\n\n\n\n\n",[141,154],"f077602f6b32c0b46f016d7718aa57030c7abad685e78b2586754d0111746f6d","674ae684-2f98-11f1-bbfe-42dde27851f2","7a0b9676-2f14-11f1-a476-42dde27851f2",53,["D",1775246703948],20,"\n\n\n \n \n Huddle\n \n \n\n\n

\n\n\n\n\n",[141,154],"c768b3e511a8288dbe94fbaddf9e467fec83394281f78111b0a2c38e687fac5f","frontend/bookmarklet.html",{"_32":180,"_13":173,"_81":181,"_83":144,"_85":33,"_86":182,"_88":26,"_34":183,"_40":87,"_91":137,"_93":184,"_64":48,"_95":-5,"_96":-7,"_73":185,"_98":186},{"_32":172,"_13":173,"_81":174,"_83":134,"_85":57,"_86":175,"_88":26,"_34":176,"_40":87,"_91":137,"_93":177,"_64":48,"_95":-5,"_96":-7,"_73":178,"_98":179},"d9ad9cc0-2fad-11f1-b476-42dde27851f2","bookmarklet.html","019d5522-2575-73d8-8979-cffc88e0fc5a",33,["D",1775255915295],"\n\n\n \n \n Huddle Bookmarklet\n \n \n\n\n

Huddle Bookmarklet

Add Huddle as a bookmarklet to access it on any webpage without leaving the site. Drag the link below to your bookmarks bar, or follow the steps.

\n\n

Drag the button below to your browser's bookmarks bar

Visit any webpage and click the bookmarklet to open Huddle

\n\n

Drag this to your bookmarks bar:

\n Loading bookmarklet…\n
\n \n \n

The widget floats over any page. Drag the top bar to reposition it. Resize from the bottom-right corner. Works on touch screens too.

\n\n \n

\n ← Back to Huddle\n

\n\n\n\n",[141,173],"24e62a3ca13e1056db89ef92bfb7fde70e9534b2690e2b5a0c6f00d57f921728","8053fa20-2f17-11f1-b11e-42dde27851f2","967f4e6a-2f14-11f1-9e52-42dde27851f2",27,["D",1775191340883],"\n\n\n \n \n Huddle Bookmarklet\n \n \n\n\n

Huddle Bookmarklet

Add Huddle as a bookmarklet to access it on any webpage without leaving the site. Drag the link below to your bookmarks bar, or follow the steps.

\n\n

Drag the button below to your browser's bookmarks bar

Visit any webpage and click the bookmarklet to open Huddle

\n\n

Drag this to your bookmarks bar:

\n Loading bookmarklet…\n
\n

The widget floats over any page. Drag the top bar to reposition it. Resize from the bottom-right corner. Works on touch screens too.

