`, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_262":263,"_264":265},"routes/_app.x.$handle.$name",{"_100":99,"_31":43,"_109":88,"_26":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":123,"_124":24,"_125":126,"_127":57,"_128":-5,"_129":-5,"_130":131},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",4,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","v02_selftest.ts","latestPath","fileId","3ef246bc-aa33-11f1-ad43-1607ee4eb77e","name","fileType","script","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst CID = \"v02_selftest_fixture\";\nconst CPID = \"v02_selftest_checkpoint\";\n\nasync function cleanup() {\n await sqlite.batch([\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM conversations WHERE id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [CPID] },\n { sql: \"DELETE FROM vault_checkpoints WHERE id = ?\", args: [CPID] },\n ]);\n}\n\nasync function writeFixture() {\n const now = new Date().toISOString();\n await sqlite.batch([\n { sql: `INSERT INTO conversations(id,title,create_time,update_time,message_count,char_count,content_bytes,content_text,truncated,source_file,imported_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET title=excluded.title, message_count=excluded.message_count, content_text=excluded.content_text, imported_at=excluded.imported_at`,\n args: [CID, \"Fixture V0.2\", 1, 2, 2, 64, 64, \"[USER]\\nalpha kernel\\n\\n[ASSISTANT]\\nbeta timeout\", 0, \"selftest\", now] },\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [CID] },\n { sql: \"INSERT INTO vault_messages(id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at) VALUES(?,?,?,?,?,?,?,?,?)\", args: [`${CID}_m1`, CID, 0, \"user\", 1, \"alpha kernel\", 12, 12, now] },\n { sql: \"INSERT INTO vault_messages_fts(message_id,conversation_id,title,role,content) VALUES(?,?,?,?,?)\", args: [`${CID}_m1`, CID, \"Fixture V0.2\", \"user\", \"alpha kernel\"] },\n { sql: \"INSERT INTO vault_messages(id,conversation_id,seq,role,create_time,content_text,char_count,content_bytes,imported_at) VALUES(?,?,?,?,?,?,?,?,?)\", args: [`${CID}_m2`, CID, 1, \"assistant\", 2, \"beta timeout\", 12, 12, now] },\n { sql: \"INSERT INTO vault_messages_fts(message_id,conversation_id,title,role,content) VALUES(?,?,?,?,?)\", args: [`${CID}_m2`, CID, \"Fixture V0.2\", \"assistant\", \"beta timeout\"] },\n { sql: `INSERT INTO vault_checkpoints(id,project,title,summary,decisions,open_gaps,next_action,source_conversation_id,evidence_state,created_at,updated_at)\n VALUES(?,?,?,?,?,?,?,?,?,?,?)\n ON CONFLICT(id) DO UPDATE SET summary=excluded.summary, updated_at=excluded.updated_at`,\n args: [CPID, \"SELFTEST\", \"Checkpoint fixture\", \"checkpoint alpha beta\", \"\", \"\", \"next gamma\", CID, \"SYNTHETIC\", now, now] },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [CPID] },\n { sql: \"INSERT INTO vault_checkpoints_fts(checkpoint_id,project,title,summary,decisions,open_gaps,next_action) VALUES(?,?,?,?,?,?,?)\", args: [CPID, \"SELFTEST\", \"Checkpoint fixture\", \"checkpoint alpha beta\", \"\", \"\", \"next gamma\"] },\n ]);\n}\n\nlet result: Record = {};\ntry {\n await cleanup();\n await writeFixture();\n await writeFixture(); // idempotency/reindex replay\n\n const counts = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages WHERE conversation_id = ?\", args: [CID] });\n const ftsCounts = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages_fts WHERE conversation_id = ?\", args: [CID] });\n const hit = await sqlite.execute({ sql: \"SELECT DISTINCT conversation_id FROM vault_messages_fts WHERE vault_messages_fts MATCH ?\", args: ['\"kernel\"*'] });\n const negative = await sqlite.execute({ sql: \"SELECT COUNT(*) AS c FROM vault_messages_fts WHERE vault_messages_fts MATCH ?\", args: ['\"notpresent987\"*'] });\n const cp = await sqlite.execute({ sql: \"SELECT checkpoint_id FROM vault_checkpoints_fts WHERE vault_checkpoints_fts MATCH ?\", args: ['\"gamma\"*'] });\n\n result = {\n pass: Number((counts.rows[0] as any)?.c) === 2\n && Number((ftsCounts.rows[0] as any)?.c) === 2\n && (hit.rows[0] as any)?.conversation_id === CID\n && Number((negative.rows[0] as any)?.c) === 0\n && (cp.rows[0] as any)?.checkpoint_id === CPID,\n messagesAfterReplay: Number((counts.rows[0] as any)?.c ?? -1),\n ftsRowsAfterReplay: Number((ftsCounts.rows[0] as any)?.c ?? -1),\n positiveSearch: hit.rows,\n negativeHits: Number((negative.rows[0] as any)?.c ?? -1),\n checkpointSearch: cp.rows,\n };\n} finally {\n await cleanup();\n}\n\nconsole.log(JSON.stringify(result));\nexport default result;\n","createdAt",["D",1788727250122],"branchVersion","branchId","61f0f030-99a3-46ff-9f9c-3ccc647fd1a4","id","348a33bb-f2d9-4c7a-b6a6-b2762cf9a17f","guh-knowledge-vault",["D",1788716337448],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Private searchable mirror of ChatGPT exports","imageUrl","6cc24525-830b-4db3-9c9c-fd19fb50e91f","pinnedFileId","01a077cd-4980-75c9-8c9f-12270a3b1d2b","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0773d-9d6b-7580-a53a-683363c351c8","tursoName","348a33bbf2d94c7ab6a6b2762cf9a17f","tursoHostname","348a33bbf2d94c7ab6a6b2762cf9a17f-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789499469860],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":53,"_105":106,"_107":24},"branch",{"_13":87,"_31":88,"_41":40,"_89":42,"_90":91,"_92":93,"_94":48,"_95":42,"_96":63,"_97":43,"_98":99},"isOwned",13,"v0.2-message-index","projectId","forkedBranchId","bb539edb-15fc-48c6-a690-7d3728033cd0","forkedBranchVersion",7,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","cleitoncosta","handle","displayName","Cleiton Costa","avatar","https://lh3.googleusercontent.com/a/ACg8ocIgWisWQiXts_2fy5iRiRgl8A6c7Ef94eqE3ur-4mlyUrpCBmQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":257,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":258,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":259,"_82":260,"_84":261,"_86":24},"tree",[188,195,196,197,198],"files",[188,189,190,191,192,193,194,195,196,197,198],"counts",{"_177":61,"_178":179,"_180":61,"_181":182,"_183":184},"contents",[139,140,141,142,143],"upstreamProject","upstreamBranch",{"_41":91,"_36":132,"_133":134,"_31":135,"_89":42,"_13":136,"_90":-5,"_92":-5,"_137":138,"_45":-5,"_86":24,"_47":48,"_98":99,"_62":63,"_97":43},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1788716337448],"updatedAt",["D",1789089349222],"main",38,"lockfileKey","1789089349347-esm.town_v_cleitoncosta_guh-knowledge-vault@38-main",{"_41":171,"_31":172,"_29":173,"_145":-5,"_39":40,"_38":155,"_146":57,"_36":174,"_13":61,"_32":175,"_34":-5,"_23":24,"_148":-5,"_26":176},{"_41":165,"_31":166,"_29":167,"_145":-5,"_39":40,"_38":155,"_146":57,"_36":168,"_13":61,"_32":20,"_34":169,"_23":24,"_148":-5,"_26":170},{"_41":159,"_31":160,"_29":161,"_145":-5,"_39":40,"_38":155,"_146":24,"_36":162,"_13":61,"_32":20,"_34":163,"_23":24,"_148":-5,"_26":164},{"_41":150,"_31":151,"_29":152,"_145":-5,"_39":40,"_38":153,"_146":24,"_36":154,"_13":155,"_32":156,"_34":157,"_23":24,"_148":-5,"_26":158},{"_41":144,"_31":27,"_29":30,"_145":-5,"_39":40,"_38":14,"_146":24,"_36":147,"_13":61,"_32":33,"_34":35,"_23":24,"_148":-5,"_26":149},"0b53a6c0-a059-4951-8f98-abf1f191933a","parentId","latest",["D",1788727250122],"label",[27],"9c9c7dd6-3870-4486-8317-50cad6dc9494","index.ts","01a0786f-1d9d-752f-acd5-b80a71527dd7",2,["D",1788727093145],1,"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getOAuthUserData, oauthMiddleware } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { Hono } from \"npm:hono@4\";\nimport { Root } from \"./frontend/root.tsx\";\n\nconst OWNER = \"cleitoncosta\";\nconst APP_VERSION = \"0.2.0\";\nconst VAULT_BUDGET_BYTES = 8_000_000;\nconst MAX_CONVERSATION_CHARS = 600_000;\nconst MAX_MESSAGE_CHARS = 180_000;\nconst MAX_MESSAGES_PER_CONVERSATION = 5000;\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nlet schemaReady = false;\nasync function ensureSchema() {\n if (schemaReady) return;\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS conversations (\n id TEXT PRIMARY KEY,\n title TEXT NOT NULL,\n create_time REAL,\n update_time REAL,\n message_count INTEGER NOT NULL DEFAULT 0,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n content_text TEXT NOT NULL,\n truncated INTEGER NOT NULL DEFAULT 0,\n source_file TEXT,\n imported_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_conversations_updated ON conversations(update_time DESC)\");\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_messages (\n id TEXT PRIMARY KEY,\n conversation_id TEXT NOT NULL,\n seq INTEGER NOT NULL,\n role TEXT NOT NULL,\n create_time REAL,\n content_text TEXT NOT NULL,\n char_count INTEGER NOT NULL DEFAULT 0,\n content_bytes INTEGER NOT NULL DEFAULT 0,\n imported_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_messages_conversation_seq ON vault_messages(conversation_id, seq)\");\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_messages_create_time ON vault_messages(create_time)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_messages_fts USING fts5(\n message_id UNINDEXED,\n conversation_id UNINDEXED,\n title,\n role UNINDEXED,\n content,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_checkpoints (\n id TEXT PRIMARY KEY,\n project TEXT NOT NULL,\n title TEXT NOT NULL,\n summary TEXT NOT NULL,\n decisions TEXT NOT NULL DEFAULT '',\n open_gaps TEXT NOT NULL DEFAULT '',\n next_action TEXT NOT NULL DEFAULT '',\n source_conversation_id TEXT,\n evidence_state TEXT NOT NULL DEFAULT 'CHECKPOINT',\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute(\"CREATE INDEX IF NOT EXISTS idx_vault_checkpoints_project_updated ON vault_checkpoints(project, updated_at DESC)\");\n await sqlite.execute(`CREATE VIRTUAL TABLE IF NOT EXISTS vault_checkpoints_fts USING fts5(\n checkpoint_id UNINDEXED,\n project,\n title,\n summary,\n decisions,\n open_gaps,\n next_action,\n tokenize='unicode61 remove_diacritics 2'\n )`);\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS vault_meta (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )`);\n await sqlite.execute({\n sql: \"INSERT INTO vault_meta(key,value,updated_at) VALUES ('schema_version', ?, datetime('now')) ON CONFLICT(key) DO UPDATE SET value=excluded.value, updated_at=excluded.updated_at\",\n args: [APP_VERSION],\n });\n schemaReady = true;\n}\n\nasync function sessionFor(req: Request) {\n return await getOAuthUserData(req);\n}\n\nasync function isOwner(req: Request) {\n const session = await sessionFor(req);\n return session?.user?.username === OWNER ? session : null;\n}\n\nasync function requireOwner(c: any) {\n const session = await isOwner(c.req.raw);\n if (!session) return c.json({ error: \"unauthorized\", login: \"/auth/login\" }, 401);\n return null;\n}\n\nfunction safeId(value: unknown) {\n return typeof value === \"string\" && /^[A-Za-z0-9_-]{1,160}$/.test(value);\n}\n\nfunction safeProject(value: unknown) {\n return typeof value === \"string\" && value.trim().length >= 1 && value.trim().length <= 120;\n}\n\nfunction num(value: unknown) {\n return typeof value === \"number\" && Number.isFinite(value) ? value : null;\n}\n\nfunction int(value: unknown, fallback = 0) {\n return typeof value === \"number\" && Number.isFinite(value) ? Math.max(0, Math.trunc(value)) : fallback;\n}\n\nfunction ftsQuery(input: string) {\n const tokens = input.normalize(\"NFKC\").match(/[\\p{L}\\p{N}_]+/gu)?.slice(0, 8) ?? [];\n return tokens.map((token) => `\"${token.replaceAll('\"', '\"\"')}\"*`).join(\" AND \");\n}\n\nfunction legacySnippet(text: string, needle: string) {\n const normalized = text.toLocaleLowerCase(\"pt-BR\");\n const hit = normalized.indexOf(needle.toLocaleLowerCase(\"pt-BR\"));\n const start = hit >= 0 ? Math.max(0, hit - 180) : 0;\n const chunk = text.slice(start, start + 620).replace(/\\s+/g, \" \").trim();\n return `${start > 0 ? \"…\" : \"\"}${chunk}${start + 620 < text.length ? \"…\" : \"\"}`;\n}\n\napp.get(\"/\", async (c) => {\n const session = await sessionFor(c.req.raw);\n if (!session?.user) return c.redirect(\"/auth/login\");\n if (session.user.username !== OWNER) return c.text(\"Acesso negado. Este cofre pertence a outro usuário.\", 403);\n return c.html(Root());\n});\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/api/me\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const session = await sessionFor(c.req.raw);\n return c.json({\n owner: OWNER,\n username: session?.user?.username,\n version: APP_VERSION,\n openaiApiUsed: false,\n storage: \"Val Town project-scoped SQLite + FTS5\",\n searchEngine: \"SQLite FTS5/BM25\",\n budgetBytes: VAULT_BUDGET_BYTES,\n maxConversationChars: MAX_CONVERSATION_CHARS,\n });\n});\n\napp.get(\"/api/stats\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const [conversations, indexed, checkpoints] = await Promise.all([\n sqlite.execute(`SELECT\n COUNT(*) AS conversations,\n COALESCE(SUM(message_count), 0) AS messages,\n COALESCE(SUM(char_count), 0) AS chars,\n COALESCE(SUM(content_bytes), 0) AS bytes,\n MIN(create_time) AS earliest,\n MAX(update_time) AS latest,\n COALESCE(SUM(CASE WHEN truncated = 1 THEN 1 ELSE 0 END), 0) AS truncated\n FROM conversations`),\n sqlite.execute(\"SELECT COUNT(*) AS indexed_messages FROM vault_messages\"),\n sqlite.execute(\"SELECT COUNT(*) AS checkpoints FROM vault_checkpoints\"),\n ]);\n return c.json({\n ...(conversations.rows[0] ?? {}),\n indexedMessages: Number((indexed.rows[0] as any)?.indexed_messages ?? 0),\n checkpoints: Number((checkpoints.rows[0] as any)?.checkpoints ?? 0),\n budgetBytes: VAULT_BUDGET_BYTES,\n });\n});\n\napp.get(\"/api/search\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const q = (c.req.query(\"q\") ?? \"\").trim().slice(0, 160);\n if (q.length < 2) return c.json({ query: q, engine: \"none\", results: [] });\n\n const match = ftsQuery(q);\n const indexedCount = await sqlite.execute(\"SELECT COUNT(*) AS count FROM vault_messages\");\n const hasMessageIndex = Number((indexedCount.rows[0] as any)?.count ?? 0) > 0;\n\n if (match && hasMessageIndex) {\n const result = await sqlite.execute({\n sql: `WITH hits AS (\n SELECT\n conversation_id,\n message_id,\n role,\n snippet(vault_messages_fts, 4, '', '', ' … ', 42) AS hit_snippet,\n bm25(vault_messages_fts, 6.0, 0.0, 2.5, 0.0, 1.0) AS rank\n FROM vault_messages_fts\n WHERE vault_messages_fts MATCH ?