[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_158":159,"_160":161},"routes/_app.x.$handle.$name",{"_99":98,"_32":45,"_106":89,"_27":53,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":58,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",8,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","26940810-abb6-11f1-9cb9-1607ee4eb77e","name","fileType","http","content","// Dock Log -> JobTread relay, written for val.town (val.town/create -> \"HTTP val\")\n// No install needed — this runs entirely in val.town's browser editor and gives\n// you a live https:// URL the moment you save it.\n//\n// SECURITY — do this before anything else:\n// 1. Any Grant Key that was ever pasted in plain text anywhere should be\n// treated as burned. Regenerate it in JobTread (Grants page).\n// 2. Put the key into val.town's \"Environment Variables\" panel as\n// GRANT_KEY. Never hardcode it in this file.\n// 3. Set a RELAY_SECRET env var too (any random string) — every write\n// route below requires it, so a stranger who finds your val.town URL\n// can't push mutations into your JobTread org. Read-only routes\n// (search, field lookup) don't require it, so your warehouse app's\n// picker UI can call them freely.\n//\n// STILL UNVERIFIED — confirm in JobTread's API Explorer before production use:\n// - The mutation name/shape for updating a Cost Item (`updateCostItem`)\n// is a guess. Confirm against a real Cost Item node in the Explorer.\n// - The `where` filter shape below (a flat [field, op, value] triple,\n// with the field itself sometimes needing to be a nested path like\n// [\"costGroup\", \"name\"]) is based on what worked during manual testing —\n// it is NOT officially documented, so re-verify if JobTread changes\n// anything.\n//\n// DESIGN — generic, not hardcoded to one item or one field:\n// A warehouse barcode identifies a physical item (e.g. \"Kohler Sink\").\n// It does NOT know which JobTread Cost Item it corresponds to — there can\n// be several (different jobs, different budget revisions, even duplicate\n// line items on the same job, as you saw with Whitmire). So the flow is:\n// 1. Manager scans the barcode in the warehouse app.\n// 2. Warehouse app calls GET /search-cost-items to search JobTread by\n// name (optionally scoped to a job) and shows a picker.\n// 3. Manager picks the right cost item. Warehouse app calls\n// GET /cost-item-fields to find out what custom fields exist on it\n// (Status, Location, whatever your org has configured) and builds a\n// form from that — nothing about field names is hardcoded here.\n// 4. Manager fills in values (e.g. Status = \"Checked In\",\n// Location = \"Office Storage Bay 1\") and the warehouse app calls\n// POST /checkin with a generic map of field ID -> value.\n\nconst GRANT_KEY = Deno.env.get(\"GRANT_KEY\") ?? \"\";\nconst RELAY_SECRET = Deno.env.get(\"RELAY_SECRET\") ?? \"\";\nconst JOBTREAD_API_URL = \"https://api.jobtread.com/pave\";\n\nfunction baseQuery(fields: Record) {\n return { query: { $: { grantKey: GRANT_KEY }, ...fields } };\n}\n\nasync function callJobTread(payload: unknown) {\n const response = await fetch(JOBTREAD_API_URL, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(payload),\n });\n let data;\n try {\n data = await response.json();\n } catch {\n throw new Error(\n `JobTread returned a non-JSON response (status ${response.status}).`,\n );\n }\n return { ok: response.ok && !data.errors, status: response.status, data };\n}\n\nconst CORS_HEADERS = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, x-relay-secret\",\n};\n\nfunction json(body: unknown, status = 200) {\n return new Response(JSON.stringify(body, null, 2), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...CORS_HEADERS },\n });\n}\n\nfunction isAuthorized(req: Request): boolean {\n if (!RELAY_SECRET) return true; // no secret configured yet — allows setup/testing\n return req.headers.get(\"x-relay-secret\") === RELAY_SECRET;\n}\n\n// ---------- Query builders ----------\n\nfunction buildWhoAmIQuery() {\n return baseQuery({\n currentGrant: {\n user: { memberships: { nodes: { organization: { id: {}, name: {} } } } },\n },\n });\n}\n\n// Search cost items by name, optionally scoped to one job. Powers the\n// warehouse app's \"pick which JobTread item this is\" search box.