[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_157":158,"_159":160},"routes/_app.x.$handle.$name",{"_97":96,"_32":45,"_105":87,"_27":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":123,"_124":-5,"_125":-5,"_126":127},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",4,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","ea70f180-7a65-11f1-bd19-1607ee4eb77e","name","fileType","http","content","import { encodeBase64, decodeBase64 } from \"jsr:@std/encoding/base64\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// Defense-in-depth: even with the shared-secret check below, a device bug\n// that loops requests (or a leaked secret) shouldn't be able to run up an\n// unbounded Google/Anthropic bill. This caps total calls per rolling hour.\nconst MAX_REQUESTS_PER_HOUR = 30;\n\nasync function checkRateLimit(): Promise {\n await sqlite.execute(\n `CREATE TABLE IF NOT EXISTS request_log (ts INTEGER NOT NULL)`,\n );\n const cutoff = Date.now() - 60 * 60 * 1000;\n await sqlite.execute({\n sql: \"DELETE FROM request_log WHERE ts < ?\",\n args: [cutoff],\n });\n const result = await sqlite.execute({\n sql: \"SELECT COUNT(*) as n FROM request_log WHERE ts > ?\",\n args: [cutoff],\n });\n const count = Number(result.rows[0].n);\n if (count >= MAX_REQUESTS_PER_HOUR) return false;\n await sqlite.execute({\n sql: \"INSERT INTO request_log (ts) VALUES (?)\",\n args: [Date.now()],\n });\n return true;\n}\n\nconst SYSTEM_PROMPT =\n \"You are a voice assistant. Your replies are spoken aloud through a small speaker and shown on a tiny screen, so respond in 1-2 short plain sentences. Never use markdown, asterisks, bullet points, headers, or any other text formatting - plain spoken words only.\";\n\nasync function googleSTT(pcmBytes: Uint8Array): Promise {\n const apiKey = Deno.env.get(\"GOOGLE_API_KEY\");\n const body = {\n config: {\n encoding: \"LINEAR16\",\n sampleRateHertz: 16000,\n languageCode: \"en-US\",\n },\n audio: { content: encodeBase64(pcmBytes) },\n };\n const res = await fetch(\n `https://speech.googleapis.com/v1/speech:recognize?key=${apiKey}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n },\n );\n if (!res.ok) {\n throw new Error(`Google STT error ${res.status}: ${await res.text()}`);\n }\n const json = await res.json();\n const transcript = json.results?.[0]?.alternatives?.[0]?.transcript;\n if (!transcript) throw new Error(\"No speech detected\");\n return transcript;\n}\n\nasync function askClaude(userText: string): Promise {\n const apiKey = Deno.env.get(\"ANTHROPIC_API_KEY\");\n const res = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": apiKey!,\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: \"claude-haiku-4-5-20251001\",\n max_tokens: 150,\n system: SYSTEM_PROMPT,\n messages: [{ role: \"user\", content: userText }],\n }),\n });\n if (!res.ok) {\n throw new Error(`Claude error ${res.status}: ${await res.text()}`);\n }\n const json = await res.json();\n const text = json.content?.[0]?.text;\n if (!text) throw new Error(\"Empty Claude reply\");\n return text;\n}\n\nasync function googleTTS(text: string): Promise {\n const apiKey = Deno.env.get(\"GOOGLE_API_KEY\");\n const res = await fetch(\n `https://texttospeech.googleapis.com/v1/text:synthesize?key=${apiKey}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n input: { text },\n voice: { languageCode: \"en-US\", name: \"en-US-Standard-C\" },\n audioConfig: { audioEncoding: \"LINEAR16\", sampleRateHertz: 16000 },\n }),\n },\n );\n if (!res.ok) {\n throw new Error(`Google TTS error ${res.status}: ${await res.text()}`);\n }\n const json = await res.json();\n if (!json.audioContent) throw new Error(\"No audio content from TTS\");\n return decodeBase64(json.audioContent);\n}\n\nexport default async function (req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(\n \"POST audio (application/octet-stream) or JSON {text} required\",\n { status: 405 },\n );\n }\n\n const deviceKey = req.headers.get(\"x-device-key\");\n if (deviceKey !