[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_169":170,"_171":172},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_104":85,"_27":105,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":122,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",10,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","daily.ts","latestPath","fileId","7a35b9ba-66af-11f1-a659-1607ee4eb77e","name","fileType","interval","content","// EGX Dashboard — background worker (push alerts + weekly email report)\n//\n// SETUP (~3 min):\n// 1. val.town → New → Cron val (scheduled val)\n// 2. Paste this entire file, set the schedule to every 10 minutes (\"*/10 * * * *\")\n// 3. That's it — it shares storage with your app val automatically.\n//\n// WHAT IT DOES:\n// - Every run during EGX hours: checks your price alerts against live prices and\n// sends a push notification to your phone (enable in app: Settings → Phone notifications)\n// - Gold & USD/EGP alerts are checked around the clock\n// - Friday ~5pm Cairo: emails you a weekly portfolio summary\n\nimport webpush from \"npm:web-push\";\nimport { blob } from \"https://esm.town/v/std/blob\";\nimport { email } from \"https://esm.town/v/std/email\";\n\nconst VAPID_PUB =\n \"BPbLIHsBJOjy2FHHXabscU8ZNlXm9cwoeW4mKrKX-PPLs9oof7mAew2NfYWBjceBN_aKO94DiRJJSpqT71vQ4uU\";\nconst VAPID_PRIV = \"5zV7BaZOxpiQJb85VQWZXVqL2u7yxoLK_spcsR8GdKs\";\nwebpush.setVapidDetails(\n \"mailto:kariem.f.barsoom@gmail.com\",\n VAPID_PUB,\n VAPID_PRIV,\n);\n\nconst UA = \"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\";\nconst fmt = (n, d = 2) =>\n n == null || isNaN(n)\n ? \"—\"\n : Number(n).toLocaleString(\"en-US\", {\n minimumFractionDigits: d,\n maximumFractionDigits: d,\n });\n\nfunction cairoNow() {\n const p = new Intl.DateTimeFormat(\"en-GB\", {\n timeZone: \"Africa/Cairo\",\n weekday: \"short\",\n hour: \"2-digit\",\n minute: \"2-digit\",\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n hour12: false,\n }).formatToParts(new Date());\n const g = (t) => (p.find((x) => x.type === t) || {}).value || \"\";\n return {\n wd: g(\"weekday\"),\n h: +g(\"hour\"),\n m: +g(\"minute\"),\n date: g(\"year\") + \"-\" + g(\"month\") + \"-\" + g(\"day\"),\n };\n}\nfunction egxOpen(c) {\n const mins = c.h * 60 + c.m;\n return [\"Sun\", \"Mon\", \"Tue\", \"Wed\", \"Thu\"].includes(c.wd) && mins >= 595 &&\n mins <= 880; // 9:55–14:40, small buffer\n}\n\nasync function price(sym) {\n try {\n const r = await fetch(\n `https://query1.finance.yahoo.com/v8/finance/chart/${\n encodeURIComponent(sym)\n }?range=5d&interval=1d`,\n { headers: { \"User-Agent\": UA } },\n );\n const j = await r.json();\n const res = j?.chart?.result?.[0];\n if (!res) return null;\n const m = res.meta || {};\n if (m.regularMarketPrice != null) return m.regularMarketPrice;\n const c = (res.indicators?.quote?.[0]?.close || []).filter((x) =>\n x != null\n );\n return c.length ? c[c.length - 1] : null;\n } catch (e) {\n return null;\n }\n}\n\nasync function sendPush(subsKey, title, body) {\n const subs = await blob.getJSON(subsKey).catch(() => null);\n if (!subs || !subs.length) return;\n const keep = [];\n for (const s of subs) {\n try {\n await webpush.sendNotification(s, JSON.stringify({ title, body }));\n keep.push(s);\n } catch (e) {\n const code = e && e.statusCode;\n if (code !== 404 && code !== 410) keep.push(s); // drop dead subscriptions only\n }\n }\n if (keep.length !== subs.length) await blob.setJSON(subsKey, keep);\n}\n\nexport default async function () {\n const c = cairoNow();\n const entries = await blob.list(\"egx_push_\").catch(() => []);\n\n for (const entry of entries) {\n const encKey = entry.key.slice(\"egx_push_\".length);\n const dataKey = \"egx_data_\" + encKey;\n const data = await blob.getJSON(dataKey).catch(() => null);\n if (!data) continue;\n\n // ---- collect pending alerts ----\n const stockAlerts = [];\n for (const w of data.watchlist || []) {\n for (const a of w.alerts || []) {\n if (!a.triggered) stockAlerts.push({ w, a });\n }\n }\n const globalAlerts = (data.galerts || []).filter((a) => !a.triggered);\n const open = egxOpen(c);\n const checkStocks = open && stockAlerts.length > 0;\n const checkGlobal = globalAlerts.length > 0;\n if (!checkStocks && !checkGlobal && !(c.wd === \"Fri\")) continue;\n\n let dirty = false;\n const fired = [];\n\n if (checkStocks) {\n const syms = [...new Set(stockAlerts.map((x) => x.w.sym))];\n const prices = {};\n for (const s of syms) prices[s] = await price(s);\n for (const { w, a } of stockAlerts) {\n const p = prices[w.sym];\n if (p == null) continue;\n if (\n (a.dir === \"above\" && p >= a.price) ||\n (a.dir === \"below\" && p <= a.price)\n ) {\n a.triggered = true;\n dirty = true;\n fired.push(\n `${w.sym.replace(\".CA\", \"\")} ${\n a.dir === \"above\" ? \"rose above\" : \"fell below\"\n } ${fmt(a.price)} (now ${fmt(p)})`,\n );\n }\n }\n }\n\n if (checkGlobal) {\n const gold = await price(\"GC=F\");\n const fx = await price(\"EGP=X\");\n const cur = (t) =>\n t === \"usd\"\n ? fx\n : (gold && fx\n ? gold * fx / 31.1034768 * ((t === \"gold24\" ? 24 : 21) / 24)\n : null);\n const labels = { gold21: \"Gold 21k\", gold24: \"Gold 24k\", usd: \"USD/EGP\" };\n for (const a of globalAlerts) {\n const v = cur(a.target);\n if (v == null) continue;\n if (\n (a.dir === \"above\" && v >= a.price) ||\n (a.dir === \"below\" && v <= a.price)\n ) {\n a.triggered = true;\n dirty = true;\n fired.push(\n `${labels[a.target]} ${\n a.dir === \"above\" ? \"rose above\" : \"fell below\"\n } ${fmt(a.price)} (now ${fmt(v)})`,\n );\n }\n }\n }\n\n if (dirty) {\n data._ts = Date.now();\n await blob.setJSON(dataKey, data);\n }\n for (const msg of fired) await sendPush(entry.key, \"EGX Alert\", msg);\n\n // ---- weekly email: Friday 17:00–17:30 Cairo, once ----\n if (c.wd === \"Fri\" && c.h === 17 && c.m < 30) {\n const mailKey = \"egx_mail_\" + encKey;\n const last = await blob.getJSON(mailKey).catch(() => null);\n if (!last || last.date !== c.date) {\n try {\n const lines = [];\n const nw = data.nwAll && data.nwAll.length\n ? data.nwAll\n : ((data.portfolios || [])[0] || {}).nw || [];\n if (nw.length) {\n const now = nw[nw.length - 1].v;\n const weekAgoTs = Date.now() - 7 * 86400e3;\n let prev = nw[0].v;\n for (const p of nw) if (p.t <= weekAgoTs) prev = p.v;\n const chg = now - prev, pct = prev ? (chg / prev * 100) : 0;\n lines.push(\n `

