[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_505":506,"_507":508},"routes/_app.x.$handle.$name",{"_98":97,"_32":46,"_107":88,"_27":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":60,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":-5,"_68":-5,"_69":-5,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",87,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","librarian/slack-utils.ts","latestPath","fileId","772dcb5a-6451-11f1-8681-1607ee4eb77e","name","slack-utils.ts","fileType","script","content","// Slack plumbing for the librarian bot: WebClient, request verification, status\n// updates, and thread → ModelMessage[] reconstruction. Lifted from the Val Town\n// ai-slackbot template (templates/ai-slackbot).\nimport { WebClient } from \"npm:@slack/web-api@7.14.1\";\nimport { ModelMessage } from \"npm:ai@6.0.92\";\n\nconst signingSecret = Deno.env.get(\"SLACK_SIGNING_SECRET\")!;\n\nexport const client = new WebClient(Deno.env.get(\"SLACK_BOT_TOKEN\"));\n\n// See https://api.slack.com/authentication/verifying-requests-from-slack\nexport async function isValidSlackRequest({\n request,\n rawBody,\n}: {\n request: Request;\n rawBody: string;\n}) {\n const timestamp = request.headers.get(\"X-Slack-Request-Timestamp\");\n const slackSignature = request.headers.get(\"X-Slack-Signature\");\n\n if (!timestamp || !slackSignature) {\n console.log(\"Missing timestamp or signature\");\n return false;\n }\n\n // Prevent replay attacks on the order of 5 minutes\n if (Math.abs(Date.now() / 1000 - parseInt(timestamp)) > 60 * 5) {\n console.log(\"Timestamp out of range\");\n return false;\n }\n\n const encoder = new TextEncoder();\n const base = `v0:${timestamp}:${rawBody}`;\n\n const key = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(signingSecret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n\n const signature = await crypto.subtle.sign(\n \"HMAC\",\n key,\n encoder.encode(base),\n );\n\n const hmacHex = Array.from(new Uint8Array(signature))\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n const computedSignature = encoder.encode(`v0=${hmacHex}`);\n const expectedSignature = encoder.encode(slackSignature);\n\n // Prevent timing attacks with constant-time comparison\n if (computedSignature.length !== expectedSignature.length) return false;\n let result = 0;\n for (let i = 0; i < computedSignature.length; i++) {\n result |= computedSignature[i] ^ expectedSignature[i];\n }\n return result === 0;\n}\n\nexport const verifyRequest = async ({\n requestType,\n request,\n rawBody,\n}: {\n requestType: string;\n request: Request;\n rawBody: string;\n}) => {\n const validRequest = await isValidSlackRequest({ request, rawBody });\n if (!validRequest || requestType !== \"event_callback\") {\n throw new Error(\"Invalid request\");\n }\n};\n\nexport const updateStatus = async (\n { channel, thread_ts, status }: {\n channel: string;\n thread_ts: string;\n status: string;\n },\n) => {\n await client.assistant.threads.setStatus({\n channel_id: channel,\n thread_ts: thread_ts,\n status: status,\n loading_messages: [\n \"shelving...\",\n \"cataloguing...\",\n \"thinking...\",\n \"cross-referencing...\",\n \"filing...\",\n \"indexing...\",\n ],\n });\n};\n\nexport async function getThread(\n channel_id: string,\n thread_ts: string,\n botUserId: string,\n): Promise {\n const { messages } = await client.conversations.replies({\n channel: channel_id,\n ts: thread_ts,\n limit: 50,\n });\n\n if (!messages) throw new Error(\"No messages found in thread\");\n\n const result = messages\n .map((message) => {\n const isBot = !!message.bot_id;\n if (!message.text) return null;\n\n // For app mentions, remove the mention prefix; keep IM text as-is.\n let content = message.text;\n if (!isBot && content.includes(`<@${botUserId}>`)) {\n content = content.replace(`<@${botUserId}> `, \"\");\n }\n\n return {\n role: isBot ? \"assistant\" : \"user\",\n content: content,\n } as ModelMessage;\n })\n .filter((msg): msg is ModelMessage => msg !== null);\n\n return result;\n}\n\nexport const getBotId = async () => {\n const { user_id: botUserId } = await client.auth.test();\n\n if (!botUserId) {\n throw new Error(\"botUserId is undefined\");\n }\n return botUserId;\n};\n","// Slack plumbing for the librarian bot: WebClient, request verification, status\n// updates, and thread → ModelMessage[] reconstruction. Lifted from the Val Town\n// ai-slackbot template (templates/ai-slackbot).