Hi

\"\n});\n```\n\n## Val Town Utility Functions\n\nVal Town provides several utility functions to help with common project tasks.\n\n### Importing Utilities\n\nAlways import utilities with version pins to avoid breaking changes:\n\n```ts\nimport { parseProject, readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n```\n\n### Available Utilities\n\n\n#### **serveFile** - Serve project files with proper content types\n\nFor example, in Hono:\n\n```ts\n// serve all files in frontend/ and shared/\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n```\n\n#### **readFile** - Read files from within the project:\n\n```ts\n// Read a file from the project\nconst fileContent = await readFile(\"/frontend/index.html\", import.meta.url);\n```\n\n#### **listFiles** - List all files in the project\n\n```ts\nconst files = await listFiles(import.meta.url);\n```\n\n#### **parseProject** - Extract information about the current project from import.meta.url\n\nThis is useful for including info for linking back to a val, ie in \"view source\" urls:\n\n```ts\nconst projectVal = parseProject(import.meta.url);\nconsole.log(projectVal.username); // Owner of the project\nconsole.log(projectVal.name); // Project name\nconsole.log(projectVal.version); // Version number\nconsole.log(projectVal.branch); // Branch name\nconsole.log(projectVal.links.self.project); // URL to the project page\n```\n\nHowever, it's *extremely importing* to note that `parseProject` and other Standard Library utilities ONLY RUN ON THE SERVER.\nIf you need access to this data on the client, run it in the server and pass it to the client by splicing it into the HTML page\nor by making an API request for it.\n\n## Val Town Platform Specifics\n\n- **Redirects:** Use `return new Response(null, { status: 302, headers: { Location: \"/place/to/redirect\" }})` instead of `Response.redirect` which is broken\n- **Images:** Avoid external images or base64 images. Use emojis, unicode symbols, or icon fonts/libraries instead\n- **AI Image:** To inline generate an AI image use: `

`\n- **Storage:** DO NOT use the Deno KV module for storage\n- **Browser APIs:** DO NOT use the `alert()`, `prompt()`, or `confirm()` methods\n- **Weather Data:** Use open-meteo for weather data (doesn't require API keys) unless otherwise specified\n- **View Source:** Add a view source link by importing & using `import.meta.url.replace(\"ems.sh\", \"val.town)\"` (or passing this data to the client) and include `target=\"_top\"` attribute\n- **Error Debugging:** Add `` to HTML to capture client-side errors\n- **Error Handling:** Only use try...catch when there's a clear local resolution; Avoid catches that merely log or return 500s. Let errors bubble up with full context\n- **Environment Variables:** Use `Deno.env.get('keyname')` when you need to, but generally prefer APIs that don't require keys\n- **Imports:** Use `https://esm.sh` for npm and Deno dependencies to ensure compatibility on server and browser\n- **Storage Strategy:** Only use backend storage if explicitly required; prefer simple static client-side sites\n- **React Configuration:** When using React libraries, pin versions with `?deps=react@18.2.0,react-dom@18.2.0` and start the file with `/** @jsxImportSource https://esm.sh/react@18.2.0 */`\n- Ensure all React dependencies and sub-dependencies are pinned to the same version\n- **Styling:** Default to using TailwindCSS via `` unless otherwise specified\n\n## Project Structure and Design Patterns\n\n### Recommended Directory Structure\n```\n├── backend/\n│ ├── database/\n│ │ ├── migrations.ts # Schema definitions\n│ │ ├── queries.ts # DB query functions\n│ │ └── README.md\n│ └── routes/ # Route modules\n│ ├── [route].ts\n│ └── static.ts # Static file serving\n│ ├── index.ts # Main entry point\n│ └── README.md\n├── frontend/\n│ ├── components/\n│ │ ├── App.tsx\n│ │ └── [Component].tsx\n│ ├── favicon.svg\n│ ├── index.html # Main HTML template\n│ ├── index.tsx # Frontend JS entry point\n│ ├── README.md\n│ └── style.css\n├── README.md\n└── shared/\n ├── README.md\n └── utils.ts # Shared types and functions\n```\n\n### Backend (Hono) Best Practices\n\n- Hono is the recommended API framework\n- Main entry point should be `backend/index.ts`\n- **Static asset serving:** Use the utility functions to read and serve project files:\n ```ts\n import { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n \n // serve all files in frontend/ and shared/\n app.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\n app.