Net worth: ${fmt(now, 0)} EGP

`,\n );\n lines.push(\n `

= 0 ? \"#0a7d52\" : \"#c0392b\"\n }\">${chg >= 0 ? \"+\" : \"\"}${fmt(chg, 0)} EGP (${\n pct >= 0 ? \"+\" : \"\"\n }${fmt(pct, 1)}%) this week

`,\n );\n }\n const allDivs = (data.portfolios || []).flatMap((p) => p.divs || []);\n const weekDivs = allDivs.filter((d) =>\n Date.now() - new Date(d.date).getTime() < 7 * 86400e3\n );\n if (weekDivs.length) {\n lines.push(\n `

Dividends received this week: ${\n fmt(weekDivs.reduce((a, d) => a + d.amount, 0), 0)\n } EGP

`,\n );\n }\n const upcoming = [];\n for (const p of data.portfolios || []) {\n for (const a of p.assets || []) {\n if (a.type === \"cd\" || a.type === \"td\") {\n const end = new Date(a.start).getTime() +\n a.months * 30.44 * 86400e3;\n const d = Math.round((end - Date.now()) / 86400e3);\n if (d >= 0 && d <= 21) {\n upcoming.push(`${a.name || \"CD\"} matures in ${d}d`);\n }\n }\n if (a.type === \"tbill\") {\n const d = Math.round(\n (new Date(a.mat).getTime() - Date.now()) / 86400e3,\n );\n if (d >= 0 && d <= 21) {\n upcoming.push(\n `${a.name || \"T-bill\"} matures in ${d}d (${\n fmt(a.face, 0)\n } EGP)`,\n );\n }\n }\n }\n }\n if (upcoming.length) {\n lines.push(`

Coming up:
${upcoming.join(\"
\")}

`);\n }\n const active = stockAlerts.length + globalAlerts.length;\n lines.push(\n `

