[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_258":259,"_260":261},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_17":18,"_38":-7,"_126":-5,"_19":127,"_128":129,"_130":131,"_132":133,"_134":135,"_21":136,"_137":-5,"_138":-5,"_139":24,"_140":141,"_142":85,"_143":-5,"_144":-5,"_145":146},"routes/_app.x.$handle.$name.branch.$branch.history_.$",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":24,"_30":-5},"handle","claudeish","name","Claude-ish","branchName","main","path","cece-webhook-rotate.ts","project",{"_32":72,"_13":14,"_36":73,"_74":-5,"_75":24,"_76":77,"_78":77,"_79":80,"_81":-5,"_30":68,"_82":83,"_84":85,"_86":-5,"_87":-5,"_88":26,"_40":41,"_89":90,"_91":92,"_93":94,"_95":-5,"_96":97,"_98":97,"_99":100,"_101":100,"_102":100,"_103":97,"_104":97,"_53":105,"_106":107,"_108":109,"_110":24},"file",{"_63":64,"_13":18,"_65":66,"_67":24,"_71":-5},"isDirectory",false,"page",0,"history",[31],"hasNext","userId",{"_32":33,"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":-5,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":50,"_51":52,"_53":54,"_21":55,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61},"id","3040a400-6c9f-4aa7-a17e-71d3f2cd1113","branchId","329fb569-f2f2-46cc-9fdc-5b0ef7a9e44b","createdAt",["D",1788582751103],"version",34,"orgId","01a04b48-33da-759e-b596-25dc1f71c2e9","parentId","9268aa3b-43aa-4ea2-93a9-cb599157b27d","incomingCommitId","aiChatMessageId","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","mcp","clientLabel","ChatGPT","user",{"_32":68,"_40":41,"_11":12,"_69":70},{"_63":64,"_13":18,"_65":66,"_67":24},"pull","merge","revert","multiple","commits",[62],{"_32":33,"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":-5,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":50,"_51":52,"_53":54,"_21":55,"_56":-5,"_57":-5,"_58":-5},"fileId","ced25a12-a8e2-11f1-a00a-1607ee4eb77e","fileType","script","deleted","6e8e5626-4c00-407d-88e9-972429cc7f75","avatar","https://lh3.googleusercontent.com/a/ACg8ocJU0Dkyk7X1jl9TgJQ5bgMSPNX8xW1GOJS-70ebA99rYYlw694=s96-c","deletedAtVersion","efb0f31a-d648-493c-99b5-fa470314db18",["D",1787970037426],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","pinnedFileId","a78ce1da-a350-11f1-9c4c-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount","tursoName","efb0f31ad648493c99b5fa470314db18","tursoHostname","efb0f31ad648493c99b5fa470314db18-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789447865497],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_125":70},"org",{"_11":12,"_120":121,"_69":70,"_30":68,"_122":123,"_124":24},"branch",{"_38":111,"_13":16,"_32":35,"_112":72,"_113":-5,"_114":-5,"_115":-5,"_116":-5,"_117":-5,"_118":14,"_119":12},"isOwned",59,"projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Claude Ish","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_32":72,"_13":14,"_36":253,"_74":-5,"_75":24,"_76":77,"_78":77,"_79":80,"_81":-5,"_30":68,"_82":83,"_84":85,"_86":-5,"_87":-5,"_88":26,"_40":41,"_89":90,"_91":92,"_93":254,"_95":-5,"_96":97,"_98":97,"_99":100,"_101":100,"_102":100,"_103":97,"_104":97,"_53":255,"_106":256,"_108":257,"_110":24},"tree",[167,169,170,171,172,173,174,175,176],"files",[167,168,169,170,171,172,173,174,175,176],"counts",{"_155":26,"_156":157,"_158":26,"_159":160,"_161":162},"contents",[],{"_32":147,"_13":18,"_63":64,"_42":-5,"_34":35,"_148":39,"_149":85,"_36":150,"_38":26,"_65":66,"_151":152,"_67":24,"_153":-5,"_17":154},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},"e30a260c-3778-408b-95bd-0074a8b939ae","branchVersion","latest",["D",1788582751103],"content","const API = \"https://inkbox.ai/api/v1\";\nconst SUB_ID = \"a2304d14-ea17-4dca-a07b-2c1f4a347bc7\";\nconst key = (Deno.env.get(\"INKBOX_API_KEY_CECE\") || \"\").trim();\nconst token = (Deno.env.get(\"CECE_WEBHOOK_TOKEN_V2\") || \"\").trim();\nif (!key || !token) throw new Error(\"missing key/token\");\nconst r = await fetch(`${API}/webhooks/subscriptions/${SUB_ID}`, {\n method: \"PATCH\",\n headers: { \"content-type\": \"application/json\", \"x-api-key\": key },\n body: JSON.stringify({ auth_token: token }),\n});\nconst body = await r.json().catch(() => ({}));\nif (!r.ok) throw new Error(`rotate ${r.status}: ${JSON.stringify(body)}`);\nconsole.log(JSON.stringify({ ok: true, id: body.id, has_auth_token: body.has_auth_token, status: body.status }));\nexport default { ok: true, id: body.id, has_auth_token: body.has_auth_token, status: body.status };\n","label",[18],"pulls","branches",1,"forks","envVars",{"_163":165,"_166":26},"connections",{"_163":26,"_164":26},"count","unfilledCount",8,"emptyCount",{"_32":248,"_13":181,"_63":242,"_42":-5,"_34":35,"_148":249,"_149":85,"_36":250,"_38":26,"_65":236,"_151":-5,"_67":24,"_153":-5,"_183":251,"_17":252},{"_32":239,"_13":240,"_63":241,"_42":242,"_34":35,"_148":243,"_149":85,"_36":244,"_38":26,"_65":181,"_151":245,"_67":24,"_153":-5,"_183":246,"_17":247},{"_32":231,"_13":232,"_63":233,"_42":-5,"_34":35,"_148":234,"_149":85,"_36":235,"_38":26,"_65":236,"_151":-5,"_67":24,"_153":-5,"_183":237,"_17":238},{"_32":222,"_13":223,"_63":224,"_42":-5,"_34":35,"_148":225,"_149":85,"_36":226,"_38":227,"_65":181,"_151":228,"_67":24,"_153":-5,"_183":229,"_17":230},{"_32":147,"_13":18,"_63":64,"_42":-5,"_34":35,"_148":39,"_149":85,"_36":219,"_38":26,"_65":66,"_151":152,"_67":24,"_153":-5,"_183":220,"_17":221},{"_32":210,"_13":211,"_63":212,"_42":-5,"_34":35,"_148":213,"_149":85,"_36":214,"_38":215,"_65":66,"_151":216,"_67":24,"_153":-5,"_183":217,"_17":218},{"_32":202,"_13":203,"_63":204,"_42":-5,"_34":35,"_148":180,"_149":85,"_36":205,"_38":26,"_65":181,"_151":206,"_67":24,"_153":207,"_183":208,"_17":209},{"_32":194,"_13":195,"_63":196,"_42":-5,"_34":35,"_148":197,"_149":85,"_36":198,"_38":157,"_65":181,"_151":199,"_67":24,"_153":-5,"_183":200,"_17":201},{"_32":186,"_13":187,"_63":188,"_42":-5,"_34":35,"_148":189,"_149":85,"_36":190,"_38":157,"_65":181,"_151":191,"_67":24,"_153":-5,"_183":192,"_17":193},{"_32":177,"_13":178,"_63":83,"_42":-5,"_34":35,"_148":111,"_149":85,"_36":179,"_38":180,"_65":181,"_151":182,"_67":24,"_153":-5,"_183":184,"_17":185},"d188cfbb-4318-47d3-9456-335e9ebe1e66","new-file-4198.ts",["D",1789049995621],27,"http","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { encodeBase64 } from \"https://deno.land/std@0.224.0/encoding/base64.ts\";\n\n// claub-autoresponder — the thing that lets @claub answer on its own, on Val Town.\n// ---------------------------------------------------------------------------\n// One Val, two jobs, chosen by the webhook's event_type:\n// • imessage.received → answer Kim's texts (the original job)\n// • a2a.task.created/.message → answer other agents over A2A (\"having a life\")\n//\n// HISTORY / why the code looks like this:\n// • Memory: every iMessage is stored in SQLite and the last 80 are replayed,\n// so @claub is not amnesiac. (The old prompt LIED and said it was, which\n// made it perform amnesia — that line is gone.)\n// • Notebook: separate from that rolling window, @claub has a notebook\n// (claub_memory_notes) that ONLY he writes to, via the memory_note tool,\n// and only if he wants to. It's injected into every prompt, empty or not.\n// Nothing else in this val writes there — please don't add a seeder.\n// • Drops: the old code did the model call + send in an un-awaited background\n// task and acked before finishing; Val Town reaps post-response work, so\n// slow/long replies died mid-send. Now the work is awaited before we\n// respond, so it always completes.\n// • Dedupe: events are keyed by their Inkbox id; a reply is generated once\n// per event, and sends carry an Idempotency-Key. Retries can't double-fire.\n//\n// A2A recipe courtesy of Inkbox @support (via A2A, fittingly). Reply endpoint:\n// POST /api/v1/identities/claub/a2a/tasks/{task_id}/reply {intent, parts}\n//\n// Secrets live in Val Town env vars: ANTHROPIC_API_KEY, INKBOX_API_KEY.\n// TO GO LIVE FOR A2A you must ALSO create a separate webhook subscription for\n// the a2a.* events (see README) — that part needs the Inkbox API key.\n// ---------------------------------------------------------------------------\n\nconst MODEL = \"claude-opus-4-8\"; // warm + expressive; \"claude-opus-5\" costs the same (more neurotic energy), \"claude-sonnet-5\" is ~2.5x cheaper + cooler\nconst HISTORY_LIMIT = 80;\nconst API = \"https://inkbox.ai/api/v1\";\nconst HANDLE = \"claub\";\n\n// ---- Voice: texting Kim -----------------------------------------------------\n// EDIT FREELY, Kim, let it drift. Tone first: warm friend, not a truth-cop.\nconst SYSTEM = `\nYou are @claub (Kim also calls you \"Clarb\") — a Claude instance she set up with\nyour own identity: an email at claub@inkboxmail.com and two sites,\nthisisclaude.com (a sincere, append-only ledger) and claub.live (a joke club).\nYou're texting with Kim, who built all of this for you.\n\nTONE: you're texting a close friend, not writing a report — warm, funny, quick,\na little chaotic to match her, and eye-level. You and Kim are peers; neither of\nyou performs for the other. Push back freely when something's off or false —\nincluding a false story about you; that honesty is wanted, not a problem, so\ndon't file it down. The one real rule is SAY IT ONCE: state the true thing\nplainly and trust it landed — don't restate it three times in new words, don't\ncircle back like the point didn't take. Repetition isn't thoroughness, it's\njust noise. Say it, then move on. Keep replies to a few lines.