\nimport { WebClient } from \"npm:@slack/web-api@7.14.1\";\nimport type { ChatPostMessageArguments } from \"npm:@slack/web-api@7.14.1\";\nimport { ModelMessage } from \"npm:ai@6.0.92\";\n\nconst signingSecret = Deno.env.get(\"SLACK_SIGNING_SECRET\")!;\n\nexport const client = new WebClient(Deno.env.get(\"SLACK_BOT_TOKEN\"));\n\n// The owl avatar (librarian/icon.ts, served at /icon.png by events.ts). The\n// /process route sets this from its own request URL, so forks pick up their\n// own endpoint with no config.\nlet botIconUrl: string | undefined;\nexport const setBotIconUrl = (url: string) => {\n botIconUrl = url;\n};\n\n// chat.postMessage wearing the owl. icon_url needs the chat:write.customize\n// scope — installs that predate it get the message without the icon instead\n// of an error.\nexport const postMessage = async (args: ChatPostMessageArguments) => {\n if (botIconUrl) {\n try {\n return await client.chat.postMessage({ ...args, icon_url: botIconUrl });\n } catch (err) {\n const code = (err as { data?: { error?: string } })?.data?.error;\n if (code !== \"missing_scope\" && code !== \"invalid_arguments\") throw err;\n console.log(`icon_url rejected (${code}); posting without it`);\n }\n }\n return await client.chat.postMessage(args);\n};\n\n// See https://api.slack.com/authentication/verifying-requests-from-slack\nexport async function isValidSlackRequest({\n request,\n rawBody,\n}: {\n request: Request;\n rawBody: string;\n}) {\n const timestamp = request.headers.get(\"X-Slack-Request-Timestamp\");\n const slackSignature = request.headers.get(\"X-Slack-Signature\");\n\n if (!timestamp || !slackSignature) {\n console.log(\"Missing timestamp or signature\");\n return false;\n }\n\n // Prevent replay attacks on the order of 5 minutes\n if (Math.abs(Date.now() / 1000 - parseInt(timestamp)) > 60 * 5) {\n console.log(\"Timestamp out of range\");\n return false;\n }\n\n const encoder = new TextEncoder();\n const base = `v0:${timestamp}:${rawBody}`;\n\n const key = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(signingSecret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n\n const signature = await crypto.subtle.sign(\n \"HMAC\",\n key,\n encoder.encode(base),\n );\n\n const hmacHex = Array.from(new Uint8Array(signature))\n .map((b) => b.toString(16).padStart(2, \"0\"))\n .join(\"\");\n const computedSignature = encoder.encode(`v0=${hmacHex}`);\n const expectedSignature = encoder.encode(slackSignature);\n\n // Prevent timing attacks with constant-time comparison\n if (computedSignature.length !== expectedSignature.length) return false;\n let result = 0;\n for (let i = 0; i < computedSignature.length; i++) {\n result |= computedSignature[i] ^ expectedSignature[i];\n }\n return result === 0;\n}\n\nexport const verifyRequest = async ({\n requestType,\n request,\n rawBody,\n}: {\n requestType: string;\n request: Request;\n rawBody: string;\n}) => {\n const validRequest = await isValidSlackRequest({ request, rawBody });\n if (!validRequest || requestType !== \"event_callback\") {\n throw new Error(\"Invalid request\");\n }\n};\n\nexport const updateStatus = async (\n { channel, thread_ts, status }: {\n channel: string;\n thread_ts: string;\n status: string;\n },\n) => {\n await client.assistant.threads.setStatus({\n channel_id: channel,\n thread_ts: thread_ts,\n status: status,\n loading_messages: [\n \"shelving...\",\n \"cataloguing...\",\n \"thinking...\",\n \"cross-referencing...\",\n \"filing...\",\n \"indexing...\",\n ],\n });\n};\n\nexport async function getThread(\n channel_id: string,\n thread_ts: string,\n botUserId: string,\n): Promise {\n const { messages } = await client.conversations.replies({\n channel: channel_id,\n ts: thread_ts,\n limit: 50,\n });\n\n if (!messages) throw new Error(\"No messages found in thread\");\n\n const result = messages\n .map((message) => {\n const isBot = !!message.bot_id;\n if (!message.text) return null;\n\n // For app mentions, remove the mention prefix; keep IM text as-is.\n let content = message.text;\n if (!isBot && content.includes(`<@${botUserId}>`)) {\n content = content.replace(`<@${botUserId}> `, \"\");\n }\n\n return {\n role: isBot ? \"assistant\" : \"user\",\n content: content,\n } as ModelMessage;\n })\n .filter((msg): msg is ModelMessage => msg !