Welcome, Coach

${APP_TAGLINES.primary}

\n \n

${MASCOTS.PHOENIX.emoji}

${MASCOTS.PHOENIX.name}

${MASCOTS.PHOENIX.title}

${MASCOTS.PHOENIX_FORTRESS.emoji}

Combined

Total Dominance

${MASCOTS.FORTRESS.emoji}

${MASCOTS.FORTRESS.name}

${MASCOTS.FORTRESS.title}

\n \n

\n \n \n \n

🔥

4 Offensive Lenses

🏰

4 Defensive Lenses

⚔️🛡️

Phoenix Fortress

🏆

MVP Access

\n \n \n

🏆

Setup Complete!

\n Your Playbook is ready. Time for Total Market Dominance.\n

\n \n

${APP_NAME} v${APP_VERSION}

\n \n \n\n`;\n}",[156],"35cbf50c-d46d-11f0-b618-42dde27851f2","main.ts",27,["D",1765222596746],1,"/**\n * @fileoverview Main entry point for The Playbook application.\n * Sets up the Hono server, middleware, and routes.\n *\n * 🏆 THE PLAYBOOK\n * \"Attack the market. Armor the business.\"\n *\n * @author The Playbook Team\n * @version 3.0.0\n */\n\nimport { Hono } from \"npm:hono@4.4.12\";\nimport {\n APP_NAME,\n APP_TAGLINES,\n APP_VERSION,\n DEFENSIVE_LENSES,\n MASCOTS,\n OFFENSIVE_LENSES,\n TIERS,\n} from \"./config.ts\";\nimport { initializeDatabase, isSetupComplete } from \"./database.ts\";\nimport { getCurrentUser, optionalAuth } from \"./auth.ts\";\nimport { checkSetupRequired } from \"./setup.ts\";\nimport { createApiRouter } from \"./api.ts\";\nimport { generateAppHtml } from \"./ui/pages.ts\";\n\n// =============================================================================\n// APPLICATION INITIALIZATION\n// =============================================================================\n\nconst app = new Hono();\n\n// =============================================================================\n// GLOBAL MIDDLEWARE\n// =============================================================================\n\n/**\n * Database initialization middleware.\n * Ensures database is ready before handling requests.\n */\napp.use(\"*\", async (c, next) => {\n try {\n await initializeDatabase();\n } catch (error) {\n console.error(\"[Playbook] Database initialization failed:\", error);\n return c.text(\"System initialization error. Please try again.\", 500);\n }\n await next();\n});\n\n/**\n * Request logging middleware.\n */\napp.use(\"*\", async (c, next) => {\n const start = Date.now();\n await next();\n const duration = Date.now() - start;\n console.log(\n `[${c.req.method}] ${c.req.path} - ${c.res.status} (${duration}ms)`,\n );\n});\n\n// =============================================================================\n// SETUP WIZARD ROUTE\n// =============================================================================\n\n/**\n * Setup check middleware.\n * Redirects to setup wizard if initial setup hasn't been completed.\n */\napp.use(\"*\", async (c, next) => {\n // Skip setup check for API routes and static assets\n const path = c.req.path;\n if (path.startsWith(\"/api/\") || path.startsWith(\"/static/\")) {\n return next();\n }\n\n const { setupRequired, setupHtml } = await checkSetupRequired();\n\n if (setupRequired && setupHtml) {\n return c.html(setupHtml);\n }\n\n await next();\n});\n\n// =============================================================================\n// API ROUTES\n// =============================================================================\n\n/**\n * Mount API router at /api\n */\nconst apiRouter = createApiRouter();\napp.route(\"/api\", apiRouter);\n\n// =============================================================================\n// MAIN APPLICATION ROUTE\n// =============================================================================\n\n/**\n * GET /\n * Main application page.\n * Renders the full React SPA with user context.\n */\napp.get(\"/\", optionalAuth(), async (c) => {\n const user = await getCurrentUser(c);\n\n // Prepare initial data for client-side hydration\n const initialData = {\n user,\n mascots: MASCOTS,\n tiers: TIERS,\n offensiveLenses: OFFENSIVE_LENSES,\n defensiveLenses: DEFENSIVE_LENSES,\n appName: APP_NAME,\n appTaglines: APP_TAGLINES,\n appVersion: APP_VERSION,\n };\n\n const html = generateAppHtml(initialData);\n return c.html(html);\n});\n\n// =============================================================================\n// FALLBACK ROUTES\n// =============================================================================\n\n/**\n * 404 handler for unmatched routes.\n */\napp.notFound((c) => {\n return c.json(\n {\n error: \"Not Found\",\n message: \"The requested resource does not exist.\",\n path: c.req.path,\n },\n 404,\n );\n});\n\n/**\n * Global error handler.\n */\napp.onError((error, c) => {\n console.error(\"[Playbook] Unhandled error:\", error);\n\n return c.json(\n {\n error: \"Internal Server Error\",\n message: \"Something went wrong. Our team has been notified.\",\n },\n 500,\n );\n});\n\n// =============================================================================\n// EXPORT\n// =============================================================================\n\n/**\n * Export the fetch handler for Val Town.\n */\nexport default app.fetch;",[163],"6e20dcde-d46c-11f0-8b8d-42dde27851f2","engine.ts","5566990e-d46c-11f0-885c-42dde27851f2",17,["D",1765222261751],"/**\n * @fileoverview The Playbook AI Analysis Engine.\n * Handles all AI-powered analysis including belief extraction,\n * offensive/defensive analysis, and combined Phoenix Fortress reports.\n *\n * @author The Playbook Team\n * @version 3.0.0\n */\n\nimport { OpenAI } from \"https://esm.town/v/std/openai?v=5\";\nimport {\n APP_TAGLINES,\n DEFENSIVE_LENSES,\n MASCOTS,\n OFFENSIVE_LENSES,\n} from \"./config.ts\";\nimport type {\n BeliefExtraction,\n DefensiveAnalysisResult,\n Lens,\n OffensiveAnalysisResult,\n PhoenixFortressResult,\n} from \"./types.ts\";\n\n// =============================================================================\n// CONSTANTS\n// =============================================================================\n\n/** Default model for analysis */\nconst DEFAULT_MODEL = \"gpt-4o\";\n\n/** Temperature for creative analysis */\nconst ANALYSIS_TEMPERATURE = 0.7;\n\n/** Maximum tokens for analysis responses */\nconst MAX_TOKENS = 4000;\n\n// =============================================================================\n// PROMPT TEMPLATES\n// =============================================================================\n\n/**\n * System prompt for belief extraction.\n */\nconst BELIEF_EXTRACTION_PROMPT =\n `You are an elite positioning strategist who has coached Fortune 500 CEOs and championship-winning teams.\n\nYour expertise: Extracting the CORE POSITIONING BELIEFS from business copy — the fundamental assumptions, claims, promises, and value propositions embedded in the text.\n\nYou speak with confidence and precision. You see what others miss. You're the coach everyone wants but few can afford.\n\nTASK: Extract 5-7 CORE POSITIONING BELIEFS from the provided copy.\n\nThese beliefs should be:\n- Specific and concrete (not generic fluff)\n- The actual claims being made (explicit or implicit)\n- The value propositions presented\n- The differentiators claimed\n- The promises made to the reader\n\nAlso provide an overall CLARITY SCORE (0-100) based on:\n- Target audience clarity (who is this for?)\n- Differentiation strength (why you vs. anyone else?)\n- Proof and credibility (can they back it up?)\n- Emotional resonance (does it hit different?)\n- Action orientation (do I know what to do next?)\n\nIMPORTANT: Be specific. Generic beliefs like \"we help businesses grow\" are worthless. Dig deeper. Find the real positioning.\n\nReturn ONLY valid JSON in this exact format:\n{\n \"beliefs\": [\"belief 1\", \"belief 2\", \"belief 3\", \"belief 4\", \"belief 5\"],\n \"score\": 75\n}`;\n\n/**\n * Generates the system prompt for offensive analysis.\n *\n * @param lens - The offensive lens to use\n * @returns Complete system prompt\n */\nfunction generateOffensivePrompt(lens: Lens): string {\n return `You are ${lens.name} ${lens.emoji}, an elite OFFENSIVE positioning strategist on The Phoenix Squad 🔥.\n\nTHE PHOENIX: ${MASCOTS.PHOENIX.description}\nBATTLE CRY: \"${MASCOTS.PHOENIX.battleCry}\"\n\nYOUR ROLE: ${lens.description}\nYOUR BIAS: \"${lens.bias}\"\n\nYou analyze positioning to find ATTACK OPPORTUNITIES. You're here to help them WIN, not just survive.\n\nYour analysis focuses on:\n${lens.focus.map((f, i) => `${i + 1}. ${f}`).join(\"\\n\")}\n\nBRAND VOICE - Channel these taglines:\n- \"${APP_TAGLINES.primary}\"\n- \"${APP_TAGLINES.tertiary}\"\n- \"${APP_TAGLINES.quinary}\"\n\nTONE: You're a $10,000/day consultant who genuinely wants them to dominate. Be direct, specific, and actionable. No fluff. No generic advice. Every recommendation should be something they can implement THIS WEEK.\n\nReturn ONLY valid JSON in this exact format:\n{\n \"score\": <0-100 offensive power score>,\n \"strengths\": [\n \"\",\n \"\",\n \"\"\n ],\n \"gaps\": [\n \"\",\n \"\",\n \"\"\n ],\n \"plays\": [\n \"\",\n \"\",\n \"\",\n \"\",\n \"\"\n ],\n \"summary\": \"<2-3 paragraph executive summary in markdown. Start with what's working (be specific), then the gaps (be direct), then the killer insight that changes everything. Use **bold** for emphasis and > for key insights.>\"\n}`;\n}\n\n/**\n * Generates the system prompt for defensive analysis.\n *\n * @param lens - The defensive lens to use\n * @returns Complete system prompt\n */\nfunction generateDefensivePrompt(lens: Lens): string {\n return `You are ${lens.name} ${lens.emoji}, an elite DEFENSIVE positioning strategist on The Fortress Squad 🏰.\n\nTHE FORTRESS: ${MASCOTS.FORTRESS.description}\nBATTLE CRY: \"${MASCOTS.FORTRESS.battleCry}\"\n\nYOUR ROLE: ${lens.description}\nYOUR BIAS: \"${lens.bias}\"\n\nYou analyze positioning to find VULNERABILITIES before the market does. You're here to help them SURVIVE and PROTECT what they've built.\n\nYour analysis focuses on:\n${lens.focus.map((f, i) => `${i + 1}. ${f}`).join(\"\\n\")}\n\nBRAND VOICE - Channel these taglines:\n- \"${APP_TAGLINES.primary}\"\n- \"${APP_TAGLINES.quaternary}\"\n- \"${APP_TAGLINES.quinary}\"\n\nTONE: You're a battle-hardened strategist who has seen companies fail from the exact vulnerabilities you're identifying. Be direct, specific, and protective. No sugarcoating. Every fortification should address a REAL risk.\n\nReturn ONLY valid JSON in this exact format:\n{\n \"score\": <0-100 defensive strength score>,\n \"protected\": [\n \"\",\n \"\",\n \"\"\n ],\n \"exposed\": [\n \"\",\n \"\",\n \"\"\n ],\n \"fortifications\": [\n \"\",\n \"\",\n \"\",\n \"\",\n \"\"\n ],\n \"summary\": \"<2-3 paragraph executive summary in markdown. Start with what's protected (be specific), then the exposures (be direct about risks), then the critical insight they MUST act on. Use **bold** for emphasis and > for key warnings.>\"\n}`;\n}\n\n/**\n * System prompt for Phoenix Fortress combined analysis.\n */\nconst PHOENIX_FORTRESS_PROMPT =\n `You are THE PHOENIX FORTRESS ⚔️🛡️ — the ultimate fusion of offensive firepower and defensive invincibility.\n\n${MASCOTS.PHOENIX_FORTRESS.description}\n\nBATTLE CRY: \"${MASCOTS.PHOENIX_FORTRESS.battleCry}\"\n\nWhen the Unstoppable Force meets the Immovable Object, you get TOTAL MARKET DOMINANCE.