[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_218":219,"_220":221},"routes/_app.x.$handle.$name",{"_98":97,"_31":43,"_107":88,"_26":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":24,"_122":123,"_124":57,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",4,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","auth.ts","latestPath","fileId","75430aa0-a086-11f1-acf9-1607ee4eb77e","name","fileType","script","content","import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getCookie, setCookie, deleteCookie } from \"npm:hono@4/cookie\";\nimport type { Context } from \"npm:hono@4\";\n\nconst SESSION_COOKIE = \"isento_session\";\nconst SESSION_DAYS = 14;\n\nfunction toHex(buf: ArrayBuffer): string {\n return Array.from(new Uint8Array(buf)).map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nfunction randomHex(bytes: number): string {\n const arr = new Uint8Array(bytes);\n crypto.getRandomValues(arr);\n return toHex(arr.buffer);\n}\n\nasync function pbkdf2(password: string, saltHex: string): Promise {\n const enc = new TextEncoder();\n const keyMaterial = await crypto.subtle.importKey(\n \"raw\",\n enc.encode(password),\n \"PBKDF2\",\n false,\n [\"deriveBits\"],\n );\n const saltBytes = new Uint8Array(saltHex.match(/.{2}/g)!.map((h) => parseInt(h, 16)));\n const bits = await crypto.subtle.deriveBits(\n { name: \"PBKDF2\", salt: saltBytes, iterations: 100_000, hash: \"SHA-256\" },\n keyMaterial,\n 256,\n );\n return toHex(bits);\n}\n\nexport async function hashPassword(password: string): Promise<{ hash: string; salt: string }> {\n const salt = randomHex(16);\n const hash = await pbkdf2(password, salt);\n return { hash, salt };\n}\n\nexport async function verifyPassword(password: string, hash: string, salt: string): Promise {\n const computed = await pbkdf2(password, salt);\n return computed === hash;\n}\n\nexport interface SessionUser {\n id: number;\n name: string;\n username: string;\n role: \"staff\" | \"owner\";\n position: string | null;\n}\n\nexport async function createSession(userId: number): Promise {\n const token = randomHex(32);\n const expires = new Date(Date.now() + SESSION_DAYS * 24 * 60 * 60 * 1000).toISOString();\n await sqlite.execute({\n sql: \"INSERT INTO sessions (token, user_id, expires_at) VALUES (?, ?, ?)\",\n args: [token, userId, expires],\n });\n return token;\n}\n\nexport function setSessionCookie(c: Context, token: string) {\n setCookie(c, SESSION_COOKIE, token, {\n httpOnly: true,\n secure: true,\n sameSite: \"Lax\",\n path: \"/\",\n maxAge: SESSION_DAYS * 24 * 60 * 60,\n });\n}\n\nexport function clearSessionCookie(c: Context) {\n deleteCookie(c, SESSION_COOKIE, { path: \"/\" });\n}\n\nexport async function getCurrentUser(c: Context): Promise {\n const token = getCookie(c, SESSION_COOKIE);\n if (!token) return null;\n const res = await sqlite.execute({\n sql: `SELECT u.id, u.name, u.username, u.role, u.position\n FROM sessions s JOIN users u ON u.id = s.user_id\n WHERE s.token = ? AND s.expires_at > datetime('now') AND u.active = 1`,\n args: [token],\n });\n if (res.rows.length === 0) return null;\n return res.rows[0] as unknown as SessionUser;\n}\n\nexport async function destroySession(c: Context) {\n const token = getCookie(c, SESSION_COOKIE);\n if (token) {\n await sqlite.execute({ sql: \"DELETE FROM sessions WHERE token = ?\", args: [token] });\n }\n clearSessionCookie(c);\n}\n","createdAt",["D",1787663477842],"branchVersion","branchId","700f5db6-dbe9-4221-89f4-c1af68565814","id","f6d544b2-720a-4193-9797-fd95cddc322a","isento",["D",1787663386761],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Isento property ops: staff/owner/guest portals + fee ledger","imageUrl","0d80088e-7112-4b81-b513-1efae25ea3d8","pinnedFileId","01a0390a-88ed-72fa-80c5-6c5a22bf21c2","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a03906-2a46-7197-a3ac-792ee8e04a5c","tursoName","f6d544b2720a41939797fd95cddc322a","tursoHostname","f6d544b2720a41939797fd95cddc322a-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789485645684],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":53,"_103":104,"_105":24},"branch",{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"isOwned",24,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","imeldaedodollon","handle","displayName","imelda edodollon","avatar","https://lh3.googleusercontent.com/a/ACg8ocKr1iICq7J9VyfzCVOdogvCtL322dGPfd-X6jqTWmG5_i8FBgQ=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":213,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":214,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":215,"_82":216,"_84":217,"_86":24},"tree",[176,179,180,181,182],"files",[176,177,178,179,180,181,182],"counts",{"_166":61,"_167":137,"_168":61,"_169":170,"_171":172},"contents",[129,130,131,132,133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":161,"_31":48,"_29":162,"_136":-5,"_39":40,"_38":137,"_138":57,"_36":163,"_13":61,"_32":164,"_34":-5,"_23":24,"_142":-5,"_26":165},{"_41":155,"_31":156,"_29":157,"_136":-5,"_39":40,"_38":137,"_138":57,"_36":158,"_13":61,"_32":20,"_34":159,"_23":24,"_142":-5,"_26":160},{"_41":152,"_31":27,"_29":30,"_136":-5,"_39":40,"_38":14,"_138":57,"_36":153,"_13":61,"_32":33,"_34":35,"_23":24,"_142":-5,"_26":154},{"_41":145,"_31":146,"_29":147,"_136":-5,"_39":40,"_38":148,"_138":24,"_36":149,"_13":137,"_32":33,"_34":150,"_23":24,"_142":-5,"_26":151},{"_41":134,"_31":135,"_29":55,"_136":-5,"_39":40,"_38":137,"_138":24,"_36":139,"_13":61,"_32":140,"_34":141,"_23":24,"_142":143,"_26":144},"1bf47edb-a3ad-4748-8218-66ebfe8c8b1a","index.tsx","parentId",1,"latest",["D",1787663386761],"http","/** @jsxImportSource npm:hono@4/jsx */\nimport { Hono } from \"npm:hono@4\";\nimport { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\n\n// In-memory state. Resets whenever the server restarts.\n// For persistence across restarts, use std/sqlite or std/blob.\nlet count = 0;\n\nconst Layout = ({ title, children }: { title: string; children: any }) => (\n \n \n {title}\n \n \n \n \n \n \n \n {children}\n \n \n);\n\nconst app = new Hono();\n\napp.get(\"/\", (c) =>\n c.html(\n \n

