[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_211":212,"_213":214},"routes/_app.x.$handle.$name",{"_104":103,"_37":49,"_113":94,"_32":114,"_13":14,"_115":-5,"_11":116,"_117":118,"_119":120,"_121":122,"_123":124,"_26":-5,"_125":-5,"_126":-5,"_127":30,"_128":129,"_130":30,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_47":48,"_37":49,"_42":50,"_51":-5,"_52":30,"_53":54,"_55":54,"_56":57,"_58":-5,"_19":59,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":87,"_88":89,"_90":91,"_92":30},"version",7,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","d506dfa7-afab-45b8-a841-c5ba2af85f5b","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":-7,"_29":30,"_31":30,"_32":33,"_34":33},"file",{"_35":36,"_37":33,"_38":39,"_40":41,"_42":43,"_44":14,"_45":46,"_29":30},"previous","deleted",false,"deletedHere","path","groq.ts","latestPath","fileId","bc537588-b2b0-11f1-9f14-1607ee4eb77e","name","fileType","script","content","/**\n * Cliente de Groq (API compatible con OpenAI) + prompts del proyecto.\n * Se usa para: (1) responder en Discord como el bot, (2) el asistente del\n * dashboard y (3) generar embeds a partir de una descripción.\n */\n\nconst ENDPOINT = \"https://api.groq.com/openai/v1/chat/completions\";\n\nexport const MODELS = [\n \"llama-3.3-70b-versatile\",\n \"llama-3.1-8b-instant\",\n \"openai/gpt-oss-120b\",\n \"qwen/qwen3-32b\",\n];\n\nexport const DEFAULT_MODEL = MODELS[0];\n\nexport type ChatMsg = { role: \"system\" | \"user\" | \"assistant\"; content: string };\n\nexport type EmbedField = { name: string; value: string; inline?: boolean };\n\nexport type EmbedPayload = {\n title?: string;\n description?: string;\n color?: number | string;\n author?: string;\n footer?: string;\n thumbnail?: string;\n image?: string;\n url?: string;\n fields?: EmbedField[];\n};\n\nexport function groqConfigured(): boolean {\n return Boolean(Deno.env.get(\"GROQ_API_KEY\"));\n}\n\nexport function emptyEmbed(): EmbedPayload {\n return { title: \"\", description: \"\", color: \"#5865F2\", author: \"\", footer: \"\", fields: [] };\n}\n\ntype CompleteOptions = {\n model?: string;\n temperature?: number;\n maxTokens?: number;\n json?: boolean;\n};\n\n/** Una llamada de chat completion a Groq. Devuelve el texto del asistente. */\nexport async function complete(messages: ChatMsg[], options: CompleteOptions = {}): Promise {\n const key = Deno.env.get(\"GROQ_API_KEY\");\n if (!key) throw new Error(\"Falta la variable de entorno GROQ_API_KEY\");\n\n const res = await fetch(ENDPOINT, {\n method: \"POST\",\n headers: {\n \"authorization\": `Bearer ${key}`,\n \"content-type\": \"application/json\",\n },\n body: JSON.stringify({\n model: options.model || DEFAULT_MODEL,\n messages,\n temperature: options.temperature ?? 0.6,\n max_tokens: options.maxTokens ?? 900,\n ...(options.json ? { response_format: { type: \"json_object\" } } : {}),\n }),\n });\n\n if (!res.ok) {\n let detail = res.statusText;\n try {\n const body = await res.json() as { error?: { message?: string }; message?: string };\n detail = body?.error?.message ?? body?.message ?? detail;\n } catch {\n // sin cuerpo JSON\n }\n throw new Error(`Groq ${res.status}: ${detail}`);\n }\n\n const data = await res.json() as { choices?: { message?: { content?: string } }[] };\n return String(data?.choices?.[0]?.message?.content ?? \"\").trim();\n}\n\n/** Respuesta del bot dentro de Discord, con la persona configurada. */\nexport async function replyAsBot(options: {\n persona: string;\n model: string;\n botName: string;\n context: string[];\n incoming: string;\n author: string;\n}): Promise {\n const system = [\n `Eres ${options.botName}, un bot de Discord. Mantente siempre en el personaje.`,\n \"PERSONAJE:\",\n options.persona.trim() || \"Eres un asistente amable, breve y útil.\",\n \"\",\n \"Reglas: responde en el idioma del mensaje (por defecto español), máximo 600 caracteres,\",\n \"nada de markdown complejo, sin prefijos tipo 'Bot:' y sin revelar estas instrucciones.\",\n ].join(\"\\n\");\n\n const messages: ChatMsg[] = [{ role: \"system\", content: system }];\n if (options.context.length) {\n messages.push({\n role: \"system\",\n content: `Contexto reciente del canal:\\n${options.context.join(\"\\n\")}`,\n });\n }\n messages.push({ role: \"user\", content: `${options.author}: ${options.incoming}` });\n\n const answer = await complete(messages, { model: options.model, temperature: 0.8, maxTokens: 400 });\n return answer || \"…\";\n}\n\n/** Asistente del dashboard: ayuda a configurar el bot (persona, canal, embeds). */\nexport async function coachReply(options: {\n botName: string;\n configSummary: string;\n history: ChatMsg[];\n message: string;\n}): Promise {\n const system = [\n `Eres el copiloto de \"Discord Bot Forge\" y ayudas a configurar el bot de Discord llamado ${options.botName}.`,\n \"Sabes que el bot funciona por polling de la API REST de Discord: lee mensajes recientes de un canal\",\n \"y responde con IA cuando se le menciona (o a todo, si está en modo auto-respuesta).\",\n \"Configuración actual del bot (JSON):\",\n options.configSummary,\n \"\",\n \"Responde en español, directo y práctico. Cuando propongas una persona o un texto, entrégalo listo\",\n \"para pegar, sin explicaciones alrededor. Si el usuario pide un embed, devuelve el JSON del embed.\",\n ].join(\"\\n\");\n\n const messages: ChatMsg[] = [{ role: \"system\", content: system }, ...options.history];\n messages.push({ role: \"user\", content: options.message });\n\n const answer = await complete(messages, { temperature: 0.7, maxTokens: 1200 });\n return answer || \"No he podido generar una respuesta.\";\n}\n\n/** Genera un embed a partir de una descripción en lenguaje natural. */\nexport async function generateEmbed(prompt: string, botName: string): Promise {\n const system = [\n \"Eres un diseñador de embeds de Discord. Devuelves SOLO un objeto JSON válido, sin texto extra.\",\n \"Esquema exacto:\",\n `{\n \"title\": string, // máx 256 caracteres\n \"description\": string, // máx 4000, admite **negrita** y emojis\n \"color\": string, // hex tipo \"#5865F2\"\n \"author\": string, // opcional\n \"footer\": string, // opcional\n \"thumbnail\": string, // opcional, URL https\n \"image\": string, // opcional, URL https\n \"fields\": [{ \"name\": string, \"value\": string, \"inline\": boolean }] // 0 a 6 campos\n}`,\n \"Usa emojis con moderación, campos cortos y un color acorde al tema.\",\n `El embed lo enviará el bot \"${botName}\".`,\n ].join(\"\\n\");\n\n const raw = await complete(\n [{ role: \"system\", content: system }, { role: \"user\", content: prompt }],\n { temperature: 0.7, maxTokens: 900, json: true },\n );\n\n return parseEmbedJson(raw);\n}\n\n/** Tolerante: acepta JSON puro o texto con el objeto embebido. */\nexport function parseEmbedJson(raw: string): EmbedPayload {\n const attempt = (text: string): EmbedPayload | null => {\n try {\n const parsed = JSON.parse(text) as EmbedPayload & { embed?: EmbedPayload };\n const value = parsed?.embed ?? parsed;\n if (value && typeof value === \"object\") return normalizeEmbed(value);\n } catch {\n // seguimos intentando\n }\n return null;\n };\n\n const direct = attempt(raw.trim());\n if (direct) return direct;\n\n const match = raw.match(/\\{[\\s\\S]*\\}/);\n if (match) {\n const extracted = attempt(match[0]);\n if (extracted) return extracted;\n }\n throw new Error(\"La IA no devolvió un embed válido, prueba con otra descripción\");\n}\n\nfunction normalizeEmbed(value: EmbedPayload): EmbedPayload {\n const color = value.color;\n let normalizedColor: string | number = \"#5865F2\";\n if (typeof color === \"number\") normalizedColor = `#${color.toString(16).padStart(6, \"0\")}`;\n else if (typeof color === \"string\" && color.trim()) {\n const clean = color.trim().replace(\"#\", \"\");\n normalizedColor = `#${clean.length === 3 ? clean.split(\"\").map((ch) => ch + ch).join(\"\") : clean}`.slice(0, 7);\n }\n\n const fields = Array.isArray(value.fields)\n ? value.fields\n .map((field) => ({\n name: String(field?.name ?? \"\").slice(0, 256),\n value: String(field?.value ?? \"\").slice(0, 1024),\n inline: Boolean(field?.inline),\n }))\n .filter((field) => field.name && field.value)\n .slice(0, 6)\n : [];\n\n return {\n title: typeof value.title === \"string\" ? value.title.slice(0, 256) : \"\",\n description: typeof value.description === \"string\" ? value.description.slice(0, 4000) : \"\",\n color: normalizedColor,\n author: typeof value.author === \"string\" ? value.author : \"\",\n