⚔️ Fantasy MUD - A Multiplayer Text Adventure

\n \n \n\n\n",[],[281,272],"gui","aedc2cd2-5203-11f1-b9d1-ee650bb23af1",["D",1779031119624],[230],[281],["D",1779031247391],[],[18,76],["D",1779031119624],[],[18,87],["D",1779031317884],[],[18,105],["D",1779031119624],[226,227,228],[18],"bda74c2e-5203-11f1-91ca-ee650bb23af1","routes.ts","019e3684-9748-774e-8bea-b977c87be3a1","019e3684-9748-774e-8bea-bcf3dbb51718",3,["D",1779031144532],"// All API routes for the Fantasy MUD - authenticated via session or API key\nimport { Hono } from \"npm:hono@4\";\nimport { authenticate, requireAuth, register, login, logout } from \"../lib/auth.ts\";\nimport * as engine from \"../lib/game-engine.ts\";\n\nconst api = new Hono();\n\n// Helper to get active character for the account\nasync function getActiveChar(accountId: number, charId?: number) {\n if (charId) {\n const char = await engine.getCharacterFull(charId) as any;\n if (!char || char.account_id !== accountId) throw new Error(\"Character not found or not yours\");\n return char;\n }\n const chars = await engine.getCharactersByAccount(accountId);\n if (chars.length === 0) throw new Error(\"No characters found. Create one first.\");\n return chars[0];\n}\n\nfunction json(data: any, status = 200) {\n return new Response(JSON.stringify(data), { status, headers: { \"Content-Type\": \"application/json\" } });\n}\n\nfunction err(message: string, status = 400) {\n return json({ error: message }, status);\n}\n\n// ==================== AUTH ====================\napi.post(\"/auth/register\", async (c) => {\n try {\n const body = await c.req.json();\n const account = await register(body.username, body.password, body.email);\n // Auto-login after registration: create session and set cookie\n const { sessionId, account: loginAccount } = await login(body.username, body.password);\n const res = json({ ok: true, account: loginAccount });\n const headers = new Headers(res.headers);\n headers.set(\"Set-Cookie\", `session=${sessionId}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${7 * 24 * 3600}`);\n return new Response(res.body, { status: 200, headers });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/auth/login\", async (c) => {\n try {\n const body = await c.req.json();\n const { sessionId, account } = await login(body.username, body.password);\n const res = json({ ok: true, account });\n // Set cookie for browser clients\n const headers = new Headers(res.headers);\n headers.set(\"Set-Cookie\", `session=${sessionId}; Path=/; HttpOnly; SameSite=Lax; Max-Age=${7 * 24 * 3600}`);\n return new Response(res.body, { status: 200, headers });\n } catch (e: any) { return err(e.message, 401); }\n});\n\napi.post(\"/auth/logout\", async (c) => {\n const cookies = c.req.header(\"cookie\") || \"\";\n const match = cookies.match(/session=([^;]+)/);\n if (match) await logout(match[1]);\n const headers = new Headers();\n headers.set(\"Set-Cookie\", \"session=; Path=/; HttpOnly; Max-Age=0\");\n headers.set(\"Content-Type\", \"application/json\");\n return new Response(JSON.stringify({ ok: true }), { status: 200, headers });\n});\n\napi.get(\"/auth/me\", async (c) => {\n const account = await authenticate(c.req.raw);\n if (!account) return err(\"Not logged in\", 401);\n return json({ ok: true, account });\n});\n\n// ==================== REFERENCE DATA (public) ====================\napi.get(\"/data/races\", async () => json(await engine.getRaces()));\napi.get(\"/data/classes\", async () => json(await engine.getClasses()));\napi.get(\"/data/magic-schools\", async () => json(await engine.getMagicSchools()));\napi.get(\"/data/spells\", async () => json(await engine.getSpells()));\napi.get(\"/data/guilds\", async () => json(await engine.getAllGuilds()));\napi.get(\"/data/quests\", async () => json(await engine.getAllQuests()));\napi.get(\"/data/continents\", async () => json(await engine.getContinents()));\napi.get(\"/data/countries\", async (c) => {\n const contId = c.req.query(\"continent_id\");\n return json(await engine.getCountries(contId ? parseInt(contId) : undefined));\n});\napi.get(\"/data/islands\", async () => json(await engine.getIslands()));\napi.get(\"/data/calendar\", async () => json(await engine.getCalendar()));\n\n// ==================== CHARACTER ====================\napi.post(\"/characters\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await engine.createCharacter(account.id, body);\n return json({ ok: true, character: char });\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/characters\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const