⚔️ Fantasy MUD - A Multiplayer Text Adventure

\n \n\n\n",[],[252,244],"gui","9e7d4964-51e2-11f1-98b3-ee650bb23af1",["D",1779016918851],[198],[252],["D",1779017067041],[],[18,81],["D",1779016275794],[],[18,66],["D",1779016275794],[195,196],[18],"4ab65686-51e2-11f1-b629-ee650bb23af1","routes.ts","4ab65726-51e2-11f1-b629-ee650bb23af1","6a3e912d-a902-419a-a234-b3dc68aa3bf8",5,["D",1779016778276],"// All API routes for the Fantasy MUD - authenticated via session or API key\nimport { Hono } from \"npm:hono@4\";\nimport { authenticate, requireAuth, register, login, logout } from \"../lib/auth.ts\";\nimport * as engine from \"../lib/game-engine.ts\";\n\nconst api = new Hono();\n\n// Helper to get active character for the account\nasync function getActiveChar(accountId: number, charId?: number) {\n if (charId) {\n const char = await engine.getCharacterFull(charId) as any;\n if (!char || char.account_id !== accountId) throw new Error(\"Character not found or not yours\");\n return char;\n }\n const chars = await engine.getCharactersByAccount(accountId);\n if (chars.length === 0) throw new Error(\"No characters found. Create one first.\");\n return chars[0];\n}\n\nfunction json(data: any, status = 200) {\n return new Response(JSON.stringify(data), { status, headers: { \"Content-Type\": \"application/json\" } });\n}\n\nfunction err(message: string, status = 400) {\n return json({ error: message }, status);\n}\n\n// ==================== AUTH ====================\napi.post(\"/auth/register\", async (c) => {\n try {\n const body = await c.req.json();\n const account = await register(body.username, body.password, body.email);\n return json({ ok: true, account });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/auth/login\", async (c) => {\n try {\n const body = await c.req.json();\n const { sessionId, account } = await login(body.username, body.password);\n const res = json({ ok: true, account });\n // Set cookie for browser clients\n const headers = new Headers(res.headers);\n headers.set(\"Set-Cookie\", `session=${sessionId}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${7 * 24 * 3600}`);\n return new Response(res.body, { status: 200, headers });\n } catch (e: any) { return err(e.message, 401); }\n});\n\napi.post(\"/auth/logout\", async (c) => {\n const cookies = c.req.header(\"cookie\") || \"\";\n const match = cookies.match(/session=([^;]+)/);\n if (match) await logout(match[1]);\n const headers = new Headers();\n headers.set(\"Set-Cookie\", \"session=; Path=/; HttpOnly; Max-Age=0\");\n headers.set(\"Content-Type\", \"application/json\");\n return new Response(JSON.stringify({ ok: true }), { status: 200, headers });\n});\n\napi.get(\"/auth/me\", async (c) => {\n const account = await authenticate(c.req.raw);\n if (!account) return err(\"Not logged in\", 401);\n return json({ ok: true, account });\n});\n\n// ==================== REFERENCE DATA (public) ====================\napi.get(\"/data/races\", async () => json(await engine.getRaces()));\napi.get(\"/data/classes\", async () => json(await engine.getClasses()));\napi.get(\"/data/magic-schools\", async () => json(await engine.getMagicSchools()));\napi.get(\"/data/spells\", async () => json(await engine.getSpells()));\napi.get(\"/data/guilds\", async () => json(await engine.getAllGuilds()));\napi.get(\"/data/quests\", async () => json(await engine.getAllQuests()));\napi.get(\"/data/continents\", async () => json(await engine.getContinents()));\napi.get(\"/data/countries\", async (c) => {\n const contId = c.req.query(\"continent_id\");\n return json(await engine.getCountries(contId ? parseInt(contId) : undefined));\n});\napi.get(\"/data/islands\", async () => json(await engine.getIslands()));\napi.get(\"/data/calendar\", async () => json(await engine.getCalendar()));\n\n// ==================== CHARACTER ====================\napi.post(\"/characters\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await engine.createCharacter(account.id, body);\n return json({ ok: true, character: char });\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/characters\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const chars = await engine.getCharactersByAccount(account.id);\n return json(chars);\n } catch (e: any) { return err(e.message, 401); }\n});\n\napi.get(\"/characters/:id\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const char = await getActiveChar(account.id, parseInt(c.req.param(\"id\")));\n return json(char);\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== GAME ACTIONS ====================\napi.post(\"/game/look\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json().catch(() => ({}));\n const char = await getActiveChar(account.id, body.character_id);\n const location = await engine.look(char.id);\n return json({ ok: true, location });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/move\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.move(char.id, body.direction);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/attack\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.attack(char.id, body.target_type, body.target_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/cast\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.castSpell(char.id, body.spell_id, body.target_type, body.target_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== INVENTORY ====================\napi.get(\"/game/inventory/:charId\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const char = await getActiveChar(account.id, parseInt(c.req.param(\"charId\")));\n const inv = await engine.getInventory(char.id);\n return json(inv);\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/equip\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.equipItem(char.id, body.inventory_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== DIALOG ====================\napi.post(\"/game/dialog/start\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const dialog = await engine.startDialog(char.id, body.npc_id);\n return json({ ok: true, dialog });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/dialog/continue\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const dialog = await engine.continueDialog(char.id, body.tree_id, body.node_key);\n return json({ ok: true, dialog });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== SHOPS ====================\napi.post(\"/game/shop/buy\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.buyFromShop(char.id, body.shop_id, body.item_id, body.quantity || 1);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/shop/sell\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.sellToShop(char.id, body.shop_id, body.item_id, body.quantity || 1);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== TRADING ====================\napi.post(\"/game/trade/offer\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.createTradeOffer(char.id, body.to_character_id, body.offered_items || [], body.offered_gold || 0, body.requested_items || [], body.requested_gold || 0);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/trade/respond\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.respondToTrade(body.trade_id, char.id, body.accept);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== RELATIONSHIPS ====================\napi.post(\"/game/gift\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.giveGift(char.id, body.target_id, body.item_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/propose\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.proposeMarriage(char.id, body.target_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== GUILDS ====================\napi.post(\"/game/guild/join\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.joinGuild(char.id, body.guild_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== QUESTS ====================\napi.post(\"/game/quest/accept\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.acceptQuest(char.id, body.quest_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/game/quests/:charId\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const char = await getActiveChar(account.id, parseInt(c.req.param(\"charId\")));\n const quests = await engine.getActiveQuests(char.id);\n return json(quests);\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== FOLLOWERS ====================\napi.post(\"/game/follower/recruit\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.recruitFollower(char.id, body.follower_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/follower/order\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.orderFollower(char.id, body.follower_id, body.order, body.details);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/game/followers/:charId\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const char = await getActiveChar(account.id, parseInt(c.req.param(\"charId\")));\n const followers = await engine.getFollowers(char.id);\n return json(followers);\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== TAMING ====================\napi.post(\"/game/tame\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.tamCreature(char.id, body.spawn_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/game/tamed/:charId\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const char = await getActiveChar(account.id, parseInt(c.req.param(\"charId\")));\n const tamed = await engine.getTamedCreatures(char.id);\n return json(tamed);\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== FARMING ====================\napi.post(\"/game/farm/plant\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.plantCrop(char.id, body.plot_id, body.seed_item_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/farm/water\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.waterCrop(char.id, body.plot_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/farm/harvest\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.harvestCrop(char.id, body.plot_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== CONSTRUCTION ====================\napi.post(\"/game/build\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.startConstruction(char.id, body.location_id || char.location_id, body.project_type, body.name);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== TRAVEL ====================\napi.post(\"/game/travel\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.useTravel(char.id, body.route_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== GAME LOG ====================\napi.get(\"/game/log/:charId\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const char = await getActiveChar(account.id, parseInt(c.req.param(\"charId\")));\n const log = await engine.getGameLog(char.id, parseInt(c.req.query(\"limit\") || \"20\"));\n return json(log);\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== CALENDAR ====================\napi.post(\"/game/advance-day\", async (c) => {\n try {\n await requireAuth(c.req.raw);\n const result = await engine.advanceDay();\n return json({ ok: true, calendar: result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== EXPORT / IMPORT ====================\napi.get(\"/export/character/:charId\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const char = await getActiveChar(account.id, parseInt(c.req.param(\"charId\")));\n const data = await engine.exportCharacter(char.id);\n return json(data);\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/export/world\", async (c) => {\n try {\n await requireAuth(c.req.raw);\n const data = await engine.exportWorld();\n return json(data);\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== SOCIAL (friend requests, messages) ====================\napi.post(\"/social/friend-request\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n await sqlite.execute({\n sql: \"INSERT INTO friend_requests (from_account_id, to_account_id) VALUES (?, ?)\",\n args: [account.id, body.to_account_id],\n });\n return json({ ok: true, message: \"Friend request sent!\" });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/social/friend-request/respond\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const status = body.accept ? \"accepted\" : \"rejected\";\n await sqlite.execute({\n sql: \"UPDATE friend_requests SET status = ? WHERE id = ? AND to_account_id = ?\",\n args: [status, body.request_id, account.id],\n });\n return json({ ok: true, message: `Friend request ${status}` });\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/social/friend-requests\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const result = await sqlite.execute({\n sql: `SELECT fr.*, a.username as from_username FROM friend_requests fr JOIN accounts a ON fr.from_account_id = a.id WHERE fr.to_account_id = ? AND fr.status = 'pending'`,\n args: [account.id],\n });\n return json(result.rows);\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/social/friends\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const result = await sqlite.execute({\n sql: `SELECT a.id, a.username FROM friend_requests fr JOIN accounts a ON (CASE WHEN fr.from_account_id = ? THEN fr.to_account_id ELSE fr.from_account_id END) = a.id WHERE (fr.from_account_id = ? OR fr.to_account_id = ?) AND fr.status = 'accepted'`,\n args: [account.id, account.id, account.id],\n });\n return json(result.rows);\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/social/message\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n // Check if they're friends\n const friends = await sqlite.execute({\n sql: `SELECT id FROM friend_requests WHERE ((from_account_id = ? AND to_account_id = ?) OR (from_account_id = ? AND to_account_id = ?)) AND status = 'accepted'`,\n args: [account.id, body.to_account_id, body.to_account_id, account.id],\n });\n if (friends.rows.length === 0) throw new Error(\"You can only message friends\");\n await sqlite.execute({\n sql: \"INSERT INTO messages (from_account_id, to_account_id, subject, body) VALUES (?, ?, ?, ?)\",\n args: [account.id, body.to_account_id, body.subject || \"\", body.body],\n });\n return json({ ok: true, message: \"Message sent!\" });\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/social/messages\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const result = await sqlite.execute({\n sql: `SELECT m.*, a.username as from_username FROM messages m JOIN accounts a ON m.from_account_id = a.id WHERE m.to_account_id = ? ORDER BY m.created_at DESC LIMIT 50`,\n args: [account.id],\n });\n return json(result.rows);\n } catch (e: any) { return err(e.message); }\n});\n\nexport default api;\n",[],[275,267],"api","4ab6d1e2-51e2-11f1-b629-ee650bb23af1",["D",1779016778276],[193],[275],["D",1779016203251],["D",1789489305251],{"_11":12,"_143":72},{"_11":12,"_139":72,"_71":72,"_31":70,"_140":141,"_142":30},{"_41":84,"_13":16,"_35":38,"_131":93,"_132":-5,"_133":-5,"_134":-5,"_135":-5,"_136":-5,"_137":14,"_138":12},"ctx",{"_54":-5,"_162":318,"_319":320,"_321":322,"_323":30,"_324":30,"_325":30,"_326":24,"_327":-5,"_328":-7,"_329":-7,"_330":26,"_331":30,"_332":30,"_333":-5,"_334":30,"_335":30,"_336":30,"_337":-5},"ENV",{"_289":290,"_291":292,"_293":16,"_294":295,"_296":297,"_298":299,"_300":301,"_302":303,"_304":305,"_306":307,"_308":309,"_310":311,"_312":313,"_314":315,"_316":317},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · db