Cuadrado Mágico

Panel de administrador

\n\n \n\n \n\n \n `;\n}\n\n// ---------- Router ----------\n\nexport default async function (req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, PATCH, DELETE, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, x-admin-password\",\n };\n if (req.method === \"OPTIONS\") return new Response(null, { headers: cors });\n\n const url = new URL(req.url);\n const path = url.pathname;\n const json = (obj: unknown, status = 200) =>\n new Response(JSON.stringify(obj), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...cors },\n });\n const html = (str: string) =>\n new Response(str, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\", ...cors },\n });\n\n if (path === \"/admin\" && req.method === \"GET\") return html(paginaAdmin());\n\n // --- Admin API (protegida por contraseña) ---\n if (path.startsWith(\"/api/admin/\")) {\n const pass = req.headers.get(\"x-admin-password\");\n if (!pass || pass !== Deno.env.get(\"ADMIN_PASSWORD\")) {\n return json({ error: \"No autorizado\" }, 401);\n }\n\n if (path === \"/api/admin/usuarios\" && req.method === \"GET\") {\n return json(await getUsuarios());\n }\n if (path === \"/api/admin/usuarios\" && req.method === \"POST\") {\n const { nombre } = await req.json();\n const usuarios = await getUsuarios();\n const nuevo: Usuario = {\n token: generarToken(),\n nombre,\n activo: true,\n creado: new Date().toISOString(),\n };\n usuarios.push(nuevo);\n await saveUsuarios(usuarios);\n return json(nuevo);\n }\n const userMatch = path.match(/^\\/api\\/admin\\/usuarios\\/([\\w-]+)$/);\n if (userMatch && req.method === \"PATCH\") {\n const token = userMatch[1];\n const cambios = await req.json();\n const usuarios = await getUsuarios();\n const idx = usuarios.findIndex((u) => u.token === token);\n if (idx === -1) return json({ error: \"No encontrado\" }, 404);\n usuarios[idx] = { ...usuarios[idx], ...cambios };\n await saveUsuarios(usuarios);\n return json(usuarios[idx]);\n }\n if (userMatch && req.method === \"DELETE\") {\n const token = userMatch[1];\n const usuarios = (await getUsuarios()).filter((u) => u.token !== token);\n await saveUsuarios(usuarios);\n return json({ ok: true });\n }\n }\n\n // --- Panel API (el propio usuario, sin contraseña, protegido por el token) ---\n const panelMatch = path.match(/^\\/api\\/panel\\/([\\w-]+)$/);\n if (panelMatch) {\n const token = panelMatch[1];\n const usuarios = await getUsuarios();\n const usuario = usuarios.find((u) => u.token === token);\n if (!usuario) return json({ error: \"Token inválido\" }, 404);\n\n if (req.method === \"GET\") {\n return json(conSalidasCompletas(conEntradasCompletas(usuario)));\n }\n if (req.method === \"POST\") {\n const cambios = await req.json();\n const idx = usuarios.findIndex((u) => u.token === token);\n usuarios[idx] = {\n ...usuarios[idx],\n entradas: cambios.entradas !== undefined\n ? cambios.entradas\n : usuarios[idx].entradas,\n salidas: cambios.salidas !== undefined\n ? cambios.salidas\n : usuarios[idx].salidas,\n pausado: cambios.pausado !== undefined\n ? cambios.pausado\n : usuarios[idx].pausado,\n };\n await saveUsuarios(usuarios);\n return json(conSalidasCompletas(conEntradasCompletas(usuarios[idx])));\n }\n }\n\n return json({ error: \"Ruta no encontrada\" }, 404);\n}","label",[62],"pulls","branches","forks","envVars",{"_184":38,"_186":20},"connections",{"_184":20,"_185":20},"count","unfilledCount","emptyCount",{"_31":169,"_13":62,"_60":61,"_41":-5,"_33":34,"_170":93,"_171":110,"_35":188,"_37":86,"_63":83,"_173":174,"_65":24,"_175":-5,"_189":190,"_147":191},["D",1789490317483],"children",[],[62],["D",1789488175773],{"_11":12,"_146":68},{"_11":12,"_141":142,"_67":68,"_25":66,"_143":144,"_145":24},{"_37":93,"_13":16,"_31":34,"_133":98,"_134":-5,"_135":-5,"_136":-5,"_137":-5,"_138":-5,"_139":14,"_140":12},"ctx",{"_49":-5,"_165":229,"_230":231,"_232":233,"_234":24,"_235":24,"_236":24,"_237":110,"_238":-5,"_239":-7,"_240":-7,"_241":20,"_242":24,"_243":24,"_244":-5,"_245":24,"_246":24,"_247":24,"_248":-5},"ENV",{"_200":201,"_202":203,"_204":16,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Cuadrado Mágico

Nuevo comprador

Compradores

History