My Notes

\n \n\n`;\n```\n\n#### 2. Create Counter Logic\n```javascript\n// Add after auth object (line ~163)\nconst counter = {\n async increment() {\n const key = `${APP_NAMESPACE}_counter`;\n const current = await blob.getJSON(key) || { count: 0 };\n current.count++;\n await blob.setJSON(key, current);\n return current.count;\n },\n \n async get() {\n const key = `${APP_NAMESPACE}_counter`;\n const data = await blob.getJSON(key) || { count: 0 };\n return data.count;\n }\n};\n```\n\n#### 3. Update Main Route\n```javascript\n// In the GET \"/\" route (line ~491)\napp.get(\"/\", async (c) => {\n const html = await getCurrentHTML();\n const count = await counter.increment(); // Add this\n \n // Inject count into HTML\n const updatedHtml = html.replace(\n 'Views: 0',\n `Views: ${count}`\n );\n \n // ... rest of route\n return c.html(updatedHtml);\n});\n```\n\n### Common Customizations\n\n#### Change Default Template\n```javascript\n// Line ~22 - Modify DEFAULT_HTML\nconst DEFAULT_HTML = `\n \n`;\n```\n\n#### Add New Route\n```javascript\n// Add after other routes (line ~600+)\napp.get(\"/api/stats\", requireAdmin, handleAsync(async (c) => {\n const versions = await getVersionHistory();\n return c.json({\n versions: versions.length,\n lastUpdated: new Date()\n });\n}));\n```\n\n#### Customize Authentication\n```javascript\n// Modify token expiry (line ~64)\nconst expiry = Date.now() + (30 * 60 * 1000); // 30 mins instead of 15\n```\n\n#### Add Webhook Support\n```javascript\n// New endpoint for external services\napp.post(\"/webhook\", handleAsync(async (c) => {\n const payload = await c.req.json();\n \n // Verify webhook secret\n const secret = c.req.header('X-Webhook-Secret');\n if (secret !== Deno.env.get('WEBHOOK_SECRET')) {\n return respond.unauthorized(c);\n }\n \n // Process webhook\n console.log('Webhook received:', payload);\n return respond.success(c, 'Webhook processed');\n}));\n```\n\n### Key Files & Functions\n\n| Component | Purpose | Line # |\n|-----------|---------|--------|\n| `STORAGE_KEYS` | All storage key patterns | 37-43 |\n| `auth` object | Authentication logic | 60-162 |\n| `TEMPLATES` | HTML templates | 165-286 |\n| `respond` | Response helpers | 289-331 |\n| `handleAsync` | Error handling | 334-358 |\n| `requireAdmin` | Auth middleware | 460-486 |\n| Routes | All endpoints | 490-651 |\n\n### Environment Variables\n| Variable | Required | Description |\n|----------|----------|-------------|\n| `ADMIN_EMAIL` | ✅ Yes | Your email for admin access |\n| `APP_NAMESPACE` | No | Storage namespace (default: \"default\") |\n| `DEBUG` | No | Enable debug logs (\"true\"/\"false\") |\n\n## 📚 API Reference\n\n### Public Endpoints\n\n- `GET /` - Main application (shows your HTML)\n- `GET /auth/edit` - Login page\n- `POST /auth/edit` - Send magic link\n- `GET /auth/verify?token=...` - Verify magic link\n- `GET /auth/logout` - Logout\n\n### Admin-Only Endpoints\n\n- `POST /save/app` - Save HTML (called by Hyperclay)\n- `GET /versions` - View version history\n- `GET /reset-dangerous` - Reset to default template ⚠️\n\n## 🐛 Troubleshooting\n\n### Can't Sign In?\n1. Check `ADMIN_EMAIL` matches your email exactly\n2. Check spam folder for magic link\n3. Magic links expire in 15 minutes - try again\n\n### Changes Not Saving?\n1. Make sure you're signed in (check for edit controls)\n2. Press Ctrl+S or wait for auto-save\n3. Check browser console for errors\n\n### Edit Mode Not Working?\n1. Clear browser cookies and sign in again\n2. Make sure Hyperclay script is loading (check console)\n3. Try a different browser\n\n### Storage Limits\n- **Free**: 10MB total\n- **Pro**: 1GB total\n\n### Debug Mode\nSet `DEBUG=true` in environment variables to see detailed logs in Val.town.