chars = await engine.getCharactersByAccount(account.id);\n return json(chars);\n } catch (e: any) { return err(e.message, 401); }\n});\n\napi.get(\"/characters/:id\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const char = await getActiveChar(account.id, parseInt(c.req.param(\"id\")));\n return json(char);\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== GAME ACTIONS ====================\napi.post(\"/game/look\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json().catch(() => ({}));\n const char = await getActiveChar(account.id, body.character_id);\n const location = await engine.look(char.id);\n return json({ ok: true, location });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/move\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.move(char.id, body.direction);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/attack\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.attack(char.id, body.target_type, body.target_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/cast\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.castSpell(char.id, body.spell_id, body.target_type, body.target_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== INVENTORY ====================\napi.get(\"/game/inventory/:charId\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const char = await getActiveChar(account.id, parseInt(c.req.param(\"charId\")));\n const inv = await engine.getInventory(char.id);\n return json(inv);\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/equip\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.equipItem(char.id, body.inventory_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== DIALOG ====================\napi.post(\"/game/dialog/start\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const dialog = await engine.startDialog(char.id, body.npc_id);\n return json({ ok: true, dialog });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/dialog/continue\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const dialog = await engine.continueDialog(char.id, body.tree_id, body.node_key);\n return json({ ok: true, dialog });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== SHOPS ====================\napi.get(\"/game/shop/:shopId/items\", async (c) => {\n try {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const shopId = parseInt(c.req.param(\"shopId\"));\n const shop = await sqlite.execute({ sql: \"SELECT * FROM shops WHERE id = ?\", args: [shopId] });\n if (shop.rows.length === 0) return err(\"Shop not found\");\n const s = shop.rows[0] as any;\n // Get items appropriate for shop type\n let itemFilter = \"\";\n if (s.shop_type === \"weapon\") itemFilter = \"AND (item_type = 'weapon' OR item_type = 'ammo' OR item_type = 'armor')\";\n else if (s.shop_type === \"potion\") itemFilter = \"AND (item_type = 'consumable')\";\n else if (s.shop_type === \"seed\") itemFilter = \"AND (item_type = 'seed' OR item_type = 'tool')\";\n else itemFilter = \"AND item_type NOT IN ('quest')\";\n const items = await sqlite.execute({\n sql: `SELECT *, CAST(value * ${s.buy_modifier} AS INTEGER) as buy_price, CAST(value * ${s.sell_modifier} AS INTEGER) as sell_price FROM items WHERE is_quest_item = 0 ${itemFilter} ORDER BY item_type, value`,\n });\n return json({ shop: s, items: items.rows });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/shop/buy\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.buyFromShop(char.id, body.shop_id, body.item_id, body.quantity || 1);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/shop/sell\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.sellToShop(char.id, body.shop_id, body.item_id, body.quantity || 1);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== TRADING ====================\napi.post(\"/game/trade/offer\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.createTradeOffer(char.id, body.to_character_id, body.offered_items || [], body.offered_gold || 0, body.requested_items || [], body.requested_gold || 0);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/trade/respond\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.respondToTrade(body.trade_id, char.id, body.accept);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== RELATIONSHIPS ====================\napi.post(\"/game/gift\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.giveGift(char.id, body.target_id, body.item_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/propose\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.proposeMarriage(char.id, body.target_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== GUILDS ====================\napi.post(\"/game/guild/join\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.joinGuild(char.id, body.guild_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== QUESTS ====================\napi.post(\"/game/quest/accept\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.acceptQuest(char.id, body.quest_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/game/quests/:charId\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const char = await getActiveChar(account.id, parseInt(c.req.param(\"charId\")));\n const quests = await engine.getActiveQuests(char.id);\n return json(quests);\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== FOLLOWERS ====================\napi.post(\"/game/follower/recruit\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.recruitFollower(char.id, body.follower_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/follower/order\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.orderFollower(char.id, body.follower_id, body.order, body.details);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/game/followers/:charId\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const char = await getActiveChar(account.id, parseInt(c.req.param(\"charId\")));\n const followers = await engine.getFollowers(char.id);\n return json(followers);\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== TAMING ====================\napi.post(\"/game/tame\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.tamCreature(char.id, body.spawn_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/game/tamed/:charId\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const char = await getActiveChar(account.id, parseInt(c.req.param(\"charId\")));\n const tamed = await engine.getTamedCreatures(char.id);\n return json(tamed);\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== FARMING ====================\napi.post(\"/game/farm/plant\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.plantCrop(char.id, body.plot_id, body.seed_item_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/farm/water\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.waterCrop(char.id, body.plot_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/game/farm/harvest\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.harvestCrop(char.id, body.plot_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== CONSTRUCTION ====================\napi.post(\"/game/build\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.startConstruction(char.id, body.location_id || char.location_id, body.project_type, body.name);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== TRAVEL ====================\napi.post(\"/game/travel\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const result = await engine.useTravel(char.id, body.route_id);\n return json({ ok: true, ...result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== GAME LOG ====================\napi.get(\"/game/log/:charId\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const char = await getActiveChar(account.id, parseInt(c.req.param(\"charId\")));\n const log = await engine.getGameLog(char.id, parseInt(c.req.query(\"limit\") || \"20\"));\n return json(log);\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== CALENDAR ====================\napi.post(\"/game/advance-day\", async (c) => {\n try {\n await requireAuth(c.req.raw);\n const result = await engine.advanceDay();\n return json({ ok: true, calendar: result });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== EXPORT / IMPORT ====================\napi.get(\"/export/character/:charId\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const char = await getActiveChar(account.id, parseInt(c.req.param(\"charId\")));\n const data = await engine.exportCharacter(char.id);\n return json(data);\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/export/world\", async (c) => {\n try {\n await requireAuth(c.req.raw);\n const data = await engine.exportWorld();\n return json(data);\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== SOCIAL (friend requests, messages) ====================\napi.post(\"/social/friend-request\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n await sqlite.execute({\n sql: \"INSERT INTO friend_requests (from_account_id, to_account_id) VALUES (?, ?)\",\n args: [account.id, body.to_account_id],\n });\n return json({ ok: true, message: \"Friend request sent!