":176,"_165":22,"_166":-5,"_167":273,"_98":274},[],[172],{"_104":180,"_95":181,"_152":182,"_154":-5,"_155":138,"_156":183,"_158":159,"_106":184,"_100":32,"_161":185,"_163":186,"_165":22,"_166":-5,"_167":276,"_98":277},[],[181],{"_104":190,"_95":191,"_152":192,"_154":-5,"_155":138,"_156":101,"_158":159,"_106":193,"_100":32,"_161":185,"_163":194,"_165":22,"_166":-5,"_167":279,"_98":280},[],[191],{"_104":198,"_95":199,"_152":200,"_154":-5,"_155":138,"_156":201,"_158":159,"_106":202,"_100":32,"_161":185,"_163":203,"_165":22,"_166":-5,"_167":282,"_98":283},[],[199],{"_104":207,"_95":208,"_152":209,"_154":-5,"_155":138,"_156":210,"_158":159,"_106":211,"_100":32,"_161":185,"_163":212,"_165":22,"_166":-5,"_167":285,"_98":286},[],[208],{"_104":216,"_95":217,"_152":218,"_154":-5,"_155":138,"_156":219,"_158":159,"_106":220,"_100":32,"_161":162,"_163":221,"_165":22,"_166":-5,"_167":288,"_98":289},[],[217],{"_104":225,"_95":226,"_152":227,"_154":-5,"_155":138,"_156":228,"_158":159,"_106":229,"_100":32,"_161":185,"_163":230,"_165":22,"_166":-5,"_167":291,"_98":292},[],[226],{"_104":234,"_95":235,"_152":236,"_154":-5,"_155":138,"_156":237,"_158":159,"_106":238,"_100":32,"_161":185,"_163":239,"_165":22,"_166":-5,"_167":294,"_98":295},[],[235],[269,272,275,278,281,284,287,290,293],{"_104":151,"_95":99,"_152":153,"_154":-5,"_155":138,"_156":157,"_158":159,"_106":253,"_100":32,"_161":162,"_163":164,"_165":22,"_166":-5,"_98":298},[99],[],"upstream","showCompareCallout","pull","ahead","behind","templates",[],"actionData","errors"]