SplitTab

\n \n\n`));\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/*\", (c) => serveFile(c.req.path, import.meta.url));\n\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","label",[140],"2b8d6bc0-9601-4c41-8a24-ab432de5c747",["D",1787221202545],[44],"6e8cc8d4-4f31-4636-aaf7-92b99311ade0","backend","a9a6b58a-2656-4264-815f-80df2ed2f808",1,["D",1787221159123],[153],"pulls","branches","forks","envVars",{"_165":68,"_167":68},"connections",{"_165":68,"_166":68},"count","unfilledCount","emptyCount",{"_48":152,"_32":153,"_30":154,"_141":-5,"_41":42,"_40":155,"_143":64,"_38":200,"_13":68,"_34":46,"_36":-5,"_24":25,"_147":-5,"_175":201,"_27":202},{"_48":193,"_32":194,"_30":195,"_141":154,"_41":42,"_40":155,"_143":25,"_38":196,"_13":68,"_34":35,"_36":197,"_24":25,"_147":-5,"_175":198,"_27":199},{"_48":185,"_32":186,"_30":187,"_141":154,"_41":42,"_40":188,"_143":25,"_38":189,"_13":68,"_34":35,"_36":190,"_24":25,"_147":-5,"_175":191,"_27":192},{"_48":149,"_32":44,"_30":45,"_141":-5,"_41":42,"_40":14,"_143":64,"_38":182,"_13":68,"_34":46,"_36":-5,"_24":25,"_147":-5,"_175":183,"_27":184},{"_48":178,"_32":33,"_30":31,"_141":45,"_41":42,"_40":14,"_143":25,"_38":179,"_13":68,"_34":35,"_36":37,"_24":25,"_147":-5,"_175":180,"_27":181},{"_48":139,"_32":140,"_30":62,"_141":-5,"_41":42,"_40":142,"_143":25,"_38":174,"_13":68,"_34":145,"_36":146,"_24":25,"_147":-5,"_175":176,"_27":177},["D",1787221197410],"children",[],[140],"009a6628-f4c4-4aaf-af38-295363992726",["D",1787221202545],[],[44,33],["D",1787221202545],[172],[44],"dd180936-64e5-4cb6-b342-19f68168515f","routes.ts","ad907758-9c80-11f1-a9f0-1607ee4eb77e",2,["D",1787221190664],"import { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { uid, hashPassword } from \"./db.ts\";\n\nconst api = new Hono();\n\n// ---- auth helpers ----\nasync function getSession(c: any) {\n const token = c.req.header(\"Authorization\")?.replace(\"Bearer \", \"\");\n if (!token) return null;\n const res = await sqlite.execute({ sql: \"SELECT user_id FROM sessions WHERE token = ?\", args: [token] });\n if (res.rows.length === 0) return null;\n const userId = res.rows[0].user_id as string;\n const u = await sqlite.execute({ sql: \"SELECT id, username FROM users WHERE id = ?\", args: [userId] });\n return u.rows[0] || null;\n}\n\nasync function requireAuth(c: any, next: any) {\n const user = await getSession(c);\n if (!user) return c.json({ error: \"Not authenticated\" }, 401);\n c.set(\"user\", user);\n await next();\n}\n\n// ---- auth ----\napi.post(\"/signup\", async (c) => {\n const { username, password } = await c.req.json();\n if (!username?.trim() || !password?.trim()) return c.json({ error: \"Fill in all fields.\" }, 400);\n const existing = await sqlite.execute({\n sql: \"SELECT id FROM users WHERE LOWER(username) = LOWER(?)\",\n args: [username.trim()],\n });\n if (existing.rows.length > 0) return c.json({ error: \"Username already taken.\" }, 400);\n const id = uid();\n const hash = await hashPassword(password);\n await sqlite.execute({\n sql: \"INSERT INTO users (id, username, password_hash, created_at) VALUES (?, ?, ?, ?)\",\n args: [id, username.trim(), hash, Date.now()],\n });\n const token = uid();\n await sqlite.execute({\n sql: \"INSERT INTO sessions (token, user_id, created_at) VALUES (?, ?, ?)\",\n args: [token, id, Date.now()],\n });\n return c.json({ token, user: { id, username: username.trim() } });\n});\n\napi.post(\"/login\", async (c) => {\n const { username, password } = await c.req.json();\n if (!username?.trim() || !password?.trim()) return c.json({ error: \"Fill in all fields.\" }, 400);\n const res = await sqlite.execute({\n sql: \"SELECT id, username, password_hash FROM users WHERE LOWER(username) = LOWER(?)