[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_273":274,"_275":276},"routes/_app.x.$handle.$name",{"_97":96,"_31":44,"_106":87,"_26":107,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":24,"_121":122,"_123":124,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_31":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":-5,"_56":24,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":80,"_81":82,"_83":84,"_85":24},"version",13,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","backend/index.http.ts","latestPath","fileId","f9be78d0-6654-11f1-ad40-1607ee4eb77e","name","index.http.ts","fileType","http","content","import { Hono } from \"npm:hono@4\";\r\nimport { readFile } from \"https://esm.town/v/std/utils/index.ts\";\r\nimport {\r\n addFavorite,\r\n cartBarcodes,\r\n catalogCount,\r\n clearCart,\r\n createCustomItem,\r\n deleteCartItem,\r\n deleteCustomItem,\r\n ensureSchema,\r\n favoriteKeys,\r\n findCartByRef,\r\n getCachedPrice,\r\n getCartItem,\r\n getCatalogItem,\r\n getCustomItem,\r\n getSetting,\r\n getSettingJSON,\r\n insertCartItem,\r\n isFresh,\r\n lastSyncAt,\r\n listCart,\r\n listFavorites,\r\n patchCartItem,\r\n q,\r\n removeFavorite,\r\n run,\r\n searchCatalog,\r\n searchCustomItems,\r\n setSetting,\r\n setSettingJSON,\r\n stalePriceBarcodes,\r\n updateCustomItem,\r\n upsertSyncState,\r\n} from \"./db.ts\";\r\nimport {\r\n CheapersalError,\r\n getUsage,\r\n hasApiKey,\r\n listBranches,\r\n listCities,\r\n refreshPrice,\r\n remainingReported,\r\n sleep,\r\n} from \"./cheapersal.ts\";\r\nimport { ensureSyncBranches, runSyncSlice } from \"./syncCatalog.cron.ts\";\r\nimport { iconPng, iconSvg } from \"./icons.ts\";\r\nimport type { CartItem, SyncBranch } from \"../shared/types.ts\";\r\n\r\nconst app = new Hono();\r\n\r\n// ---------- errors ----------\r\n\r\napp.onError((err, c) => {\r\n if (err instanceof CheapersalError) {\r\n const status = err.code === \"NO_KEY\" ? 503 : err.code === \"BUDGET\" || err.code.includes(\"LIMIT\") ? 429 : 502;\r\n return c.json({ error: err.message, code: err.code }, status);\r\n }\r\n console.error(\"unhandled error:\", err);\r\n return c.json({ error: (err as Error).message ?? \"internal error\" }, 500);\r\n});\r\n\r\n// ---------- PIN gate ----------\r\n\r\nconst OPEN_API_PATHS = new Set([\"/api/config\", \"/api/auth/verify\"]);\r\n\r\napp.use(\"/api/*\", async (c, next) => {\r\n const pin = Deno.env.get(\"APP_PIN\");\r\n if (!pin || OPEN_API_PATHS.has(c.req.path)) return await next();\r\n if (c.req.header(\"x-app-pin\") === pin) return await next();\r\n return c.json({ error: \"unauthorized\", code: \"PIN\" }, 401);\r\n});\r\n\r\napp.use(\"/api/*\", async (c, next) => {\r\n await ensureSchema();\r\n await next();\r\n});\r\n\r\n// ---------- auth / config ----------\r\n\r\napp.get(\"/api/config\", (c) => {\r\n return c.json({ authRequired: !!Deno.env.get(\"APP_PIN\"), hasApiKey: hasApiKey() });\r\n});\r\n\r\napp.post(\"/api/auth/verify\", async (c) => {\r\n const body = await c.req.json().catch(() => ({}));\r\n const pin = Deno.env.get(\"APP_PIN\");\r\n return c.json({ ok: !pin || String(body.pin ?? \"\") === pin });\r\n});\r\n\r\n// ---------- helpers ----------\r\n\r\nfunction num(v: unknown): number | undefined {\r\n if (v === undefined || v === null || v === \"\") return undefined;\r\n const n = Number(v);\r\n return Number.isFinite(n) ? n : undefined;\r\n}\r\n\r\ninterface ResolvedPrice {\r\n price: number;\r\n source: string;\r\n}\r\n\r\n/** Best known planning price for a catalog product (cached average preferred). */\r\nasync function resolveCatalogPrice(barcode: string): Promise {\r\n let cached = await getCachedPrice(barcode);\r\n if (!isFresh(cached)) {\r\n if (hasApiKey()) {\r\n try {\r\n cached = await refreshPrice(barcode);\r\n } catch {\r\n // budget/network issues: fall through to whatever we have\r\n }\r\n }\r\n }\r\n if (cached?.avg_price != null) return { price: Number(cached.avg_price), source: \"average\" };\r\n if (cached?.branch_price != null) return { price: Number(cached.branch_price), source: \"branch\" };\r\n const item = await getCatalogItem(barcode);\r\n if (item?.ref_price != null) return { price: Number(item.ref_price), source: \"catalog\" };\r\n return { price: 0, source: \"none\" };\r\n}\r\n\r\nfunction cartTotals(items: CartItem[]) {\r\n let planned = 0;\r\n let scanned = 0;\r\n let checkedCount = 0;\r\n for (const it of items) {\r\n planned += Number(it.qty) * Number(it.unit_price);\r\n if (Number(it.scanned_qty) > 0) {\r\n scanned += Number(it.scanned_qty) * Number(it.actual_price ?? it.unit_price);\r\n }\r\n if (it.checked) checkedCount++;\r\n }\r\n return {\r\n planned: Math.round(planned * 100) / 100,\r\n scanned: Math.round(scanned * 100) / 100,\r\n itemCount: items.length,\r\n checkedCount,\r\n };\r\n}\r\n\r\nasync function cartPayload() {\r\n const items = await listCart();\r\n return { items, totals: cartTotals(items) };\r\n}\r\n\r\n// ---------- search ----------\r\n\r\napp.get(\"/api/search\", async (c) => {\r\n const query = (c.req.query(\"q\") ?? \"\").trim();\r\n if (!query) return c.json({ results: [] });\r\n\r\n const [catalog, custom, favs, cart] = await Promise.all([\r\n searchCatalog(query, 25),\r\n searchCustomItems(query, 10),\r\n favoriteKeys(),\r\n listCart(),\r\n ]);\r\n\r\n const cartByRef = new Map();\r\n for (const it of cart) {\r\n cartByRef.set(it.kind === \"catalog\" ? `catalog:${it.barcode}` : `custom:${it.custom_id}`, it);\r\n }\r\n\r\n const barcodes = catalog.map((i) => i.barcode);\r\n const priceMap = new Map();\r\n if (barcodes.length) {\r\n const placeholders = barcodes.map(() => \"?\").join(\",\");\r\n const rows = await q(\r\n `SELECT barcode, avg_price, fetched_at FROM sal_price_cache WHERE barcode IN (${placeholders})`,\r\n barcodes,\r\n );\r\n for (const r of rows) priceMap.set(String(r.barcode), r);\r\n }\r\n\r\n const results = [\r\n ...custom.map((ci) => {\r\n const inCart = cartByRef.get(`custom:${ci.id}`);\r\n return {\r\n kind: \"custom\",\r\n custom_id: ci.id,\r\n name: ci.name,\r\n brand: \"\",\r\n unit_qty: \"\",\r\n price: Number(ci.price),\r\n priceKind: \"manual\",\r\n fav: favs.has(`custom:${ci.id}`),\r\n inCartId: inCart?.id ?? null,\r\n inCartQty: inCart ? Number(inCart.qty) : 0,\r\n };\r\n }),\r\n ...catalog.map((it) => {\r\n const cachedRow = priceMap.get(it.barcode);\r\n const cachedFresh = cachedRow && Date.now() - Date.parse(String(cachedRow.fetched_at)) < 24 * 3600 * 1000;\r\n const price = cachedFresh && cachedRow.avg_price != null\r\n ? Number(cachedRow.avg_price)\r\n : it.ref_price != null\r\n ? Number(it.ref_price)\r\n : null;\r\n const inCart = cartByRef.get(`catalog:${it.barcode}`);\r\n return {\r\n kind: \"catalog\",\r\n barcode: it.barcode,\r\n name: it.name,\r\n brand: it.brand ?? \"\",\r\n unit_qty: it.unit_qty ?? \"\",\r\n price,\r\n priceKind: cachedFresh ? \"avg\" : \"ref\",\r\n fav: favs.has(`catalog:${it.barcode}`),\r\n inCartId: inCart?.id ?? null,\r\n inCartQty: inCart ? Number(inCart.qty) : 0,\r\n };\r\n }),\r\n ];\r\n return c.json({ results });\r\n});\r\n\r\n// ---------- custom items ----------\r\n\r\napp.post(\"/api/custom-items\", async (c) => {\r\n const body = await c.req.json().catch(() => ({}));\r\n const name = String(body.name ?? \"\").trim();\r\n const price = num(body.price) ?? 