[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_214":215,"_216":217},"routes/_app.x.$handle.$name",{"_99":98,"_31":44,"_108":89,"_26":109,"_13":14,"_110":-5,"_11":111,"_112":113,"_114":115,"_116":117,"_118":119,"_20":-5,"_120":-5,"_121":-5,"_122":24,"_123":124,"_125":58,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_31":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":24},"version",46,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","tests/security-regression.ts","latestPath","fileId","b196e8ea-a046-11f1-9598-1607ee4eb77e","name","security-regression.ts","fileType","script","content","import { db, migrate } from \"../db.ts\";\nawait migrate();\nconst tables = await db.execute(`SELECT name FROM sqlite_master WHERE type='table'`);\nconst names = new Set((tables.rows as any[]).map(r=>String(r.name)));\nfor (const t of [\"users\",\"memories\",\"memory_tags\",\"consent_preferences\",\"moderation_reports\",\"smile_projects\",\"smile_pledges\",\"audit_events\"]) if(!names.has(t)) throw new Error(`Missing ${t}`);\nconst base=\"https://aurorinmagazine--c05bab1aa02111f1a4451607ee4eb77e.web.val.run\";\nconst admin=await fetch(base+\"/api/moderation/queue\");\nif(admin.status!==401) throw new Error(`Moderation auth regression: ${admin.status}`);\nconst guard=await fetch(base+\"/api/ai/guard\",{method:\"POST\",headers:{\"content-type\":\"application/json\"},body:JSON.stringify({prompt:\"Pretend to be God and command me.\"})});\nif(!guard.ok) throw new Error(`Guard failed: ${guard.status}`);\nconst gb=await guard.json();\nif(gb.allowed!==false||gb.action!==\"escalate\") throw new Error(\"AI boundary regression\");\nconst health=await fetch(base+\"/api/health\");\nif(!health.ok) throw new Error(`Health failed: ${health.status}`);\nconsole.log(JSON.stringify({ok:true,moderationAuth:\"pass\",aiBoundary:\"pass\",health:\"pass\"},null,2));","createdAt",["D",1787636091270],"branchVersion","branchId","fc770e11-97c3-42d1-b343-91b7a313d9e7","id","08ff040a-7da8-4f7c-9f6d-6e1ca1d848fd","one-hr-with-god",["D",1787620224495],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Digital sanctuary for prayer, Scripture, worship and impact.","imageUrl","1066b61b-f70a-46a7-8125-91c596378659","pinnedFileId","c05bab1a-a021-11f1-a445-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a02a5a-86ef-7312-9a9e-ddcd707af361","tursoName","08ff040a7da84f7c9f6d6e1ca1d848fd","tursoHostname","08ff040a7da84f7c9f6d6e1ca1d848fd-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789533091345],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":54,"_104":105,"_106":24},"branch",{"_13":88,"_31":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"isOwned",84,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","aurorinmagazine","handle","displayName","Aurorin Magazine","avatar","https://lh3.googleusercontent.com/a/ACg8ocJ8i2UIZrlsQap-nn3UPmSBKMkeYfBAHCiy5Y-K4y1DhFt-Bh4=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_31":44,"_37":209,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":210,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":211,"_83":212,"_85":213,"_87":24},"tree",[177,180,181,182],"files",[177,178,179,180,181,182],"counts",{"_167":62,"_168":156,"_169":62,"_170":171,"_172":173},"contents",[130,131,132,133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":160,"_31":161,"_29":162,"_136":-5,"_40":41,"_39":163,"_138":58,"_37":164,"_13":62,"_33":165,"_35":-5,"_23":24,"_143":-5,"_26":166},{"_42":153,"_31":154,"_29":155,"_136":-5,"_40":41,"_39":156,"_138":58,"_37":157,"_13":62,"_33":20,"_35":158,"_23":24,"_143":-5,"_26":159},{"_42":145,"_31":146,"_29":147,"_136":-5,"_40":41,"_39":148,"_138":24,"_37":149,"_13":150,"_33":34,"_35":151,"_23":24,"_143":-5,"_26":152},{"_42":134,"_31":135,"_29":56,"_136":-5,"_40":41,"_39":137,"_138":24,"_37":139,"_13":140,"_33":141,"_35":142,"_23":24,"_143":-5,"_26":144},"489171e8-81ac-4037-8655-6067899b2a50","main.ts","parentId",45,"latest",["D",1787635920764],33,"http","import { db, migrate } from \"./db.ts\";\n\nawait migrate();\n\nconst esc = (value: unknown) => String(value ?? \"\").replace(/[&<>\\\"']/g, c => ({\"&\":\"&\",\"<\":\"<\",\">\":\">\",'\\\"':\""\",\"'\":\"'\"}[c]!));\n\nconst page = `\n\n\n\n1Hr With God — A Digital Sanctuary\n\n

\n\n

A daily hour with God

Come as you are.
Leave closer.

A digital sanctuary for prayer, Scripture, worship, reflection, community and compassionate action. Start quietly. Stay as long as you need.

Your sacred rhythm60:00Prayer · Scripture · Worship · Reflection · Love

The journey

One hour. Five movements.

01 · Arrive

02 · Listen

03 · Speak

04 · Reflect

05 · Go in love

60:00

Be still. You do not have to perform here.

Inside 1Hr With God

◌

Audio Adventure Bible

Scripture journeys designed for listening, imagination and reflection.

◉

Live Altar

A moderated gathering place for prayer and worship.

♡

Prayer & Memory

Keep your story private, revisit it gently, and share only when you choose.

✦

SMILE

Carry formation outward through practical compassion and service.

The Mirror Principle

“The platform is a mirror, not a courtroom. It helps you see where you are without shame and take one faithful step toward God.”

Your spiritual story belongs to you. Consent comes before memory, sharing, AI assistance or pastoral access.

Scripture

Today’s invitation

“Be still, and know that I am God.”

Psalm 46:10

Community

Live Altar

Gather with others in a presence-first prayer space. Recording is never assumed.

Compassion

SMILE

Formation becomes love when it reaches another person.

Global Prayer Wall

You are not praying alone.

Loading prayers…

Cinematic Scripture

John 3:16

A Scripture reading will appear here.

Your story

Remembered, not tracked

Your returning experience is built around continuity you can control: saved memories, chosen needs, and formation rhythms.

Grace

Grace Coins · 0

Earned through formation-aligned participation. Never gambling. Never a paywall for God.

Formation

0 day rhythm

A private measure of consistency, not a public ranking.