${active} active alerts · sent by your EGX Dashboard worker

`,\n );\n await email({\n subject: \"EGX Weekly — your portfolio summary\",\n html: lines.join(\"\\n\"),\n });\n await blob.setJSON(mailKey, { date: c.date });\n } catch (e) { /* email is best-effort */ }\n }\n }\n }\n}","// EGX Dashboard — background worker (push alerts + weekly email report)\n//\n// SETUP (~3 min):\n// 1. val.town → New → Cron val (scheduled val)\n// 2. Paste this entire file, set the schedule to every 10 minutes (\"*/10 * * * *\")\n// 3. That's it — it shares storage with your app val automatically.\n//\n// WHAT IT DOES:\n// - Every run during EGX hours: checks your price alerts against live prices and\n// sends a push notification to your phone (enable in app: Settings → Phone notifications)\n// - Gold & USD/EGP alerts are checked around the clock\n// - Friday ~5pm Cairo: emails you a weekly portfolio summary\n\nimport webpush from \"npm:web-push\";\nimport { blob } from \"https://esm.town/v/std/blob\";\nimport { email } from \"https://esm.town/v/std/email\";\n\nconst VAPID_PUB =\n \"BPbLIHsBJOjy2FHHXabscU8ZNlXm9cwoeW4mKrKX-PPLs9oof7mAew2NfYWBjceBN_aKO94DiRJJSpqT71vQ4uU\";\nconst VAPID_PRIV = \"5zV7BaZOxpiQJb85VQWZXVqL2u7yxoLK_spcsR8GdKs\";\nwebpush.setVapidDetails(\n \"mailto:kariem.f.barsoom@gmail.com\",\n VAPID_PUB,\n VAPID_PRIV,\n);\n\nconst UA = \"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\";\nconst fmt = (n, d = 2) =>\n n == null || isNaN(n)\n ? \"—\"\n : Number(n).toLocaleString(\"en-US\", {\n minimumFractionDigits: d,\n maximumFractionDigits: d,\n });\n\nfunction cairoNow() {\n const p = new Intl.DateTimeFormat(\"en-GB\", {\n timeZone: \"Africa/Cairo\",\n weekday: \"short\",\n hour: \"2-digit\",\n minute: \"2-digit\",\n year: \"numeric\",\n month: \"2-digit\",\n day: \"2-digit\",\n hour12: false,\n }).formatToParts(new Date());\n const g = (t) => (p.find((x) => x.type === t) || {}).value || \"\";\n return {\n wd: g(\"weekday\"),\n h: +g(\"hour\"),\n m: +g(\"minute\"),\n date: g(\"year\") + \"-\" + g(\"month\") + \"-\" + g(\"day\"),\n };\n}\nfunction egxOpen(c) {\n const mins = c.h * 60 + c.m;\n return [\"Sun\", \"Mon\", \"Tue\", \"Wed\", \"Thu\"].includes(c.wd) && mins >= 595 &&\n mins <= 880; // 9:55–14:40, small buffer\n}\n\nasync function price(sym) {\n try {\n const r = await fetch(\n `https://query1.finance.yahoo.com/v8/finance/chart/${\n encodeURIComponent(sym)\n }?range=5d&interval=1d`,\n { headers: { \"User-Agent\": UA } },\n );\n const j = await r.json();\n const res = j?.chart?.result?.[0];\n if (!res) return null;\n const m = res.meta || {};\n if (m.regularMarketPrice != null) return m.regularMarketPrice;\n const c = (res.indicators?.quote?.[0]?.close || []).filter((x) =>\n x != null\n );\n return c.length ? c[c.length - 1] : null;\n } catch (e) {\n return null;\n }\n}\n\n// like price(), but also returns the day's % change (for percentage-move alerts)\nasync function quote(sym) {\n try {\n const r = await fetch(\n `https://query1.finance.yahoo.com/v8/finance/chart/${\n encodeURIComponent(sym)\n }?range=5d&interval=1d`,\n { headers: { \"User-Agent\": UA } },\n );\n const j = await r.json();\n const res = j?.chart?.result?.[0];\n if (!res) return { price: null, chgPct: null };\n const m = res.meta || {};\n const closes = (res.indicators?.quote?.[0]?.close || []).filter((x) =>\n x != null\n );\n const last = m.regularMarketPrice != null\n ? m.regularMarketPrice\n : (closes.length ? closes[closes.length - 1] : null);\n let prev = m.chartPreviousClose;\n if (prev == null && closes.length >= 2) prev = closes[closes.length - 2];\n const chgPct = (last != null && prev) ? (last / prev - 1) * 100 : null;\n return { price: last, chgPct };\n } catch (e) {\n return { price: null, chgPct: null };\n }\n}\n\nasync function sendPush(subsKey, title, body) {\n const subs = await blob.getJSON(subsKey).catch(() => null);\n if (!subs || !subs.length) return;\n const keep = [];\n for (const s of subs) {\n try {\n await webpush.sendNotification(s, JSON.stringify({ title, body }));\n keep.push(s);\n } catch (e) {\n const code = e && e.statusCode;\n if (code !== 404 && code !== 410) keep.push(s); // drop dead subscriptions only\n }\n }\n if (keep.length !== subs.length) await blob.setJSON(subsKey, keep);\n}\n\nexport default async function () {\n const c = cairoNow();\n const entries = await blob.list(\"egx_push_\").catch(() => []);\n\n for (const entry of entries) {\n const encKey = entry.key.slice(\"egx_push_\".length);\n const dataKey = \"egx_data_\" + encKey;\n const data = await blob.getJSON(dataKey).catch(() => null);\n if (!data) continue;\n\n // ---- collect pending alerts ----\n const stockAlerts = [];\n for (const w of data.watchlist || []) {\n for (const a of w.alerts || []) {\n if (!a.triggered) stockAlerts.push({ w, a });\n }\n }\n const globalAlerts = (data.galerts || []).filter((a) => !a.triggered);\n const open = egxOpen(c);\n const checkStocks = open && stockAlerts.length > 0;\n const checkGlobal = globalAlerts.length > 0;\n if (!checkStocks && !checkGlobal && !(c.wd === \"Fri\")) continue;\n\n let dirty = false;\n const fired = [];\n\n if (checkStocks) {\n const syms = [...new Set(stockAlerts.map((x) => x.w.sym))];\n const quotes = {};\n for (const s of syms) quotes[s] = await quote(s);\n for (const { w, a } of stockAlerts) {\n const q = quotes[w.sym];\n if (!q || q.price == null) continue;\n const p = q.price, nm = w.sym.replace(\".CA\", \"\");\n let hit = false, msg = \"\";\n if (a.type === \"pct\") {\n const cp = q.chgPct;\n if (cp != null) {\n hit = (a.dir === \"above\" && cp >= a.pct) ||\n (a.dir === \"below\" && cp <= -a.pct);\n if (hit) {\n msg = `${nm} is ${a.dir === \"above\" ? \"up\" : \"down\"} ${\n fmt(Math.abs(cp))\n }% today`;\n }\n }\n } else {\n hit = (a.dir === \"above\" && p >= a.price) ||\n (a.dir === \"below\" && p <= a.price);\n if (hit) {\n msg = `${nm} ${a.dir === \"above\" ? \"rose above\" : \"fell below\"} ${\n fmt(a.price)\n } (now ${fmt(p)})`;\n }\n }\n if (hit) {\n a.triggered = true;\n dirty = true;\n fired.push(msg);\n }\n }\n }\n\n if (checkGlobal) {\n const gold = await price(\"GC=F\");\n const fx = await price(\"EGP=X\");\n const cur = (t) =>\n t === \"usd\"\n ? fx\n : (gold && fx\n ? gold * fx / 31.1034768 * ((t === \"gold24\" ? 24 : 21) / 24)\n : null);\n const labels = { gold21: \"Gold 21k\", gold24: \"Gold 24k\", usd: \"USD/EGP\" };\n for (const a of globalAlerts) {\n const v = cur(a.target);\n if (v == null) continue;\n if (\n (a.dir === \"above\" && v >= a.price) ||\n (a.dir === \"below\" && v <= a.price)\n ) {\n a.triggered = true;\n dirty = true;\n fired.push(\n `${labels[a.target]} ${\n a.dir === \"above\" ? \"rose above\" : \"fell below\"\n } ${fmt(a.price)} (now ${fmt(v)})`,\n );\n }\n }\n }\n\n if (dirty) {\n data._ts = Date.now();\n await blob.setJSON(dataKey, data);\n }\n for (const msg of fired) await sendPush(entry.key, \"EGX Alert\", msg);\n\n // ---- weekly email: Friday 17:00–17:30 Cairo, once ----\n if (c.wd === \"Fri\" && c.h === 17 && c.m < 30) {\n const mailKey = \"egx_mail_\" + encKey;\n const last = await blob.getJSON(mailKey).catch(() => null);\n if (!last || last.date !== c.date) {\n try {\n const lines = [];\n const nw = data.nwAll && data.nwAll.length\n ? data.nwAll\n : ((data.portfolios || [])[0] || {}).nw || [];\n if (nw.length) {\n const now = nw[nw.length - 1].v;\n const weekAgoTs = Date.now() - 7 * 86400e3;\n let prev = nw[0].v;\n for (const p of nw) if (p.t <= weekAgoTs) prev = p.v;\n const chg = now - prev, pct = prev ? (chg / prev * 100) : 0;\n lines.push(\n `

Net worth: ${fmt(now, 0)} EGP

`,\n );\n lines.push(\n `

= 0 ? \"#0a7d52\" : \"#c0392b\"\n }\">${chg >= 0 ? \"+\" : \"\"}${fmt(chg, 0)} EGP (${\n pct >= 0 ? \"+\" : \"\"\n }${fmt(pct, 1)}%) this week

Dividends received this week: ${\n fmt(weekDivs.reduce((a, d) => a + d.amount, 0), 0)\n } EGP

Coming up:
${upcoming.join(\"
\")}

`);\n }\n const active = stockAlerts.length + globalAlerts.length;\n lines.push(\n `