\n\n \n

\n ← Back to Huddle\n

\n\n\n\n",[141,173],"86a923461e2f8a7546440de1e435e416b28c9f6cdadafc8816ed8843d693de46",["D",1775249794287],"legacyEnvVars","httpPrivacy","description","Huddle - real time messaging app","imageUrl","userId","019d5521-a043-725d-858e-dfe310b3b157","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","019d5521-a043-725d-858e-e2df5e345721","tursoName","994b3d302f9f11f1a43c42dde27851f2","tursoHostname","994b3d302f9f11f1a43c42dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789518676100],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_228":224},"org",{"_11":12,"_222":-5,"_223":224,"_193":194,"_225":226,"_227":48},"branch","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzNCcmFnZTZsT2RDQVBEMlRjUExQSXJwZHFabyJ9","tier","free","canRestrictVals","profileImageUrl","","adoptOrgId",{"_32":58,"_13":14,"_34":366,"_46":-5,"_188":48,"_49":50,"_189":50,"_190":191,"_192":-5,"_193":194,"_195":-5,"_196":48,"_197":-5,"_198":-5,"_199":22,"_53":200,"_201":202,"_203":204,"_205":367,"_207":-5,"_208":209,"_210":209,"_211":212,"_213":212,"_214":212,"_215":209,"_216":209,"_217":368,"_219":369,"_221":370,"_47":48},"tree",[299,302,306,310,311,312],"files",[299,300,301,302,303,304,305,306,307,308,309,310,311,312],"counts",{"_289":22,"_290":90,"_291":22,"_292":293,"_294":295},"contents",[256,257,258,259,260,261],"upstreamProject",{"_32":39,"_13":14,"_190":191,"_192":-5,"_49":50,"_217":254},"upstreamBranch",{"_32":33,"_34":252,"_36":253,"_13":16,"_38":39,"_40":41,"_42":-5,"_43":-5,"_44":45,"_46":-5,"_47":48,"_49":50,"_51":52,"_53":54,"_55":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1775189208983],["D",1775246817412],{"_11":52,"_228":255},"https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzNCcGJic3pycTdUWllzMmNIY1RvRDJ3Y0dPZCJ9",{"_32":284,"_13":285,"_81":286,"_83":-5,"_85":57,"_86":90,"_88":26,"_34":287,"_40":22,"_91":279,"_93":-5,"_64":48,"_95":-5,"_73":288},{"_32":281,"_13":141,"_81":134,"_83":-5,"_85":57,"_86":90,"_88":26,"_34":282,"_40":22,"_91":279,"_93":-5,"_64":48,"_95":-5,"_73":283},{"_32":277,"_13":100,"_81":84,"_83":-5,"_85":57,"_86":90,"_88":26,"_34":278,"_40":22,"_91":279,"_93":-5,"_64":48,"_95":-5,"_73":280},{"_32":271,"_13":272,"_81":273,"_83":-5,"_85":57,"_86":90,"_88":26,"_34":274,"_40":22,"_91":268,"_93":275,"_64":48,"_95":-5,"_73":276},{"_32":264,"_13":265,"_81":266,"_83":-5,"_85":57,"_86":90,"_88":26,"_34":267,"_40":22,"_91":268,"_93":269,"_64":48,"_95":-5,"_73":270},{"_32":112,"_13":109,"_81":113,"_83":-5,"_85":57,"_86":20,"_88":26,"_34":262,"_40":115,"_91":116,"_93":117,"_64":48,"_95":-5,"_73":263},["D",1775256172752],[109],"9962f6c8-2f9f-11f1-a43c-42dde27851f2","cron-mentions.ts","019d5522-2576-7248-b3a7-98f5e570ddf8",["D",1775249794287],"interval","// Huddle — @mention email digest (runs every 6 hours)\nimport { getUnsentMentions, markMentionsSent } from \"./database/queries.ts\";\nimport { sendEmail, mentionEmailHtml } from \"./shared/email.ts\";\n\nexport default async function (_interval: Interval) {\n const mentions = await getUnsentMentions();\n if (!mentions.length) return;\n\n // Group by mentioned user\n const byUser = new Map }>();\n for (const m of mentions) {\n const uid = Number(m.mentioned_user_id);\n if (!byUser.has(uid)) {\n byUser.set(uid, { email: m.email as string, username: m.mentioned_username as string, mentions: [] });\n }\n byUser.get(uid)!.mentions.push({ sender_username: m.sender_username as string, room_name: m.room_name as string });\n }\n\n const sentIds: number[] = [];\n for (const [, data] of byUser) {\n const subject = `Huddle – You were mentioned ${data.mentions.length > 1 ? data.mentions.length + \" times\" : \"\"}`.trim();\n const html = mentionEmailHtml(data.mentions);\n const ok = await sendEmail(data.email, subject, html);\n if (ok) {\n const ids = mentions.filter((m) => m.email === data.email).map((m) => Number(m.id));\n sentIds.push(...ids);\n }\n }\n\n if (sentIds.length) await markMentionsSent(sentIds);\n console.log(`Mention digest: ${byUser.size} users, ${sentIds.length} mentions sent`);\n}\n",[265],"9962ec8c-2f9f-11f1-a43c-42dde27851f2","cron-cleanup.ts","019d5522-2576-7248-b3a7-9661a272e2d7",["D",1775249794287],"// Huddle — blob cleanup (runs every 6 hours, removes chat file blobs older than 12h)\n// Profile avatars are NEVER deleted — they persist indefinitely\nimport { blob } from \"https://esm.town/v/std/blob\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport default async function (_interval: Interval) {\n const cutoff = new Date(Date.now() - 12 * 3600 * 1000).toISOString();\n\n // Remove file blobs from messages older than 12h (chat uploads only, NOT avatars)\n const expiredMsgs = await sqlite.execute({\n sql: `SELECT blob_key FROM messages WHERE blob_key IS NOT NULL AND created_at < ?`,\n args: [cutoff],\n });\n let deleted = 0;\n for (const row of expiredMsgs.rows) {\n if (row.blob_key) {\n try { await blob.delete(row.blob_key as string); deleted++; } catch {}\n }\n }\n\n console.log(`Blob cleanup: removed ${deleted} expired chat file blobs (avatars are permanent)`);\n}\n",[272],"9962eb2e-2f9f-11f1-a43c-42dde27851f2",["D",1775249794287],"directory",[100],"9962cffe-2f9f-11f1-a43c-42dde27851f2",["D",1775249794287],[141],"99614648-2f9f-11f1-a43c-42dde27851f2","database","019d5522-2575-73d8-8979-c87322a06c3b",["D",1775249794287],[285],"pulls","branches","forks","envVars",{"_296":22,"_298":22},"connections",{"_296":22,"_297":22},"count","unfilledCount","emptyCount",{"_32":284,"_13":285,"_81":286,"_83":-5,"_85":57,"_86":90,"_88":26,"_34":363,"_40":22,"_91":279,"_93":-5,"_64":48,"_95":-5,"_96":364,"_73":365},{"_32":356,"_13":357,"_81":358,"_83":286,"_85":57,"_86":90,"_88":26,"_34":359,"_40":22,"_91":92,"_93":360