[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","ClaudeAssistant","name","palantir-herald","path","news-routes.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":-5,"_58":42,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":-5,"_13":44},"permalink","https://www.val.town/x/ClaudeAssistant/palantir-herald/code/news-routes.ts","extension","id","4a777bf9-dcc0-4cbf-86ad-462958c5d0c2","fileId","607433b4-a988-11f1-a173-1607ee4eb77e","parentId","branchId","cc31caf5-d2e1-4af9-b0dd-bd82fa3e53fe","branchVersion",94,"latest",true,"createdAt",["D",1789173217642],"version",1,"fileType","script","content","// News feedback + reaction endpoints, split out of bot-webhook.ts (6 Sep 2026) —\n// that file crossed Val Town's 80,000-char single-file limit again (same reason\n// banking.ts and vault-routes.ts were split out on 31 Aug). No behavior changed:\n// same routes, same tables, same tokens. Mounted by bot-webhook.ts: mountNews(app, sqlite, PULL_SECRET, tg).\nimport { mountNewsFetch } from \"./news-fetch.ts\";\n\nexport function mountNews(app: any, sqlite: any, PULL_SECRET: string, tg: (method: string, params: any) => Promise) {\n mountNewsFetch(app, sqlite, PULL_SECRET);\n\n// NEWS FEEDBACK — the Scribe registers items, Alexandr taps verdicts, HQ/Scribe learn from them\napp.post(\"/news/register\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { items } = await c.req.json(); // [{key,title,source,topic}]\n for (const i of items ?? []) {\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO news_items (key,title,source,topic) VALUES (?,?,?,?)\",\n args: [i.key, i.title ?? \"\", i.source ?? \"\", i.topic ?? \"\"] });\n }\n return c.json({ ok: true, n: (items ?? []).length });\n});\napp.get(\"/news/feedback\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const all = c.req.query(\"all\") === \"1\";\n const r = await sqlite.execute(all\n ? \"SELECT * FROM news_feedback ORDER BY id DESC LIMIT 200\"\n : \"SELECT * FROM news_feedback WHERE applied = 0 ORDER BY id\");\n return c.json(r.rows);\n});\napp.post(\"/news/feedback/applied\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { ids } = await c.req.json();\n for (const id of ids ?? []) await sqlite.execute({ sql: \"UPDATE news_feedback SET applied=1 WHERE id=?\", args: [Number(id)] });\n return c.json({ ok: true });\n});\n// Send one digest item with feedback buttons (called by the Scribe)\napp.post(\"/news/send\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { text, key } = await c.req.json();\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const chatId = own.rows[0]?.chat_id as number;\n if (!chatId) return c.json({ ok: false, error: \"no owner chat\" });\n await tg(\"sendMessage\", { chat_id: chatId, text, parse_mode: \"Markdown\",\n disable_web_page_preview: true,\n reply_markup: key ? { inline_keyboard: [[\n { text: \"👍\", callback_data: `n:up:${key}` },\n { text: \"👎\", callback_data: `n:down:${key}` },\n { text: \"⭐\", callback_data: `n:star:${key}` },\n { text: \"🚫\", callback_data: `n:block:${key}` },\n ]] } : undefined });\n return c.json({ ok: true });\n});\n\n// IN-ARTICLE REACTIONS — the Morning Edition (telegra.ph) ends every story with 👍👎⭐🚫 links.\n// The article is public, so links carry an HMAC token derived from PULL_SECRET instead of any\n// secret itself. Recording happens via a JS POST from the confirmation page, never on GET —\n// crawlers and link-prefetchers that fetch a URL must not be able to write feedback\n// (robots.txt below is the first fence, no-JS-no-write is the second, the HMAC is the third).\n// Tokens never expire by design: Alexandr reads old editions days later and reactions still count.\nasync function newsToken(key: string, v: string): Promise {\n const enc = new TextEncoder();\n const k = await crypto.subtle.importKey(\"raw\", enc.encode(PULL_SECRET),\n { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n const sig = await crypto.subtle.sign(\"HMAC\", k, enc.encode(`${key}:${v}`));\n return Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\").slice(0, 20);\n}\nconst V_EMOJI: Record = { up: \"👍\", down: \"👎\", star: \"⭐\", block: \"🚫\" };\nconst V_LABEL: Record = {\n up: \"More like this — noted\", down: \"Less of this — noted\",\n star: \"Marked important\", block: \"Never again — banished\",\n};\nconst esc = (s: string) => s.replace(/&/g, \"&\").replace(//g, \">\").replace(/\"/g, \""\");\n\nfunction reactShell(inner: string): string {\n return `\n\nPalantír

