[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_233":234,"_235":236},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_17":18,"_41":-7,"_147":-5,"_19":148,"_149":150,"_151":152,"_153":154,"_155":156,"_21":157,"_158":-5,"_159":-5,"_160":24,"_161":162,"_163":164,"_165":-5,"_166":-5,"_167":168},"routes/_app.x.$handle.$name.branch.$branch.history_.$",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":24,"_30":-5},"handle","gexcysanchez","name","sunprot-modules-db","branchName","main","path","clean.ts","project",{"_35":97,"_13":14,"_39":98,"_99":-5,"_100":24,"_101":102,"_103":102,"_104":-5,"_105":-5,"_30":70,"_106":-5,"_107":24,"_108":-5,"_109":-5,"_110":26,"_43":44,"_111":112,"_113":114,"_115":116,"_117":-5,"_118":119,"_120":119,"_121":122,"_123":122,"_124":122,"_125":119,"_126":119,"_54":127,"_128":129,"_130":131,"_132":24},"file",{"_64":65,"_13":18,"_67":95,"_69":24,"_96":-5},"isDirectory",false,"page",0,"history",[31,32,33,34],"hasNext","userId",{"_35":88,"_37":38,"_39":89,"_41":90,"_43":44,"_45":81,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":91,"_21":92,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":93},{"_35":81,"_37":38,"_39":82,"_41":83,"_43":44,"_45":73,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":84,"_21":85,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":86},{"_35":73,"_37":38,"_39":74,"_41":75,"_43":44,"_45":76,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":77,"_21":78,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":79},{"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":55,"_21":56,"_57":-5,"_58":-5,"_59":-5,"_60":-5,"_61":62},"id","2034aed1-b223-40b9-a18b-1342707fbf97","branchId","f6270933-d28e-4442-aed6-55a0986596aa","createdAt",["D",1788759163949],"version",67,"orgId","019e1d1b-adbb-76f7-a82a-b4232abb1bd1","parentId","67f7a07d-f46a-46b0-b07d-8756b561ce42","incomingCommitId","aiChatMessageId","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","clientLabel","user",{"_35":70,"_43":44,"_11":12,"_71":72},{"_64":65,"_13":66,"_67":68,"_69":24},"pull","merge","revert","multiple","commits",[63],{"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":55,"_21":56,"_57":-5,"_58":-5,"_59":-5},"fileId","8d121dfa-aa7d-11f1-b063-1607ee4eb77e","new-file-4560.ts","fileType","script","deleted","35b1a91c-8fcc-4040-bc0f-e1cb277a7282","avatar","https://lh3.googleusercontent.com/a/ACg8ocJD6WSSYPd2CVI2O3PHd4vtUwhkw7rC8Zf4-yjll4kHtQqmbYs=s96-c","44877c5d-b8bb-45af-98b2-a06b0132b201",["D",1788759204563],70,"7eeee8e3-bc47-4daf-b07f-98deb39a690b",{"_35":70,"_43":44,"_11":12,"_71":72},{"_64":65,"_13":18,"_67":68,"_69":24},[80],{"_35":73,"_37":38,"_39":74,"_41":75,"_43":44,"_45":76,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":77,"_21":78,"_57":-5,"_58":-5,"_59":-5},"1f332dd9-d098-4d3c-926b-b1ddd4a34df4",["D",1789109005512],71,{"_35":70,"_43":44,"_11":12,"_71":72},{"_64":65,"_13":18,"_67":68,"_69":24},[87],{"_35":81,"_37":38,"_39":82,"_41":83,"_43":44,"_45":73,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":84,"_21":85,"_57":-5,"_58":-5,"_59":-5},"6a1fe8f4-6219-49b6-ba94-fd6daf88c471",["D",1789109008680],72,{"_35":70,"_43":44,"_11":12,"_71":72},{"_64":65,"_13":18,"_67":95,"_69":24},[94],{"_35":88,"_37":38,"_39":89,"_41":90,"_43":44,"_45":81,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":-5,"_54":91,"_21":92,"_57":-5,"_58":-5,"_59":-5},"interval","deletedAtVersion","aad57c4b-6371-4ffe-890b-2f787b7c8e35",["D",1783552548469],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","tursoName","aad57c4b63714ffe890b2f787b7c8e35","tursoHostname","aad57c4b63714ffe890b2f787b7c8e35-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789472446807],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_146":72},"org",{"_11":12,"_141":142,"_71":72,"_30":70,"_143":144,"_145":24},"branch",{"_41":90,"_13":16,"_35":38,"_133":97,"_134":-5,"_135":-5,"_136":-5,"_137":-5,"_138":-5,"_139":14,"_140":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Gexcy