[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_155":156,"_157":158},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_104":85,"_27":105,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":58,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",15,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.http.ts","latestPath","fileId","d019ab7e-a56c-11f1-9053-1607ee4eb77e","name","fileType","http","content","/**\n * Coin Scan API — Val Town HTTP val\n *\n * Paste this whole file into a new HTTP val, then add three environment\n * variables in the val's left sidebar:\n *\n * NUMISTA_API_KEY your Numista key (required)\n * VISION_API_KEY your Anthropic key (required)\n * ALLOWED_ORIGIN https://gr8fl4295.github.io\n *\n * Optional:\n * VISION_PROVIDER anthropic | openai | gemini (default anthropic)\n * VISION_MODEL pin a specific model\n *\n * This exists because the Numista licence requires API credentials stay\n * confidential, so they cannot ship in the client bundle.\n *\n * No images are stored. Frames are forwarded to the vision provider and\n * discarded when the request ends.\n */\n\n// Values are trimmed on read: a trailing newline picked up while copying a\n// key is invisible in the UI and produces an authentication error that looks\n// like a wrong key.\nconst env = (k: string, fallback: string | null = null) => {\n const v = Deno.env.get(k);\n return v === undefined ? fallback : v.trim();\n};\n\nconst NUMISTA_BASE = \"https://api.numista.com/v3\";\n\n// Only these are reachable upstream. An open passthrough would let anything\n// burn the monthly quota.\nconst ALLOWED_ENDPOINTS = new Set([\"types\", \"issuers\", \"catalogues\"]);\n\n/* ------------------------------------------------------------------ */\n\nexport default async function (req: Request): Promise {\n const origin = req.headers.get(\"Origin\") || \"\";\n const cors = corsHeaders(origin);\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n if (origin && !originAllowed(origin)) {\n return json({ error: \"origin_not_allowed\", origin }, 403, cors);\n }\n\n const url = new URL(req.url);\n const path = url.pathname.replace(/\\/+$/, \"\");\n\n try {\n if (path === \"\" || path === \"/\" || path === \"/api/health\") {\n return json(\n {\n ok: true,\n provider: env(\"VISION_PROVIDER\", \"anthropic\"),\n hasNumistaKey: !!env(\"NUMISTA_API_KEY\"),\n hasVisionKey: !!env(\"VISION_API_KEY\"),\n allowedOrigin: env(\"ALLOWED_ORIGIN\") || \"(not set)\",\n },\n 200,\n cors,\n );\n }\n\n // Diagnostic: confirms a POST of a given size reaches the val at all.\n if (path === \"/api/echo\" && req.method === \"POST\") {\n const text = await req.text();\n return json({ ok: true, receivedBytes: text.length }, 200, cors);\n }\n\n // Numista's docs have shown the key header written more than one way.\n // Rather than guess, try each and report which one the API accepts.\n // Shows the shape of the stored key without revealing it. Catches the\n // three things that break authentication: whitespace, truncation, and\n // pasting the key ID instead of the secret.\n if (path === \"/api/key-shape\") {\n const raw = Deno.env.get(\"VISION_API_KEY\") ?? \"\";\n const k = raw.trim();\n return json(\n {\n rawLength: raw.length,\n trimmedLength: k.length,\n hadWhitespace: raw.length !== k.length,\n prefix: k.slice(0, 11),\n suffix: k.slice(-4),\n startsCorrectly: k.startsWith(\"sk-ant-\"),\n looksComplete: k.length > 90,\n workspaceIdSet: !!Deno.env.get(\"ANTHROPIC_WORKSPACE_ID\"),\n },\n 200,\n cors,\n );\n }\n\n // Confirms the vision key and model are accepted, with no images involved.\n if (path === \"/api/vision-test\") {\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": env(\"VISION_API_KEY\") ?? \"\",\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: env(\"VISION_MODEL\", \"claude-sonnet-5\"),\n max_tokens: 16,\n messages: [{ role: \"user\", content: \"Reply with the word ok.\" }],\n }),\n });\n return json(\n {\n status: r.status,\n model: env(\"VISION_MODEL\", \"claude-sonnet-5\"),\n body: (await r.text()).slice(0, 500),\n },\n 200,\n cors,\n );\n }\n\n if (path === \"/api/numista-test\") {\n return json(await probeAuthHeader(), 200, cors);\n }\n\n if (path.startsWith(\"/api/numista/\")) {\n return await proxyNumista(path.slice(\"/api/numista/\".length), url, cors);\n }\n\n if (path === \"/api/extract\" && req.method === \"POST\") {\n return await extract(req, cors);\n }\n\n if (path === \"/api/identify\" && req.method === \"POST\") {\n return await identify(req, cors);\n }\n\n if (path.startsWith(\"/api/type/\")) {\n return await typeDetail(path.slice(\"/api/type/\".length), cors);\n }\n\n return json({ error: \"not_found\", path }, 404, cors);\n } catch (err) {\n return json(\n { error: \"server_error\", detail: String(err?.message ?? err) },\n 500,\n cors,\n );\n }\n}\n\n/* ---------------------------- CORS ---------------------------- */\n\nfunction originAllowed(origin: string) {\n const allowed = (env(\"ALLOWED_ORIGIN\", \"\") || \"\")\n .split(\",\").map((s) => s.trim()).filter(Boolean);\n return allowed.includes(origin) || origin.startsWith(\"http://localhost\");\n}\n\nfunction corsHeaders(origin: string) {\n return {\n \"Access-Control-Allow-Origin\": originAllowed(origin)\n ? origin\n : (env(\"ALLOWED_ORIGIN\") || \"*\"),\n \"Access-Control-Allow-Methods\": \"GET,POST,OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Access-Control-Max-Age\": \"86400\",\n \"Vary\": \"Origin\",\n };\n}\n\nfunction json(body: unknown, status: number, headers: Record) {\n return new Response(JSON.stringify(body), {\n status,\n headers: { ...headers, \"Content-Type\": \"application/json\" },\n });\n}\n\n/* -------------------------- Numista -------------------------- */\n\nfunction numistaHeaders() {\n return {\n \"Numista-API-Key\": env(\"NUMISTA_API_KEY\") ?? \"\",\n \"Accept\": \"application/json\",\n };\n}\n\nasync function proxyNumista(\n rest: string,\n url: URL,\n cors: Record,\n) {\n if (!env(\"NUMISTA_API_KEY\")) {\n return json({ error: \"numista_key_missing\" }, 500, cors);\n }\n\n const segments = rest.split(\"/\").filter(Boolean);\n if (!ALLOWED_ENDPOINTS.has(segments[0])) {\n return json(\n { error: \"endpoint_not_allowed\", endpoint: segments[0] },\n 403,\n cors,\n );\n }\n\n const target = new URL(`${NUMISTA_BASE}/${segments.join(\"/\")}`);\n for (const [k, v] of url.searchParams) target.searchParams.set(k, v);\n if (!target.searchParams.has(\"lang\")) target.searchParams.set(\"lang\", \"en\");\n\n const res = await fetch(target.toString(), { headers: numistaHeaders() });\n const body = await res.text();\n\n return new Response(body, {\n status: res.status,\n headers: {\n ...cors,\n \"Content-Type\": \"application/json\",\n // Catalogue data is never cached. The licence permits storing N#\n // identifiers indefinitely and metadata for at most 7 days; the app\n // keeps references only and re-fetches details on view.