${active} active alerts · sent by your EGX Dashboard worker

`,\n );\n await email({\n subject: \"EGX Weekly — your portfolio summary\",\n html: lines.join(\"\\n\"),\n });\n await blob.setJSON(mailKey, { date: c.date });\n } catch (e) { /* email is best-effort */ }\n }\n }\n }\n}","createdAt",["D",1782056308698],"branchVersion","branchId","40453188-d5f2-412e-bc67-92097c4b9b34","id","76e4d94f-40b1-42fc-bbfb-e6dd96bd10c2","hello-http-3",["D",1781284411418],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Another simple HTTP endpoint example","imageUrl","76aa9d66-1d9e-4fbd-9c3f-f51bddceca81","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019ebc39-d20a-75f0-957f-26a0d618ddff","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_103":99},"org",{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",11,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","kariembarsoom","handle","displayName","Kariem Barsoom","avatar","https://lh3.googleusercontent.com/a/ACg8ocKOH7Z-mPBEUQZ3mEw0HkssYFfC4juWok-KRShiQXYoRGGz8nOzKA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":165,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":166,"_79":167,"_81":168,"_83":25},"tree",[156,157],"files",[156,157],"counts",{"_145":61,"_146":147,"_148":61,"_149":150,"_151":152},"contents",[127,128],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":141,"_32":28,"_30":31,"_132":-5,"_41":42,"_40":14,"_134":25,"_38":142,"_13":143,"_33":34,"_35":37,"_24":25,"_139":-5,"_27":144},{"_43":129,"_32":130,"_30":131,"_132":-5,"_41":42,"_40":133,"_134":122,"_38":135,"_13":136,"_33":137,"_35":138,"_24":25,"_139":-5,"_27":140},"0494f225-f613-4411-9e2e-e2c07cca853f","main.ts","096364da-6682-11f1-b207-1607ee4eb77e","parentId",9,"latest",["D",1782056277748],6,"http","// EGX Dashboard — full app server for Val Town (serves the app + proxy + cloud sync)\n//\n// SETUP (one time, ~5 min):\n// 1. val.town → New → HTTP val → delete example code → paste this entire file\n// 2. Open the val's URL in a browser — you'll see a one-time setup page\n// 3. Choose your egx-dashboard.html file, enter an upload key (6+ chars, remember it), Upload\n// 4. The app is now live at that URL. On your phone: open it → browser menu → \"Add to Home Screen\"\n// 5. In the app: Settings → Cloud sync passphrase → set the same passphrase on phone & computer\n//\n// UPDATING THE APP LATER: open /setup , upload the new HTML with the same key.\n// This val also replaces your old proxy val (it has the same ?url= and ?fund= routes).\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst UA = \"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\";\nconst ALLOWED_HOSTS = [\n \"query1.finance.yahoo.com\",\n \"query2.finance.yahoo.com\",\n \"www.mubasher.info\",\n \"english.mubasher.info\",\n \"stockanalysis.com\",\n];\n\n// ---- app password gate ----\nfunction tok(pass) {\n let h = 5381;\n const s = pass + \"::egx-gate\";\n for (let i = 0; i < s.length; i++) h = ((h * 33) ^ s.charCodeAt(i)) >>> 0;\n return h.toString(36) + s.length.toString(36);\n}\nfunction hasAuth(req, pass) {\n const m = (req.headers.get(\"cookie\") || \"\").match(/egx_auth=([^;]+)/);\n return !!(m && m[1] === tok(pass));\n}\nconst LOCK_PAGE = [\n \"\",\n \"EGX Dashboard

\",\n \"\",\n \"

EGX Dashboard

Enter your password to continue

\",\n \"\",\n \"

\",\n \"

