`, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_458":459,"_460":461},"routes/_app.x.$handle.$name",{"_117":116,"_34":63,"_126":107,"_29":127,"_13":14,"_128":-5,"_11":129,"_130":131,"_132":133,"_134":135,"_136":137,"_22":-5,"_138":-5,"_139":-5,"_140":27,"_141":142,"_143":76,"_144":-5,"_145":-5,"_146":147},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_61":62,"_34":63,"_40":64,"_65":-5,"_66":27,"_67":68,"_69":68,"_70":71,"_72":-5,"_18":73,"_74":33,"_75":76,"_77":-5,"_78":-5,"_79":80,"_81":82,"_83":84,"_85":86,"_87":88,"_89":-5,"_90":91,"_92":91,"_93":94,"_95":94,"_96":94,"_97":91,"_98":91,"_99":100,"_101":102,"_103":104,"_105":27},"version",14,"changes",[19,20,21],"aiChatInfo","userId",{"_22":52,"_24":53,"_26":27,"_28":27,"_29":54,"_31":54},{"_22":45,"_24":46,"_26":27,"_28":27,"_29":47,"_31":47},{"_22":23,"_24":25,"_26":27,"_28":27,"_29":30,"_31":30},"file",{"_32":33,"_34":30,"_35":36,"_37":39,"_40":41,"_42":14,"_43":44,"_26":27},"previous",{"_32":33,"_34":30,"_35":36,"_37":38},"deleted",false,"deletedHere","path","index.ts","latestPath","fileId","01a077cd-4980-75c9-8c9f-12270a3b1d2b","name","fileType","http","content","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\nimport { getOAuthUserData, oauthMiddleware } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { Hono } from \"npm:hono@4\";\nimport { Root } from \"./frontend/root.tsx\";\n\nconst OWNER = \"cleitoncosta\";\nconst APP_VERSION = \"0.6.0\";\nconst storageState = getStorageState();\nconst sqlite = getActiveDatabase();\nconst VAULT_BUDGET_BYTES = storageState.activeProvider === \"turso\" ? 4_000_000_000 : 8_000_000;\nconst MAX_CONVERSATION_CHARS = 600_000;\nconst MAX_MESSAGE_CHARS = 180_000;\nconst MAX_MESSAGES_PER_CONVERSATION = 5000;\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nlet schemaReady = false;\nasync function ensureSchema() {\n if (schemaReady) return;\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS conversations (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n create_time REAL,\n update_time REAL,\n message_count INTEGER NOT NULL DEFAULT 0,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n content_text TEXT NOT NULL,\n truncated INTEGER NOT NULL DEFAULT 0,\n source_file TEXT,\n imported_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_conversations_updated ON conversations(update_time DESC)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_messages (\n id TEXT PRIMARY KEY,\n conversation_id TEXT NOT NULL,\n seq INTEGER NOT NULL,\n role TEXT NOT NULL,\n create_time REAL,\n content_text TEXT NOT NULL,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n imported_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_messages_conversation_seq ON vault_messages(conversation_id, seq)\");\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_messages_create_time ON vault_messages(create_time)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_messages_fts USING fts5(\n message_id UNINDEXED,\n conversation_id UNINDEXED,\n title,\n role UNINDEXED,\n content,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_checkpoints (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n title TEXT NOT NULL,\n summary TEXT NOT NULL,\n decisions TEXT NOT NULL DEFAULT '',\n open_gaps TEXT NOT NULL DEFAULT '',\n next_action TEXT NOT NULL DEFAULT '',\n source_conversation_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'CHECKPOINT',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_checkpoints_project_updated ON vault_checkpoints(project, updated_at DESC)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_checkpoints_fts USING fts5(\n checkpoint_id UNINDEXED,\n project,\n title,\n summary,\n decisions,\n open_gaps,\n next_action,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_knowledge_items (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n kind TEXT NOT NULL,\n title TEXT NOT NULL,\n body TEXT NOT NULL,\n tags_json TEXT NOT NULL DEFAULT '[]',\n entities_json TEXT NOT NULL DEFAULT '[]',\n source_type TEXT,\n source_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'KNOWLEDGE',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_knowledge_project_kind ON vault_knowledge_items(project, kind, updated_at)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_knowledge_fts USING fts5(\n knowledge_id UNINDEXED,\n project,\n kind,\n title,\n body,\n tags,\n entities,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_relations (\n id TEXT PRIMARY KEY,\n source_type TEXT NOT NULL,\n source_id TEXT NOT NULL,\n relation TEXT NOT NULL,\n target_type TEXT NOT NULL,\n target_id TEXT NOT NULL,\n weight REAL NOT NULL DEFAULT 1.0,\n provenance TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n UNIQUE(source_type, source_id, relation, target_type, target_id)\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_relations_source ON vault_relations(source_type, source_id)\");\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_relations_target ON vault_relations(target_type, target_id)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_import_runs (\n id TEXT PRIMARY KEY,\n source_fingerprint TEXT NOT NULL,\n source_name TEXT NOT NULL,\n source_size INTEGER NOT NULL DEFAULT 0,\n total_candidates INTEGER NOT NULL DEFAULT 0,\n cursor INTEGER NOT NULL DEFAULT 0,\n imported_count INTEGER NOT NULL DEFAULT 0,\n indexed_messages INTEGER NOT NULL DEFAULT 0,\n skipped_count INTEGER NOT NULL DEFAULT 0,\n status TEXT NOT NULL DEFAULT 'IN_PROGRESS',\n inventory_json TEXT NOT NULL DEFAULT '{}',\n last_error TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_import_runs_updated ON vault_import_runs(updated_at DESC)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_meta (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute({\n sql: \"INSERT INTO vault_meta(key,value,updated_at) VALUES ('schema_version', ?, datetime('now')) ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at\",\n args: [APP_VERSION],\n });\n schemaReady = true;\n}\n\nasync function sessionFor(req: Request) {\n return await getOAuthUserData(req);\n}\n\nasync function isOwner(req: Request) {\n const session = await sessionFor(req);\n return session?.user?.username === OWNER ? session : null;\n}\n\nasync function requireOwner(c: any) {\n const session = await isOwner(c.req.raw);\n if (!session) return c.json({ error: \"unauthorized\", login: \"/auth/login\" }, 401);\n return null;\n}\n\nfunction safeId(value: unknown) {\n return typeof value === \"string\" && /^[A-Za-z0-9_-]{1,160}$/.test(value);\n}\n\nfunction safeProject(value: unknown) {\n return typeof value === \"string\" && value.trim().length >= 1 && value.trim().length <= 120;\n}\n\nfunction num(value: unknown) {\n return typeof value === \"number\" && Number.isFinite(value) ? value : null;\n}\n\nfunction int(value: unknown, fallback = 0) {\n return typeof value === \"number\" && Number.isFinite(value) ? Math.max(0, Math.trunc(value)) : fallback;\n}\n\nfunction ftsQuery(input: string) {\n const tokens = input.normalize(\"NFKC\").match(/[\\p{L}\\p{N}_]+/gu)?.slice(0, 8) ?? [];\n return tokens.map((token) => `\"${token.replaceAll('\"', '\"\"')}\"*`).join(\" AND \");\n}\n\nfunction legacySnippet(text: string, needle: string) {\n const normalized = text.toLocaleLowerCase(\"pt-BR\");\n const hit = normalized.indexOf(needle.toLocaleLowerCase(\"pt-BR\"));\n const start = hit >= 0 ? Math.max(0, hit - 180) : 0;\n const chunk = text.slice(start, start + 620).replace(/\\s+/g, \" \").trim();\n return `${start > 0 ? \"…\" : \"\"}${chunk}${start + 620 < text.length ? \"…\" : \"\"}`;\n}\n\nasync function searchCheckpointIndex(match: string) {\n if (!match) return [];\n const result = await sqlite.execute({\n sql: `SELECT\n checkpoint_id AS id,\n project,\n title,\n snippet(vault_checkpoints_fts, 3, '', '', ' … ', 42) AS snippet,\n bm25(vault_checkpoints_fts, 0.0, 3.0, 5.0, 2.0, 2.0, 1.5, 1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT 12`,\n args: [match],\n });\n return result.rows;\n}\n\nasync function searchKnowledgeIndex(match: string) {\n if (!match) return [];\n const result = await sqlite.execute({\n sql: `SELECT\n knowledge_id AS id,\n project,\n kind,\n title,\n snippet(vault_knowledge_fts, 4, '', '', ' … ', 42) AS snippet,\n bm25(vault_knowledge_fts, 0.0, 2.0, 2.0, 5.0, 3.0, 1.5, 1.5) AS rank\n FROM vault_knowledge_fts\n WHERE vault_knowledge_fts MATCH ?