[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_242":243,"_244":245},"routes/_app.x.$handle.$name",{"_103":102,"_32":44,"_111":90,"_26":36,"_13":14,"_112":-5,"_11":113,"_114":115,"_116":117,"_118":119,"_120":121,"_20":-5,"_122":123,"_124":125,"_126":24,"_127":128,"_129":59,"_130":-5,"_131":-5,"_132":133},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":54,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":24},"version",14,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":29},"file",{"_30":31,"_32":27,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","new-file-5351.ts","latestPath","frontend_html.ts","fileId","180194e2-6fa8-11f1-aa98-1607ee4eb77e","name","fileType","script","content","","createdAt",["D",1782290317305],"branchVersion","branchId","47ffb737-61f4-4c05-a381-3299082f9d77","id","4cfb28d5-2f35-4b79-a880-4cf54f5a85ac","Open-Source-Lab",["D",1782288822073],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","https://poe.com/Open-Source-Lab","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/b2a0ab8e-bd65-4fcf-6f5f-41baa7c81300/square512?exp=1789567199&sig=1481fac5f45ce32ba6d73d4a6e20e4a47e8c2a06a489f33cd7ce717973319e4a","0199868b-003e-768d-ad69-69ef7ad28bac","pinnedFileId","019ef8b1-2f7a-7348-93d4-6ddeb044310d","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","0199868b-003e-768d-ad69-6ce312a92bd0","tursoName","4cfb28d52f354b79a8804cf54f5a85ac","tursoHostname","4cfb28d52f354b79a8804cf54f5a85ac-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789515055826],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_103":102,"_110":106},"org",{"_103":102,"_104":44,"_105":106,"_18":55,"_107":108,"_109":24},"branch",{"_13":89,"_32":90,"_42":41,"_91":43,"_92":93,"_94":95,"_96":49,"_97":98,"_99":65,"_100":44,"_101":102},"isOwned",26,"main","projectId","forkedBranchId","f19dd44c-aa90-457d-b776-fce028811f45","forkedBranchVersion",1,"forkedProjectPrivacy","forkedProjectId","e24310da-52d8-41d6-9ff4-c052cc424d8d","forkedProjectOrgId","projectName","userHandle","OpenSourceLab","handle","displayName","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/88612baf-1e17-4665-456e-8e801ea25000/square512?exp=1789567199&sig=d1e95a4d57754e707cce5844fb82ba6776068e0158209acad74954022291c92a","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_42":43,"_32":44,"_37":237,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":54,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":238,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":239,"_84":240,"_86":241,"_88":24},"tree",[208,209,210,211,212,213,214],"files",[208,209,210,211,212,213,214],"counts",{"_197":63,"_198":95,"_199":95,"_200":201,"_202":203},"contents",[143,144,145,146,147,148,149],"upstreamProject",{"_42":98,"_32":141,"_51":52,"_53":54,"_48":49,"_82":142},"upstreamBranch",{"_42":93,"_37":134,"_135":136,"_32":90,"_91":98,"_13":95,"_92":137,"_94":138,"_139":140,"_46":-5,"_88":24,"_48":49,"_101":102,"_64":65,"_100":141},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1781632981029],"updatedAt",["D",1781632981029],"ea966810-4ab9-11f1-a7f0-ee650bb23af1",3,"lockfileKey","1782288745871-esm.town_v_OpenSourceLab_Open-Source-Lab2@1-main","Open-Source-Lab2",{"_103":102,"_110":106},{"_42":191,"_32":192,"_30":193,"_151":-5,"_40":41,"_39":95,"_152":24,"_37":194,"_13":63,"_33":20,"_35":195,"_23":24,"_154":-5,"_26":196},{"_42":184,"_32":185,"_30":186,"_151":-5,"_40":41,"_39":187,"_152":59,"_37":188,"_13":168,"_33":34,"_35":189,"_23":24,"_154":-5,"_26":190},{"_42":178,"_32":179,"_30":180,"_151":-5,"_40":41,"_39":181,"_152":24,"_37":182,"_13":95,"_33":34,"_35":36,"_23":24,"_154":-5,"_26":183},{"_42":171,"_32":172,"_30":173,"_151":-5,"_40":41,