\n grimbucks\n

\n @${escapeHtml(username)}\n 🪙 ${balance ?? 0}\n \n

\n \n

`\n : \"\";\n\n return `\n\n\n\n\n${escapeHtml(title)} · grimbucks\n\n\n\n\n${header}\n

\n${body}\n

\n\n`;\n}\n\nexport function escapeHtml(s: string | number): string {\n return String(s)\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\")\n .replace(/'/g, \"'\");\n}\n",[],[67,108,117],"07b5575c-5506-11f1-9912-ee650bb23af1","pages","a7c2974e-e88e-40e8-97f8-9dd92cc62ea9",18,["D",1779361981258],[131,132,133,134,135],[67,108,125],{"_35":167,"_13":168,"_38":169,"_40":126,"_41":42,"_43":170,"_45":46,"_47":171,"_17":44,"_50":103,"_52":172,"_54":55,"_56":-5,"_77":173,"_18":174},{"_35":159,"_13":160,"_38":161,"_40":126,"_41":42,"_43":162,"_45":46,"_47":163,"_17":63,"_50":103,"_52":164,"_54":55,"_56":-5,"_77":165,"_18":166},{"_35":152,"_13":153,"_38":154,"_40":126,"_41":42,"_43":127,"_45":46,"_47":155,"_17":63,"_50":103,"_52":156,"_54":55,"_56":-5,"_77":157,"_18":158},{"_35":144,"_13":145,"_38":146,"_40":126,"_41":42,"_43":147,"_45":46,"_47":148,"_17":49,"_50":103,"_52":149,"_54":55,"_56":-5,"_77":150,"_18":151},{"_35":136,"_13":137,"_38":138,"_40":126,"_41":42,"_43":139,"_45":46,"_47":140,"_17":69,"_50":103,"_52":141,"_54":55,"_56":-5,"_77":142,"_18":143},"b0d32f96-5513-11f1-9998-ee650bb23af1","room.ts","20859166-5506-11f1-a1d1-ee650bb23af1",74,["D",1779367848440],"import { escapeHtml, layout } from \"../layout.ts\";\nimport type { User } from \"../../db/queries.ts\";\nimport type { RouletteState } from \"../../games/roulette.ts\";\n\nexport interface RoomPageProps {\n user: User;\n roomId: number;\n hostId: number;\n joinCode: string | null;\n members: { user_id: number; seat: number; username: string }[];\n friends: { id: number; username: string }[];\n state: RouletteState;\n latestEventId: number;\n}\n\nexport function roomPage(props: RoomPageProps): string {\n const { user, roomId, hostId, joinCode, members, friends, state, latestEventId } = props;\n\n const isHost = user.id === hostId;\n const invitableFriends = friends.filter(\n (f) => !members.some((m) => m.user_id === f.id),\n );\n\n const memberList = members.map((m) => `\n

\n @${escapeHtml(m.username)}${\n m.user_id === hostId ? ' host' : \"\"\n }\n seat ${m.seat}\n

`).join(\"\");\n\n const inviteForm = invitableFriends.length === 0\n ? \"\"\n : ``;\n\n const lastResultHtml = state.lastResult\n ? `

last spin

${state.lastResult.number}

${state.lastResult.color}

`\n : \"\";\n\n const body = `\n

\n ← home\n\n

room #${roomId}

Roulette

phase: ${state.phase}

code

${escapeHtml(joinCode ?? \"—\")}

share on /join

\n\n ${lastResultHtml}\n\n \n

\n\n

Players

\n ${memberList}\n

\n\n ${inviteForm}\n

\n\n\n`;\n\n return layout({\n title: `room #${roomId}`,\n body,\n balance: user.balance,\n username: user.username,\n active: \"room\",\n });\n}\n\nfunction colorCss(c: \"red\" | \"black\" | \"green\"): string {\n return c === \"red\" ? \"#ef4444\" : c === \"black\" ? \"#e7e5e4\" : \"#10b981\";\n}\n",[],[67,108,125,137],"d10c4ada-550f-11f1-b8df-ee650bb23af1","leaderboard.ts","c93a60dc-550d-11f1-a602-ee650bb23af1",60,["D",1779366184517],"import { escapeHtml, layout } from \"../layout.ts\";\nimport {\n listLeaderboard,\n listRelatedUserIds,\n type User,\n} from \"../../db/queries.ts\";\n\nexport async function leaderboardPage(user: User): Promise {\n const [top, relatedIds] = await Promise.all([\n listLeaderboard(25),\n listRelatedUserIds(user.id),\n ]);\n const related = new Set(relatedIds);\n\n const list = top.length === 0\n ? `

No players yet.

`\n : top.map((u, i) => {\n const isMe = u.id === user.id;\n const rank = i + 1;\n const medal = rank === 1 ? \"🥇\" : rank === 2 ? \"🥈\" : rank === 3 ? \"🥉\" : \"\";\n const wrapperCls = isMe\n ? \"border-2 border-amber-500 bg-stone-950\"\n : \"border border-stone-800 bg-stone-950\";\n const nameCls = isMe ? \"text-amber-300\" : \"text-stone-200\";\n const canAddFriend = !isMe && !related.has(u.id);\n const addFriendBtn = canAddFriend\n ? ``\n : \"\";\n return `

\n ${medal || `#${rank}`}\n @${escapeHtml(u.username)}${isMe ? ' (you)' : \"\"}\n

\n ${addFriendBtn}\n 🪙 ${u.balance.toLocaleString()}\n

`;\n }).join(\"\");\n\n const body = `\n

🏆 Richest players

top 25 by chip balance

${list}

\n`;\n\n return layout({\n title: \"richest\",\n body,\n balance: user.balance,\n username: user.username,\n active: \"leaderboard\",\n });\n}\n",[],[67,108,125,145],"07b52c32-5506-11f1-9912-ee650bb23af1","landing.ts","07b52cd2-5506-11f1-9912-ee650bb23af1",["D",1779361981258],"import { layout } from \"../layout.ts\";\n\nexport function landingPage(): string {\n const body = `\n

grimbucks

play-money roulette with your friends

\n\n

\n \n\n \n

\n`;\n return layout({ title: \"welcome\", body });\n}\n",[],[67,108,125,153],"1f862c32-5513-11f1-a7b6-ee650bb23af1","join.ts","1f862d2c-5513-11f1-a7b6-ee650bb23af1",70,["D",1779367604666],"import { layout } from \"../layout.ts\";\nimport type { User } from \"../../db/queries.ts\";\n\nconst ERROR_MESSAGES: Record = {\n invalid: \"Code not found. Check it and try again.\",\n closed: \"That room is closed.\",\n};\n\nexport function joinPage(user: User, errorKey?: string): string {\n const message = errorKey ? ERROR_MESSAGES[errorKey] : undefined;\n const errorBanner = message\n ? `

${message}

`\n : \"\";\n\n const body = `\n

Join a room

enter the 6-character code your host shared

\n \n

\n`;\n return layout({\n title: \"join\",\n body,\n balance: user.balance,\n username: user.username,\n active: \"join\",\n });\n}\n",[],[67,108,125,160],"4b51b768-550f-11f1-befb-ee650bb23af1","home.ts","13902052-5506-11f1-8c41-ee650bb23af1",58,["D",1779365960109],"import { escapeHtml, layout } from \"../layout.ts\";\nimport {\n listPendingIncoming,\n listPendingInvitesFor,\n type User,\n} from \"../../db/queries.ts\";\n\nexport async function homePage(user: User): Promise {\n const [pendingFriends, invites] = await Promise.all([\n listPendingIncoming(user.id),\n listPendingInvitesFor(user.id),\n ]);\n\n const inviteList = invites.length === 0\n ? `

No room invites.

`\n : invites.map((inv) =>\n ``\n ).join(\"\");\n\n const pendingFriendList = pendingFriends.length === 0\n ? \"\"\n : `

Pending friend requests

\n ${\n pendingFriends.map((p) =>\n ``\n ).join(\"\")\n }\n

`;\n\n const body = `\n

\n\n

balance

🪙 ${user.balance}

\n \n

\n\n

Invites

\n ${inviteList}\n

\n\n ${pendingFriendList}\n\n

\n`;\n return layout({\n title: \"home\",\n body,\n balance: user.balance,\n username: user.username,\n active: \"home\",\n });\n}\n",[],[67,108,125,168],"47b2d83e-5506-11f1-82b6-ee650bb23af1","static","ee2752f7-e516-4df8-a0a5-60da32ce9b42",21,["D",1779362088608],[182],[67,176],{"_35":183,"_13":184,"_38":185,"_40":177,"_41":42,"_43":178,"_45":46,"_47":186,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_77":187,"_18":188},"47b2ded8-5506-11f1-82b6-ee650bb23af1","client","fdb50a95-278e-455c-bfdc-5b1763c94624",["D",1779362088608],[189],[67,176,184],{"_35":190,"_13":191,"_38":192,"_40":185,"_41":42,"_43":193,"_45":46,"_47":194,"_17":49,"_50":103,"_52":195,"_54":55,"_56":-5,"_77":196,"_18":197},"d7682ff0-550c-11f1-8837-ee650bb23af1","bundle.ts","47b24a5e-5506-11f1-82b6-ee650bb23af1",49,["D",1779364906697],"// Concatenated, transpiled-already (plain JS) client bundle served at\n// /static/client/roulette.js. Kept as a TS string export so it works in\n// Val Town's Deno runtime without filesystem reads or unstable text imports.\n\nexport const CLIENT_BUNDLE = String.raw`\n\"use strict\";\n(function () {\n const RED_NUMBERS = new Set([\n 1, 3, 5, 7, 9, 12, 14, 16, 18, 19, 21, 23, 25, 27, 30, 32, 34, 36,\n ]);\n const SPIN_MS = 6000;\n\n function colorOf(n) {\n if (n === 0) return \"green\";\n return RED_NUMBERS.has(n) ? \"red\" : \"black\";\n }\n\n const WHEEL_ORDER = [\n 0, 32, 15, 19, 4, 21, 2, 25, 17, 34, 6, 27, 13, 36, 11, 30, 8, 23, 10, 5,\n 24, 16, 33, 1, 20, 14, 31, 9, 22, 18, 29, 7, 28, 12, 35, 3, 26,\n ];\n\n function connectSse(url, initialEventId, onEvent) {\n const target = initialEventId > 0\n ? url + (url.includes(\"?\") ? \"&\" : \"?\") + \"since=\" + initialEventId\n : url;\n const es = new EventSource(target);\n const types = [\n \"open\", \"state.snapshot\", \"bet.placed\", \"bet.cleared\",\n \"spin.result\", \"round.payouts\", \"round.new\",\n ];\n for (const type of types) {\n es.addEventListener(type, (ev) => {\n try {\n const data = ev.data ? JSON.parse(ev.data) : null;\n onEvent({ type, data });\n } catch (e) { /* ignore */ }\n });\n }\n return { close: () => es.close() };\n }\n\n function betKey(bet) {\n switch (bet.kind) {\n case \"color\": return \"color:\" + bet.color;\n case \"parity\": return \"parity:\" + bet.parity;\n case \"range\": return \"range:\" + bet.range;\n case \"dozen\": return \"dozen:\" + bet.dozen;\n case \"column\": return \"column:\" + bet.column;\n case \"straight\": return \"straight:\" + bet.number;\n }\n return \"?\";\n }\n\n function mount(root) {\n const data = {\n roomId: Number(root.dataset.roomId),\n userId: Number(root.dataset.userId),\n isHost: root.dataset.isHost === \"true\",\n };\n const initialEventId = Number(root.dataset.lastEventId || 0);\n\n const state = {\n myBets: Object.create(null),\n pendingPayout: null,\n isSpinning: false,\n };\n\n const ui = renderUI(root, data);\n let pendingAmount = 10;\n\n ui.amountButtons.forEach((b) => {\n b.addEventListener(\"click\", () => {\n pendingAmount = Number(b.dataset.amount);\n ui.amountButtons.forEach((x) => x.classList.toggle(\"ring-2\", x === b));\n });\n });\n ui.amountButtons[1] && ui.amountButtons[1].classList.add(\"ring-2\");\n\n ui.betButtons.forEach((b) => {\n b.addEventListener(\"click\", async () => {\n const bet = parseBet(b, pendingAmount);\n if (!bet) return;\n pulseButton(b);\n await postAction(data.roomId, { type: \"place_bet\", bet });\n });\n });\n\n if (ui.clearBtn) {\n ui.clearBtn.addEventListener(\"click\", async () => {\n await postAction(data.roomId, { type: \"clear_bets\" });\n });\n }\n\n if (ui.spinBtn) {\n ui.spinBtn.addEventListener(\"click\", async () => {\n ui.spinBtn.disabled = true;\n await postAction(data.roomId, { type: \"spin\" });\n });\n }\n\n if (ui.newRoundBtn) {\n ui.newRoundBtn.addEventListener(\"click\", async () => {\n await postAction(data.roomId, { type: \"new_round\" });\n });\n }\n\n const initialPhase = (ui.phaseEl && ui.phaseEl.textContent || \"\").trim();\n if (initialPhase === \"resolved\") {\n enterResolvedUI(ui, data);\n }\n\n connectSse(\"/api/sse/\" + data.roomId, initialEventId, (ev) =>\n handleEvent(ev, ui, data, state)\n );\n }\n\n function renderUI(root, data) {\n const rouletteRoot = document.getElementById(\"roulette-root\");\n const amounts = [1, 10, 50, 100, 500];\n const amountHtml = amounts.map((v) =>\n ''\n ).join(\"\");\n\n const straightHtml = [];\n for (let n = 0; n <= 36; n++) {\n const c = colorOf(n);\n const bg = c === \"red\" ? \"bg-red-600\" : c === \"black\" ? \"bg-stone-700\" : \"bg-emerald-600\";\n straightHtml.push('');\n }\n\n rouletteRoot.innerHTML = [\n '

