[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_231":232,"_233":234},"routes/_app.x.$handle.$name",{"_103":102,"_32":45,"_111":90,"_27":112,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_20":-5,"_123":124,"_125":126,"_127":25,"_128":129,"_130":59,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":31,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":25},"version",12,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","019ef8b1-2f7a-7348-93d4-6ddeb044310d","name","fileType","http","content","import process from \"node:process\";\nconst BASE_COST = 150;\nconst USD_PER_POINT = 30 / 1_000_000;\nconst RERANK_MODELS = [\"cohere/rerank-v3.5\", \"rerank-4-fast\", \"rerank-4-fast-pro\"] as const;\nconst GROQ_MODELS = [\n \"compound-mini\",\n \"compound\",\n \"meta-llama/llama-4-scout-17b-16e-instruct\",\n \"llama-3.3-70b-versatile\",\n] as const;\nfunction verifyBotKey(req: Request): boolean {\n const botKey = process.env.BOT_ACCESS_KEY;\n if (!botKey) return false;\n const authHeader = req.headers.get(\"Authorization\") ?? \"\";\n const token = authHeader.startsWith(\"Bearer \")\n ? authHeader.slice(7).trim()\n : authHeader.trim();\n return token === botKey;\n}\nfunction formatUSD(amount: number): string {\n if (amount === 0) return \"$0.00\";\n const fixed = amount.toFixed(6);\n const trimmed = fixed\n .replace(/(\\.\\d*?[1-9])0+$/, \"$1\")\n .replace(/\\.00$/, \".00\");\n return `$${trimmed}`;\n}\ninterface SearchResult {\n title: string;\n url: string;\n snippet: string;\n quotes: string[];\n relevanceScore: number;\n source: string;\n timestamp?: string;\n}\nfunction extractRelevantQuotes(content: string, query: string): string[] {\n const quotes: string[] = [];\n const queryTerms = query.toLowerCase().split(/\\s+/).filter((t) => t.length > 2);\n const sentences = content\n .split(/[.!?]+/)\n .map((s) => s.trim())\n .filter((s) => s.length > 20);\n sentences.forEach((sentence) => {\n const lowerSentence = sentence.toLowerCase();\n const matchCount = queryTerms.filter((term) =>\n lowerSentence.includes(term)\n ).length;\n if (matchCount >= Math.min(2, queryTerms.length)) {\n const cleanQuote = sentence.replace(/\\s+/g, \" \").trim();\n if (cleanQuote.length > 30 && cleanQuote.length < 300)\n quotes.push(cleanQuote);\n }\n });\n return [...new Set(quotes)].slice(0, 5);\n}\nfunction calculateRelevance(content: string, query: string): number {\n const lowerContent = content.toLowerCase();\n const queryTerms = query.toLowerCase().split(/\\s+/);\n let score = 0;\n queryTerms.forEach((term) => {\n const regex = new RegExp(`\\\\b${term}\\\\b`, \"gi\");\n const matches = lowerContent.match(regex);\n if (matches) score += matches.length * 2;\n });\n if (lowerContent.includes(query.toLowerCase())) score += 20;\n return Math.min(score, 100);\n}\nasync function searchBrave(query: string): Promise {\n const results: SearchResult[] = [];\n const apiKey = process.env.BRAVE_API_KEY;\n if (!apiKey) return results;\n try {\n const response = await fetch(\n `https://api.search.brave.com/res/v1/web/search?q=${encodeURIComponent(query)}&count=10`,\n {\n headers: {\n Accept: \"application/json\",\n \"X-Subscription-Token\": apiKey,\n },\n signal: AbortSignal.timeout(8000),\n }\n );\n if (response.ok) {\n const data = await response.json();\n (data.web?.results ?? []).forEach((r: any) => {\n const content = `${r.title} ${r.description}`;\n results.push({\n title: r.title,\n url: r.url,\n snippet: r.description || \"\",\n quotes: extractRelevantQuotes(content, query),\n relevanceScore: calculateRelevance(content, query),\n source: new URL(r.url).hostname,\n timestamp: r.age || new Date().toISOString(),\n });\n });\n }\n } catch (error) {\n console.error(\"Brave search failed:\", error);\n }\n return results;\n}\nasync function searchSerper(query: string): Promise {\n const results: SearchResult[] = [];\n const serperKey = process.env.SERPER_API_KEY;\n if (!serperKey) return results;\n try {\n const response = await fetch(\"https://google.serper.dev/search\", {\n method: \"POST\",\n headers: {\n \"X-API-KEY\": serperKey,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ q: query, num: 10 }),\n signal: AbortSignal.timeout(8000),\n });\n if (response.ok) {\n const data = await response.json();\n (data.organic ?? []).forEach((r: any) => {\n const content = `${r.title} ${r.snippet}`;\n results.push({\n title: r.title,\n url: r.link,\n snippet: r.snippet || \"\",\n quotes: extractRelevantQuotes(content, query),\n relevanceScore: calculateRelevance(content, query),\n source: new URL(r.link).hostname,\n });\n });\n }\n } catch (error) {\n console.error(\"Serper failed:\", error);\n }\n return results;\n}\nasync