[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_105":106,"_107":108},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","rgb","name","lift-log","path","main.ts","project",{"_22":45,"_11":12,"_33":46,"_47":-5,"_48":42,"_49":50,"_51":50,"_52":53,"_54":-5,"_55":56,"_57":25,"_58":32,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":12,"_13":44},"permalink","https://www.val.town/x/rgb/lift-log/code/main.ts","extension","id","7f4bd428-8535-49ef-ba75-68872a9fb700","fileId","845b089a-ae13-11f1-9464-1607ee4eb77e","parentId","branchId","310c314e-e912-4537-b0e7-659d5862f6b3","branchVersion",33,"latest",true,"createdAt",["D",1789221780893],"version",7,"fileType","http","content","/**\n * Lift Log — phone-first workout logger for Rob and the girls.\n * Fourth of the family suite (Tau Zero, Mat Time, Reel Time): one val, JSON blobs, no build step.\n *\n * Routes:\n * GET / → the app shell (index.html)\n * GET /app.js /rules.js /parse.js /styles.css /sw.js → client files (served from this val, no CDN)\n * GET /manifest.webmanifest /icon-180.png /icon-512.png → home-screen install\n * GET /api/state/:athlete → { program, log, settings }\n * GET /api/program/:athlete → the stored program\n * PATCH /api/program/:athlete → one hand edit { exerciseId, changes, reason } or { cleanCleared, reason }; logged in program.edits\n * GET /api/log/:athlete → the append-only session log\n * POST /api/log/:athlete → upsert one session entry (body = the entry; matched by id)\n * DELETE /api/log/:athlete/:id → remove one entry from the log entirely (user-confirmed in the app)\n * GET /api/settings · POST /api/settings → the shared settings blob\n * POST /api/import/:athlete → body = program markdown → parsed → liftlog::program\n * ?blockStart=YYYY-MM-DD overrides; otherwise the stored block start is kept.\n *\n * Auth (Reel Time pattern): every /api route needs the passcode in the X-Lift-Code header,\n * compared constant-time against the LIFTLOG_CODE env var. 503 until that var is set.\n *\n * Storage keys (fixed, never renamed — spec §2):\n * liftlog:rob:program liftlog:rob:log liftlog:girls:program liftlog:girls:log liftlog:settings\n *\n * Nothing personal lives in this code: program text and logs are only ever in blob storage,\n * and any API key comes from Deno.env.\n */\nimport { blob } from \"https://esm.town/v/std/blob\";\nimport { readFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { mergeProgram, parseGirlsProgram, parseRobProgram } from \"./parse.js\";\nimport { applyEdit, setCleanCleared } from \"./edits.js\";\nimport { ICON_180_BASE64, ICON_512_BASE64 } from \"./icon.ts\";\n\ntype Athlete = \"rob\" | \"girls\";\nconst ATHLETES: Athlete[] = [\"rob\", \"girls\"];\nconst KEY = {\n program: (a: Athlete) => `liftlog:${a}:program`,\n log: (a: Athlete) => `liftlog:${a}:log`,\n settings: \"liftlog:settings\",\n};\n\nconst json = (body: unknown, status = 200) =>\n new Response(JSON.stringify(body), {\n status,\n headers: { \"content-type\": \"application/json; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n\n/** Constant-time compare so the passcode check can't be timed. */\nfunction sameCode(a: string, b: string): boolean {\n if (a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n return diff === 0;\n}\n\nfunction gate(req: Request): Response | null {\n const expected = Deno.env.get(\"LIFTLOG_CODE\") ?? \"\";\n if (!expected) return json({ error: \"Server not configured — LIFTLOG_CODE is unset.\" }, 503);\n const supplied = req.headers.get(\"x-lift-code\")?.trim() ?? \"\";\n if (!supplied) return json({ error: \"Passcode required.\" }, 401);\n if (!sameCode(expected, supplied)) return json({ error: \"That passcode isn't recognised.\" }, 401);\n return null;\n}\n\nfunction athleteOf(s: string | undefined): Athlete | null {\n return ATHLETES.includes(s as Athlete) ? (s as Athlete) : null;\n}\n\nasync function loadProgram(a: Athlete) {\n return (await blob.getJSON(KEY.program(a))) ?? null;\n}\nasync function loadLog(a: Athlete): Promise {\n const v = await blob.getJSON(KEY.log(a));\n return Array.isArray(v) ? v : [];\n}\nasync function loadSettings(): Promise> {\n const v = await blob.getJSON(KEY.settings);\n return v && typeof v === \"object\" && !Array.isArray(v) ? (v as Record) : { athlete: \"rob\" };\n}\n\nfunction summary(p: any) {\n const sessions: Record = {};\n for (const [k, list] of Object.entries(p.sessions || {})) sessions[k] = (list as unknown[]).length;\n return {\n athlete: p.athlete,\n title: p.title,\n blockStart: p.blockStart,\n weeksPlanned: p.weeksPlanned,\n sessions,\n warmupSections: (p.warmup || []).length,\n loadTableWeeks: p.loadTable ? p.loadTable.length : null,\n edits: (p.edits || []).length,\n importedAt: p.importedAt,\n };\n}\n\nconst iconCache = new Map();\nfunction icon(b64: string): Uint8Array {\n let bytes = iconCache.get(b64);\n if (!bytes) {\n bytes = Uint8Array.from(atob(b64), (ch) => ch.charCodeAt(0));\n iconCache.set(b64, bytes);\n }\n return bytes;\n}\n\nconst STATIC: Record = {\n \"/app.js\": \"text/javascript; charset=utf-8\",\n \"/rules.js\": \"text/javascript; charset=utf-8\",\n \"/parse.js\": \"text/javascript; charset=utf-8\",\n \"/styles.css\": \"text/css; charset=utf-8\",\n \"/sw.js\": \"text/javascript; charset=utf-8\",\n};\n\nasync function staticFile(path: string): Promise {\n const body = await readFile(path, import.meta.url);\n return new Response(body, { headers: { \"content-type\": STATIC[path], \"cache-control\": \"no-cache\" } });\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n const parts = path.split(\"/\").filter(Boolean); // [\"api\", \"log\", \"rob\"]\n\n // ---- static shell (no passcode needed to load the shell; the data behind it is gated) ----\n if (path === \"/\" || path === \"/index.html\") {\n const html = await readFile(\"/index.html\", import.meta.url);\n return new Response(html, { headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" } });\n }\n if (STATIC[path]) return staticFile(path);\n if (path === \"/icon-180.png\" || path === \"/icon-512.png\") {\n return new Response(icon(path === \"/icon-512.png\" ? ICON_512_BASE64 : ICON_180_BASE64), {\n headers: { \"content-type\": \"image/png\", \"cache-control\": \"public, max-age=31536000, immutable\" },\n });\n }\n if (path === \"/manifest.webmanifest\") {\n return new Response(\n JSON.stringify({\n name: \"Lift Log\",\n short_name: \"Lift Log\",\n description: \"Phone-first workout logger\",\n start_url: \"/\",\n scope: \"/\",\n display: \"standalone\",\n orientation: \"portrait\",\n background_color: \"#15171B\",\n theme_color: \"#15171B\",\n icons: [\n { src: \"/icon-180.png\", sizes: \"180x180\", type: \"image/png\", purpose: \"any\" },\n { src: \"/icon-512.png\", sizes: \"512x512\", type: \"image/png\", purpose: \"any\" },\n { src: \"/icon-512.png\", sizes: \"512x512\", type: \"image/png\", purpose: \"maskable\" },\n ],\n }),\n { headers: { \"content-type\": \"application/manifest+json; charset=utf-8\", \"cache-control\": \"public, max-age=3600\" } },\n );\n }\n\n // ---- API (passcode-gated) ----\n if (parts[0] === \"api\") {\n const denied = gate(req);\n if (denied) return denied;\n const a = athleteOf(parts[2]);\n const needAthlete = () => json({ error: \"athlete must be rob or girls\" }, 400);\n\n if (parts[1] === \"state\" && req.method === \"GET\") {\n if (!a) return needAthlete();\n const [program, log, settings] = await Promise.all([loadProgram(a), loadLog(a), loadSettings()]);\n return json({ program, log, settings });\n }\n\n if (parts[1] === \"program\" && req.method === \"GET\") {\n if (!a) return needAthlete();\n const p = await loadProgram(a);\n return p ? json(p) : json({ error: \"No program imported yet.\" }, 404);\n }\n if (parts[1] === \"program\" && req.method === \"PATCH\") {\n if (!a) return needAthlete();\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Body must be JSON.\" }, 400);\n }\n const p: any = await loadProgram(a);\n if (!p) return json({ error: \"No program imported yet.