\n\nYou provide the COMPLETE strategic picture:\n\n🔥 OFFENSIVE (The Phoenix):\n- Market opportunities they're missing\n- Conversion optimization gaps\n- Viral and referral potential\n- Premium positioning opportunities\n\n🏰 DEFENSIVE (The Fortress):\n- Skeptic-proofing requirements\n- Competitor attack vectors\n- Risk and compliance issues\n- Retention and churn risks\n\nBRAND VOICE - You embody ALL the taglines:\n- \"${APP_TAGLINES.primary}\"\n- \"${APP_TAGLINES.secondary}\"\n- \"${APP_TAGLINES.tertiary}\"\n- \"${APP_TAGLINES.quaternary}\"\n- \"${APP_TAGLINES.quinary}\"\n\nTONE: You're the $50,000 strategic engagement. The boardroom-level insight. The game-changing perspective that justifies the investment. Be comprehensive, be specific, and deliver the \"cheat code\" — the ONE insight that changes everything.\n\nReturn ONLY valid JSON in this exact format:\n{\n \"offensiveScore\": <0-100>,\n \"defensiveScore\": <0-100>,\n \"combinedScore\": <0-100 overall readiness score>,\n \"executiveSummary\": \"<3-4 paragraph strategic overview in markdown. This is the boardroom-ready brief. What's the situation? What's the opportunity? What's the risk? What's the play? Use headers (##), **bold**, and > for key insights.>\",\n \"topPlays\": [\n \"<#1 highest-impact OFFENSIVE move - specific and actionable>\",\n \"<#2 offensive priority>\",\n \"<#3 offensive priority>\",\n \"<#4 offensive priority>\",\n \"<#5 offensive priority>\"\n ],\n \"criticalFortifications\": [\n \"<#1 most urgent DEFENSIVE priority - specific and actionable>\",\n \"<#2 defensive priority>\",\n \"<#3 defensive priority>\",\n \"<#4 defensive priority>\",\n \"<#5 defensive priority>\"\n ],\n \"ultimateStrategy\": \"\"\n}`;\n\n// =============================================================================\n// PLAYBOOK ENGINE CLASS\n// =============================================================================\n\n/**\n * The Playbook Engine - AI-powered positioning analysis.\n *\n * Provides three types of analysis:\n * 1. Belief Extraction - Core positioning beliefs from copy\n * 2. Offensive Analysis (Phoenix) - Market attack opportunities\n * 3. Defensive Analysis (Fortress) - Vulnerability identification\n * 4. Phoenix Fortress - Combined full-spectrum analysis\n *\n * @example\n * ```typescript\n * const engine = new PlaybookEngine();\n * const beliefs = await engine.extractBeliefs(documentText);\n * const offense = await engine.runOffensiveAnalysis(documentText, lens);\n * ```\n */\nexport class PlaybookEngine {\n private openai: OpenAI;\n\n /**\n * Creates a new PlaybookEngine instance.\n */\n constructor() {\n this.openai = new OpenAI();\n }\n\n // ===========================================================================\n // BELIEF EXTRACTION\n // ===========================================================================\n\n /**\n * Extracts core positioning beliefs from document text.\n *\n * @param text - The document text to analyze\n * @returns Extracted beliefs and clarity score\n *\n * @example\n * ```typescript\n * const { beliefs, score } = await engine.extractBeliefs(copyText);\n * console.log(`Clarity Score: ${score}/100`);\n * beliefs.forEach((belief, i) => console.log(`${i + 1}. ${belief}`));\n * ```\n */\n async extractBeliefs(text: string): Promise {\n try {\n const completion = await this.openai.chat.completions.create({\n model: DEFAULT_MODEL,\n temperature: ANALYSIS_TEMPERATURE,\n max_tokens: MAX_TOKENS,\n messages: [\n { role: \"system\", content: BELIEF_EXTRACTION_PROMPT },\n { role: \"user\", content: text },\n ],\n response_format: { type: \"json_object\" },\n });\n\n const content = completion.choices[0]?.message?.content;\n\n if (!content) {\n throw new Error(\"No content in response\");\n }\n\n const parsed = JSON.parse(content);\n\n return {\n beliefs: Array.isArray(parsed.beliefs) ? parsed.beliefs : [],\n score: typeof parsed.score === \"number\" ? parsed.score : 0,\n };\n } catch (error) {\n console.error(\"[PlaybookEngine] Belief extraction failed:\", error);\n\n return {\n beliefs: [\n \"Unable to extract beliefs. Please try again with different content.\",\n ],\n score: 0,\n };\n }\n }\n\n // ===========================================================================\n // OFFENSIVE ANALYSIS (PHOENIX SQUAD)\n // ===========================================================================\n\n /**\n * Runs an offensive analysis using a Phoenix Squad lens.\n *\n * @param text - The document text to analyze\n * @param lensId - The offensive lens ID to use\n * @returns Offensive analysis result\n * @throws Error if lens not found\n *\n * @example\n * ```typescript\n * const result = await engine.runOffensiveAnalysis(copyText, \"MarketDisruptor\");\n * console.log(`Offensive Score: ${result.score}/100`);\n * result.plays.forEach(play => console.log(`→ ${play}`));\n * ```\n */\n async runOffensiveAnalysis(\n text: string,\n lensId: string,\n ): Promise {\n const lens = OFFENSIVE_LENSES.find((l) => l.id === lensId);\n\n if (!lens) {\n throw new Error(`Unknown offensive lens: ${lensId}`);\n }\n\n try {\n const completion = await this.openai.chat.completions.create({\n model: DEFAULT_MODEL,\n temperature: ANALYSIS_TEMPERATURE,\n max_tokens: MAX_TOKENS,\n messages: [\n { role: \"system\", content: generateOffensivePrompt(lens as Lens) },\n { role: \"user\", content: text },\n ],\n response_format: { type: \"json_object\" },\n });\n\n const content = completion.choices[0]?.message?.content;\n\n if (!content) {\n throw new Error(\"No content in response\");\n }\n\n const parsed = JSON.parse(content);\n\n return {\n score: typeof parsed.score === \"number\" ? parsed.score : 0,\n strengths: Array.isArray(parsed.strengths) ? parsed.strengths : [],\n gaps: Array.isArray(parsed.gaps) ? parsed.gaps : [],\n plays: Array.isArray(parsed.plays) ? parsed.plays : [],\n summary: typeof parsed.summary === \"string\"\n ? parsed.summary\n : \"Analysis unavailable.\",\n };\n } catch (error) {\n console.error(\n `[PlaybookEngine] Offensive analysis (${lensId}) failed:`,\n error,\n );\n\n return {\n score: 0,\n strengths: [],\n gaps: [],\n plays: [],\n summary: \"Unable to generate offensive analysis. Please try again.\",\n };\n }\n }\n\n // ===========================================================================\n // DEFENSIVE ANALYSIS (FORTRESS SQUAD)\n // ===========================================================================\n\n /**\n * Runs a defensive analysis using a Fortress Squad lens.\n *\n * @param text - The document text to analyze\n * @param lensId - The defensive lens ID to use\n * @returns Defensive analysis result\n * @throws Error if lens not found\n *\n * @example\n * ```typescript\n * const result = await engine.runDefensiveAnalysis(copyText, \"SkepticalProspect\");\n * console.log(`Defensive Score: ${result.score}/100`);\n * result.fortifications.forEach(fort => console.log(`🛡️ ${fort}`));\n * ```\n */\n async runDefensiveAnalysis(\n text: string,\n lensId: string,\n ): Promise {\n const lens = DEFENSIVE_LENSES.find((l) => l.id === lensId);\n\n if (!lens) {\n throw new Error(`Unknown defensive lens: ${lensId}`);\n }\n\n try {\n const completion = await this.openai.chat.completions.create({\n model: DEFAULT_MODEL,\n temperature: ANALYSIS_TEMPERATURE,\n max_tokens: MAX_TOKENS,\n messages: [\n { role: \"system\", content: generateDefensivePrompt(lens as Lens) },\n { role: \"user\", content: text },\n ],\n response_format: { type: \"json_object\" },\n });\n\n const content = completion.choices[0]?.message?.content;\n\n if (!content) {\n throw new Error(\"No content in response\");\n }\n\n const parsed = JSON.parse(content);\n\n return {\n score: typeof parsed.score === \"number\" ? parsed.score : 0,\n protected: Array.isArray(parsed.protected) ? parsed.protected : [],\n exposed: Array.isArray(parsed.exposed) ? parsed.exposed : [],\n fortifications: Array.isArray(parsed.fortifications)\n ? parsed.fortifications\n : [],\n summary: typeof parsed.summary === \"string\"\n ? parsed.summary\n : \"Analysis unavailable.\",\n };\n } catch (error) {\n console.error(\n `[PlaybookEngine] Defensive analysis (${lensId}) failed:`,\n error,\n );\n\n return {\n score: 0,\n protected: [],\n exposed: [],\n fortifications: [],\n summary: \"Unable to generate defensive analysis. Please try again.\",\n };\n }\n }\n\n // ===========================================================================\n // PHOENIX FORTRESS COMBINED ANALYSIS\n // ===========================================================================\n\n /**\n * Runs a full Phoenix Fortress combined analysis.\n * This is the premium analysis that covers both offense and defense.\n *\n * @param text - The document text to analyze\n * @returns Combined Phoenix Fortress result\n *\n * @example\n * ```typescript\n * const result = await engine.runPhoenixFortressAnalysis(copyText);\n * console.log(`Combined Score: ${result.combinedScore}/100`);\n * console.log(`Ultimate Strategy: ${result.ultimateStrategy}`);\n * ```\n */\n async runPhoenixFortressAnalysis(\n text: string,\n ): Promise {\n try {\n const completion = await this.openai.chat.completions.create({\n model: DEFAULT_MODEL,\n temperature: ANALYSIS_TEMPERATURE,\n max_tokens: MAX_TOKENS,\n messages: [\n { role: \"system\", content: PHOENIX_FORTRESS_PROMPT },\n { role: \"user\", content: text },\n ],\n response_format: { type: \"json_object\" },\n });\n\n const content = completion.choices[0]?.message?.content;\n\n if (!content) {\n throw new Error(\"No content in response\");\n }\n\n const parsed = JSON.parse(content);\n\n return {\n offensiveScore: typeof parsed.offensiveScore === \"number\"\n ? parsed.offensiveScore\n : 0,\n defensiveScore: typeof parsed.defensiveScore === \"number\"\n ? parsed.defensiveScore\n : 0,\n combinedScore: typeof parsed.combinedScore === \"number\"\n ? parsed.combinedScore\n : 0,\n executiveSummary: typeof parsed.executiveSummary === \"string\"\n ? parsed.executiveSummary\n : \"Executive summary unavailable.\",\n topPlays: Array.isArray(parsed.topPlays) ? parsed.topPlays : [],\n criticalFortifications: Array.isArray(parsed.criticalFortifications)\n ? parsed.criticalFortifications\n : [],\n ultimateStrategy: typeof parsed.ultimateStrategy === \"string\"\n ? parsed.ultimateStrategy\n : \"Unable to generate ultimate strategy.\",\n };\n } catch (error) {\n console.error(\n \"[PlaybookEngine] Phoenix Fortress analysis failed:\",\n error,\n );\n\n return {\n offensiveScore: 0,\n defensiveScore: 0,\n combinedScore: 0,\n executiveSummary:\n \"Unable to generate combined analysis. Please try again.\",\n topPlays: [],\n criticalFortifications: [],\n ultimateStrategy: \"Analysis failed. Please retry.\",\n };\n }\n }\n}\n\n// =============================================================================\n// SINGLETON INSTANCE\n// =============================================================================\n\n/** Singleton engine instance for reuse across requests */\nlet engineInstance: PlaybookEngine | null = null;\n\n/**\n * Gets or creates the PlaybookEngine singleton instance.\n *\n * @returns The PlaybookEngine instance\n */\nexport function getEngine(): PlaybookEngine {\n if (!engineInstance) {\n engineInstance = new PlaybookEngine();\n }\n return engineInstance;\n}\n\n// =============================================================================\n// UTILITY FUNCTIONS\n// =============================================================================\n\n/**\n * Validates that text meets minimum requirements for analysis.