\n\n## 🔗 Resources\n\n### Documentation\n- [Val.town Docs](https://docs.val.town)\n- [Hono.js](https://hono.dev)\n- [Hyperclay](https://hyperclay.com)\n- [Val.town + Hono Guide](./valtown.md)\n\n### Example Projects\n\n- **Personal Site**: Portfolio with editable bio and projects\n- **Landing Page**: Product page with instant updates \n- **Documentation**: Maintain docs directly in browser\n- **Blog**: Write posts without a CMS\n- **Dashboard**: Data visualization with live editing\n\n## License\n\nOpen source - use freely on Val.town.\n\n---\n\n**Need more details?** See [valtown.md](./valtown.md) for advanced Val.town and Hono.js documentation.",[],[182],{"_102":190,"_95":191,"_152":192,"_154":-5,"_155":137,"_156":193,"_158":159,"_104":194,"_99":195,"_162":163,"_164":196,"_166":22,"_167":-5,"_168":197,"_98":198},"b9741a2e-8a71-11f0-9e7c-0224a6c84d84","README.md","666b111c-89a3-11f0-84c4-0224a6c84d84",87,["D",1757088149565],20,"# Hyperclay Single Tenant\n\nA self-updating web application with visual editing, authentication, and version control. Build and edit your website directly in the browser - no code required.\n\n## 🚀 Quick Setup Guide\n\n### 1. Remix This Val\nClick the remix button in Val.town to create your own copy of this project.\n\n### 2. Set Environment Variables\nIn your Val.town settings, add these environment variables:\n- `ADMIN_EMAIL` - Your email address (required for authentication)\n- `APP_NAMESPACE` - Optional namespace for storage (defaults to \"default\")\n\n### 3. Deploy\nThe val is already configured as an HTTP trigger. Just save and it's live at your Val.town URL.\n\n### 4. Test Public Access\nVisit your Val.town URL (e.g., `https://yourusername-yourval.web.val.run`) - you should see the Hyperclay starter template in read-only mode.\n\n### 5. Authenticate as Admin\n1. Go to `/auth/edit` (e.g., `https://yourusername-yourval.web.val.run/auth/edit`)\n2. Enter your admin email address\n3. Check your email for the magic link\n4. Click the magic link to authenticate\n\n### 6. Start Editing\nAfter authentication, return to your main URL. You should now see:\n- Edit controls and buttons\n- Contenteditable areas become editable\n- Auto-save functionality (Ctrl+S)\n- Access to version history at `/versions`\n\n### 7. Share Your App\nYour public URL is now ready to share! Others will see the read-only version while you can edit by authenticating.\n\n## 🎨 What is Hyperclay?\n\n[Hyperclay](https://hyperclay.com/) is a platform for hosting and editing HTML applications. It provides code editing capabilities, multi-tenant support, and instant deployment - think of it as \"Google Docs meets web hosting.\" Users can edit content directly in the browser without touching code.\n\n### How Hyperclay Works\n\n1. **Hosting Platform**: Hyperclay hosts your HTML applications with built-in persistence\n2. **Visual Editing**: Authorized users can edit content directly in the browser\n3. **Multi-Tenant Support**: Build apps that support multiple users/organizations\n4. **Instant Updates**: Changes are live immediately - no deployment needed\n5. **Version Control**: Automatic versioning and history tracking\n\n### This Integration\n\nThis Val.town app provides a single-tenant implementation of Hyperclay so anyone can experience an HTML app with 0 effort:\n- **Self-hosted**: Runs on Val.town's infrastructure, but can be run anywhere\n- **Single Admin**: One admin user per HTML App vs Hyperclay's multi-tenant support\n- **Custom Auth**: Email-based authentication instead of Hyperclay's built-in auth\n- **Val.town Storage**: Uses Val.town's blob storage for persistence\n\n### Editable Elements\n```html\n\n

