[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_153":154,"_155":156},"routes/_app.x.$handle.$name",{"_94":93,"_32":45,"_102":84,"_27":103,"_13":14,"_104":-5,"_11":105,"_106":107,"_108":109,"_110":111,"_112":113,"_20":-5,"_114":-5,"_115":-5,"_116":25,"_117":118,"_119":120,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",19,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","6f5ae8ee-5291-11f1-86fb-ee650bb23af1","name","fileType","http","content","/**\n * Val Town AI Agent Service — main.ts\n * --------------------------------------------------------------------\n * Self-contained HTTP val that chats with you, manages a sandboxed set\n * of \"agent_*\" child vals/files, persists state in SQLite + Blob, and\n * can rewrite itself with snapshot/rollback safety.\n *\n * Sections:\n * 1. Config & globals\n * 2. Persistence (SQLite schema + Blob helpers)\n * 3. Policy (allowlist, approval gating, audit log)\n * 4. Val Town SDK wrappers\n * 5. Tool implementations\n * 6. Tool registry (JSON schemas — the LLM ONLY sees these)\n * 7. Agent loop (LLM -> tool -> LLM)\n * 8. HTTP routes (/api/*)\n * 9. Web UI\n * 10. Default export\n *\n * Setup env vars (Val Town -> val settings -> Environment Variables):\n * VAL_TOWN_API_KEY required, val:read + val:write\n * AGENT_MAIN_VAL_ID required, the id of THIS val (for self-edit)\n * AGENT_MAIN_FILE optional, default \"main.tsx\" (rename if needed)\n * AGENT_PREFIX optional, default \"agent_\"\n * AGENT_UI_TOKEN optional but recommended, gates the UI\n * OPENAI_API_KEY optional; if unset, std/openai (Val Town creds) is used\n * OPENAI_MODEL optional, default \"gpt-4o-mini\"\n */\n\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/global.ts\";\nimport { blob } from \"https://esm.town/v/std/blob\";\n\n// ====================================================================\n// 1. CONFIG & GLOBALS\n// ====================================================================\n\nconst AGENT_PREFIX = Deno.env.get(\"AGENT_PREFIX\") ?? \"agent_\";\nconst MAIN_VAL_ID = Deno.env.get(\"AGENT_MAIN_VAL_ID\") ?? \"\";\nconst MAIN_FILE_PATH = Deno.env.get(\"AGENT_MAIN_FILE\") ?? \"main.ts\";\nconst UI_TOKEN = Deno.env.get(\"AGENT_UI_TOKEN\") ?? \"\";\nconst OPENAI_MODEL = Deno.env.get(\"OPENAI_MODEL\") ?? \"gpt-4o-mini\";\nconst MAX_ITERATIONS = 8;\nconst UNRESTRICTED = Deno.env.get(\"AGENT_UNRESTRICTED\") === \"1\";\nconst AUTO_APPROVE = Deno.env.get(\"AGENT_AUTO_APPROVE\") === \"1\";\n\n/** Tools that NEVER run directly — they create a pending approval row. */\nconst APPROVAL_REQUIRED = new Set([\n \"edit_main\",\n \"delete_val\",\n \"create_cron\",\n]);\n\nconst vt = new ValTown({\n bearerToken: Deno.env.get(\"VAL_TOWN_API_KEY\") ?? \"\",\n});\n\nconst vt = new ValTown({\n bearerToken: Deno.env.get(\"VAL_TOWN_API_KEY\") ?? \"\",\n});\n\nconst _oaiKey = Deno.env.get(\"OPENAI_API_KEY\");\n// std/openai uses Val Town's hosted credits when no apiKey is passed.\nconst openai = _oaiKey ? new OpenAI({ apiKey: _oaiKey }) : new OpenAI();\n\nconst SYSTEM_PROMPT = `\nYou are an AI agent operating inside Val Town on the user's account.\nYou can only act through the provided tools — never invent code paths.\n\nMode: ${UNRESTRICTED ? \"UNRESTRICTED — you may touch any val the user owns.\" : `RESTRICTED — only your own main val and vals with prefix \"${AGENT_PREFIX}\", or vals explicitly adopted via adopt_val.`}\nApprovals: ${AUTO_APPROVE ? \"AUTO — destructive tools run immediately.\" : \"MANUAL — edit_main / delete_val / create_cron return pending_approval; tell the user and stop.\"}\n\nWhen the user asks about \"managed vals\", call list_managed_vals.\nWhen the user refers to an existing val by name you don't recognise, call\nlist_all_vals first to find its id. In unrestricted mode you can edit it\ndirectly with edit_val_file; otherwise call adopt_val first.\n\nBefore editing main.ts, (a) read it first, (b) describe the change,\n(c) suggest dry_run=true so the user can review the diff.\n\nBe concise. One tool call per turn unless clearly parallelizable.\n`.trim();\n\n// ====================================================================\n// 2. PERSISTENCE\n// ====================================================================\n\nlet _dbReady: Promise | null = null;\nasync function ensureDb(): Promise {\n if (_dbReady) return _dbReady;\n _dbReady = (async () => {\n const stmts = [\n `CREATE TABLE IF NOT EXISTS agent_chat (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n session_id TEXT NOT NULL,\n role TEXT NOT NULL,\n content TEXT,\n tool_calls TEXT,\n tool_call_id TEXT,\n name TEXT,\n created_at INTEGER NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_chat_session ON agent_chat(session_id, id)`,\n\n `CREATE TABLE IF NOT EXISTS agent_tool_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n session_id TEXT,\n tool TEXT NOT NULL,\n args TEXT,\n result TEXT,\n status TEXT,\n dry_run INTEGER DEFAULT 0,\n created_at INTEGER NOT NULL\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_managed_vals (\n val_id TEXT PRIMARY KEY,\n name TEXT,\n privacy TEXT,\n kind TEXT, -- \"val\" | \"cron\"\n created_at INTEGER\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_snapshots (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n val_id TEXT NOT NULL,\n file_path TEXT NOT NULL,\n blob_key TEXT NOT NULL,\n reason TEXT,\n created_at INTEGER NOT NULL\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_approvals (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n session_id TEXT,\n tool TEXT NOT NULL,\n args TEXT NOT NULL,\n status TEXT NOT NULL, -- pending | approved | rejected | executed | failed\n result TEXT,\n created_at INTEGER NOT NULL,\n decided_at INTEGER\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_memory (\n k TEXT PRIMARY KEY,\n v TEXT,\n updated_at INTEGER NOT NULL\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_crons (\n val_id TEXT PRIMARY KEY,\n name TEXT,\n schedule TEXT,\n created_at INTEGER NOT NULL\n )`,\n ];\n for (const s of stmts) await sqlite.execute(s);\n })();\n return _dbReady;\n}\n\nconst now = () => Date.now();\n\nasync function logAction(row: {\n session_id?: string;\n tool: string;\n args: unknown;\n result: unknown;\n status: string;\n dry_run?: boolean;\n}) {\n await sqlite.execute({\n sql: `INSERT INTO agent_tool_log (session_id, tool, args, result, status, dry_run, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [\n row.session_id ?? null,\n row.tool,\n JSON.stringify(row.args),\n JSON.stringify(row.result).slice(0, 8000),\n row.status,\n row.dry_run ? 1 : 0,\n now(),\n ],\n });\n}\n\n// ====================================================================\n// 3. POLICY\n// ====================================================================\n\nasync function isManagedVal(valId: string): Promise {\n if (valId === MAIN_VAL_ID) return true;\n const r = await sqlite.execute({\n sql: `SELECT 1 FROM agent_managed_vals WHERE val_id = ? LIMIT 1`,\n args: [valId],\n });\n return r.rows.length > 0;\n}\n\nfunction assertManagedName(name: string) {\n if (UNRESTRICTED) return;\n if (!name.startsWith(AGENT_PREFIX)) {\n throw new Error(\n `Refused: val name \"${name}\" does not start with required prefix \"${AGENT_PREFIX}\".`,\n );\n }\n}\n\nasync function assertManagedVal(valId: string) {\n if (UNRESTRICTED) return;\n if (!(await isManagedVal(valId))) {\n throw new Error(\n `Refused: val ${valId} is not in the agent's managed set.`,\n );\n }\n}\n\nasync function createApproval(\n sessionId: string,\n tool: string,\n args: unknown,\n): Promise {\n const r = await sqlite.execute({\n sql: `INSERT INTO agent_approvals (session_id, tool, args, status, created_at)\n VALUES (?, ?, ?, 'pending', ?) RETURNING id`,\n args: [sessionId, tool, JSON.stringify(args), now()],\n });\n return Number((r.rows[0] as any).id);\n}\n\n// ====================================================================\n// 4. REST API WRAPPERS (direct fetch — most reliable across SDK versions)\n// ====================================================================\n\nconst VT_TOKEN = Deno.env.get(\"VAL_TOWN_API_KEY\") ?? \"\";\nconst VT_BASE = \"https://api.val.town\";\n\nasync function vtFetch(path: string, init: RequestInit = {}): Promise {\n const r = await fetch(VT_BASE + path, {\n ...init,\n headers: {\n \"authorization\": `Bearer ${VT_TOKEN}`,\n \"content-type\": \"application/json\",\n ...(init.headers ?? {}),\n },\n });\n if (!r.ok) {\n const text = await r.text();\n throw new Error(`Val Town API ${r.status} ${r.statusText}: ${text.slice(0, 500)}`);\n }\n if (r.status === 204) return null;\n const ct = r.headers.get(\"content-type\") ?? \"\";\n return ct.includes(\"application/json\") ? await r.json() : await r.text();\n}\n\nasync function vtListMyVals(maxItems = 200): Promise {\n const out: any[] = [];\n const pageSize = 100; // server hard cap\n let offset = 0;\n while (out.length < maxItems) {\n const page: any = await vtFetch(`/v1/me/vals?limit=${pageSize}&offset=${offset}`);\n const items: any[] = page?.data ?? (Array.isArray(page) ? page : []);\n if (!items.length) break;\n out.push(...items);\n if (items.length < pageSize) break;\n offset += pageSize;\n }\n return out.slice(0, maxItems);\n}\n\nasync function vtGetVal(valId: string): Promise {\n return await vtFetch(`/v1/vals/${valId}`);\n}\n\nasync function vtGetFile(valId: string, path: string): Promise {\n const u = `${VT_BASE}/v1/vals/${valId}/files/content?path=${encodeURIComponent(path)}`;\n const r = await fetch(u, { headers: { \"authorization\": `Bearer ${VT_TOKEN}` } });\n if (!r.ok) {\n const text = await r.text();\n throw new Error(`Val Town file read ${r.status}: ${text.slice(0, 500)}`);\n }\n return await r.text();\n}\n\nasync function vtCreateVal(name: string, privacy?: \"private\" | \"unlisted\" | \"public\"): Promise {\n const body: any = { name, description: \"Agent-managed val\" };\n if (privacy) body.privacy = privacy;\n return await vtFetch(\"/v1/vals\", { method: \"POST\", body: JSON.stringify(body) });\n}\n\nasync function vtCreateFile(\n valId: string,\n path: string,\n content: string,\n type: \"http\" | \"script\" | \"interval\" | \"email\" | \"file\" = \"file\",\n) {\n return await vtFetch(`/v1/vals/${valId}/files?path=${encodeURIComponent(path)}`, {\n method: \"POST\",\n body: JSON.stringify({ content, type }),\n });\n}\n\nasync function vtUpdateFile(valId: string, path: string, content: string) {\n return await vtFetch(`/v1/vals/${valId}/files?path=${encodeURIComponent(path)}`, {\n method: \"PUT\",\n body: JSON.stringify({ content }),\n });\n}\n\nasync function vtDeleteVal(valId: string) {\n return await vtFetch(`/v1/vals/${valId}`, { method: \"DELETE\" });\n}\n\n// ====================================================================\n// 5. TOOL IMPLEMENTATIONS\n// ====================================================================\n\ntype ToolCtx = { sessionId: string; dryRun: boolean };\n\nconst impls = {\n async list_managed_vals(_args: {}, _ctx: ToolCtx) {\n const r = await sqlite.execute(\n `SELECT val_id, name, privacy, kind, created_at FROM agent_managed_vals ORDER BY created_at DESC`,\n );\n return { vals: r.rows };\n },\n\n async list_all_vals(_args: {}, _ctx: ToolCtx) {\n const all = await vtListMyVals(200);\n return {\n vals: all.map((v: any) => ({ id: v.id, name: v.name, privacy: v.privacy })),\n note: UNRESTRICTED ? \"unrestricted mode\" : \"restricted; use adopt_val to manage one\",\n };\n },\n\n async adopt_val(args: { val_id: string; kind?: string }, _ctx: ToolCtx) {\n const v: any = await vtGetVal(args.val_id);\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO agent_managed_vals (val_id, name, privacy, kind, created_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [v.id, v.name ?? \"(unknown)\", v.privacy ?? \"private\", args.kind ?? \"val\", now()],\n });\n return { adopted: v.id, name: v.name };\n },\n\n async read_val(\n args: { val_id: string; path?: string },\n _ctx: ToolCtx,\n ) {\n await assertManagedVal(args.val_id);\n const path = args.path ?? \"main.ts\";\n const content = await vtGetFile(args.val_id, path);\n return { val_id: args.val_id, path, content };\n },\n\n async create_val(\n args: { name: string; path?: string; content: string; type?: string },\n ctx: ToolCtx,\n ) {\n const name = UNRESTRICTED\n ? args.name\n : (args.name.startsWith(AGENT_PREFIX) ? args.name : AGENT_PREFIX + args.name);\n assertManagedName(name);\n\n if (ctx.dryRun) {\n return {\n dry_run: true,\n would_create: { name, path: args.path ?? \"main.ts\", bytes: args.content.length },\n };\n }\n\n const val = await vtCreateVal(name);\n const path = args.path ?? \"main.ts\";\n const type = (args.type as any) ?? \"file\";\n await vtCreateFile(val.id, path, args.content, type);\n\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO agent_managed_vals (val_id, name, privacy, kind, created_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [val.id, name, val.privacy ?? \"public\", \"val\", now()],\n });\n return { val_id: val.id, name, path };\n },\n\n async edit_val_file(\n args: { val_id: string; path: string; content: string },\n ctx: ToolCtx,\n ) {\n await assertManagedVal(args.val_id);\n if (args.val_id === MAIN_VAL_ID) {\n throw new Error(\"Refused: use edit_main for the agent's own main file.\");\n }\n if (ctx.dryRun) {\n let before = \"\";\n try { before = await vtGetFile(args.val_id, args.path); } catch { /* new file */ }\n return {\n dry_run: true,\n path: args.path,\n before_bytes: before.length,\n after_bytes: args.content.length,\n diff_preview: diffPreview(before, args.content),\n };\n }\n await vtUpdateFile(args.val_id, args.path, args.content);\n return { val_id: args.val_id, path: args.path, bytes: args.content.length };\n },\n\n /**\n * edit_main: SELF-EDIT path.\n * 1. Snapshot current main file to Blob, register in agent_snapshots.\n * 2. Apply new content.\n * 3. Health-check ourselves; on failure, rollback.\n *\n * This tool is APPROVAL_REQUIRED — direct calls never land here; the\n * approvals system invokes it after a human accepts.\n */\n async edit_main(\n args: { content: string; reason?: string },\n _ctx: ToolCtx,\n ) {\n if (!MAIN_VAL_ID) throw new Error(\"AGENT_MAIN_VAL_ID not configured.\");\n const before = await vtGetFile(MAIN_VAL_ID, MAIN_FILE_PATH);\n const blobKey = `agent_snapshot/main/${now()}.ts`;\n await blob.set(blobKey, before);\n await sqlite.execute({\n sql: `INSERT INTO agent_snapshots (val_id, file_path, blob_key, reason, created_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [MAIN_VAL_ID, MAIN_FILE_PATH, blobKey, args.reason ?? \"\", now()],\n });\n\n await vtUpdateFile(MAIN_VAL_ID, MAIN_FILE_PATH, args.content);\n\n // Give Val Town a moment to redeploy, then probe.\n await new Promise((r) => setTimeout(r, 1500));\n const healthy = await selfHealthCheck();\n if (!healthy.ok) {\n await rollbackMain(blobKey);\n return { applied: false, rolled_back: true, snapshot: blobKey, health: healthy };\n }\n return { applied: true, snapshot: blobKey, health: healthy };\n },\n\n async create_cron(\n args: { name: string; schedule: string; code: string },\n ctx: ToolCtx,\n ) {\n const name = UNRESTRICTED\n ? args.name\n : (args.name.startsWith(AGENT_PREFIX) ? args.name : AGENT_PREFIX + args.name);\n assertManagedName(name);\n\n if (ctx.dryRun) {\n return { dry_run: true, would_create_cron: { name, schedule: args.schedule } };\n }\n\n const val = await vtCreateVal(name);\n await vtCreateFile(val.id, \"main.ts\", args.code, \"interval\");\n\n // NOTE: setting the schedule itself may require a follow-up call to the\n // val's trigger config. Some SDK versions accept `cron: { schedule }` on\n // file create; others require PATCH /v1/vals/{id}/triggers. We persist\n // the desired schedule and surface the val URL so the user can verify.\n // TODO(advanced): hit the triggers endpoint directly here.\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO agent_managed_vals (val_id, name, privacy, kind, created_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [val.id, name, val.privacy ?? \"public\", \"cron\", now()],\n });\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO agent_crons (val_id, name, schedule, created_at)\n VALUES (?, ?, ?, ?)`,\n args: [val.id, name, args.schedule, now()],\n });\n\n return {\n val_id: val.id,\n name,\n schedule_requested: args.schedule,\n note: \"Confirm the schedule in the val's Trigger settings; UTC.\",\n };\n },\n\n async delete_val(args: { val_id: string }, ctx: ToolCtx) {\n await assertManagedVal(args.val_id);\n if (args.val_id === MAIN_VAL_ID) throw new Error(\"Refused: cannot delete main val.