\",\n].join(\"\\n\");\n\n// ---- Yahoo cookie+crumb (needed for fundamentals) ----\nlet YC = { cookie: \"\", crumb: \"\", ts: 0 };\nasync function yahooCrumb() {\n if (YC.crumb && Date.now() - YC.ts < 3600000) return YC;\n const r1 = await fetch(\"https://fc.yahoo.com/\", {\n headers: { \"User-Agent\": UA },\n });\n const cookie = (r1.headers.get(\"set-cookie\") || \"\").split(\";\")[0];\n if (!cookie) throw new Error(\"no cookie\");\n const r2 = await fetch(\"https://query1.finance.yahoo.com/v1/test/getcrumb\", {\n headers: { \"User-Agent\": UA, \"Cookie\": cookie },\n });\n const crumb = (await r2.text()).trim();\n if (!crumb || crumb.includes(\"<\")) throw new Error(\"no crumb\");\n YC = { cookie, crumb, ts: Date.now() };\n return YC;\n}\n\n// ---- PWA assets ----\nconst MANIFEST = JSON.stringify({\n name: \"EGX Dashboard\",\n short_name: \"EGX\",\n start_url: \"/\",\n scope: \"/\",\n display: \"standalone\",\n background_color: \"#060b16\",\n theme_color: \"#060b16\",\n icons: [\n { src: \"/icon-192.png\", sizes: \"192x192\", type: \"image/png\" },\n { src: \"/icon-512.png\", sizes: \"512x512\", type: \"image/png\" },\n ],\n});\n\nconst VAPID_PUBLIC =\n \"BPbLIHsBJOjy2FHHXabscU8ZNlXm9cwoeW4mKrKX-PPLs9oof7mAew2NfYWBjceBN_aKO94DiRJJSpqT71vQ4uU\";\n\nconst SW = [\n \"const C='egx-app-v3';\",\n \"self.addEventListener('install',e=>self.skipWaiting());\",\n \"self.addEventListener('activate',e=>e.waitUntil(clients.claim()));\",\n \"self.addEventListener('push',e=>{\",\n \" let d={};try{d=e.data?e.data.json():{}}catch(x){}\",\n \" e.waitUntil(self.registration.showNotification(d.title||'EGX Alert',{body:d.body||'',icon:'/icon-192.png',badge:'/icon-192.png',vibrate:[120,60,120]}));\",\n \"});\",\n \"self.addEventListener('notificationclick',e=>{e.notification.close();e.waitUntil(clients.openWindow('/'))});\",\n \"self.addEventListener('fetch',e=>{\",\n \" const u=new URL(e.request.url);\",\n \" if(e.request.method!=='GET'||u.origin!==location.origin)return;\",\n \" if(u.pathname!=='/'&&!u.pathname.match(/\\\\.(png|json)$/))return;\",\n \" if(u.search)return;\",\n \" e.respondWith(fetch(e.request).then(r=>{\",\n \" const cacheable=u.pathname!=='/'||r.headers.get('x-egx')==='app';\", // never cache the lock screen\n \" if(cacheable){const cp=r.clone();caches.open(C).then(c=>c.put(e.request,cp))}\",\n \" return r;\",\n \" }).catch(()=>caches.match(e.request)));\",\n \"});\",\n].join(\"\\n\");\n\nconst ICON192 =\n \"iVBORw0KGgoAAAANSUhEUgAAAMAAAADACAYAAABS3GwHAAAEp0lEQVR42u3dO3rTUBBAYUkfbQoKsoRQ0VNDwY5YBDuigJqeCi/BFBRZQKjS+ItjvXVn5j8leUg259y5Qrbpu8a4u3946pCWx/Opb+l8erKjchQ96VE5hp74qBxCT3xUDqEnPiqH0BMflUMYyI9IrO1YT3xUngYD+VF5GgzkR+UIBvKjcgQD+VE5goH8qBzBQH5UjmAgPypHMJAflSMYyI/KEQyeJlRmsPqj8hQYyI/KEdgCwRbI6o+qU8AEgAlg9UfVKWACwASw+qPqFDABYAJY/VF1CpgAMAGA0gHY/qDqNsgEgAkACAAQAFCL3gUwTABAAIAAAAEAAgAEAAgAEAAgAEAAQB7eeAowlXc/fl392t/PH0M9Fq8FwmLpI8dgC4RN5F/ycwJAePmjRCAAbC5vyxEIALtI22oEAsBusrYYgQCwq6StRSAAlEYAEACw5/akpW2QAGACAAIABAAIABAAIACUYc9/mmzpfQICQIjX7QsA5BcAosvf2tskBUD+svILAKXlF4DVv7T8AiB/afkFQP7S8nedT4Yjf0HpBUD+krLbApGf/AIgP/kFQH7yCwC15ReA1b88AiB/2dVfAOQvLX/XuQ/wIp++/nnxz39+e09+E6Cm/Le+Rv6Y+D/CFsjdwkQgvwlwiPwtTATyC+Aw+