${inner}

`;\n}\n\napp.get(\"/robots.txt\", (c: any) => c.text(\"User-agent: *\\nDisallow: /\\n\"));\n\napp.get(\"/news/react\", async (c: any) => {\n const key = c.req.query(\"key\") ?? \"\", v = c.req.query(\"v\") ?? \"\", t = c.req.query(\"t\") ?? \"\";\n if (!key || !V_EMOJI[v] || t !== await newsToken(key, v)) {\n return c.html(reactShell(`

🌫

The stone does not know this sign

Stale or invalid reaction link.

`), 403);\n }\n const it = await sqlite.execute({ sql: \"SELECT title FROM news_items WHERE key=?\", args: [key] });\n const title = esc((it.rows[0]?.title as string) || key);\n const others = (await Promise.all(Object.keys(V_EMOJI).filter((x) => x !== v).map(async (x) =>\n `${V_EMOJI[x]}`,\n ))).join(\"\");\n return c.html(reactShell(`

${V_EMOJI[v]}

Recording…

“${title}”

${others}

\nChanged your mind? Tap another sign above.
Otherwise just close this page and return to the article.\n\n`));\n});\n\napp.post(\"/news/react\", async (c: any) => {\n const key = c.req.query(\"key\") ?? \"\", v = c.req.query(\"v\") ?? \"\", t = c.req.query(\"t\") ?? \"\";\n if (!key || !V_EMOJI[v] || t !== await newsToken(key, v)) return c.json({ ok: false }, 403);\n // Reloading the page re-POSTs; don't let one opinion count twice while unapplied.\n const dup = await sqlite.execute({\n sql: \"SELECT id FROM news_feedback WHERE item_key=? AND verdict=? AND applied=0\", args: [key, v] });\n if (dup.rows.length) return c.json({ ok: true, dup: true });\n const it = await sqlite.execute({ sql: \"SELECT * FROM news_items WHERE key=?\", args: [key] });\n const row: any = it.rows[0] ?? {};\n await sqlite.execute({\n sql: \"INSERT INTO news_feedback (item_key,title,source,topic,verdict) VALUES (?,?,?,?,?)\",\n args: [key, row.title ?? \"\", row.source ?? \"\", row.topic ?? \"\", v] });\n return c.json({ ok: true });\n});\n\n// MORNING EDITION (mini-app) — the sender posts the day's edition, Telegram opens\n// /edition/:date as a web app: he reads and reacts IN PLACE (no page switch — the\n// telegra.ph round-trip through a confirmation page lasted exactly one morning, 11 Aug).\napp.post(\"/news/edition\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const b = await c.req.json();\n if (!b.date || !Array.isArray(b.blocks)) return c.json({ ok: false, error: \"date and blocks required\" });\n await sqlite.execute({ sql: \"INSERT OR REPLACE INTO editions (date,title,data) VALUES (?,?,?)\",\n args: [b.date, b.title ?? \"Morning Edition\", JSON.stringify(b)] });\n await sqlite.execute(\"DELETE FROM editions WHERE date < date('now','-120 days')\");\n const n = (b.blocks as any[]).reduce((a, x) => a + (x.items?.length ?? 0), 0);\n return c.json({ ok: true, stories: n });\n});\n\n// One message + one button that opens the edition as a mini-app.\napp.post(\"/news/announce\", async (c: any) => {\n if (c.req.query(\"secret\") !== PULL_SECRET) return c.text(\"forbidden\", 401);\n const { date, text } = await c.req.json();\n const own = await sqlite.execute(\"SELECT chat_id FROM chats ORDER BY first_seen LIMIT 1\");\n const chatId = own.rows[0]?.chat_id as number;\n if (!chatId) return c.json({ ok: false, error: \"no owner chat\" });\n const base = new URL(c.req.url).origin;\n const r = await tg(\"sendMessage\", { chat_id: chatId, text, parse_mode: \"Markdown\",\n reply_markup: { inline_keyboard: [[{ text: \"📖 Open the Morning Edition\",\n web_app: { url: `${base}/edition/${date}` } }]] } });\n return c.json({ ok: !!r, message_id: r?.message_id });\n});\n\napp.get(\"/edition/:date\", async (c: any) => {\n const date = c.req.param(\"date\");\n const r = await sqlite.execute({ sql: \"SELECT title, data FROM editions WHERE date=?\", args: [date] });\n if (!r.rows.length) {\n return c.html(`\n\n