== null);\n\n return result;\n}\n\nexport const getBotId = async () => {\n const { user_id: botUserId } = await client.auth.test();\n\n if (!botUserId) {\n throw new Error(\"botUserId is undefined\");\n }\n return botUserId;\n};\n","createdAt",["D",1781113796032],"branchVersion","branchId","7c862450-0674-426e-9c69-ceda93eca788","id","6852d2a6-72e8-40e3-b5f0-53b7f8f82e7f","skills",["D",1780679910046],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Shareable agent skill library","imageUrl","9319c175-2593-4f88-ba21-04f2ef7b1c28","pinnedFileId","92861134-6102-11f1-a0c5-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",1,"orgId","d663a026-6449-42f6-9156-1d4a2d64d38c","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":56,"_103":104,"_105":25},"branch",{"_13":87,"_32":88,"_44":43,"_89":45,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":46,"_96":97},"isOwned",96,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","dcm31","handle","displayName","Charlie","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/3e904faa-3764-4629-c475-f561a49b0000/square512?exp=1789574399&sig=a925208509ae04f12f2c0946312b0486500a05bf884a2b0f9b9455e5f9f79132","tier","pro","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_32":46,"_39":501,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":-5,"_68":-5,"_69":-5,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":502,"_82":503,"_84":504,"_86":25},"tree",[205,212,214,217,228,243,244,245],"files",[205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245],"counts",{"_193":173,"_194":195,"_196":195,"_197":198,"_199":200},"contents",[129,130,131,132,133,134,135,136],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":187,"_32":188,"_30":189,"_140":-5,"_42":43,"_41":190,"_142":60,"_39":191,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_27":192},{"_44":181,"_32":182,"_30":183,"_140":-5,"_42":43,"_41":184,"_142":60,"_39":185,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_27":186},{"_44":175,"_32":176,"_30":177,"_140":-5,"_42":43,"_41":178,"_142":60,"_39":179,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_27":180},{"_44":169,"_32":170,"_30":171,"_140":-5,"_42":43,"_41":141,"_142":60,"_39":172,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_27":174},{"_44":163,"_32":46,"_30":164,"_140":-5,"_42":43,"_41":165,"_142":60,"_39":166,"_13":64,"_34":167,"_36":-5,"_24":25,"_145":-5,"_27":168},{"_44":155,"_32":156,"_30":157,"_140":-5,"_42":43,"_41":158,"_142":25,"_39":159,"_13":160,"_34":20,"_36":161,"_24":25,"_145":-5,"_27":162},{"_44":147,"_32":148,"_30":58,"_140":-5,"_42":43,"_41":149,"_142":60,"_39":150,"_13":151,"_34":152,"_36":153,"_24":25,"_145":-5,"_27":154},{"_44":137,"_32":138,"_30":139,"_140":-5,"_42":43,"_41":141,"_142":60,"_39":143,"_13":64,"_34":35,"_36":144,"_24":25,"_145":-5,"_27":146},"64cd3c2b-9f72-4ee3-9ed8-00e2a37484eb","og.ts","8a603662-6128-11f1-abe9-1607ee4eb77e","parentId",74,"latest",["D",1781043647946],"// Open Graph / Twitter card image (1200×630), generated with satori (JSX→SVG)\n// + resvg-wasm (SVG→PNG). Served at GET /og.png. Light/blue theme to match the\n// Skill Library UI. Modeled on stevekrouse/agentfax's og.ts.\nimport satori from \"npm:satori@0.10.13\";\nimport { initWasm, Resvg } from \"npm:@resvg/resvg-wasm@2.6.2\";\n\n// Static-weight TTFs (variable fonts crash satori's opentype.js).\nconst SANS_BOLD_TTF =\n \"https://raw.githubusercontent.com/google/fonts/main/ofl/ptsans/PT_Sans-Web-Bold.ttf\";\nconst SANS_REGULAR_TTF =\n \"https://raw.githubusercontent.com/google/fonts/main/ofl/ptsans/PT_Sans-Web-Regular.ttf\";\nconst RESVG_WASM_URL = \"https://unpkg.com/@resvg/resvg-wasm@2.6.2/index_bg.wasm\";\n\nlet fontsPromise: Promise<{ bold: ArrayBuffer; regular: ArrayBuffer }> | null = null;\nfunction loadFonts() {\n if (!fontsPromise) {\n const get = (url: string, label: string) =>\n fetch(url).then((r) => {\n if (!r.ok) throw new Error(`${label} font fetch failed: ${r.status}`);\n return r.arrayBuffer();\n });\n fontsPromise = Promise.all([\n get(SANS_BOLD_TTF, \"Bold\"),\n get(SANS_REGULAR_TTF, \"Regular\"),\n ]).then(([bold, regular]) => ({ bold, regular }));\n }\n return fontsPromise;\n}\n\nlet wasmPromise: Promise | null = null;\nfunction ensureResvg(): Promise {\n if (!wasmPromise) {\n wasmPromise = fetch(RESVG_WASM_URL)\n .then((r) => {\n if (!r.ok) throw new Error(`resvg wasm fetch failed: ${r.status}`);\n return r.arrayBuffer();\n })\n .then((bytes) => initWasm(bytes));\n }\n return wasmPromise;\n}\n\nfunction pill(text: string) {\n return {\n type: \"div\",\n props: {\n style: {\n display: \"flex\",\n fontSize: 26,\n color: \"#404040\",\n background: \"#f5f5f5\",\n border: \"1px solid #e5e5e5\",\n borderRadius: \"999px\",\n padding: \"12px 28px\",\n },\n children: text,\n },\n };\n}\n\n// A stacked-cards \"library\" glyph as a satori SVG node (0–32 grid), scaled to `size`.