draftlink 0.1.0

package/src/util.ts

@@ -0,0 +1,119 @@
+const CHARS = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
+
+export const enc = new TextEncoder();
+export const dec = new TextDecoder();
+
+export function randomId(len = 12): string {
+  const bytes = crypto.getRandomValues(new Uint8Array(len));
+  let out = "";
+  for (let i = 0; i < len; i++) out += CHARS[bytes[i] % CHARS.length];
+  return out;
+}
+
+export function randomHex(bytes = 16): string {
+  return [...crypto.getRandomValues(new Uint8Array(bytes))]
+    .map((b) => b.toString(16).padStart(2, "0"))
+    .join("");
+}
+
+export function b64urlEncodeBytes(bytes: Uint8Array): string {
+  let s = "";
+  for (const b of bytes) s += String.fromCharCode(b);
+  return btoa(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+
+export function b64urlEncode(s: string): string {
+  return b64urlEncodeBytes(enc.encode(s));
+}
+
+export function b64urlDecode(s: string): string {
+  const padded = s.replace(/-/g, "+").replace(/_/g, "/");
+  return dec.decode(Uint8Array.from(atob(padded), (c) => c.charCodeAt(0)));
+}
+
+export async function hmacSign(secret: string, msg: string): Promise<string> {
+  const key = await crypto.subtle.importKey(
+    "raw",
+    enc.encode(secret),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const sig = await crypto.subtle.sign("HMAC", key, enc.encode(msg));
+  return b64urlEncodeBytes(new Uint8Array(sig));
+}
+
+export async function sha256Hex(input: string): Promise<string> {
+  const digest = await crypto.subtle.digest("SHA-256", enc.encode(input));
+  return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+
+export function timingSafeEqual(a: string, b: string): boolean {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return diff === 0;
+}
+
+export interface SignedPayload {
+  [k: string]: unknown;
+}
+
+export async function signPayload(secret: string, payload: SignedPayload): Promise<string> {
+  const body = b64urlEncode(JSON.stringify(payload));
+  return `${body}.${await hmacSign(secret, body)}`;
+}
+
+export async function verifyPayload(secret: string, token: string | undefined): Promise<SignedPayload | null> {
+  if (!token) return null;
+  const dot = token.lastIndexOf(".");
+  if (dot < 0) return null;
+  const body = token.slice(0, dot);
+  const sig = token.slice(dot + 1);
+  if (!timingSafeEqual(sig, await hmacSign(secret, body))) return null;
+  try {
+    const payload = JSON.parse(b64urlDecode(body)) as SignedPayload;
+    if (typeof payload.exp !== "number" || payload.exp < Date.now()) return null;
+    return payload;
+  } catch {
+    return null;
+  }
+}
+
+export function esc(s: string): string {
+  return s
+    .replace(/&/g, "&amp;")
+    .replace(/</g, "&lt;")
+    .replace(/>/g, "&gt;")
+    .replace(/"/g, "&quot;")
+    .replace(/'/g, "&#39;");
+}
+
+export function getCookie(req: Request, name: string): string | undefined {
+  const header = req.headers.get("Cookie");
+  if (!header) return undefined;
+  for (const part of header.split(";")) {
+    const idx = part.indexOf("=");
+    if (idx < 0) continue;
+    if (part.slice(0, idx).trim() === name) return part.slice(idx + 1).trim();
+  }
+  return undefined;
+}
+
+export function cookieHeader(name: string, value: string, maxAge: number, secure: boolean): [string, string] {
+  const flags = `Path=/; HttpOnly; SameSite=Lax; Max-Age=${maxAge}`;
+  return ["Set-Cookie", `${name}=${value}; ${secure ? "Secure; " : ""}${flags}`];
+}
+
+const MONTHS = ["January", "February", "March", "April", "May", "June", "July", "August", "September", "October", "November", "December"];
+
+export function monthLabel(ms: number): string {
+  const d = new Date(ms);
+  return `${MONTHS[d.getUTCMonth()]} ${d.getUTCFullYear()}`;
+}
+
+export function dateLabel(ms: number): string {
+  const d = new Date(ms);
+  const p = (n: number) => String(n).padStart(2, "0");
+  return `${d.getUTCDate()} ${MONTHS[d.getUTCMonth()].slice(0, 3)} ${p(d.getUTCHours())}:${p(d.getUTCMinutes())} UTC`;
+}

package/tsconfig.json

@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "ES2022",
+    "moduleResolution": "bundler",
+    "lib": ["ES2022"],
+    "types": ["@cloudflare/workers-types", "@cloudflare/vitest-pool-workers/types"],
+    "strict": true,
+    "noEmit": true,
+    "skipLibCheck": true,
+    "isolatedModules": true,
+    "forceConsistentCasingInFileNames": true
+  },
+  "include": ["src", "tests", "vitest.config.ts"]
+}

package/wrangler.jsonc

@@ -0,0 +1,15 @@
+{
+  "name": "draftlink",
+  "main": "src/index.ts",
+  "compatibility_date": "2026-08-01",
+  "assets": {
+    "directory": "assets"
+  },
+  "d1_databases": [
+    {
+      "binding": "DB",
+      "database_name": "draftlink",
+      "migrations_dir": "migrations"
+    }
+  ]
+}