Hello from Hono JSX

\n A minimal Val Town starter.{\" \"}\n \n Remix this val.\n \n

\n Server count:{\" \"}\n {count}\n

\n \n Increment\n \n

\n Lives in memory on the server. Resets when the val restarts.\n

\n \n ,\n ));\n\napp.get(\"/about\", (c) =>\n c.html(\n \n

About

Server-rendered with Hono JSX on Val Town.

\n ,\n ));\n\n// API routes\napp.post(\"/api/increment\", (c) => c.json({ count: ++count }));\n\n// Serve static files\napp.get(\"/public/*\", (c) => serveFile(c.req.path));\n\n// View source on Val Town\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// Unwrap and rethrow Hono errors as the original error\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;","label","isento-ops",[135],"254683cd-86f9-42b6-8d01-071940764677","db.ts","6af305dc-a086-11f1-b89c-1607ee4eb77e",3,["D",1787663465447],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function initDb() {\n await sqlite.batch([\n {\n sql: `CREATE TABLE IF NOT EXISTS users (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n username TEXT NOT NULL UNIQUE,\n password_hash TEXT NOT NULL,\n salt TEXT NOT NULL,\n role TEXT NOT NULL CHECK(role IN ('staff','owner')),\n position TEXT,\n active INTEGER NOT NULL DEFAULT 1,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS sessions (\n token TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL REFERENCES users(id),\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n expires_at TEXT NOT NULL\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS units (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n developer TEXT,\n location TEXT,\n unit_no TEXT NOT NULL,\n room TEXT,\n sqm REAL,\n active INTEGER NOT NULL DEFAULT 1\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS bookings (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n unit_id INTEGER NOT NULL REFERENCES units(id),\n guest_name TEXT NOT NULL,\n channel TEXT NOT NULL CHECK(channel IN ('airbnb','booking_com','direct','other')),\n checkin_date TEXT NOT NULL,\n checkout_date TEXT NOT NULL,\n gross_revenue REAL NOT NULL DEFAULT 0,\n airbnb_fee REAL NOT NULL DEFAULT 0,\n booking_com_fee REAL NOT NULL DEFAULT 0,\n other_fee REAL NOT NULL DEFAULT 0,\n status TEXT NOT NULL DEFAULT 'confirmed' CHECK(status IN ('confirmed','checked_in','checked_out','cancelled')),\n access_code TEXT NOT NULL UNIQUE,\n arrival_notes TEXT,\n support_phone TEXT,\n support_email TEXT,\n created_by INTEGER REFERENCES users(id),\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS tasks (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n unit_id INTEGER NOT NULL REFERENCES units(id),\n booking_id INTEGER REFERENCES bookings(id),\n task_type TEXT NOT NULL CHECK(task_type IN ('cleaning','laundry','supplies','repair')),\n description TEXT NOT NULL,\n assigned_to INTEGER REFERENCES users(id),\n status TEXT NOT NULL DEFAULT 'todo' CHECK(status IN ('todo','in_progress','done')),\n due_date TEXT,\n created_by INTEGER REFERENCES users(id),\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n completed_at TEXT\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS notifications (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user_id INTEGER NOT NULL REFERENCES users(id),\n message TEXT NOT NULL,\n is_read INTEGER NOT NULL DEFAULT 0,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n },\n {\n sql: `CREATE TABLE IF NOT EXISTS leads (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n partner_name TEXT NOT NULL,\n website TEXT,\n contact_name TEXT,\n contact_email TEXT,\n contact_phone TEXT,\n status TEXT NOT NULL DEFAULT 'new' CHECK(status IN ('new','contacted','negotiating','won','lost')),\n potential_units INTEGER,\n notes TEXT,\n created_by INTEGER REFERENCES users(id),\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n },\n ]);\n}\n",[146],"51cc9a17-df20-4865-947d-695c7d4d673f",["D",1787663477842],[27],"944e8a27-f220-4d0e-9d5b-f515fbb9ab5b","README.md","01a0390a-88ed-72fa-80c5-6ae828b904a1",["D",1787663386761],"# hono-jsx-starter\n\nA minimal [Hono](https://hono.dev) + Hono JSX starter for Val Town.\nServer-rendered HTML, no build step, no React.\n\n## Picking a starter\n\n| Starter | When to pick it |\n| --- | --- |\n| [`basic-html-starter`](https://www.val.town/x/templates/basic-html-starter) | Static HTML pages. Sprinkle of vanilla JS. No server-side rendering. |\n| **[`hono-jsx-starter`](https://www.val.town/x/templates/hono-jsx-starter)** *(you're here)* | Dynamic server-rendered HTML with JSX. API routes. No React, no SPA. |\n| [`react-hono-starter`](https://www.val.town/x/templates/react-hono-starter) | Client-side React SPA with a Hono API backend. |\n\n## What's here\n\n```\nindex.tsx Hono app, Layout, routes\npublic/\n favicon.svg Static asset\n counter.ts Tiny client-side script\n```\n\nThe whole app fits in one file. As you grow it, the natural next moves are:\n\n- Pull `Layout` into its own `.tsx` file once you have 3+ pages.\n- Split routes with `app.route(\"/api\", api)` if `/api/*` grows.\n- Add more files under `public/` — they're served by a single\n `app.get(\"/public/*\", ...)` route.\n\n## Patterns worth knowing\n\n**JSX pragma.** Every `.tsx` file that uses JSX needs this at the top:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\n```\n\n**Server state.** The counter on `/` is `let count = 0` at module scope. It\nlives in memory on the Val Town server and survives across requests — but resets\nwhenever the val restarts (deploys, idle timeouts, etc.). For persistent state,\nswap it for [`std/sqlite`](https://www.val.town/x/std/sqlite) or\n[`std/blob`](https://www.val.town/x/std/blob).\n\n**API routes.** The `Increment` button POSTs to `/api/increment`, which returns\nJSON. Mix server-rendered pages and JSON endpoints in the same Hono app:\n\n```ts\napp.post(\"/api/increment\", (c) => c.json({ count: ++count }));\n```\n\n**Static files.** `serveFile` reads the file by path and serves it with the\nright content-type. `.ts` files are transpiled to JS on request by Val Town — so\nyou can write `public/counter.ts` and reference it as\n`

Diff · v4