[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_156":157,"_158":159},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":58,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",10,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.http.ts","latestPath","fileId","d019ab7e-a56c-11f1-9053-1607ee4eb77e","name","fileType","http","content","/**\n * Coin Scan API — Val Town HTTP val\n *\n * Paste this whole file into a new HTTP val, then add three environment\n * variables in the val's left sidebar:\n *\n * NUMISTA_API_KEY your Numista key (required)\n * VISION_API_KEY your Anthropic key (required)\n * ALLOWED_ORIGIN https://gr8fl4295.github.io\n *\n * Optional:\n * VISION_PROVIDER anthropic | openai | gemini (default anthropic)\n * VISION_MODEL pin a specific model\n *\n * This exists because the Numista licence requires API credentials stay\n * confidential, so they cannot ship in the client bundle.\n *\n * No images are stored. Frames are forwarded to the vision provider and\n * discarded when the request ends.\n */\n\nconst env = (k, fallback = null) => Deno.env.get(k) ?? fallback;\n\nconst NUMISTA_BASE = \"https://api.numista.com/v3\";\n\n// Only these are reachable upstream. An open passthrough would let anything\n// burn the monthly quota.\nconst ALLOWED_ENDPOINTS = new Set([\"types\", \"issuers\", \"catalogues\"]);\n\n/* ------------------------------------------------------------------ */\n\nexport default async function (req: Request): Promise {\n const origin = req.headers.get(\"Origin\") || \"\";\n const cors = corsHeaders(origin);\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n if (origin && !originAllowed(origin)) {\n return json({ error: \"origin_not_allowed\", origin }, 403, cors);\n }\n\n const url = new URL(req.url);\n const path = url.pathname.replace(/\\/+$/, \"\");\n\n try {\n if (path === \"\" || path === \"/\" || path === \"/api/health\") {\n return json(\n {\n ok: true,\n provider: env(\"VISION_PROVIDER\", \"anthropic\"),\n hasNumistaKey: !!env(\"NUMISTA_API_KEY\"),\n hasVisionKey: !!env(\"VISION_API_KEY\"),\n allowedOrigin: env(\"ALLOWED_ORIGIN\") || \"(not set)\",\n },\n 200,\n cors,\n );\n }\n\n // Diagnostic: confirms a POST of a given size reaches the val at all.\n if (path === \"/api/echo\" && req.method === \"POST\") {\n const text = await req.text();\n return json({ ok: true, receivedBytes: text.length }, 200, cors);\n }\n\n // Numista's docs have shown the key header written more than one way.\n // Rather than guess, try each and report which one the API accepts.\n // Confirms the vision key and model are accepted, with no images involved.\n if (path === \"/api/vision-test\") {\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": env(\"VISION_API_KEY\")!,\n \"anthropic-version\": \"2023-06-01\",\n ...(env(\"ANTHROPIC_WORKSPACE_ID\")\n ? { \"anthropic-workspace-id\": env(\"ANTHROPIC_WORKSPACE_ID\")! }\n : {}),\n },\n body: JSON.stringify({\n model: env(\"VISION_MODEL\", \"claude-sonnet-5\"),\n max_tokens: 16,\n messages: [{ role: \"user\", content: \"Reply with the word ok.\" }],\n }),\n });\n return json(\n {\n status: r.status,\n model: env(\"VISION_MODEL\", \"claude-sonnet-5\"),\n body: (await r.text()).slice(0, 500),\n },\n 200,\n cors,\n );\n }\n\n if (path === \"/api/numista-test\") {\n return json(await probeAuthHeader(), 200, cors);\n }\n\n if (path.startsWith(\"/api/numista/\")) {\n return await proxyNumista(path.slice(\"/api/numista/\".length), url, cors);\n }\n\n if (path === \"/api/extract\" && req.method === \"POST\") {\n return await extract(req, cors);\n }\n\n return json({ error: \"not_found\", path }, 404, cors);\n } catch (err) {\n return json(\n { error: \"server_error\", detail: String(err?.message ?? err) },\n 500,\n cors,\n );\n }\n}\n\n/* ---------------------------- CORS ---------------------------- */\n\nfunction