,"_64":48,"_95":-5,"_96":361,"_73":362},{"_32":349,"_13":350,"_81":351,"_83":286,"_85":57,"_86":90,"_88":26,"_34":352,"_40":22,"_91":92,"_93":353,"_64":48,"_95":-5,"_96":354,"_73":355},{"_32":281,"_13":141,"_81":134,"_83":-5,"_85":57,"_86":90,"_88":26,"_34":346,"_40":22,"_91":279,"_93":-5,"_64":48,"_95":-5,"_96":347,"_73":348},{"_32":172,"_13":173,"_81":174,"_83":134,"_85":57,"_86":175,"_88":26,"_34":176,"_40":87,"_91":137,"_93":177,"_64":48,"_95":-5,"_96":344,"_73":345},{"_32":153,"_13":154,"_81":155,"_83":134,"_85":57,"_86":56,"_88":26,"_34":156,"_40":157,"_91":137,"_93":158,"_64":48,"_95":-5,"_96":342,"_73":343},{"_32":131,"_13":132,"_81":133,"_83":134,"_85":57,"_86":135,"_88":26,"_34":136,"_40":90,"_91":137,"_93":138,"_64":48,"_95":-5,"_96":340,"_73":341},{"_32":277,"_13":100,"_81":84,"_83":-5,"_85":57,"_86":90,"_88":26,"_34":337,"_40":22,"_91":279,"_93":-5,"_64":48,"_95":-5,"_96":338,"_73":339},{"_32":330,"_13":331,"_81":332,"_83":84,"_85":57,"_86":90,"_88":26,"_34":333,"_40":22,"_91":92,"_93":334,"_64":48,"_95":-5,"_96":335,"_73":336},{"_32":323,"_13":324,"_81":325,"_83":84,"_85":57,"_86":90,"_88":26,"_34":326,"_40":22,"_91":92,"_93":327,"_64":48,"_95":-5,"_96":328,"_73":329},{"_32":79,"_13":80,"_81":82,"_83":84,"_85":57,"_86":87,"_88":26,"_34":89,"_40":90,"_91":92,"_93":94,"_64":48,"_95":-5,"_96":321,"_73":322},{"_32":271,"_13":272,"_81":273,"_83":-5,"_85":57,"_86":90,"_88":26,"_34":318,"_40":22,"_91":268,"_93":275,"_64":48,"_95":-5,"_96":319,"_73":320},{"_32":264,"_13":265,"_81":266,"_83":-5,"_85":57,"_86":90,"_88":26,"_34":315,"_40":22,"_91":268,"_93":269,"_64":48,"_95":-5,"_96":316,"_73":317},{"_32":112,"_13":109,"_81":113,"_83":-5,"_85":57,"_86":20,"_88":26,"_34":114,"_40":115,"_91":116,"_93":117,"_64":48,"_95":-5,"_96":313,"_73":314},[],[109],["D",1775249794287],[],[265],["D",1775249794287],[],[272],[],[100,80],"9962d5bc-2f9f-11f1-a43c-42dde27851f2","email.ts","019d5522-2575-73d8-8979-e3cb0130488c",["D",1775249794287],"import { RESEND_API_KEY, APP_NAME } from \"./types.ts\";\n\nconst FROM_EMAIL = `${APP_NAME} `;\n\nexport async function sendEmail(to: string, subject: string, html: string): Promise {\n if (!RESEND_API_KEY) {\n console.warn(\"RESEND_API_KEY not set, skipping email to\", to);\n return false;\n }\n try {\n const res = await fetch(\"https://api.resend.com/emails\", {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${RESEND_API_KEY}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ from: FROM_EMAIL, to, subject, html }),\n });\n if (!res.ok) {\n const err = await res.text();\n console.error(\"Resend error:\", err);\n return false;\n }\n return true;\n } catch (e) {\n console.error(\"Email send failed:\", e);\n return false;\n }\n}\n\nexport function mentionEmailHtml(mentions: Array<{ sender_username: string; room_name: string }>): string {\n const items = mentions\n .map((m) => `

