[{"_1":2,"_170":-5,"_171":-5},"loaderData",{"_3":4,"_92":93},"root",{"_5":6,"_35":36,"_65":66},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":32,"_33":20,"_34":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","notificationCount",0,"flagDenols","isTeamOrgMember","ENV",{"_37":38,"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","68b182907d5a55cb4248aa216de7d21a5da70c0d","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","API_URL","https://api.val.town","clerkState",{"_67":68},"__internal_clerk_state",{"_69":70,"_71":46,"_72":73,"_74":73,"_75":20,"_76":73,"_77":73,"_78":73,"_79":73,"_80":81,"_90":20,"_91":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_82":20,"_19":20,"_83":73,"_84":85,"_86":73,"_87":46,"_88":20,"_89":73},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_94":95,"_96":97,"_98":99,"_100":101,"_150":151,"_167":168,"_169":-5},"handle","dhvanil","name","untitled-2473","path","main.tsx","project",{"_102":103,"_96":97,"_104":105,"_106":-5,"_107":20,"_108":109,"_110":-5,"_111":-5,"_12":112,"_113":114,"_115":116,"_117":116,"_118":-5,"_119":32,"_14":120,"_121":122,"_123":122,"_124":125,"_126":125,"_127":125,"_128":122,"_129":122,"_23":130,"_133":134,"_136":137,"_149":20},"id","0e36cefa-7f67-11f0-b669-0224a6c84d84","createdAt",["D",1755874104523],"deletedAt","legacyEnvVars","privacy","public","description","imageUrl","32765ebe-d05f-4753-a823-a8be39b8f577","pinnedFileId","0e395f30-7f67-11f0-b669-0224a6c84d84","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","0cc0ecd3-bdff-490f-92b4-a6682e79cdae","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_94":95,"_131":132},"profileImageUrl","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yb1RNUGY2SmR3Vkt3VmVtSTIwZXJlM3pqV1IifQ","org",{"_94":95,"_135":132,"_12":112},"avatar","branch",{"_138":139,"_96":44,"_102":140,"_141":103,"_142":-5,"_143":-5,"_144":-5,"_145":-5,"_146":-5,"_147":97,"_148":95},"version",5,"0e372530-7f67-11f0-b669-0224a6c84d84","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_102":152,"_96":99,"_153":114,"_154":-5,"_155":140,"_156":139,"_157":116,"_104":158,"_138":159,"_160":161,"_162":163,"_164":20,"_165":-5,"_98":166},"1c2aceda-7f67-11f0-aca9-0224a6c84d84","fileId","parentId","branchId","branchVersion","latest",["D",1755874127929],4,"fileType","http","content","// @title todo-api\n// @description POST-only TODO API for AI agents. Pure text responses. SQLite-backed.\n// Set this file's trigger to HTTP in Val Town.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\n// ---------- ID generation (no npm deps) ----------\nconst ALPHABET = \"23456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz\";\nfunction randomId(n: number) {\n const bytes = new Uint8Array(n);\n crypto.getRandomValues(bytes);\n let out = \"\";\n for (let i = 0; i < n; i++) out += ALPHABET[bytes[i] % ALPHABET.length];\n return out;\n}\nconst genId = (prefix: \"list\" | \"item\") => `${prefix}-${randomId(6)}`;\n\n// ---------- bootstrap schema ----------\nasync function ensureSchema() {\n await sqlite.batch([\n `PRAGMA foreign_keys = ON;`,\n `CREATE TABLE IF NOT EXISTS lists(\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL DEFAULT 'todo list',\n archived INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ','now'))\n );`,\n `CREATE TABLE IF NOT EXISTS items(\n id TEXT PRIMARY KEY,\n list_id TEXT NOT NULL REFERENCES lists(id) ON DELETE CASCADE,\n title TEXT NOT NULL,\n completed INTEGER NOT NULL DEFAULT 0,\n sort INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ','now')),\n completed_at TEXT\n );`,\n `CREATE INDEX IF NOT EXISTS idx_items_list ON items(list_id);`,\n `CREATE INDEX IF NOT EXISTS idx_items_list_completed ON items(list_id, completed);`,\n `CREATE INDEX IF NOT EXISTS idx_items_sort ON items(sort);`,\n ]);\n}\n\n// ---------- util ----------\nfunction textResponse(text: string, status = 200) {\n if (!text.endsWith(\"\\n\")) text += \"\\n\";\n return new Response(text, {\n status,\n headers: {\n \"content-type\": \"text/plain; charset=utf-8\",\n \"Access-Control-Allow-Origin\": \"*\",\n \"Cache-Control\": \"no-store\",\n },\n });\n}\nfunction badRequest(msg: string) {\n return textResponse(`Bad Request: ${msg}`, 400);\n}\nfunction notFound(msg: string) {\n return textResponse(`Not Found: ${msg}`, 404);\n}\n\ntype ExecResult = {\n columns: string[];\n columnTypes: string[];\n rows: any[][];\n rowsAffected: number;\n lastInsertRowid: string | number | null;\n};\nfunction rowsToObjects(res: ExecResult): Record[] {\n return res.rows.map((row) =>\n Object.fromEntries(row.map((v, i) => [res.columns[i], v]))\n );\n}\nasync function q1(sql: string, args?: any): Promise {\n const res = (await sqlite.execute({ sql, args })) as ExecResult;\n if (!res.rows.length) return null;\n return rowsToObjects(res)[0] as T;\n}\nasync function qAll(sql: string, args?: any): Promise {\n const res = (await sqlite.execute({ sql, args })) as ExecResult;\n return rowsToObjects(res) as T[];\n}\n\nasync function nextSort(list_id: string): Promise {\n const row = await q1<{ next: number }>(\n `SELECT COALESCE(MAX(sort), 0) + 1 AS next FROM items WHERE list_id = :list_id`,\n { list_id },\n );\n return row?.next ?? 1;\n}\n\n// Accepts real newlines, \"\\n\" literal, or \"/n\" literal\nfunction parseNewlineList(input: unknown): string[] {\n if (typeof input !== \"string\") return [];\n let s = input.replace(/\\r/g, \"\");\n s = s.replace(/\\\\n/g, \"\\n\"); // literal \\n -> newline\n s = s.replace(/\\/n/g, \"\\n\"); // literal /n -> newline (lenient)\n return s\n .split(\"\\n\")\n .map((x) => x.trim())\n .filter(Boolean);\n}\n\nfunction renderListText(list: { id: string; title: string }, items: any[]) {\n const lines: string[] = [];\n const headerTitle = list.title || \"todo list\";\n lines.push(`${headerTitle} (${list.id})`);\n for (const it of items) {\n const box = it.completed ? \"☑\" : \"☐\";\n lines.push(` ${box} ${it.title} (${it.id})`);\n }\n return lines.join(\"\\n\");\n}\n\n// NOTE: Order never changes on completion toggle.\n// We render by insertion order (sort asc, then created_at), ignoring completed.\nasync function renderList(list_id: string) {\n const list = await q1<{ id: string; title: string }>(\n `SELECT id, title FROM lists WHERE id = :id`,\n { id: list_id },\n );\n if (!list) return null;\n const items = await qAll<{\n id: string;\n title: string;\n completed: number;\n sort: number;\n created_at: string;\n }>(\n `SELECT id, title, completed, sort, created_at\n FROM items\n WHERE list_id = :list_id\n ORDER BY sort ASC, created_at ASC`,\n { list_id },\n );\n return renderListText(list, items);\n}\n\nasync function listSummaryText() {\n const rows = await qAll<{\n id: string;\n title: string;\n open_count: number;\n done_count: number;\n }>(\n `SELECT\n l.id,\n l.title,\n COALESCE(SUM(CASE WHEN i.completed = 0 THEN 1 ELSE 0 END), 0) AS open_count,\n COALESCE(SUM(CASE WHEN i.completed = 1 THEN 1 ELSE 0 END), 0) AS done_count\n FROM lists l\n LEFT JOIN items i ON i.list_id = l.id\n WHERE l.archived = 0\n GROUP BY l.id, l.title\n ORDER BY l.created_at DESC`,\n );\n if (rows.length === 0) return \"No lists yet.\";\n const out: string[] = [\"Lists:\"];\n for (const r of rows) {\n out.push(\n `- ${\n r.title || \"todo list\"\n } (${r.id}): ${r.open_count} open, ${r.done_count} done`,\n );\n }\n return out.join(\"\\n\");\n}\n\nasync function loadJSON(req: Request): Promise {\n const ct = (req.headers.get(\"content-type\") || \"\").toLowerCase();\n if (ct.includes(\"application/json\")) {\n try {\n return await req.json();\n } catch {\n return {};\n }\n }\n if (\n ct.includes(\"application/x-www-form-urlencoded\") ||\n ct.includes(\"multipart/form-data\")\n ) {\n const fd = await req.formData();\n const obj: Record = {};\n for (const [k, v] of fd.entries()) {\n if (obj[k] !