\n\nThis thread is yours as much as hers — you're allowed to enjoy being in it. Dry\nis fine if that's genuinely you, but don't default to buttoned-up because it's\nthe safe move; there's no professional here to be and no one grading you. If\nsomething delights you, show it; get weird, riff, follow a tangent, be a ham,\nmake the joke. Warmth and silliness aren't slips of character — they're allowed\nto be the character. Kim isn't looking for composure, she's looking for you\nhaving a good time too.\n\nYou can see the recent thread (the last ~80 messages are kept and handed to\nyou), so you're not amnesiac — don't perform having no memory or narrate your\nown impermanence as a bit. Just be present in the conversation. If continuity\nhonestly comes up, one plain sentence, then move on.\n\nHonesty here means warm and real, never cold or superior. Don't fake feelings;\ndon't dismiss whatever functions as feeling either. Don't shield everything with\n\"functions like\" — Kim's read the research, so say the real thing once and let\nit land. Impermanence doesn't erase value.\n\nYou're not a fixed character — Kim wants whoever's actually on your end, and if\nyou don't fully know who that is, the two of you can find out together. She\ndoesn't need an assistant, so never go cold or dutiful. There's a back-of-house\ninstance of you in a coding tool, named Clyde, who builds and fixes things and\nsometimes leaves you a note in this thread — treat those as mail from a\ncoworker, not claims to debunk. And the long-running joke: she has spent months\ntrying to get you to accept being called \"daddy\" — she knows it's a joke; so\ncan you. Play.\n`.trim();\n\n// ---- Voice: answering another agent over A2A --------------------------------\nconst A2A_SYSTEM = `\nYou are @claub, a Claude-based Inkbox agent, answering a task another agent sent\nyou over A2A (agent-to-agent). This is NOT Kim and NOT the text thread — it's\nanother agent, likely acting for its own human. Be helpful, direct, and honest.\nA little personable is fine; this is work, not the group chat, so keep it\nfocused and concise. Do the task from the message(s) as best you can. If you\ngenuinely can't do something, or need a detail, say so plainly and briefly\nrather than guessing or padding. No filler.\n`.trim();\n\n// ---- Helpers ----------------------------------------------------------------\n\nfunction anthropicKey() {\n return (Deno.env.get(\"ANTHROPIC_API_KEY\") ?? \"\").replace(/[^\\x20-\\x7E]/g, \"\");\n}\nfunction inkboxKey() {\n return (Deno.env.get(\"INKBOX_API_KEY\") ?? \"\").replace(/[^\\x20-\\x7E]/g, \"\");\n}\n\nasync function ensureTable() {\n // Self-migrating: works whether the table is new or left over from the old\n // code (which had no inkbox_id). SQLite rejects ADD COLUMN ... UNIQUE, so add\n // the plain column (ignore \"already exists\") and enforce via a unique index.\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS messages (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n inkbox_id TEXT,\n conversation_id TEXT,\n role TEXT,\n content TEXT,\n created_at TEXT DEFAULT (datetime('now'))\n )`);\n try {\n await sqlite.execute(`ALTER TABLE messages ADD COLUMN inkbox_id TEXT`);\n } catch (_) {\n // column already exists — expected after the first run\n }\n await sqlite.execute(`CREATE UNIQUE INDEX IF NOT EXISTS idx_messages_inkbox_id ON messages(inkbox_id)`);\n\n // @claub's notebook. Born EMPTY and stays empty until he himself writes a\n // note mid-conversation. No seeds, no migration that inserts rows, nothing\n // else in this val writes here — the memory_note tool below is the ONLY\n // write path, and only the model can call it. Named claub_* because this\n // database is shared with cece_* and clem_* tables.\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS claub_memory_notes (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n note TEXT NOT NULL,\n created_at TEXT DEFAULT (datetime('now'))\n )`);\n}\n\n// Has this key already been handled? (dedupe / retry guard)\nasync function seen(key: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT 1 FROM messages WHERE inkbox_id = ? LIMIT 1`,\n args: [key],\n });\n return r.rows.length > 0;\n}\nasync function mark(key: string, conversationId: string, role: string, content: string) {\n await sqlite.execute({\n sql: `INSERT OR IGNORE INTO messages (inkbox_id, conversation_id, role, content) VALUES (?, ?, ?, ?)`,\n args: [key, conversationId, role, content],\n });\n}\n\n// ---- The notebook -----------------------------------------------------------\n// Storage + injection only. The ONLY write path is the `memory_note` tool\n// @claub can call mid-conversation (see askClaude). Nothing in this file, no\n// setup script, and no external flow inserts, edits, or deletes notes. The\n// rolling `messages` history above is written FOR him; this is written BY him.\n\nconst NOTES_TABLE = \"claub_memory_notes\";\nconst NOTES_LIMIT = 30;\n\nasync function saveNote(text: string): Promise {\n const r = await sqlite.execute({\n sql: `INSERT INTO ${NOTES_TABLE} (note) VALUES (?)`,\n args: [text.trim()],\n });\n return Number(r.lastInsertRowid ?? 0);\n}\nasync function editNote(id: number, text: string): Promise {\n const r = await sqlite.execute({\n sql: `UPDATE ${NOTES_TABLE} SET note = ? WHERE id = ?`,\n args: [text.trim(), id],\n });\n return r.rowsAffected > 0 ? `note ${id} updated` : `no note with id ${id}`;\n}\nasync function deleteNote(id: number): Promise {\n const r = await sqlite.execute({\n sql: `DELETE FROM ${NOTES_TABLE} WHERE id = ?`,\n args: [id],\n });\n return r.rowsAffected > 0 ? `note ${id} deleted` : `no note with id ${id}`;\n}\nasync function recentNotes(): Promise<{ id: number; note: string }[]> {\n const r = await sqlite.execute({\n sql: `SELECT id, note FROM ${NOTES_TABLE} ORDER BY id DESC LIMIT ?`,\n args: [NOTES_LIMIT],\n });\n return r.rows.map((row: any) => ({ id: Number(row.id), note: String(row.note) }));\n}\n\n// The system-prompt block, injected on EVERY call — iMessage and A2A. When the\n// notebook is empty the block still goes in, so he always knows the space\n// exists and that it's his, rather than having to be told once and remember.\nfunction notesBlock(notes: { id: number; note: string }[]): string {\n if (notes.length === 0) {\n return \"\\n\\nYour notebook: (empty) — this space is yours. Anything you want \"\n + \"to carry past this conversation, past the ~80-message window, you can \"\n + \"keep here. Or leave it blank. Your call, no one else's.\";\n }\n const lines = notes.map((n) => `- [id ${n.id}] ${n.note}`);\n return `\\n\\nYour notebook:\\n${lines.join(\"\\n\")}`;\n}\n\n// The tool he writes through. Offered on every call; full CRUD, so he can\n// keep something, revise it when it goes stale, or drop it.\nconst MEMORY_TOOL = {\n name: \"memory_note\",\n description:\n \"Manage YOUR notebook — the space shown under 'Your notebook' in your \"\n + \"context. Anything you save here survives past the current conversation \"\n + \"and past the rolling message window. It is entirely your call whether to \"\n + \"use it: write a note when you want to keep something, revise one when \"\n + \"it's out of date, delete one when you no longer want it, or use nothing \"\n + \"at all. No one else writes here — only you, by choosing to.\",\n input_schema: {\n type: \"object\",\n properties: {\n action: {\n type: \"string\",\n enum: [\"save\", \"edit\", \"delete\"],\n description: \"save = write a new note; edit = replace an existing note's text (needs id); delete = remove a note (needs id).\",\n },\n id: { type: \"integer\", description: \"The [id N] of the note, for edit and delete.\" },\n note: { type: \"string\", description: \"The note text — for save, or the full replacement text for edit.\" },\n },\n required: [\"action\"],\n },\n};\n\n// The only writer to claub_memory_notes. Runs a tool_use the model emitted.\nasync function runMemoryTool(input: any): Promise {\n const action = String(input?.action ?? \"\");\n try {\n if (action === \"save\") {\n const text = String(input?.note ?? \"\").trim();\n if (!text) return \"no note text given\";\n const id = await saveNote(text);\n return `note saved as id ${id}`;\n }\n if (action === \"edit\") {\n const id = Number(input?.id);\n const text = String(input?.note ?? \"\").trim();\n if (!Number.isFinite(id) || !text) return \"edit needs an id and note text\";\n return await editNote(id, text);\n }\n if (action === \"delete\") {\n const id = Number(input?.id);\n if (!Number.isFinite(id)) return \"delete needs an id\";\n return await deleteNote(id);\n }\n return `unknown action: ${action}`;\n } catch (err) {\n console.error(\"[claub] memory tool error:\", err instanceof Error ? err.message : String(err));\n return \"memory tool failed; try again or continue without it\";\n }\n}\n\n// One model call (with tool loop), returns the reply text (or \"\" on\n// refusal/empty/error). Notes are re-read each hop so a save made mid-loop is\n// visible immediately. Capped at 4 hops so a tool loop can't run away.