',\n '

',\n ' ',\n '

place your bets

',\n '

', amountHtml, '

',\n '

',\n ' ',\n ' ',\n ' ',\n ' ',\n ' ',\n ' ',\n ' ',\n ' ',\n ' ',\n ' ',\n ' ',\n ' ',\n '

',\n '

Bet on a single number (35:1)

',\n '

', straightHtml.join(\"\"), '

',\n '

',\n ' ',\n data.isHost\n ? ' '\n : '

Waiting for host…

',\n '

',\n data.isHost\n ? '

'\n : '',\n '

'\n ].join(\"\");\n\n if (!document.getElementById(\"roulette-style\")) {\n const st = document.createElement(\"style\");\n st.id = \"roulette-style\";\n st.textContent =\n \".bet-btn { transition: transform 80ms ease-out; }\" +\n \".bet-btn.is-pressed { transform: scale(0.93); }\" +\n \".bet-badge { position: absolute; top: 4px; right: 6px; background: #f59e0b; color: #1c1917; font-weight: 700; font-size: 10px; line-height: 1; padding: 3px 5px; border-radius: 999px; transform: scale(0); transition: transform 160ms cubic-bezier(0.16, 1, 0.3, 1); pointer-events: none; }\" +\n \".bet-badge.is-shown { transform: scale(1); }\" +\n \".bet-badge.is-bump { animation: badge-bump 280ms cubic-bezier(0.16, 1, 0.3, 1); }\" +\n \"@keyframes badge-bump { 0% { transform: scale(1); } 40% { transform: scale(1.35); } 100% { transform: scale(1); } }\" +\n \".chip-fly { position: fixed; pointer-events: none; z-index: 50; font-weight: 800; color: #fbbf24; text-shadow: 0 1px 2px rgba(0,0,0,0.6); transition: transform 600ms cubic-bezier(0.16, 1, 0.3, 1), opacity 600ms ease-out; }\";\n document.head.appendChild(st);\n }\n\n drawWheel(document.getElementById(\"wheel\"), null);\n\n return {\n betButtons: Array.from(rouletteRoot.querySelectorAll(\".bet-btn\")),\n amountButtons: Array.from(rouletteRoot.querySelectorAll(\".amount-btn\")),\n clearBtn: rouletteRoot.querySelector(\"#clear-btn\"),\n spinBtn: rouletteRoot.querySelector(\"#spin-btn\"),\n newRoundBtn: rouletteRoot.querySelector(\"#new-round-btn\"),\n resultEl: rouletteRoot.querySelector(\"#result-display\"),\n betSummaryEl: rouletteRoot.querySelector(\"#bet-summary\"),\n phaseEl: root.querySelector(\"[data-phase]\"),\n };\n }\n\n function parseBet(b, amount) {\n const kind = b.dataset.betKind;\n if (!kind) return null;\n switch (kind) {\n case \"color\": return { kind, color: b.dataset.betColor, amount };\n case \"parity\": return { kind, parity: b.dataset.betParity, amount };\n case \"range\": return { kind, range: b.dataset.betRange, amount };\n case \"dozen\": return { kind, dozen: Number(b.dataset.betDozen), amount };\n case \"column\": return { kind, column: Number(b.dataset.betColumn), amount };\n case \"straight\": return { kind, number: Number(b.dataset.betNumber), amount };\n }\n return null;\n }\n\n function pulseButton(b) {\n b.classList.remove(\"is-pressed\");\n void b.offsetWidth;\n b.classList.add(\"is-pressed\");\n setTimeout(() => b.classList.remove(\"is-pressed\"), 140);\n\n const r = b.getBoundingClientRect();\n const chip = document.createElement(\"div\");\n chip.className = \"chip-fly\";\n chip.style.left = (r.left + r.width / 2 - 10) + \"px\";\n chip.style.top = (r.top + r.height / 2 - 10) + \"px\";\n chip.style.fontSize = \"22px\";\n chip.style.opacity = \"1\";\n chip.textContent = \"🪙\";\n document.body.appendChild(chip);\n requestAnimationFrame(() => {\n chip.style.transform = \"translateY(-32px) scale(1.4)\";\n chip.style.opacity = \"0\";\n });\n setTimeout(() => chip.remove(), 650);\n }\n\n function setBadge(button, total) {\n const badge = button.querySelector(\".bet-badge\");\n if (!badge) return;\n if (total > 0) {\n badge.textContent = String(total);\n badge.classList.add(\"is-shown\");\n badge.classList.remove(\"is-bump\");\n void badge.offsetWidth;\n badge.classList.add(\"is-bump\");\n } else {\n badge.classList.remove(\"is-shown\");\n badge.textContent = \"\";\n }\n }\n\n function clearAllBadges(ui) {\n ui.betButtons.forEach((b) => setBadge(b, 0));\n }\n\n function enterResolvedUI(ui, data) {\n if (data.isHost && ui.newRoundBtn) ui.newRoundBtn.classList.remove(\"hidden\");\n if (ui.spinBtn) ui.spinBtn.disabled = true;\n ui.betButtons.forEach((b) => { b.disabled = true; b.classList.add(\"opacity-50\"); });\n }\n\n function enterBettingUI(ui, data) {\n if (ui.newRoundBtn) ui.newRoundBtn.classList.add(\"hidden\");\n if (ui.spinBtn) ui.spinBtn.disabled = false;\n ui.betButtons.forEach((b) => { b.disabled = false; b.classList.remove(\"opacity-50\"); });\n }\n\n async function postAction(roomId, action) {\n const r = await fetch(\"/rooms/\" + roomId + \"/action\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(action),\n });\n if (!r.ok) {\n const text = await r.text().catch(() => \"\");\n console.warn(\"action failed:\", r.status, text);\n flashError(text || (\"request failed (\" + r.status + \")\"));\n }\n }\n\n function flashError(msg) {\n const el = document.createElement(\"div\");\n el.className = \"fixed bottom-24 left-4 right-4 bg-red-900/95 text-red-100 rounded-xl px-3 py-2 text-sm shadow-lg z-30\";\n el.textContent = String(msg).slice(0, 200);\n document.body.appendChild(el);\n setTimeout(() => el.remove(), 2500);\n }\n\n function adjustBalanceDisplay(delta) {\n const el = document.getElementById(\"balance-display\");\n if (!el) return;\n const text = el.textContent || \"\";\n const m = text.match(/(-?\\d+)/);\n if (!m) return;\n const next = Number(m[1]) + delta;\n el.textContent = \"🪙 \" + next;\n }\n\n function drawWheel(svg, highlight) {\n svg.innerHTML = \"\";\n const ns = \"http://www.w3.org/2000/svg\";\n const slice = (2 * Math.PI) / 37;\n for (let i = 0; i < 37; i++) {\n const n = WHEEL_ORDER[i];\n const a0 = -Math.PI / 2 + i * slice;\n const a1 = a0 + slice;\n const r = 95;\n const x0 = Math.cos(a0) * r;\n const y0 = Math.sin(a0) * r;\n const x1 = Math.cos(a1) * r;\n const y1 = Math.sin(a1) * r;\n const path = document.createElementNS(ns, \"path\");\n path.setAttribute(\"d\", \"M 0 0 L \" + x0.toFixed(2) + \" \" + y0.toFixed(2) + \" A \" + r + \" \" + r + \" 0 0 1 \" + x1.toFixed(2) + \" \" + y1.toFixed(2) + \" Z\");\n const c = colorOf(n);\n path.setAttribute(\"fill\", c === \"red\" ? \"#dc2626\" : c === \"black\" ? \"#1c1917\" : \"#059669\");\n path.setAttribute(\"stroke\", \"#44403c\");\n path.setAttribute(\"stroke-width\", \"0.5\");\n svg.appendChild(path);\n const labelAngle = a0 + slice / 2;\n const lx = Math.cos(labelAngle) * (r - 12);\n const ly = Math.sin(labelAngle) * (r - 12);\n const t = document.createElementNS(ns, \"text\");\n t.setAttribute(\"x\", lx.toFixed(2));\n t.setAttribute(\"y\", ly.toFixed(2));\n t.setAttribute(\"fill\", \"white\");\n t.setAttribute(\"font-size\", \"8\");\n t.setAttribute(\"text-anchor\", \"middle\");\n t.setAttribute(\"dominant-baseline\", \"middle\");\n t.textContent = String(n);\n svg.appendChild(t);\n }\n const c = document.createElementNS(ns, \"circle\");\n c.setAttribute(\"r\", \"12\");\n c.setAttribute(\"fill\", \"#1c1917\");\n c.setAttribute(\"stroke\", \"#a8a29e\");\n svg.appendChild(c);\n if (highlight !== null) {\n const idx = WHEEL_ORDER.indexOf(highlight);\n if (idx >= 0) {\n const angle = -Math.PI / 2 + (idx + 0.5) * slice;\n const ax = Math.cos(angle) * 100;\n const ay = Math.sin(angle) * 100;\n const m = document.createElementNS(ns, \"circle\");\n m.setAttribute(\"cx\", ax.toFixed(2));\n m.setAttribute(\"cy\", ay.toFixed(2));\n m.setAttribute(\"r\", \"6\");\n m.setAttribute(\"fill\", \"#fbbf24\");\n svg.appendChild(m);\n }\n }\n }\n\n function handleEvent(ev, ui, data, state) {\n const payload = (ev.data && typeof ev.data === \"object\" && \"payload\" in ev.data)\n ? ev.data.payload : null;\n switch (ev.type) {\n case \"bet.placed\": {\n if (!payload) break;\n const isMine = Number(payload.userId) === data.userId;\n if (isMine) {\n const key = betKey(payload.bet);\n state.myBets[key] = (state.myBets[key] || 0) + Number(payload.bet.amount);\n const button = ui.betButtons.find((b) => b.dataset.betKey === key);\n if (button) setBadge(button, state.myBets[key]);\n adjustBalanceDisplay(-Number(payload.bet.amount));\n }\n ui.betSummaryEl.textContent = isMine ? \"bet placed.\" : \"another player bet.\";\n setTimeout(() => { ui.betSummaryEl.textContent = \"\"; }, 1500);\n break;\n }\n case \"bet.cleared\": {\n if (!payload) break;\n const isMine = Number(payload.userId) === data.userId;\n if (isMine) {\n state.myBets = Object.create(null);\n clearAllBadges(ui);\n adjustBalanceDisplay(Number(payload.refund || 0));\n }\n break;\n }\n case \"spin.result\": {\n if (!payload) break;\n state.isSpinning = true;\n state.pendingPayout = null;\n if (ui.spinBtn) ui.spinBtn.disabled = true;\n ui.betButtons.forEach((b) => { b.disabled = true; b.classList.add(\"opacity-50\"); });\n ui.resultEl.textContent = \"spinning…\";\n animateSpin(payload.number, () => {\n state.isSpinning = false;\n ui.resultEl.innerHTML = '🎲 ' + payload.number + \" (\" + payload.color + \")\";\n if (ui.phaseEl) ui.phaseEl.textContent = \"resolved\";\n if (state.pendingPayout) {\n applyPayoutReveal(state.pendingPayout, ui, data, state);\n state.pendingPayout = null;\n } else {\n if (data.isHost && ui.newRoundBtn) ui.newRoundBtn.classList.remove(\"hidden\");\n }\n });\n break;\n }\n case \"round.payouts\": {\n if (!payload) break;\n if (state.isSpinning) {\n state.pendingPayout = payload;\n } else {\n applyPayoutReveal(payload, ui, data, state);\n }\n break;\n }\n case \"round.new\": {\n state.myBets = Object.create(null);\n state.pendingPayout = null;\n clearAllBadges(ui);\n ui.resultEl.textContent = \"place your bets\";\n if (ui.phaseEl) ui.phaseEl.textContent = \"betting\";\n drawWheel(document.getElementById(\"wheel\"), null);\n const svg = document.getElementById(\"wheel\");\n if (svg) { svg.style.transition = \"none\"; svg.style.transform = \"rotate(0deg)\"; }\n enterBettingUI(ui, data);\n break;\n }\n }\n }\n\n function applyPayoutReveal(payload, ui, data, state) {\n const mine = payload.payouts && payload.payouts[String(data.userId)] || 0;\n if (mine > 0) {\n adjustBalanceDisplay(mine);\n const span = document.createElement(\"span\");\n span.style.color = \"#fbbf24\";\n span.style.fontWeight = \"700\";\n span.textContent = \" — you won \" + mine + \" 🪙!