\nfunction buildSearchCostItemsQuery(opts: {\n jobId?: string;\n nameContains: string;\n size?: number;\n}) {\n const itemsField = {\n $: {\n size: opts.size ?? 20,\n where: [\"name\", \"like\", `%${opts.nameContains}%`],\n },\n nodes: {\n id: {},\n name: {},\n costGroup: { id: {}, name: {} },\n job: { id: {}, name: {} },\n },\n };\n\n if (opts.jobId) {\n return baseQuery({\n job: { $: { id: opts.jobId }, id: {}, costItems: itemsField },\n });\n }\n // No job given — search org-wide via the catalog instead.\n return baseQuery({\n organization: { $: {}, id: {}, costItems: itemsField },\n });\n}\n\n// Pull every custom field + current value on one cost item, so the\n// warehouse app can build a form without any field name hardcoded here.\nfunction buildCostItemFieldsQuery(costItemId: string) {\n return baseQuery({\n costItem: {\n $: { id: costItemId },\n id: {},\n name: {},\n customFieldValues: {\n $: { size: 25 },\n nodes: { id: {}, value: {}, customField: { id: {}, name: {} } },\n },\n },\n });\n}\n\n// Generic update: caller supplies a map of { customFieldId: value }.\n// No assumption here about which fields exist or what they're called.\nfunction buildUpdateCostItemMutation(\n costItemId: string,\n fields: Record,\n) {\n if (!costItemId) throw new Error(\"costItemId is required.\");\n if (!fields || Object.keys(fields).length === 0) {\n throw new Error(\"At least one field value is required.\");\n }\n return baseQuery({\n // VERIFY: mutation name/shape unconfirmed — check API Explorer.\n updateCostItem: {\n $: { id: costItemId, customFieldValues: fields },\n id: {},\n },\n });\n}\n\n// ---------- Routes ----------\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: CORS_HEADERS });\n }\n\n if (!GRANT_KEY) {\n return json(\n {\n error:\n \"GRANT_KEY is not set. Add it in val.town's Environment Variables panel.\",\n },\n 500,\n );\n }\n\n if (url.pathname === \"/whoami\") {\n try {\n const result = await callJobTread(buildWhoAmIQuery());\n return json(result.data, result.ok ? 200 : 502);\n } catch (err) {\n return json({ error: String(err) }, 500);\n }\n }\n\n if (url.pathname === \"/search-cost-items\") {\n const q = url.searchParams.get(\"q\");\n const jobId = url.searchParams.get(\"jobId\") ?? undefined;\n if (!q) {\n return json(\n { error: \"Pass ?q=search-term (and optionally &jobId=...).\" },\n 400,\n );\n }\n try {\n const result = await callJobTread(\n buildSearchCostItemsQuery({ jobId, nameContains: q }),\n );\n return json(result.data, result.ok ? 200 : 502);\n } catch (err) {\n return json({ error: String(err) }, 500);\n }\n }\n\n if (url.pathname === \"/cost-item-fields\") {\n const costItemId = url.searchParams.get(\"costItemId\");\n if (!costItemId) return json({ error: \"Pass ?costItemId=...\" }, 400);\n try {\n const result = await callJobTread(buildCostItemFieldsQuery(costItemId));\n return json(result.data, result.ok ? 200 : 502);\n } catch (err) {\n return json({ error: String(err) }, 500);\n }\n }\n\n if (url.pathname === \"/checkin\" && req.method === \"POST\") {\n if (!isAuthorized(req)) {\n return json({ error: \"Missing or invalid x-relay-secret header.\" }, 401);\n }\n try {\n // Expected body: { \"costItemId\": \"...\", \"fields\": { \"\": \"value\", ... } }\n const body = await req.json();\n const result = await callJobTread(\n buildUpdateCostItemMutation(body.costItemId, body.fields),\n );\n return json(\n { ok: result.ok, jobtread: result.data },\n result.ok ? 200 : 502,\n );\n } catch (err) {\n return json({ error: String(err) }, 500);\n }\n }\n\n return json({\n status: \"Dock Log relay is running\",\n routes: [\n \"GET /whoami\",\n \"GET /search-cost-items?q=...&jobId=... (optional)\",\n \"GET /cost-item-fields?costItemId=...\",\n \"POST /checkin body: { costItemId, fields: { : } }\",\n ],\n });\n}","// Dock Log — full app, single val.town HTTP val.\n// Paste this whole file into a new val at val.town, set its type to \"HTTP\",\n// and save. That gives you one URL that serves both the installable PWA\n// (open it on a phone -> \"Add to Home Screen\") and its own API + database.\n//\n// ============================================================================\n// SETUP — do this in order:\n// ============================================================================\n// 1. In val.town's Environment Variables panel for this val, set:\n// GRANT_KEY — a fresh JobTread grant key (regenerate if the old one\n// was ever pasted anywhere in plain text).