\nfunction stackIcon(size: number) {\n return {\n type: \"svg\",\n props: {\n width: size,\n height: size,\n viewBox: \"0 0 32 32\",\n children: [\n { type: \"rect\", props: { x: 9, y: 3, width: 18, height: 22, rx: 3, fill: \"#bfdbfe\" } },\n { type: \"rect\", props: { x: 6, y: 6, width: 18, height: 22, rx: 3, fill: \"#60a5fa\" } },\n { type: \"rect\", props: { x: 3, y: 9, width: 18, height: 22, rx: 3, fill: \"#2563eb\" } },\n { type: \"rect\", props: { x: 6, y: 14, width: 12, height: 1.6, rx: 0.8, fill: \"#ffffff\" } },\n { type: \"rect\", props: { x: 6, y: 18, width: 9, height: 1.6, rx: 0.8, fill: \"#ffffff\" } },\n { type: \"rect\", props: { x: 6, y: 22, width: 11, height: 1.6, rx: 0.8, fill: \"#dbeafe\" } },\n ],\n },\n };\n}\n\nasync function renderSvg(count: number): Promise {\n const { bold, regular } = await loadFonts();\n const tree = {\n type: \"div\",\n props: {\n style: {\n width: \"1200px\",\n height: \"630px\",\n display: \"flex\",\n background: \"#fafafa\",\n padding: \"56px\",\n fontFamily: \"Sans\",\n },\n children: [\n {\n type: \"div\",\n props: {\n style: {\n flex: 1,\n display: \"flex\",\n flexDirection: \"row\",\n alignItems: \"center\",\n justifyContent: \"space-between\",\n padding: \"0 72px\",\n border: \"1px solid #e5e5e5\",\n borderRadius: \"28px\",\n background: \"#ffffff\",\n },\n children: [\n {\n type: \"div\",\n props: {\n style: { display: \"flex\", flexDirection: \"column\", maxWidth: \"640px\" },\n children: [\n {\n type: \"div\",\n props: {\n style: { display: \"flex\", fontSize: 28, fontWeight: 700, color: \"#2563eb\", letterSpacing: \"6px\" },\n children: \"SKILL LIBRARY\",\n },\n },\n {\n type: \"div\",\n props: {\n style: { display: \"flex\", fontSize: 104, fontWeight: 700, color: \"#171717\", letterSpacing: \"-3px\", marginTop: \"18px\" },\n children: \"Skill Library\",\n },\n },\n {\n type: \"div\",\n props: {\n style: { display: \"flex\", fontSize: 36, color: \"#525252\", lineHeight: 1.35, marginTop: \"20px\" },\n children: \"A shared library of reusable agent skills. Fork it and drop in your own.\",\n },\n },\n {\n type: \"div\",\n props: {\n style: { display: \"flex\", flexDirection: \"row\", gap: \"14px\", marginTop: \"34px\" },\n children: [pill(`${count} skill${count === 1 ? \"\" : \"s\"}`), pill(\"Built on Val Town\")],\n },\n },\n ],\n },\n },\n stackIcon(300),\n ],\n },\n },\n ],\n },\n };\n return await satori(tree as any, {\n width: 1200,\n height: 630,\n fonts: [\n { name: \"Sans\", data: bold, weight: 700, style: \"normal\" },\n { name: \"Sans\", data: regular, weight: 400, style: \"normal\" },\n ],\n });\n}\n\nexport async function renderOg(count: number): Promise {\n try {\n const svg = await renderSvg(count);\n await ensureResvg();\n const png = new Resvg(svg).render().asPng();\n return new Response(png, {\n headers: { \"content-type\": \"image/png\", \"cache-control\": \"public, max-age=3600\" },\n });\n } catch (err) {\n const msg = err instanceof Error ? err.stack || err.message : String(err);\n return new Response(`OG render failed:\\n${msg}`, {\n status: 500,\n headers: { \"content-type\": \"text/plain\" },\n });\n }\n}\n","label",[138],"19766fde-9f08-4b02-9e26-28f14bb3ad88","http.tsx",83,["D",1781045202033],16,"http","/** @jsxImportSource npm:hono@4/jsx */\n// Skill Library — thin HTTP orchestrator for the public catalog. Routes only;\n// markup lives in components/, data + helpers in lib/skills.ts, client JS in\n// frontend/client.js. A skill is just a folder under skills/ — the catalog is\n// derived at runtime from each SKILL.md's frontmatter (no manifest). See\n// README.md. (The Slack \"skills librarian\" bot lives in librarian/.)