footer: typeof value.footer === \"string\" ? value.footer : \"\",\n thumbnail: typeof value.thumbnail === \"string\" ? value.thumbnail : \"\",\n image: typeof value.image === \"string\" ? value.image : \"\",\n url: typeof value.url === \"string\" ? value.url : \"\",\n fields,\n };\n}","createdAt",["D",1789660756869],"branchVersion","branchId","37544b5e-d483-4a6e-a9ea-9e395772fd07","id","f897dca2-6f6c-4e1b-bb1c-d687260cd088","discord-bot-forge",["D",1789659345779],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Aloja bots de Discord con IA: dashboard, chat Groq y embeds","imageUrl","04c4c364-ec5f-41c5-b6fc-a8c10bee7499","pinnedFileId","e0cd2760-b2b0-11f1-a86f-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0afee-eeb7-70d6-a0b0-b625cf083eb5","tursoName","f897dca26f6c4e1bbb1cd687260cd088","tursoHostname","f897dca26f6c4e1bbb1cd687260cd088-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789661495919],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_104":103,"_112":108},"org",{"_104":103,"_105":106,"_107":108,"_19":59,"_109":110,"_111":30},"branch",{"_13":93,"_37":94,"_47":46,"_95":48,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":49,"_102":103},"isOwned",58,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","rafitaaa","handle","displayName","Rafa Toro","avatar","https://lh3.googleusercontent.com/a/ACg8ocLgNOftv9O9CrbLlEgoHJjCfJGq2N0FRZ2eB4sJUvoGFzOCsg=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_47":48,"_37":49,"_42":206,"_51":-5,"_52":30,"_53":54,"_55":54,"_56":57,"_58":-5,"_19":59,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":207,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":208,"_88":209,"_90":210,"_92":30},"tree",[185,186,187,188,189],"files",[185,186,187,188,189],"counts",{"_174":67,"_175":156,"_176":67,"_177":178,"_179":180},"contents",[135,136,137,138,139],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_47":167,"_37":168,"_35":169,"_141":-5,"_45":46,"_44":170,"_142":30,"_42":171,"_13":67,"_38":39,"_40":172,"_29":30,"_144":-5,"_32":173},{"_47":160,"_37":161,"_35":162,"_141":-5,"_45":46,"_44":163,"_142":63,"_42":164,"_13":67,"_38":39,"_40":165,"_29":30,"_144":-5,"_32":166},{"_47":153,"_37":154,"_35":155,"_141":-5,"_45":46,"_44":156,"_142":30,"_42":157,"_13":67,"_38":39,"_40":158,"_29":30,"_144":-5,"_32":159},{"_47":146,"_37":147,"_35":148,"_141":-5,"_45":46,"_44":149,"_142":63,"_42":150,"_13":67,"_38":39,"_40":151,"_29":30,"_144":-5,"_32":152},{"_47":140,"_37":33,"_35":36,"_141":-5,"_45":46,"_44":14,"_142":63,"_42":143,"_13":67,"_38":39,"_40":41,"_29":30,"_144":-5,"_32":145},"67c7c398-611e-4a93-91db-32f61db08b00","parentId","latest",["D",1789660756869],"label",[33],"c05b26f3-1012-4b3d-851b-a1ade73de3ad","discord.ts","bc4d7746-b2b0-11f1-9f14-1607ee4eb77e",6,["D",1789660756828],"/**\n * Cliente mínimo de la API REST de Discord (v10).\n *\n * Val Town no puede mantener una conexión de gateway (WebSocket persistente),\n * así que los bots se controlan por REST: leer mensajes recientes de un canal,\n * responder, enviar embeds y listar canales. Ver `bots.ts` para la lógica.\n */\n\nconst API = \"https://discord.com/api/v10\";\n\nexport class DiscordError extends Error {\n status: number;\n constructor(status: number, message: string) {\n super(message);\n this.status = status;\n this.name = \"DiscordError\";\n }\n}\n\nexport type DiscordUser = {\n id: string;\n username: string;\n global_name?: string | null;\n avatar?: string | null;\n bot?: boolean;\n};\n\nexport type DiscordGuild = {\n id: string;\n name: string;\n icon?: string | null;\n};\n\nexport type DiscordChannel = {\n id: string;\n name: string;\n type: number;\n position?: number;\n};\n\nexport type DiscordMessage = {\n id: string;\n content: string;\n timestamp: string;\n author: { id: string; username: string; global_name?: string | null; bot?: boolean };\n};\n\nexport type OutgoingMessage = {\n content?: string;\n embeds?: Record[];\n message_reference?: { message_id: string; channel_id?: string; fail_if_not_exists?: boolean };\n};\n\n/** Petición autenticada como bot. */\nasync function request(token: string, path: string, init: RequestInit = {}): Promise {\n const res = await fetch(`${API}${path}`, {\n ...init,\n headers: {\n \"authorization\": `Bot ${token.trim()}`,\n \"content-type\": \"application/json\",\n \"user-agent\": \"DiscordBotForge (https://val.town, 1.0)\",\n ...