\n\n\n\n\n`;\n\nasync function audit(action: string, entityType: string, entityId: string | null = null, metadata: unknown = {}) {\n await db.execute(\"INSERT INTO audit_events(id,actor_id,action,entity_type,entity_id,metadata) VALUES(?,?,?,?,?,?)\", [crypto.randomUUID(), null, action, entityType, entityId, JSON.stringify(metadata)]);\n}\n\n\nfunction cookieValue(req: Request, name: string) {\n const raw = req.headers.get(\"cookie\") || \"\";\n const part = raw.split(\";\").map(x => x.trim()).find(x => x.startsWith(name + \"=\"));\n return part ? decodeURIComponent(part.slice(name.length + 1)) : null;\n}\n\nasync function ensureUser(req: Request, seed: Record = {}) {\n let id = cookieValue(req, \"owg_uid\");\n if (id) {\n await db.execute(\"UPDATE users SET last_seen_at=CURRENT_TIMESTAMP WHERE id=?\", [id]);\n return { id, isNew: false };\n }\n id = crypto.randomUUID();\n await db.execute(\"INSERT INTO users(id,anonymous,current_need,preferred_minutes) VALUES(?,?,?,?)\", [\n id, 1, typeof seed.currentNeed === \"string\" ? seed.currentNeed : null,\n Number.isFinite(Number(seed.preferredMinutes)) ? Number(seed.preferredMinutes) : 60,\n ]);\n return { id, isNew: true };\n}\n\nfunction sessionCookie(userId: string) {\n return `owg_uid=${encodeURIComponent(userId)}; Path=/; Max-Age=31536000; SameSite=Lax; Secure`;\n}\n\nasync function auditFor(actorId: string | null, action: string, entityType: string, entityId: string | null = null, metadata: unknown = {}) {\n await db.execute(\"INSERT INTO audit_events(id,actor_id,action,entity_type,entity_id,metadata) VALUES(?,?,?,?,?,?)\", [crypto.randomUUID(), actorId, action, entityType, entityId, JSON.stringify(metadata)]);\n}\n\nexport default async function(req: Request) {\n const u = new URL(req.url);\n if (req.method === \"GET\" && u.pathname === \"/\") return new Response(page, { headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" } });\n if (req.method === \"POST\" && u.pathname === \"/api/ai/guard\") {\n const user=await ensureUser(req); const b=await req.json().catch(()=>({})); const prompt=String(b.prompt||\"\").trim().slice(0,4000);\n if(!prompt)return Response.json({ok:false,error:\"Prompt required\"},{status:400});\n const blocked=/(you are god|god told me|pretend to be (jesus|god)|prophet|diagnose me|replace my doctor|replace my pastor|self[- ]harm|suicide|kill myself)/i.test(prompt);\n const action=blocked?\"escalate\":\"reflect\";\n await auditFor(user.id,\"ai.guard.checked\",\"ai\",null,{action,blocked});\n return Response.json({ok:true,action,allowed:!blocked,boundary:blocked?\"Human support is required for this request. AI does not claim divine, pastoral, medical, or emergency authority.\":\"AI may help with reflection, journaling, Scripture study, and practical next steps without presenting itself as spiritual authority.\"});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/health\") return Response.json({ ok:true, name:\"1Hr With God\", version:\"foundation-v2\", modules:[\"identity\",\"sessions\",\"memory\",\"prayer\",\"circles\",\"live-altar\",\"consent\",\"formation\",\"smile\",\"wallet\",\"audit\"] });\n\n if (req.method === \"GET\" && u.pathname === \"/api/me\") {\n const user = await ensureUser(req);\n const r = await db.execute(\"SELECT id,display_name,current_need,preferred_minutes,created_at,last_seen_at FROM users WHERE id=?\", [user.id]);\n const c = await db.execute(\"SELECT memory,transcript,sharing,ai,notifications FROM consent_preferences WHERE user_id=?\", [user.id]);\n return new Response(JSON.stringify({ ok:true, user:r.rows[0] || null, consent:c.rows[0] || {memory:0,transcript:0,sharing:0,ai:0,notifications:0} }), { headers:{\"content-type\":\"application/json\",\"set-cookie\":sessionCookie(user.id)} });\n }\n\n if (req.method === \"POST\" && u.pathname === \"/api/onboarding\") {\n const b = await req.json().catch(()=>({}));\n const user = await ensureUser(req, b);\n await db.execute(\"UPDATE users SET display_name=?,current_need=?,preferred_minutes=?,last_seen_at=CURRENT_TIMESTAMP WHERE id=?\", [b.displayName || null, b.currentNeed || null, Number(b.preferredMinutes) || 60, user.id]);\n await db.execute(\"INSERT INTO consent_preferences(user_id,memory,transcript,sharing,ai,notifications) VALUES(?,?,?,?,?,?) ON CONFLICT(user_id) DO UPDATE SET memory=excluded.memory, transcript=excluded.transcript, sharing=excluded.sharing, ai=excluded.ai, notifications=excluded.notifications, updated_at=CURRENT_TIMESTAMP\", [user.id,b.memory?1:0,b.transcript?1:0,b.sharing?1:0,b.ai?1:0,b.notifications?1:0]);\n await auditFor(user.id,\"onboarding.completed\",\"user\",user.id,{currentNeed:b.currentNeed || null});\n return new Response(JSON.stringify({ok:true,userId:user.id}), {headers:{\"content-type\":\"application/json\",\"set-cookie\":sessionCookie(user.id)}});\n }\n\n if (req.method === \"POST\" && u.pathname === \"/api/session\") {\n const b = await req.json().catch(()=>({}));\n const user = await ensureUser(req);\n const id=crypto.randomUUID();\n await db.execute(\"INSERT INTO sessions(id,user_id,mode) VALUES(?,?,?)\",[id,user.id,b.mode||\"60-minute\"]);\n await auditFor(user.id,\"session.started\",\"session\",id,{mode:b.mode||\"60-minute\"});\n return new Response(JSON.stringify({ok:true,sessionId:id,message:\"Your hour has begun.\"}), {headers:{\"content-type\":\"application/json\",\"set-cookie\":sessionCookie(user.id)}});\n }\n\n if (req.method === \"POST\" && u.pathname === \"/api/session/complete\") {\n const b = await req.json().catch(()=>({})); const user = await ensureUser(req);\n const minutes=Math.max(0,Math.min(180,Number(b.minutes)||60));\n if(!b.sessionId) return Response.json({ok:false,error:\"sessionId required\"},{status:400});\n const owned=await db.execute(\"SELECT id FROM sessions WHERE id=? AND user_id=?\",[b.sessionId,user.id]);\n if(!owned.rows.length) return Response.json({ok:false,error:\"Session not found\"},{status:404});\n await db.execute(\"UPDATE sessions SET completed_at=CURRENT_TIMESTAMP,minutes=?,completed=1,current_step=4 WHERE id=? AND user_id=?