0;\r\n if (!name) return c.json({ error: \"name is required\" }, 400);\r\n const item = await createCustomItem(name, price);\r\n return c.json({ item });\r\n});\r\n\r\napp.patch(\"/api/custom-items/:id\", async (c) => {\r\n const id = Number(c.req.param(\"id\"));\r\n const body = await c.req.json().catch(() => ({}));\r\n const fields: { name?: string; price?: number } = {};\r\n if (body.name !== undefined) fields.name = String(body.name).trim();\r\n const price = num(body.price);\r\n if (price !== undefined) fields.price = price;\r\n await updateCustomItem(id, fields);\r\n return c.json({ ok: true });\r\n});\r\n\r\napp.delete(\"/api/custom-items/:id\", async (c) => {\r\n await deleteCustomItem(Number(c.req.param(\"id\")));\r\n return c.json({ ok: true });\r\n});\r\n\r\n// ---------- cart ----------\r\n\r\napp.get(\"/api/cart\", async (c) => c.json(await cartPayload()));\r\n\r\napp.post(\"/api/cart\", async (c) => {\r\n const body = await c.req.json().catch(() => ({}));\r\n const kind = body.kind === \"custom\" ? \"custom\" : \"catalog\";\r\n const addQty = num(body.qty) ?? 1;\r\n\r\n if (kind === \"catalog\") {\r\n const barcode = String(body.barcode ?? \"\").trim();\r\n if (!barcode) return c.json({ error: \"barcode is required\" }, 400);\r\n\r\n const existing = await findCartByRef(\"catalog\", barcode, null);\r\n if (existing) {\r\n await patchCartItem(existing.id, { qty: Number(existing.qty) + addQty, checked: 0 });\r\n return c.json(await cartPayload());\r\n }\r\n\r\n let item = await getCatalogItem(barcode);\r\n const { price, source } = await resolveCatalogPrice(barcode);\r\n if (!item) item = await getCatalogItem(barcode); // refreshPrice may have learned it\r\n if (!item) return c.json({ error: \"product not found\", code: \"UNKNOWN_PRODUCT\" }, 404);\r\n\r\n await insertCartItem({\r\n kind: \"catalog\",\r\n barcode,\r\n name: item.name,\r\n unit_price: price,\r\n qty: addQty,\r\n price_source: source,\r\n });\r\n return c.json(await cartPayload());\r\n }\r\n\r\n const customId = Number(body.custom_id);\r\n const ci = await getCustomItem(customId);\r\n if (!ci) return c.json({ error: \"custom item not found\" }, 404);\r\n const existing = await findCartByRef(\"custom\", null, customId);\r\n if (existing) {\r\n await patchCartItem(existing.id, { qty: Number(existing.qty) + addQty, checked: 0 });\r\n } else {\r\n await insertCartItem({\r\n kind: \"custom\",\r\n custom_id: customId,\r\n name: ci.name,\r\n unit_price: Number(ci.price),\r\n qty: addQty,\r\n price_source: \"manual\",\r\n });\r\n }\r\n return c.json(await cartPayload());\r\n});\r\n\r\napp.patch(\"/api/cart/:id\", async (c) => {\r\n const id = Number(c.req.param(\"id\"));\r\n const body = await c.req.json().catch(() => ({}));\r\n const fields: Record = {};\r\n for (const key of [\"qty\", \"unit_price\", \"scanned_qty\", \"actual_price\"]) {\r\n const v = num(body[key]);\r\n if (v !== undefined) fields[key] = v;\r\n }\r\n if (body.checked !== undefined) fields.checked = body.checked ? 1 : 0;\r\n if (body.name !== undefined) fields.name = String(body.name).trim();\r\n if (body.price_source !== undefined) fields.price_source = String(body.price_source);\r\n if (fields.qty !== undefined && fields.qty <= 0) {\r\n await deleteCartItem(id);\r\n } else {\r\n await patchCartItem(id, fields);\r\n }\r\n return c.json(await cartPayload());\r\n});\r\n\r\napp.delete(\"/api/cart/:id\", async (c) => {\r\n await deleteCartItem(Number(c.req.param(\"id\")));\r\n return c.json(await cartPayload());\r\n});\r\n\r\napp.post(\"/api/cart/clear\", async (c) => {\r\n const body = await c.req.json().catch(() => ({}));\r\n await clearCart(body.mode === \"checked\" ? \"checked\" : \"all\");\r\n return c.json(await cartPayload());\r\n});\r\n\r\napp.post(\"/api/cart/refresh-prices\", async (c) => {\r\n const barcodes = await cartBarcodes();\r\n const staleAll = await stalePriceBarcodes(barcodes, barcodes.length);\r\n const batch = staleAll.slice(0, 8);\r\n let refreshed = 0;\r\n let stopped: string | null = null;\r\n for (const barcode of batch) {\r\n try {\r\n const info = await refreshPrice(barcode);\r\n if (info.avg_price != null) {\r\n await run(\r\n `UPDATE sal_cart SET unit_price = ?, price_source = 'average'\r\n WHERE kind = 'catalog' AND barcode = ? AND price_source != 'manual'`,\r\n [Number(info.avg_price), barcode],\r\n );\r\n }\r\n refreshed++;\r\n if (refreshed < batch.length) await sleep(1100);\r\n } catch (e) {\r\n stopped = e instanceof CheapersalError ? e.code : \"ERROR\";\r\n break;\r\n }\r\n }\r\n const payload = await cartPayload();\r\n return c.json({ ...payload, refreshed, remaining: Math.max(0, staleAll.length - refreshed), stopped });\r\n});\r\n\r\n// ---------- shopping mode ----------\r\n\r\napp.get(\"/api/lookup/:barcode\", async (c) => {\r\n const barcode = String(c.req.param(\"barcode\")).replace(/\\D/g, \"\");\r\n if (!barcode) return c.json({ error: \"invalid barcode\" }, 400);\r\n\r\n const inCart = await findCartByRef(\"catalog\", barcode, null);\r\n let catalog = await getCatalogItem(barcode);\r\n let cached = await getCachedPrice(barcode);\r\n\r\n if (!isFresh(cached) && hasApiKey()) {\r\n try {\r\n cached = await refreshPrice(barcode);\r\n if (!catalog) catalog = await getCatalogItem(barcode);\r\n } catch {\r\n // keep whatever stale data we have\r\n }\r\n }\r\n\r\n const avgPrice = cached?.avg_price != null ? Number(cached.avg_price) : null;\r\n const branchPrice = cached?.branch_price != null ? Number(cached.branch_price) : null;\r\n const expectedPrice = branchPrice ??\r\n avgPrice ??\r\n (inCart ? Number(inCart.unit_price) : null) ??\r\n (catalog?.ref_price != null ? Number(catalog.ref_price) : null);\r\n\r\n const source = branchPrice != null\r\n ? \"branch\"\r\n : avgPrice != null\r\n ? \"average\"\r\n : catalog?.ref_price != null\r\n ? \"catalog\"\r\n : inCart\r\n ? \"cart\"\r\n : \"none\";\r\n\r\n return c.json({\r\n found: !!(catalog || inCart || avgPrice != null),\r\n barcode,\r\n name: catalog?.name ?? inCart?.name ?? null,\r\n brand: catalog?.brand ?? null,\r\n expectedPrice,\r\n avgPrice,\r\n branchPrice,\r\n source,\r\n inCart: inCart ?? null,\r\n });\r\n});\r\n\r\napp.post(\"/api/cart/unplanned\", async (c) => {\r\n const body = await c.req.json().catch(() => ({}));\r\n const name = String(body.name ?? \"\").trim();\r\n const price = num(body.price) ?? 0;\r\n const qty = num(body.qty) ?? 