Y+OgPwCOFz+1q8NyC+A3aTdMwI3ugTQpKx7RGDrI4CmJd3y95NfACG2KVsch/wCCHWhuubxyC+AUPKveVzyCyCk/Gscn/wCCC3/kvMgvwBSyN/S+ZC/SACt3pkde15udAkgnfxjz8/WRwBp5b91nuQXQHr5r50v+QVQRv7L8ya/AMrJb+UXQAj5t3zb4+8v/8gvgPbl3yIC8gsg1Mrf8keikL9QAEdue9aKYKvVH8kDaGHPvzQCWx8BhL/gnRsB+QUQXv65309+AaSRf87Pffj+lvwCyCP/0RGQfx2a/WzQaDe5pp7vki0R+ZNPgIh3eKf+vrnTgPzJA4j88oatIyB/8gCiv7Znzu8ntQDSyD/1OM/fNyYCoSS+CM4k/9jHde18Xnp5NPkTT4Cs8r923NfO51J28icOILP8144/5nyepSd/4i1QBfkvH2+El1QLgPywBSI/BEB+CID8EAD5IQDyQwDNQX40G8DWqz/5UXYCkB9NB7Dl6k9+lJ0A5EfZAMiPsgGQH2UDID/CBbCWtORH2QlAfoQOYInA5EeKCTBHZPJjL3Z7R9iYG2PER9oAXguB+CgTAFDqGgAQACAAQACAAAABAAIABAAIABAAIABAAIAAAAEAWwbweD71ngZU5PF86k0A2AIBAgAEABQMwIUwKl4AmwAwATwFEIBtEApuf0wAmADXygCyr/4mAEyAW4UAWVd/EwAmwNhSgGyrvwkAE2BqMUCW1f/mBBABMstvCwRboKUFAVFX/9ETQATIKP+kLZAIkE3+ydcAIkAm+WddBIsAWeSfFYAIkEX+2QGIABnkXxSACBBd/sUBiACR5e+6rltV3rv7hyd/LYgg/moTwDRAVPlXnwCmAaKIv3kAQkCEXcVuWxYhoMXt9O57diGgpevIQy9axYAjpG8mAFGQ/Wj+A5W6UKM3II4RAAAAAElFTkSuQmCC\";\n\nconst ICON512 =\n \"iVBORw0KGgoAAAANSUhEUgAAAgAAAAIACAYAAAD0eNT6AAAOMklEQVR42u3cMXJTSRuFYd8upwomQEsQETkxBLMjFsGOCCAmJ8JLMMEEXoAmcpXLZSFb0lX31+d5wr/mN3aLqvfclvByw5A2293eKQAzeLi/W5zCeLwoAg9gIBgAiD2AUWAAIPgABoEBgOADGAQGgOgDYAwYAKIPgDFgAIg+AMaAASD8ABgCBoDoA2AMGADCD4AhYAAIPwCGgAEg/AAYAgaA8ANgCBgAwg+AIfBWTfwBIK8dixcPAPJuA6b7oYQfAEPguKneAhB/ADQm6AZA+AFwGxB2AyD+AGhP2AAQfwA06DSLQweA81R8S6DcDYD4A6BNYQNA/AHQqMtYHCoAXFaFtwSGvwEQfwDcBoQNAPEHwAgIGwDiD4AREDYAxB8AIyBsAIg/AEZA2AAQfwCMgLABIP4AGAFhA0D8ATACwgaA+ANgBIQNAPEHwAgIGwDiD4AR0K+FLe0HBgAjoMMAEH8A6N/GNvsPCABGQMcBIP4AME4r22w/EAAYAQPdAAAA41h9AHj6B4Dx2tmq/wAAYAQMNADEHwDGbanPAABAoFUGgKd/ABi7qa3KNwoARsCgA0D8AaDGCPAZAAAIdLEB4OkfAOrcArTRviEAYP3megsAAAKdPQA8/QNAvVsANwAA4AbA0z8AJNwCtF5/MADQbwR4CwAAAp00ADz9A0DtWwA3AADgBsDTPwAk3AK4AQAANwCe/gEg4RbADQAAuAHw9A8ACbcAbgAAwA2Ap38ASLgFcAMAAG4AAAAD4Mb1PwBU85p2uwEAADcAnv4BIOEWwA0AALgBAACiB4DrfwCo7W8tdwMAAG4AAIDYAeD6HwDmcKjpbgAAwA0AABA5AFz/A8BcXmq7GwAAcAMAABgAAMD8A8D7/wAwp+eNdwMAAOk3AACAAQAAzD4AvP8PAHN72no3AACQfAMAABgAAIABAABMNwB8ABAAMjw23w0AAKTeAAAABgAAYAAAAAYAAGAAAAAGAABQwOJ3AACAGwAAwAAAAAwAAMAAAAAMAADAAAAADAAAwAAAAAwAAMAAAAAMAADAAAAADAAAwAAAAAwAAMAAAAAMAAAwAAAAAwAAMAAAAAMAADAAAIA6bh0BwPzeff/56v/2z+ePDizAstnu9o4BIDP2RoEBAIDwGwIGAACibwwYAAAIvyEwFf8KAED8p/p+cAMAIPxuA3ADACD+vk8MAADx9/0aAACIqe/bAABARI0AAwAA8TQCDAAARNMIMAAAEEsjwAAAQCSNAAMAAHE0AgwAAMAAACDtqdgtgAEAIP6hMTQCDAAAwAAA8BTs58cAAAAMAADAAAAoy/W3czAAAAADAMBTr/PAAAAADAAAwAAAAAwAAMAAABiOD7w5FwMAADAAAAADAAAwAAAAAwAAMAAAAAMAADAAAAADAAAwAADAAABgNX7d7WF/Pn90CAYAgPiDAQAAGAAAnv7BAAAQfzAAAMS/Gh8ANAAAxB8MAADx9/SPAQAg/mAAAIg/GAAA4l+M638DAAAwAAA8/Xv6xwAAEH/xxwAAEH8wAADE39M/BgCA+Is/BgCA+Is/BgCA+Is/BgCA+Iu/AQAA4m8AAODpX/wNAADxR/wNAADxR/xLu3UEAOIv/G4AAMRf/MXfDQCA+CP8BgCA+Is+BgCA+As/BgAAYo8BAODpX+AZlX8FAIi/+GMAAIg/GAAA4u/pHwMAQPzFHwMAQPzFHwMAQPzFHwMAQPzFHwMAAPHHAADw9C/+GAAA4i/+GAAA4g8GAID4e/rHAAAQf/HHAAAQfzAAAPEXfzAAAPEXfzAAAMQfDADA07/4YwAAiL/4YwAAiD8YAADi7+mfadw6ApJ8+vL76H/z4+t7ByX+4s/0ls12t3cMpEffGBB/8ccAgPDoGwPiL/4k8BkAxL/z10X8xR83AFAk0G4DDADxxw0AhMXfbYD4iz9uACAs/G4DxF/8cQMA4u82QPzBAIDk6BoB4u/pHwMAQmNrBIi/+GMAQGhkjQDxF38MAAiNqxEg/uKPAQChUTUCxF/8MQAgNKZGAOKPAQChETUCPP2LPwYAhMbTCBB/8ccAgNBoGgHiDwYAhMbSCBB/T/8YABAaSSNA/MEAgNA4po8A8QcDAGKjmDoCxB8MAIiPYdrPLf5gAEB8/P384