function searchGoogleCustom(query: string): Promise {\n const results: SearchResult[] = [];\n const apiKey = process.env.GOOGLE_API_KEY;\n const cx = process.env.GOOGLE_CX;\n if (!apiKey || !cx) return results;\n try {\n const response = await fetch(\n `https://www.googleapis.com/customsearch/v1?key=${apiKey}&cx=${cx}&q=${encodeURIComponent(query)}&num=10`,\n { signal: AbortSignal.timeout(8000) }\n );\n if (response.ok) {\n const data = await response.json();\n (data.items ?? []).forEach((item: any) => {\n const content = `${item.title} ${item.snippet}`;\n results.push({\n title: item.title,\n url: item.link,\n snippet: item.snippet || \"\",\n quotes: extractRelevantQuotes(content, query),\n relevanceScore: calculateRelevance(content, query),\n source: new URL(item.link).hostname,\n });\n });\n }\n } catch (error) {\n console.error(\"Google Custom Search failed:\", error);\n }\n return results;\n}\nasync function gatherResults(query: string): Promise {\n const variations = [query, `${query} explained`, `${query} latest research`];\n const tasks = variations.flatMap((q) => [\n searchBrave(q),\n searchSerper(q),\n searchGoogleCustom(q),\n ]);\n const settled = await Promise.allSettled(tasks);\n const all: SearchResult[] = [];\n settled.forEach((r) => {\n if (r.status === \"fulfilled\") all.push(...r.value);\n });\n return all\n .filter((r, idx, arr) => arr.findIndex((t) => t.url === r.url) === idx)\n .sort((a, b) => b.relevanceScore - a.relevanceScore)\n .slice(0, 20);\n}\n// Stage 1: OpenRouter Cohere rerank — returns results re-sorted by neural relevance.\n// Tries RERANK_MODELS in order; throws if all fail.\nasync function rerankWithOpenRouter(\n query: string,\n results: SearchResult[]\n): Promise {\n const apiKey = process.env.OPENROUTER_API_KEY;\n if (!apiKey) throw new Error(\"OPENROUTER_API_KEY not set\");\n const documents = results.map((r) => `${r.title}\\n${r.snippet}`);\n let lastError: Error | null = null;\n for (const model of RERANK_MODELS) {\n try {\n const response = await fetch(\"https://openrouter.ai/api/v1/rerank\", {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n \"HTTP-Referer\": \"https://deep-search.app\",\n \"X-Title\": \"Deep Search Engine\",\n },\n body: JSON.stringify({\n model,\n query,\n documents,\n top_n: Math.min(15, results.length),\n }),\n signal: AbortSignal.timeout(12000),\n });\n if (!response.ok) {\n const body = await response.text().catch(() => \"\");\n throw new Error(`OpenRouter rerank ${model} HTTP ${response.status}: ${body}`);\n }\n const data = await response.json();\n const ranked: SearchResult[] = (data.results ?? [])\n .sort((a: any, b: any) => b.relevance_score - a.relevance_score)\n .map((r: any) => ({\n ...results[r.index],\n relevanceScore: Math.round(r.relevance_score * 100),\n }));\n if (ranked.length > 0) return ranked;\n throw new Error(`${model} returned empty results`);\n } catch (err) {\n lastError = err as Error;\n console.error(`Rerank ${model} failed:`, err);\n }\n }\n throw lastError ?? new Error(\"All rerank models exhausted\");\n}\n// Stage 2: Groq synthesis — iterates keys × models, returns on first success.\nasync function synthesizeWithGroq(\n query: string,\n results: SearchResult[]\n): Promise {\n const groqKeys = [\n process.env.GROQ_API_KEY,\n process.env.GROQ_API_KEY2,\n process.env.GROQ_API_KEY3,\n process.env.GROQ_API_KEY4,\n ].filter(Boolean) as string[];\n if (groqKeys.length === 0) throw new Error(\"No GROQ_API_KEY set\");\n const systemPrompt =\n \"You are a deep search analyst. Synthesize search results into a comprehensive, structured report with key findings, relevant quotes, and source attributions. Prioritize accuracy and depth.\";\n const userPrompt =\n `Query: \"${query}\"\\n\\nSearch Results (${results.length} sources):\\n` +\n `${JSON.stringify(results, null, 2)}\\n\\n` +\n `Produce:\\n1. Executive summary\\n2. Key findings with direct quotes\\n3. Source credibility breakdown\\n4. Conclusion and knowledge gaps`;\n for (const model of GROQ_MODELS) {\n for (const apiKey of groqKeys) {\n try {\n const response = await fetch(\n \"https://api.groq.com/openai/v1/chat/completions\",\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${apiKey}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n model,\n messages: [\n { role: \"system\", content: systemPrompt },\n { role: \"user\", content: userPrompt },\n ],\n stream: false,\n max_tokens: 8192,\n temperature: 0.3,\n }),\n signal: AbortSignal.timeout(30000),\n }\n );\n if (!response.ok)\n throw new Error(`Groq ${model} HTTP ${response.status}`);\n const data = await response.json();\n const text: string = data.choices?.