\n ORDER BY rank\n LIMIT 12`,\n args: [match],\n });\n return result.rows;\n}\n\napp.get(\"/\", async (c) => {\n const session = await sessionFor(c.req.raw);\n if (!session?.user) return c.redirect(\"/auth/login\");\n if (session.user.username !== OWNER) return c.text(\"Acesso negado. Este cofre pertence a outro usuário.\", 403);\n return c.html(Root());\n});\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/api/me\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const session = await sessionFor(c.req.raw);\n return c.json({\n owner: OWNER,\n username: session?.user?.username,\n version: APP_VERSION,\n openaiApiUsed: false,\n storage: storageState.activeProvider === \"turso\" ? \"Turso/libSQL + FTS5\" : \"Val Town project-scoped SQLite + FTS5\",\n activeStorageProvider: storageState.activeProvider,\n externalStorageConfigured: storageState.externalConfigured,\n migrationMode: storageState.migrationMode,\n searchEngine: \"SQLite/libSQL FTS5/BM25\",\n budgetBytes: VAULT_BUDGET_BYTES,\n maxConversationChars: MAX_CONVERSATION_CHARS,\n });\n});\n\napp.get(\"/api/stats\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const [conversations, indexed, checkpoints, knowledge, relations] = await Promise.all([\n sqlite.execute(`SELECT\n COUNT(*) AS conversations,\n COALESCE(SUM(message_count), 0) AS messages,\n COALESCE(SUM(char_count), 0) AS chars,\n COALESCE(SUM(content_bytes), 0) AS bytes,\n MIN(create_time) AS earliest,\n MAX(update_time) AS latest,\n COALESCE(SUM(CASE WHEN truncated = 1 THEN 1 ELSE 0 END), 0) AS truncated\n FROM conversations`),\n sqlite.execute(\"SELECT COUNT(*) AS indexed_messages FROM vault_messages\"),\n sqlite.execute(\"SELECT COUNT(*) AS checkpoints FROM vault_checkpoints\"),\n sqlite.execute(\"SELECT COUNT(*) AS knowledge_items FROM vault_knowledge_items\"),\n sqlite.execute(\"SELECT COUNT(*) AS relations FROM vault_relations\"),\n ]);\n return c.json({\n ...(conversations.rows[0] ?? {}),\n indexedMessages: Number((indexed.rows[0] as any)?.indexed_messages ?? 0),\n checkpoints: Number((checkpoints.rows[0] as any)?.checkpoints ?? 0),\n knowledgeItems: Number((knowledge.rows[0] as any)?.knowledge_items ?? 0),\n relations: Number((relations.rows[0] as any)?.relations ?? 0),\n budgetBytes: VAULT_BUDGET_BYTES,\n });\n});\n\napp.get(\"/api/search\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const q = (c.req.query(\"q\") ?? \"\").trim().slice(0, 160);\n if (q.length < 2) return c.json({ query: q, engine: \"none\", results: [] });\n\n const match = ftsQuery(q);\n const indexedCount = await sqlite.execute(\"SELECT COUNT(*) AS count FROM vault_messages\");\n const hasMessageIndex = Number((indexedCount.rows[0] as any)?.count ?? 0) > 0;\n\n if (match && hasMessageIndex) {\n const result = await sqlite.execute({\n sql: `WITH hits AS (\n SELECT\n conversation_id,\n message_id,\n role,\n snippet(vault_messages_fts, 4, '', '', ' … ', 42) AS hit_snippet,\n bm25(vault_messages_fts, 6.0, 0.0, 2.5, 0.0, 1.0) AS rank\n FROM vault_messages_fts\n WHERE vault_messages_fts MATCH ?\n ORDER BY rank\n LIMIT 150\n ), best AS (\n SELECT *, ROW_NUMBER() OVER (PARTITION BY conversation_id ORDER BY rank) AS rn\n FROM hits\n )\n SELECT\n c.id, c.title, c.create_time, c.update_time, c.message_count, c.char_count,\n c.content_bytes, c.truncated, b.message_id, b.role, b.hit_snippet, b.rank\n FROM best b\n JOIN conversations c ON c.id = b.conversation_id\n WHERE b.rn = 1\n ORDER BY b.rank, c.update_time DESC\n LIMIT 25`,\n args: [match],\n });\n return c.json({\n query: q,\n engine: \"fts5_bm25\",\n match,\n checkpoints: await searchCheckpointIndex(match),\n knowledge: await searchKnowledgeIndex(match),\n results: result.rows.map((row: any) => ({\n id: row.id,\n title: row.title,\n createTime: row.create_time,\n updateTime: row.update_time,\n messageCount: row.message_count,\n charCount: row.char_count,\n contentBytes: row.content_bytes,\n truncated: Boolean(row.truncated),\n messageId: row.message_id,\n role: row.role,\n rank: row.rank,\n snippet: String(row.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(),\n })),\n });\n }\n\n const terms = q.split(/\\s+/).filter(Boolean).slice(0, 6);\n const clauses = terms.map(() => \"(title LIKE ? OR content_text LIKE ?)\");\n const args: string[] = [];\n for (const term of terms) {\n const pattern = `%${term}%`;\n args.push(pattern, pattern);\n }\n const result = await sqlite.execute({\n sql: `SELECT id, title, create_time, update_time, message_count, char_count, content_bytes, truncated, content_text\n FROM conversations\n WHERE ${clauses.join(\" AND \")}\n ORDER BY update_time DESC\n LIMIT 25`,\n args,\n });\n return c.json({\n query: q,\n engine: \"legacy_like_fallback\",\n checkpoints: await searchCheckpointIndex(match),\n knowledge: await searchKnowledgeIndex(match),\n results: result.rows.map((row: any) => ({\n id: row.id,\n title: row.title,\n createTime: row.create_time,\n updateTime: row.update_time,\n messageCount: row.message_count,\n charCount: row.char_count,\n contentBytes: row.content_bytes,\n truncated: Boolean(row.truncated),\n snippet: legacySnippet(String(row.content_text ?? \"\"), terms[0] ?? q),\n })),\n });\n});\n\napp.get(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const [conversation, messages] = await Promise.all([\n sqlite.execute({\n sql: `SELECT id, title, create_time, update_time, message_count, char_count, content_bytes,\n content_text, truncated, source_file, imported_at\n FROM conversations WHERE id = ? LIMIT 1`,\n args: [id],\n }),\n sqlite.execute({\n sql: `SELECT id, seq, role, create_time, content_text, char_count, content_bytes\n FROM vault_messages WHERE conversation_id = ? ORDER BY seq ASC`,\n args: [id],\n }),\n ]);\n if (!conversation.rows.length) return c.json({ error: \"not_found\" }, 404);\n return c.json({ ...(conversation.rows[0] as any), indexed_messages: messages.rows });\n});\n\napp.put(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n\n const title = typeof body.title === \"string\" ? body.title.trim().slice(0, 300) : \"Sem título\";\n const contentText = typeof body.contentText === \"string\" ? body.contentText : \"\";\n if (!contentText.trim()) return c.json({ error: \"empty_conversation\" }, 400);\n if (contentText.length > MAX_CONVERSATION_CHARS) {\n return c.json({ error: \"conversation_too_large\", maxChars: MAX_CONVERSATION_CHARS }, 413);\n }\n\n let importRun: null | { id: string; fingerprint: string; total: number; cursorAfter: number; skippedCount: number } = null;\n if (body.importRun != null) {\n const raw = body.importRun;\n const runId = typeof raw?.id === \"string\" ? raw.id.trim() : \"\";\n const fingerprint = typeof raw?.sourceFingerprint === \"string\" ? raw.sourceFingerprint.trim().toLowerCase() : \"\";\n const total = Math.min(1_000_000, int(raw?.totalCandidates));\n const cursorAfter = Math.min(total, int(raw?.cursorAfter));\n const skippedCount = Math.min(cursorAfter, int(raw?.skippedCount));\n if (!safeId(runId) || !