\n ORDER BY rank\n LIMIT 150\n ), best AS (\n SELECT *, ROW_NUMBER() OVER (PARTITION BY conversation_id ORDER BY rank) AS rn\n FROM hits\n )\n SELECT\n c.id, c.title, c.create_time, c.update_time, c.message_count, c.char_count,\n c.content_bytes, c.truncated, b.message_id, b.role, b.hit_snippet, b.rank\n FROM best b\n JOIN conversations c ON c.id = b.conversation_id\n WHERE b.rn = 1\n ORDER BY b.rank, c.update_time DESC\n LIMIT 25`,\n args: [match],\n });\n return c.json({\n query: q,\n engine: \"fts5_bm25\",\n match,\n results: result.rows.map((row: any) => ({\n id: row.id,\n title: row.title,\n createTime: row.create_time,\n updateTime: row.update_time,\n messageCount: row.message_count,\n charCount: row.char_count,\n contentBytes: row.content_bytes,\n truncated: Boolean(row.truncated),\n messageId: row.message_id,\n role: row.role,\n rank: row.rank,\n snippet: String(row.hit_snippet ?? \"\").replace(/\\s+/g, \" \").trim(),\n })),\n });\n }\n\n const terms = q.split(/\\s+/).filter(Boolean).slice(0, 6);\n const clauses = terms.map(() => \"(title LIKE ? OR content_text LIKE ?)\");\n const args: string[] = [];\n for (const term of terms) {\n const pattern = `%${term}%`;\n args.push(pattern, pattern);\n }\n const result = await sqlite.execute({\n sql: `SELECT id, title, create_time, update_time, message_count, char_count, content_bytes, truncated, content_text\n FROM conversations\n WHERE ${clauses.join(\" AND \")}\n ORDER BY update_time DESC\n LIMIT 25`,\n args,\n });\n return c.json({\n query: q,\n engine: \"legacy_like_fallback\",\n results: result.rows.map((row: any) => ({\n id: row.id,\n title: row.title,\n createTime: row.create_time,\n updateTime: row.update_time,\n messageCount: row.message_count,\n charCount: row.char_count,\n contentBytes: row.content_bytes,\n truncated: Boolean(row.truncated),\n snippet: legacySnippet(String(row.content_text ?? \"\"), terms[0] ?? q),\n })),\n });\n});\n\napp.get(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const [conversation, messages] = await Promise.all([\n sqlite.execute({\n sql: `SELECT id, title, create_time, update_time, message_count, char_count, content_bytes,\n content_text, truncated, source_file, imported_at\n FROM conversations WHERE id = ? LIMIT 1`,\n args: [id],\n }),\n sqlite.execute({\n sql: `SELECT id, seq, role, create_time, content_text, char_count, content_bytes\n FROM vault_messages WHERE conversation_id = ? ORDER BY seq ASC`,\n args: [id],\n }),\n ]);\n if (!conversation.rows.length) return c.json({ error: \"not_found\" }, 404);\n return c.json({ ...(conversation.rows[0] as any), indexed_messages: messages.rows });\n});\n\napp.put(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n\n const title = typeof body.title === \"string\" ? body.title.trim().slice(0, 300) : \"Sem título\";\n const contentText = typeof body.contentText === \"string\" ? body.contentText : \"\";\n if (!contentText.trim()) return c.json({ error: \"empty_conversation\" }, 400);\n if (contentText.length > MAX_CONVERSATION_CHARS) {\n return c.json({ error: \"conversation_too_large\", maxChars: MAX_CONVERSATION_CHARS }, 413);\n }\n\n const rawMessages = Array.isArray(body.messages) ? body.messages.slice(0, MAX_MESSAGES_PER_CONVERSATION) : [];\n const normalizedMessages = rawMessages.flatMap((message: any, index: number) => {\n const text = typeof message?.contentText === \"string\" ? message.contentText.trim() : \"\";\n if (!text) return [];\n const clipped = text.slice(0, MAX_MESSAGE_CHARS);\n let messageId = typeof message?.id === \"string\" ? message.id.trim() : \"\";\n if (!safeId(messageId)) messageId = `${id}_m_${index + 1}`.slice(0, 160);\n return [{\n id: messageId,\n seq: index,\n role: typeof message?.role === \"string\" ? message.role.toLowerCase().slice(0, 40) : \"unknown\",\n createTime: typeof message?.createTime === \"number\" && Number.isFinite(message.createTime) ? message.createTime : null,\n contentText: clipped,\n charCount: clipped.length,\n contentBytes: new TextEncoder().encode(clipped).length,\n }];\n });\n\n const contentBytes = new TextEncoder().encode(contentText).length;\n const current = await sqlite.execute({ sql: \"SELECT content_bytes FROM conversations WHERE id = ? LIMIT 1\", args: [id] });\n const currentBytes = Number((current.rows[0] as any)?.content_bytes ?? 