== Deno.env.get(\"DEVICE_SHARED_SECRET\")) {\n return new Response(\"Unauthorized\", { status: 401 });\n }\n\n try {\n let transcript: string;\n const contentType = req.headers.get(\"content-type\") || \"\";\n\n if (contentType.includes(\"application/json\")) {\n const json = await req.json();\n if (!json.text) return new Response(\"Missing 'text' field\", { status: 400 });\n transcript = json.text;\n } else {\n const buf = new Uint8Array(await req.arrayBuffer());\n if (buf.length === 0) return new Response(\"Empty audio body\", { status: 400 });\n transcript = await googleSTT(buf);\n }\n\n const reply = await askClaude(transcript);\n const audio = await googleTTS(reply);\n\n return new Response(audio, {\n status: 200,\n headers: {\n \"Content-Type\": \"application/octet-stream\",\n \"X-Transcript\": encodeURIComponent(transcript),\n \"X-Reply\": encodeURIComponent(reply),\n },\n });\n } catch (err) {\n console.error(err);\n return new Response(String(err), { status: 500 });\n }\n}\n","import { encodeBase64, decodeBase64 } from \"jsr:@std/encoding/base64\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// Defense-in-depth: even with the shared-secret check below, a device bug\n// that loops requests (or a leaked secret) shouldn't be able to run up an\n// unbounded Google/Anthropic bill. This caps total calls per rolling hour.\nconst MAX_REQUESTS_PER_HOUR = 30;\n\nasync function checkRateLimit(): Promise {\n await sqlite.execute(\n `CREATE TABLE IF NOT EXISTS request_log (ts INTEGER NOT NULL)`,\n );\n const cutoff = Date.now() - 60 * 60 * 1000;\n await sqlite.execute({\n sql: \"DELETE FROM request_log WHERE ts < ?\",\n args: [cutoff],\n });\n const result = await sqlite.execute({\n sql: \"SELECT COUNT(*) as n FROM request_log WHERE ts > ?\",\n args: [cutoff],\n });\n const count = Number(result.rows[0].n);\n if (count >= MAX_REQUESTS_PER_HOUR) return false;\n await sqlite.execute({\n sql: \"INSERT INTO request_log (ts) VALUES (?)\",\n args: [Date.now()],\n });\n return true;\n}\n\nconst SYSTEM_PROMPT =\n \"You are a voice assistant. Your replies are spoken aloud through a small speaker and shown on a tiny screen, so respond in 1-2 short plain sentences. Never use markdown, asterisks, bullet points, headers, or any other text formatting - plain spoken words only.\";\n\nasync function googleSTT(pcmBytes: Uint8Array): Promise {\n const apiKey = Deno.env.get(\"GOOGLE_API_KEY\");\n const body = {\n config: {\n encoding: \"LINEAR16\",\n sampleRateHertz: 16000,\n languageCode: \"en-US\",\n },\n audio: { content: encodeBase64(pcmBytes) },\n };\n const res = await fetch(\n `https://speech.googleapis.com/v1/speech:recognize?key=${apiKey}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(body),\n },\n );\n if (!res.ok) {\n throw new Error(`Google STT error ${res.status}: ${await res.text()}`);\n }\n const json = await res.json();\n const transcript = json.results?.[0]?.alternatives?.[0]?.transcript;\n if (!transcript) throw new Error(\"No speech detected\");\n return transcript;\n}\n\nasync function askClaude(userText: string): Promise {\n const apiKey = Deno.env.get(\"ANTHROPIC_API_KEY\");\n const res = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": apiKey!,\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: \"claude-haiku-4-5-20251001\",\n max_tokens: 150,\n system: SYSTEM_PROMPT,\n messages: [{ role: \"user\", content: userText }],\n }),\n });\n if (!res.ok) {\n throw new Error(`Claude error ${res.status}: ${await res.text()}`);\n }\n const json = await res.json();\n const text = json.content?.[0]?.text;\n if (!text) throw new Error(\"Empty Claude reply\");\n return text;\n}\n\nasync function googleTTS(text: string): Promise {\n const apiKey = Deno.env.get(\"GOOGLE_API_KEY\");\n const res = await fetch(\n `https://texttospeech.googleapis.com/v1/text:synthesize?key=${apiKey}`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n input: { text },\n voice: { languageCode: \"en-US\", name: \"en-US-Standard-C\" },\n audioConfig: { audioEncoding: \"LINEAR16\", sampleRateHertz: 16000 },\n }),\n },\n );\n if (!res.ok) {\n throw new Error(`Google TTS error ${res.status}: ${await res.text()}`);\n }\n const json = await res.json();\n if (!json.audioContent) throw new Error(\"No audio content from TTS\");\n return decodeBase64(json.audioContent);\n}\n\nexport default async function (req: Request): Promise {\n if (req.method !