\");\n if (ctx.dryRun) return { dry_run: true, would_delete: args.val_id };\n\n await vtDeleteVal(args.val_id);\n await sqlite.execute({\n sql: `DELETE FROM agent_managed_vals WHERE val_id = ?`,\n args: [args.val_id],\n });\n await sqlite.execute({\n sql: `DELETE FROM agent_crons WHERE val_id = ?`,\n args: [args.val_id],\n });\n return { deleted: args.val_id };\n },\n\n async view_logs(args: { val_id?: string; limit?: number }, _ctx: ToolCtx) {\n // Val Town telemetry/logs availability varies; we expose our own action log\n // and best-effort fetch traces if accessible.\n const lim = Math.min(args.limit ?? 50, 200);\n const r = await sqlite.execute({\n sql: `SELECT id, tool, args, result, status, dry_run, created_at\n FROM agent_tool_log ORDER BY id DESC LIMIT ?`,\n args: [lim],\n });\n return { logs: r.rows };\n },\n\n async memory_set(args: { key: string; value: string }, _ctx: ToolCtx) {\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO agent_memory (k, v, updated_at) VALUES (?, ?, ?)`,\n args: [args.key, args.value, now()],\n });\n return { ok: true, key: args.key };\n },\n\n async memory_get(args: { key: string }, _ctx: ToolCtx) {\n const r = await sqlite.execute({\n sql: `SELECT v FROM agent_memory WHERE k = ?`,\n args: [args.key],\n });\n return { key: args.key, value: r.rows[0]?.v ?? null };\n },\n\n async memory_list(_args: {}, _ctx: ToolCtx) {\n const r = await sqlite.execute(\n `SELECT k, length(v) AS bytes, updated_at FROM agent_memory ORDER BY updated_at DESC`,\n );\n return { entries: r.rows };\n },\n\n async health_check(_args: {}, _ctx: ToolCtx) {\n return await selfHealthCheck();\n },\n};\n\nfunction diffPreview(before: string, after: string): string {\n if (before === after) return \"(no change)\";\n const bLines = before.split(\"\\n\");\n const aLines = after.split(\"\\n\");\n const max = Math.min(40, Math.max(bLines.length, aLines.length));\n const out: string[] = [];\n for (let i = 0; i < max; i++) {\n if (bLines[i] !== aLines[i]) {\n if (bLines[i] !== undefined) out.push(`- ${bLines[i]}`);\n if (aLines[i] !== undefined) out.push(`+ ${aLines[i]}`);\n }\n }\n return out.slice(0, 200).join(\"\\n\") || \"(diff outside preview window)\";\n}\n\nasync function selfHealthCheck(): Promise<{ ok: boolean; status?: number; error?: string }> {\n try {\n if (!MAIN_VAL_ID) return { ok: false, error: \"no MAIN_VAL_ID\" };\n const val: any = await vtGetVal(MAIN_VAL_ID);\n const url = val?.links?.endpoint ?? val?.endpoint ?? val?.links?.html;\n if (!url) return { ok: true, status: 0, error: \"no endpoint to probe; metadata OK\" };\n const r = await fetch(url + \"/api/ping\", { method: \"GET\" });\n return { ok: r.ok, status: r.status };\n } catch (e) {\n return { ok: false, error: String(e) };\n }\n}\n\nasync function rollbackMain(blobKey?: string) {\n let key = blobKey;\n if (!key) {\n const r = await sqlite.execute({\n sql: `SELECT blob_key FROM agent_snapshots WHERE val_id = ? AND file_path = ?\n ORDER BY id DESC LIMIT 1`,\n args: [MAIN_VAL_ID, MAIN_FILE_PATH],\n });\n if (!r.rows.length) throw new Error(\"No snapshot to rollback to.\");\n key = r.rows[0].blob_key as string;\n }\n const res = await blob.get(key!);\n const content = typeof res === \"string\" ? res : await res.text();\n await vtUpdateFile(MAIN_VAL_ID, MAIN_FILE_PATH, content);\n return { restored_from: key };\n}\n\n// ====================================================================\n// 6. TOOL REGISTRY (JSON schemas — the LLM only sees these)\n// ====================================================================\n\nconst tools = [\n {\n type: \"function\" as const,\n function: {\n name: \"list_managed_vals\",\n description: \"List vals the agent has created or adopted.\",\n parameters: { type: \"object\", properties: {}, additionalProperties: false },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"list_all_vals\",\n description: \"List ALL vals in the user's account (not just managed ones). Use this to discover val IDs to adopt or operate on in unrestricted mode.\",\n parameters: { type: \"object\", properties: {}, additionalProperties: false },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"adopt_val\",\n description: \"Add an existing val (by id) to the managed registry so the agent can operate on it under the restricted policy.\",\n parameters: {\n type: \"object\",\n properties: {\n val_id: { type: \"string\" },\n kind: { type: \"string\", enum: [\"val\", \"cron\"] },\n },\n required: [\"val_id\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"read_val\",\n description: \"Read a file from a managed val.\",\n parameters: {\n type: \"object\",\n properties: {\n val_id: { type: \"string\" },\n path: { type: \"string\", description: \"default main.ts\" },\n },\n required: [\"val_id\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"create_val\",\n description: `Create a new private val. Name will be prefixed with \"${AGENT_PREFIX}\" if not already.`,\n parameters: {\n type: \"object\",\n properties: {\n name: { type: \"string\" },\n path: { type: \"string\" },\n content: { type: \"string\" },\n type: { type: \"string\", enum: [\"http\", \"script\", \"cron\", \"email\", \"file\"] },\n },\n required: [\"name\", \"content\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"edit_val_file\",\n description: \"Update a file inside a managed val (not main).\",\n parameters: {\n type: \"object\",\n properties: {\n val_id: { type: \"string\" },\n path: { type: \"string\" },\n content: { type: \"string\" },\n },\n required: [\"val_id\", \"path\", \"content\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"edit_main\",\n description: \"DANGEROUS. Replace the agent's own main file. Requires human approval. Will snapshot + health-check + rollback on failure.\",\n parameters: {\n type: \"object\",\n properties: {\n content: { type: \"string\" },\n reason: { type: \"string\" },\n },\n required: [\"content\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"create_cron\",\n description: \"DANGEROUS. Create a new agent_* cron val. UTC. Requires approval.\",\n parameters: {\n type: \"object\",\n properties: {\n name: { type: \"string\" },\n schedule: { type: \"string\", description: \"cron expression, UTC\" },\n code: { type: \"string\" },\n },\n required: [\"name\", \"schedule\", \"code\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"delete_val\",\n description: \"DANGEROUS. Delete a managed val. Requires approval.\",\n parameters: {\n type: \"object\",\n properties: { val_id: { type: \"string\" } },\n required: [\"val_id\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"view_logs\",\n description: \"Show recent agent tool-call audit log.\",\n parameters: {\n type: \"object\",\n properties: { limit: { type: \"integer\", minimum: 1, maximum: 200 } },\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"memory_set\",\n description: \"Store a key/value in agent memory.\",\n parameters: {\n type: \"object\",\n properties: { key: { type: \"string\" }, value: { type: \"string\" } },\n required: [\"key\", \"value\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"memory_get\",\n description: \"Retrieve a value from agent memory.\",\n parameters: {\n type: \"object\",\n properties: { key: { type: \"string\" } },\n required: [\"key\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"memory_list\",\n description: \"List memory keys.\",\n parameters: { type: \"object\", properties: {}, additionalProperties: false },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"health_check\",\n description: \"Probe the agent's own HTTP endpoint.\",\n parameters: { type: \"object\", properties: {}, additionalProperties: false },\n },\n },\n];\n\n// ====================================================================\n// 7. AGENT LOOP\n// ====================================================================\n\nasync function runTool(\n name: string,\n args: any,\n ctx: ToolCtx,\n): Promise<{ result: any; status: string }> {\n const fn = (impls as any)[name];\n if (!fn) return { result: { error: `unknown tool ${name}` }, status: \"error\" };\n try {\n const result = await fn(args ?? {}, ctx);\n return { result, status: \"ok\" };\n } catch (e) {\n return { result: { error: String(e) }, status: \"error\" };\n }\n}\n\nasync function handleToolCall(\n sessionId: string,\n toolName: string,\n rawArgs: string,\n dryRunDefault: boolean,\n): Promise<{ content: string }> {\n let args: any = {};\n try { args = rawArgs ? JSON.parse(rawArgs) : {}; }\n catch { args = {}; }\n\n const dryRun = !!