\n Click to edit this text\n

\n\n\n

Format me

Bold, italic, lists, etc.

\n\n\n

\n```\n\n## 💡 What Can You Build? \n\nHere are some ideas to get you started:\n\n### Personal Website\nCreate your portfolio or personal site. Edit your bio, update projects, change styling - all from your browser.\n\n### Landing Page\nBuild product landing pages that you can update instantly. Change headlines, update pricing, test different CTAs.\n\n### Documentation Site\nMaintain docs that stay current. Fix typos immediately, add new sections on the fly.\n\n### Blog\nWrite and publish posts directly on your site. No CMS needed.\n\n### Interactive Prototype\nBuild and iterate on designs in real-time. Perfect for demos and user testing.\n\n## 🌐 Val.town Basics\n\nVal.town is a cloud platform for running JavaScript/TypeScript code instantly.\n\n### Key Concepts\n\n- **Vals**: Units of code that run in the cloud\n- **HTTP Vals**: Web endpoints (like this app)\n- **Automatic Hosting**: Every val gets a public URL\n- **Built-in Services**: Storage, email, cron jobs\n- **No Build Step**: Just save and it's deployed\n\n### Your App URL\n```\nhttps://[username]-[valname].web.val.run\n```\n\n### Storage\nVal.town provides built-in blob storage:\n- Free: 10MB\n- Pro: 1GB\n\n## Troubleshooting\n\n### Common Issues\n1. **Can't authenticate**: Check `ADMIN_EMAIL` environment variable matches exactly\n2. **Magic link not received**: Check spam folder, verify email service is working\n3. **Magic link expired**: Links expire after 15 minutes, request a new one\n4. **Changes not saving**: Verify you're authenticated (check browser cookies for `session`)\n5. **Version history empty**: Versions are only created after first save\n6. **Edit mode not working**: Ensure Hyperclay.js is loading (check browser console)\n\n### Debug Steps\n1. **Enable debug logging**: Set `DEBUG=true` in environment variables\n2. Check browser cookies for `session` and `isAdminOfCurrentResource=true`\n3. Verify network requests to `/save/app` are successful\n4. Test authentication flow by visiting `/auth/edit`\n5. Check Val.town logs for server-side errors (especially with DEBUG=true)\n6. Verify `ADMIN_EMAIL` environment variable is set correctly\n\n## License\n\nOpen source - use freely on Val.town.\n\n---\n\n**Need help?** Check out [DEV_GUIDE.md](./DEV_GUIDE.md) for development documentation or [valtown.md](./valtown.md) for Val.town platform details.",[],[191],{"_102":200,"_95":201,"_152":202,"_154":-5,"_155":137,"_156":136,"_158":159,"_104":203,"_99":204,"_162":205,"_164":206,"_166":22,"_167":96,"_168":207,"_98":208},"75a7ff22-8a94-11f0-9ad3-0224a6c84d84","index.ts","4fbee394-89a3-11f0-be4f-0224a6c84d84",["D",1757103068194],63,"http","import { Hono } from \"npm:hono\";\nimport { deleteCookie, getCookie, setCookie } from \"npm:hono/cookie\";\nimport { blob } from \"https://esm.town/v/std/blob\";\nimport { email } from \"https://esm.town/v/std/email\";\n\n// Environment configuration\nconst ADMIN_EMAIL = Deno.env.get(\"ADMIN_EMAIL\") || \"your-email@example.com\";\nconst APP_NAMESPACE = Deno.env.get(\"APP_NAMESPACE\") || \"default\";\nconst DEBUG = Deno.env.get(\"DEBUG\") === \"true\";\n\n// Debug logging utility\nconst debugLog = (message: string, data?: any) => {\n if (DEBUG) {\n console.log(\n `[DEBUG] ${message}`,\n data ? JSON.stringify(data, null, 2) : \"\",\n );\n }\n};\n\n// Default HTML template with Hyperclay integration\nconst DEFAULT_HTML = `\n\n\n \n \n\n\n