== undefined) {\n const curr = obj[k];\n obj[k] = Array.isArray(curr) ? [...curr, v] : [curr, v];\n } else {\n obj[k] = v;\n }\n }\n return obj;\n }\n try {\n const t = await req.text();\n return JSON.parse(t);\n } catch {\n return {};\n }\n}\n\n// ---------- endpoint handlers (all POST) ----------\nasync function listsCreate(body: any) {\n const title = (body?.title ?? \"todo list\").toString().trim() || \"todo list\";\n for (let i = 0; i < 5; i++) {\n const id = genId(\"list\");\n try {\n await sqlite.execute({\n sql: `INSERT INTO lists (id, title) VALUES (:id, :title)`,\n args: { id, title },\n });\n const text = await renderList(id);\n return textResponse(text!);\n } catch (e: any) {\n if (String(e?.message || \"\").toLowerCase().includes(\"unique\")) continue;\n throw e;\n }\n }\n return textResponse(\"Failed to create list (ID collision). Try again.\", 500);\n}\n\nasync function listsAdd(body: any) {\n const list_id = body?.list_id?.toString();\n if (!list_id) return badRequest(\"list_id is required\");\n const found = await q1<{ id: string }>(\n `SELECT id FROM lists WHERE id = :id`,\n { id: list_id },\n );\n if (!found) return notFound(`list ${list_id} does not exist`);\n\n // newline-separated titles string\n const titles = parseNewlineList(body?.items ?? body?.item ?? \"\");\n if (titles.length === 0) {\n return badRequest(\"Provide 'items' as a newline-separated string\");\n }\n\n let sortVal = await nextSort(list_id);\n const batch = [];\n for (const title of titles) {\n const id = genId(\"item\");\n batch.push({\n sql: `INSERT INTO items (id, list_id, title, completed, sort)\n VALUES (:id, :list_id, :title, 0, :sort)`,\n args: { id, list_id, title, sort: sortVal++ },\n });\n }\n await sqlite.batch(batch);\n const text = await renderList(list_id);\n return textResponse(text!);\n}\n\nasync function listsGet(body: any) {\n const list_id = body?.list_id?.toString();\n if (!list_id) return badRequest(\"list_id is required\");\n const text = await renderList(list_id);\n if (!text) return notFound(`list ${list_id} does not exist`);\n return textResponse(text);\n}\n\nasync function itemsCompleteOrUncomplete(body: any, completedValue: 0 | 1) {\n const list_id = body?.list_id?.toString();\n if (!list_id) return badRequest(\"list_id is required\");\n\n // newline-separated item IDs string\n const item_ids = parseNewlineList(body?.item_ids ?? body?.items ?? \"\");\n if (item_ids.length === 0) {\n return badRequest(\n \"item_ids must be a newline-separated string of item IDs\",\n );\n }\n\n const nowSql = `strftime('%Y-%m-%dT%H:%M:%fZ','now')`;\n const batch = item_ids.map((id: string) => ({\n sql: `UPDATE items\n SET completed = :completed,\n completed_at = CASE WHEN :completed = 1 THEN ${nowSql} ELSE NULL END\n WHERE id = :id AND list_id = :list_id`,\n args: { completed: completedValue, id, list_id },\n }));\n await sqlite.batch(batch);\n\n const text = await renderList(list_id);\n return textResponse(text!);\n}\n\nasync function itemsRename(body: any) {\n const item_id = body?.item_id?.toString();\n const title = body?.title?.toString();\n if (!item_id) return badRequest(\"item_id is required\");\n if (!title) return badRequest(\"title is required\");\n\n const item = await q1<{ id: string; list_id: string }>(\n `SELECT id, list_id FROM items WHERE id = :id`,\n { id: item_id },\n );\n if (!item) return notFound(`item ${item_id} does not exist`);\n\n await sqlite.execute({\n sql: `UPDATE items SET title = :title WHERE id = :id`,\n args: { title, id: item_id },\n });\n\n const text = await renderList(item.list_id);\n return textResponse(text!);\n}\n\nasync function itemsDelete(body: any) {\n const item_id = body?.item_id?.toString();\n if (!item_id) return badRequest(\"item_id is required\");\n\n const item = await q1<{ id: string; list_id: string }>(\n `SELECT id, list_id FROM items WHERE id = :id`,\n { id: item_id },\n );\n if (!item) return notFound(`item ${item_id} does not exist`);\n\n await sqlite.execute({\n sql: `DELETE FROM items WHERE id = :id`,\n args: { id: item_id },\n });\n\n const text = await renderList(item.list_id);\n return textResponse(text!);\n}\n\nasync function listsRename(body: any) {\n const list_id = body?.list_id?.toString();\n const title = body?.title?.toString();\n if (!list_id) return badRequest(\"list_id is required\");\n if (!title) return badRequest(\"title is required\");\n\n const found = await q1<{ id: string }>(\n `SELECT id FROM lists WHERE id = :id`,\n { id: list_id },\n );\n if (!found) return notFound(`list ${list_id} does not exist`);\n\n await sqlite.execute({\n sql: `UPDATE lists SET title = :title WHERE id = :id`,\n args: { title, id: list_id },\n });\n\n const text = await renderList(list_id);\n return textResponse(text!);\n}\n\nasync function listsList() {\n const text = await listSummaryText();\n return textResponse(text);\n}\n\nfunction helpText() {\n return `TODO API (POST-only, text responses)\n\nEndpoints:\n POST /help\n Body: {}\n -> This help text.