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n \n // For index.html, often you'll want to bootstrap with initial data\n app.get(\"/\", async c => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n \n // Inject data to avoid extra round-trips\n const initialData = await fetchInitialData();\n const dataScript = ``;\n \n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n });\n ```\n- Create RESTful API routes for CRUD operations\n- Always include this snippet at the top-level Hono app to re-throwing errors to see full stack traces:\n ```ts\n // Unwrap Hono errors to see original error details\n app.onError((err, c) => {\n throw err;\n });\n ```\n\n### Database Patterns\n- Run migrations on startup or comment out for performance\n- Change table names when modifying schemas rather than altering\n- Export clear query functions with proper TypeScript typing\n\n## Common Gotchas and Solutions\n\n1. **Environment Limitations:** \n - Val Town runs on Deno in a serverless context, not Node.js\n - Code in `shared/` must work in both frontend and backend environments\n - Cannot use `Deno` keyword in shared code\n - Use `https://esm.sh` for imports that work in both environments\n\n2. **SQLite Peculiarities:**\n - Limited support for ALTER TABLE operations\n - Create new tables with updated schemas and copy data when needed\n - Always run table creation before querying\n\n3. **React Configuration:**\n - All React dependencies must be pinned to 18.2.0\n - Always include `@jsxImportSource https://esm.sh/react@18.2.0` at the top of React files\n - Rendering issues often come from mismatched React versions\n\n4. **File Handling:**\n - Val Town only supports text files, not binary\n - Use the provided utilities to read files across branches and forks\n - For files in the project, use `readFile` helpers\n\n5. **API Design:**\n - `fetch` handler is the entry point for HTTP vals\n - Run the Hono app with `export default app.fetch // This is the entry point for HTTP vals`\n\n",[],[218],["D",1759523918235],[],[18],"8db2cf28-a0da-11f0-8fb0-0224a6c84d84","blob.ts","8db2cfdc-a0da-11f0-8fb0-0224a6c84d84","8d8ba95c-a0da-11f0-bb5b-0224a6c84d84",15,["D",1759552098901],"import { blob } from \"https://esm.town/v/std/blob\";\n\n// POC limits and policies (aligns with DESIGN_DECISIONS.md)\nconst MAX_ICON_BYTES = 150 * 1024; // 150 KiB\nconst ALLOWED_MIME = new Set([\"image/png\", \"image/jpeg\", \"image/webp\", \"image/svg+xml\"]);\n\n/**\n * Ingest a marketplace icon into Val Town Blobs.\n * - Accepts http/https URL or data URL (data:mime;base64,...)\n * - Enforces size and mime restrictions\n * - Stores JSON payload: { mime, dataBase64, srcUrl?, ingestedAt }\n * - Returns { blobKey, mime }\n *\n * serverName and version should be canonicalized (e.g., lowercased serverName) before calling.\n */\nexport async function ingestMarketplaceIcon(params: {\n serverName: string;\n version: string;\n source: string; // http(s) URL or data URL\n}): Promise<{ blobKey: string; mime: string }> {\n const { serverName, version, source } = params;\n\n const safeServer = encodeURIComponent(serverName);\n const safeVersion = encodeURIComponent(version);\n const key = `icons/${safeServer}/${safeVersion}.json`;\n\n // Resolve content bytes + mime\n let mime: string;\n let dataBase64: string;\n let srcUrl: string | undefined;\n\n if (isDataUrl(source)) {\n const parsed = parseDataUrl(source);\n mime = parsed.mime;\n dataBase64 = parsed.base64;\n enforceMime(mime);\n enforceSize(base64LengthBytes(dataBase64));\n } else {\n const fetched = await fetchRemote(source);\n mime = fetched.mime;\n dataBase64 = fetched.base64;\n srcUrl = source;\n enforceMime(mime);\n enforceSize(base64LengthBytes(dataBase64));\n }\n\n const payload = {\n mime,\n dataBase64,\n ...(srcUrl ? { srcUrl } : {}),\n ingestedAt: new Date().toISOString(),\n };\n\n await blob.setJSON(key, payload);\n return { blobKey: key, mime };\n}\n\nexport async function deleteMarketplaceIconBlob(key: string | null | undefined): Promise {\n if (!key) return;\n try {\n await blob.delete(key);\n } catch (err) {\n const error = err as Error;\n if (error?.name === \"ValTownBlobNotFoundError\") {\n return;\n }\n throw err;\n }\n}\n\n/**\n * Detect if a string is a data URL\n */\nfunction isDataUrl(s: string): boolean {\n return /^data:[^;]+;base64,/.test(s);\n}\n\n/**\n * Parse a data URL \"data:;base64,\"\n */\nfunction parseDataUrl(s: string): { mime: string; base64: string } {\n const match = /^data:([^;]+);base64,(.*)$/s.exec(s);\n if (!match) {\n throw problem(\"InvalidDataURL\", \"Invalid data URL format for marketplaceIcon.\");\n }\n const mime = match[1].trim();\n const base64 = match[2].trim();\n return { mime, base64 };\n}\n\n/**\n * Fetch a remote URL and return mime + base64 content\n */\nasync function fetchRemote(url: string): Promise<{ mime: string; base64: string }> {\n const res = await fetch(url, { redirect: \"follow\" });\n if (!res.ok) {\n throw problem(\"IconFetchFailed\", `Failed to fetch icon: HTTP ${res.status}`);\n }\n\n const ctype = res.headers.get(\"content-type\") || \"application/octet-stream\";\n const mime = ctype.split(\";\")[0].trim().toLowerCase();\n\n // Optional preliminary size check via content-length\n const clen = res.headers.get(\"content-length\");\n if (clen) {\n const n = Number(clen);\n if (!Number.isNaN(n) && n > MAX_ICON_BYTES) {\n throw problem(\"IconTooLarge\", `Icon too large (content-length=${n} bytes), max ${MAX_ICON_BYTES} bytes`);\n }\n }\n\n const buf = new Uint8Array(await res.arrayBuffer());\n if (buf.byteLength > MAX_ICON_BYTES) {\n throw problem(\"IconTooLarge\", `Icon too large (${buf.byteLength} bytes), max ${MAX_ICON_BYTES} bytes`);\n }\n\n const base64 = bytesToBase64(buf);\n return { mime, base64 };\n}\n\n/**\n * Validate allowed mime\n */\nfunction enforceMime(mime: string): void {\n const m = mime.toLowerCase();\n if (!ALLOWED_MIME.has(m)) {\n throw problem(\"IconMimeNotAllowed\", `Icon mime not allowed: ${mime}`);\n }\n}\n\n/**\n * Validate max size in bytes\n */\nfunction enforceSize(n: number): void {\n if (n > MAX_ICON_BYTES) {\n throw problem(\"IconTooLarge\", `Icon too large (${n} bytes), max ${MAX_ICON_BYTES} bytes`);\n }\n}\n\n/**\n * Base64 length to bytes approximation (each 4 chars ~ 3 bytes)\n */\nfunction base64LengthBytes(b64: string): number {\n // Remove padding for calculation\n const clean = b64.replace(/=+$/g, \"\");\n return Math.floor((clean.length * 3) / 4);\n}\n\n/**\n * Convert bytes to base64 safely\n */\nfunction bytesToBase64(bytes: Uint8Array): string {\n // Small utility safe for <= 150KiB\n let binary = \"\";\n const chunkSize = 0x8000;\n for (let i = 0; i < bytes.length; i += chunkSize) {\n const chunk = bytes.subarray(i, i + chunkSize);\n binary += String.fromCharCode.apply(null, Array.from(chunk));\n }\n // btoa expects binary string\n // deno-lint-ignore no-deprecated-deno-api\n return btoa(binary);\n}\n\n/**\n * Create a ProblemDetail-like error for consistency\n */\nfunction problem(code: string, message: string): Error {\n const err = new Error(message);\n (err as any).problem = { code, detail: message };\n return err;\n}",[],[236,228],"backend","19731dc4-a12b-11f0-81c8-0224a6c84d84","queries.ts","8dc0de38-a0da-11f0-a25f-0224a6c84d84","8d9dcfc4-a0da-11f0-bb5b-0224a6c84d84",25,["D",1759586693105],"import { eq, and, sql, desc, asc } from \"https://esm.sh/drizzle-orm@0.44.6?target=deno&dts\";\nimport type {\n ServerJSON,\n ServerResponse,\n ServerListResponse,\n} from \"npm:mcp-registry-spec-sdk@0.2.0\";\nimport {\n ServerJSONSchema,\n ServerResponseSchema,\n ServerListResponseSchema,\n} from \"npm:mcp-registry-spec-sdk@0.2.0\";\nimport { runMigrations, TABLE_NAME, getDb, serverVersions } from \"./migrations.ts\";\nimport { ingestMarketplaceIcon, deleteMarketplaceIconBlob } from \"../blob.ts\";\n\n// Query layer for MCP Subregistry POC v2\n// - Uses Val Town SQLite\n// - Works with server_versions_poc_v2 created in migrations.ts\n// - Keeps OpenAPI surface unchanged; this only backs the contract\n//\n// Notes:\n// - JSON fields are stored as TEXT (stringified).\n// - Cursor is base64url(JSON {u: updatedAt, s: server_name_lower, v: version}).\n// - Search is simple LIKE against a precomputed lowercased search_text.\n// - MCP capability flags can be provided via publisher meta or derived heuristically.\n\n// ------------- Cursor helpers -------------\ntype CursorObj = { u: string; s: string; v: string };\n\nfunction base64urlEncode(input: string): string {\n return btoa(input).replaceAll(\"+\", \"-\").replaceAll(\"/\", \"_\").replaceAll(\"=\", \"\");\n}\n\nfunction base64urlDecode(input: string): string {\n const pad = input.length % 4 === 2 ? \"==\" : input.length % 4 === 3 ? \"=\" : \"\";\n const b64 = input.replaceAll(\"-\", \"+\").replaceAll(\"_\", \"/\") + pad;\n return atob(b64);\n}\n\nexport function encodeCursor(c: CursorObj): string {\n return base64urlEncode(JSON.stringify(c));\n}\n\nexport function decodeCursor(cursor: string): CursorObj | null {\n try {\n return JSON.parse(base64urlDecode(cursor));\n } catch {\n return null;\n }\n}\n\n// ------------- MCP flag derivation -------------\n\ntype MCPFlags = {\n protocol_version?: string | null;\n has_tools?: boolean | null;\n has_resources?: boolean | null;\n has_prompts?: boolean | null;\n has_roots?: boolean | null;\n has_completions?: boolean | null;\n has_sampling?: boolean | null;\n transports?: unknown | null; // JSON (array or object)\n discovery_links?: unknown | null; // JSON\n client_snippets?: unknown | null; // JSON\n auth_methods?: unknown | null; // JSON (array)\n};\n\nfunction coerceBool(v: unknown): boolean | null {\n if (typeof v === \"boolean\") return v;\n return null;\n}\n\nfunction deriveFromPublisherMeta(payload: ServerJSON): MCPFlags {\n const meta = (payload as any)?._meta?.[\"io.modelcontextprotocol.registry/publisher-provided\"];\n const mcp = meta?.mcp ?? {};\n const caps = mcp?.capabilities; // could be array of strings OR object of booleans\n\n const flags: MCPFlags = {\n protocol_version: mcp?.protocolVersion ?? null,\n has_tools: null,\n has_resources: null,\n has_prompts: null,\n has_roots: null,\n has_completions: null,\n has_sampling: null,\n transports: mcp?.transports ?? null,\n discovery_links: mcp?.discoveryLinks ?? null,\n client_snippets: mcp?.clientSnippets ?? null,\n auth_methods: mcp?.authMethods ?? null,\n };\n\n if (Array.isArray(caps)) {\n const set = new Set(caps.map(String));\n flags.has_tools = set.has(\"tools\") ? true : null;\n flags.has_resources = set.has(\"resources\") ? true : null;\n flags.has_prompts = set.has(\"prompts\") ? true : null;\n flags.has_roots = set.has(\"roots\") ? true : null;\n flags.has_completions = set.has(\"completions\") ? true : null;\n flags.has_sampling = set.has(\"sampling\") ? true : null;\n } else if (caps && typeof caps === \"object\") {\n flags.has_tools = coerceBool(caps.tools);\n flags.has_resources = coerceBool(\n (payload as any).packages?.some((p: any) => p.scope === \"community\" && p.registryType === \"module\")\n );\n flags.has_prompts = coerceBool(caps.prompts);\n flags.has_roots = coerceBool(\n (payload as any).packages?.some((p: any) => p.scope === \"system\")\n );\n flags.has_completions = coerceBool(caps.completions);\n flags.has_sampling = coerceBool(caps.sampling);\n }\n\n return flags;\n}\n\nfunction applyHeuristics(flags: MCPFlags, payload: ServerJSON): MCPFlags {\n const out = { ...flags };\n // If missing, infer a tiny bit from structural hints\n const hasRemotes = Array.isArray((payload as any).remotes) && ((payload as any).remotes?.length ?? 