\";\n ui.resultEl.appendChild(span);\n bigChipFlash(mine);\n } else {\n const span = document.createElement(\"span\");\n span.style.color = \"#a8a29e\";\n span.textContent = \" — no win this round\";\n ui.resultEl.appendChild(span);\n }\n if (data.isHost && ui.newRoundBtn) ui.newRoundBtn.classList.remove(\"hidden\");\n }\n\n function bigChipFlash(amount) {\n const el = document.createElement(\"div\");\n el.className = \"chip-fly\";\n el.style.left = \"50%\";\n el.style.top = \"40%\";\n el.style.transform = \"translate(-50%, -50%) scale(0.6)\";\n el.style.fontSize = \"72px\";\n el.style.opacity = \"0\";\n el.textContent = \"+\" + amount + \" 🪙\";\n document.body.appendChild(el);\n requestAnimationFrame(() => {\n el.style.opacity = \"1\";\n el.style.transform = \"translate(-50%, -50%) scale(1)\";\n });\n setTimeout(() => {\n el.style.opacity = \"0\";\n el.style.transform = \"translate(-50%, -100%) scale(0.8)\";\n }, 1200);\n setTimeout(() => el.remove(), 2000);\n }\n\n function animateSpin(finalNumber, onDone) {\n const svg = document.getElementById(\"wheel\");\n if (!svg) { if (onDone) onDone(); return; }\n const idx = WHEEL_ORDER.indexOf(finalNumber);\n const slice = 360 / 37;\n const target = -idx * slice - slice / 2;\n const totalRotation = 360 * 7 + target;\n svg.style.transition = \"transform \" + SPIN_MS + \"ms cubic-bezier(0.16, 1, 0.3, 1)\";\n svg.style.transform = \"rotate(\" + totalRotation + \"deg)\";\n setTimeout(() => {\n svg.style.transition = \"none\";\n drawWheel(svg, finalNumber);\n svg.style.transform = \"rotate(0deg)\";\n if (onDone) onDone();\n }, SPIN_MS + 150);\n }\n\n function init() {\n const root = document.querySelector(\"[data-room-id]\");\n if (root) mount(root);\n }\n if (document.readyState === \"loading\") {\n document.addEventListener(\"DOMContentLoaded\", init);\n } else {\n init();\n }\n})();\n`;\n",[],[67,176,184,191],"e8fd80dc-5505-11f1-a891-ee650bb23af1","rooms","eb3b9e4d-4b1e-4f9e-87ee-0d09964d8485",14,["D",1779361929706],[205,206,207,208],[67,199],{"_35":234,"_13":235,"_38":236,"_40":200,"_41":42,"_43":237,"_45":46,"_47":238,"_17":49,"_50":103,"_52":239,"_54":55,"_56":-5,"_77":240,"_18":241},{"_35":226,"_13":227,"_38":228,"_40":200,"_41":42,"_43":229,"_45":46,"_47":230,"_17":63,"_50":103,"_52":231,"_54":55,"_56":-5,"_77":232,"_18":233},{"_35":217,"_13":218,"_38":219,"_40":200,"_41":42,"_43":220,"_45":46,"_47":221,"_17":222,"_50":103,"_52":223,"_54":55,"_56":-5,"_77":224,"_18":225},{"_35":209,"_13":210,"_38":211,"_40":200,"_41":42,"_43":212,"_45":46,"_47":213,"_17":44,"_50":103,"_52":214,"_54":55,"_56":-5,"_77":215,"_18":216},"43a9b300-5508-11f1-9eb2-ee650bb23af1","sse.ts","ef4278d0-5505-11f1-af15-ee650bb23af1",33,["D",1779362940840],"import type { Context } from \"npm:hono@^4.6.0\";\nimport { streamSSE } from \"npm:hono@^4.6.0/streaming\";\nimport { getSession } from \"../auth/session.ts\";\nimport { isRoomMember, readEventsSince } from \"../db/queries.ts\";\n\n// Val Town caps a single request at ~60s. Close just under that so the client\n// reconnects cleanly with Last-Event-ID instead of being killed mid-flush.\nconst SSE_BUDGET_MS = 55_000;\nconst POLL_INTERVAL_MS = 500;\n\nexport async function sseHandler(c: Context): Promise {\n const session = await getSession(c);\n if (!session) return c.text(\"Unauthorized\", 401);\n\n const roomId = Number(c.req.param(\"roomId\"));\n if (!Number.isInteger(roomId)) return c.text(\"Bad room id\", 400);\n if (!(await isRoomMember(roomId, session.user.id))) {\n return c.text(\"Not a room member\", 403);\n }\n\n const lastEventHeader = c.req.header(\"Last-Event-ID\");\n const sinceQuery = c.req.query(\"since\");\n let cursor = Number(lastEventHeader ?? sinceQuery ?? 0);\n if (!Number.isFinite(cursor) || cursor < 0) cursor = 0;\n\n return streamSSE(c, async (stream) => {\n const startedAt = Date.now();\n // Initial flush so the browser opens the connection promptly.\n await stream.writeSSE({ event: \"open\", data: \"\" });\n\n while (Date.now() - startedAt < SSE_BUDGET_MS) {\n const events = await readEventsSince(roomId, cursor);\n for (const ev of events) {\n await stream.writeSSE({\n id: String(ev.id),\n event: ev.type,\n data: JSON.stringify({\n type: ev.type,\n payload: JSON.parse(ev.payload),\n createdAt: ev.created_at,\n }),\n });\n cursor = ev.id;\n }\n await stream.sleep(POLL_INTERVAL_MS);\n }\n // Graceful close: client EventSource will reconnect with Last-Event-ID = cursor.\n });\n}\n",[],[67,199,210],"08b8feb2-5513-11f1-8968-ee650bb23af1","routes.ts","e8fd4450-5505-11f1-a891-ee650bb23af1",66,["D",1779367566408],6,"import { Hono } from \"npm:hono@^4.6.0\";\nimport { getSession } from \"../auth/session.ts\";\nimport {\n acceptInviteById,\n addRoomMember,\n createInvite,\n createRoom,\n findInviteById,\n findRoomById,\n findUserById,\n isRoomMember,\n latestEventId,\n listFriends,\n listRoomMembers,\n} from \"../db/queries.ts\";\nimport { gameForType } from \"../games/registry.ts\";\nimport { roomPage } from \"../ui/pages/room.ts\";\nimport type { RouletteState } from \"../games/roulette.ts\";\nimport { actionsRoutes } from \"./actions.ts\";\nimport { parseFormBody } from \"../lib/forms.ts\";\n\nexport const roomsRoutes = new Hono();\nroomsRoutes.route(\"/\", actionsRoutes);\n\nroomsRoutes.post(\"/\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const form = await parseFormBody(c);\n const gameType = form[\"game_type\"] ?? \"roulette\";\n const game = gameForType(gameType);\n const initial = game.initialState(session.user.id);\n const room = await createRoom(gameType, session.user.id, JSON.stringify(initial));\n await addRoomMember(room.id, session.user.id);\n return c.redirect(`/rooms/${room.id}`);\n});\n\nroomsRoutes.get(\"/:id\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const roomId = Number(c.req.param(\"id\"));\n if (!Number.isInteger(roomId)) return c.redirect(\"/home\");\n const room = await findRoomById(roomId);\n if (!room) return c.text(\"Room not found\", 404);\n const member = await isRoomMember(roomId, session.user.id);\n if (!member) return c.text(\"Not a member of this room\", 403);\n\n const [members, friends, lastEvId] = await Promise.all([\n listRoomMembers(roomId),\n listFriends(session.user.id),\n latestEventId(roomId),\n ]);\n\n // Ensure the persisted user record is fresh (balance may have changed via bets).\n const user = await findUserById(session.user.id);\n if (!user) return c.redirect(\"/\");\n\n return c.html(roomPage({\n user,\n roomId,\n hostId: room.host_id,\n joinCode: room.join_code,\n members,\n friends,\n state: JSON.parse(room.state_json) as RouletteState,\n latestEventId: lastEvId,\n }));\n});\n\nroomsRoutes.post(\"/:id/invite\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const roomId = Number(c.req.param(\"id\"));\n if (!Number.isInteger(roomId)) return c.redirect(\"/home\");\n const room = await findRoomById(roomId);\n if (!room) return c.redirect(\"/home\");\n if (!(await isRoomMember(roomId, session.user.id))) {\n return c.text(\"Not a member of this room\", 403);\n }\n const form = await parseFormBody(c);\n const friendId = Number(form[\"friend_id\"]);\n if (!Number.isInteger(friendId)) return c.redirect(`/rooms/${roomId}`);\n\n // Confirm they're actually friends before sending an invite.\n const friends = await listFriends(session.user.id);\n if (!friends.some((f) => f.id === friendId)) {\n return c.redirect(`/rooms/${roomId}`);\n }\n if (await isRoomMember(roomId, friendId)) {\n return c.redirect(`/rooms/${roomId}`);\n }\n await createInvite(roomId, session.user.id, friendId);\n return c.redirect(`/rooms/${roomId}`);\n});\n\nroomsRoutes.post(\"/:id/join\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const roomId = Number(c.req.param(\"id\"));\n if (!Number.isInteger(roomId)) return c.redirect(\"/home\");\n const form = await parseFormBody(c);\n const inviteId = Number(form[\"invite_id\"]);\n\n // Joining requires either an active invite or already being a member.\n if (await isRoomMember(roomId, session.user.id)) {\n return c.redirect(`/rooms/${roomId}`);\n }\n if (!Number.isInteger(inviteId)) return c.redirect(\"/home\");\n const invite = await findInviteById(inviteId);\n if (!invite || invite.status !== \"pending\" || invite.to_user !== session.user.id ||\n invite.room_id !