0);\n const totals = await sqlite.execute(\"SELECT COALESCE(SUM(content_bytes), 0) AS bytes FROM conversations\");\n const usedBytes = Number((totals.rows[0] as any)?.bytes ?? 0);\n const projected = usedBytes - currentBytes + contentBytes;\n if (projected > VAULT_BUDGET_BYTES) {\n return c.json({ error: \"vault_budget_exceeded\", usedBytes, projectedBytes: projected, budgetBytes: VAULT_BUDGET_BYTES }, 507);\n }\n\n const importedAt = new Date().toISOString();\n const statements: Array<{ sql: string; args?: Array }> = [\n {\n sql: `INSERT INTO conversations (\n id, title, create_time, update_time, message_count, char_count, content_bytes,\n content_text, truncated, source_file, imported_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET\n title = excluded.title,\n create_time = excluded.create_time,\n update_time = excluded.update_time,\n message_count = excluded.message_count,\n char_count = excluded.char_count,\n content_bytes = excluded.content_bytes,\n content_text = excluded.content_text,\n truncated = excluded.truncated,\n source_file = excluded.source_file,\n imported_at = excluded.imported_at`,\n args: [\n id,\n title || \"Sem título\",\n num(body.createTime),\n num(body.updateTime),\n normalizedMessages.length || int(body.messageCount),\n contentText.length,\n contentBytes,\n contentText,\n body.truncated ? 1 : 0,\n typeof body.sourceFile === \"string\" ? body.sourceFile.slice(0, 180) : \"conversations.json\",\n importedAt,\n ],\n },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [id] },\n ];\n\n for (const message of normalizedMessages) {\n statements.push({\n sql: `INSERT INTO vault_messages (\n id, conversation_id, seq, role, create_time, content_text, char_count, content_bytes, imported_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [message.id, id, message.seq, message.role, message.createTime, message.contentText, message.charCount, message.contentBytes, importedAt],\n });\n statements.push({\n sql: \"INSERT INTO vault_messages_fts(message_id, conversation_id, title, role, content) VALUES (?, ?, ?, ?, ?)\",\n args: [message.id, id, title || \"Sem título\", message.role, message.contentText],\n });\n }\n\n await sqlite.batch(statements);\n return c.json({\n ok: true,\n id,\n contentBytes,\n projectedBytes: projected,\n indexedMessages: normalizedMessages.length,\n searchEngine: normalizedMessages.length ? \"fts5_bm25\" : \"legacy_like_fallback\",\n });\n});\n\napp.delete(\"/api/conversations/:id\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const id = c.req.param(\"id\");\n if (!safeId(id)) return c.json({ error: \"invalid_id\" }, 400);\n const results = await sqlite.batch([\n { sql: \"DELETE FROM vault_messages_fts WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM vault_messages WHERE conversation_id = ?\", args: [id] },\n { sql: \"DELETE FROM conversations WHERE id = ?\", args: [id] },\n ]);\n return c.json({ ok: true, rowsAffected: results[2]?.rowsAffected ?? 0 });\n});\n\napp.get(\"/api/checkpoints\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const limit = Math.min(25, Math.max(1, Number(c.req.query(\"limit\") ?? 8) || 8));\n const project = (c.req.query(\"project\") ?? \"\").trim().slice(0, 120);\n const result = project\n ? await sqlite.execute({\n sql: `SELECT id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n FROM vault_checkpoints WHERE project = ? ORDER BY updated_at DESC LIMIT ?