(args && args.__dry_run) || dryRunDefault;\n delete args.__dry_run;\n\n // Approval gating: register pending, return placeholder.\n if (APPROVAL_REQUIRED.has(toolName) && !dryRun && !AUTO_APPROVE) {\n const id = await createApproval(sessionId, toolName, args);\n await logAction({\n session_id: sessionId,\n tool: toolName,\n args,\n result: { pending_approval_id: id },\n status: \"pending_approval\",\n });\n return {\n content: JSON.stringify({\n pending_approval: true,\n approval_id: id,\n message: `Tool \"${toolName}\" requires human approval. Approve in the Pending panel.`,\n }),\n };\n }\n\n const { result, status } = await runTool(toolName, args, { sessionId, dryRun });\n await logAction({\n session_id: sessionId,\n tool: toolName,\n args,\n result,\n status,\n dry_run: dryRun,\n });\n return { content: JSON.stringify(result).slice(0, 16000) };\n}\n\nasync function loadHistory(sessionId: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT role, content, tool_calls, tool_call_id, name FROM agent_chat\n WHERE session_id = ? ORDER BY id ASC`,\n args: [sessionId],\n });\n return r.rows.map((row: any) => {\n const m: any = { role: row.role };\n if (row.content) m.content = row.content;\n if (row.tool_calls) m.tool_calls = JSON.parse(row.tool_calls);\n if (row.tool_call_id) m.tool_call_id = row.tool_call_id;\n if (row.name) m.name = row.name;\n return m;\n });\n}\n\nasync function appendMessage(sessionId: string, msg: any) {\n await sqlite.execute({\n sql: `INSERT INTO agent_chat (session_id, role, content, tool_calls, tool_call_id, name, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [\n sessionId,\n msg.role,\n msg.content ?? null,\n msg.tool_calls ? JSON.stringify(msg.tool_calls) : null,\n msg.tool_call_id ?? null,\n msg.name ?? null,\n now(),\n ],\n });\n}\n\nasync function agentTurn(\n sessionId: string,\n userText: string,\n opts: { dryRun?: boolean } = {},\n): Promise<{ reply: string; iterations: number }> {\n await ensureDb();\n await appendMessage(sessionId, { role: \"user\", content: userText });\n\n let iterations = 0;\n while (iterations < MAX_ITERATIONS) {\n iterations++;\n const history = await loadHistory(sessionId);\n const messages = [{ role: \"system\", content: SYSTEM_PROMPT }, ...history];\n\n const resp = await openai.chat.completions.create({\n model: OPENAI_MODEL,\n messages: messages as any,\n tools: tools as any,\n tool_choice: \"auto\",\n });\n\n const choice = resp.choices[0];\n const msg = choice.message as any;\n\n await appendMessage(sessionId, {\n role: \"assistant\",\n content: msg.content ?? null,\n tool_calls: msg.tool_calls,\n });\n\n if (!msg.tool_calls || msg.tool_calls.length === 0) {\n return { reply: msg.content ?? \"(no content)\", iterations };\n }\n\n for (const tc of msg.tool_calls) {\n const fnName = tc.function.name;\n const out = await handleToolCall(\n sessionId,\n fnName,\n tc.function.arguments,\n !!opts.dryRun,\n );\n await appendMessage(sessionId, {\n role: \"tool\",\n content: out.content,\n tool_call_id: tc.id,\n name: fnName,\n });\n }\n }\n return { reply: \"(max iterations reached)\", iterations };\n}\n\n// ====================================================================\n// 8. HTTP ROUTES\n// ====================================================================\n\nfunction ok(json: unknown, init: ResponseInit = {}) {\n return new Response(JSON.stringify(json), {\n ...init,\n headers: { \"content-type\": \"application/json\", ...(init.headers ?? {}) },\n });\n}\nfunction bad(status: number, msg: string) { return ok({ error: msg }, { status }); }\n\nfunction authed(req: Request): boolean {\n if (!UI_TOKEN) return true;\n const url = new URL(req.url);\n const t = url.searchParams.get(\"token\")\n ?? req.headers.get(\"x-agent-token\")\n ?? \"\";\n return t === UI_TOKEN;\n}\n\nasync function executeApproved(id: number): Promise {\n const r = await sqlite.execute({\n sql: `SELECT id, session_id, tool, args, status FROM agent_approvals WHERE id = ?`,\n args: [id],\n });\n if (!r.rows.length) throw new Error(\"approval not found\");\n const row: any = r.rows[0];\n if (row.status !== \"approved\") throw new Error(`approval is ${row.status}`);\n\n const args = JSON.parse(row.args);\n const { result, status } = await runTool(row.tool, args, {\n sessionId: row.session_id,\n dryRun: false,\n });\n await sqlite.execute({\n sql: `UPDATE agent_approvals SET status = ?, result = ?, decided_at = ? WHERE id = ?`,\n args: [status === \"ok\" ? \"executed\" : \"failed\", JSON.stringify(result), now(), id],\n });\n await logAction({\n session_id: row.session_id,\n tool: row.tool,\n args,\n result,\n status: `post_approval:${status}`,\n });\n return result;\n}\n\nasync function handleApi(req: Request, url: URL): Promise {\n const path = url.pathname;\n\n if (path === \"/api/ping\") return ok({ ok: true, ts: now() });\n\n if (!authed(req)) return bad(401, \"unauthorized\");\n await ensureDb();\n\n if (path === \"/api/chat\" && req.method === \"POST\") {\n const body = await req.json();\n const sessionId = body.session_id ?? \"default\";\n const text = String(body.message ?? \"\").slice(0, 8000);\n const dryRun = !!body.dry_run;\n if (!text) return bad(400, \"missing message\");\n const out = await agentTurn(sessionId, text, { dryRun });\n return ok(out);\n }\n\n if (path === \"/api/state\") {\n const session = url.searchParams.get(\"session_id\") ?? \"default\";\n const [chat, logs, vals, pending, snaps, crons] = await Promise.all([\n sqlite.execute({\n sql: `SELECT id, role, content, tool_calls, tool_call_id, name, created_at\n FROM agent_chat WHERE session_id = ? ORDER BY id ASC LIMIT 200`,\n args: [session],\n }),\n sqlite.execute(\n `SELECT id, tool, args, status, dry_run, created_at FROM agent_tool_log\n ORDER BY id DESC LIMIT 100`,\n ),\n sqlite.execute(\n `SELECT val_id, name, privacy, kind, created_at FROM agent_managed_vals\n ORDER BY created_at DESC`,\n ),\n sqlite.execute(\n `SELECT id, tool, args, status, created_at FROM agent_approvals\n WHERE status = 'pending' ORDER BY id DESC`,\n ),\n sqlite.execute(\n `SELECT id, file_path, blob_key, reason, created_at FROM agent_snapshots\n ORDER BY id DESC LIMIT 20`,\n ),\n sqlite.execute(`SELECT val_id, name, schedule, created_at FROM agent_crons`),\n ]);\n return ok({\n chat: chat.rows,\n logs: logs.rows,\n vals: vals.rows,\n pending: pending.rows,\n snapshots: snaps.rows,\n crons: crons.rows,\n config: { agent_prefix: AGENT_PREFIX, model: OPENAI_MODEL, main_val_id: MAIN_VAL_ID },\n });\n }\n\n if (path.startsWith(\"/api/approve/\") && req.method === \"POST\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json().catch(() => ({}));\n const decision = body.decision === \"approve\" ? \"approved\" : \"rejected\";\n await sqlite.execute({\n sql: `UPDATE agent_approvals SET status = ?, decided_at = ? WHERE id = ? AND status = 'pending'`,\n args: [decision, now(), id],\n });\n if (decision === \"approved\") {\n try { const r = await executeApproved(id); return ok({ executed: true, result: r }); }\n catch (e) { return ok({ executed: false, error: String(e) }, { status: 500 }); }\n }\n return ok({ rejected: true });\n }\n\n if (path === \"/api/health\" && req.method === \"POST\") {\n return ok(await selfHealthCheck());\n }\n\n if (path === \"/api/rollback\" && req.method === \"POST\") {\n try { return ok(await rollbackMain()); }\n catch (e) { return bad(500, String(e)); }\n }\n\n if (path === \"/api/reset\" && req.method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n const session = body.session_id ?? \"default\";\n await sqlite.execute({ sql: `DELETE FROM agent_chat WHERE session_id = ?`, args: [session] });\n return ok({ reset: true });\n }\n\n return bad(404, \"not found\");\n}\n\n// ====================================================================\n// 9. WEB UI\n// ====================================================================\n\nconst UI_HTML = String.raw`\nVal Town Agent\n\n

Val Town Agent

\n \n \n \n \n \n

Managed vals

Snapshots

Crons

\n \n

\n dry-run\n \n