/^[a-f0-9]{64}$/.test(fingerprint) || total < 1 || cursorAfter < 1 || skippedCount >= cursorAfter) {\n return c.json({ error: \"invalid_import_run_progress\" }, 400);\n }\n const run = await sqlite.execute({\n sql: \"SELECT source_fingerprint,total_candidates FROM vault_import_runs WHERE id=? LIMIT 1\",\n args: [runId],\n });\n if (!run.rows.length) return c.json({ error: \"import_run_not_initialized\" }, 409);\n const row: any = run.rows[0];\n if (String(row.source_fingerprint) !== fingerprint) return c.json({ error: \"import_run_fingerprint_mismatch\" }, 409);\n if (Number(row.total_candidates) !== total) return c.json({ error: \"import_run_total_mismatch\" }, 409);\n importRun = { id: runId, fingerprint, total, cursorAfter, skippedCount };\n }\n\n const rawMessages = Array.isArray(body.messages) ? body.messages.slice(0, MAX_MESSAGES_PER_CONVERSATION) : [];\n const normalizedMessages = rawMessages.flatMap((message: any, index: number) => {\n const text = typeof message?.contentText === \"string\" ? message.contentText.trim() : \"\";\n if (!text) return [];\n const clipped = text.slice(0, MAX_MESSAGE_CHARS);\n let messageId = typeof message?.id === \"string\" ? message.id.trim() : \"\";\n if (!safeId(messageId)) messageId = `${id}_m_${index + 1}`.slice(0, 160);\n return [{\n id: messageId,\n seq: index,\n role: typeof message?.role === \"string\" ? message.role.toLowerCase().slice(0, 40) : \"unknown\",\n createTime: typeof message?.createTime === \"number\" && Number.isFinite(message.createTime) ? message.createTime : null,\n contentText: clipped,\n charCount: clipped.length,\n contentBytes: new TextEncoder().encode(clipped).length,\n }];\n });\n\n const contentBytes = new TextEncoder().encode(contentText).length;\n const current = await sqlite.execute({ sql: \"SELECT content_bytes FROM conversations WHERE id = ? LIMIT 1\", args: [id] });\n const currentBytes = Number((current.rows[0] as any)?.content_bytes ?? 0);\n const totals = await sqlite.execute(\"SELECT COALESCE(SUM(content_bytes), 0) AS bytes FROM conversations\");\n const usedBytes = Number((totals.rows[0] as any)?.bytes ?? 0);\n const projected = usedBytes - currentBytes + contentBytes;\n if (projected > VAULT_BUDGET_BYTES) {\n return c.json({ error: \"vault_budget_exceeded\", usedBytes, projectedBytes: projected, budgetBytes: VAULT_BUDGET_BYTES }, 507);\n }\n\n const importedAt = new Date().toISOString();\n const statements: Array<{ sql: string; args?: Array }> = [\n {\n sql: `INSERT INTO conversations (\n id, title, create_time, update_time, message_count, char_count, content_bytes,\n content_text, truncated, source_file, imported_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET\n title = excluded.title,\n create_time = excluded.create_time,\n update_time = excluded.update_time,\n message_count = excluded.message_count,\n char_count = excluded.char_count,\n content_bytes = excluded.content_bytes,\n content_text = excluded.content_text,\n truncated = excluded.truncated,\n source_file = excluded.source_file,\n imported_at = excluded.imported_at`,\n args: [\n id,\n title || \"Sem título\",\n num(body.createTime),\n num(body.updateTime),\n normalizedMessages.length || int(body.messageCount),\n contentText.length,\n contentBytes,\n contentText,\n body.truncated ? 1 : 0,\n typeof body.sourceFile === \"string\" ? body.sourceFile.slice(0, 180) : \"conversations.json\",\n importedAt,\n ],\n },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [id] },\n ];\n\n for (const message of normalizedMessages) {\n statements.push({\n sql: `INSERT INTO vault_messages (\n id, conversation_id, seq, role, create_time, content_text, char_count, content_bytes, imported_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [message.id, id, message.seq, message.role, message.createTime, message.contentText, message.charCount, message.contentBytes, importedAt],\n });\n statements.push({\n sql: \"INSERT INTO vault_messages_fts(message_id, conversation_id, title, role, content) VALUES (?, ?, ?, ?, ?)\",\n args: [message.id, id, title || \"Sem título\", message.role, message.contentText],\n });\n }\n\n if (importRun) {\n const importedCountAfter = importRun.cursorAfter - importRun.skippedCount;\n statements.push({\n sql: `UPDATE vault_import_runs SET\n indexed_messages=indexed_messages + CASE WHEN cursor < ? THEN ? ELSE 0 END,\n cursor=MAX(cursor, ?),\n imported_count=MAX(imported_count, ?),\n skipped_count=MAX(skipped_count, ?),\n status=CASE\n WHEN ? > cursor THEN CASE WHEN ? >= total_candidates THEN 'COMPLETE' ELSE 'IN_PROGRESS' END\n ELSE status\n END,\n last_error=CASE WHEN ? > cursor THEN NULL ELSE last_error END,\n updated_at=?\n WHERE id=? AND source_fingerprint=?\n RETURNING cursor,imported_count,indexed_messages,skipped_count,status,last_error,updated_at`,\n args: [\n importRun.cursorAfter,\n normalizedMessages.length,\n importRun.cursorAfter,\n importedCountAfter,\n importRun.skippedCount,\n importRun.cursorAfter,\n importRun.cursorAfter,\n importRun.cursorAfter,\n importedAt,\n importRun.id,\n importRun.fingerprint,\n ],\n });\n }\n\n const batchResults = await sqlite.batch(statements);\n const importProgress: any = importRun ? batchResults[batchResults.length - 1]?.rows?.[0] ?? null : null;\n return c.json({\n ok: true,\n id,\n contentBytes,\n projectedBytes: projected,\n indexedMessages: normalizedMessages.length,\n searchEngine: normalizedMessages.length ? \"fts5_bm25\" : \"legacy_like_fallback\",\n importProgress: importProgress ? {\n cursor: Number(importProgress.cursor ?? 0),\n importedCount: Number(importProgress.imported_count ?? 0),\n indexedMessages: Number(importProgress.indexed_messages ?? 0),\n skippedCount: Number(importProgress.skipped_count ?? 0),\n status: importProgress.status,\n lastError: importProgress.last_error,\n updatedAt: importProgress.updated_at,\n } : null,\n });\n});\n\napp.get(\"/api/import-runs/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const result = await sqlite.execute({\n sql: `SELECT id, source_fingerprint, source_name, source_size, total_candidates, cursor,\n imported_count, indexed_messages, skipped_count, status, inventory_json, last_error, created_at, updated_at\n FROM vault_import_runs WHERE id = ? LIMIT 1`,\n args: [id],\n });\n if (!result.rows.length) return c.json({ error: \"not_found\" }, 404);\n const row: any = result.rows[0];\n return c.json({\n ...row,\n inventory: (() => { try { return JSON.parse(String(row.inventory_json || \"{}\")); } catch { return {}; } })(),\n });\n});\n\napp.put(\"/api/import-runs/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n const fingerprint = typeof body.sourceFingerprint === \"string\" ? body.sourceFingerprint.trim().toLowerCase() : \"\";\n const sourceName = typeof body.sourceName === \"string\" ? body.sourceName.trim().slice(0, 300) : \"\";\n if (!