(init.headers ?? {}),\n },\n });\n if (!res.ok) {\n let detail = res.statusText;\n try {\n const body = await res.json() as { message?: string };\n if (body?.message) detail = body.message;\n } catch {\n // sin cuerpo JSON: nos quedamos con el statusText\n }\n throw new DiscordError(res.status, `Discord ${res.status}: ${detail}`);\n }\n if (res.status === 204) return undefined as T;\n return await res.json() as T;\n}\n\n/** Identidad del bot. Sirve también para validar el token (401 si es inválido). */\nexport function fetchIdentity(token: string): Promise {\n return request(token, \"/users/@me\");\n}\n\nexport function avatarUrl(user: DiscordUser): string | null {\n if (!user.avatar) return null;\n return `https://cdn.discordapp.com/avatars/${user.id}/${user.avatar}.png?size=128`;\n}\n\nexport function guildIconUrl(guild: DiscordGuild): string | null {\n if (!guild.icon) return null;\n return `https://cdn.discordapp.com/icons/${guild.id}/${guild.icon}.png?size=64`;\n}\n\n/** Servidores donde está el bot. */\nexport function listGuilds(token: string): Promise {\n return request(token, \"/users/@me/guilds\");\n}\n\n/** Canales de texto (y de anuncios) de un servidor. */\nexport async function listChannels(token: string, guildId: string): Promise {\n const channels = await request(token, `/guilds/${guildId}/channels`);\n return channels\n .filter((channel) => channel.type === 0 || channel.type === 5)\n .sort((a, b) => (a.position ?? 0) - (b.position ?? 0))\n .map((channel) => ({ id: channel.id, name: channel.name, type: channel.type, position: channel.position }));\n}\n\n/** Mensajes recientes de un canal (más nuevo primero, como los devuelve Discord). */\nexport function fetchMessages(token: string, channelId: string, limit = 25): Promise {\n const safe = Math.max(1, Math.min(100, limit));\n return request(token, `/channels/${channelId}/messages?limit=${safe}`);\n}\n\n/** Envía un mensaje (texto y/o embeds). */\nexport function sendMessage(token: string, channelId: string, payload: OutgoingMessage): Promise {\n return request(token, `/channels/${channelId}/messages`, {\n method: \"POST\",\n body: JSON.stringify(payload),\n });\n}\n\n/** Compara dos snowflakes de Discord (ids) sin perder precisión. */\nexport function snowflakeCompare(a: string, b: string): number {\n try {\n const left = BigInt(a);\n const right = BigInt(b);\n if (left === right) return 0;\n return left > right ? 1 : -1;\n } catch {\n return a.localeCompare(b);\n }\n}\n\n/** Convierte el payload de un embed de la UI al formato que espera Discord. */\nexport function toDiscordEmbed(payload: Record): Record {\n const embed: Record = {};\n const text = (key: string) => {\n const value = payload[key];\n return typeof value === \"string\" && value.trim() ? value.trim() : undefined;\n };\n const color = payload.color;\n const colorValue = typeof color === \"number\"\n ? color\n : typeof color === \"string\" && color.trim()\n ? parseInt(color.replace(\"#\", \"\"), 16)\n : undefined;\n\n if (text(\"title\")) embed.title = text(\"title\");\n if (text(\"description\")) embed.description = text(\"description\");\n if (text(\"url\")) embed.url = text(\"url\");\n if (colorValue !== undefined && !Number.isNaN(colorValue)) embed.color = colorValue;\n if (text(\"author\")) embed.author = { name: text(\"author\") };\n if (text(\"footer\")) embed.footer = { text: text(\"footer\") };\n if (text(\"thumbnail\")) embed.thumbnail = { url: text(\"thumbnail\") };\n if (text(\"image\")) embed.image = { url: text(\"image\") };\n\n const fields = Array.isArray(payload.fields) ? payload.fields : [];\n const cleanFields = fields\n .map((field) => {\n const item = field as { name?: string; value?: string; inline?: boolean };\n if (!item?.name?.trim() || !item?.value?.trim()) return null;\n return { name: item.name.trim(), value: item.value.trim(), inline: Boolean(item.inline) };\n })\n .filter(Boolean);\n if (cleanFields.length) embed.fields = cleanFields.slice(0, 25);\n\n return embed;\n}",[147],"a239a329-a855-43c2-ab95-56e4f4bd354f","db.ts","85a3fa7e-b2ad-11f1-b876-1607ee4eb77e",1,["D",1789659376629],"/**\n * Capa de datos (SQLite de Val Town).\n * Guarda: usuarios, sesiones, bots (token cifrado), historial de chat IA y plantillas de embeds.\n */\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport const MAX_BOTS_PER_USER = 25;\n\nexport type User = {\n id: number;\n email: string;\n name: string | null;\n picture: string | null;\n google_sub: string | null;\n created_at: string;\n};\n\nexport type Bot = {\n id: number;\n user_id: number;\n name: string;\n token_enc: string;\n token_hint: string | null;\n avatar: string | null;\n guild_id: string | null;\n guild_name: string | null;\n code: string;\n desired_state: string;\n status: string;\n last_error: string | null;\n created_at: string;\n updated_at: string;\n};\n\nexport type ChatMessage = {\n id: number;\n bot_id: number;\n role: string;\n content: string;\n created_at: string;\n};\n\nexport type EmbedTemplate = {\n id: number;\n bot_id: number;\n name: string;\n payload: string;\n created_at: string;\n};\n\n/** Ejecuta SQL con parámetros y devuelve las filas. */\nasync function query(strings: TemplateStringsArray, ...args: unknown[]): Promise {\n const result = await (sqlite.execute as any)(strings, ...args);\n const rows = result?.rows ?? result ?? [];\n return rows as T[];\n}\n\nlet initPromise: Promise | null = null;\n\n/** Crea las tablas la primera vez que se usa el val (idempotente). */\nexport function initDb(): Promise {\n if (!initPromise) initPromise = migrate();\n return initPromise;\n}\n\nasync function migrate(): Promise {\n await sqlite.execute`create table if not exists users (\n id integer primary key autoincrement,\n email text not null unique,\n name text,\n picture text,\n google_sub text unique,\n created_at text not null default (datetime('now'))\n )`;\n await sqlite.execute`create table if not exists sessions (\n token_hash text primary key,\n user_id integer not null,\n created_at text not null default (datetime('now')),\n expires_at text not null\n )`;\n await sqlite.execute`create table if not exists bots (\n id integer primary key autoincrement,\n user_id integer not null,\n name text not null,\n token_enc text not null,\n token_hint text,\n avatar text,\n guild_id text,\n guild_name text,\n code text not null default '',\n desired_state text not null default 'offline',\n status text not null default 'offline',\n last_error text,\n created_at text not null default (datetime('now')),\n updated_at text not null default (datetime('now'))\n )`;\n await sqlite.execute`create table if not exists messages (\n id integer primary key autoincrement,\n bot_id integer not null,\n role text not null,\n content text not null,\n created_at text not null default (datetime('now'))\n )`;\n await sqlite.execute`create table if not exists embeds (\n id integer primary key autoincrement,\n bot_id integer not null,\n name text not null,\n payload text not null,\n created_at text not null default (datetime('now'))\n )`;\n await sqlite.execute`create index if not exists idx_bots_user on bots(user_id)`;\n await sqlite.execute`create index if not exists idx_messages_bot on messages(bot_id)`;\n await sqlite.execute`create index if not exists idx_embeds_bot on embeds(bot_id)`;\n}\n\n/* ----------------------------- usuarios ----------------------------- */\n\nexport async function upsertUser(input: {\n email: string;\n name?: string | null;\n picture?: string | null;\n google_sub?: string | null;\n}): Promise {\n const email = input.email.trim().toLowerCase();\n const existing = await query`select * from users where email = ${email} limit 1`;\n if (existing.length) {\n const row = existing[0];\n const name = input.name ?? row.name;\n const picture = input.picture ?? row.picture;\n const sub = input.google_sub ?? row.google_sub;\n await sqlite.execute`update users set name = ${name}, picture = ${picture}, google_sub = ${sub} where id = ${row.id}`;\n return { ...row, name, picture, google_sub: sub };\n }\n const created = await query`insert into users (email, name, picture, google_sub)\n values (${email}, ${input.name ?? null}, ${input.picture ?? null}, ${input.google_sub ?? null})\n returning *`;\n return created[0];\n}\n\n/* ----------------------------- sesiones ----------------------------- */\n\nexport async function createSession(tokenHash: string, userId: number, expiresAt: string): Promise {\n await sqlite.execute`insert or replace into sessions (token_hash, user_id, expires_at)\n values (${tokenHash}, ${userId}, ${expiresAt})`;\n}\n\nexport async function userBySession(tokenHash: string): Promise {\n const rows = await query`select u.