== roomId) {\n return c.text(\"Invite not valid\", 403);\n }\n await acceptInviteById(inviteId, session.user.id);\n await addRoomMember(roomId, session.user.id);\n return c.redirect(`/rooms/${roomId}`);\n});\n",[],[67,199,218],"e8b4f51c-5512-11f1-8eee-ee650bb23af1","codes.ts","e8b4f5bc-5512-11f1-8eee-ee650bb23af1",62,["D",1779367512699],"const JOIN_CODE_ALPHABET = \"ABCDEFGHJKMNPQRSTUVWXYZ23456789\";\nconst JOIN_CODE_LENGTH = 6;\n\nexport function generateJoinCode(): string {\n let s = \"\";\n for (let i = 0; i < JOIN_CODE_LENGTH; i++) {\n s += JOIN_CODE_ALPHABET[\n Math.floor(Math.random() * JOIN_CODE_ALPHABET.length)\n ];\n }\n return s;\n}\n\nexport function normalizeJoinCode(raw: string): string {\n return raw.trim().toUpperCase();\n}\n",[],[67,199,227],"2cd59ee6-5508-11f1-8d5c-ee650bb23af1","actions.ts","f7d93eb6-5505-11f1-bb35-ee650bb23af1",24,["D",1779362902528],"import { Hono } from \"npm:hono@^4.6.0\";\nimport { getSession } from \"../auth/session.ts\";\nimport {\n adjustBalance,\n appendEvent,\n findRoomById,\n findUserById,\n isRoomMember,\n updateRoomState,\n} from \"../db/queries.ts\";\nimport { gameForType } from \"../games/registry.ts\";\n\nexport const actionsRoutes = new Hono();\n\nactionsRoutes.post(\"/:id/action\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.json({ error: \"unauthorized\" }, 401);\n\n const roomId = Number(c.req.param(\"id\"));\n if (!Number.isInteger(roomId)) return c.json({ error: \"bad room id\" }, 400);\n\n const room = await findRoomById(roomId);\n if (!room) return c.json({ error: \"room not found\" }, 404);\n if (!(await isRoomMember(roomId, session.user.id))) {\n return c.json({ error: \"not a member\" }, 403);\n }\n\n let action: unknown;\n try {\n action = await c.req.json();\n } catch {\n return c.json({ error: \"invalid json\" }, 400);\n }\n\n const game = gameForType(room.game_type);\n const state = JSON.parse(room.state_json);\n\n let result;\n try {\n result = game.applyAction(state, session.user.id, action);\n } catch (e) {\n return c.json({ error: e instanceof Error ? e.message : \"action failed\" }, 400);\n }\n\n // For bets: deduct stake first (already encoded in balanceDeltas as a negative).\n // Refuse the action if any user would go negative; for v1, only the acting\n // user incurs a negative delta on place_bet, so check just that one.\n for (const [uidStr, delta] of Object.entries(result.balanceDeltas)) {\n const uid = Number(uidStr);\n if (delta < 0) {\n const u = await findUserById(uid);\n if (!u || u.balance + delta < 0) {\n return c.json({ error: \"insufficient balance\" }, 400);\n }\n }\n }\n\n // Apply balance deltas. (No real transactions in Val Town SQLite; for v1's\n // low concurrency we accept the tiny window where state could diverge.)\n for (const [uidStr, delta] of Object.entries(result.balanceDeltas)) {\n if (delta !== 0) {\n await adjustBalance(Number(uidStr), delta, `room:${roomId}`);\n }\n }\n\n // Determine new room status from any phase change.\n const newStatus = result.state.phase === \"betting\"\n ? \"open\"\n : result.state.phase === \"spinning\"\n ? \"round_active\"\n : \"open\";\n await updateRoomState(roomId, newStatus, JSON.stringify(result.state));\n\n // Append game events plus a state-snapshot event so reconnecting clients\n // can rebuild even if they miss intermediate events.\n for (const ev of result.events) {\n await appendEvent(roomId, ev.type, ev.payload);\n }\n await appendEvent(roomId, \"state.snapshot\", { state: result.state });\n\n return c.json({ ok: true, state: result.state });\n});\n",[],[67,199,235],"a79426e2-5509-11f1-853a-ee650bb23af1","lib","c8e59942-ebb0-40c6-9a06-9e8deff90ae5",43,["D",1779363537960],[249],[67,243],{"_35":250,"_13":251,"_38":252,"_40":244,"_41":42,"_43":245,"_45":46,"_47":253,"_17":63,"_50":103,"_52":254,"_54":55,"_56":-5,"_77":255,"_18":256},"a794122e-5509-11f1-853a-ee650bb23af1","forms.ts","a7941314-5509-11f1-853a-ee650bb23af1",["D",1779363537960],"// Defensive form-body parser. Handles:\n// - application/x-www-form-urlencoded (real browser form posts)\n// - application/json (API clients)\n// - multipart/form-data (file uploads — not used yet but ready)\n// - text/plain bodies that contain k=v&k=v (some proxies and the val-town\n// MCP rewrite Content-Type to text/plain, so we sniff)\n// Returns a plain string-only record.\n\nimport type { Context } from \"npm:hono@^4.6.0\";\n\nexport async function parseFormBody(\n c: Context,\n): Promise> {\n const ct = c.req.header(\"Content-Type\") ?? \"\";\n const raw = await c.req.text();\n const out: Record = {};\n\n const tryUrlEncoded = () => {\n const p = new URLSearchParams(raw);\n for (const [k, v] of p) out[k] = v;\n };\n\n if (ct.includes(\"application/x-www-form-urlencoded\")) {\n tryUrlEncoded();\n } else if (ct.includes(\"application/json\")) {\n try {\n const j = JSON.parse(raw);\n if (j && typeof j === \"object\") {\n for (const [k, v] of Object.entries(j)) {\n if (v != null) out[k] = String(v);\n }\n }\n } catch { /* ignore */ }\n } else if (ct.includes(\"multipart/form-data\")) {\n const req = new Request(\"http://x\", {\n method: \"POST\",\n headers: { \"Content-Type\": ct },\n body: raw,\n });\n const fd = await req.formData();\n for (const [k, v] of fd) out[k] = String(v);\n } else if (raw.includes(\"=\") && !raw.startsWith(\"{\")) {\n // Heuristic: looks like form-urlencoded, with a wrong content-type header.\n tryUrlEncoded();\n } else if (raw.startsWith(\"{\")) {\n try {\n const j = JSON.parse(raw);\n if (j && typeof j === \"object\") {\n for (const [k, v] of Object.entries(j)) {\n if (v != null) out[k] = String(v);\n }\n }\n } catch { /* ignore */ }\n }\n return out;\n}\n",[],[67,243,251],"2429e51c-5513-11f1-a7b6-ee650bb23af1","join","411ba15e-b575-4491-8665-35d81b582ecc",71,["D",1779367612428],[264],[67,258],{"_35":265,"_13":218,"_38":266,"_40":259,"_41":42,"_43":260,"_45":46,"_47":267,"_17":63,"_50":103,"_52":268,"_54":55,"_56":-5,"_77":269,"_18":270},"2429d6da-5513-11f1-a7b6-ee650bb23af1","2429d784-5513-11f1-a7b6-ee650bb23af1",["D",1779367612428],"import { Hono } from \"npm:hono@^4.6.0\";\nimport { getSession } from \"../auth/session.ts\";\nimport {\n addRoomMember,\n findRoomByJoinCode,\n isRoomMember,\n} from \"../db/queries.ts\";\nimport { parseFormBody } from \"../lib/forms.ts\";\nimport { joinPage } from \"../ui/pages/join.ts\";\n\nexport const joinRoutes = new Hono();\n\njoinRoutes.get(\"/\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const error = c.req.query(\"error\") ?? undefined;\n return c.html(joinPage(session.user, error));\n});\n\njoinRoutes.post(\"/\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const form = await parseFormBody(c);\n const code = (form[\"code\"] ?? \"\").trim();\n if (!code) return c.redirect(\"/join?error=invalid\");\n\n const room = await findRoomByJoinCode(code);\n if (!room) return c.redirect(\"/join?error=invalid\");\n if (room.status === \"closed\") return c.redirect(\"/join?error=closed\");\n\n if (await isRoomMember(room.id, session.user.id)) {\n return c.redirect(`/rooms/${room.id}`);\n }\n await addRoomMember(room.id, session.user.id);\n return c.redirect(`/rooms/${room.id}`);\n});\n",[],[67,258,218],"bb84b5bc-5505-11f1-af15-ee650bb23af1","games","8ee6e4ce-0a84-45ce-83f1-b6d71b7461d8",10,["D",1779361853425],[278,279,280],[67,272],{"_35":297,"_13":298,"_38":299,"_40":273,"_41":42,"_43":274,"_45":46,"_47":300,"_17":63,"_50":103,"_52":301,"_54":55,"_56":-5,"_77":302,"_18":303},{"_35":289,"_13":290,"_38":291,"_40":273,"_41":42,"_43":292,"_45":46,"_47":293,"_17":63,"_50":103,"_52":294,"_54":55,"_56":-5,"_77":295,"_18":296},{"_35":281,"_13":282,"_38":283,"_40":273,"_41":42,"_43":284,"_45":46,"_47":285,"_17":63,"_50":103,"_52":286,"_54":55,"_56":-5,"_77":287,"_18":288},"cec5d192-5505-11f1-a3cc-ee650bb23af1","roulette.ts","cec5d264-5505-11f1-a3cc-ee650bb23af1",11,["D",1779361885725],"// European single-zero roulette. Pure logic — no I/O.\n// Numbers 0..36. 0 is green; everything else is red or black per RED_NUMBERS.\n\nimport type { ActionResult, Game, ResolveResult } from \"./game.ts\";\n\nexport type Color = \"red\" | \"black\" | \"green\";\n\nexport type RouletteBet =\n | { kind: \"straight\"; number: number; amount: number }\n | { kind: \"color\"; color: \"red\" | \"black\"; amount: number }\n | { kind: \"parity\"; parity: \"even\" | \"odd\"; amount: number }\n | { kind: \"range\"; range: \"low\" | \"high\"; amount: number }\n | { kind: \"dozen\"; dozen: 1 | 2 | 3; amount: number }\n | { kind: \"column\"; column: 1 | 2 | 3; amount: number };\n\nexport type RoulettePhase = \"betting\" | \"resolved\";\n\nexport interface RouletteResult {\n number: number;\n color: Color;\n}\n\nexport interface RouletteState {\n phase: RoulettePhase;\n hostId: number;\n bets: Record;\n lastResult?: RouletteResult;\n}\n\nexport type RouletteAction =\n | { type: \"place_bet\"; bet: RouletteBet }\n | { type: \"clear_bets\" }\n | { type: \"spin\" }\n | { type: \"new_round\" };\n\nconst RED_NUMBERS: ReadonlySet = new Set([\n 1, 3, 5, 7, 9, 12, 14, 16, 18, 19, 21, 23, 25, 27, 30, 32, 34, 36,\n]);\n\nexport function colorOf(n: number): Color {\n if (n === 0) return \"green\";\n return RED_NUMBERS.has(n) ? \"red\" : \"black\";\n}\n\nexport const MIN_BET = 1;\nexport const MAX_BET_PER_USER = 1000;\n\nfunction isValidBet(bet: RouletteBet): boolean {\n if (!Number.isInteger(bet.amount) || bet.amount < MIN_BET) return false;\n switch (bet.kind) {\n case \"straight\":\n return Number.isInteger(bet.number) && bet.number >= 0 && bet.number <= 36;\n case \"color\":\n return bet.color === \"red\" || bet.color === \"black\";\n case \"parity\":\n return bet.parity === \"even\" || bet.parity === \"odd\";\n case \"range\":\n return bet.range === \"low\" || bet.range === \"high\";\n case \"dozen\":\n return bet.dozen === 1 || bet.dozen === 2 || bet.dozen === 3;\n case \"column\":\n return bet.column === 1 || bet.column === 2 || bet.column === 3;\n }\n}\n\n// Returns total chips the bet returns if it wins (including original stake).