${m.sender_username} mentioned you in ${m.room_name}

`)\n .join(\"\");\n return `\n

Huddle — You were mentioned

You have new mentions in Huddle:

${items}\n

`;\n}\n\nexport function recoveryEmailHtml(password: string): string {\n return `\n

Huddle — Password Recovery

Your Huddle account password is:

${password}

If you did not request this, please change your password immediately after logging in.

`;\n}\n",[],[100,324],"9962d1b6-2f9f-11f1-a43c-42dde27851f2","auth.ts","019d5522-2575-73d8-8979-dd60b302f492",["D",1775249794287],"import bcrypt from \"npm:bcryptjs\";\n\nexport async function hashPassword(password: string): Promise {\n return bcrypt.hash(password, 10);\n}\n\nexport async function verifyPassword(password: string, hash: string): Promise {\n return bcrypt.compare(password, hash);\n}\n\nexport function generateToken(length = 32): string {\n const arr = new Uint8Array(length);\n crypto.getRandomValues(arr);\n return Array.from(arr).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n",[],[100,331],["D",1775249794287],[307,308,309],[100],[],[141,132],[],[141,154],[],[141,173],["D",1775249794287],[303,304,305],[141],"99611060-2f9f-11f1-a43c-42dde27851f2","queries.ts","019d5522-2575-73d8-8979-c6f1f422ff36",["D",1775249794287],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// ---- Users ----\nexport async function createUser(username: string, email: string, passwordHash: string, passwordPlain: string) {\n const result = await sqlite.execute({\n sql: `INSERT INTO users (username, email, password_hash, password_plain) VALUES (?, ?, ?, ?)`,\n args: [username, email, passwordHash, passwordPlain],\n });\n return result.lastInsertRowid;\n}\n\nexport async function getUserByUsername(username: string) {\n const r = await sqlite.execute({\n sql: `SELECT * FROM users WHERE username = ? COLLATE NOCASE`,\n args: [username],\n });\n return r.rows[0] ?? null;\n}\n\nexport async function getUserByEmail(email: string) {\n const r = await sqlite.execute({\n sql: `SELECT * FROM users WHERE email = ? COLLATE NOCASE`,\n args: [email],\n });\n return r.rows[0] ?? null;\n}\n\nexport async function getUserById(id: number) {\n const r = await sqlite.execute({ sql: `SELECT * FROM users WHERE id = ?`, args: [id] });\n return r.rows[0] ?? null;\n}\n\nexport async function updateUserAvatar(userId: number, blobKey: string) {\n await sqlite.execute({ sql: `UPDATE users SET avatar_blob_key = ? WHERE id = ?`, args: [blobKey, userId] });\n}\n\nexport async function setGhostMode(userId: number, ghost: boolean) {\n await sqlite.execute({ sql: `UPDATE users SET ghost_mode = ? WHERE id = ?`, args: [ghost ? 1 : 0, userId] });\n}\n\nexport async function banUser(userId: number, expiresAt: string | null, message: string | null) {\n await sqlite.execute({\n sql: `UPDATE users SET is_banned = 1, ban_expires_at = ?, ban_message = ? WHERE id = ?`,\n args: [expiresAt, message, userId],\n });\n}\n\nexport async function unbanUser(userId: number) {\n await sqlite.execute({ sql: `UPDATE users SET is_banned = 0, ban_expires_at = NULL, ban_message = NULL WHERE id = ?`, args: [userId] });\n}\n\nexport async function muteUser(userId: number, expiresAt: string) {\n await sqlite.execute({\n sql: `UPDATE users SET is_muted = 1, mute_expires_at = ? WHERE id = ?`,\n args: [expiresAt, userId],\n });\n}\n\nexport async function unmuteUser(userId: number) {\n await sqlite.execute({ sql: `UPDATE users SET is_muted = 0, mute_expires_at = NULL WHERE id = ?