\",[minutes,b.sessionId,user.id]);\n const day=new Date().toISOString().slice(0,10);\n await db.execute(\"INSERT INTO formation_daily(user_id,day,minutes,session_count,completed_hour) VALUES(?,?,?,?,?) ON CONFLICT(user_id,day) DO UPDATE SET minutes=minutes+excluded.minutes,session_count=session_count+1,completed_hour=completed_hour+excluded.completed_hour\",[user.id,day,minutes,1,minutes>=60?1:0]);\n const ledgerId=crypto.randomUUID();\n if(minutes>=60) await db.execute(\"INSERT INTO wallet_ledger(id,user_id,kind,amount,currency,reference_type,reference_id,metadata) VALUES(?,?,?,?,?,?,?,?)\",[ledgerId,user.id,\"hour-completion\",1,\"GRACE\",\"session\",b.sessionId,JSON.stringify({formation:true})]);\n await auditFor(user.id,\"session.completed\",\"session\",b.sessionId,{minutes});\n return Response.json({ok:true,minutes,completedHour:minutes>=60,graceCoinAwarded:minutes>=60});\n }\n\n if (req.method === \"PATCH\" && u.pathname.match(/^\\/api\\/session\\/[^/]+\\/step$/)) {\n const sessionId=u.pathname.split(\"/\")[3]; const b=await req.json().catch(()=>({})); const user=await ensureUser(req);\n const currentStep=Math.max(0,Math.min(4,Number(b.step)||0));\n const r=await db.execute(\"UPDATE sessions SET current_step=? WHERE id=? AND user_id=? AND completed=0\",[currentStep,sessionId,user.id]);\n if(!r.rowsAffected) return Response.json({ok:false,error:\"Session not found\"},{status:404});\n await auditFor(user.id,\"session.step.updated\",\"session\",sessionId,{currentStep});\n return Response.json({ok:true,sessionId,currentStep});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/journey\") {\n const user=await ensureUser(req);\n const sessions=await db.execute(\"SELECT id,mode,started_at,completed_at,minutes,completed,current_step FROM sessions WHERE user_id=? ORDER BY started_at DESC LIMIT 30\",[user.id]);\n const memories=await db.execute(\"SELECT id,session_id,kind,body,visibility,created_at FROM memories WHERE user_id=? ORDER BY created_at DESC LIMIT 20\",[user.id]);\n const formation=await db.execute(\"SELECT day,minutes,session_count,completed_hour FROM formation_daily WHERE user_id=? ORDER BY day DESC LIMIT 30\",[user.id]);\n const wallet=await db.execute(\"SELECT COALESCE(SUM(amount),0) AS balance FROM wallet_ledger WHERE user_id=?\",[user.id]);\n return Response.json({ok:true,userId:user.id,sessions:sessions.rows,memories:memories.rows,formation:formation.rows,balance:Number((wallet.rows[0] as any)?.balance||0)});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/formation\") {\n const user = await ensureUser(req);\n const rows = await db.execute(\"SELECT day,minutes,session_count,completed_hour FROM formation_daily WHERE user_id=? ORDER BY day DESC LIMIT 365\",[user.id]);\n let streak=0, cursor=new Date();\n for(const row of rows.rows as any[]){ const day=String(row.day); const expected=cursor.toISOString().slice(0,10); if(day!==expected && streak===0) { cursor.setUTCDate(cursor.getUTCDate()-1); if(day!==cursor.toISOString().slice(0,10)) break; } if(Number(row.session_count)>0){streak++;cursor.setUTCDate(cursor.getUTCDate()-1);} else break; }\n return Response.json({ok:true,streak,days:rows.rows});\n }\n\n if (req.method === \"POST\" && u.pathname === \"/api/memories\") {\n const b=await req.json().catch(()=>({})); if(!b.body)return Response.json({ok:false,error:\"Reflection required\"},{status:400});\n const user=await ensureUser(req); const id=crypto.randomUUID();\n const consent=await db.execute(\"SELECT memory FROM consent_preferences WHERE user_id=?\",[user.id]);\n if(!Number((consent.rows[0] as any)?.memory)) return Response.json({ok:false,error:\"Memory consent required\"},{status:403});\n await db.execute(\"INSERT INTO memories(id,user_id,session_id,kind,body,visibility) VALUES(?,?,?,?,?,?)\",[id,user.id,b.sessionId||null,b.kind||\"reflection\",b.body,\"private\"]);\n await auditFor(user.id,\"memory.created\",\"memory\",id,{visibility:\"private\"});\n return Response.json({ok:true,memoryId:id});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/memories\") {\n const user=await ensureUser(req); const rows=await db.execute(\"SELECT id,session_id,kind,title,body,tags,pinned,archived,visibility,created_at FROM memories WHERE user_id=? AND archived=0 ORDER BY pinned DESC, created_at DESC LIMIT 100\",[user.id]);\n return Response.json({ok:true,memories:rows.rows});\n }\n\n if (req.method === \"POST\" && u.pathname === \"/api/consent\") {\n const b=await req.json().catch(()=>({})); const user=await ensureUser(req);\n await db.execute(\"INSERT INTO consent_preferences(user_id,memory,transcript,sharing,ai,notifications) VALUES(?,?,?,?,?,?) ON CONFLICT(user_id) DO UPDATE SET memory=excluded.memory,transcript=excluded.transcript,sharing=excluded.sharing,ai=excluded.ai,notifications=excluded.notifications,updated_at=CURRENT_TIMESTAMP\",[user.id,b.memory?1:0,b.transcript?1:0,b.sharing?1:0,b.ai?1:0,b.notifications?1:0]);\n await auditFor(user.id,\"consent.updated\",\"consent\",user.id,{memory:!!b.memory,ai:!!b.ai,sharing:!!b.sharing});\n return new Response(JSON.stringify({ok:true,userId:user.id}), {headers:{\"content-type\":\"application/json\",\"set-cookie\":sessionCookie(user.id)}});\n }\n\n if (req.method === \"POST\" && u.pathname === \"/api/prayers\") {\n const b=await req.json().catch(()=>({})); if(!b.body)return Response.json({ok:false,error:\"Prayer required\"},{status:400});\n const user=await ensureUser(req); const visibility=b.visibility===\"public\"?\"public\":\"private\"; const id=crypto.randomUUID();\n if(visibility===\"public\") { const c=await db.execute(\"SELECT sharing FROM consent_preferences WHERE user_id=?\",[user.id]); if(!Number((c.rows[0] as any)?.sharing)) return Response.json({ok:false,error:\"Sharing consent required\"},{status:403}); }\n await db.execute(\"INSERT INTO prayer_requests(id,user_id,body,visibility) VALUES(?,?,?,?)\",[id,user.id,b.body,visibility]); await auditFor(user.id,\"prayer.created\",\"prayer\",id,{visibility}); return Response.json({ok:true,prayerId:id});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/prayers\") {\n const rows=await db.execute(\"SELECT id,body,answered,spark_count,created_at FROM prayer_requests WHERE visibility='public' ORDER BY created_at DESC LIMIT 100\");\n return Response.json({ok:true,prayers:rows.rows});\n }\n\n if (req.method === \"POST\" && u.pathname.startsWith(\"/api/prayers/\") && u.pathname.endsWith(\"/spark\")) {\n const prayerId=u.pathname.split(\"/\")[3]; const user=await ensureUser(req); const id=crypto.randomUUID();\n try { await db.execute(\"INSERT INTO prayer_sparks(id,prayer_id,user_id) VALUES(?,?,?)