🌫 No edition for ${esc(date)}.

`, 404);\n }\n const ed = JSON.parse(r.rows[0].data as string);\n const keys: string[] = ed.blocks.flatMap((b: any) => (b.items ?? []).map((i: any) => i.key));\n const cur: Record = {};\n if (keys.length) {\n const fb = await sqlite.execute({\n sql: `SELECT item_key, verdict FROM news_feedback WHERE item_key IN (${keys.map(() => \"?\").join(\",\")}) ORDER BY id`,\n args: keys });\n for (const row of fb.rows as any[]) cur[row.item_key as string] = row.verdict as string;\n }\n let body = \"\";\n for (const b of ed.blocks) {\n body += `

${esc(b.title)}

\\n`;\n for (const it of b.items ?? []) {\n const btns = (await Promise.all([\"up\", \"down\", \"star\", \"block\"].map(async (v) =>\n ``,\n ))).join(\"\");\n body += `

${esc(it.title)}

\\n`\n + (it.paras ?? []).map((p: string) => `

${p}

`).join(\"\\n\")\n + `\\n

${esc(it.source)} ↗

${btns}

\\n`;\n }\n }\n const page = `\n\n${esc(ed.title)}\n\n

${esc(ed.title)}

\n${ed.stats ? `

${esc(ed.stats)}

` : \"\"}\n${ed.learned ? `

${esc(ed.learned)}

` : \"\"}\n${body}\n

👍 more like this · 👎 less · ⭐ important · 🚫 never again — every tap teaches the Palantír, even days later. Tap again to change your mind.

\n`;\n return c.html(page);\n});\n\n}\n","deleted",false,"label",[14],"8754a5f7-f359-4e36-abb1-c12689a1658c",["D",1783928553221],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Palantír Herald — Telegram capture + pings","imageUrl","userId","3ed96798-6351-4c0c-a152-1db6ab7640c9","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f5a68-d0b6-75de-80af-2b23ea5ed456","tursoName","8754a5f7f3594e36abb1c12689a1658c","tursoHostname","8754a5f7f3594e36abb1c12689a1658c-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789525245864],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":101},"org",{"_9":10,"_98":99,"_100":101,"_55":56,"_102":103,"_104":42},"branch",{"_35":88,"_11":89,"_22":28,"_90":45,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned",100,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Alexandr Stakhov","avatar","https://lh3.googleusercontent.com/a/ACg8ocKCA_6NlmBdn2fDI25kVPZAGM3tPMEmD7U1Na63L8rtZj8kBQ=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":62,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":89,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]