Add persisted and shareable builds

src/routes/builder/+page.server.ts

@@ -1,9 +1,39 @@
 import { getDatabase } from '$lib/server/database';
 import { gameDataIconUrl } from '$lib/server/game-data-icons';
-import type { PageServerLoad } from './$types';
+import { getSessionUser } from '$lib/server/auth/session';
+import { fail } from '@sveltejs/kit';
+import { randomUUID } from 'node:crypto';
+import type { Actions, PageServerLoad } from './$types';
 
-export const load: PageServerLoad = async () => {
+const validVisibility = new Set(['private', 'unlisted', 'public']);
+const slugify = (value: string) => value.toLowerCase().normalize('NFKD')
+	.replace(/[^\w\s-]/g, '').trim().replace(/[\s_]+/g, '-').replace(/-+/g, '-').slice(0, 60) || 'loadout';
+
+function parseLoadout(raw: FormDataEntryValue | null) {
+	if (typeof raw !== 'string' || raw.length > 250_000) return null;
+	try {
+		const value = JSON.parse(raw);
+		if (value?.version !== 1 || typeof value.buildName !== 'string' || !value.gear ||
+			!Array.isArray(value.weapons) || value.weapons.length !== 2 ||
+			!Array.isArray(value.chips) || value.chips.length !== 3 || !value.protocol) return null;
+		return value;
+	} catch {
+		return null;
+	}
+}
+
+export const load: PageServerLoad = async ({ cookies, url }) => {
 	const database = await getDatabase();
+	const viewer = await getSessionUser(cookies);
+	const requestedSlug = url.searchParams.get('build');
+	let initialBuild = null;
+	if (requestedSlug && viewer) {
+		const row = await (await database.prepare(
+			'SELECT id,title,slug,visibility,loadout_json FROM builds WHERE slug=? AND owner_id=?'
+		)).get(requestedSlug, viewer.id);
+		const loadout = typeof row?.loadout_json === 'string' ? parseLoadout(row.loadout_json) : null;
+		if (row && loadout) initialBuild = { id: String(row.id), slug: String(row.slug), visibility: String(row.visibility), loadout };
+	}
 	const [
 		attributes, gear, gearBrands, gearTalents, gearAugments, gearAugmentCosts, brands, brandEffects,
 		weapons, weaponRanges, weaponTalentOptions, weaponBonuses,
@@ -57,6 +87,8 @@ export const load: PageServerLoad = async () => {
 		}))
 	}));
 	return {
+		viewer: viewer ? { id: viewer.id, displayName: viewer.displayName } : null,
+		initialBuild,
 		attributes,
 		coreRanges,
 		gear: gear.map((item) => ({
@@ -105,3 +137,43 @@ export const load: PageServerLoad = async () => {
 		})
 	};
 };
+
+export const actions: Actions = {
+	save: async ({ cookies, request }) => {
+		const user = await getSessionUser(cookies);
+		if (!user) return fail(401, { buildError: 'Sign in to save and share this loadout.' });
+		const formData = await request.formData();
+		const loadout = parseLoadout(formData.get('loadout'));
+		const visibility = String(formData.get('visibility') ?? 'private');
+		const id = String(formData.get('id') ?? '').trim();
+		if (!loadout) return fail(400, { buildError: 'The loadout data is invalid. Refresh the builder and try again.' });
+		const title = loadout.buildName.trim();
+		if (title.length < 2 || title.length > 100) return fail(400, { buildError: 'Build names must be between 2 and 100 characters.' });
+		if (!validVisibility.has(visibility)) return fail(400, { buildError: 'Choose a valid build visibility.' });
+
+		const database = await getDatabase();
+		const now = new Date().toISOString();
+		let buildId = id;
+		let slug = '';
+		if (buildId) {
+			const existing = await (await database.prepare('SELECT id,slug FROM builds WHERE id=? AND owner_id=?')).get(buildId, user.id);
+			if (!existing) return fail(404, { buildError: 'This saved build could not be found.' });
+			slug = String(existing.slug);
+			await (await database.prepare(
+				'UPDATE builds SET title=?,visibility=?,loadout_json=?,updated_at=? WHERE id=? AND owner_id=?'
+			)).run(title, visibility, JSON.stringify(loadout), now, buildId, user.id);
+		} else {
+			buildId = randomUUID();
+			slug = `${slugify(title)}-${buildId.slice(0, 8)}`;
+			await (await database.prepare(
+				`INSERT INTO builds(id,owner_id,title,slug,visibility,loadout_json,created_at,updated_at)
+				 VALUES(?,?,?,?,?,?,?,?)`
+			)).run(buildId, user.id, title, slug, visibility, JSON.stringify(loadout), now, now);
+		}
+		return {
+			buildSaved: true,
+			buildToken: randomUUID(),
+			savedBuild: { id: buildId, slug, visibility, title }
+		};
+	}
+};