[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_153":154,"_155":156},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_103":85,"_27":104,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":25,"_118":119,"_120":121,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",2,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","6f5ae8ee-5291-11f1-86fb-ee650bb23af1","name","fileType","http","content","// placeholder — replaced immediately by update_file","/**\n * Val Town AI Agent Service — main.ts\n * --------------------------------------------------------------------\n * Self-contained HTTP val that chats with you, manages a sandboxed set\n * of \"agent_*\" child vals/files, persists state in SQLite + Blob, and\n * can rewrite itself with snapshot/rollback safety.\n *\n * Sections:\n * 1. Config & globals\n * 2. Persistence (SQLite schema + Blob helpers)\n * 3. Policy (allowlist, approval gating, audit log)\n * 4. Val Town SDK wrappers\n * 5. Tool implementations\n * 6. Tool registry (JSON schemas — the LLM ONLY sees these)\n * 7. Agent loop (LLM -> tool -> LLM)\n * 8. HTTP routes (/api/*)\n * 9. Web UI\n * 10. Default export\n *\n * Setup env vars (Val Town -> val settings -> Environment Variables):\n * VAL_TOWN_API_KEY required, val:read + val:write\n * AGENT_MAIN_VAL_ID required, the id of THIS val (for self-edit)\n * AGENT_MAIN_FILE optional, default \"main.tsx\" (rename if needed)\n * AGENT_PREFIX optional, default \"agent_\"\n * AGENT_UI_TOKEN optional but recommended, gates the UI\n * OPENAI_API_KEY optional; if unset, std/openai (Val Town creds) is used\n * OPENAI_MODEL optional, default \"gpt-4o-mini\"\n */\n\nimport ValTown from \"npm:@valtown/sdk\";\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nimport sqlite from \"https://esm.town/v/std/sqlite/global.ts\";\nimport { blob } from \"https://esm.town/v/std/blob\";\n\n// ====================================================================\n// 1. CONFIG & GLOBALS\n// ====================================================================\n\nconst AGENT_PREFIX = Deno.env.get(\"AGENT_PREFIX\") ?? \"agent_\";\nconst MAIN_VAL_ID = Deno.env.get(\"AGENT_MAIN_VAL_ID\") ?? \"\";\nconst MAIN_FILE_PATH = Deno.env.get(\"AGENT_MAIN_FILE\") ?? \"main.ts\";\nconst UI_TOKEN = Deno.env.get(\"AGENT_UI_TOKEN\") ?? \"\";\nconst OPENAI_MODEL = Deno.env.get(\"OPENAI_MODEL\") ?? \"gpt-4o-mini\";\nconst MAX_ITERATIONS = 8;\n\n/** Tools that NEVER run directly — they create a pending approval row. */\nconst APPROVAL_REQUIRED = new Set([\n \"edit_main\",\n \"delete_val\",\n \"create_cron\",\n]);\n\nconst vt = new ValTown({\n bearerToken: Deno.env.get(\"VAL_TOWN_API_KEY\") ?? \"\",\n});\n\nconst _oaiKey = Deno.env.get(\"OPENAI_API_KEY\");\n// std/openai uses Val Town's hosted credits when no apiKey is passed.\nconst openai = _oaiKey ? new OpenAI({ apiKey: _oaiKey }) : new OpenAI();\n\nconst SYSTEM_PROMPT = `\nYou are an AI agent operating inside Val Town. You can only act through the\nprovided tools — never invent code paths. All vals you touch must be in your\nsandbox (prefix \"${AGENT_PREFIX}\") or your own main val. Some tools require\nhuman approval and will return a \"pending_approval\" result instead of executing;\nwhen that happens, tell the user what's pending and stop.\n\nBefore editing main.ts, always (a) read it first, (b) describe the change,\n(c) propose using dry_run=true so the user can review the diff.\n\nBe concise. Prefer one tool call per turn unless clearly parallelizable.