\n \"Cache-Control\": \"no-store\",\n },\n });\n}\n\n/** Diagnostic: which auth header does Numista actually accept? */\nasync function probeAuthHeader() {\n const key = env(\"NUMISTA_API_KEY\");\n if (!key) return { error: \"numista_key_missing\" };\n const url = `${NUMISTA_BASE}/types?q=cent&count=1&lang=en`;\n const candidates: Record> = {\n \"Numista-API-Key\": { \"Numista-API-Key\": key },\n \"X-API-Key\": { \"X-API-Key\": key },\n \"Authorization: Bearer\": { \"Authorization\": `Bearer ${key}` },\n };\n const results: Record = {};\n for (const [label, headers] of Object.entries(candidates)) {\n try {\n const r = await fetch(url, {\n headers: { ...headers, Accept: \"application/json\" },\n });\n results[label] = r.status;\n } catch {\n results[label] = -1;\n }\n }\n const working = Object.entries(results).find(([, s]) => s === 200)?.[0] ??\n null;\n return {\n results,\n working,\n note: working && working !== \"Numista-API-Key\"\n ? `Change numistaHeaders() to use ${working}`\n : \"Numista-API-Key is correct — no change needed\",\n };\n}\n\n/* ------------------------- Extraction ------------------------- */\n\nconst FIELDS = [\n \"country\",\n \"year\",\n \"denomination\",\n \"legend\",\n \"mintmark\",\n \"composition\",\n];\n\n// Instructs the model to leave fields null rather than guess. A null becomes an\n// editable Unknown field the user can fill in. A confident wrong guess is not\n// recoverable, and is exactly what the confidence system exists to prevent.\nconst PROMPT =\n `You are reading two photographs of the same coin: the obverse (front) and the reverse (back).\n\nReport only what is legible in the images. If a field cannot be read, set it to null and give it a confidence of 0. Never infer a value from numismatic knowledge — if the date is worn away, the date is null, even if you recognise the coin type.\n\nRespond with JSON only. No prose, no markdown fences.\n\n{\n \"country\": string|null,\n \"year\": string|null,\n \"denomination\": string|null,\n \"legend\": string|null,\n \"mintmark\": string|null,\n \"composition\": string|null,\n \"confidence\": {\n \"country\": 0.0-1.0, \"year\": 0.0-1.0, \"denomination\": 0.0-1.0,\n \"legend\": 0.0-1.0, \"mintmark\": 0.0-1.0, \"composition\": 0.0-1.0\n },\n \"notes\": string|null\n}\n\nField guidance:\n- country: modern English name of the issuing country or authority.\n- year: the four-digit date struck on the coin, as text.\n- denomination: face value with unit, e.g. \"1 Cent\", \"2 Euro\", \"50 Ore\".\n- legend: the most complete inscription you can read, uppercase.\n- mintmark: the mint letter only, or null if none is visible.\n- composition: only if the metal is confidently identifiable; otherwise null.\n- notes: one short sentence on anything limiting the read, such as wear or glare. Otherwise null.`;\n\nasync function extract(req: Request, cors: Record) {\n if (!env(\"VISION_API_KEY\")) {\n return json({ error: \"vision_key_missing\" }, 500, cors);\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ error: \"bad_json\" }, 400, cors);\n }\n\n const obverse = stripDataUrl(body?.obverse);\n const reverse = stripDataUrl(body?.reverse);\n if (!obverse || !reverse) {\n return json({ error: \"both_faces_required\" }, 400, cors);\n }\n if (obverse.length > 1_400_000 || reverse.length > 1_400_000) {\n return json(\n { error: \"image_too_large\", hint: \"resize to 1024px, JPEG q0.8\" },\n 413,\n cors,\n );\n }\n\n const provider = PROVIDERS[env(\"VISION_PROVIDER\", \"anthropic\")!];\n if (!provider) return json({ error: \"unknown_provider\" }, 500, cors);\n\n const started = Date.now();\n let raw: string;\n try {\n raw = await provider(PROMPT, obverse, reverse);\n } catch (err) {\n console.error(\"extract failed:\", err);\n return json(\n { error: \"vision_failed\", detail: String(err?.message ?? err) },\n 502,\n cors,\n );\n }\n\n const parsed = parseJson(raw);\n if (!parsed) {\n return json(\n { error: \"unparseable_response\", raw: raw.slice(0, 500) },\n 502,\n cors,\n );\n }\n\n return json(\n {\n attributes: normalise(parsed),\n notes: parsed.notes ?? null,\n ms: Date.now() - started,\n provider: env(\"VISION_PROVIDER\", \"anthropic\"),\n },\n 200,\n cors,\n );\n}\n\nconst PROVIDERS: Record<\n string,\n (p: string, o: string, r: string) => Promise\n> = {\n async anthropic(prompt, obverse, reverse) {\n const img = (data: string) => ({\n type: \"image\",\n source: { type: \"base64\", media_type: \"image/jpeg\", data },\n });\n const res = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": env(\"VISION_API_KEY\")!,\n \"anthropic-version\": \"2023-06-01\",\n // Only identity-linked keys need this. A plain workspace key does not,\n // and sending an empty or malformed value is worse than omitting it.\n ...(env(\"ANTHROPIC_WORKSPACE_ID\")?.startsWith(\"wrkspc_\")\n ? { \"anthropic-workspace-id\": env(\"ANTHROPIC_WORKSPACE_ID\")! }\n : {}),\n },\n body: JSON.stringify({\n model: env(\"VISION_MODEL\", \"claude-sonnet-5\"),\n max_tokens: 1000,\n messages: [{\n role: \"user\",\n content: [\n { type: \"text\", text: \"Obverse (front):\" },\n img(obverse),\n { type: \"text\", text: \"Reverse (back):\" },\n img(reverse),\n { type: \"text\", text: prompt },\n ],\n }],\n }),\n });\n if (!res.ok) {\n const detail = (await res.text()).slice(0, 500);\n console.error(\"anthropic rejected the request:\", res.status, detail);\n throw new Error(`anthropic ${res.status}: ${detail}`);\n }\n const d = await res.json();\n return (d.content ?? []).filter((b: any) => b.type === \"text\").map((\n b: any,\n ) => b.text).join(\"\\n\");\n },\n\n async openai(prompt, obverse, reverse) {\n const img = (data: string) => ({\n type: \"image_url\",\n image_url: { url: `data:image/jpeg;base64,${data}` },\n });\n const res = await fetch(\"https://api.openai.com/v1/chat/completions\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${env(\"VISION_API_KEY\")}`,\n },\n body: JSON.stringify({\n model: env(\"VISION_MODEL\", \"gpt-4o\"),\n max_tokens: 1000,\n messages: [{\n role: \"user\",\n content: [\n { type: \"text\", text: \"Obverse (front):\" },\n img(obverse),\n { type: \"text\", text: \"Reverse (back):\" },\n img(reverse),\n { type: \"text\", text: prompt },\n ],\n }],\n }),\n });\n if (!res.ok) {\n throw new Error(\n `openai ${res.status}: ${(await res.text()).slice(0, 300)}`,\n );\n }\n const d = await res.json();\n return d.choices?.[0]?.message?.content ?? \"\";\n },\n\n async gemini(prompt, obverse, reverse) {\n const model = env(\"VISION_MODEL\", \"gemini-2.0-flash\");\n const res = await fetch(\n `https://generativelanguage.googleapis.com/v1beta/models/${model}:generateContent?key=${\n env(\"VISION_API_KEY\")\n }`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n contents: [{\n parts: [\n { text: \"Obverse (front):\" },\n { inline_data: { mime_type: \"image/jpeg\", data: obverse } },\n { text: \"Reverse (back):\" },\n { inline_data: { mime_type: \"image/jpeg\", data: reverse } },\n { text: prompt },\n ],\n }],\n }),\n },\n );\n if (!res.ok) {\n throw new Error(\n `gemini ${res.status}: ${(await res.text()).slice(0, 300)}`,\n );\n }\n const d = await res.json();\n return d.candidates?.[0]?.content?.parts?.map((p: any) => p.text).join(\n \"\",\n ) ?? \"\";\n },\n};\n\nfunction stripDataUrl(s: unknown) {\n if (typeof s !