\n// ADMIN_KEY — any random string you pick. Required to run a JobTread\n// sync or add/remove allowlisted users. Not required to\n// scan items — anyone on the allowlist can do that with\n// no password, as requested.\n// 2. Open the val's URL on your phone, tap the browser menu ->\n// \"Add to Home Screen.\" That's the installable app.\n// 3. Go to the Admin tab in the app, enter your ADMIN_KEY, and run a sync.\n// Syncing pulls every job's \"Selections\" and \"Specifications\" cost\n// items into this app's own database. It runs in chunks (one job's\n// current page at a time) because a single request can't safely pull\n// hundreds of jobs' full budgets before timing out — the progress bar\n// reflects that, this isn't a bug.\n//\n// ============================================================================\n// STILL UNVERIFIED — confirm in JobTread's API Explorer before trusting in\n// production:\n// ============================================================================\n// - The mutation name/shape for updating a Cost Item (`updateCostItem`)\n// is a guess, not confirmed against JobTread's real schema.\n// - The exact std/sqlite import path/export shape has shifted across\n// val.town's docs (`import sqlite from \".../main.ts\"` in one place,\n// `import { sqlite } from \".../main.ts\"` in another). This file uses\n// the named-export form. If it errors on save, try the default-export\n// form instead — it's a one-line fix, noted at the import below.\n//\n// ============================================================================\n// DATA MODEL\n// ============================================================================\n// jobs — synced from JobTread: id, name\n// items — synced from JobTread: jobtread cost item id, name, job,\n// cost group, and a JSON snapshot of its custom fields\n// (id/name/value) as of the last sync\n// barcodes — maps a physical scanned code to one item (set once by\n// whoever scans it the first time; editable later)\n// users — allowlist of names permitted to scan\n// activity — permanent log: item, user, action, fields changed, timestamp\n// sync_state — single-row table tracking where a chunked sync is up to\n\n// If this import errors, try: `import sqlite from \"https://esm.town/v/std/sqlite/main.ts\";`\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst GRANT_KEY = Deno.env.get(\"GRANT_KEY\") ?? \"\";\nconst ADMIN_KEY = Deno.env.get(\"ADMIN_KEY\") ?? \"\";\nconst JOBTREAD_API_URL = \"https://api.jobtread.com/pave\";\nconst SYNC_GROUP_NAMES = [\"Selections\", \"Specifications\"];\n\n// ---------------------------------------------------------------------------\n// DB setup\n// ---------------------------------------------------------------------------\nasync function ensureSchema() {\n await sqlite.batch([\n {\n sql: `CREATE TABLE IF NOT EXISTS jobs (\n id TEXT PRIMARY KEY, name TEXT\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS items (\n id TEXT PRIMARY KEY,\n job_id TEXT, job_name TEXT,\n cost_group TEXT, name TEXT,\n custom_fields TEXT,\n updated_at TEXT\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS barcodes (\n code TEXT PRIMARY KEY, item_id TEXT\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT, name TEXT UNIQUE\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS activity (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n item_id TEXT, item_name TEXT, job_name TEXT,\n user_name TEXT, fields TEXT, ts TEXT\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS sync_state (\n id INTEGER PRIMARY KEY CHECK (id = 1),\n status TEXT, job_ids TEXT, job_cursor INTEGER,\n page_cursor TEXT, items_synced INTEGER, last_error TEXT\n )`,\n },\n ]);\n}\n\n// ---------------------------------------------------------------------------\n// JobTread helpers\n// ---------------------------------------------------------------------------\nfunction baseQuery(fields: Record) {\n return { query: { $: { grantKey: GRANT_KEY }, ...fields } };\n}\nasync function callJobTread(payload: unknown) {\n const res = await fetch(JOBTREAD_API_URL, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify(payload),\n });\n let data;\n try {\n data = await res.json();\n } catch {\n throw new Error(`JobTread returned non-JSON (status ${res.status}).