originAllowed(origin: string) {\n const allowed = (env(\"ALLOWED_ORIGIN\", \"\") || \"\")\n .split(\",\").map((s) => s.trim()).filter(Boolean);\n return allowed.includes(origin) || origin.startsWith(\"http://localhost\");\n}\n\nfunction corsHeaders(origin: string) {\n return {\n \"Access-Control-Allow-Origin\": originAllowed(origin)\n ? origin\n : (env(\"ALLOWED_ORIGIN\") || \"*\"),\n \"Access-Control-Allow-Methods\": \"GET,POST,OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Access-Control-Max-Age\": \"86400\",\n \"Vary\": \"Origin\",\n };\n}\n\nfunction json(body: unknown, status: number, headers: Record) {\n return new Response(JSON.stringify(body), {\n status,\n headers: { ...headers, \"Content-Type\": \"application/json\" },\n });\n}\n\n/* -------------------------- Numista -------------------------- */\n\nfunction numistaHeaders() {\n return {\n \"Numista-API-Key\": env(\"NUMISTA_API_KEY\") ?? \"\",\n \"Accept\": \"application/json\",\n };\n}\n\nasync function proxyNumista(\n rest: string,\n url: URL,\n cors: Record,\n) {\n if (!env(\"NUMISTA_API_KEY\")) {\n return json({ error: \"numista_key_missing\" }, 500, cors);\n }\n\n const segments = rest.split(\"/\").filter(Boolean);\n if (!ALLOWED_ENDPOINTS.has(segments[0])) {\n return json(\n { error: \"endpoint_not_allowed\", endpoint: segments[0] },\n 403,\n cors,\n );\n }\n\n const target = new URL(`${NUMISTA_BASE}/${segments.join(\"/\")}`);\n for (const [k, v] of url.searchParams) target.searchParams.set(k, v);\n if (!target.searchParams.has(\"lang\")) target.searchParams.set(\"lang\", \"en\");\n\n const res = await fetch(target.toString(), { headers: numistaHeaders() });\n const body = await res.text();\n\n return new Response(body, {\n status: res.status,\n headers: {\n ...cors,\n \"Content-Type\": \"application/json\",\n // Catalogue data is never cached. The licence permits storing N#\n // identifiers indefinitely and metadata for at most 7 days; the app\n // keeps references only and re-fetches details on view.\n \"Cache-Control\": \"no-store\",\n },\n });\n}\n\n/** Diagnostic: which auth header does Numista actually accept? */\nasync function probeAuthHeader() {\n const key = env(\"NUMISTA_API_KEY\");\n if (!key) return { error: \"numista_key_missing\" };\n const url = `${NUMISTA_BASE}/types?q=cent&count=1&lang=en`;\n const candidates: Record> = {\n \"Numista-API-Key\": { \"Numista-API-Key\": key },\n \"X-API-Key\": { \"X-API-Key\": key },\n \"Authorization: Bearer\": { \"Authorization\": `Bearer ${key}` },\n };\n const results: Record = {};\n for (const [label, headers] of Object.entries(candidates)) {\n try {\n const r = await fetch(url, {\n headers: { ...headers, Accept: \"application/json\" },\n });\n results[label] = r.status;\n } catch {\n results[label] = -1;\n }\n }\n const working = Object.entries(results).find(([, s]) => s === 200)?.[0] ??\n null;\n return {\n results,\n working,\n note: working && working !== \"Numista-API-Key\"\n ? `Change numistaHeaders() to use ${working}`\n : \"Numista-API-Key is correct — no change needed\",\n };\n}\n\n/* ------------------------- Extraction ------------------------- */\n\nconst FIELDS = [\n \"country\",\n \"year\",\n \"denomination\",\n \"legend\",\n \"mintmark\",\n \"composition\",\n];\n\n// Instructs the model to leave fields null rather than guess. A null becomes an\n// editable Unknown field the user can fill in. A confident wrong guess is not\n// recoverable, and is exactly what the confidence system exists to prevent.\nconst PROMPT =\n `You are reading two photographs of the same coin: the obverse (front) and the reverse (back).\n\nReport only what is legible in the images. If a field cannot be read, set it to null and give it a confidence of 0. Never infer a value from numismatic knowledge — if the date is worn away, the date is null, even if you recognise the coin type.