/^[a-f0-9]{64}$/.test(fingerprint) || !sourceName) return c.json({ error: \"valid_source_fingerprint_and_name_required\" }, 400);\n const total = Math.min(1_000_000, int(body.totalCandidates));\n if (total < 1) return c.json({ error: \"total_candidates_required\" }, 400);\n const cursor = Math.min(total, int(body.cursor));\n const importedCount = Math.min(cursor, int(body.importedCount));\n const indexedMessages = Math.min(50_000_000, int(body.indexedMessages));\n const skippedCount = Math.min(cursor, int(body.skippedCount));\n if (importedCount + skippedCount > cursor) return c.json({ error: \"import_progress_inconsistent\" }, 400);\n const sourceSize = Math.min(Number.MAX_SAFE_INTEGER, int(body.sourceSize));\n const allowedStatuses = new Set([\"IN_PROGRESS\", \"PAUSED\", \"COMPLETE\", \"FAILED\"]);\n const status = allowedStatuses.has(String(body.status)) ? String(body.status) : \"IN_PROGRESS\";\n if (status === \"COMPLETE\" && cursor !== total) return c.json({ error: \"complete_requires_full_cursor\" }, 400);\n const inventoryJson = JSON.stringify(body.inventory && typeof body.inventory === \"object\" ? body.inventory : {}).slice(0, 16_000);\n const lastError = typeof body.lastError === \"string\" && body.lastError.trim() ? body.lastError.trim().slice(0, 1000) : null;\n const existing = await sqlite.execute({ sql: \"SELECT source_fingerprint,total_candidates,status FROM vault_import_runs WHERE id = ? LIMIT 1\", args: [id] });\n if (existing.rows.length) {\n const row: any = existing.rows[0];\n if (String(row.source_fingerprint) !== fingerprint) return c.json({ error: \"import_run_fingerprint_mismatch\" }, 409);\n if (Number(row.total_candidates) !== total) return c.json({ error: \"import_run_total_mismatch\" }, 409);\n }\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: `INSERT INTO vault_import_runs(\n id, source_fingerprint, source_name, source_size, total_candidates, cursor, imported_count,\n indexed_messages, skipped_count, status, inventory_json, last_error, created_at, updated_at\n ) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET\n source_name=excluded.source_name,\n source_size=MAX(vault_import_runs.source_size, excluded.source_size),\n cursor=MAX(vault_import_runs.cursor, excluded.cursor),\n imported_count=MAX(vault_import_runs.imported_count, excluded.imported_count),\n indexed_messages=MAX(vault_import_runs.indexed_messages, excluded.indexed_messages),\n skipped_count=MAX(vault_import_runs.skipped_count, excluded.skipped_count),\n status=CASE WHEN vault_import_runs.status='COMPLETE' THEN 'COMPLETE' ELSE excluded.status END,\n inventory_json=CASE WHEN length(excluded.inventory_json) > 2 THEN excluded.inventory_json ELSE vault_import_runs.inventory_json END,\n last_error=CASE WHEN vault_import_runs.status='COMPLETE' OR excluded.status='COMPLETE' THEN NULL ELSE excluded.last_error END,\n updated_at=excluded.updated_at`,\n args: [id, fingerprint, sourceName, sourceSize, total, cursor, importedCount, indexedMessages, skippedCount, status, inventoryJson, lastError, now, now],\n });\n const saved = await sqlite.execute({\n sql: `SELECT id,source_fingerprint,source_name,source_size,total_candidates,cursor,imported_count,indexed_messages,skipped_count,status,last_error,updated_at FROM vault_import_runs WHERE id=? LIMIT 1`,\n args: [id],\n });\n const row: any = saved.rows[0] ?? {};\n return c.json({\n ok: true,\n id: row.id,\n sourceFingerprint: row.source_fingerprint,\n sourceName: row.source_name,\n sourceSize: Number(row.source_size ?? 0),\n totalCandidates: Number(row.total_candidates ?? 0),\n cursor: Number(row.cursor ?? 0),\n importedCount: Number(row.imported_count ?? 0),\n indexedMessages: Number(row.indexed_messages ?? 0),\n skippedCount: Number(row.skipped_count ?? 0),\n status: row.status,\n lastError: row.last_error,\n updatedAt: row.updated_at,\n });\n});\n\napp.delete(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const results = await sqlite.batch([\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM conversations WHERE id = ?\", args: [id] },\n ]);\n return c.json({ ok: true, rowsAffected: results[2]?.rowsAffected ?? 0 });\n});\n\napp.get(\"/api/checkpoints\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const limit = Math.min(25, Math.max(1, Number(c.req.query(\"limit\") ?? 8) || 8));\n const project = (c.req.query(\"project\") ?? \"\").trim().slice(0, 120);\n const result = project\n ? await sqlite.execute({\n sql: `SELECT id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n FROM vault_checkpoints WHERE project = ? ORDER BY updated_at DESC LIMIT ?`,\n args: [project, limit],\n })\n : await sqlite.execute({\n sql: `SELECT id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n FROM vault_checkpoints ORDER BY updated_at DESC LIMIT ?`,\n args: [limit],\n });\n return c.json({ project: project || null, checkpoints: result.rows });\n});\n\napp.post(\"/api/checkpoints\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n const project = typeof body.project === \"string\" ? body.project.trim().slice(0, 120) : \"\";\n const title = typeof body.title === \"string\" ? body.title.trim().slice(0, 240) : \"\";\n const summary = typeof body.summary === \"string\" ? body.summary.trim().slice(0, 12000) : \"\";\n if (!safeProject(project) || !title || !summary) return c.json({ error: \"project_title_summary_required\" }, 400);\n let id = typeof body.id === \"string\" ? body.id.trim() : \"\";\n if (!safeId(id)) id = `cp_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;\n const decisions = typeof body.decisions === \"string\" ? body.decisions.trim().slice(0, 12000) : \"\";\n const openGaps = typeof body.openGaps === \"string\" ? body.openGaps.trim().slice(0, 12000) : \"\";\n const nextAction = typeof body.nextAction === \"string\" ? body.nextAction.trim().slice(0, 12000) : \"\";\n const sourceConversationId = safeId(body.sourceConversationId) ? body.sourceConversationId : null;\n const evidenceState = typeof body.evidenceState === \"string\" ? body.evidenceState.trim().slice(0, 80) : \"CHECKPOINT\";\n const now = new Date().toISOString();\n\n await sqlite.batch([\n {\n sql: `INSERT INTO vault_checkpoints (\n id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET\n project=excluded.project, title=excluded.title, summary=excluded.summary,\n decisions=excluded.decisions, open_gaps=excluded.open_gaps, next_action=excluded.next_action,\n source_conversation_id=excluded.source_conversation_id, evidence_state=excluded.evidence_state,\n updated_at=excluded.updated_at`,\n args: [id, project, title, summary, decisions, openGaps, nextAction, sourceConversationId, evidenceState, now, now],\n },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [id] },\n {\n sql: `INSERT INTO vault_checkpoints_fts(checkpoint_id, project, title, summary, decisions, open_gaps, next_action)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [id, project, title, summary, decisions, openGaps, nextAction],\n },\n ]);\n return c.json({ ok: true, id, project, title, evidenceState, updatedAt: now });\n});\n\napp.get(\"/api/checkpoint-search\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const q = (c.req.query(\"q\") ?? \"\").trim().slice(0, 160);\n const match = ftsQuery(q);\n if (!match) return c.json({ query: q, results: [] });\n const result = await sqlite.execute({\n sql: `SELECT\n checkpoint_id,\n project,\n title,\n snippet(vault_checkpoints_fts, 3, '', '', ' … ', 42) AS hit_snippet,\n bm25(vault_checkpoints_fts, 0.0, 3.0, 5.0, 2.0, 2.0, 1.5, 1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT 25`,\n args: [match],\n });\n return c.json({ query: q, engine: \"fts5_bm25\", results: result.rows });\n});\n\nexport default oauthMiddleware(app.fetch);\n","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { getActiveDatabase, getStorageState } from \"./lib/storage_provider.ts\";\nimport { getOAuthUserData, oauthMiddleware } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { Hono } from \"npm:hono@4\";\nimport { Root } from \"./frontend/root.tsx\";\n\nconst OWNER = \"cleitoncosta\";\nconst APP_VERSION = \"0.6.1\";\nconst storageState = getStorageState();\nconst sqlite = getActiveDatabase();\nconst VAULT_BUDGET_BYTES = storageState.activeProvider === \"turso\" ? 