`);\n }\n if (data?.errors) throw new Error(JSON.stringify(data.errors));\n return data;\n}\n\nasync function fetchAllJobs(): Promise<{ id: string; name: string }[]> {\n const all: { id: string; name: string }[] = [];\n let page: string | undefined;\n for (let i = 0; i < 50; i++) { // hard cap so a bug can't loop forever\n const data = await callJobTread(baseQuery({\n organization: {\n $: {},\n id: {},\n jobs: {\n $: { size: 100, ...(page ? { page } : {}) },\n nextPage: {},\n nodes: { id: {}, name: {} },\n },\n },\n }));\n const nodes = data?.organization?.jobs?.nodes ?? [];\n all.push(...nodes);\n const next = data?.organization?.jobs?.nextPage;\n if (!next) break;\n page = next;\n }\n return all;\n}\n\nasync function fetchCostItemsPage(jobId: string, page?: string) {\n const data = await callJobTread(baseQuery({\n job: {\n $: { id: jobId },\n id: {},\n name: {},\n costItems: {\n $: { size: 100, ...(page ? { page } : {}) },\n nextPage: {},\n nodes: {\n id: {},\n name: {},\n costGroup: { id: {}, name: {} },\n customFieldValues: {\n $: { size: 25 },\n nodes: { id: {}, value: {}, customField: { id: {}, name: {} } },\n },\n },\n },\n },\n }));\n return {\n jobName: data?.job?.name ?? \"\",\n nodes: data?.job?.costItems?.nodes ?? [],\n nextPage: data?.job?.costItems?.nextPage ?? null,\n };\n}\n\nfunction buildUpdateCostItemMutation(\n costItemId: string,\n fields: Record,\n) {\n return baseQuery({\n // VERIFY: mutation name/shape unconfirmed — check API Explorer.\n updateCostItem: {\n $: { id: costItemId, customFieldValues: fields },\n id: {},\n },\n });\n}\n\n// ---------------------------------------------------------------------------\n// Sync (chunked — one job's one page per call)\n// ---------------------------------------------------------------------------\nasync function syncStart() {\n const jobs = await fetchAllJobs();\n for (const j of jobs) {\n await sqlite.execute({\n sql: `INSERT INTO jobs (id, name) VALUES (?, ?)\n ON CONFLICT(id) DO UPDATE SET name = excluded.name`,\n args: [j.id, j.name],\n });\n }\n await sqlite.execute({\n sql:\n `INSERT INTO sync_state (id, status, job_ids, job_cursor, page_cursor, items_synced, last_error)\n VALUES (1, 'running', ?, 0, NULL, 0, NULL)\n ON CONFLICT(id) DO UPDATE SET status='running', job_ids=excluded.job_ids,\n job_cursor=0, page_cursor=NULL, items_synced=0, last_error=NULL`,\n args: [JSON.stringify(jobs)],\n });\n return { totalJobs: jobs.length };\n}\n\nasync function syncStep() {\n const { rows } = await sqlite.execute(\n \"SELECT * FROM sync_state WHERE id = 1\",\n );\n const state = rows[0] as any;\n if (!state || state.status !== \"running\") {\n return { done: true, message: \"No sync in progress.\" };\n }\n const jobs: { id: string; name: string }[] = JSON.parse(state.job_ids);\n if (state.job_cursor >= jobs.length) {\n await sqlite.execute(\"UPDATE sync_state SET status='done' WHERE id=1\");\n return { done: true, itemsSynced: state.items_synced };\n }\n const job = jobs[state.job_cursor];\n try {\n const page = await fetchCostItemsPage(\n job.id,\n state.page_cursor || undefined,\n );\n let count = state.items_synced;\n for (const node of page.nodes) {\n const groupName = node.costGroup?.name;\n if (!SYNC_GROUP_NAMES.includes(groupName)) continue;\n const fields = (node.customFieldValues?.nodes ?? []).map((n: any) => ({\n id: n.customField?.id,\n name: n.customField?.name,\n value: n.value ?? \"\",\n }));\n await sqlite.execute({\n sql:\n `INSERT INTO items (id, job_id, job_name, cost_group, name, custom_fields, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET job_id=excluded.job_id, job_name=excluded.job_name,\n cost_group=excluded.cost_group, name=excluded.name,\n custom_fields=excluded.custom_fields, updated_at=excluded.updated_at`,\n args: [\n node.id,\n job.id,\n page.jobName || job.name,\n groupName,\n node.name,\n JSON.stringify(fields),\n new Date().toISOString(),\n ],\n });\n count++;\n }\n if (page.nextPage) {\n await sqlite.execute({\n sql: `UPDATE sync_state SET page_cursor=?, items_synced=? WHERE id=1`,\n args: [page.nextPage, count],\n });\n return {\n done: false,\n currentJob: job.name,\n jobIndex: state.job_cursor,\n totalJobs: jobs.length,\n itemsSynced: count,\n };\n } else {\n await sqlite.execute({\n sql:\n `UPDATE sync_state SET job_cursor=?, page_cursor=NULL, items_synced=? WHERE id=1`,\n args: [state.job_cursor + 1, count],\n });\n return {\n done: false,\n currentJob: job.name,\n jobIndex: state.job_cursor + 1,\n totalJobs: jobs.length,\n itemsSynced: count,\n };\n }\n } catch (err) {\n await sqlite.execute({\n sql: `UPDATE sync_state SET status='error', last_error=? WHERE id=1`,\n args: [String(err)],\n });\n return { done: true, error: String(err), currentJob: job.name };\n }\n}\n\n// ---------------------------------------------------------------------------\n// HTTP helpers\n// ---------------------------------------------------------------------------\nfunction json(body: unknown, status = 200) {\n return new Response(JSON.stringify(body), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\nfunction html(body: string, status = 200) {\n return new Response(body, {\n status,\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n}\nfunction isAdmin(req: Request) {\n return !!ADMIN_KEY && req.headers.get(\"x-admin-key\") === ADMIN_KEY;\n}\n\n// ---------------------------------------------------------------------------\n// Main handler\n// ---------------------------------------------------------------------------\nexport default async function (req: Request): Promise {\n await ensureSchema();\n const url = new URL(req.url);\n const p = url.pathname;\n\n // ---- Static app shell ----\n if (p === \"/\") return html(APP_HTML);\n if (p === \"/manifest.json\") {\n return json(MANIFEST);\n }\n if (p === \"/sw.js\") {\n return new Response(SW_JS, {\n headers: { \"Content-Type\": \"application/javascript\" },\n });\n }\n\n // ---- Admin: sync ----\n if (p === \"/api/sync/start\" && req.method === \"POST\") {\n if (!isAdmin(req)) return json({ error: \"Admin key required.\" }, 401);\n if (!GRANT_KEY) return json({ error: \"GRANT_KEY not set.\" }, 500);\n try {\n return json(await syncStart());\n } catch (e) {\n return json({ error: String(e) }, 500);\n }\n }\n if (p === \"/api/sync/step\" && req.method === \"POST\") {\n if (!isAdmin(req)) return json({ error: \"Admin key required.\" }, 401);\n try {\n return json(await syncStep());\n } catch (e) {\n return json({ error: String(e) }, 500);\n }\n }\n if (p === \"/api/sync/status\") {\n const { rows } = await sqlite.execute(\n \"SELECT status, job_cursor, items_synced, last_error FROM sync_state WHERE id=1\",\n );\n return json(rows[0] ?? { status: \"never_run\" });\n }\n\n // ---- Users (allowlist) ----\n if (p === \"/api/users\" && req.method === \"GET\") {\n const { rows } = await sqlite.execute(\n \"SELECT name FROM users ORDER BY name\",\n );\n return json(rows.map((r: any) => r.name));\n }\n if (p === \"/api/users\" && req.method === \"POST\") {\n if (!isAdmin(req)) return json({ error: \"Admin key required.\" }, 401);\n const { name } = await req.json();\n if (!name || !name.trim()) return json({ error: \"Name required.\" }, 400);\n await sqlite.execute({\n sql: \"INSERT INTO users (name) VALUES (?) ON CONFLICT(name) DO NOTHING\",\n args: [name.trim()],\n });\n return json({ ok: true });\n }\n if (p === \"/api/users\" && req.method === \"DELETE\") {\n if (!isAdmin(req)) return json({ error: \"Admin key required.\" }, 401);\n const { name } = await req.json();\n await sqlite.execute({\n sql: \"DELETE FROM users WHERE name = ?\",\n args: [name],\n });\n return json({ ok: true });\n }\n\n // ---- Items (search, grouped by job) ----\n if (p === \"/api/items\" && req.method === \"GET\") {\n const q = url.searchParams.get(\"q\") || \"\";\n const { rows } = await sqlite.execute({\n sql:\n `SELECT * FROM items WHERE name LIKE ? ORDER BY job_name, name LIMIT 200`,\n args: [`%${q}%`],\n });\n return json(rows);\n }\n if (p === \"/api/item\" && req.method === \"GET\") {\n const id = url.searchParams.get(\"id\");\n const { rows } = await sqlite.execute({\n sql: \"SELECT * FROM items WHERE id = ?\",\n args: [id],\n });\n return json(rows[0] ?? null);\n }\n\n // ---- Barcodes ----\n if (p === \"/api/barcode\" && req.method === \"GET\") {\n const code = url.searchParams.get(\"code\");\n const { rows } = await sqlite.execute({\n sql:\n `SELECT b.code, i.* FROM barcodes b JOIN items i ON i.id = b.item_id WHERE b.code = ?`,\n args: [code],\n });\n return json(rows[0] ?? null);\n }\n if (p === \"/api/barcode\" && req.method === \"POST\") {\n const { code, itemId } = await req.json();\n if (!code || !itemId) {\n return json({ error: \"code and itemId required.