[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_243":244,"_245":246},"routes/_app.x.$handle.$name",{"_104":103,"_32":45,"_112":91,"_27":37,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_20":-5,"_123":124,"_125":126,"_127":25,"_128":129,"_130":60,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",15,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_34":35,"_36":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","frontend_html.ts","latestPath","fileId","180194e2-6fa8-11f1-aa98-1607ee4eb77e","name","new-file-5351.ts","fileType","script","content","","createdAt",["D",1782290331007],"branchVersion","branchId","47ffb737-61f4-4c05-a381-3299082f9d77","id","4cfb28d5-2f35-4b79-a880-4cf54f5a85ac","Open-Source-Lab",["D",1782288822073],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","https://poe.com/Open-Source-Lab","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/b2a0ab8e-bd65-4fcf-6f5f-41baa7c81300/square512?exp=1789549199&sig=887e102491c51f325bd7347c88e03dd7ca6efbbb5ef8643eff9fdf9656b8797c","0199868b-003e-768d-ad69-69ef7ad28bac","pinnedFileId","019ef8b1-2f7a-7348-93d4-6ddeb044310d","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","0199868b-003e-768d-ad69-6ce312a92bd0","tursoName","4cfb28d52f354b79a8804cf54f5a85ac","tursoHostname","4cfb28d52f354b79a8804cf54f5a85ac-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789515055826],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_104":103,"_111":107},"org",{"_104":103,"_105":45,"_106":107,"_18":56,"_108":109,"_110":25},"branch",{"_13":90,"_32":91,"_43":42,"_92":44,"_93":94,"_95":96,"_97":50,"_98":99,"_100":66,"_101":45,"_102":103},"isOwned",26,"main","projectId","forkedBranchId","f19dd44c-aa90-457d-b776-fce028811f45","forkedBranchVersion",1,"forkedProjectPrivacy","forkedProjectId","e24310da-52d8-41d6-9ff4-c052cc424d8d","forkedProjectOrgId","projectName","userHandle","OpenSourceLab","handle","displayName","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/88612baf-1e17-4665-456e-8e801ea25000/square512?exp=1789549199&sig=5070b34525f2219d1088593d49d4bf5eb195c52ff378ebd800bde47471d0d3d2","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":238,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":239,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":240,"_85":241,"_87":242,"_89":25},"tree",[209,210,211,212,213,214,215],"files",[209,210,211,212,213,214,215],"counts",{"_198":64,"_199":96,"_200":96,"_201":202,"_203":204},"contents",[144,145,146,147,148,149,150],"upstreamProject",{"_43":99,"_32":142,"_52":53,"_54":55,"_49":50,"_83":143},"upstreamBranch",{"_43":94,"_38":135,"_136":137,"_32":91,"_92":99,"_13":96,"_93":138,"_95":139,"_140":141,"_47":-5,"_89":25,"_49":50,"_102":103,"_65":66,"_101":142},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1781632981029],"updatedAt",["D",1781632981029],"ea966810-4ab9-11f1-a7f0-ee650bb23af1",3,"lockfileKey","1782288745871-esm.town_v_OpenSourceLab_Open-Source-Lab2@1-main","Open-Source-Lab2",{"_104":103,"_111":107},{"_43":192,"_32":193,"_30":194,"_153":-5,"_41":42,"_40":96,"_155":25,"_38":195,"_13":64,"_34":20,"_36":196,"_24":25,"_159":-5,"_27":197},{"_43":185,"_32":186,"_30":187,"_153":-5,"_41":42,"_40":188,"_155":60,"_38":189,"_13":169,"_34":35,"_36":190,"_24":25,"_159":-5,"_27":191},{"_43":179,"_32":180,"_30":181,"_153":-5,"_41":42,"_40":182,"_155":25,"_38":183,"_13":96,"_34":35,"_36":37,"_24":25,"_159":-5,"_27":184},{"_43":172,"_32":173,"_30":174,"_153":-5,"_41":42,"_40":175,"_155":60,"_38":176,"_13":169,"_34":35,"_36":177,"_24":25,"_159":-5,"_27":178},{"_43":164,"_32":165,"_30":166,"_153":-5,"_41":42,"_40":167,"_155":25,"_38":168,"_13":169,"_34":35,"_36":170,"_24":25,"_159":-5,"_27":171},{"_43":161,"_32":28,"_30":31,"_153":-5,"_41":42,"_40":14,"_155":25,"_38":162,"_13":96,"_34":35,"_36":37,"_24":25,"_159":-5,"_27":163},{"_43":151,"_32":152,"_30":58,"_153":-5,"_41":42,"_40":154,"_155":25,"_38":156,"_13":96,"_34":157,"_36":158,"_24":25,"_159":-5,"_27":160},"a6a408bb-40e8-4590-91c9-cc36e43437ad","main.tsx","parentId",12,"latest",["D",1782290281242],"http","// main.ts — Entry point for Open-Source-Lab on val.town\n// Deploy as an HTTP val at val.town\n//\n// Required environment variables (set in val.town Secrets):\n// GROQ_API_KEY — from console.groq.com (free tier available)\n// MISTRAL_API_KEY — from console.mistral.ai (free tier available)\n//\n// Usage:\n// 1. Create a new HTTP val on val.town\n// 2. Paste this file as main.ts (the entry point)\n// 3. Create separate vals for db.ts, api.ts, frontend_styles.ts, frontend_html.ts\n// OR combine everything into one file if under the 80K limit\n// 4. Add your API keys in Settings → Secrets\n// 5. Visit your val URL\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { initDB } from \"./db.ts\";\nimport {\n handleRegister,\n handleLogin,\n handleLogout,\n handleMe,\n handleChangePassword,\n handleChat,\n handleAdminUsers,\n handleAdminDeleteUser,\n handleModels,\n CHAT_MODELS,\n} from \"./api.ts\";\nimport { buildPage } from \"./frontend_html.ts\";\n\n// ── Init DB on cold start ──\nlet dbReady = false;\nasync function ensureDB() {\n if (dbReady) return;\n await initDB(sqlite);\n dbReady = true;\n}\n\n// ── Router ──\nexport default async function handler(req: Request): Promise {\n await ensureDB();\n\n const url = new URL(req.url);\n const path = url.pathname;\n const method = req.method;\n\n // ── API routes ──\n if (path.startsWith(\"/api/\")) {\n // Pass Deno.env as env object for API keys\n const env = {\n GROQ_API_KEY: Deno.env.get(\"GROQ_API_KEY\") || \"\",\n MISTRAL_API_KEY: Deno.env.get(\"MISTRAL_API_KEY\") || \"\",\n };\n\n if (path === \"/api/register\" && method === \"POST\") return handleRegister(req, sqlite);\n if (path === \"/api/login\" && method === \"POST\") return handleLogin(req, sqlite);\n if (path === \"/api/logout\" && method === \"POST\") return handleLogout(req, sqlite);\n if (path === \"/api/me\" && method === \"GET\") return handleMe(req, sqlite);\n if (path === \"/api/change-password\" && method === \"POST\") return handleChangePassword(req, sqlite);\n if (path === \"/api/chat\" && method === \"POST\") return handleChat(req, sqlite, env);\n if (path === \"/api/models\" && method === \"GET\") return handleModels(req);\n if (path === \"/api/admin/users\" && method === \"GET\") return handleAdminUsers(req, sqlite);\n\n // DELETE /api/admin/users/:id\n const delMatch = path.match(/^\\/api\\/admin\\/users\\/(\\d+)$/);\n if (delMatch && method === \"DELETE\") {\n return handleAdminDeleteUser(req, sqlite, parseInt(delMatch[1], 10));\n }\n\n return new Response(JSON.stringify({ error: \"Not found\" }), {\n status: 404,\n headers: { \"Content-Type\": \"application/json\" },\n });\n }\n\n // ── Serve HTML for all other routes ──\n if (method === \"GET\") {\n const html = buildPage(CHAT_MODELS);\n return new Response(html, {\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"Cache-Control\": \"no-cache\",\n },\n });\n }\n\n return new Response(\"Method not allowed\", { status: 405 });\n}","label",[152],"355eccee-4c14-461a-bcdb-762bdd1f1e5a",["D",1782290331007],[28],"9e46ee95-1b3a-4ac3-a89c-51bee0aa7375","frontend.ts","199ef764-6fa7-11f1-8bb9-1607ee4eb77e",13,["D",1782290293467],2,"// frontend_styles.ts — CSS and shared HTML fragments for Open-Source-Lab\n\nexport const SHARED_CSS = `\n\n\n\n\n`;\n\nexport const CATALOG = [\n {n:'Llama-3.1-405B',src:'Meta',cat:'text',p:'405B',c:'128K',l:'Llama 3.1'},\n {n:'Llama-3.3-70B',src:'Meta',cat:'text',p:'70B',c:'128K',l:'Llama 3.3'},\n {n:'Qwen3-235B-A22B',src:'Alibaba',cat:'text',p:'235B/22B',c:'128K',l:'Apache 2.0'},\n {n:'Qwen3.5-27B',src:'Alibaba',cat:'text',p:'27B',c:'262K',l:'Apache 2.0'},\n {n:'Qwen2.5-72B',src:'Alibaba',cat:'text',p:'72B',c:'128K',l:'Qwen'},\n {n:'DeepSeek-V3.1',src:'DeepSeek',cat:'text',p:'671B/37B',c:'128K',l:'MIT'},\n {n:'DeepSeek-R1',src:'DeepSeek',cat:'text',p:'671B/37B',c:'128K',l:'MIT'},\n {n:'Mistral-Large-2',src:'Mistral AI',cat:'text',p:'123B',c:'128K',l:'MRL'},\n {n:'Mixtral-8x22B',src:'Mistral AI',cat:'text',p:'141B/39B',c:'64K',l:'Apache 2.0'},\n {n:'Mistral-NeMo',src:'Mistral/NVIDIA',cat:'text',p:'12B',c:'128K',l:'Apache 2.0'},\n {n:'Mistral-Small-3',src:'Mistral AI',cat:'text',p:'24B',c:'32K',l:'Apache 2.0'},\n {n:'Gemma-2-27B',src:'Google',cat:'text',p:'27B',c:'8K',l:'Gemma'},\n {n:'Gemma-2-9B',src:'Google',cat:'text',p:'9B',c:'8K',l:'Gemma'},\n {n:'Gemma-3-27B',src:'Google',cat:'text',p:'27B',c:'128K',l:'Gemma'},\n {n:'Phi-4',src:'Microsoft',cat:'text',p:'14B',c:'16K',l:'MIT'},\n {n:'Phi-3.5-MoE',src:'Microsoft',cat:'text',p:'42B/6.6B',c:'128K',l:'MIT'},\n {n:'Command-R+',src:'Cohere',cat:'text',p:'104B',c:'128K',l:'CC-BY-NC'},\n {n:'Command-R',src:'Cohere',cat:'text',p:'35B',c:'128K',l:'CC-BY-NC'},\n {n:'Hermes-3-405B',src:'Nous Research',cat:'text',p:'405B',c:'128K',l:'Llama 3.1'},\n {n:'Hermes-4-70B',src:'Nous Research',cat:'text',p:'70B',c:'128K',l:'Llama 3.1'},\n {n:'Yi-1.5-34B',src:'01.AI',cat:'text',p:'34B',c:'32K',l:'Apache 2.0'},\n {n:'InternLM2.5-20B',src:'Shanghai AI Lab',cat:'text',p:'20B',c:'256K',l:'Apache 2.0'},\n {n:'Falcon-2-11B',src:'TII',cat:'text',p:'11B',c:'8K',l:'Apache 2.0'},\n {n:'OLMo-2-13B',src:'Allen AI',cat:'text',p:'13B',c:'4K',l:'Apache 2.0'},\n {n:'DBRX',src:'Databricks',cat:'text',p:'132B/36B',c:'32K',l:'Databricks'},\n {n:'SmolLM2-1.7B',src:'HuggingFace',cat:'text',p:'1.7B',c:'8K',l:'Apache 2.0'},\n {n:'Trinity-Mini',src:'Open-Source-Lab',cat:'experimental',p:'Mini',c:'128K',l:'Open'},\n {n:'BitNet-b1.58-3B',src:'Microsoft',cat:'experimental',p:'3B',c:'4K',l:'MIT'},\n {n:'Mamba-2-2.7B',src:'Cartesia/CMU',cat:'experimental',p:'2.7B',c:'1M',l:'Apache 2.0'},\n {n:'RWKV-6-World-7B',src:'RWKV Foundation',cat:'experimental',p:'7B',c:'Inf',l:'Apache 2.0'},\n {n:'Samba-CoE-v0.2',src:'SambaNova',cat:'experimental',p:'40B/8B',c:'256K',l:'Apache 2.0'},\n {n:'Chameleon-7B',src:'Meta',cat:'experimental',p:'7B',c:'8K',l:'Llama 3.1'},\n {n:'Laguna-M.1',src:'Poolside',cat:'code',p:'—',c:'128K',l:'Hosted'},\n {n:'GLM-5.1',src:'Zhipu AI',cat:'code',p:'754B',c:'205K',l:'MIT'},\n {n:'Minimax-M2.7',src:'MiniMax',cat:'code',p:'—',c:'205K',l:'Open'},\n {n:'MiMo-V2-Flash',src:'Xiaomi MiMo',cat:'code',p:'309B/15B',c:'256K',l:'Apache 2.0'},\n {n:'Qwen2.5-Coder-32B',src:'Alibaba',cat:'code',p:'32B',c:'128K',l:'Apache 2.0'},\n {n:'DeepSeek-Coder-V2',src:'DeepSeek',cat:'code',p:'236B/21B',c:'128K',l:'MIT'},\n {n:'StarCoder2-15B',src:'BigCode',cat:'code',p:'15B',c:'16K',l:'OpenRAIL'},\n {n:'Mistral-Small-4',src:'Mistral AI',cat:'multimodal',p:'24B',c:'128K',l:'Apache 2.0'},\n {n:'Nova-Lite-2',src:'Amazon',cat:'multimodal',p:'—',c:'1M',l:'Hosted'},\n {n:'Qwen2.5-VL-72B',src:'Alibaba',cat:'vision',p:'72B',c:'128K',l:'Apache 2.0'},\n {n:'Pixtral-12B',src:'Mistral AI',cat:'vision',p:'12B',c:'128K',l:'Apache 2.0'},\n {n:'Llama-3.2-90B-Vision',src:'Meta',cat:'vision',p:'90B',c:'128K',l:'Llama 3.2'},\n {n:'InternVL2.5-78B',src:'OpenGVLab',cat:'vision',p:'78B',c:'32K',l:'MIT'},\n {n:'Whisper-Large-v3',src:'OpenAI',cat:'audio',p:'1.55B',c:'—',l:'MIT'},\n {n:'Qwen2-Audio',src:'Alibaba',cat:'audio',p:'7B',c:'—',l:'Apache 2.0'},\n {n:'BGE-M3',src:'BAAI',cat:'embed',p:'560M',c:'8192',l:'MIT'},\n {n:'Nomic-Embed-v1.5',src:'Nomic AI',cat:'embed',p:'137M',c:'8192',l:'Apache 2.0'},\n {n:'F5-TTS',src:'F5-TTS Team',cat:'audio',p:'335M',c:'—',l:'MIT'},\n {n:'Moshi-v1.0',src:'Kyutai',cat:'audio',p:'7B',c:'—',l:'CC-BY 4.0'},\n];\n\nexport const CAT_NAMES: Record = {\n all:'All',text:'Language',code:'Code',vision:'Vision',\n audio:'Audio',multimodal:'Multimodal',embed:'Embeddings',experimental:'Experimental'\n};\n\nexport const BENCH_DATA = [\n {n:'Qwen-3-235B-A22B',o:'Alibaba/Qwen',cat:'text',os:true,mmlu:87,gpqa:71,he:88,math:86},\n {n:'Hermes-3-405B',o:'Nous Research',cat:'text',os:true,mmlu:86,gpqa:59,he:86,math:73},\n {n:'Hermes-4-70B',o:'Nous Research',cat:'text',os:true,mmlu:82,gpqa:55,he:82,math:70},\n {n:'Phi-4',o:'Microsoft Research',cat:'text',os:true,mmlu:84.8,gpqa:56.1,he:82.6,math:80.4},\n {n:'Qwen3.5-27B',o:'Alibaba/Qwen',cat:'text',os:true,mmlu:83,gpqa:60,he:89,math:82},\n {n:'DeepSeek-V3.1',o:'DeepSeek',cat:'text',os:true,mmlu:88.5,gpqa:59.1,he:90.2,math:90.2},\n {n:'Mistral-NeMo',o:'Mistral/NVIDIA',cat:'text',os:true,mmlu:68,gpqa:40,he:70,math:55},\n {n:'GLM-5.1',o:'Zhipu AI',cat:'code',os:true,mmlu:88,gpqa:72,he:94,math:88},\n {n:'MiMo-V2-Flash',o:'Xiaomi MiMo',cat:'code',os:true,mmlu:82,gpqa:63,he:89,math:84},\n {n:'Qwen2.5-Coder-32B',o:'Alibaba/Qwen',cat:'code',os:true,mmlu:75,gpqa:48,he:92.7,math:75},\n {n:'DeepSeek-Coder-V2',o:'DeepSeek',cat:'code',os:true,mmlu:79.2,gpqa:50,he:90.2,math:75.7},\n {n:'Qwen2.5-VL-72B',o:'Alibaba/Qwen',cat:'multimodal',os:true,mmlu:79,gpqa:51,he:80,math:68},\n {n:'Mistral-Small-4',o:'Mistral AI',cat:'multimodal',os:true,mmlu:78,gpqa:52,he:84,math:70},\n {n:'Nova-Lite-2',o:'Amazon',cat:'multimodal',os:false,mmlu:80,gpqa:50,he:82,math:72},\n {n:'Llama-3.1-405B',o:'Meta',cat:'ref',os:true,mmlu:88.6,gpqa:51.1,he:89,math:73.8},\n {n:'Qwen2.5-72B',o:'Alibaba/Qwen',cat:'ref',os:true,mmlu:86.1,gpqa:49,he:86.6,math:83.1},\n {n:'Gemma-2-27B',o:'Google',cat:'ref',os:true,mmlu:75.2,gpqa:42,he:72,math:55},\n {n:'Mixtral-8x22B',o:'Mistral AI',cat:'ref',os:true,mmlu:77.8,gpqa:44,he:76,math:54},\n].map(r => ({...r, avg: Math.round(((r.mmlu+r.gpqa+r.he+r.math)/4)*10)/10}));\n`;",[165],"dcdb6682-50a4-4d30-a831-632579730a3f","db.ts","04695614-6fa7-11f1-a862-1607ee4eb77e",11,["D",1782290270286],"// db.ts — SQLite schema and helpers for Open-Source-Lab on val.town\n// Import from val.town's sqlite module in your actual val:\n// import { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nexport async function initDB(sqlite: any) {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n username TEXT UNIQUE NOT NULL COLLATE NOCASE,\n password_hash TEXT NOT NULL,\n created_at INTEGER DEFAULT (unixepoch()),\n is_admin INTEGER DEFAULT 0\n )\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n created_at INTEGER DEFAULT (unixepoch()),\n expires_at INTEGER NOT NULL\n )\n `);\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS chat_usage (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL,\n model TEXT NOT NULL,\n input_chars INTEGER DEFAULT 0,\n output_chars INTEGER DEFAULT 0,\n created_at INTEGER DEFAULT (unixepoch())\n )\n `);\n // Ensure roboohood is admin\n await sqlite.execute(`\n INSERT OR IGNORE INTO users (username, password_hash, is_admin)\n VALUES ('roboohood', '${await hashPassword(\"admin123\")}', 1)\n `);\n}\n\nexport async function hashPassword(password: string): Promise {\n const encoder = new TextEncoder();\n const data = encoder.encode(password + \"osl_salt_2026\");\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport async function createUser(sqlite: any, username: string, password: string) {\n if (!