[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_172":173,"_174":175},"routes/_app.x.$handle.$name",{"_97":96,"_32":45,"_106":87,"_27":107,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":25,"_121":122,"_123":124,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":25},"version",18,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.js","latestPath","fileId","36f45eee-507b-11f1-9878-ee650bb23af1","name","fileType","http","content","import { Hono } from \"npm:hono@3\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { createHmac } from \"node:crypto\";\nimport process from \"node:process\";\n\nconst TOKEN_LIFETIME = parseInt(process.env.EXPIRY_TIME);\nconst TOKEN_SECRET = process.env.TOKEN_SECRET;\n\nconst BASE_TIME = 75;\nconst BONUS_TIME = 15;\nconst TOTAL_TIME = BASE_TIME + BONUS_TIME;\n\nconst MAX_ITEMS_PER_SECOND = 2;\nconst MAX_SPECIAL = 6;\nconst STANDARD_POINTS = 50;\nconst SPECIAL_POINTS = 200;\n\nconst throwError = async (ctx, error, errorCode = 500) => {\n ctx.status(errorCode);\n\n return ctx.json({\n success: false,\n error: error,\n });\n};\n\nconst getHighScores = async (ctx) => {\n try {\n const result = await sqlite.execute(\n \"SELECT id, name, score, duck, status FROM highscores ORDER BY score DESC, date ASC LIMIT 10\",\n );\n\n const scores = result.rows.map((row) => {\n return {\n id: row.id,\n name: row.name,\n score: row.score,\n duck: row.duck,\n status: row.status,\n };\n });\n\n return ctx.json({\n success: true,\n scores,\n });\n } catch (e) {\n console.error(e.message);\n\n return throwError(ctx, \"Internal Server Error\");\n }\n};\n\nconst getToken = async (ctx) => {\n try {\n const token = crypto.randomUUID();\n const expiryTime = Math.floor(Date.now() / 1000) + TOKEN_LIFETIME;\n\n const result = await sqlite.execute({\n sql: \"INSERT INTO tokens (token, expiry) VALUES (?, ?)\",\n args: [token, expiryTime],\n });\n\n if (result.rowsAffected !== 1) {\n return throwError(ctx, \"Error inputting token to DB\");\n }\n\n return ctx.json({\n success: true,\n token,\n });\n } catch (e) {\n console.error(e);\n }\n};\n\nconst getTokenValidity = async (token) => {\n if (!token) {\n return {\n isTokenValid: false,\n message: \"Authorization token invalid\",\n };\n }\n\n const splitToken = /Bearer (.*)/.exec(token);\n\n if (!splitToken[1]) {\n return {\n isTokenValid: false,\n message: \"Authorization token invalid\",\n };\n }\n\n const result = await sqlite.execute({\n sql: \"SELECT token, expiry FROM tokens WHERE token=?\",\n args: [splitToken[1]],\n });\n\n if (result.rows.length === 0) {\n return {\n isTokenValid: false,\n message: \"Authorization token invalid\",\n };\n }\n\n const expiry = result.rows[0].expiry;\n\n if (expiry > Math.floor(Date.now() / 1000) + TOKEN_LIFETIME) {\n return {\n isTokenValid: false,\n message: \"Authorization token expired\",\n };\n }\n\n return {\n isTokenValid: true,\n token: result.rows[0].token,\n message: null,\n };\n};\n\nconst setHighScore = async (ctx) => {\n try {\n const header = await ctx.req.header(\"Authorization\");\n\n const { isTokenValid, token, message } = await getTokenValidity(header);\n\n if (!isTokenValid) {\n return throwError(ctx, message);\n }\n\n const { name, score, duck, status } = await ctx.req.json();\n\n if (!name || !score || !duck) {\n return throwError(\n ctx,\n \"The following fields are required: name, score, duck\",\n );\n }\n\n if (!/^[A-Za-z0-9_-]{1,25}$/.test(name)) {\n return throwError(ctx, \"Name must fit format: [A-Za-z0-9_-]{1,25}\");\n }\n\n if (!/^[a-z_-]{1,10}$/.test(duck)) {\n return throwError(ctx, \"Duck must fit format: [a-z_-]{1,10}\");\n }\n\n if (isNaN(parseInt(score))) {\n return throwError(ctx, \"Score must be an Integer\");\n }\n\n const currentTime = Math.floor(Date.now() / 1000);\n\n const inputResult = await sqlite.execute({\n sql:\n \"INSERT INTO highscores (name, score, duck, status, date) VALUES (?, ?, ?, ?, ?)\",\n args: [name, score, duck, status, currentTime],\n });\n\n if (inputResult.rowsAffected !== 1) {\n return throwError(ctx, \"Error inputting score to DB\");\n }\n\n await sqlite.execute({\n sql: \"DELETE FROM tokens WHERE token=?\",\n args: [token],\n });\n\n return ctx.json({\n success: true,\n rows: [\n {\n name,\n score,\n },\n ],\n });\n } catch (e) {\n console.error(e);\n\n return throwError(ctx, \"Internal Server Error\");\n }\n};\n\nconst deleteScore = async (ctx) => {\n const header = await ctx.req.header(\"Authorization\");\n\n if (header !== `Bearer ${process.env.ADMIN_KEY}`) {\n return throwError(ctx, \"Unauthorized\", 401);\n }\n\n const { id } = await ctx.req.json();\n\n if (!id) {\n return throwError(ctx, \"The following fields are required: id\");\n }\n\n const result = await sqlite.execute({\n sql: \"DELETE FROM highscores WHERE id=?\",\n args: [id],\n });\n\n if (result.rowsAffected === 0) {\n return throwError(ctx, `Score id ${id} not found`);\n }\n\n return ctx.json({\n success: true,\n message: `Score id ${id} deleted`,\n });\n};\n\nconst getGameToken = async (ctx) => {\n try {\n const { name, map } = await ctx.req.json();\n\n // validate name\n if (!name || !/^[A-Za-z0-9_-]{1,25}$/.test(name)) {\n return throwError(ctx, \"Invalid name\", 400);\n }\n\n // validate map\n if (!map || !/^[A-Za-z0-9_-]{1,25}$/.test(map)) {\n return throwError(ctx, \"Invalid map\", 400);\n }\n\n const timestamp = Math.floor(Date.now() / 1000);\n const nonce = crypto.randomUUID();\n const expiry = timestamp + TOKEN_LIFETIME;\n\n const payload = `${name}:${map}:${timestamp}:${nonce}`;\n\n const hmac = createHmac(\"sha256\", TOKEN_SECRET)\n .update(payload)\n .digest(\"hex\");\n\n const token = crypto.randomUUID();\n\n const result = await sqlite.execute({\n sql: `\n INSERT INTO gameTokens\n (token, name, map, timestamp, nonce, hmac, expiry, used)\n VALUES (?, ?, ?, ?, ?, ?, ?, 0)\n `,\n args: [token, name, map, timestamp, nonce, hmac, expiry],\n });\n\n if (result.rowsAffected !== 1) {\n return throwError(ctx, \"Failed to create token\", 500);\n }\n\n ctx.status(200);\n return ctx.json({\n success: true,\n token,\n });\n } catch (e) {\n console.error(e);\n return throwError(ctx, \"Server error\", 500);\n }\n};\n\nexport const validateGameToken = async ({ token, name, map }) => {\n if (!token || !name || !map) {\n return { valid: false, reason: \"Missing fields\" };\n }\n\n const result = await sqlite.execute({\n sql: `SELECT * FROM gameTokens WHERE token = ?`,\n args: [token],\n });\n\n if (result.rows.length === 0) {\n return { valid: false, reason: \"Token not found\" };\n }\n\n const t = result.rows[0];\n const now = Math.floor(Date.now() / 1000);\n\n // already used\n if (t.used) {\n return { valid: false, reason: \"Token already used\" };\n }\n\n // expired\n if (t.expiry < now) {\n return { valid: false, reason: \"Token expired\" };\n }\n\n // wrong user/map binding\n if (t.name !== name || t.map !== map) {\n return { valid: false, reason: \"Token mismatch\" };\n }\n\n // too early (anti instant-fake-score)\n const elapsed = now - t.timestamp;\n\n if (elapsed < BASE_TIME) {\n return { valid: false, reason: \"Run too short\" };\n }\n\n // HMAC integrity check\n const payload = `${t.name}:${t.map}:${t.timestamp}:${t.nonce}`;\n\n const expectedHmac = createHmac(\"sha256\", TOKEN_SECRET)\n .update(payload)\n .digest(\"hex\");\n\n if (expectedHmac !== t.hmac) {\n return { valid: false, reason: \"Invalid signature\" };\n }\n\n return {\n valid: true,\n data: t,\n elapsed,\n };\n};\n\nexport const validateGameScore = ({ score, standard, special }) => {\n const MAX_ITEMS_PER_SECOND = 0.5;\n const MAX_SPECIAL = 6;\n\n const STANDARD_POINTS = 50;\n const SPECIAL_POINTS = 200;\n\n // sanity checks\n if (\n typeof score !== \"number\" ||\n typeof standard !== \"number\" ||\n typeof special !== \"number\"\n ) {\n return { valid: false, reason: \"Invalid types\" };\n }\n\n if (standard < 0 || special < 0 || score < 0) {\n return { valid: false, reason: \"Negative values not allowed\" };\n }\n\n // special limit\n if (special > MAX_SPECIAL) {\n return {\n valid: false,\n reason: \"Too many special items (limit exceeded)\",\n };\n }\n\n // standard items possible based on time\n const maxStandard = Math.floor(TOTAL_TIME * MAX_ITEMS_PER_SECOND);\n\n if (standard > maxStandard) {\n return {\n valid: false,\n reason: \"Too many standard items for time played\",\n };\n }\n\n // recompute expected score\n const expectedScore = standard * STANDARD_POINTS + special * SPECIAL_POINTS;\n\n const diff = Math.abs(expectedScore - score);\n if (diff > 0) {\n return {\n valid: false,\n reason: \"Score mismatch\",\n };\n }\n\n return {\n valid: true,\n expectedScore,\n };\n};\n\nexport const setGameScore = async (ctx) => {\n try {\n const {\n token,\n name,\n duck,\n map,\n score,\n standard,\n special,\n status: rawStatus,\n } = await ctx.req.json();\n\n const now = Math.floor(Date.now() / 1000);\n\n // normalize status (client metadata only)\n const status = rawStatus ? 1 : 0;\n\n if (!/^[a-z_-]{1,25}$/.test(name)) {\n return throwError(ctx, \"Name must fit format: [a-z_-]{1,25}\");\n }\n\n if (!/^[a-z_-]{1,25}$/.test(duck)) {\n return throwError(ctx, \"Duck must fit format: [a-z_-]{1,25}\");\n }\n\n if (!/^[a-z_-]{1,25}$/.test(map)) {\n return throwError(ctx, \"Map must fit format: [a-z_-]{1,25}\");\n }\n\n // token validation\n const tokenCheck = await validateGameToken({\n token,\n name,\n map,\n });\n\n if (!tokenCheck.valid) {\n return throwError(ctx, tokenCheck.reason, 403);\n }\n\n const t = tokenCheck.data;\n\n // score validation\n const scoreCheck = validateGameScore({\n score,\n standard,\n special,\n });\n\n if (!scoreCheck.valid) {\n return throwError(ctx, scoreCheck.reason, 403);\n }\n\n // check existing score for user\n const existing = await sqlite.execute({\n sql:\n `SELECT id, score FROM gameScores WHERE name = ? AND map = ? LIMIT 1`,\n args: [name, map],\n });\n\n if (existing.rows.length > 0) {\n const current = existing.rows[0];\n\n // if new score is LOWER or equal → ignore\n if (score <= current.score) {\n return ctx.json({\n success: true,\n message: \"Score not high enough to replace existing record\",\n rows: [\n {\n name,\n score: current.score,\n },\n ],\n });\n }\n\n // if higher → delete old\n await sqlite.execute({\n sql: `DELETE FROM gameScores WHERE id = ?`,\n args: [current.id],\n });\n }\n\n // insert new score\n await sqlite.execute({\n sql: `\n INSERT INTO gameScores\n (name, score, duck, status, date, map)\n VALUES (?, ?, ?, ?, ?, ?)\n `,\n args: [name, score, duck, status, now, map],\n });\n\n // mark token as used\n await sqlite.execute({\n sql: `UPDATE gameTokens SET used = 1 WHERE token = ?`,\n args: [token],\n });\n\n return ctx.json({\n success: true,\n rows: [\n {\n name,\n score,\n },\n ],\n });\n } catch (e) {\n console.error(e);\n return throwError(ctx, \"Server error\", 500);\n }\n};\n\nconst getGameScores = async (ctx) => {\n try {\n const result = await sqlite.execute(\n \"SELECT id, name, score, duck, status FROM gameScores ORDER BY score DESC, date ASC LIMIT 10\",\n );\n\n const scores = result.rows.map((row) => {\n return {\n id: row.id,\n name: row.name,\n score: row.score,\n duck: row.duck,\n status: row.status,\n };\n });\n\n return ctx.json({\n success: true,\n scores,\n });\n } catch (e) {\n console.error(e.message);\n\n return throwError(ctx, \"Internal Server Error\");\n }\n};\n\nconst app = new Hono();\napp.get(\"/getToken\", getToken);\n\napp.post(\"/setScore\", setHighScore);\napp.get(\"/getScores\", getHighScores);\n\napp.post(\"/deleteScore\", deleteScore);\n\napp.post(\"/getGameToken\", getGameToken);\napp.post(\"/setGameScore\", setGameScore);\napp.get(\"/getGameScores\", getGameScores);\n\nexport default app.fetch;","import { Hono } from \"npm:hono@3\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { createHmac } from \"node:crypto\";\nimport process from \"node:process\";\n\nconst TOKEN_LIFETIME = parseInt(process.env.EXPIRY_TIME);\nconst TOKEN_SECRET = process.env.TOKEN_SECRET;\n\nconst BASE_TIME = 75;\nconst BONUS_TIME = 15;\nconst TOTAL_TIME = BASE_TIME + BONUS_TIME;\n\nconst MAX_ITEMS_PER_SECOND = 2;\nconst MAX_SPECIAL = 6;\nconst STANDARD_POINTS = 50;\nconst SPECIAL_POINTS = 200;\n\nconst throwError = async (ctx, error, errorCode = 500) => {\n ctx.status(errorCode);\n\n return ctx.json({\n success: false,\n error: error,\n });\n};\n\nconst getHighScores = async (ctx) => {\n try {\n const result = await sqlite.execute(\n \"SELECT id, name, score, duck, status FROM highscores ORDER BY score DESC, date ASC LIMIT 10\",\n );\n\n const scores = result.rows.map((row) => {\n return {\n id: row.id,\n name: row.name,\n score: row.score,\n duck: row.duck,\n status: row.status,\n };\n });\n\n return ctx.json({\n success: true,\n scores,\n });\n } catch (e) {\n console.error(e.message);\n\n return throwError(ctx, \"Internal Server Error\");\n }\n};\n\nconst getToken = async (ctx) => {\n try {\n const token = crypto.randomUUID();\n const expiryTime = Math.floor(Date.now() / 1000) + TOKEN_LIFETIME;\n\n const result = await sqlite.execute({\n sql: \"INSERT INTO tokens (token, expiry) VALUES (?, ?)\",\n args: [token, expiryTime],\n });\n\n if (result.rowsAffected !== 1) {\n return throwError(ctx, \"Error inputting token to DB\");\n }\n\n return ctx.json({\n success: true,\n token,\n });\n } catch (e) {\n console.error(e);\n }\n};\n\nconst getTokenValidity = async (token) => {\n if (!token) {\n return {\n isTokenValid: false,\n message: \"Authorization token invalid\",\n };\n }\n\n const splitToken = /Bearer (.*)/.exec(token);\n\n if (!splitToken[1]) {\n return {\n isTokenValid: false,\n message: \"Authorization token invalid\",\n };\n }\n\n const result = await sqlite.execute({\n sql: \"SELECT token, expiry FROM tokens WHERE token=?\",\n args: [splitToken[1]],\n });\n\n if (result.rows.length === 0) {\n return {\n isTokenValid: false,\n message: \"Authorization token invalid\",\n };\n }\n\n const expiry = result.rows[0].expiry;\n\n if (expiry > Math.floor(Date.now() / 1000) + TOKEN_LIFETIME) {\n return {\n isTokenValid: false,\n message: \"Authorization token expired\",\n };\n }\n\n return {\n isTokenValid: true,\n token: result.rows[0].token,\n message: null,\n };\n};\n\nconst setHighScore = async (ctx) => {\n try {\n const header = await ctx.req.header(\"Authorization\");\n\n const { isTokenValid, token, message } = await getTokenValidity(header);\n\n if (!isTokenValid) {\n return throwError(ctx, message);\n }\n\n const { name, score, duck, status } = await ctx.req.json();\n\n if (!name || !score || !duck) {\n return throwError(\n ctx,\n \"The following fields are required: name, score, duck\",\n );\n }\n\n if (!/^[A-Za-z0-9_-]{1,25}$/.test(name)) {\n return throwError(ctx, \"Name must fit format: [A-Za-z0-9_-]{1,25}\");\n }\n\n if (!/^[a-z_-]{1,10}$/.test(duck)) {\n return throwError(ctx, \"Duck must fit format: [a-z_-]{1,10}\");\n }\n\n if (isNaN(parseInt(score))) {\n return throwError(ctx, \"Score must be an Integer\");\n }\n\n const currentTime = Math.floor(Date.now() / 1000);\n\n const inputResult = await sqlite.execute({\n sql:\n \"INSERT INTO highscores (name, score, duck, status, date) VALUES (?, ?, ?, ?, ?)\",\n args: [name, score, duck, status, currentTime],\n });\n\n if (inputResult.rowsAffected !== 1) {\n return throwError(ctx, \"Error inputting score to DB\");\n }\n\n await sqlite.execute({\n sql: \"DELETE FROM tokens WHERE token=?\",\n args: [token],\n });\n\n return ctx.json({\n success: true,\n rows: [\n {\n name,\n score,\n },\n ],\n });\n } catch (e) {\n console.error(e);\n\n return throwError(ctx, \"Internal Server Error\");\n }\n};\n\nconst deleteScore = async (ctx) => {\n const header = await ctx.req.header(\"Authorization\");\n\n if (header !== `Bearer ${process.env.ADMIN_KEY}`) {\n return throwError(ctx, \"Unauthorized\", 401);\n }\n\n const { id } = await ctx.req.json();\n\n if (!id) {\n return throwError(ctx, \"The following fields are required: id\");\n }\n\n const result = await sqlite.execute({\n sql: \"DELETE FROM highscores WHERE id=?\",\n args: [id],\n });\n\n if (result.rowsAffected === 0) {\n return throwError(ctx, `Score id ${id} not found`);\n }\n\n return ctx.json({\n success: true,\n message: `Score id ${id} deleted`,\n });\n};\n\nconst getGameToken = async (ctx) => {\n try {\n const { name, map } = await ctx.req.json();\n\n // validate name\n if (!name || !/^[A-Za-z0-9_-]{1,25}$/.test(name)) {\n return throwError(ctx, \"Invalid name\", 400);\n }\n\n // validate map\n if (!map || !/^[A-Za-z0-9_-]{1,25}$/.test(map)) {\n return throwError(ctx, \"Invalid map\", 400);\n }\n\n const timestamp = Math.floor(Date.now() / 1000);\n const nonce = crypto.randomUUID();\n const expiry = timestamp + TOKEN_LIFETIME;\n\n const payload = `${name}:${map}:${timestamp}:${nonce}`;\n\n const hmac = createHmac(\"sha256\", TOKEN_SECRET)\n .update(payload)\n .digest(\"hex\");\n\n const token = crypto.randomUUID();\n\n const result = await sqlite.execute({\n sql: `\n INSERT INTO gameTokens\n (token, name, map, timestamp, nonce, hmac, expiry, used)\n VALUES (?, ?, ?, ?, ?, ?, ?, 0)\n `,\n args: [token, name, map, timestamp, nonce, hmac, expiry],\n });\n\n if (result.rowsAffected !== 1) {\n return throwError(ctx, \"Failed to create token\", 500);\n }\n\n ctx.status(200);\n return ctx.json({\n success: true,\n token,\n });\n } catch (e) {\n console.error(e);\n return throwError(ctx, \"Server error\", 500);\n }\n};\n\nexport const validateGameToken = async ({ token, name, map }) => {\n if (!token || !name || !map) {\n return { valid: false, reason: \"Missing fields\" };\n }\n\n const result = await sqlite.execute({\n sql: `SELECT * FROM gameTokens WHERE token = ?`,\n args: [token],\n });\n\n if (result.rows.length === 0) {\n return { valid: false, reason: \"Token not found\" };\n }\n\n const t = result.rows[0];\n const now = Math.floor(Date.now() / 1000);\n\n // already used\n if (t.used) {\n return { valid: false, reason: \"Token already used\" };\n }\n\n // expired\n if (t.expiry < now) {\n return { valid: false, reason: \"Token expired\" };\n }\n\n // wrong user/map binding\n if (t.name !== name || t.map !== map) {\n return { valid: false, reason: \"Token mismatch\" };\n }\n\n // too early (anti instant-fake-score)\n const elapsed = now - t.timestamp;\n\n if (elapsed < BASE_TIME) {\n return { valid: false, reason: \"Run too short\" };\n }\n\n // HMAC integrity check\n const payload = `${t.name}:${t.map}:${t.timestamp}:${t.nonce}`;\n\n const expectedHmac = createHmac(\"sha256\", TOKEN_SECRET)\n .update(payload)\n .digest(\"hex\");\n\n if (expectedHmac !== t.hmac) {\n return { valid: false, reason: \"Invalid signature\" };\n }\n\n return {\n valid: true,\n data: t,\n elapsed,\n };\n};\n\nexport const validateGameScore = ({ score, standard, special }) => {\n // sanity checks\n if (\n typeof score !== \"number\" ||\n typeof standard !== \"number\" ||\n typeof special !== \"number\"\n ) {\n return { valid: false, reason: \"Invalid types\" };\n }\n\n if (standard < 0 || special < 0 || score < 0) {\n return { valid: false, reason: \"Negative values not allowed\" };\n }\n\n // special limit\n if (special > MAX_SPECIAL) {\n return {\n valid: false,\n reason: \"Too many special items (limit exceeded)\",\n };\n }\n\n // standard items possible based on time\n const maxStandard = Math.floor(TOTAL_TIME * MAX_ITEMS_PER_SECOND);\n\n if (standard > maxStandard) {\n return {\n valid: false,\n reason: \"Too many standard items for time played\",\n };\n }\n\n // recompute expected score\n const expectedScore = standard * STANDARD_POINTS + special * SPECIAL_POINTS;\n\n const diff = Math.abs(expectedScore - score);\n if (diff > 0) {\n return {\n valid: false,\n reason: \"Score mismatch\",\n };\n }\n\n return {\n valid: true,\n expectedScore,\n };\n};\n\nexport const setGameScore = async (ctx) => {\n try {\n const {\n token,\n name,\n duck,\n map,\n score,\n standard,\n special,\n status: rawStatus,\n } = await ctx.req.json();\n\n const now = Math.floor(Date.now() / 1000);\n\n // normalize status (client metadata only)\n const status = rawStatus ? 1 : 0;\n\n if (!/^[a-z_-]{1,25}$/.test(name)) {\n return throwError(ctx, \"Name must fit format: [a-z_-]{1,25}\");\n }\n\n if (!/^[a-z_-]{1,25}$/.test(duck)) {\n return throwError(ctx, \"Duck must fit format: [a-z_-]{1,25}\");\n }\n\n if (!/^[a-z_-]{1,25}$/.test(map)) {\n return throwError(ctx, \"Map must fit format: [a-z_-]{1,25}\");\n }\n\n // token validation\n const tokenCheck = await validateGameToken({\n token,\n name,\n map,\n });\n\n if (!tokenCheck.valid) {\n return throwError(ctx, tokenCheck.reason, 403);\n }\n\n const t = tokenCheck.data;\n\n // score validation\n const scoreCheck = validateGameScore({\n score,\n standard,\n special,\n });\n\n if (!scoreCheck.valid) {\n return throwError(ctx, scoreCheck.reason, 403);\n }\n\n // check existing score for user\n const existing = await sqlite.execute({\n sql:\n `SELECT id, score FROM gameScores WHERE name = ? AND map = ? LIMIT 1`,\n args: [name, map],\n });\n\n if (existing.rows.length > 0) {\n const current = existing.rows[0];\n\n // if new score is LOWER or equal → ignore\n if (score <= current.score) {\n return ctx.json({\n success: true,\n message: \"Score not high enough to replace existing record\",\n rows: [\n {\n name,\n score: current.score,\n },\n ],\n });\n }\n\n // if higher → delete old\n await sqlite.execute({\n sql: `DELETE FROM gameScores WHERE id = ?`,\n args: [current.id],\n });\n }\n\n // insert new score\n await sqlite.execute({\n sql: `\n INSERT INTO gameScores\n (name, score, duck, status, date, map)\n VALUES (?, ?, ?, ?, ?, ?)\n `,\n args: [name, score, duck, status, now, map],\n });\n\n // mark token as used\n await sqlite.execute({\n sql: `UPDATE gameTokens SET used = 1 WHERE token = ?`,\n args: [token],\n });\n\n return ctx.json({\n success: true,\n rows: [\n {\n name,\n score,\n },\n ],\n });\n } catch (e) {\n console.error(e);\n return throwError(ctx, \"Server error\", 500);\n }\n};\n\nconst getGameScores = async (ctx) => {\n try {\n const result = await sqlite.execute(\n \"SELECT id, name, score, duck, status FROM gameScores ORDER BY score DESC, date ASC LIMIT 10\",\n );\n\n const scores = result.rows.map((row) => {\n return {\n id: row.id,\n name: row.name,\n score: row.score,\n duck: row.duck,\n status: row.status,\n };\n });\n\n return ctx.json({\n success: true,\n scores,\n });\n } catch (e) {\n console.error(e.message);\n\n return throwError(ctx, \"Internal Server Error\");\n }\n};\n\nconst app = new Hono();\napp.get(\"/getToken\", getToken);\n\napp.post(\"/setScore\", setHighScore);\napp.get(\"/getScores\", getHighScores);\n\napp.post(\"/deleteScore\", deleteScore);\n\napp.post(\"/getGameToken\", getGameToken);\napp.post(\"/setGameScore\", setGameScore);\napp.get(\"/getGameScores\", getGameScores);\n\nexport default app.fetch;","createdAt",["D",1779464747825],"branchVersion","branchId","36eff9a8-507b-11f1-9878-ee650bb23af1","id","36ee93ec-507b-11f1-9878-ee650bb23af1","quack-quest",["D",1778862555799],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","eb5bed50-96e7-41e2-ae82-a4727e1bf98d","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019a4a58-bebb-74ef-aa85-170640dcba39","tursoName","36ee93ec507b11f19878ee650bb23af1","tursoHostname","36ee93ec507b11f19878ee650bb23af1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789500119686],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_97":96,"_105":100},"org",{"_97":96,"_98":-5,"_99":100,"_18":101,"_102":103,"_104":25},"branch",{"_13":86,"_32":87,"_43":42,"_88":44,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":45,"_95":96},"isOwned",30,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","toyfight","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzM0eVJkdVpDNmhWVm5aMTkyM3FRR3VBU0M0ZSJ9","019a4a58-beba-700e-9c59-85b725ed7e22","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":167,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":-5,"_53":-5,"_18":54,"_55":-5,"_56":25,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":64,"_65":66,"_67":168,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":169,"_81":170,"_83":171,"_85":25},"tree",[158,159],"files",[158,159],"counts",{"_147":60,"_148":149,"_150":60,"_151":152,"_153":154},"contents",[129,130],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":138,"_32":139,"_30":140,"_132":-5,"_41":42,"_40":141,"_133":25,"_38":142,"_13":143,"_33":144,"_35":145,"_24":25,"_136":-5,"_27":146},{"_43":131,"_32":28,"_30":31,"_132":-5,"_41":42,"_40":14,"_133":25,"_38":134,"_13":135,"_33":34,"_35":37,"_24":25,"_136":-5,"_27":137},"4d5cf162-55f5-11f1-905f-ee650bb23af1","parentId","latest",["D",1779464747825],13,"label",[28],"8d838350-507d-11f1-b9e5-ee650bb23af1","delete-expired-tokens.js","8db41c3c-507c-11f1-a341-ee650bb23af1",9,["D",1778863560037],3,"script","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport process from \"node:process\";\n\nconst tokenExpiryTime = parseInt(process.env.EXPIRY_TIME);\n\nexport default async function (interval) {\n const expiryTime = Math.floor(Date.now() / 1000) + tokenExpiryTime;\n\n await sqlite.execute({\n sql: \"DELETE FROM tokens WHERE expiry < ?\",\n args: [expiryTime],\n });\n}",[139],"pulls","branches",1,"forks","envVars",{"_155":143,"_157":60},"connections",{"_155":60,"_156":60},"count","unfilledCount","emptyCount",{"_43":138,"_32":139,"_30":140,"_132":-5,"_41":42,"_40":141,"_133":25,"_38":164,"_13":143,"_33":144,"_35":145,"_24":25,"_136":-5,"_161":165,"_27":166},{"_43":131,"_32":28,"_30":31,"_132":-5,"_41":42,"_40":14,"_133":25,"_38":160,"_13":135,"_33":34,"_35":37,"_24":25,"_136":-5,"_161":162,"_27":163},["D",1779464747825],"children",[],[28],["D",1778863560037],[],[139],["D",1778862555799],["D",1789500119686],{"_97":96,"_105":100},{"_97":96,"_98":-5,"_99":100,"_18":101,"_102":103,"_104":25},{"_13":86,"_32":87,"_43":42,"_88":44,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":45,"_95":96},"ctx",{"_79":-5,"_126":205,"_206":207,"_208":209,"_210":25,"_211":25,"_212":25,"_213":124,"_214":-5,"_215":-7,"_216":-7,"_217":60,"_218":25,"_219":25,"_220":-5,"_221":25,"_222":25,"_223":25,"_224":-5},"ENV",{"_176":177,"_178":179,"_180":87,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v18