\n\nRespond with JSON only. No prose, no markdown fences.\n\n{\n \"country\": string|null,\n \"year\": string|null,\n \"denomination\": string|null,\n \"legend\": string|null,\n \"mintmark\": string|null,\n \"composition\": string|null,\n \"confidence\": {\n \"country\": 0.0-1.0, \"year\": 0.0-1.0, \"denomination\": 0.0-1.0,\n \"legend\": 0.0-1.0, \"mintmark\": 0.0-1.0, \"composition\": 0.0-1.0\n },\n \"notes\": string|null\n}\n\nField guidance:\n- country: modern English name of the issuing country or authority.\n- year: the four-digit date struck on the coin, as text.\n- denomination: face value with unit, e.g. \"1 Cent\", \"2 Euro\", \"50 Ore\".\n- legend: the most complete inscription you can read, uppercase.\n- mintmark: the mint letter only, or null if none is visible.\n- composition: only if the metal is confidently identifiable; otherwise null.\n- notes: one short sentence on anything limiting the read, such as wear or glare. Otherwise null.`;\n\nasync function extract(req: Request, cors: Record) {\n if (!env(\"VISION_API_KEY\")) {\n return json({ error: \"vision_key_missing\" }, 500, cors);\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ error: \"bad_json\" }, 400, cors);\n }\n\n const obverse = stripDataUrl(body?.obverse);\n const reverse = stripDataUrl(body?.reverse);\n if (!obverse || !reverse) {\n return json({ error: \"both_faces_required\" }, 400, cors);\n }\n if (obverse.length > 1_400_000 || reverse.length > 1_400_000) {\n return json(\n { error: \"image_too_large\", hint: \"resize to 1024px, JPEG q0.8\" },\n 413,\n cors,\n );\n }\n\n const provider = PROVIDERS[env(\"VISION_PROVIDER\", \"anthropic\")!];\n if (!provider) return json({ error: \"unknown_provider\" }, 500, cors);\n\n const started = Date.now();\n let raw: string;\n try {\n raw = await provider(PROMPT, obverse, reverse);\n } catch (err) {\n console.error(\"extract failed:\", err);\n return json(\n { error: \"vision_failed\", detail: String(err?.message ?? err) },\n 502,\n cors,\n );\n }\n\n const parsed = parseJson(raw);\n if (!parsed) {\n return json(\n { error: \"unparseable_response\", raw: raw.slice(0, 500) },\n 502,\n cors,\n );\n }\n\n return json(\n {\n attributes: normalise(parsed),\n notes: parsed.notes ?? null,\n ms: Date.now() - started,\n provider: env(\"VISION_PROVIDER\", \"anthropic\"),\n },\n 200,\n cors,\n );\n}\n\nconst PROVIDERS: Record<\n string,\n (p: string, o: string, r: string) => Promise\n> = {\n async anthropic(prompt, obverse, reverse) {\n const img = (data: string) => ({\n type: \"image\",\n source: { type: \"base64\", media_type: \"image/jpeg\", data },\n });\n const res = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": env(\"VISION_API_KEY\")!,\n \"anthropic-version\": \"2023-06-01\",\n ...(env(\"ANTHROPIC_WORKSPACE_ID\")\n ? { \"anthropic-workspace-id\": env(\"ANTHROPIC_WORKSPACE_ID\")! }\n : {}),\n },\n body: JSON.stringify({\n model: env(\"VISION_MODEL\", \"claude-sonnet-5\"),\n max_tokens: 1000,\n messages: [{\n role: \"user\",\n content: [\n { type: \"text\", text: \"Obverse (front):\" },\n img(obverse),\n { type: \"text\", text: \"Reverse (back):\" },\n img(reverse),\n { type: \"text\", text: prompt },\n ],\n }],\n }),\n });\n if (!res.ok) {\n const detail = (await res.text()).slice(0, 500);\n console.error(\"anthropic rejected the request:\", res.status, detail);\n throw new Error(`anthropic ${res.status}: ${detail}`);\n }\n const d = await res.json();\n return (d.content ?? []).filter((b: any) => b.type === \"text\").map((\n b: any,\n ) => b.text).join(\"\\n\");\n },\n\n async openai(prompt, obverse, reverse) {\n const img = (data: string) => ({\n type: \"image_url\",\n image_url: { url: `data:image/jpeg;base64,${data}` },\n });\n const res = await fetch(\"https://api.openai.com/v1/chat/completions\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${env(\"VISION_API_KEY\")}`,\n },\n body: JSON.stringify({\n model: env(\"VISION_MODEL\", \"gpt-4o\"),\n max_tokens: 1000,\n messages: [{\n role: \"user\",\n content: [\n { type: \"text\", text: \"Obverse (front):\" },\n img(obverse),\n { type: \"text\", text: \"Reverse (back):\" },\n img(reverse),\n { type: \"text\", text: prompt },\n ],\n }],\n }),\n });\n if (!res.ok) {\n throw new Error(\n `openai ${res.status}: ${(await res.text()).slice(0, 300)}`,\n );\n }\n const d = await res.json();\n return d.choices?.