"_39":174,"_152":59,"_37":175,"_13":168,"_33":34,"_35":176,"_23":24,"_154":-5,"_26":177},{"_42":163,"_32":164,"_30":165,"_151":-5,"_40":41,"_39":166,"_152":24,"_37":167,"_13":168,"_33":34,"_35":169,"_23":24,"_154":-5,"_26":170},{"_42":156,"_32":157,"_30":57,"_151":-5,"_40":41,"_39":158,"_152":24,"_37":159,"_13":95,"_33":160,"_35":161,"_23":24,"_154":-5,"_26":162},{"_42":150,"_32":27,"_30":31,"_151":-5,"_40":41,"_39":14,"_152":24,"_37":153,"_13":63,"_33":34,"_35":36,"_23":24,"_154":-5,"_26":155},"0c498fa5-1b39-46fb-85ea-749a72332ede","parentId","latest",["D",1782290317305],"label",[27],"a6a408bb-40e8-4590-91c9-cc36e43437ad","main.tsx",12,["D",1782290281242],"http","// main.ts — Entry point for Open-Source-Lab on val.town\n// Deploy as an HTTP val at val.town\n//\n// Required environment variables (set in val.town Secrets):\n// GROQ_API_KEY — from console.groq.com (free tier available)\n// MISTRAL_API_KEY — from console.mistral.ai (free tier available)\n//\n// Usage:\n// 1. Create a new HTTP val on val.town\n// 2. Paste this file as main.ts (the entry point)\n// 3. Create separate vals for db.ts, api.ts, frontend_styles.ts, frontend_html.ts\n// OR combine everything into one file if under the 80K limit\n// 4. Add your API keys in Settings → Secrets\n// 5. Visit your val URL\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { initDB } from \"./db.ts\";\nimport {\n handleRegister,\n handleLogin,\n handleLogout,\n handleMe,\n handleChangePassword,\n handleChat,\n handleAdminUsers,\n handleAdminDeleteUser,\n handleModels,\n CHAT_MODELS,\n} from \"./api.ts\";\nimport { buildPage } from \"./frontend_html.ts\";\n\n// ── Init DB on cold start ──\nlet dbReady = false;\nasync function ensureDB() {\n if (dbReady) return;\n await initDB(sqlite);\n dbReady = true;\n}\n\n// ── Router ──\nexport default async function handler(req: Request): Promise {\n await ensureDB();\n\n const url = new URL(req.url);\n const path = url.pathname;\n const method = req.method;\n\n // ── API routes ──\n if (path.startsWith(\"/api/\")) {\n // Pass Deno.env as env object for API keys\n const env = {\n GROQ_API_KEY: Deno.env.get(\"GROQ_API_KEY\") || \"\",\n MISTRAL_API_KEY: Deno.env.get(\"MISTRAL_API_KEY\") || \"\",\n };\n\n if (path === \"/api/register\" && method === \"POST\") return handleRegister(req, sqlite);\n if (path === \"/api/login\" && method === \"POST\") return handleLogin(req, sqlite);\n if (path === \"/api/logout\" && method === \"POST\") return handleLogout(req, sqlite);\n if (path === \"/api/me\" && method === \"GET\") return handleMe(req, sqlite);\n if (path === \"/api/change-password\" && method === \"POST\") return handleChangePassword(req, sqlite);\n if (path === \"/api/chat\" && method === \"POST\") return handleChat(req, sqlite, env);\n if (path === \"/api/models\" && method === \"GET\") return handleModels(req);\n if (path === \"/api/admin/users\" && method === \"GET\") return handleAdminUsers(req, sqlite);\n\n // DELETE /api/admin/users/:id\n const delMatch = path.match(/^\\/api\\/admin\\/users\\/(\\d+)$/);\n if (delMatch && method === \"DELETE\") {\n return handleAdminDeleteUser(req, sqlite, parseInt(delMatch[1], 10));\n }\n\n return new Response(JSON.stringify({ error: \"Not found\" }), {\n status: 404,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ── Serve HTML for all other routes ──\n if (method === \"GET\") {\n const html = buildPage(CHAT_MODELS);\n return new Response(html, {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n }\n\n return new Response(\"Method not allowed\", { status: 405 });\n}",[157],"9e46ee95-1b3a-4ac3-a89c-51bee0aa7375","frontend.ts","199ef764-6fa7-11f1-8bb9-1607ee4eb77e",13,["D",1782290293467],2,"// frontend_styles.ts — CSS and shared HTML fragments for Open-Source-Lab\n\nexport const SHARED_CSS = `\n\n\n\n\n`;\n\nexport const CATALOG = [\n {n:'Llama-3.1-405B',src:'Meta',cat:'text',p:'405B',c:'128K',l:'Llama 3.1'},\n {n:'Llama-3.3-70B',src:'Meta',cat:'text',p:'70B',c:'128K',l:'Llama 3.3'},\n {n:'Qwen3-235B-A22B',src:'Alibaba',cat:'text',p:'235B/22B',c:'128K',l:'Apache 2.0'},\n {n:'Qwen3.5-27B',src:'Alibaba',cat:'text',p:'27B',c:'262K',l:'Apache 2.0'},\n {n:'Qwen2.5-72B',src:'Alibaba',cat:'text',p:'72B',c:'128K',l:'Qwen'},\n {n:'DeepSeek-V3.1',src:'DeepSeek',cat:'text',p:'671B/37B',c:'128K',l:'MIT'},\n {n:'DeepSeek-R1',src:'DeepSeek',cat:'text',p:'671B/37B',c:'128K',l:'MIT'},\n {n:'Mistral-Large-2',src:'Mistral AI',cat:'text',p:'123B',c:'128K',l:'MRL'},\n {n:'Mixtral-8x22B',src:'Mistral AI',cat:'text',p:'141B/39B',c:'64K',l:'Apache 2.0'},\n {n:'Mistral-NeMo',src:'Mistral/NVIDIA',cat:'text',p:'12B',c:'128K',l:'Apache 2.0'},\n {n:'Mistral-Small-3',src:'Mistral AI',cat:'text',p:'24B',c:'32K',l:'Apache 2.0'},\n {n:'Gemma-2-27B',src:'Google',cat:'text',p:'27B',c:'8K',l:'Gemma'},\n {n:'Gemma-2-9B',src:'Google',cat:'text',p:'9B',c:'8K',l:'Gemma'},\n {n:'Gemma-3-27B',src:'Google',cat:'text',p:'27B',c:'128K',l:'Gemma'},\n {n:'Phi-4',src:'Microsoft',cat:'text',p:'14B',c:'16K',l:'MIT'},\n {n:'Phi-3.5-MoE',src:'Microsoft',cat:'text',p:'42B/6.6B',c:'128K',l:'MIT'},\n {n:'Command-R+',src:'Cohere',cat:'text',p:'104B',c:'128K',l:'CC-BY-NC'},\n {n:'Command-R',src:'Cohere',cat:'text',p:'35B',c:'128K',l:'CC-BY-NC'},\n {n:'Hermes-3-405B',src:'Nous Research',cat:'text',p:'405B',c:'128K',l:'Llama 3.1'},\n {n:'Hermes-4-70B',src:'Nous Research',cat:'text',p:'70B',c:'128K',l:'Llama 3.1'},\n {n:'Yi-1.5-34B',src:'01.AI',cat:'text',p:'34B',c:'32K',l:'Apache 2.0'},\n {n:'InternLM2.5-20B',src:'Shanghai AI Lab',cat:'text',p:'20B',c:'256K',l:'Apache 2.0'},\n {n:'Falcon-2-11B',src:'TII',cat:'text',p:'11B',c:'8K',l:'Apache 2.0'},\n {n:'OLMo-2-13B',src:'Allen AI',cat:'text',p:'13B',c:'4K',l:'Apache 2.0'},\n {n:'DBRX',src:'Databricks',cat:'text',p:'132B/36B',c:'32K',l:'Databricks'},\n {n:'SmolLM2-1.7B',src:'HuggingFace',cat:'text',p:'1.7B',c:'8K',l:'Apache 2.0'},\n {n:'Trinity-Mini',src:'Open-Source-Lab',cat:'experimental',p:'Mini',c:'128K',l:'Open'},\n {n:'BitNet-b1.58-3B',src:'Microsoft',cat:'experimental',p:'3B',c:'4K',l:'MIT'},\n {n:'Mamba-2-2.7B',src:'Cartesia/CMU',cat:'experimental',p:'2.7B',c:'1M',l:'Apache 2.0'},\n {n:'RWKV-6-World-7B',src:'RWKV Foundation',cat:'experimental',p:'7B',c:'Inf',l:'Apache 2.0'},\n {n:'Samba-CoE-v0.2',src:'SambaNova',cat:'experimental',p:'40B/8B',c:'256K',l:'Apache 2.0'},\n {n:'Chameleon-7B',src:'Meta',cat:'experimental',p:'7B',c:'8K',l:'Llama 3.1'},\n {n:'Laguna-M.1',src:'Poolside',cat:'code',p:'—',c:'128K',l:'Hosted'},\n {n:'GLM-5.1',src:'Zhipu AI',cat:'code',p:'754B',c:'205K',l:'MIT'},\n {n:'Minimax-M2.7',src:'MiniMax',cat:'code',p:'—',c:'205K',l:'Open'},\n {n:'MiMo-V2-Flash',src:'Xiaomi MiMo',cat:'code',p:'309B/15B',c:'256K',l:'Apache 2.0'},\n {n:'Qwen2.5-Coder-32B',src:'Alibaba',cat:'code',p:'32B',c:'128K',l:'Apache 2.0'},\n {n:'DeepSeek-Coder-V2',src:'DeepSeek',cat:'code',p:'236B/21B',c:'128K',l:'MIT'},\n {n:'StarCoder2-15B',src:'BigCode',cat:'code',p:'15B',c:'16K',l:'OpenRAIL'},\n {n:'Mistral-Small-4',src:'Mistral AI',cat:'multimodal',p:'24B',c:'128K',l:'Apache 2.0'},\n {n:'Nova-Lite-2',src:'Amazon',cat:'multimodal',p:'—',c:'1M',l:'Hosted'},\n {n:'Qwen2.5-VL-72B',src:'Alibaba',cat:'vision',p:'72B',c:'128K',l:'Apache 2.0'},\n {n:'Pixtral-12B',src:'Mistral AI',cat:'vision',p:'12B',c:'128K',l:'Apache 2.0'},\n {n:'Llama-3.2-90B-Vision',src:'Meta',cat:'vision',p:'90B',c:'128K',l:'Llama 3.2'},\n {n:'InternVL2.5-78B',src:'OpenGVLab',cat:'vision',p:'78B',c:'32K',l:'MIT'},\n {n:'Whisper-Large-v3',src:'OpenAI',cat:'audio',p:'1.55B',c:'—',l:'MIT'},\n {n:'Qwen2-Audio',src:'Alibaba',cat:'audio',p:'7B',c:'—',l:'Apache 2.0'},\n {n:'BGE-M3',src:'BAAI',cat:'embed',p:'560M',c:'8192',l:'MIT'},\n {n:'Nomic-Embed-v1.5',src:'Nomic AI',cat:'embed',p:'137M',c:'8192',l:'Apache 2.0'},\n {n:'F5-TTS',src:'F5-TTS Team',cat:'audio',p:'335M',c:'—',l:'MIT'},\n {n:'Moshi-v1.0',src:'Kyutai',cat:'audio',p:'7B',c:'—',l:'CC-BY 4.0'},\n];\n\nexport const CAT_NAMES: Record = {\n all:'All',text:'Language',code:'Code',vision:'Vision',\n audio:'Audio',multimodal:'Multimodal',embed:'Embeddings',experimental:'Experimental'\n};\n\nexport const BENCH_DATA = [\n {n:'Qwen-3-235B-A22B',o:'Alibaba/Qwen',cat:'text',os:true,mmlu:87,gpqa:71,he:88,math:86},\n {n:'Hermes-3-405B',o:'Nous Research',cat:'text',os:true,mmlu:86,gpqa:59,he:86,math:73},\n {n:'Hermes-4-70B',o:'Nous Research',cat:'text',os:true,mmlu:82,gpqa:55,he:82,math:70},\n {n:'Phi-4',o:'Microsoft Research',cat:'text',os:true,mmlu:84.8,gpqa:56.1,he:82.6,math:80.4},\n {n:'Qwen3.5-27B',o:'Alibaba/Qwen',cat:'text',os:true,mmlu:83,gpqa:60,he:89,math:82},\n {n:'DeepSeek-V3.1',o:'DeepSeek',cat:'text',os:true,mmlu:88.5,gpqa:59.1,he:90.2,math:90.2},\n {n:'Mistral-NeMo',o:'Mistral/NVIDIA',cat:'text',os:true,mmlu:68,gpqa:40,he:70,math:55},\n {n:'GLM-5.1',o:'Zhipu AI',cat:'code',os:true,mmlu:88,gpqa:72,he:94,math:88},\n {n:'MiMo-V2-Flash',o:'Xiaomi MiMo',cat:'code',os:true,mmlu:82,gpqa:63,he:89,math:84},\n {n:'Qwen2.5-Coder-32B',o:'Alibaba/Qwen',cat:'code',os:true,mmlu:75,gpqa:48,he:92.7,math:75},\n {n:'DeepSeek-Coder-V2',o:'DeepSeek',cat:'code',os:true,mmlu:79.2,gpqa:50,he:90.2,math:75.7},\n {n:'Qwen2.5-VL-72B',o:'Alibaba/Qwen',cat:'multimodal',os:true,mmlu:79,gpqa:51,he:80,math:68},\n {n:'Mistral-Small-4',o:'Mistral AI',cat:'multimodal',os:true,mmlu:78,gpqa:52,he:84,math:70},\n {n:'Nova-Lite-2',o:'Amazon',cat:'multimodal',os:false,mmlu:80,gpqa:50,he:82,math:72},\n {n:'Llama-3.1-405B',o:'Meta',cat:'ref',os:true,mmlu:88.6,gpqa:51.1,he:89,math:73.8},\n {n:'Qwen2.5-72B',o:'Alibaba/Qwen',cat:'ref',os:true,mmlu:86.1,gpqa:49,he:86.6,math:83.1},\n {n:'Gemma-2-27B',o:'Google',cat:'ref',os:true,mmlu:75.2,gpqa:42,he:72,math:55},\n {n:'Mixtral-8x22B',o:'Mistral AI',cat:'ref',os:true,mmlu:77.8,gpqa:44,he:76,math:54},\n].map(r => ({...r, avg: Math.round(((r.mmlu+r.gpqa+r.he+r.math)/4)*10)/10}));\n`;",[164],"dcdb6682-50a4-4d30-a831-632579730a3f","db.ts","04695614-6fa7-11f1-a862-1607ee4eb77e",11,["D",1782290270286],"// db.ts — SQLite schema and helpers for Open-Source-Lab on val.town\n// Import from val.town's sqlite module in your actual val:\n// import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nexport async function initDB(sqlite: any) {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT UNIQUE NOT NULL COLLATE NOCASE,\n password_hash TEXT NOT NULL,\n created_at INTEGER DEFAULT (unixepoch()),\n is_admin INTEGER DEFAULT 0\n )\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n created_at INTEGER DEFAULT (unixepoch()),\n expires_at INTEGER NOT NULL\n )\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS chat_usage (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL,\n model TEXT NOT NULL,\n input_chars INTEGER DEFAULT 0,\n output_chars INTEGER DEFAULT 0,\n created_at INTEGER DEFAULT (unixepoch())\n )\n `);\n // Ensure roboohood is admin\n await sqlite.execute(`\n INSERT OR IGNORE INTO users (username, password_hash, is_admin)\n VALUES ('roboohood', '${await hashPassword(\"admin123\")}', 1)\n `);\n}\n\nexport async function hashPassword(password: string): Promise {\n const encoder = new TextEncoder();\n const data = encoder.encode(password + \"osl_salt_2026\");\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport async function createUser(sqlite: any, username: string, password: string) {\n if (!/^[a-zA-Z0-9_]{3,32}$/.test(username)) {\n throw new Error(\"Username must be 3–32 characters: letters, numbers, underscores only.\");\n }\n if (password.length < 6) {\n throw new Error(\"Password must be at least 6 characters.\");\n }\n const hash = await hashPassword(password);\n const isAdmin = username.toLowerCase() === \"roboohood\" ? 1 : 0;\n try {\n await sqlite.execute(\n `INSERT INTO users (username, password_hash, is_admin) VALUES (?, ?, ?)`,\n [username, hash, isAdmin]\n );\n } catch (e: any) {\n if (e.message?.includes(\"UNIQUE\")) throw new Error(\"Username already taken.\");\n throw e;\n }\n}\n\nexport async function verifyUser(sqlite: any, username: string, password: string) {\n const hash = await hashPassword(password);\n const rows = await sqlite.execute(\n `SELECT id, username, is_admin FROM users WHERE username = ? COLLATE NOCASE AND password_hash = ?`,\n [username, hash]\n );\n if (!rows.rows || rows.rows.length === 0) return null;\n const [id, uname, isAdmin] = rows.rows[0];\n return { id, username: uname, isAdmin: !!isAdmin };\n}\n\nexport async function createSession(sqlite: any, userId: number): Promise {\n const token = crypto.randomUUID() + crypto.randomUUID();\n const expiresAt = Math.floor(Date.now() / 1000) + 60 * 60 * 24 * 7; // 7 days\n await sqlite.execute(\n `INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)`,\n [token, userId, expiresAt]\n );\n return token;\n}\n\nexport async function getSession(sqlite: any, token: string) {\n if (!token) return null;\n const now = Math.floor(Date.now() / 1000);\n const rows = await sqlite.execute(\n `SELECT s.user_id, u.username, u.is_admin\n FROM sessions s JOIN users u ON u.id = s.user_id\n WHERE s.token = ? AND s.expires_at > ?`,\n [token, now]\n );\n if (!rows.rows || rows.rows.length === 0) return null;\n const [userId, username, isAdmin] = rows.rows[0];\n return { userId, username, isAdmin: !!isAdmin };\n}\n\nexport async function deleteSession(sqlite: any, token: string) {\n await sqlite.execute(`DELETE FROM sessions WHERE token = ?`, [token]);\n}\n\nexport async function changePassword(sqlite: any, userId: number, oldPass: string, newPass: string) {\n // Verify old password\n const oldHash = await hashPassword(oldPass);\n const check = await sqlite.execute(\n `SELECT id FROM users WHERE id = ? AND password_hash = ?`,\n [userId, oldHash]\n );\n if (!check.rows || check.rows.length === 0) throw new Error(\"Current password is incorrect.\");\n if (newPass.length < 6) throw new Error(\"New password must be at least 6 characters.\");\n const newHash = await hashPassword(newPass);\n await sqlite.execute(`UPDATE users SET password_hash = ? WHERE id = ?`, [newHash, userId]);\n}\n\nexport async function logChatUsage(\n sqlite: any,\n userId: number,\n model: string,\n inputChars: number,\n outputChars: number\n) {\n await sqlite.execute(\n `INSERT INTO chat_usage (user_id, model, input_chars, output_chars) VALUES (?, ?, ?, ?)`,\n [userId, model, inputChars, outputChars]\n );\n}\n\nexport async function getAllUsers(sqlite: any) {\n const rows = await sqlite.execute(\n `SELECT u.id, u.username, u.is_admin, u.created_at,\n COALESCE(SUM(c.input_chars),0) AS total_in,\n COALESCE(SUM(c.output_chars),0) AS total_out\n FROM users u LEFT JOIN chat_usage c ON c.user_id = u.id\n GROUP BY u.id ORDER BY u.created_at DESC`\n );\n if (!rows.rows) return [];\n return rows.rows.map(([id, username, isAdmin, createdAt, totalIn, totalOut]: any) => ({\n id, username, isAdmin: !!isAdmin, createdAt, totalIn, totalOut\n }));\n}\n\nexport async function deleteUser(sqlite: any, userId: number) {\n await sqlite.execute(`DELETE FROM sessions WHERE user_id = ?