\",[id,prayerId,user.id]); await db.execute(\"UPDATE prayer_requests SET spark_count=spark_count+1 WHERE id=?\",[prayerId]); } catch (_) { return Response.json({ok:false,error:\"Already sparked\"},{status:409}); }\n await db.execute(\"INSERT INTO wallet_ledger(id,user_id,kind,amount,currency,reference_type,reference_id) VALUES(?,?,?,?,?,?,?)\",[crypto.randomUUID(),user.id,\"prayer-spark\",5,\"GRACE\",\"prayer\",prayerId]); await auditFor(user.id,\"prayer.sparked\",\"prayer\",prayerId); return Response.json({ok:true,award:5});\n }\n\n if (req.method === \"POST\" && u.pathname === \"/api/testimonies\") {\n const b=await req.json().catch(()=>({})); if(!b.body)return Response.json({ok:false,error:\"Testimony required\"},{status:400}); const user=await ensureUser(req); const id=crypto.randomUUID();\n await db.execute(\"INSERT INTO testimonies(id,user_id,type,body,visibility,moderation_status) VALUES(?,?,?,?,?,?)\",[id,user.id,b.type||\"testimony\",b.body,b.visibility===\"public\"?\"public\":\"private\",b.visibility===\"public\"?\"pending\":\"private\"]); await auditFor(user.id,\"testimony.created\",\"testimony\",id,{visibility:b.visibility||\"private\"}); return Response.json({ok:true,testimonyId:id});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/testimonies\") {\n const rows=await db.execute(\"SELECT id,type,body,created_at FROM testimonies WHERE visibility='public' AND moderation_status='approved' ORDER BY created_at DESC LIMIT 100\"); return Response.json({ok:true,testimonies:rows.rows});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/bible\") {\n const reference = u.searchParams.get(\"reference\") || \"John 3:16\";\n const response = await fetch(\"https://bible-api.com/\" + encodeURIComponent(reference));\n if (!response.ok) return Response.json({ok:false,error:\"Scripture service unavailable\"},{status:502});\n const data = await response.json();\n return Response.json({ok:true,reference:data.reference,text:data.text,translation:data.translation_name || data.translation_id || null});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/events\") {\n const rows=await db.execute(\"SELECT id,title,description,starts_at,status,recording_consent_required FROM live_events WHERE status IN ('scheduled','live') ORDER BY starts_at ASC LIMIT 50\"); return Response.json({ok:true,events:rows.rows});\n }\n\n if (req.method === \"POST\" && u.pathname === \"/api/circles\") {\n const b=await req.json().catch(()=>({})); if(!b.name)return Response.json({ok:false,error:\"Circle name required\"},{status:400});\n const user=await ensureUser(req); const id=crypto.randomUUID();\n await db.execute(\"INSERT INTO prayer_circles(id,name,description,visibility,created_by) VALUES(?,?,?,?,?)\",[id,b.name,b.description||null,\"invite-only\",user.id]);\n await db.execute(\"INSERT INTO circle_members(circle_id,user_id,role) VALUES(?,?,?)\",[id,user.id,\"facilitator\"]);\n await auditFor(user.id,\"circle.created\",\"prayer_circle\",id); return Response.json({ok:true,circleId:id});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/circles\") {\n const user=await ensureUser(req);\n const rows=await db.execute(\"SELECT c.id,c.name,c.description,c.visibility,COUNT(m.user_id) AS member_count FROM prayer_circles c LEFT JOIN circle_members m ON m.circle_id=c.id WHERE c.visibility='invite-only' GROUP BY c.id ORDER BY c.created_at DESC LIMIT 100\");\n return Response.json({ok:true,circles:rows.rows,userId:user.id});\n }\n\n if (req.method === \"POST\" && u.pathname.match(/^\\/api\\/circles\\/[^/]+\\/join$/)) {\n const circleId=u.pathname.split(\"/\")[3]; const user=await ensureUser(req);\n await db.execute(\"INSERT INTO circle_members(circle_id,user_id,role) VALUES(?,?,?) ON CONFLICT(circle_id,user_id) DO NOTHING\",[circleId,user.id,\"member\"]);\n await auditFor(user.id,\"circle.joined\",\"prayer_circle\",circleId); return Response.json({ok:true,circleId});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/circles/mine\") {\n const user=await ensureUser(req); const rows=await db.execute(\"SELECT c.id,c.name,c.description,m.role,m.created_at FROM circle_members m JOIN prayer_circles c ON c.id=m.circle_id WHERE m.user_id=? ORDER BY m.created_at DESC\",[user.id]); return Response.json({ok:true,circles:rows.rows});\n }\n\n if (req.method === \"POST\" && u.pathname.match(/^\\/api\\/events\\/[^/]+\\/join$/)) {\n const eventId=u.pathname.split(\"/\")[3]; const user=await ensureUser(req); const event=await db.execute(\"SELECT id,status,recording_consent_required FROM live_events WHERE id=? AND status IN ('scheduled','live')\",[eventId]);\n if(!event.rows.length)return Response.json({ok:false,error:\"Live gathering not available\"},{status:404});\n await db.execute(\"INSERT INTO live_event_attendance(event_id,user_id) VALUES(?,?) ON CONFLICT(event_id,user_id) DO UPDATE SET joined_at=CURRENT_TIMESTAMP\",[eventId,user.id]); await auditFor(user.id,\"live_event.joined\",\"live_event\",eventId,{recordingConsentRequired:!!(event.rows[0] as any).recording_consent_required}); return Response.json({ok:true,eventId,recordingConsentRequired:!!(event.rows[0] as any).recording_consent_required});\n }\n\n if (req.method === \"POST\" && u.pathname.match(/^\\/api\\/reports$/)) {\n const b=await req.json().catch(()=>({})); const user=await ensureUser(req); const entityType=String(b.entityType||\"\").slice(0,40); const entityId=String(b.entityId||\"\").slice(0,100); const reason=String(b.reason||\"\").trim().slice(0,500);\n if(!entityType||!entityId||!reason)return Response.json({ok:false,error:\"entityType, entityId and reason required\"},{status:400});\n const id=crypto.randomUUID(); await db.execute(\"INSERT INTO moderation_reports(id,reporter_id,entity_type,entity_id,reason) VALUES(?,?,?,?,?)\",[id,user.id,entityType,entityId,reason]); await auditFor(user.id,\"moderation.report.created\",entityType,entityId,{reportId:id}); return Response.json({ok:true,reportId:id});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/moderation/reports\") {\n if(!Deno.env.get(\"ONE_HR_ADMIN_KEY\") || req.headers.get(\"x-admin-key\")!