My Notes

\n \n\n`;\n\n// Storage keys - single source of truth\nconst STORAGE_KEYS = {\n app: `${APP_NAMESPACE}_app`,\n version: (n: number) => `${APP_NAMESPACE}_app_version_${n}`,\n versionCount: `${APP_NAMESPACE}_app_version_count`,\n token: (token: string) => `${APP_NAMESPACE}_auth_token_${token}`,\n session: (id: string) => `${APP_NAMESPACE}_session_${id}`,\n};\n\n// Helper function to read blob data consistently\nconst readBlob = async (key: string): Promise => {\n try {\n const response = await blob.get(key);\n if (!response) return null;\n if (response instanceof Response) return await response.text();\n if (typeof response === \"string\") return response;\n return null;\n } catch (error) {\n debugLog(\"Error reading blob\", { key, error: error.message });\n return null;\n }\n};\n\n// Auth operations grouped into a single namespace\nconst auth = {\n generateToken: (): string => crypto.randomUUID(),\n\n async storeToken(token: string, email: string): Promise {\n const expiry = Date.now() + (15 * 60 * 1000); // 15 minutes\n debugLog(\"Storing auth token\", {\n token: token.substring(0, 8) + \"...\",\n email,\n expiry: new Date(expiry),\n });\n await blob.setJSON(STORAGE_KEYS.token(token), { email, expiry });\n },\n\n async verifyToken(token: string): Promise {\n try {\n debugLog(\"Verifying auth token\", {\n token: token.substring(0, 8) + \"...\",\n });\n const data = await blob.getJSON(STORAGE_KEYS.token(token));\n debugLog(\"Auth token data retrieved\", {\n hasData: !!data,\n email: data?.email,\n expiry: data?.expiry ? new Date(data.expiry) : null,\n });\n\n if (!data || !data.email || !data.expiry) {\n debugLog(\"Auth token invalid - missing data\");\n return null;\n }\n\n if (Date.now() > data.expiry) {\n debugLog(\"Auth token expired\", {\n expiry: new Date(data.expiry),\n now: new Date(),\n });\n await blob.delete(STORAGE_KEYS.token(token));\n return null;\n }\n\n // Token is valid, delete it (one-time use)\n debugLog(\"Auth token valid, consuming token\", { email: data.email });\n await blob.delete(STORAGE_KEYS.token(token));\n return data.email;\n } catch (error) {\n debugLog(\"Error verifying auth token\", { error: error.message });\n return null;\n }\n },\n\n async createSession(email: string): Promise {\n const sessionId = crypto.randomUUID();\n const expiry = Date.now() + (30 * 24 * 60 * 60 * 1000); // 30 days\n debugLog(\"Creating session\", {\n sessionId: sessionId.substring(0, 8) + \"...\",\n email,\n expiry: new Date(expiry),\n });\n await blob.setJSON(STORAGE_KEYS.session(sessionId), { email, expiry });\n return sessionId;\n },\n\n async verifySession(sessionId: string): Promise {\n try {\n debugLog(\"Verifying session\", {\n sessionId: sessionId.substring(0, 8) + \"...\",\n });\n const data = await blob.getJSON(STORAGE_KEYS.session(sessionId));\n debugLog(\"Session data retrieved\", {\n hasData: !!data,\n email: data?.email,\n expiry: data?.expiry ? new Date(data.expiry) : null,\n });\n\n if (!data || !data.email || !data.expiry) {\n debugLog(\"Session invalid - missing data\");\n return null;\n }\n\n if (Date.now() > data.expiry) {\n debugLog(\"Session expired\", {\n expiry: new Date(data.expiry),\n now: new Date(),\n });\n await blob.delete(STORAGE_KEYS.session(sessionId));\n return null;\n }\n\n // Extend session\n const newExpiry = Date.now() + (30 * 24 * 60 * 60 * 1000);\n debugLog(\"Extending session\", {\n email: data.email,\n newExpiry: new Date(newExpiry),\n });\n await blob.setJSON(STORAGE_KEYS.session(sessionId), {\n email: data.email,\n expiry: newExpiry,\n });\n\n return data.email;\n } catch (error) {\n debugLog(\"Error verifying session\", { error: error.message });\n return null;\n }\n },\n};\n\n// HTML Templates\nconst TEMPLATES = {\n loginForm: (error?: string) =>\n `\n\n\n \n \n Sign In\n \n\n\n

Sign In

\n ${error ? `

${error}

` : \"\"}\n \n

← Back to app

\n\n`,\n\n checkEmail: (email: string) =>\n `\n\n\n \n \n Check Your Email\n \n\n\n

Check Your Email

\n A magic link has been sent to ${email}. Click the link in your email to sign in.\n

The link will expire in 15 minutes.