[0]?.message?.content ?? \"\";\n if (text.length > 0) return text;\n } catch (err) {\n console.error(`Groq ${model} failed:`, err);\n }\n }\n }\n throw new Error(\"All Groq models exhausted\");\n}\n// Stage 3 (final fallback): raw Brave-only dump with no AI synthesis.\nasync function braveFallback(\n query: string,\n send: SendEventFn\n): Promise {\n const results = await searchBrave(query);\n if (results.length === 0) {\n send(\"text\", {\n text:\n `❌ No results found. Try:\\n` +\n `- Refining query terms\\n` +\n `- More specific keywords\\n` +\n `- Different phrasing\\n\\n` +\n `**Alternative engines:**\\n` +\n `- [Google](https://www.google.com/search?q=${encodeURIComponent(query)})\\n` +\n `- [Bing](https://www.bing.com/search?q=${encodeURIComponent(query)})\\n` +\n `- [DuckDuckGo](https://duckduckgo.com/?q=${encodeURIComponent(query)})`,\n });\n return;\n }\n send(\"text\", {\n text: `## 📋 Brave Search Results (${results.length} sources)\\n\\n`,\n });\n results.forEach((result, idx) => {\n send(\"text\", {\n text:\n `### ${idx + 1}. ${result.title}\\n` +\n `**Source:** ${result.source} | **Relevance:** ${result.relevanceScore}%\\n` +\n `**URL:** ${result.url}\\n\\n` +\n `**Snippet:** ${result.snippet.substring(0, 200)}...\\n\\n` +\n `**Key Quotes:**\\n${result.quotes.map((q) => `> \"${q}\"`).join(\"\\n\\n\")}\\n\\n` +\n `---\\n\\n`,\n });\n });\n send(\"text\", {\n text: `\\n\\n## 🔗 Sources\\n${results\n .map((r, i) => `${i + 1}. [${r.source}](${r.url})`)\n .join(\"\\n\")}\\n`,\n });\n}\nasync function getResponse(req: Query, send: SendEventFn) {\n send(\"meta\", { content_type: \"text/markdown\", suggested_replies: true });\n const searchQuery =\n req.query[req.query.length - 1].content;\n send(\"text\", { text: `🔍 Deep Search Initiated...\\n\\n` });\n send(\"text\", { text: `⏳ Gathering results in parallel...\\n\\n` });\n let gathered: SearchResult[] = [];\n try {\n gathered = await gatherResults(searchQuery);\n send(\"text\", {\n text: `✅ Collected ${gathered.length} deduplicated results\\n\\n`,\n });\n } catch (err) {\n send(\"text\", {\n text: `⚠️ Search aggregation error: ${(err as Error).message}\\n\\n`,\n });\n }\n if (gathered.length === 0) {\n send(\"text\", { text: `🔄 Falling back to Brave direct search...\\n\\n` });\n await braveFallback(searchQuery, send);\n send(\"done\", {});\n return;\n }\n // Stage 1: rerank\n let ranked = gathered;\n try {\n send(\"text\", { text: `🎯 Reranking with Cohere...\\n\\n` });\n ranked = await rerankWithOpenRouter(searchQuery, gathered);\n send(\"text\", {\n text: `✅ Reranked to ${ranked.length} top results\\n\\n`,\n });\n } catch (err) {\n console.error(\"Rerank pipeline failed:\", err);\n send(\"text\", {\n text: `⚠️ Rerank unavailable — using heuristic scores\\n\\n`,\n });\n ranked = gathered.slice(0, 15);\n }\n // Stage 2: Groq synthesis\n send(\"text\", { text: `🤖 Synthesizing with Groq...\\n\\n` });\n try {\n const analysis = await synthesizeWithGroq(searchQuery, ranked);\n send(\"text\", { text: analysis });\n send(\"text\", {\n text: `\\n\\n## 🔗 Sources\\n${ranked\n .map((r, i) => `${i + 1}. [${r.source}](${r.url})`)\n .join(\"\\n\")}\\n`,\n });\n } catch (err) {\n console.error(\"Groq synthesis failed:\", err);\n send(\"text\", {\n text: `⚠️ AI synthesis failed — falling back to Brave raw results\\n\\n`,\n });\n await braveFallback(searchQuery, send);\n }\n send(\"done\", {});\n}\nasync function getBotSettings(): Promise {\n const costUSD = BASE_COST * USD_PER_POINT;\n const rateCard =\n \"| Type | Rate (USD) | Rate (Points) |\\n\" +\n \"|------|--------------|------------|\\n\" +\n `| Total Cost | ${formatUSD(costUSD)}/message | ${BASE_COST} points |\\n`;\n return {\n allow_attachments: false,\n expand_text_attachments: false,\n enable_multi_bot_chat_prompting: true,\n enable_suggested_replies: true,\n rate_card: rateCard,\n supports_system_messages: true,\n suggested_replies: true,\n };\n}\ntype BotSettings = {\n allow_attachments?: boolean;\n expand_text_attachments?: boolean;\n enable_multi_bot_chat_prompting?: boolean;\n enable_suggested_replies?: boolean;\n rate_card?: string;\n supports_system_messages?: boolean;\n suggested_replies?: boolean;\n};\ntype Query = {\n version: string;\n type: \"query\";\n query: {\n role: \"system\" | \"user\" | \"bot\";\n content: string;\n content_type: string;\n timestamp: number;\n message_id: string;\n feedback: { type: \"like\" | \"dislike\"; reason?: string }[];\n attachments: {\n url: string;\n content_type: string;\n name: string;\n parsed_content?: string;\n }[];\n }[];\n message_id: string;\n user_id: string;\n conversation_id: string;\n metadata: string;\n language_code: string;\n};\ntype Events = {\n meta: { content_type: string; suggested_replies?: boolean };\n text: { text: string };\n replace_response: { text: string };\n suggested_reply: { text: string };\n error: { allow_retry?: boolean; text: string };\n done: {};\n};\ntype SendEventFn = (\n eventName: EventName,\n data: Events[EventName]\n) => void;\nfunction encodeEvent(event: string, data: any = {}) {\n return new TextEncoder().encode(\n `event: ${event}\\ndata: ${JSON.stringify(data)}\\n\\n`\n );\n}\nexport default async function (req: Request): Promise {\n if (!verifyBotKey(req)) {\n return new Response(JSON.stringify({ error: \"Unauthorized\" }), {\n status: 401,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n const reqBody = await req.json().catch((e) => {\n console.error(\"body parse error\", e);\n return {};\n });\n console.log(\"body\", reqBody);\n if (reqBody.type === \"settings\") {\n return new Response(JSON.stringify(await getBotSettings()), {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n const body = new ReadableStream({\n start(controller) {\n const send = (event: any, data: any) => {\n controller.enqueue(encodeEvent(event, data));\n };\n return getResponse(reqBody, send)\n .catch((e) => console.error(\"getResponse error\", e))\n .finally(() => controller.close());\n },\n });\n return new Response(body, {\n status: 200,\n headers: { \"Content-Type\": \"text/event-stream\" },\n });\n}","// main.ts — Entry point for Open-Source-Lab on val.town\n// Deploy as an HTTP val at val.town\n//\n// Required environment variables (set in val.town Secrets):\n// GROQ_API_KEY — from console.groq.com (free tier available)\n// MISTRAL_API_KEY — from console.mistral.ai (free tier available)\n//\n// Usage:\n// 1. Create a new HTTP val on val.town\n// 2. Paste this file as main.ts (the entry point)\n// 3. Create separate vals for db.ts, api.ts, frontend_styles.ts, frontend_html.ts\n// OR combine everything into one file if under the 80K limit\n// 4. Add your API keys in Settings → Secrets\n// 5. Visit your val URL\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { initDB } from \"./db.ts\";\nimport {\n handleRegister,\n handleLogin,\n handleLogout,\n handleMe,\n handleChangePassword,\n handleChat,\n handleAdminUsers,\n handleAdminDeleteUser,\n handleModels,\n CHAT_MODELS,\n} from \"./api.ts\";\nimport { buildPage } from \"./frontend_html.ts\";\n\n// ── Init DB on cold start ──\nlet dbReady = false;\nasync function ensureDB() {\n if (dbReady) return;\n await initDB(sqlite);\n dbReady = true;\n}\n\n// ── Router ──\nexport default async function handler(req: Request): Promise {\n await ensureDB();\n\n const url = new URL(req.url);\n const path = url.pathname;\n const method = req.method;\n\n // ── API routes ──\n if (path.startsWith(\"/api/\")) {\n // Pass Deno.env as env object for API keys\n const env = {\n GROQ_API_KEY: Deno.env.get(\"GROQ_API_KEY\") || \"\",\n MISTRAL_API_KEY: Deno.env.get(\"MISTRAL_API_KEY\") || \"\",\n };\n\n if (path === \"/api/register\" && method === \"POST\") return handleRegister(req, sqlite);\n if (path === \"/api/login\" && method === \"POST\") return handleLogin(req, sqlite);\n if (path === \"/api/logout\" && method === \"POST\") return handleLogout(req, sqlite);\n if (path === \"/api/me\" && method === \"GET\") return handleMe(req, sqlite);\n if (path === \"/api/change-password\" && method === \"POST\") return handleChangePassword(req, sqlite);\n if (path === \"/api/chat\" && method === \"POST\") return handleChat(req, sqlite, env);\n if (path === \"/api/models\" && method === \"GET\") return handleModels(req);\n if (path === \"/api/admin/users\" && method === \"GET\") return handleAdminUsers(req, sqlite);\n\n // DELETE /api/admin/users/:id\n const delMatch = path.match(/^\\/api\\/admin\\/users\\/(\\d+)$/);\n if (delMatch && method === \"DELETE\") {\n return handleAdminDeleteUser(req, sqlite, parseInt(delMatch[1], 10));\n }\n\n return new Response(JSON.stringify({ error: \"Not found\" }), {\n status: 404,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ── Serve HTML for all other routes ──\n if (method === \"GET\") {\n const html = buildPage(CHAT_MODELS);\n return new Response(html, {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n }\n\n return new Response(\"Method not allowed\", { status: 405 });\n}","createdAt",["D",1782290281242],"branchVersion","branchId","47ffb737-61f4-4c05-a381-3299082f9d77","id","4cfb28d5-2f35-4b79-a880-4cf54f5a85ac","Open-Source-Lab",["D",1782288822073],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","https://poe.com/Open-Source-Lab","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/b2a0ab8e-bd65-4fcf-6f5f-41baa7c81300/square512?exp=1789549199&sig=887e102491c51f325bd7347c88e03dd7ca6efbbb5ef8643eff9fdf9656b8797c","0199868b-003e-768d-ad69-69ef7ad28bac","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","0199868b-003e-768d-ad69-6ce312a92bd0","tursoName","4cfb28d52f354b79a8804cf54f5a85ac","tursoHostname","4cfb28d52f354b79a8804cf54f5a85ac-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789515055826],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_103":102,"_110":106},"org",{"_103":102,"_104":45,"_105":106,"_18":56,"_107":108,"_109":25},"branch",{"_13":89,"_32":90,"_43":42,"_91":44,"_92":93,"_94":95,"_96":50,"_97":98,"_99":65,"_100":45,"_101":102},"isOwned",26,"main","projectId","forkedBranchId","f19dd44c-aa90-457d-b776-fce028811f45","forkedBranchVersion",1,"forkedProjectPrivacy","forkedProjectId","e24310da-52d8-41d6-9ff4-c052cc424d8d","forkedProjectOrgId","projectName","userHandle","OpenSourceLab","handle","displayName","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/88612baf-1e17-4665-456e-8e801ea25000/square512?exp=1789549199&sig=5070b34525f2219d1088593d49d4bf5eb195c52ff378ebd800bde47471d0d3d2","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":226,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":31,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":227,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":228,"_84":229,"_86":230,"_88":25},"tree",[201,202,203,204,205,206],"files",[201,202,203,204,205,206],"counts",{"_190":63,"_191":95,"_192":95,"_193":194,"_195":196},"contents",[144,145,146,147,148,149],"upstreamProject",{"_43":98,"_32":142,"_52":53,"_54":55,"_49":50,"_82":143},"upstreamBranch",{"_43":93,"_38":135,"_136":137,"_32":90,"_91":98,"_13":95,"_92":138,"_94":139,"_140":141,"_47":-5,"_88":25,"_49":50,"_101":102,"_64":65,"_100":142},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1781632981029],"updatedAt",["D",1781632981029],"ea966810-4ab9-11f1-a7f0-ee650bb23af1",3,"lockfileKey","1782288745871-esm.town_v_OpenSourceLab_Open-Source-Lab2@1-main","Open-Source-Lab2",{"_103":102,"_110":106},{"_43":184,"_32":185,"_30":186,"_151":-5,"_41":42,"_40":95,"_152":25,"_38":187,"_13":63,"_33":20,"_35":188,"_24":25,"_154":-5,"_27":189},{"_43":177,"_32":178,"_30":179,"_151":-5,"_41":42,"_40":180,"_152":59,"_38":181,"_13":168,"_33":161,"_35":182,"_24":25,"_154":-5,"_27":183},{"_43":171,"_32":172,"_30":173,"_151":-5,"_41":42,"_40":174,"_152":25,"_38":175,"_13":95,"_33":161,"_35":112,"_24":25,"_154":-5,"_27":176},{"_43":163,"_32":164,"_30":165,"_151":-5,"_41":42,"_40":166,"_152":59,"_38":167,"_13":168,"_33":161,"_35":169,"_24":25,"_154":-5,"_27":170},{"_43":156,"_32":157,"_30":158,"_151":-5,"_41":42,"_40":159,"_152":25,"_38":160,"_13":95,"_33":161,"_35":112,"_24":25,"_154":-5,"_27":162},{"_43":150,"_32":28,"_30":31,"_151":-5,"_41":42,"_40":14,"_152":25,"_38":153,"_13":95,"_33":34,"_35":37,"_24":25,"_154":-5,"_27":155},"a6a408bb-40e8-4590-91c9-cc36e43437ad","parentId","latest",["D",1782290281242],"label",[28],"165f31a1-764a-46a9-b26a-36d5f4dd0809","frontend.ts","199ef764-6fa7-11f1-8bb9-1607ee4eb77e",9,["D",1782289894665],"script",[157],"dcdb6682-50a4-4d30-a831-632579730a3f","db.ts","04695614-6fa7-11f1-a862-1607ee4eb77e",11,["D",1782290270286],2,"// db.ts — SQLite schema and helpers for Open-Source-Lab on val.town\n// Import from val.town's sqlite module in your actual val:\n// import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nexport async function initDB(sqlite: any) {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT UNIQUE NOT NULL COLLATE NOCASE,\n password_hash TEXT NOT NULL,\n created_at INTEGER DEFAULT (unixepoch()),\n is_admin INTEGER DEFAULT 0\n )\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n created_at INTEGER DEFAULT (unixepoch()),\n expires_at INTEGER NOT NULL\n )\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS chat_usage (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL,\n model TEXT NOT NULL,\n input_chars INTEGER DEFAULT 0,\n output_chars INTEGER DEFAULT 0,\n created_at INTEGER DEFAULT (unixepoch())\n )\n `);\n // Ensure roboohood is admin\n await sqlite.execute(`\n INSERT OR IGNORE INTO users (username, password_hash, is_admin)\n VALUES ('roboohood', '${await hashPassword(\"admin123\")}', 1)\n `);\n}\n\nexport async function hashPassword(password: string): Promise {\n const encoder = new TextEncoder();\n const data = encoder.encode(password + \"osl_salt_2026\");\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport async function createUser(sqlite: any, username: string, password: string) {\n if (!/^[a-zA-Z0-9_]{3,32}$/.test(username)) {\n throw new Error(\"Username must be 3–32 characters: letters, numbers, underscores only.\");\n }\n if (password.length < 6) {\n throw new Error(\"Password must be at least 6 characters.