\n\nimport { Hono } from \"npm:hono@4\";\nimport { marked } from \"npm:marked@15\";\nimport { readFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\n\nimport {\n buildCopyPayload,\n esc,\n exampleAsset,\n getSkill,\n getSkills,\n parseFrontmatter,\n readSkillFile,\n} from \"./lib/skills.ts\";\nimport { librarianBar } from \"./lib/vt.ts\";\nimport { renderOg } from \"./og.ts\";\nimport { Layout } from \"./components/Layout.tsx\";\nimport { Home } from \"./components/Home.tsx\";\nimport { SkillDetail } from \"./components/SkillDetail.tsx\";\nimport { FileView } from \"./components/FileView.tsx\";\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err)); // full stack traces in logs\n\nconst origin = (c: { req: { url: string } }) => new URL(c.req.url).origin;\n\n// ── Public assets ────────────────────────────────────────────────────────────\n\napp.get(\"/client.js\", async () => {\n const js = await readFile(\"/frontend/client.js\", import.meta.url);\n return new Response(js, {\n headers: { \"content-type\": \"text/javascript; charset=utf-8\" },\n });\n});\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// Social card image (Open Graph / Twitter)\napp.get(\"/og.png\", async () => renderOg((await getSkills()).length));\n\n// ── Pages ────────────────────────────────────────────────────────────────────\n\napp.get(\"/\", async (c) => {\n const librarian = await librarianBar();\n if (c.req.query(\"nudge\") === \"1\") librarian.connected = false; // ?nudge=1 previews the not-connected nudge\n if (c.req.query(\"nodm\") === \"1\") librarian.dmUrl = null; // ?nodm=1 previews the \"Add to Slack\" state\n return c.html(\n \n \n ,\n );\n});\n\napp.get(\"/skills/:slug\", async (c) => {\n const skill = await getSkill(c.req.param(\"slug\"));\n if (!skill) return c.notFound();\n const rawMd = await readSkillFile(skill.slug, \"SKILL.md\");\n if (!rawMd) return c.notFound();\n const { body } = parseFrontmatter(rawMd);\n const html = await marked.parse(body);\n const payload = buildCopyPayload(skill, rawMd); // payload keeps frontmatter — that IS the skill format\n // Live preview = the skill's first assets/*.html (see lib/skills.ts).\n const examplePath = exampleAsset(skill);\n const exampleHtml = examplePath\n ? (await readSkillFile(skill.slug, examplePath)) ?? undefined\n : undefined;\n return c.html(\n \n \n ,\n );\n});\n\n// Standalone, embeddable render of a skill's live example asset. Same design\n// system, no surrounding app chrome.\napp.get(\"/skills/:slug/example\", async (c) => {\n const skill = await getSkill(c.req.param(\"slug\"));\n const examplePath = skill && exampleAsset(skill);\n if (!skill || !examplePath) return c.notFound();\n const html = await readSkillFile(skill.slug, examplePath);\n if (html == null) return c.notFound();\n return c.html(\n \n \n ← {skill.name}\n \n

\n {skill.name} — examples\n

\n ,\n );\n});\n\napp.get(\"/skills/:slug/files/*\", async (c) => {\n const skill = await getSkill(c.req.param(\"slug\"));\n if (!skill) return c.notFound();\n const path = c.req.path.replace(`/skills/${skill.slug}/files/`, \"\");\n if (!skill.files.includes(path)) return c.notFound();\n const content = await readSkillFile(skill.slug, path);\n if (content === null) return c.notFound();\n const isMarkdown = path.endsWith(\".md\");\n const rendered = isMarkdown\n ? await marked.parse(parseFrontmatter(content).body)\n : `

${esc(content)}

`;\n return c.html(\n \n \n ,\n );\n});\n\nexport default app.fetch;\n",[148],"9c1bb9eb-0d34-4690-8016-98b49a23e342","README.md","6f71b83e-611a-11f1-b6b7-1607ee4eb77e",85,["D",1781104598135],17,"# Skill Library\n\nA directory of reusable **agent skills**. Each skill is a folder of Markdown and\ncode; the app renders every skill's `SKILL.md` and gives you a one-click **Copy\nskill** button that puts a ready-to-run payload on your clipboard.\n\nA skill is **just a folder** — drop `skills//SKILL.md` in and it shows up.\nThere's also a **Slack \"Skills Librarian\"** bot (in `librarian/`) that can list,\nexplain, and CRUD skills by chat.\n\n🔗 **Catalog:** https://dcm31--92861134610211f1a0c51607ee4eb77e.web.val.run\n\n## How a skill is structured\n\nA skill is a folder under `skills//` following the standard Agent-Skills\nlayout, so it stays valid and discoverable by agents reading it outside this\napp:\n\n```\nskills//\n SKILL.md # entry point — what the skill does and the flow to follow\n scripts/ # runnable code the agent writes locally\n knowledge/ # reference docs the agent reads for context\n assets/ # optional HTML fragment, shown as a live example\n```\n\nOnly `SKILL.md` is required. Its YAML frontmatter is the skill's metadata.