1;\r\n const barcode = String(body.barcode ?? \"\").replace(/\\D/g, \"\") || null;\r\n if (!name) return c.json({ error: \"name is required\" }, 400);\r\n\r\n await insertCartItem({\r\n kind: barcode ? \"catalog\" : \"custom\",\r\n barcode,\r\n name,\r\n unit_price: price,\r\n qty,\r\n checked: 1,\r\n scanned_qty: qty,\r\n actual_price: price,\r\n unplanned: 1,\r\n price_source: body.source === \"manual\" ? \"manual\" : \"scan\",\r\n });\r\n return c.json(await cartPayload());\r\n});\r\n\r\n// ---------- favorites ----------\r\n\r\napp.get(\"/api/favorites\", async (c) => {\r\n const rows = await listFavorites();\r\n const cart = await listCart();\r\n const cartByRef = new Map();\r\n for (const it of cart) {\r\n cartByRef.set(it.kind === \"catalog\" ? `catalog:${it.barcode}` : `custom:${it.custom_id}`, it);\r\n }\r\n const favorites = rows\r\n .filter((r) => r.name)\r\n .map((r) => {\r\n const key = r.kind === \"catalog\" ? `catalog:${r.barcode}` : `custom:${r.custom_id}`;\r\n const inCart = cartByRef.get(key);\r\n return { ...r, price: r.price != null ? Number(r.price) : null, inCartId: inCart?.id ?? null, inCartQty: inCart ? Number(inCart.qty) : 0 };\r\n });\r\n return c.json({ favorites });\r\n});\r\n\r\napp.post(\"/api/favorites\", async (c) => {\r\n const body = await c.req.json().catch(() => ({}));\r\n const kind = body.kind === \"custom\" ? \"custom\" : \"catalog\";\r\n await addFavorite(kind, body.barcode ? String(body.barcode) : null, num(body.custom_id) ?? null);\r\n return c.json({ ok: true });\r\n});\r\n\r\napp.delete(\"/api/favorites\", async (c) => {\r\n const kind = c.req.query(\"kind\") === \"custom\" ? \"custom\" : \"catalog\";\r\n await removeFavorite(kind, c.req.query(\"barcode\") ?? null, num(c.req.query(\"custom_id\")) ?? null);\r\n return c.json({ ok: true });\r\n});\r\n\r\n// ---------- settings / status / sync ----------\r\n\r\napp.get(\"/api/settings\", async (c) => {\r\n const [branchId, branchName, city, syncBranches] = await Promise.all([\r\n getSetting(\"my_branch_id\"),\r\n getSetting(\"my_branch_name\"),\r\n getSetting(\"my_city\"),\r\n getSettingJSON(\"sync_branches\", []),\r\n ]);\r\n return c.json({ my_branch_id: branchId, my_branch_name: branchName, my_city: city, sync_branches: syncBranches });\r\n});\r\n\r\napp.patch(\"/api/settings\", async (c) => {\r\n const body = await c.req.json().catch(() => ({}));\r\n if (body.my_branch_id !== undefined) {\r\n const prev = await getSetting(\"my_branch_id\");\r\n await setSetting(\"my_branch_id\", body.my_branch_id ? String(body.my_branch_id) : null);\r\n await setSetting(\"my_branch_name\", body.my_branch_name ? String(body.my_branch_name) : null);\r\n if (prev !== (body.my_branch_id || null)) {\r\n // branch-specific cached prices belong to the old store\r\n await run(`UPDATE sal_price_cache SET branch_price = NULL`, []);\r\n }\r\n }\r\n if (body.my_city !== undefined) await setSetting(\"my_city\", body.my_city ? String(body.my_city) : null);\r\n if (Array.isArray(body.sync_branches)) {\r\n const branches = body.sync_branches\r\n .filter((b: any) => b?.id)\r\n .map((b: any) => ({ id: String(b.id), name: String(b.name ?? b.id) }));\r\n await setSettingJSON(\"sync_branches\", branches);\r\n for (const b of branches) {\r\n await upsertSyncState({ branch_id: b.id, branch_name: b.name });\r\n }\r\n }\r\n return c.json({ ok: true });\r\n});\r\n\r\napp.get(\"/api/branches\", async (c) => {\r\n const data = await listBranches({\r\n city: c.req.query(\"city\") || undefined,\r\n online: c.req.query(\"online\") || undefined,\r\n limit: 100,\r\n });\r\n return c.json({ branches: data?.branches ?? [] });\r\n});\r\n\r\napp.get(\"/api/cities\", async (c) => {\r\n const data = await listCities();\r\n return c.json({ cities: Array.isArray(data) ? data : [] });\r\n});\r\n\r\napp.post(\"/api/sync/run\", async (c) => {\r\n const body = await c.req.json().catch(() => ({}));\r\n const pages = Math.min(num(body.pages) ?? 2, 3);\r\n const result = await runSyncSlice(pages, 1500);\r\n return c.json(result);\r\n});\r\n\r\napp.get(\"/api/status\", async (c) => {\r\n const [count, usage, remaining, last, syncBranches, branchId, branchName] = await Promise.all([\r\n catalogCount(),\r\n getUsage(),\r\n remainingReported(),\r\n lastSyncAt(),\r\n getSettingJSON(\"sync_branches\", []),\r\n getSetting(\"my_branch_id\"),\r\n getSetting(\"my_branch_name\"),\r\n ]);\r\n return c.json({\r\n catalogCount: count,\r\n apiUsedToday: usage.count,\r\n apiRemaining: remaining,\r\n hasApiKey: hasApiKey(),\r\n authRequired: !!Deno.env.get(\"APP_PIN\"),\r\n lastSync: last,\r\n syncBranches,\r\n myBranch: branchId ? { id: branchId, name: branchName ?? branchId } : null,\r\n });\r\n});\r\n\r\n// ---------- static files / PWA ----------\r\n\r\nconst MIME: Record = {\r\n html: \"text/html; charset=utf-8\",\r\n js: \"text/javascript; charset=utf-8\",\r\n css: \"text/css; charset=utf-8\",\r\n json: \"application/json; charset=utf-8\",\r\n svg: \"image/svg+xml\",\r\n png: \"image/png\",\r\n txt: \"text/plain; charset=utf-8\",\r\n webmanifest: \"application/manifest+json\",\r\n};\r\n\r\nasync function serveStatic(path: string, cacheSeconds: number): Promise {\r\n const ext = path.split(\".\").pop() ?? \"txt\";\r\n const content = await readFile(path, import.meta.url);\r\n return new Response(content, {\r\n headers: {\r\n \"content-type\": MIME[ext] ?? \"text/plain; charset=utf-8\",\r\n \"cache-control\": cacheSeconds > 0 ? `public, max-age=${cacheSeconds}` : \"no-cache\",\r\n },\r\n });\r\n}\r\n\r\napp.get(\"/\", () => serveStatic(\"/frontend/index.html\", 0));\r\napp.get(\"/index.html\", () => serveStatic(\"/frontend/index.html\", 0));\r\napp.get(\"/manifest.json\", () => serveStatic(\"/frontend/manifest.json\", 300));\r\napp.get(\"/sw.js\", () => serveStatic(\"/frontend/sw.js\", 0));\r\n\r\napp.get(\"/frontend/*\", (c) => {\r\n const path = c.req.path;\r\n if (path.includes(\"..\")) return c.text(\"bad path\", 400);\r\n return serveStatic(path, 300);\r\n});\r\n\r\napp.get(\"/icons/icon.svg\", () =>\r\n new Response(iconSvg(), {\r\n headers: { \"content-type\": \"image/svg+xml\", \"cache-control\": \"public, max-age=86400\" },\r\n }));\r\n\r\napp.get(\"/icons/:file\", async (c) => {\r\n const m = c.req.param(\"file\").match(/^icon-(\\d+)\\.png$/);\r\n if (!m) return c.notFound();\r\n const size = Math.min(Number(m[1]) || 192, 1024);\r\n const png = await iconPng(size);\r\n if (png) {\r\n return new Response(png.buffer as ArrayBuffer, {\r\n headers: { \"content-type\": \"image/png\", \"cache-control\": \"public, max-age=86400\" },\r\n });\r\n }\r\n // Fallback: SVG body (most browsers sniff and render it; iOS will show a default icon)\r\n return new Response(iconSvg(), {\r\n headers: { \"content-type\": \"image/svg+xml\", \"cache-control\": \"public, max-age=3600\" },\r\n });\r\n});\r\n\r\napp.get(\"/favicon.ico\", (c) => c.redirect(\"/icons/icon.svg\", 301));\r\n\r\nexport default app.fetch;\r\n","createdAt",["D",1781265057832],"branchVersion","branchId","17148dea-1f11-4e39-b566-7dfac4b67420","id","7d5b16ae-5c7c-4ac0-bf56-1b4e7583327f","sal-kniyot",["D",1781264881516],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Hebrew shopping list PWA with real Israeli grocery