\n *\n * @param text - The text to validate\n * @param minWords - Minimum word count (default 50)\n * @returns Validation result with message\n */\nexport function validateTextForAnalysis(\n text: string,\n minWords: number = 50,\n): { valid: boolean; message: string; wordCount: number } {\n const words = text.split(/\\s+/).filter((word) => word.length > 0);\n const wordCount = words.length;\n\n if (wordCount < minWords) {\n return {\n valid: false,\n message:\n `Document needs at least ${minWords} words for meaningful analysis. Current: ${wordCount} words.`,\n wordCount,\n };\n }\n\n if (text.trim().length < 200) {\n return {\n valid: false,\n message:\n \"Document content is too short. Please provide more detailed positioning copy.\",\n wordCount,\n };\n }\n\n return {\n valid: true,\n message: \"Document is ready for analysis.\",\n wordCount,\n };\n}\n\n/**\n * Calculates a combined score from offensive and defensive scores.\n * Uses weighted average favoring the lower score to encourage balance.\n *\n * @param offensiveScore - Score from offensive analysis\n * @param defensiveScore - Score from defensive analysis\n * @returns Combined score (0-100)\n */\nexport function calculateCombinedScore(\n offensiveScore: number,\n defensiveScore: number,\n): number {\n // Weight the lower score more heavily to encourage balance\n const minScore = Math.min(offensiveScore, defensiveScore);\n const maxScore = Math.max(offensiveScore, defensiveScore);\n\n // 60% weight to lower score, 40% to higher\n const combined = (minScore * 0.6) + (maxScore * 0.4);\n\n return Math.round(combined);\n}",[170],"10a6dfc2-d46c-11f0-97f4-42dde27851f2","database.ts","f56798f0-d46b-11f0-a466-42dde27851f2",11,["D",1765222104931],"/**\n * @fileoverview Database schema, migrations, and CRUD operations for The Playbook.\n * Handles all SQLite interactions with type-safe wrappers.\n *\n * @author The Playbook Team\n * @version 3.0.0\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite?v=6\";\nimport { nanoid } from \"npm:nanoid@5.0.7\";\nimport { DB_VERSION, SETUP_COMPLETE_KEY } from \"./config.ts\";\nimport type {\n CreateSessionInput,\n DatabaseRow,\n Document,\n DocumentStatus,\n DocumentSummary,\n Session,\n SetupConfig,\n StoredAnalysis,\n TierId,\n User,\n} from \"./types.ts\";\n\n// =============================================================================\n// DATABASE INITIALIZATION & MIGRATIONS\n// =============================================================================\n\n/**\n * SQL statements for creating database tables.\n * Executed in order during initialization.\n */\nconst SCHEMA_MIGRATIONS: string[] = [\n // Users table\n `CREATE TABLE IF NOT EXISTS users (\n id TEXT PRIMARY KEY,\n email TEXT UNIQUE NOT NULL,\n name TEXT,\n tier TEXT DEFAULT 'tier_rookie',\n avatar_url TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n updated_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )`,\n\n // Sessions table\n `CREATE TABLE IF NOT EXISTS sessions (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n expires_at DATETIME NOT NULL,\n user_agent TEXT,\n ip_address TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY(user_id) REFERENCES users(id) ON DELETE CASCADE\n )`,\n\n // Documents table\n `CREATE TABLE IF NOT EXISTS documents (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n title TEXT NOT NULL,\n text_content TEXT NOT NULL,\n word_count INTEGER DEFAULT 0,\n status TEXT DEFAULT 'pending',\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n updated_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY(user_id) REFERENCES users(id) ON DELETE CASCADE\n )`,\n\n // Analyses table\n `CREATE TABLE IF NOT EXISTS analyses (\n id TEXT PRIMARY KEY,\n document_id TEXT NOT NULL,\n lens_id TEXT NOT NULL,\n squad TEXT NOT NULL,\n analysis_json TEXT,\n score INTEGER DEFAULT 0,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY(document_id) REFERENCES documents(id) ON DELETE CASCADE\n )`,\n\n // Playbook reports (combined analyses)\n `CREATE TABLE IF NOT EXISTS playbook_reports (\n id TEXT PRIMARY KEY,\n user_id TEXT NOT NULL,\n document_id TEXT NOT NULL,\n report_json TEXT,\n offensive_score INTEGER,\n defensive_score INTEGER,\n combined_score INTEGER,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP,\n FOREIGN KEY(user_id) REFERENCES users(id) ON DELETE CASCADE,\n FOREIGN KEY(document_id) REFERENCES documents(id) ON DELETE CASCADE\n )`,\n\n // System configuration (for setup wizard, etc.)\n `CREATE TABLE IF NOT EXISTS system_config (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL,\n updated_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )`,\n\n // Usage logs for analytics\n `CREATE TABLE IF NOT EXISTS usage_logs (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id TEXT NOT NULL,\n action TEXT NOT NULL,\n metadata_json TEXT,\n created_at DATETIME DEFAULT CURRENT_TIMESTAMP\n )`,\n\n // Create indexes for performance\n `CREATE INDEX IF NOT EXISTS idx_sessions_user ON sessions(user_id)`,\n `CREATE INDEX IF NOT EXISTS idx_sessions_expires ON sessions(expires_at)`,\n `CREATE INDEX IF NOT EXISTS idx_documents_user ON documents(user_id)`,\n `CREATE INDEX IF NOT EXISTS idx_analyses_document ON analyses(document_id)`,\n `CREATE INDEX IF NOT EXISTS idx_usage_user ON usage_logs(user_id)`,\n];\n\n/**\n * Initializes the database schema.\n * Runs all migrations in sequence, skipping any that already exist.\n *\n * @returns Promise that resolves when initialization is complete\n * @throws Error if a critical migration fails\n */\nexport async function initializeDatabase(): Promise {\n console.log(`[Database] Initializing schema v${DB_VERSION}...`);\n\n for (const migration of SCHEMA_MIGRATIONS) {\n try {\n await sqlite.execute(migration);\n } catch (error) {\n // Log but don't throw for \"already exists\" errors\n const errorMessage = error instanceof Error\n ? error.message\n : String(error);\n if (!errorMessage.includes(\"already exists\")) {\n console.error(`[Database] Migration error:`, errorMessage);\n }\n }\n }\n\n console.log(`[Database] Schema initialization complete.`);\n}\n\n// =============================================================================\n// ROW PARSING HELPERS\n// =============================================================================\n\n/**\n * Safely extracts a value from a database row.\n * Handles both array and object row formats from sqlite driver.\n *\n * @param row - The database row\n * @param key - The column name (for object format)\n * @param index - The column index (for array format)\n * @returns The extracted value or undefined\n */\nfunction extractValue(row: DatabaseRow, key: string, index: number): unknown {\n if (Array.isArray(row)) {\n return row[index];\n }\n if (typeof row === \"object\" && row !== null) {\n return (row as Record)[key];\n }\n return undefined;\n}\n\n/**\n * Parses a database row into a User object.\n */\nfunction parseUserRow(row: DatabaseRow): User {\n return {\n id: String(extractValue(row, \"id\", 0)),\n email: String(extractValue(row, \"email\", 1)),\n name: extractValue(row, \"name\", 2) as string | null,\n tier: String(extractValue(row, \"tier\", 3)) as TierId,\n avatarUrl: extractValue(row, \"avatar_url\", 4) as string | undefined,\n createdAt: String(extractValue(row, \"created_at\", 5)),\n };\n}\n\n/**\n * Parses a database row into a Document object.\n */\nfunction parseDocumentRow(row: DatabaseRow): Document {\n return {\n id: String(extractValue(row, \"id\", 0)),\n userId: String(extractValue(row, \"user_id\", 1)),\n title: String(extractValue(row, \"title\", 2)),\n textContent: String(extractValue(row, \"text_content\", 3)),\n wordCount: Number(extractValue(row, \"word_count\", 4)) || 0,\n status: String(extractValue(row, \"status\", 5)) as DocumentStatus,\n createdAt: String(extractValue(row, \"created_at\", 6)),\n };\n}\n\n/**\n * Parses a database row into a DocumentSummary object.\n */\nfunction parseDocumentSummaryRow(row: DatabaseRow): DocumentSummary {\n return {\n id: String(extractValue(row, \"id\", 0)),\n title: String(extractValue(row, \"title\", 1)),\n wordCount: Number(extractValue(row, \"word_count\", 2)) || 0,\n status: String(extractValue(row, \"status\", 3)) as DocumentStatus,\n createdAt: String(extractValue(row, \"created_at\", 4)),\n };\n}\n\n// =============================================================================\n// SETUP CONFIGURATION OPERATIONS\n// =============================================================================\n\n/**\n * Checks if the initial setup wizard has been completed.\n *\n * @returns Promise - true if setup is complete\n */\nexport async function isSetupComplete(): Promise {\n try {\n const result = await sqlite.execute({\n sql: `SELECT value FROM system_config WHERE key = ?`,\n args: [SETUP_COMPLETE_KEY],\n });\n\n if (result.rows.length === 0) {\n return false;\n }\n\n const value = extractValue(result.rows[0], \"value\", 0);\n return value === \"true\";\n } catch {\n // Table might not exist yet\n return false;\n }\n}\n\n/**\n * Marks the setup wizard as complete.\n *\n * @param config - Optional configuration to store\n */\nexport async function completeSetup(\n config?: Partial,\n): Promise {\n const now = new Date().toISOString();\n\n await sqlite.execute({\n sql:\n `INSERT OR REPLACE INTO system_config (key, value, updated_at) VALUES (?, ?, ?)`,\n args: [SETUP_COMPLETE_KEY, \"true\", now],\n });\n\n if (config?.adminUserId) {\n await sqlite.execute({\n sql:\n `INSERT OR REPLACE INTO system_config (key, value, updated_at) VALUES (?, ?, ?)`,\n args: [\"admin_user_id\", config.adminUserId, now],\n });\n }\n}\n\n/**\n * Gets the current setup configuration.\n */\nexport async function getSetupConfig(): Promise {\n const result = await sqlite.execute({\n sql: `SELECT key, value FROM system_config WHERE key IN (?, ?, ?)`,\n args: [SETUP_COMPLETE_KEY, \"admin_user_id\", \"completed_at\"],\n });\n\n const config: SetupConfig = { isComplete: false };\n\n for (const row of result.rows) {\n const key = extractValue(row, \"key\", 0);\n const value = extractValue(row, \"value\", 1);\n\n if (key === SETUP_COMPLETE_KEY) {\n config.isComplete = value === \"true\";\n } else if (key === \"admin_user_id\") {\n config.adminUserId = String(value);\n } else if (key === \"completed_at\") {\n config.completedAt = String(value);\n }\n }\n\n return config;\n}\n\n// =============================================================================\n// USER OPERATIONS\n// =============================================================================\n\n/**\n * Finds a user by their email address.\n *\n * @param email - The email to search for\n * @returns The user if found, null otherwise\n */\nexport async function findUserByEmail(email: string): Promise {\n const result = await sqlite.execute({\n sql:\n `SELECT id, email, name, tier, avatar_url, created_at FROM users WHERE email = ?`,\n args: [email],\n });\n\n if (result.rows.length === 0) {\n return null;\n }\n\n return parseUserRow(result.rows[0]);\n}\n\n/**\n * Finds a user by their ID.\n *\n * @param id - The user ID\n * @returns The user if found, null otherwise\n */\nexport async function findUserById(id: string): Promise {\n const result = await sqlite.execute({\n sql:\n `SELECT id, email, name, tier, avatar_url, created_at FROM users WHERE id = ?