\n// 0 means the bet lost.\nfunction payoutFor(bet: RouletteBet, n: number): number {\n if (n === 0) {\n return bet.kind === \"straight\" && bet.number === 0\n ? bet.amount * 36\n : 0;\n }\n const c = colorOf(n);\n switch (bet.kind) {\n case \"straight\":\n return bet.number === n ? bet.amount * 36 : 0;\n case \"color\":\n return bet.color === c ? bet.amount * 2 : 0;\n case \"parity\": {\n const isEven = n % 2 === 0;\n const win = bet.parity === \"even\" ? isEven : !isEven;\n return win ? bet.amount * 2 : 0;\n }\n case \"range\": {\n const isLow = n >= 1 && n <= 18;\n const win = bet.range === \"low\" ? isLow : !isLow;\n return win ? bet.amount * 2 : 0;\n }\n case \"dozen\": {\n const which = n <= 12 ? 1 : n <= 24 ? 2 : 3;\n return which === bet.dozen ? bet.amount * 3 : 0;\n }\n case \"column\": {\n const which = (n % 3 === 1 ? 1 : n % 3 === 2 ? 2 : 3) as 1 | 2 | 3;\n return which === bet.column ? bet.amount * 3 : 0;\n }\n }\n}\n\nfunction sumBets(bets: RouletteBet[]): number {\n return bets.reduce((s, b) => s + b.amount, 0);\n}\n\nfunction spinNumber(): number {\n // Cryptographically random 0..36 inclusive, rejection-sampled to remove modulo bias.\n const buf = new Uint32Array(1);\n const max = 0xffffffff - (0xffffffff % 37);\n while (true) {\n crypto.getRandomValues(buf);\n if (buf[0] <= max) return buf[0] % 37;\n }\n}\n\nexport const roulette: Game = {\n type: \"roulette\",\n\n initialState(hostId) {\n return {\n phase: \"betting\",\n hostId,\n bets: {},\n };\n },\n\n applyAction(state, userId, action): ActionResult {\n switch (action.type) {\n case \"place_bet\": {\n if (state.phase !== \"betting\") {\n throw new Error(\"not in betting phase\");\n }\n if (!isValidBet(action.bet)) {\n throw new Error(\"invalid bet\");\n }\n const userBets = state.bets[userId] ?? [];\n const newTotal = sumBets(userBets) + action.bet.amount;\n if (newTotal > MAX_BET_PER_USER) {\n throw new Error(\"over per-round bet cap\");\n }\n const next: RouletteState = {\n ...state,\n bets: {\n ...state.bets,\n [userId]: [...userBets, action.bet],\n },\n };\n return {\n state: next,\n events: [{\n type: \"bet.placed\",\n payload: { userId, bet: action.bet },\n }],\n balanceDeltas: { [userId]: -action.bet.amount },\n };\n }\n case \"clear_bets\": {\n if (state.phase !== \"betting\") {\n throw new Error(\"not in betting phase\");\n }\n const userBets = state.bets[userId] ?? [];\n const refund = sumBets(userBets);\n const next = { ...state, bets: { ...state.bets } };\n delete next.bets[userId];\n return {\n state: next,\n events: [{\n type: \"bet.cleared\",\n payload: { userId, refund },\n }],\n balanceDeltas: refund > 0 ? { [userId]: refund } : {},\n };\n }\n case \"spin\": {\n if (userId !== state.hostId) throw new Error(\"only host can spin\");\n if (state.phase !== \"betting\") {\n throw new Error(\"not in betting phase\");\n }\n const n = spinNumber();\n const c = colorOf(n);\n const payouts: Record = {};\n for (const [uidStr, userBets] of Object.entries(state.bets)) {\n const uid = Number(uidStr);\n const total = userBets.reduce((s, b) => s + payoutFor(b, n), 0);\n if (total > 0) payouts[uid] = total;\n }\n const next: RouletteState = {\n ...state,\n phase: \"resolved\",\n lastResult: { number: n, color: c },\n };\n const events = [\n { type: \"spin.result\", payload: { number: n, color: c } },\n { type: \"round.payouts\", payload: { payouts } },\n ];\n return { state: next, events, balanceDeltas: payouts };\n }\n case \"new_round\": {\n if (userId !== state.hostId) throw new Error(\"only host can start round\");\n if (state.phase !== \"resolved\") {\n throw new Error(\"can only start new round after resolved\");\n }\n const next: RouletteState = {\n phase: \"betting\",\n hostId: state.hostId,\n bets: {},\n lastResult: state.lastResult,\n };\n return {\n state: next,\n events: [{ type: \"round.new\", payload: {} }],\n balanceDeltas: {},\n };\n }\n }\n },\n\n resolveRound(state): ResolveResult {\n return { state, events: [], payouts: {} };\n },\n};\n",[],[67,272,282],"d1fee83a-5505-11f1-8ccf-ee650bb23af1","registry.ts","d1fee8ee-5505-11f1-8ccf-ee650bb23af1",12,["D",1779361891145],"import type { Game } from \"./game.ts\";\nimport { roulette } from \"./roulette.ts\";\n\n// deno-lint-ignore no-explicit-any\nconst REGISTRY: Record> = {\n [roulette.type]: roulette,\n};\n\n// deno-lint-ignore no-explicit-any\nexport function gameForType(type: string): Game {\n const g = REGISTRY[type];\n if (!g) throw new Error(`unknown game type: ${type}`);\n return g;\n}\n",[],[67,272,290],"bb8492d0-5505-11f1-af15-ee650bb23af1","game.ts","bb8493ac-5505-11f1-af15-ee650bb23af1",["D",1779361853425],"// Shared Game abstraction so additional games (blackjack, etc.)\n// can slot into the room/SSE/action plumbing without changes there.\n\nexport interface GameEvent {\n type: string;\n payload: unknown;\n}\n\nexport interface ActionResult {\n state: S;\n events: GameEvent[];\n balanceDeltas: Record;\n}\n\nexport interface ResolveResult {\n state: S;\n events: GameEvent[];\n payouts: Record;\n}\n\nexport interface Game {\n type: string;\n initialState(hostId: number): S;\n applyAction(state: S, userId: number, action: A): ActionResult;\n resolveRound(state: S): ResolveResult;\n}\n",[],[67,272,298],"dcbe1d4a-5505-11f1-a3cc-ee650bb23af1","friends","88f6fcc0-777d-44d3-921d-2a934814938b",13,["D",1779361909170],[311],[67,305],{"_35":312,"_13":218,"_38":313,"_40":306,"_41":42,"_43":314,"_45":46,"_47":315,"_17":102,"_50":103,"_52":316,"_54":55,"_56":-5,"_77":317,"_18":318},"d7b820c0-550f-11f1-a391-ee650bb23af1","dcbe047c-5505-11f1-a3cc-ee650bb23af1",61,["D",1779366195709],"import { Hono } from \"npm:hono@^4.6.0\";\nimport { getSession } from \"../auth/session.ts\";\nimport {\n acceptFriendRequest,\n createFriendRequest,\n findFriendshipPair,\n findUserByUsername,\n listFriends,\n listPendingIncoming,\n} from \"../db/queries.ts\";\nimport { escapeHtml, layout } from \"../ui/layout.ts\";\nimport { parseFormBody } from \"../lib/forms.ts\";\n\nexport const friendsRoutes = new Hono();\n\nfriendsRoutes.get(\"/\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const [friends, pending] = await Promise.all([\n listFriends(session.user.id),\n listPendingIncoming(session.user.id),\n ]);\n\n const friendList = friends.length === 0\n ? `
No friends yet.
`\n : friends.map((f) =>\n `
@${\n escapeHtml(f.username)\n }
`\n ).join(\"\");\n\n const pendingList = pending.length === 0\n ? \"\"\n : `
\n
Pending requests
\n ${\n pending.map((p) =>\n `
\n @${escapeHtml(p.username)}\n \n
`\n ).join(\"\")\n }\n
`;\n\n const body = `\n
\n ← home\n\n
\n
Add friend
\n \n \n
\n\n ${pendingList}\n\n
\n
Friends
\n ${friendList}\n
\n
\n`;\n return c.html(layout({\n title: \"friends\",\n body,\n balance: session.user.balance,\n username: session.user.username,\n active: \"friends\",\n }));\n});\n\nconst ALLOWED_RETURN_PATHS = new Set([\"/friends\", \"/leaderboard\", \"/home\"]);\n\nfriendsRoutes.post(\"/add\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const form = await parseFormBody(c);\n const requested = (form[\"return_to\"] ?? \"\").trim();\n const returnTo = ALLOWED_RETURN_PATHS.has(requested) ? requested : \"/friends\";\n const username = (form[\"username\"] ?? \"\").trim();\n if (!username || username === session.user.username) {\n return c.redirect(returnTo);\n }\n const target = await findUserByUsername(username);\n if (!target) return c.redirect(returnTo);\n const existing = await findFriendshipPair(session.user.id, target.id);\n if (existing) return c.redirect(returnTo);\n await createFriendRequest(session.user.id, target.id);\n return c.redirect(returnTo);\n});\n\nfriendsRoutes.post(\"/accept/:requesterId\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const requesterId = Number(c.req.param(\"requesterId\"));\n if (!Number.isInteger(requesterId)) return c.redirect(\"/home\");\n // The current user is the addressee (user_b); requester is user_a.\n await acceptFriendRequest(requesterId, session.user.id);\n return c.redirect(\"/home\");\n});\n",[],[67,305,218],"8b912c5a-5505-11f1-9c88-ee650bb23af1","db","b63de110-65d6-4da5-a757-980369fb0498",["D",1779361772979],[325,326],[67,320],{"_35":335,"_13":336,"_38":337,"_40":321,"_41":42,"_43":338,"_45":46,"_47":339,"_17":44,"_50":103,"_52":340,"_54":55,"_56":-5,"_77":341,"_18":342},{"_35":327,"_13":328,"_38":329,"_40":321,"_41":42,"_43":330,"_45":46,"_47":331,"_17":102,"_50":103,"_52":332,"_54":55,"_56":-5,"_77":333,"_18":334},"0365ac44-5513-11f1-bed2-ee650bb23af1","queries.ts","a4fa0ca2-5505-11f1-a8cf-ee650bb23af1",65,["D",1779367557464],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { generateJoinCode, normalizeJoinCode } from \"../rooms/codes.ts\";\n\n// Val Town sqlite returns { columns, rows } with rows as arrays.