\n`.trim();\n\n// ====================================================================\n// 2. PERSISTENCE\n// ====================================================================\n\nlet _dbReady: Promise | null = null;\nasync function ensureDb(): Promise {\n if (_dbReady) return _dbReady;\n _dbReady = (async () => {\n const stmts = [\n `CREATE TABLE IF NOT EXISTS agent_chat (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n session_id TEXT NOT NULL,\n role TEXT NOT NULL,\n content TEXT,\n tool_calls TEXT,\n tool_call_id TEXT,\n name TEXT,\n created_at INTEGER NOT NULL\n )`,\n `CREATE INDEX IF NOT EXISTS idx_chat_session ON agent_chat(session_id, id)`,\n\n `CREATE TABLE IF NOT EXISTS agent_tool_log (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n session_id TEXT,\n tool TEXT NOT NULL,\n args TEXT,\n result TEXT,\n status TEXT,\n dry_run INTEGER DEFAULT 0,\n created_at INTEGER NOT NULL\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_managed_vals (\n val_id TEXT PRIMARY KEY,\n name TEXT,\n privacy TEXT,\n kind TEXT, -- \"val\" | \"cron\"\n created_at INTEGER\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_snapshots (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n val_id TEXT NOT NULL,\n file_path TEXT NOT NULL,\n blob_key TEXT NOT NULL,\n reason TEXT,\n created_at INTEGER NOT NULL\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_approvals (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n session_id TEXT,\n tool TEXT NOT NULL,\n args TEXT NOT NULL,\n status TEXT NOT NULL, -- pending | approved | rejected | executed | failed\n result TEXT,\n created_at INTEGER NOT NULL,\n decided_at INTEGER\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_memory (\n k TEXT PRIMARY KEY,\n v TEXT,\n updated_at INTEGER NOT NULL\n )`,\n\n `CREATE TABLE IF NOT EXISTS agent_crons (\n val_id TEXT PRIMARY KEY,\n name TEXT,\n schedule TEXT,\n created_at INTEGER NOT NULL\n )`,\n ];\n for (const s of stmts) await sqlite.execute(s);\n })();\n return _dbReady;\n}\n\nconst now = () => Date.now();\n\nasync function logAction(row: {\n session_id?: string;\n tool: string;\n args: unknown;\n result: unknown;\n status: string;\n dry_run?: boolean;\n}) {\n await sqlite.execute({\n sql: `INSERT INTO agent_tool_log (session_id, tool, args, result, status, dry_run, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [\n row.session_id ?? null,\n row.tool,\n JSON.stringify(row.args),\n JSON.stringify(row.result).slice(0, 8000),\n row.status,\n row.dry_run ? 1 : 0,\n now(),\n ],\n });\n}\n\n// ====================================================================\n// 3. POLICY\n// ====================================================================\n\nasync function isManagedVal(valId: string): Promise {\n if (valId === MAIN_VAL_ID) return true;\n const r = await sqlite.execute({\n sql: `SELECT 1 FROM agent_managed_vals WHERE val_id = ? LIMIT 1`,\n args: [valId],\n });\n return r.rows.length > 0;\n}\n\nfunction assertManagedName(name: string) {\n if (!name.startsWith(AGENT_PREFIX)) {\n throw new Error(\n `Refused: val name \"${name}\" does not start with required prefix \"${AGENT_PREFIX}\".`,\n );\n }\n}\n\nasync function assertManagedVal(valId: string) {\n if (!(await isManagedVal(valId))) {\n throw new Error(\n `Refused: val ${valId} is not in the agent's managed set.`,\n );\n }\n}\n\nasync function createApproval(\n sessionId: string,\n tool: string,\n args: unknown,\n): Promise {\n const r = await sqlite.execute({\n sql: `INSERT INTO agent_approvals (session_id, tool, args, status, created_at)\n VALUES (?, ?, ?, 'pending', ?) RETURNING id`,\n args: [sessionId, tool, JSON.stringify(args), now()],\n });\n return Number((r.rows[0] as any).id);\n}\n\n// ====================================================================\n// 4. SDK WRAPPERS (kept thin so failures surface clearly)\n// ====================================================================\n\nasync function vtListMyVals(limit = 100) {\n const out: any[] = [];\n for await (const v of vt.me.vals.list({ limit })) {\n out.push(v);\n if (out.length >= limit) break;\n }\n return out;\n}\n\nasync function vtGetFile(valId: string, path: string): Promise {\n // The SDK exposes file content via vals.files.getContent or similar.\n // We use a tolerant fallback in case of shape differences across SDK versions.\n // @ts-ignore — undocumented endpoint passthrough as a last resort.\n const res = await vt.get(`/v1/vals/${valId}/files/content`, {\n query: { path },\n } as any).asResponse?.() ?? null;\n if (res && res.ok) return await res.text();\n\n // Fallback: get the file metadata + use its content field if present.\n // @ts-ignore\n const f = await vt.vals.files.retrieve?.