\" }, 400);\n }\n await sqlite.execute({\n sql: `INSERT INTO barcodes (code, item_id) VALUES (?, ?)\n ON CONFLICT(code) DO UPDATE SET item_id = excluded.item_id`,\n args: [code, itemId],\n });\n return json({ ok: true });\n }\n\n // ---- Scan action: update local record + JobTread + log ----\n if (p === \"/api/scan\" && req.method === \"POST\") {\n const body = await req.json();\n const { itemId, userName, fields } = body; // fields: { fieldId: value }\n if (!itemId || !userName || !fields) {\n return json({ error: \"itemId, userName, fields required.\" }, 400);\n }\n\n const { rows } = await sqlite.execute({\n sql: \"SELECT * FROM items WHERE id = ?\",\n args: [itemId],\n });\n const item = rows[0] as any;\n if (!item) return json({ error: \"Unknown item.\" }, 404);\n\n let jtOk = true, jtError: string | null = null;\n if (GRANT_KEY) {\n try {\n await callJobTread(buildUpdateCostItemMutation(itemId, fields));\n } catch (e) {\n jtOk = false;\n jtError = String(e);\n }\n } else {\n jtOk = false;\n jtError = \"GRANT_KEY not set on server.\";\n }\n\n // Update local snapshot of custom fields regardless, so the app's own\n // record stays current even if the JobTread push failed.\n const existing = JSON.parse(item.custom_fields || \"[]\");\n const merged = existing.map((f: any) =>\n fields[f.id] !== undefined ? { ...f, value: fields[f.id] } : f\n );\n await sqlite.execute({\n sql: \"UPDATE items SET custom_fields = ?, updated_at = ? WHERE id = ?\",\n args: [JSON.stringify(merged), new Date().toISOString(), itemId],\n });\n\n await sqlite.execute({\n sql:\n `INSERT INTO activity (item_id, item_name, job_name, user_name, fields, ts)\n VALUES (?, ?, ?, ?, ?, ?)`,\n args: [\n itemId,\n item.name,\n item.job_name,\n userName,\n JSON.stringify(fields),\n new Date().toISOString(),\n ],\n });\n\n return json({ ok: true, jobtreadUpdated: jtOk, jobtreadError: jtError });\n }\n\n // ---- Activity log ----\n if (p === \"/api/activity\" && req.method === \"GET\") {\n const jobName = url.searchParams.get(\"job\");\n const { rows } = jobName\n ? await sqlite.execute({\n sql:\n \"SELECT * FROM activity WHERE job_name = ? ORDER BY id DESC LIMIT 300\",\n args: [jobName],\n })\n : await sqlite.execute(\n \"SELECT * FROM activity ORDER BY id DESC LIMIT 300\",\n );\n return json(rows);\n }\n\n // ---- CSV export (items + full activity log) ----\n if (p === \"/api/export.csv\") {\n const items =\n (await sqlite.execute(\"SELECT * FROM items ORDER BY job_name, name\"))\n .rows as any[];\n const activity =\n (await sqlite.execute(\"SELECT * FROM activity ORDER BY id\"))\n .rows as any[];\n const esc = (v: unknown) => `\"${String(v ?? \"\").replace(/\"/g, '\"\"')}\"`;\n let csv =\n \"== ITEMS ==\\nid,job_name,cost_group,name,custom_fields,updated_at\\n\";\n for (const i of items) {\n csv +=\n [i.id, i.job_name, i.cost_group, i.name, i.custom_fields, i.updated_at]\n .map(esc).join(\",\") + \"\\n\";\n }\n csv +=\n \"\\n== ACTIVITY ==\\nid,item_id,item_name,job_name,user_name,fields,ts\\n\";\n for (const a of activity) {\n csv +=\n [a.id, a.item_id, a.item_name, a.job_name, a.user_name, a.fields, a.ts]\n .map(esc).join(\",\") + \"\\n\";\n }\n return new Response(csv, {\n headers: {\n \"Content-Type\": \"text/csv\",\n \"Content-Disposition\": \"attachment; filename=dock-log-export.csv\",\n },\n });\n }\n\n return json({\n status: \"Dock Log app is running\",\n note: \"GET / for the app itself.\",\n }, 200);\n}\n\n// ---------------------------------------------------------------------------\n// PWA assets\n// ---------------------------------------------------------------------------\nconst MANIFEST = {\n name: \"Dock Log\",\n short_name: \"Dock Log\",\n start_url: \"/\",\n display: \"standalone\",\n background_color: \"#1c1b19\",\n theme_color: \"#1c1b19\",\n icons: [\n {\n src:\n \"data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 100 100'%3E%3Crect width='100' height='100' fill='%231c1b19'/%3E%3Crect x='40' y='20' width='20' height='60' fill='%23f2b705' transform='skewX(-8)'/%3E%3C/svg%3E\",\n sizes: \"100x100\",\n type: \"image/svg+xml\",\n },\n ],\n};\n\nconst SW_JS = `\nself.addEventListener('install', e => self.skipWaiting());\nself.addEventListener('activate', e => self.clients.claim());\nself.addEventListener('fetch', e => {}); // no offline caching yet — pass-through\n`;\n\nconst APP_HTML = `\n\n\n\n\nDock Log\n\n\n\n\n\n\n