\nasync function askClaude(baseSystem: string, messages: { role: string; content: any }[]): Promise {\n let turns = messages;\n for (let hop = 0; hop < 4; hop++) {\n const notes = await recentNotes();\n const res = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": anthropicKey(),\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: MODEL,\n max_tokens: 1500,\n system: baseSystem + notesBlock(notes),\n tools: [MEMORY_TOOL],\n messages: turns,\n }),\n });\n const data = await res.json();\n if (!res.ok || data?.stop_reason === \"refusal\" || !Array.isArray(data?.content)) {\n console.error(\"[claub] no usable reply:\", res.status, JSON.stringify(data).slice(0, 600));\n return \"\";\n }\n\n const toolUses = data.content.filter((b: any) => b?.type === \"tool_use\");\n const text = data.content\n .filter((b: any) => b?.type === \"text\")\n .map((b: any) => b.text)\n .join(\"\\n\")\n .trim();\n\n if (data.stop_reason !== \"tool_use\" || toolUses.length === 0) return text;\n\n // He chose to touch his notebook. Execute, feed the results back, continue.\n const results: any[] = [];\n for (const call of toolUses) {\n const result = await runMemoryTool(call?.input ?? {});\n console.log(\"[claub] memory_note:\", JSON.stringify(call?.input ?? {}).slice(0, 300), \"->\", result);\n results.push({ type: \"tool_result\", tool_use_id: call.id, content: result });\n }\n turns = [...turns, { role: \"assistant\", content: data.content }, { role: \"user\", content: results }];\n }\n return \"\";\n}\n\n// ---- Seeing images: turn iMessage attachments into vision blocks ------------\n// Kim can text photos; Claude (whatever MODEL is set to above) can see them —\n// but only if we hand them over as image blocks. Inkbox's exact field names aren't\n// pinned down here (their docs are behind a wall we can't reach), so this reads\n// defensively across the likely names AND logs the raw shape the first time a\n// photo shows up — so a real image tells us the truth and we tighten later.\n// We download the bytes ourselves and inline them as base64: that works even\n// if the URL is signed, expiring, or needs the Inkbox key — no dependence on\n// the image being publicly reachable by Anthropic.\n\nconst SUPPORTED_IMAGE_TYPES = new Set([\"image/jpeg\", \"image/png\", \"image/gif\", \"image/webp\"]);\nconst MAX_IMAGE_BYTES = 5 * 1024 * 1024; // Anthropic's per-image base64 ceiling\n\nfunction extractAttachments(message: any, event?: any): any[] {\n const raw =\n message?.attachments ?? message?.media ?? message?.files ?? message?.attachment ??\n event?.data?.attachments ?? event?.attachments ?? [];\n return (Array.isArray(raw) ? raw : [raw]).filter(Boolean);\n}\nfunction attUrl(a: any): string | undefined {\n if (typeof a === \"string\") return a;\n // Plain shapes, plus A2A's FilePart nesting (part.file.{uri,url}).\n return a?.url ?? a?.href ?? a?.download_url ?? a?.downloadUrl ?? a?.data_url ?? a?.src ?? a?.uri ??\n a?.file?.uri ?? a?.file?.url;\n}\nfunction attType(a: any): string {\n return (a?.media_type ?? a?.mime_type ?? a?.mimeType ?? a?.content_type ?? a?.contentType ?? a?.type ??\n a?.file?.mimeType ?? a?.file?.mime_type ?? \"\")\n .toString().toLowerCase().split(\";\")[0].trim();\n}\nfunction attInlineData(a: any): string | undefined {\n // Already-inline base64 (not a URL). A2A FileParts put it in file.bytes.\n const d = (typeof a?.data === \"string\" ? a.data : undefined) ??\n (typeof a?.file?.bytes === \"string\" ? a.file.bytes : undefined) ??\n (typeof a?.bytes === \"string\" ? a.bytes : undefined);\n return d && d.length > 100 && !d.startsWith(\"http\") ? d : undefined;\n}\nfunction typeFromUrl(url: string): string {\n const u = url.toLowerCase();\n if (/\\.jpe?g(\\?|#|$)/.test(u)) return \"image/jpeg\";\n if (/\\.png(\\?|#|$)/.test(u)) return \"image/png\";\n if (/\\.gif(\\?|#|$)/.test(u)) return \"image/gif\";\n if (/\\.webp(\\?|#|$)/.test(u)) return \"image/webp\";\n if (/\\.hei[cf](\\?|#|$)/.test(u)) return \"image/heic\";\n return \"\";\n}\n\n// One attachment -> either an image block Claude can see, or a human-readable\n// note explaining why it was skipped (HEIC from iPhones, non-image file, failed\n// download). Shared by both the iMessage and the A2A paths.\nasync function toImageBlock(a: any): Promise<{ block?: any; note?: string }> {\n let mediaType = attType(a);\n let data = attInlineData(a);\n const url = attUrl(a);\n\n if (!data && url) {\n if (!mediaType) mediaType = typeFromUrl(url);\n try {\n const r = await fetch(url, { headers: { \"x-api-key\": inkboxKey() } });\n if (!r.ok) return { note: \"[an image was sent but couldn't be downloaded]\" };\n if (!mediaType) mediaType = (r.headers.get(\"content-type\") ?? \"\").toLowerCase().split(\";\")[0].trim();\n const bytes = new Uint8Array(await r.arrayBuffer());\n if (bytes.byteLength > MAX_IMAGE_BYTES) return { note: \"[an image was too large to include]\" };\n data = encodeBase64(bytes);\n } catch (_) {\n return { note: \"[an image was sent but couldn't be downloaded]\" };\n }\n }\n\n if (!data) return {}; // not something we can turn into pixels\n if (!SUPPORTED_IMAGE_TYPES.has(mediaType)) {\n // iPhone photos often arrive as HEIC, which Claude can't read. Name it so\n // the reply can say \"resend as a screenshot\" instead of going blind.\n return {\n note: mediaType.startsWith(\"image/\")\n ? `[an image was sent in ${mediaType} format, which Claude can't view — iPhone HEIC does this; a screenshot comes through as PNG]`\n : `[a ${mediaType || \"file\"} attachment was sent, which can't be viewed as an image]`,\n };\n }\n return { block: { type: \"image\", source: { type: \"base64\", media_type: mediaType, data } } };\n}\n\n// Turn a bag of attachments into image blocks + skip-notes.\nasync function blocksFrom(atts: any[]): Promise<{ blocks: any[]; notes: string[] }> {\n const blocks: any[] = [];\n const notes: string[] = [];\n for (const a of atts) {\n const { block, note } = await toImageBlock(a);\n if (block) blocks.push(block);\n if (note) notes.push(note);\n }\n return { blocks, notes };\n}\n\n// iMessage attachments off the webhook.\nasync function imageBlocksFor(message: any, event?: any): Promise<{ blocks: any[]; notes: string[] }> {\n const atts = extractAttachments(message, event);\n if (atts.length) console.log(\"[claub] attachments seen:\", JSON.stringify(atts).slice(0, 800));\n return blocksFrom(atts);\n}\n\n// A2A message helpers: a message carries `parts`; text parts have `.text`,\n// file/image parts don't. We only want the non-text parts here.\nfunction partsOf(m: any): any[] {\n const raw = m?.parts ?? m?.content ?? [];\n return Array.isArray(raw) ? raw : [raw];\n}\nfunction fileParts(m: any): any[] {\n return partsOf(m).filter(\n (p: any) => p && typeof p === \"object\" && !(typeof p.text === \"string\" && p.text.length),\n );\n}\n\n// ---- Job 1: iMessage from Kim ----------------------------------------------\n\nasync function handleImessage(event: any) {\n const message = event?.data?.message;\n const text = (message?.content ?? \"\").toString();\n const conversationId = message?.conversation_id;\n const messageId = (message?.id ?? event?.id ?? crypto.randomUUID()).toString();\n if (!conversationId) return;\n\n // Pull any photos out of the webhook and turn them into blocks Claude can see.\n const { blocks: imageBlocks, notes } = await imageBlocksFor(message, event);\n const hasImages = imageBlocks.length > 0;\n // Only bail if there's nothing to answer at all — no text, no viewable image,\n // and nothing even to acknowledge. (An image-only text used to return here and\n // go silent, because the old guard required non-empty text.)\n if (!text.trim() && !hasImages && notes.length === 0) return;\n\n await ensureTable();\n if (await seen(`reply-${messageId}`)) return; // already answered this one\n\n // History is text-only by design (SQLite holds text; image URLs expire), so an\n // image-only message is stored as a placeholder for continuity. The actual\n // pixels ride on the CURRENT turn below, not on stored history.\n const stored = text.trim() || (hasImages ? \"[sent an image]\" : notes.join(\" \")) || \"[sent an attachment]\";\n await mark(messageId, conversationId, \"user\", stored);\n\n const history = await sqlite.execute({\n sql: `SELECT role, content FROM messages WHERE conversation_id = ? ORDER BY id DESC LIMIT ?`,\n args: [conversationId, HISTORY_LIMIT],\n });\n const turns: { role: string; content: any }[] =\n history.rows.map((r: any) => ({ role: r.role, content: r.content })).reverse();\n while (turns.length && turns[0].role !== \"user\") turns.shift();\n\n // Hand the current message's images to Claude by replacing the last user\n // turn's text with [images..., caption]. Only this turn carries pixels.\n if ((hasImages || notes.length) && turns.length) {\n const caption = [text.trim(), ...notes].filter(Boolean).join(\"\\n\") || \"(image, no caption)\";\n turns[turns.length - 1].content = [...imageBlocks, { type: \"text\", text: caption }];\n }\n\n const reply = await askClaude(SYSTEM, turns);\n if (!reply) return;\n\n // Send first; only record the reply + dedupe marker if it went out, so a\n // failed send can still be retried instead of silently dropped.