[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_372":373,"_374":375},"routes/_app.x.$handle.$name",{"_104":103,"_32":51,"_112":94,"_27":106,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_21":-5,"_123":-5,"_124":-5,"_125":25,"_126":127,"_128":129,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_49":50,"_32":51,"_37":52,"_53":-5,"_54":25,"_55":56,"_57":56,"_58":59,"_60":-5,"_18":61,"_62":-5,"_63":25,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":87,"_88":89,"_90":91,"_92":25},"version",18,"changes",[19,20],"aiChatInfo","userId",{"_21":42,"_23":-7,"_24":25,"_26":25,"_27":43,"_29":43},{"_21":22,"_23":-7,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":-5,"_37":38,"_39":14,"_40":41,"_24":25},"previous","deleted",false,"deletedHere","path","src/ui/pages","latestPath","fileId","a7c2974e-e88e-40e8-97f8-9dd92cc62ea9","name","pages","fileType","directory","content","createdAt",["D",1779361981258],"branchVersion","branchId","f271ad2e-5504-11f1-8d02-ee650bb23af1",{"_30":44,"_32":45,"_34":46,"_36":47,"_37":48,"_39":14,"_40":41,"_24":25},"src/ui/pages/landing.ts","07b52cd2-5506-11f1-9912-ee650bb23af1","landing.ts","script","import { layout } from \"../layout.ts\";\n\nexport function landingPage(): string {\n const body = `\n