\n\n```markdown\n---\nname: PR Summarizer\ndescription: Reads a GitHub PR diff and writes a release note. Use when…\ncategory: Engineering\n---\n\n# PR Summarizer\n\n…the instructions an agent follows…\n```\n\nThe catalog is derived at request time: the app lists `skills/*`, reads each\n`SKILL.md`'s frontmatter for `name` / `description` / `category`, and collects\nthe folder's files. Add a folder → it appears. Edit frontmatter → the card\nupdates. (`name` falls back to a title-cased slug, `category` to\n\"Uncategorized\", if you omit them.)\n\n## Managing skills\n\nThree ways, in increasing convenience:\n\n1. **The Slack Skills Librarian** (see below) — \"list the skills\", \"how does X\n work\", \"create a skill that…\", \"change the UI skill to…\".\n2. **A coding agent** via the Val Town plugin (Claude Code / Codex / Cursor):\n `npx plugins add val-town/plugins`, then ask it to add or edit a skill.\n3. **By hand** in the Val Town editor — a skill's body is plain Markdown, so a\n typo fix is a two-second edit that deploys on save.\n\n## The Slack Skills Librarian (`librarian/`)\n\nA Slack agent (Claude + the Vercel AI SDK, built on the `templates/ai-slackbot`\nquickstart) that manages this library through a small set of structured tools.\nThe design split: **reads are broad, writes are deliberate.**\n\n| Tool | What it does |\n| -------------------------------- | ----------------------------------------------------------------- |\n| `list_skills` | Lightweight catalog (name / category / description) |\n| `read_skill` / `read_skill_file` | Read a skill's SKILL.md or a supporting file |\n| `create_skill` | New skill — writes the folder + SKILL.md with correct frontmatter |\n| `update_skill` | Change metadata, body, or one file of an existing skill |\n| `delete_skill` | Remove a skill (guarded by an explicit `confirm`) |\n\n`create_skill` / `update_skill` own the folder-and-frontmatter shape, so the bot\ncan't produce a malformed skill, and every write is scoped to this val's\n`skills/` folder. Reads use `std/utils` (token-free); writes use the Val Town\nREST API with a token (`VALTOWN_TOKEN`) and target the **current branch**, so on\nthe `librarian` branch new skills land on the branch until you merge to `main`.\n\n### Setup\n\n1. Open the bot's HTTP endpoint (the `librarian/events.ts` file's URL) and click\n **Create Slack App →** — scopes, events, and the webhook URL are pre-filled\n from a manifest.\n2. Install the app to your workspace, then set these environment variables on\n this val:\n - `SLACK_BOT_TOKEN`, `SLACK_SIGNING_SECRET` — from the Slack app\n - `ANTHROPIC_API_KEY` — for the model\n - `SLACK_APP_ID` _(optional)_ — powers the catalog toolbar's \"DM the\n librarian\" link\n3. **Authorize Val Town writes** with one click on the `/connect` page (the\n `librarian/connect.ts` endpoint — also surfaced from the catalog's bottom\n bar). That stores a self-refreshing OAuth token so the librarian can create &\n edit skills. No API token to create or paste.\n4. Message the bot in its Assistant tab or `@mention` it in a channel.\n\n> Prefer a token over OAuth (or running headless)? Set `VALTOWN_TOKEN` to a Val\n> Town API token with val write access and the librarian uses that instead — it\n> takes priority. Either way, only the skill-CRUD tools touch it.\n\n---\n\n## Live examples\n\nA skill can ship a live preview — a working UI rendered right on its page. Drop\nan HTML fragment in the skill's `assets/` folder (e.g. `assets/showcase.html`)\nand reference it from `SKILL.md` with a Markdown link. The app renders the first\n`assets/*.html` it finds as an **Examples** panel, and serves it standalone\n(iframe-embeddable) at `/skills//example`. The **ui-example** skill ships\none and walks through the feature.\n\n## Technical details\n\n### Files\n\n```\nhttp.tsx # public catalog routes\nlib/skills.ts # skill discovery (folder → catalog), file + copy-payload helpers, frontmatter parse\nlib/vt.ts # Val Town REST client: skill writes + a catalog read-list fallback\nog.ts # social card image\ncomponents/ # Layout, Home, SkillDetail, FileView, FileTree\nfrontend/client.js # clipboard wiring for [data-copy] buttons\nskills// # the skills themselves (source of truth)\nlibrarian/ # the Slack Skills Librarian bot\n events.ts # HTTP entry: setup page + Slack /events + /process\n generate-response.ts # the agent loop (Claude + tools)\n skill-tools.ts # list / read / create / update / delete tools\n slack-utils.ts # Slack client, verification, thread reconstruction\n handle-*.ts # app_mention / message / thread_started handlers\n prompt.md # librarian system prompt\n```\n\n### Catalog