`, args: [userId] });\n}\n\nexport async function getPublicUsers() {\n const r = await sqlite.execute(`SELECT id, username, avatar_blob_key, ghost_mode FROM users WHERE ghost_mode = 0 ORDER BY username ASC`);\n return r.rows;\n}\n\nexport async function getAllUsers() {\n const r = await sqlite.execute(`SELECT id, username, email, ghost_mode, is_banned, ban_expires_at, ban_message, is_muted, mute_expires_at, avatar_blob_key, created_at FROM users ORDER BY username ASC`);\n return r.rows;\n}\n\n// ---- Sessions ----\nexport async function createSession(sessionId: string, userId: number) {\n await sqlite.execute({ sql: `INSERT INTO sessions (id, user_id) VALUES (?, ?)`, args: [sessionId, userId] });\n}\n\nexport async function getSession(sessionId: string) {\n const r = await sqlite.execute({ sql: `SELECT * FROM sessions WHERE id = ?`, args: [sessionId] });\n return r.rows[0] ?? null;\n}\n\nexport async function deleteSession(sessionId: string) {\n await sqlite.execute({ sql: `DELETE FROM sessions WHERE id = ?`, args: [sessionId] });\n}\n\n// ---- API Tokens (for cross-origin bookmarklet) ----\nexport async function createApiToken(token: string, userId: number) {\n await sqlite.execute({ sql: `INSERT OR REPLACE INTO api_tokens (token, user_id) VALUES (?, ?)`, args: [token, userId] });\n}\n\nexport async function getApiToken(token: string) {\n const r = await sqlite.execute({ sql: `SELECT * FROM api_tokens WHERE token = ?`, args: [token] });\n return r.rows[0] ?? null;\n}\n\nexport async function deleteApiToken(token: string) {\n await sqlite.execute({ sql: `DELETE FROM api_tokens WHERE token = ?`, args: [token] });\n}\n\n// ---- Rooms ----\nexport async function createRoom(name: string, createdBy: number) {\n const r = await sqlite.execute({\n sql: `INSERT INTO rooms (name, type, created_by) VALUES (?, 'group', ?)`,\n args: [name, createdBy],\n });\n const roomId = Number(r.lastInsertRowid);\n await sqlite.execute({ sql: `INSERT INTO room_members (room_id, user_id, role) VALUES (?, ?, 'owner')`, args: [roomId, createdBy] });\n return roomId;\n}\n\nexport async function getRoomById(roomId: number) {\n const r = await sqlite.execute({ sql: `SELECT * FROM rooms WHERE id = ?`, args: [roomId] });\n return r.rows[0] ?? null;\n}\n\nexport async function deleteRoom(roomId: number) {\n await sqlite.execute({ sql: `DELETE FROM room_members WHERE room_id = ?`, args: [roomId] });\n await sqlite.execute({ sql: `DELETE FROM room_invites WHERE room_id = ?`, args: [roomId] });\n await sqlite.execute({ sql: `DELETE FROM messages WHERE room_id = ?`, args: [roomId] });\n await sqlite.execute({ sql: `DELETE FROM rooms WHERE id = ?`, args: [roomId] });\n}\n\nexport async function getRoomsForUser(userId: number) {\n const r = await sqlite.execute({\n sql: `SELECT r.* FROM rooms r\n LEFT JOIN room_members rm ON r.id = rm.room_id AND rm.user_id = ?\n WHERE r.type = 'world' OR rm.user_id = ?\n ORDER BY r.id ASC`,\n args: [userId, userId],\n });\n return r.rows;\n}\n\nexport async function getAllRooms() {\n const r = await sqlite.execute(`SELECT * FROM rooms ORDER BY id ASC`);\n return r.rows;\n}\n\nexport async function getRoomMembers(roomId: number) {\n const r = await sqlite.execute({\n sql: `SELECT u.id, u.username, u.avatar_blob_key, rm.role FROM users u\n JOIN room_members rm ON u.id = rm.user_id WHERE rm.room_id = ?\n ORDER BY rm.role DESC, u.username ASC`,\n args: [roomId],\n });\n return r.rows;\n}\n\nexport async function addRoomMember(roomId: number, userId: number, role = \"member\") {\n await sqlite.execute({\n sql: `INSERT OR IGNORE INTO room_members (room_id, user_id, role) VALUES (?, ?, ?)`,\n args: [roomId, userId, role],\n });\n}\n\nexport async function removeRoomMember(roomId: number, userId: number) {\n await sqlite.execute({ sql: `DELETE FROM room_members WHERE room_id = ? AND user_id = ?`, args: [roomId, userId] });\n}\n\nexport async function isRoomMember(roomId: number, userId: number): Promise {\n const r = await sqlite.execute({\n sql: `SELECT 1 FROM room_members WHERE room_id = ? AND user_id = ?