g8GAOLnHDz9iz8YAIie8xB/8QcDALFzLuIPGACInPMRf0//YAAgbs5J/MUfDABEzXmJv/iDAYCYOTfxF38wABAx5yf+4g8GAOLlHBF/DAAQLefp6V/8MQBA/J2r+Is/BgCIv/MVfzAAQPydsw/9gQEA4p923uIPBgCIf9i5iz8YACD+Yecv/mAAgPiHvQ7iDwYAiL/XQ/zBAEBsmP118W/9wQBAZBxC2Osj/mAAIC4OIex18ot+wABAVBxC2OvlQ39gACAmDiHsdRN/MAAQEYcQ9vqJPxgAiIdDCHsdxR8MAETDIYS9nuIPBgBi4RC8ruIPBgAiweyvr3/rDwYA4kDY6yz+YAAgCoS93n7RDxgAiAFhfOgPDADEnzC//v1P/MEAQPxz/fj6XvzFHwwAxD8x/kkjQPwBA0D8xT/sJkD8AQNA/MX/Df874g8GAOI/afxnHwFpT//iDwYA4v/muM82AsQfMADEX/xX+u/FHzAAEP/i8Z9lBPjQH2AAiL/4d/r/i7/4gwGA+BeLf9URIP6AASD+4j/o1xN/8QcDAPEfPP5VRoD4AwaA+It/0a+P+IMBgPgPGucRR4B/6w8YAOIv/mEjQPwBA0D8xT9sBPhFP4ABIP7iH/bn+9AfYACIv/gHfh8fvv0j/oABIP7ibwSIP2AAiL/4GwHiDxgA4i/+RoD4A08tm+1u7xjEX/zneb1m+XCg+IMbAPEX/3K/ga/n9zvDbYD4gwEg/uJf9tfvGgHiDwYA4h8WfyMAMAAQ/9D4GwGe/sEAQPxD428EiD8YAIh/aPyNAPEHAwDxD42/ESD+YAAg/qHxNwLEHwwAxD80/kaA+MMo/CZA8Rf/4Ne/128NFH9wAyD+4u/nD3sKF38wAMRf/P1F6HgOj3+uIIMBgPiLf8h5PP/zrjUCjA0wAMRf7Oh0Lof+nLXjLP5gAIi/yNHpfI59/bUiLf5gAIi/uNHpnF77dS8da/EHA0D8RY1O5/XWr3epaIs/GADiL2Z0OrdTv8658RZ/MADEX8TodH7n/v9Pjbj4w/j8JkDxF/9J/z5d+vzfff8p/uAGAPEX/5HPc43zF3YwABB/8R/4XNc8/2MjwEgAA0D8RYoO53uN8z8UefEHA0D8xYkO53zN838ee/EHA0D8RYkO593j/B+jL/5Qk38FIP7iX/zvn/MHDADxF38AXsVbAOIv/gAGAOIv/gAGAOIv/gAGgPiLv/gDGADiL/4AGADiL/4AGADiL/4AGADiL/4AGADiL/4AGADiL/4AGADiL/4AGADiL/4AnOlW+IVf/AHcAIi/+ANgACD+ABgAnv7FHwADQPzFHwADQPzFHwADAPEHwADw9C/+ABgAiD8ABoCnf/EHwABA/AEwABB/AAwAxB8AA+CotPf/xR8AA8CTPwAYAOIPAAaA+ANgACD+ABgAiD8ABgDiD4ABgPgDYAAg/gAYAILpZwHAAED8ATAAEH8ADADEHwADQETFHwADwJM/ABgAIUEVfwAMAE/+AGAAzBxX8QfAAAiLrPgDYACExVb8ATAAAAADYPanbk//AFzbstnu9o7h5ubTl9/CD4AbALcB4g+AAWAEiD8AE/EWwAFrvCUg/AAYAEFDQPgBMAACBoHgA2AAAADD8SFAADAAAAADAAAwAAAAAwAAMAAAAAMAADAAAAADAAAwAAAAAwAAMAAAAAMAADAAAAADAAAwAAAAAwAAMAAAwAAAAAwAAMAAAAAMAADAAAAADAAAwAAAAAwAAMAAAAAMAADAAAAADAAAwAAAAAwAAMAAAABeHgAP93eLYwCAHA/3d4sbAABIvAFwBABgAAAABgAAYAAAAAYAAGAAAACVBoDfBQAAGR6b7wYAAFJvAAAAAwAAMAAAgGkHgA8CAsDcnrbeDQAAJN8AAAAGAACQMgB8DgAA5vS88W4AACD9BgAAMAAAgJQB4HMAADCXl9ruBgAA3AAAALEDwNsAADCHQ013AwAAbgAAgOgB4G0AAKjtby13AwAAbgAAgPgB4G0AAKjpWMPdAACAGwC3AAAw+9O/GwAAcAMAABgAT3gbAABqeG2z3QAAgBsAtwAAMPvTvxsAAHAD4BYAABKe/t0AAIAbALcAAJDw9O8GAADcALgFAICEp383AADgBsAtAAAkPP2ffQNgBABAvfifPQAAgJrOHgBuAQCg1tO/GwAAcAPgFgAAEp7+L3oDYAQAQI34X3QAAAB1XHQAuAUAgPGf/le5ATACAGD8trYq3ygAiP/gAwAAGNtqA8AtAACM29JW9RsHAPEfdAAYAQAwZjt9BgAAAl1lALgFAICxmtlm+4EAQPwHGgBGAACM08g2+w8IAOI/wAAwAgCgfxNb2g8MAOnx7zoAjAAAxL+fln4AAJDYvuYgACCvec2BAEBe65qDAYC8xjUHBAB5bWsOCgDymtYcGADktaw5OADIa1hzgACQ165Scd1sd3t/rQAQ/oAbALcBAGhU+AAwAgDQpssoHVNvCQAg/CE3AG4DANCg8AFgBACgPaeZKp7eEgBA+ENuANwGAKAx4TcAbgMAEP7wAWAIACD8hzUvIADktSMqjm4DAPDQGDgADAEA0sMfPQAMAQBSw28AGAIAwh/MADAEAITfAMAYABB9AwBDAED4DQBjwBgAEH0DwBgAQPQNAGMAANE3AAwCAATfADAIABB8A8AoMAoAxN4AwEAABJ5r+h+gwB8s+chWCwAAAABJRU5ErkJggg==\";\n\nconst APPLE =\n \"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\";\n\nfunction pngResp(b64, cors) {\n const bin = atob(b64);\n const arr = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) arr[i] = bin.charCodeAt(i);\n return new Response(arr, {\n headers: {\n ...cors,\n \"Content-Type\": \"image/png\",\n \"Cache-Control\": \"public, max-age=86400\",\n },\n });\n}\n\nconst SETUP_PAGE = [\n \"\",\n \"EGX App — Setup