\n// rowsAs maps them into plain objects keyed by column name.\ntype ExecuteResult = { columns: string[]; rows: unknown[][] };\n\ntype SqlArg = string | number | boolean | null;\n\nasync function rowsAs(\n sql: string,\n args: SqlArg[] = [],\n): Promise {\n const res = (await sqlite.execute({ sql, args })) as ExecuteResult;\n return res.rows.map(\n (row) =>\n Object.fromEntries(res.columns.map((c, i) => [c, row[i]])) as T,\n );\n}\n\nasync function rowAs(sql: string, args: SqlArg[] = []): Promise {\n const rows = await rowsAs(sql, args);\n return rows[0] ?? null;\n}\n\nasync function exec(sql: string, args: SqlArg[] = []): Promise {\n await sqlite.execute({ sql, args });\n}\n\n// -------- users --------\n\nexport interface User {\n id: number;\n username: string;\n password_hash: string;\n balance: number;\n last_topup_at: string | null;\n created_at: string;\n}\n\nexport const findUserByUsername = (username: string) =>\n rowAs(\"SELECT * FROM users WHERE username = ?\", [username]);\n\nexport const findUserById = (id: number) =>\n rowAs(\"SELECT * FROM users WHERE id = ?\", [id]);\n\nexport async function createUser(\n username: string,\n passwordHash: string,\n): Promise {\n await exec(\n \"INSERT INTO users (username, password_hash) VALUES (?, ?)\",\n [username, passwordHash],\n );\n const u = await findUserByUsername(username);\n if (!u) throw new Error(\"user not found after insert\");\n return u;\n}\n\nexport async function adjustBalance(\n userId: number,\n delta: number,\n reason: string,\n): Promise {\n await exec(\n \"UPDATE users SET balance = balance + ? WHERE id = ?\",\n [delta, userId],\n );\n // Audit row in the events log uses room_id = 0 for global / cross-room events.\n await exec(\n \"INSERT INTO events (room_id, type, payload) VALUES (?, ?, ?)\",\n [0, \"balance.adjust\", JSON.stringify({ userId, delta, reason })],\n );\n const u = await findUserById(userId);\n return u?.balance ?? 0;\n}\n\nexport const setLastTopupAt = (userId: number, isoDate: string) =>\n exec(\"UPDATE users SET last_topup_at = ?, balance = 1000 WHERE id = ?\", [\n isoDate,\n userId,\n ]);\n\nexport const listLeaderboard = (limit = 25) =>\n rowsAs<{ id: number; username: string; balance: number }>(\n \"SELECT id, username, balance FROM users ORDER BY balance DESC, created_at ASC LIMIT ?\",\n [limit],\n );\n\n// -------- sessions --------\n\nexport interface Session {\n token: string;\n user_id: number;\n expires_at: string;\n}\n\nexport const createSession = (\n token: string,\n userId: number,\n expiresAt: string,\n) =>\n exec(\n \"INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)\",\n [token, userId, expiresAt],\n );\n\nexport const findSessionByToken = (token: string) =>\n rowAs(\n \"SELECT * FROM sessions WHERE token = ? AND expires_at > datetime('now')\",\n [token],\n );\n\nexport const deleteSession = (token: string) =>\n exec(\"DELETE FROM sessions WHERE token = ?\", [token]);\n\n// -------- friendships --------\n\nexport interface Friendship {\n user_a: number;\n user_b: number;\n status: \"pending\" | \"accepted\";\n created_at: string;\n}\n\nexport const findFriendshipPair = (a: number, b: number) =>\n rowAs(\n `SELECT * FROM friendships\n WHERE (user_a = ? AND user_b = ?) OR (user_a = ? AND user_b = ?)`,\n [a, b, b, a],\n );\n\nexport const createFriendRequest = (requesterId: number, addresseeId: number) =>\n exec(\n \"INSERT INTO friendships (user_a, user_b, status) VALUES (?, ?, 'pending')\",\n [requesterId, addresseeId],\n );\n\nexport const acceptFriendRequest = (requesterId: number, addresseeId: number) =>\n exec(\n `UPDATE friendships SET status = 'accepted'\n WHERE user_a = ? AND user_b = ? AND status = 'pending'`,\n [requesterId, addresseeId],\n );\n\nexport const listFriends = (userId: number) =>\n rowsAs<{ id: number; username: string }>(\n `SELECT u.id, u.username FROM users u\n JOIN friendships f ON (f.user_a = u.id AND f.user_b = ?)\n OR (f.user_b = u.id AND f.user_a = ?)\n WHERE f.status = 'accepted'`,\n [userId, userId],\n );\n\nexport const listRelatedUserIds = async (userId: number): Promise => {\n const rows = await rowsAs<{ other_id: number }>(\n `SELECT CASE WHEN user_a = ? THEN user_b ELSE user_a END AS other_id\n FROM friendships\n WHERE user_a = ? OR user_b = ?`,\n [userId, userId, userId],\n );\n return rows.map((r) => r.other_id);\n};\n\nexport const listPendingIncoming = (userId: number) =>\n rowsAs<{ id: number; username: string }>(\n `SELECT u.id, u.username FROM users u\n JOIN friendships f ON f.user_a = u.id\n WHERE f.user_b = ? AND f.status = 'pending'`,\n [userId],\n );\n\n// -------- rooms --------\n\nexport interface Room {\n id: number;\n game_type: string;\n host_id: number;\n status: \"open\" | \"round_active\" | \"closed\";\n state_json: string;\n created_at: string;\n join_code: string | null;\n}\n\nexport async function createRoom(\n gameType: string,\n hostId: number,\n stateJson: string,\n): Promise {\n for (let attempt = 0; attempt < 5; attempt++) {\n const code = generateJoinCode();\n try {\n const res = (await sqlite.execute({\n sql:\n \"INSERT INTO rooms (game_type, host_id, status, state_json, join_code) VALUES (?, ?, 'open', ?, ?) RETURNING *\",\n args: [gameType, hostId, stateJson, code],\n })) as ExecuteResult;\n const row = res.rows[0];\n return Object.fromEntries(\n res.columns.map((c, i) => [c, row[i]]),\n ) as unknown as Room;\n } catch (err) {\n if (!String(err).includes(\"UNIQUE\")) throw err;\n }\n }\n throw new Error(\"could not generate unique join code\");\n}\n\nexport const findRoomById = (id: number) =>\n rowAs(\"SELECT * FROM rooms WHERE id = ?\", [id]);\n\nexport const findRoomByJoinCode = (code: string) =>\n rowAs(\"SELECT * FROM rooms WHERE join_code = ?\", [\n normalizeJoinCode(code),\n ]);\n\nexport const updateRoomState = (\n id: number,\n status: Room[\"status\"],\n stateJson: string,\n) =>\n exec(\"UPDATE rooms SET status = ?, state_json = ? WHERE id = ?\", [\n status,\n stateJson,\n id,\n ]);\n\nexport async function addRoomMember(\n roomId: number,\n userId: number,\n): Promise {\n const seat = await rowAs<{ next_seat: number }>(\n \"SELECT COALESCE(MAX(seat), -1) + 1 AS next_seat FROM room_members WHERE room_id = ?\",\n [roomId],\n );\n const s = seat?.next_seat ?? 0;\n await exec(\n \"INSERT OR IGNORE INTO room_members (room_id, user_id, seat) VALUES (?, ?, ?)\",\n [roomId, userId, s],\n );\n return s;\n}\n\nexport const listRoomMembers = (roomId: number) =>\n rowsAs<{ user_id: number; seat: number; username: string }>(\n `SELECT rm.user_id, rm.seat, u.username\n FROM room_members rm\n JOIN users u ON u.id = rm.user_id\n WHERE rm.room_id = ?\n ORDER BY rm.seat`,\n [roomId],\n );\n\nexport const isRoomMember = async (roomId: number, userId: number) => {\n const r = await rowAs<{ n: number }>(\n \"SELECT COUNT(*) AS n FROM room_members WHERE room_id = ? AND user_id = ?\",\n [roomId, userId],\n );\n return (r?.n ?? 0) > 0;\n};\n\n// -------- invites --------\n\nexport interface Invite {\n id: number;\n room_id: number;\n from_user: number;\n to_user: number;\n status: \"pending\" | \"accepted\" | \"declined\" | \"expired\";\n created_at: string;\n}\n\nexport const createInvite = (\n roomId: number,\n fromUser: number,\n toUser: number,\n) =>\n exec(\n \"INSERT INTO invites (room_id, from_user, to_user, status) VALUES (?, ?, ?, 'pending')\",\n [roomId, fromUser, toUser],\n );\n\nexport const listPendingInvitesFor = (userId: number) =>\n rowsAs(\n `SELECT i.*, u.username AS from_username, r.game_type\n FROM invites i\n JOIN users u ON u.id = i.from_user\n JOIN rooms r ON r.id = i.room_id\n WHERE i.to_user = ? AND i.status = 'pending'\n ORDER BY i.created_at DESC`,\n [userId],\n );\n\nexport const acceptInviteById = (id: number, toUser: number) =>\n exec(\n `UPDATE invites SET status = 'accepted'\n WHERE id = ? AND to_user = ? AND status = 'pending'`,\n [id, toUser],\n );\n\nexport const findInviteById = (id: number) =>\n rowAs(\"SELECT * FROM invites WHERE id = ?\", [id]);\n\n// -------- events --------\n\nexport interface EventRow {\n id: number;\n room_id: number;\n type: string;\n payload: string;\n created_at: string;\n}\n\nexport async function appendEvent(\n roomId: number,\n type: string,\n payload: unknown,\n): Promise {\n const res = (await sqlite.execute({\n sql:\n \"INSERT INTO events (room_id, type, payload) VALUES (?, ?, ?) RETURNING *\",\n args: [roomId, type, JSON.stringify(payload)],\n })) as ExecuteResult;\n return Object.fromEntries(\n res.columns.map((c, i) => [c, res.rows[0][i]]),\n ) as unknown as EventRow;\n}\n\nexport const readEventsSince = (roomId: number, sinceId: number) =>\n rowsAs(\n \"SELECT * FROM events WHERE room_id = ? AND id > ? ORDER BY id ASC LIMIT 500\",\n [roomId, sinceId],\n );\n\nexport const latestEventId = async (roomId: number) => {\n const r = await rowAs<{ max_id: number | null }>(\n \"SELECT MAX(id) AS max_id FROM events WHERE room_id = ?