grimbucks

play-money roulette with your friends

\n\n

\n \n\n \n

\n`;\n return layout({ title: \"welcome\", body });\n}\n",["D",1779361981258],"id","f270f12c-5504-11f1-8d02-ee650bb23af1","grimbucks",["D",1779361516091],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Play-money multiplayer roulette for you and your friends.","imageUrl","bf1ab65a-0279-420f-9c6a-ea12f493f97b","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019e4a12-e65b-716a-84f7-2b4d6198cd25","tursoName","f270f12c550411f18d02ee650bb23af1","tursoHostname","f270f12c550411f18d02ee650bb23af1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789489305251],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_104":103,"_111":106},"org",{"_104":103,"_105":106,"_107":106,"_18":61,"_108":109,"_110":25},"branch",{"_13":93,"_32":94,"_49":41,"_95":50,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":51,"_102":103},"isOwned",74,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","grimsalabim","handle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_49":50,"_32":51,"_37":367,"_53":-5,"_54":25,"_55":56,"_57":56,"_58":59,"_60":-5,"_18":61,"_62":-5,"_63":25,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":368,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":369,"_88":370,"_90":371,"_92":25},"tree",[172,196,197],"files",[172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197],"counts",{"_162":67,"_163":144,"_164":67,"_165":166,"_167":168},"contents",[134,135,136],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_49":156,"_32":157,"_30":158,"_140":-5,"_40":41,"_39":159,"_142":129,"_37":160,"_13":67,"_34":35,"_36":-5,"_24":25,"_147":-5,"_27":161},{"_49":149,"_32":150,"_30":151,"_140":-5,"_40":41,"_39":152,"_142":129,"_37":153,"_13":67,"_34":21,"_36":154,"_24":25,"_147":-5,"_27":155},{"_49":137,"_32":138,"_30":139,"_140":-5,"_40":41,"_39":141,"_142":129,"_37":143,"_13":144,"_34":145,"_36":146,"_24":25,"_147":51,"_27":148},"66cc3f4a-5505-11f1-aaa7-ee650bb23af1","main.tsx","f277b26e-5504-11f1-8d02-ee650bb23af1","parentId",2,"latest",["D",1779361711293],1,"http","// HTTP entry. Actual app lives in src/index.ts.\nexport { default } from \"./src/index.ts\";\n","label",[138],"7be7f270-5505-11f1-a1d1-ee650bb23af1","deno.json","7be7f324-5505-11f1-a1d1-ee650bb23af1",3,["D",1779361746705],"{\n \"imports\": {\n \"hono\": \"npm:hono@^4.6.0\",\n \"hono/cookie\": \"npm:hono@^4.6.0/cookie\",\n \"hono/streaming\": \"npm:hono@^4.6.0/streaming\",\n \"bcryptjs\": \"npm:bcryptjs@^2.4.3\",\n \"valtown/sqlite\": \"https://esm.town/v/std/sqlite\"\n }\n}\n",[150],"80cbe13e-5505-11f1-8113-ee650bb23af1","src","e2afea23-9cf1-4c46-ad89-983464fe99aa",4,["D",1779361754893],[157],"pulls","branches","forks","envVars",{"_169":67,"_171":67},"connections",{"_169":67,"_170":67},"count","unfilledCount","emptyCount",{"_49":156,"_32":157,"_30":158,"_140":-5,"_40":41,"_39":159,"_142":129,"_37":364,"_13":67,"_34":35,"_36":-5,"_24":25,"_147":-5,"_199":365,"_27":366},{"_49":360,"_32":352,"_30":346,"_140":158,"_40":41,"_39":347,"_142":129,"_37":361,"_13":67,"_34":35,"_36":-5,"_24":25,"_147":-5,"_199":362,"_27":363},{"_49":353,"_32":245,"_30":354,"_140":346,"_40":41,"_39":355,"_142":25,"_37":356,"_13":67,"_34":46,"_36":357,"_24":25,"_147":-5,"_199":358,"_27":359},{"_49":343,"_32":344,"_30":345,"_140":346,"_40":41,"_39":347,"_142":25,"_37":348,"_13":67,"_34":46,"_36":349,"_24":25,"_147":-5,"_199":350,"_27":351},{"_49":339,"_32":338,"_30":332,"_140":158,"_40":41,"_39":333,"_142":129,"_37":340,"_13":67,"_34":35,"_36":-5,"_24":25,"_147":-5,"_199":341,"_27":342},{"_49":329,"_32":330,"_30":331,"_140":332,"_40":41,"_39":333,"_142":129,"_37":334,"_13":67,"_34":46,"_36":335,"_24":25,"_147":-5,"_199":336,"_27":337},{"_49":325,"_32":316,"_30":310,"_140":158,"_40":41,"_39":320,"_142":129,"_37":326,"_13":67,"_34":35,"_36":-5,"_24":25,"_147":-5,"_199":327,"_27":328},{"_49":317,"_32":318,"_30":319,"_140":310,"_40":41,"_39":320,"_142":25,"_37":321,"_13":67,"_34":46,"_36":322,"_24":25,"_147":-5,"_199":323,"_27":324},{"_49":307,"_32":308,"_30":309,"_140":310,"_40":41,"_39":311,"_142":25,"_37":312,"_13":67,"_34":46,"_36":313,"_24":25,"_147":-5,"_199":314,"_27":315},{"_49":303,"_32":302,"_30":296,"_140":158,"_40":41,"_39":297,"_142":129,"_37":304,"_13":67,"_34":35,"_36":-5,"_24":25,"_147":-5,"_199":305,"_27":306},{"_49":294,"_32":245,"_30":295,"_140":296,"_40":41,"_39":297,"_142":25,"_37":298,"_13":67,"_34":46,"_36":299,"_24":25,"_147":-5,"_199":300,"_27":301},{"_49":290,"_32":273,"_30":267,"_140":158,"_40":41,"_39":285,"_142":129,"_37":291,"_13":67,"_34":35,"_36":-5,"_24":25,"_147":-5,"_199":292,"_27":293},{"_49":282,"_32":283,"_30":284,"_140":267,"_40":41,"_39":285,"_142":129,"_37":286,"_13":67,"_34":46,"_36":287,"_24":25,"_147":-5,"_199":288,"_27":289},{"_49":274,"_32":275,"_30":276,"_140":267,"_40":41,"_39":277,"_142":129,"_37":278,"_13":67,"_34":46,"_36":279,"_24":25,"_147":-5,"_199":280,"_27":281},{"_49":264,"_32":265,"_30":266,"_140":267,"_40":41,"_39":268,"_142":129,"_37":269,"_13":67,"_34":46,"_36":270,"_24":25,"_147":-5,"_199":271,"_27":272},{"_49":260,"_32":243,"_30":237,"_140":158,"_40":41,"_39":247,"_142":129,"_37":261,"_13":67,"_34":35,"_36":-5,"_24":25,"_147":-5,"_199":262,"_27":263},{"_49":252,"_32":253,"_30":254,"_140":237,"_40":41,"_39":255,"_142":25,"_37":256,"_13":67,"_34":46,"_36":257,"_24":25,"_147":-5,"_199":258,"_27":259},{"_49":244,"_32":245,"_30":246,"_140":237,"_40":41,"_39":247,"_142":25,"_37":248,"_13":67,"_34":46,"_36":249,"_24":25,"_147":-5,"_199":250,"_27":251},{"_49":234,"_32":235,"_30":236,"_140":237,"_40":41,"_39":238,"_142":25,"_37":239,"_13":67,"_34":46,"_36":240,"_24":25,"_147":-5,"_199":241,"_27":242},{"_49":230,"_32":221,"_30":215,"_140":158,"_40":41,"_39":216,"_142":129,"_37":231,"_13":67,"_34":35,"_36":-5,"_24":25,"_147":-5,"_199":232,"_27":233},{"_49":226,"_32":33,"_30":31,"_140":215,"_40":41,"_39":14,"_142":129,"_37":227,"_13":67,"_34":35,"_36":-5,"_24":25,"_147":-5,"_199":228,"_27":229},{"_49":222,"_32":45,"_30":44,"_140":31,"_40":41,"_39":14,"_142":129,"_37":223,"_13":67,"_34":46,"_36":47,"_24":25,"_147":-5,"_199":224,"_27":225},{"_49":212,"_32":213,"_30":214,"_140":215,"_40":41,"_39":216,"_142":25,"_37":217,"_13":67,"_34":46,"_36":218,"_24":25,"_147":-5,"_199":219,"_27":220},{"_49":205,"_32":206,"_30":207,"_140":158,"_40":41,"_39":159,"_142":25,"_37":208,"_13":67,"_34":46,"_36":209,"_24":25,"_147":-5,"_199":210,"_27":211},{"_49":149,"_32":150,"_30":151,"_140":-5,"_40":41,"_39":152,"_142":129,"_37":202,"_13":67,"_34":21,"_36":154,"_24":25,"_147":-5,"_199":203,"_27":204},{"_49":137,"_32":138,"_30":139,"_140":-5,"_40":41,"_39":141,"_142":129,"_37":198,"_13":144,"_34":145,"_36":146,"_24":25,"_147":51,"_199":200,"_27":201},["D",1779361711293],"children",[],[138],["D",1779361746705],[],[150],"80cbbec0-5505-11f1-8113-ee650bb23af1","index.ts","80cbbf6a-5505-11f1-8113-ee650bb23af1",["D",1779361754893],"import { Hono } from \"hono\";\nimport { migrate } from \"./db/migrate.ts\";\nimport { authRoutes } from \"./auth/routes.ts\";\nimport { friendsRoutes } from \"./friends/routes.ts\";\nimport { roomsRoutes } from \"./rooms/routes.ts\";\nimport { sseHandler } from \"./rooms/sse.ts\";\nimport { landingPage } from \"./ui/pages/landing.ts\";\nimport { homePage } from \"./ui/pages/home.ts\";\nimport { getSession } from \"./auth/session.ts\";\nimport { CLIENT_BUNDLE } from \"./static/client/bundle.ts\";\n\nawait migrate();\n\nconst app = new Hono();\n\napp.get(\"/static/client/roulette.js\", (c) => {\n c.header(\"Content-Type\", \"application/javascript\");\n c.header(\"Cache-Control\", \"public, max-age=300\");\n return c.body(CLIENT_BUNDLE);\n});\n\napp.get(\"/\", async (c) => {\n const session = await getSession(c);\n if (session) return c.redirect(\"/home\");\n return c.html(landingPage());\n});\n\napp.route(\"/auth\", authRoutes);\napp.route(\"/friends\", friendsRoutes);\napp.route(\"/rooms\", roomsRoutes);\n\napp.get(\"/home\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n return c.html(await homePage(session.user));\n});\n\napp.get(\"/api/sse/:roomId\", sseHandler);\n\nexport default app.fetch;\n",[],[157,206],"fff15d54-5505-11f1-a554-ee650bb23af1","layout.ts","fff15e1c-5505-11f1-a554-ee650bb23af1","2da62fa6-8f85-4a45-a76e-210cd378c0d8",17,["D",1779361968229],"export interface LayoutProps {\n title: string;\n body: string;\n balance?: number;\n username?: string;\n}\n\nexport function layout({ title, body, balance, username }: LayoutProps): string {\n const header = username !== undefined\n ? `

\n grimbucks\n

\n @${escapeHtml(username)}\n 🪙 ${balance ?? 0}\n \n

`\n : \"\";\n\n return `\n\n\n\n\n${escapeHtml(title)} · grimbucks\n\n\n\n\n${header}\n