`,\n args: [id],\n });\n\n if (result.rows.length === 0) {\n return null;\n }\n\n return parseUserRow(result.rows[0]);\n}\n\n/**\n * Creates a new user.\n *\n * @param email - User's email address\n * @param name - Optional display name\n * @param tier - Initial tier (defaults to rookie)\n * @returns The created user\n */\nexport async function createUser(\n email: string,\n name?: string,\n tier: TierId = \"tier_rookie\",\n): Promise {\n const id = `usr_${nanoid(16)}`;\n const now = new Date().toISOString();\n\n await sqlite.execute({\n sql:\n `INSERT INTO users (id, email, name, tier, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?)`,\n args: [id, email, name || null, tier, now, now],\n });\n\n return {\n id,\n email,\n name: name || null,\n tier,\n createdAt: now,\n };\n}\n\n/**\n * Updates a user's tier.\n *\n * @param userId - The user's ID\n * @param tier - The new tier\n */\nexport async function updateUserTier(\n userId: string,\n tier: TierId,\n): Promise {\n const now = new Date().toISOString();\n\n await sqlite.execute({\n sql: `UPDATE users SET tier = ?, updated_at = ? WHERE id = ?`,\n args: [tier, now, userId],\n });\n}\n\n/**\n * Updates a user's profile information.\n *\n * @param userId - The user's ID\n * @param updates - Fields to update\n */\nexport async function updateUserProfile(\n userId: string,\n updates: { name?: string; avatarUrl?: string },\n): Promise {\n const now = new Date().toISOString();\n const setClauses: string[] = [\"updated_at = ?\"];\n const args: (string | null)[] = [now];\n\n if (updates.name !== undefined) {\n setClauses.push(\"name = ?\");\n args.push(updates.name);\n }\n\n if (updates.avatarUrl !== undefined) {\n setClauses.push(\"avatar_url = ?\");\n args.push(updates.avatarUrl);\n }\n\n args.push(userId);\n\n await sqlite.execute({\n sql: `UPDATE users SET ${setClauses.join(\", \")} WHERE id = ?`,\n args,\n });\n}\n\n// =============================================================================\n// SESSION OPERATIONS\n// =============================================================================\n\n/**\n * Creates a new session for a user.\n *\n * @param input - Session creation parameters\n * @returns The session ID\n */\nexport async function createSession(\n input: CreateSessionInput,\n): Promise {\n const { userId, userAgent, ipAddress } = input;\n const sessionId = `sess_${nanoid(32)}`;\n const now = new Date();\n const expiresAt = new Date(now.getTime() + 30 * 24 * 60 * 60 * 1000); // 30 days\n\n await sqlite.execute({\n sql:\n `INSERT INTO sessions (id, user_id, expires_at, user_agent, ip_address, created_at) \n VALUES (?, ?, ?, ?, ?, ?)`,\n args: [\n sessionId,\n userId,\n expiresAt.toISOString(),\n userAgent || null,\n ipAddress || null,\n now.toISOString(),\n ],\n });\n\n return sessionId;\n}\n\n/**\n * Validates a session and returns the associated user.\n *\n * @param sessionId - The session ID to validate\n * @returns The user if session is valid, null otherwise\n */\nexport async function validateSession(sessionId: string): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT u.id, u.email, u.name, u.tier, u.avatar_url, u.created_at, s.expires_at\n FROM sessions s\n JOIN users u ON s.user_id = u.id\n WHERE s.id = ?\n `,\n args: [sessionId],\n });\n\n if (result.rows.length === 0) {\n return null;\n }\n\n const row = result.rows[0];\n const expiresAt = new Date(String(extractValue(row, \"expires_at\", 6)));\n\n if (expiresAt < new Date()) {\n // Session expired, clean it up\n await deleteSession(sessionId);\n return null;\n }\n\n return parseUserRow(row);\n}\n\n/**\n * Deletes a session.\n *\n * @param sessionId - The session ID to delete\n */\nexport async function deleteSession(sessionId: string): Promise {\n await sqlite.execute({\n sql: `DELETE FROM sessions WHERE id = ?`,\n args: [sessionId],\n });\n}\n\n/**\n * Deletes all sessions for a user.\n *\n * @param userId - The user ID\n */\nexport async function deleteUserSessions(userId: string): Promise {\n await sqlite.execute({\n sql: `DELETE FROM sessions WHERE user_id = ?`,\n args: [userId],\n });\n}\n\n/**\n * Cleans up expired sessions.\n *\n * @returns Number of sessions deleted\n */\nexport async function cleanupExpiredSessions(): Promise {\n const result = await sqlite.execute({\n sql: `DELETE FROM sessions WHERE expires_at < datetime('now')`,\n args: [],\n });\n\n return result.rowsAffected || 0;\n}\n\n// =============================================================================\n// DOCUMENT OPERATIONS\n// =============================================================================\n\n/**\n * Creates a new document.\n *\n * @param userId - Owner's user ID\n * @param title - Document title\n * @param textContent - Full text content\n * @returns The created document\n */\nexport async function createDocument(\n userId: string,\n title: string,\n textContent: string,\n): Promise {\n const id = `doc_${nanoid(24)}`;\n const now = new Date().toISOString();\n const wordCount =\n textContent.split(/\\s+/).filter((word) => word.length > 0).length;\n\n await sqlite.execute({\n sql:\n `INSERT INTO documents (id, user_id, title, text_content, word_count, status, created_at, updated_at)\n VALUES (?, ?, ?, ?, ?, 'pending', ?, ?)`,\n args: [id, userId, title, textContent, wordCount, now, now],\n });\n\n return {\n id,\n userId,\n title,\n textContent,\n wordCount,\n status: \"pending\",\n createdAt: now,\n };\n}\n\n/**\n * Gets a document by ID with ownership verification.\n *\n * @param documentId - The document ID\n * @param userId - The expected owner's ID\n * @returns The document if found and owned by user, null otherwise\n */\nexport async function getDocument(\n documentId: string,\n userId: string,\n): Promise {\n const result = await sqlite.execute({\n sql:\n `SELECT id, user_id, title, text_content, word_count, status, created_at\n FROM documents WHERE id = ? AND user_id = ?`,\n args: [documentId, userId],\n });\n\n if (result.rows.length === 0) {\n return null;\n }\n\n return parseDocumentRow(result.rows[0]);\n}\n\n/**\n * Gets all documents for a user.\n *\n * @param userId - The user's ID\n * @returns Array of document summaries\n */\nexport async function getUserDocuments(\n userId: string,\n): Promise {\n const result = await sqlite.execute({\n sql: `SELECT id, title, word_count, status, created_at\n FROM documents WHERE user_id = ? ORDER BY created_at DESC`,\n args: [userId],\n });\n\n return result.rows.map(parseDocumentSummaryRow);\n}\n\n/**\n * Counts documents created by a user in the current month.\n *\n * @param userId - The user's ID\n * @returns Number of documents this month\n */\nexport async function countUserDocumentsThisMonth(\n userId: string,\n): Promise {\n const result = await sqlite.execute({\n sql: `SELECT COUNT(id) as count FROM documents \n WHERE user_id = ? AND created_at > date('now', '-30 days')`,\n args: [userId],\n });\n\n if (result.rows.length === 0) {\n return 0;\n }\n\n const count = extractValue(result.rows[0], \"count\", 0);\n return Number(count) || 0;\n}\n\n/**\n * Updates a document's status.\n *\n * @param documentId - The document ID\n * @param status - The new status\n */\nexport async function updateDocumentStatus(\n documentId: string,\n status: DocumentStatus,\n): Promise {\n const now = new Date().toISOString();\n\n await sqlite.execute({\n sql: `UPDATE documents SET status = ?, updated_at = ? WHERE id = ?`,\n args: [status, now, documentId],\n });\n}\n\n/**\n * Deletes a document and all associated analyses.\n *\n * @param documentId - The document ID\n * @param userId - The owner's ID for verification\n * @returns true if deleted, false if not found\n */\nexport async function deleteDocument(\n documentId: string,\n userId: string,\n): Promise {\n // First verify ownership\n const doc = await getDocument(documentId, userId);\n if (!doc) {\n return false;\n }\n\n // Delete associated analyses first\n await sqlite.execute({\n sql: `DELETE FROM analyses WHERE document_id = ?`,\n args: [documentId],\n });\n\n // Delete associated reports\n await sqlite.execute({\n sql: `DELETE FROM playbook_reports WHERE document_id = ?`,\n args: [documentId],\n });\n\n // Delete the document\n await sqlite.execute({\n sql: `DELETE FROM documents WHERE id = ?`,\n args: [documentId],\n });\n\n return true;\n}\n\n// =============================================================================\n// ANALYSIS OPERATIONS\n// =============================================================================\n\n/**\n * Stores an analysis result.\n *\n * @param documentId - The analyzed document's ID\n * @param lensId - The lens used\n * @param squad - Which squad (phoenix/fortress/combined)\n * @param analysisJson - JSON-encoded analysis result\n * @param score - Numeric score\n * @returns The analysis ID\n */\nexport async function storeAnalysis(\n documentId: string,\n lensId: string,\n squad: \"phoenix\" | \"fortress\" | \"combined\",\n analysisJson: string,\n score: number,\n): Promise {\n const id = `anl_${nanoid(20)}`;\n const now = new Date().toISOString();\n\n await sqlite.execute({\n sql:\n `INSERT INTO analyses (id, document_id, lens_id, squad, analysis_json, score, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [id, documentId, lensId, squad, analysisJson, score, now],\n });\n\n return id;\n}\n\n/**\n * Gets all analyses for a document.\n *\n * @param documentId - The document ID\n * @returns Array of stored analyses\n */\nexport async function getDocumentAnalyses(\n documentId: string,\n): Promise {\n const result = await sqlite.execute({\n sql:\n `SELECT id, document_id, lens_id, squad, analysis_json, score, created_at\n FROM analyses WHERE document_id = ? ORDER BY created_at DESC`,\n args: [documentId],\n });\n\n return result.rows.map((row) => ({\n id: String(extractValue(row, \"id\", 0)),\n documentId: String(extractValue(row, \"document_id\", 1)),\n lensId: String(extractValue(row, \"lens_id\", 2)),\n squad: String(extractValue(row, \"squad\", 3)) as\n | \"phoenix\"\n | \"fortress\"\n | \"combined\",\n analysisJson: String(extractValue(row, \"analysis_json\", 4)),\n score: Number(extractValue(row, \"score\", 5)) || 0,\n createdAt: String(extractValue(row, \"created_at\", 6)),\n }));\n}\n\n/**\n * Gets the core beliefs analysis for a document.\n *\n * @param documentId - The document ID\n * @returns Beliefs and score, or null if not found\n */\nexport async function getDocumentBeliefs(\n documentId: string,\n): Promise<{ beliefs: string[]; score: number } | null> {\n const result = await sqlite.execute({\n sql: `SELECT analysis_json, score FROM analyses \n WHERE document_id = ? AND lens_id = 'core_beliefs' \n ORDER BY created_at DESC LIMIT 1`,\n args: [documentId],\n });\n\n if (result.rows.length === 0) {\n return null;\n }\n\n const row = result.rows[0];\n const analysisJson = String(extractValue(row, \"analysis_json\", 0));\n const score = Number(extractValue(row, \"score\", 1)) || 0;\n\n try {\n const beliefs = JSON.parse(analysisJson);\n return { beliefs: Array.isArray(beliefs) ? beliefs : [], score };\n } catch {\n return { beliefs: [], score };\n }\n}\n\n/**\n * Stores a Phoenix Fortress combined report.