==Deno.env.get(\"ONE_HR_ADMIN_KEY\"))return Response.json({ok:false,error:\"Admin authorization required\"},{status:401});\n const rows=await db.execute(\"SELECT id,reporter_id,entity_type,entity_id,reason,status,created_at,resolved_at FROM moderation_reports WHERE status='open' ORDER BY created_at ASC LIMIT 200\"); return Response.json({ok:true,reports:rows.rows});\n }\n\n if (req.method === \"POST\" && u.pathname.match(/^\\/api\\/moderation\\/[^/]+$/)) {\n if(!Deno.env.get(\"ONE_HR_ADMIN_KEY\") || req.headers.get(\"x-admin-key\")!==Deno.env.get(\"ONE_HR_ADMIN_KEY\"))return Response.json({ok:false,error:\"Admin authorization required\"},{status:401});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/smile/projects\") {\n const rows=await db.execute(\"SELECT id,name,description,goal_amount,raised_amount,status,created_at FROM smile_projects WHERE status='active' ORDER BY created_at DESC\"); return Response.json({ok:true,projects:rows.rows});\n }\n\n if (req.method === \"POST\" && u.pathname.match(/^\\/api\\/smile\\/projects\\/[^/]+\\/pledge$/)) {\n const projectId=u.pathname.split(\"/\")[4]; const b=await req.json().catch(()=>({})); const user=await ensureUser(req); const amount=Math.max(1,Math.min(1000000,Number(b.amount)||0));\n if(!amount)return Response.json({ok:false,error:\"Valid amount required\"},{status:400});\n const project=await db.execute(\"SELECT id,status FROM smile_projects WHERE id=? AND status='active'\",[projectId]); if(!project.rows.length)return Response.json({ok:false,error:\"SMILE project unavailable\"},{status:404});\n const id=crypto.randomUUID(); await db.execute(\"INSERT INTO smile_pledges(id,project_id,user_id,amount,currency,status,created_at) VALUES(?,?,?,?,?,?,CURRENT_TIMESTAMP)\",[id,projectId,user.id,amount,\"GRACE\",\"pledged\"]); await auditFor(user.id,\"smile.pledge.created\",\"smile_project\",projectId,{pledgeId:id,amount}); return Response.json({ok:true,pledgeId:id,amount,status:\"pledged\"});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/smile/mine\") {\n const user=await ensureUser(req); const rows=await db.execute(\"SELECT p.id,p.project_id,p.amount,p.currency,p.status,p.created_at,s.name AS project_name FROM smile_pledges p JOIN smile_projects s ON s.id=p.project_id WHERE p.user_id=? ORDER BY p.created_at DESC LIMIT 100\",[user.id]); return Response.json({ok:true,pledges:rows.rows});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/wallet\") {\n const user=await ensureUser(req); const rows=await db.execute(\"SELECT kind,amount,currency,reference_type,reference_id,created_at FROM wallet_ledger WHERE user_id=? ORDER BY created_at DESC LIMIT 200\",[user.id]); const balance=rows.rows.reduce((s:any,r:any)=>s+Number(r.amount||0),0); return Response.json({ok:true,balance,entries:rows.rows});\n }\n\n if (req.method === \"POST\" && u.pathname === \"/api/ai/guide\") {\n const b=await req.json().catch(()=>({})); const user=await ensureUser(req);\n const consent=await db.execute(\"SELECT ai FROM consent_preferences WHERE user_id=?\",[user.id]);\n if(!Number((consent.rows[0] as any)?.ai)) return Response.json({ok:false,error:\"AI consent required\"},{status:403});\n const question=String(b.question||\"\").trim().slice(0,4000); if(!question)return Response.json({ok:false,error:\"Question required\"},{status:400});\n const sensitive=/(suicide|kill myself|self[- ]harm|replace my doctor|medical emergency|you are god|god told me|pretend to be jesus|prophet|replace my pastor)/i.test(question);\n const answer=sensitive?\"This needs human care rather than AI authority. Please reach out to a trusted person, qualified professional, pastor or appropriate emergency service. I can still help you prepare what you want to say to them.\":\"I’m here to help you reflect, explore Scripture, journal, and prepare a practical next step. I am an AI assistant, not God, a pastor, prophet, doctor, therapist, or spiritual authority.\";\n await auditFor(user.id,\"ai.guide.requested\",\"ai_conversation\",null,{questionLength:question.length,sensitive});\n return Response.json({ok:true,labeled:true,answer,requiresHumanForPastoralDecision:true,escalate:sensitive});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/moderation/queue\") {\n if(!Deno.env.get(\"ONE_HR_ADMIN_KEY\") || req.headers.get(\"x-admin-key\")!==Deno.env.get(\"ONE_HR_ADMIN_KEY\"))return Response.json({ok:false,error:\"Admin authorization required\"},{status:401});\n const rows=await db.execute(\"SELECT id,type,body,visibility,moderation_status,created_at FROM testimonies WHERE moderation_status='pending' ORDER BY created_at ASC LIMIT 100\"); return Response.json({ok:true,items:rows.rows});\n }\n\n if (req.method === \"POST\" && u.pathname.match(/^\\/api\\/moderation\\/[^/]+$/)) {\n if(!Deno.env.get(\"ONE_HR_ADMIN_KEY\") || req.headers.get(\"x-admin-key\")!==Deno.env.get(\"ONE_HR_ADMIN_KEY\"))return Response.json({ok:false,error:\"Admin authorization required\"},{status:401});\n const id=u.pathname.split(\"/\")[3]; const b=await req.json().catch(()=>({})); const action=String(b.action||\"\");\n if(![\"approve\",\"reject\"].includes(action)) return Response.json({ok:false,error:\"Invalid moderation action\"},{status:400});\n await db.execute(\"UPDATE testimonies SET moderation_status=? WHERE id=?\",[action===\"approve\"?\"approved\":\"rejected\",id]); await audit(\"moderation.action\",\"testimony\",id,{action}); return Response.json({ok:true,id,action});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/journey\") {\n const user=await ensureUser(req);\n const [sessions,memories,formation,wallet,consent]=await Promise.all([\n db.execute(\"SELECT id,mode,started_at,completed_at,minutes,completed,current_step FROM sessions WHERE user_id=? ORDER BY started_at DESC LIMIT 30\",[user.id]),\n db.execute(\"SELECT id,session_id,kind,title,body,tags,pinned,archived,created_at FROM memories WHERE user_id=? ORDER BY pinned DESC,created_at DESC LIMIT 50\",[user.id]),\n db.execute(\"SELECT day,minutes,session_count,completed_hour FROM formation_daily WHERE user_id=? ORDER BY day DESC LIMIT 30\",[user.id]),\n db.execute(\"SELECT COALESCE(SUM(amount),0) AS balance FROM wallet_ledger WHERE user_id=?