← Back to app

\n\n`,\n\n invalidToken: () =>\n `\n\n\n \n \n Invalid Link\n \n\n\n

Invalid or Expired Link

\n This magic link is invalid or has expired. Please try signing in again.\n

← Back to app

\n\n`,\n\n versionHistory: (versions: Array<{ version: number; html: string }>) => {\n let html = `\n\n\n \n \n Version History\n \n\n\n ← Back to App\n

Version History

`;\n\n if (versions.length === 0) {\n html += \"

No versions found.

\";\n } else {\n for (const { version, html: versionHtml } of versions) {\n html += `\n

Version ${version}

${versionHtml.replace(//g, \">\")}

`;\n }\n }\n\n html += `\n\n`;\n return html;\n },\n};\n\n// Response helper functions\nconst respond = {\n error: (c: any, msg: string, status = 400) =>\n c.json({ msg, msgType: \"error\" }, status),\n\n success: (c: any, msg: string) => c.json({ msg, msgType: \"success\" }),\n\n unauthorized: (c: any) =>\n c.json(\n { msg: \"Unauthorized - admin access required\", msgType: \"error\" },\n 401,\n ),\n\n setSessionCookie: (c: any, sessionId: string) => {\n const expires = new Date(Date.now() + 30 * 24 * 60 * 60 * 1000);\n setCookie(c, \"session\", sessionId, {\n path: \"/\",\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n expires,\n });\n },\n\n setAdminCookies: (c: any) => {\n const expires = new Date(Date.now() + 30 * 24 * 60 * 60 * 1000);\n const opts = { path: \"/\", secure: true, sameSite: \"Lax\", expires };\n setCookie(c, \"currentResource\", \"app\", opts);\n setCookie(c, \"isAdminOfCurrentResource\", \"true\", opts);\n },\n\n clearAuthCookies: (c: any) => {\n const opts = { path: \"/\", secure: true, sameSite: \"Lax\" };\n deleteCookie(c, \"session\", { ...opts, httpOnly: true });\n deleteCookie(c, \"currentResource\", opts);\n deleteCookie(c, \"isAdminOfCurrentResource\", opts);\n },\n\n setMessageCookie: (c: any, msg: string, type?: string) => {\n const opts = { path: \"/\", secure: true, sameSite: \"Lax\" };\n setCookie(c, \"msg\", msg, opts);\n if (type) {\n setCookie(c, \"msgType\", type, opts);\n }\n },\n};\n\n// Async handler wrapper with error handling\nconst handleAsync = (handler: Function) => async (c: any, next?: any) => {\n try {\n return await handler(c, next);\n } catch (error) {\n console.error(`Error in ${c.req.path}:`, error);\n debugLog(\"Route error\", {\n path: c.req.path,\n method: c.req.method,\n error: error.message,\n });\n\n if (error.message.includes(\"Unauthorized\")) {\n return respond.unauthorized(c);\n }\n\n if (error.message.includes(\"Empty HTML\")) {\n return respond.error(c, error.message, 400);\n }\n\n return respond.error(c, DEBUG ? error.message : \"An error occurred\", 500);\n }\n};\n\nconst sendMagicLink = async (\n userEmail: string,\n token: string,\n baseUrl: string,\n): Promise => {\n const magicLink = `${baseUrl}/auth/verify?token=${token}`;\n\n await email({\n to: userEmail,\n subject: \"Sign in to your Hyperclay app\",\n html: `\n

Sign in to your app

Click the link below to sign in:

Or copy and paste this link: ${magicLink}

This link will expire in 15 minutes.