Pending approvals

Action log

\n`;\n\n// ====================================================================\n// 10. DEFAULT EXPORT\n// ====================================================================\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.pathname.startsWith(\"/api/\")) {\n try { return await handleApi(req, url); }\n catch (e) { return new Response(JSON.stringify({ error: String(e) }), { status: 500 }); }\n }\n\n // Root UI — gated by token if configured\n if (UI_TOKEN && url.searchParams.get(\"token\") !== UI_TOKEN) {\n return new Response(\"Forbidden. Append ?token=YOUR_TOKEN\", { status: 403 });\n }\n\n return new Response(UI_HTML, { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n}\n","/**\n * Val Town AI Agent Service — main.ts\n * --------------------------------------------------------------------\n * Self-contained HTTP val that chats with you, manages a sandboxed set\n * of \"agent_*\" child vals/files, persists state in SQLite + Blob, and\n * can rewrite itself with snapshot/rollback safety.\n *\n * Sections:\n * 1. Config & globals\n * 2. Persistence (SQLite schema + Blob helpers)\n * 3. Policy (allowlist, approval gating, audit log)\n * 4. Val Town SDK wrappers\n * 5. Tool implementations\n * 6. Tool registry (JSON schemas — the LLM ONLY sees these)\n * 7. Agent loop (LLM -> tool -> LLM)\n * 8. HTTP routes (/api/*)\n * 9. Web UI\n * 10. Default export\n *\n * Setup env vars (Val Town -> val settings -> Environment Variables):\n * VAL_TOWN_API_KEY required, val:read + val:write\n * AGENT_MAIN_VAL_ID required, the id of THIS val (for self-edit)\n * AGENT_MAIN_FILE optional, default \"main.tsx\" (rename if needed)\n * AGENT_PREFIX optional, default \"agent_\"\n * AGENT_UI_TOKEN optional but recommended, gates the UI\n * OPENAI_API_KEY optional; if unset, std/openai (Val Town creds) is used\n * OPENAI_MODEL optional, default \"gpt-4o-mini\"\n */\n\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/global.ts\";\nimport { blob } from \"https://esm.town/v/std/blob\";\n\n// ====================================================================\n// 1. CONFIG & GLOBALS\n// ====================================================================\n\nconst AGENT_PREFIX = Deno.env.get(\"AGENT_PREFIX\") ?? \"agent_\";\nconst MAIN_VAL_ID = Deno.env.get(\"AGENT_MAIN_VAL_ID\") ?? \"\";\nconst MAIN_FILE_PATH = Deno.env.get(\"AGENT_MAIN_FILE\") ?? \"main.ts\";\nconst UI_TOKEN = Deno.env.get(\"AGENT_UI_TOKEN\") ?? \"\";\nconst OPENAI_MODEL = Deno.env.get(\"OPENAI_MODEL\") ?? \"gpt-4o-mini\";\nconst MAX_ITERATIONS = 8;\nconst UNRESTRICTED = Deno.env.get(\"AGENT_UNRESTRICTED\") === \"1\";\nconst AUTO_APPROVE = Deno.env.get(\"AGENT_AUTO_APPROVE\") === \"1\";\n\n/** Tools that NEVER run directly — they create a pending approval row. */\nconst APPROVAL_REQUIRED = new Set([\n \"edit_main\",\n \"delete_val\",\n \"create_cron\",\n]);\n\nconst _oaiKey = Deno.env.get(\"OPENAI_API_KEY\");\n// std/openai uses Val Town's hosted credits when no apiKey is passed.\nconst openai = _oaiKey ? new OpenAI({ apiKey: _oaiKey }) : new OpenAI();\n\nconst SYSTEM_PROMPT = `\nYou are an AI agent operating inside Val Town on the user's account.\nYou can only act through the provided tools — never invent code paths.\n\nMode: ${UNRESTRICTED ? \"UNRESTRICTED — you may touch any val the user owns.\" : `RESTRICTED — only your own main val and vals with prefix \"${AGENT_PREFIX}\", or vals explicitly adopted via adopt_val.`}\nApprovals: ${AUTO_APPROVE ? \"AUTO — destructive tools run immediately.\" : \"MANUAL — edit_main / delete_val / create_cron return pending_approval; tell the user and stop.\"}\n\nWhen the user asks about \"managed vals\", call list_managed_vals.\nWhen the user refers to an existing val by name you don't recognise, call\nlist_all_vals first to find its id. In unrestricted mode you can edit it\ndirectly with edit_val_file; otherwise call adopt_val first.\n\nBefore editing main.ts, (a) read it first, (b) describe the change,\n(c) suggest dry_run=true so the user can review the diff.\n\nBe concise. One tool call per turn unless clearly parallelizable.\n`.trim();\n\n// ====================================================================\n// 2. PERSISTENCE\n// ====================================================================\n\nlet _dbReady: Promise | null = null;\nasync function ensureDb(): Promise {\n if (_dbReady) return _dbReady;\n _dbReady = (async () => {\n const stmts = [\n `CREATE TABLE IF NOT EXISTS agent_chat (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n session_id TEXT NOT NULL,\n role TEXT NOT NULL,\n content TEXT,\n tool_calls TEXT,\n tool_call_id TEXT,\n name TEXT,\n created_at INTEGER NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_chat_session ON agent_chat(session_id, id)`,\n\n `CREATE TABLE IF NOT EXISTS agent_tool_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n session_id TEXT,\n tool TEXT NOT NULL,\n args TEXT,\n result TEXT,\n status TEXT,\n dry_run INTEGER DEFAULT 0,\n created_at INTEGER NOT NULL\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_managed_vals (\n val_id TEXT PRIMARY KEY,\n name TEXT,\n privacy TEXT,\n kind TEXT, -- \"val\" | \"cron\"\n created_at INTEGER\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_snapshots (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n val_id TEXT NOT NULL,\n file_path TEXT NOT NULL,\n blob_key TEXT NOT NULL,\n reason TEXT,\n created_at INTEGER NOT NULL\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_approvals (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n session_id TEXT,\n tool TEXT NOT NULL,\n args TEXT NOT NULL,\n status TEXT NOT NULL, -- pending | approved | rejected | executed | failed\n result TEXT,\n created_at INTEGER NOT NULL,\n decided_at INTEGER\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_memory (\n k TEXT PRIMARY KEY,\n v TEXT,\n updated_at INTEGER NOT NULL\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_crons (\n val_id TEXT PRIMARY KEY,\n name TEXT,\n schedule TEXT,\n created_at INTEGER NOT NULL\n )`,\n ];\n for (const s of stmts) await sqlite.execute(s);\n })();\n return _dbReady;\n}\n\nconst now = () => Date.now();\n\nasync function logAction(row: {\n session_id?: string;\n tool: string;\n args: unknown;\n result: unknown;\n status: string;\n dry_run?: boolean;\n}) {\n await sqlite.execute({\n sql: `INSERT INTO agent_tool_log (session_id, tool, args, result, status, dry_run, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [\n row.session_id ?? null,\n row.tool,\n JSON.stringify(row.args),\n JSON.stringify(row.result).slice(0, 8000),\n row.status,\n row.dry_run ? 1 : 0,\n now(),\n ],\n });\n}\n\n// ====================================================================\n// 3. POLICY\n// ====================================================================\n\nasync function isManagedVal(valId: string): Promise {\n if (valId === MAIN_VAL_ID) return true;\n const r = await sqlite.execute({\n sql: `SELECT 1 FROM agent_managed_vals WHERE val_id = ? LIMIT 1`,\n args: [valId],\n });\n return r.rows.length > 0;\n}\n\nfunction assertManagedName(name: string) {\n if (UNRESTRICTED) return;\n if (!name.startsWith(AGENT_PREFIX)) {\n throw new Error(\n `Refused: val name \"${name}\" does not start with required prefix \"${AGENT_PREFIX}\".`,\n );\n }\n}\n\nasync function assertManagedVal(valId: string) {\n if (UNRESTRICTED) return;\n if (!(await isManagedVal(valId))) {\n throw new Error(\n `Refused: val ${valId} is not in the agent's managed set.`,\n );\n }\n}\n\nasync function createApproval(\n sessionId: string,\n tool: string,\n args: unknown,\n): Promise {\n const r = await sqlite.execute({\n sql: `INSERT INTO agent_approvals (session_id, tool, args, status, created_at)\n VALUES (?, ?, ?, 'pending', ?) RETURNING id`,\n args: [sessionId, tool, JSON.stringify(args), now()],\n });\n return Number((r.rows[0] as any).id);\n}\n\n// ====================================================================\n// 4. REST API WRAPPERS (direct fetch — most reliable across SDK versions)\n// ====================================================================\n\nconst VT_TOKEN = Deno.env.get(\"VAL_TOWN_API_KEY\") ?? \"\";\nconst VT_BASE = \"https://api.val.town\";\n\nasync function vtFetch(path: string, init: RequestInit = {}): Promise {\n const r = await fetch(VT_BASE + path, {\n ...init,\n headers: {\n \"authorization\": `Bearer ${VT_TOKEN}`,\n \"content-type\": \"application/json\",\n ...