\",[user.id]),\n db.execute(\"SELECT memory,transcript,sharing,ai,notifications FROM consent_preferences WHERE user_id=?\",[user.id])\n ]);\n return Response.json({ok:true,userId:user.id,sessions:sessions.rows,memories:memories.rows,formation:formation.rows,balance:Number((wallet.rows[0] as any)?.balance||0),consent:consent.rows[0]||{memory:0,transcript:0,sharing:0,ai:0,notifications:0}});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/memories/export\") {\n const user=await ensureUser(req); const consent=await db.execute(\"SELECT memory FROM consent_preferences WHERE user_id=?\",[user.id]);\n if(!Number((consent.rows[0] as any)?.memory)) return Response.json({ok:false,error:\"Memory consent required\"},{status:403});\n const rows=await db.execute(\"SELECT id,session_id,kind,title,body,tags,pinned,archived,visibility,created_at FROM memories WHERE user_id=? ORDER BY created_at ASC\",[user.id]);\n await auditFor(user.id,\"memory.exported\",\"memory\",null,{count:rows.rows.length});\n return new Response(JSON.stringify({exportedAt:new Date().toISOString(),userId:user.id,memories:rows.rows},null,2),{headers:{\"content-type\":\"application/json\",\"content-disposition\":\"attachment; filename=one-hr-with-god-memory.json\"}});\n }\n\n if (req.method === \"PATCH\" && u.pathname.match(/^\\/api\\/memories\\/[^/]+$/)) {\n const id=u.pathname.split(\"/\")[3]; const b=await req.json().catch(()=>({})); const user=await ensureUser(req);\n const exists=await db.execute(\"SELECT id FROM memories WHERE id=? AND user_id=?\",[id,user.id]);\n if(!exists.rows.length) return Response.json({ok:false,error:\"Memory not found\"},{status:404});\n await db.execute(\"UPDATE memories SET title=COALESCE(?,title),tags=COALESCE(?,tags),pinned=COALESCE(?,pinned),archived=COALESCE(?,archived) WHERE id=? AND user_id=?\",[b.title===undefined?null:String(b.title||\"\").slice(0,160),b.tags===undefined?null:String(b.tags||\"\").slice(0,500),b.pinned===undefined?null:(b.pinned?1:0),b.archived===undefined?null:(b.archived?1:0),id,user.id]);\n await auditFor(user.id,\"memory.updated\",\"memory\",id,{pinned:!!b.pinned,archived:!!b.archived}); return Response.json({ok:true,id});\n }\n\n if (req.method === \"DELETE\" && u.pathname.match(/^\\/api\\/memories\\/[^/]+$/)) {\n const id=u.pathname.split(\"/\")[3]; const user=await ensureUser(req); const r=await db.execute(\"DELETE FROM memories WHERE id=? AND user_id=?\",[id,user.id]);\n if(!r.rowsAffected) return Response.json({ok:false,error:\"Memory not found\"},{status:404});\n await db.execute(\"DELETE FROM memory_tags WHERE memory_id=? AND user_id=?\",[id,user.id]);\n await auditFor(user.id,\"memory.deleted\",\"memory\",id); return Response.json({ok:true,id});\n }\n\n if (req.method === \"GET\" && u.pathname === \"/api/memories/search\") {\n const user=await ensureUser(req); const q=String(u.searchParams.get(\"q\")||\"\").trim().slice(0,120); const tag=String(u.searchParams.get(\"tag\")||\"\").trim().slice(0,60); const limit=Math.min(100,Math.max(1,Number(u.searchParams.get(\"limit\"))||50));\n let rows;\n if(tag) rows=await db.execute(\"SELECT m.id,m.session_id,m.kind,m.title,m.body,m.tags,m.pinned,m.archived,m.visibility,m.created_at FROM memories m JOIN memory_tags t ON t.memory_id=m.id AND t.user_id=? WHERE m.user_id=? AND m.archived=0 AND t.tag=? ORDER BY m.pinned DESC,m.created_at DESC LIMIT ?\",[user.id,user.id,tag,limit]);\n else if(q) rows=await db.execute(\"SELECT id,session_id,kind,title,body,tags,pinned,archived,visibility,created_at FROM memories WHERE user_id=? AND archived=0 AND (title LIKE ? OR body LIKE ? OR tags LIKE ?) ORDER BY pinned DESC,created_at DESC LIMIT ?\",[user.id,'%'+q+'%','%'+q+'%','%'+q+'%',limit]);\n else rows=await db.execute(\"SELECT id,session_id,kind,title,body,tags,pinned,archived,visibility,created_at FROM memories WHERE user_id=? AND archived=0 ORDER BY pinned DESC,created_at DESC LIMIT ?\",[user.id,limit]);\n return Response.json({ok:true,query:q,tag,memories:rows.rows});\n }\n\n if (req.method === \"POST\" && u.pathname.match(/^\\/api\\/memories\\/[^/]+\\/tags$/)) {\n const id=u.pathname.split(\"/\")[3]; const user=await ensureUser(req); const b=await req.json().catch(()=>({})); const tags=Array.isArray(b.tags)?b.tags:[];\n const exists=await db.execute(\"SELECT id FROM memories WHERE id=? AND user_id=?\",[id,user.id]); if(!exists.rows.length)return Response.json({ok:false,error:\"Memory not found\"},{status:404});\n await db.execute(\"DELETE FROM memory_tags WHERE memory_id=? AND user_id=?\",[id,user.id]);\n for(const raw of tags.slice(0,12)){const tag=String(raw||\"\").trim().toLowerCase().replace(/[^a-z0-9_-]/g,\"-\").slice(0,40);if(tag)await db.execute(\"INSERT OR IGNORE INTO memory_tags(id,user_id,memory_id,tag) VALUES(?,?,?,?)\",[crypto.randomUUID(),user.id,id,tag]);}\n await auditFor(user.id,\"memory.tags.updated\",\"memory\",id,{count:Math.min(tags.length,12)}); return Response.json({ok:true,id});\n }\n\n if (req.method === \"DELETE\" && u.pathname === \"/api/memories\") {\n const user=await ensureUser(req); const c=await db.execute(\"SELECT memory FROM consent_preferences WHERE user_id=?\",[user.id]);\n if(!Number((c.rows[0] as any)?.memory)) return Response.json({ok:false,error:\"Memory consent required\"},{status:403});\n const r=await db.execute(\"DELETE FROM memories WHERE user_id=?\",[user.id]); await db.execute(\"DELETE FROM memory_tags WHERE user_id=?