Website: 16-bit pixel-art rebuild with a live Three.js office, downloads from Gitea v1.5.1

- Title screen over a real-time voxel office rendered at low resolution and quantized to a rotating 32-colour palette with Bayer dithering; day part and season re-light the scene and every surface.
- 16-bit UI kit: name-plate dialogs, menu cursor, inventory, XP bar, badges, NPC speech, GAME OVER with CONTINUE, hand-placed 12x12 icons, Fusion Pixel font (Latin subset preloaded).
- Sections as a game: quest log (onboarding), character select (AI CEO / AI Co-Founder), inventory (features), party roster (providers), live download XP, save point (all v1.5.1 builds), FAQ as NPC dialog, credits.
- Downloads and source point to the Gitea release; the download function only redirects to git.zacharyzhang.com.
- Tailwind and the old components removed; unit tests for platform/downloads, rewritten e2e suite.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

landing/functions/api/download-stats.ts

@@ -18,10 +18,16 @@ async function readDownloadCount(db: CounterDatabase) {
     .bind(DOWNLOAD_COUNT_SEED)
     .first<{ downloads: number }>();
 
-  return result?.downloads ?? DOWNLOAD_COUNT_SEED;
+  if (!result) {
+    throw new Error("Download count query returned no row.");
+  }
+  return result.downloads;
 }
 
 export const onRequestGet: PagesHandler<Env> = async (context) => {
+  if (!context.env.DOWNLOAD_COUNTER_DB) {
+    throw new Error("DOWNLOAD_COUNTER_DB binding is missing.");
+  }
   const downloads = await readDownloadCount(context.env.DOWNLOAD_COUNTER_DB);
   return Response.json(
     { downloads },

landing/functions/api/download.ts

@@ -1,12 +1,13 @@
 import {
   DOWNLOAD_DEDUP_WINDOW_MS,
   getDownloadAsset,
+  isAllowedDownloadUrl,
 } from "../../lib/downloads";
 import type { CounterDatabase, PagesHandler } from "../types";
 
 interface Env {
   DOWNLOAD_COUNTER_DB: CounterDatabase;
-  DOWNLOAD_COUNTER_SALT?: string;
+  DOWNLOAD_COUNTER_SALT: string;
 }
 
 function getClientIp(request: Request) {
@@ -28,13 +29,13 @@ async function sha256Hex(input: string) {
   return Array.from(new Uint8Array(buffer), (byte) => byte.toString(16).padStart(2, "0")).join("");
 }
 
-async function countUniqueDownload(db: CounterDatabase, request: Request, assetId: string, salt: string | undefined) {
+async function countUniqueDownload(db: CounterDatabase, request: Request, assetId: string, salt: string) {
   const clientIp = getClientIp(request);
   if (!clientIp) {
     return;
   }
 
-  const ipHash = await sha256Hex(`${salt ?? ""}:${clientIp}`);
+  const ipHash = await sha256Hex(`${salt}:${clientIp}`);
   const windowKey = getWindowKey();
 
   await db
@@ -51,6 +52,13 @@ async function countUniqueDownload(db: CounterDatabase, request: Request, assetI
 }
 
 export const onRequestGet: PagesHandler<Env> = async (context) => {
+  if (!context.env.DOWNLOAD_COUNTER_DB) {
+    throw new Error("DOWNLOAD_COUNTER_DB binding is missing.");
+  }
+  if (!context.env.DOWNLOAD_COUNTER_SALT) {
+    throw new Error("DOWNLOAD_COUNTER_SALT variable is missing.");
+  }
+
   const url = new URL(context.request.url);
   const assetId = url.searchParams.get("asset")?.trim();
   if (!assetId) {
@@ -61,6 +69,9 @@ export const onRequestGet: PagesHandler<Env> = async (context) => {
   if (!asset) {
     return new Response("Unknown asset.", { status: 404 });
   }
+  if (!isAllowedDownloadUrl(asset.href)) {
+    throw new Error(`Asset ${asset.id} points outside the release host: ${asset.href}`);
+  }
 
   await countUniqueDownload(
     context.env.DOWNLOAD_COUNTER_DB,