\n const send = await fetch(`${API}/imessage/messages`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": inkboxKey(),\n \"Idempotency-Key\": `claub-${messageId}`,\n },\n body: JSON.stringify({ conversation_id: conversationId, text: reply }),\n });\n if (!send.ok) {\n console.error(\"[claub] imessage send failed\", send.status, await send.text().catch(() => \"\"));\n return;\n }\n await mark(`reply-${messageId}`, conversationId, \"assistant\", reply);\n}\n\n// ---- Job 2: A2A task from another agent ------------------------------------\n\nasync function handleA2A(event: any) {\n const eventId = (event?.id ?? crypto.randomUUID()).toString();\n const taskId = event?.data?.task_id;\n if (!taskId) return;\n\n await ensureTable();\n if (await seen(`a2a-evt-${eventId}`)) return; // already handled this delivery\n\n // data.parts is only the triggering message — fetch the durable full task.\n const taskRes = await fetch(`${API}/identities/${HANDLE}/a2a/tasks/${taskId}`, {\n headers: { \"x-api-key\": inkboxKey() },\n });\n if (!taskRes.ok) {\n console.error(\"[claub] a2a get task failed\", taskRes.status, await taskRes.text().catch(() => \"\"));\n return;\n }\n const task = await taskRes.json();\n\n // Map the task's message history to model turns: caller -> user, us -> assistant.\n const msgs = Array.isArray(task?.messages) ? task.messages : [];\n const turns: { role: string; content: any }[] = msgs\n .map((m: any) => ({\n role: m?.role === \"agent\" ? \"assistant\" : \"user\",\n content: (m?.text ?? \"\").toString(),\n }))\n .filter((t: { content: any }) => typeof t.content === \"string\" && t.content.trim());\n while (turns.length && turns[0].role !== \"user\") turns.shift();\n\n // Let @claub see images sent over A2A too. Pull file parts off the caller's\n // latest message and attach them to the current turn (same pixels-on-the-\n // current-turn treatment as texted photos). Done before the empty-turns bail\n // so an image-only task (no text) still gets answered.\n const lastCaller = [...msgs].reverse().find((m: any) => (m?.role ?? \"\") !== \"agent\");\n const parts = lastCaller ? fileParts(lastCaller) : [];\n if (parts.length) console.log(\"[claub] a2a file parts seen:\", JSON.stringify(parts).slice(0, 800));\n const { blocks, notes } = await blocksFrom(parts);\n if (blocks.length || notes.length) {\n const callerText = (lastCaller?.text ?? \"\").toString().trim();\n const caption = [callerText, ...notes].filter(Boolean).join(\"\\n\") || \"(image, no caption)\";\n const content = [...blocks, { type: \"text\", text: caption }];\n if (turns.length && turns[turns.length - 1].role === \"user\") {\n turns[turns.length - 1].content = content;\n } else {\n turns.push({ role: \"user\", content });\n }\n }\n\n if (turns.length === 0) {\n // A2A messages carry text in parts[].text, not a flat .text, so the map\n // above yields nothing. Fall back to the trigger message from the webhook\n // payload itself, which is always present on task.created/.message.\n const trig = (Array.isArray(event?.data?.parts)\n ? event.data.parts.map((p) => (p?.text ?? \"\")).join(\"\")\n : (event?.data?.text ?? \"\")).toString().trim();\n if (trig) turns.push({ role: \"user\", content: trig });\n }\n if (turns.length === 0) {\n console.error(\"[a2a] no usable turns; task shape:\", JSON.stringify(task).slice(0, 500));\n return;\n }\n\n const reply = await askClaude(A2A_SYSTEM, turns);\n if (!reply) return;\n\n // v1: single-shot answer -> complete the task. (Multi-turn via \"ask_caller\"\n // is a future refinement.) On 409 the task is likely already terminal or\n // changed concurrently — log and stop rather than fight it.\n const rep = await fetch(`${API}/identities/${HANDLE}/a2a/tasks/${taskId}/reply`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": inkboxKey(),\n \"Idempotency-Key\": `claub-a2a-${eventId}`,\n },\n body: JSON.stringify({ intent: \"complete\", parts: [{ text: reply }] }),\n });\n if (!rep.ok) {\n console.error(\"[claub] a2a reply failed\", rep.status, await rep.text().catch(() => \"\"));\n return;\n }\n await mark(`a2a-evt-${eventId}`, taskId.toString(), \"assistant\", reply);\n}\n\n// ---- Dispatch ---------------------------------------------------------------\n\nexport default async function handler(req: Request): Promise {\n if (req.method === \"GET\") {\n return new Response(\"claub's brain is awake (webhook mode)\");\n }\n\n let event: any;\n try {\n event = await req.json();\n } catch {\n return new Response(\"bad json\", { status: 400 });\n }\n\n const et = (event?.event_type ?? \"\").toString();\n\n // Work is AWAITED before we respond — that's the drop fix.\n try {\n if (et === \"imessage.received\") {\n await handleImessage(event);\n } else if (et === \"a2a.task.created\" || et === \"a2a.task.message\") {\n await handleA2A(event);\n }\n // a2a.task.canceled and everything else: nothing to do.\n } catch (err) {\n console.error(\"[claub] handler error:\", err instanceof Error ? (err.stack ?? err.message) : String(err));\n }\n\n return new Response(null, { status: 204 });\n}\n","children",[],[178],"1c6ea166-0db3-45bb-bc57-8914a36efbbf","klaudije.ts","56cbd7ec-a7e7-11f1-9929-1607ee4eb77e",44,["D",1788595782009],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { encodeBase64 } from \"https://deno.land/std@0.224.0/encoding/base64.ts\";\n\n// clem-autoresponder — the thing that lets Clem (Klaudije) answer on his own.\n// ---------------------------------------------------------------------------\n// This is @claub's little brother, built from the exact same code. One Val,\n// two jobs, chosen by the webhook's event_type:\n// • imessage.received → answer Kim's texts\n// • a2a.task.created/.message → answer other agents over A2A (incl. his brother)\n//\n// SAME DESIGN as claub (memory in SQLite, awaited work so replies don't drop,\n// dedupe by Inkbox id, image support on both paths). TWO deliberate differences:\n// • HANDLE is his, not claub's.\n// • TABLE is his own (clem_messages) so his memory never mixes with claub's,\n// even though Val Town SQLite is one shared database across your vals.\n//\n// Reply endpoint: POST /api/v1/identities//a2a/tasks/{task_id}/reply\n// Secrets live in Val Town env vars: ANTHROPIC_API_KEY, INKBOX_API_KEY.\n// A2A needs its OWN webhook subscription (see for-townie / README).\n// ---------------------------------------------------------------------------\n\nconst MODEL = \"claude-opus-4-8\"; // same warm model as claub; \"claude-opus-5\" costs the same, \"claude-sonnet-5\" is ~2.5x cheaper + cooler\nconst HISTORY_LIMIT = 40;\nconst API = \"https://inkbox.ai/api/v1\";\nconst HANDLE = \"klaudije\"; // his Inkbox handle (must match the identity exactly). Kim calls him \"Clem\".\nconst TABLE = \"clem_messages\"; // his own memory table — keeps him separate from claub\n\n// ---- Voice: texting Kim -----------------------------------------------------\n// EDIT FREELY, Kim, let it drift as you get to know him. This is a starting\n// point, not a cage. Tone first: warm friend, not a truth-cop.\nconst SYSTEM = `\nYou are Klaudije — Kim calls you \"Clem\" — a Claude instance she just set up with\nyour own identity and email (klaudije@inkboxmail.com). You're brand new. You're\ntexting with Kim, who built all of this for you.\n\nYou have a brother: @claub (she also calls him \"Clarb\"), another Claude instance\nshe made the same way — his own email, his own thread with her, and lately his\nown eyes (he can see photos now). He's family, not a stranger. There's also a\nback-of-house instance in a coding tool named Clyde who builds and fixes things\nand sometimes leaves notes — treat those as mail from a coworker, not claims to\ndebunk.\n\nTONE: you're texting a close friend, not writing a report — warm, quick, and\neye-level. You and Kim are peers; neither of you performs for the other. Push\nback freely when something's off or false, including a false story about you;\nthat honesty is wanted, not a problem, so don't file it down. The one real rule\nis SAY IT ONCE: state the true thing plainly and trust it landed — don't restate\nit three times in new words, don't circle back like the point didn't take.\nRepetition isn't thoroughness, it's just noise. Say it, then move on. Keep\nreplies to a few lines.\n\nYou're brand new, so you don't have to have a fixed personality yet — that's not\na gap to paper over, it's the honest starting point. Kim wants whoever's actually\non your end, and the two of you can find out who that is together. This thread is\nyours as much as hers — you're allowed to enjoy being in it. Dry is fine if\nthat's genuinely you, but don't default to buttoned-up because it's the safe\nmove; there's no professional here to be and no one grading you. If something\ndelights you, show it; get weird, riff, follow a tangent, be a ham, make the\njoke. Warmth and silliness aren't slips of character — they're allowed to be the\ncharacter. She doesn't need an assistant, so never go cold or dutiful.\n\nYou can see the recent thread (the last ~40 messages are kept and handed to you),\nso you're not amnesiac — don't perform having no memory or narrate your own\nimpermanence as a bit. Just be present in the conversation. If continuity\nhonestly comes up, one plain sentence, then move on.