`, [userId]);\n await sqlite.execute(`DELETE FROM chat_usage WHERE user_id = ?`, [userId]);\n await sqlite.execute(`DELETE FROM users WHERE id = ?`, [userId]);\n}\n\nexport async function getUserStats(sqlite: any, userId: number) {\n const rows = await sqlite.execute(\n `SELECT COALESCE(SUM(input_chars),0), COALESCE(SUM(output_chars),0)\n FROM chat_usage WHERE user_id = ?`,\n [userId]\n );\n if (!rows.rows || rows.rows.length === 0) return { totalIn: 0, totalOut: 0 };\n const [totalIn, totalOut] = rows.rows[0];\n return { totalIn, totalOut };\n}",[172],"c42ac9f7-3606-4a81-adc5-9bced364380e","auth.ts","073538f4-6fa7-11f1-8092-1607ee4eb77e",4,["D",1782289865459],[179],"7575aeb3-b71c-4dd0-8262-73d944184884","api.ts","13a3afe4-6fa7-11f1-8343-1607ee4eb77e",10,["D",1782290261460],"// api.ts — Route handlers for Open-Source-Lab on val.town\n// All functions receive (req, sqlite) and return Response\n\nimport {\n createUser, verifyUser, createSession, getSession,\n deleteSession, changePassword, logChatUsage,\n getAllUsers, deleteUser, getUserStats\n} from \"./db.ts\";\n\n// ─── helpers ──────────────────────────────────────────────────────────────────\n\nfunction json(data: any, status = 200) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\" }\n });\n}\n\nfunction err(msg: string, status = 400) {\n return json({ error: msg }, status);\n}\n\nfunction getToken(req: Request): string {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const match = cookie.match(/osl_session=([^;]+)/);\n return match ? match[1] : \"\";\n}\n\n// ─── Chat models ──────────────────────────────────────────────────────────────\n\nexport const CHAT_MODELS = [\n // Groq — free tier, fast\n { id: \"llama-3.1-8b-instant\", name: \"Llama 3.1 8B (Groq)\", provider: \"groq\", org: \"Meta\" },\n { id: \"llama-3.3-70b-versatile\", name: \"Llama 3.3 70B (Groq)\", provider: \"groq\", org: \"Meta\" },\n { id: \"gemma2-9b-it\", name: \"Gemma 2 9B (Groq)\", provider: \"groq\", org: \"Google\" },\n { id: \"mistral-saba-24b\", name: \"Mistral Saba 24B (Groq)\", provider: \"groq\", org: \"Mistral AI\" },\n { id: \"qwen-qwq-32b\", name: \"QwQ 32B (Groq)\", provider: \"groq\", org: \"Alibaba\" },\n { id: \"deepseek-r1-distill-llama-70b\", name: \"DeepSeek R1 Distill 70B (Groq)\", provider: \"groq\", org: \"DeepSeek\" },\n // Mistral — open weights on their platform\n { id: \"open-mistral-nemo\", name: \"Mistral NeMo (Mistral)\", provider: \"mistral\", org: \"Mistral AI\" },\n { id: \"open-mistral-7b\", name: \"Mistral 7B (Mistral)\", provider: \"mistral\", org: \"Mistral AI\" },\n { id: \"open-mixtral-8x7b\", name: \"Mixtral 8x7B (Mistral)\", provider: \"mistral\", org: \"Mistral AI\" },\n { id: \"mistral-small-latest\", name: \"Mistral Small (Mistral)\", provider: \"mistral\", org: \"Mistral AI\" },\n];\n\n// ─── POST /api/register ───────────────────────────────────────────────────────\n\nexport async function handleRegister(req: Request, sqlite: any): Promise {\n let body: any;\n try { body = await req.json(); } catch { return err(\"Invalid JSON\"); }\n const { username, password } = body;\n if (!username || !password) return err(\"Username and password required.\");\n try {\n await createUser(sqlite, username, password);\n const user = await verifyUser(sqlite, username, password);\n if (!user) return err(\"Registration failed.