[0]?.message?.content ?? \"\";\n },\n\n async gemini(prompt, obverse, reverse) {\n const model = env(\"VISION_MODEL\", \"gemini-2.0-flash\");\n const res = await fetch(\n `https://generativelanguage.googleapis.com/v1beta/models/${model}:generateContent?key=${\n env(\"VISION_API_KEY\")\n }`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n contents: [{\n parts: [\n { text: \"Obverse (front):\" },\n { inline_data: { mime_type: \"image/jpeg\", data: obverse } },\n { text: \"Reverse (back):\" },\n { inline_data: { mime_type: \"image/jpeg\", data: reverse } },\n { text: prompt },\n ],\n }],\n }),\n },\n );\n if (!res.ok) {\n throw new Error(\n `gemini ${res.status}: ${(await res.text()).slice(0, 300)}`,\n );\n }\n const d = await res.json();\n return d.candidates?.[0]?.content?.parts?.map((p: any) => p.text).join(\n \"\",\n ) ?? \"\";\n },\n};\n\nfunction stripDataUrl(s: unknown) {\n if (typeof s !== \"string\") return null;\n const i = s.indexOf(\"base64,\");\n return i === -1 ? s : s.slice(i + 7);\n}\n\n/** Models occasionally fence JSON despite instructions. Recover rather than fail. */\nfunction parseJson(text: string) {\n const cleaned = String(text ?? \"\").replace(/```json|```/g, \"\").trim();\n try {\n return JSON.parse(cleaned);\n } catch { /* fall through */ }\n const a = cleaned.indexOf(\"{\"), b = cleaned.lastIndexOf(\"}\");\n if (a !== -1 && b > a) {\n try {\n return JSON.parse(cleaned.slice(a, b + 1));\n } catch { /* noop */ }\n }\n return null;\n}\n\n/** One entry per AttributeField on screen 07. */\nfunction normalise(p: any) {\n const conf = p.confidence ?? {};\n return FIELDS.map((key) => {\n const value = p[key] ?? null;\n const c = typeof conf[key] === \"number\" ? conf[key] : 0;\n return { field: key, value, confidence: c, tier: tierFor(value, c) };\n });\n}\n\n/** Single source of truth for confidence mapping. */\nfunction tierFor(value: unknown, c: number) {\n if (value === null || value === undefined || value === \"\") return \"unknown\";\n if (c >= 0.85) return \"confirmed\";\n if (c >= 0.60) return \"likely\";\n return \"ambiguous\";\n}","/**\n * Coin Scan API — Val Town HTTP val\n *\n * Paste this whole file into a new HTTP val, then add three environment\n * variables in the val's left sidebar:\n *\n * NUMISTA_API_KEY your Numista key (required)\n * VISION_API_KEY your Anthropic key (required)\n * ALLOWED_ORIGIN https://gr8fl4295.github.io\n *\n * Optional:\n * VISION_PROVIDER anthropic | openai | gemini (default anthropic)\n * VISION_MODEL pin a specific model\n *\n * This exists because the Numista licence requires API credentials stay\n * confidential, so they cannot ship in the client bundle.\n *\n * No images are stored. Frames are forwarded to the vision provider and\n * discarded when the request ends.\n */\n\n// Values are trimmed on read: a trailing newline picked up while copying a\n// key is invisible in the UI and produces an authentication error that looks\n// like a wrong key.\nconst env = (k: string, fallback: string | null = null) => {\n const v = Deno.env.get(k);\n return v === undefined ? fallback : v.trim();\n};\n\nconst NUMISTA_BASE = \"https://api.numista.com/v3\";\n\n// Only these are reachable upstream. An open passthrough would let anything\n// burn the monthly quota.