\",\n args: [username.trim()],\n });\n if (res.rows.length === 0) return c.json({ error: \"Wrong username or password.\" }, 401);\n const row = res.rows[0] as any;\n const hash = await hashPassword(password);\n if (hash !== row.password_hash) return c.json({ error: \"Wrong username or password.\" }, 401);\n const token = uid();\n await sqlite.execute({\n sql: \"INSERT INTO sessions (token, user_id, created_at) VALUES (?, ?, ?)\",\n args: [token, row.id, Date.now()],\n });\n return c.json({ token, user: { id: row.id, username: row.username } });\n});\n\napi.post(\"/logout\", requireAuth, async (c) => {\n const token = c.req.header(\"Authorization\")?.replace(\"Bearer \", \"\");\n await sqlite.execute({ sql: \"DELETE FROM sessions WHERE token = ?\", args: [token] });\n return c.json({ ok: true });\n});\n\napi.get(\"/me\", requireAuth, async (c) => {\n return c.json({ user: c.get(\"user\") });\n});\n\n// ---- groups ----\nasync function fullGroup(groupId: string) {\n const g = await sqlite.execute({ sql: \"SELECT * FROM groups WHERE id = ?\", args: [groupId] });\n if (g.rows.length === 0) return null;\n const group = g.rows[0] as any;\n const members = await sqlite.execute({\n sql: `SELECT u.id, u.username FROM group_members gm\n JOIN users u ON u.id = gm.user_id WHERE gm.group_id = ? ORDER BY gm.joined_at ASC`,\n args: [groupId],\n });\n const expenses = await sqlite.execute({\n sql: \"SELECT * FROM expenses WHERE group_id = ? ORDER BY created_at ASC\",\n args: [groupId],\n });\n const expensesFull = await Promise.all(expenses.rows.map(async (e: any) => {\n const items = await sqlite.execute({ sql: \"SELECT * FROM expense_items WHERE expense_id = ?\", args: [e.id] });\n return {\n id: e.id, title: e.title, paidBy: e.paid_by, totalAmount: e.total_amount,\n createdBy: e.created_by, date: e.created_at,\n items: items.rows.map((it: any) => ({\n id: it.id, name: it.name, price: it.price, assigned: JSON.parse(it.assigned_to || \"[]\"),\n })),\n };\n }));\n return {\n id: group.id, name: group.name, currency: group.currency, inviteCode: group.invite_code,\n memberIds: members.rows.map((m: any) => m.id),\n members: members.rows.map((m: any) => ({ id: m.id, username: m.username })),\n expenses: expensesFull, createdAt: group.created_at,\n };\n}\n\napi.get(\"/groups\", requireAuth, async (c) => {\n const user = c.get(\"user\") as any;\n const res = await sqlite.execute({\n sql: `SELECT g.id FROM groups g JOIN group_members gm ON gm.group_id = g.id WHERE gm.user_id = ?`,\n args: [user.id],\n });\n const groups = await Promise.all(res.rows.map((r: any) => fullGroup(r.id)));\n return c.json({ groups: groups.filter(Boolean) });\n});\n\napi.post(\"/groups\", requireAuth, async (c) => {\n const user = c.get(\"user\") as any;\n const { name, currency } = await c.req.json();\n if (!name?.trim()) return c.json({ error: \"Name required.\" }, 400);\n const id = uid();\n const inviteCode = Math.random().toString(36).slice(2, 8).toUpperCase();\n const now = Date.now();\n await sqlite.batch([\n {\n sql: \"INSERT INTO groups (id, name, currency, invite_code, created_by, created_at) VALUES (?, ?, ?, ?, ?, ?)\",\n args: [id, name.trim(), currency || \"€\", inviteCode, user.id, now],\n },\n { sql: \"INSERT INTO group_members (group_id, user_id, joined_at) VALUES (?, ?, ?)\", args: [id, user.id, now] },\n ]);\n return c.json({ group: await fullGroup(id) });\n});\n\napi.post(\"/groups/join\", requireAuth, async (c) => {\n const user = c.get(\"user\") as any;\n const { code } = await c.req.json();\n const res = await sqlite.execute({ sql: \"SELECT id FROM groups WHERE invite_code = ?