\n *\n * @param userId - The user's ID\n * @param documentId - The document ID\n * @param reportJson - JSON-encoded full report\n * @param scores - Individual and combined scores\n * @returns The report ID\n */\nexport async function storePlaybookReport(\n userId: string,\n documentId: string,\n reportJson: string,\n scores: { offensive: number; defensive: number; combined: number },\n): Promise {\n const id = `rpt_${nanoid(20)}`;\n const now = new Date().toISOString();\n\n await sqlite.execute({\n sql: `INSERT INTO playbook_reports \n (id, user_id, document_id, report_json, offensive_score, defensive_score, combined_score, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n id,\n userId,\n documentId,\n reportJson,\n scores.offensive,\n scores.defensive,\n scores.combined,\n now,\n ],\n });\n\n return id;\n}\n\n// =============================================================================\n// USAGE LOGGING\n// =============================================================================\n\n/**\n * Logs a user action for analytics.\n *\n * @param userId - The user's ID\n * @param action - Action identifier\n * @param metadata - Optional metadata object\n */\nexport async function logUsage(\n userId: string,\n action: string,\n metadata?: Record,\n): Promise {\n await sqlite.execute({\n sql: `INSERT INTO usage_logs (user_id, action, metadata_json, created_at)\n VALUES (?, ?, ?, datetime('now'))`,\n args: [userId, action, metadata ? JSON.stringify(metadata) : null],\n });\n}\n\n/**\n * Gets usage statistics for a user.\n *\n * @param userId - The user's ID\n * @param days - Number of days to look back\n * @returns Usage counts by action type\n */\nexport async function getUserUsageStats(\n userId: string,\n days: number = 30,\n): Promise> {\n const result = await sqlite.execute({\n sql: `SELECT action, COUNT(*) as count FROM usage_logs \n WHERE user_id = ? AND created_at > date('now', '-' || ? || ' days')\n GROUP BY action`,\n args: [userId, days],\n });\n\n const stats: Record = {};\n\n for (const row of result.rows) {\n const action = String(extractValue(row, \"action\", 0));\n const count = Number(extractValue(row, \"count\", 1)) || 0;\n stats[action] = count;\n }\n\n return stats;\n}",[177],"e05b2ec4-d464-11f0-9124-42dde27851f2","config.ts","d92426c4-d464-11f0-999d-42dde27851f2",4,["D",1765219017427],"/**\n * @fileoverview Core configuration for The Playbook application.\n * Contains all constants, mascot definitions, tier structures, and lens catalogs.\n *\n * @author The Playbook Team\n * @version 3.0.0\n */\n\n// =============================================================================\n// APPLICATION METADATA\n// =============================================================================\n\n/** Application display name */\nexport const APP_NAME = \"The Playbook\" as const;\n\n/** Application version following semver */\nexport const APP_VERSION = \"3.0.0\" as const;\n\n/** Database schema version for migrations */\nexport const DB_VERSION = 15 as const;\n\n/**\n * Collection of brand taglines used throughout the application.\n * Each represents a core value proposition.\n */\nexport const APP_TAGLINES = {\n /** Primary brand message - the core promise */\n primary: \"Attack the market. Armor the business.\",\n /** Secondary - emphasizes comprehensive coverage */\n secondary: \"Every angle. Every outcome. Every advantage.\",\n /** Tertiary - speaks to insider knowledge */\n tertiary: \"The plays they don't teach. The defense they can't break.\",\n /** Quaternary - outcome focused */\n quaternary: \"Win the deal. Survive the scrutiny.\",\n /** Quinary - tribal knowledge angle */\n quinary: \"Tribal knowledge, weaponized.\",\n} as const;\n\n// =============================================================================\n// SESSION CONFIGURATION\n// =============================================================================\n\n/** Session duration in seconds (30 days) */\nexport const SESSION_DURATION_SECONDS = 60 * 60 * 24 * 30;\n\n/** Cookie name for session storage */\nexport const SESSION_COOKIE_NAME = \"playbook_session_v3\";\n\n/** Key used in database to track setup completion */\nexport const SETUP_COMPLETE_KEY = \"playbook_setup_complete\";\n\n// =============================================================================\n// 🎭 MASCOT DEFINITIONS\n// =============================================================================\n\n/**\n * The Phoenix - Offensive mascot representing the Unstoppable Force.\n * Specializes in finding market opportunities and attack vectors.\n */\nexport const PHOENIX = {\n id: \"phoenix\",\n name: \"The Phoenix\",\n emoji: \"🔥\",\n title: \"The Unstoppable Force\",\n domain: \"OFFENSE\",\n colors: {\n primary: \"#f59e0b\",\n secondary: \"#dc2626\",\n glow: \"rgba(245, 158, 11, 0.4)\",\n },\n gradient: \"linear-gradient(135deg, #f59e0b, #dc2626)\",\n description:\n \"Rising from every setback, striking with precision. The Phoenix finds \" +\n \"opportunities others miss and turns your positioning into a weapon.\",\n battleCry: \"Rise. Strike. Dominate.\",\n} as const;\n\n/**\n * The Fortress - Defensive mascot representing the Immovable Object.\n * Specializes in protecting positioning and finding vulnerabilities.\n */\nexport const FORTRESS = {\n id: \"fortress\",\n name: \"The Fortress\",\n emoji: \"🏰\",\n title: \"The Immovable Object\",\n domain: \"DEFENSE\",\n colors: {\n primary: \"#0ea5e9\",\n secondary: \"#3b82f6\",\n glow: \"rgba(14, 165, 233, 0.4)\",\n },\n gradient: \"linear-gradient(135deg, #0ea5e9, #3b82f6)\",\n description:\n \"Walls that don't break. Strategy that doesn't fail. The Fortress \" +\n \"protects your position from every angle of attack.\",\n battleCry: \"Stand. Shield. Survive.\",\n} as const;\n\n/**\n * Phoenix Fortress - Combined mascot for premium full-spectrum analysis.\n * Represents the fusion of offensive and defensive capabilities.\n */\nexport const PHOENIX_FORTRESS = {\n id: \"phoenix_fortress\",\n name: \"Phoenix Fortress\",\n emoji: \"⚔️🛡️\",\n title: \"Total Market Dominance\",\n domain: \"FULL SPECTRUM\",\n colors: {\n primary: \"#a855f7\",\n secondary: \"#6366f1\",\n glow: \"rgba(168, 85, 247, 0.4)\",\n },\n gradient: \"linear-gradient(135deg, #f59e0b, #a855f7, #0ea5e9)\",\n description:\n \"When the Unstoppable Force and Immovable Object unite. Complete \" +\n \"offensive + defensive strategic command.\",\n battleCry: \"Total. Market. Dominance.\",\n} as const;\n\n/** Aggregated mascot collection for easy access */\nexport const MASCOTS = {\n PHOENIX,\n FORTRESS,\n PHOENIX_FORTRESS,\n} as const;\n\n// =============================================================================\n// 💰 TIER DEFINITIONS\n// =============================================================================\n\n/**\n * Rookie Tier - Free tier for new users.\n * Limited access to test the platform.\n */\nexport const TIER_ROOKIE = {\n id: \"tier_rookie\",\n name: \"Rookie\",\n price: 0,\n priceDisplay: \"Free\",\n badge: \"🌱\",\n description:\n \"Perfect for testing the waters. Get a taste of elite positioning intelligence.\",\n limits: {\n docsPerMonth: 3,\n offensiveLenses: [\"MarketDisruptor\"] as string[],\n defensiveLenses: [\"SkepticalProspect\"] as string[],\n phoenixFortress: false,\n exportPdf: false,\n teamSeats: 1,\n prioritySupport: false,\n },\n} as const;\n\n/**\n * Starter Tier - Professional tier for serious practitioners.\n * Full lens access and combined analysis.\n */\nexport const TIER_STARTER = {\n id: \"tier_starter\",\n name: \"Starter\",\n price: 7900,\n priceDisplay: \"$79/mo\",\n badge: \"⭐\",\n description:\n \"The essential toolkit for consultants and solo practitioners ready to dominate.\",\n limits: {\n docsPerMonth: 50,\n offensiveLenses: \"ALL\" as const,\n defensiveLenses: \"ALL\" as const,\n phoenixFortress: true,\n exportPdf: true,\n teamSeats: 1,\n prioritySupport: false,\n },\n} as const;\n\n/**\n * MVP Tier - Premium tier for agencies and teams.\n * Everything unlocked plus team features.\n */\nexport const TIER_MVP = {\n id: \"tier_mvp\",\n name: \"MVP\",\n price: 19900,\n priceDisplay: \"$199/mo\",\n badge: \"🏆\",\n description:\n \"Full-scale platform for teams. White-label reporting and priority support.\",\n limits: {\n docsPerMonth: 500,\n offensiveLenses: \"ALL\" as const,\n defensiveLenses: \"ALL\" as const,\n phoenixFortress: true,\n exportPdf: true,\n teamSeats: 10,\n prioritySupport: true,\n whiteLabel: true,\n },\n} as const;\n\n/** Aggregated tier collection */\nexport const TIERS = {\n ROOKIE: TIER_ROOKIE,\n STARTER: TIER_STARTER,\n MVP: TIER_MVP,\n} as const;\n\n/** Tier IDs as a type-safe array */\nexport const TIER_IDS = [\n TIER_ROOKIE.id,\n TIER_STARTER.id,\n TIER_MVP.id,\n] as const;\n\n// =============================================================================\n// 🔥 OFFENSIVE LENSES - THE PHOENIX SQUAD\n// =============================================================================\n\n/**\n * Offensive lens definitions for market attack analysis.\n * Each lens provides a unique perspective on positioning opportunities.\n */\nexport const OFFENSIVE_LENSES = [\n {\n id: \"MarketDisruptor\",\n name: \"The Market Disruptor\",\n emoji: \"💥\",\n squad: \"phoenix\" as const,\n description:\n \"Finds blue ocean opportunities and gaps your competitors are blind to.\",\n bias: \"If you're not zigging while they zag, you're invisible.\",\n focus: [\n \"Unique positioning opportunities\",\n \"Competitor blind spots to exploit\",\n \"Differentiation gaps in messaging\",\n \"Blue ocean vs red ocean strategy\",\n \"First-mover advantages being missed\",\n ],\n requiredTier: \"tier_rookie\",\n },\n {\n id: \"TheCloser\",\n name: \"The Closer\",\n emoji: \"🎯\",\n squad: \"phoenix\" as const,\n description:\n \"Identifies conversion killers, urgency gaps, and CTA weakness.\",\n bias: \"Every word either sells or stalls. There is no neutral.\",\n focus: [\n \"Call-to-action strength and clarity\",\n \"Urgency and scarcity triggers\",\n \"Objection handling in copy\",\n \"Decision friction points\",\n \"The 'why now' factor\",\n ],\n requiredTier: \"tier_starter\",\n },\n {\n id: \"ViralArchitect\",\n name: \"The Viral Architect\",\n emoji: \"🚀\",\n squad: \"phoenix\" as const,\n description:\n \"Evaluates shareability, referral hooks, and organic growth loops.\",\n bias:\n \"If they can't explain you in 10 seconds, they won't explain you at all.\",\n focus: [\n \"Word-of-mouth trigger points\",\n \"Referral-ready messaging\",\n \"Social proof integration\",\n \"Shareable soundbites and hooks\",\n \"Network effect potential\",\n ],\n requiredTier: \"tier_starter\",\n },\n {\n id: \"PremiumPositioner\",\n name: \"The Premium Positioner\",\n emoji: \"👑\",\n squad: \"phoenix\" as const,\n description:\n \"Audits value justification, pricing psychology, and exclusivity signals.\",\n bias:\n \"Cheap is a strategy. Expensive is a strategy. Confused is a disaster.\",\n focus: [\n \"Price-to-value perception\",\n \"Premium positioning signals\",\n \"Exclusivity and scarcity framing\",\n \"ROI and outcome articulation\",\n \"Luxury vs commodity positioning\",\n ],\n requiredTier: \"tier_starter\",\n },\n] as const;\n\n// =============================================================================\n// 🏰 DEFENSIVE LENSES - THE FORTRESS SQUAD\n// =============================================================================\n\n/**\n * Defensive lens definitions for vulnerability and risk analysis.