\" });\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/social/friend-request/respond\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const status = body.accept ? \"accepted\" : \"rejected\";\n await sqlite.execute({\n sql: \"UPDATE friend_requests SET status = ? WHERE id = ? AND to_account_id = ?\",\n args: [status, body.request_id, account.id],\n });\n return json({ ok: true, message: `Friend request ${status}` });\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/social/friend-requests\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const result = await sqlite.execute({\n sql: `SELECT fr.*, a.username as from_username FROM friend_requests fr JOIN accounts a ON fr.from_account_id = a.id WHERE fr.to_account_id = ? AND fr.status = 'pending'`,\n args: [account.id],\n });\n return json(result.rows);\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/social/friends\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const result = await sqlite.execute({\n sql: `SELECT a.id, a.username FROM friend_requests fr JOIN accounts a ON (CASE WHEN fr.from_account_id = ? THEN fr.to_account_id ELSE fr.from_account_id END) = a.id WHERE (fr.from_account_id = ? OR fr.to_account_id = ?) AND fr.status = 'accepted'`,\n args: [account.id, account.id, account.id],\n });\n return json(result.rows);\n } catch (e: any) { return err(e.message); }\n});\n\napi.post(\"/social/message\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n // Check if they're friends\n const friends = await sqlite.execute({\n sql: `SELECT id FROM friend_requests WHERE ((from_account_id = ? AND to_account_id = ?) OR (from_account_id = ? AND to_account_id = ?)) AND status = 'accepted'`,\n args: [account.id, body.to_account_id, body.to_account_id, account.id],\n });\n if (friends.rows.length === 0) throw new Error(\"You can only message friends\");\n await sqlite.execute({\n sql: \"INSERT INTO messages (from_account_id, to_account_id, subject, body) VALUES (?, ?, ?, ?)\",\n args: [account.id, body.to_account_id, body.subject || \"\", body.body],\n });\n return json({ ok: true, message: \"Message sent!\" });\n } catch (e: any) { return err(e.message); }\n});\n\napi.get(\"/social/messages\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const result = await sqlite.execute({\n sql: `SELECT m.*, a.username as from_username FROM messages m JOIN accounts a ON m.from_account_id = a.id WHERE m.to_account_id = ? ORDER BY m.created_at DESC LIMIT 50`,\n args: [account.id],\n });\n return json(result.rows);\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== WORLD MAP ====================\napi.get(\"/world/continents\", async () => {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const continents = await sqlite.execute(\"SELECT * FROM continents ORDER BY id\");\n const result = [];\n for (const c of continents.rows as any[]) {\n const countries = await sqlite.execute({ sql: \"SELECT id, name, government_type, is_ethnically_diverse FROM countries WHERE continent_id = ?\", args: [c.id] });\n const wilderness = await sqlite.execute({ sql: \"SELECT id, name, danger_level, terrain_type FROM wilderness_areas WHERE continent_id = ?\", args: [c.id] });\n result.push({ ...c, countries: countries.rows, wilderness: wilderness.rows });\n }\n return json(result);\n});\n\napi.get(\"/world/countries/:id\", async (c) => {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const id = parseInt(c.req.param(\"id\"));\n const country = await sqlite.execute({ sql: \"SELECT c.*, cont.name as continent_name FROM countries c JOIN continents cont ON c.continent_id = cont.id WHERE c.id = ?\", args: [id] });\n if (country.rows.length === 0) return err(\"Country not found\");\n const locations = await sqlite.execute({ sql: \"SELECT id, name, location_type, is_safe_zone FROM locations WHERE country_id = ?\", args: [id] });\n return json({ ...country.rows[0], locations: locations.rows });\n});\n\napi.get(\"/world/islands\", async () => {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const islands = await sqlite.execute(\"SELECT i.*, c.name as continent_name FROM islands i LEFT JOIN continents c ON i.nearest_continent_id = c.id ORDER BY i.is_city_state DESC, i.name\");\n return json(islands.rows);\n});\n\n// ==================== FISHING ====================\napi.post(\"/game/fish\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json().catch(() => ({}));\n const char = await getActiveChar(account.id, body.character_id);\n // Check if has fishing rod\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const rod = await sqlite.execute({ sql: \"SELECT id FROM inventory WHERE character_id = ? AND item_id = 35\", args: [char.id] });\n if (rod.rows.length === 0) return err(\"You need a Fishing Rod! Buy one from a shop.