\n${body}\n

\n\n`;\n}\n\nexport function escapeHtml(s: string | number): string {\n return String(s)\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\")\n .replace(/'/g, \"'\");\n}\n",[],[157,221,213],"ui","07b52c32-5506-11f1-9912-ee650bb23af1",["D",1779361981258],[],[157,221,33,45],"07b5575c-5506-11f1-9912-ee650bb23af1",["D",1779361981258],[193],[157,221,33],"fff191b6-5505-11f1-a554-ee650bb23af1",["D",1779361968229],[192,194],[157,221],"ef42775e-5505-11f1-af15-ee650bb23af1","sse.ts","ef4278d0-5505-11f1-af15-ee650bb23af1","eb3b9e4d-4b1e-4f9e-87ee-0d09964d8485",15,["D",1779361940239],"import type { Context } from \"hono\";\nimport { streamSSE } from \"hono/streaming\";\nimport { getSession } from \"../auth/session.ts\";\nimport { isRoomMember, readEventsSince } from \"../db/queries.ts\";\n\n// Val Town caps a single request at ~60s. Close just under that so the client\n// reconnects cleanly with Last-Event-ID instead of being killed mid-flush.\nconst SSE_BUDGET_MS = 55_000;\nconst POLL_INTERVAL_MS = 500;\n\nexport async function sseHandler(c: Context): Promise {\n const session = await getSession(c);\n if (!session) return c.text(\"Unauthorized\", 401);\n\n const roomId = Number(c.req.param(\"roomId\"));\n if (!Number.isInteger(roomId)) return c.text(\"Bad room id\", 400);\n if (!(await isRoomMember(roomId, session.user.id))) {\n return c.text(\"Not a room member\", 403);\n }\n\n const lastEventHeader = c.req.header(\"Last-Event-ID\");\n const sinceQuery = c.req.query(\"since\");\n let cursor = Number(lastEventHeader ?? sinceQuery ?? 0);\n if (!Number.isFinite(cursor) || cursor < 0) cursor = 0;\n\n return streamSSE(c, async (stream) => {\n const startedAt = Date.now();\n // Initial flush so the browser opens the connection promptly.\n await stream.writeSSE({ event: \"open\", data: \"\" });\n\n while (Date.now() - startedAt < SSE_BUDGET_MS) {\n const events = await readEventsSince(roomId, cursor);\n for (const ev of events) {\n await stream.writeSSE({\n id: String(ev.id),\n event: ev.type,\n data: JSON.stringify({\n type: ev.type,\n payload: JSON.parse(ev.payload),\n createdAt: ev.created_at,\n }),\n });\n cursor = ev.id;\n }\n await stream.sleep(POLL_INTERVAL_MS);\n }\n // Graceful close: client EventSource will reconnect with Last-Event-ID = cursor.\n });\n}\n",[],[157,243,235],"rooms","e8fd4374-5505-11f1-a891-ee650bb23af1","routes.ts","e8fd4450-5505-11f1-a891-ee650bb23af1",14,["D",1779361929706],"import { Hono } from \"hono\";\nimport { getSession } from \"../auth/session.ts\";\nimport {\n acceptInviteById,\n addRoomMember,\n createInvite,\n createRoom,\n findInviteById,\n findRoomById,\n findUserById,\n isRoomMember,\n latestEventId,\n listFriends,\n listRoomMembers,\n} from \"../db/queries.ts\";\nimport { gameForType } from \"../games/registry.ts\";\nimport { roomPage } from \"../ui/pages/room.ts\";\nimport type { RouletteState } from \"../games/roulette.ts\";\nimport { actionsRoutes } from \"./actions.ts\";\n\nexport const roomsRoutes = new Hono();\nroomsRoutes.route(\"/\", actionsRoutes);\n\nroomsRoutes.post(\"/\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const form = await c.req.formData();\n const gameType = String(form.get(\"game_type\") ?? \"roulette\");\n const game = gameForType(gameType);\n const initial = game.initialState(session.user.id);\n const room = await createRoom(gameType, session.user.id, JSON.stringify(initial));\n await addRoomMember(room.id, session.user.id);\n return c.redirect(`/rooms/${room.id}`);\n});\n\nroomsRoutes.get(\"/:id\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const roomId = Number(c.req.param(\"id\"));\n if (!Number.isInteger(roomId)) return c.redirect(\"/home\");\n const room = await findRoomById(roomId);\n if (!room) return c.text(\"Room not found\", 404);\n const member = await isRoomMember(roomId, session.user.id);\n if (!member) return c.text(\"Not a member of this room\", 403);\n\n const [members, friends, lastEvId] = await Promise.all([\n listRoomMembers(roomId),\n listFriends(session.user.id),\n latestEventId(roomId),\n ]);\n\n // Ensure the persisted user record is fresh (balance may have changed via bets).\n const user = await findUserById(session.user.id);\n if (!user) return c.redirect(\"/\");\n\n return c.html(roomPage({\n user,\n roomId,\n hostId: room.host_id,\n members,\n friends,\n state: JSON.parse(room.state_json) as RouletteState,\n latestEventId: lastEvId,\n }));\n});\n\nroomsRoutes.post(\"/:id/invite\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const roomId = Number(c.req.param(\"id\"));\n if (!Number.isInteger(roomId)) return c.redirect(\"/home\");\n const room = await findRoomById(roomId);\n if (!room) return c.redirect(\"/home\");\n if (!(await isRoomMember(roomId, session.user.id))) {\n return c.text(\"Not a member of this room\", 403);\n }\n const form = await c.req.formData();\n const friendId = Number(form.get(\"friend_id\"));\n if (!Number.isInteger(friendId)) return c.redirect(`/rooms/${roomId}`);\n\n // Confirm they're actually friends before sending an invite.\n const friends = await listFriends(session.user.id);\n if (!friends.some((f) => f.id === friendId)) {\n return c.redirect(`/rooms/${roomId}`);\n }\n if (await isRoomMember(roomId, friendId)) {\n return c.redirect(`/rooms/${roomId}`);\n }\n await createInvite(roomId, session.user.id, friendId);\n return c.redirect(`/rooms/${roomId}`);\n});\n\nroomsRoutes.post(\"/:id/join\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const roomId = Number(c.req.param(\"id\"));\n if (!Number.isInteger(roomId)) return c.redirect(\"/home\");\n const form = await c.req.formData();\n const inviteId = Number(form.get(\"invite_id\"));\n\n // Joining requires either an active invite or already being a member.\n if (await isRoomMember(roomId, session.user.id)) {\n return c.redirect(`/rooms/${roomId}`);\n }\n if (!Number.isInteger(inviteId)) return c.redirect(\"/home\");\n const invite = await findInviteById(inviteId);\n if (!invite || invite.status !== \"pending\" || invite.to_user !== session.user.id ||\n invite.room_id !== roomId) {\n return c.text(\"Invite not valid\", 403);\n }\n await acceptInviteById(inviteId, session.user.id);\n await addRoomMember(roomId, session.user.id);\n return c.redirect(`/rooms/${roomId}`);\n});\n",[],[157,243,245],"f7d93dda-5505-11f1-bb35-ee650bb23af1","actions.ts","f7d93eb6-5505-11f1-bb35-ee650bb23af1",16,["D",1779361954647],"import { Hono } from \"hono\";\nimport { getSession } from \"../auth/session.ts\";\nimport {\n adjustBalance,\n appendEvent,\n findRoomById,\n findUserById,\n isRoomMember,\n updateRoomState,\n} from \"../db/queries.ts\";\nimport { gameForType } from \"../games/registry.ts\";\n\nexport const actionsRoutes = new Hono();\n\nactionsRoutes.post(\"/:id/action\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.json({ error: \"unauthorized\" }, 401);\n\n const roomId = Number(c.req.param(\"id\"));\n if (!Number.isInteger(roomId)) return c.json({ error: \"bad room id\" }, 400);\n\n const room = await findRoomById(roomId);\n if (!room) return c.json({ error: \"room not found\" }, 404);\n if (!(await isRoomMember(roomId, session.user.id))) {\n return c.json({ error: \"not a member\" }, 403);\n }\n\n let action: unknown;\n try {\n action = await c.req.json();\n } catch {\n return c.json({ error: \"invalid json\" }, 400);\n }\n\n const game = gameForType(room.game_type);\n const state = JSON.parse(room.state_json);\n\n let result;\n try {\n result = game.applyAction(state, session.user.id, action);\n } catch (e) {\n return c.json({ error: e instanceof Error ? e.message : \"action failed\" }, 400);\n }\n\n // For bets: deduct stake first (already encoded in balanceDeltas as a negative).\n // Refuse the action if any user would go negative; for v1, only the acting\n // user incurs a negative delta on place_bet, so check just that one.\n for (const [uidStr, delta] of Object.entries(result.balanceDeltas)) {\n const uid = Number(uidStr);\n if (delta < 0) {\n const u = await findUserById(uid);\n if (!u || u.balance + delta < 0) {\n return c.json({ error: \"insufficient balance\" }, 400);\n }\n }\n }\n\n // Apply balance deltas. (No real transactions in Val Town SQLite; for v1's\n // low concurrency we accept the tiny window where state could diverge.)\n for (const [uidStr, delta] of Object.entries(result.balanceDeltas)) {\n if (delta !== 0) {\n await adjustBalance(Number(uidStr), delta, `room:${roomId}`);\n }\n }\n\n // Determine new room status from any phase change.\n const newStatus = result.state.phase === \"betting\"\n ? \"open\"\n : result.state.phase === \"spinning\"\n ? \"round_active\"\n : \"open\";\n await updateRoomState(roomId, newStatus, JSON.stringify(result.state));\n\n // Append game events plus a state-snapshot event so reconnecting clients\n // can rebuild even if they miss intermediate events.\n for (const ev of result.events) {\n await appendEvent(roomId, ev.type, ev.payload);\n }\n await appendEvent(roomId, \"state.snapshot\", { state: result.state });\n\n return c.json({ ok: true, state: result.state });\n});\n",[],[157,243,253],"e8fd80dc-5505-11f1-a891-ee650bb23af1",["D",1779361929706],[188,189,190],[157,243],"cec5d192-5505-11f1-a3cc-ee650bb23af1","roulette.ts","cec5d264-5505-11f1-a3cc-ee650bb23af1","8ee6e4ce-0a84-45ce-83f1-b6d71b7461d8",11,["D",1779361885725],"// European single-zero roulette. Pure logic — no I/O.\n// Numbers 0..36. 0 is green; everything else is red or black per RED_NUMBERS.\n\nimport type { ActionResult, Game, ResolveResult } from \"./game.ts\";\n\nexport type Color = \"red\" | \"black\" | \"green\";\n\nexport type RouletteBet =\n | { kind: \"straight\"; number: number; amount: number }\n | { kind: \"color\"; color: \"red\" | \"black\"; amount: number }\n | { kind: \"parity\"; parity: \"even\" | \"odd\"; amount: number }\n | { kind: \"range\"; range: \"low\" | \"high\"; amount: number }\n | { kind: \"dozen\"; dozen: 1 | 2 | 3; amount: number }\n | { kind: \"column\"; column: 1 | 2 | 3; amount: number };\n\nexport type RoulettePhase = \"betting\" | \"resolved\";\n\nexport interface RouletteResult {\n number: number;\n color: Color;\n}\n\nexport interface RouletteState {\n phase: RoulettePhase;\n hostId: number;\n bets: Record;\n lastResult?: RouletteResult;\n}\n\nexport type RouletteAction =\n | { type: \"place_bet\"; bet: RouletteBet }\n | { type: \"clear_bets\" }\n | { type: \"spin\" }\n | { type: \"new_round\" };\n\nconst RED_NUMBERS: ReadonlySet = new Set([\n 1, 3, 5, 7, 9, 12, 14, 16, 18, 19, 21, 23, 25, 27, 30, 32, 34, 36,\n]);\n\nexport function colorOf(n: number): Color {\n if (n === 0) return \"green\";\n return RED_NUMBERS.has(n) ? \"red\" : \"black\";\n}\n\nexport const MIN_BET = 1;\nexport const MAX_BET_PER_USER = 1000;\n\nfunction isValidBet(bet: RouletteBet): boolean {\n if (!Number.isInteger(bet.amount) || bet.amount < MIN_BET) return false;\n switch (bet.kind) {\n case \"straight\":\n return Number.isInteger(bet.number) && bet.number >= 0 && bet.number <= 36;\n case \"color\":\n return bet.color === \"red\" || bet.color === \"black\";\n case \"parity\":\n return bet.parity === \"even\" || bet.parity === \"odd\";\n case \"range\":\n return bet.range === \"low\" || bet.range === \"high\";\n case \"dozen\":\n return bet.dozen === 1 || bet.dozen === 2 || bet.dozen === 3;\n case \"column\":\n return bet.column === 1 || bet.column === 2 || bet.column === 3;\n }\n}\n\n// Returns total chips the bet returns if it wins (including original stake).\n// 0 means the bet lost.\nfunction payoutFor(bet: RouletteBet, n: number): number {\n if (n === 0) {\n return bet.kind === \"straight\" && bet.number === 0\n ? bet.amount * 36\n : 0;\n }\n const c = colorOf(n);\n switch (bet.kind) {\n case \"straight\":\n return bet.number === n ? bet.amount * 36 : 0;\n case \"color\":\n return bet.color === c ? bet.amount * 2 : 0;\n case \"parity\": {\n const isEven = n % 2 === 0;\n const win = bet.parity === \"even\" ? isEven : !isEven;\n return win ? bet.amount * 2 : 0;\n }\n case \"range\": {\n const isLow = n >= 1 && n <= 18;\n const win = bet.range === \"low\" ? isLow : !isLow;\n return win ? bet.amount * 2 : 0;\n }\n case \"dozen\": {\n const which = n <= 12 ? 1 : n <= 24 ? 2 : 3;\n return which === bet.dozen ? bet.amount * 3 : 0;\n }\n case \"column\": {\n const which = (n % 3 === 1 ? 1 : n % 3 === 2 ? 2 : 3) as 1 | 2 | 3;\n return which === bet.column ? bet.amount * 3 : 0;\n }\n }\n}\n\nfunction sumBets(bets: RouletteBet[]): number {\n return bets.reduce((s, b) => s + b.amount, 0);\n}\n\nfunction spinNumber(): number {\n // Cryptographically random 0..36 inclusive, rejection-sampled to remove modulo bias.\n const buf = new Uint32Array(1);\n const max = 0xffffffff - (0xffffffff % 37);\n while (true) {\n crypto.getRandomValues(buf);\n if (buf[0] <= max) return buf[0] % 37;\n }\n}\n\nexport const roulette: Game = {\n type: \"roulette\",\n\n initialState(hostId) {\n return {\n phase: \"betting\",\n hostId,\n bets: {},\n };\n },\n\n applyAction(state, userId, action): ActionResult {\n switch (action.type) {\n case \"place_bet\": {\n if (state.phase !== \"betting\") {\n throw new Error(\"not in betting phase\");\n }\n if (!isValidBet(action.bet)) {\n throw new Error(\"invalid bet\");\n }\n const userBets = state.bets[userId] ?? [];\n const newTotal = sumBets(userBets) + action.bet.amount;\n if (newTotal > MAX_BET_PER_USER) {\n throw new Error(\"over per-round bet cap\");\n }\n const next: RouletteState = {\n ...state,\n bets: {\n ...state.bets,\n [userId]: [...userBets, action.bet],\n },\n };\n return {\n state: next,\n events: [{\n type: \"bet.placed\",\n payload: { userId, bet: action.bet },\n }],\n balanceDeltas: { [userId]: -action.bet.amount },\n };\n }\n case \"clear_bets\": {\n if (state.phase !== \"betting\") {\n throw new Error(\"not in betting phase\");\n }\n const userBets = state.bets[userId] ?? [];\n const refund = sumBets(userBets);\n const next = { ...state, bets: { ...state.bets } };\n delete next.bets[userId];\n return {\n state: next,\n events: [{\n type: \"bet.cleared\",\n payload: { userId, refund },\n }],\n balanceDeltas: refund > 0 ? { [userId]: refund } : {},\n };\n }\n case \"spin\": {\n if (userId !== state.hostId) throw new Error(\"only host can spin\");\n if (state.phase !== \"betting\") {\n throw new Error(\"not in betting phase\");\n }\n const n = spinNumber();\n const c = colorOf(n);\n const payouts: Record = {};\n for (const [uidStr, userBets] of Object.entries(state.bets)) {\n const uid = Number(uidStr);\n const total = userBets.reduce((s, b) => s + payoutFor(b, n), 0);\n if (total > 0) payouts[uid] = total;\n }\n const next: RouletteState = {\n ...state,\n phase: \"resolved\",\n lastResult: { number: n, color: c },\n };\n const events = [\n { type: \"spin.result\", payload: { number: n, color: c } },\n { type: \"round.payouts\", payload: { payouts } },\n ];\n return { state: next, events, balanceDeltas: payouts };\n }\n case \"new_round\": {\n if (userId !== state.hostId) throw new Error(\"only host can start round\");\n if (state.phase !== \"resolved\") {\n throw new Error(\"can only start new round after resolved\");\n }\n const next: RouletteState = {\n phase: \"betting\",\n hostId: state.hostId,\n bets: {},\n lastResult: state.lastResult,\n };\n return {\n state: next,\n events: [{ type: \"round.new\", payload: {} }],\n balanceDeltas: {},\n };\n }\n }\n },\n\n resolveRound(state): ResolveResult {\n return { state, events: [], payouts: {} };\n },\n};\n",[],[157,273,265],"games","d1fee83a-5505-11f1-8ccf-ee650bb23af1","registry.ts","d1fee8ee-5505-11f1-8ccf-ee650bb23af1",12,["D",1779361891145],"import type { Game } from \"./game.ts\";\nimport { roulette } from \"./roulette.ts\";\n\n// deno-lint-ignore no-explicit-any\nconst REGISTRY: Record> = {\n [roulette.type]: roulette,\n};\n\n// deno-lint-ignore no-explicit-any\nexport function gameForType(type: string): Game {\n const g = REGISTRY[type];\n if (!g) throw new Error(`unknown game type: ${type}`);\n return g;\n}\n",[],[157,273,275],"bb8492d0-5505-11f1-af15-ee650bb23af1","game.ts","bb8493ac-5505-11f1-af15-ee650bb23af1",10,["D",1779361853425],"// Shared Game abstraction so additional games (blackjack, etc.)\n// can slot into the room/SSE/action plumbing without changes there.\n\nexport interface GameEvent {\n type: string;\n payload: unknown;\n}\n\nexport interface ActionResult {\n state: S;\n events: GameEvent[];\n balanceDeltas: Record;\n}\n\nexport interface ResolveResult {\n state: S;\n events: GameEvent[];\n payouts: Record;\n}\n\nexport interface Game {\n type: string;\n initialState(hostId: number): S;\n applyAction(state: S, userId: number, action: A): ActionResult;\n resolveRound(state: S): ResolveResult;\n}\n",[],[157,273,283],"bb84b5bc-5505-11f1-af15-ee650bb23af1",["D",1779361853425],[184,185,186],[157,273],"dcbe03c8-5505-11f1-a3cc-ee650bb23af1","dcbe047c-5505-11f1-a3cc-ee650bb23af1","88f6fcc0-777d-44d3-921d-2a934814938b",13,["D",1779361909170],"import { Hono } from \"hono\";\nimport { getSession } from \"../auth/session.ts\";\nimport {\n acceptFriendRequest,\n createFriendRequest,\n findFriendshipPair,\n findUserByUsername,\n listFriends,\n listPendingIncoming,\n} from \"../db/queries.ts\";\nimport { escapeHtml, layout } from \"../ui/layout.ts\";\n\nexport const friendsRoutes = new Hono();\n\nfriendsRoutes.get(\"/\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const [friends, pending] = await Promise.all([\n listFriends(session.user.id),\n listPendingIncoming(session.user.id),\n ]);\n\n const friendList = friends.length === 0\n ? `
No friends yet.
`\n : friends.map((f) =>\n `
@${\n escapeHtml(f.username)\n }
`\n ).join(\"\");\n\n const pendingList = pending.length === 0\n ? \"\"\n : `
\n
Pending requests
\n ${\n pending.map((p) =>\n `
\n @${escapeHtml(p.username)}\n \n
`\n ).join(\"\")\n }\n
`;\n\n const body = `\n
\n ← home\n\n
\n
Add friend
\n \n \n
\n\n ${pendingList}\n\n
\n
Friends
\n ${friendList}\n
\n