\n `,\n });\n};\n\n// HTML utilities\nconst getCurrentHTML = async (): Promise => {\n debugLog(\"Loading HTML from storage\", { key: STORAGE_KEYS.app });\n const html = await readBlob(STORAGE_KEYS.app);\n\n if (!html) {\n debugLog(\"No HTML found in storage, using default\");\n return DEFAULT_HTML;\n }\n\n debugLog(\"Successfully loaded HTML from storage\", {\n length: html.length,\n preview: html.substring(0, 100) + \"...\",\n });\n return html;\n};\n\nconst saveHTML = async (html: string): Promise => {\n try {\n // Save current version\n await blob.set(STORAGE_KEYS.app, html);\n\n // Save versioned copy\n let versionCount = 0;\n const countStr = await readBlob(STORAGE_KEYS.versionCount);\n if (countStr) {\n versionCount = parseInt(countStr, 10);\n }\n\n const newVersion = versionCount + 1;\n await blob.set(STORAGE_KEYS.version(newVersion), html);\n await blob.set(STORAGE_KEYS.versionCount, newVersion.toString());\n } catch (error) {\n console.error(\"Error saving HTML:\", error);\n throw new Error(\"Failed to save document\");\n }\n};\n\nconst getVersionHistory = async (): Promise<\n Array<{ version: number; html: string }>\n> => {\n try {\n const countStr = await readBlob(STORAGE_KEYS.versionCount);\n const versionCount = countStr ? parseInt(countStr, 10) : 0;\n\n const versions: Array<{ version: number; html: string }> = [];\n\n for (let i = 1; i <= versionCount; i++) {\n const html = await readBlob(STORAGE_KEYS.version(i));\n if (html) {\n versions.push({ version: i, html });\n }\n }\n\n return versions.reverse(); // Most recent first\n } catch (error) {\n console.error(\"Error loading version history:\", error);\n return [];\n }\n};\n\n// Create Hono app\nconst app = new Hono();\n\n// Unwrap Hono errors to see original error details\napp.onError((err) => Promise.reject(err));\n\n// Request logging middleware\napp.use(\"*\", async (c, next) => {\n debugLog(\"Incoming request\", {\n method: c.req.method,\n path: c.req.path,\n hasAuth: !!getCookie(c, \"session\"),\n userAgent: c.req.header(\"User-Agent\"),\n });\n\n await next();\n});\n\n// Middleware to check admin status\nconst requireAdmin = handleAsync(async (c, next) => {\n const sessionId = getCookie(c, \"session\");\n debugLog(\"Admin middleware check\", {\n sessionId: sessionId ? sessionId.substring(0, 8) + \"...\" : null,\n });\n\n if (!sessionId) {\n debugLog(\"No session ID found in cookies\");\n return respond.unauthorized(c);\n }\n\n const email = await auth.verifySession(sessionId);\n const isUserAdmin = email === ADMIN_EMAIL;\n debugLog(\"Admin check result\", {\n email,\n adminEmail: ADMIN_EMAIL,\n isAdmin: isUserAdmin,\n });\n\n if (!isUserAdmin) {\n debugLog(\"User is not admin\");\n return respond.unauthorized(c);\n }\n\n c.set(\"adminEmail\", email);\n await next();\n});\n\n// Routes\n\n// Serve main HTML document\napp.get(\"/\", async (c) => {\n debugLog(\"Serving main HTML document\");\n const html = await getCurrentHTML();\n debugLog(\"Retrieved HTML content\", {\n htmlLength: html.length,\n isDefault: html === DEFAULT_HTML,\n htmlPreview: html.substring(0, 200) + \"...