== \"string\") return null;\n const i = s.indexOf(\"base64,\");\n return i === -1 ? s : s.slice(i + 7);\n}\n\n/** Models occasionally fence JSON despite instructions. Recover rather than fail. */\nfunction parseJson(text: string) {\n const cleaned = String(text ?? \"\").replace(/```json|```/g, \"\").trim();\n try {\n return JSON.parse(cleaned);\n } catch { /* fall through */ }\n const a = cleaned.indexOf(\"{\"), b = cleaned.lastIndexOf(\"}\");\n if (a !== -1 && b > a) {\n try {\n return JSON.parse(cleaned.slice(a, b + 1));\n } catch { /* noop */ }\n }\n return null;\n}\n\n/** One entry per AttributeField on screen 07. */\nfunction normalise(p: any) {\n const conf = p.confidence ?? {};\n return FIELDS.map((key) => {\n const value = p[key] ?? null;\n const c = typeof conf[key] === \"number\" ? conf[key] : 0;\n return { field: key, value, confidence: c, tier: tierFor(value, c) };\n });\n}\n\n/** Single source of truth for confidence mapping. */\nfunction tierFor(value: unknown, c: number) {\n if (value === null || value === undefined || value === \"\") return \"unknown\";\n if (c >= 0.85) return \"confirmed\";\n if (c >= 0.60) return \"likely\";\n return \"ambiguous\";\n}\n\n/* ---------------------- Catalogue matching ---------------------- */\n\n/**\n * Turns the readings from the attributes screen into ranked catalogue\n * candidates.\n *\n * Ranking and tiering live here rather than in the client so there is one\n * definition of what \"Confirmed\" means. A reading alone can never be\n * Confirmed — only agreement between the reading and a catalogue entry can.\n */\n\nlet issuerCache: { code: string; name: string }[] | null = null;\n\nasync function issuers() {\n if (issuerCache) return issuerCache;\n const res = await fetch(`${NUMISTA_BASE}/issuers?lang=en`, {\n headers: numistaHeaders(),\n });\n if (!res.ok) return (issuerCache = []);\n const d = await res.json();\n issuerCache = (d.issuers ?? []).map((i: any) => ({\n code: i.code,\n name: i.name,\n }));\n return issuerCache;\n}\n\n/** Country name from the model to Numista's issuer code, when we can. */\nasync function resolveIssuer(country: string | null) {\n if (!country) return null;\n const list = await issuers();\n const want = country.toLowerCase().trim();\n const exact = list.find((i) => i.name.toLowerCase() === want);\n if (exact) return exact.code;\n return list.find((i) =>\n i.name.toLowerCase().includes(want) ||\n want.includes(i.name.toLowerCase())\n )?.code ?? null;\n}\n\nconst NUM_WORDS: Record = {\n one: 1,\n two: 2,\n three: 3,\n four: 4,\n five: 5,\n six: 6,\n seven: 7,\n eight: 8,\n nine: 9,\n ten: 10,\n twelve: 12,\n fifteen: 15,\n twenty: 20,\n twentyfive: 25,\n fifty: 50,\n hundred: 100,\n thousand: 1000,\n};\n\n/** Fold the diacritics Numista uses so \"Øre\" and \"Ore\" compare equal. */\nconst fold = (s: string) =>\n s.toLowerCase()\n .replace(/ø/g, \"o\").replace(/æ/g, \"ae\").replace(/å/g, \"a\")\n .replace(/[àáâä]/g, \"a\").replace(/[èéêë]/g, \"e\").replace(/[ìíîï]/g, \"i\")\n .replace(/[òóôö]/g, \"o\").replace(/[ùúûü]/g, \"u\");\n\nconst tokens = (s: string | null) =>\n fold(String(s ?? \"\")).replace(/[^a-z0-9 ]/g, \" \").split(/\\s+/).filter((t) =>\n t.length > 2\n );\n\n/**\n * Split a denomination into its number and unit.\n *\n * The number is the whole point: \"3 Pence\" and \"6 Pence\" share a unit and are\n * completely different coins. Word forms are folded to digits because the model\n * writes \"Two Pence\" while the catalogue writes \"2 Pence\".\n */\nfunction denomParts(s: string | null) {\n const words = fold(String(s ?? \"\")).replace(/[^a-z0-9]+/g, \" \").trim().split(\n \" \",\n );\n let num: number | null = null;\n const rest: string[] = [];\n for (const w of words) {\n if (!w) continue;\n if (/^\\d+$/.test(w)) { if (num === null) num = parseInt(w, 10); }\n else if (NUM_WORDS[w] !== undefined) {\n if (num === null) num = NUM_WORDS[w];\n } else rest.push(w);\n }\n return { num, unit: rest.join(\" \") };\n}\n\n/** \"krone\" and \"kroner\", \"pence\" and \"penny\" — compare on a short stem. */\nconst unitMatches = (a: string, b: string) => {\n if (!a || !b) return false;\n const stem = (x: string) => x.slice(0, 4);\n return stem(a) === stem(b) || a.startsWith(b) || b.startsWith(a);\n};\n\n/** Every \" \" pair appearing in a catalogue title. */\nfunction titleDenominations(title: string) {\n const w = fold(title).replace(/[^a-z0-9]+/g, \" \").trim().split(\" \");\n const found: { num: number; unit: string }[] = [];\n for (let i = 0; i < w.length - 1; i++) {\n const n = /^\\d+$/.test(w[i])\n ? parseInt(w[i], 10)\n : NUM_WORDS[w[i]] !== undefined\n ? NUM_WORDS[w[i]]\n : null;\n if (n !== null && w[i + 1] && !/^\\d+$/.test(w[i + 1])) {\n found.push({ num: n, unit: w[i + 1] });\n }\n }\n return found;\n}\n\nfunction scoreCandidate(t: any, read: any) {\n const rawTitle = String(t.title ?? \"\");\n const title = fold(rawTitle);\n const issuerName = fold(String(t.issuer?.name ?? \"\"));\n const agree = { country: false, year: false, denomination: false };\n let score = 0;\n\n if (read.country && issuerName) {\n const c = fold(read.country);\n if (issuerName === c || issuerName.includes(c) || c.includes(issuerName)) {\n agree.country = true;\n score += 3;\n }\n }\n\n const y = parseInt(read.year, 10);\n if (y && (t.min_year || t.max_year)) {\n const lo = t.min_year ?? y, hi = t.max_year ?? y;\n if (y >= lo && y <= hi) {\n agree.year = true;\n score += 3;\n }\n }\n\n // Denomination must agree on the number, not just the unit.\n const want = denomParts(read.denomination);\n if (want.num !== null || want.unit) {\n const inTitle = titleDenominations(rawTitle);\n const exact = inTitle.some((d) =>\n d.num === want.num && (!want.unit || unitMatches(d.unit, want.unit))\n );\n if (exact) {\n agree.denomination = true;\n score += 4;\n } else if (\n want.unit && inTitle.some((d) => unitMatches(d.unit, want.unit))\n ) {\n // Right currency, wrong value. Actively wrong, not merely unsupported.\n score -= 2;\n }\n }\n\n const legendHits =\n tokens(read.legend).filter((w) => title.includes(w)).length;\n score += Math.min(2, legendHits);\n\n // Tokens and medals are not the coin someone photographed unless nothing\n // else fits, and they can never be Confirmed.\n const isCoin = String(t.category ?? \"coin\").toLowerCase() === \"coin\" &&\n !