\");\n // Random fish catch\n const fishTypes = [\n { name: \"Small Trout\", value: 5, exp: 10 },\n { name: \"River Bass\", value: 12, exp: 20 },\n { name: \"Golden Carp\", value: 30, exp: 50 },\n { name: \"Silver Salmon\", value: 25, exp: 40 },\n { name: \"Giant Catfish\", value: 50, exp: 80 },\n { name: \"Mystic Koi\", value: 100, exp: 150 },\n { name: \"Old Boot\", value: 1, exp: 5 },\n ];\n const luck = (char as any).luk || 10;\n const roll = Math.random() * 100;\n const fishIndex = roll < 5 + luck ? 5 : roll < 15 + luck ? 4 : roll < 30 ? 3 : roll < 50 ? 2 : roll < 80 ? 1 : roll < 95 ? 0 : 6;\n const fish = fishTypes[fishIndex];\n await sqlite.execute({ sql: \"UPDATE characters SET gold = gold + ?, experience = experience + ? WHERE id = ?\", args: [fish.value, fish.exp, char.id] });\n return json({ ok: true, message: `🐟 You caught a ${fish.name}! Earned ${fish.value} gold and ${fish.exp} exp!`, fish: fish.name, value: fish.value, exp: fish.exp });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== USE ITEM ====================\napi.post(\"/game/use-item\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json();\n const char = await getActiveChar(account.id, body.character_id);\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const inv = await sqlite.execute({\n sql: \"SELECT i.*, it.* FROM inventory i JOIN items it ON i.item_id = it.id WHERE i.id = ? AND i.character_id = ?\",\n args: [body.inventory_id, char.id],\n });\n if (inv.rows.length === 0) return err(\"Item not found in inventory\");\n const item = inv.rows[0] as any;\n if (item.item_type !== \"consumable\") return err(\"This item cannot be used\");\n // Apply effects\n const results: string[] = [];\n if (item.subtype === \"potion\") {\n if (item.name.includes(\"Health\")) {\n await sqlite.execute({ sql: \"UPDATE characters SET hp = MIN(max_hp, hp + 50) WHERE id = ?\", args: [char.id] });\n results.push(\"Restored 50 HP!\");\n } else if (item.name.includes(\"Mana\")) {\n await sqlite.execute({ sql: \"UPDATE characters SET mp = MIN(max_mp, mp + 30) WHERE id = ?\", args: [char.id] });\n results.push(\"Restored 30 MP!\");\n } else if (item.name.includes(\"Antidote\")) {\n results.push(\"Cured all poisons!\");\n } else if (item.name.includes(\"Elixir\")) {\n await sqlite.execute({ sql: \"UPDATE characters SET hp = max_hp, mp = max_mp WHERE id = ?\", args: [char.id] });\n results.push(\"Fully restored HP and MP!\");\n }\n } else if (item.subtype === \"food\") {\n await sqlite.execute({ sql: \"UPDATE characters SET hp = MIN(max_hp, hp + 10) WHERE id = ?\", args: [char.id] });\n results.push(`Ate ${item.name}. Restored 10 HP!`);\n }\n // Remove from inventory\n await engine.removeFromInventory(char.id, item.item_id, 1);\n return json({ ok: true, results, message: results.join(\" \") });\n } catch (e: any) { return err(e.message); }\n});\n\n// ==================== REST / HEAL AT INN ====================\napi.post(\"/game/rest\", async (c) => {\n try {\n const account = await requireAuth(c.req.raw);\n const body = await c.req.json().catch(() => ({}));\n const char = await getActiveChar(account.id, body.character_id);\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const cData = char as any;\n if (cData.gold < 10) return err(\"Not enough gold (10g for rest)\");\n await sqlite.execute({ sql: \"UPDATE characters SET hp = max_hp, mp = max_mp, gold = gold - 10 WHERE id = ?\", args: [cData.id] });\n return json({ ok: true, message: \"🛏️ You rest at the inn. HP and MP fully restored! (-10g)\" });\n } catch (e: any) { return err(e.message); }\n});\n\nexport default api;\n",[],[307,299],"api","aeda1f3c-5203-11f1-b9d1-ee650bb23af1",["D",1779031119624],[224],[307],["D",1779031119624],["D",1789498239291],{"_11":12,"_160":82},{"_11":12,"_156":82,"_81":82,"_31":80,"_157":158,"_159":30},{"_41":99,"_13":16,"_35":38,"_146":109,"_147":71,"_148":72,"_149":113,"_150":151,"_152":153,"_154":14,"_155":12},"ctx",{"_54":-5,"_181":350,"_351":352,"_353":354,"_355":30,"_356":30,"_357":30,"_358":24,"_359":-5,"_360":-7,"_361":-7,"_362":26,"_363":30,"_364":30,"_365":-5,"_366":30,"_367":30,"_368":30,"_369":-5},"ENV",{"_321":322,"_323":324,"_325":16,"_326":327,"_328":329,"_330":331,"_332":333,"_334":335,"_336":337,"_338":339,"_340":341,"_342":343,"_344":345,"_346":347,"_348":349},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · db