[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10,"_11":12},"actionData","errors","root",{"_171":-5,"_174":175,"_176":177},"routes/shell",{"_41":42,"_170":-5,"_171":-5,"_172":173},"routes/repo",{"_34":-7,"_35":36,"_37":38,"_39":40,"_41":42,"_43":32,"_44":32,"_45":32,"_46":32,"_47":32,"_48":32,"_49":50,"_51":52,"_53":32,"_54":-7,"_55":-7,"_56":57,"_58":59,"_60":61,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70},"routes/repo.blob",{"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":-5,"_26":27,"_28":29,"_29":30,"_31":32,"_33":14},"ref","main","path","workers/accounts.ts","oid","00014a7b16555078be9354e00f4ab6770535cb81","size",14741,"commit","1958d30e3a543467d9bde2bd0c4873bc4f0f11f0","mounts",[],"source","plain",{"_13":14,"_15":16},"kind","text","import { emptyLibrary, parseSeriesLibrary } from '../src/lib/library';\nimport { noConsent, parseAdultConsent, type AdultConsent } from '../src/lib/adult';\n\nexport interface Env {\n DB: D1Database;\n ASSETS?: Fetcher;\n SITE_URL: string;\n /** Temporary old-origin access lets existing sessions finish syncing before moving. */\n LEGACY_SITE_URL?: string;\n OAUTH_GITHUB_CLIENT_ID: string;\n OAUTH_GITHUB_CLIENT_SECRET: string;\n OAUTH_GITHUB_REDIRECT_URI: string;\n}\n\nconst SESSION_COOKIE = 'litrpg_session';\nconst STATE_COOKIE = 'litrpg_oauth';\nconst SESSION_SECONDS = 30 * 24 * 60 * 60;\nconst MAX_BODY = 512 * 1024;\nconst now = () => Math.floor(Date.now() / 1000);\nconst random = () => base64(crypto.getRandomValues(new Uint8Array(32)));\nfunction base64(bytes: Uint8Array): string {\n return btoa(String.fromCharCode(...bytes)).replaceAll('+', '-').replaceAll('/', '_').replaceAll('=', '');\n}\nexport async function digest(value: string): Promise {\n return base64(new Uint8Array(await crypto.subtle.digest('SHA-256', new TextEncoder().encode(value))));\n}\nfunction cookie(request: Request, name: string): string | null {\n const values = request.headers.get('Cookie')?.split(';').map((part) => part.trim()) ?? [];\n const value = values.find((part) => part.startsWith(`${name}=`))?.slice(name.length + 1);\n return value && /^[A-Za-z0-9_-]{43}$/.test(value) ? value : null;\n}\nfunction setCookie(env: Env, name: string, value: string, seconds: number): string {\n const site = new URL(env.SITE_URL);\n return `${name}=${value}; Path=${site.pathname}; HttpOnly; SameSite=Lax; Max-Age=${seconds}${site.protocol === 'https:' ? '; Secure' : ''}`;\n}\nfunction json(data: unknown, status = 200): Response {\n return Response.json(data, { status, headers: { 'Cache-Control': 'no-store', 'X-Content-Type-Options': 'nosniff' } });\n}\nfunction redirect(location: string, cookies: string[] = []): Response {\n const headers = new Headers({ Location: location, 'Cache-Control': 'no-store', 'Referrer-Policy': 'no-referrer' });\n for (const value of cookies) headers.append('Set-Cookie', value);\n return new Response(null, { status: 303, headers });\n}\nfunction returnTo(input: string | null, site: URL): string {\n if (!input || !input.startsWith('/') || input.startsWith('//') || input.includes('\\\\')) return site.href;\n const url = new URL(input, site);\n return url.origin === site.origin && url.pathname === site.pathname ? url.href : site.href;\n}\ninterface UserRow {\n id: string; username: string; display_name: string; avatar_url: string;\n birth_date: string | null; birth_attested_at: string | null; allow_adult: number;\n}\n/** Stored columns are re-parsed rather than trusted: `allowAdult` is always recomputed from\n * the date, so a row written before a reader's birthday ages up on its own. */\nconst consentOf = (user: UserRow): AdultConsent =>\n parseAdultConsent({ birthDate: user.birth_date, attestedAt: user.birth_attested_at, allowAdult: user.allow_adult === 1 });\ninterface Session { user: UserRow; csrf: string; tokenHash: string }\nasync function session(request: Request, env: Env): Promise {\n const token = cookie(request, SESSION_COOKIE);\n if (!token) return null;\n const tokenHash = await digest(token);\n const user = await env.DB.prepare(`SELECT u.id, u.username, u.display_name, u.avatar_url, u.birth_date, u.birth_attested_at, u.allow_adult\n FROM sessions s JOIN users u ON u.id = s.user_id WHERE s.token_hash = ? AND s.expires_at > ?`)\n .bind(tokenHash, now()).first();\n return user ? { user, tokenHash, csrf: await digest(`csrf:${token}`) } : null;\n}\nasync function library(env: Env, userId: string) {\n const row = await env.DB.prepare('SELECT library_json, revision FROM libraries WHERE user_id = ?')\n .bind(userId).first<{ library_json: string; revision: number }>();\n return { userId, library: row ? JSON.parse(row.library_json) : emptyLibrary(), revision: row?.revision ?? 0 };\n}\nasync function body(request: Request): Promise {\n if (!request.headers.get('Content-Type')?.toLowerCase().startsWith('application/json')) throw new Error('content-type');\n if (Number(request.headers.get('Content-Length')) > MAX_BODY) throw new Error('size');\n const reader = request.body?.getReader();\n if (!reader) throw new Error('body');\n let length = 0;\n const chunks: Uint8Array[] = [];\n while (true) {\n const { value, done } = await reader.read();\n if (done) break;\n length += value.byteLength;\n if (length > MAX_BODY) { await reader.cancel(); throw new Error('size'); }\n chunks.push(value);\n }\n const bytes = new Uint8Array(length);\n let offset = 0;\n for (const chunk of chunks) { bytes.set(chunk, offset); offset += chunk.length; }\n return JSON.parse(new TextDecoder().decode(bytes));\n}\n\nasync function login(request: Request, env: Env, site: URL): Promise {\n if (!env.OAUTH_GITHUB_CLIENT_ID || !env.OAUTH_GITHUB_CLIENT_SECRET) return json({ error: 'Sign-in is not configured.' }, 503);\n const state = random(), verifier = random();\n await env.DB.batch([\n env.DB.prepare('DELETE FROM oauth_states WHERE expires_at <= ?').bind(now()),\n env.DB.prepare('DELETE FROM sessions WHERE expires_at <= ?').bind(now()),\n env.DB.prepare('INSERT INTO oauth_states (state_hash, verifier, return_to, expires_at) VALUES (?, ?, ?, ?)')\n .bind(await digest(state), verifier, returnTo(new URL(request.url).searchParams.get('returnTo'), site), now() + 600)\n ]);\n const url = new URL('https://github.com/login/oauth/authorize');\n url.search = new URLSearchParams({\n client_id: env.OAUTH_GITHUB_CLIENT_ID, redirect_uri: env.OAUTH_GITHUB_REDIRECT_URI,\n state, code_challenge: await digest(verifier), code_challenge_method: 'S256', scope: ''\n }).toString();\n return redirect(url.href, [setCookie(env, STATE_COOKIE, state, 600)]);\n}\n\nasync function callback(request: Request, env: Env, fetcher: typeof fetch): Promise {\n const url = new URL(request.url);\n const state = url.searchParams.get('state');\n const clear = setCookie(env, STATE_COOKIE, '', 0);\n const fail = () => redirect(`${env.SITE_URL}?auth=failed`, [clear]);\n if (!state || state !== cookie(request, STATE_COOKIE)) return fail();\n // Delete and read atomically: a callback is consumable once, even with concurrent requests.\n const pending = await env.DB.prepare('DELETE FROM oauth_states WHERE state_hash = ? AND expires_at > ? RETURNING verifier, return_to')\n .bind(await digest(state), now()).first<{ verifier: string; return_to: string }>();\n const code = url.searchParams.get('code');\n if (!pending || !code || code.length > 1024 || url.searchParams.has('error')) return fail();\n try {\n const tokenResponse = await fetcher('https://github.com/login/oauth/access_token', {\n method: 'POST', headers: { Accept: 'application/json', 'Content-Type': 'application/x-www-form-urlencoded' },\n body: new URLSearchParams({ client_id: env.OAUTH_GITHUB_CLIENT_ID, client_secret: env.OAUTH_GITHUB_CLIENT_SECRET,\n redirect_uri: env.OAUTH_GITHUB_REDIRECT_URI, code, code_verifier: pending.verifier }), signal: AbortSignal.timeout(10_000)\n });\n if (!tokenResponse.ok) return fail();\n const token = await tokenResponse.json() as { access_token?: string };\n if (typeof token.access_token !== 'string') return fail();\n const userResponse = await fetcher('https://api.github.com/user', {\n headers: { Authorization: `Bearer ${token.access_token}`, Accept: 'application/vnd.github+json', 'User-Agent': 'litrpg-hub' },\n signal: AbortSignal.timeout(10_000)\n });\n if (!userResponse.ok) return fail();\n const profile = await userResponse.json() as { id: number; login: string; name?: string; avatar_url?: string };\n if (!Number.isSafeInteger(profile.id) || profile.id <= 0 || typeof profile.login !== 'string') return fail();\n const id = `github:${profile.id}`;\n const sessionToken = random();\n const oldToken = cookie(request, SESSION_COOKIE);\n await env.DB.batch([\n env.DB.prepare(`INSERT INTO users (id, github_id, username, display_name, avatar_url, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?) ON CONFLICT(github_id) DO UPDATE SET\n username = excluded.username, display_name = excluded.display_name, avatar_url = excluded.avatar_url, updated_at = excluded.updated_at`)\n .bind(id, String(profile.id), profile.login.slice(0, 100), (profile.name || profile.login).slice(0, 200),\n profile.avatar_url?.startsWith('https://avatars.githubusercontent.com/') ? profile.avatar_url : '', now(), now()),\n env.DB.prepare('INSERT OR IGNORE INTO libraries (user_id, updated_at) VALUES (?, ?)').bind(id, now()),\n env.DB.prepare('DELETE FROM sessions WHERE token_hash = ?').bind(oldToken ? await digest(oldToken) : ''),\n env.DB.prepare('INSERT INTO sessions (token_hash, user_id, expires_at) VALUES (?, ?, ?)')\n .bind(await digest(sessionToken), id, now() + SESSION_SECONDS)\n ]);\n // GitHub access tokens are used only to establish identity; never store or return them.\n return redirect(pending.return_to, [clear, setCookie(env, SESSION_COOKIE, sessionToken, SESSION_SECONDS)]);\n } catch { return fail(); }\n}\n\nexport async function handle(request: Request, env: Env, fetcher: typeof fetch = fetch): Promise {\n const canonicalSite = new URL(env.SITE_URL), url = new URL(request.url);\n const legacySite = env.LEGACY_SITE_URL ? new URL(env.LEGACY_SITE_URL) : null;\n const isLegacy = url.origin !== canonicalSite.origin && url.origin === legacySite?.origin;\n if (url.origin !== canonicalSite.origin && !isLegacy) return json({ error: 'Unknown host.' }, 404);\n const site = isLegacy ? legacySite! : canonicalSite;\n const cookieEnv = isLegacy ? { ...env, SITE_URL: site.href } : env;\n const route = url.pathname.slice(site.pathname.length).replace(/\\/$/, '');\n if (!url.pathname.startsWith(site.pathname)) return json({ error: 'Not found.' }, 404);\n if (isLegacy && request.method === 'GET' && route === 'auth/login') {\n // New sessions belong to the canonical origin. Preserve only the same safe app-root\n // return path accepted by login(), never a destination supplied by another host.