/^token\\b|^medal\\b|^jeton\\b/.test(title);\n if (!isCoin) score -= 3;\n\n const agreed = Object.values(agree).filter(Boolean).length;\n let tier = agreed === 3\n ? \"confirmed\"\n : agreed === 2\n ? \"likely\"\n : agreed === 1\n ? \"ambiguous\"\n : \"unknown\";\n if (!isCoin && tier === \"confirmed\") tier = \"likely\";\n\n return { score, tier, agree };\n}\n\nasync function identify(req: Request, cors: Record) {\n if (!env(\"NUMISTA_API_KEY\")) {\n return json({ error: \"numista_key_missing\" }, 500, cors);\n }\n\n let read: any;\n try {\n read = await req.json();\n } catch {\n return json({ error: \"bad_json\" }, 400, cors);\n }\n\n const issuerCode = await resolveIssuer(read.country);\n const q = [read.denomination, issuerCode ? null : read.country]\n .filter(Boolean).join(\" \").trim();\n\n const url = new URL(`${NUMISTA_BASE}/types`);\n url.searchParams.set(\"lang\", \"en\");\n url.searchParams.set(\"count\", \"30\");\n if (q) url.searchParams.set(\"q\", q);\n if (issuerCode) url.searchParams.set(\"issuer\", issuerCode);\n if (read.year) url.searchParams.set(\"date\", String(read.year));\n\n const res = await fetch(url.toString(), { headers: numistaHeaders() });\n if (!res.ok) {\n const detail = (await res.text()).slice(0, 300);\n console.error(\"numista search failed:\", res.status, detail);\n return json(\n { error: \"search_failed\", status: res.status, detail },\n 502,\n cors,\n );\n }\n const data = await res.json();\n const types = data.types ?? data.results ?? [];\n\n let ranked = types.map((t: any) => {\n const { score, tier, agree } = scoreCandidate(t, read);\n return {\n id: t.id,\n reference: `N# ${t.id}`,\n title: t.title ?? \"Untitled type\",\n issuer: t.issuer?.name ?? null,\n minYear: t.min_year ?? null,\n maxYear: t.max_year ?? null,\n category: t.category ?? null,\n score,\n tier,\n agree,\n };\n }).sort((a: any, b: any) => b.score - a.score).slice(0, 12);\n\n // Search results carry no measurements, so bring in detail for the shortlist.\n // Detail lookups are free and the licence allows 15 per search; 12 keeps a\n // margin. Diameter is the one field that can *contradict* a match rather\n // than merely support it — two coins can share country, date and\n // denomination and still be 15 mm apart.\n const wantedMm = parseFloat(read.diameter);\n if (wantedMm > 0 && ranked.length) {\n const shortlist = ranked.slice(0, 12);\n const details = await Promise.all(shortlist.map(async (c: any) => {\n try {\n const r = await fetch(`${NUMISTA_BASE}/types/${c.id}?lang=en`, {\n headers: numistaHeaders(),\n });\n if (!r.ok) return null;\n const d = await r.json();\n return parseFloat(d.size ?? d.diameter);\n } catch {\n return null;\n }\n }));\n\n shortlist.forEach((c: any, i: number) => {\n const mm = details[i];\n if (!mm) return;\n c.diameter = mm;\n const delta = Math.abs(mm - wantedMm);\n c.diameterDelta = Math.round(delta * 100) / 100;\n if (delta <= 0.6) {\n c.score += 4;\n c.diameterAgrees = true;\n } else if (delta > 1.5) {\n // A measurement this far out rules the candidate out, whatever else\n // agrees. Never leave it sitting at Confirmed.\n c.score -= 8;\n c.diameterAgrees = false;\n if (c.tier === \"confirmed\" || c.tier === \"likely\") c.tier = \"ambiguous\";\n }\n });\n ranked = shortlist.sort((a: any, b: any) => b.score - a.score);\n }\n\n return json(\n {\n query: {\n q,\n issuer: issuerCode,\n date: read.year ?? null,\n diameter: read.diameter ?? null,\n },\n total: data.count ?? types.length,\n candidates: ranked,\n // Every result must carry its N# and credit the source.\n attribution: \"Catalogue data and N# references by Numista\",\n },\n 200,\n cors,\n );\n}\n\n/* ------------------------ Type detail ------------------------ */\n\n/**\n * One catalogue type, flattened to what the detail screen renders.\n *\n * Detail lookups are free — only searches count against the monthly cap — so\n * browsing a saved collection costs nothing. The response is still never\n * cached: the licence allows storing the N# indefinitely but not the metadata.\n */\nasync function typeDetail(id: string, cors: Record) {\n if (!env(\"NUMISTA_API_KEY\")) {\n return json({ error: \"numista_key_missing\" }, 500, cors);\n }\n if (!/^\\d+$/.test(id)) return json({ error: \"bad_type_id\", id }, 400, cors);\n\n const res = await fetch(`${NUMISTA_BASE}/types/${id}?lang=en`, {\n headers: numistaHeaders(),\n });\n if (!res.ok) {\n const detail = (await res.text()).slice(0, 300);\n console.error(\"numista type lookup failed:\", res.status, detail);\n return json(\n { error: \"lookup_failed\", status: res.status, detail },\n 502,\n cors,\n );\n }\n const t = await res.json();\n\n // Field names vary across the catalogue, so try each plausible spelling\n // rather than trusting one shape.\n const first = (...vals: any[]) =>\n vals.find((v) => v !== undefined && v !== null && v !== \"\") ?? null;\n const text = (v: any) =>\n typeof v === \"string\" ? v : (v?.text ?? v?.name ?? null);\n const size = first(t.size, t.diameter);\n\n const specs = [\n [\"Composition\", text(t.composition)],\n [\"Weight\", t.weight ? `${t.weight} g` : null],\n [\"Diameter\", size ? `${size} mm` : null],\n [\"Thickness\", t.thickness ? `${t.thickness} mm` : null],\n [\"Edge\", text(t.edge)],\n [\"Shape\", text(t.shape)],\n [\"Orientation\", text(t.orientation)],\n [\n \"Demonetised\",\n text(t.demonetization?.demonetized ? t.demonetization.date : null),\n ],\n ].filter(([, v]) => v).map(([label, value]) => ({ label, value }));\n\n return json(\n {\n id: t.id ?? Number(id),\n reference: `N# ${t.id ?? id}`,\n title: t.title ?? \"Untitled type\",\n issuer: t.issuer?.name ?? null,\n category: t.category ?? null,\n minYear: first(t.min_year, t.commemorated_topic?.year),\n maxYear: t.max_year ?? null,\n ruler: Array.isArray(t.ruler)\n ? t.ruler.map((r: any) => r.name).filter(Boolean).join(\", \")\n : text(t.ruler),\n obverse: {\n description: t.obverse?.description ?? null,\n lettering: t.obverse?.lettering ?? null,\n },\n reverse: {\n description: t.reverse?.description ?? null,\n lettering: t.reverse?.lettering ?? null,\n },\n specs,\n url: `https://en.numista.com/catalogue/pieces${t.id ?? id}.html`,\n attribution: \"Catalogue data and N# reference by Numista\",\n },\n 200,\n cors,\n );\n}","/**\n * Coin Scan API — Val Town HTTP val\n *\n * Paste this whole file into a new HTTP val, then add three environment\n * variables in the val's left sidebar:\n *\n * NUMISTA_API_KEY your Numista key (required)\n * VISION_API_KEY your Anthropic key (required)\n * ALLOWED_ORIGIN https://gr8fl4295.github.io\n *\n * Optional:\n * VISION_PROVIDER anthropic | openai | gemini (default anthropic)\n * VISION_MODEL pin a specific model\n *\n * This exists because the Numista licence requires API credentials stay\n * confidential, so they cannot ship in the client bundle.\n *\n * No images are stored. Frames are forwarded to the vision provider and\n * discarded when the request ends.\n */\n\n// Values are trimmed on read: a trailing newline picked up while copying a\n// key is invisible in the UI and produces an authentication error that looks\n// like a wrong key.\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst env = (k: string, fallback: string | null = null) => {\n const v = Deno.env.get(k);\n return v === undefined ? fallback : v.trim();\n};\n\nconst NUMISTA_BASE = \"https://api.numista.com/v3\";\n\n// Only these are reachable upstream. An open passthrough would let anything\n// burn the monthly quota.