prices","imageUrl","f9a9d73d-189d-4a89-b651-a98dd96ccd85","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019ebad4-b39c-7578-b99d-98184cb7486b","tursoName","7d5b16ae5c7c4ac0bf561b4e7583327f","tursoHostname","7d5b16ae5c7c4ac0bf561b4e7583327f-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789535451117],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_97":96,"_105":101},"org",{"_97":96,"_98":99,"_100":101,"_18":54,"_102":103,"_104":24},"branch",{"_13":86,"_31":87,"_42":41,"_88":43,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":44,"_95":96},"isOwned",32,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","Yaniv","handle","displayName","Yaniv Bitton","avatar","https://lh3.googleusercontent.com/a/ACg8ocJyc9WiOwnFbdo0vUbRiTCBw7JbZp4Zdp9SivQ_duK8hZjZGjml=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_31":44,"_37":268,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":-5,"_56":24,"_57":-5,"_58":-5,"_59":60,"_61":62,"_63":64,"_65":66,"_67":269,"_69":-5,"_70":71,"_72":71,"_73":74,"_75":74,"_76":74,"_77":71,"_78":71,"_79":270,"_81":271,"_83":272,"_85":24},"tree",[202,203,204,209,210,211,212,213],"files",[202,203,204,205,206,207,208,209,210,211,212,213],"counts",{"_192":60,"_193":159,"_194":60,"_195":196,"_197":198},"contents",[129,130,131,132,133,134,135,136],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_42":186,"_31":187,"_29":188,"_140":-5,"_40":41,"_39":189,"_142":124,"_37":190,"_13":60,"_33":167,"_35":-5,"_23":24,"_145":-5,"_26":191},{"_42":180,"_31":181,"_29":182,"_140":-5,"_40":41,"_39":183,"_142":124,"_37":184,"_13":60,"_33":167,"_35":-5,"_23":24,"_145":-5,"_26":185},{"_42":175,"_31":176,"_29":177,"_140":-5,"_40":41,"_39":159,"_142":124,"_37":178,"_13":60,"_33":167,"_35":-5,"_23":24,"_145":-5,"_26":179},{"_42":169,"_31":170,"_29":171,"_140":-5,"_40":41,"_39":172,"_142":124,"_37":173,"_13":60,"_33":167,"_35":-5,"_23":24,"_145":-5,"_26":174},{"_42":162,"_31":163,"_29":164,"_140":-5,"_40":41,"_39":165,"_142":124,"_37":166,"_13":60,"_33":167,"_35":-5,"_23":24,"_145":-5,"_26":168},{"_42":154,"_31":155,"_29":156,"_140":-5,"_40":41,"_39":157,"_142":124,"_37":158,"_13":159,"_33":20,"_35":160,"_23":24,"_145":-5,"_26":161},{"_42":147,"_31":148,"_29":149,"_140":-5,"_40":41,"_39":150,"_142":124,"_37":151,"_13":60,"_33":20,"_35":152,"_23":24,"_145":-5,"_26":153},{"_42":137,"_31":138,"_29":139,"_140":-5,"_40":41,"_39":141,"_142":124,"_37":143,"_13":60,"_33":20,"_35":144,"_23":24,"_145":-5,"_26":146},"ce2b1d1b-f072-4312-8aae-bab8a1f0a5ca","deno.json","936e2152-6654-11f1-9094-1607ee4eb77e","parentId",6,"latest",["D",1781264886189],"{\r\n \"lock\": false,\r\n \"compilerOptions\": {\r\n \"lib\": [\"deno.window\", \"dom\"]\r\n },\r\n \"lint\": {\r\n \"exclude\": [\"frontend/\"]\r\n }\r\n}\r\n","label",[138],"76fdd81a-7e51-48f1-8761-e73f55907983","README.md","93ae3b02-6654-11f1-98fc-1607ee4eb77e",7,["D",1781264886602],"# סל קניות — Shopping List PWA\r\n\r\nA Hebrew, RTL, mobile-first shopping list and cart app, hosted entirely on [Val Town](https://val.town).\r\nReal Israeli grocery products and prices come from the free [Cheapersal API](https://cheapersal.co.il/developers)\r\n(built on the government price-transparency data).\r\n\r\n## Features\r\n\r\n- Search real grocery products in Hebrew (local catalog, instant, zero API quota).\r\n- Cart for the next shopping run with a live projected total (₪), based on the average price across chains.\r\n- Favorites for one-tap re-adding of staples.\r\n- Custom items with a user-set price for anything not in the catalog.\r\n- Shopping mode: scan barcodes (EAN-13/EAN-8) with the phone camera as items go into the physical cart,\r\n building the real expected total, then compare planned vs. scanned at checkout to catch register mistakes.\r\n- \"My store\" setting: scan lookups prefer your branch's actual price over the national average.\r\n- Installable PWA (Add to Home Screen on iPhone/Android), cart viewable offline in-store.\r\n\r\n## Project structure\r\n\r\n```\r\nbackend/\r\n index.http.ts Hono HTTP trigger: JSON API + serves the frontend, manifest, SW, icons\r\n db.ts SQLite schema + query helpers\r\n cheapersal.ts Cheapersal API client (throttle, daily budget, 24h price cache)\r\n icons.ts App icon (SVG -> PNG via resvg-wasm, cached in blob storage)\r\n syncCatalog.cron.ts Incremental catalog sync (cron trigger)\r\nfrontend/\r\n index.html, styles.css, manifest.json, sw.js\r\n index.js, app.js, views.js, scanner.js, api.js (React 18 + htm, no build step)\r\nshared/\r\n types.ts\r\n```\r\n\r\n## One-time setup\r\n\r\n1. Get a free API key at [cheapersal.co.il/developers](https://cheapersal.co.il/developers) (\"קבלו מפתח API\").\r\n2. Install [Deno](https://deno.land), then the Val Town CLI: `deno install -grAf jsr:@valtown/vt`, and run `vt` to log in.\r\n3. From this folder: `vt create sal-kniyot` (or `vt push` if the val exists).\r\n4. In the val's settings on val.town set environment variables:\r\n - `CHEAPERSAL_API_KEY` — your Cheapersal key.\r\n - `APP_PIN` — optional numeric PIN that gates the app (leave unset for no PIN).\r\n5. Set the cron schedule for `backend/syncCatalog.cron.ts` (e.g. every 30 minutes). The first runs build\r\n the local product catalog; afterwards it refreshes weekly.\r\n6. On the phone, open the val URL → Share → Add to Home Screen.\r\n\r\n## API quota strategy\r\n\r\nFree tier is 100 requests/day (10/minute). The app stays well inside it:\r\n\r\n- Product name search runs against the local SQLite catalog — zero quota.\r\n- Catalog sync uses a small request budget per cron run and stops at ~55 requests/day.\r\n- Live price lookups happen only when adding an item (cached 24h) or scanning an unknown barcode.\r\n- The settings sheet shows the remaining daily quota as reported by the API.\r\n",[148],"0d5f50ee-59c8-4c88-a552-84335087cdd1",".vtignore","93313bc0-6654-11f1-9529-1607ee4eb77e",9,["D",1781264955145],1,".git\r\n.git/**\r\n.vt\r\n.vt/**\r\n*.lock\r\nnode_modules/**\r\n",[155],"cd304fb9-8c75-4c5f-9592-65425d2ce241","shared","927c54f8-6654-11f1-aca0-1607ee4eb77e",3,["D",1781264884601],"directory",[163],"a76bc93f-97d0-4df8-9445-600c21b1eb32","frontend","92500ed4-6654-11f1-b967-1607ee4eb77e",2,["D",1781264884294],[170],"957b7828-2037-4489-87e5-b59a5c295272","backend","922a324a-6654-11f1-9e0e-1607ee4eb77e",["D",1781264884030],[176],"aa4c5e77-addb-4ead-adc7-cc2fbef21e6a",".vt","bb7ec82c-6654-11f1-98fc-1607ee4eb77e",8,["D",1781264953400],[181],"7b603636-18b2-423f-88d7-d7dee3c0d631",".git","929e2830-6654-11f1-92f4-1607ee4eb77e",4,["D",1781264884823],[187],"pulls","branches","forks","envVars",{"_199":172,"_201":60},"connections",{"_199":60,"_200":60},"count","unfilledCount","emptyCount",{"_42":186,"_31":187,"_29":188,"_140":-5,"_40":41,"_39":189,"_142":124,"_37":265,"_13":60,"_33":167,"_35":-5,"_23":24,"_145":-5,"_215":266,"_26":267},{"_42":180,"_31":181,"_29":182,"_140":-5,"_40":41,"_39":183,"_142":124,"_37":262,"_13":60,"_33":167,"_35":-5,"_23":24,"_145":-5,"_215":263,"_26":264},{"_42":175,"_31":176,"_29":177,"_140":-5,"_40":41,"_39":159,"_142":124,"_37":259,"_13":60,"_33":167,"_35":-5,"_23":24,"_145":-5,"_215":260,"_26":261},{"_42":251,"_31":252,"_29":253,"_140":177,"_40":41,"_39":254,"_142":124,"_37":255,"_13":60,"_33":239,"_35":256,"_23":24,"_145":-5,"_215":257,"_26":258},{"_42":243,"_31":244,"_29":245,"_140":177,"_40":41,"_39":246,"_142":124,"_37":247,"_13":60,"_33":239,"_35":248,"_23":24,"_145":-5,"_215":249,"_26":250},{"_42":234,"_31":235,"_29":236,"_140":177,"_40":41,"_39":237,"_142":124,"_37":238,"_13":60,"_33":239,"_35":240,"_23":24,"_145":-5,"_215":241,"_26":242},{"_42":230,"_31":32,"_29":30,"_140":177,"_40":41,"_39":14,"_142":24,"_37":231,"_13":60,"_33":34,"_35":36,"_23":24,"_145":-5,"_215":232,"_26":233},{"_42":169,"_31":170,"_29":171,"_140":-5,"_40":41,"_39":172,"_142":124,"_37":227,"_13":60,"_33":167,"_35":-5,"_23":24,"_145":-5,"_215":228,"_26":229},{"_42":162,"_31":163,"_29":164,"_140":-5,"_40":41,"_39":165,"_142":124,"_37":224,"_13":60,"_33":167,"_35":-5,"_23":24,"_145":-5,"_215":225,"_26":226},{"_42":154,"_31":155,"_29":156,"_140":-5,"_40":41,"_39":157,"_142":124,"_37":221,"_13":159,"_33":20,"_35":160,"_23":24,"_145":-5,"_215":222,"_26":223},{"_42":147,"_31":148,"_29":149,"_140":-5,"_40":41,"_39":150,"_142":124,"_37":218,"_13":60,"_33":20,"_35":152,"_23":24,"_145":-5,"_215":219,"_26":220},{"_42":137,"_31":138,"_29":139,"_140":-5,"_40":41,"_39":141,"_142":124,"_37":214,"_13":60,"_33":20,"_35":144,"_23":24,"_145":-5,"_215":216,"_26":217},["D",1781264886189],"children",[],[138],["D",1781264886602],[],[148],["D",1781264955145],[],[155],["D",1781264884601],[],[163],["D",1781264884294],[],[170],"b258df52-fa16-4ebc-ba10-daf3d7a09137",["D",1781265057832],[],[176,32],"54f701cd-de91-4039-a609-9e3afb5f0045","icons.ts","f99aa3b0-6654-11f1-8113-1607ee4eb77e",12,["D",1781265057605],"script","/**\r\n * App icon, generated from a single SVG source.\r\n * PNG variants (needed for iOS apple-touch-icon and the manifest) are rendered\r\n * at runtime with resvg-wasm and cached in blob storage + memory.\r\n */\r\n\r\nconst ICON_VERSION = \"v1\";\r\n\r\nexport function iconSvg(): string {\r\n return ``;\r\n}\r\n\r\nconst memCache = new Map();\r\nlet wasmInit: Promise | null = null;\r\n\r\nasync function renderPng(size: number): Promise {\r\n const resvg = await import(\"https://esm.sh/@resvg/resvg-wasm@2.6.2\");\r\n if (!wasmInit) {\r\n wasmInit = resvg\r\n .initWasm(fetch(\"https://esm.sh/@resvg/resvg-wasm@2.6.2/index_bg.wasm\"))\r\n .catch((e: Error) => {\r\n if (/already/i.test(e.message)) return;\r\n wasmInit = null;\r\n throw e;\r\n });\r\n }\r\n await wasmInit;\r\n const renderer = new resvg.Resvg(iconSvg(), { fitTo: { mode: \"width\", value: size } });\r\n return renderer.render().asPng();\r\n}\r\n\r\nexport async function iconPng(size: number): Promise {\r\n const cached = memCache.get(size);\r\n if (cached) return cached;\r\n\r\n const key = `sal_icon_${ICON_VERSION}_${size}`;\r\n try {\r\n const { blob } = await import(\"https://esm.town/v/std/blob\");\r\n try {\r\n const stored: any = await blob.get(key);\r\n const buf = new Uint8Array(await stored.arrayBuffer());\r\n if (buf.length > 0) {\r\n memCache.set(size, buf);\r\n return buf;\r\n }\r\n } catch {\r\n // not cached yet\r\n }\r\n const png = await renderPng(size);\r\n memCache.set(size, png);\r\n try {\r\n await blob.set(key, png.buffer as ArrayBuffer);\r\n } catch {\r\n // blob storage is best-effort; memory cache still works\r\n }\r\n return png;\r\n } catch {\r\n // resvg/blob unavailable; caller falls back to SVG\r\n try {\r\n const png = await renderPng(size);\r\n memCache.set(size, png);\r\n return png;\r\n } catch {\r\n return null;\r\n }\r\n }\r\n}\r\n",[],[176,235],"d3210b14-0752-4078-b9f0-c86f803859de","db.ts","f9794986-6654-11f1-8113-1607ee4eb77e",11,["D",1781265057385],"import sqlite from \"https://esm.town/v/std/sqlite/main.ts\";\r\nimport type { CartItem, CatalogItem, CustomItem, PriceInfo, SyncBranch } from \"../shared/types.ts\";\r\n\r\ntype Row = Record;\r\n\r\nconst DDL = [\r\n `CREATE TABLE IF NOT EXISTS sal_catalog (\r\n barcode TEXT PRIMARY KEY,\r\n name TEXT NOT NULL,\r\n brand TEXT NOT NULL DEFAULT '',\r\n category TEXT NOT NULL DEFAULT '',\r\n unit_qty TEXT NOT NULL DEFAULT '',\r\n ref_price REAL,\r\n search_text TEXT NOT NULL DEFAULT '',\r\n updated_at TEXT\r\n )`,\r\n `CREATE INDEX IF NOT EXISTS idx_sal_catalog_search ON sal_catalog(search_text)`,\r\n `CREATE TABLE IF NOT EXISTS sal_custom_items (\r\n id INTEGER PRIMARY KEY AUTOINCREMENT,\r\n name TEXT NOT NULL,\r\n price REAL NOT NULL DEFAULT 0,\r\n search_text TEXT NOT NULL DEFAULT '',\r\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\r\n )`,\r\n `CREATE TABLE IF NOT EXISTS sal_favorites (\r\n id INTEGER PRIMARY KEY AUTOINCREMENT,\r\n kind TEXT NOT NULL,\r\n barcode TEXT NOT NULL DEFAULT '',\r\n custom_id INTEGER NOT NULL DEFAULT 0,\r\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\r\n UNIQUE(kind, barcode, custom_id)\r\n )`,\r\n `CREATE TABLE IF NOT EXISTS sal_cart (\r\n id INTEGER PRIMARY KEY AUTOINCREMENT,\r\n kind TEXT NOT NULL,\r\n barcode TEXT,\r\n custom_id INTEGER,\r\n name TEXT NOT NULL,\r\n unit_price REAL NOT NULL DEFAULT 0,\r\n qty REAL NOT NULL DEFAULT 1,\r\n checked INTEGER NOT NULL DEFAULT 0,\r\n scanned_qty REAL NOT NULL DEFAULT 0,\r\n actual_price REAL,\r\n unplanned INTEGER NOT NULL DEFAULT 0,\r\n price_source TEXT NOT NULL DEFAULT '',\r\n added_at TEXT NOT NULL DEFAULT (datetime('now'))\r\n )`,\r\n `CREATE TABLE IF NOT EXISTS sal_price_cache (\r\n barcode TEXT PRIMARY KEY,\r\n avg_price REAL,\r\n min_price REAL,\r\n max_price REAL,\r\n cheapest_chain TEXT,\r\n store_count INTEGER,\r\n branch_price REAL,\r\n fetched_at TEXT NOT NULL\r\n )`,\r\n `CREATE TABLE IF NOT EXISTS sal_sync_state (\r\n branch_id TEXT PRIMARY KEY,\r\n branch_name TEXT NOT NULL DEFAULT '',\r\n next_skip INTEGER NOT NULL DEFAULT 0,\r\n total INTEGER,\r\n done_at TEXT,\r\n updated_at TEXT\r\n )`,\r\n `CREATE TABLE IF NOT EXISTS sal_settings (\r\n key TEXT PRIMARY KEY,\r\n value TEXT\r\n )`,\r\n];\r\n\r\nlet schemaReady = false;\r\nexport async function ensureSchema(): Promise {\r\n if (schemaReady) return;\r\n await sqlite.batch(DDL);\r\n schemaReady = true;\r\n}\r\n\r\nfunction toObjects(rs: { columns: string[]; rows: any[] }): Row[] {\r\n return rs.rows.map((r) =>\r\n Object.fromEntries(rs.columns.map((c, i) => [c, r[i] !== undefined ? r[i] : r[c]]))\r\n );\r\n}\r\n\r\nexport async function q(sql: string, args: any[] = []): Promise {\r\n const rs = await sqlite.execute({ sql, args });\r\n return toObjects(rs as any);\r\n}\r\n\r\nexport async function run(sql: string, args: any[] = []): Promise<{ lastId: number }> {\r\n const rs: any = await sqlite.execute({ sql, args });\r\n return { lastId: rs.lastInsertRowid != null ? Number(rs.lastInsertRowid) : 0 };\r\n}\r\n\r\n// ---------- Hebrew text normalization ----------\r\n\r\nconst FINALS: Record = { \"ך\": \"כ\", \"ם\": \"מ\", \"ן\": \"נ\", \"ף\": \"פ\", \"ץ\": \"צ\" };\r\n\r\nexport function normalizeHe(s: string): string {\r\n return (s || \"\")\r\n .replace(/[\"'`׳״\\u05F3\\u05F4]/g, \"\")\r\n .replace(/[ךםןףץ]/g, (ch) => FINALS[ch])\r\n .replace(/[\\u0591-\\u05C7]/g, \"\") // niqqud\r\n .replace(/\\s+/g, \" \")\r\n .trim()\r\n .toLowerCase();\r\n}\r\n\r\nfunction likeEscape(s: string): string {\r\n return s.replace(/([\\\\%_])/g, \"\\\\$1\");\r\n}\r\n\r\n// ---------- Settings ----------\r\n\r\nexport async function getSetting(key: string): Promise {\r\n const rows = await q(`SELECT value FROM sal_settings WHERE key = ?