Sanchez","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_35":97,"_13":14,"_39":228,"_99":-5,"_100":24,"_101":102,"_103":102,"_104":-5,"_105":-5,"_30":70,"_106":-5,"_107":24,"_108":-5,"_109":-5,"_110":26,"_43":44,"_111":112,"_113":114,"_115":229,"_117":-5,"_118":119,"_120":119,"_121":122,"_123":122,"_124":122,"_125":119,"_126":119,"_54":230,"_128":231,"_130":232,"_132":24},"tree",[203,204,205],"files",[203,204,205],"counts",{"_191":26,"_192":193,"_194":26,"_195":196,"_197":198},"contents",[],{"_35":182,"_13":18,"_64":65,"_45":-5,"_37":38,"_183":90,"_184":164,"_39":185,"_41":186,"_67":95,"_187":188,"_69":24,"_189":-5,"_17":190},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[169,170,171,172,173,174],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_35":181,"_176":-5},{"_35":180,"_176":-5},{"_35":179,"_176":-5},{"_35":178,"_176":-5},{"_35":177,"_176":-5},{"_35":175,"_176":-5},"f6198fde-1c3e-4215-8ddd-dbbf73b10801","reporterId","21fc4546-d1ae-402e-b785-a8a7259bde71","2ca95eb7-7f7a-457c-9b14-50b4bbd59445","a65081d1-7e8f-43ac-a8c4-f2f9d3cfe65b","b01b4481-5be5-411c-9f2f-996fca66a25a","66bd0826-888d-427f-9bf3-a8ef9e4dce36","ed86e182-53f6-4442-bb9b-eaf9ce2b9b2f","branchVersion","latest",["D",1789109008680],3,"content","const DB = () => Deno.env.get(\"DB_URL\");\nconst SEC = () => Deno.env.get(\"FB_SECRET\");\nconst CF_ACCOUNT_ID = () => Deno.env.get(\"CF_ACCOUNT_ID\");\nconst CF_KV_NAMESPACE_ID = () => Deno.env.get(\"CF_KV_NAMESPACE_ID\");\nconst CF_API_TOKEN = () => Deno.env.get(\"CF_API_TOKEN\");\nconst SESSION_MAX_AGE = 14 * 24 * 60 * 60 * 1000;\nconst ACCOUNT_MAX_AGE = 14 * 24 * 60 * 60 * 1000;\n\nasync function fbGet(path: string) {\n const r = await fetch(`${DB()}/${path}.json?auth=${SEC()}`);\n if (!r.ok) throw new Error(\"db \" + r.status);\n return r.json();\n}\n\nasync function fbDelete(path: string) {\n const r = await fetch(`${DB()}/${path}.json?auth=${SEC()}`, {\n method: \"DELETE\",\n });\n if (!r.ok) throw new Error(\"db \" + r.status);\n return r.json();\n}\n\nasync function kvList(prefix: string): Promise {\n const keys: string[] = [];\n let cursor: string | null = null;\n\n do {\n const params = new URLSearchParams({ prefix, limit: \"1000\" });\n if (cursor) params.set(\"cursor\", cursor);\n const r = await fetch(\n `https://api.cloudflare.com/client/v4/accounts/${CF_ACCOUNT_ID()}/storage/kv/namespaces/${CF_KV_NAMESPACE_ID()}/keys?${params}`,\n { headers: { Authorization: `Bearer ${CF_API_TOKEN()}` } },\n );\n if (!r.ok) throw new Error(\"kv list \" + r.status);\n const data = await r.json();\n for (const k of data.result ?? []) keys.push(k.name);\n cursor = data.result_info?.cursor ?? null;\n } while (cursor);\n\n return keys;\n}\n\nasync function kvGet(key: string): Promise {\n const r = await fetch(\n `https://api.cloudflare.com/client/v4/accounts/${CF_ACCOUNT_ID()}/storage/kv/namespaces/${CF_KV_NAMESPACE_ID()}/values/${\n encodeURIComponent(key)\n }`,\n { headers: { Authorization: `Bearer ${CF_API_TOKEN()}` } },\n );\n if (r.status === 404) return null;\n if (!r.ok) throw new Error(\"kv get \" + r.status);\n try {\n return await r.json();\n } catch {\n return null;\n }\n}\n\nasync function kvDelete(key: string): Promise {\n const r = await fetch(\n `https://api.cloudflare.com/client/v4/accounts/${CF_ACCOUNT_ID()}/storage/kv/namespaces/${CF_KV_NAMESPACE_ID()}/values/${\n encodeURIComponent(key)\n }`,\n {\n method: \"DELETE\",\n headers: { Authorization: `Bearer ${CF_API_TOKEN()}` },\n },\n );\n if (!r.ok && r.status !== 404) throw new Error(\"kv delete \" + r.status);\n}\n\nexport default async function (_req: Request): Promise {\n const [allUsers, allModules, allComments] = await Promise.all([\n fbGet(\"users\"),\n fbGet(\"modules\"),\n fbGet(\"comments\"),\n ]);\n\n if (!allUsers || typeof allUsers !== \"object\") {\n return new Response(null, { status: 204 });\n }\n\n const modules = (allModules || {}) as Record>;\n const comments = (allComments || {}) as Record<\n string,\n Record\n >;\n\n const usersWithActivity = new Set();\n const now = Date.now();\n\n for (const mod of Object.values(modules)) {\n if (mod.owner) {\n usersWithActivity.add(String(mod.owner).toLowerCase().trim());\n }\n if (mod.creator) {\n usersWithActivity.add(String(mod.creator).toLowerCase().trim());\n }\n const reviews = (mod.reviews || {}) as Record;\n for (const reviewer of Object.keys(reviews)) {\n usersWithActivity.add(reviewer.toLowerCase().trim());\n }\n }\n\n for (const modComments of Object.values(comments)) {\n for (\n const comment of Object.values(\n