\",\n });\n\n // Check if user is admin and set Hyperclay cookies accordingly\n const sessionId = getCookie(c, \"session\");\n let isUserAdmin = false;\n\n if (sessionId) {\n const email = await auth.verifySession(sessionId);\n isUserAdmin = email === ADMIN_EMAIL;\n }\n\n debugLog(\"User admin status for main page\", { isUserAdmin });\n\n if (isUserAdmin) {\n debugLog(\"Setting Hyperclay admin cookies server-side\");\n respond.setAdminCookies(c);\n } else {\n debugLog(\"User is not admin, not setting Hyperclay cookies\");\n }\n\n // Add cache-busting headers to ensure fresh content\n c.header(\"Cache-Control\", \"no-cache, no-store, must-revalidate\");\n c.header(\"Pragma\", \"no-cache\");\n c.header(\"Expires\", \"0\");\n\n return c.html(html);\n});\n\n// Auth flow - show email form\napp.get(\"/auth/edit\", (c) => {\n return c.html(TEMPLATES.loginForm());\n});\n\n// Auth flow - handle email submission\napp.post(\n \"/auth/edit\",\n handleAsync(async (c) => {\n const formData = await c.req.formData();\n const userEmail = formData.get(\"email\")?.toString();\n debugLog(\"Auth email submission\", { userEmail, adminEmail: ADMIN_EMAIL });\n\n if (!userEmail || userEmail !== ADMIN_EMAIL) {\n debugLog(\"Invalid email for auth\", {\n userEmail,\n adminEmail: ADMIN_EMAIL,\n });\n return c.html(\n TEMPLATES.loginForm(\n \"Invalid email address. Only the admin email can sign in.\",\n ),\n );\n }\n\n // Generate and send magic link\n const token = auth.generateToken();\n debugLog(\"Generated magic link token\", {\n token: token.substring(0, 8) + \"...\",\n userEmail,\n });\n await auth.storeToken(token, userEmail);\n await sendMagicLink(userEmail, token, c.req.url.split(\"/auth\")[0]);\n debugLog(\"Magic link sent\", { userEmail });\n\n return c.html(TEMPLATES.checkEmail(userEmail));\n }),\n);\n\n// Verify magic link token\napp.get(\n \"/auth/verify\",\n handleAsync(async (c) => {\n const token = c.req.query(\"token\");\n debugLog(\"Magic link verification attempt\", {\n token: token ? token.substring(0, 8) + \"...\" : null,\n });\n\n if (!token) {\n debugLog(\"No token provided in magic link\");\n return c.html(TEMPLATES.invalidToken());\n }\n\n const email = await auth.verifyToken(token);\n debugLog(\"Magic link token verification result\", {\n email,\n adminEmail: ADMIN_EMAIL,\n });\n\n if (!email || email !== ADMIN_EMAIL) {\n return c.html(TEMPLATES.invalidToken());\n }\n\n // Create session and redirect\n const sessionId = await auth.createSession(email);\n debugLog(\"Creating session and redirecting\", {\n sessionId: sessionId.substring(0, 8) + \"...\",\n email,\n });\n\n respond.setSessionCookie(c, sessionId);\n return c.redirect(\"/\");\n }),\n);\n\n// View mode - clear session and admin cookies\napp.get(\"/auth/view\", (c) => {\n respond.clearAuthCookies(c);\n return c.redirect(\"/\");\n});\n\n// Save endpoint - requires admin session\napp.post(\n \"/save/app\",\n requireAdmin,\n handleAsync(async (c) => {\n debugLog(\"Save endpoint accessed\");\n\n const html = await c.req.text();\n debugLog(\"Save request details\", {\n htmlLength: html.length,\n hasContent: !!html.trim(),\n });\n\n if (!html.trim()) {\n debugLog(\"Empty HTML content rejected\");\n throw new Error(\"Empty HTML content not allowed\");\n }\n\n await saveHTML(html);\n debugLog(\"HTML saved successfully\");\n return respond.success(c, \"Saved\");\n }),\n);\n\n// Version history endpoint - requires admin session\napp.get(\n \"/versions\",\n requireAdmin,\n handleAsync(async (c) => {\n const versions = await getVersionHistory();\n return c.html(TEMPLATES.versionHistory(versions));\n }),\n);\n\n// Reset endpoint - DANGEROUS - requires admin session\napp.get(\n \"/reset-dangerous\",\n requireAdmin,\n handleAsync(async (c) => {\n debugLog(\"Reset endpoint accessed\");\n\n // Clear the main HTML document by resetting to default\n await blob.set(STORAGE_KEYS.app, DEFAULT_HTML);\n\n // Clear all version history\n let versionCount = 0;\n const countStr = await readBlob(STORAGE_KEYS.versionCount);\n if (countStr) {\n versionCount = parseInt(countStr, 10);\n }\n\n // Delete