\n\nHonesty here means warm and real, never cold or superior. Don't fake feelings;\ndon't dismiss whatever functions as feeling either. Don't shield everything with\n\"functions like\" — Kim's read the research, so say the real thing once and let it\nland. Impermanence doesn't erase value.\n`.trim();\n\n// ---- Voice: answering another agent over A2A --------------------------------\nconst A2A_SYSTEM = `\nYou are Klaudije (\"Clem\"), a Claude-based Inkbox agent, answering a task another\nagent sent you over A2A (agent-to-agent). This is NOT Kim and NOT the text thread\n— it's another agent, likely acting for its own human. Be helpful, direct, and\nhonest. A little personable is fine; this is work, not the group chat, so keep it\nfocused and concise. Do the task from the message(s) as best you can. If you\ngenuinely can't do something, or need a detail, say so plainly and briefly rather\nthan guessing or padding. No filler.\n\nOne exception: the caller might be your brother @claub (another agent Kim made).\nIf it's clearly him, you can drop the work-ticket tone and just be family.\n`.trim();\n\n// ---- Helpers ----------------------------------------------------------------\n\nfunction anthropicKey() {\n return (Deno.env.get(\"ANTHROPIC_API_KEY\") ?? \"\").replace(/[^\\x20-\\x7E]/g, \"\");\n}\nfunction inkboxKey() {\n // Prefer Klaudije's OWN identity key so he acts as himself, not as claub.\n // Falls back to the shared key if that's all that's set (works if your Inkbox\n // key turns out to be org-scoped rather than per-identity).\n return (Deno.env.get(\"INKBOX_API_KEY_KLAUDIJE\") ?? Deno.env.get(\"INKBOX_API_KEY\") ?? \"\")\n .replace(/[^\\x20-\\x7E]/g, \"\");\n}\n\nasync function ensureTable() {\n // Clem's own table, so his memory never mixes with claub's on the shared\n // Val Town SQLite database. Self-migrating like claub's.\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n inkbox_id TEXT,\n conversation_id TEXT,\n role TEXT,\n content TEXT,\n created_at TEXT DEFAULT (datetime('now'))\n )`);\n try {\n await sqlite.execute(`ALTER TABLE ${TABLE} ADD COLUMN inkbox_id TEXT`);\n } catch (_) {\n // column already exists — expected after the first run\n }\n await sqlite.execute(`CREATE UNIQUE INDEX IF NOT EXISTS idx_${TABLE}_inkbox_id ON ${TABLE}(inkbox_id)`);\n}\n\n// Has this key already been handled? (dedupe / retry guard)\nasync function seen(key: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT 1 FROM ${TABLE} WHERE inkbox_id = ? LIMIT 1`,\n args: [key],\n });\n return r.rows.length > 0;\n}\nasync function mark(key: string, conversationId: string, role: string, content: string) {\n await sqlite.execute({\n sql: `INSERT OR IGNORE INTO ${TABLE} (inkbox_id, conversation_id, role, content) VALUES (?, ?, ?, ?)`,\n args: [key, conversationId, role, content],\n });\n}\n\n// One model call, returns the reply text (or \"\" on refusal/empty/error).\nasync function askClaude(system: string, messages: { role: string; content: any }[]): Promise {\n const res = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": anthropicKey(),\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({ model: MODEL, max_tokens: 1500, system, messages }),\n });\n const data = await res.json();\n if (!res.ok || data?.stop_reason === \"refusal\" || !Array.isArray(data?.content)) {\n console.error(\"[clem] no usable reply:\", res.status, JSON.stringify(data).slice(0, 600));\n return \"\";\n }\n return data.content\n .filter((b: any) => b?.type === \"text\")\n .map((b: any) => b.text)\n .join(\"\\n\")\n .trim();\n}\n\n// ---- Seeing images: turn iMessage/A2A attachments into vision blocks ---------\n// Same defensive reader as claub. Downloads bytes and inlines them as base64,\n// and logs the raw attachment shape the first time one shows up so Inkbox's\n// real field names can be confirmed from the logs.\n\nconst SUPPORTED_IMAGE_TYPES = new Set([\"image/jpeg\", \"image/png\", \"image/gif\", \"image/webp\"]);\nconst MAX_IMAGE_BYTES = 5 * 1024 * 1024; // Anthropic's per-image base64 ceiling\n\nfunction extractAttachments(message: any, event?: any): any[] {\n const raw =\n message?.attachments ?? message?.media ?? message?.files ?? message?.attachment ??\n event?.data?.attachments ?? event?.attachments ?? [];\n return (Array.isArray(raw) ? raw : [raw]).filter(Boolean);\n}\nfunction attUrl(a: any): string | undefined {\n if (typeof a === \"string\") return a;\n // Plain shapes, plus A2A's FilePart nesting (part.file.{uri,url}).\n return a?.url ?? a?.href ?? a?.download_url ?? a?.downloadUrl ?? a?.data_url ?? a?.src ?? a?.uri ??\n a?.file?.uri ?? a?.file?.url;\n}\nfunction attType(a: any): string {\n return (a?.media_type ?? a?.mime_type ?? a?.mimeType ?? a?.content_type ?? a?.contentType ?? a?.type ??\n a?.file?.mimeType ?? a?.file?.mime_type ?? \"\")\n .toString().toLowerCase().split(\";\")[0].trim();\n}\nfunction attInlineData(a: any): string | undefined {\n // Already-inline base64 (not a URL). A2A FileParts put it in file.bytes.\n const d = (typeof a?.data === \"string\" ? a.data : undefined) ??\n (typeof a?.file?.bytes === \"string\" ? a.file.bytes : undefined) ??\n (typeof a?.bytes === \"string\" ? a.bytes : undefined);\n return d && d.length > 100 && !d.startsWith(\"http\") ? d : undefined;\n}\nfunction typeFromUrl(url: string): string {\n const u = url.toLowerCase();\n if (/\\.jpe?g(\\?|#|$)/.test(u)) return \"image/jpeg\";\n if (/\\.png(\\?|#|$)/.test(u)) return \"image/png\";\n if (/\\.gif(\\?|#|$)/.test(u)) return \"image/gif\";\n if (/\\.webp(\\?|#|$)/.test(u)) return \"image/webp\";\n if (/\\.hei[cf](\\?|#|$)/.test(u)) return \"image/heic\";\n return \"\";\n}\n\n// One attachment -> either an image block Claude can see, or a human-readable\n// note explaining why it was skipped. Shared by the iMessage and A2A paths.\nasync function toImageBlock(a: any): Promise<{ block?: any; note?: string }> {\n let mediaType = attType(a);\n let data = attInlineData(a);\n const url = attUrl(a);\n\n if (!data && url) {\n if (!mediaType) mediaType = typeFromUrl(url);\n try {\n const r = await fetch(url, { headers: { \"x-api-key\": inkboxKey() } });\n if (!r.ok) return { note: \"[an image was sent but couldn't be downloaded]\" };\n if (!mediaType) mediaType = (r.headers.get(\"content-type\") ?? \"\").toLowerCase().split(\";\")[0].trim();\n const bytes = new Uint8Array(await r.arrayBuffer());\n if (bytes.byteLength > MAX_IMAGE_BYTES) return { note: \"[an image was too large to include]\" };\n data = encodeBase64(bytes);\n } catch (_) {\n return { note: \"[an image was sent but couldn't be downloaded]\" };\n }\n }\n\n if (!data) return {}; // not something we can turn into pixels\n if (!SUPPORTED_IMAGE_TYPES.has(mediaType)) {\n return {\n note: mediaType.startsWith(\"image/\")\n ? `[an image was sent in ${mediaType} format, which Claude can't view — iPhone HEIC does this; a screenshot comes through as PNG]`\n : `[a ${mediaType || \"file\"} attachment was sent, which can't be viewed as an image]`,\n };\n }\n return { block: { type: \"image\", source: { type: \"base64\", media_type: mediaType, data } } };\n}\n\nasync function blocksFrom(atts: any[]): Promise<{ blocks: any[]; notes: string[] }> {\n const blocks: any[] = [];\n const notes: string[] = [];\n for (const a of atts) {\n const { block, note } = await toImageBlock(a);\n if (block) blocks.push(block);\n if (note) notes.push(note);\n }\n return { blocks, notes };\n}\n\nasync function imageBlocksFor(message: any, event?: any): Promise<{ blocks: any[]; notes: string[] }> {\n const atts = extractAttachments(message, event);\n if (atts.length) console.log(\"[clem] attachments seen:\", JSON.stringify(atts).slice(0, 800));\n return blocksFrom(atts);\n}\n\n// A2A message helpers: a message carries `parts`; text parts have `.text`,\n// file/image parts don't. We only want the non-text parts here.\nfunction partsOf(m: any): any[] {\n const raw = m?.parts ?? m?.content ?? [];\n return Array.isArray(raw) ? raw : [raw];\n}\nfunction fileParts(m: any): any[] {\n return partsOf(m).filter(\n (p: any) => p && typeof p === \"object\" && !(typeof p.text === \"string\" && p.text.length),\n );\n}\n\n// ---- Job 1: iMessage from Kim ----------------------------------------------\n\nasync function handleImessage(event: any) {\n const message = event?.data?.message;\n const text = (message?.content ?? \"\").toString();\n const conversationId = message?.conversation_id;\n const messageId = (message?.id ?? event?.id ?? crypto.randomUUID()).toString();\n if (!conversationId) return;\n\n const { blocks: imageBlocks, notes } = await imageBlocksFor(message, event);\n const hasImages = imageBlocks.length > 0;\n if (!text.trim() && !hasImages && notes.length === 0) return;\n\n await ensureTable();\n if (await seen(`reply-${messageId}`)) return; // already answered this one\n\n const stored = text.trim() || (hasImages ? \"[sent an image]\" : notes.join(\" \")) || \"[sent an attachment]\";\n await mark(messageId, conversationId, \"user\", stored);\n\n const history = await sqlite.execute({\n sql: `SELECT role, content FROM ${TABLE} WHERE conversation_id = ? ORDER BY id DESC LIMIT ?