modComments as Record>,\n )\n ) {\n if (comment.username) {\n usersWithActivity.add(String(comment.username).toLowerCase().trim());\n }\n }\n }\n\n const userSessionKeys = await kvList(\"user_session:\");\n const sessionsByUser: Record = {};\n\n for (const kvKey of userSessionKeys) {\n const username = kvKey.replace(\"user_session:\", \"\");\n const data = await kvGet(kvKey) as\n | { token: string; createdAt: number }\n | null;\n if (!data || !data.token || !data.createdAt) continue;\n const isActive = (now - data.createdAt) < SESSION_MAX_AGE;\n if (isActive) usersWithActivity.add(username);\n sessionsByUser[username] = data.token;\n }\n\n for (\n const [username, user] of Object.entries(\n allUsers as Record>,\n )\n ) {\n const key = username.toLowerCase().trim();\n if (usersWithActivity.has(key)) continue;\n\n const createdAt = typeof user.createdAt === \"number\" ? user.createdAt : 0;\n if (createdAt && (now - createdAt) < ACCOUNT_MAX_AGE) continue;\n\n await fbDelete(`users/${key}`);\n\n if (sessionsByUser[key]) {\n await kvDelete(`session:${sessionsByUser[key]}`);\n await kvDelete(`user_session:${key}`);\n }\n }\n\n return new Response(null, { status: 204 });\n}","label",[18],"pulls","branches",1,"forks","envVars",{"_199":201,"_202":26},"connections",{"_199":26,"_200":26},"count","unfilledCount",5,"emptyCount",{"_35":182,"_13":18,"_64":65,"_45":-5,"_37":38,"_183":90,"_184":164,"_39":225,"_41":186,"_67":95,"_187":188,"_69":24,"_189":-5,"_214":226,"_17":227},{"_35":217,"_13":218,"_64":219,"_45":-5,"_37":38,"_183":220,"_184":164,"_39":221,"_41":201,"_67":95,"_187":222,"_69":24,"_189":-5,"_214":223,"_17":224},{"_35":206,"_13":207,"_64":208,"_45":-5,"_37":38,"_183":209,"_184":164,"_39":210,"_41":211,"_67":212,"_187":213,"_69":24,"_189":-5,"_214":215,"_17":216},"97286004-a044-4728-b146-38c1b8b91ba6","main.ts","f4962492-7b22-11f1-b1b8-1607ee4eb77e",63,["D",1787492113992],40,"http","import * as bcrypt from \"https://deno.land/x/bcrypt/mod.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst MAX_ATTEMPTS = 5;\nconst WINDOW_MS = 15 * 60 * 1000;\n\nawait sqlite.execute(`\n CREATE TABLE IF NOT EXISTS login_attempts (\n username TEXT PRIMARY KEY,\n attempts INTEGER DEFAULT 0,\n window_start INTEGER DEFAULT 0,\n lock_until INTEGER DEFAULT 0\n )\n`);\n\nconst CORS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, PUT, DELETE, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\nfunction res(data: unknown, status = 200) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { ...CORS, \"Content-Type\": \"application/json\" },\n });\n}\n\nconst DB = () => Deno.env.get(\"DB_URL\");\nconst SEC = () => Deno.env.get(\"FB_SECRET\");\n\nasync function fbGet(path: string) {\n const r = await fetch(`${DB()}/${path}.json?auth=${SEC()}`);\n if (!r.ok) throw new Error(\"db \" + r.status);\n return r.json();\n}\n\nasync function fbSet(path: string, data: unknown) {\n const r = await fetch(`${DB()}/${path}.json?auth=${SEC()}`, {\n method: \"PUT\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(data),\n });\n if (!r.ok) throw new Error(\"db \" + r.status);\n return r.json();\n}\n\nasync function fbIncrement(path: string, amount = 1) {\n const r = await fetch(`${DB()}/${path}.json?auth=${SEC()}`, {\n method: \"PUT\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ \".sv\": { \"increment\": amount } }),\n });\n if (!r.ok) throw new Error(\"db \" + r.status);\n return r.json();\n}\n\nasync function fbDelete(path: string) {\n const r = await fetch(`${DB()}/${path}.json?auth=${SEC()}`, {\n method: \"DELETE\",\n });\n if (!r.ok) throw new Error(\"db \" + r.status);\n return r.json();\n}\n\nasync function rlCheck(username: string): Promise {\n const now = Date.now();\n const r = await sqlite.execute({\n sql: \"SELECT lock_until FROM login_attempts WHERE username = ?\",\n args: [username],\n });\n if (r.rows.length) {\n const lu = Number(r.rows[0][0]) || 0;\n if (lu > now) {\n const waitMin = Math.ceil((lu - now) / 60000);\n return `Too many failed attempts. Try again in ${waitMin} minute${waitMin !== 1 ? \"s\" : \"\"}.`;\n }\n }\n return null;\n}\n\nasync function rlFail(username: string): Promise<{ remaining: number; locked: boolean }> {\n const now = Date.now();\n const r = await sqlite.execute({\n sql: \"SELECT attempts, window_start, lock_until FROM login_attempts WHERE username = ?