Dock Log

Pick your name to start scanning

Not listed? Ask your manager to add you in the Admin tab.

\n\n

\n \n\n

Scan an item

\n \n

\n\n

Find an item

\n\n

Activity

\n Export CSV\n

\n\n

Admin

\n Admin key\n \n \n

\n JobTread sync\n \n

\n Allowlisted users\n

\n \n \n

\n\n \n

\n\n\n\n`;","createdAt",["D",1788899001892],"branchVersion","branchId","14ec610f-0b41-45b4-8a67-de9e2a917eef","id","063b15b5-d155-4f31-b2b0-d0ed6b806855","inventory-tracker-v1",["D",1788893424402],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","a99c582c-0790-45a6-b8d7-6f1f8ac0d3c5","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0825a-3e94-74cf-8ce3-e4ed8ffbdc07","tursoName","063b15b5d1554f31b2b0d0ed6b806855","tursoHostname","063b15b5d1554f31b2b0d0ed6b806855-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789511441255],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_105":53},"org",{"_99":98,"_100":53,"_101":53,"_18":55,"_102":103,"_104":25},"branch",{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"isOwned",117,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","derrickrunger","handle","displayName","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":153,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":31,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":154,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":155,"_83":156,"_85":157,"_87":25},"tree",[148],"files",[148],"counts",{"_136":62,"_137":138,"_139":62,"_140":141,"_142":143},"contents",[127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":131,"_13":132,"_33":34,"_35":37,"_24":25,"_133":134,"_27":135},"008f2ea7-52df-468d-a4e1-a806da7995c0","parentId","latest",["D",1788899001892],7,"label","crdinventory",[28],"pulls","branches",1,"forks","envVars",{"_144":146,"_147":62},"connections",{"_144":62,"_145":62},"count","unfilledCount",2,"emptyCount",{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":149,"_13":132,"_33":34,"_35":37,"_24":25,"_133":134,"_150":151,"_27":152},["D",1788899001892],"children",[],[28],["D",1788893424402],["D",1789511441255],{"_99":98,"_105":53},{"_99":98,"_100":53,"_101":53,"_18":55,"_102":103,"_104":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_124":191,"_192":193,"_194":195,"_196":25,"_197":25,"_198":25,"_199":58,"_200":-5,"_201":-7,"_202":-7,"_203":62,"_204":25,"_205":25,"_206":-5,"_207":25,"_208":25,"_209":25,"_210":-5},"ENV",{"_162":163,"_164":165,"_166":89,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v8