\nconst ALLOWED_ENDPOINTS = new Set([\"types\", \"issuers\", \"catalogues\"]);\n\n/* ------------------------------------------------------------------ */\n\nexport default async function (req: Request): Promise {\n const origin = req.headers.get(\"Origin\") || \"\";\n const cors = corsHeaders(origin);\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n if (origin && !originAllowed(origin)) {\n return json({ error: \"origin_not_allowed\", origin }, 403, cors);\n }\n\n const url = new URL(req.url);\n const path = url.pathname.replace(/\\/+$/, \"\");\n\n try {\n if (path === \"\" || path === \"/\" || path === \"/api/health\") {\n return json(\n {\n ok: true,\n provider: env(\"VISION_PROVIDER\", \"anthropic\"),\n hasNumistaKey: !!env(\"NUMISTA_API_KEY\"),\n hasVisionKey: !!env(\"VISION_API_KEY\"),\n allowedOrigin: env(\"ALLOWED_ORIGIN\") || \"(not set)\",\n },\n 200,\n cors,\n );\n }\n\n // Diagnostic: confirms a POST of a given size reaches the val at all.\n if (path === \"/api/echo\" && req.method === \"POST\") {\n const text = await req.text();\n return json({ ok: true, receivedBytes: text.length }, 200, cors);\n }\n\n // Numista's docs have shown the key header written more than one way.\n // Rather than guess, try each and report which one the API accepts.\n // Shows the shape of the stored key without revealing it. Catches the\n // three things that break authentication: whitespace, truncation, and\n // pasting the key ID instead of the secret.\n if (path === \"/api/key-shape\") {\n const raw = Deno.env.get(\"VISION_API_KEY\") ?? \"\";\n const k = raw.trim();\n return json(\n {\n rawLength: raw.length,\n trimmedLength: k.length,\n hadWhitespace: raw.length !== k.length,\n prefix: k.slice(0, 11),\n suffix: k.slice(-4),\n startsCorrectly: k.startsWith(\"sk-ant-\"),\n looksComplete: k.length > 90,\n workspaceIdSet: !!Deno.env.get(\"ANTHROPIC_WORKSPACE_ID\"),\n },\n 200,\n cors,\n );\n }\n\n // Confirms the vision key and model are accepted, with no images involved.\n if (path === \"/api/vision-test\") {\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": env(\"VISION_API_KEY\") ?? \"\",\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: env(\"VISION_MODEL\", \"claude-sonnet-5\"),\n max_tokens: 16,\n messages: [{ role: \"user\", content: \"Reply with the word ok.\" }],\n }),\n });\n return json(\n {\n status: r.status,\n model: env(\"VISION_MODEL\", \"claude-sonnet-5\"),\n body: (await r.text()).slice(0, 500),\n },\n 200,\n cors,\n );\n }\n\n if (path === \"/api/numista-test\") {\n return json(await probeAuthHeader(), 200, cors);\n }\n\n if (path.startsWith(\"/api/numista/\")) {\n return await proxyNumista(path.slice(\"/api/numista/\".length), url, cors);\n }\n\n if (path === \"/api/extract\" && req.method === \"POST\") {\n return await extract(req, cors);\n }\n\n return json({ error: \"not_found\", path }, 404, cors);\n } catch (err) {\n return json(\n { error: \"server_error\", detail: String(err?.message ?? err) },\n 500,\n cors,\n );\n }\n}\n\n/* ---------------------------- CORS ---------------------------- */\n\nfunction originAllowed(origin: string) {\n const allowed = (env(\"ALLOWED_ORIGIN\", \"\") || \"\")\n .split(\",\").map((s) => s.trim()).filter(Boolean);\n return allowed.includes(origin) || origin.startsWith(\"http://localhost\");\n}\n\nfunction corsHeaders(origin: string) {\n return {\n \"Access-Control-Allow-Origin\": originAllowed(origin)\n ? origin\n : (env(\"ALLOWED_ORIGIN\") || \"*\"),\n \"Access-Control-Allow-Methods\": \"GET,POST,OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Access-Control-Max-Age\": \"86400\",\n \"Vary\": \"Origin\",\n };\n}\n\nfunction json(body: unknown, status: number, headers: Record) {\n return new Response(JSON.stringify(body), {\n status,\n headers: { ...headers, \"Content-Type\": \"application/json\" },\n });\n}\n\n/* -------------------------- Numista -------------------------- */\n\nfunction