My Notes

\n

\n \n\n`;\n\n// Storage keys - single source of truth\nconst STORAGE_KEYS = {\n app: `${APP_NAMESPACE}_app`,\n version: (n: number) => `${APP_NAMESPACE}_app_version_${n}`,\n versionCount: `${APP_NAMESPACE}_app_version_count`,\n token: (token: string) => `${APP_NAMESPACE}_auth_token_${token}`,\n session: (id: string) => `${APP_NAMESPACE}_session_${id}`,\n};\n\n// Helper function to read blob data consistently\nconst readBlob = async (key: string): Promise => {\n try {\n const response = await blob.get(key);\n if (!response) return null;\n if (response instanceof Response) return await response.text();\n if (typeof response === \"string\") return response;\n return null;\n } catch (error) {\n debugLog(\"Error reading blob\", { key, error: error.message });\n return null;\n }\n};\n\n// Auth operations grouped into a single namespace\nconst auth = {\n generateToken: (): string => crypto.randomUUID(),\n\n async storeToken(token: string, email: string): Promise {\n const expiry = Date.now() + (15 * 60 * 1000); // 15 minutes\n debugLog(\"Storing auth token\", {\n token: token.substring(0, 8) + \"...\",\n email,\n expiry: new Date(expiry),\n });\n await blob.setJSON(STORAGE_KEYS.token(token), { email, expiry });\n },\n\n async verifyToken(token: string): Promise {\n try {\n debugLog(\"Verifying auth token\", { token: token.substring(0, 8) + \"...\" });\n const data = await blob.getJSON(STORAGE_KEYS.token(token));\n debugLog(\"Auth token data retrieved\", {\n hasData: !!data,\n email: data?.email,\n expiry: data?.expiry ? new Date(data.expiry) : null,\n });\n\n if (!data || !data.email || !data.expiry) {\n debugLog(\"Auth token invalid - missing data\");\n return null;\n }\n\n if (Date.now() > data.expiry) {\n debugLog(\"Auth token expired\", {\n expiry: new Date(data.expiry),\n now: new Date(),\n });\n await blob.delete(STORAGE_KEYS.token(token));\n return null;\n }\n\n // Token is valid, delete it (one-time use)\n debugLog(\"Auth token valid, consuming token\", { email: data.email });\n await blob.delete(STORAGE_KEYS.token(token));\n return data.email;\n } catch (error) {\n debugLog(\"Error verifying auth token\", { error: error.message });\n return null;\n }\n },\n\n async createSession(email: string): Promise {\n const sessionId = crypto.randomUUID();\n const expiry = Date.now() + (30 * 24 * 60 * 60 * 1000); // 30 days\n debugLog(\"Creating session\", {\n sessionId: sessionId.substring(0, 8) + \"...\",\n email,\n expiry: new Date(expiry),\n });\n await blob.setJSON(STORAGE_KEYS.session(sessionId), { email, expiry });\n return sessionId;\n },\n\n async verifySession(sessionId: string): Promise {\n try {\n debugLog(\"Verifying session\", {\n sessionId: sessionId.substring(0, 8) + \"...\",\n });\n const data = await blob.getJSON(STORAGE_KEYS.session(sessionId));\n debugLog(\"Session data retrieved\", {\n hasData: !!data,\n email: data?.email,\n expiry: data?.expiry ? new Date(data.expiry) : null,\n });\n\n if (!data || !data.email || !data.expiry) {\n debugLog(\"Session invalid - missing data\");\n return null;\n }\n\n if (Date.now() > data.expiry) {\n debugLog(\"Session expired\", {\n expiry: new Date(data.expiry),\n now: new Date(),\n });\n await blob.delete(STORAGE_KEYS.session(sessionId));\n return null;\n }\n\n // Extend session\n const newExpiry = Date.now() + (30 * 24 * 60 * 60 * 1000);\n debugLog(\"Extending session\", {\n email: data.email,\n newExpiry: new Date(newExpiry),\n });\n await blob.setJSON(STORAGE_KEYS.session(sessionId), {\n email: data.email,\n expiry: newExpiry,\n });\n\n return data.email;\n } catch (error) {\n debugLog(\"Error verifying session\", { error: error.message });\n return null;\n }\n },\n};\n\n// HTML Templates\nconst TEMPLATES = {\n loginForm: (error?: string) => `\n\n\n \n \n Sign In\n \n\n\n

Sign In

\n ${error ? `

${error}

` : ''}\n \n

← Back to app

\n\n`,\n\n checkEmail: (email: string) => `\n\n\n \n \n Check Your Email\n \n\n\n

Check Your Email

\n A magic link has been sent to ${email}. Click the link in your email to sign in.\n

The link will expire in 15 minutes.