\nconst ALLOWED_ENDPOINTS = new Set([\"types\", \"issuers\", \"catalogues\"]);\n\n/* ------------------------------------------------------------------ */\n\nexport default async function (req: Request): Promise {\n const origin = req.headers.get(\"Origin\") || \"\";\n const cors = corsHeaders(origin);\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: cors });\n }\n if (origin && !originAllowed(origin)) {\n return json({ error: \"origin_not_allowed\", origin }, 403, cors);\n }\n\n const url = new URL(req.url);\n const path = url.pathname.replace(/\\/+$/, \"\");\n\n try {\n if (path === \"\" || path === \"/\" || path === \"/api/health\") {\n return json(\n {\n ok: true,\n provider: env(\"VISION_PROVIDER\", \"anthropic\"),\n hasNumistaKey: !!env(\"NUMISTA_API_KEY\"),\n hasVisionKey: !!env(\"VISION_API_KEY\"),\n allowedOrigin: env(\"ALLOWED_ORIGIN\") || \"(not set)\",\n },\n 200,\n cors,\n );\n }\n\n // Diagnostic: confirms a POST of a given size reaches the val at all.\n if (path === \"/api/echo\" && req.method === \"POST\") {\n const text = await req.text();\n return json({ ok: true, receivedBytes: text.length }, 200, cors);\n }\n\n // Numista's docs have shown the key header written more than one way.\n // Rather than guess, try each and report which one the API accepts.\n // Shows the shape of the stored key without revealing it. Catches the\n // three things that break authentication: whitespace, truncation, and\n // pasting the key ID instead of the secret.\n if (path === \"/api/key-shape\") {\n const raw = Deno.env.get(\"VISION_API_KEY\") ?? \"\";\n const k = raw.trim();\n return json(\n {\n rawLength: raw.length,\n trimmedLength: k.length,\n hadWhitespace: raw.length !== k.length,\n prefix: k.slice(0, 11),\n suffix: k.slice(-4),\n startsCorrectly: k.startsWith(\"sk-ant-\"),\n looksComplete: k.length > 90,\n workspaceIdSet: !!Deno.env.get(\"ANTHROPIC_WORKSPACE_ID\"),\n },\n 200,\n cors,\n );\n }\n\n // Confirms the vision key and model are accepted, with no images involved.\n if (path === \"/api/vision-test\") {\n const r = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": env(\"VISION_API_KEY\") ?? \"\",\n \"anthropic-version\": \"2023-06-01\",\n },\n body: JSON.stringify({\n model: env(\"VISION_MODEL\", \"claude-sonnet-5\"),\n max_tokens: 16,\n messages: [{ role: \"user\", content: \"Reply with the word ok.\" }],\n }),\n });\n return json(\n {\n status: r.status,\n model: env(\"VISION_MODEL\", \"claude-sonnet-5\"),\n body: (await r.text()).slice(0, 500),\n },\n 200,\n cors,\n );\n }\n\n // Real usage, or an honest null. Never an invented number.\n if (path === \"/api/budget\") {\n const used = await readUsage();\n return json(\n {\n used,\n cap: Number(env(\"NUMISTA_MONTHLY_CAP\", \"2000\")),\n resets: nextReset(),\n tracked: used !== null,\n },\n 200,\n cors,\n );\n }\n\n if (path === \"/api/numista-test\") {\n return json(await probeAuthHeader(), 200, cors);\n }\n\n if (path.startsWith(\"/api/numista/\")) {\n return await proxyNumista(path.slice(\"/api/numista/\".length), url, cors);\n }\n\n if (path === \"/api/extract\" && req.method === \"POST\") {\n return await extract(req, cors);\n }\n\n if (path === \"/api/identify\" && req.method === \"POST\") {\n return await identify(req, cors);\n }\n\n if (path.startsWith(\"/api/type/\")) {\n return await typeDetail(path.slice(\"/api/type/\".length), cors);\n }\n\n return json({ error: \"not_found\", path }, 404, cors);\n } catch (err) {\n return json(\n { error: \"server_error\", detail: String(err?.message ?? err) },\n 500,\n cors,\n );\n }\n}\n\n/* ---------------------------- CORS ---------------------------- */\n\nfunction originAllowed(origin: string) {\n const allowed = (env(\"ALLOWED_ORIGIN\", \"\") || \"\")\n .split(\",\").map((s) => s.trim()).filter(Boolean);\n return allowed.includes(origin) || origin.startsWith(\"http://localhost\");\n}\n\nfunction corsHeaders(origin: string) {\n return {\n \"Access-Control-Allow-Origin\": originAllowed(origin)\n ? origin\n : (env(\"ALLOWED_ORIGIN\") || \"*\"),\n \"Access-Control-Allow-Methods\": \"GET,POST,OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Access-Control-Max-Age\": \"86400\",\n \"Vary\": \"Origin\",\n };\n}\n\nfunction json(body: unknown, status: number, headers: Record) {\n return new Response(JSON.stringify(body), {\n status,\n headers: { ...headers, \"Content-Type\": \"application/json\" },\n });\n}\n\n/* -------------------------- Numista -------------------------- */\n\nfunction numistaHeaders() {\n return {\n \"Numista-API-Key\": env(\"NUMISTA_API_KEY\") ?? \"\",\n \"Accept\": \"application/json\",\n };\n}\n\nasync function proxyNumista(\n rest: string,\n url: URL,\n cors: Record,\n) {\n if (!env(\"NUMISTA_API_KEY\")) {\n return json({ error: \"numista_key_missing\" }, 500, cors);\n }\n\n const segments = rest.split(\"/\").filter(Boolean);\n if (!ALLOWED_ENDPOINTS.has(segments[0])) {\n return json(\n { error: \"endpoint_not_allowed\", endpoint: segments[0] },\n 403,\n cors,\n );\n }\n\n const target = new URL(`${NUMISTA_BASE}/${segments.join(\"/\")}`);\n for (const [k, v] of url.searchParams) target.searchParams.set(k, v);\n if (!target.searchParams.has(\"lang\")) target.searchParams.set(\"lang\", \"en\");\n\n const res = await fetch(target.toString(), { headers: numistaHeaders() });\n // Only a bare /types search is billable; /types/{id} detail is free.\n if (res.ok && segments[0] === \"types\" && segments.length === 1) {\n await bumpUsage();\n }\n const body = await res.text();\n\n return new Response(body, {\n status: res.status,\n headers: {\n ...cors,\n \"Content-Type\": \"application/json\",\n // Catalogue data is never cached. The licence permits storing N#\n // identifiers indefinitely and metadata for at most 7 days; the app\n // keeps references only and re-fetches details on view.\n \"Cache-Control\": \"no-store\",\n },\n });\n}\n\n/** Diagnostic: which auth header does Numista actually accept? */\nasync function probeAuthHeader() {\n const key = env(\"NUMISTA_API_KEY\");\n if (!key) return { error: \"numista_key_missing\" };\n const url = `${NUMISTA_BASE}/types?q=cent&count=1&lang=en`;\n const candidates: Record> = {\n \"Numista-API-Key\": { \"Numista-API-Key\": key },\n \"X-API-Key\": { \"X-API-Key\": key },\n \"Authorization: Bearer\": { \"Authorization\": `Bearer ${key}` },\n };\n const results: Record = {};\n for (const [label, headers] of Object.entries(candidates)) {\n try {\n const r = await fetch(url, {\n headers: { ...headers, Accept: \"application/json\" },\n });\n results[label] = r.status;\n } catch {\n results[label] = -1;\n }\n }\n const working = Object.entries(results).find(([, s]) => s === 200)?.[0] ??\n null;\n return {\n results,\n working,\n note: working && working !== \"Numista-API-Key\"\n ? `Change numistaHeaders() to use ${working}`\n : \"Numista-API-Key is correct — no change needed\",\n };\n}\n\n/* ------------------------- Extraction ------------------------- */\n\nconst FIELDS = [\n \"country\",\n \"year\",\n \"denomination\",\n \"legend\",\n \"mintmark\",\n \"composition\",\n];\n\n// Instructs the model to leave fields null rather than guess. A null becomes an\n// editable Unknown field the user can fill in. A confident wrong guess is not\n// recoverable, and is exactly what the confidence system exists to prevent.\nconst PROMPT =\n `You are reading two photographs of the same coin: the obverse (front) and the reverse (back).