numistaHeaders() {\n return {\n \"Numista-API-Key\": env(\"NUMISTA_API_KEY\") ?? \"\",\n \"Accept\": \"application/json\",\n };\n}\n\nasync function proxyNumista(\n rest: string,\n url: URL,\n cors: Record,\n) {\n if (!env(\"NUMISTA_API_KEY\")) {\n return json({ error: \"numista_key_missing\" }, 500, cors);\n }\n\n const segments = rest.split(\"/\").filter(Boolean);\n if (!ALLOWED_ENDPOINTS.has(segments[0])) {\n return json(\n { error: \"endpoint_not_allowed\", endpoint: segments[0] },\n 403,\n cors,\n );\n }\n\n const target = new URL(`${NUMISTA_BASE}/${segments.join(\"/\")}`);\n for (const [k, v] of url.searchParams) target.searchParams.set(k, v);\n if (!target.searchParams.has(\"lang\")) target.searchParams.set(\"lang\", \"en\");\n\n const res = await fetch(target.toString(), { headers: numistaHeaders() });\n const body = await res.text();\n\n return new Response(body, {\n status: res.status,\n headers: {\n ...cors,\n \"Content-Type\": \"application/json\",\n // Catalogue data is never cached. The licence permits storing N#\n // identifiers indefinitely and metadata for at most 7 days; the app\n // keeps references only and re-fetches details on view.\n \"Cache-Control\": \"no-store\",\n },\n });\n}\n\n/** Diagnostic: which auth header does Numista actually accept? */\nasync function probeAuthHeader() {\n const key = env(\"NUMISTA_API_KEY\");\n if (!key) return { error: \"numista_key_missing\" };\n const url = `${NUMISTA_BASE}/types?q=cent&count=1&lang=en`;\n const candidates: Record> = {\n \"Numista-API-Key\": { \"Numista-API-Key\": key },\n \"X-API-Key\": { \"X-API-Key\": key },\n \"Authorization: Bearer\": { \"Authorization\": `Bearer ${key}` },\n };\n const results: Record = {};\n for (const [label, headers] of Object.entries(candidates)) {\n try {\n const r = await fetch(url, {\n headers: { ...headers, Accept: \"application/json\" },\n });\n results[label] = r.status;\n } catch {\n results[label] = -1;\n }\n }\n const working = Object.entries(results).find(([, s]) => s === 200)?.[0] ??\n null;\n return {\n results,\n working,\n note: working && working !== \"Numista-API-Key\"\n ? `Change numistaHeaders() to use ${working}`\n : \"Numista-API-Key is correct — no change needed\",\n };\n}\n\n/* ------------------------- Extraction ------------------------- */\n\nconst FIELDS = [\n \"country\",\n \"year\",\n \"denomination\",\n \"legend\",\n \"mintmark\",\n \"composition\",\n];\n\n// Instructs the model to leave fields null rather than guess. A null becomes an\n// editable Unknown field the user can fill in. A confident wrong guess is not\n// recoverable, and is exactly what the confidence system exists to prevent.\nconst PROMPT =\n `You are reading two photographs of the same coin: the obverse (front) and the reverse (back).\n\nReport only what is legible in the images. If a field cannot be read, set it to null and give it a confidence of 0. Never infer a value from numismatic knowledge — if the date is worn away, the date is null, even if you recognise the coin type.\n\nRespond with JSON only. No prose, no markdown fences.\n\n{\n \"country\": string|null,\n \"year\": string|null,\n \"denomination\": string|null,\n \"legend\": string|null,\n \"mintmark\": string|null,\n \"composition\": string|null,\n \"confidence\": {\n \"country\": 0.0-1.0, \"year\": 0.0-1.0, \"denomination\": 0.0-1.0,\n \"legend\": 0.0-1.0, \"mintmark\": 0.0-1.0, \"composition\": 0.0-1.0\n },\n \"notes\": string|null\n}\n\nField guidance:\n- country: modern English name of the issuing country or authority.\n- year: the four-digit date struck on the coin, as text.\n- denomination: face value with unit, e.g. \"1 Cent\", \"2 Euro\", \"50 Ore\".\n- legend: the most complete inscription you can read, uppercase.\n- mintmark: the mint letter only, or null if none is visible.