← Back to app

\n\n`,\n\n invalidToken: () => `\n\n\n \n \n Invalid Link\n \n\n\n

Invalid or Expired Link

\n This magic link is invalid or has expired. Please try signing in again.\n

← Back to app

\n\n`,\n\n versionHistory: (versions: Array<{ version: number; html: string }>) => {\n let html = `\n\n\n \n \n Version History\n \n\n\n ← Back to App\n

Version History

`;\n\n if (versions.length === 0) {\n html += \"

No versions found.

\";\n } else {\n for (const { version, html: versionHtml } of versions) {\n html += `\n

Version ${version}

${versionHtml.replace(//g, \">\")}

`;\n }\n }\n\n html += `\n\n`;\n return html;\n },\n};\n\n// Response helper functions\nconst respond = {\n error: (c: any, msg: string, status = 400) =>\n c.json({ msg, msgType: \"error\" }, status),\n \n success: (c: any, msg: string) =>\n c.json({ msg, msgType: \"success\" }),\n \n unauthorized: (c: any) =>\n c.json({ msg: \"Unauthorized - admin access required\", msgType: \"error\" }, 401),\n \n setSessionCookie: (c: any, sessionId: string) => {\n const expires = new Date(Date.now() + 30 * 24 * 60 * 60 * 1000);\n setCookie(c, \"session\", sessionId, {\n path: \"/\",\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n expires,\n });\n },\n \n setAdminCookies: (c: any) => {\n const expires = new Date(Date.now() + 30 * 24 * 60 * 60 * 1000);\n const opts = { path: \"/\", secure: true, sameSite: \"Lax\", expires };\n setCookie(c, \"currentResource\", \"app\", opts);\n setCookie(c, \"isAdminOfCurrentResource\", \"true\", opts);\n },\n \n clearAuthCookies: (c: any) => {\n const opts = { path: \"/\", secure: true, sameSite: \"Lax\" };\n deleteCookie(c, \"session\", { ...opts, httpOnly: true });\n deleteCookie(c, \"currentResource\", opts);\n deleteCookie(c, \"isAdminOfCurrentResource\", opts);\n },\n \n setMessageCookie: (c: any, msg: string, type?: string) => {\n const opts = { path: \"/\", secure: true, sameSite: \"Lax\" };\n setCookie(c, \"msg\", msg, opts);\n if (type) {\n setCookie(c, \"msgType\", type, opts);\n }\n },\n};\n\n// Async handler wrapper with error handling\nconst handleAsync = (handler: Function) => async (c: any, next?: any) => {\n try {\n return await handler(c, next);\n } catch (error) {\n console.error(`Error in ${c.req.path}:`, error);\n debugLog(\"Route error\", { \n path: c.req.path, \n method: c.req.method,\n error: error.message \n });\n \n if (error.message.includes(\"Unauthorized\")) {\n return respond.unauthorized(c);\n }\n \n if (error.message.includes(\"Empty HTML\")) {\n return respond.error(c, error.message, 400);\n }\n \n return respond.error(c, \n DEBUG ? error.message : \"An error occurred\", \n 500\n );\n }\n};\n\nconst sendMagicLink = async (\n userEmail: string,\n token: string,\n baseUrl: string,\n): Promise => {\n const magicLink = `${baseUrl}/auth/verify?token=${token}`;\n\n await email({\n to: userEmail,\n subject: \"Sign in to your Hyperclay app\",\n html: `\n

Sign in to your app

Click the link below to sign in:

Or copy and paste this link: ${magicLink}

This link will expire in 15 minutes.