4_000_000_000 : 8_000_000;\nconst MAX_CONVERSATION_CHARS = 600_000;\nconst MAX_MESSAGE_CHARS = 180_000;\nconst MAX_MESSAGES_PER_CONVERSATION = 5000;\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nlet schemaReady = false;\nasync function ensureSchema() {\n if (schemaReady) return;\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS conversations (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n create_time REAL,\n update_time REAL,\n message_count INTEGER NOT NULL DEFAULT 0,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n content_text TEXT NOT NULL,\n truncated INTEGER NOT NULL DEFAULT 0,\n source_file TEXT,\n imported_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_conversations_updated ON conversations(update_time DESC)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_messages (\n id TEXT PRIMARY KEY,\n conversation_id TEXT NOT NULL,\n seq INTEGER NOT NULL,\n role TEXT NOT NULL,\n create_time REAL,\n content_text TEXT NOT NULL,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n imported_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_messages_conversation_seq ON vault_messages(conversation_id, seq)\");\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_messages_create_time ON vault_messages(create_time)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_messages_fts USING fts5(\n message_id UNINDEXED,\n conversation_id UNINDEXED,\n title,\n role UNINDEXED,\n content,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_checkpoints (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n title TEXT NOT NULL,\n summary TEXT NOT NULL,\n decisions TEXT NOT NULL DEFAULT '',\n open_gaps TEXT NOT NULL DEFAULT '',\n next_action TEXT NOT NULL DEFAULT '',\n source_conversation_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'CHECKPOINT',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_checkpoints_project_updated ON vault_checkpoints(project, updated_at DESC)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_checkpoints_fts USING fts5(\n checkpoint_id UNINDEXED,\n project,\n title,\n summary,\n decisions,\n open_gaps,\n next_action,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_knowledge_items (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n kind TEXT NOT NULL,\n title TEXT NOT NULL,\n body TEXT NOT NULL,\n tags_json TEXT NOT NULL DEFAULT '[]',\n entities_json TEXT NOT NULL DEFAULT '[]',\n source_type TEXT,\n source_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'KNOWLEDGE',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_knowledge_project_kind ON vault_knowledge_items(project, kind, updated_at)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_knowledge_fts USING fts5(\n knowledge_id UNINDEXED,\n project,\n kind,\n title,\n body,\n tags,\n entities,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_relations (\n id TEXT PRIMARY KEY,\n source_type TEXT NOT NULL,\n source_id TEXT NOT NULL,\n relation TEXT NOT NULL,\n target_type TEXT NOT NULL,\n target_id TEXT NOT NULL,\n weight REAL NOT NULL DEFAULT 1.0,\n provenance TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL,\n UNIQUE(source_type, source_id, relation, target_type, target_id)\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_relations_source ON vault_relations(source_type, source_id)\");\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_relations_target ON vault_relations(target_type, target_id)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_import_runs (\n id TEXT PRIMARY KEY,\n source_fingerprint TEXT NOT NULL,\n source_name TEXT NOT NULL,\n source_size INTEGER NOT NULL DEFAULT 0,\n total_candidates INTEGER NOT NULL DEFAULT 0,\n cursor INTEGER NOT NULL DEFAULT 0,\n imported_count INTEGER NOT NULL DEFAULT 0,\n indexed_messages INTEGER NOT NULL DEFAULT 0,\n skipped_count INTEGER NOT NULL DEFAULT 0,\n status TEXT NOT NULL DEFAULT 'IN_PROGRESS',\n inventory_json TEXT NOT NULL DEFAULT '{}',\n last_error TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_import_runs_updated ON vault_import_runs(updated_at DESC)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_meta (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute({\n sql: \"INSERT INTO vault_meta(key,value,updated_at) VALUES ('schema_version', ?, datetime('now')) ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at\",\n args: [APP_VERSION],\n });\n schemaReady = true;\n}\n\nasync function sessionFor(req: Request) {\n return await getOAuthUserData(req);\n}\n\nasync function isOwner(req: Request) {\n const session = await sessionFor(req);\n return session?.user?.username === OWNER ? session : null;\n}\n\nasync function requireOwner(c: any) {\n const session = await isOwner(c.req.raw);\n if (!session) return c.json({ error: \"unauthorized\", login: \"/auth/login\" }, 401);\n return null;\n}\n\nfunction safeId(value: unknown) {\n return typeof value === \"string\" && /^[A-Za-z0-9_-]{1,160}$/.test(value);\n}\n\nfunction safeProject(value: unknown) {\n return typeof value === \"string\" && value.trim().length >= 1 && value.trim().length <= 120;\n}\n\nfunction num(value: unknown) {\n return typeof value === \"number\" && Number.isFinite(value) ? value : null;\n}\n\nfunction int(value: unknown, fallback = 0) {\n return typeof value === \"number\" && Number.isFinite(value) ? Math.max(0, Math.trunc(value)) : fallback;\n}\n\nfunction ftsQuery(input: string) {\n const tokens = input.normalize(\"NFKC\").match(/[\\p{L}\\p{N}_]+/gu)?.slice(0, 8) ?? [];\n return tokens.map((token) => `\"${token.replaceAll('\"', '\"\"')}\"*`).join(\" AND \");\n}\n\nfunction legacySnippet(text: string, needle: string) {\n const normalized = text.toLocaleLowerCase(\"pt-BR\");\n const hit = normalized.indexOf(needle.toLocaleLowerCase(\"pt-BR\"));\n const start = hit >= 0 ? Math.max(0, hit - 180) : 0;\n const chunk = text.slice(start, start + 620).replace(/\\s+/g, \" \").trim();\n return `${start > 0 ? \"…\" : \"\"}${chunk}${start + 620 < text.length ? \"…\" : \"\"}`;\n}\n\nasync function searchCheckpointIndex(match: string) {\n if (!match) return [];\n const result = await sqlite.execute({\n sql: `SELECT\n checkpoint_id AS id,\n project,\n title,\n snippet(vault_checkpoints_fts, 3, '', '', ' … ', 42) AS snippet,\n bm25(vault_checkpoints_fts, 0.0, 3.0, 5.0, 2.0, 2.0, 1.5, 1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT 12`,\n args: [match],\n });\n return result.rows;\n}\n\nasync function searchKnowledgeIndex(match: string) {\n if (!match) return [];\n const result = await sqlite.execute({\n sql: `SELECT\n knowledge_id AS id,\n project,\n kind,\n title,\n snippet(vault_knowledge_fts, 4, '', '', ' … ', 42) AS snippet,\n bm25(vault_knowledge_fts, 0.0, 2.0, 2.0, 5.0, 3.0, 1.5, 1.5) AS rank\n FROM vault_knowledge_fts\n WHERE vault_knowledge_fts MATCH ?