\n- composition: only if the metal is confidently identifiable; otherwise null.\n- notes: one short sentence on anything limiting the read, such as wear or glare. Otherwise null.`;\n\nasync function extract(req: Request, cors: Record) {\n if (!env(\"VISION_API_KEY\")) {\n return json({ error: \"vision_key_missing\" }, 500, cors);\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ error: \"bad_json\" }, 400, cors);\n }\n\n const obverse = stripDataUrl(body?.obverse);\n const reverse = stripDataUrl(body?.reverse);\n if (!obverse || !reverse) {\n return json({ error: \"both_faces_required\" }, 400, cors);\n }\n if (obverse.length > 1_400_000 || reverse.length > 1_400_000) {\n return json(\n { error: \"image_too_large\", hint: \"resize to 1024px, JPEG q0.8\" },\n 413,\n cors,\n );\n }\n\n const provider = PROVIDERS[env(\"VISION_PROVIDER\", \"anthropic\")!];\n if (!provider) return json({ error: \"unknown_provider\" }, 500, cors);\n\n const started = Date.now();\n let raw: string;\n try {\n raw = await provider(PROMPT, obverse, reverse);\n } catch (err) {\n console.error(\"extract failed:\", err);\n return json(\n { error: \"vision_failed\", detail: String(err?.message ?? err) },\n 502,\n cors,\n );\n }\n\n const parsed = parseJson(raw);\n if (!parsed) {\n return json(\n { error: \"unparseable_response\", raw: raw.slice(0, 500) },\n 502,\n cors,\n );\n }\n\n return json(\n {\n attributes: normalise(parsed),\n notes: parsed.notes ?? null,\n ms: Date.now() - started,\n provider: env(\"VISION_PROVIDER\", \"anthropic\"),\n },\n 200,\n cors,\n );\n}\n\nconst PROVIDERS: Record<\n string,\n (p: string, o: string, r: string) => Promise\n> = {\n async anthropic(prompt, obverse, reverse) {\n const img = (data: string) => ({\n type: \"image\",\n source: { type: \"base64\", media_type: \"image/jpeg\", data },\n });\n const res = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": env(\"VISION_API_KEY\")!,\n \"anthropic-version\": \"2023-06-01\",\n // Only identity-linked keys need this. A plain workspace key does not,\n // and sending an empty or malformed value is worse than omitting it.\n ...(env(\"ANTHROPIC_WORKSPACE_ID\")?.startsWith(\"wrkspc_\")\n ? { \"anthropic-workspace-id\": env(\"ANTHROPIC_WORKSPACE_ID\")! }\n : {}),\n },\n body: JSON.stringify({\n model: env(\"VISION_MODEL\", \"claude-sonnet-5\"),\n max_tokens: 1000,\n messages: [{\n role: \"user\",\n content: [\n { type: \"text\", text: \"Obverse (front):\" },\n img(obverse),\n { type: \"text\", text: \"Reverse (back):\" },\n img(reverse),\n { type: \"text\", text: prompt },\n ],\n }],\n }),\n });\n if (!res.ok) {\n const detail = (await res.text()).slice(0, 500);\n console.error(\"anthropic rejected the request:\", res.status, detail);\n throw new Error(`anthropic ${res.status}: ${detail}`);\n }\n const d = await res.json();\n return (d.content ?? []).filter((b: any) => b.type === \"text\").map((\n b: any,\n ) => b.text).join(\"\\n\");\n },\n\n async openai(prompt, obverse, reverse) {\n const img = (data: string) => ({\n type: \"image_url\",\n image_url: { url: `data:image/jpeg;base64,${data}` },\n });\n const res = await fetch(\"https://api.openai.com/v1/chat/completions\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${env(\"VISION_API_KEY\")}`,\n },\n body: JSON.stringify({\n model: env(\"VISION_MODEL\", \"gpt-4o\"),\n max_tokens: 1000,\n messages: [{\n role: \"user\",\n content: [\n { type: \"text\", text: \"Obverse (front):\" },\n img(obverse),\n { type: \"text\", text: \"Reverse (back):\" },\n img(reverse),\n { type: \"text\", text: prompt },\n ],\n }],\n }),\n });\n if (!res.ok) {\n throw new Error(\n `openai ${res.status}: ${(await res.text()).slice(0, 300)}`,\n );\n }\n const d = await res.json();\n return d.choices?.