(valId, { path });\n if (f && typeof (f as any).content === \"string\") return (f as any).content;\n throw new Error(`Could not read file ${path} in val ${valId}`);\n}\n\nasync function vtCreateVal(name: string, privacy: \"private\" | \"unlisted\" | \"public\" = \"private\") {\n return await vt.vals.create({ name, privacy, description: \"Agent-managed val\" });\n}\n\nasync function vtCreateFile(\n valId: string,\n path: string,\n content: string,\n type: \"http\" | \"script\" | \"cron\" | \"email\" | \"file\" = \"file\",\n) {\n // @ts-ignore — files API surface\n return await vt.vals.files.create(valId, { path, content, type });\n}\n\nasync function vtUpdateFile(valId: string, path: string, content: string) {\n // @ts-ignore\n return await vt.vals.files.update(valId, { path, content });\n}\n\nasync function vtDeleteVal(valId: string) {\n return await vt.vals.delete(valId);\n}\n\n// ====================================================================\n// 5. TOOL IMPLEMENTATIONS\n// ====================================================================\n\ntype ToolCtx = { sessionId: string; dryRun: boolean };\n\nconst impls = {\n async list_managed_vals(_args: {}, _ctx: ToolCtx) {\n const r = await sqlite.execute(\n `SELECT val_id, name, privacy, kind, created_at FROM agent_managed_vals ORDER BY created_at DESC`,\n );\n return { vals: r.rows };\n },\n\n async read_val(\n args: { val_id: string; path?: string },\n _ctx: ToolCtx,\n ) {\n await assertManagedVal(args.val_id);\n const path = args.path ?? \"main.ts\";\n const content = await vtGetFile(args.val_id, path);\n return { val_id: args.val_id, path, content };\n },\n\n async create_val(\n args: { name: string; path?: string; content: string; type?: string },\n ctx: ToolCtx,\n ) {\n const name = args.name.startsWith(AGENT_PREFIX)\n ? args.name\n : AGENT_PREFIX + args.name;\n assertManagedName(name);\n\n if (ctx.dryRun) {\n return {\n dry_run: true,\n would_create: { name, path: args.path ?? \"main.ts\", bytes: args.content.length },\n };\n }\n\n const val = await vtCreateVal(name, \"private\");\n const path = args.path ?? \"main.ts\";\n const type = (args.type as any) ?? \"file\";\n await vtCreateFile(val.id, path, args.content, type);\n\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO agent_managed_vals (val_id, name, privacy, kind, created_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [val.id, name, \"private\", \"val\", now()],\n });\n return { val_id: val.id, name, path };\n },\n\n async edit_val_file(\n args: { val_id: string; path: string; content: string },\n ctx: ToolCtx,\n ) {\n await assertManagedVal(args.val_id);\n if (args.val_id === MAIN_VAL_ID) {\n throw new Error(\"Refused: use edit_main for the agent's own main file.\");\n }\n if (ctx.dryRun) {\n let before = \"\";\n try { before = await vtGetFile(args.val_id, args.path); } catch { /* new file */ }\n return {\n dry_run: true,\n path: args.path,\n before_bytes: before.length,\n after_bytes: args.content.length,\n diff_preview: diffPreview(before, args.content),\n };\n }\n await vtUpdateFile(args.val_id, args.path, args.content);\n return { val_id: args.val_id, path: args.path, bytes: args.content.length };\n },\n\n /**\n * edit_main: SELF-EDIT path.\n * 1. Snapshot current main file to Blob, register in agent_snapshots.\n * 2. Apply new content.\n * 3. Health-check ourselves; on failure, rollback.\n *\n * This tool is APPROVAL_REQUIRED — direct calls never land here; the\n * approvals system invokes it after a human accepts.\n */\n async edit_main(\n args: { content: string; reason?: string },\n _ctx: ToolCtx,\n ) {\n if (!MAIN_VAL_ID) throw new Error(\"AGENT_MAIN_VAL_ID not configured.\");\n const before = await vtGetFile(MAIN_VAL_ID, MAIN_FILE_PATH);\n const blobKey = `agent_snapshot/main/${now()}.ts`;\n await blob.set(blobKey, before);\n await sqlite.execute({\n sql: `INSERT INTO agent_snapshots (val_id, file_path, blob_key, reason, created_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [MAIN_VAL_ID, MAIN_FILE_PATH, blobKey, args.reason ?? \"\", now()],\n });\n\n await vtUpdateFile(MAIN_VAL_ID, MAIN_FILE_PATH, args.content);\n\n // Give Val Town a moment to redeploy, then probe.