`,\n args: [project, limit],\n })\n : await sqlite.execute({\n sql: `SELECT id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n FROM vault_checkpoints ORDER BY updated_at DESC LIMIT ?`,\n args: [limit],\n });\n return c.json({ project: project || null, checkpoints: result.rows });\n});\n\napp.post(\"/api/checkpoints\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n let body: any;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ error: \"invalid_json\" }, 400);\n }\n const project = typeof body.project === \"string\" ? body.project.trim().slice(0, 120) : \"\";\n const title = typeof body.title === \"string\" ? body.title.trim().slice(0, 240) : \"\";\n const summary = typeof body.summary === \"string\" ? body.summary.trim().slice(0, 12000) : \"\";\n if (!safeProject(project) || !title || !summary) return c.json({ error: \"project_title_summary_required\" }, 400);\n let id = typeof body.id === \"string\" ? body.id.trim() : \"\";\n if (!safeId(id)) id = `cp_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;\n const decisions = typeof body.decisions === \"string\" ? body.decisions.trim().slice(0, 12000) : \"\";\n const openGaps = typeof body.openGaps === \"string\" ? body.openGaps.trim().slice(0, 12000) : \"\";\n const nextAction = typeof body.nextAction === \"string\" ? body.nextAction.trim().slice(0, 12000) : \"\";\n const sourceConversationId = safeId(body.sourceConversationId) ? body.sourceConversationId : null;\n const evidenceState = typeof body.evidenceState === \"string\" ? body.evidenceState.trim().slice(0, 80) : \"CHECKPOINT\";\n const now = new Date().toISOString();\n\n await sqlite.batch([\n {\n sql: `INSERT INTO vault_checkpoints (\n id, project, title, summary, decisions, open_gaps, next_action, source_conversation_id, evidence_state, created_at, updated_at\n ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET\n project=excluded.project, title=excluded.title, summary=excluded.summary,\n decisions=excluded.decisions, open_gaps=excluded.open_gaps, next_action=excluded.next_action,\n source_conversation_id=excluded.source_conversation_id, evidence_state=excluded.evidence_state,\n updated_at=excluded.updated_at`,\n args: [id, project, title, summary, decisions, openGaps, nextAction, sourceConversationId, evidenceState, now, now],\n },\n { sql: \"DELETE FROM vault_checkpoints_fts WHERE checkpoint_id = ?\", args: [id] },\n {\n sql: `INSERT INTO vault_checkpoints_fts(checkpoint_id, project, title, summary, decisions, open_gaps, next_action)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [id, project, title, summary, decisions, openGaps, nextAction],\n },\n ]);\n return c.json({ ok: true, id, project, title, evidenceState, updatedAt: now });\n});\n\napp.get(\"/api/checkpoint-search\", async (c) => {\n const denied = await requireOwner(c);\n if (denied) return denied;\n await ensureSchema();\n const q = (c.req.query(\"q\") ?? \"\").trim().slice(0, 160);\n const match = ftsQuery(q);\n if (!match) return c.json({ query: q, results: [] });\n const result = await sqlite.execute({\n sql: `SELECT\n checkpoint_id,\n project,\n title,\n snippet(vault_checkpoints_fts, 3, '', '', ' … ', 42) AS hit_snippet,\n bm25(vault_checkpoints_fts, 0.0, 3.0, 5.0, 2.0, 2.0, 1.5, 1.5) AS rank\n FROM vault_checkpoints_fts\n WHERE vault_checkpoints_fts MATCH ?