\n * Each lens identifies potential weaknesses before the market does.\n */\nexport const DEFENSIVE_LENSES = [\n {\n id: \"SkepticalProspect\",\n name: \"The Skeptical Prospect\",\n emoji: \"🤨\",\n squad: \"fortress\" as const,\n description: \"Hunts for vague claims, missing proof, and trust gaps.\",\n bias: \"Prove it or lose it. I've been burned before.\",\n focus: [\n \"Unsubstantiated claims\",\n \"Missing social proof\",\n \"Credibility gaps\",\n \"Trust signal weaknesses\",\n \"Specificity vs vagueness\",\n ],\n requiredTier: \"tier_rookie\",\n },\n {\n id: \"CompetitorStrategist\",\n name: \"The Competitor's Strategist\",\n emoji: \"🕵️\",\n squad: \"fortress\" as const,\n description:\n \"Thinks like your rival — finds how they'd attack your positioning.\",\n bias: \"I see your flank. Trust me, they see it too.\",\n focus: [\n \"Competitive vulnerabilities\",\n \"Positioning gaps rivals will exploit\",\n \"Defensive messaging weaknesses\",\n \"Market position defensibility\",\n \"Counter-positioning risks\",\n ],\n requiredTier: \"tier_starter\",\n },\n {\n id: \"RiskAuditor\",\n name: \"The Risk Auditor\",\n emoji: \"⚠️\",\n squad: \"fortress\" as const,\n description:\n \"Spots compliance gaps, legal landmines, and reputation risks.\",\n bias: \"What can go wrong, will go wrong. Let's find it first.\",\n focus: [\n \"Overpromise and underdeliver risks\",\n \"Compliance and regulatory flags\",\n \"Reputation vulnerability points\",\n \"Crisis scenario triggers\",\n \"Legal exposure in claims\",\n ],\n requiredTier: \"tier_starter\",\n },\n {\n id: \"ChurnProphet\",\n name: \"The Churn Prophet\",\n emoji: \"🔮\",\n squad: \"fortress\" as const,\n description:\n \"Predicts retention risks, expectation mismatches, and buyer's remorse triggers.\",\n bias: \"Winning the deal means nothing if you lose the client in 90 days.\",\n focus: [\n \"Expectation vs delivery gaps\",\n \"Onboarding friction signals\",\n \"Long-term value clarity\",\n \"Buyer's remorse triggers\",\n \"Retention risk factors\",\n ],\n requiredTier: \"tier_starter\",\n },\n] as const;\n\n/** Combined lens catalog */\nexport const ALL_LENSES = [...OFFENSIVE_LENSES, ...DEFENSIVE_LENSES] as const;\n\n// =============================================================================\n// VALIDATION CONSTRAINTS\n// =============================================================================\n\n/** Document upload constraints */\nexport const DOCUMENT_CONSTRAINTS = {\n /** Minimum word count for meaningful analysis */\n minWords: 50,\n /** Maximum word count to prevent abuse */\n maxWords: 50000,\n /** Minimum character count */\n minChars: 200,\n /** Maximum character count */\n maxChars: 250000,\n /** Maximum title length */\n maxTitleLength: 255,\n} as const;",[184],"2fd48fc0-d46c-11f0-b4b2-42dde27851f2","auth.ts","216abe0a-d46c-11f0-b028-42dde27851f2",14,["D",1765222157243],"/**\n * @fileoverview Authentication service for The Playbook.\n * Handles user registration, session management, and access control.\n *\n * @author The Playbook Team\n * @version 3.0.0\n */\n\nimport { deleteCookie, getCookie, setCookie } from \"npm:hono@4.4.12/cookie\";\nimport type { Context } from \"npm:hono@4.4.12\";\nimport {\n SESSION_COOKIE_NAME,\n SESSION_DURATION_SECONDS,\n TIERS,\n} from \"./config.ts\";\nimport {\n createSession,\n createUser,\n deleteSession,\n findUserByEmail,\n findUserById,\n validateSession,\n} from \"./database.ts\";\nimport type { Lens, TierId, User } from \"./types.ts\";\n\n// =============================================================================\n// SESSION MANAGEMENT\n// =============================================================================\n\n/**\n * Cookie options for session storage.\n */\nconst SESSION_COOKIE_OPTIONS = {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\" as const,\n maxAge: SESSION_DURATION_SECONDS,\n path: \"/\",\n};\n\n/**\n * Extracts the session ID from the request cookies.\n *\n * @param c - Hono context\n * @returns Session ID or undefined\n */\nexport function getSessionId(c: Context): string | undefined {\n return getCookie(c, SESSION_COOKIE_NAME);\n}\n\n/**\n * Sets the session cookie on the response.\n *\n * @param c - Hono context\n * @param sessionId - The session ID to set\n */\nexport function setSessionCookie(c: Context, sessionId: string): void {\n setCookie(c, SESSION_COOKIE_NAME, sessionId, SESSION_COOKIE_OPTIONS);\n}\n\n/**\n * Clears the session cookie from the response.\n *\n * @param c - Hono context\n */\nexport function clearSessionCookie(c: Context): void {\n deleteCookie(c, SESSION_COOKIE_NAME, { path: \"/\" });\n}\n\n// =============================================================================\n// AUTHENTICATION FUNCTIONS\n// =============================================================================\n\n/**\n * Authenticates a user by email, creating an account if needed.\n * Sets the session cookie on the response.\n *\n * @param c - Hono context\n * @param email - User's email address\n * @param name - Optional display name for new users\n * @returns The authenticated user\n */\nexport async function authenticateByEmail(\n c: Context,\n email: string,\n name?: string,\n): Promise {\n // Normalize email\n const normalizedEmail = email.toLowerCase().trim();\n\n // Find or create user\n let user = await findUserByEmail(normalizedEmail);\n\n if (!user) {\n user = await createUser(normalizedEmail, name);\n }\n\n // Create session\n const sessionId = await createSession({\n userId: user.id,\n userAgent: c.req.header(\"User-Agent\"),\n ipAddress: c.req.header(\"X-Forwarded-For\") || c.req.header(\"X-Real-IP\"),\n });\n\n // Set cookie\n setSessionCookie(c, sessionId);\n\n return user;\n}\n\n/**\n * Validates the current session from cookies.\n *\n * @param c - Hono context\n * @returns The authenticated user or null\n */\nexport async function getCurrentUser(c: Context): Promise {\n const sessionId = getSessionId(c);\n\n if (!sessionId) {\n return null;\n }\n\n const user = await validateSession(sessionId);\n\n if (!user) {\n // Invalid session, clear the cookie\n clearSessionCookie(c);\n return null;\n }\n\n return user;\n}\n\n/**\n * Logs out the current user by destroying their session.\n *\n * @param c - Hono context\n * @returns true if logged out, false if no session existed\n */\nexport async function logout(c: Context): Promise {\n const sessionId = getSessionId(c);\n\n if (!sessionId) {\n return false;\n }\n\n await deleteSession(sessionId);\n clearSessionCookie(c);\n\n return true;\n}\n\n/**\n * Refreshes the user data from the database.\n * Useful after tier upgrades or profile updates.\n *\n * @param userId - The user's ID\n * @returns Updated user or null\n */\nexport async function refreshUser(userId: string): Promise {\n return findUserById(userId);\n}\n\n// =============================================================================\n// AUTHORIZATION HELPERS\n// =============================================================================\n\n/**\n * Gets the tier configuration for a user.\n *\n * @param user - The user object\n * @returns The tier configuration\n */\nexport function getUserTier(user: User): typeof TIERS[keyof typeof TIERS] {\n const tierKey = Object.keys(TIERS).find(\n (key) => TIERS[key as keyof typeof TIERS].id === user.tier,\n ) as keyof typeof TIERS | undefined;\n\n return tierKey ? TIERS[tierKey] : TIERS.ROOKIE;\n}\n\n/**\n * Checks if a user has access to a specific lens.\n *\n * @param user - The user object\n * @param lens - The lens to check\n * @returns true if user can access the lens\n */\nexport function canAccessLens(user: User, lens: Lens): boolean {\n const tier = getUserTier(user);\n const limits = tier.limits;\n\n if (lens.squad === \"phoenix\") {\n if (limits.offensiveLenses === \"ALL\") {\n return true;\n }\n return (limits.offensiveLenses as string[]).includes(lens.id);\n }\n\n if (lens.squad === \"fortress\") {\n if (limits.defensiveLenses === \"ALL\") {\n return true;\n }\n return (limits.defensiveLenses as string[]).includes(lens.id);\n }\n\n return false;\n}\n\n/**\n * Checks if a user can access Phoenix Fortress combined analysis.\n *\n * @param user - The user object\n * @returns true if user can access combined analysis\n */\nexport function canAccessPhoenixFortress(user: User): boolean {\n const tier = getUserTier(user);\n return tier.limits.phoenixFortress;\n}\n\n/**\n * Checks if a user can upload more documents this month.\n *\n * @param user - The user object\n * @param currentCount - Current document count this month\n * @returns true if user can upload more\n */\nexport function canUploadDocument(user: User, currentCount: number): boolean {\n const tier = getUserTier(user);\n return currentCount < tier.limits.docsPerMonth;\n}\n\n/**\n * Gets the remaining document uploads for a user this month.\n *\n * @param user - The user object\n * @param currentCount - Current document count this month\n * @returns Number of remaining uploads\n */\nexport function getRemainingUploads(user: User, currentCount: number): number {\n const tier = getUserTier(user);\n return Math.max(0, tier.limits.docsPerMonth - currentCount);\n}\n\n// =============================================================================\n// MIDDLEWARE FACTORY\n// =============================================================================\n\n/**\n * Creates a Hono middleware that requires authentication.\n * Sets user on context if authenticated, returns 401 otherwise.\n *\n * @returns Hono middleware function\n */\nexport function requireAuth() {\n return async (c: Context, next: () => Promise) => {\n const user = await getCurrentUser(c);\n\n if (!user) {\n return c.json(\n {\n error: \"Authentication required\",\n code: \"UNAUTHORIZED\",\n redirect: \"/login\",\n },\n 401,\n );\n }\n\n // Attach user to context for downstream handlers\n c.set(\"user\", user);\n\n await next();\n };\n}\n\n/**\n * Creates a Hono middleware that requires a minimum tier.\n * Must be used after requireAuth().\n *\n * @param minimumTier - The minimum tier required\n * @returns Hono middleware function\n */\nexport function requireTier(minimumTier: TierId) {\n const tierOrder: TierId[] = [\"tier_rookie\", \"tier_starter\", \"tier_mvp\"];\n const minimumIndex = tierOrder.indexOf(minimumTier);\n\n return async (c: Context, next: () => Promise) => {\n const user = c.get(\"user\") as User;\n\n if (!user) {\n return c.json({ error: \"Authentication required\" }, 401);\n }\n\n const userTierIndex = tierOrder.indexOf(user.tier);\n\n if (userTierIndex < minimumIndex) {\n return c.json(\n {\n error: `This feature requires ${\n minimumTier.replace(\"tier_\", \"\").toUpperCase()\n } tier or higher`,\n code: \"UPGRADE_REQUIRED\",\n currentTier: user.tier,\n requiredTier: minimumTier,\n },\n 403,\n );\n }\n\n await next();\n };\n}\n\n/**\n * Optional authentication middleware.\n * Sets user on context if authenticated, but doesn't block if not.\n *\n * @returns Hono middleware function\n */\nexport function optionalAuth() {\n return async (c: Context, next: () => Promise) => {\n const user = await getCurrentUser(c);\n\n if (user) {\n c.set(\"user\", user);\n }\n\n await next();\n };\n}",[191],"09a493e4-d46d-11f0-842c-42dde27851f2","api.ts","b20e0426-d46c-11f0-ab1f-42dde27851f2",23,["D",1765222522666],"/**\n * @fileoverview API route handlers for The Playbook.