all version entries\n for (let i = 1; i <= versionCount; i++) {\n await blob.delete(STORAGE_KEYS.version(i)).catch(() => {\n // Skip if version doesn't exist\n });\n }\n\n // Reset version counter\n await blob.delete(STORAGE_KEYS.versionCount);\n\n debugLog(\"HTML state reset successfully\", {\n clearedVersions: versionCount,\n });\n\n // Set message cookie and redirect\n respond.setMessageCookie(c, \"HTML Reset\");\n return c.redirect(\"/\");\n }),\n);\n\n// This is the entry point for HTTP vals\nexport default app.fetch;",[],[192],"files",[150,171,180,190],"counts",{"_205":32,"_206":207,"_208":207,"_209":210},"pulls","branches",1,"forks","envVars",3,"contents",[213,216,219,222],{"_103":151,"_95":152,"_153":154,"_155":-5,"_156":138,"_157":100,"_158":159,"_105":214,"_99":161,"_162":163,"_164":165,"_166":22,"_167":-5,"_98":215},["D",1757088125175],[152],{"_103":172,"_95":173,"_153":174,"_155":-5,"_156":138,"_157":175,"_158":159,"_105":217,"_99":32,"_162":163,"_164":177,"_166":22,"_167":-5,"_98":218},["D",1757010196867],[173],{"_103":181,"_95":182,"_153":183,"_155":-5,"_156":138,"_157":184,"_158":22,"_105":220,"_99":186,"_162":163,"_164":187,"_166":22,"_167":-5,"_98":221},["D",1757019570589],[182],{"_103":191,"_95":192,"_153":193,"_155":-5,"_156":138,"_157":194,"_158":22,"_105":223,"_99":196,"_162":197,"_164":198,"_166":22,"_167":96,"_98":224},["D",1757086660337],[192],"upstreamProject","upstreamBranch","emptyEnvVars","isNew","flags",[],"routes/_app.x.$handle.$name.branch.$branch.version.$version.code.$",{"_93":94,"_95":96,"_97":43,"_99":100,"_98":72,"_101":233,"_148":238,"_201":251,"_163":-7,"_211":252,"_261":-5,"_262":22,"_263":-5,"_264":-5,"_265":-5,"_266":267},{"_103":104,"_95":96,"_105":234,"_107":-5,"_108":22,"_109":110,"_111":112,"_113":-5,"_14":114,"_115":-5,"_116":22,"_117":-5,"_118":32,"_16":119,"_120":121,"_122":121,"_123":124,"_125":124,"_126":124,"_127":121,"_128":121,"_23":235,"_132":236,"_135":237,"_147":22},["D",1756989916174],{"_93":94,"_130":131},{"_93":94,"_134":131},{"_99":137,"_95":43,"_103":138,"_139":104,"_140":-5,"_141":-5,"_142":-5,"_143":-5,"_144":-5,"_145":96,"_146":94},[239,242,245,248],{"_103":151,"_95":152,"_153":154,"_155":-5,"_156":138,"_157":100,"_158":159,"_105":160,"_99":161,"_162":163,"_164":165,"_166":22,"_167":-5,"_168":240,"_98":241},[],[152],{"_103":172,"_95":173,"_153":174,"_155":-5,"_156":138,"_157":175,"_158":159,"_105":176,"_99":32,"_162":163,"_164":177,"_166":22,"_167":-5,"_168":243,"_98":244},[],[173],{"_103":181,"_95":182,"_153":183,"_155":-5,"_156":138,"_157":184,"_158":22,"_105":185,"_99":186,"_162":163,"_164":187,"_166":22,"_167":-5,"_168":246,"_98":247},[],[182],{"_103":191,"_95":192,"_153":193,"_155":-5,"_156":138,"_157":194,"_158":22,"_105":195,"_99":196,"_162":197,"_164":198,"_166":22,"_167":96,"_168":249,"_98":250},[],[192],[239,242,245,248],[253,255,257,259],{"_103":151,"_95":152,"_153":154,"_155":-5,"_156":138,"_157":100,"_158":159,"_105":214,"_99":161,"_162":163,"_164":165,"_166":22,"_167":-5,"_98":254},[152],{"_103":172,"_95":173,"_153":174,"_155":-5,"_156":138,"_157":175,"_158":159,"_105":217,"_99":32,"_162":163,"_164":177,"_166":22,"_167":-5,"_98":256},[173],{"_103":181,"_95":182,"_153":183,"_155":-5,"_156":138,"_157":184,"_158":22,"_105":220,"_99":186,"_162":163,"_164":187,"_166":22,"_167":-5,"_98":258},[182],{"_103":191,"_95":192,"_153":193,"_155":-5,"_156":138,"_157":194,"_158":22,"_105":223,"_99":196,"_162":197,"_164":198,"_166":22,"_167":96,"_98":260},[192],"upstream","showCompareCallout","pull","ahead","behind","templates",[],"actionData","errors"]

panphora

hyperclay