0) > 0;\n const hasPackages = Array.isArray((payload as any).packages) && ((payload as any).packages?.length ?? 0) > 0;\n\n if (out.has_tools == null) out.has_tools = hasPackages || hasRemotes ? true : null;\n if (out.has_resources == null) out.has_resources = hasRemotes ? true : null;\n // leave prompts/roots/completions/sampling as null unless explicitly provided\n if (out.transports == null && hasRemotes) {\n try {\n // pull transportType(s) from remotes if present\n const transports = (payload as any).remotes\n ?.map((r: any) => r?.transportType)\n ?.filter((t: any) => typeof t === \"string\");\n out.transports = transports?.length ? transports : null;\n } catch {\n // ignore\n }\n }\n return out;\n}\n\n// ------------- Search text -------------\n\nfunction stringifySafe(v: unknown): string {\n try {\n if (v == null) return \"\";\n if (typeof v === \"string\") return v;\n return JSON.stringify(v);\n } catch {\n return \"\";\n }\n}\n\nfunction computeSearchText(payload: ServerJSON, flags: MCPFlags): string {\n const parts: string[] = [];\n parts.push(payload.name ?? \"\");\n parts.push(payload.description ?? \"\");\n if ((payload as any).websiteUrl) parts.push((payload as any).websiteUrl);\n const repo = (payload as any).repository;\n if (repo?.url) parts.push(repo.url);\n if (Array.isArray((payload as any).packages)) {\n for (const p of (payload as any).packages) {\n if (p?.name) parts.push(p.name);\n if (p?.identifier) parts.push(p.identifier);\n if (p?.registryType) parts.push(p.registryType);\n if (p?.version) parts.push(p.version);\n }\n }\n if (Array.isArray((payload as any).remotes)) {\n for (const r of (payload as any).remotes) {\n if (r?.url) parts.push(r.url);\n if (r?.transportType) parts.push(r.transportType);\n }\n }\n\n // Publisher-provided meta content\n const publisherMeta = (payload as any)?._meta?.[\"io.modelcontextprotocol.registry/publisher-provided\"];\n parts.push(stringifySafe(publisherMeta));\n\n // MCP flags for discovery via search\n parts.push(\n stringifySafe({\n protocol: flags.protocol_version,\n has_tools: flags.has_tools,\n has_resources: flags.has_resources,\n has_prompts: flags.has_prompts,\n has_roots: flags.has_roots,\n has_completions: flags.has_completions,\n has_sampling: flags.has_sampling,\n transports: flags.transports,\n auth_methods: flags.auth_methods,\n })\n );\n\n return parts.join(\" | \").toLowerCase();\n}\n\n// looks for redeemable marketplace icon in the publisher record\ntype MarketplaceIconDescriptor = { present: boolean; source: string | null };\n\nfunction getMarketplaceIconDescriptor(payload: ServerJSON): MarketplaceIconDescriptor {\n const meta = (payload as any)?._meta;\n if (!meta || typeof meta !== \"object\" || Array.isArray(meta)) {\n return { present: false, source: null };\n }\n const publisher = (meta as any)?.publisher;\n if (!publisher || typeof publisher !== \"object\") {\n return { present: false, source: null };\n }\n if (!Object.prototype.hasOwnProperty.call(publisher, \"marketplaceIcon\")) {\n return { present: false, source: null };\n }\n const raw = (publisher as any).marketplaceIcon;\n if (typeof raw === \"string\") {\n const trimmed = raw.trim();\n return { present: true, source: trimmed.length ? trimmed : null };\n }\n if (raw && typeof raw === \"object\") {\n const record = raw as Record;\n const candidate =\n typeof record.source === \"string\"\n ? record.source\n : typeof record.url === \"string\"\n ? record.url\n : typeof record.dataUrl === \"string\"\n ? record.dataUrl\n : typeof record.data_url === \"string\"\n ? record.data_url\n : undefined;\n if (typeof candidate === \"string\") {\n const trimmed = candidate.trim();\n return {\n present: true,\n source: trimmed.length ? trimmed : null,\n };\n }\n }\n return { present: true, source: null };\n}\n\nasync function ingestMarketplaceIconOrThrow(\n serverName: string,\n version: string,\n source: string,\n): Promise<{ blobKey: string; mime: string }> {\n try {\n return await ingestMarketplaceIcon({ serverName, version, source });\n } catch (err) {\n const detail =\n (err as any)?.problem?.detail ?? (err as Error)?.message ?? \"Failed to ingest marketplaceIcon.