/^[a-zA-Z0-9_]{3,32}$/.test(username)) {\n throw new Error(\"Username must be 3–32 characters: letters, numbers, underscores only.\");\n }\n if (password.length < 6) {\n throw new Error(\"Password must be at least 6 characters.\");\n }\n const hash = await hashPassword(password);\n const isAdmin = username.toLowerCase() === \"roboohood\" ? 1 : 0;\n try {\n await sqlite.execute(\n `INSERT INTO users (username, password_hash, is_admin) VALUES (?, ?, ?)`,\n [username, hash, isAdmin]\n );\n } catch (e: any) {\n if (e.message?.includes(\"UNIQUE\")) throw new Error(\"Username already taken.\");\n throw e;\n }\n}\n\nexport async function verifyUser(sqlite: any, username: string, password: string) {\n const hash = await hashPassword(password);\n const rows = await sqlite.execute(\n `SELECT id, username, is_admin FROM users WHERE username = ? COLLATE NOCASE AND password_hash = ?`,\n [username, hash]\n );\n if (!rows.rows || rows.rows.length === 0) return null;\n const [id, uname, isAdmin] = rows.rows[0];\n return { id, username: uname, isAdmin: !!isAdmin };\n}\n\nexport async function createSession(sqlite: any, userId: number): Promise {\n const token = crypto.randomUUID() + crypto.randomUUID();\n const expiresAt = Math.floor(Date.now() / 1000) + 60 * 60 * 24 * 7; // 7 days\n await sqlite.execute(\n `INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)`,\n [token, userId, expiresAt]\n );\n return token;\n}\n\nexport async function getSession(sqlite: any, token: string) {\n if (!token) return null;\n const now = Math.floor(Date.now() / 1000);\n const rows = await sqlite.execute(\n `SELECT s.user_id, u.username, u.is_admin\n FROM sessions s JOIN users u ON u.id = s.user_id\n WHERE s.token = ? AND s.expires_at > ?`,\n [token, now]\n );\n if (!rows.rows || rows.rows.length === 0) return null;\n const [userId, username, isAdmin] = rows.rows[0];\n return { userId, username, isAdmin: !!isAdmin };\n}\n\nexport async function deleteSession(sqlite: any, token: string) {\n await sqlite.execute(`DELETE FROM sessions WHERE token = ?`, [token]);\n}\n\nexport async function changePassword(sqlite: any, userId: number, oldPass: string, newPass: string) {\n // Verify old password\n const oldHash = await hashPassword(oldPass);\n const check = await sqlite.execute(\n `SELECT id FROM users WHERE id = ? AND password_hash = ?`,\n [userId, oldHash]\n );\n if (!check.rows || check.rows.length === 0) throw new Error(\"Current password is incorrect.\");\n if (newPass.length < 6) throw new Error(\"New password must be at least 6 characters.\");\n const newHash = await hashPassword(newPass);\n await sqlite.execute(`UPDATE users SET password_hash = ? WHERE id = ?`, [newHash, userId]);\n}\n\nexport async function logChatUsage(\n sqlite: any,\n userId: number,\n model: string,\n inputChars: number,\n outputChars: number\n) {\n await sqlite.execute(\n `INSERT INTO chat_usage (user_id, model, input_chars, output_chars) VALUES (?, ?, ?, ?)`,\n [userId, model, inputChars, outputChars]\n );\n}\n\nexport async function getAllUsers(sqlite: any) {\n const rows = await sqlite.execute(\n `SELECT u.id, u.username, u.is_admin, u.created_at,\n COALESCE(SUM(c.input_chars),0) AS total_in,\n COALESCE(SUM(c.output_chars),0) AS total_out\n FROM users u LEFT JOIN chat_usage c ON c.user_id = u.id\n GROUP BY u.id ORDER BY u.created_at DESC`\n );\n if (!rows.rows) return [];\n return rows.rows.map(([id, username, isAdmin, createdAt, totalIn, totalOut]: any) => ({\n id, username, isAdmin: !!isAdmin, createdAt, totalIn, totalOut\n }));\n}\n\nexport async function deleteUser(sqlite: any, userId: number) {\n await sqlite.execute(`DELETE FROM sessions WHERE user_id = ?