\");\n const token = await createSession(sqlite, user.id);\n const resp = json({ ok: true, username: user.username, isAdmin: user.isAdmin });\n resp.headers.set(\"Set-Cookie\", `osl_session=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=604800`);\n return resp;\n } catch (e: any) {\n return err(e.message);\n }\n}\n\n// ─── POST /api/login ─────────────────────────────────────────────────────────\n\nexport async function handleLogin(req: Request, sqlite: any): Promise {\n let body: any;\n try { body = await req.json(); } catch { return err(\"Invalid JSON\"); }\n const { username, password } = body;\n if (!username || !password) return err(\"Username and password required.\");\n const user = await verifyUser(sqlite, username, password);\n if (!user) return err(\"Invalid username or password.\", 401);\n const token = await createSession(sqlite, user.id);\n const resp = json({ ok: true, username: user.username, isAdmin: user.isAdmin });\n resp.headers.set(\"Set-Cookie\", `osl_session=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=604800`);\n return resp;\n}\n\n// ─── POST /api/logout ────────────────────────────────────────────────────────\n\nexport async function handleLogout(req: Request, sqlite: any): Promise {\n const token = getToken(req);\n if (token) await deleteSession(sqlite, token);\n const resp = json({ ok: true });\n resp.headers.set(\"Set-Cookie\", \"osl_session=; Path=/; Max-Age=0\");\n return resp;\n}\n\n// ─── GET /api/me ─────────────────────────────────────────────────────────────\n\nexport async function handleMe(req: Request, sqlite: any): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session) return json({ user: null });\n const stats = await getUserStats(sqlite, session.userId);\n return json({ user: { username: session.username, isAdmin: session.isAdmin, ...stats } });\n}\n\n// ─── POST /api/change-password ───────────────────────────────────────────────\n\nexport async function handleChangePassword(req: Request, sqlite: any): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session) return err(\"Not logged in.\", 401);\n let body: any;\n try { body = await req.json(); } catch { return err(\"Invalid JSON\"); }\n const { oldPassword, newPassword } = body;\n if (!oldPassword || !newPassword) return err(\"Both passwords required.\");\n try {\n await changePassword(sqlite, session.userId, oldPassword, newPassword);\n return json({ ok: true });\n } catch (e: any) {\n return err(e.message);\n }\n}\n\n// ─── POST /api/chat ──────────────────────────────────────────────────────────\n\nexport async function handleChat(req: Request, sqlite: any, env: any): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session) return err(\"You must be logged in to use the chat.\", 401);\n\n let body: any;\n try { body = await req.json(); } catch { return err(\"Invalid JSON\"); }\n\n const { modelId, messages } = body;\n if (!modelId || !Array.isArray(messages)) return err(\"modelId and messages required.\");\n\n const model = CHAT_MODELS.find(m => m.id === modelId);\n if (!model) return err(\"Unknown model.\");\n\n // Count input chars\n const inputChars = messages.reduce((acc: number, m: any) =>\n acc + String(m.content || \"\").length, 0);\n\n try {\n let response: Response;\n\n if (model.provider === \"groq\") {\n response = await fetch(\"https://api.groq.com/openai/v1/chat/completions\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": `Bearer ${env.GROQ_API_KEY}`\n },\n body: JSON.stringify({ model: modelId, messages, max_tokens: 1024 })\n });\n } else if (model.provider === \"mistral\") {\n response = await fetch(\"https://api.mistral.ai/v1/chat/completions\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": `Bearer ${env.MISTRAL_API_KEY}`\n },\n body: JSON.stringify({ model: modelId, messages, max_tokens: 1024 })\n });\n } else {\n return err(\"Unknown provider.