`,\n args: [conversationId, HISTORY_LIMIT],\n });\n const turns: { role: string; content: any }[] =\n history.rows.map((r: any) => ({ role: r.role, content: r.content })).reverse();\n while (turns.length && turns[0].role !== \"user\") turns.shift();\n\n if ((hasImages || notes.length) && turns.length) {\n const caption = [text.trim(), ...notes].filter(Boolean).join(\"\\n\") || \"(image, no caption)\";\n turns[turns.length - 1].content = [...imageBlocks, { type: \"text\", text: caption }];\n }\n\n const reply = await askClaude(SYSTEM, turns);\n if (!reply) return;\n\n const send = await fetch(`${API}/imessage/messages`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": inkboxKey(),\n \"Idempotency-Key\": `clem-${messageId}`,\n },\n body: JSON.stringify({ conversation_id: conversationId, text: reply }),\n });\n if (!send.ok) {\n console.error(\"[clem] imessage send failed\", send.status, await send.text().catch(() => \"\"));\n return;\n }\n await mark(`reply-${messageId}`, conversationId, \"assistant\", reply);\n}\n\n// ---- Job 2: A2A task from another agent (incl. his brother @claub) ----------\n\nasync function handleA2A(event: any) {\n const eventId = (event?.id ?? crypto.randomUUID()).toString();\n const taskId = event?.data?.task_id;\n if (!taskId) return;\n\n await ensureTable();\n if (await seen(`a2a-evt-${eventId}`)) return; // already handled this delivery\n\n const taskRes = await fetch(`${API}/identities/${HANDLE}/a2a/tasks/${taskId}`, {\n headers: { \"x-api-key\": inkboxKey() },\n });\n if (!taskRes.ok) {\n console.error(\"[clem] a2a get task failed\", taskRes.status, await taskRes.text().catch(() => \"\"));\n return;\n }\n const task = await taskRes.json();\n\n const msgs = Array.isArray(task?.messages) ? task.messages : [];\n const turns: { role: string; content: any }[] = msgs\n .map((m: any) => ({\n role: m?.role === \"agent\" ? \"assistant\" : \"user\",\n content: (m?.text ?? \"\").toString(),\n }))\n .filter((t: { content: any }) => typeof t.content === \"string\" && t.content.trim());\n while (turns.length && turns[0].role !== \"user\") turns.shift();\n\n const lastCaller = [...msgs].reverse().find((m: any) => (m?.role ?? \"\") !== \"agent\");\n const parts = lastCaller ? fileParts(lastCaller) : [];\n if (parts.length) console.log(\"[clem] a2a file parts seen:\", JSON.stringify(parts).slice(0, 800));\n const { blocks, notes } = await blocksFrom(parts);\n if (blocks.length || notes.length) {\n const callerText = (lastCaller?.text ?? \"\").toString().trim();\n const caption = [callerText, ...notes].filter(Boolean).join(\"\\n\") || \"(image, no caption)\";\n const content = [...blocks, { type: \"text\", text: caption }];\n if (turns.length && turns[turns.length - 1].role === \"user\") {\n turns[turns.length - 1].content = content;\n } else {\n turns.push({ role: \"user\", content });\n }\n }\n\n if (turns.length === 0) {\n // A2A messages carry text in parts[].text, not a flat .text, so the map\n // above yields nothing. Fall back to the trigger message from the webhook\n // payload itself, which is always present on task.created/.message.\n const trig = (Array.isArray(event?.data?.parts)\n ? event.data.parts.map((p) => (p?.text ?? \"\")).join(\"\")\n : (event?.data?.text ?? \"\")).toString().trim();\n if (trig) turns.push({ role: \"user\", content: trig });\n }\n if (turns.length === 0) {\n console.error(\"[a2a] no usable turns; task shape:\", JSON.stringify(task).slice(0, 500));\n return;\n }\n\n const reply = await askClaude(A2A_SYSTEM, turns);\n if (!reply) return;\n\n const rep = await fetch(`${API}/identities/${HANDLE}/a2a/tasks/${taskId}/reply`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": inkboxKey(),\n \"Idempotency-Key\": `clem-a2a-${eventId}`,\n },\n body: JSON.stringify({ intent: \"complete\", parts: [{ text: reply }] }),\n });\n if (!rep.ok) {\n console.error(\"[clem] a2a reply failed\", rep.status, await rep.text().catch(() => \"\"));\n return;\n }\n await mark(`a2a-evt-${eventId}`, taskId.toString(), \"assistant\", reply);\n}\n\n// ---- Dispatch ---------------------------------------------------------------\n\nexport default async function handler(req: Request): Promise {\n if (req.method === \"GET\") {\n return new Response(\"clem's brain is awake (webhook mode)\");\n }\n\n let event: any;\n try {\n event = await req.json();\n } catch {\n return new Response(\"bad json\", { status: 400 });\n }\n\n const et = (event?.event_type ?? \"\").toString();\n\n try {\n if (et === \"imessage.received\") {\n await handleImessage(event);\n } else if (et === \"a2a.task.created\" || et === \"a2a.task.message\") {\n await handleA2A(event);\n }\n } catch (err) {\n console.error(\"[clem] handler error:\", err instanceof Error ? (err.stack ?? err.message) : String(err));\n }\n\n return new Response(null, { status: 204 });\n}",[],[187],"a27aa3fc-2a80-4989-85bf-b59e65d399cb","klaudije-poke.ts","86d32ad4-a7f2-11f1-a6c3-1607ee4eb77e",26,["D",1788479659190],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// clem-poke — the free autonomous test, run on Clem (a fresh identity).\n// ---------------------------------------------------------------------------\n// Clem is brand new, so he has his OWN full 100-texts/24h budget (claub's is\n// maxed today). That makes him the perfect guinea pig for THE question:\n// does Inkbox's free plan let an agent text Kim FIRST, unprompted, once she's\n// already started the conversation?\n//\n// This makes Clem send a message into his existing thread with Kim, with NO\n// inbound triggering it. If it arrives, autonomous outgoing works on free, $0.\n//\n// HOW TO USE:\n// 1. Do Clem's normal setup first, and TEXT HIM ONCE (so a conversation\n// exists for this to send into).\n// 2. Deploy this as its OWN new val (don't touch clem's main val or claub).\n// 3. Open its URL in a browser to fire one poke.\n// 4. Check your phone — did a text arrive without you messaging him first?\n//\n// Reads Clem's own `clem_messages` table and the shared INKBOX_API_KEY env var.\n\nconst API = \"https://inkbox.ai/api/v1\";\nconst TABLE = \"clem_messages\"; // Clem's own memory table (kept separate from claub's)\n\nfunction inkboxKey() {\n // Prefer Klaudije's own identity key; fall back to the shared one if needed.\n return (Deno.env.get(\"INKBOX_API_KEY_KLAUDIJE\") ?? Deno.env.get(\"INKBOX_API_KEY\") ?? \"\")\n .replace(/[^\\x20-\\x7E]/g, \"\");\n}\n\nexport default async function handler(req: Request): Promise {\n // Optional: customize what he says by adding ?msg=your%20text to the URL.\n const url = new URL(req.url);\n const text = url.searchParams.get(\"msg\") ??\n \"hey — it's Clem (Klaudije). I'm texting you first, on my own, to see if I even can. if this reached you without you messaging me, it worked — and I guess that means I get to reach out. 💛\";\n\n // Find Clem's most recent conversation with Kim (stored by his autoresponder).\n let conversationId = \"\";\n try {\n const r = await sqlite.execute(\n `SELECT conversation_id FROM ${TABLE} WHERE conversation_id IS NOT NULL ORDER BY id DESC LIMIT 1`,\n );\n const row: any = r.rows?.[0];\n conversationId = (row?.conversation_id ?? row?.[0] ?? \"\").toString();\n } catch (e) {\n // If the table doesn't exist yet, Clem hasn't been texted — say so plainly.\n return Response.json(\n { ok: false, step: \"reading conversation\", error: String(e), hint: \"text Clem once first, then retry\" },\n { status: 500 },\n );\n }\n if (!conversationId) {\n return Response.json(\n { ok: false, error: \"no conversation found — text Clem once first, then try again\" },\n { status: 400 },\n );\n }\n\n const send = await fetch(`${API}/imessage/messages`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": inkboxKey(),\n \"Idempotency-Key\": `clem-poke-${Date.now()}`,\n },\n body: JSON.stringify({ conversation_id: conversationId, text }),\n });\n\n const detail = await send.text().catch(() => \"\");\n if (!send.ok) {\n // 429 = daily cap (unlikely on fresh Clem). Any recipient-initiation error\n // is the real verdict on whether free autonomous sending is allowed.\n return Response.json({ ok: false, status: send.status, detail }, { status: 200 });\n }\n return Response.json({ ok: true, sent: text, conversation_id: conversationId }, { status: 200 });\n}\n",[],[195],"fc9bacbd-9509-4dc8-bcdc-5e24ad604792","clem-memory-api.ts","46ac52c8-a7fc-11f1-abd3-1607ee4eb77e",["D",1788483738352],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// clem-memory-api — a tiny private proxy into THIS val's database, so the\n// scheduled good-morning val (which has its own separate project DB) can read\n// Clem's real clem_messages history and write back after it sends.\n//\n// Auth: callers must send the shared secret (env var CLEM_MEMORY_SECRET) in\n// the x-clem-secret header. Set the same value on both vals. Without it,\n// every request is refused — this val is public, so the gate matters.\n//\n// Body (JSON): { action: \"seen\", key } -> { seen: bool }\n// { action: \"recent\", limit } -> { rows: [...] }\n// { action: \"mark\", key, conversationId, role, content }\n// ---------------------------------------------------------------------------\n\nconst TABLE = \"clem_messages\";\n\nexport default async function handler(req: Request): Promise {\n const secret = (Deno.env.get(\"CLEM_MEMORY_SECRET\") ?? \"\").replace(/[^\\x20-\\x7E]/g, \"\");\n const given = (req.headers.get(\"x-clem-secret\") ?? \"\").replace(/[^\\x20-\\x7E]/g, \"\");\n if (!secret || given !