\n const target = new URL(returnTo(url.searchParams.get('returnTo'), site));\n const loginUrl = new URL('auth/login/', canonicalSite);\n loginUrl.searchParams.set('returnTo', `${canonicalSite.pathname}${target.search}${target.hash}`);\n return redirect(loginUrl.href);\n }\n if (isLegacy && request.method === 'GET' && route === 'auth/callback') {\n // An in-flight old-domain login cannot transfer its host-only state cookie. Restart\n // on the canonical site rather than exchange a code using a different redirect URI.\n return redirect(`${canonicalSite.href}?auth=failed`, [setCookie(cookieEnv, STATE_COOKIE, '', 0)]);\n }\n if (request.method === 'GET' && route === 'auth/login') return login(request, env, site);\n if (request.method === 'GET' && route === 'auth/callback') return callback(request, env, fetcher);\n if (!['api/session', 'api/library', 'api/adult', 'auth/logout'].includes(route)) {\n if (!route.startsWith('api/') && !route.startsWith('auth/') && env.ASSETS) return env.ASSETS.fetch(request);\n return json({ error: 'Not found.' }, 404);\n }\n if (request.method !== 'GET' && request.method !== 'POST' && request.method !== 'PUT') return json({ error: 'Method not allowed.' }, 405);\n const auth = await session(request, env);\n if (route === 'api/session' && request.method === 'GET') {\n return json({ user: auth ? { id: auth.user.id, username: auth.user.username, displayName: auth.user.display_name, avatarUrl: auth.user.avatar_url } : null,\n consent: auth ? consentOf(auth.user) : noConsent(), csrf: auth?.csrf ?? null });\n }\n if (!auth) return json({ error: 'Sign in to sync your library.' }, 401);\n if (request.method !== 'GET' && (request.headers.get('Origin') !== site.origin || request.headers.get('X-CSRF-Token') !== auth.csrf)) {\n return json({ error: 'Invalid request origin or CSRF token.' }, 403);\n }\n if (route === 'auth/logout' && request.method === 'POST') {\n await env.DB.prepare('DELETE FROM sessions WHERE token_hash = ?').bind(auth.tokenHash).run();\n const response = json({ ok: true });\n response.headers.set('Set-Cookie', setCookie(cookieEnv, SESSION_COOKIE, '', 0));\n return response;\n }\n if (route === 'api/adult' && request.method === 'PUT') {\n let data: { consent?: unknown };\n try { data = await body(request) as typeof data; } catch { return json({ error: 'Expected a JSON consent record.' }, 400); }\n // The client's unlock claim is never taken at face value: parseAdultConsent recomputes it\n // from the date, so a submitted `allowAdult` cannot bypass the age bar.\n const consent = parseAdultConsent(data?.consent);\n await env.DB.prepare('UPDATE users SET birth_date = ?, birth_attested_at = ?, allow_adult = ?, updated_at = ? WHERE id = ?')\n .bind(consent.birthDate, consent.attestedAt, consent.allowAdult ? 1 : 0, now(), auth.user.id).run();\n return json({ consent });\n }\n if (route === 'api/library' && request.method === 'GET') return json(await library(env, auth.user.id));\n if (route === 'api/library' && request.method === 'PUT') {\n let data: { library?: unknown; revision?: number };\n try { data = await body(request) as typeof data; } catch { return json({ error: 'Expected a JSON library under 512 KiB.' }, 400); }\n const parsed = parseSeriesLibrary(data?.library);\n if (!parsed || !Number.isSafeInteger(data?.revision) || data.revision! < 0\n || canonical(parsed) !