`, [userId]);\n await sqlite.execute(`DELETE FROM chat_usage WHERE user_id = ?`, [userId]);\n await sqlite.execute(`DELETE FROM users WHERE id = ?`, [userId]);\n}\n\nexport async function getUserStats(sqlite: any, userId: number) {\n const rows = await sqlite.execute(\n `SELECT COALESCE(SUM(input_chars),0), COALESCE(SUM(output_chars),0)\n FROM chat_usage WHERE user_id = ?`,\n [userId]\n );\n if (!rows.rows || rows.rows.length === 0) return { totalIn: 0, totalOut: 0 };\n const [totalIn, totalOut] = rows.rows[0];\n return { totalIn, totalOut };\n}",[173],"c42ac9f7-3606-4a81-adc5-9bced364380e","auth.ts","073538f4-6fa7-11f1-8092-1607ee4eb77e",4,["D",1782289865459],[180],"7575aeb3-b71c-4dd0-8262-73d944184884","api.ts","13a3afe4-6fa7-11f1-8343-1607ee4eb77e",10,["D",1782290261460],"// api.ts — Route handlers for Open-Source-Lab on val.town\n// All functions receive (req, sqlite) and return Response\n\nimport {\n createUser, verifyUser, createSession, getSession,\n deleteSession, changePassword, logChatUsage,\n getAllUsers, deleteUser, getUserStats\n} from \"./db.ts\";\n\n// ─── helpers ──────────────────────────────────────────────────────────────────\n\nfunction json(data: any, status = 200) {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\" }\n });\n}\n\nfunction err(msg: string, status = 400) {\n return json({ error: msg }, status);\n}\n\nfunction getToken(req: Request): string {\n const cookie = req.headers.get(\"cookie\") || \"\";\n const match = cookie.match(/osl_session=([^;]+)/);\n return match ? match[1] : \"\";\n}\n\n// ─── Chat models ──────────────────────────────────────────────────────────────\n\nexport const CHAT_MODELS = [\n // Groq — free tier, fast\n { id: \"llama-3.1-8b-instant\", name: \"Llama 3.1 8B (Groq)\", provider: \"groq\", org: \"Meta\" },\n { id: \"llama-3.3-70b-versatile\", name: \"Llama 3.3 70B (Groq)\", provider: \"groq\", org: \"Meta\" },\n { id: \"gemma2-9b-it\", name: \"Gemma 2 9B (Groq)\", provider: \"groq\", org: \"Google\" },\n { id: \"mistral-saba-24b\", name: \"Mistral Saba 24B (Groq)\", provider: \"groq\", org: \"Mistral AI\" },\n { id: \"qwen-qwq-32b\", name: \"QwQ 32B (Groq)\", provider: \"groq\", org: \"Alibaba\" },\n { id: \"deepseek-r1-distill-llama-70b\", name: \"DeepSeek R1 Distill 70B (Groq)\", provider: \"groq\", org: \"DeepSeek\" },\n // Mistral — open weights on their platform\n { id: \"open-mistral-nemo\", name: \"Mistral NeMo (Mistral)\", provider: \"mistral\", org: \"Mistral AI\" },\n { id: \"open-mistral-7b\", name: \"Mistral 7B (Mistral)\", provider: \"mistral\", org: \"Mistral AI\" },\n { id: \"open-mixtral-8x7b\", name: \"Mixtral 8x7B (Mistral)\", provider: \"mistral\", org: \"Mistral AI\" },\n { id: \"mistral-small-latest\", name: \"Mistral Small (Mistral)\", provider: \"mistral\", org: \"Mistral AI\" },\n];\n\n// ─── POST /api/register ───────────────────────────────────────────────────────\n\nexport async function handleRegister(req: Request, sqlite: any): Promise {\n let body: any;\n try { body = await req.json(); } catch { return err(\"Invalid JSON\"); }\n const { username, password } = body;\n if (!username || !password) return err(\"Username and password required.\");\n try {\n await createUser(sqlite, username, password);\n const user = await verifyUser(sqlite, username, password);\n if (!user) return err(\"Registration failed.