`, [key]);\r\n return rows.length ? (rows[0].value as string) : null;\r\n}\r\n\r\nexport async function setSetting(key: string, value: string | null): Promise {\r\n if (value === null) {\r\n await run(`DELETE FROM sal_settings WHERE key = ?`, [key]);\r\n } else {\r\n await run(\r\n `INSERT INTO sal_settings (key, value) VALUES (?, ?)\r\n ON CONFLICT(key) DO UPDATE SET value = excluded.value`,\r\n [key, value],\r\n );\r\n }\r\n}\r\n\r\nexport async function getSettingJSON(key: string, fallback: T): Promise {\r\n const v = await getSetting(key);\r\n if (!v) return fallback;\r\n try {\r\n return JSON.parse(v) as T;\r\n } catch {\r\n return fallback;\r\n }\r\n}\r\n\r\nexport async function setSettingJSON(key: string, value: unknown): Promise {\r\n await setSetting(key, JSON.stringify(value));\r\n}\r\n\r\n// ---------- Catalog ----------\r\n\r\nexport interface CatalogUpsert {\r\n barcode: string;\r\n name: string;\r\n brand?: string;\r\n category?: string;\r\n unit_qty?: string;\r\n price?: number | null;\r\n}\r\n\r\nexport async function upsertCatalogBatch(products: CatalogUpsert[]): Promise {\r\n if (!products.length) return;\r\n const now = new Date().toISOString();\r\n const stmts = products\r\n .filter((p) => p.barcode && p.name)\r\n .map((p) => ({\r\n sql: `INSERT INTO sal_catalog (barcode, name, brand, category, unit_qty, ref_price, search_text, updated_at)\r\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)\r\n ON CONFLICT(barcode) DO UPDATE SET\r\n name = excluded.name,\r\n brand = excluded.brand,\r\n category = excluded.category,\r\n unit_qty = CASE WHEN excluded.unit_qty != '' THEN excluded.unit_qty ELSE sal_catalog.unit_qty END,\r\n ref_price = COALESCE(excluded.ref_price, sal_catalog.ref_price),\r\n search_text = excluded.search_text,\r\n updated_at = excluded.updated_at`,\r\n args: [\r\n String(p.barcode),\r\n p.name,\r\n p.brand ?? \"\",\r\n p.category ?? \"\",\r\n p.unit_qty ?? \"\",\r\n p.price ?? null,\r\n normalizeHe(`${p.name} ${p.brand ?? \"\"}`),\r\n now,\r\n ],\r\n }));\r\n await sqlite.batch(stmts as any);\r\n}\r\n\r\nexport async function searchCatalog(query: string, limit = 25): Promise {\r\n const norm = normalizeHe(query);\r\n const terms = norm.split(\" \").filter(Boolean).slice(0, 6);\r\n if (!terms.length) return [];\r\n const where = terms.map(() => `search_text LIKE ? ESCAPE '\\\\'`).join(\" AND \");\r\n const args: any[] = terms.map((t) => `%${likeEscape(t)}%`);\r\n args.push(`${likeEscape(terms[0])}%`);\r\n args.push(limit);\r\n const rows = await q(\r\n `SELECT barcode, name, brand, category, unit_qty, ref_price, updated_at\r\n FROM sal_catalog\r\n WHERE ${where}\r\n ORDER BY (CASE WHEN search_text LIKE ? ESCAPE '\\\\' THEN 0 ELSE 1 END), length(name) ASC\r\n LIMIT ?`,\r\n args,\r\n );\r\n return rows as unknown as CatalogItem[];\r\n}\r\n\r\nexport async function getCatalogItem(barcode: string): Promise {\r\n const rows = await q(\r\n `SELECT barcode, name, brand, category, unit_qty, ref_price, updated_at FROM sal_catalog WHERE barcode = ?`,\r\n [barcode],\r\n );\r\n return rows.length ? (rows[0] as unknown as CatalogItem) : null;\r\n}\r\n\r\nexport async function catalogCount(): Promise {\r\n const rows = await q(`SELECT COUNT(*) AS n FROM sal_catalog`);\r\n return Number(rows[0]?.n ?? 0);\r\n}\r\n\r\n// ---------- Custom items ----------\r\n\r\nexport async function createCustomItem(name: string, price: number): Promise {\r\n const { lastId } = await run(\r\n `INSERT INTO sal_custom_items (name, price, search_text) VALUES (?, ?, ?)`,\r\n [name, price, normalizeHe(name)],\r\n );\r\n const rows = await q(`SELECT id, name, price, created_at FROM sal_custom_items WHERE id = ?`, [lastId]);\r\n return rows[0] as unknown as CustomItem;\r\n}\r\n\r\nexport async function updateCustomItem(id: number, fields: { name?: string; price?: number }): Promise {\r\n const sets: string[] = [];\r\n const args: any[] = [];\r\n if (fields.name !== undefined) {\r\n sets.push(\"name = ?\", \"search_text = ?\");\r\n args.push(fields.name, normalizeHe(fields.name));\r\n }\r\n if (fields.price !== undefined) {\r\n sets.push(\"price = ?\");\r\n args.push(fields.price);\r\n }\r\n if (!sets.length) return;\r\n args.push(id);\r\n await run(`UPDATE sal_custom_items SET ${sets.join(\", \")} WHERE id = ?`, args);\r\n // Propagate to unchecked cart rows that reference this custom item.\r\n if (fields.name !== undefined || fields.price !== undefined) {\r\n const sets2: string[] = [];\r\n const args2: any[] = [];\r\n if (fields.name !== undefined) {\r\n sets2.push(\"name = ?\");\r\n args2.push(fields.name);\r\n }\r\n if (fields.price !== undefined) {\r\n sets2.push(\"unit_price = ?\");\r\n args2.push(fields.price);\r\n }\r\n args2.push(id);\r\n await run(`UPDATE sal_cart SET ${sets2.join(\", \")} WHERE kind = 'custom' AND custom_id = ? AND checked = 0`, args2);\r\n }\r\n}\r\n\r\nexport async function deleteCustomItem(id: number): Promise {\r\n await run(`DELETE FROM sal_custom_items WHERE id = ?`, [id]);\r\n await run(`DELETE FROM sal_favorites WHERE kind = 'custom' AND custom_id = ?`, [id]);\r\n}\r\n\r\nexport async function getCustomItem(id: number): Promise {\r\n const rows = await q(`SELECT id, name, price, created_at FROM sal_custom_items WHERE id = ?`, [id]);\r\n return rows.length ? (rows[0] as unknown as CustomItem) : null;\r\n}\r\n\r\nexport async function searchCustomItems(query: string, limit = 10): Promise {\r\n const norm = normalizeHe(query);\r\n const terms = norm.split(\" \").filter(Boolean).slice(0, 6);\r\n if (!terms.length) return [];\r\n const where = terms.map(() => `search_text LIKE ? ESCAPE '\\\\'`).join(\" AND \");\r\n const args: any[] = terms.map((t) => `%${likeEscape(t)}%`);\r\n args.push(limit);\r\n const rows = await q(\r\n `SELECT id, name, price, created_at FROM sal_custom_items WHERE ${where} ORDER BY length(name) LIMIT ?`,\r\n args,\r\n );\r\n return rows as unknown as CustomItem[];\r\n}\r\n\r\n// ---------- Favorites ----------\r\n\r\nexport async function listFavorites(): Promise {\r\n return await q(\r\n `SELECT f.id, f.kind, f.barcode, f.custom_id, f.created_at,\r\n COALESCE(c.name, ci.name) AS name,\r\n COALESCE(c.brand, '') AS brand,\r\n c.unit_qty AS unit_qty,\r\n COALESCE(p.avg_price, c.ref_price, ci.price) AS price\r\n FROM sal_favorites f\r\n LEFT JOIN sal_catalog c ON f.kind = 'catalog' AND c.barcode = f.barcode\r\n LEFT JOIN sal_custom_items ci ON f.kind = 'custom' AND ci.id = f.custom_id\r\n LEFT JOIN sal_price_cache p ON f.kind = 'catalog' AND p.barcode = f.barcode\r\n ORDER BY f.created_at DESC`,\r\n );\r\n}\r\n\r\nexport async function addFavorite(kind: string, barcode: string | null, customId: number | null): Promise {\r\n await run(\r\n `INSERT OR IGNORE INTO sal_favorites (kind, barcode, custom_id) VALUES (?, ?, ?)