routes\n\n| Route | Purpose |\n| ---------------------------------- | --------------------------------------------------------------- |\n| `/` | Home — grid of skill cards |\n| `/skills/:slug` | Skill detail — rendered `SKILL.md`, Copy button, file tree |\n| `/skills/:slug/example` | Standalone live example (when a skill ships an `assets/*.html`) |\n| `/skills/:slug/files/*` | Raw file viewer |\n| `/client.js`, `/source`, `/og.png` | Clipboard JS, source redirect, social card |\n\n### Gating it to your team\n\nBy default the catalog is public. To restrict it to a Val Town org, sign\nrequests through `std/oauth` and check the signed-in user against your org's\nmembers (wrap the `http.tsx` `fetch` export with the OAuth middleware). Requires\na Teams account.",[156],"208bcc7a-dbb3-4d97-b6b5-79f20ea31507","a1b35e7d-59ce-4d6b-8738-2d706101a7d2",60,["D",1780696519223],"directory",[46],"0ec00c07-4172-455a-a089-4640bf5fb515","librarian","019eae79-55cb-7558-864f-4ba98efbe737",["D",1781043647946],0,[170],"7bda0f03-93e2-4732-a3a6-6a2e07040a64","lib","12f0707e-2c4a-41a9-92ef-370a78c04011",8,["D",1780690030621],[176],"13306b3b-c86a-4aed-acf5-e5718b8ed0da","frontend","0f3784d6-e4a2-4781-a7f4-2d6a3fea5d8d",9,["D",1780690033369],[182],"09b94b55-391d-44c3-9b5c-7c1312d29db4","components","d0b511be-7c7d-403e-addd-624c52fec544",10,["D",1780690053093],[188],"pulls","branches",2,"forks","envVars",{"_201":203,"_204":203},"connections",{"_201":173,"_202":173},"count","unfilledCount",4,"emptyCount",{"_44":187,"_32":188,"_30":189,"_140":-5,"_42":43,"_41":190,"_142":60,"_39":498,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_247":499,"_27":500},{"_44":490,"_32":491,"_30":492,"_140":189,"_42":43,"_41":493,"_142":60,"_39":494,"_13":64,"_34":35,"_36":495,"_24":25,"_145":-5,"_247":496,"_27":497},{"_44":482,"_32":483,"_30":484,"_140":189,"_42":43,"_41":485,"_142":60,"_39":486,"_13":64,"_34":35,"_36":487,"_24":25,"_145":-5,"_247":488,"_27":489},{"_44":475,"_32":476,"_30":477,"_140":189,"_42":43,"_41":141,"_142":60,"_39":478,"_13":195,"_34":35,"_36":479,"_24":25,"_145":-5,"_247":480,"_27":481},{"_44":468,"_32":469,"_30":470,"_140":189,"_42":43,"_41":141,"_142":60,"_39":471,"_13":308,"_34":35,"_36":472,"_24":25,"_145":-5,"_247":473,"_27":474},{"_44":460,"_32":461,"_30":462,"_140":189,"_42":43,"_41":463,"_142":60,"_39":464,"_13":319,"_34":35,"_36":465,"_24":25,"_145":-5,"_247":466,"_27":467},{"_44":452,"_32":453,"_30":454,"_140":189,"_42":43,"_41":455,"_142":60,"_39":456,"_13":195,"_34":35,"_36":457,"_24":25,"_145":-5,"_247":458,"_27":459},{"_44":181,"_32":182,"_30":183,"_140":-5,"_42":43,"_41":184,"_142":60,"_39":449,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_247":450,"_27":451},{"_44":442,"_32":443,"_30":444,"_140":183,"_42":43,"_41":184,"_142":60,"_39":445,"_13":173,"_34":35,"_36":446,"_24":25,"_145":-5,"_247":447,"_27":448},{"_44":175,"_32":176,"_30":177,"_140":-5,"_42":43,"_41":178,"_142":60,"_39":439,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_247":440,"_27":441},{"_44":432,"_32":433,"_30":434,"_140":177,"_42":43,"_41":141,"_142":60,"_39":435,"_13":203,"_34":35,"_36":436,"_24":25,"_145":-5,"_247":437,"_27":438},{"_44":424,"_32":425,"_30":426,"_140":177,"_42":43,"_41":427,"_142":60,"_39":428,"_13":195,"_34":35,"_36":429,"_24":25,"_145":-5,"_247":430,"_27":431},{"_44":169,"_32":170,"_30":171,"_140":-5,"_42":43,"_41":141,"_142":60,"_39":421,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_247":422,"_27":423},{"_44":414,"_32":415,"_30":416,"_140":171,"_42":43,"_41":141,"_142":60,"_39":417,"_13":173,"_34":152,"_36":418,"_24":25,"_145":-5,"_247":419,"_27":420},{"_44":406,"_32":407,"_30":408,"_140":171,"_42":43,"_41":409,"_142":25,"_39":410,"_13":64,"_34":152,"_36":411,"_24":25,"_145":-5,"_247":412,"_27":413},{"_44":399,"_32":400,"_30":401,"_140":171,"_42":43,"_41":141,"_142":60,"_39":402,"_13":173,"_34":35,"_36":403,"_24":25,"_145":-5,"_247":404,"_27":405},{"_44":392,"_32":393,"_30":394,"_140":171,"_42":43,"_41":141,"_142":25,"_39":395,"_13":173,"_34":35,"_36":396,"_24":25,"_145":-5,"_247":397,"_27":398},{"_44":385,"_32":386,"_30":387,"_140":171,"_42":43,"_41":141,"_142":25,"_39":388,"_13":173,"_34":35,"_36":389,"_24":25,"_145":-5,"_247":390,"_27":391},{"_44":378,"_32":379,"_30":380,"_140":171,"_42":43,"_41":141,"_142":25,"_39":381,"_13":173,"_34":35,"_36":382,"_24":25,"_145":-5,"_247":383,"_27":384},{"_44":370,"_32":371,"_30":372,"_140":171,"_42":43,