\n`;\n return c.html(layout({\n title: \"friends\",\n body,\n balance: session.user.balance,\n username: session.user.username,\n }));\n});\n\nfriendsRoutes.post(\"/add\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const form = await c.req.formData();\n const username = String(form.get(\"username\") ?? \"\").trim();\n if (!username || username === session.user.username) {\n return c.redirect(\"/friends\");\n }\n const target = await findUserByUsername(username);\n if (!target) return c.redirect(\"/friends\");\n const existing = await findFriendshipPair(session.user.id, target.id);\n if (existing) return c.redirect(\"/friends\");\n await createFriendRequest(session.user.id, target.id);\n return c.redirect(\"/friends\");\n});\n\nfriendsRoutes.post(\"/accept/:requesterId\", async (c) => {\n const session = await getSession(c);\n if (!session) return c.redirect(\"/\");\n const requesterId = Number(c.req.param(\"requesterId\"));\n if (!Number.isInteger(requesterId)) return c.redirect(\"/home\");\n // The current user is the addressee (user_b); requester is user_a.\n await acceptFriendRequest(requesterId, session.user.id);\n return c.redirect(\"/home\");\n});\n",[],[157,302,245],"friends","dcbe1d4a-5505-11f1-a3cc-ee650bb23af1",["D",1779361909170],[182],[157,302],"a4fa0c02-5505-11f1-a8cf-ee650bb23af1","queries.ts","a4fa0ca2-5505-11f1-a8cf-ee650bb23af1","b63de110-65d6-4da5-a757-980369fb0498",6,["D",1779361815618],"import { sqlite } from \"valtown/sqlite\";\n\n// Val Town sqlite returns { columns, rows } with rows as arrays.\n// rowsAs maps them into plain objects keyed by column name.\ntype ExecuteResult = { columns: string[]; rows: unknown[][] };\n\ntype SqlArg = string | number | boolean | null;\n\nasync function rowsAs(\n sql: string,\n args: SqlArg[] = [],\n): Promise {\n const res = (await sqlite.execute({ sql, args })) as ExecuteResult;\n return res.rows.map(\n (row) =>\n Object.fromEntries(res.columns.map((c, i) => [c, row[i]])) as T,\n );\n}\n\nasync function rowAs(sql: string, args: SqlArg[] = []): Promise {\n const rows = await rowsAs(sql, args);\n return rows[0] ?? null;\n}\n\nasync function exec(sql: string, args: SqlArg[] = []): Promise {\n await sqlite.execute({ sql, args });\n}\n\n// -------- users --------\n\nexport interface User {\n id: number;\n username: string;\n password_hash: string;\n balance: number;\n last_topup_at: string | null;\n created_at: string;\n}\n\nexport const findUserByUsername = (username: string) =>\n rowAs(\"SELECT * FROM users WHERE username = ?\", [username]);\n\nexport const findUserById = (id: number) =>\n rowAs(\"SELECT * FROM users WHERE id = ?\", [id]);\n\nexport async function createUser(\n username: string,\n passwordHash: string,\n): Promise {\n await exec(\n \"INSERT INTO users (username, password_hash) VALUES (?, ?)\",\n [username, passwordHash],\n );\n const u = await findUserByUsername(username);\n if (!u) throw new Error(\"user not found after insert\");\n return u;\n}\n\nexport async function adjustBalance(\n userId: number,\n delta: number,\n reason: string,\n): Promise {\n await exec(\n \"UPDATE users SET balance = balance + ? WHERE id = ?\",\n [delta, userId],\n );\n // Audit row in the events log uses room_id = 0 for global / cross-room events.\n await exec(\n \"INSERT INTO events (room_id, type, payload) VALUES (?, ?, ?)\",\n [0, \"balance.adjust\", JSON.stringify({ userId, delta, reason })],\n );\n const u = await findUserById(userId);\n return u?.balance ?? 0;\n}\n\nexport const setLastTopupAt = (userId: number, isoDate: string) =>\n exec(\"UPDATE users SET last_topup_at = ?, balance = 1000 WHERE id = ?\", [\n isoDate,\n userId,\n ]);\n\n// -------- sessions --------\n\nexport interface Session {\n token: string;\n user_id: number;\n expires_at: string;\n}\n\nexport const createSession = (\n token: string,\n userId: number,\n expiresAt: string,\n) =>\n exec(\n \"INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)\",\n [token, userId, expiresAt],\n );\n\nexport const findSessionByToken = (token: string) =>\n rowAs(\n \"SELECT * FROM sessions WHERE token = ? AND expires_at > datetime('now')\",\n [token],\n );\n\nexport const deleteSession = (token: string) =>\n exec(\"DELETE FROM sessions WHERE token = ?\", [token]);\n\n// -------- friendships --------\n\nexport interface Friendship {\n user_a: number;\n user_b: number;\n status: \"pending\" | \"accepted\";\n created_at: string;\n}\n\nexport const findFriendshipPair = (a: number, b: number) =>\n rowAs(\n `SELECT * FROM friendships\n WHERE (user_a = ? AND user_b = ?) OR (user_a = ? AND user_b = ?)`,\n [a, b, b, a],\n );\n\nexport const createFriendRequest = (requesterId: number, addresseeId: number) =>\n exec(\n \"INSERT INTO friendships (user_a, user_b, status) VALUES (?, ?, 'pending')\",\n [requesterId, addresseeId],\n );\n\nexport const acceptFriendRequest = (requesterId: number, addresseeId: number) =>\n exec(\n `UPDATE friendships SET status = 'accepted'\n WHERE user_a = ? AND user_b = ? AND status = 'pending'`,\n [requesterId, addresseeId],\n );\n\nexport const listFriends = (userId: number) =>\n rowsAs<{ id: number; username: string }>(\n `SELECT u.id, u.username FROM users u\n JOIN friendships f ON (f.user_a = u.id AND f.user_b = ?)\n OR (f.user_b = u.id AND f.user_a = ?)\n WHERE f.status = 'accepted'`,\n [userId, userId],\n );\n\nexport const listPendingIncoming = (userId: number) =>\n rowsAs<{ id: number; username: string }>(\n `SELECT u.id, u.username FROM users u\n JOIN friendships f ON f.user_a = u.id\n WHERE f.user_b = ? AND f.status = 'pending'`,\n [userId],\n );\n\n// -------- rooms --------\n\nexport interface Room {\n id: number;\n game_type: string;\n host_id: number;\n status: \"open\" | \"round_active\" | \"closed\";\n state_json: string;\n created_at: string;\n}\n\nexport async function createRoom(\n gameType: string,\n hostId: number,\n stateJson: string,\n): Promise {\n const res = (await sqlite.execute({\n sql:\n \"INSERT INTO rooms (game_type, host_id, status, state_json) VALUES (?, ?, 'open', ?) RETURNING *\",\n args: [gameType, hostId, stateJson],\n })) as ExecuteResult;\n const row = res.rows[0];\n return Object.fromEntries(\n res.columns.map((c, i) => [c, row[i]]),\n ) as unknown as Room;\n}\n\nexport const findRoomById = (id: number) =>\n rowAs(\"SELECT * FROM rooms WHERE id = ?