`,\r\n [kind, barcode ?? \"\", customId ?? 0],\r\n );\r\n}\r\n\r\nexport async function removeFavorite(kind: string, barcode: string | null, customId: number | null): Promise {\r\n await run(\r\n `DELETE FROM sal_favorites WHERE kind = ? AND barcode = ? AND custom_id = ?`,\r\n [kind, barcode ?? \"\", customId ?? 0],\r\n );\r\n}\r\n\r\nexport async function favoriteKeys(): Promise> {\r\n const rows = await q(`SELECT kind, barcode, custom_id FROM sal_favorites`);\r\n return new Set(rows.map((r) => (r.kind === \"catalog\" ? `catalog:${r.barcode}` : `custom:${r.custom_id}`)));\r\n}\r\n\r\n// ---------- Cart ----------\r\n\r\nexport async function listCart(): Promise {\r\n const rows = await q(`SELECT * FROM sal_cart ORDER BY checked ASC, added_at DESC, id DESC`);\r\n return rows as unknown as CartItem[];\r\n}\r\n\r\nexport async function getCartItem(id: number): Promise {\r\n const rows = await q(`SELECT * FROM sal_cart WHERE id = ?`, [id]);\r\n return rows.length ? (rows[0] as unknown as CartItem) : null;\r\n}\r\n\r\nexport async function findCartByRef(kind: string, barcode: string | null, customId: number | null): Promise {\r\n const rows = kind === \"catalog\"\r\n ? await q(`SELECT * FROM sal_cart WHERE kind = 'catalog' AND barcode = ? LIMIT 1`, [barcode])\r\n : await q(`SELECT * FROM sal_cart WHERE kind = 'custom' AND custom_id = ? LIMIT 1`, [customId]);\r\n return rows.length ? (rows[0] as unknown as CartItem) : null;\r\n}\r\n\r\nexport interface CartInsert {\r\n kind: string;\r\n barcode?: string | null;\r\n custom_id?: number | null;\r\n name: string;\r\n unit_price: number;\r\n qty?: number;\r\n checked?: number;\r\n scanned_qty?: number;\r\n actual_price?: number | null;\r\n unplanned?: number;\r\n price_source?: string;\r\n}\r\n\r\nexport async function insertCartItem(item: CartInsert): Promise {\r\n const { lastId } = await run(\r\n `INSERT INTO sal_cart (kind, barcode, custom_id, name, unit_price, qty, checked, scanned_qty, actual_price, unplanned, price_source)\r\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\r\n [\r\n item.kind,\r\n item.barcode ?? null,\r\n item.custom_id ?? null,\r\n item.name,\r\n item.unit_price,\r\n item.qty ?? 1,\r\n item.checked ?? 0,\r\n item.scanned_qty ?? 0,\r\n item.actual_price ?? null,\r\n item.unplanned ?? 0,\r\n item.price_source ?? \"\",\r\n ],\r\n );\r\n return lastId;\r\n}\r\n\r\nconst CART_PATCHABLE = [\"qty\", \"checked\", \"unit_price\", \"scanned_qty\", \"actual_price\", \"name\", \"price_source\"];\r\n\r\nexport async function patchCartItem(id: number, fields: Record): Promise {\r\n const sets: string[] = [];\r\n const args: any[] = [];\r\n for (const key of CART_PATCHABLE) {\r\n if (fields[key] !== undefined) {\r\n sets.push(`${key} = ?`);\r\n args.push(fields[key]);\r\n }\r\n }\r\n if (!sets.length) return;\r\n args.push(id);\r\n await run(`UPDATE sal_cart SET ${sets.join(\", \")} WHERE id = ?`, args);\r\n}\r\n\r\nexport async function deleteCartItem(id: number): Promise {\r\n await run(`DELETE FROM sal_cart WHERE id = ?`, [id]);\r\n}\r\n\r\nexport async function clearCart(mode: \"all\" | \"checked\"): Promise {\r\n if (mode === \"checked\") {\r\n await run(`DELETE FROM sal_cart WHERE checked = 1`);\r\n } else {\r\n await run(`DELETE FROM sal_cart`);\r\n }\r\n}\r\n\r\nexport async function cartBarcodes(): Promise {\r\n const rows = await q(`SELECT DISTINCT barcode FROM sal_cart WHERE kind = 'catalog' AND barcode IS NOT NULL`);\r\n return rows.map((r) => String(r.barcode));\r\n}\r\n\r\n// ---------- Price cache ----------\r\n\r\nconst PRICE_TTL_MS = 24 * 60 * 60 * 1000;\r\n\r\nexport async function getCachedPrice(barcode: string): Promise {\r\n const rows = await q(`SELECT * FROM sal_price_cache WHERE barcode = ?`, [barcode]);\r\n return rows.length ? (rows[0] as unknown as PriceInfo) : null;\r\n}\r\n\r\nexport function isFresh(info: PriceInfo | null): boolean {\r\n if (!info?.fetched_at) return false;\r\n return Date.now() - Date.parse(info.fetched_at) < PRICE_TTL_MS;\r\n}\r\n\r\nexport async function setCachedPrice(info: Omit): Promise {\r\n await run(\r\n `INSERT INTO sal_price_cache (barcode, avg_price, min_price, max_price, cheapest_chain, store_count, branch_price, fetched_at)\r\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)\r\n ON CONFLICT(barcode) DO UPDATE SET\r\n avg_price = excluded.avg_price,\r\n min_price = excluded.min_price,\r\n max_price = excluded.max_price,\r\n cheapest_chain = excluded.cheapest_chain,\r\n store_count = excluded.store_count,\r\n branch_price = excluded.branch_price,\r\n fetched_at = excluded.fetched_at`,\r\n [\r\n info.barcode,\r\n info.avg_price,\r\n info.min_price,\r\n info.max_price,\r\n info.cheapest_chain,\r\n info.store_count,\r\n info.branch_price,\r\n new Date().toISOString(),\r\n ],\r\n );\r\n}\r\n\r\nexport async function stalePriceBarcodes(barcodes: string[], limit: number): Promise {\r\n if (!barcodes.length) return [];\r\n const placeholders = barcodes.map(() => \"?\").join(\",\");\r\n const rows = await q(\r\n `SELECT barcode, fetched_at FROM sal_price_cache WHERE barcode IN (${placeholders})`,\r\n barcodes,\r\n );\r\n const fresh = new Set(\r\n rows.filter((r) => Date.now() - Date.parse(String(r.fetched_at)) < PRICE_TTL_MS).map((r) => String(r.barcode)),\r\n );\r\n return barcodes.filter((b) => !fresh.has(b)).slice(0, limit);\r\n}\r\n\r\n// ---------- Sync state ----------\r\n\r\nexport interface SyncState {\r\n branch_id: string;\r\n branch_name: string;\r\n next_skip: number;\r\n total: number | null;\r\n done_at: string | null;\r\n updated_at: string | null;\r\n}\r\n\r\nexport async function getSyncStates(): Promise {\r\n const rows = await q(`SELECT * FROM sal_sync_state`);\r\n return rows as unknown as SyncState[];\r\n}\r\n\r\nexport async function upsertSyncState(s: Partial & { branch_id: string }): Promise {\r\n const existing = await q(`SELECT branch_id FROM sal_sync_state WHERE branch_id = ?`, [s.branch_id]);\r\n if (!existing.length) {\r\n await run(\r\n `INSERT INTO sal_sync_state (branch_id, branch_name, next_skip, total, done_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)`,\r\n [s.branch_id, s.branch_name ?? \"\", s.next_skip ?? 0, s.total ?? null, s.done_at ?? null, new Date().toISOString()],\r\n );\r\n return;\r\n }\r\n const sets: string[] = [\"updated_at = ?\"];\r\n const args: any[] = [new Date().toISOString()];\r\n for (const key of [\"branch_name\", \"next_skip\", \"total\", \"done_at\"] as const) {\r\n if (s[key] !== undefined) {\r\n sets.push(`${key} = ?`);\r\n args.push(s[key]);\r\n }\r\n }\r\n args.push(s.branch_id);\r\n await run(`UPDATE sal_sync_state SET ${sets.join(\", \")} WHERE branch_id = ?