\";\n const problem = {\n type: \"about:blank\",\n title: \"Invalid marketplaceIcon\",\n status: 422,\n detail,\n errors: [\n {\n location: \"_meta.publisher.marketplaceIcon\",\n message: detail,\n },\n ],\n };\n const wrapped = new Error(detail);\n (wrapped as any).problem = problem;\n throw wrapped;\n }\n}\n\n// ------------- Response mapping -------------\n\nfunction toServerResponse(row: any): ServerResponse {\n // Support both raw SQL column names and Drizzle schema property names\n const payloadStr = row.payload_json ?? row.payloadJson;\n const p: any = JSON.parse(payloadStr);\n const serverNameLower = row.server_name_lower ?? row.serverNameLower;\n const publishedAt = row.published_at ?? row.publishedAt;\n const updatedAt = row.updated_at ?? row.updatedAt;\n const isLatest = (row.is_latest ?? row.isLatest) as boolean | number;\n const status = row.status;\n const official: Record = {\n serverId: String(serverNameLower),\n versionId: String(row.id),\n publishedAt: String(publishedAt),\n updatedAt: String(updatedAt),\n isLatest: !!isLatest,\n status: String(status),\n };\n const blobIconKey = row.blob_icon_key ?? row.blobIconKey ?? null;\n const blobIconMime = row.blob_icon_mime ?? row.blobIconMime ?? null;\n if (blobIconKey && blobIconMime) {\n official.marketplaceIcon = {\n blobKey: String(blobIconKey),\n mime: String(blobIconMime),\n };\n }\n const publisherProvided = p?._meta?.[\"io.modelcontextprotocol.registry/publisher-provided\"] ?? {};\n const resp: ServerResponse = {\n $schema: p.$schema,\n name: p.name,\n description: p.description,\n version: p.version,\n repository: p.repository,\n websiteUrl: p.websiteUrl,\n packages: p.packages,\n remotes: p.remotes,\n _meta: {\n \"io.modelcontextprotocol.registry/official\": official as any,\n \"io.modelcontextprotocol.registry/publisher-provided\": publisherProvided as any,\n },\n };\n return resp;\n}\n\n// ------------- Public API -------------\n\nexport type ListServersOptions = {\n cursor?: string | null;\n limit?: number | null;\n search?: string | null;\n updatedSince?: string | null;\n version?: string | null;\n};\n\ntype ServerStatus = \"active\" | \"deprecated\" | \"deleted\";\n\nexport async function publishServerVersion(payload: ServerJSON): Promise {\n await runMigrations();\n\n // Strict input validation\n const parsed = await ServerJSONSchema.safeParseAsync(payload);\n if (!parsed.success) {\n throw new Error(\"Invalid server JSON\");\n }\n\n const now = new Date().toISOString();\n const serverName = payload.name;\n const serverNameLower = serverName.toLowerCase();\n const version = payload.version;\n\n let flags = deriveFromPublisherMeta(payload);\n flags = applyHeuristics(flags, payload);\n\n const searchText = computeSearchText(payload, flags);\n\n const iconDescriptor = getMarketplaceIconDescriptor(payload);\n let iconResult: { blobKey: string; mime: string } | null = null;\n if (iconDescriptor.present && iconDescriptor.source) {\n iconResult = await ingestMarketplaceIconOrThrow(serverName, version, iconDescriptor.source);\n }\n\n const db = getDb();\n // Insert\n await db.insert(serverVersions).values({\n serverName,\n serverNameLower,\n version,\n payloadJson: JSON.stringify(payload),\n publishedAt: now,\n updatedAt: now,\n isLatest: false,\n status: \"active\",\n searchText,\n blobIconKey: iconResult?.blobKey ?? null,\n blobIconMime: iconResult?.mime ?? null,\n protocolVersion: flags.protocol_version ?? null,\n hasTools: flags.has_tools ?? null,\n hasResources: flags.has_resources ?? null,\n hasPrompts: flags.has_prompts ?? null,\n hasRoots: flags.has_roots ?? null,\n hasCompletions: flags.has_completions ?? null,\n hasSampling: flags.has_sampling ?? null,\n transports: flags.transports ? JSON.stringify(flags.transports) : null,\n discoveryLinks: flags.discovery_links ? JSON.stringify(flags.discovery_links) : null,\n clientSnippets: flags.client_snippets ? JSON.stringify(flags.client_snippets) : null,\n authMethods: flags.auth_methods ? JSON.stringify(flags.auth_methods) : null,\n });\n\n // Recompute latest for this server:\n // 1) clear previous\n await db\n .update(serverVersions)\n .set({ isLatest: false })\n .where(eq(serverVersions.serverNameLower, serverNameLower));\n // 2) set the newest by (publishedAt desc, id desc)\n const newest = await db\n .select({ id: serverVersions.id })\n .from(serverVersions)\n .where(eq(serverVersions.serverNameLower, serverNameLower))\n .orderBy(desc(serverVersions.publishedAt), desc(serverVersions.id))\n .limit(1);\n if (newest[0]?.id != null) {\n await db\n .update(serverVersions)\n .set({ isLatest: true })\n .where(eq(serverVersions.id, newest[0].id));\n }\n\n // Return the just-published version\n const rows = await db\n .select()\n .from(serverVersions)\n .where(and(eq(serverVersions.serverNameLower, serverNameLower), eq(serverVersions.version, version)))\n .limit(1);\n const row = rows[0];\n if (!row) throw new Error(\"Failed to publish server version\");\n const out = toServerResponse(row);\n // Strict output validation\n await ServerResponseSchema.safeParse(out);\n\n return out;\n}\n\nexport async function updateServerVersion(\n serverName: string,\n version: string,\n payload: ServerJSON\n): Promise {\n await runMigrations();\n\n const serverNameLower = serverName.toLowerCase();\n const db = getDb();\n const existingRows = await db\n .select()\n .from(serverVersions)\n .where(and(eq(serverVersions.serverNameLower, serverNameLower), eq(serverVersions.version, version)))\n .limit(1);\n const existing = existingRows[0];\n if (!existing) {\n throw new Error(\"Server version not found\");\n }\n\n const storedPayloadJson =\n (existing as Record).payloadJson ??