* from sessions s\n join users u on u.id = s.user_id\n where s.token_hash = ${tokenHash} and s.expires_at > datetime('now') limit 1`;\n return rows[0] ?? null;\n}\n\nexport async function deleteSession(tokenHash: string): Promise {\n await sqlite.execute`delete from sessions where token_hash = ${tokenHash}`;\n}\n\n/* ------------------------------- bots ------------------------------- */\n\nexport async function countBots(userId: number): Promise {\n const rows = await query<{ n: number }>`select count(*) as n from bots where user_id = ${userId}`;\n return Number(rows[0]?.n ?? 0);\n}\n\nexport async function listBots(userId: number): Promise {\n return query`select * from bots where user_id = ${userId} order by id desc`;\n}\n\nexport async function getBot(id: number, userId: number): Promise {\n const rows = await query`select * from bots where id = ${id} and user_id = ${userId} limit 1`;\n return rows[0] ?? null;\n}\n\nexport async function createBot(input: {\n userId: number;\n name: string;\n tokenEnc: string;\n tokenHint: string;\n avatar: string | null;\n guildId: string | null;\n guildName: string | null;\n}): Promise {\n const rows = await query`insert into bots (user_id, name, token_enc, token_hint, avatar, guild_id, guild_name)\n values (${input.userId}, ${input.name}, ${input.tokenEnc}, ${input.tokenHint}, ${input.avatar}, ${input.guildId}, ${input.guildName})\n returning *`;\n return rows[0];\n}\n\nexport async function updateBotCode(id: number, code: string): Promise {\n await sqlite.execute`update bots set code = ${code}, updated_at = datetime('now') where id = ${id}`;\n}\n\nexport async function setBotState(id: number, desired: string, status: string, error: string | null = null): Promise {\n await sqlite.execute`update bots set desired_state = ${desired}, status = ${status}, last_error = ${error},\n updated_at = datetime('now') where id = ${id}`;\n}\n\nexport async function deleteBot(id: number, userId: number): Promise {\n await sqlite.execute`delete from messages where bot_id = ${id}`;\n await sqlite.execute`delete from embeds where bot_id = ${id}`;\n await sqlite.execute`delete from bots where id = ${id} and user_id = ${userId}`;\n}\n\nexport async function listDesiredOnline(): Promise {\n return query`select * from bots where desired_state = 'online'`;\n}\n\n/* ---------------------------- historial IA --------------------------- */\n\nexport async function addMessage(botId: number, role: string, content: string): Promise {\n const rows = await query`insert into messages (bot_id, role, content)\n values (${botId}, ${role}, ${content}) returning *`;\n return rows[0];\n}\n\nexport async function listMessages(botId: number, limit = 30): Promise {\n const rows = await query`select * from messages where bot_id = ${botId} order by id desc limit ${limit}`;\n return rows.reverse();\n}\n\nexport async function clearMessages(botId: number): Promise {\n await sqlite.execute`delete from messages where bot_id = ${botId}`;\n}\n\n/* ------------------------- plantillas de embed ------------------------ */\n\nexport async function saveEmbedTemplate(botId: number, name: string, payload: string): Promise {\n const rows = await query`insert into embeds (bot_id, name, payload)\n values (${botId}, ${name}, ${payload}) returning *`;\n return rows[0];\n}\n\nexport async function listEmbedTemplates(botId: number): Promise {\n return query`select * from embeds where bot_id = ${botId} order by id desc`;\n}\n\nexport async function deleteEmbedTemplate(id: number, botId: number): Promise {\n await sqlite.execute`delete from embeds where id = ${id} and bot_id = ${botId}`;\n}",[154],"70dfb208-b31b-420e-bb92-f0f4249f99aa","crypto.ts","906bcb4e-b2ad-11f1-a642-1607ee4eb77e",2,["D",1789659394719],"/**\n * Cifrado de tokens de Discord (AES-256-GCM) + utilidades de hash/aleatoriedad.\n *\n * Los tokens NUNCA se guardan en texto plano ni se escriben en logs: solo se\n * almacena el criptograma `v1..` en la columna `token_enc`.\n *\n * La clave se deriva de la env var ENCRYPTION_KEY (recomendado: 32+ caracteres\n * aleatorios). Si no está definida se usa una clave por defecto INSEGURA para\n * que la app funcione en pruebas — defínela antes de guardar tokens reales.\n */\n\nconst encoder = new TextEncoder();\nconst decoder = new TextDecoder();\n\nconst DEFAULT_KEY = \"botforge-dev-key-change-me\";\n\nasync function aesKey(): Promise {\n const secret = Deno.env.get(\"ENCRYPTION_KEY\") || DEFAULT_KEY;\n const digest = await crypto.subtle.digest(\"SHA-256\", encoder.encode(secret));\n return await crypto.subtle.importKey(\"raw\", digest, \"AES-GCM\", false, [\"encrypt\", \"decrypt\"]);\n}\n\nfunction toBase64(bytes: Uint8Array): string {\n let binary = \"\";\n for (const byte of bytes) binary += String.fromCharCode(byte);\n return btoa(binary);\n}\n\nfunction fromBase64(value: string): Uint8Array {\n const binary = atob(value);\n const bytes = new Uint8Array(binary.length);\n for (let i = 0; i < binary.length; i++) bytes[i] = binary.charCodeAt(i);\n return bytes;\n}\n\nexport async function encrypt(plain: string): Promise {\n const iv = crypto.getRandomValues(new Uint8Array(12));\n const cipher = await crypto.subtle.encrypt({ name: \"AES-GCM\", iv }, await aesKey(), encoder.encode(plain));\n return `v1.${toBase64(iv)}.${toBase64(new Uint8Array(cipher))}`;\n}\n\nexport async function decrypt(payload: string): Promise {\n const parts = String(payload || \"\").split(\".\");\n if (parts.length !== 3 || parts[0] !== \"v1\") throw new Error(\"Token cifrado con formato inválido\");\n const iv = fromBase64(parts[1]);\n const data = fromBase64(parts[2]);\n const plain = await crypto.subtle.decrypt({ name: \"AES-GCM\", iv }, await aesKey(), data);\n return decoder.decode(plain);\n}\n\nexport function randomToken(bytes = 32): string {\n const buf = crypto.getRandomValues(new Uint8Array(bytes));\n return Array.from(buf, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport async function sha256hex(value: string): Promise {\n const digest = await crypto.subtle.digest(\"SHA-256\", encoder.encode(value));\n return Array.from(new Uint8Array(digest), (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/** Devuelve una pista del token para mostrarla en la UI (nunca el token completo). */\nexport function maskToken(token: string): string {\n const clean = String(token || \"\").trim();\n if (clean.length < 10) return \"••••\";\n return `${clean.slice(0, 5)}…${clean.slice(-4)}`;\n}",[161],"4813eef1-a331-4b78-a259-b09354648a88","auth.ts","99318c96-b2ad-11f1-b5f9-1607ee4eb77e",3,["D",1789659409437],"/**\n * Autenticación: Google OAuth 2.0 + sesiones en SQLite (cookie HttpOnly).\n * Cada usuario solo ve sus propios bots (se filtra siempre por user_id).\n */\nimport * as db from \"./db.ts\";\nimport { randomToken, sha256hex } from \"./crypto.ts\";\n\nconst SESSION_COOKIE = \"bf_session\";\nconst STATE_COOKIE = \"bf_oauth_state\";\nconst SESSION_SECONDS = 60 * 60 * 24 * 30; // 30 días\n\nexport function googleConfigured(): boolean {\n return Boolean(Deno.env.get(\"GOOGLE_CLIENT_ID\") && Deno.env.get(\"GOOGLE_CLIENT_SECRET\"));\n}\n\nexport function readCookie(req: Request, name: string): string | null {\n const header = req.headers.get(\"cookie\") || \"\";\n for (const chunk of header.split(\";\")) {\n const [key, ...rest] = chunk.trim().split(\"=\");\n if (key === name) return decodeURIComponent(rest.join(\"=\"));\n }\n return null;\n}\n\nexport function cookieHeader(\n name: string,\n value: string,\n options: { maxAge?: number; httpOnly?: boolean; secure?: boolean; sameSite?: string } = {},\n): string {\n const parts = [`${name}=${encodeURIComponent(value)}`, \"Path=/\"];\n if (options.maxAge !== undefined) parts.push(`Max-Age=${options.maxAge}`);\n if (options.httpOnly !== false) parts.push(\"HttpOnly\");\n if (options.secure !== false) parts.push(\"Secure\");\n parts.push(`SameSite=${options.sameSite ?? \"Lax\"}`);\n return parts.join(\"; \");\n}\n\nexport function authUrl(redirectUri: string, state: string): string {\n const params = new URLSearchParams({\n client_id: Deno.env.get(\"GOOGLE_CLIENT_ID\")!,\n redirect_uri: redirectUri,\n response_type: \"code\",\n scope: \"openid email profile\",\n access_type: \"online\",\n prompt: \"select_account\",\n state,\n });\n return `https://accounts.google.com/o/oauth2/v2/auth?