\");\n const token = await createSession(sqlite, user.id);\n const resp = json({ ok: true, username: user.username, isAdmin: user.isAdmin });\n resp.headers.set(\"Set-Cookie\", `osl_session=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=604800`);\n return resp;\n } catch (e: any) {\n return err(e.message);\n }\n}\n\n// ─── POST /api/login ─────────────────────────────────────────────────────────\n\nexport async function handleLogin(req: Request, sqlite: any): Promise {\n let body: any;\n try { body = await req.json(); } catch { return err(\"Invalid JSON\"); }\n const { username, password } = body;\n if (!username || !password) return err(\"Username and password required.\");\n const user = await verifyUser(sqlite, username, password);\n if (!user) return err(\"Invalid username or password.\", 401);\n const token = await createSession(sqlite, user.id);\n const resp = json({ ok: true, username: user.username, isAdmin: user.isAdmin });\n resp.headers.set(\"Set-Cookie\", `osl_session=${token}; Path=/; HttpOnly; SameSite=Lax; Max-Age=604800`);\n return resp;\n}\n\n// ─── POST /api/logout ────────────────────────────────────────────────────────\n\nexport async function handleLogout(req: Request, sqlite: any): Promise {\n const token = getToken(req);\n if (token) await deleteSession(sqlite, token);\n const resp = json({ ok: true });\n resp.headers.set(\"Set-Cookie\", \"osl_session=; Path=/; Max-Age=0\");\n return resp;\n}\n\n// ─── GET /api/me ─────────────────────────────────────────────────────────────\n\nexport async function handleMe(req: Request, sqlite: any): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session) return json({ user: null });\n const stats = await getUserStats(sqlite, session.userId);\n return json({ user: { username: session.username, isAdmin: session.isAdmin, ...stats } });\n}\n\n// ─── POST /api/change-password ───────────────────────────────────────────────\n\nexport async function handleChangePassword(req: Request, sqlite: any): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session) return err(\"Not logged in.\", 401);\n let body: any;\n try { body = await req.json(); } catch { return err(\"Invalid JSON\"); }\n const { oldPassword, newPassword } = body;\n if (!oldPassword || !newPassword) return err(\"Both passwords required.\");\n try {\n await changePassword(sqlite, session.userId, oldPassword, newPassword);\n return json({ ok: true });\n } catch (e: any) {\n return err(e.message);\n }\n}\n\n// ─── POST /api/chat ──────────────────────────────────────────────────────────\n\nexport async function handleChat(req: Request, sqlite: any, env: any): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session) return err(\"You must be logged in to use the chat.\", 401);\n\n let body: any;\n try { body = await req.json(); } catch { return err(\"Invalid JSON\"); }\n\n const { modelId, messages } = body;\n if (!modelId || !Array.isArray(messages)) return err(\"modelId and messages required.\");\n\n const model = CHAT_MODELS.find(m => m.id === modelId);\n if (!model) return err(\"Unknown model.\");\n\n // Count input chars\n const inputChars = messages.reduce((acc: number, m: any) =>\n acc + String(m.content || \"\").length, 0);\n\n try {\n let response: Response;\n\n if (model.provider === \"groq\") {\n response = await fetch(\"https://api.groq.com/openai/v1/chat/completions\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": `Bearer ${env.GROQ_API_KEY}`\n },\n body: JSON.stringify({ model: modelId, messages, max_tokens: 1024 })\n });\n } else if (model.provider === \"mistral\") {\n response = await fetch(\"https://api.mistral.ai/v1/chat/completions\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"Authorization\": `Bearer ${env.MISTRAL_API_KEY}`\n },\n body: JSON.stringify({ model: modelId, messages, max_tokens: 1024 })\n });\n } else {\n return err(\"Unknown provider.