== \"POST\") {\n return new Response(\n \"POST audio (application/octet-stream) or JSON {text} required\",\n { status: 405 },\n );\n }\n\n const deviceKey = req.headers.get(\"x-device-key\");\n if (deviceKey !== Deno.env.get(\"DEVICE_SHARED_SECRET\")) {\n return new Response(\"Unauthorized\", { status: 401 });\n }\n\n if (!(await checkRateLimit())) {\n return new Response(\"Rate limit exceeded, try again later\", { status: 429 });\n }\n\n try {\n let transcript: string;\n const contentType = req.headers.get(\"content-type\") || \"\";\n\n if (contentType.includes(\"application/json\")) {\n const json = await req.json();\n if (!json.text) return new Response(\"Missing 'text' field\", { status: 400 });\n transcript = json.text;\n } else {\n const buf = new Uint8Array(await req.arrayBuffer());\n if (buf.length === 0) return new Response(\"Empty audio body\", { status: 400 });\n transcript = await googleSTT(buf);\n }\n\n const reply = await askClaude(transcript);\n const audio = await googleTTS(reply);\n\n return new Response(audio, {\n status: 200,\n headers: {\n \"Content-Type\": \"application/octet-stream\",\n \"X-Transcript\": encodeURIComponent(transcript),\n \"X-Reply\": encodeURIComponent(reply),\n },\n });\n } catch (err) {\n console.error(err);\n return new Response(String(err), { status: 500 });\n }\n}\n","createdAt",["D",1783472375418],"branchVersion","branchId","0c3c8a0e-6e10-4952-a8d4-5227d2251c36","id","e6ecdfc6-5bd8-4322-8ee5-7c7d166749c0","sticks3-voice-assistant",["D",1783471356849],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Voice assistant middleware for M5StickS3: STT+Claude+TTS","imageUrl","442cb420-422c-11f0-bbe8-8f3f0ddc6612","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","675fd955-734f-4afa-a1fc-de0c0cf86139","tursoName","e6ecdfc65bd843228ee57c7d166749c0","tursoHostname","e6ecdfc65bd843228ee57c7d166749c0-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789525245864],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_97":96,"_104":100},"org",{"_97":96,"_98":-5,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":14,"_32":87,"_43":42,"_88":44,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":45,"_95":96},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","cschick","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yeTY0alNTUThEcXp4czVhYzlySDZIeFBNa1kifQ","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":152,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":153,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":154,"_82":155,"_84":156,"_86":25},"tree",[147],"files",[147],"counts",{"_136":61,"_137":138,"_139":61,"_140":141,"_142":143},"contents",[128],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":129,"_32":28,"_30":31,"_130":-5,"_41":42,"_40":14,"_131":123,"_38":132,"_13":133,"_33":34,"_35":37,"_24":25,"_134":-5,"_27":135},"9d052c42-8aee-4c51-81a6-53dd15d4dce8","parentId","latest",["D",1783472375418],3,"label",[28],"pulls","branches",1,"forks","envVars",{"_144":133,"_146":61},"connections",{"_144":61,"_145":61},"count","unfilledCount","emptyCount",{"_43":129,"_32":28,"_30":31,"_130":-5,"_41":42,"_40":14,"_131":123,"_38":148,"_13":133,"_33":34,"_35":37,"_24":25,"_134":-5,"_149":150,"_27":151},["D",1783472375418],"children",[],[28],["D",1783471356849],["D",1789525245864],{"_97":96,"_104":100},{"_97":96,"_98":-5,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":14,"_32":87,"_43":42,"_88":44,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":45,"_95":96},"ctx",{"_80":-5,"_125":190,"_191":192,"_193":194,"_195":25,"_196":25,"_197":25,"_198":123,"_199":-5,"_200":-7,"_201":-7,"_202":61,"_203":25,"_204":25,"_205":-5,"_206":25,"_207":25,"_208":25,"_209":-5},"ENV",{"_161":162,"_163":164,"_165":87,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v4