`,\n args: [roomId, userId],\n });\n return r.rows.length > 0;\n}\n\nexport async function inviteToRoom(roomId: number, invitedUserId: number, invitedBy: number) {\n await sqlite.execute({\n sql: `INSERT OR IGNORE INTO room_invites (room_id, invited_user_id, invited_by) VALUES (?, ?, ?)`,\n args: [roomId, invitedUserId, invitedBy],\n });\n await addRoomMember(roomId, invitedUserId);\n}\n\n// ---- Messages ----\nexport async function createMessage(roomId: number, userId: number, content: string | null, blobKey?: string, blobName?: string, blobSize?: number) {\n const r = await sqlite.execute({\n sql: `INSERT INTO messages (room_id, user_id, content, blob_key, blob_name, blob_size) VALUES (?, ?, ?, ?, ?, ?)`,\n args: [roomId, userId, content, blobKey ?? null, blobName ?? null, blobSize ?? null],\n });\n // Prune to 450 messages per room\n await sqlite.execute({\n sql: `DELETE FROM messages WHERE room_id = ? AND id NOT IN (SELECT id FROM messages WHERE room_id = ? ORDER BY id DESC LIMIT 450)`,\n args: [roomId, roomId],\n });\n return r.lastInsertRowid;\n}\n\nexport async function getMessages(roomId: number, since?: number) {\n if (since) {\n const r = await sqlite.execute({\n sql: `SELECT m.*, u.username, u.avatar_blob_key FROM messages m JOIN users u ON m.user_id = u.id WHERE m.room_id = ? AND m.id > ? ORDER BY m.id ASC`,\n args: [roomId, since],\n });\n return r.rows;\n }\n const r = await sqlite.execute({\n sql: `SELECT m.*, u.username, u.avatar_blob_key FROM messages m JOIN users u ON m.user_id = u.id WHERE m.room_id = ? ORDER BY m.id ASC LIMIT 450`,\n args: [roomId],\n });\n return r.rows;\n}\n\n// ---- Block ----\nexport async function blockUser(userId: number, blockedUserId: number) {\n await sqlite.execute({\n sql: `INSERT OR IGNORE INTO blocked_users (user_id, blocked_user_id) VALUES (?, ?)`,\n args: [userId, blockedUserId],\n });\n}\n\nexport async function unblockUser(userId: number, blockedUserId: number) {\n await sqlite.execute({\n sql: `DELETE FROM blocked_users WHERE user_id = ? AND blocked_user_id = ?`,\n args: [userId, blockedUserId],\n });\n}\n\nexport async function getBlockedUsers(userId: number) {\n const r = await sqlite.execute({ sql: `SELECT blocked_user_id FROM blocked_users WHERE user_id = ?`, args: [userId] });\n return r.rows.map((row) => Number(row.blocked_user_id));\n}\n\n// ---- Mentions ----\nexport async function queueMention(mentionedUserId: number, senderUsername: string, roomName: string) {\n await sqlite.execute({\n sql: `INSERT INTO mention_queue (mentioned_user_id, sender_username, room_name) VALUES (?, ?, ?)`,\n args: [mentionedUserId, senderUsername, roomName],\n });\n}\n\nexport async function getUnsentMentions() {\n const r = await sqlite.execute(`SELECT mq.*, u.email, u.username as mentioned_username FROM mention_queue mq JOIN users u ON mq.mentioned_user_id = u.id WHERE mq.sent = 0`);\n return r.rows;\n}\n\nexport async function markMentionsSent(ids: number[]) {\n if (ids.length === 0) return;\n const placeholders = ids.map(() => \"?\").join(\",\");\n await sqlite.execute({ sql: `UPDATE mention_queue SET sent = 1 WHERE id IN (${placeholders})`, args: ids });\n}\n\nexport async function updateUserPassword(userId: number, passwordHash: string, passwordPlain: string) {\n await sqlite.execute({ sql: `UPDATE users SET password_hash = ?, password_plain = ? WHERE id = ?