\n ORDER BY rank\n LIMIT 12`,\n args: [match],\n });\n return result.rows;\n}\n\napp.get(\"/\", async (c) => {\n const session = await sessionFor(c.req.raw);\n if (!session?.user) return c.redirect(\"/auth/login\");\n if (session.user.username !== OWNER) return c.text(\"Acesso negado. Este cofre pertence a outro usuário.\", 403);\n return c.html(Root());\n});\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/api/me\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const session = await sessionFor(c.req.raw);\n return c.json({\n owner: OWNER,\n username: session?.user?.username,\n version: APP_VERSION,\n openaiApiUsed: false,\n storage: storageState.activeProvider === \"turso\" ? \"Turso/libSQL + FTS5\" : \"Val Town project-scoped SQLite + FTS5\",\n activeStorageProvider: storageState.activeProvider,\n externalStorageConfigured: storageState.externalConfigured,\n migrationMode: storageState.migrationMode,\n searchEngine: \"SQLite/libSQL FTS5/BM25\",\n budgetBytes: VAULT_BUDGET_BYTES,\n maxConversationChars: MAX_CONVERSATION_CHARS,\n });\n});\n\napp.get(\"/api/stats\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const [conversations, indexed, checkpoints, knowledge, relations] = await Promise.all([\n sqlite.execute(`SELECT\n COUNT(*) AS conversations,\n COALESCE(SUM(message_count), 0) AS messages,\n COALESCE(SUM(char_count), 0) AS chars,\n COALESCE(SUM(content_bytes), 0) AS bytes,\n MIN(create_time) AS earliest,\n MAX(update_time) AS latest,\n COALESCE(SUM(CASE WHEN truncated = 1 THEN 1 ELSE 0 END), 0) AS truncated\n FROM conversations`),\n sqlite.execute(\"SELECT COUNT(*) AS indexed_messages FROM vault_messages\"),\n sqlite.execute(\"SELECT COUNT(*) AS checkpoints FROM vault_checkpoints\"),\n sqlite.execute(\"SELECT COUNT(*) AS knowledge_items FROM vault_knowledge_items\"),\n sqlite.execute(\"SELECT COUNT(*) AS relations FROM vault_relations\"),\n ]);\n return c.json({\n ...(conversations.rows[0] ?? {}),\n indexedMessages: Number((indexed.rows[0] as any)?.indexed_messages ?? 0),\n checkpoints: Number((checkpoints.rows[0] as any)?.checkpoints ?? 0),\n knowledgeItems: Number((knowledge.rows[0] as any)?.knowledge_items ?? 0),\n relations: Number((relations.rows[0] as any)?.relations ?? 0),\n budgetBytes: VAULT_BUDGET_BYTES,\n });\n});\n\napp.get(\"/api/search\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const q = (c.req.query(\"q\") ?? \"\").trim().slice(0, 160);\n if (q.length < 2) return c.json({ query: q, engine: \"none\", results: [] });\n\n const match = ftsQuery(q);\n const indexedCount = await sqlite.execute(\"SELECT COUNT(*) AS count FROM vault_messages\");\n const hasMessageIndex = Number((indexedCount.rows[0] as any)?.count ?? 0) > 0;\n\n if (match && hasMessageIndex) {\n const result = await sqlite.execute({\n sql: `WITH hits AS (\n SELECT\n conversation_id,\n message_id,\n role,\n snippet(vault_messages_fts, 4, '', '', ' … ', 42) AS hit_snippet,\n bm25(vault_messages_fts, 6.0, 0.0, 2.5, 0.0, 1.0) AS rank\n FROM vault_messages_fts\n WHERE vault_messages_fts MATCH ?\n ORDER BY rank\n LIMIT 150\n ), best AS (\n SELECT *, ROW_NUMBER() OVER (PARTITION BY conversation_id ORDER BY rank) AS rn\n FROM hits\n )\n SELECT\n c.id, c.title, c.create_time, c.update_time, c.message_count, c.char_count,\n c.content_bytes, c.truncated, b.message_id, b.role, b.hit_snippet, b.rank\n FROM best b\n JOIN conversations c ON c.id = b.conversation_id\n WHERE b.rn = 1\n ORDER BY b.rank, c.update_time DESC\n LIMIT 25`,\n args: [match],\n });\n return c.json({\n query: q,\n engine: \"fts5_bm25\",\n match,\n checkpoints: await searchCheckpointIndex(match),\n knowledge: await searchKnowledgeIndex(match),\n results: result.rows.map((row: any) => ({\n id: row.id,\n title: row.title,\n createTime: row.create_time,\n updateTime: row.update_time,\n messageCount: row.message_count,\n charCount: row.char_count,\n contentBytes: row.content_bytes,\n truncated: Boolean(row.truncated),\n messageId: row.message_id,\n role: row.role,\n rank: row.rank,\n snippet: String(row.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(),\n })),\n });\n }\n\n const terms = q.split(/\\s+/).filter(Boolean).slice(0, 6);\n const clauses = terms.map(() => \"(title LIKE ? OR content_text LIKE ?)\");\n const args: string[] = [];\n for (const term of terms) {\n const pattern = `%${term}%`;\n args.push(pattern, pattern);\n }\n const result = await sqlite.execute({\n sql: `SELECT id, title, create_time, update_time, message_count, char_count, content_bytes, truncated, content_text\n FROM conversations\n WHERE ${clauses.join(\" AND \")}\n ORDER BY update_time DESC\n LIMIT 25`,\n args,\n });\n return c.json({\n query: q,\n engine: \"legacy_like_fallback\",\n checkpoints: await searchCheckpointIndex(match),\n knowledge: await searchKnowledgeIndex(match),\n results: result.rows.map((row: any) => ({\n id: row.id,\n title: row.title,\n createTime: row.create_time,\n updateTime: row.update_time,\n messageCount: row.message_count,\n charCount: row.char_count,\n contentBytes: row.content_bytes,\n truncated: Boolean(row.truncated),\n snippet: legacySnippet(String(row.content_text ?? \"\"), terms[0] ?? q),\n })),\n });\n});\n\napp.get(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const [conversation, messages] = await Promise.all([\n sqlite.execute({\n sql: `SELECT id, title, create_time, update_time, message_count, char_count, content_bytes,\n content_text, truncated, source_file, imported_at\n FROM conversations WHERE id = ? LIMIT 1`,\n args: [id],\n }),\n sqlite.execute({\n sql: `SELECT id, seq, role, create_time, content_text, char_count, content_bytes\n FROM vault_messages WHERE conversation_id = ? ORDER BY seq ASC`,\n args: [id],\n }),\n ]);\n if (!conversation.rows.length) return c.json({ error: \"not_found\" }, 404);\n return c.json({ ...(conversation.rows[0] as any), indexed_messages: messages.rows });\n});\n\napp.put(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n\n const title = typeof body.title === \"string\" ? body.title.trim().slice(0, 300) : \"Sem título\";\n const contentText = typeof body.contentText === \"string\" ? body.contentText : \"\";\n if (!contentText.trim()) return c.json({ error: \"empty_conversation\" }, 400);\n if (contentText.length > MAX_CONVERSATION_CHARS) {\n return c.json({ error: \"conversation_too_large\", maxChars: MAX_CONVERSATION_CHARS }, 413);\n }\n\n let importRun: null | { id: string; fingerprint: string; total: number; cursorAfter: number; skippedCount: number } = null;\n if (body.importRun != null) {\n const raw = body.importRun;\n const runId = typeof raw?.id === \"string\" ? raw.id.trim() : \"\";\n const fingerprint = typeof raw?.sourceFingerprint === \"string\" ? raw.sourceFingerprint.trim().toLowerCase() : \"\";\n const total = Math.min(1_000_000, int(raw?.totalCandidates));\n const cursorAfter = Math.min(total, int(raw?.cursorAfter));\n const skippedCount = Math.min(cursorAfter, int(raw?.skippedCount));\n if (!safeId(runId) || !