`, args);\r\n}\r\n\r\nexport async function lastSyncAt(): Promise {\r\n const rows = await q(`SELECT MAX(updated_at) AS t FROM sal_sync_state`);\r\n return rows[0]?.t ? String(rows[0].t) : null;\r\n}\r\n\r\nexport type { SyncBranch };\r\n",[],[176,244],"d1aba5d3-b6c2-415e-9044-b637533de144","cheapersal.ts","f9525e2a-6654-11f1-b751-1607ee4eb77e",10,["D",1781265057129],"import {\r\n getSetting,\r\n getSettingJSON,\r\n setCachedPrice,\r\n setSetting,\r\n setSettingJSON,\r\n upsertCatalogBatch,\r\n} from \"./db.ts\";\r\nimport type { PriceInfo } from \"../shared/types.ts\";\r\n\r\nconst BASE = \"https://api.cheapersal.co.il/api/v1\";\r\n\r\n// Free tier: 100 requests/day, 3,000/month, 10/minute. Keep a margin under the daily cap.\r\nconst DAILY_HARD_CAP = 95;\r\n\r\nexport class CheapersalError extends Error {\r\n code: string;\r\n constructor(message: string, code: string) {\r\n super(message);\r\n this.code = code;\r\n }\r\n}\r\n\r\nexport function hasApiKey(): boolean {\r\n return !!Deno.env.get(\"CHEAPERSAL_API_KEY\");\r\n}\r\n\r\nexport function sleep(ms: number): Promise {\r\n return new Promise((resolve) => setTimeout(resolve, ms));\r\n}\r\n\r\n// ---------- Daily usage accounting (UTC, matches Cheapersal's reset) ----------\r\n\r\ninterface Usage {\r\n date: string;\r\n count: number;\r\n}\r\n\r\nfunction todayUTC(): string {\r\n return new Date().toISOString().slice(0, 10);\r\n}\r\n\r\nexport async function getUsage(): Promise {\r\n const u = await getSettingJSON(\"api_usage\", { date: todayUTC(), count: 0 });\r\n return u.date === todayUTC() ? u : { date: todayUTC(), count: 0 };\r\n}\r\n\r\nasync function bumpUsage(): Promise {\r\n const u = await getUsage();\r\n u.count += 1;\r\n await setSettingJSON(\"api_usage\", u);\r\n}\r\n\r\nexport async function remainingReported(): Promise {\r\n const v = await getSetting(\"api_remaining\");\r\n return v === null ? null : Number(v);\r\n}\r\n\r\n// ---------- Core fetch ----------\r\n\r\nexport async function cheapersalGet(\r\n path: string,\r\n params: Record = {},\r\n opts: { budget?: number } = {},\r\n): Promise {\r\n const key = Deno.env.get(\"CHEAPERSAL_API_KEY\");\r\n if (!key) throw new CheapersalError(\"CHEAPERSAL_API_KEY is not configured\", \"NO_KEY\");\r\n\r\n const usage = await getUsage();\r\n const cap = Math.min(opts.budget ?? DAILY_HARD_CAP, DAILY_HARD_CAP);\r\n if (usage.count >= cap) {\r\n throw new CheapersalError(\"Daily Cheapersal request budget exhausted\", \"BUDGET\");\r\n }\r\n\r\n const url = new URL(BASE + path);\r\n for (const [k, v] of Object.entries(params)) {\r\n if (v !== undefined && v !== \"\") url.searchParams.set(k, String(v));\r\n }\r\n\r\n const res = await fetch(url, { headers: { \"X-API-Key\": key } });\r\n await bumpUsage();\r\n\r\n let body: any = null;\r\n try {\r\n body = await res.json();\r\n } catch {\r\n // non-JSON response; handled below via status\r\n }\r\n const remaining = body?.meta?.usage?.remaining;\r\n if (remaining !== undefined && remaining !== null) {\r\n await setSetting(\"api_remaining\", String(remaining));\r\n }\r\n if (!res.ok || body?.success === false) {\r\n const code = body?.error?.code ?? `HTTP_${res.status}`;\r\n const msg = body?.error?.message ?? `Cheapersal request failed (${res.status})`;\r\n throw new CheapersalError(msg, code);\r\n }\r\n return body?.data;\r\n}\r\n\r\n// ---------- Domain calls ----------\r\n\r\nexport interface PricesResult {\r\n product: { barcode?: string; name?: string; manufacturer?: string; category?: string; unitQty?: string } | null;\r\n average: number | null;\r\n cheapest: number | null;\r\n mostExpensive: number | null;\r\n storeCount: number | null;\r\n cheapestChain: string | null;\r\n branchPrice: number | null;\r\n}\r\n\r\nexport async function fetchPrices(barcode: string, myBranchId?: string | null): Promise {\r\n const data = await cheapersalGet(`/products/${encodeURIComponent(barcode)}/prices`);\r\n const summary = data?.summary ?? {};\r\n let branchPrice: number | null = null;\r\n if (myBranchId && Array.isArray(data?.prices)) {\r\n const hit = data.prices.find((p: any) => p?.branch?.id === myBranchId);\r\n if (hit) branchPrice = hit.promo?.promoPrice ?? hit.price ?? null;\r\n }\r\n return {\r\n product: data?.product ?? null,\r\n average: summary.average ?? null,\r\n cheapest: summary.cheapest ?? null,\r\n mostExpensive: summary.mostExpensive ?? null,\r\n storeCount: summary.storeCount ?? null,\r\n cheapestChain: summary.cheapestChain?.name ?? null,\r\n branchPrice,\r\n };\r\n}\r\n\r\n/**\r\n * Fetch live prices for a barcode, store them in the price cache, and make sure\r\n * the product exists in the local catalog (so future searches find it).\r\n */\r\nexport async function refreshPrice(barcode: string): Promise {\r\n const myBranchId = await getSetting(\"my_branch_id\");\r\n const r = await fetchPrices(barcode, myBranchId);\r\n const info = {\r\n barcode,\r\n avg_price: r.average,\r\n min_price: r.cheapest,\r\n max_price: r.mostExpensive,\r\n cheapest_chain: r.cheapestChain,\r\n store_count: r.storeCount,\r\n branch_price: r.branchPrice,\r\n };\r\n await setCachedPrice(info);\r\n if (r.product?.name) {\r\n await upsertCatalogBatch([{\r\n barcode,\r\n name: r.product.name,\r\n brand: r.product.manufacturer ?? \"\",\r\n category: r.product.category ?? \"\",\r\n unit_qty: r.product.unitQty ?? \"\",\r\n price: r.average,\r\n }]);\r\n }\r\n return { ...info, fetched_at: new Date().toISOString() };\r\n}\r\n\r\nexport interface BranchProductsPage {\r\n products: Array<{ barcode: string; name: string; brand?: string; price?: number; category?: string }>;\r\n total: number;\r\n skip: number;\r\n limit: number;\r\n}\r\n\r\nexport async function getBranchProducts(branchId: string, skip: number, limit = 200, budget?: number): Promise {\r\n const data = await cheapersalGet(\r\n `/branches/${encodeURIComponent(branchId)}/products`,\r\n { skip, limit },\r\n { budget },\r\n );\r\n return {\r\n products: Array.isArray(data?.products) ? data.products : [],\r\n total: Number(data?.total ?? 0),\r\n skip: Number(data?.skip ?? skip),\r\n limit: Number(data?.limit ?? limit),\r\n };\r\n}\r\n\r\nexport async function listBranches(params: { city?: string; chainId?: string; online?: string; limit?: number; skip?: number }): Promise {\r\n return await cheapersalGet(\"/branches\", params as Record);\r\n}\r\n\r\nexport async function listCities(): Promise {\r\n return await cheapersalGet(\"/cities\");\r\n}\r\n",[],[176,252],["D",1781264884030],[205,206,207,208],[176],["D",1781264953400],[],[181],["D",1781264884823],[],[187],["D",1781264881516],["D",1789535451117],{"_97":96,"_105":101},{"_97":96,"_98":99,"_100":101,"_18":54,"_102":103,"_104":24},{"_13":86,"_31":87,"_42":41,"_88":43,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":44,"_95":96},"ctx",{"_79":-5,"_126":306,"_307":308,"_309":310,"_311":24,"_312":24,"_313":24,"_314":124,"_315":-5,"_316":-7,"_317":-7,"_318":60,"_319":24,"_320":24,"_321":-5,"_322":24,"_323":24,"_324":24,"_325":-5},"ENV",{"_277":278,"_279":280,"_281":87,"_282":283,"_284":285,"_286":287,"_288":289,"_290":291,"_292":293,"_294":295,"_296":297,"_298":299,"_300":301,"_302":303,"_304":305},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v13