\n `,\n });\n};\n\n// HTML utilities\nconst getCurrentHTML = async (): Promise => {\n debugLog(\"Loading HTML from storage\", { key: STORAGE_KEYS.app });\n const html = await readBlob(STORAGE_KEYS.app);\n \n if (!html) {\n debugLog(\"No HTML found in storage, using default\");\n return DEFAULT_HTML;\n }\n \n debugLog(\"Successfully loaded HTML from storage\", {\n length: html.length,\n preview: html.substring(0, 100) + \"...\",\n });\n return html;\n};\n\nconst saveHTML = async (html: string): Promise => {\n try {\n // Save current version\n await blob.set(STORAGE_KEYS.app, html);\n\n // Save versioned copy\n let versionCount = 0;\n const countStr = await readBlob(STORAGE_KEYS.versionCount);\n if (countStr) {\n versionCount = parseInt(countStr, 10);\n }\n\n const newVersion = versionCount + 1;\n await blob.set(STORAGE_KEYS.version(newVersion), html);\n await blob.set(STORAGE_KEYS.versionCount, newVersion.toString());\n } catch (error) {\n console.error(\"Error saving HTML:\", error);\n throw new Error(\"Failed to save document\");\n }\n};\n\nconst getVersionHistory = async (): Promise<\n Array<{ version: number; html: string }>\n> => {\n try {\n const countStr = await readBlob(STORAGE_KEYS.versionCount);\n const versionCount = countStr ? parseInt(countStr, 10) : 0;\n\n const versions: Array<{ version: number; html: string }> = [];\n\n for (let i = 1; i <= versionCount; i++) {\n const html = await readBlob(STORAGE_KEYS.version(i));\n if (html) {\n versions.push({ version: i, html });\n }\n }\n\n return versions.reverse(); // Most recent first\n } catch (error) {\n console.error(\"Error loading version history:\", error);\n return [];\n }\n};\n\n// Create Hono app\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err) => Promise.reject(err));\n\n// Request logging middleware\napp.use(\"*\", async (c, next) => {\n debugLog(\"Incoming request\", {\n method: c.req.method,\n path: c.req.path,\n hasAuth: !!getCookie(c, \"session\"),\n userAgent: c.req.header(\"User-Agent\"),\n });\n\n await next();\n});\n\n// Middleware to check admin status\nconst requireAdmin = handleAsync(async (c, next) => {\n const sessionId = getCookie(c, \"session\");\n debugLog(\"Admin middleware check\", {\n sessionId: sessionId ? sessionId.substring(0, 8) + \"...\" : null,\n });\n\n if (!sessionId) {\n debugLog(\"No session ID found in cookies\");\n return respond.unauthorized(c);\n }\n\n const email = await auth.verifySession(sessionId);\n const isUserAdmin = email === ADMIN_EMAIL;\n debugLog(\"Admin check result\", {\n email,\n adminEmail: ADMIN_EMAIL,\n isAdmin: isUserAdmin,\n });\n\n if (!isUserAdmin) {\n debugLog(\"User is not admin\");\n return respond.unauthorized(c);\n }\n\n c.set(\"adminEmail\", email);\n await next();\n});\n\n// Routes\n\n// Serve main HTML document\napp.get(\"/\", async (c) => {\n debugLog(\"Serving main HTML document\");\n const html = await getCurrentHTML();\n debugLog(\"Retrieved HTML content\", {\n htmlLength: html.length,\n isDefault: html === DEFAULT_HTML,\n htmlPreview: html.substring(0, 200) + \"...\",\n });\n\n // Check if user is admin and set Hyperclay cookies accordingly\n const sessionId = getCookie(c, \"session\");\n let isUserAdmin = false;\n\n if (sessionId) {\n const email = await auth.verifySession(sessionId);\n isUserAdmin = email === ADMIN_EMAIL;\n }\n\n debugLog(\"User admin status for main page\", { isUserAdmin });\n\n if (isUserAdmin) {\n debugLog(\"Setting Hyperclay admin cookies server-side\");\n respond.setAdminCookies(c);\n } else {\n debugLog(\"User is not admin, not setting Hyperclay cookies\");\n }\n\n // Add cache-busting headers to ensure fresh content\n c.header(\"Cache-Control\", \"no-cache, no-store, must-revalidate\");\n c.header(\"Pragma\", \"no-cache\");\n c.header(\"Expires\", \"0\");\n\n return c.html(html);\n});\n\n// Auth flow - show email form\napp.get(\"/auth/edit\", (c) => {\n return c.html(TEMPLATES.loginForm());\n});\n\n// Auth flow - handle email submission\napp.post(\"/auth/edit\", handleAsync(async (c) => {\n const formData = await c.req.formData();\n const userEmail = formData.get(\"email\")?.toString();\n debugLog(\"Auth email submission\", { userEmail, adminEmail: ADMIN_EMAIL });\n\n if (!userEmail || userEmail !