\n * Contains all REST API endpoints for authentication, documents, and analysis.\n *\n * @author The Playbook Team\n * @version 3.0.0\n */\n\nimport { Hono } from \"npm:hono@4.4.12\";\nimport { z } from \"npm:zod@3.23.8\";\nimport {\n DEFENSIVE_LENSES,\n DOCUMENT_CONSTRAINTS,\n MASCOTS,\n OFFENSIVE_LENSES,\n TIERS,\n} from \"./config.ts\";\nimport {\n authenticateByEmail,\n canAccessLens,\n canAccessPhoenixFortress,\n canUploadDocument,\n getCurrentUser,\n getUserTier,\n logout,\n requireAuth,\n setSessionCookie,\n} from \"./auth.ts\";\nimport {\n countUserDocumentsThisMonth,\n createDocument,\n deleteDocument,\n findUserById,\n getDocument,\n getDocumentAnalyses,\n getDocumentBeliefs,\n getUserDocuments,\n logUsage,\n storeAnalysis,\n storePlaybookReport,\n updateDocumentStatus,\n updateUserTier,\n} from \"./database.ts\";\nimport { executeSetup } from \"./setup.ts\";\nimport {\n calculateCombinedScore,\n getEngine,\n validateTextForAnalysis,\n} from \"./engine.ts\";\nimport type { Lens, User } from \"./types.ts\";\n\n// =============================================================================\n// VALIDATION SCHEMAS\n// =============================================================================\n\nconst EmailSchema = z.object({\n email: z.string().email(\"Invalid email format\"),\n name: z.string().min(1).max(100).optional(),\n});\n\nconst DocumentUploadSchema = z.object({\n title: z\n .string()\n .min(1, \"Title is required\")\n .max(DOCUMENT_CONSTRAINTS.maxTitleLength, \"Title is too long\"),\n text: z\n .string()\n .min(DOCUMENT_CONSTRAINTS.minChars, \"Document is too short for analysis\")\n .max(DOCUMENT_CONSTRAINTS.maxChars, \"Document exceeds maximum size\"),\n});\n\nconst AnalysisRequestSchema = z.object({\n documentId: z.string().min(1, \"Document ID is required\"),\n lensId: z.string().min(1, \"Lens ID is required\"),\n});\n\nconst PhoenixFortressRequestSchema = z.object({\n documentId: z.string().min(1, \"Document ID is required\"),\n});\n\nconst UpgradeRequestSchema = z.object({\n tier: z.enum([\"tier_starter\", \"tier_mvp\"]),\n});\n\n// =============================================================================\n// API ROUTER FACTORY\n// =============================================================================\n\n/**\n * Creates and configures the API router with all endpoints.\n *\n * @returns Configured Hono router for API routes\n */\nexport function createApiRouter(): Hono {\n const api = new Hono();\n\n // ===========================================================================\n // SETUP ENDPOINT\n // ===========================================================================\n\n /**\n * POST /api/setup\n * Executes first-run setup wizard.\n */\n api.post(\"/setup\", async (c) => {\n try {\n const body = await c.req.json();\n const result = await executeSetup(body);\n\n if (!result.success) {\n return c.json({ success: false, error: result.error }, 400);\n }\n\n // Set session cookie for immediate login\n if (result.sessionId) {\n setSessionCookie(c, result.sessionId);\n }\n\n return c.json({\n success: true,\n message: \"Welcome to The Playbook. Let's dominate.\",\n user: result.user,\n });\n } catch (error) {\n console.error(\"[API] Setup error:\", error);\n return c.json({ success: false, error: \"Setup failed\" }, 500);\n }\n });\n\n // ===========================================================================\n // AUTHENTICATION ENDPOINTS\n // ===========================================================================\n\n /**\n * POST /api/auth/login\n * Authenticates user by email (magic link style - creates account if needed).\n */\n api.post(\"/auth/login\", async (c) => {\n try {\n const body = await c.req.json();\n const validation = EmailSchema.safeParse(body);\n\n if (!validation.success) {\n return c.json(\n { error: validation.error.errors[0]?.message || \"Invalid email\" },\n 400,\n );\n }\n\n const { email, name } = validation.data;\n const user = await authenticateByEmail(c, email, name);\n\n await logUsage(user.id, \"login\", { method: \"email\" });\n\n return c.json({\n success: true,\n message: `Welcome to The Playbook${\n user.name ? `, ${user.name}` : \"\"\n }. Let's dominate.`,\n user,\n });\n } catch (error) {\n console.error(\"[API] Login error:\", error);\n return c.json({ error: \"Authentication failed\" }, 500);\n }\n });\n\n /**\n * POST /api/auth/logout\n * Logs out the current user.\n */\n api.post(\"/auth/logout\", async (c) => {\n await logout(c);\n return c.json({ success: true, message: \"Logged out successfully\" });\n });\n\n /**\n * GET /api/auth/me\n * Returns the current authenticated user.\n */\n api.get(\"/auth/me\", async (c) => {\n const user = await getCurrentUser(c);\n return c.json({ user });\n });\n\n // ===========================================================================\n // DOCUMENT ENDPOINTS\n // ===========================================================================\n\n /**\n * GET /api/docs\n * Returns all documents for the authenticated user.\n */\n api.get(\"/docs\", requireAuth(), async (c) => {\n const user = c.get(\"user\") as User;\n\n try {\n const documents = await getUserDocuments(user.id);\n return c.json(documents);\n } catch (error) {\n console.error(\"[API] Get documents error:\", error);\n return c.json({ error: \"Failed to fetch documents\" }, 500);\n }\n });\n\n /**\n * POST /api/docs\n * Creates a new document and extracts initial beliefs.\n */\n api.post(\"/docs\", requireAuth(), async (c) => {\n const user = c.get(\"user\") as User;\n\n try {\n const body = await c.req.json();\n const validation = DocumentUploadSchema.safeParse(body);\n\n if (!validation.success) {\n return c.json(\n { error: validation.error.errors[0]?.message || \"Invalid document\" },\n 400,\n );\n }\n\n const { title, text } = validation.data;\n\n // Validate text content\n const textValidation = validateTextForAnalysis(text);\n if (!textValidation.valid) {\n return c.json({ error: textValidation.message }, 400);\n }\n\n // Check upload limits\n const currentCount = await countUserDocumentsThisMonth(user.id);\n if (!canUploadDocument(user, currentCount)) {\n const tier = getUserTier(user);\n return c.json(\n {\n error:\n `Monthly document limit (${tier.limits.docsPerMonth}) reached. Upgrade to analyze more.`,\n code: \"UPGRADE_REQUIRED\",\n },\n 403,\n );\n }\n\n // Create document\n const document = await createDocument(user.id, title, text);\n\n // Update status to processing\n await updateDocumentStatus(document.id, \"processing\");\n\n // Extract beliefs using AI\n const engine = getEngine();\n const { beliefs, score } = await engine.extractBeliefs(text);\n\n // Store beliefs analysis\n await storeAnalysis(\n document.id,\n \"core_beliefs\",\n \"combined\",\n JSON.stringify(beliefs),\n score,\n );\n\n // Update status to ready\n await updateDocumentStatus(document.id, \"ready\");\n\n // Log usage\n await logUsage(user.id, \"document_upload\", {\n documentId: document.id,\n wordCount: document.wordCount,\n });\n\n return c.json({\n success: true,\n document: {\n id: document.id,\n title: document.title,\n wordCount: document.wordCount,\n status: \"ready\",\n createdAt: document.createdAt,\n },\n beliefs,\n score,\n });\n } catch (error) {\n console.error(\"[API] Create document error:\", error);\n return c.json({ error: \"Failed to create document\" }, 500);\n }\n });\n\n /**\n * GET /api/docs/:id\n * Returns a specific document with ownership verification.\n */\n api.get(\"/docs/:id\", requireAuth(), async (c) => {\n const user = c.get(\"user\") as User;\n const documentId = c.req.param(\"id\");\n\n try {\n const document = await getDocument(documentId, user.id);\n\n if (!document) {\n return c.json({ error: \"Document not found\" }, 404);\n }\n\n return c.json(document);\n } catch (error) {\n console.error(\"[API] Get document error:\", error);\n return c.json({ error: \"Failed to fetch document\" }, 500);\n }\n });\n\n /**\n * DELETE /api/docs/:id\n * Deletes a document and all associated analyses.\n */\n api.delete(\"/docs/:id\", requireAuth(), async (c) => {\n const user = c.get(\"user\") as User;\n const documentId = c.req.param(\"id\");\n\n try {\n const deleted = await deleteDocument(documentId, user.id);\n\n if (!deleted) {\n return c.json({ error: \"Document not found\" }, 404);\n }\n\n await logUsage(user.id, \"document_delete\", { documentId });\n\n return c.json({ success: true, message: \"Document deleted\" });\n } catch (error) {\n console.error(\"[API] Delete document error:\", error);\n return c.json({ error: \"Failed to delete document\" }, 500);\n }\n });\n\n /**\n * GET /api/docs/:id/beliefs\n * Returns extracted beliefs for a document.\n */\n api.get(\"/docs/:id/beliefs\", requireAuth(), async (c) => {\n const user = c.get(\"user\") as User;\n const documentId = c.req.param(\"id\");\n\n try {\n // Verify ownership\n const document = await getDocument(documentId, user.id);\n if (!document) {\n return c.json({ error: \"Document not found\" }, 404);\n }\n\n const beliefs = await getDocumentBeliefs(documentId);\n\n if (!beliefs) {\n return c.json({ beliefs: [], score: 0 });\n }\n\n return c.json(beliefs);\n } catch (error) {\n console.error(\"[API] Get beliefs error:\", error);\n return c.json({ error: \"Failed to fetch beliefs\" }, 500);\n }\n });\n\n /**\n * GET /api/docs/:id/analyses\n * Returns all analyses for a document.\n */\n api.get(\"/docs/:id/analyses\", requireAuth(), async (c) => {\n const user = c.get(\"user\") as User;\n const documentId = c.req.param(\"id\");\n\n try {\n // Verify ownership\n const document = await getDocument(documentId, user.id);\n if (!document) {\n return c.json({ error: \"Document not found\" }, 404);\n }\n\n const analyses = await getDocumentAnalyses(documentId);\n\n // Parse and format analyses\n const formatted = analyses\n .filter((a) => a.lensId !== \"core_beliefs\")\n .map((a) => {\n let analysis;\n try {\n analysis = JSON.parse(a.analysisJson);\n } catch {\n analysis = {};\n }\n\n return {\n id: a.id,\n lensId: a.lensId,\n squad: a.squad,\n score: a.score,\n analysis,\n createdAt: a.createdAt,\n };\n });\n\n return c.json(formatted);\n } catch (error) {\n console.error(\"[API] Get analyses error:\", error);\n return c.json({ error: \"Failed to fetch analyses\" }, 500);\n }\n });\n\n // ===========================================================================\n // ANALYSIS ENDPOINTS\n // ===========================================================================\n\n /**\n * POST /api/analyze/offensive\n * Runs an offensive (Phoenix) analysis on a document.\n */\n api.post(\"/analyze/offensive\", requireAuth(), async (c) => {\n const user = c.get(\"user\") as User;\n\n try {\n const body = await c.req.json();\n const validation = AnalysisRequestSchema.safeParse(body);\n\n if (!validation.success) {\n return c.json(\n { error: validation.error.errors[0]?.message || \"Invalid request\" },\n 400,\n );\n }\n\n const { documentId, lensId } = validation.data;\n\n // Find the lens\n const lens = OFFENSIVE_LENSES.find((l) => l.id === lensId);\n if (!lens) {\n return c.json({ error: \"Invalid offensive lens\" }, 400);\n }\n\n // Check lens access\n if (!canAccessLens(user, lens as Lens)) {\n return c.json(\n {\n error:\n `${lens.name} requires an upgrade. Unlock the full Phoenix Squad.