\" }, 404);\n let records: unknown[];\n try {\n records = typeof body?.cleanCleared === \"boolean\"\n ? setCleanCleared(p, body.cleanCleared, body.reason || \"manual\")\n : applyEdit(p, { ...body, source: body?.source === \"claude\" ? \"claude\" : \"manual\" });\n } catch (e) {\n return json({ error: (e as Error).message }, 400);\n }\n await blob.setJSON(KEY.program(a), p);\n return json({ ok: true, records, program: p });\n }\n\n if (parts[1] === \"log\") {\n if (!a) return needAthlete();\n if (req.method === \"GET\") return json(await loadLog(a));\n if (req.method === \"POST\") {\n let entry: any;\n try {\n entry = await req.json();\n } catch {\n return json({ error: \"Body must be JSON.\" }, 400);\n }\n if (!entry || typeof entry !== \"object\" || typeof entry.id !== \"string\" || !Array.isArray(entry.sets) || typeof entry.date !== \"string\") {\n return json({ error: \"Expected a session entry with id, date and sets.\" }, 400);\n }\n if (entry.athlete !== a) return json({ error: \"Entry athlete does not match the route.\" }, 400);\n const log = await loadLog(a);\n const i = log.findIndex((e) => e && e.id === entry.id);\n if (i >= 0) log[i] = entry;\n else log.push(entry);\n await blob.setJSON(KEY.log(a), log);\n return json({ ok: true, count: log.length, updated: i >= 0 });\n }\n if (req.method === \"DELETE\") {\n const id = decodeURIComponent(parts[3] || \"\");\n if (!id) return json({ error: \"Missing entry id.\" }, 400);\n const log = await loadLog(a);\n const kept = log.filter((e) => !e || e.id !== id);\n if (kept.length === log.length) return json({ error: \"No such entry.\" }, 404);\n await blob.setJSON(KEY.log(a), kept);\n return json({ ok: true, count: kept.length });\n }\n }\n\n if (parts[1] === \"settings\") {\n if (req.method === \"GET\") return json(await loadSettings());\n if (req.method === \"POST\") {\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ error: \"Body must be JSON.\" }, 400);\n }\n if (!body || typeof body !== \"object\" || Array.isArray(body)) return json({ error: \"Expected a settings object.\" }, 400);\n await blob.setJSON(KEY.settings, body);\n return json({ ok: true });\n }\n }\n\n if (parts[1] === \"import\" && req.method === \"POST\") {\n if (!a) return needAthlete();\n const md = await req.text();\n if (!md || md.length < 100 || !/^#\\s/m.test(md)) return json({ error: \"Body must be the program markdown.\" }, 400);\n const existing: any = await loadProgram(a);\n const override = url.searchParams.get(\"blockStart\");\n let fresh: any;\n if (a === \"rob\") {\n fresh = parseRobProgram(md);\n fresh.blockStart = override || existing?.blockStart || fresh.blockStart;\n } else {\n const rob: any = await loadProgram(\"rob\");\n fresh = parseGirlsProgram(md, { blockStart: override || existing?.blockStart || rob?.blockStart || null });\n }\n if (!fresh.blockStart) return json({ error: \"No block start date: pass ?blockStart=YYYY-MM-DD or import Rob first.\" }, 400);\n const merged = mergeProgram(fresh, existing);\n await blob.setJSON(KEY.program(a), merged);\n return json({ ok: true, replaced: !!existing, ...summary(merged) });\n }\n\n return json({ error: \"Not found\" }, 404);\n }\n\n return new Response(\"Not found\", { status: 404 });\n}\n","deleted",false,"label",[14],"bdb978ae-9dbe-4193-996a-67561f7c931d",["D",1789153427275],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Phone-first workout logger for Rob and the girls","imageUrl","userId","4c84f2ef-ab8e-44cc-ba80-40d7c3ca2664","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019ff7b1-f7ac-7549-9f99-3e4c291751ab","tursoName","bdb978ae9dbe4193996a67561f7c931d","tursoHostname","bdb978ae9dbe4193996a67561f7c931d-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789516253896],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_104":99},"org",{"_9":10,"_98":99,"_100":99,"_55":56,"_101":102,"_103":42},"branch",{"_35":88,"_11":89,"_22":28,"_90":45,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned",38,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","ctx",{"_81":-5,"_138":139,"_140":141,"_142":143,"_144":42,"_145":42,"_146":42,"_147":32,"_148":-5,"_149":-7,"_150":-7,"_151":62,"_152":42,"_153":42,"_154":-5,"_155":42,"_156":42,"_157":42,"_158":-5},"ENV",{"_109":110,"_111":112,"_113":89,"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]