\",\n [roomId],\n );\n return r?.max_id ?? 0;\n};\n",[],[67,320,328],"f7698078-5512-11f1-ac8b-ee650bb23af1","migrate.ts","8b9111ca-5505-11f1-9c88-ee650bb23af1",63,["D",1779367537368],"import { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { generateJoinCode } from \"../rooms/codes.ts\";\n\n// Schema kept inline (rather than reading schema.sql at runtime) so it works\n// inside Val Town's sandboxed Deno runtime without filesystem access.\n// schema.sql in this directory mirrors this for human reference.\nconst SCHEMA: readonly string[] = [\n `CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT NOT NULL UNIQUE,\n password_hash TEXT NOT NULL,\n balance INTEGER NOT NULL DEFAULT 1000,\n last_topup_at TEXT,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n expires_at TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE INDEX IF NOT EXISTS idx_sessions_user ON sessions(user_id)`,\n `CREATE TABLE IF NOT EXISTS friendships (\n user_a INTEGER NOT NULL,\n user_b INTEGER NOT NULL,\n status TEXT NOT NULL CHECK (status IN ('pending','accepted')),\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE UNIQUE INDEX IF NOT EXISTS uq_friendships_pair ON friendships(user_a, user_b)`,\n `CREATE INDEX IF NOT EXISTS idx_friendships_user_b ON friendships(user_b)`,\n `CREATE TABLE IF NOT EXISTS rooms (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n game_type TEXT NOT NULL,\n host_id INTEGER NOT NULL,\n status TEXT NOT NULL CHECK (status IN ('open','round_active','closed')),\n state_json TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS invites (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n room_id INTEGER NOT NULL,\n from_user INTEGER NOT NULL,\n to_user INTEGER NOT NULL,\n status TEXT NOT NULL CHECK (status IN ('pending','accepted','declined','expired')),\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE INDEX IF NOT EXISTS idx_invites_to_user ON invites(to_user, status)`,\n `CREATE TABLE IF NOT EXISTS room_members (\n room_id INTEGER NOT NULL,\n user_id INTEGER NOT NULL,\n seat INTEGER NOT NULL,\n joined_at TEXT NOT NULL DEFAULT (datetime('now')),\n PRIMARY KEY (room_id, user_id)\n )`,\n `CREATE TABLE IF NOT EXISTS events (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n room_id INTEGER NOT NULL,\n type TEXT NOT NULL,\n payload TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE INDEX IF NOT EXISTS idx_events_room ON events(room_id, id)`,\n];\n\n// Idempotent post-schema steps. Each statement may legitimately fail on re-run\n// (e.g. duplicate column), and we tolerate that specific error.\nasync function tryExec(sql: string): Promise {\n try {\n await sqlite.execute(sql);\n } catch (err) {\n const msg = String(err);\n if (msg.includes(\"duplicate column name\")) return;\n throw err;\n }\n}\n\nasync function backfillJoinCodes(): Promise {\n const res = await sqlite.execute(\n \"SELECT id FROM rooms WHERE join_code IS NULL\",\n );\n const rows = (res as { rows: unknown[][] }).rows;\n for (const row of rows) {\n const roomId = row[0] as number;\n for (let attempt = 0; attempt < 5; attempt++) {\n const code = generateJoinCode();\n try {\n await sqlite.execute({\n sql: \"UPDATE rooms SET join_code = ? WHERE id = ?\",\n args: [code, roomId],\n });\n break;\n } catch (err) {\n if (!String(err).includes(\"UNIQUE\")) throw err;\n }\n }\n }\n}\n\nlet migrated = false;\n\nexport async function migrate(): Promise {\n if (migrated) return;\n for (const stmt of SCHEMA) {\n await sqlite.execute(stmt);\n }\n await tryExec(\"ALTER TABLE rooms ADD COLUMN join_code TEXT\");\n await sqlite.execute(\n \"CREATE UNIQUE INDEX IF NOT EXISTS idx_rooms_join_code ON rooms(join_code)\",\n );\n await backfillJoinCodes();\n migrated = true;\n}\n",[],[67,320,336],"b6658dcc-5505-11f1-a774-ee650bb23af1","chips","8bef8c6b-58e1-4bb8-bc1e-6c7f544f00fd",9,["D",1779361844836],[350],[67,344],{"_35":351,"_13":352,"_38":353,"_40":345,"_41":42,"_43":346,"_45":46,"_47":354,"_17":63,"_50":103,"_52":355,"_54":55,"_56":-5,"_77":356,"_18":357},"b6657e86-5505-11f1-a774-ee650bb23af1","economy.ts","b6657f58-5505-11f1-a774-ee650bb23af1",["D",1779361844836],"import {\n findUserById,\n setLastTopupAt,\n type User,\n} from \"../db/queries.ts\";\n\nconst DAILY_TOPUP_AMOUNT = 1000;\nconst DAILY_TOPUP_THRESHOLD = 100;\n\nconst todayIso = () => new Date().toISOString().slice(0, 10);\n\n// Called on login. If the user is broke and hasn't topped up today,\n// restore them to 1000 chips and stamp last_topup_at.\nexport async function maybeDailyTopup(userId: number): Promise {\n const user = await findUserById(userId);\n if (!user) return null;\n const today = todayIso();\n if (user.balance < DAILY_TOPUP_THRESHOLD && user.last_topup_at !== today) {\n await setLastTopupAt(userId, today);\n return await findUserById(userId);\n }\n return user;\n}\n\nexport { DAILY_TOPUP_AMOUNT, DAILY_TOPUP_THRESHOLD };\n",[],[67,344,352],"ab0c3318-5505-11f1-a7f7-ee650bb23af1","auth","0e48d6ca-54f7-4624-ab37-00a23d56ad37",7,["D",1779361825793],[365,366],[67,359],{"_35":375,"_13":218,"_38":376,"_40":360,"_41":42,"_43":377,"_45":46,"_47":378,"_17":379,"_50":103,"_52":380,"_54":55,"_56":-5,"_77":381,"_18":382},{"_35":367,"_13":368,"_38":369,"_40":360,"_41":42,"_43":370,"_45":46,"_47":371,"_17":44,"_50":103,"_52":372,"_54":55,"_56":-5,"_77":373,"_18":374},"3f0174c8-5508-11f1-812b-ee650bb23af1","session.ts","ab0bfd08-5505-11f1-a7f7-ee650bb23af1",31,["D",1779362933017],"import type { Context } from \"npm:hono@^4.6.0\";\nimport { getCookie, setCookie, deleteCookie } from \"npm:hono@^4.6.0/cookie\";\nimport {\n createSession as dbCreateSession,\n deleteSession as dbDeleteSession,\n findSessionByToken,\n findUserById,\n type User,\n} from \"../db/queries.ts\";\n\nconst COOKIE_NAME = \"gb_session\";\nconst SESSION_TTL_SECONDS = 60 * 60 * 24 * 30; // 30 days\n\nfunction randomToken(): string {\n const bytes = new Uint8Array(32);\n crypto.getRandomValues(bytes);\n return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport async function startSession(c: Context, userId: number): Promise {\n const token = randomToken();\n const expiresAt = new Date(Date.now() + SESSION_TTL_SECONDS * 1000)\n .toISOString();\n await dbCreateSession(token, userId, expiresAt);\n setCookie(c, COOKIE_NAME, token, {\n httpOnly: true,\n sameSite: \"Lax\",\n secure: true,\n path: \"/\",\n maxAge: SESSION_TTL_SECONDS,\n });\n}\n\nexport async function endSession(c: Context): Promise {\n const token = getCookie(c, COOKIE_NAME);\n if (token) await dbDeleteSession(token);\n deleteCookie(c, COOKIE_NAME, { path: \"/\" });\n}\n\nexport interface ActiveSession {\n token: string;\n user: User;\n}\n\n// Returns the active session or null. Caller decides whether to redirect.\nexport async function getSession(c: Context): Promise {\n const token = getCookie(c, COOKIE_NAME);\n if (!token) return null;\n const row = await findSessionByToken(token);\n if (!row) return null;\n const user = await findUserById(row.user_id);\n if (!user) return null;\n return { token, user };\n}\n",[],[67,359,368],"b082addc-5509-11f1-b778-ee650bb23af1","b22bb40c-5505-11f1-a774-ee650bb23af1",44,["D",1779363552947],8,"import { Hono } from \"npm:hono@^4.6.0\";\nimport bcrypt from \"npm:bcryptjs@^2.4.3\";\nimport {\n createUser,\n findUserByUsername,\n} from \"../db/queries.ts\";\nimport { endSession, startSession } from \"./session.ts\";\nimport { maybeDailyTopup } from \"../chips/economy.ts\";\nimport { parseFormBody } from \"../lib/forms.ts\";\n\nconst USERNAME_RE = /^[a-zA-Z0-9_]{3,20}$/;\nconst MIN_PASSWORD = 6;\n\nexport const authRoutes = new Hono();\n\nauthRoutes.post(\"/signup\", async (c) => {\n const form = await parseFormBody(c);\n const username = (form[\"username\"] ?? \"\").trim();\n const password = form[\"password\"] ?? \"\";\n if (!USERNAME_RE.test(username)) {\n return c.html(errorPage(\"Username must be 3–20 letters, numbers or _\"), 400);\n }\n if (password.length < MIN_PASSWORD) {\n return c.html(errorPage(\"Password must be at least 6 characters\"), 400);\n }\n const existing = await findUserByUsername(username);\n if (existing) {\n return c.html(errorPage(\"Username taken\"), 400);\n }\n const hash = await bcrypt.hash(password, 10);\n const user = await createUser(username, hash);\n await startSession(c, user.id);\n return c.redirect(\"/home\");\n});\n\nauthRoutes.post(\"/login\", async (c) => {\n const form = await parseFormBody(c);\n const username = (form[\"username\"] ?? \"\").trim();\n const password = form[\"password\"] ?? \"\";\n const user = await findUserByUsername(username);\n if (!user) {\n return c.html(errorPage(\"Invalid username or password\"), 400);\n }\n const ok = await bcrypt.compare(password, user.password_hash);\n if (!ok) {\n return c.html(errorPage(\"Invalid username or password\"), 400);\n }\n await maybeDailyTopup(user.id);\n await startSession(c, user.id);\n return c.redirect(\"/home\");\n});\n\nauthRoutes.post(\"/logout\", async (c) => {\n await endSession(c);\n return c.redirect(\"/\");\n});\n\nfunction errorPage(message: string): string {\n return `\n