== canonical(data.library)) return json({ error: 'Invalid library or revision.' }, 400);\n const result = await env.DB.prepare('UPDATE libraries SET library_json = ?, revision = revision + 1, updated_at = ? WHERE user_id = ? AND revision = ? RETURNING revision')\n .bind(JSON.stringify(parsed), now(), auth.user.id, data.revision!).first<{ revision: number }>();\n if (!result) return json(await library(env, auth.user.id), 409);\n return json({ userId: auth.user.id, library: parsed, revision: result.revision });\n }\n return json({ error: 'Method not allowed.' }, 405);\n}\n\nfunction canonical(value: unknown): string {\n if (value && typeof value === 'object' && !Array.isArray(value)) {\n return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonical((value as Record)[key])}`).join(',')}}`;\n }\n return JSON.stringify(value);\n}\n\nexport default {\n async fetch(request: Request, env: Env): Promise {\n try { return await handle(request, env); }\n catch { return json({ error: 'Account service is temporarily unavailable.' }, 503); }\n }\n};\n","editable",false,"branch","documentNavigation","repo","iamnbutler/shelfgoblin","repoId","5cd9c661-f631-4f6f-8ba4-fd4d736e1cce","ownerId","user:1714999","site","nexthub","private","admin","settings","maintainer","triage","starred","stars",0,"watchers",1,"watching","pinned","notify","views",[126,127,128,129,130,131,132,133,134,135,136,137,138],"navigation",{"_56":57,"_85":86,"_87":88,"_89":90,"_91":92,"_93":94,"_95":96},"sources",[],"viewer","meta",{"_77":78,"_79":80,"_81":82,"_43":32,"_83":14,"_84":32,"_49":50,"_51":52},"branches",[72,73,74,75,14,76],"tags",[71],"cloneUrl","https://git.nexthub.sh/iamnbutler/shelfgoblin.git","catalog-contract-v1.0.0","chore/activate-catalog-worker","codex/compact-navigation","codex/login-d1","feat/quality-research-index","refactor/catalog-consumer","description","Shelf Goblin — discover LitRPG audiobooks, follow series, and track your library.","owner","iamnbutler","section","","head","empty","pins",[108,109,110],"documents",{"_105":106,"_107":50},"code",{"_102":103,"_104":50},"automations",{"_99":100,"_101":-5},"delivery",{"_97":50,"_98":-5},"tag","qZL1HNr33mhBASaxT9aAulkTqQf","releases","applications","workflows",3,"deployments","commits",121,"changes","counts",{},"total",{"_111":104,"_113":124,"_15":104,"_115":125,"_54":117,"_118":32,"_119":117,"_120":50},{"_111":121,"_113":122,"_15":121,"_115":123,"_54":117,"_118":32,"_119":117,"_120":50},{"_111":112,"_113":114,"_15":112,"_115":116,"_54":117,"_118":32,"_119":117,"_120":50},"id","issues","name","Issues","filters",{},true,"saved","pinnable","count","tasks","Tasks",{},"Changes",{},{"_111":104,"_113":124,"_15":104,"_115":169,"_54":117,"_118":32,"_119":117},{"_111":121,"_113":122,"_15":121,"_115":168,"_54":117,"_118":32,"_119":117},{"_111":112,"_113":114,"_15":112,"_115":167,"_54":117,"_118":32,"_119":117},{"_111":164,"_113":165,"_15":164,"_115":166,"_54":32,"_118":32,"_119":117},{"_111":161,"_113":162,"_15":161,"_115":163,"_54":32,"_118":32,"_119":117},{"_111":99,"_113":159,"_15":91,"_115":160,"_54":32,"_118":32,"_119":117},{"_111":101,"_113":156,"_15":157,"_115":158,"_54":32,"_118":32,"_119":117},{"_111":97,"_113":154,"_15":97,"_115":155,"_54":32,"_118":32,"_119":117},{"_111":150,"_113":151,"_15":152,"_115":153,"_54":32,"_118":32,"_119":117},{"_111":87,"_113":148,"_15":87,"_115":149,"_54":32,"_118":32,"_119":32},{"_111":145,"_113":146,"_15":145,"_115":147,"_54":32,"_118":32,"_119":32},{"_111":142,"_113":143,"_15":142,"_115":144,"_54":32,"_118":32,"_119":32},{"_111":139,"_113":140,"_15":139,"_115":141,"_54":32,"_118":32,"_119":32},"decisions","Decisions",{},"changelog","Changelog",{},"roadmap","Roadmap",{},"Documents",{},"activity","Activity","insights",{},"Releases",{},"Deployments","automations/deployments",{},"Workflows",{},"discussions","Discussions",{},"goals","Goals",{},{},{},{},"groups","user","agents",[],"now",1794434586629,"sidebar","expanded"]