\n\nReport only what is legible in the images. If a field cannot be read, set it to null and give it a confidence of 0. Never infer a value from numismatic knowledge — if the date is worn away, the date is null, even if you recognise the coin type.\n\nRespond with JSON only. No prose, no markdown fences.\n\n{\n \"country\": string|null,\n \"year\": string|null,\n \"denomination\": string|null,\n \"legend\": string|null,\n \"mintmark\": string|null,\n \"composition\": string|null,\n \"confidence\": {\n \"country\": 0.0-1.0, \"year\": 0.0-1.0, \"denomination\": 0.0-1.0,\n \"legend\": 0.0-1.0, \"mintmark\": 0.0-1.0, \"composition\": 0.0-1.0\n },\n \"notes\": string|null\n}\n\nField guidance:\n- country: modern English name of the issuing country or authority.\n- year: the four-digit date struck on the coin, as text.\n- denomination: face value with unit, e.g. \"1 Cent\", \"2 Euro\", \"50 Ore\".\n- legend: the most complete inscription you can read, uppercase.\n- mintmark: the mint letter only, or null if none is visible.\n- composition: only if the metal is confidently identifiable; otherwise null.\n- notes: one short sentence on anything limiting the read, such as wear or glare. Otherwise null.`;\n\nasync function extract(req: Request, cors: Record) {\n if (!env(\"VISION_API_KEY\")) {\n return json({ error: \"vision_key_missing\" }, 500, cors);\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ error: \"bad_json\" }, 400, cors);\n }\n\n const obverse = stripDataUrl(body?.obverse);\n const reverse = stripDataUrl(body?.reverse);\n if (!obverse || !reverse) {\n return json({ error: \"both_faces_required\" }, 400, cors);\n }\n if (obverse.length > 1_400_000 || reverse.length > 1_400_000) {\n return json(\n { error: \"image_too_large\", hint: \"resize to 1024px, JPEG q0.8\" },\n 413,\n cors,\n );\n }\n\n const provider = PROVIDERS[env(\"VISION_PROVIDER\", \"anthropic\")!];\n if (!provider) return json({ error: \"unknown_provider\" }, 500, cors);\n\n const started = Date.now();\n let raw: string;\n try {\n raw = await provider(PROMPT, obverse, reverse);\n } catch (err) {\n console.error(\"extract failed:\", err);\n return json(\n { error: \"vision_failed\", detail: String(err?.message ?? err) },\n 502,\n cors,\n );\n }\n\n const parsed = parseJson(raw);\n if (!parsed) {\n return json(\n { error: \"unparseable_response\", raw: raw.slice(0, 500) },\n 502,\n cors,\n );\n }\n\n return json(\n {\n attributes: normalise(parsed),\n notes: parsed.notes ?? null,\n ms: Date.now() - started,\n provider: env(\"VISION_PROVIDER\", \"anthropic\"),\n },\n 200,\n cors,\n );\n}\n\nconst PROVIDERS: Record<\n string,\n (p: string, o: string, r: string) => Promise\n> = {\n async anthropic(prompt, obverse, reverse) {\n const img = (data: string) => ({\n type: \"image\",\n source: { type: \"base64\", media_type: \"image/jpeg\", data },\n });\n const res = await fetch(\"https://api.anthropic.com/v1/messages\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n \"x-api-key\": env(\"VISION_API_KEY\")!,\n \"anthropic-version\": \"2023-06-01\",\n // Only identity-linked keys need this. A plain workspace key does not,\n // and sending an empty or malformed value is worse than omitting it.\n ...(env(\"ANTHROPIC_WORKSPACE_ID\")?.startsWith(\"wrkspc_\")\n ? { \"anthropic-workspace-id\": env(\"ANTHROPIC_WORKSPACE_ID\")! }\n : {}),\n },\n body: JSON.stringify({\n model: env(\"VISION_MODEL\", \"claude-sonnet-5\"),\n max_tokens: 1000,\n messages: [{\n role: \"user\",\n content: [\n { type: \"text\", text: \"Obverse (front):\" },\n img(obverse),\n { type: \"text\", text: \"Reverse (back):\" },\n img(reverse),\n { type: \"text\", text: prompt },\n ],\n }],\n }),\n });\n if (!res.ok) {\n const detail = (await res.text()).slice(0, 500);\n console.error(\"anthropic rejected the request:\", res.status, detail);\n throw new Error(`anthropic ${res.status}: ${detail}`);\n }\n const d = await res.json();\n return (d.content ?? []).filter((b: any) => b.type === \"text\").map((\n b: any,\n ) => b.text).join(\"\\n\");\n },\n\n async openai(prompt, obverse, reverse) {\n const img = (data: string) => ({\n type: \"image_url\",\n image_url: { url: `data:image/jpeg;base64,${data}` },\n });\n const res = await fetch(\"https://api.openai.com/v1/chat/completions\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n Authorization: `Bearer ${env(\"VISION_API_KEY\")}`,\n },\n body: JSON.stringify({\n model: env(\"VISION_MODEL\", \"gpt-4o\"),\n max_tokens: 1000,\n messages: [{\n role: \"user\",\n content: [\n { type: \"text\", text: \"Obverse (front):\" },\n img(obverse),\n { type: \"text\", text: \"Reverse (back):\" },\n img(reverse),\n { type: \"text\", text: prompt },\n ],\n }],\n }),\n });\n if (!res.ok) {\n throw new Error(\n `openai ${res.status}: ${(await res.text()).slice(0, 300)}`,\n );\n }\n const d = await res.json();\n return d.choices?.[0]?.message?.content ?? \"\";\n },\n\n async gemini(prompt, obverse, reverse) {\n const model = env(\"VISION_MODEL\", \"gemini-2.0-flash\");\n const res = await fetch(\n `https://generativelanguage.googleapis.com/v1beta/models/${model}:generateContent?key=${\n env(\"VISION_API_KEY\")\n }`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n contents: [{\n parts: [\n { text: \"Obverse (front):\" },\n { inline_data: { mime_type: \"image/jpeg\", data: obverse } },\n { text: \"Reverse (back):\" },\n { inline_data: { mime_type: \"image/jpeg\", data: reverse } },\n { text: prompt },\n ],\n }],\n }),\n },\n );\n if (!res.ok) {\n throw new Error(\n `gemini ${res.status}: ${(await res.text()).slice(0, 300)}`,\n );\n }\n const d = await res.json();\n return d.candidates?.[0]?.content?.parts?.map((p: any) => p.text).join(\n \"\",\n ) ?? \"\";\n },\n};\n\nfunction stripDataUrl(s: unknown) {\n if (typeof s !== \"string\") return null;\n const i = s.indexOf(\"base64,\");\n return i === -1 ? s : s.slice(i + 7);\n}\n\n/** Models occasionally fence JSON despite instructions. Recover rather than fail. */\nfunction parseJson(text: string) {\n const cleaned = String(text ?? \"\").replace(/```json|```/g, \"\").trim();\n try {\n return JSON.parse(cleaned);\n } catch { /* fall through */ }\n const a = cleaned.indexOf(\"{\"), b = cleaned.lastIndexOf(\"}\");\n if (a !== -1 && b > a) {\n try {\n return JSON.parse(cleaned.slice(a, b + 1));\n } catch { /* noop */ }\n }\n return null;\n}\n\n/** One entry per AttributeField on screen 07. */\nfunction normalise(p: any) {\n const conf = p.confidence ?? {};\n return FIELDS.map((key) => {\n const value = p[key] ?? null;\n const c = typeof conf[key] === \"number\" ? conf[key] : 0;\n return { field: key, value, confidence: c, tier: tierFor(value, c) };\n });\n}\n\n/** Single source of truth for confidence mapping. */\nfunction tierFor(value: unknown, c: number) {\n if (value === null || value === undefined || value === \"\") return \"unknown\";\n if (c >= 0.85) return \"confirmed\";\n if (c >= 0.60) return \"likely\";\n return \"ambiguous\";\n}\n\n/* -------------------------- Usage --------------------------- */\n\n// Counts searches only, matching how Numista bills: /types?q= is charged,\n// /types/{id} is not. Storage failures return null rather than a guess, and\n// the meter says \"not tracked\" instead of showing a number it cannot support.