\");\n }\n const hash = await hashPassword(password);\n const isAdmin = username.toLowerCase() === \"roboohood\" ? 1 : 0;\n try {\n await sqlite.execute(\n `INSERT INTO users (username, password_hash, is_admin) VALUES (?, ?, ?)`,\n [username, hash, isAdmin]\n );\n } catch (e: any) {\n if (e.message?.includes(\"UNIQUE\")) throw new Error(\"Username already taken.\");\n throw e;\n }\n}\n\nexport async function verifyUser(sqlite: any, username: string, password: string) {\n const hash = await hashPassword(password);\n const rows = await sqlite.execute(\n `SELECT id, username, is_admin FROM users WHERE username = ? COLLATE NOCASE AND password_hash = ?`,\n [username, hash]\n );\n if (!rows.rows || rows.rows.length === 0) return null;\n const [id, uname, isAdmin] = rows.rows[0];\n return { id, username: uname, isAdmin: !!isAdmin };\n}\n\nexport async function createSession(sqlite: any, userId: number): Promise {\n const token = crypto.randomUUID() + crypto.randomUUID();\n const expiresAt = Math.floor(Date.now() / 1000) + 60 * 60 * 24 * 7; // 7 days\n await sqlite.execute(\n `INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)`,\n [token, userId, expiresAt]\n );\n return token;\n}\n\nexport async function getSession(sqlite: any, token: string) {\n if (!token) return null;\n const now = Math.floor(Date.now() / 1000);\n const rows = await sqlite.execute(\n `SELECT s.user_id, u.username, u.is_admin\n FROM sessions s JOIN users u ON u.id = s.user_id\n WHERE s.token = ? AND s.expires_at > ?`,\n [token, now]\n );\n if (!rows.rows || rows.rows.length === 0) return null;\n const [userId, username, isAdmin] = rows.rows[0];\n return { userId, username, isAdmin: !!isAdmin };\n}\n\nexport async function deleteSession(sqlite: any, token: string) {\n await sqlite.execute(`DELETE FROM sessions WHERE token = ?`, [token]);\n}\n\nexport async function changePassword(sqlite: any, userId: number, oldPass: string, newPass: string) {\n // Verify old password\n const oldHash = await hashPassword(oldPass);\n const check = await sqlite.execute(\n `SELECT id FROM users WHERE id = ? AND password_hash = ?`,\n [userId, oldHash]\n );\n if (!check.rows || check.rows.length === 0) throw new Error(\"Current password is incorrect.\");\n if (newPass.length < 6) throw new Error(\"New password must be at least 6 characters.\");\n const newHash = await hashPassword(newPass);\n await sqlite.execute(`UPDATE users SET password_hash = ? WHERE id = ?`, [newHash, userId]);\n}\n\nexport async function logChatUsage(\n sqlite: any,\n userId: number,\n model: string,\n inputChars: number,\n outputChars: number\n) {\n await sqlite.execute(\n `INSERT INTO chat_usage (user_id, model, input_chars, output_chars) VALUES (?, ?, ?, ?)`,\n [userId, model, inputChars, outputChars]\n );\n}\n\nexport async function getAllUsers(sqlite: any) {\n const rows = await sqlite.execute(\n `SELECT u.id, u.username, u.is_admin, u.created_at,\n COALESCE(SUM(c.input_chars),0) AS total_in,\n COALESCE(SUM(c.output_chars),0) AS total_out\n FROM users u LEFT JOIN chat_usage c ON c.user_id = u.id\n GROUP BY u.id ORDER BY u.created_at DESC`\n );\n if (!rows.rows) return [];\n return rows.rows.map(([id, username, isAdmin, createdAt, totalIn, totalOut]: any) => ({\n id, username, isAdmin: !!isAdmin, createdAt, totalIn, totalOut\n }));\n}\n\nexport async function deleteUser(sqlite: any, userId: number) {\n await sqlite.execute(`DELETE FROM sessions WHERE user_id = ?`, [userId]);\n await sqlite.execute(`DELETE FROM chat_usage WHERE user_id = ?`, [userId]);\n await sqlite.execute(`DELETE FROM users WHERE id = ?`, [userId]);\n}\n\nexport async function getUserStats(sqlite: any, userId: number) {\n const rows = await sqlite.execute(\n `SELECT COALESCE(SUM(input_chars),0), COALESCE(SUM(output_chars),0)\n FROM chat_usage WHERE user_id = ?`,\n [userId]\n );\n if (!rows.rows || rows.rows.length === 0) return { totalIn: 0, totalOut: 0 };\n const [totalIn, totalOut] = rows.rows[0];\n return { totalIn, totalOut };\n}",[164],"c42ac9f7-3606-4a81-adc5-9bced364380e","auth.ts","073538f4-6fa7-11f1-8092-1607ee4eb77e",4,["D",1782289865459],[172],"7575aeb3-b71c-4dd0-8262-73d944184884","api.ts","13a3afe4-6fa7-11f1-8343-1607ee4eb77e",10,["D",1782290261460],"// api.ts — Route handlers for Open-Source-Lab on val.town\n// All functions receive (req, sqlite) and return Response\n\nimport {\n createUser, verifyUser, createSession, getSession,\n deleteSession, changePassword, logChatUsage,\n getAllUsers, deleteUser, getUserStats\n} from \"./db.ts\";\n\n// ─── helpers ──────────────────────────────────────────────────────────────────\n\nfunction json(data: any, status = 200) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\" }\n });\n}\n\nfunction err(msg: string, status = 400) {\n return json({ error: msg }, status);\n}\n\nfunction getToken(req: Request): string {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const match = cookie.match(/osl_session=([^;]+)/);\n return match ? match[1] : \"\";\n}\n\n// ─── Chat models ──────────────────────────────────────────────────────────────\n\nexport const CHAT_MODELS = [\n // Groq — free tier, fast\n { id: \"llama-3.1-8b-instant\", name: \"Llama 3.1 8B (Groq)\", provider: \"groq\", org: \"Meta\" },\n { id: \"llama-3.3-70b-versatile\", name: \"Llama 3.3 70B (Groq)\", provider: \"groq\", org: \"Meta\" },\n { id: \"gemma2-9b-it\", name: \"Gemma 2 9B (Groq)\", provider: \"groq\", org: \"Google\" },\n { id: \"mistral-saba-24b\", name: \"Mistral Saba 24B (Groq)\", provider: \"groq\", org: \"Mistral AI\" },\n { id: \"qwen-qwq-32b\", name: \"QwQ 32B (Groq)\", provider: \"groq\", org: \"Alibaba\" },\n { id: \"deepseek-r1-distill-llama-70b\", name: \"DeepSeek R1 Distill 70B (Groq)\", provider: \"groq\", org: \"DeepSeek\" },\n // Mistral — open weights on their platform\n { id: \"open-mistral-nemo\", name: \"Mistral NeMo (Mistral)\", provider: \"mistral\", org: \"Mistral AI\" },\n { id: \"open-mistral-7b\", name: \"Mistral 7B (Mistral)\", provider: \"mistral\", org: \"Mistral AI\" },\n { id: \"open-mixtral-8x7b\", name: \"Mixtral 8x7B (Mistral)\", provider: \"mistral\", org: \"Mistral AI\" },\n { id: \"mistral-small-latest\", name: \"Mistral Small (Mistral)\", provider: \"mistral\", org: \"Mistral AI\" },\n];\n\n// ─── POST /api/register ───────────────────────────────────────────────────────\n\nexport async function handleRegister(req: Request, sqlite: any): Promise {\n let body: any;\n try { body = await req.json(); } catch { return err(\"Invalid JSON\"); }\n const { username, password } = body;\n if (!username || !password) return err(\"Username and password required.\");\n try {\n await createUser(sqlite, username, password);\n const user = await verifyUser(sqlite, username, password);\n if (!user) return err(\"Registration failed.\");\n const token = await createSession(sqlite, user.id);\n const resp = json({ ok: true, username: user.username, isAdmin: user.isAdmin });\n resp.headers.set(\"Set-Cookie\", `osl_session=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=604800`);\n return resp;\n } catch (e: any) {\n return err(e.message);\n }\n}\n\n// ─── POST /api/login ─────────────────────────────────────────────────────────\n\nexport async function handleLogin(req: Request, sqlite: any): Promise {\n let body: any;\n try { body = await req.json(); } catch { return err(\"Invalid JSON\"); }\n const { username, password } = body;\n if (!username || !password) return err(\"Username and password required.\");\n const user = await verifyUser(sqlite, username, password);\n if (!user) return err(\"Invalid username or password.\", 401);\n const token = await createSession(sqlite, user.id);\n const resp = json({ ok: true, username: user.username, isAdmin: user.isAdmin });\n resp.headers.set(\"Set-Cookie\", `osl_session=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=604800`);\n return resp;\n}\n\n// ─── POST /api/logout ────────────────────────────────────────────────────────\n\nexport async function handleLogout(req: Request, sqlite: any): Promise {\n const token = getToken(req);\n if (token) await deleteSession(sqlite, token);\n const resp = json({ ok: true });\n resp.headers.set(\"Set-Cookie\", \"osl_session=; Path=/; Max-Age=0\");\n return resp;\n}\n\n// ─── GET /api/me ─────────────────────────────────────────────────────────────\n\nexport async function handleMe(req: Request, sqlite: any): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session) return json({ user: null });\n const stats = await getUserStats(sqlite, session.userId);\n return json({ user: { username: session.username, isAdmin: session.isAdmin, ...stats } });\n}\n\n// ─── POST /api/change-password ───────────────────────────────────────────────\n\nexport async function handleChangePassword(req: Request, sqlite: any): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session) return err(\"Not logged in.\", 401);\n let body: any;\n try { body = await req.json(); } catch { return err(\"Invalid JSON\"); }\n const { oldPassword, newPassword } = body;\n if (!oldPassword || !newPassword) return err(\"Both passwords required.\");\n try {\n await changePassword(sqlite, session.userId, oldPassword, newPassword);\n return json({ ok: true });\n } catch (e: any) {\n return err(e.message);\n }\n}\n\n// ─── POST /api/chat ──────────────────────────────────────────────────────────\n\nexport async function handleChat(req: Request, sqlite: any, env: any): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session) return err(\"You must be logged in to use the chat.