/^[a-f0-9]{64}$/.test(fingerprint) || total < 1 || cursorAfter < 1 || skippedCount >= cursorAfter) {\n return c.json({ error: \"invalid_import_run_progress\" }, 400);\n }\n const run = await sqlite.execute({\n sql: \"SELECT source_fingerprint,total_candidates FROM vault_import_runs WHERE id=? LIMIT 1\",\n args: [runId],\n });\n if (!run.rows.length) return c.json({ error: \"import_run_not_initialized\" }, 409);\n const row: any = run.rows[0];\n if (String(row.source_fingerprint) !== fingerprint) return c.json({ error: \"import_run_fingerprint_mismatch\" }, 409);\n if (Number(row.total_candidates) !== total) return c.json({ error: \"import_run_total_mismatch\" }, 409);\n importRun = { id: runId, fingerprint, total, cursorAfter, skippedCount };\n }\n\n const rawMessages = Array.isArray(body.messages) ? body.messages.slice(0, MAX_MESSAGES_PER_CONVERSATION) : [];\n const normalizedMessages = rawMessages.flatMap((message: any, index: number) => {\n const text = typeof message?.contentText === \"string\" ? message.contentText.trim() : \"\";\n if (!text) return [];\n const clipped = text.slice(0, MAX_MESSAGE_CHARS);\n let messageId = typeof message?.id === \"string\" ? message.id.trim() : \"\";\n if (!safeId(messageId)) messageId = `${id}_m_${index + 1}`.slice(0, 160);\n return [{\n id: messageId,\n seq: index,\n role: typeof message?.role === \"string\" ? message.role.toLowerCase().slice(0, 40) : \"unknown\",\n createTime: typeof message?.createTime === \"number\" && Number.isFinite(message.createTime) ? message.createTime : null,\n contentText: clipped,\n charCount: clipped.length,\n contentBytes: new TextEncoder().encode(clipped).length,\n }];\n });\n\n const contentBytes = new TextEncoder().encode(contentText).length;\n const current = await sqlite.execute({ sql: \"SELECT content_bytes FROM conversations WHERE id = ? LIMIT 1\", args: [id] });\n const currentBytes = Number((current.rows[0] as any)?.content_bytes ?? 0);\n const totals = await sqlite.execute(\"SELECT COALESCE(SUM(content_bytes), 0) AS bytes FROM conversations\");\n const usedBytes = Number((totals.rows[0] as any)?.bytes ?? 0);\n const projected = usedBytes - currentBytes + contentBytes;\n if (projected > VAULT_BUDGET_BYTES) {\n return c.json({ error: \"vault_budget_exceeded\", usedBytes, projectedBytes: projected, budgetBytes: VAULT_BUDGET_BYTES }, 507);\n }\n\n const importedAt = new Date().toISOString();\n const statements: Array<{ sql: string; args?: Array }> = [\n {\n sql: `INSERT INTO conversations (\n id, title, create_time, update_time, message_count, char_count, content_bytes,\n content_text, truncated, source_file, imported_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET\n title = excluded.title,\n create_time = excluded.create_time,\n update_time = excluded.update_time,\n message_count = excluded.message_count,\n char_count = excluded.char_count,\n content_bytes = excluded.content_bytes,\n content_text = excluded.content_text,\n truncated = excluded.truncated,\n source_file = excluded.source_file,\n imported_at = excluded.imported_at`,\n args: [\n id,\n title || \"Sem título\",\n num(body.createTime),\n num(body.updateTime),\n normalizedMessages.length || int(body.messageCount),\n contentText.length,\n contentBytes,\n contentText,\n body.truncated ? 1 : 0,\n typeof body.sourceFile === \"string\" ? body.sourceFile.slice(0, 180) : \"conversations.json\",\n importedAt,\n ],\n },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [id] },\n ];\n\n for (const message of normalizedMessages) {\n statements.push({\n sql: `INSERT INTO vault_messages (\n id, conversation_id, seq, role, create_time, content_text, char_count, content_bytes, imported_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [message.id, id, message.seq, message.role, message.createTime, message.contentText, message.charCount, message.contentBytes, importedAt],\n });\n statements.push({\n sql: \"INSERT INTO vault_messages_fts(message_id, conversation_id, title, role, content) VALUES (?, ?, ?, ?, ?)\",\n args: [message.id, id, title || \"Sem título\", message.role, message.contentText],\n });\n }\n\n if (importRun) {\n const importedCountAfter = importRun.cursorAfter - importRun.skippedCount;\n statements.push({\n sql: `UPDATE vault_import_runs SET\n indexed_messages=indexed_messages + CASE WHEN cursor < ? THEN ? ELSE 0 END,\n cursor=MAX(cursor, ?),\n imported_count=MAX(imported_count, ?),\n skipped_count=MAX(skipped_count, ?),\n status=CASE\n WHEN ? > cursor THEN CASE WHEN ? >= total_candidates THEN 'COMPLETE' ELSE 'IN_PROGRESS' END\n ELSE status\n END,\n last_error=CASE WHEN ? > cursor THEN NULL ELSE last_error END,\n updated_at=?\n WHERE id=? AND source_fingerprint=?\n RETURNING cursor,imported_count,indexed_messages,skipped_count,status,last_error,updated_at`,\n args: [\n importRun.cursorAfter,\n normalizedMessages.length,\n importRun.cursorAfter,\n importedCountAfter,\n importRun.skippedCount,\n importRun.cursorAfter,\n importRun.cursorAfter,\n importRun.cursorAfter,\n importedAt,\n importRun.id,\n importRun.fingerprint,\n ],\n });\n }\n\n const batchResults = await sqlite.batch(statements);\n const importProgress: any = importRun ? batchResults[batchResults.length - 1]?.rows?.[0] ?? null : null;\n return c.json({\n ok: true,\n id,\n contentBytes,\n projectedBytes: projected,\n indexedMessages: normalizedMessages.length,\n searchEngine: normalizedMessages.length ? \"fts5_bm25\" : \"legacy_like_fallback\",\n importProgress: importProgress ? {\n cursor: Number(importProgress.cursor ?? 0),\n importedCount: Number(importProgress.imported_count ?? 0),\n indexedMessages: Number(importProgress.indexed_messages ?? 0),\n skippedCount: Number(importProgress.skipped_count ?? 0),\n status: importProgress.status,\n lastError: importProgress.last_error,\n updatedAt: importProgress.updated_at,\n } : null,\n });\n});\n\napp.get(\"/api/import-runs/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const result = await sqlite.execute({\n sql: `SELECT id, source_fingerprint, source_name, source_size, total_candidates, cursor,\n imported_count, indexed_messages, skipped_count, status, inventory_json, last_error, created_at, updated_at\n FROM vault_import_runs WHERE id = ? LIMIT 1`,\n args: [id],\n });\n if (!result.rows.length) return c.json({ error: \"not_found\" }, 404);\n const row: any = result.rows[0];\n return c.json({\n ...row,\n inventory: (() => { try { return JSON.parse(String(row.inventory_json || \"{}\")); } catch { return {}; } })(),\n });\n});\n\napp.put(\"/api/import-runs/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n const fingerprint = typeof body.sourceFingerprint === \"string\" ? body.sourceFingerprint.trim().toLowerCase() : \"\";\n const sourceName = typeof body.sourceName === \"string\" ? body.sourceName.trim().slice(0, 300) : \"\";\n if (!/^[a-f0-9]{64}$/.test(fingerprint) || !sourceName) return c.json({ error: \"valid_source_fingerprint_and_name_required\" }, 400);\n const total = Math.min(1_000_000, int(body.totalCandidates));\n if (total < 1) return c.json({ error: \"total_candidates_required\" }, 400);\n const cursor = Math.min(total, int(body.cursor));\n const importedCount = Math.min(cursor, int(body.importedCount));\n const indexedMessages = Math.min(50_000_000, int(body.indexedMessages));\n const skippedCount = Math.min(cursor, int(body.skippedCount));\n if (importedCount + skippedCount > cursor) return c.json({ error: \"import_progress_inconsistent\" }, 400);\n const sourceSize = Math.min(Number.MAX_SAFE_INTEGER, int(body.sourceSize));\n const allowedStatuses = new Set([\"IN_PROGRESS\", \"PAUSED\", \"COMPLETE\", \"FAILED\"]);\n const status = allowedStatuses.has(String(body.status)) ? String(body.status) : \"IN_PROGRESS\";\n if (status === \"COMPLETE\" && cursor !