[0]?.message?.content ?? \"\";\n },\n\n async gemini(prompt, obverse, reverse) {\n const model = env(\"VISION_MODEL\", \"gemini-2.0-flash\");\n const res = await fetch(\n `https://generativelanguage.googleapis.com/v1beta/models/${model}:generateContent?key=${\n env(\"VISION_API_KEY\")\n }`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n contents: [{\n parts: [\n { text: \"Obverse (front):\" },\n { inline_data: { mime_type: \"image/jpeg\", data: obverse } },\n { text: \"Reverse (back):\" },\n { inline_data: { mime_type: \"image/jpeg\", data: reverse } },\n { text: prompt },\n ],\n }],\n }),\n },\n );\n if (!res.ok) {\n throw new Error(\n `gemini ${res.status}: ${(await res.text()).slice(0, 300)}`,\n );\n }\n const d = await res.json();\n return d.candidates?.[0]?.content?.parts?.map((p: any) => p.text).join(\n \"\",\n ) ?? \"\";\n },\n};\n\nfunction stripDataUrl(s: unknown) {\n if (typeof s !== \"string\") return null;\n const i = s.indexOf(\"base64,\");\n return i === -1 ? s : s.slice(i + 7);\n}\n\n/** Models occasionally fence JSON despite instructions. Recover rather than fail. */\nfunction parseJson(text: string) {\n const cleaned = String(text ?? \"\").replace(/```json|```/g, \"\").trim();\n try {\n return JSON.parse(cleaned);\n } catch { /* fall through */ }\n const a = cleaned.indexOf(\"{\"), b = cleaned.lastIndexOf(\"}\");\n if (a !== -1 && b > a) {\n try {\n return JSON.parse(cleaned.slice(a, b + 1));\n } catch { /* noop */ }\n }\n return null;\n}\n\n/** One entry per AttributeField on screen 07. */\nfunction normalise(p: any) {\n const conf = p.confidence ?? {};\n return FIELDS.map((key) => {\n const value = p[key] ?? null;\n const c = typeof conf[key] === \"number\" ? conf[key] : 0;\n return { field: key, value, confidence: c, tier: tierFor(value, c) };\n });\n}\n\n/** Single source of truth for confidence mapping. */\nfunction tierFor(value: unknown, c: number) {\n if (value === null || value === undefined || value === \"\") return \"unknown\";\n if (c >= 0.85) return \"confirmed\";\n if (c >= 0.60) return \"likely\";\n return \"ambiguous\";\n}","createdAt",["D",1788208095512],"branchVersion","branchId","1f00a449-6d8b-42fb-a2f3-de46d64606c0","id","def4143d-6955-45cf-aaa7-7049effcd7c9","coinscan",["D",1788201080008],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","app to scan coins","imageUrl","5b86aa70-b016-4007-a54f-8f848d181a22","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a05914-dac0-70cc-9939-9edb92f8eaa0","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",15,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","derekhatfield","handle","displayName","Derek Hatfield","avatar","https://lh3.googleusercontent.com/a/ACg8ocI3F1_Trae1DnUNLFp9mUWrmuNMJhh9Dz1xk5r2x1lUZrqkHw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":152,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":153,"_80":154,"_82":155,"_84":25},"tree",[147],"files",[147],"counts",{"_135":62,"_136":137,"_138":62,"_139":140,"_141":142},"contents",[127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":131,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_27":134},"023268ab-0708-4bc3-a29c-708fa712dbe3","parentId","latest",["D",1788208095512],5,"label",[28],"pulls","branches",1,"forks","envVars",{"_143":145,"_146":62},"connections",{"_143":62,"_144":62},"count","unfilledCount",4,"emptyCount",{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":148,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_149":150,"_27":151},["D",1788208095512],"children",[],[28],["D",1788201080008],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":55,"_101":102,"_103":25},{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"ctx",{"_78":-5,"_124":189,"_190":191,"_192":193,"_194":25,"_195":25,"_196":25,"_197":58,"_198":-5,"_199":-7,"_200":-7,"_201":62,"_202":25,"_203":25,"_204":-5,"_205":25,"_206":25,"_207":25,"_208":-5},"ENV",{"_160":161,"_162":163,"_164":86,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v10