\n await new Promise((r) => setTimeout(r, 1500));\n const healthy = await selfHealthCheck();\n if (!healthy.ok) {\n await rollbackMain(blobKey);\n return { applied: false, rolled_back: true, snapshot: blobKey, health: healthy };\n }\n return { applied: true, snapshot: blobKey, health: healthy };\n },\n\n async create_cron(\n args: { name: string; schedule: string; code: string },\n ctx: ToolCtx,\n ) {\n const name = args.name.startsWith(AGENT_PREFIX) ? args.name : AGENT_PREFIX + args.name;\n assertManagedName(name);\n\n if (ctx.dryRun) {\n return { dry_run: true, would_create_cron: { name, schedule: args.schedule } };\n }\n\n const val = await vtCreateVal(name, \"private\");\n await vtCreateFile(val.id, \"main.ts\", args.code, \"cron\");\n\n // NOTE: setting the schedule itself may require a follow-up call to the\n // val's trigger config. Some SDK versions accept `cron: { schedule }` on\n // file create; others require PATCH /v1/vals/{id}/triggers. We persist\n // the desired schedule and surface the val URL so the user can verify.\n // TODO(advanced): hit the triggers endpoint directly here.\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO agent_managed_vals (val_id, name, privacy, kind, created_at)\n VALUES (?, ?, ?, ?, ?)`,\n args: [val.id, name, \"private\", \"cron\", now()],\n });\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO agent_crons (val_id, name, schedule, created_at)\n VALUES (?, ?, ?, ?)`,\n args: [val.id, name, args.schedule, now()],\n });\n\n return {\n val_id: val.id,\n name,\n schedule_requested: args.schedule,\n note: \"Confirm the schedule in the val's Trigger settings; UTC.\",\n };\n },\n\n async delete_val(args: { val_id: string }, ctx: ToolCtx) {\n await assertManagedVal(args.val_id);\n if (args.val_id === MAIN_VAL_ID) throw new Error(\"Refused: cannot delete main val.\");\n if (ctx.dryRun) return { dry_run: true, would_delete: args.val_id };\n\n await vtDeleteVal(args.val_id);\n await sqlite.execute({\n sql: `DELETE FROM agent_managed_vals WHERE val_id = ?`,\n args: [args.val_id],\n });\n await sqlite.execute({\n sql: `DELETE FROM agent_crons WHERE val_id = ?`,\n args: [args.val_id],\n });\n return { deleted: args.val_id };\n },\n\n async view_logs(args: { val_id?: string; limit?: number }, _ctx: ToolCtx) {\n // Val Town telemetry/logs availability varies; we expose our own action log\n // and best-effort fetch traces if accessible.\n const lim = Math.min(args.limit ?? 50, 200);\n const r = await sqlite.execute({\n sql: `SELECT id, tool, args, result, status, dry_run, created_at\n FROM agent_tool_log ORDER BY id DESC LIMIT ?`,\n args: [lim],\n });\n return { logs: r.rows };\n },\n\n async memory_set(args: { key: string; value: string }, _ctx: ToolCtx) {\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO agent_memory (k, v, updated_at) VALUES (?, ?, ?)`,\n args: [args.key, args.value, now()],\n });\n return { ok: true, key: args.key };\n },\n\n async memory_get(args: { key: string }, _ctx: ToolCtx) {\n const r = await sqlite.execute({\n sql: `SELECT v FROM agent_memory WHERE k = ?`,\n args: [args.key],\n });\n return { key: args.key, value: r.rows[0]?.v ?? null };\n },\n\n async memory_list(_args: {}, _ctx: ToolCtx) {\n const r = await sqlite.execute(\n `SELECT k, length(v) AS bytes, updated_at FROM agent_memory ORDER BY updated_at DESC`,\n );\n return { entries: r.rows };\n },\n\n async health_check(_args: {}, _ctx: ToolCtx) {\n return await selfHealthCheck();\n },\n};\n\nfunction diffPreview(before: string, after: string): string {\n if (before === after) return \"(no change)\";\n const bLines = before.split(\"\\n\");\n const aLines = after.split(\"\\n\");\n const max = Math.min(40, Math.max(bLines.length, aLines.length));\n const out: string[] = [];\n for (let i = 0; i < max; i++) {\n if (bLines[i] !== aLines[i]) {\n if (bLines[i] !== undefined) out.push(`- ${bLines[i]}`);\n if (aLines[i] !