== total) return c.json({ error: \"complete_requires_full_cursor\" }, 400);\n const inventoryJson = JSON.stringify(body.inventory && typeof body.inventory === \"object\" ? body.inventory : {}).slice(0, 16_000);\n const lastError = typeof body.lastError === \"string\" && body.lastError.trim() ? body.lastError.trim().slice(0, 1000) : null;\n const existing = await sqlite.execute({ sql: \"SELECT source_fingerprint,total_candidates,status FROM vault_import_runs WHERE id = ? LIMIT 1\", args: [id] });\n if (existing.rows.length) {\n const row: any = existing.rows[0];\n if (String(row.source_fingerprint) !== fingerprint) return c.json({ error: \"import_run_fingerprint_mismatch\" }, 409);\n if (Number(row.total_candidates) !== total) return c.json({ error: \"import_run_total_mismatch\" }, 409);\n }\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: `INSERT INTO vault_import_runs(\n id, source_fingerprint, source_name, source_size, total_candidates, cursor, imported_count,\n indexed_messages, skipped_count, status, inventory_json, last_error, created_at, updated_at\n ) VALUES(?,?,?,?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET\n source_name=excluded.source_name,\n source_size=MAX(vault_import_runs.source_size, excluded.source_size),\n cursor=MAX(vault_import_runs.cursor, excluded.cursor),\n imported_count=MAX(vault_import_runs.imported_count, excluded.imported_count),\n indexed_messages=MAX(vault_import_runs.indexed_messages, excluded.indexed_messages),\n skipped_count=MAX(vault_import_runs.skipped_count, excluded.skipped_count),\n status=CASE WHEN vault_import_runs.status='COMPLETE' THEN 'COMPLETE' ELSE excluded.status END,\n inventory_json=CASE WHEN length(excluded.inventory_json) > 2 THEN excluded.inventory_json ELSE vault_import_runs.inventory_json END,\n last_error=CASE WHEN vault_import_runs.status='COMPLETE' OR excluded.status='COMPLETE' THEN NULL ELSE excluded.last_error END,\n updated_at=excluded.updated_at`,\n args: [id, fingerprint, sourceName, sourceSize, total, cursor, importedCount, indexedMessages, skippedCount, status, inventoryJson, lastError, now, now],\n });\n const saved = await sqlite.execute({\n sql: `SELECT id,source_fingerprint,source_name,source_size,total_candidates,cursor,imported_count,indexed_messages,skipped_count,status,last_error,updated_at FROM vault_import_runs WHERE id=? LIMIT 1`,\n args: [id],\n });\n const row: any = saved.rows[0] ?? {};\n return c.json({\n ok: true,\n id: row.id,\n sourceFingerprint: row.source_fingerprint,\n sourceName: row.source_name,\n sourceSize: Number(row.source_size ?? 0),\n totalCandidates: Number(row.total_candidates ?? 0),\n cursor: Number(row.cursor ?? 0),\n importedCount: Number(row.imported_count ?? 0),\n indexedMessages: Number(row.indexed_messages ?? 0),\n skippedCount: Number(row.skipped_count ?? 0),\n status: row.status,\n lastError: row.last_error,\n updatedAt: row.updated_at,\n });\n});\n\napp.delete(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const results = await sqlite.batch([\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM conversations WHERE id = ?\", args: [id] },\n ]);\n return c.json({ ok: true, rowsAffected: results[2]?.rowsAffected ?? 0 });\n});\n\napp.get(\"/api/checkpoints\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const limit = Math.min(25, Math.max(1, Number(c.req.query(\"limit\") ?? 8) || 8));\n const project = (c.req.query(\"project\") ?? \"\").trim().slice(0, 120);\n const result = project\n ? await sqlite.execute({\n sql: `SELECT id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n FROM vault_checkpoints WHERE project = ? ORDER BY updated_at DESC LIMIT ?`,\n args: [project, limit],\n })\n : await sqlite.execute({\n sql: `SELECT id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n FROM vault_checkpoints ORDER BY updated_at DESC LIMIT ?`,\n args: [limit],\n });\n return c.json({ project: project || null, checkpoints: result.rows });\n});\n\napp.post(\"/api/checkpoints\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n const project = typeof body.project === \"string\" ? body.project.trim().slice(0, 120) : \"\";\n const title = typeof body.title === \"string\" ? body.title.trim().slice(0, 240) : \"\";\n const summary = typeof body.summary === \"string\" ? body.summary.trim().slice(0, 12000) : \"\";\n if (!safeProject(project) || !title || !summary) return c.json({ error: \"project_title_summary_required\" }, 400);\n let id = typeof body.id === \"string\" ? body.id.trim() : \"\";\n if (!safeId(id)) id = `cp_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;\n const decisions = typeof body.decisions === \"string\" ? body.decisions.trim().slice(0, 12000) : \"\";\n const openGaps = typeof body.openGaps === \"string\" ? body.openGaps.trim().slice(0, 12000) : \"\";\n const nextAction = typeof body.nextAction === \"string\" ? body.nextAction.trim().slice(0, 12000) : \"\";\n const sourceConversationId = safeId(body.sourceConversationId) ? body.sourceConversationId : null;\n const evidenceState = typeof body.evidenceState === \"string\" ? body.evidenceState.trim().slice(0, 80) : \"CHECKPOINT\";\n const now = new Date().toISOString();\n\n await sqlite.batch([\n {\n sql: `INSERT INTO vault_checkpoints (\n id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET\n project=excluded.project, title=excluded.title, summary=excluded.summary,\n decisions=excluded.decisions, open_gaps=excluded.open_gaps, next_action=excluded.next_action,\n source_conversation_id=excluded.source_conversation_id, evidence_state=excluded.evidence_state,\n updated_at=excluded.updated_at`,\n args: [id, project, title, summary, decisions, openGaps, nextAction, sourceConversationId, evidenceState, now, now],\n },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [id] },\n {\n sql: `INSERT INTO vault_checkpoints_fts(checkpoint_id, project, title, summary, decisions, open_gaps, next_action)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [id, project, title, summary, decisions, openGaps, nextAction],\n },\n ]);\n return c.json({ ok: true, id, project, title, evidenceState, updatedAt: now });\n});\n\napp.get(\"/api/checkpoint-search\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const q = (c.req.query(\"q\") ?? \"\").trim().slice(0, 160);\n const match = ftsQuery(q);\n if (!match) return c.json({ query: q, results: [] });\n const result = await sqlite.execute({\n sql: `SELECT\n checkpoint_id,\n project,\n title,\n snippet(vault_checkpoints_fts, 3, '', '', ' … ', 42) AS hit_snippet,\n bm25(vault_checkpoints_fts, 0.0, 3.0, 5.0, 2.0, 2.0, 1.5, 1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT 25`,\n args: [match],\n });\n return c.json({ query: q, engine: \"fts5_bm25\", results: result.rows });\n});\n\nexport default oauthMiddleware(app.fetch);\n","createdAt",["D",1788740370555],"branchVersion","branchId","bb539edb-15fc-48c6-a690-7d3728033cd0",{"_32":48,"_34":47,"_35":22,"_37":50,"_40":51,"_42":14,"_43":44,"_26":27},{"_32":48,"_34":47,"_35":22,"_37":49},"CHANGELOG.md","01a077cd-4980-75c9-8c9f-08b802212cc9","# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

Diff · v14