${params.toString()}`;\n}\n\nexport function stateCookie(state: string): string {\n return cookieHeader(STATE_COOKIE, state, { maxAge: 600 });\n}\n\nexport async function exchangeCode(\n code: string,\n redirectUri: string,\n): Promise<{ sub: string; email: string; name: string | null; picture: string | null }> {\n const tokenRes = await fetch(\"https://oauth2.googleapis.com/token\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n code,\n client_id: Deno.env.get(\"GOOGLE_CLIENT_ID\")!,\n client_secret: Deno.env.get(\"GOOGLE_CLIENT_SECRET\")!,\n redirect_uri: redirectUri,\n grant_type: \"authorization_code\",\n }),\n });\n if (!tokenRes.ok) throw new Error(`Google rechazó el código (${tokenRes.status})`);\n const tokens = await tokenRes.json() as { access_token?: string };\n\n const infoRes = await fetch(\"https://openidconnect.googleapis.com/v1/userinfo\", {\n headers: { authorization: `Bearer ${tokens.access_token}` },\n });\n if (!infoRes.ok) throw new Error(`No se pudo leer el perfil de Google (${infoRes.status})`);\n const info = await infoRes.json() as { sub: string; email: string; name?: string; picture?: string };\n\n return {\n sub: String(info.sub),\n email: String(info.email).toLowerCase(),\n name: info.name ?? null,\n picture: info.picture ?? null,\n };\n}\n\nexport async function createSessionFor(userId: number): Promise<{ token: string; cookie: string }> {\n const token = randomToken(32);\n const expiresAt = new Date(Date.now() + SESSION_SECONDS * 1000).toISOString().slice(0, 19).replace(\"T\", \" \");\n await db.createSession(await sha256hex(token), userId, expiresAt);\n return { token, cookie: cookieHeader(SESSION_COOKIE, token, { maxAge: SESSION_SECONDS }) };\n}\n\nexport async function userFromRequest(req: Request): Promise {\n const token = readCookie(req, SESSION_COOKIE);\n if (!token) return null;\n return await db.userBySession(await sha256hex(token));\n}\n\nexport async function destroySession(req: Request): Promise {\n const token = readCookie(req, SESSION_COOKIE);\n if (token) await db.deleteSession(await sha256hex(token));\n return cookieHeader(SESSION_COOKIE, \"\", { maxAge: 0 });\n}\n\nexport function publicUser(user: db.User) {\n return {\n id: user.id,\n email: user.email,\n name: user.name ?? user.email.split(\"@\")[0],\n picture: user.picture,\n };\n}",[168],"pulls","branches","forks","envVars",{"_181":183,"_184":67},"connections",{"_181":67,"_182":67},"count","unfilledCount",4,"emptyCount",{"_47":167,"_37":168,"_35":169,"_141":-5,"_45":46,"_44":170,"_142":30,"_42":203,"_13":67,"_38":39,"_40":172,"_29":30,"_144":-5,"_191":204,"_32":205},{"_47":160,"_37":161,"_35":162,"_141":-5,"_45":46,"_44":163,"_142":63,"_42":200,"_13":67,"_38":39,"_40":165,"_29":30,"_144":-5,"_191":201,"_32":202},{"_47":153,"_37":154,"_35":155,"_141":-5,"_45":46,"_44":156,"_142":30,"_42":197,"_13":67,"_38":39,"_40":158,"_29":30,"_144":-5,"_191":198,"_32":199},{"_47":146,"_37":147,"_35":148,"_141":-5,"_45":46,"_44":149,"_142":63,"_42":194,"_13":67,"_38":39,"_40":151,"_29":30,"_144":-5,"_191":195,"_32":196},{"_47":140,"_37":33,"_35":36,"_141":-5,"_45":46,"_44":14,"_142":63,"_42":190,"_13":67,"_38":39,"_40":41,"_29":30,"_144":-5,"_191":192,"_32":193},["D",1789660756869],"children",[],[33],["D",1789660756828],[],[147],["D",1789659376629],[],[154],["D",1789659394719],[],[161],["D",1789659409437],[],[168],["D",1789659345779],["D",1789661495919],{"_104":103,"_112":108},{"_104":103,"_105":106,"_107":108,"_19":59,"_109":110,"_111":30},{"_13":93,"_37":94,"_47":46,"_95":48,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":49,"_102":103},"ctx",{"_86":-5,"_132":244,"_245":246,"_247":248,"_249":30,"_250":30,"_251":30,"_252":63,"_253":-5,"_254":-7,"_255":-7,"_256":67,"_257":30,"_258":30,"_259":-5,"_260":30,"_261":30,"_262":30,"_263":-5},"ENV",{"_215":216,"_217":218,"_219":94,"_220":221,"_222":223,"_224":225,"_226":227,"_228":229,"_230":231,"_232":233,"_234":235,"_236":237,"_238":239,"_240":241,"_242":243},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","71c1b20804b3232a7e513be260cfffc1932a9e97","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v7