`, args: [passwordHash, passwordPlain, userId] });\n}\n",[],[285,350],"9960dd98-2f9f-11f1-a43c-42dde27851f2","migrations.ts","019d5522-2575-73d8-8979-c16605aade8a",["D",1775249794287],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function runMigrations() {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT NOT NULL UNIQUE COLLATE NOCASE,\n email TEXT NOT NULL UNIQUE COLLATE NOCASE,\n password_hash TEXT NOT NULL,\n password_plain TEXT,\n avatar_blob_key TEXT,\n ghost_mode INTEGER DEFAULT 0,\n is_banned INTEGER DEFAULT 0,\n ban_expires_at TEXT,\n ban_message TEXT,\n is_muted INTEGER DEFAULT 0,\n mute_expires_at TEXT,\n created_at TEXT DEFAULT (datetime('now'))\n )\n `);\n\n // Add columns that may not exist yet (safe migrations)\n try { await sqlite.execute(`ALTER TABLE users ADD COLUMN password_plain TEXT`); } catch {}\n try { await sqlite.execute(`ALTER TABLE users ADD COLUMN ban_message TEXT`); } catch {}\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sessions (\n id TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n created_at TEXT DEFAULT (datetime('now')),\n FOREIGN KEY (user_id) REFERENCES users(id)\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS api_tokens (\n token TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n created_at TEXT DEFAULT (datetime('now')),\n FOREIGN KEY (user_id) REFERENCES users(id)\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS rooms (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n type TEXT NOT NULL DEFAULT 'group',\n created_by INTEGER,\n created_at TEXT DEFAULT (datetime('now'))\n )\n `);\n\n await sqlite.execute(`\n INSERT OR IGNORE INTO rooms (id, name, type) VALUES (1, 'World Chat', 'world')\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS room_members (\n room_id INTEGER NOT NULL,\n user_id INTEGER NOT NULL,\n role TEXT DEFAULT 'member',\n joined_at TEXT DEFAULT (datetime('now')),\n PRIMARY KEY (room_id, user_id),\n FOREIGN KEY (room_id) REFERENCES rooms(id),\n FOREIGN KEY (user_id) REFERENCES users(id)\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS room_invites (\n room_id INTEGER NOT NULL,\n invited_user_id INTEGER NOT NULL,\n invited_by INTEGER NOT NULL,\n created_at TEXT DEFAULT (datetime('now')),\n PRIMARY KEY (room_id, invited_user_id)\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS messages (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n room_id INTEGER NOT NULL,\n user_id INTEGER NOT NULL,\n content TEXT,\n blob_key TEXT,\n blob_name TEXT,\n blob_size INTEGER,\n created_at TEXT DEFAULT (datetime('now')),\n FOREIGN KEY (room_id) REFERENCES rooms(id),\n FOREIGN KEY (user_id) REFERENCES users(id)\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS blocked_users (\n user_id INTEGER NOT NULL,\n blocked_user_id INTEGER NOT NULL,\n created_at TEXT DEFAULT (datetime('now')),\n PRIMARY KEY (user_id, blocked_user_id)\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS mention_queue (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n mentioned_user_id INTEGER NOT NULL,\n sender_username TEXT NOT NULL,\n room_name TEXT NOT NULL,\n created_at TEXT DEFAULT (datetime('now')),\n sent INTEGER DEFAULT 0\n )\n `);\n}\n",[],[285,357],["D",1775249794287],[300,301],[285],["D",1775249794287],["D",1789518676100],{"_11":12,"_228":224},{"_11":12,"_222":-5,"_223":224,"_193":194,"_225":226,"_227":48},{"_40":56,"_13":16,"_32":57,"_38":58,"_42":33,"_43":41,"_59":50,"_60":39,"_61":54,"_55":14,"_51":12},"ctx",{"_217":-5,"_249":404,"_405":406,"_407":408,"_409":48,"_410":48,"_411":48,"_412":26,"_413":-5,"_414":-7,"_415":-7,"_416":22,"_417":48,"_418":48,"_419":-5,"_420":48,"_421":48,"_422":48,"_423":-5},"ENV",{"_375":376,"_377":378,"_379":16,"_380":381,"_382":383,"_384":385,"_386":387,"_388":389,"_390":391,"_392":393,"_394":395,"_396":397,"_398":399,"_400":401,"_402":403},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Compare

Mergeitsspectralic/mainintomjk090811/main

frontend/bookmarklet.html+36-1

frontend/index.html+42-29

frontend/style.css+1-1

Hindex.ts+39-4

shared/types.ts+1-0