== undefined) out.push(`+ ${aLines[i]}`);\n }\n }\n return out.slice(0, 200).join(\"\\n\") || \"(diff outside preview window)\";\n}\n\nasync function selfHealthCheck(): Promise<{ ok: boolean; status?: number; error?: string }> {\n try {\n if (!MAIN_VAL_ID) return { ok: false, error: \"no MAIN_VAL_ID\" };\n // @ts-ignore\n const val: any = await vt.vals.retrieve(MAIN_VAL_ID);\n const url = val?.links?.endpoint ?? val?.endpoint ?? val?.links?.html;\n if (!url) return { ok: true, status: 0, error: \"no endpoint to probe; metadata OK\" };\n const r = await fetch(url + \"/api/ping\", { method: \"GET\" });\n return { ok: r.ok, status: r.status };\n } catch (e) {\n return { ok: false, error: String(e) };\n }\n}\n\nasync function rollbackMain(blobKey?: string) {\n let key = blobKey;\n if (!key) {\n const r = await sqlite.execute({\n sql: `SELECT blob_key FROM agent_snapshots WHERE val_id = ? AND file_path = ?\n ORDER BY id DESC LIMIT 1`,\n args: [MAIN_VAL_ID, MAIN_FILE_PATH],\n });\n if (!r.rows.length) throw new Error(\"No snapshot to rollback to.\");\n key = r.rows[0].blob_key as string;\n }\n const res = await blob.get(key!);\n const content = typeof res === \"string\" ? res : await res.text();\n await vtUpdateFile(MAIN_VAL_ID, MAIN_FILE_PATH, content);\n return { restored_from: key };\n}\n\n// ====================================================================\n// 6. TOOL REGISTRY (JSON schemas — the LLM only sees these)\n// ====================================================================\n\nconst tools = [\n {\n type: \"function\" as const,\n function: {\n name: \"list_managed_vals\",\n description: \"List vals the agent has created or adopted.\",\n parameters: { type: \"object\", properties: {}, additionalProperties: false },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"read_val\",\n description: \"Read a file from a managed val.\",\n parameters: {\n type: \"object\",\n properties: {\n val_id: { type: \"string\" },\n path: { type: \"string\", description: \"default main.ts\" },\n },\n required: [\"val_id\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"create_val\",\n description: `Create a new private val. Name will be prefixed with \"${AGENT_PREFIX}\" if not already.`,\n parameters: {\n type: \"object\",\n properties: {\n name: { type: \"string\" },\n path: { type: \"string\" },\n content: { type: \"string\" },\n type: { type: \"string\", enum: [\"http\", \"script\", \"cron\", \"email\", \"file\"] },\n },\n required: [\"name\", \"content\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"edit_val_file\",\n description: \"Update a file inside a managed val (not main).\",\n parameters: {\n type: \"object\",\n properties: {\n val_id: { type: \"string\" },\n path: { type: \"string\" },\n content: { type: \"string\" },\n },\n required: [\"val_id\", \"path\", \"content\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"edit_main\",\n description: \"DANGEROUS. Replace the agent's own main file. Requires human approval. Will snapshot + health-check + rollback on failure.\",\n parameters: {\n type: \"object\",\n properties: {\n content: { type: \"string\" },\n reason: { type: \"string\" },\n },\n required: [\"content\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"create_cron\",\n description: \"DANGEROUS. Create a new agent_* cron val. UTC. Requires approval.\",\n parameters: {\n type: \"object\",\n properties: {\n name: { type: \"string\" },\n schedule: { type: \"string\", description: \"cron expression, UTC\" },\n code: { type: \"string\" },\n },\n required: [\"name\", \"schedule\", \"code\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"delete_val\",\n description: \"DANGEROUS. Delete a managed val. Requires approval.\",\n parameters: {\n type: \"object\",\n properties: { val_id: { type: \"string\" } },\n required: [\"val_id\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"view_logs\",\n description: \"Show recent agent tool-call audit log.\",\n parameters: {\n type: \"object\",\n properties: { limit: { type: \"integer\", minimum: 1, maximum: 200 } },\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"memory_set\",\n description: \"Store a key/value in agent memory.