\n (existing as Record).payload_json ??\n null;\n\n let storedPayload: ServerJSON | null = null;\n if (typeof storedPayloadJson === \"string\") {\n try {\n storedPayload = JSON.parse(storedPayloadJson) as ServerJSON;\n } catch {\n storedPayload = null;\n }\n }\n\n if (!storedPayload || !deepEqual(storedPayload, payload)) {\n const err = new Error(\"ImmutableVersionConflict\");\n (err as any).code = \"ImmutableVersionConflict\";\n throw err;\n }\n\n const response = toServerResponse(existing);\n const { success } = await ServerResponseSchema.safeParseAsync(response);\n if (!success) {\n throw new Error(\"Invalid server response\");\n }\n return response;\n}\n\nexport async function updateServerStatus(\n serverName: string,\n version: string,\n status: ServerStatus,\n): Promise {\n await runMigrations();\n const serverNameLower = serverName.toLowerCase();\n const db = getDb();\n const existingRows = await db\n .select()\n .from(serverVersions)\n .where(and(eq(serverVersions.serverNameLower, serverNameLower), eq(serverVersions.version, version)))\n .limit(1);\n const existing = existingRows[0];\n if (!existing) {\n throw new Error(\"Server version not found\");\n }\n\n const currentStatus = String(existing.status ?? \"active\").toLowerCase() as ServerStatus;\n const normalizedStatus = status;\n\n if (currentStatus === \"deleted\" && normalizedStatus !== \"deleted\") {\n const err = new Error(\"StatusTransitionNotAllowed\");\n (err as any).code = \"StatusTransitionNotAllowed\";\n throw err;\n }\n\n if (currentStatus === normalizedStatus) {\n const response = toServerResponse(existing);\n const { success } = await ServerResponseSchema.safeParseAsync(response);\n if (!success) {\n throw new Error(\"Invalid server response\");\n }\n return response;\n }\n\n const now = new Date().toISOString();\n await db\n .update(serverVersions)\n .set({ status: normalizedStatus, updatedAt: now })\n .where(eq(serverVersions.id, existing.id))\n .limit(1);\n\n await db\n .update(serverVersions)\n .set({ isLatest: false })\n .where(eq(serverVersions.serverNameLower, serverNameLower));\n\n const newestActive = await db\n .select({ id: serverVersions.id })\n .from(serverVersions)\n .where(and(eq(serverVersions.serverNameLower, serverNameLower), eq(serverVersions.status, \"active\")))\n .orderBy(desc(serverVersions.publishedAt), desc(serverVersions.id))\n .limit(1);\n\n if (newestActive[0]?.id != null) {\n await db\n .update(serverVersions)\n .set({ isLatest: true })\n .where(eq(serverVersions.id, newestActive[0].id))\n .limit(1);\n }\n\n const updatedRows = await db\n .select()\n .from(serverVersions)\n .where(eq(serverVersions.id, existing.id))\n .limit(1);\n const updated = updatedRows[0];\n if (!updated) {\n throw new Error(\"Server version not found after status update\");\n }\n\n const response = toServerResponse(updated);\n const { success } = await ServerResponseSchema.safeParseAsync(response);\n if (!success) {\n throw new Error(\"Invalid server response\");\n }\n return response;\n}\n\nexport async function getLatestServerByName(\n serverName: string\n): Promise {\n await runMigrations();\n const serverNameLower = serverName.toLowerCase();\n const db = getDb();\n const rows = await db\n .select()\n .from(serverVersions)\n .where(\n and(\n eq(serverVersions.serverNameLower, serverNameLower),\n eq(serverVersions.isLatest, true),\n eq(serverVersions.status, \"active\")\n )\n )\n .limit(1);\n const row = rows[0];\n if (!row) return null;\n const out = toServerResponse(row);\n const { success } = await ServerResponseSchema.safeParseAsync(out);\n if (!success) {\n throw new Error(\"Invalid server response\");\n }\n return out;\n}\n\nexport async function getServerByNameVersion(\n serverName: string,\n version: string\n): Promise {\n await runMigrations();\n const serverNameLower = serverName.toLowerCase();\n const db = getDb();\n const rows = await db\n .select()\n .from(serverVersions)\n .where(\n and(\n eq(serverVersions.serverNameLower, serverNameLower),\n eq(serverVersions.version, version),\n eq(serverVersions.status, \"active\")\n )\n )\n .limit(1);\n const row = rows[0];\n if (!row) return null;\n const out = toServerResponse(row);\n const { success } = await ServerResponseSchema.safeParseAsync(out);\n if (!success) {\n throw new Error(\"Invalid server response\");\n }\n return out;\n}\n\nexport async function listServerVersions(\n serverName: string\n): Promise {\n await runMigrations();\n const serverNameLower = serverName.toLowerCase();\n const db = getDb();\n const rows = await db\n .select()\n .from(serverVersions)\n .where(\n and(\n eq(serverVersions.serverNameLower, serverNameLower),\n eq(serverVersions.status, \"active\")\n )\n )\n .orderBy(desc(serverVersions.publishedAt), desc(serverVersions.id));\n const out: ServerResponse[] = rows.map(toServerResponse);\n // Validate each (can be disabled later for perf)\n for (const r of out) {\n const { success } = await ServerResponseSchema.safeParseAsync(r);\n if (!success) {\n throw new Error(\"Invalid server response\");\n }\n }\n return out;\n}\n\nfunction deepEqual(a: unknown, b: unknown): boolean {\n if (a === b) {\n return true;\n }\n if (typeof a === \"number\" && typeof b === \"number\" && Number.isNaN(a) && Number.isNaN(b)) {\n return true;\n }\n if (typeof a !