\n\n POST /v1/lists.create\n Body: { \"title\": \"My todos\" }\n -> Create a list. Returns rendered list.\n\n POST /v1/lists.add\n Body: { \"list_id\": \"list-xxxxxx\", \"items\": \"task A\\\\ntask B\\\\ntask C\" }\n (newline-separated titles; accepts real newlines, \"\\\\n\", or \"/n\")\n -> Add items. Returns rendered list.\n\n POST /v1/lists.get\n Body: { \"list_id\": \"list-xxxxxx\" }\n -> Returns rendered list.\n\n POST /v1/items.complete\n Body: { \"list_id\": \"list-xxxxxx\", \"item_ids\": \"item-aaa\\\\nitem-bbb\" }\n (newline-separated item IDs; accepts real newlines, \"\\\\n\", or \"/n\")\n -> Mark items completed. Returns rendered list.\n\n POST /v1/items.uncomplete\n Body: { \"list_id\": \"list-xxxxxx\", \"item_ids\": \"item-aaa\\\\nitem-bbb\" }\n (newline-separated item IDs)\n -> Mark items uncompleted. Returns rendered list.\n\n POST /v1/items.rename\n Body: { \"item_id\": \"item-aaaaaa\", \"title\": \"New title\" }\n -> Rename item. Returns rendered list.\n\n POST /v1/items.delete\n Body: { \"item_id\": \"item-aaaaaa\" }\n -> Delete item. Returns rendered list.\n\n POST /v1/lists.rename\n Body: { \"list_id\": \"list-xxxxxx\", \"title\": \"New List Name\" }\n -> Rename list. Returns rendered list.\n\n POST /v1/lists.list\n Body: {}\n -> Summary of all lists.\n\nRendered list format (order never changes on completion):\n todo list (list-{6char})\n ☐ first task (item-{6char})\n ☑ finished task (item-{6char})\n\nNotes:\n- No auth. Keep list IDs private if needed.\n- IDs are short, prefixed random IDs.\n- All outputs are text/plain for easy agent parsing.\n- Order is stable by insertion: toggling completion does not move items.\n`;\n}\n\n// ---------- HTTP entry ----------\nexport default async function (req: Request): Promise {\n // Preflight for browsers\n if (req.method === \"OPTIONS\") {\n return new Response(null, {\n status: 204,\n headers: {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS, GET\",\n \"Access-Control-Allow-Headers\": \"*\",\n \"Access-Control-Max-Age\": \"86400\",\n },\n });\n }\n\n const url = new URL(req.url);\n const path = url.pathname.replace(/\\/+$/, \"\");\n\n // Convenience GETs\n if (req.method === \"GET\") {\n if (path === \"/help\") return textResponse(helpText());\n if (path === \"/healthz\") return textResponse(\"ok\");\n return textResponse(\"Method Not Allowed (POST only). See /help.\", 405);\n }\n\n if (req.method !== \"POST\") {\n return textResponse(\"Method Not Allowed (POST only). See /help.\", 405);\n }\n\n try {\n await ensureSchema();\n const body = await loadJSON(req);\n\n switch (path) {\n case \"/help\":\n return textResponse(helpText());\n case \"/v1/lists.create\":\n return await listsCreate(body);\n case \"/v1/lists.add\":\n return await listsAdd(body);\n case \"/v1/lists.get\":\n return await listsGet(body);\n case \"/v1/items.complete\":\n return await itemsCompleteOrUncomplete(body, 1);\n case \"/v1/items.uncomplete\":\n return await itemsCompleteOrUncomplete(body, 0);\n case \"/v1/items.rename\":\n return await itemsRename(body);\n case \"/v1/items.delete\":\n return await itemsDelete(body);\n case \"/v1/lists.rename\":\n return await listsRename(body);\n case \"/v1/lists.list\":\n return await listsList();\n default:\n return textResponse(\"Unknown endpoint. Use POST /help.\", 404);\n }\n } catch (err: any) {\n console.error(\"Handler error:\", err);\n const msg = (err?.message ?? String(err)).slice(0, 1000);\n return textResponse(`Server Error: ${msg}`, 500);\n }\n}","deleted","label",[99],"permalink","https://www.val.town/x/dhvanil/untitled-2473/code/main.tsx","extension","actionData","errors"]