\", [id]);\n\nexport const updateRoomState = (\n id: number,\n status: Room[\"status\"],\n stateJson: string,\n) =>\n exec(\"UPDATE rooms SET status = ?, state_json = ? WHERE id = ?\", [\n status,\n stateJson,\n id,\n ]);\n\nexport async function addRoomMember(\n roomId: number,\n userId: number,\n): Promise {\n const seat = await rowAs<{ next_seat: number }>(\n \"SELECT COALESCE(MAX(seat), -1) + 1 AS next_seat FROM room_members WHERE room_id = ?\",\n [roomId],\n );\n const s = seat?.next_seat ?? 0;\n await exec(\n \"INSERT OR IGNORE INTO room_members (room_id, user_id, seat) VALUES (?, ?, ?)\",\n [roomId, userId, s],\n );\n return s;\n}\n\nexport const listRoomMembers = (roomId: number) =>\n rowsAs<{ user_id: number; seat: number; username: string }>(\n `SELECT rm.user_id, rm.seat, u.username\n FROM room_members rm\n JOIN users u ON u.id = rm.user_id\n WHERE rm.room_id = ?\n ORDER BY rm.seat`,\n [roomId],\n );\n\nexport const isRoomMember = async (roomId: number, userId: number) => {\n const r = await rowAs<{ n: number }>(\n \"SELECT COUNT(*) AS n FROM room_members WHERE room_id = ? AND user_id = ?\",\n [roomId, userId],\n );\n return (r?.n ?? 0) > 0;\n};\n\n// -------- invites --------\n\nexport interface Invite {\n id: number;\n room_id: number;\n from_user: number;\n to_user: number;\n status: \"pending\" | \"accepted\" | \"declined\" | \"expired\";\n created_at: string;\n}\n\nexport const createInvite = (\n roomId: number,\n fromUser: number,\n toUser: number,\n) =>\n exec(\n \"INSERT INTO invites (room_id, from_user, to_user, status) VALUES (?, ?, ?, 'pending')\",\n [roomId, fromUser, toUser],\n );\n\nexport const listPendingInvitesFor = (userId: number) =>\n rowsAs(\n `SELECT i.*, u.username AS from_username, r.game_type\n FROM invites i\n JOIN users u ON u.id = i.from_user\n JOIN rooms r ON r.id = i.room_id\n WHERE i.to_user = ? AND i.status = 'pending'\n ORDER BY i.created_at DESC`,\n [userId],\n );\n\nexport const acceptInviteById = (id: number, toUser: number) =>\n exec(\n `UPDATE invites SET status = 'accepted'\n WHERE id = ? AND to_user = ? AND status = 'pending'`,\n [id, toUser],\n );\n\nexport const findInviteById = (id: number) =>\n rowAs(\"SELECT * FROM invites WHERE id = ?\", [id]);\n\n// -------- events --------\n\nexport interface EventRow {\n id: number;\n room_id: number;\n type: string;\n payload: string;\n created_at: string;\n}\n\nexport async function appendEvent(\n roomId: number,\n type: string,\n payload: unknown,\n): Promise {\n const res = (await sqlite.execute({\n sql:\n \"INSERT INTO events (room_id, type, payload) VALUES (?, ?, ?) RETURNING *\",\n args: [roomId, type, JSON.stringify(payload)],\n })) as ExecuteResult;\n return Object.fromEntries(\n res.columns.map((c, i) => [c, res.rows[0][i]]),\n ) as unknown as EventRow;\n}\n\nexport const readEventsSince = (roomId: number, sinceId: number) =>\n rowsAs(\n \"SELECT * FROM events WHERE room_id = ? AND id > ? ORDER BY id ASC LIMIT 500\",\n [roomId, sinceId],\n );\n\nexport const latestEventId = async (roomId: number) => {\n const r = await rowAs<{ max_id: number | null }>(\n \"SELECT MAX(id) AS max_id FROM events WHERE room_id = ?\",\n [roomId],\n );\n return r?.max_id ?? 0;\n};\n",[],[157,316,308],"db","8b9110e4-5505-11f1-9c88-ee650bb23af1","migrate.ts","8b9111ca-5505-11f1-9c88-ee650bb23af1",5,["D",1779361772979],"import { sqlite } from \"valtown/sqlite\";\n\n// Schema kept inline (rather than reading schema.sql at runtime) so it works\n// inside Val Town's sandboxed Deno runtime without filesystem access.\n// schema.sql in this directory mirrors this for human reference.\nconst SCHEMA: readonly string[] = [\n `CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT NOT NULL UNIQUE,\n password_hash TEXT NOT NULL,\n balance INTEGER NOT NULL DEFAULT 1000,\n last_topup_at TEXT,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n expires_at TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE INDEX IF NOT EXISTS idx_sessions_user ON sessions(user_id)`,\n `CREATE TABLE IF NOT EXISTS friendships (\n user_a INTEGER NOT NULL,\n user_b INTEGER NOT NULL,\n status TEXT NOT NULL CHECK (status IN ('pending','accepted')),\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE UNIQUE INDEX IF NOT EXISTS uq_friendships_pair ON friendships(user_a, user_b)`,\n `CREATE INDEX IF NOT EXISTS idx_friendships_user_b ON friendships(user_b)`,\n `CREATE TABLE IF NOT EXISTS rooms (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n game_type TEXT NOT NULL,\n host_id INTEGER NOT NULL,\n status TEXT NOT NULL CHECK (status IN ('open','round_active','closed')),\n state_json TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS invites (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n room_id INTEGER NOT NULL,\n from_user INTEGER NOT NULL,\n to_user INTEGER NOT NULL,\n status TEXT NOT NULL CHECK (status IN ('pending','accepted','declined','expired')),\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE INDEX IF NOT EXISTS idx_invites_to_user ON invites(to_user, status)`,\n `CREATE TABLE IF NOT EXISTS room_members (\n room_id INTEGER NOT NULL,\n user_id INTEGER NOT NULL,\n seat INTEGER NOT NULL,\n joined_at TEXT NOT NULL DEFAULT (datetime('now')),\n PRIMARY KEY (room_id, user_id)\n )`,\n `CREATE TABLE IF NOT EXISTS events (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n room_id INTEGER NOT NULL,\n type TEXT NOT NULL,\n payload TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE INDEX IF NOT EXISTS idx_events_room ON events(room_id, id)`,\n];\n\nlet migrated = false;\n\nexport async function migrate(): Promise {\n if (migrated) return;\n for (const stmt of SCHEMA) {\n await sqlite.execute(stmt);\n }\n migrated = true;\n}\n",[],[157,316,318],"8b912c5a-5505-11f1-9c88-ee650bb23af1",["D",1779361772979],[179,180],[157,316],"b6657e86-5505-11f1-a774-ee650bb23af1","economy.ts","b6657f58-5505-11f1-a774-ee650bb23af1","8bef8c6b-58e1-4bb8-bc1e-6c7f544f00fd",9,["D",1779361844836],"import {\n findUserById,\n setLastTopupAt,\n type User,\n} from \"../db/queries.ts\";\n\nconst DAILY_TOPUP_AMOUNT = 1000;\nconst DAILY_TOPUP_THRESHOLD = 100;\n\nconst todayIso = () => new Date().toISOString().slice(0, 10);\n\n// Called on login. If the user is broke and hasn't topped up today,\n// restore them to 1000 chips and stamp last_topup_at.