== typeof b) {\n return false;\n }\n if (Array.isArray(a)) {\n if (!Array.isArray(b)) {\n return false;\n }\n if (a.length !== b.length) {\n return false;\n }\n for (let i = 0; i < a.length; i += 1) {\n if (!deepEqual(a[i], b[i])) {\n return false;\n }\n }\n return true;\n }\n if (typeof a === \"object\" && a !== null && b !== null) {\n const aKeys = Object.keys(a as Record);\n const bKeys = Object.keys(b as Record);\n if (aKeys.length !== bKeys.length) {\n return false;\n }\n for (const key of aKeys) {\n if (!Object.prototype.hasOwnProperty.call(b, key)) {\n return false;\n }\n if (\n !deepEqual(\n (a as Record)[key],\n (b as Record)[key],\n )\n ) {\n return false;\n }\n }\n return true;\n }\n return false;\n}\n\n// ------------- Listing with pagination -------------\n\nfunction tokenizeSearch(q?: string | null): string[] {\n if (!q) return [];\n return String(q).toLowerCase().split(/\\s+/).filter(Boolean);\n}\n\nexport async function listServers(\n options: ListServersOptions = {}\n): Promise {\n await runMigrations();\n const db = getDb();\n\n const limit = Math.max(1, Math.min(options.limit ?? 25, 100));\n const cur = options.cursor ? decodeCursor(options.cursor) : null;\n\n // Build WHERE condition\n let cond: any = eq(serverVersions.status, \"active\");\n if (cur) {\n const cursorCond = sql`(${serverVersions.updatedAt} < ${cur.u}\n OR (${serverVersions.updatedAt} = ${cur.u} AND ${serverVersions.serverNameLower} > ${cur.s})\n OR (${serverVersions.updatedAt} = ${cur.u} AND ${serverVersions.serverNameLower} = ${cur.s} AND ${serverVersions.version} < ${cur.v}))`;\n cond = and(cond, cursorCond as any);\n }\n\n if (options.updatedSince) {\n const updatedCond = sql`${serverVersions.updatedAt} > ${options.updatedSince}`;\n cond = and(cond, updatedCond as any);\n }\n\n const versionFilter = options.version?.trim();\n if (versionFilter) {\n if (versionFilter.toLowerCase() === \"latest\") {\n cond = and(cond, eq(serverVersions.isLatest, true));\n } else {\n cond = and(cond, eq(serverVersions.version, versionFilter));\n }\n }\n\n const tokens = tokenizeSearch(options.search);\n for (const t of tokens) {\n const likeCond = sql`${serverVersions.searchText} LIKE ${\"%\" + t + \"%\"}`;\n cond = and(cond, likeCond as any);\n }\n\n const rows = await db\n .select()\n .from(serverVersions)\n .where(cond)\n .orderBy(\n desc(serverVersions.updatedAt),\n asc(serverVersions.serverNameLower),\n desc(serverVersions.version),\n desc(serverVersions.id),\n )\n .limit(limit);\n\n const servers = rows.map(toServerResponse);\n\n const last = rows[rows.length - 1];\n const nextCursor = last\n ? encodeCursor({\n u: String(last.updatedAt),\n s: String(last.serverNameLower),\n v: String(last.version),\n })\n : undefined;\n\n const out: ServerListResponse = {\n servers,\n metadata: {\n count: servers.length,\n ...(nextCursor ? { nextCursor } : {}),\n },\n };\n // Strict output validation\n const { success } = await ServerListResponseSchema.safeParseAsync(out);\n if (!success) {\n throw new Error(\"Invalid server list response\");\n }\n return out;\n}\n\nexport async function getServerById(\n id: number | string\n): Promise {\n const numericId = typeof id === \"string\" ? Number(id) : id;\n if (!Number.isInteger(numericId) || numericId <= 0) {\n return null;\n }\n\n await runMigrations();\n const db = getDb();\n const rows = await db\n .select()\n .from(serverVersions)\n .where(and(eq(serverVersions.id, numericId), eq(serverVersions.status, \"active\")))\n .limit(1);\n\n const row = rows[0];\n if (!row) return null;\n\n const out = toServerResponse(row);\n const { success } = await ServerResponseSchema.safeParseAsync(out);\n if (!success) {\n throw new Error(\"Invalid server response\");\n }\n return out;\n}",[],[236,246,238],"database","8dc629f6-a0da-11f0-8fb0-0224a6c84d84","migrations.ts","8dc62ab4-a0da-11f0-8fb0-0224a6c84d84",18,["D",1759552098984],"// Val Town SQLite migration for MCP Subregistry POC v2\n// - Change table name when modifying schema versions (Val Town pattern)\n// - Keep OpenAPI surface unchanged; these columns support discovery/search\n// - Times are ISO 8601 strings (UTC)\n// - search_text is a lowercased aggregate for LIKE queries (non-FTS)\n//\n// Columns overview:\n// Core:\n// server_name, server_name_lower, version, payload_json, published_at, updated_at,\n// is_latest, status, search_text\n// Blobs:\n// blob_icon_key, blob_icon_mime\n// MCP-alignment (optional/derived):\n// protocol_version, has_tools, has_resources, has_prompts, has_roots,\n// has_completions, has_sampling, transports (JSON), discovery_links (JSON),\n// client_snippets (JSON), auth_methods (JSON)\n\nimport { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nimport { drizzle } from \"https://esm.sh/drizzle-orm@0.44.6/sqlite-proxy?target=deno&dts\";\nimport {\n sqliteTable,\n integer,\n text,\n index,\n uniqueIndex,\n} from \"https://esm.sh/drizzle-orm@0.44.6/sqlite-core?target=deno&dts\";\n\nexport const TABLE_NAME = \"server_versions_poc_v2\";\n\n// Drizzle schema for server_versions_poc_v2\nexport const serverVersions = sqliteTable(\n TABLE_NAME,\n {\n id: integer(\"id\").primaryKey({ autoIncrement: true }),\n serverName: text(\"server_name\").notNull(),\n serverNameLower: text(\"server_name_lower\").notNull(),\n version: text(\"version\").notNull(),\n payloadJson: text(\"payload_json\").notNull(),\n publishedAt: text(\"published_at\").notNull(), // ISO 8601\n updatedAt: text(\"updated_at\").notNull(), // ISO 8601\n isLatest: integer(\"is_latest\", { mode: \"boolean\" }).notNull().default(false),\n status: text(\"status\").notNull().default(\"active\"),\n searchText: text(\"search_text\").notNull(),\n\n // Blob fields\n blobIconKey: text(\"blob_icon_key\"),\n blobIconMime: text(\"blob_icon_mime\"),\n\n // MCP-alignment (optional/derived)\n protocolVersion: text(\"protocol_version\"),\n hasTools: integer(\"has_tools\", { mode: \"boolean\" }),\n hasResources: integer(\"has_resources\", { mode: \"boolean\" }),\n hasPrompts: integer(\"has_prompts\", { mode: \"boolean\" }),\n hasRoots: integer(\"has_roots\", { mode: \"boolean\" }),\n hasCompletions: integer(\"has_completions\", { mode: \"boolean\" }),\n hasSampling: integer(\"has_sampling\", { mode: \"boolean\" }),\n transports: text(\"transports\"), // JSON string\n discoveryLinks: text(\"discovery_links\"),// JSON string\n clientSnippets: text(\"client_snippets\"),// JSON string\n authMethods: text(\"auth_methods\"), // JSON string\n },\n (t) => ({\n uqNameVersion: uniqueIndex(`uq_${TABLE_NAME}_name_version`).on(t.serverNameLower, t.version),\n idxNameLower: index(`idx_${TABLE_NAME}_name_lower`).on(t.serverNameLower),\n idxLatest: index(`idx_${TABLE_NAME}_latest`).on(t.isLatest, t.serverNameLower),\n idxUpdatedAt: index(`idx_${TABLE_NAME}_updated_at`).on(t.updatedAt),\n idxStatus: index(`idx_${TABLE_NAME}_status`).on(t.status),\n })\n);\n\n// Drizzle DB bridge using Val Town sqlite.execute\nexport function getDb() {\n // sqlite-proxy expects a handler: (sql, params, method) => { rows }\n const db = drizzle(async (sqlText: string, params: any[] = [], _method: \"all\" | \"run\" | \"get\" | \"values\") => {\n const res = await sqlite.execute(sqlText, params);\n return { rows: res.rows ?? [] };\n });\n return db;\n}\n\nlet migrationsPromise: Promise | null = null;\n\nexport function runMigrations(): Promise {\n if (!migrationsPromise) {\n migrationsPromise = (async () => {\n await sqlite.execute(\n `CREATE TABLE IF NOT EXISTS ${TABLE_NAME} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n server_name TEXT NOT NULL,\n server_name_lower TEXT NOT NULL,\n version TEXT NOT NULL,\n payload_json TEXT NOT NULL,\n published_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n is_latest INTEGER NOT NULL DEFAULT 0,\n status TEXT NOT NULL DEFAULT 'active',\n search_text TEXT NOT NULL,\n blob_icon_key TEXT,\n blob_icon_mime TEXT,\n protocol_version TEXT,\n has_tools INTEGER,\n has_resources INTEGER,\n has_prompts INTEGER,\n has_roots INTEGER,\n has_completions INTEGER,\n has_sampling INTEGER,\n transports TEXT,\n discovery_links TEXT,\n client_snippets TEXT,\n auth_methods TEXT\n )`,\n );\n\n await sqlite.execute(\n `CREATE UNIQUE INDEX IF NOT EXISTS uq_${TABLE_NAME}_name_version\n ON ${TABLE_NAME} (server_name_lower, version)`,\n );\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_${TABLE_NAME}_name_lower\n ON ${TABLE_NAME} (server_name_lower)`,\n );\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_${TABLE_NAME}_latest\n ON ${TABLE_NAME} (is_latest, server_name_lower)`,\n );\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_${TABLE_NAME}_updated_at\n ON ${TABLE_NAME} (updated_at)`,\n );\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS idx_${TABLE_NAME}_status\n ON ${TABLE_NAME} (status)`,\n );\n })();\n }\n return migrationsPromise;\n}\n\n// Schema changes should be performed via Drizzle migrations (e.g. drizzle-kit) that target Val Town SQLite.\n",[],[236,246,248],"8d9dcefc-a0da-11f0-bb5b-0224a6c84d84",14,["D",1759552098765],"directory",[161,162],[236,246],"8d8ba88a-a0da-11f0-bb5b-0224a6c84d84",13,["D",1759552098645],[160,163],[236],["D",1759523222208],{"_11":12,"_120":67},{"_11":12,"_115":116,"_66":67,"_30":65,"_117":118,"_119":24},{"_38":106,"_13":16,"_32":35,"_107":69,"_108":-5,"_109":-5,"_110":-5,"_111":-5,"_112":-5,"_113":14,"_114":12},"ctx",{"_51":-5,"_139":303,"_304":305,"_306":307,"_308":24,"_309":24,"_310":24,"_311":176,"_312":-5,"_313":-7,"_314":-7,"_315":26,"_316":24,"_317":24,"_318":-5,"_319":24,"_320":24,"_321":24,"_322":-5},"ENV",{"_274":275,"_276":277,"_278":16,"_279":280,"_281":282,"_283":284,"_285":286,"_287":288,"_289":290,"_291":292,"_293":294,"_295":296,"_297":298,"_299":300,"_301":302},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · .vtignore