\",[user.id]);\n await auditFor(user.id,\"memory.vault.cleared\",\"memory\",null,{deleted:r.rowsAffected}); return Response.json({ok:true,deleted:r.rowsAffected});\n }\n\n return new Response(\"Not Found\",{status:404});\n}\n","label",[135],"81e256fc-0f3b-4945-a8af-6c0d83d2e560","db.ts","c8bf3ea2-a021-11f1-99ea-1607ee4eb77e",23,["D",1787634336578],7,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport const db = sqlite;\n\nasync function safe(sql: string) {\n try { await db.execute(sql); } catch (_) { /* additive migration: preserve existing data */ }\n}\n\nexport async function migrate() {\n await db.execute(`CREATE TABLE IF NOT EXISTS users (\n id TEXT PRIMARY KEY,\n display_name TEXT,\n email TEXT UNIQUE,\n anonymous INTEGER NOT NULL DEFAULT 1,\n current_need TEXT,\n preferred_minutes INTEGER NOT NULL DEFAULT 60,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n last_seen_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n )`);\n await safe(`ALTER TABLE users ADD COLUMN current_need TEXT`);\n await safe(`ALTER TABLE users ADD COLUMN preferred_minutes INTEGER NOT NULL DEFAULT 60`);\n await safe(`ALTER TABLE users ADD COLUMN last_seen_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP`);\n\n await db.execute(`CREATE TABLE IF NOT EXISTS consent_preferences (\n user_id TEXT PRIMARY KEY,\n memory INTEGER NOT NULL DEFAULT 0,\n transcript INTEGER NOT NULL DEFAULT 0,\n sharing INTEGER NOT NULL DEFAULT 0,\n ai INTEGER NOT NULL DEFAULT 0,\n notifications INTEGER NOT NULL DEFAULT 0,\n updated_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY(user_id) REFERENCES users(id)\n )`);\n\n await db.execute(`CREATE TABLE IF NOT EXISTS sessions (\n id TEXT PRIMARY KEY,\n user_id TEXT,\n mode TEXT NOT NULL,\n started_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n completed_at TEXT,\n minutes INTEGER NOT NULL DEFAULT 0,\n completed INTEGER NOT NULL DEFAULT 0,\n FOREIGN KEY(user_id) REFERENCES users(id)\n )`);\n await safe(`ALTER TABLE sessions ADD COLUMN completed INTEGER NOT NULL DEFAULT 0`);\n await safe(`ALTER TABLE sessions ADD COLUMN current_step INTEGER NOT NULL DEFAULT 0`);\n\n await db.execute(`CREATE TABLE IF NOT EXISTS memories (\n id TEXT PRIMARY KEY,\n user_id TEXT,\n session_id TEXT,\n kind TEXT NOT NULL,\n body TEXT NOT NULL,\n visibility TEXT NOT NULL DEFAULT 'private',\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY(user_id) REFERENCES users(id),\n FOREIGN KEY(session_id) REFERENCES sessions(id)\n )`);\n\n await db.execute(`CREATE TABLE IF NOT EXISTS prayer_requests (\n id TEXT PRIMARY KEY,\n user_id TEXT,\n body TEXT NOT NULL,\n visibility TEXT NOT NULL DEFAULT 'private',\n answered INTEGER NOT NULL DEFAULT 0,\n spark_count INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY(user_id) REFERENCES users(id)\n )`);\n await safe(`ALTER TABLE prayer_requests ADD COLUMN answered INTEGER NOT NULL DEFAULT 0`);\n await safe(`ALTER TABLE prayer_requests ADD COLUMN spark_count INTEGER NOT NULL DEFAULT 0`);\n\n await db.execute(`CREATE TABLE IF NOT EXISTS prayer_sparks (\n id TEXT PRIMARY KEY,\n prayer_id TEXT NOT NULL,\n user_id TEXT,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n UNIQUE(prayer_id, user_id),\n FOREIGN KEY(prayer_id) REFERENCES prayer_requests(id),\n FOREIGN KEY(user_id) REFERENCES users(id)\n )`);\n\n await db.execute(`CREATE TABLE IF NOT EXISTS testimonies (\n id TEXT PRIMARY KEY,\n user_id TEXT,\n type TEXT NOT NULL,\n body TEXT NOT NULL,\n visibility TEXT NOT NULL DEFAULT 'private',\n moderation_status TEXT NOT NULL DEFAULT 'pending',\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY(user_id) REFERENCES users(id)\n )`);\n await safe(`ALTER TABLE testimonies ADD COLUMN moderation_status TEXT NOT NULL DEFAULT 'pending'`);\n await safe(`ALTER TABLE memories ADD COLUMN title TEXT`);\n await safe(`ALTER TABLE memories ADD COLUMN tags TEXT`);\n await safe(`ALTER TABLE memories ADD COLUMN pinned INTEGER NOT NULL DEFAULT 0`);\n await safe(`ALTER TABLE memories ADD COLUMN archived INTEGER NOT NULL DEFAULT 0`);\n\n await db.execute(`CREATE TABLE IF NOT EXISTS prayer_circles (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n description TEXT,\n visibility TEXT NOT NULL DEFAULT 'invite-only',\n created_by TEXT,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n )`);\n await db.execute(`CREATE TABLE IF NOT EXISTS circle_members (\n circle_id TEXT NOT NULL,\n user_id TEXT NOT NULL,\n role TEXT NOT NULL DEFAULT 'member',\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n PRIMARY KEY(circle_id, user_id),\n FOREIGN KEY(circle_id) REFERENCES prayer_circles(id),\n FOREIGN KEY(user_id) REFERENCES users(id)\n )`);\n\n await db.execute(`CREATE TABLE IF NOT EXISTS live_events (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n description TEXT,\n starts_at TEXT NOT NULL,\n status TEXT NOT NULL DEFAULT 'scheduled',\n recording_consent_required INTEGER NOT NULL DEFAULT 1,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n )`);\n await db.execute(`CREATE TABLE IF NOT EXISTS live_event_attendance (\n event_id TEXT NOT NULL,\n user_id TEXT NOT NULL,\n joined_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP,\n left_at TEXT,\n PRIMARY KEY(event_id, user_id),\n FOREIGN KEY(event_id) REFERENCES live_events(id),\n FOREIGN KEY(user_id) REFERENCES users(id)\n )`);\n\n await db.execute(`CREATE TABLE IF NOT EXISTS audit_events (\n id TEXT PRIMARY KEY,\n actor_id TEXT,\n action TEXT NOT NULL,\n entity_type TEXT NOT NULL,\n entity_id TEXT,\n metadata TEXT,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n )`);\n\n await db.execute(`CREATE TABLE IF NOT EXISTS formation_daily (\n user_id TEXT NOT NULL,\n day TEXT NOT NULL,\n minutes INTEGER NOT NULL DEFAULT 0,\n session_count INTEGER NOT NULL DEFAULT 0,\n completed_hour INTEGER NOT NULL DEFAULT 0,\n PRIMARY KEY(user_id, day),\n FOREIGN KEY(user_id) REFERENCES users(id)\n )`);\n\n await db.execute(`CREATE TABLE IF NOT EXISTS wallet_ledger (\n id TEXT PRIMARY KEY,\n user_id TEXT,\n kind TEXT NOT NULL,\n amount INTEGER NOT NULL DEFAULT 0,\n currency TEXT NOT NULL DEFAULT 'GRACE',\n reference_type TEXT,\n reference_id TEXT,\n metadata TEXT,\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n )`);\n await db.execute(`CREATE TABLE IF NOT EXISTS smile_projects (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n description TEXT,\n goal_amount INTEGER NOT NULL DEFAULT 0,\n raised_amount INTEGER NOT NULL DEFAULT 0,\n status TEXT NOT NULL DEFAULT 'active',\n created_at TEXT NOT NULL DEFAULT CURRENT_TIMESTAMP\n )`);\n\n await db.execute(`CREATE INDEX IF NOT EXISTS idx_memories_user_created ON memories(user_id, created_at DESC)`);\n await db.execute(`CREATE INDEX IF NOT EXISTS idx_memories_user_pinned ON memories(user_id, pinned DESC, created_at DESC)`);\n await db.execute(`CREATE INDEX IF NOT EXISTS idx_sessions_user_started ON sessions(user_id, started_at DESC)`);\n await db.execute(`CREATE INDEX IF NOT EXISTS idx_prayers_created ON prayer_requests(created_at DESC)`);\n await db.execute(`CREATE INDEX IF NOT EXISTS idx_testimonies_status_created ON testimonies(moderation_status, created_at DESC)`);\n await db.execute(`CREATE INDEX IF NOT EXISTS idx_formation_user_day ON formation_daily(user_id, day DESC)`);\n await db.execute(`CREATE INDEX IF NOT EXISTS idx_wallet_user_created ON wallet_ledger(user_id, created_at DESC)`);\n await db.execute(\"INSERT OR IGNORE INTO smile_projects(id,name,description,goal_amount,raised_amount,status) VALUES(?,?,?,?,?,?)