\",\n parameters: {\n type: \"object\",\n properties: { key: { type: \"string\" }, value: { type: \"string\" } },\n required: [\"key\", \"value\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"memory_get\",\n description: \"Retrieve a value from agent memory.\",\n parameters: {\n type: \"object\",\n properties: { key: { type: \"string\" } },\n required: [\"key\"],\n additionalProperties: false,\n },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"memory_list\",\n description: \"List memory keys.\",\n parameters: { type: \"object\", properties: {}, additionalProperties: false },\n },\n },\n {\n type: \"function\" as const,\n function: {\n name: \"health_check\",\n description: \"Probe the agent's own HTTP endpoint.\",\n parameters: { type: \"object\", properties: {}, additionalProperties: false },\n },\n },\n];\n\n// ====================================================================\n// 7. AGENT LOOP\n// ====================================================================\n\nasync function runTool(\n name: string,\n args: any,\n ctx: ToolCtx,\n): Promise<{ result: any; status: string }> {\n const fn = (impls as any)[name];\n if (!fn) return { result: { error: `unknown tool ${name}` }, status: \"error\" };\n try {\n const result = await fn(args ?? {}, ctx);\n return { result, status: \"ok\" };\n } catch (e) {\n return { result: { error: String(e) }, status: \"error\" };\n }\n}\n\nasync function handleToolCall(\n sessionId: string,\n toolName: string,\n rawArgs: string,\n dryRunDefault: boolean,\n): Promise<{ content: string }> {\n let args: any = {};\n try { args = rawArgs ? JSON.parse(rawArgs) : {}; }\n catch { args = {}; }\n\n const dryRun = !!(args && args.__dry_run) || dryRunDefault;\n delete args.__dry_run;\n\n // Approval gating: register pending, return placeholder.\n if (APPROVAL_REQUIRED.has(toolName) && !dryRun) {\n const id = await createApproval(sessionId, toolName, args);\n await logAction({\n session_id: sessionId,\n tool: toolName,\n args,\n result: { pending_approval_id: id },\n status: \"pending_approval\",\n });\n return {\n content: JSON.stringify({\n pending_approval: true,\n approval_id: id,\n message: `Tool \"${toolName}\" requires human approval. Approve in the Pending panel.`,\n }),\n };\n }\n\n const { result, status } = await runTool(toolName, args, { sessionId, dryRun });\n await logAction({\n session_id: sessionId,\n tool: toolName,\n args,\n result,\n status,\n dry_run: dryRun,\n });\n return { content: JSON.stringify(result).slice(0, 16000) };\n}\n\nasync function loadHistory(sessionId: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT role, content, tool_calls, tool_call_id, name FROM agent_chat\n WHERE session_id = ? ORDER BY id ASC`,\n args: [sessionId],\n });\n return r.rows.map((row: any) => {\n const m: any = { role: row.role };\n if (row.content) m.content = row.content;\n if (row.tool_calls) m.tool_calls = JSON.parse(row.tool_calls);\n if (row.tool_call_id) m.tool_call_id = row.tool_call_id;\n if (row.name) m.name = row.name;\n return m;\n });\n}\n\nasync function appendMessage(sessionId: string, msg: any) {\n await sqlite.execute({\n sql: `INSERT INTO agent_chat (session_id, role, content, tool_calls, tool_call_id, name, created_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [\n sessionId,\n msg.role,\n msg.content ?? null,\n msg.tool_calls ? JSON.stringify(msg.tool_calls) : null,\n msg.tool_call_id ?? null,\n msg.name ?? null,\n now(),\n ],\n });\n}\n\nasync function agentTurn(\n sessionId: string,\n userText: string,\n opts: { dryRun?: boolean } = {},\n): Promise<{ reply: string; iterations: number }> {\n await ensureDb();\n await appendMessage(sessionId, { role: \"user\", content: userText });\n\n let iterations = 0;\n while (iterations < MAX_ITERATIONS) {\n iterations++;\n const history = await loadHistory(sessionId);\n const messages = [{ role: \"system\", content: SYSTEM_PROMPT }, ...history];\n\n const resp = await openai.chat.completions.create({\n model: OPENAI_MODEL,\n messages: messages as any,\n tools: tools as any,\n tool_choice: \"auto\",\n });\n\n const choice = resp.choices[0];\n