== ADMIN_EMAIL) {\n debugLog(\"Invalid email for auth\", { userEmail, adminEmail: ADMIN_EMAIL });\n return c.html(TEMPLATES.loginForm(\"Invalid email address. Only the admin email can sign in.\"));\n }\n\n // Generate and send magic link\n const token = auth.generateToken();\n debugLog(\"Generated magic link token\", {\n token: token.substring(0, 8) + \"...\",\n userEmail,\n });\n await auth.storeToken(token, userEmail);\n await sendMagicLink(userEmail, token, c.req.url.split(\"/auth\")[0]);\n debugLog(\"Magic link sent\", { userEmail });\n\n return c.html(TEMPLATES.checkEmail(userEmail));\n}));\n\n// Verify magic link token\napp.get(\"/auth/verify\", handleAsync(async (c) => {\n const token = c.req.query(\"token\");\n debugLog(\"Magic link verification attempt\", {\n token: token ? token.substring(0, 8) + \"...\" : null,\n });\n\n if (!token) {\n debugLog(\"No token provided in magic link\");\n return c.html(TEMPLATES.invalidToken());\n }\n\n const email = await auth.verifyToken(token);\n debugLog(\"Magic link token verification result\", {\n email,\n adminEmail: ADMIN_EMAIL,\n });\n\n if (!email || email !== ADMIN_EMAIL) {\n return c.html(TEMPLATES.invalidToken());\n }\n\n // Create session and redirect\n const sessionId = await auth.createSession(email);\n debugLog(\"Creating session and redirecting\", {\n sessionId: sessionId.substring(0, 8) + \"...\",\n email,\n });\n\n respond.setSessionCookie(c, sessionId);\n return c.redirect(\"/\");\n}));\n\n// Logout - clear session and admin cookies\napp.get(\"/auth/logout\", (c) => {\n respond.clearAuthCookies(c);\n return c.redirect(\"/\");\n});\n\n// Save endpoint - requires admin session\napp.post(\"/save/app\", requireAdmin, handleAsync(async (c) => {\n debugLog(\"Save endpoint accessed\");\n\n const html = await c.req.text();\n debugLog(\"Save request details\", {\n htmlLength: html.length,\n hasContent: !!html.trim(),\n });\n\n if (!html.trim()) {\n debugLog(\"Empty HTML content rejected\");\n throw new Error(\"Empty HTML content not allowed\");\n }\n\n await saveHTML(html);\n debugLog(\"HTML saved successfully\");\n return respond.success(c, \"Saved\");\n}));\n\n// Version history endpoint - requires admin session\napp.get(\"/versions\", requireAdmin, handleAsync(async (c) => {\n const versions = await getVersionHistory();\n return c.html(TEMPLATES.versionHistory(versions));\n}));\n\n// Reset endpoint - DANGEROUS - requires admin session\napp.get(\"/reset-dangerous\", requireAdmin, handleAsync(async (c) => {\n debugLog(\"Reset endpoint accessed\");\n\n // Clear the main HTML document by resetting to default\n await blob.set(STORAGE_KEYS.app, DEFAULT_HTML);\n\n // Clear all version history\n let versionCount = 0;\n const countStr = await readBlob(STORAGE_KEYS.versionCount);\n if (countStr) {\n versionCount = parseInt(countStr, 10);\n }\n\n // Delete all version entries\n for (let i = 1; i <= versionCount; i++) {\n await blob.delete(STORAGE_KEYS.version(i)).catch(() => {\n // Skip if version doesn't exist\n });\n }\n\n // Reset version counter\n await blob.delete(STORAGE_KEYS.versionCount);\n\n debugLog(\"HTML state reset successfully\", {\n clearedVersions: versionCount,\n });\n\n // Set message