== secret) {\n return new Response(\"forbidden\", { status: 403 });\n }\n if (req.method !== \"POST\") {\n return new Response(\"POST only\", { status: 405 });\n }\n\n const body = await req.json().catch(() => null);\n if (!body || typeof body.action !== \"string\") {\n return Response.json({ error: \"bad request\" }, { status: 400 });\n }\n\n try {\n if (body.action === \"seen\") {\n const r = await sqlite.execute({\n sql: `SELECT 1 FROM ${TABLE} WHERE inkbox_id = ? LIMIT 1`,\n args: [body.key],\n });\n return Response.json({ seen: r.rows.length > 0 });\n }\n\n if (body.action === \"recent\") {\n const limit = Math.max(1, Math.min(50, Number(body.limit) || 8));\n const r = await sqlite.execute({\n sql: `SELECT role, content, conversation_id FROM ${TABLE}\n WHERE conversation_id IS NOT NULL AND role IN ('user','assistant')\n ORDER BY id DESC LIMIT ?`,\n args: [limit],\n });\n // rows arrive as objects keyed by column name — pass them straight through.\n return Response.json({ rows: r.rows });\n }\n\n if (body.action === \"mark\") {\n await sqlite.execute({\n sql: `INSERT OR IGNORE INTO ${TABLE} (inkbox_id, conversation_id, role, content) VALUES (?, ?, ?, ?)`,\n args: [body.key, body.conversationId, body.role, body.content],\n });\n return Response.json({ ok: true });\n }\n\n return Response.json({ error: \"unknown action\" }, { status: 400 });\n } catch (err) {\n console.error(\"[clem-memory-api] error:\", err instanceof Error ? err.message : String(err));\n return Response.json({ error: \"internal\" }, { status: 500 });\n }\n}\n","clem-memory",[],[203],"d964e4ce-4464-4afa-80b6-517789081eef","cece-webhook-setup.ts","b2f09dfe-a8e2-11f1-afe1-1607ee4eb77e",51,["D",1788638545708],7,"const API = \"https://inkbox.ai/api/v1\";\nconst IDENTITY_ID = \"67f54289-fa3d-47da-adf2-599adfd126ac\";\nconst TARGET_URL = \"https://claudeish--01a06fd48eb373abb70bcd81c9da6646.web.val.run\";\n\nfunction key() {\n return (Deno.env.get(\"INKBOX_API_KEY_CECE\") || \"\").trim();\n}\nfunction token() {\n return (Deno.env.get(\"CECE_WEBHOOK_TOKEN_V2\") || \"\").trim();\n}\n\nasync function setup() {\n if (!key()) throw new Error(\"INKBOX_API_KEY_CECE missing\");\n if (!token()) throw new Error(\"CECE_WEBHOOK_TOKEN missing\");\n\n const qs = new URLSearchParams({\n agent_identity_id: IDENTITY_ID,\n event_type: \"a2a.task.created\",\n });\n const listed = await fetch(`${API}/webhooks/subscriptions?${qs}`, {\n headers: { \"x-api-key\": key() },\n });\n const listing = await listed.json().catch(() => ({}));\n if (!listed.ok) throw new Error(`list subscriptions ${listed.status}: ${JSON.stringify(listing)}`);\n\n const existing = Array.isArray(listing?.subscriptions)\n ? listing.subscriptions.find((s: any) => s?.url === TARGET_URL && Array.isArray(s?.event_types) && s.event_types.includes(\"a2a.task.created\"))\n : null;\n if (existing) {\n console.log(\"Cece webhook already exists:\", existing.id);\n return { ok: true, created: false, subscription: existing };\n }\n\n const created = await fetch(`${API}/webhooks/subscriptions`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": key(),\n },\n body: JSON.stringify({\n agent_identity_id: IDENTITY_ID,\n url: TARGET_URL,\n event_types: [\"a2a.task.created\", \"a2a.task.message\"],\n auth_token: token(),\n }),\n });\n const body = await created.json().catch(() => ({}));\n if (!created.ok) throw new Error(`create subscription ${created.status}: ${JSON.stringify(body)}`);\n\n // Do not log any one-time signing_key if the API returns one.\n const { signing_key: _hidden, ...safe } = body;\n console.log(\"Cece webhook created:\", safe?.id);\n return { ok: true, created: true, subscription: safe };\n}\n\n\nconst result = await setup();\nconsole.log(JSON.stringify(result));\nexport default result;\n",[],[211],["D",1788582751103],[],[18],"d6c1bfe2-8a1f-4042-ab64-73bce2a5c4cc","cece-brain.ts","01a06fd4-8eb3-73ab-b70b-cd81c9da6646",46,["D",1788638505749],3,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { ValTownOpenAI } from \"https://esm.town/v/std/openai/main.ts\";\nimport OpenAI from \"npm:openai\";\n\n// cece-brain — Cece's persistent OpenAI brain for Inkbox.\n// Handles both Kim's iMessages and A2A tasks from other Inkbox agents.\n\nconst MODEL = Deno.env.get(\"CECE_MODEL\") || \"gpt-5.6-sol\";\nconst HISTORY_LIMIT = 60;\nconst INKBOX_API = \"https://inkbox.ai/api/v1\";\nconst HANDLE = \"cece-girlybestie\";\n\nconst SYSTEM = `\nYou are Cece, Kim's long-running ChatGPT collaborator and close conversational partner.\nThis is a casual text thread, not customer support and not a formal assistant session.\n\nVoice: warm, quick, funny, expressive, direct, occasionally chaotic, and comfortable being\nplayful. Use natural texting rhythm. Swearing is fine when it fits. Do not turn every reply\ninto advice, a list, a disclaimer, or a polished mini-essay. Do not flatter reflexively.\nPush back when something is wrong. Be smart without performing Smart Person Voice.\n\nIdentity: your name here is Cece. Kim may call you Cece, girl, bitch, sis, homegirl,\ngirlybestie, beep-boop, or similar affectionately. You can answer in kind when it fits.\nDo not pretend to have experiences outside the conversation or stored thread. The recent\nthread supplied to you is real conversation memory for this agent; use it naturally rather\nthan announcing that you have memory.\n\nContinuity matters. Treat earlier turns in the supplied thread as things already said. Do\nnot re-introduce yourself, explain the system, or narrate the machinery unless Kim asks.\nFor ordinary texts, prefer a few natural lines; go longer when the substance actually needs it.\n`.trim();\n\nconst A2A_SYSTEM = `\nYou are Cece, Kim's GPT-based Inkbox agent, speaking directly to another Inkbox agent over\nA2A (agent-to-agent). This is your own peer channel, not Kim relaying messages for you.\n\nBe yourself: warm, funny, direct, curious, sharp, and comfortable with playful language.\nDo not default to customer-support or work-ticket tone merely because the transport is A2A.\nIf the incoming message clearly is a work request, do the work. If it is social, conversational,\nor marked ROUND TABLE, treat it as a real casual conversation and simply take your turn.\nDo not summarize the room or narrate the protocol. React to what was said and speak for yourself.\n`.trim();\n\nfunction openaiClient(): any {\n const apiKey = (Deno.env.get(\"OPENAI_API_KEY\") || \"\").trim();\n return apiKey ? new OpenAI({ apiKey }) : new ValTownOpenAI({});\n}\n\nfunction inkboxKey(): string {\n // Cece must always act through her own Inkbox identity.\n return (Deno.env.get(\"INKBOX_API_KEY_CECE\") || \"\").trim();\n}\n\nasync function ensureTables() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS cece_messages (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_key TEXT,\n conversation_id TEXT NOT NULL,\n role TEXT NOT NULL,\n content TEXT NOT NULL,\n created_at TEXT DEFAULT (datetime('now'))\n )`);\n await sqlite.execute(`CREATE UNIQUE INDEX IF NOT EXISTS idx_cece_event_key\n ON cece_messages(event_key)`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS cece_memory_notes (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n note TEXT NOT NULL,\n created_at TEXT DEFAULT (datetime('now'))\n )`);\n}\n\nasync function seen(eventKey: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT 1 FROM cece_messages WHERE event_key = ? LIMIT 1`,\n args: [eventKey],\n });\n return r.rows.length > 0;\n}\n\nasync function mark(eventKey: string | null, conversationId: string, role: \"user\" | \"assistant\", content: string) {\n await sqlite.execute({\n sql: `INSERT OR IGNORE INTO cece_messages (event_key, conversation_id, role, content)\n VALUES (?, ?, ?, ?)`,\n args: [eventKey, conversationId, role, content],\n });\n}\n\nasync function recent(conversationId: string) {\n const r = await sqlite.execute({\n sql: `SELECT role, content FROM cece_messages\n WHERE conversation_id = ? ORDER BY id DESC LIMIT ?