const msg = choice.message as any;\n\n await appendMessage(sessionId, {\n role: \"assistant\",\n content: msg.content ?? null,\n tool_calls: msg.tool_calls,\n });\n\n if (!msg.tool_calls || msg.tool_calls.length === 0) {\n return { reply: msg.content ?? \"(no content)\", iterations };\n }\n\n for (const tc of msg.tool_calls) {\n const fnName = tc.function.name;\n const out = await handleToolCall(\n sessionId,\n fnName,\n tc.function.arguments,\n !!opts.dryRun,\n );\n await appendMessage(sessionId, {\n role: \"tool\",\n content: out.content,\n tool_call_id: tc.id,\n name: fnName,\n });\n }\n }\n return { reply: \"(max iterations reached)\", iterations };\n}\n\n// ====================================================================\n// 8. HTTP ROUTES\n// ====================================================================\n\nfunction ok(json: unknown, init: ResponseInit = {}) {\n return new Response(JSON.stringify(json), {\n ...init,\n headers: { \"content-type\": \"application/json\", ...(init.headers ?? {}) },\n });\n}\nfunction bad(status: number, msg: string) { return ok({ error: msg }, { status }); }\n\nfunction authed(req: Request): boolean {\n if (!UI_TOKEN) return true;\n const url = new URL(req.url);\n const t = url.searchParams.get(\"token\")\n ?? req.headers.get(\"x-agent-token\")\n ?? \"\";\n return t === UI_TOKEN;\n}\n\nasync function executeApproved(id: number): Promise {\n const r = await sqlite.execute({\n sql: `SELECT id, session_id, tool, args, status FROM agent_approvals WHERE id = ?`,\n args: [id],\n });\n if (!r.rows.length) throw new Error(\"approval not found\");\n const row: any = r.rows[0];\n if (row.status !== \"approved\") throw new Error(`approval is ${row.status}`);\n\n const args = JSON.parse(row.args);\n const { result, status } = await runTool(row.tool, args, {\n sessionId: row.session_id,\n dryRun: false,\n });\n await sqlite.execute({\n sql: `UPDATE agent_approvals SET status = ?, result = ?, decided_at = ? WHERE id = ?`,\n args: [status === \"ok\" ? \"executed\" : \"failed\", JSON.stringify(result), now(), id],\n });\n await logAction({\n session_id: row.session_id,\n tool: row.tool,\n args,\n result,\n status: `post_approval:${status}`,\n });\n return result;\n}\n\nasync function handleApi(req: Request, url: URL): Promise {\n const path = url.pathname;\n\n if (path === \"/api/ping\") return ok({ ok: true, ts: now() });\n\n if (!authed(req)) return bad(401, \"unauthorized\");\n await ensureDb();\n\n if (path === \"/api/chat\" && req.method === \"POST\") {\n const body = await req.json();\n const sessionId = body.session_id ?? \"default\";\n const text = String(body.message ?? \"\").slice(0, 8000);\n const dryRun = !!body.dry_run;\n if (!text) return bad(400, \"missing message\");\n const out = await agentTurn(sessionId, text, { dryRun });\n return ok(out);\n }\n\n if (path === \"/api/state\") {\n const session = url.searchParams.get(\"session_id\") ?? \"default\";\n const [chat, logs, vals, pending, snaps, crons] = await Promise.all([\n sqlite.execute({\n sql: `SELECT id, role, content, tool_calls, tool_call_id, name, created_at\n FROM agent_chat WHERE session_id = ? ORDER BY id ASC LIMIT 200`,\n args: [session],\n }),\n sqlite.execute(\n `SELECT id, tool, args, status, dry_run, created_at FROM agent_tool_log\n ORDER BY id DESC LIMIT 100`,\n ),\n sqlite.execute(\n `SELECT val_id, name, privacy, kind, created_at FROM agent_managed_vals\n ORDER BY created_at DESC`,\n ),\n sqlite.execute(\n `SELECT id, tool, args, status, created_at FROM agent_approvals\n WHERE status = 'pending' ORDER BY id DESC`,\n ),\n sqlite.execute(\n `SELECT id, file_path, blob_key, reason, created_at FROM agent_snapshots\n ORDER BY id DESC LIMIT 20`,\n ),\n sqlite.execute(`SELECT val_id, name, schedule, created_at FROM agent_crons`),\n ]);\n return ok({\n chat: chat.rows,\n logs: logs.rows,\n vals: vals.rows,\n pending: pending.rows,\n snapshots: snaps.rows,\n crons: crons.rows,\n config: { agent_prefix: AGENT_PREFIX, model: OPENAI_MODEL, main_val_id: MAIN_VAL_ID },\n });\n }\n\n if (path.startsWith(\"/api/approve/\") && req.method === \"POST\") {\n const id = Number(path.split(\"/\").pop());\n const body = await req.json().catch(() => ({}));\n const decision = body.decision === \"approve\" ? \"approved\" : \"rejected\";\n await sqlite.execute({\n sql: `UPDATE agent_approvals SET status = ?, decided_at = ? WHERE id = ? AND status = 'pending'`,\n args: [decision, now(), id],\n });\n if (decision === \"approved\") {\n try { const r = await executeApproved(id); return ok({ executed: true, result: r }); }\n catch (e) { return ok({ executed: false, error: String(e) }, { status: 500 }); }\n }\n return ok({ rejected: true });\n }\n\n if (path === \"/api/health\" && req.method === \"POST\") {\n return ok(await selfHealthCheck());\n }\n\n if (path === \"/api/rollback\" && req.method === \"POST\") {\n try { return ok(await rollbackMain()); }\n catch (e) { return bad(500, String(e)); }\n }\n\n if (path === \"/api/reset\" && req.method === \"POST\") {\n const body = await req.json().catch(() => ({}));\n const session = body.session_id ?? \"default\";\n await sqlite.execute({ sql: `DELETE FROM agent_chat WHERE session_id = ?`, args: [session] });\n return ok({ reset: true });\n }\n\n return bad(404, \"not found\");\n}\n\n// ====================================================================\n// 9. WEB UI\n// ====================================================================\n\nconst UI_HTML = String.raw`\nVal Town Agent\n\n

Val Town Agent

\n \n \n \n \n \n

Managed vals

Snapshots

Crons

\n \n

\n dry-run\n \n

Pending approvals

Action log

\n`;\n\n// ====================================================================\n// 10. DEFAULT EXPORT\n// ====================================================================\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (url.pathname.startsWith(\"/api/\")) {\n try { return await handleApi(req, url); }\n catch (e) { return new Response(JSON.stringify({ error: String(e) }), { status: 500 }); }\n }\n\n // Root UI — gated by token if configured\n if (UI_TOKEN && url.searchParams.get(\"token\") !== UI_TOKEN) {\n return new Response(\"Forbidden. Append ?token=YOUR_TOKEN\", { status: 403 });\n }\n\n return new Response(UI_HTML, { headers: { \"content-type\": \"text/html; charset=utf-8\" } });\n}\n","createdAt",["D",1779092181641],"branchVersion","branchId","6f55c116-5291-11f1-86fb-ee650bb23af1","id","6f551b1c-5291-11f1-86fb-ee650bb23af1","agent_runtime",["D",1779092001677],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Self-hosted AI agent runtime with snapshot/rollback","imageUrl","019bba81-581c-7340-b557-1661158d9144","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019bba81-581c-7340-b557-1aba2a23cb53","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_102":98},"org",{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",19,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","cookiemonster0922","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18zOEVONk1OWjh2eU1xaWdXQ3I5c1JOZERuRVgifQ","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":149,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":150,"_79":151,"_81":152,"_83":25},"tree",[144],"files",[144],"counts",{"_134":61,"_135":131,"_136":131,"_137":138,"_139":140},"contents",[126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_27":133},"da9b2330-5291-11f1-8b7e-ee650bb23af1","parentId","latest",["D",1779092181641],1,"label",[28],"pulls","branches","forks","envVars",{"_141":61,"_143":61},"connections",{"_141":61,"_142":61},"count","unfilledCount","emptyCount",{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":25,"_38":145,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_146":147,"_27":148},["D",1779092181641],"children",[],[28],["D",1779092001677],{"_95":94,"_102":98},{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_123":186,"_187":188,"_189":190,"_191":25,"_192":25,"_193":25,"_194":121,"_195":-5,"_196":-7,"_197":-7,"_198":61,"_199":25,"_200":25,"_201":-5,"_202":25,"_203":25,"_204":25,"_205":-5},"ENV",{"_157":158,"_159":160,"_161":85,"_162":163,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v2