(init.headers ?? {}),\n },\n });\n if (!r.ok) {\n const text = await r.text();\n throw new Error(`Val Town API ${r.status} ${r.statusText}: ${text.slice(0, 500)}`);\n }\n if (r.status === 204) return null;\n const ct = r.headers.get(\"content-type\") ?? \"\";\n return ct.includes(\"application/json\") ? await r.json() : await r.text();\n}\n\nasync function vtListMyVals(maxItems = 200): Promise {\n const out: any[] = [];\n const pageSize = 100; // server hard cap\n let offset = 0;\n while (out.length < maxItems) {\n const page: any = await vtFetch(`/v1/me/vals?limit=${pageSize}&offset=${offset}`);\n const items: any[] = page?.data ?? (Array.isArray(page) ? page : []);\n if (!items.length) break;\n out.push(...items);\n if (items.length < pageSize) break;\n offset += pageSize;\n }\n return out.slice(0, maxItems);\n}\n\nasync function vtGetVal(valId: string): Promise {\n return await vtFetch(`/v1/vals/${valId}`);\n}\n\nasync function vtGetFile(valId: string, path: string): Promise {\n const u = `${VT_BASE}/v1/vals/${valId}/files/content?path=${encodeURIComponent(path)}`;\n const r = await fetch(u, { headers: { \"authorization\": `Bearer ${VT_TOKEN}` } });\n if (!r.ok) {\n const text = await r.text();\n throw new Error(`Val Town file read ${r.status}: ${text.slice(0, 500)}`);\n }\n return await r.text();\n}\n\nasync function vtCreateVal(name: string, privacy?: \"private\" | \"unlisted\" | \"public\"): Promise {\n const body: any = { name, description: \"Agent-managed val\" };\n if (privacy) body.privacy = privacy;\n return await vtFetch(\"/v1/vals\", { method: \"POST\", body: JSON.stringify(body) });\n}\n\nasync function vtCreateFile(\n valId: string,\n path: string,\n content: string,\n type: \"http\" | \"script\" | \"interval\" | \"email\" | \"file\" = \"file\",\n) {\n return await vtFetch(`/v1/vals/${valId}/files?path=${encodeURIComponent(path)}`, {\n method: \"POST\",\n body: JSON.stringify({ content, type }),\n });\n}\n\nasync function vtUpdateFile(valId: string, path: string, content: string) {\n return await vtFetch(`/v1/vals/${valId}/files?path=${encodeURIComponent(path)}`, {\n method: \"PUT\",\n body: JSON.stringify({ content }),\n });\n}\n\nasync function vtDeleteVal(valId: string) {\n return await vtFetch(`/v1/vals/${valId}`, { method: \"DELETE\" });\n}\n\n// ====================================================================\n// 5. TOOL IMPLEMENTATIONS\n// ====================================================================\n\ntype ToolCtx = { sessionId: string; dryRun: boolean };\n\nconst impls = {\n async list_managed_vals(_args: {}, _ctx: ToolCtx) {\n const r = await sqlite.execute(\n `SELECT val_id, name, privacy, kind, created_at FROM agent_managed_vals ORDER BY created_at DESC`,\n );\n return { vals: r.rows };\n },\n\n async list_all_vals(_args: {}, _ctx: ToolCtx) {\n const all = await vtListMyVals(200);\n return {\n vals: all.map((v: any) => ({ id: v.id, name: v.name, privacy: v.privacy })),\n note: UNRESTRICTED ? \"unrestricted mode\" : \"restricted; use adopt_val to manage one\",\n };\n },\n\n async adopt_val(args: { val_id: string; kind?: string }, _ctx: ToolCtx) {\n const v: any = await vtGetVal(args.val_id);\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO agent_managed_vals (val_id, name, privacy, kind, created_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [v.id, v.name ?? \"(unknown)\", v.privacy ?? \"private\", args.kind ?? \"val\", now()],\n });\n return { adopted: v.id, name: v.name };\n },\n\n async read_val(\n args: { val_id: string; path?: string },\n _ctx: ToolCtx,\n ) {\n await assertManagedVal(args.val_id);\n const path = args.path ?? \"main.ts\";\n const content = await vtGetFile(args.val_id, path);\n return { val_id: args.val_id, path, content };\n },\n\n async create_val(\n args: { name: string; path?: string; content: string; type?: string },\n ctx: ToolCtx,\n ) {\n const name = UNRESTRICTED\n ? args.name\n : (args.name.startsWith(AGENT_PREFIX) ? args.name : AGENT_PREFIX + args.name);\n assertManagedName(name);\n\n if (ctx.dryRun) {\n return {\n dry_run: true,\n would_create: { name, path: args.path ?? \"main.ts\", bytes: args.content.length },\n };\n }\n\n const val = await vtCreateVal(name);\n const path = args.path ?? \"main.ts\";\n const type = (args.type as any) ?? \"file\";\n await vtCreateFile(val.id, path, args.content, type);\n\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO agent_managed_vals (val_id, name, privacy, kind, created_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [val.id, name, val.privacy ?? \"public\", \"val\", now()],\n });\n return { val_id: val.id, name, path };\n },\n\n async edit_val_file(\n args: { val_id: string; path: string; content: string },\n ctx: ToolCtx,\n ) {\n await assertManagedVal(args.val_id);\n if (args.val_id === MAIN_VAL_ID) {\n throw new Error(\"Refused: use edit_main for the agent's own main file.\");\n }\n if (ctx.dryRun) {\n let before = \"\";\n try { before = await vtGetFile(args.val_id, args.path); } catch { /* new file */ }\n return {\n dry_run: true,\n path: args.path,\n before_bytes: before.length,\n after_bytes: args.content.length,\n diff_preview: diffPreview(before, args.content),\n };\n }\n await vtUpdateFile(args.val_id, args.path, args.content);\n return { val_id: args.val_id, path: args.path, bytes: args.content.length };\n },\n\n /**\n * edit_main: SELF-EDIT path.\n * 1. Snapshot current main file to Blob, register in agent_snapshots.\n * 2. Apply new content.\n * 3. Health-check ourselves; on failure, rollback.\n *\n * This tool is APPROVAL_REQUIRED — direct calls never land here; the\n * approvals system invokes it after a human accepts.\n */\n async edit_main(\n args: { content: string; reason?: string },\n _ctx: ToolCtx,\n ) {\n if (!MAIN_VAL_ID) throw new Error(\"AGENT_MAIN_VAL_ID not configured.\");\n const before = await vtGetFile(MAIN_VAL_ID, MAIN_FILE_PATH);\n const blobKey = `agent_snapshot/main/${now()}.ts`;\n await blob.set(blobKey, before);\n await sqlite.execute({\n sql: `INSERT INTO agent_snapshots (val_id, file_path, blob_key, reason, created_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [MAIN_VAL_ID, MAIN_FILE_PATH, blobKey, args.reason ?? \"\", now()],\n });\n\n await vtUpdateFile(MAIN_VAL_ID, MAIN_FILE_PATH, args.content);\n\n // Give Val Town a moment to redeploy, then probe.\n await new Promise((r) => setTimeout(r, 1500));\n const healthy = await selfHealthCheck();\n if (!healthy.ok) {\n await rollbackMain(blobKey);\n return { applied: false, rolled_back: true, snapshot: blobKey, health: healthy };\n }\n return { applied: true, snapshot: blobKey, health: healthy };\n },\n\n async create_cron(\n args: { name: string; schedule: string; code: string },\n ctx: ToolCtx,\n ) {\n const name = UNRESTRICTED\n ? args.name\n : (args.name.startsWith(AGENT_PREFIX) ? args.name : AGENT_PREFIX + args.name);\n assertManagedName(name);\n\n if (ctx.dryRun) {\n return { dry_run: true, would_create_cron: { name, schedule: args.schedule } };\n }\n\n const val = await vtCreateVal(name);\n await vtCreateFile(val.id, \"main.ts\", args.code, \"interval\");\n\n // NOTE: setting the schedule itself may require a follow-up call to the\n // val's trigger config. Some SDK versions accept `cron: { schedule }` on\n // file create; others require PATCH /v1/vals/{id}/triggers. We persist\n // the desired schedule and surface the val URL so the user can verify.\n // TODO(advanced): hit the triggers endpoint directly here.\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO agent_managed_vals (val_id, name, privacy, kind, created_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [val.id, name, val.privacy ?? \"public\", \"cron\", now()],\n });\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO agent_crons (val_id, name, schedule, created_at)\n VALUES (?, ?, ?, ?)`,\n args: [val.id, name, args.schedule, now()],\n });\n\n return {\n val_id: val.id,\n name,\n schedule_requested: args.schedule,\n note: \"Confirm the schedule in the val's Trigger settings; UTC.