\nexport async function maybeDailyTopup(userId: number): Promise {\n const user = await findUserById(userId);\n if (!user) return null;\n const today = todayIso();\n if (user.balance < DAILY_TOPUP_THRESHOLD && user.last_topup_at !== today) {\n await setLastTopupAt(userId, today);\n return await findUserById(userId);\n }\n return user;\n}\n\nexport { DAILY_TOPUP_AMOUNT, DAILY_TOPUP_THRESHOLD };\n",[],[157,338,330],"chips","b6658dcc-5505-11f1-a774-ee650bb23af1",["D",1779361844836],[177],[157,338],"ab0bfc22-5505-11f1-a7f7-ee650bb23af1","session.ts","ab0bfd08-5505-11f1-a7f7-ee650bb23af1","0e48d6ca-54f7-4624-ab37-00a23d56ad37",7,["D",1779361825793],"import type { Context } from \"hono\";\nimport { getCookie, setCookie, deleteCookie } from \"hono/cookie\";\nimport {\n createSession as dbCreateSession,\n deleteSession as dbDeleteSession,\n findSessionByToken,\n findUserById,\n type User,\n} from \"../db/queries.ts\";\n\nconst COOKIE_NAME = \"gb_session\";\nconst SESSION_TTL_SECONDS = 60 * 60 * 24 * 30; // 30 days\n\nfunction randomToken(): string {\n const bytes = new Uint8Array(32);\n crypto.getRandomValues(bytes);\n return Array.from(bytes, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport async function startSession(c: Context, userId: number): Promise {\n const token = randomToken();\n const expiresAt = new Date(Date.now() + SESSION_TTL_SECONDS * 1000)\n .toISOString();\n await dbCreateSession(token, userId, expiresAt);\n setCookie(c, COOKIE_NAME, token, {\n httpOnly: true,\n sameSite: \"Lax\",\n secure: true,\n path: \"/\",\n maxAge: SESSION_TTL_SECONDS,\n });\n}\n\nexport async function endSession(c: Context): Promise {\n const token = getCookie(c, COOKIE_NAME);\n if (token) await dbDeleteSession(token);\n deleteCookie(c, COOKIE_NAME, { path: \"/\" });\n}\n\nexport interface ActiveSession {\n token: string;\n user: User;\n}\n\n// Returns the active session or null. Caller decides whether to redirect.\nexport async function getSession(c: Context): Promise {\n const token = getCookie(c, COOKIE_NAME);\n if (!token) return null;\n const row = await findSessionByToken(token);\n if (!row) return null;\n const user = await findUserById(row.user_id);\n if (!user) return null;\n return { token, user };\n}\n",[],[157,352,344],"auth","b22bb362-5505-11f1-a774-ee650bb23af1","b22bb40c-5505-11f1-a774-ee650bb23af1",8,["D",1779361837749],"import { Hono } from \"hono\";\nimport bcrypt from \"bcryptjs\";\nimport {\n createUser,\n findUserByUsername,\n} from \"../db/queries.ts\";\nimport { endSession, startSession } from \"./session.ts\";\nimport { maybeDailyTopup } from \"../chips/economy.ts\";\n\nconst USERNAME_RE = /^[a-zA-Z0-9_]{3,20}$/;\nconst MIN_PASSWORD = 6;\n\nexport const authRoutes = new Hono();\n\nauthRoutes.post(\"/signup\", async (c) => {\n const form = await c.req.formData();\n const username = String(form.get(\"username\") ?? \"\").trim();\n const password = String(form.get(\"password\") ?? \"\");\n if (!USERNAME_RE.test(username)) {\n return c.html(errorPage(\"Username must be 3–20 letters, numbers or _\"), 400);\n }\n if (password.length < MIN_PASSWORD) {\n return c.html(errorPage(\"Password must be at least 6 characters\"), 400);\n }\n const existing = await findUserByUsername(username);\n if (existing) {\n return c.html(errorPage(\"Username taken\"), 400);\n }\n const hash = await bcrypt.hash(password, 10);\n const user = await createUser(username, hash);\n await startSession(c, user.id);\n return c.redirect(\"/home\");\n});\n\nauthRoutes.post(\"/login\", async (c) => {\n const form = await c.req.formData();\n const username = String(form.get(\"username\") ?? \"\").trim();\n const password = String(form.get(\"password\") ?? \"\");\n const user = await findUserByUsername(username);\n if (!user) {\n return c.html(errorPage(\"Invalid username or password\"), 400);\n }\n const ok = await bcrypt.compare(password, user.password_hash);\n if (!ok) {\n return c.html(errorPage(\"Invalid username or password\"), 400);\n }\n await maybeDailyTopup(user.id);\n await startSession(c, user.id);\n return c.redirect(\"/home\");\n});\n\nauthRoutes.post(\"/logout\", async (c) => {\n await endSession(c);\n return c.redirect(\"/\");\n});\n\nfunction errorPage(message: string): string {\n return `\n
${escapeHtml(message)}
\n
Back
\n `;\n}\n\nfunction escapeHtml(s: string): string {\n return s\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\")\n .replace(/'/g, \"'\");\n}\n",[],[157,352,245],"ab0c3318-5505-11f1-a7f7-ee650bb23af1",["D",1779361825793],[174,175],[157,352],["D",1779361754893],[173,176,178,181,183,187,191,195],[157],["D",1779361516091],["D",1789489305251],{"_104":103,"_111":106},{"_104":103,"_105":106,"_107":106,"_18":61,"_108":109,"_110":25},{"_13":93,"_32":94,"_49":41,"_95":50,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":51,"_102":103},"ctx",{"_86":-5,"_131":405,"_406":407,"_408":409,"_410":25,"_411":25,"_412":25,"_413":129,"_414":-5,"_415":-7,"_416":-7,"_417":67,"_418":25,"_419":25,"_420":-5,"_421":25,"_422":25,"_423":25,"_424":-5},"ENV",{"_376":377,"_378":379,"_380":94,"_381":382,"_383":384,"_385":386,"_387":388,"_389":390,"_391":392,"_393":394,"_395":396,"_397":398,"_399":400,"_401":402,"_403":404},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

grimbucks

Log in

Sign up

Add friend

Diff · v18