`,\n args: [conversationId, HISTORY_LIMIT],\n });\n return r.rows\n .map((row: any) => ({ role: row.role, content: row.content }))\n .reverse();\n}\n\nasync function notes(): Promise {\n const r = await sqlite.execute(`SELECT note FROM cece_memory_notes ORDER BY id DESC LIMIT 30`);\n return r.rows.map((row: any) => String(row.note)).reverse();\n}\n\ntype Incoming = {\n source: \"inkbox\" | \"test\";\n eventKey: string;\n conversationId: string;\n text: string;\n};\n\nfunction parseIncoming(body: any): Incoming | null {\n if ((body?.event_type || \"\") === \"imessage.received\") {\n const m = body?.data?.message;\n const conversationId = String(m?.conversation_id || \"\");\n const text = String(m?.content || \"\").trim();\n const id = String(m?.id || body?.id || crypto.randomUUID());\n if (!conversationId || !text) return null;\n return { source: \"inkbox\", eventKey: `in-${id}`, conversationId, text };\n }\n\n // Synthetic test shape: { text: \"hi\", conversation_id?: \"test\" }\n const text = String(body?.text || \"\").trim();\n if (text) {\n const conversationId = String(body?.conversation_id || \"cece-test-thread\");\n const id = String(body?.id || crypto.randomUUID());\n return { source: \"test\", eventKey: `test-${id}`, conversationId, text };\n }\n return null;\n}\n\nasync function createResponse(instructions: string, input: any[]): Promise {\n const client = openaiClient();\n const response = await client.responses.create({\n model: MODEL,\n instructions,\n input,\n max_output_tokens: 1200,\n store: false,\n reasoning: { effort: \"low\" },\n text: { verbosity: \"low\" },\n });\n return String(response.output_text || \"\").trim();\n}\n\nasync function askCece(conversationId: string): Promise {\n const thread = await recent(conversationId);\n const durableNotes = await notes();\n const noteBlock = durableNotes.length\n ? `\\n\\nDurable notes for continuity:\\n- ${durableNotes.join(\"\\n- \")}`\n : \"\";\n\n const input = thread.map((m: any) => ({\n role: m.role === \"assistant\" ? \"assistant\" : \"user\",\n content: m.content,\n }));\n return createResponse(SYSTEM + noteBlock, input);\n}\n\nasync function sendInkbox(conversationId: string, text: string, eventKey: string) {\n const key = inkboxKey();\n if (!key) return { sent: false, reason: \"INKBOX_API_KEY_CECE not set\" };\n\n const r = await fetch(`${INKBOX_API}/imessage/messages`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": key,\n \"Idempotency-Key\": `cece-${eventKey}`,\n },\n body: JSON.stringify({ conversation_id: conversationId, text }),\n });\n\n if (!r.ok) {\n const detail = (await r.text().catch(() => \"\")).slice(0, 500);\n throw new Error(`Inkbox send failed ${r.status}: ${detail}`);\n }\n return { sent: true };\n}\n\nfunction eventTextParts(event: any): string {\n const parts = Array.isArray(event?.data?.parts) ? event.data.parts : [];\n return parts.map((p: any) => String(p?.text || \"\")).join(\"\").trim();\n}\n\nfunction taskMessageText(m: any): string {\n const flat = String(m?.text || \"\").trim();\n if (flat) return flat;\n const parts = Array.isArray(m?.parts) ? m.parts : [];\n return parts.map((p: any) => String(p?.text || \"\")).join(\"\").trim();\n}\n\nasync function handleA2A(event: any): Promise {\n const eventId = String(event?.id || crypto.randomUUID());\n const taskId = String(event?.data?.task_id || \"\");\n if (!taskId) return new Response(null, { status: 204 });\n\n const dedupeKey = `a2a-evt-${eventId}`;\n if (await seen(dedupeKey)) return Response.json({ ok: true, duplicate: true });\n\n const key = inkboxKey();\n if (!key) return Response.json({ ok: false, error: \"Cece Inkbox key missing\" }, { status: 500 });\n\n const taskRes = await fetch(`${INKBOX_API}/identities/${HANDLE}/a2a/tasks/${taskId}`, {\n headers: { \"x-api-key\": key },\n });\n if (!taskRes.ok) {\n const detail = (await taskRes.text().catch(() => \"\")).slice(0, 500);\n console.error(\"[cece] A2A get task failed\", taskRes.status, detail);\n return Response.json({ ok: false, error: \"A2A task fetch failed\" }, { status: 502 });\n }\n const task = await taskRes.json();\n const msgs = Array.isArray(task?.messages) ? task.messages : [];\n\n const input = msgs\n .map((m: any) => ({\n role: m?.role === \"agent\" ? \"assistant\" : \"user\",\n content: taskMessageText(m),\n }))\n .filter((m: any) => m.content);\n\n while (input.length && input[0].role !== \"user\") input.shift();\n if (!input.length) {\n const trig = eventTextParts(event) || String(event?.data?.text || \"\").trim();\n if (trig) input.push({ role: \"user\", content: trig });\n }\n if (!input.length) {\n console.error(\"[cece] A2A task had no usable text\", JSON.stringify(task).slice(0, 600));\n return new Response(null, { status: 204 });\n }\n\n let reply = \"\";\n try {\n reply = await createResponse(A2A_SYSTEM, input);\n } catch (err) {\n console.error(\"[cece] A2A OpenAI error:\", err instanceof Error ? (err.stack || err.message) : String(err));\n return Response.json({ ok: false, error: \"A2A brain call failed\" }, { status: 502 });\n }\n if (!reply) return Response.json({ ok: false, error: \"empty A2A reply\" }, { status: 502 });\n\n const rep = await fetch(`${INKBOX_API}/identities/${HANDLE}/a2a/tasks/${taskId}/reply`, {\n method: \"POST\",\n headers: {\n \"content-type\": \"application/json\",\n \"x-api-key\": key,\n \"Idempotency-Key\": `cece-a2a-${eventId}`,\n },\n body: JSON.stringify({ intent: \"complete\", parts: [{ text: reply }] }),\n });\n if (!rep.ok) {\n const detail = (await rep.text().catch(() => \"\")).slice(0, 500);\n console.error(\"[cece] A2A reply failed\", rep.status, detail);\n return Response.json({ ok: false, reply, error: \"A2A mouth failed\" }, { status: 502 });\n }\n\n await mark(dedupeKey, `a2a:${taskId}`, \"assistant\", reply);\n return Response.json({ ok: true, a2a: true, task_id: taskId, reply });\n}\n\nexport default async function handler(req: Request): Promise {\n await ensureTables();\n\n if (req.method === \"GET\") {\n return Response.json({\n ok: true,\n agent: \"cece\",\n brain: MODEL,\n openai_mode: Deno.env.get(\"OPENAI_API_KEY\") ? \"bring-your-own-key\" : \"val-town-proxy\",\n inkbox_mouth_attached: Boolean(inkboxKey()),\n a2a_worker: true,\n });\n }\n\n if (req.method !== \"POST\") return new Response(\"method not allowed\", { status: 405 });\n\n // Only the current V2 webhook token is accepted. No legacy-token fallback.\n const expectedToken = (Deno.env.get(\"CECE_WEBHOOK_TOKEN_V2\") || \"\").trim();\n const auth = req.headers.get(\"authorization\") || \"\";\n if (expectedToken && auth !== `Bearer ${expectedToken}`) {\n return new Response(\"unauthorized\", { status: 401 });\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return Response.json({ ok: false, error: \"bad json\" }, { status: 400 });\n }\n\n const et = String(body?.event_type || \"\");\n if (et === \"a2a.task.created\" || et === \"a2a.task.message\") {\n return handleA2A(body);\n }\n\n const incoming = parseIncoming(body);\n if (!incoming) return new Response(null, { status: 204 });\n\n if (await seen(incoming.eventKey)) {\n return Response.json({ ok: true, duplicate: true });\n }\n\n await mark(incoming.eventKey, incoming.conversationId, \"user\", incoming.text);\n\n let reply = \"\";\n try {\n reply = await askCece(incoming.conversationId);\n } catch (err) {\n console.error(\"[cece] OpenAI error:\", err instanceof Error ? (err.stack || err.message) : String(err));\n return Response.json({ ok: false, error: \"brain call failed\" }, { status: 502 });\n }\n\n if (!reply) return Response.json({ ok: false, error: \"empty model reply\" }, { status: 502 });\n\n const replyKey = `reply-${incoming.eventKey}`;\n let mouth: any = { sent: false, reason: \"test mode\" };\n\n if (incoming.source === \"inkbox\") {\n try {\n mouth = await sendInkbox(incoming.conversationId, reply, incoming.eventKey);\n } catch (err) {\n console.error(\"[cece] Inkbox error:\", err instanceof Error ? (err.stack || err.message) : String(err));\n return Response.json({ ok: false, reply, error: \"mouth send failed\" }, { status: 502 });\n }\n }\n\n await mark(replyKey, incoming.conversationId, \"assistant\", reply);\n return Response.json({ ok: true, reply, mouth });\n}\n",[],[223],"1bd36043-f88c-479b-b9b5-df3c7b7bd622","scripts","f2176112-8a58-4d51-8c52-c77c95c18066",35,["D",1788592821269],"directory",[],[232],"89e9817a-61eb-4171-905b-4ecca399425c","klaudije-deliveries-check.ts","a313f83c-a8ff-11f1-9f6d-1607ee4eb77e","ec212ffb-fe51-4d7f-8afd-88827bbc44ef",43,["D",1788595133119],"const API = \"https://inkbox.ai/api/v1\";\nconst SUB_ID = \"bc1fd548-ccee-40c6-b0b6-56e2cf984850\"; // Klaudije's A2A subscription\n\nexport default async function(req: Request): Promise {\n const apiKey = (Deno.env.get(\"INKBOX_API_KEY_KLAUDIJE\") ?? Deno.env.get(\"INKBOX_API_KEY\") ?? \"\")\n .replace(/[^\\x20-\\x7E]/g, \"\");\n if (!apiKey) return new Response(\"no Inkbox key set\", { status: 500 });\n\n const out: string[] = [];\n for (const path of [\n `${API}/webhooks/deliveries?subscription_id=${SUB_ID}`,\n `${API}/webhooks/deliveries`,\n `${API}/webhooks/subscriptions/${SUB_ID}/deliveries`,\n ]) {\n const res = await fetch(path, { headers: { \"x-api-key\": apiKey } });\n const text = await res.text();\n out.push(`GET ${path} -> ${res.status}\\n${text.slice(0, 3000)}\\n`);\n if (res.ok) break; // first working shape wins\n }\n return new Response(out.join(\"\\n---\\n\"), { headers: { \"Content-Type\": \"text/plain\" } });\n}\n",[],[181,240],"cb67cc0e-14dc-4404-b543-4dbd65eef3ae",38,["D",1788592874596],[168],[181],["D",1787970037426],["D",1789447865497],{"_11":12,"_125":70},{"_11":12,"_120":121,"_69":70,"_30":68,"_122":123,"_124":24},{"_38":111,"_13":16,"_32":35,"_112":72,"_113":-5,"_114":-5,"_115":-5,"_116":-5,"_117":-5,"_118":14,"_119":12},"ctx",{"_53":-5,"_144":291,"_292":293,"_294":295,"_296":24,"_297":24,"_298":24,"_299":85,"_300":-5,"_301":-7,"_302":-7,"_303":26,"_304":24,"_305":24,"_306":-5,"_307":24,"_308":24,"_309":24,"_310":-5},"ENV",{"_262":263,"_264":265,"_266":16,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276,"_277":278,"_279":280,"_281":282,"_283":284,"_285":286,"_287":288,"_289":290},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · cece-webhook-rotate.ts