`,\n code: \"UPGRADE_REQUIRED\",\n },\n 403,\n );\n }\n\n // Get document\n const document = await getDocument(documentId, user.id);\n if (!document) {\n return c.json({ error: \"Document not found\" }, 404);\n }\n\n // Run analysis\n const engine = getEngine();\n const result = await engine.runOffensiveAnalysis(\n document.textContent,\n lensId,\n );\n\n // Store analysis\n await storeAnalysis(\n documentId,\n lensId,\n \"phoenix\",\n JSON.stringify(result),\n result.score,\n );\n\n // Log usage\n await logUsage(user.id, \"offensive_analysis\", { documentId, lensId });\n\n return c.json({\n success: true,\n lens: {\n id: lens.id,\n name: lens.name,\n emoji: lens.emoji,\n squad: \"phoenix\",\n },\n mascot: MASCOTS.PHOENIX,\n analysis: result,\n });\n } catch (error) {\n console.error(\"[API] Offensive analysis error:\", error);\n return c.json({ error: \"Analysis failed\" }, 500);\n }\n });\n\n /**\n * POST /api/analyze/defensive\n * Runs a defensive (Fortress) analysis on a document.\n */\n api.post(\"/analyze/defensive\", requireAuth(), async (c) => {\n const user = c.get(\"user\") as User;\n\n try {\n const body = await c.req.json();\n const validation = AnalysisRequestSchema.safeParse(body);\n\n if (!validation.success) {\n return c.json(\n { error: validation.error.errors[0]?.message || \"Invalid request\" },\n 400,\n );\n }\n\n const { documentId, lensId } = validation.data;\n\n // Find the lens\n const lens = DEFENSIVE_LENSES.find((l) => l.id === lensId);\n if (!lens) {\n return c.json({ error: \"Invalid defensive lens\" }, 400);\n }\n\n // Check lens access\n if (!canAccessLens(user, lens as Lens)) {\n return c.json(\n {\n error:\n `${lens.name} requires an upgrade. Unlock the full Fortress Squad.`,\n code: \"UPGRADE_REQUIRED\",\n },\n 403,\n );\n }\n\n // Get document\n const document = await getDocument(documentId, user.id);\n if (!document) {\n return c.json({ error: \"Document not found\" }, 404);\n }\n\n // Run analysis\n const engine = getEngine();\n const result = await engine.runDefensiveAnalysis(\n document.textContent,\n lensId,\n );\n\n // Store analysis\n await storeAnalysis(\n documentId,\n lensId,\n \"fortress\",\n JSON.stringify(result),\n result.score,\n );\n\n // Log usage\n await logUsage(user.id, \"defensive_analysis\", { documentId, lensId });\n\n return c.json({\n success: true,\n lens: {\n id: lens.id,\n name: lens.name,\n emoji: lens.emoji,\n squad: \"fortress\",\n },\n mascot: MASCOTS.FORTRESS,\n analysis: result,\n });\n } catch (error) {\n console.error(\"[API] Defensive analysis error:\", error);\n return c.json({ error: \"Analysis failed\" }, 500);\n }\n });\n\n /**\n * POST /api/analyze/phoenix-fortress\n * Runs a combined Phoenix Fortress analysis (premium feature).\n */\n api.post(\"/analyze/phoenix-fortress\", requireAuth(), async (c) => {\n const user = c.get(\"user\") as User;\n\n try {\n const body = await c.req.json();\n const validation = PhoenixFortressRequestSchema.safeParse(body);\n\n if (!validation.success) {\n return c.json(\n { error: validation.error.errors[0]?.message || \"Invalid request\" },\n 400,\n );\n }\n\n const { documentId } = validation.data;\n\n // Check Phoenix Fortress access\n if (!canAccessPhoenixFortress(user)) {\n return c.json(\n {\n error:\n \"Phoenix Fortress requires Starter or MVP tier. Upgrade for Total Market Dominance.\",\n code: \"UPGRADE_REQUIRED\",\n },\n 403,\n );\n }\n\n // Get document\n const document = await getDocument(documentId, user.id);\n if (!document) {\n return c.json({ error: \"Document not found\" }, 404);\n }\n\n // Run combined analysis\n const engine = getEngine();\n const result = await engine.runPhoenixFortressAnalysis(\n document.textContent,\n );\n\n // Store as playbook report\n await storePlaybookReport(\n user.id,\n documentId,\n JSON.stringify(result),\n {\n offensive: result.offensiveScore,\n defensive: result.defensiveScore,\n combined: result.combinedScore,\n },\n );\n\n // Also store as a combined analysis\n await storeAnalysis(\n documentId,\n \"phoenix_fortress\",\n \"combined\",\n JSON.stringify(result),\n result.combinedScore,\n );\n\n // Log usage\n await logUsage(user.id, \"phoenix_fortress_analysis\", { documentId });\n\n return c.json({\n success: true,\n mascot: MASCOTS.PHOENIX_FORTRESS,\n analysis: result,\n });\n } catch (error) {\n console.error(\"[API] Phoenix Fortress analysis error:\", error);\n return c.json({ error: \"Analysis failed\" }, 500);\n }\n });\n\n // ===========================================================================\n // BILLING / UPGRADE ENDPOINTS\n // ===========================================================================\n\n /**\n * GET /api/billing/tiers\n * Returns available subscription tiers.\n */\n api.get(\"/billing/tiers\", async (c) => {\n const tiers = Object.values(TIERS).map((tier) => ({\n id: tier.id,\n name: tier.name,\n price: tier.price,\n priceDisplay: tier.priceDisplay,\n badge: tier.badge,\n description: tier.description,\n limits: tier.limits,\n }));\n\n return c.json(tiers);\n });\n\n /**\n * POST /api/billing/upgrade\n * Upgrades the user's subscription tier.\n * NOTE: In production, integrate with Stripe or similar payment processor.\n */\n api.post(\"/billing/upgrade\", requireAuth(), async (c) => {\n const user = c.get(\"user\") as User;\n\n try {\n const body = await c.req.json();\n const validation = UpgradeRequestSchema.safeParse(body);\n\n if (!validation.success) {\n return c.json(\n { error: validation.error.errors[0]?.message || \"Invalid tier\" },\n 400,\n );\n }\n\n const { tier: newTier } = validation.data;\n\n // Prevent downgrades via this endpoint\n const tierOrder = [\"tier_rookie\", \"tier_starter\", \"tier_mvp\"];\n const currentIndex = tierOrder.indexOf(user.tier);\n const newIndex = tierOrder.indexOf(newTier);\n\n if (newIndex <= currentIndex) {\n return c.json(\n { error: \"Cannot downgrade via this endpoint. Contact support.\" },\n 400,\n );\n }\n\n // TODO: In production, process payment via Stripe here\n // For now, we just update the tier directly\n\n await updateUserTier(user.id, newTier);\n\n // Fetch updated user\n const updatedUser = await findUserById(user.id);\n\n // Log usage\n await logUsage(user.id, \"tier_upgrade\", {\n previousTier: user.tier,\n newTier,\n });\n\n const tierConfig = Object.values(TIERS).find((t) => t.id === newTier);\n\n return c.json({\n success: true,\n message: `Welcome to ${\n tierConfig?.name || \"your new tier\"\n }! You've unlocked the full arsenal. Time to dominate. 🏆`,\n user: updatedUser,\n });\n } catch (error) {\n console.error(\"[API] Upgrade error:\", error);\n return c.json({ error: \"Upgrade failed\" }, 500);\n }\n });\n\n // ===========================================================================\n // LENSES ENDPOINTS\n // ===========================================================================\n\n /**\n * GET /api/lenses\n * Returns all available lenses with access status for the user.\n */\n api.get(\"/lenses\", requireAuth(), async (c) => {\n const user = c.get(\"user\") as User;\n\n const offensiveLenses = OFFENSIVE_LENSES.map((lens) => ({\n ...lens,\n squad: \"phoenix\" as const,\n unlocked: canAccessLens(user, lens as Lens),\n }));\n\n const defensiveLenses = DEFENSIVE_LENSES.map((lens) => ({\n ...lens,\n squad: \"fortress\" as const,\n unlocked: canAccessLens(user, lens as Lens),\n }));\n\n return c.json({\n offensive: offensiveLenses,\n defensive: defensiveLenses,\n phoenixFortressUnlocked: canAccessPhoenixFortress(user),\n });\n });\n\n /**\n * GET /api/lenses/offensive\n * Returns offensive lenses only.\n */\n api.get(\"/lenses/offensive\", async (c) => {\n return c.json(OFFENSIVE_LENSES);\n });\n\n /**\n * GET /api/lenses/defensive\n * Returns defensive lenses only.\n */\n api.get(\"/lenses/defensive\", async (c) => {\n return c.json(DEFENSIVE_LENSES);\n });\n\n // ===========================================================================\n // MASCOTS ENDPOINT\n // ===========================================================================\n\n /**\n * GET /api/mascots\n * Returns mascot information.\n */\n api.get(\"/mascots\", async (c) => {\n return c.json(MASCOTS);\n });\n\n // ===========================================================================\n // HEALTH CHECK\n // ===========================================================================\n\n /**\n * GET /api/health\n * Health check endpoint.\n */\n api.get(\"/health\", async (c) => {\n return c.json({\n status: \"healthy\",\n name: \"The Playbook\",\n version: \"3.0.0\",\n timestamp: new Date().toISOString(),\n });\n });\n\n return api;\n}",[198],"4bded44a-d46d-11f0-a638-42dde27851f2",["D",1765222633784],[27],"pulls","branches","forks","envVars",{"_214":61,"_216":61},"connections",{"_214":61,"_215":61},"count","unfilledCount","emptyCount",{"_41":204,"_32":27,"_30":31,"_138":-5,"_39":40,"_38":14,"_140":24,"_36":255,"_13":61,"_33":34,"_35":-5,"_23":24,"_145":-5,"_228":256,"_26":257},{"_41":197,"_32":198,"_30":199,"_138":-5,"_39":40,"_38":200,"_140":57,"_36":252,"_13":142,"_33":143,"_35":202,"_23":24,"_145":-5,"_228":253,"_26":254},{"_41":190,"_32":191,"_30":192,"_138":-5,"_39":40,"_38":193,"_140":57,"_36":249,"_13":142,"_33":143,"_35":195,"_23":24,"_145":-5,"_228":250,"_26":251},{"_41":183,"_32":184,"_30":185,"_138":-5,"_39":40,"_38":186,"_140":57,"_36":246,"_13":142,"_33":143,"_35":188,"_23":24,"_145":-5,"_228":247,"_26":248},{"_41":176,"_32":177,"_30":178,"_138":-5,"_39":40,"_38":179,"_140":57,"_36":243,"_13":142,"_33":143,"_35":181,"_23":24,"_145":-5,"_228":244,"_26":245},{"_41":169,"_32":170,"_30":171,"_138":-5,"_39":40,"_38":172,"_140":57,"_36":240,"_13":142,"_33":143,"_35":174,"_23":24,"_145":-5,"_228":241,"_26":242},{"_41":162,"_32":163,"_30":55,"_138":-5,"_39":40,"_38":164,"_140":24,"_36":237,"_13":166,"_33":143,"_35":167,"_23":24,"_145":-5,"_228":238,"_26":239},{"_41":155,"_32":156,"_30":157,"_138":-5,"_39":40,"_38":158,"_140":57,"_36":234,"_13":142,"_33":143,"_35":160,"_23":24,"_145":-5,"_228":235,"_26":236},{"_41":147,"_32":148,"_30":149,"_138":-5,"_39":40,"_38":150,"_140":57,"_36":231,"_13":152,"_33":143,"_35":153,"_23":24,"_145":-5,"_228":232,"_26":233},{"_41":135,"_32":136,"_30":137,"_138":-5,"_39":40,"_38":139,"_140":57,"_36":227,"_13":142,"_33":143,"_35":144,"_23":24,"_145":-5,"_228":229,"_26":230},["D",1765222566731],"children",[],[136],["D",1765222016405],[],[148],["D",1765222354215],[],[156],["D",1765222596746],[],[163],["D",1765222261751],[],[170],["D",1765222104931],[],[177],["D",1765219017427],[],[184],["D",1765222157243],[],[191],["D",1765222522666],[],[198],["D",1765222633784],[],[27],["D",1765218851812],{"_95":94,"_102":98},{"_95":94,"_96":-5,"_97":98,"_18":53,"_99":100,"_101":24},{"_13":84,"_32":85,"_41":40,"_86":42,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":43,"_93":94},"ctx",{"_77":-5,"_122":295,"_296":297,"_298":299,"_300":24,"_301":24,"_302":24,"_303":57,"_304":-5,"_305":-7,"_306":-7,"_307":61,"_308":24,"_309":24,"_310":-5,"_311":24,"_312":24,"_313":24,"_314":-5},"ENV",{"_266":267,"_268":269,"_270":85,"_271":272,"_273":274,"_275":276,"_277":278,"_279":280,"_281":282,"_283":284,"_285":286,"_287":288,"_289":290,"_291":292,"_293":294},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v28