cookie and redirect\n respond.setMessageCookie(c, \"HTML Reset\");\n return c.redirect(\"/\");\n}));\n\n// This is the entry point for HTTP vals\nexport default app.fetch;",[],[201],"files",[149,171,180,189,199],"counts",{"_213":32,"_214":215,"_216":215,"_217":218},"pulls","branches",1,"forks","envVars",3,"contents",[221,224,227,230,233],{"_102":150,"_95":151,"_152":153,"_154":-5,"_155":137,"_156":157,"_158":159,"_104":222,"_99":161,"_162":163,"_164":165,"_166":22,"_167":-5,"_98":223},["D",1757088125175],[151],{"_102":172,"_95":173,"_152":174,"_154":-5,"_155":137,"_156":175,"_158":159,"_104":225,"_99":32,"_162":163,"_164":177,"_166":22,"_167":-5,"_98":226},["D",1757010196867],[173],{"_102":181,"_95":182,"_152":183,"_154":-5,"_155":137,"_156":184,"_158":159,"_104":228,"_99":32,"_162":163,"_164":186,"_166":22,"_167":-5,"_98":229},["D",1757103068155],[182],{"_102":190,"_95":191,"_152":192,"_154":-5,"_155":137,"_156":193,"_158":159,"_104":231,"_99":195,"_162":163,"_164":196,"_166":22,"_167":-5,"_98":232},["D",1757088149565],[191],{"_102":200,"_95":201,"_152":202,"_154":-5,"_155":137,"_156":136,"_158":159,"_104":234,"_99":204,"_162":205,"_164":206,"_166":22,"_167":96,"_98":235},["D",1757103068194],[201],"upstreamProject","upstreamBranch","emptyEnvVars","isNew","flags",[],"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_93":94,"_95":96,"_97":43,"_99":-7,"_98":72,"_100":244,"_147":249,"_209":265,"_163":-7,"_219":266,"_277":-5,"_278":22,"_279":-5,"_280":-5,"_281":-5,"_282":283},{"_102":103,"_95":96,"_104":245,"_106":-5,"_107":22,"_108":109,"_110":111,"_112":-5,"_14":113,"_114":-5,"_115":22,"_116":-5,"_117":32,"_16":118,"_119":120,"_121":120,"_122":123,"_124":123,"_125":123,"_126":120,"_127":120,"_23":246,"_131":247,"_134":248,"_146":22},["D",1756989916174],{"_93":94,"_129":130},{"_93":94,"_133":130},{"_99":136,"_95":43,"_102":137,"_138":103,"_139":-5,"_140":-5,"_141":-5,"_142":-5,"_143":-5,"_144":96,"_145":94},[250,253,256,259,262],{"_102":150,"_95":151,"_152":153,"_154":-5,"_155":137,"_156":157,"_158":159,"_104":160,"_99":161,"_162":163,"_164":165,"_166":22,"_167":-5,"_168":251,"_98":252},[],[151],{"_102":172,"_95":173,"_152":174,"_154":-5,"_155":137,"_156":175,"_158":159,"_104":176,"_99":32,"_162":163,"_164":177,"_166":22,"_167":-5,"_168":254,"_98":255},[],[173],{"_102":181,"_95":182,"_152":183,"_154":-5,"_155":137,"_156":184,"_158":159,"_104":185,"_99":32,"_162":163,"_164":186,"_166":22,"_167":-5,"_168":257,"_98":258},[],[182],{"_102":190,"_95":191,"_152":192,"_154":-5,"_155":137,"_156":193,"_158":159,"_104":194,"_99":195,"_162":163,"_164":196,"_166":22,"_167":-5,"_168":260,"_98":261},[],[191],{"_102":200,"_95":201,"_152":202,"_154":-5,"_155":137,"_156":136,"_158":159,"_104":203,"_99":204,"_162":205,"_164":206,"_166":22,"_167":96,"_168":263,"_98":264},[],[201],[250,253,256,259,262],[267,269,271,273,275],{"_102":150,"_95":151,"_152":153,"_154":-5,"_155":137,"_156":157,"_158":159,"_104":222,"_99":161,"_162":163,"_164":165,"_166":22,"_167":-5,"_98":268},[151],{"_102":172,"_95":173,"_152":174,"_154":-5,"_155":137,"_156":175,"_158":159,"_104":225,"_99":32,"_162":163,"_164":177,"_166":22,"_167":-5,"_98":270},[173],{"_102":181,"_95":182,"_152":183,"_154":-5,"_155":137,"_156":184,"_158":159,"_104":228,"_99":32,"_162":163,"_164":186,"_166":22,"_167":-5,"_98":272},[182],{"_102":190,"_95":191,"_152":192,"_154":-5,"_155":137,"_156":193,"_158":159,"_104":231,"_99":195,"_162":163,"_164":196,"_166":22,"_167":-5,"_98":274},[191],{"_102":200,"_95":201,"_152":202,"_154":-5,"_155":137,"_156":136,"_158":159,"_104":234,"_99":204,"_162":205,"_164":206,"_166":22,"_167":96,"_98":276},[201],"upstream","showCompareCallout","pull","ahead","behind","templates",[],"actionData","errors"]