\",\n \"

EGX Dashboard — App Setup

\",\n \"

Upload your egx-dashboard.html file once. After that, this URL becomes your app — open it on any device and add it to your home screen.

\",\n \"Dashboard HTML file\",\n \"Upload key (6+ characters — needed for future updates)\",\n \"App password (optional — required to open the app; type none to remove an existing one)\",\n \"

\",\n \"

\",\n].join(\"\\n\");\n\nexport default async function (req) {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"*\",\n };\n if (req.method === \"OPTIONS\") return new Response(null, { headers: cors });\n const u = new URL(req.url);\n const path = u.pathname;\n const jsonHeaders = { ...cors, \"Content-Type\": \"application/json\" };\n\n // ---- cloud sync storage: GET/POST /data?key=PASSPHRASE ----\n // extras: &list=1 lists daily backup snapshots, &restore=YYYY-MM-DD returns one\n if (path === \"/data\") {\n const key = (u.searchParams.get(\"key\") || \"\").trim();\n if (key.length < 6) {\n return new Response(\"key too short\", { status: 400, headers: cors });\n }\n const bkey = \"egx_data_\" + encodeURIComponent(key);\n const bakPrefix = \"egx_bak_\" + encodeURIComponent(key) + \"_\";\n\n if (u.searchParams.get(\"list\") === \"1\") {\n const entries = await blob.list(bakPrefix).catch(() => []);\n const dates = entries.map((e) => (e.key || \"\").slice(bakPrefix.length))\n .filter(Boolean).sort().reverse();\n return new Response(JSON.stringify(dates), { headers: jsonHeaders });\n }\n const restore = u.searchParams.get(\"restore\");\n if (restore) {\n const snap = await blob.getJSON(bakPrefix + restore).catch(() => null);\n return new Response(JSON.stringify(snap ?? null), {\n headers: jsonHeaders,\n });\n }\n if (req.method === \"POST\") {\n const j = await req.json();\n await blob.setJSON(bkey, j);\n // daily snapshot, keep the most recent 7\n try {\n const today = new Date().toISOString().slice(0, 10);\n await blob.setJSON(bakPrefix + today, j);\n const entries = await blob.list(bakPrefix).catch(() => []);\n const keys = entries.map((e) => e.key).filter(Boolean).sort();\n for (let i = 0; i < keys.length - 7; i++) {\n await blob.delete(keys[i]).catch(() => {});\n }\n } catch (e) { /* snapshots are best-effort */ }\n return new Response(JSON.stringify({ ok: true }), {\n headers: jsonHeaders,\n });\n }\n const d = await blob.getJSON(bkey).catch(() => null);\n return new Response(JSON.stringify(d ?? null), { headers: jsonHeaders });\n }\n\n // ---- push notifications: vapid key + subscription storage ----\n if (path === \"/push/vapid\") {\n return new Response(JSON.stringify({ publicKey: VAPID_PUBLIC }), {\n headers: jsonHeaders,\n });\n }\n if (path === \"/push/sub\" && req.method === \"POST\") {\n const key = (u.searchParams.get(\"key\") || \"\").trim();\n if (key.length < 6) {\n return new Response(\"key too short\", { status: 400, headers: cors });\n }\n const skey = \"egx_push_\" + encodeURIComponent(key);\n const body = await req.json().catch(() => null);\n if (!body || !body.endpoint) {\n return new Response(\"bad subscription\", { status: 400, headers: cors });\n }\n const subs = (await blob.getJSON(skey).catch(() => null)) || [];\n if (u.searchParams.get(\"off\") === \"1\") {\n await blob.setJSON(\n skey,\n subs.filter((s) => s.endpoint !== body.endpoint),\n );\n return new Response(\n JSON.stringify({ ok: true, devices: subs.length - 1 }),\n { headers: jsonHeaders },\n );\n }\n if (!subs.some((s) => s.endpoint === body.endpoint)) subs.push(body);\n await blob.setJSON(skey, subs);\n return new Response(JSON.stringify({ ok: true, devices: subs.length }), {\n headers: jsonHeaders,\n });\n }\n\n // ---- password gate: unlock / lock-out ----\n if (path === \"/unlock\") {\n if (req.method === \"POST\") {\n const pass = (await req.text()).trim();\n const lock = await blob.getJSON(\"egx_app_lock\").catch(() => null);\n if (!lock || !lock.pass) {\n return new Response(\"no lock set\", { status: 400, headers: cors });\n }\n if (pass !== lock.pass) {\n return new Response(\"wrong password\", { status: 403, headers: cors });\n }\n return new Response(\"ok\", {\n headers: {\n ...cors,\n \"Set-Cookie\": \"egx_auth=\" + tok(lock.pass) +\n \"; Max-Age=2592000; Path=/; Secure; SameSite=Lax; HttpOnly\",\n },\n });\n }\n if (u.searchParams.get(\"out\") === \"1\") {\n return new Response(\"locked\", {\n headers: {\n ...cors,\n \"Set-Cookie\":\n \"egx_auth=x; Max-Age=0; Path=/; Secure; SameSite=Lax; HttpOnly\",\n },\n });\n }\n return new Response(\"bad request\", { status: 400, headers: cors });\n }\n\n // ---- app HTML upload: POST /html?key=UPLOADKEY ----\n if (path === \"/html\" && req.method === \"POST\") {\n const key = (u.searchParams.get(\"key\") || \"\").trim();\n if (key.length < 6) {\n return new Response(\"key too short\", { status: 400, headers: cors });\n }\n const saved = await blob.getJSON(\"egx_app_key\").catch(() => null);\n if (saved && saved.key !== key) {\n return new Response(\"wrong upload key\", { status: 403, headers: cors });\n }\n const html = await req.text();\n if (html.length < 10000 || !html.includes(\"EGX\")) {\n return new Response(\"that does not look like the dashboard file\", {\n status: 400,\n headers: cors,\n });\n }\n await blob.set(\"egx_app_html\", html);\n if (!saved) await blob.setJSON(\"egx_app_key\", { key });\n // optional app password: ?lock=mypassword sets it, ?lock=none removes it\n const lockParam = u.searchParams.get(\"lock\");\n if (lockParam) {\n if (lockParam === \"none\") {\n await blob.delete(\"egx_app_lock\").catch(() => {});\n } else if (lockParam.length >= 4) {\n await blob.setJSON(\"egx_app_lock\", { pass: lockParam });\n }\n }\n return new Response(\"ok\", { headers: cors });\n }\n\n // ---- PWA assets ----\n if (path === \"/sw.js\") {\n return new Response(SW, {\n headers: { ...cors, \"Content-Type\": \"application/javascript\" },\n });\n }\n if (path === \"/manifest.json\") {\n return new Response(MANIFEST, {\n headers: { ...cors, \"Content-Type\": \"application/manifest+json\" },\n });\n }\n if (path === \"/icon-192.png\") return pngResp(ICON192, cors);\n if (path === \"/icon-512.png\") return pngResp(ICON512, cors);\n if (path === \"/apple-touch-icon.png\") return pngResp(APPLE, cors);\n\n // ---- fundamentals proxy: /?fund=SYM ----\n const fund = u.searchParams.get(\"fund\");\n if (fund) {\n try {\n const { cookie, crumb } = await yahooCrumb();\n const mods = \"summaryDetail,defaultKeyStatistics,financialData,price\";\n const qs = \"https://query1.finance.yahoo.com/v10/finance/quoteSummary/\" +\n encodeURIComponent(fund) + \"?modules=\" + mods + \"&crumb=\" +\n encodeURIComponent(crumb);\n const r = await fetch(qs, {\n headers: { \"User-Agent\": UA, \"Cookie\": cookie },\n });\n if (r.status === 401 || r.status === 403) {\n YC = { cookie: \"\", crumb: \"\", ts: 0 };\n }\n const body = await r.arrayBuffer();\n return new Response(body, { status: r.status, headers: jsonHeaders });\n } catch (e) {\n return new Response(JSON.stringify({ error: String(e) }), {\n status: 502,\n headers: jsonHeaders,\n });\n }\n }\n\n // ---- generic passthrough proxy: /?url=ENCODED ----\n const target = u.searchParams.get(\"url\");\n if (target) {\n let t;\n try {\n t = new URL(target);\n } catch {\n return new Response(\"bad url\", { status: 400, headers: cors });\n }\n if (!ALLOWED_HOSTS.includes(t.hostname)) {\n return new Response(\"host not allowed\", { status: 403, headers: cors });\n }\n const upstream = await fetch(target, {\n headers: {\n \"User-Agent\": UA,\n \"Accept\": \"application/json,text/plain,*/*\",\n },\n });\n const body = await upstream.arrayBuffer();\n return new Response(body, {\n status: upstream.status,\n headers: {\n ...cors,\n \"Content-Type\": upstream.headers.get(\"Content-Type\") ||\n \"application/json\",\n \"Cache-Control\": \"public, max-age=60\",\n },\n });\n }\n\n // ---- serve the app (or the setup page if nothing uploaded yet, or /setup to re-upload) ----\n const htmlHeaders = { ...cors, \"Content-Type\": \"text/html; charset=utf-8\" };\n if (path === \"/setup\") {\n return new Response(SETUP_PAGE, { headers: htmlHeaders });\n }\n // password gate on the app itself\n const lock = await blob.getJSON(\"egx_app_lock\").catch(() => null);\n if (lock && lock.pass && !hasAuth(req, lock.pass)) {\n return new Response(LOCK_PAGE, {\n headers: { ...htmlHeaders, \"Cache-Control\": \"no-store\" },\n });\n }\n let html = null;\n try {\n const res = await blob.get(\"egx_app_html\");\n html = res && res.text ? await res.text() : res;\n } catch (e) {\n html = null;\n }\n if (html && html.length > 1000) {\n return new Response(html, { headers: { ...htmlHeaders, \"X-Egx\": \"app\" } });\n }\n return new Response(SETUP_PAGE, { headers: htmlHeaders });\n}","label",[130],"57a1635e-c8be-475b-9db4-d6ebde359400",["D",1782056308698],2,[28],"pulls","branches",1,"forks","envVars",{"_153":61,"_155":61},"connections",{"_153":61,"_154":61},"count","unfilledCount","emptyCount",{"_43":141,"_32":28,"_30":31,"_132":-5,"_41":42,"_40":14,"_134":25,"_38":162,"_13":143,"_33":34,"_35":37,"_24":25,"_139":-5,"_159":163,"_27":164},{"_43":129,"_32":130,"_30":131,"_132":-5,"_41":42,"_40":133,"_134":122,"_38":158,"_13":136,"_33":137,"_35":138,"_24":25,"_139":-5,"_159":160,"_27":161},["D",1782056277748],"children",[],[130],["D",1782056308698],[],[28],["D",1781284411418],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_124":202,"_203":204,"_205":206,"_207":25,"_208":25,"_209":25,"_210":122,"_211":-5,"_212":-7,"_213":-7,"_214":61,"_215":25,"_216":25,"_217":-5,"_218":25,"_219":25,"_220":25,"_221":-5},"ENV",{"_173":174,"_175":176,"_177":85,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v10