\",\n args: [username],\n });\n\n let current = 0;\n let windowStart = now;\n const exists = r.rows.length > 0;\n\n if (exists) {\n const att = Number(r.rows[0][0]) || 0;\n const ws = Number(r.rows[0][1]) || 0;\n const lu = Number(r.rows[0][2]) || 0;\n if (lu > now) return { remaining: 0, locked: true };\n if (now - ws <= WINDOW_MS) {\n current = att;\n windowStart = ws;\n }\n }\n\n const next = current + 1;\n const lockUntil = next >= MAX_ATTEMPTS ? now + WINDOW_MS : 0;\n\n if (exists) {\n await sqlite.execute({\n sql: \"UPDATE login_attempts SET attempts = ?, window_start = ?, lock_until = ? WHERE username = ?\",\n args: [next, windowStart, lockUntil, username],\n });\n } else {\n await sqlite.execute({\n sql: \"INSERT INTO login_attempts (username, attempts, window_start, lock_until) VALUES (?, ?, ?, ?)\",\n args: [username, next, windowStart, lockUntil],\n });\n }\n\n return { remaining: Math.max(0, MAX_ATTEMPTS - next), locked: next >= MAX_ATTEMPTS };\n}\n\nasync function rlClear(username: string): Promise {\n await sqlite.execute({\n sql: \"DELETE FROM login_attempts WHERE username = ?\",\n args: [username],\n });\n}\n\nfunction genToken() {\n const b = crypto.getRandomValues(new Uint8Array(24));\n return [...b].map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function verifySession(tok: string) {\n if (!tok) return null;\n const session = await fbGet(`sessions/${tok}`);\n if (!session || !session.username) return null;\n const user = await fbGet(`users/${session.username}`);\n if (!user) return null;\n return { username: session.username, ...user };\n}\n\nasync function findExistingSession(usernameKey: string): Promise {\n const allSessions = (await fbGet(\"sessions\")) || {};\n const now = Date.now();\n const MAX_AGE = 14 * 24 * 60 * 60 * 1000;\n for (const [tok, sess] of Object.entries(allSessions as Record)) {\n if (sess && sess.username === usernameKey && sess.createdAt && now - sess.createdAt < MAX_AGE) return tok;\n }\n return null;\n}\n\nasync function cleanOldUserSessions(usernameKey: string) {\n try {\n const allSessions = (await fbGet(\"sessions\")) || {};\n const now = Date.now();\n const MAX_AGE = 14 * 24 * 60 * 60 * 1000;\n for (const [tok, sess] of Object.entries(allSessions as Record)) {\n if (sess && sess.username === usernameKey) {\n if (!sess.createdAt || (now - (sess.createdAt || 0)) > MAX_AGE) {\n await fbDelete(`sessions/${tok}`);\n }\n }\n }\n } catch (_) {}\n}\n\nasync function verifyPassword(plain: string, stored: string): Promise {\n if (stored.startsWith(\"$2\")) return await bcrypt.compare(plain, stored);\n return plain === stored;\n}\n\nfunction isValidUrl(str: string) {\n try {\n const u = new URL(str);\n return u.protocol === \"http:\" || u.protocol === \"https:\";\n } catch {\n return false;\n }\n}\n\nfunction cleanModuleNameForAlias(rawName: string): string {\n const normalized = rawName.normalize(\"NFD\").replace(/[\\u0300-\\u036f]/g, \"\");\n const asciiConverted = [...normalized].map((char) => {\n const code = char.codePointAt(0) || 0;\n if (code >= 0x1d400 && code <= 0x1d7ff) {\n if (code >= 0x1d400 && code <= 0x1d419) return String.fromCharCode(65 + (code - 0x1d400));\n if (code >= 0x1d41a && code <= 0x1d433) return String.fromCharCode(97 + (code - 0x1d41a));\n if (code >= 0x1d434 && code <= 0x1d44d) return String.fromCharCode(65 + (code - 0x1d434));\n if (code >= 0x1d44e && code <= 0x1d467) return String.fromCharCode(97 + (code - 0x1d44e));\n if (code >= 0x1d468 && code <= 0x1d481) return String.fromCharCode(65 + (code - 0x1d468));\n if (code >= 0x1d482 && code <= 0x1d49b) return String.fromCharCode(97 + (code - 0x1d482));\n if (code >= 0x1d7ce && code <= 0x1d7d7) return String.fromCharCode(48 + (code - 0x1d7ce));\n if (code >= 0x1d7d8 && code <= 0x1d7e1) return String.fromCharCode(48 + (code - 0x1d7d8));\n }\n return char;\n }).join(\"\");\n const cleanText = asciiConverted.replace(/[^a-zA-Z0-9]/g, \"\");\n return cleanText || \"Module\";\n}\n\nasync function generateShortlink(originalUrl: string, rawName: string, updateCount: number): Promise {\n try {\n const cleanName = cleanModuleNameForAlias(rawName);\n const slug = updateCount === 0 ? `Mod-${cleanName}` : `Mod-${cleanName}-v${updateCount}`;\n const proxyApi = `https://gexcysanchez--52fe6c529a7b11f194ec1607ee4eb77e.web.val.run?url=${encodeURIComponent(originalUrl)}&alias=${encodeURIComponent(slug)}`;\n const r = await fetch(proxyApi);\n if (r.ok) {\n const d = await r.json();\n if (d.shortLink) return d.shortLink;\n }\n } catch {}\n return \"\";\n}\n\nexport default async function (req: Request) {\n if (req.method === \"OPTIONS\") return new Response(null, { headers: CORS });\n\n const url = new URL(req.url);\n const segs = url.pathname.replace(/^\\/+/, \"\").split(\"/\").filter(Boolean);\n const m = req.method;\n\n try {\n if (m === \"POST\" && segs[0] === \"register\") {\n const { username, password } = await req.json();\n if (!username || !password) return res({ error: \"Missing fields\" }, 400);\n if (/\\s/.test(username)) return res({ error: \"Username cannot contain spaces\" }, 400);\n if (username.length < 3) return res({ error: \"Username must be at least 3 characters\" }, 400);\n if (password.length < 8) return res({ error: \"Password must be at least 8 characters\" }, 400);\n\n const key = username.toLowerCase().trim();\n const existing = await fbGet(`users/${key}`);\n if (existing) return res({ error: \"Username already taken\" }, 409);\n\n const hashedPassword = await bcrypt.hash(password);\n const userData = {\n username: key,\n displayName: username,\n password: hashedPassword,\n image: \"\",\n bio: \"\",\n status: null,\n createdAt: Date.now(),\n };\n await fbSet(`users/${key}`, userData);\n await cleanOldUserSessions(key);\n const existingTok = await findExistingSession(key);\n const tok = existingTok ?? genToken();\n if (!existingTok) await fbSet(`sessions/${tok}`, { username: key, createdAt: Date.now() });\n return res({ username: key, displayName: username, image: \"\", bio: \"\", status: null, sessionToken: tok });\n }\n\n if (m === \"POST\" && segs[0] === \"login\") {\n const { username, password } = await req.json();\n if (!username || !password) return res({ error: \"Missing fields\" }, 400);\n const key = username.toLowerCase().trim();\n\n const limitMsg = await rlCheck(key);\n if (limitMsg) return res({ error: limitMsg }, 429);\n\n const user = await fbGet(`users/${key}`);\n const passwordValid = user ? await verifyPassword(password, user.password) : false;\n\n if (!user || !passwordValid) {\n const { remaining } = await rlFail(key);\n return res({\n error: `Incorrect username or password.${remaining > 0 ? ` ${remaining} attempt${remaining !== 1 ? \"s\" : \"\"} remaining.` : \"\"}`,\n }, 401);\n }\n\n if (user.password && !user.password.startsWith(\"$2\")) {\n const rehashed = await bcrypt.hash(password);\n await fbSet(`users/${key}`, { ...user, password: rehashed });\n }\n\n await rlClear(key);\n await cleanOldUserSessions(key);\n const existingTok = await findExistingSession(key);\n const tok = existingTok ?? genToken();\n if (!existingTok) await fbSet(`sessions/${tok}`, { username: key, createdAt: Date.now() });\n return res({\n username: key,\n displayName: user.displayName || key,\n image: user.image || \"\",\n bio: user.bio || \"\",\n status: user.status || null,\n sessionToken: tok,\n });\n }\n\n if (m === \"POST\" && segs[0] === \"logout\") {\n const { sessionToken } = await req.json();\n if (sessionToken) await fbDelete(`sessions/${sessionToken}`);\n return res({ ok: true });\n }\n\n if (m === \"POST\" && segs[0] === \"restore\") {\n const { sessionToken } = await req.json();\n const user = await verifySession(sessionToken);\n if (!user) return res({ error: \"Invalid session\" }, 401);\n await fbSet(`sessions/${sessionToken}`, { username: user.username, createdAt: Date.now() });\n return res({\n username: user.username,\n displayName: user.displayName || user.username,\n image: user.image || \"\",\n bio: user.bio || \"\",\n status: user.status || null,\n });\n }\n\n if (m === \"GET\" && segs[0] === \"profile\" && segs[1]) {\n const targetUser = segs[1].toLowerCase().trim();\n const user = await fbGet(`users/${targetUser}`);\n if (!user) return res({ error: \"User not found\" }, 404);\n return res({ username: user.username, displayName: user.displayName || user.username, image: user.image || \"\", bio: user.bio || \"\" });\n }\n\n if (m === \"POST\" && segs[0] === \"profile\" && segs[1] === \"update\") {\n const body = await req.json();\n const { sessionToken, bio, currentPassword, newPassword, image, newUsername, newDisplayName } = body;\n const user = await verifySession(sessionToken);\n if (!user) return res({ error: \"Unauthorized\" }, 401);\n\n if (newPassword) {\n if (!currentPassword) return res({ error: \"Current password is incorrect\" }, 400);\n const currentValid = await verifyPassword(currentPassword, user.password);\n if (!currentValid) return res({ error: \"Current password is incorrect\" }, 400);\n if (newPassword.length < 8) return res({ error: \"Password must be at least 8 characters\" }, 400);\n }\n\n if (newUsername) {\n const newKey = newUsername.toLowerCase().trim();\n if (/\\s/.test(newUsername)) return res({ error: \"Username cannot contain spaces\" }, 400);\n if (newUsername.length < 3) return res({ error: \"Username must be at least 3 characters\" }, 400);\n if (newKey !== user.username) {\n const taken = await fbGet(`users/${newKey}`);\n if (taken) return res({ error: \"Username already taken\" }, 409);\n\n const oldKey = user.username;\n const resolvedDisplayName = newDisplayName ? newDisplayName.trim().slice(0, 40) : (user.displayName || newKey);\n const hashedPassword = newPassword ? await bcrypt.hash(newPassword) : user.password;\n const updated = {\n username: newKey,\n displayName: resolvedDisplayName,\n password: hashedPassword,\n image: image !== undefined ? image : user.image,\n bio: bio !== undefined ? bio.trim().slice(0, 150) : user.bio,\n status: user.status || null,\n createdAt: user.createdAt,\n };\n await fbSet(`users/${newKey}`, updated);\n await fbDelete(`users/${oldKey}`);\n await rlClear(oldKey);\n\n const allSessions = (await fbGet(\"sessions\")) || {};\n for (const [tok, sess] of Object.entries(allSessions as Record)) {\n if (sess && sess.username === oldKey) await fbSet(`sessions/${tok}`, { ...sess, username: newKey });\n }\n\n const allMods = (await fbGet(\"modules\")) || {};\n for (const [mKey, mVal] of Object.entries(allMods as Record>)) {\n if (mVal && (mVal.owner === oldKey || mVal.creator === oldKey)) {\n await fbSet(`modules/${mKey}`, {\n ...mVal,\n owner: mVal.owner === oldKey ? newKey : mVal.owner,\n creator: mVal.creator === oldKey ? newKey : mVal.creator,\n });\n }\n }\n\n return res({ ok: true, username: newKey, displayName: updated.displayName, bio: updated.bio, image: updated.image });\n }\n }\n\n const resolvedDisplayName = newDisplayName ? newDisplayName.trim().slice(0, 40) : (user.displayName || user.username);\n const hashedPassword = newPassword ? await bcrypt.hash(newPassword) : user.password;\n const updated = {\n ...user,\n displayName: resolvedDisplayName,\n bio: bio !== undefined ? bio.trim().slice(0, 150) : user.bio,\n password: hashedPassword,\n image: image !== undefined ? image : user.image,\n };\n await fbSet(`users/${user.username}`, updated);\n return res({ ok: true, username: user.username, displayName: updated.displayName, bio: updated.bio, image: updated.image });\n }\n\n if (m === \"POST\" && segs[0] === \"profile\" && segs[1] === \"delete\") {\n const { sessionToken, confirmPhrase } = await req.json();\n const user = await verifySession(sessionToken);\n if (!user) return res({ error: \"Unauthorized\" }, 401);\n\n const expectedPhrase = `delete/${user.username}`;\n if (!confirmPhrase || confirmPhrase.trim() !== expectedPhrase) return res({ error: \"Confirmation phrase does not match\" }, 400);\n\n const allMods = (await fbGet(\"modules\")) || {};\n for (const [mKey, mVal] of Object.entries(allMods as Record>)) {\n if (mVal && mVal.owner === user.username) await fbDelete(`modules/${mKey}`);\n }\n\n await fbDelete(`comments/${user.username}`);\n await fbDelete(`users/${user.username}`);\n await rlClear(user.username);\n if (sessionToken) await fbDelete(`sessions/${sessionToken}`);\n return res({ ok: true });\n }\n\n if (m === \"GET\" && segs[0] === \"modules\") {\n const rawMods = (await fbGet(\"modules\")) || {};\n const rawComments = (await fbGet(\"comments\")) || {};\n\n const modules: Record = {};\n for (const [key, mod] of Object.entries(rawMods as Record>)) {\n const modCommentsObj = (rawComments as Record>)[key] || {};\n const commentsList = Object.values(modCommentsObj).sort(\n (a, b) => ((a as { createdAt: number }).createdAt || 0) - ((b as { createdAt: number }).createdAt || 0),\n );\n modules[key] = { ...mod, comments: commentsList };\n }\n return res({ modules });\n }\n\n if (m === \"PUT\" && segs[0] === \"modules\" && segs[1]) {\n const key = segs[1];\n const { sessionToken, ...moduleData } = await req.json();\n const user = await verifySession(sessionToken);\n if (!user) return res({ error: \"Unauthorized\" }, 401);\n\n const userLink = String(moduleData.link || \"\").trim();\n if (!userLink || !isValidUrl(userLink)) return res({ error: \"A valid HTTP/HTTPS download link is required.\" }, 400);\n\n const existing = (await fbGet(`modules/${key}`)) as Record | null;\n if (existing && existing.owner && existing.owner !== user.username && user.status !== \"admin\") {\n return res({ error: \"Module belongs to another creator.\" }, 403);\n }\n\n let shortLink = existing ? (existing.shortLink as string || \"\") : \"\";\n let updateCount = (existing && typeof existing.updateCount === \"number\") ? existing.updateCount : 0;\n let linkChanged = false;\n\n const existingLink = String(existing?.link || \"\").trim();\n const linkUnchanged = Boolean(existing && existingLink !== \"\" && existingLink === userLink && existing.shortLink);\n\n if (!linkUnchanged) {\n linkChanged = true;\n if (existing) updateCount += 1;\n shortLink = await generateShortlink(userLink, moduleData.name, updateCount);\n }\n\n const originalCreator = existing ? (existing.creator as string) : (moduleData.creator || user.displayName || user.username);\n const resolvedImage = (moduleData.image && typeof moduleData.image === \"string\" && moduleData.image.trim() !== \"\")\n ? moduleData.image.trim()\n : (existing ? (existing.image as string || \"\") : \"\");\n\n const record: Record = {\n name: moduleData.name,\n version: moduleData.version,\n creator: originalCreator,\n description: moduleData.description,\n link: userLink,\n shortLink,\n updateCount,\n image: resolvedImage,\n downloads: existing ? (existing.downloads || 0) : 0,\n reviews: existing ? (existing.reviews || {}) : {},\n owner: existing ? existing.owner : user.username,\n createdAt: existing ? (existing.createdAt || Date.now()) : Date.now(),\n };\n\n if (linkChanged) {\n record.updatedAt = Date.now();\n } else if (existing && existing.updatedAt) {\n record.updatedAt = existing.updatedAt;\n }\n\n await fbSet(`modules/${key}`, record);\n return res({ ok: true, module: record });\n }\n\n if (m === \"DELETE\" && segs[0] === \"modules\" && segs[1]) {\n const key = segs[1];\n const { sessionToken } = await req.json();\n const user = await verifySession(sessionToken);\n if (!user) return res({ error: \"Unauthorized\" }, 401);\n const mod = (await fbGet(`modules/${key}`)) as Record | null;\n if (!mod) return res({ error: \"Not found\" }, 404);\n if (mod.owner !== user.username && user.status !== \"admin\") return res({ error: \"Forbidden\" }, 403);\n await fbDelete(`modules/${key}`);\n await fbDelete(`comments/${key}`);\n return res({ ok: true });\n }\n\n if (m === \"POST\" && segs[0] === \"modules\" && segs[1] && segs[2] === \"download\") {\n const key = segs[1];\n const mod = (await fbGet(`modules/${key}`)) as Record | null;\n if (!mod) return res({ error: \"Not found\" }, 404);\n const newCount = await fbIncrement(`modules/${key}/downloads`, 1);\n const downloadUrl = (mod.shortLink && typeof mod.shortLink === \"string\" && mod.shortLink.trim() !== \"\")\n ? mod.shortLink\n : (mod.link as string);\n return res({ ok: true, downloads: newCount, url: downloadUrl });\n }\n\n if (m === \"POST\" && segs[0] === \"modules\" && segs[1] && segs[2] === \"review\") {\n const key = segs[1];\n const { sessionToken, rating } = await req.json();\n const user = await verifySession(sessionToken);\n if (!user) return res({ error: \"Unauthorized\" }, 401);\n if (!rating || rating < 1 || rating > 5) return res({ error: \"Invalid rating\" }, 400);\n await fbSet(`modules/${key}/reviews/${user.username}`, { rating: Number(rating), updatedAt: Date.now() });\n return res({ ok: true });\n }\n\n if (m === \"POST\" && segs[0] === \"modules\" && segs[1] && segs[2] === \"comment\") {\n const key = segs[1];\n const { sessionToken, text, replyTo, parentId } = await req.json();\n const user = await verifySession(sessionToken);\n if (!user) return res({ error: \"Unauthorized\" }, 401);\n if (!text || !text.trim()) return res({ error: \"Empty comment\" }, 400);\n\n const commentId = genToken();\n const newComment: Record = {\n id: commentId,\n moduleKey: key,\n username: user.username,\n displayName: user.displayName || user.username,\n userImage: user.image || \"\",\n text: text.trim(),\n createdAt: Date.now(),\n };\n if (replyTo && typeof replyTo === \"string\" && replyTo.trim()) newComment.replyTo = replyTo.trim();\n if (parentId && typeof parentId === \"string\" && parentId.trim()) newComment.parentId = parentId.trim();\n await fbSet(`comments/${key}/${commentId}`, newComment);\n return res({ ok: true, comment: newComment });\n }\n\n return res({ error: \"Route not found\" }, 404);\n } catch (e) {\n return res({ error: (e as Error).message }, 500);\n }\n}","children",[],[207],"1991f12a-bc48-4557-b1e4-9a114a04e4aa","cleanup.ts","8f0c68da-9e9e-11f1-b1dc-1607ee4eb77e",64,["D",1787492145382],"const DB = () => Deno.env.get(\"DB_URL\");\nconst SEC = () => Deno.env.get(\"FB_SECRET\");\nconst SESSION_MAX_AGE = 14 * 24 * 60 * 60 * 1000;\n\nasync function fbGet(path: string) {\n const r = await fetch(`${DB()}/${path}.json?auth=${SEC()}`);\n if (!r.ok) throw new Error(\"db \" + r.status);\n return r.json();\n}\n\nasync function fbDelete(path: string) {\n const r = await fetch(`${DB()}/${path}.json?auth=${SEC()}`, {\n method: \"DELETE\",\n });\n if (!r.ok) throw new Error(\"db \" + r.status);\n return r.json();\n}\n\nexport default async function (_req: Request): Promise {\n const [allUsers, allModules, allComments, allSessions] = await Promise.all([\n fbGet(\"users\"),\n fbGet(\"modules\"),\n fbGet(\"comments\"),\n fbGet(\"sessions\"),\n ]);\n\n if (!allUsers || typeof allUsers !== \"object\") {\n return new Response(null, { status: 204 });\n }\n\n const modules = (allModules || {}) as Record>;\n const comments = (allComments || {}) as Record<\n string,\n Record\n >;\n const sessions = (allSessions || {}) as Record<\n string,\n { username: string; createdAt: number }\n >;\n\n const usersWithActivity = new Set();\n const now = Date.now();\n\n for (const mod of Object.values(modules)) {\n if (mod.owner) {\n usersWithActivity.add(String(mod.owner).toLowerCase().trim());\n }\n if (mod.creator) {\n usersWithActivity.add(String(mod.creator).toLowerCase().trim());\n }\n\n const reviews = (mod.reviews || {}) as Record;\n for (const reviewer of Object.keys(reviews)) {\n usersWithActivity.add(reviewer.toLowerCase().trim());\n }\n }\n\n for (const modComments of Object.values(comments)) {\n for (\n const comment of Object.values(\n modComments as Record>,\n )\n ) {\n if (comment.username) {\n usersWithActivity.add(String(comment.username).toLowerCase().trim());\n }\n }\n }\n\n const sessionsByUser: Record = {};\n for (const [tok, sess] of Object.entries(sessions)) {\n if (!sess || !sess.username) continue;\n const u = sess.username.toLowerCase().trim();\n const isActive = sess.createdAt && (now - sess.createdAt) < SESSION_MAX_AGE;\n if (isActive) usersWithActivity.add(u);\n if (!sessionsByUser[u]) sessionsByUser[u] = [];\n sessionsByUser[u].push(tok);\n }\n\n for (const username of Object.keys(allUsers as Record)) {\n const key = username.toLowerCase().trim();\n if (usersWithActivity.has(key)) continue;\n\n await fbDelete(`users/${key}`);\n\n if (sessionsByUser[key]) {\n for (const tok of sessionsByUser[key]) {\n await fbDelete(`sessions/${tok}`);\n }\n }\n }\n\n return new Response(null, { status: 204 });\n}",[],[218],["D",1789109008680],[],[18],["D",1783552548469],["D",1789472446807],{"_11":12,"_146":72},{"_11":12,"_141":142,"_71":72,"_30":70,"_143":144,"_145":24},{"_41":90,"_13":16,"_35":38,"_133":97,"_134":-5,"_135":-5,"_136":-5,"_137":-5,"_138":-5,"_139":14,"_140":12},"ctx",{"_54":-5,"_166":266,"_267":268,"_269":270,"_271":24,"_272":24,"_273":24,"_274":164,"_275":-5,"_276":-7,"_277":-7,"_278":26,"_279":24,"_280":24,"_281":-5,"_282":24,"_283":24,"_284":24,"_285":-5},"ENV",{"_237":238,"_239":240,"_241":16,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263,"_264":265},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · clean.ts