Cuadrado Mágico

Panel de administrador

\n\n \n\n \n\n \n `;\n}\n\n// ---------- Router ----------\n\nexport default async function (req: Request): Promise {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, PATCH, DELETE, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, x-admin-password\",\n };\n if (req.method === \"OPTIONS\") return new Response(null, { headers: cors });\n\n const url = new URL(req.url);\n const path = url.pathname;\n const json = (obj: unknown, status = 200) =>\n new Response(JSON.stringify(obj), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...cors },\n });\n const html = (str: string) =>\n new Response(str, {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\", ...cors },\n });\n\n if (path === \"/admin\" && req.method === \"GET\") return html(paginaAdmin());\n\n // --- Admin API (protegida por contraseña) ---\n if (path.startsWith(\"/api/admin/\")) {\n const pass = req.headers.get(\"x-admin-password\");\n if (!pass || pass !== Deno.env.get(\"ADMIN_PASSWORD\")) {\n return json({ error: \"No autorizado\" }, 401);\n }\n\n if (path === \"/api/admin/usuarios\" && req.method === \"GET\") {\n return json(await getUsuarios());\n }\n if (path === \"/api/admin/usuarios\" && req.method === \"POST\") {\n const { nombre } = await req.json();\n const usuarios = await getUsuarios();\n const nuevo: Usuario = {\n token: generarToken(),\n nombre,\n activo: true,\n creado: new Date().toISOString(),\n };\n usuarios.push(nuevo);\n await saveUsuarios(usuarios);\n return json(nuevo);\n }\n const userMatch = path.match(/^\\/api\\/admin\\/usuarios\\/([\\w-]+)$/);\n if (userMatch && req.method === \"PATCH\") {\n const token = userMatch[1];\n const cambios = await req.json();\n const usuarios = await getUsuarios();\n const idx = usuarios.findIndex((u) => u.token === token);\n if (idx === -1) return json({ error: \"No encontrado\" }, 404);\n usuarios[idx] = { ...usuarios[idx], ...cambios };\n await saveUsuarios(usuarios);\n return json(usuarios[idx]);\n }\n if (userMatch && req.method === \"DELETE\") {\n const token = userMatch[1];\n const usuarios = (await getUsuarios()).filter((u) => u.token !== token);\n await saveUsuarios(usuarios);\n return json({ ok: true });\n }\n }\n\n // --- Panel API (el propio usuario, sin contraseña, protegido por el token) ---\n const panelMatch = path.match(/^\\/api\\/panel\\/([\\w-]+)$/);\n if (panelMatch) {\n const token = panelMatch[1];\n const usuarios = await getUsuarios();\n const usuario = usuarios.find((u) => u.token === token);\n if (!usuario) return json({ error: \"Token inválido\" }, 404);\n\n if (req.method === \"GET\") {\n return json(conSalidasCompletas(conEntradasCompletas(usuario)));\n }\n if (req.method === \"POST\") {\n const cambios = await req.json();\n const idx = usuarios.findIndex((u) => u.token === token);\n usuarios[idx] = {\n ...usuarios[idx],\n entradas: cambios.entradas !== undefined\n ? cambios.entradas\n : usuarios[idx].entradas,\n salidas: cambios.salidas !== undefined\n ? cambios.salidas\n : usuarios[idx].salidas,\n pausado: cambios.pausado !== undefined\n ? cambios.pausado\n : usuarios[idx].pausado,\n };\n await saveUsuarios(usuarios);\n return json(conSalidasCompletas(conEntradasCompletas(usuarios[idx])));\n }\n }\n\n return json({ error: \"Ruta no encontrada\" }, 404);\n}","deleted","label",[115],"pulls",1,"forks","envVars",{"_137":131,"_139":54},"connections",{"_137":54,"_138":54},"count","unfilledCount","emptyCount",{"_20":114,"_13":115,"_116":48,"_117":-5,"_118":21,"_119":30,"_120":50,"_22":141,"_29":122,"_123":124,"_125":126,"_127":38,"_128":-5,"_142":143,"_91":144},["D",1789490317483],"children",[],[115],["D",1789488175773],{"_11":12,"_89":85},{"_11":12,"_82":83,"_84":85,"_45":46,"_86":87,"_88":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_77":-5,"_78":-5,"_79":-5,"_80":14,"_81":12},"ctx",{"_70":-5,"_110":182,"_183":184,"_185":186,"_187":38,"_188":38,"_189":38,"_190":50,"_191":-5,"_192":-7,"_193":-7,"_194":54,"_195":38,"_196":38,"_197":-5,"_198":38,"_199":38,"_200":38,"_201":-5},"ENV",{"_153":154,"_155":156,"_157":26,"_158":159,"_160":161,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Cuadrado Mágico

Nuevo comprador

Compradores

Branches1

Branches
1