\");\n }\n\n if (!response.ok) {\n const errText = await response.text();\n return err(`Model API error: ${response.status} ${errText}`, 502);\n }\n\n const data = await response.json();\n const reply = data.choices?.[0]?.message?.content || \"(No response)\";\n const outputChars = reply.length;\n\n await logChatUsage(sqlite, session.userId, modelId, inputChars, outputChars);\n\n return json({ reply, model: model.name });\n } catch (e: any) {\n return err(`Request failed: ${e.message}`, 502);\n }\n}\n\n// ─── GET /api/admin/users ─────────────────────────────────────────────────────\n\nexport async function handleAdminUsers(req: Request, sqlite: any): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session?.isAdmin) return err(\"Admin only.\", 403);\n const users = await getAllUsers(sqlite);\n return json({ users });\n}\n\n// ─── DELETE /api/admin/users/:id ─────────────────────────────────────────────\n\nexport async function handleAdminDeleteUser(req: Request, sqlite: any, userId: number): Promise {\n const token = getToken(req);\n const session = await getSession(sqlite, token);\n if (!session?.isAdmin) return err(\"Admin only.\", 403);\n if (session.userId === userId) return err(\"Cannot delete yourself.\");\n await deleteUser(sqlite, userId);\n return json({ ok: true });\n}\n\n// ─── GET /api/models ─────────────────────────────────────────────────────────\n\nexport async function handleModels(_req: Request): Promise {\n return json({ models: CHAT_MODELS });\n}",[186],"0608849f-b494-4a49-a0df-784e28e3e6c2","Readme.txt","019ef8b1-2f79-740c-a291-f204352f7dec",["D",1782288822073],"- Implement BOT_ACCESS_KEY to authentificate\n- https://openrouter.ai/cohere/rerank-4-pro",[193],"pulls","branches","forks","envVars",{"_205":207,"_208":64},"connections",{"_205":64,"_206":64},"count","unfilledCount",6,"emptyCount",{"_43":192,"_32":193,"_30":194,"_153":-5,"_41":42,"_40":96,"_155":25,"_38":235,"_13":64,"_34":20,"_36":196,"_24":25,"_159":-5,"_217":236,"_27":237},{"_43":185,"_32":186,"_30":187,"_153":-5,"_41":42,"_40":188,"_155":60,"_38":232,"_13":169,"_34":35,"_36":190,"_24":25,"_159":-5,"_217":233,"_27":234},{"_43":179,"_32":180,"_30":181,"_153":-5,"_41":42,"_40":182,"_155":25,"_38":229,"_13":96,"_34":35,"_36":37,"_24":25,"_159":-5,"_217":230,"_27":231},{"_43":172,"_32":173,"_30":174,"_153":-5,"_41":42,"_40":175,"_155":60,"_38":226,"_13":169,"_34":35,"_36":177,"_24":25,"_159":-5,"_217":227,"_27":228},{"_43":164,"_32":165,"_30":166,"_153":-5,"_41":42,"_40":167,"_155":25,"_38":223,"_13":169,"_34":35,"_36":170,"_24":25,"_159":-5,"_217":224,"_27":225},{"_43":161,"_32":28,"_30":31,"_153":-5,"_41":42,"_40":14,"_155":25,"_38":220,"_13":96,"_34":35,"_36":37,"_24":25,"_159":-5,"_217":221,"_27":222},{"_43":151,"_32":152,"_30":58,"_153":-5,"_41":42,"_40":154,"_155":25,"_38":216,"_13":96,"_34":157,"_36":158,"_24":25,"_159":-5,"_217":218,"_27":219},["D",1782290281242],"children",[],[152],["D",1782290331007],[],[28],["D",1782290293467],[],[165],["D",1782290270286],[],[173],["D",1782289865459],[],[180],["D",1782290261460],[],[186],["D",1782288822073],[],[193],["D",1782288822073],["D",1789515055826],{"_104":103,"_111":107},{"_104":103,"_105":45,"_106":107,"_18":56,"_108":109,"_110":25},{"_13":90,"_32":91,"_43":42,"_92":44,"_93":94,"_95":96,"_97":50,"_98":99,"_100":66,"_101":45,"_102":103},"ctx",{"_83":-5,"_132":276,"_277":278,"_279":280,"_281":25,"_282":25,"_283":25,"_284":60,"_285":-5,"_286":-7,"_287":-7,"_288":64,"_289":25,"_290":25,"_291":-5,"_292":25,"_293":25,"_294":25,"_295":-5},"ENV",{"_247":248,"_249":250,"_251":91,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263,"_264":265,"_266":267,"_268":269,"_270":271,"_272":273,"_274":275},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v15