\", args: [(code || \"\").trim().toUpperCase()] });\n if (res.rows.length === 0) return c.json({ error: \"Group not found. Check the code.\" }, 404);\n const groupId = (res.rows[0] as any).id;\n const existing = await sqlite.execute({\n sql: \"SELECT 1 FROM group_members WHERE group_id = ? AND user_id = ?\",\n args: [groupId, user.id],\n });\n if (existing.rows.length > 0) return c.json({ error: \"You're already in this group!\" }, 400);\n await sqlite.execute({\n sql: \"INSERT INTO group_members (group_id, user_id, joined_at) VALUES (?, ?, ?)\",\n args: [groupId, user.id, Date.now()],\n });\n return c.json({ group: await fullGroup(groupId) });\n});\n\napi.get(\"/groups/:id\", requireAuth, async (c) => {\n const user = c.get(\"user\") as any;\n const groupId = c.req.param(\"id\");\n const member = await sqlite.execute({\n sql: \"SELECT 1 FROM group_members WHERE group_id = ? AND user_id = ?\",\n args: [groupId, user.id],\n });\n if (member.rows.length === 0) return c.json({ error: \"Not a member of this group.\" }, 403);\n const group = await fullGroup(groupId);\n if (!group) return c.json({ error: \"Group not found.\" }, 404);\n return c.json({ group });\n});\n\n// ---- expenses ----\napi.post(\"/groups/:id/expenses\", requireAuth, async (c) => {\n const user = c.get(\"user\") as any;\n const groupId = c.req.param(\"id\");\n const member = await sqlite.execute({\n sql: \"SELECT 1 FROM group_members WHERE group_id = ? AND user_id = ?\",\n args: [groupId, user.id],\n });\n if (member.rows.length === 0) return c.json({ error: \"Not a member of this group.\" }, 403);\n const { title, paidBy, items } = await c.req.json();\n if (!Array.isArray(items) || items.length === 0) return c.json({ error: \"At least one item required.\" }, 400);\n const total = Math.round(items.reduce((s: number, i: any) => s + (Number(i.price) || 0), 0) * 100) / 100;\n const expenseId = uid();\n const now = Date.now();\n const statements = [\n {\n sql: \"INSERT INTO expenses (id, group_id, title, paid_by, total_amount, created_by, created_at) VALUES (?, ?, ?, ?, ?, ?, ?)\",\n args: [expenseId, groupId, (title || \"Expense\").trim(), paidBy, total, user.id, now],\n },\n ...items.map((it: any) => ({\n sql: \"INSERT INTO expense_items (id, expense_id, name, price, assigned_to) VALUES (?, ?, ?, ?, ?)\",\n args: [uid(), expenseId, it.name, Math.round((Number(it.price) || 0) * 100) / 100, JSON.stringify(it.assigned || [])],\n })),\n ];\n await sqlite.batch(statements);\n return c.json({ group: await fullGroup(groupId) });\n});\n\napi.delete(\"/groups/:id/expenses/:expId\", requireAuth, async (c) => {\n const user = c.get(\"user\") as any;\n const groupId = c.req.param(\"id\");\n const expId = c.req.param(\"expId\");\n const exp = await sqlite.execute({ sql: \"SELECT created_by FROM expenses WHERE id = ? AND group_id = ?\", args: [expId, groupId] });\n if (exp.rows.length === 0) return c.json({ error: \"Expense not found.\" }, 404);\n if ((exp.rows[0] as any).created_by !== user.id) return c.json({ error: \"Only the creator can delete this.\" }, 403);\n await sqlite.batch([\n { sql: \"DELETE FROM expense_items WHERE expense_id = ?\", args: [expId] },\n { sql: \"DELETE FROM expenses WHERE id = ?\", args: [expId] },\n ]);\n return c.json({ group: await fullGroup(groupId) });\n});\n\n// ---- receipt scanning (server-side, key never reaches the client) ----\napi.post(\"/scan-receipt\", requireAuth, async (c) => {\n const { imageBase64, mediaType } = await c.req.json();\n if (!imageBase64) return c.json({ error: \"No image provided.\" }, 400);\n const apiKey = Deno.env.get(\"ANTHROPIC_API_KEY\");\n if (!apiKey) return c.json({ error: \"Server not configured for receipt scanning.