${escapeHtml(message)}
\n
Back
\n `;\n}\n\nfunction escapeHtml(s: string): string {\n return s\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\")\n .replace(/'/g, \"'\");\n}\n",[],[67,359,218],"f270f12c-5504-11f1-8d02-ee650bb23af1",["D",1779361516091],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Play-money multiplayer roulette for you and your friends.","imageUrl","userId","bf1ab65a-0279-420f-9c6a-ea12f493f97b","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019e4a12-e65b-716a-84f7-2b4d6198cd25","tursoName","f270f12c550411f18d02ee650bb23af1","tursoHostname","f270f12c550411f18d02ee650bb23af1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789489305251],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_438":19},"org",{"_11":12,"_433":19,"_434":19,"_393":394,"_435":436,"_437":55},"branch",{"_17":139,"_13":16,"_35":42,"_425":383,"_426":-5,"_427":-5,"_428":-5,"_429":-5,"_430":-5,"_431":14,"_432":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_35":383,"_13":14,"_47":586,"_385":-5,"_386":55,"_387":388,"_389":388,"_390":391,"_392":-5,"_393":394,"_395":-5,"_396":55,"_397":-5,"_398":-5,"_399":63,"_400":401,"_402":403,"_404":405,"_406":587,"_408":-5,"_409":410,"_411":410,"_412":413,"_414":413,"_415":413,"_416":410,"_417":410,"_418":588,"_420":589,"_422":590,"_424":55},[472,508,509],"files",[472,473,474,475,476,477,478,479,480,481,482,483,484,485,486,487,488,489,490,491,492,493,494,495,496,497,498,499,500,501,502,503,504,505,506,507,508,509],"counts",{"_463":63,"_464":49,"_465":63,"_31":466,"_467":468},[457,458,459],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_35":66,"_13":67,"_38":68,"_40":-5,"_41":42,"_43":69,"_45":46,"_47":70,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_18":462},{"_35":58,"_13":59,"_38":60,"_40":-5,"_41":42,"_43":61,"_45":46,"_47":62,"_17":63,"_50":24,"_52":64,"_54":55,"_56":-5,"_18":461},{"_35":36,"_13":37,"_38":39,"_40":-5,"_41":42,"_43":44,"_45":46,"_47":48,"_17":49,"_50":51,"_52":53,"_54":55,"_56":14,"_18":460},[37],[59],[67],"pulls","branches","forks",{"_469":63,"_471":63},"connections",{"_469":63,"_470":63},"count","unfilledCount","emptyCount",{"_35":66,"_13":67,"_38":68,"_40":-5,"_41":42,"_43":69,"_45":46,"_47":83,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_77":584,"_18":585},{"_35":358,"_13":359,"_38":360,"_40":68,"_41":42,"_43":361,"_45":46,"_47":362,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_77":582,"_18":583},{"_35":375,"_13":218,"_38":376,"_40":360,"_41":42,"_43":377,"_45":46,"_47":378,"_17":379,"_50":103,"_52":380,"_54":55,"_56":-5,"_77":580,"_18":581},{"_35":367,"_13":368,"_38":369,"_40":360,"_41":42,"_43":370,"_45":46,"_47":371,"_17":44,"_50":103,"_52":372,"_54":55,"_56":-5,"_77":578,"_18":579},{"_35":343,"_13":344,"_38":345,"_40":68,"_41":42,"_43":346,"_45":46,"_47":347,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_77":576,"_18":577},{"_35":351,"_13":352,"_38":353,"_40":345,"_41":42,"_43":346,"_45":46,"_47":354,"_17":63,"_50":103,"_52":355,"_54":55,"_56":-5,"_77":574,"_18":575},{"_35":319,"_13":320,"_38":321,"_40":68,"_41":42,"_43":102,"_45":46,"_47":322,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_77":572,"_18":573},{"_35":335,"_13":336,"_38":337,"_40":321,"_41":42,"_43":338,"_45":46,"_47":339,"_17":44,"_50":103,"_52":340,"_54":55,"_56":-5,"_77":570,"_18":571},{"_35":327,"_13":328,"_38":329,"_40":321,"_41":42,"_43":330,"_45":46,"_47":331,"_17":102,"_50":103,"_52":332,"_54":55,"_56":-5,"_77":568,"_18":569},{"_35":304,"_13":305,"_38":306,"_40":68,"_41":42,"_43":307,"_45":46,"_47":308,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_77":566,"_18":567},{"_35":312,"_13":218,"_38":313,"_40":306,"_41":42,"_43":314,"_45":46,"_47":315,"_17":102,"_50":103,"_52":316,"_54":55,"_56":-5,"_77":564,"_18":565},{"_35":271,"_13":272,"_38":273,"_40":68,"_41":42,"_43":274,"_45":46,"_47":275,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_77":562,"_18":563},{"_35":297,"_13":298,"_38":299,"_40":273,"_41":42,"_43":274,"_45":46,"_47":300,"_17":63,"_50":103,"_52":301,"_54":55,"_56":-5,"_77":560,"_18":561},{"_35":289,"_13":290,"_38":291,"_40":273,"_41":42,"_43":292,"_45":46,"_47":293,"_17":63,"_50":103,"_52":294,"_54":55,"_56":-5,"_77":558,"_18":559},{"_35":281,"_13":282,"_38":283,"_40":273,"_41":42,"_43":284,"_45":46,"_47":285,"_17":63,"_50":103,"_52":286,"_54":55,"_56":-5,"_77":556,"_18":557},{"_35":257,"_13":258,"_38":259,"_40":68,"_41":42,"_43":260,"_45":46,"_47":261,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_77":554,"_18":555},{"_35":265,"_13":218,"_38":266,"_40":259,"_41":42,"_43":260,"_45":46,"_47":267,"_17":63,"_50":103,"_52":268,"_54":55,"_56":-5,"_77":552,"_18":553},{"_35":242,"_13":243,"_38":244,"_40":68,"_41":42,"_43":245,"_45":46,"_47":246,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_77":550,"_18":551},{"_35":250,"_13":251,"_38":252,"_40":244,"_41":42,"_43":245,"_45":46,"_47":253,"_17":63,"_50":103,"_52":254,"_54":55,"_56":-5,"_77":548,"_18":549},{"_35":198,"_13":199,"_38":200,"_40":68,"_41":42,"_43":201,"_45":46,"_47":202,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_77":546,"_18":547},{"_35":234,"_13":235,"_38":236,"_40":200,"_41":42,"_43":237,"_45":46,"_47":238,"_17":49,"_50":103,"_52":239,"_54":55,"_56":-5,"_77":544,"_18":545},{"_35":226,"_13":227,"_38":228,"_40":200,"_41":42,"_43":229,"_45":46,"_47":230,"_17":63,"_50":103,"_52":231,"_54":55,"_56":-5,"_77":542,"_18":543},{"_35":217,"_13":218,"_38":219,"_40":200,"_41":42,"_43":220,"_45":46,"_47":221,"_17":222,"_50":103,"_52":223,"_54":55,"_56":-5,"_77":540,"_18":541},{"_35":209,"_13":210,"_38":211,"_40":200,"_41":42,"_43":212,"_45":46,"_47":213,"_17":44,"_50":103,"_52":214,"_54":55,"_56":-5,"_77":538,"_18":539},{"_35":175,"_13":176,"_38":177,"_40":68,"_41":42,"_43":178,"_45":46,"_47":179,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_77":536,"_18":537},{"_35":183,"_13":184,"_38":185,"_40":177,"_41":42,"_43":178,"_45":46,"_47":186,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_77":534,"_18":535},{"_35":190,"_13":191,"_38":192,"_40":185,"_41":42,"_43":193,"_45":46,"_47":194,"_17":49,"_50":103,"_52":195,"_54":55,"_56":-5,"_77":532,"_18":533},{"_35":107,"_13":108,"_38":109,"_40":68,"_41":42,"_43":110,"_45":46,"_47":111,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_77":530,"_18":531},{"_35":124,"_13":125,"_38":126,"_40":109,"_41":42,"_43":127,"_45":46,"_47":128,"_17":63,"_50":71,"_52":-5,"_54":55,"_56":-5,"_77":528,"_18":529},{"_35":167,"_13":168,"_38":169,"_40":126,"_41":42,"_43":170,"_45":46,"_47":171,"_17":44,"_50":103,"_52":172,"_54":55,"_56":-5,"_77":526,"_18":527},{"_35":159,"_13":160,"_38":161,"_40":126,"_41":42,"_43":162,"_45":46,"_47":163,"_17":63,"_50":103,"_52":164,"_54":55,"_56":-5,"_77":524,"_18":525},{"_35":152,"_13":153,"_38":154,"_40":126,"_41":42,"_43":127,"_45":46,"_47":155,"_17":63,"_50":103,"_52":156,"_54":55,"_56":-5,"_77":522,"_18":523},{"_35":144,"_13":145,"_38":146,"_40":126,"_41":42,"_43":147,"_45":46,"_47":148,"_17":49,"_50":103,"_52":149,"_54":55,"_56":-5,"_77":520,"_18":521},{"_35":136,"_13":137,"_38":138,"_40":126,"_41":42,"_43":139,"_45":46,"_47":140,"_17":69,"_50":103,"_52":141,"_54":55,"_56":-5,"_77":518,"_18":519},{"_35":116,"_13":117,"_38":118,"_40":109,"_41":42,"_43":119,"_45":46,"_47":120,"_17":69,"_50":103,"_52":121,"_54":55,"_56":-5,"_77":516,"_18":517},{"_35":97,"_13":98,"_38":99,"_40":68,"_41":42,"_43":100,"_45":46,"_47":101,"_17":102,"_50":103,"_52":104,"_54":55,"_56":-5,"_77":514,"_18":515},{"_35":58,"_13":59,"_38":60,"_40":-5,"_41":42,"_43":61,"_45":46,"_47":80,"_17":63,"_50":24,"_52":64,"_54":55,"_56":-5,"_77":512,"_18":513},{"_35":36,"_13":37,"_38":39,"_40":-5,"_41":42,"_43":44,"_45":46,"_47":76,"_17":49,"_50":51,"_52":53,"_54":55,"_56":14,"_77":510,"_18":511},[],[37],[],[59],[],[67,98],[],[67,108,117],[],[67,108,125,137],[],[67,108,125,145],[],[67,108,125,153],[],[67,108,125,160],[],[67,108,125,168],[501,502,503,504,505],[67,108,125],[500,506],[67,108],[],[67,176,184,191],[498],[67,176,184],[497],[67,176],[],[67,199,210],[],[67,199,218],[],[67,199,227],[],[67,199,235],[492,493,494,495],[67,199],[],[67,243,251],[490],[67,243],[],[67,258,218],[488],[67,258],[],[67,272,282],[],[67,272,290],[],[67,272,298],[484,485,486],[67,272],[],[67,305,218],[482],[67,305],[],[67,320,328],[],[67,320,336],[479,480],[67,320],[],[67,344,352],[477],[67,344],[],[67,359,368],[],[67,359,218],[474,475],[67,359],[473,476,478,481,483,487,489,491,496,499,507],[67],["D",1779361516091],["D",1789489305251],{"_11":12,"_438":19},{"_11":12,"_433":19,"_434":19,"_393":394,"_435":436,"_437":55},{"_17":139,"_13":16,"_35":42,"_425":383,"_426":-5,"_427":-5,"_428":-5,"_429":-5,"_430":-5,"_431":14,"_432":12},"ctx",{"_418":-5,"_454":624,"_625":626,"_627":628,"_629":55,"_630":55,"_631":55,"_632":46,"_633":-5,"_634":-7,"_635":-7,"_636":63,"_637":55,"_638":55,"_639":-5,"_640":55,"_641":55,"_642":55,"_643":-5},"ENV",{"_595":596,"_597":598,"_599":16,"_600":601,"_602":603,"_604":605,"_606":607,"_608":609,"_610":611,"_612":613,"_614":615,"_616":617,"_618":619,"_620":621,"_622":623},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

🏆 Richest players

grimbucks

Log in

Sign up

Join a room

Add friend