\",\n };\n },\n\n async delete_val(args: { val_id: string }, ctx: ToolCtx) {\n await assertManagedVal(args.val_id);\n if (args.val_id === MAIN_VAL_ID) throw new Error(\"Refused: cannot delete main val.\");\n if (ctx.dryRun) return { dry_run: true, would_delete: args.val_id };\n\n await vtDeleteVal(args.val_id);\n await sqlite.execute({\n sql: `DELETE FROM agent_managed_vals WHERE val_id = ?`,\n args: [args.val_id],\n });\n await sqlite.execute({\n sql: `DELETE FROM agent_crons WHERE val_id = ?`,\n args: [args.val_id],\n });\n return { deleted: args.val_id };\n },\n\n async view_logs(args: { val_id?: string; limit?: number }, _ctx: ToolCtx) {\n // Val Town telemetry/logs availability varies; we expose our own action log\n // and best-effort fetch traces if accessible.\n const lim = Math.min(args.limit ?? 50, 200);\n const r = await sqlite.execute({\n sql: `SELECT id, tool, args, result, status, dry_run, created_at\n FROM agent_tool_log ORDER BY id DESC LIMIT ?`,\n args: [lim],\n });\n return { logs: r.rows };\n },\n\n async memory_set(args: { key: string; value: string }, _ctx: ToolCtx) {\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO agent_memory (k, v, updated_at) VALUES (?, ?, ?)`,\n args: [args.key, args.value, now()],\n });\n return { ok: true, key: args.key };\n },\n\n async memory_get(args: { key: string }, _ctx: ToolCtx) {\n const r = await sqlite.execute({\n sql: `SELECT v FROM agent_memory WHERE k = ?`,\n args: [args.key],\n });\n return { key: args.key, value: r.rows[0]?.v ?? null };\n },\n\n async memory_list(_args: {}, _ctx: ToolCtx) {\n const r = await sqlite.execute(\n `SELECT k, length(v) AS bytes, updated_at FROM agent_memory ORDER BY updated_at DESC`,\n );\n return { entries: r.rows };\n },\n\n async health_check(_args: {}, _ctx: ToolCtx) {\n return await selfHealthCheck();\n },\n};\n\nfunction diffPreview(before: string, after: string): string {\n if (before === after) return \"(no change)\";\n const bLines = before.split(\"\\n\");\n const aLines = after.split(\"\\n\");\n const max = Math.min(40, Math.max(bLines.length, aLines.length));\n const out: string[] = [];\n for (let i = 0; i < max; i++) {\n if (bLines[i] !== aLines[i]) {\n if (bLines[i] !== undefined) out.push(`- ${bLines[i]}`);\n if (aLines[i] !== undefined) out.push(`+ ${aLines[i]}`);\n }\n }\n return out.slice(0, 200).join(\"\\n\") || \"(diff outside preview window)\";\n}\n\nasync function selfHealthCheck(): Promise<{ ok: boolean; status?: number; error?: string }> {\n try {\n if (!MAIN_VAL_ID) return { ok: false, error: \"no MAIN_VAL_ID\" };\n const val: any = await vtGetVal(MAIN_VAL_ID);\n const url = val?.links?.endpoint ?? val?.endpoint ?? val?.links?.html;\n if (!url) return { ok: true, status: 0, error: \"no endpoint to probe; metadata OK\" };\n const r = await fetch(url + \"/api/ping\", { method: \"GET\" });\n return { ok: r.ok, status: r.status };\n } catch (e) {\n return { ok: false, error: String(e) };\n }\n}\n\nasync function rollbackMain(blobKey?: string) {\n let key = blobKey;\n if (!key) {\n const r = await sqlite.execute({\n sql: `SELECT blob_key FROM agent_snapshots WHERE val_id = ? AND file_path = ?\n ORDER BY id DESC LIMIT 1`,\n args: [MAIN_VAL_ID, MAIN_FILE_PATH],\n });\n if (!r.rows.length) throw new Error(\"No snapshot to rollback to.\");\n key = r.rows[0].blob_key as string;\n }\n const res = await blob.get(key!);\n const content = typeof res === \"string\" ? res : await res.text();\n await vtUpdateFile(MAIN_VAL_ID, MAIN_FILE_PATH, content);\n return { restored_from: key };\n}\n\n// ====================================================================\n// 6. TOOL REGISTRY (JSON schemas — the LLM only sees these)\n// ====================================================================\n\nconst tools = [\n {\n type: \"function\" as const,\n function: {\n name: \"list_managed_vals\",\n description: \"List vals the agent has created or adopted.\",\n parameters: { type: \"object\", properties: {}, additionalProperties: false },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"list_all_vals\",\n description: \"List ALL vals in the user's account (not just managed ones). Use this to discover val IDs to adopt or operate on in unrestricted mode.\",\n parameters: { type: \"object\", properties: {}, additionalProperties: false },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"adopt_val\",\n description: \"Add an existing val (by id) to the managed registry so the agent can operate on it under the restricted policy.\",\n parameters: {\n type: \"object\",\n properties: {\n val_id: { type: \"string\" },\n kind: { type: \"string\", enum: [\"val\", \"cron\"] },\n },\n required: [\"val_id\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"read_val\",\n description: \"Read a file from a managed val.\",\n parameters: {\n type: \"object\",\n properties: {\n val_id: { type: \"string\" },\n path: { type: \"string\", description: \"default main.ts\" },\n },\n required: [\"val_id\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"create_val\",\n description: `Create a new private val. Name will be prefixed with \"${AGENT_PREFIX}\" if not already.`,\n parameters: {\n type: \"object\",\n properties: {\n name: { type: \"string\" },\n path: { type: \"string\" },\n content: { type: \"string\" },\n type: { type: \"string\", enum: [\"http\", \"script\", \"cron\", \"email\", \"file\"] },\n },\n required: [\"name\", \"content\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"edit_val_file\",\n description: \"Update a file inside a managed val (not main).\",\n parameters: {\n type: \"object\",\n properties: {\n val_id: { type: \"string\" },\n path: { type: \"string\" },\n content: { type: \"string\" },\n },\n required: [\"val_id\", \"path\", \"content\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"edit_main\",\n description: \"DANGEROUS. Replace the agent's own main file. Requires human approval. Will snapshot + health-check + rollback on failure.\",\n parameters: {\n type: \"object\",\n properties: {\n content: { type: \"string\" },\n reason: { type: \"string\" },\n },\n required: [\"content\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"create_cron\",\n description: \"DANGEROUS. Create a new agent_* cron val. UTC. Requires approval.\",\n parameters: {\n type: \"object\",\n properties: {\n name: { type: \"string\" },\n schedule: { type: \"string\", description: \"cron expression, UTC\" },\n code: { type: \"string\" },\n },\n required: [\"name\", \"schedule\", \"code\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"delete_val\",\n description: \"DANGEROUS. Delete a managed val. Requires approval.\",\n parameters: {\n type: \"object\",\n properties: { val_id: { type: \"string\" } },\n required: [\"val_id\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"view_logs\",\n description: \"Show recent agent tool-call audit log.\",\n parameters: {\n type: \"object\",\n properties: { limit: { type: \"integer\", minimum: 1, maximum: 200 } },\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"memory_set\",\n description: \"Store a key/value in agent memory.\",\n parameters: {\n type: \"object\",\n properties: { key: { type: \"string\" }, value: { type: \"string\" } },\n required: [\"key\", \"value\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"memory_get\",\n description: \"Retrieve a value from agent memory.\",\n parameters: {\n type: \"object\",\n properties: { key: { type: \"string\" } },\n required: [\"key\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"memory_list\",\n description: \"List memory keys.\",\n parameters: { type: \"object\", properties: {}, additionalProperties: false },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"health_check\",\n description: \"Probe the agent's own HTTP endpoint.\",\n parameters: { type: \"object\", properties: {}, additionalProperties: false },\n },\n },\n];\n\n// ====================================================================\n// 7. AGENT LOOP\n// ====================================================================\n\nasync function runTool(\n name: string,\n args: any,\n ctx: ToolCtx,\n): Promise<{ result: any; status: string }> {\n const fn = (impls as any)[name];\n if (!fn) return { result: { error: `unknown tool ${name}` }, status: \"error\" };\n try {\n const result = await fn(args ?? {}, ctx);\n return { result, status: \"ok\" };\n } catch (e) {\n return { result: { error: String(e) }, status: \"error\" };\n }\n}\n\nasync function handleToolCall(\n sessionId: string,\n toolName: string,\n rawArgs: string,\n dryRunDefault: boolean,\n): Promise<{ content: string }> {\n let args: any = {};\n try { args = rawArgs ? JSON.parse(rawArgs) : {}; }\n catch { args = {}; }\n\n const dryRun = !!(args && args.__dry_run) || dryRunDefault;\n delete args.__dry_run;\n\n // Approval gating: register pending, return placeholder.\n if (APPROVAL_REQUIRED.has(toolName) && !dryRun && !AUTO_APPROVE) {\n const id = await createApproval(sessionId, toolName, args);\n await logAction({\n session_id: sessionId,\n tool: toolName,\n args,\n result: { pending_approval_id: id },\n status: \"pending_approval\",\n });\n return {\n content: JSON.stringify({\n pending_approval: true,\n approval_id: id,\n message: `Tool \"${toolName}\" requires human approval. Approve in the Pending panel.`,\n }),\n };\n }\n\n const { result, status } = await runTool(toolName, args, { sessionId, dryRun });\n await logAction({\n session_id: sessionId,\n tool: toolName,\n args,\n result,\n status,\n dry_run: dryRun,\n });\n return { content: JSON.stringify(result).slice(0, 16000) };\n}\n\nasync function loadHistory(sessionId: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT role, content, tool_calls, tool_call_id, name FROM agent_chat\n WHERE session_id = ? ORDER BY id ASC`,\n args: [sessionId],\n });\n return r.rows.map((row: any) => {\n const m: any = { role: row.role };\n if (row.content) m.content = row.content;\n if (row.tool_calls) m.tool_calls = JSON.parse(row.tool_calls);\n if (row.tool_call_id) m.tool_call_id = row.tool_call_id;\n if (row.name) m.name = row.name;\n return m;\n });\n}\n\nasync function appendMessage(sessionId: string, msg: any) {\n await sqlite.execute({\n sql: `INSERT INTO agent_chat (session_id, role, content, tool_calls, tool_call_id, name, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [\n sessionId,\n msg.role,\n msg.content ?? null,\n msg.tool_calls ? JSON.stringify(msg.tool_calls) : null,\n msg.tool_call_id ?? null,\n msg.name ?? null,\n now(),\n ],\n });\n}\n\nasync function agentTurn(\n sessionId: string,\n userText: string,\n opts: { dryRun?: boolean } = {},\n): Promise<{ reply: string; iterations: number }> {\n await ensureDb();\n await appendMessage(sessionId, { role: \"user\", content: userText });\n\n let iterations = 0;\n while (iterations < MAX_ITERATIONS) {\n iterations++;\n const history = await loadHistory(sessionId);\n const messages = [{ role: \"system\", content: SYSTEM_PROMPT }, ...history];\n\n const resp = await openai.chat.completions.create({\n model: OPENAI_MODEL,\n messages: messages as any,\n tools: tools as any,\n tool_choice: \"auto\",\n });\n\n const choice = resp.choices[0];\n const msg = choice.message as any;\n\n await appendMessage(sessionId, {\n role: \"assistant\",\n content: msg.content ?? null,\n tool_calls: msg.tool_calls,\n });\n\n if (!msg.tool_calls || msg.tool_calls.length === 0) {\n return { reply: msg.content ?? \"(no content)\", iterations };\n }\n\n for (const tc of msg.tool_calls) {\n const fnName = tc.function.name;\n const out = await handleToolCall(\n sessionId,\n fnName,\n tc.function.arguments,\n !!opts.dryRun,\n );\n await appendMessage(sessionId, {\n role: \"tool\",\n content: out.content,\n tool_call_id: tc.id,\n name: fnName,\n });\n }\n }\n return { reply: \"(max iterations reached)\", iterations };\n}\n\n// ====================================================================\n// 8. HTTP ROUTES\n// ====================================================================\n\nfunction ok(json: unknown, init: ResponseInit = {}) {\n return new Response(JSON.stringify(json), {\n ...init,\n headers: { \"content-type\": \"application/json\", ...(init.headers ?? {}) },\n });\n}\nfunction bad(status: number, msg: string) { return ok({ error: msg }, { status }); }\n\nfunction authed(req: Request): boolean {\n if (!UI_TOKEN) return true;\n const url = new URL(req.url);\n const t = url.searchParams.get(\"token\")\n ?? req.headers.get(\"x-agent-token\")\n ?? \"\";\n return t === UI_TOKEN;\n}\n\nasync function executeApproved(id: number): Promise {\n const r = await sqlite.execute({\n sql: `SELECT id, session_id, tool, args, status FROM agent_approvals WHERE id = ?`,\n args: [id],\n });\n if (!r.rows.length) throw new Error(\"approval not found\");\n const row: any = r.rows[0];\n if (row.status !== \"approved\") throw new Error(`approval is ${row.status}`);\n\n const args = JSON.parse(row.args);\n const { result, status } = await runTool(row.tool, args, {\n sessionId: row.session_id,\n dryRun: false,\n });\n await sqlite.execute({\n sql: `UPDATE agent_approvals SET status = ?, result = ?, decided_at = ? WHERE id = ?`,\n args: [status === \"ok\" ? \"executed\" : \"failed\", JSON.stringify(result), now(), id],\n });\n await logAction({\n session_id: row.session_id,\n tool: row.tool,\n args,\n result,\n status: `post_approval:${status}`,\n });\n return result;\n}\n\nasync function handleApi(req: Request, url: URL): Promise {\n const path = url.pathname;\n\n if (path === \"/api/ping\") return ok({ ok: true, ts: now() });\n\n if (!authed(req)) return bad(401, \"unauthorized\");\n await ensureDb();\n\n if (path === \"/api/chat\" && req.method === \"POST\") {\n const body = await req.json();\n const sessionId = body.session_id ?? \"default\";\n const text = String(body.message ?? \"\").slice(0, 8000);\n const dryRun = !!body.dry_run;\n if (!text) return bad(400, \"missing message\");\n const out = await agentTurn(sessionId, text, { dryRun });\n return ok(out);\n }\n\n if (path === \"/api/state\") {\n const session = url.searchParams.get(\"session_id\") ?? \"default\";\n const [chat, logs, vals, pending, snaps, crons] = await Promise.all([\n sqlite.execute({\n sql: `SELECT id, role, content, tool_calls, tool_call_id, name, created_at\n FROM agent_chat WHERE session_id = ? ORDER BY id ASC LIMIT 200`,\n args: [session],\n }),\n sqlite.execute(\n `SELECT id, tool, args, status, dry_run, created_at FROM agent_tool_log\n ORDER BY id DESC LIMIT 100`,\n ),\n sqlite.execute(\n `SELECT val_id, name, privacy, kind, created_at FROM agent_managed_vals\n ORDER BY created_at DESC`,\n ),\n sqlite.execute(\n `SELECT id, tool, args, status, created_at FROM agent_approvals\n WHERE status = 'pending' ORDER BY id DESC`,\n ),\n sqlite.execute(\n `SELECT id, file_path, blob_key, reason, created_at FROM agent_snapshots\n ORDER BY id DESC LIMIT 20`,\n ),\n sqlite.execute(`SELECT val_id, name, schedule, created_at FROM agent_crons`),\n ]);\n return ok({\n chat: chat.rows,\n logs: logs.rows,\n vals: vals.rows,\n pending: pending.rows,\n snapshots: snaps.rows,\n crons: crons.rows,\n config: { agent_prefix: AGENT_PREFIX, model: OPENAI_MODEL, main_val_id: MAIN_VAL_ID },\n });\n }\n\n if (path.startsWith(\"/api/approve/\") && req.method === \"POST\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json().catch(() => ({}));\n const decision = body.decision === \"approve\" ? \"approved\" : \"rejected\";\n await sqlite.execute({\n sql: `UPDATE agent_approvals SET status = ?, decided_at = ? WHERE id = ? AND status = 'pending'`,\n args: [decision, now(), id],\n });\n if (decision === \"approved\") {\n try { const r = await executeApproved(id); return ok({ executed: true, result: r }); }\n catch (e) { return ok({ executed: false, error: String(e) }, { status: 500 }); }\n }\n return ok({ rejected: true });\n }\n\n if (path === \"/api/health\" && req.method === \"POST\") {\n return ok(await selfHealthCheck());\n }\n\n if (path === \"/api/rollback\" && req.method === \"POST\") {\n try { return ok(await rollbackMain()); }\n catch (e) { return bad(500, String(e)); }\n }\n\n if (path === \"/api/reset\" && req.method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n const session = body.session_id ?? \"default\";\n await sqlite.execute({ sql: `DELETE FROM agent_chat WHERE session_id = ?`, args: [session] });\n return ok({ reset: true });\n }\n\n return bad(404, \"not found\");\n}\n\n// ====================================================================\n// 9. WEB UI\n// ====================================================================\n\nconst UI_HTML = String.raw`\nVal Town Agent\n\n

Diff · v19