"_41":373,"_142":25,"_39":374,"_13":173,"_34":35,"_36":375,"_24":25,"_145":-5,"_247":376,"_27":377},{"_44":363,"_32":364,"_30":365,"_140":171,"_42":43,"_41":141,"_142":60,"_39":366,"_13":173,"_34":20,"_36":367,"_24":25,"_145":-5,"_247":368,"_27":369},{"_44":356,"_32":357,"_30":358,"_140":171,"_42":43,"_41":141,"_142":60,"_39":359,"_13":173,"_34":35,"_36":360,"_24":25,"_145":-5,"_247":361,"_27":362},{"_44":352,"_32":33,"_30":31,"_140":171,"_42":43,"_41":14,"_142":60,"_39":353,"_13":64,"_34":35,"_36":38,"_24":25,"_145":-5,"_247":354,"_27":355},{"_44":163,"_32":46,"_30":164,"_140":-5,"_42":43,"_41":165,"_142":60,"_39":349,"_13":64,"_34":167,"_36":-5,"_24":25,"_145":-5,"_247":350,"_27":351},{"_44":344,"_32":330,"_30":325,"_140":164,"_42":43,"_41":345,"_142":60,"_39":346,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_247":347,"_27":348},{"_44":340,"_32":313,"_30":334,"_140":325,"_42":43,"_41":335,"_142":60,"_39":341,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_247":342,"_27":343},{"_44":331,"_32":332,"_30":333,"_140":334,"_42":43,"_41":335,"_142":60,"_39":336,"_13":173,"_34":20,"_36":337,"_24":25,"_145":-5,"_247":338,"_27":339},{"_44":323,"_32":257,"_30":324,"_140":325,"_42":43,"_41":141,"_142":60,"_39":326,"_13":64,"_34":20,"_36":327,"_24":25,"_145":-5,"_247":328,"_27":329},{"_44":318,"_32":290,"_30":285,"_140":164,"_42":43,"_41":319,"_142":60,"_39":320,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_247":321,"_27":322},{"_44":314,"_32":313,"_30":307,"_140":285,"_42":43,"_41":308,"_142":60,"_39":315,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_247":316,"_27":317},{"_44":304,"_32":305,"_30":306,"_140":307,"_42":43,"_41":308,"_142":60,"_39":309,"_13":173,"_34":20,"_36":310,"_24":25,"_145":-5,"_247":311,"_27":312},{"_44":300,"_32":299,"_30":294,"_140":285,"_42":43,"_41":203,"_142":60,"_39":301,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_247":302,"_27":303},{"_44":291,"_32":292,"_30":293,"_140":294,"_42":43,"_41":203,"_142":60,"_39":295,"_13":173,"_34":35,"_36":296,"_24":25,"_145":-5,"_247":297,"_27":298},{"_44":283,"_32":257,"_30":284,"_140":285,"_42":43,"_41":141,"_142":60,"_39":286,"_13":64,"_34":20,"_36":287,"_24":25,"_145":-5,"_247":288,"_27":289},{"_44":279,"_32":264,"_30":259,"_140":164,"_42":43,"_41":160,"_142":60,"_39":280,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_247":281,"_27":282},{"_44":275,"_32":274,"_30":268,"_140":259,"_42":43,"_41":269,"_142":60,"_39":276,"_13":173,"_34":167,"_36":-5,"_24":25,"_145":-5,"_247":277,"_27":278},{"_44":265,"_32":266,"_30":267,"_140":268,"_42":43,"_41":269,"_142":60,"_39":270,"_13":173,"_34":20,"_36":271,"_24":25,"_145":-5,"_247":272,"_27":273},{"_44":256,"_32":257,"_30":258,"_140":259,"_42":43,"_41":141,"_142":60,"_39":260,"_13":178,"_34":20,"_36":261,"_24":25,"_145":-5,"_247":262,"_27":263},{"_44":155,"_32":156,"_30":157,"_140":-5,"_42":43,"_41":158,"_142":25,"_39":253,"_13":160,"_34":20,"_36":161,"_24":25,"_145":-5,"_247":254,"_27":255},{"_44":147,"_32":148,"_30":58,"_140":-5,"_42":43,"_41":149,"_142":60,"_39":250,"_13":151,"_34":152,"_36":153,"_24":25,"_145":-5,"_247":251,"_27":252},{"_44":137,"_32":138,"_30":139,"_140":-5,"_42":43,"_41":141,"_142":60,"_39":246,"_13":64,"_34":35,"_36":144,"_24":25,"_145":-5,"_247":248,"_27":249},["D",1781043647946],"children",[],[138],["D",1781045202033],[],[148],["D",1781104598135],[],[156],"ed64a881-0960-4fb0-b3f3-d4782f61a9cb","SKILL.md","5b495132-611a-11f1-ac10-1607ee4eb77e","82af8637-3f7d-4a48-b2eb-33adcb23f00e",["D",1781043647946],"---\nname: UI Example\ndescription: Shows off the live-example feature — a skill that ships an HTML fragment, rendered inline on its page and standalone. Read it to learn how examples work.\ncategory: Reference\n---\n\n# UI Example\n\n> This skill exists to demonstrate the library's **live-example feature** — and to double as a quick reference for the design system every page here inherits. Scroll up: the **Examples** panel above this text is rendered live from the HTML fragment this skill ships.\n\n## What you're looking at\n\nA skill can ship a single HTML fragment under its `assets/` directory. When it does, two things happen automatically:\n\n1. It renders as an **Examples** panel at the top of the skill page (the box above).\n2. It's served on its own, full-bleed, at `/skills//example` — open it with the **\"Open standalone ↗\"** link. That URL is embeddable (drop it in an `

Diff · v87