\", 401);\n\n let body: any;\n try { body = await req.json(); } catch { return err(\"Invalid JSON\"); }\n\n const { modelId, messages } = body;\n if (!modelId || !Array.isArray(messages)) return err(\"modelId and messages required.\");\n\n const model = CHAT_MODELS.find(m => m.id === modelId);\n if (!model) return err(\"Unknown model.\");\n\n // Count input chars\n const inputChars = messages.reduce((acc: number, m: any) =>\n acc + String(m.content || \"\").length, 0);\n\n try {\n let response: Response;\n\n if (model.provider === \"groq\") {\n response = await fetch(\"https://api.groq.com/openai/v1/chat/completions\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": `Bearer ${env.GROQ_API_KEY}`\n },\n body: JSON.stringify({ model: modelId, messages, max_tokens: 1024 })\n });\n } else if (model.provider === \"mistral\") {\n response = await fetch(\"https://api.mistral.ai/v1/chat/completions\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": `Bearer ${env.MISTRAL_API_KEY}`\n },\n body: JSON.stringify({ model: modelId, messages, max_tokens: 1024 })\n });\n } else {\n return err(\"Unknown provider.\");\n }\n\n if (!response.ok) {\n const errText = await response.text();\n return err(`Model API error: ${response.status} ${errText}`, 502);\n }\n\n const data = await response.json();\n const reply = data.choices?.[0]?.message?.content || \"(No response)\";\n const outputChars = reply.length;\n\n await logChatUsage(sqlite, session.userId, modelId, inputChars, outputChars);\n\n return json({ reply, model: model.name });\n } catch (e: any) {\n return err(`Request failed: ${e.message}`, 502);\n }\n}\n\n// ─── GET /api/admin/users ─────────────────────────────────────────────────────\n\nexport async function handleAdminUsers(req: Request, sqlite: any): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session?.isAdmin) return err(\"Admin only.\", 403);\n const users = await getAllUsers(sqlite);\n return json({ users });\n}\n\n// ─── DELETE /api/admin/users/:id ─────────────────────────────────────────────\n\nexport async function handleAdminDeleteUser(req: Request, sqlite: any, userId: number): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session?.isAdmin) return err(\"Admin only.\", 403);\n if (session.userId === userId) return err(\"Cannot delete yourself.\");\n await deleteUser(sqlite, userId);\n return json({ ok: true });\n}\n\n// ─── GET /api/models ─────────────────────────────────────────────────────────\n\nexport async function handleModels(_req: Request): Promise {\n return json({ models: CHAT_MODELS });\n}",[178],"0608849f-b494-4a49-a0df-784e28e3e6c2","Readme.txt","019ef8b1-2f79-740c-a291-f204352f7dec",["D",1782288822073],"- Implement BOT_ACCESS_KEY to authentificate\n- https://openrouter.ai/cohere/rerank-4-pro",[185],"pulls","branches","forks","envVars",{"_197":199,"_200":63},"connections",{"_197":63,"_198":63},"count","unfilledCount",6,"emptyCount",{"_43":184,"_32":185,"_30":186,"_151":-5,"_41":42,"_40":95,"_152":25,"_38":223,"_13":63,"_33":20,"_35":188,"_24":25,"_154":-5,"_208":224,"_27":225},{"_43":177,"_32":178,"_30":179,"_151":-5,"_41":42,"_40":180,"_152":59,"_38":220,"_13":168,"_33":161,"_35":182,"_24":25,"_154":-5,"_208":221,"_27":222},{"_43":171,"_32":172,"_30":173,"_151":-5,"_41":42,"_40":174,"_152":25,"_38":217,"_13":95,"_33":161,"_35":112,"_24":25,"_154":-5,"_208":218,"_27":219},{"_43":163,"_32":164,"_30":165,"_151":-5,"_41":42,"_40":166,"_152":59,"_38":214,"_13":168,"_33":161,"_35":169,"_24":25,"_154":-5,"_208":215,"_27":216},{"_43":156,"_32":157,"_30":158,"_151":-5,"_41":42,"_40":159,"_152":25,"_38":211,"_13":95,"_33":161,"_35":112,"_24":25,"_154":-5,"_208":212,"_27":213},{"_43":150,"_32":28,"_30":31,"_151":-5,"_41":42,"_40":14,"_152":25,"_38":207,"_13":95,"_33":34,"_35":37,"_24":25,"_154":-5,"_208":209,"_27":210},["D",1782290281242],"children",[],[28],["D",1782289894665],[],[157],["D",1782290270286],[],[164],["D",1782289865459],[],[172],["D",1782290261460],[],[178],["D",1782288822073],[],[185],["D",1782288822073],["D",1789515055826],{"_103":102,"_110":106},{"_103":102,"_104":45,"_105":106,"_18":56,"_107":108,"_109":25},{"_13":89,"_32":90,"_43":42,"_91":44,"_92":93,"_94":95,"_96":50,"_97":98,"_99":65,"_100":45,"_101":102},"ctx",{"_82":-5,"_132":264,"_265":266,"_267":268,"_269":25,"_270":25,"_271":25,"_272":59,"_273":-5,"_274":-7,"_275":-7,"_276":63,"_277":25,"_278":25,"_279":-5,"_280":25,"_281":25,"_282":25,"_283":-5},"ENV",{"_235":236,"_237":238,"_239":90,"_240":241,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v12