hashbrown THREE

// ==UserScript==
// @name HashBrown 3
// @author gimmickCellar
// @description hashbrown 2 but actually human made this time
// @match *://*/*
// ==/UserScript==

//i am so sorry for the state of this codebase, just be glad it isnt vibecoded
if(!w&&!owot){return "not an nwot, aborting"};
var privateKey;
var publicKeyBase64;
window.hashcache = [];

async function startCryptoApi() {
    var storedKeys = localStorage.getItem('hb3');
    if (storedKeys) {
        var keys = JSON.parse(storedKeys);
        privateKey = await crypto.subtle.importKey("jwk", keys.priv||keys.jwkpr, {name:"ECDSA",namedCurve:"P-256"},true,["sign"]);
        publicKeyBase64 = keys.pubBase64;
    } else {
        var pair = await crypto.subtle.generateKey({name:"ECDSA",namedCurve:"P-256"},true,["sign","verify"]);
        privateKey = pair.privateKey;
        var pub = pair.publicKey;
        var jwkpr = await crypto.subtle.exportKey("jwk",privateKey);
        var jwkpu = await crypto.subtle.exportKey("jwk",pub);
        var Pub = await crypto.subtle.exportKey("raw",pub);
        publicKeyBase64 = btoa(String.fromCharCode(...new Uint8Array(Pub)));
        localStorage.setItem('hb3',JSON.stringify({jwkpr,jwkpu,pubBase64:publicKeyBase64}));
    }
}

w.tileToChar=(tileX,tileY,charX,charY)=>{ //helper, available to other scripts
    var x = tileX * 16 + charX;
    var y = tileY * 8 + charY;
    return {x:x,y:y};
};

window.TemperTantrum=()=>{return new Error("VIGUEGYU8ZVGJHVTJYZVGYJA YOU LIED YOU LIED YOU LIED")}; //#UQMOMENT

async function url(item){
    if(!item)throw TemperTantrum(); // average owot user
    var x=item[0];var y=item[1];var chara=item[2];var d=item[3];var u=item[4];var wd=item[5];var dn=item[10]
    var msg=`${wd},${x},${y},${chara},${d},${u},${dn}`;
    var enc=new TextEncoder().encode(msg);
    var sigBuf=await crypto.subtle.sign({name:"ECDSA",hash:{name:"SHA-256"}},privateKey,enc);
    var sigArr=new Uint8Array(sigBuf);
    var sigB64=btoa(String.fromCharCode(...sigArr));
    var verifier="https://gimmickcellar.nekoweb.org/verifyhash2.html"; //todo: allow this to be changed
    var ew=encodeURIComponent(wd);
    var eu=encodeURIComponent(u);
    var es=encodeURIComponent(sigB64).replace(/\+/g,'%2B');
    var ep=encodeURIComponent(publicKeyBase64).replace(/\+/g,'%2B');
    return `${verifier}?w=${ew}&x=${x}&y=${y}&c=${chara}&d=${d}&u=${eu}&sig=${es}&pub=${ep}&dn=${dn}`;
}

(()=>{
    w.on("write",e=>{
        if(e.char==="\x08"||e.char===" "||e.char==="\xa0")return;
        var u=state.userModel.username;
        var wd=state.worldModel.name || "Main"; //wd gasters.,,.,,,, (seriously, this is just compat with slopbrown 2)
        var id=nextObjId-1;
        var coords=w.tileToChar(e.tileX,e.tileY,e.charX,e.charY);
        var x=coords.x;
        var y=coords.y;
        var tx=e.tileX;
        var ty=e.tileY;
        var cx=e.charX;
        var cy=e.charY;
        var chara=e.char.codePointAt(0);
        var d=0;
		var dn=Date.now(); //screw it we dont need support for hb2
        window.hashcache[id]=[x,y,chara,d,u,wd,tx,ty,cx,cy,dn];
    });
    w.on("writeResponse",e=>{
        if((!e.accepted)||window["hashn'tbrown"])return; // hash brown or hashn't brown?
        e.accepted.forEach(async id=>{
            var a=window.hashcache[id];
            if(!a)return;
            var linkVal=await url(a);
            network.link({tileX:a[6],tileY:a[7],charX:a[8],charY:a[9]},"url",{url:linkVal});
            delete window.hashcache[id];
        });
    });
    menu.addCheckboxOption("Disable HashBrown 3",()=>{window["hashn'tbrown"]=true},()=>{window["hashn'tbrown"]=false}) //todo: make this save
    startCryptoApi();
})()