\n ORDER BY rank\n LIMIT 25`,\n args: [match],\n });\n return c.json({ query: q, engine: \"fts5_bm25\", results: result.rows });\n});\n\nexport default oauthMiddleware(app.fetch);\n",[151],"dc369082-64e0-4222-9b58-93d2715c9340","README.md","01a0786f-1d9d-752f-acd5-b5f92fbc4749",["D",1788726943138],"# GUH Knowledge Vault — V0.1.0\n\nPrimeira versão funcional de um cofre pessoal pesquisável para exports oficiais do ChatGPT, sem usar a API da OpenAI.\n\n## Objetivo\n\nPermitir que o proprietário `cleitoncosta`:\n\n1. faça login com a própria conta Val Town;\n2. selecione `conversations.json` (ou arquivos numerados de export);\n3. importe as 25, 50 ou 100 conversas mais recentes;\n4. pesquise por título e conteúdo;\n5. abra a conversa normalizada encontrada;\n6. mantenha o estado em SQLite escopado a este val.\n\n## Segurança V0.1\n\n- Código é público por restrição do workspace Free.\n- Conteúdo não é exposto publicamente.\n- Rotas com dados exigem sessão OAuth Val Town.\n- Apenas `username === cleitoncosta` é aceito.\n- O arquivo JSON bruto é lido primeiro no navegador; apenas conversas selecionadas/normalizadas são enviadas ao backend.\n- Nenhuma OpenAI API key é usada.\n- Nenhuma automação faz login ou raspa `chatgpt.com`.\n\n## Limites deliberados desta versão\n\n- SQLite Free é pequeno; o app usa orçamento próprio de 8 MB para manter margem.\n- Importação oferece 25/50/100 conversas recentes.\n- Conversas acima de ~590 mil caracteres preservam início e final e são marcadas como parciais.\n- Busca V0.1 é textual (`LIKE`), não semântica.\n- Arquivos e imagens do export não são ingeridos como blobs nesta versão.\n- O fluxo de login real no iPhone precisa ser validado pelo proprietário em navegador real.\n\n## Evidência já obtida\n\nPASS:\n- projeto criado no Val Town;\n- endpoint HTTP publicado;\n- visitante sem sessão é redirecionado para login Val Town;\n- schema SQLite criado;\n- INSERT sintético;\n- busca AND por `Kernel` + `timeout` encontrou o controle esperado;\n- controle sintético removido;\n- banco final voltou a 0 conversas / 0 bytes;\n- `frontend/components/App.tsx` transpila/executa no runtime;\n- nenhuma env var/API OpenAI é necessária.\n\nEVIDÊNCIA REAL NO IPHONE — 2026-09-06:\n- PASS: proprietário abriu o app em sessão real no iPhone;\n- PASS: autenticação permitiu acesso ao cofre como `cleitoncosta`;\n- PASS: arquivo JSON compatível com o export foi importado pelo Safari/iPhone;\n- PASS: 3 conversas / 10 mensagens / 970 B persistidos no SQLite;\n- PASS: busca `Kernel timeout` retornou exatamente a conversa esperada;\n- PASS: busca `NR-12` retornou exatamente a conversa esperada;\n- PASS: busca `Reconciliação` retornou resultados coerentes em mais de uma conversa;\n- PASS: resultado aberto mostrou título, metadados, mensagens USER/ASSISTANT e origem corretos;\n- PASS: valores visuais do app foram cruzados com consulta direta ao SQLite e coincidiram.\n\nEstado V0.1: **OPERATIONAL para o escopo de teste sintético compatível com export**.\n\nAinda UNVERIFIED:\n- parsing de um export oficial real da conta do proprietário;\n- importação de 25/50/100 conversas reais;\n- comportamento com export grande no Safari/iPhone;\n- cobertura de conteúdos multimodais/anexos;\n- busca semântica.\n\n## Próxima promoção\n\nO próximo marco é importar um **export oficial real do ChatGPT** e repetir os mesmos controles com uma conversa sabidamente existente. Somente depois disso o parser deve ser promovido de `SYNTHETIC_COMPATIBLE` para `REAL_EXPORT_VERIFIED`.\n\nDepois, V0.2 pode atacar arquivo completo, busca semântica local/externa sem OpenAI API, checkpoints automáticos e integração com outros agentes.\n",[160],"1b3cbe21-fbe9-423e-8cc8-177143e7fc1b","CHANGELOG.md","01a0786f-1d9d-752f-acd5-b071a2f11f2e",["D",1788726943138],"# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

Diff · v4