\n\nconst usageKey = () => {\n const d = new Date();\n return `usage-${d.getUTCFullYear()}-${\n String(d.getUTCMonth() + 1).padStart(2, \"0\")\n }`;\n};\n\nfunction nextReset() {\n const d = new Date();\n return new Date(Date.UTC(d.getUTCFullYear(), d.getUTCMonth() + 1, 1))\n .toISOString().slice(0, 10);\n}\n\nasync function readUsage(): Promise {\n try {\n const v = await blob.getJSON(usageKey());\n return typeof v === \"number\" ? v : 0;\n } catch {\n return 0; // key absent simply means nothing counted yet\n }\n}\n\nasync function bumpUsage() {\n try {\n const n = (await readUsage()) ?? 0;\n await blob.setJSON(usageKey(), n + 1);\n } catch (err) {\n console.error(\"usage counter failed:\", err);\n }\n}\n\n/* ---------------------- Catalogue matching ---------------------- */\n\n/**\n * Turns the readings from the attributes screen into ranked catalogue\n * candidates.\n *\n * Ranking and tiering live here rather than in the client so there is one\n * definition of what \"Confirmed\" means. A reading alone can never be\n * Confirmed — only agreement between the reading and a catalogue entry can.\n */\n\nlet issuerCache: { code: string; name: string }[] | null = null;\n\nasync function issuers() {\n if (issuerCache) return issuerCache;\n const res = await fetch(`${NUMISTA_BASE}/issuers?lang=en`, {\n headers: numistaHeaders(),\n });\n if (!res.ok) return (issuerCache = []);\n const d = await res.json();\n issuerCache = (d.issuers ?? []).map((i: any) => ({\n code: i.code,\n name: i.name,\n }));\n return issuerCache;\n}\n\n/** Country name from the model to Numista's issuer code, when we can. */\nasync function resolveIssuer(country: string | null) {\n if (!country) return null;\n const list = await issuers();\n const want = country.toLowerCase().trim();\n const exact = list.find((i) => i.name.toLowerCase() === want);\n if (exact) return exact.code;\n return list.find((i) =>\n i.name.toLowerCase().includes(want) ||\n want.includes(i.name.toLowerCase())\n )?.code ?? null;\n}\n\nconst NUM_WORDS: Record = {\n one: 1,\n two: 2,\n three: 3,\n four: 4,\n five: 5,\n six: 6,\n seven: 7,\n eight: 8,\n nine: 9,\n ten: 10,\n twelve: 12,\n fifteen: 15,\n twenty: 20,\n twentyfive: 25,\n fifty: 50,\n hundred: 100,\n thousand: 1000,\n};\n\n/** Fold the diacritics Numista uses so \"Øre\" and \"Ore\" compare equal. */\nconst fold = (s: string) =>\n s.toLowerCase()\n .replace(/ø/g, \"o\").replace(/æ/g, \"ae\").replace(/å/g, \"a\")\n .replace(/[àáâä]/g, \"a\").replace(/[èéêë]/g, \"e\").replace(/[ìíîï]/g, \"i\")\n .replace(/[òóôö]/g, \"o\").replace(/[ùúûü]/g, \"u\");\n\nconst tokens = (s: string | null) =>\n fold(String(s ?? \"\")).replace(/[^a-z0-9 ]/g, \" \").split(/\\s+/).filter((t) =>\n t.length > 2\n );\n\n/**\n * Split a denomination into its number and unit.\n *\n * The number is the whole point: \"3 Pence\" and \"6 Pence\" share a unit and are\n * completely different coins. Word forms are folded to digits because the model\n * writes \"Two Pence\" while the catalogue writes \"2 Pence\".\n */\nfunction denomParts(s: string | null) {\n const words = fold(String(s ?? \"\")).replace(/[^a-z0-9]+/g, \" \").trim().split(\n \" \",\n );\n let num: number | null = null;\n const rest: string[] = [];\n for (const w of words) {\n if (!w) continue;\n if (/^\\d+$/.test(w)) { if (num === null) num = parseInt(w, 10); }\n else if (NUM_WORDS[w] !== undefined) {\n if (num === null) num = NUM_WORDS[w];\n } else rest.push(w);\n }\n return { num, unit: rest.join(\" \") };\n}\n\n/** \"krone\" and \"kroner\", \"pence\" and \"penny\" — compare on a short stem. */\nconst unitMatches = (a: string, b: string) => {\n if (!a || !b) return false;\n const stem = (x: string) => x.slice(0, 4);\n return stem(a) === stem(b) || a.startsWith(b) || b.startsWith(a);\n};\n\n/** Every \" \" pair appearing in a catalogue title. */\nfunction titleDenominations(title: string) {\n const w = fold(title).replace(/[^a-z0-9]+/g, \" \").trim().split(\" \");\n const found: { num: number; unit: string }[] = [];\n for (let i = 0; i < w.length - 1; i++) {\n const n = /^\\d+$/.test(w[i])\n ? parseInt(w[i], 10)\n : NUM_WORDS[w[i]] !== undefined\n ? NUM_WORDS[w[i]]\n : null;\n if (n !== null && w[i + 1] && !/^\\d+$/.test(w[i + 1])) {\n found.push({ num: n, unit: w[i + 1] });\n }\n }\n return found;\n}\n\nfunction scoreCandidate(t: any, read: any) {\n const rawTitle = String(t.title ?? \"\");\n const title = fold(rawTitle);\n const issuerName = fold(String(t.issuer?.name ?? \"\"));\n const agree = { country: false, year: false, denomination: false };\n let score = 0;\n\n if (read.country && issuerName) {\n const c = fold(read.country);\n if (issuerName === c || issuerName.includes(c) || c.includes(issuerName)) {\n agree.country = true;\n score += 3;\n }\n }\n\n const y = parseInt(read.year, 10);\n if (y && (t.min_year || t.max_year)) {\n const lo = t.min_year ?? y, hi = t.max_year ?? y;\n if (y >= lo && y <= hi) {\n agree.year = true;\n score += 3;\n }\n }\n\n // Denomination must agree on the number, not just the unit.\n const want = denomParts(read.denomination);\n if (want.num !== null || want.unit) {\n const inTitle = titleDenominations(rawTitle);\n const exact = inTitle.some((d) =>\n d.num === want.num && (!want.unit || unitMatches(d.unit, want.unit))\n );\n if (exact) {\n agree.denomination = true;\n score += 4;\n } else if (\n want.unit && inTitle.some((d) => unitMatches(d.unit, want.unit))\n ) {\n // Right currency, wrong value. Actively wrong, not merely unsupported.\n score -= 2;\n }\n }\n\n const legendHits =\n tokens(read.legend).filter((w) => title.includes(w)).length;\n score += Math.min(2, legendHits);\n\n // Tokens and medals are not the coin someone photographed unless nothing\n // else fits, and they can never be Confirmed.\n const isCoin = String(t.category ?? \"coin\").toLowerCase() === \"coin\" &&\n !/^token\\b|^medal\\b|^jeton\\b/.test(title);\n if (!isCoin) score -= 3;\n\n const agreed = Object.values(agree).filter(Boolean).length;\n let tier = agreed === 3\n ? \"confirmed\"\n : agreed === 2\n ? \"likely\"\n : agreed === 1\n ? \"ambiguous\"\n : \"unknown\";\n if (!isCoin && tier === \"confirmed\") tier = \"likely\";\n\n return { score, tier, agree };\n}\n\nasync function identify(req: Request, cors: Record) {\n if (!env(\"NUMISTA_API_KEY\")) {\n return json({ error: \"numista_key_missing\" }, 500, cors);\n }\n\n let read: any;\n try {\n read = await req.json();\n } catch {\n return json({ error: \"bad_json\" }, 400, cors);\n }\n\n const issuerCode = await resolveIssuer(read.country);\n const q = [read.denomination, issuerCode ? null : read.country]\n .filter(Boolean).join(\" \").trim();\n\n const url = new URL(`${NUMISTA_BASE}/types`);\n url.searchParams.set(\"lang\", \"en\");\n url.searchParams.set(\"count\", \"30\");\n if (q) url.searchParams.set(\"q\", q);\n if (issuerCode) url.searchParams.set(\"issuer\", issuerCode);\n if (read.year) url.searchParams.set(\"date\", String(read.year));\n\n const res = await fetch(url.toString(), { headers: numistaHeaders() });\n if (res.ok) await bumpUsage();\n if (!res.ok) {\n const detail = (await res.text()).slice(0, 300);\n console.error(\"numista search failed:\", res.status, detail);\n return json(\n { error: \"search_failed\", status: res.status, detail },\n 502,\n cors,\n );\n }\n const data = await res.json();\n const types = data.types ?? data.results ?? [];\n\n let ranked = types.map((t: any) => {\n const { score, tier, agree } = scoreCandidate(t, read);\n return {\n id: t.id,\n reference: `N# ${t.id}`,\n title: t.title ?? \"Untitled type\",\n issuer: t.issuer?.name ?? null,\n minYear: t.min_year ?? null,\n maxYear: t.max_year ?? null,\n category: t.category ?? null,\n score,\n tier,\n agree,\n };\n }).sort((a: any, b: any) => b.score - a.score).slice(0, 12);\n\n // Search results carry no measurements, so bring in detail for the shortlist.\n // Detail lookups are free and the licence allows 15 per search; 12 keeps a\n // margin. Diameter is the one field that can *contradict* a match rather\n // than merely support it — two coins can share country, date and\n // denomination and still be 15 mm apart.\n const wantedMm = parseFloat(read.diameter);\n if (wantedMm > 0 && ranked.length) {\n const shortlist = ranked.slice(0, 12);\n const details = await Promise.all(shortlist.map(async (c: any) => {\n try {\n const r = await fetch(`${NUMISTA_BASE}/types/${c.id}?lang=en`, {\n headers: numistaHeaders(),\n });\n if (!r.ok) return null;\n const d = await r.json();\n return parseFloat(d.size ?? d.diameter);\n } catch {\n return null;\n }\n }));\n\n shortlist.forEach((c: any, i: number) => {\n const mm = details[i];\n if (!mm) return;\n c.diameter = mm;\n const delta = Math.abs(mm - wantedMm);\n c.diameterDelta = Math.round(delta * 100) / 100;\n if (delta <= 0.6) {\n c.score += 4;\n c.diameterAgrees = true;\n } else if (delta > 1.5) {\n // A measurement this far out rules the candidate out, whatever else\n // agrees. Never leave it sitting at Confirmed.\n c.score -= 8;\n c.diameterAgrees = false;\n if (c.tier === \"confirmed\" || c.tier === \"likely\") c.tier = \"ambiguous\";\n }\n });\n ranked = shortlist.sort((a: any, b: any) => b.score - a.score);\n }\n\n return json(\n {\n query: {\n q,\n issuer: issuerCode,\n date: read.year ?? null,\n diameter: read.diameter ?? null,\n },\n total: data.count ?? types.length,\n candidates: ranked,\n // Every result must carry its N# and credit the source.\n attribution: \"Catalogue data and N# references by Numista\",\n },\n 200,\n cors,\n );\n}\n\n/* ------------------------ Type detail ------------------------ */\n\n/**\n * One catalogue type, flattened to what the detail screen renders.\n *\n * Detail lookups are free — only searches count against the monthly cap — so\n * browsing a saved collection costs nothing. The response is still never\n * cached: the licence allows storing the N# indefinitely but not the metadata.\n */\nasync function typeDetail(id: string, cors: Record) {\n if (!env(\"NUMISTA_API_KEY\")) {\n return json({ error: \"numista_key_missing\" }, 500, cors);\n }\n if (!/^\\d+$/.test(id)) return json({ error: \"bad_type_id\", id }, 400, cors);\n\n const res = await fetch(`${NUMISTA_BASE}/types/${id}?lang=en`, {\n headers: numistaHeaders(),\n });\n if (!res.ok) {\n const detail = (await res.text()).slice(0, 300);\n console.error(\"numista type lookup failed:\", res.status, detail);\n return json(\n { error: \"lookup_failed\", status: res.status, detail },\n 502,\n cors,\n );\n }\n const t = await res.json();\n\n // Field names vary across the catalogue, so try each plausible spelling\n // rather than trusting one shape.\n const first = (...vals: any[]) =>\n vals.find((v) => v !== undefined && v !== null && v !== \"\") ?? null;\n const text = (v: any) =>\n typeof v === \"string\" ? v : (v?.text ?? v?.name ?? null);\n const size = first(t.size, t.diameter);\n\n const specs = [\n [\"Composition\", text(t.composition)],\n [\"Weight\", t.weight ? `${t.weight} g` : null],\n [\"Diameter\", size ? `${size} mm` : null],\n [\"Thickness\", t.thickness ? `${t.thickness} mm` : null],\n [\"Edge\", text(t.edge)],\n [\"Shape\", text(t.shape)],\n [\"Orientation\", text(t.orientation)],\n [\n \"Demonetised\",\n text(t.demonetization?.demonetized ? t.demonetization.date : null),\n ],\n ].filter(([, v]) => v).map(([label, value]) => ({ label, value }));\n\n return json(\n {\n id: t.id ?? Number(id),\n reference: `N# ${t.id ?? id}`,\n title: t.title ?? \"Untitled type\",\n issuer: t.issuer?.name ?? null,\n category: t.category ?? null,\n minYear: first(t.min_year, t.commemorated_topic?.year),\n maxYear: t.max_year ?? null,\n ruler: Array.isArray(t.ruler)\n ? t.ruler.map((r: any) => r.name).filter(Boolean).join(\", \")\n : text(t.ruler),\n obverse: {\n description: t.obverse?.description ?? null,\n lettering: t.obverse?.lettering ?? null,\n },\n reverse: {\n description: t.reverse?.description ?? null,\n lettering: t.reverse?.lettering ?? null,\n },\n specs,\n url: `https://en.numista.com/catalogue/pieces${t.id ?? id}.html`,\n attribution: \"Catalogue data and N# reference by Numista\",\n },\n 200,\n cors,\n );\n}","createdAt",["D",1788270190379],"branchVersion","branchId","1f00a449-6d8b-42fb-a2f3-de46d64606c0","id","def4143d-6955-45cf-aaa7-7049effcd7c9","coinscan",["D",1788201080008],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","app to scan coins","imageUrl","5b86aa70-b016-4007-a54f-8f848d181a22","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a05914-dac0-70cc-9939-9edb92f8eaa0","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_103":99},"org",{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},"branch",{"_13":14,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","derekhatfield","handle","displayName","Derek Hatfield","avatar","https://lh3.googleusercontent.com/a/ACg8ocI3F1_Trae1DnUNLFp9mUWrmuNMJhh9Dz1xk5r2x1lUZrqkHw=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":151,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":152,"_80":153,"_82":154,"_84":25},"tree",[146],"files",[146],"counts",{"_134":62,"_135":136,"_137":62,"_138":139,"_140":141},"contents",[126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":58,"_38":130,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_27":133},"c5f6261e-81b7-4b32-acc6-4bfb22b17879","parentId","latest",["D",1788270190379],10,"label",[28],"pulls","branches",1,"forks","envVars",{"_142":144,"_145":62},"connections",{"_142":62,"_143":62},"count","unfilledCount",4,"emptyCount",{"_43":127,"_32":28,"_30":31,"_128":-5,"_41":42,"_40":14,"_129":58,"_38":147,"_13":131,"_33":34,"_35":37,"_24":25,"_132":-5,"_148":149,"_27":150},["D",1788270190379],"children",[],[28],["D",1788201080008],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},{"_13":14,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_78":-5,"_123":188,"_189":190,"_191":192,"_193":25,"_194":25,"_195":25,"_196":58,"_197":-5,"_198":-7,"_199":-7,"_200":62,"_201":25,"_202":25,"_203":-5,"_204":25,"_205":25,"_206":25,"_207":-5},"ENV",{"_159":160,"_161":162,"_163":85,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v15