\" }, 500);\n try {\n const res = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": apiKey,\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: \"claude-sonnet-4-6\",\n max_tokens: 1000,\n messages: [{\n role: \"user\",\n content: [\n { type: \"image\", source: { type: \"base64\", media_type: mediaType || \"image/jpeg\", data: imageBase64 } },\n {\n type: \"text\",\n text: \"Extract all ordered items from this receipt. If any item names are not in English, translate them to English. Return ONLY a raw JSON array with no markdown, no backticks, no preamble. Format: [{\\\"name\\\":\\\"Item name in English\\\",\\\"price\\\":0.00}]. List each item individually. Skip totals, subtotals, taxes, tips, service charges, and discounts.\",\n },\n ],\n }],\n }),\n });\n const data = await res.json();\n if (data.error) throw new Error(data.error.message || \"Anthropic API error\");\n const text = data.content[0].text.trim().replace(/```json\\n?|```\\n?/g, \"\").trim();\n const parsed = JSON.parse(text);\n const items = parsed.map((it: any) => ({\n name: String(it.name || \"\").slice(0, 200),\n price: Math.round((parseFloat(it.price) || 0) * 100) / 100,\n }));\n return c.json({ items });\n } catch (e) {\n return c.json({ error: \"Could not read the receipt. Add items manually.\" }, 502);\n }\n});\n\nexport default api;\n",[],[153,186],"7a593594-8d72-4738-9d48-af543abe92ae","db.ts","9ac2f920-9c80-11f1-9834-1607ee4eb77e",["D",1787221159123],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function initDb() {\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS users (\n id TEXT PRIMARY KEY,\n username TEXT UNIQUE NOT NULL,\n password_hash TEXT NOT NULL,\n created_at INTEGER NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS groups (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n currency TEXT NOT NULL DEFAULT '€',\n invite_code TEXT UNIQUE NOT NULL,\n created_by TEXT NOT NULL,\n created_at INTEGER NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS group_members (\n group_id TEXT NOT NULL,\n user_id TEXT NOT NULL,\n joined_at INTEGER NOT NULL,\n PRIMARY KEY (group_id, user_id)\n )`,\n `CREATE TABLE IF NOT EXISTS expenses (\n id TEXT PRIMARY KEY,\n group_id TEXT NOT NULL,\n title TEXT NOT NULL,\n paid_by TEXT NOT NULL,\n total_amount REAL NOT NULL,\n created_by TEXT NOT NULL,\n created_at INTEGER NOT NULL\n )`,\n `CREATE TABLE IF NOT EXISTS expense_items (\n id TEXT PRIMARY KEY,\n expense_id TEXT NOT NULL,\n name TEXT NOT NULL,\n price REAL NOT NULL,\n assigned_to TEXT NOT NULL DEFAULT '[]'\n )`,\n `CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n created_at INTEGER NOT NULL\n )`,\n ]);\n}\n\nexport const uid = () => crypto.randomUUID();\n\nexport async function hashPassword(password: string): Promise {\n const data = new TextEncoder().encode(password);\n const digest = await crypto.subtle.digest(\"SHA-256\", data);\n return Array.from(new Uint8Array(digest)).map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n",[],[153,194],["D",1787221159123],[169,170],[153],["D",1787221101901],["D",1789566041074],{"_105":104,"_113":109},{"_105":104,"_106":107,"_108":109,"_18":60,"_110":111,"_112":25},{"_13":94,"_32":95,"_48":42,"_96":49,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":-5,"_102":50,"_103":104},"ctx",{"_87":-5,"_133":241,"_242":243,"_244":245,"_246":25,"_247":25,"_248":25,"_249":64,"_250":-5,"_251":-7,"_252":-7,"_253":68,"_254":25,"_255":25,"_256":-5,"_257":25,"_258":25,"_259":25,"_260":-5},"ENV",{"_212":213,"_214":215,"_216":95,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234,"_235":236,"_237":238,"_239":240},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v4