\");\n }\n\n if (!response.ok) {\n const errText = await response.text();\n return err(`Model API error: ${response.status} ${errText}`, 502);\n }\n\n const data = await response.json();\n const reply = data.choices?.[0]?.message?.content || \"(No response)\";\n const outputChars = reply.length;\n\n await logChatUsage(sqlite, session.userId, modelId, inputChars, outputChars);\n\n return json({ reply, model: model.name });\n } catch (e: any) {\n return err(`Request failed: ${e.message}`, 502);\n }\n}\n\n// ─── GET /api/admin/users ─────────────────────────────────────────────────────\n\nexport async function handleAdminUsers(req: Request, sqlite: any): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session?.isAdmin) return err(\"Admin only.\", 403);\n const users = await getAllUsers(sqlite);\n return json({ users });\n}\n\n// ─── DELETE /api/admin/users/:id ─────────────────────────────────────────────\n\nexport async function handleAdminDeleteUser(req: Request, sqlite: any, userId: number): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session?.isAdmin) return err(\"Admin only.\", 403);\n if (session.userId === userId) return err(\"Cannot delete yourself.\");\n await deleteUser(sqlite, userId);\n return json({ ok: true });\n}\n\n// ─── GET /api/models ─────────────────────────────────────────────────────────\n\nexport async function handleModels(_req: Request): Promise {\n return json({ models: CHAT_MODELS });\n}",[185],"0608849f-b494-4a49-a0df-784e28e3e6c2","Readme.txt","019ef8b1-2f79-740c-a291-f204352f7dec",["D",1782288822073],"- Implement BOT_ACCESS_KEY to authentificate\n- https://openrouter.ai/cohere/rerank-4-pro",[192],"pulls","branches","forks","envVars",{"_204":206,"_207":63},"connections",{"_204":63,"_205":63},"count","unfilledCount",6,"emptyCount",{"_42":191,"_32":192,"_30":193,"_151":-5,"_40":41,"_39":95,"_152":24,"_37":234,"_13":63,"_33":20,"_35":195,"_23":24,"_154":-5,"_216":235,"_26":236},{"_42":184,"_32":185,"_30":186,"_151":-5,"_40":41,"_39":187,"_152":59,"_37":231,"_13":168,"_33":34,"_35":189,"_23":24,"_154":-5,"_216":232,"_26":233},{"_42":178,"_32":179,"_30":180,"_151":-5,"_40":41,"_39":181,"_152":24,"_37":228,"_13":95,"_33":34,"_35":36,"_23":24,"_154":-5,"_216":229,"_26":230},{"_42":171,"_32":172,"_30":173,"_151":-5,"_40":41,"_39":174,"_152":59,"_37":225,"_13":168,"_33":34,"_35":176,"_23":24,"_154":-5,"_216":226,"_26":227},{"_42":163,"_32":164,"_30":165,"_151":-5,"_40":41,"_39":166,"_152":24,"_37":222,"_13":168,"_33":34,"_35":169,"_23":24,"_154":-5,"_216":223,"_26":224},{"_42":156,"_32":157,"_30":57,"_151":-5,"_40":41,"_39":158,"_152":24,"_37":219,"_13":95,"_33":160,"_35":161,"_23":24,"_154":-5,"_216":220,"_26":221},{"_42":150,"_32":27,"_30":31,"_151":-5,"_40":41,"_39":14,"_152":24,"_37":215,"_13":63,"_33":34,"_35":36,"_23":24,"_154":-5,"_216":217,"_26":218},["D",1782290317305],"children",[],[27],["D",1782290281242],[],[157],["D",1782290293467],[],[164],["D",1782290270286],[],[172],["D",1782289865459],[],[179],["D",1782290261460],[],[185],["D",1782288822073],[],[192],["D",1782288822073],["D",1789515055826],{"_103":102,"_110":106},{"_103":102,"_104":44,"_105":106,"_18":55,"_107":108,"_109":24},{"_13":89,"_32":90,"_42":41,"_91":43,"_92":93,"_94":95,"_96":49,"_97":98,"_99":65,"_100":44,"_101":102},"ctx",{"_82":-5,"_131":275,"_276":277,"_278":279,"_280":24,"_281":24,"_282":24,"_283":59,"_284":-5,"_285":-7,"_286":-7,"_287":63,"_288":24,"_289":24,"_290":-5,"_291":24,"_292":24,"_293":24,"_294":-5},"ENV",{"_246":247,"_248":249,"_250":90,"_251":252,"_253":254,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272,"_273":274},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v14