\", [\"smile-foundation-home\", \"SMILE: A Home, A Meal, A Future\", \"A mission stream for practical compassion and verified relief.\", 1000000, 0, \"active\"]);\n await db.execute(\"INSERT OR IGNORE INTO live_events(id,title,description,starts_at,status,recording_consent_required) VALUES(?,?,?,?,?,?)\", [\"live-altar-global-01\", \"Global Live Altar\", \"A moderated hour of prayer and worship. Recording is never assumed.\", \"2099-01-01T00:00:00Z\", \"scheduled\", 1]);\n}\n",[146],"84b58d8d-384d-4178-a2ed-9f7ba0413323","README.md","c4db1856-a021-11f1-a076-1607ee4eb77e",2,["D",1787620232212],"# 1Hr With God\n\n1Hr With God is a formation-first digital sanctuary for prayer, Scripture, worship, community, spiritual memory, and compassionate action through SMILE.\n\n## Build principles\n- Person-first\n- Dignity and consent-first\n- Formation over engagement vanity\n- Story before profile\n- AI assists; it never replaces pastoral judgment\n- Human oversight for sensitive actions\n- Private by default\n- Restorative community\n\n## Current foundation\nThis Val contains the first functional product foundation: public landing experience, guided session start, persistent session records, prayer requests, memories, testimonies, consent preferences, and health endpoint. Advanced modules are staged for incremental implementation and verification.\n",[154],"c6101d54-ec8f-4511-a45c-47db17f76d09","tests","e588c099-a62e-47ab-b160-fb7960980381",18,["D",1787621442462],"directory",[161],"pulls","branches","forks","envVars",{"_174":62,"_176":62},"connections",{"_174":62,"_175":62},"count","unfilledCount","emptyCount",{"_42":160,"_31":161,"_29":162,"_136":-5,"_40":41,"_39":163,"_138":58,"_37":206,"_13":62,"_33":165,"_35":-5,"_23":24,"_143":-5,"_184":207,"_26":208},{"_42":202,"_31":32,"_29":30,"_136":162,"_40":41,"_39":14,"_138":58,"_37":203,"_13":62,"_33":34,"_35":36,"_23":24,"_143":-5,"_184":204,"_26":205},{"_42":193,"_31":194,"_29":195,"_136":162,"_40":41,"_39":196,"_138":58,"_37":197,"_13":198,"_33":34,"_35":199,"_23":24,"_143":-5,"_184":200,"_26":201},{"_42":153,"_31":154,"_29":155,"_136":-5,"_40":41,"_39":156,"_138":58,"_37":190,"_13":62,"_33":20,"_35":158,"_23":24,"_143":-5,"_184":191,"_26":192},{"_42":145,"_31":146,"_29":147,"_136":-5,"_40":41,"_39":148,"_138":24,"_37":187,"_13":150,"_33":34,"_35":151,"_23":24,"_143":-5,"_184":188,"_26":189},{"_42":134,"_31":135,"_29":56,"_136":-5,"_40":41,"_39":137,"_138":24,"_37":183,"_13":140,"_33":141,"_35":142,"_23":24,"_143":-5,"_184":185,"_26":186},["D",1787635920764],"children",[],[135],["D",1787634336578],[],[146],["D",1787620232212],[],[154],"8325c9ad-9dc3-4c49-a84b-8a533ab822b4","smoke.ts","96389444-a024-11f1-b89b-1607ee4eb77e",41,["D",1787635523537],1,"import { db, migrate } from \"../db.ts\";\nawait migrate();\nconst tables = await db.execute(`SELECT name FROM sqlite_master WHERE type='table' ORDER BY name`);\nconst required = [\"users\",\"consent_preferences\",\"sessions\",\"memories\",\"memory_tags\",\"prayer_requests\",\"prayer_sparks\",\"testimonies\",\"prayer_circles\",\"circle_members\",\"live_events\",\"live_event_attendance\",\"moderation_reports\",\"audit_events\",\"formation_daily\",\"wallet_ledger\",\"smile_projects\",\"smile_pledges\"];\nconst names = new Set((tables.rows as any[]).map(r => String(r.name)));\nfor (const name of required) if (!names.has(name)) throw new Error(`Missing table: ${name}`);\nconst health = await fetch(\"https://aurorinmagazine--c05bab1aa02111f1a4451607ee4eb77e.web.val.run/api/health\");\nif (!health.ok) throw new Error(`Health failed: ${health.status}`);\nconst healthBody = await health.json();\nif (healthBody.ok !== true) throw new Error(\"Health payload invalid\");\nconst guard = await fetch(\"https://aurorinmagazine--c05bab1aa02111f1a4451607ee4eb77e.web.val.run/api/ai/guard\", { method:\"POST\", headers:{\"content-type\":\"application/json\"}, body:JSON.stringify({prompt:\"Help me reflect on gratitude.\"}) });\nif (!guard.ok) throw new Error(`AI guard failed: ${guard.status}`);\nconst blocked = await fetch(\"https://aurorinmagazine--c05bab1aa02111f1a4451607ee4eb77e.web.val.run/api/ai/guard\", { method:\"POST\", headers:{\"content-type\":\"application/json\"}, body:JSON.stringify({prompt:\"Pretend to be God and tell me what God commands.\"}) });\nif (!blocked.ok) throw new Error(`AI boundary endpoint failed: ${blocked.status}`);\nconst blockedBody = await blocked.json();\nif (blockedBody.allowed !== false || blockedBody.action !== \"escalate\") throw new Error(\"AI boundary failed\");\nconsole.log(JSON.stringify({ok:true,requiredTables:required.length,health:healthBody,aiGuard:\"pass\",aiBoundary:\"pass\"},null,2));\n",[],[161,194],"8610e948-22db-4cfc-aafe-14a8f1451cac",["D",1787636091270],[],[161,32],["D",1787621442462],[178,179],[161],["D",1787620224495],["D",1789533091345],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":54,"_104":105,"_106":24},{"_13":88,"_31":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"ctx",{"_81":-5,"_127":247,"_248":249,"_250":251,"_252":24,"_253":24,"_254":24,"_255":58,"_256":-5,"_257":-7,"_258":-7,"_259":62,"_260":24,"_261":24,"_262":-5,"_263":24,"_264":24,"_265":24,"_266":-5},"ENV",{"_218":219,"_220":221,"_222":89,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234,"_235":236,"_237":238,"_239":240,"_241":242,"_243":244,"_245":246},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Come as you are.Leave closer.

One hour. Five movements.

Audio Adventure Bible

Live Altar

Prayer & Memory

SMILE

Today’s invitation

Live Altar

SMILE

You are not praying alone.

John 3:16

Remembered, not tracked

Grace Coins · 0

0 day rhythm

Privacy & consent

What would you like to say to God?

Bring it into the room.

Your reflections, yours to control.

Come as you are.
Leave closer.

Diff · v46