[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_155":156,"_157":158},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_104":85,"_27":105,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":122,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",3,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","096364da-6682-11f1-b207-1607ee4eb77e","name","fileType","http","content","// EGX Dashboard — full app server for Val Town (serves the app + proxy + cloud sync)\n//\n// SETUP (one time, ~5 min):\n// 1. val.town → New → HTTP val → delete example code → paste this entire file\n// 2. Open the val's URL in a browser — you'll see a one-time setup page\n// 3. Choose your egx-dashboard.html file, enter an upload key (6+ chars, remember it), Upload\n// 4. The app is now live at that URL. On your phone: open it → browser menu → \"Add to Home Screen\"\n// 5. In the app: Settings → Cloud sync passphrase → set the same passphrase on phone & computer\n//\n// UPDATING THE APP LATER: open /setup , upload the new HTML with the same key.\n// This val also replaces your old proxy val (it has the same ?url= and ?fund= routes).\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst UA = \"Mozilla/5.0 (Windows NT 10.0; Win64; x64)\";\nconst ALLOWED_HOSTS = [\n \"query1.finance.yahoo.com\",\n \"query2.finance.yahoo.com\",\n \"www.mubasher.info\",\n \"english.mubasher.info\",\n \"stockanalysis.com\",\n];\n\n// ---- Yahoo cookie+crumb (needed for fundamentals) ----\nlet YC = { cookie: \"\", crumb: \"\", ts: 0 };\nasync function yahooCrumb() {\n if (YC.crumb && Date.now() - YC.ts < 3600000) return YC;\n const r1 = await fetch(\"https://fc.yahoo.com/\", {\n headers: { \"User-Agent\": UA },\n });\n const cookie = (r1.headers.get(\"set-cookie\") || \"\").split(\";\")[0];\n if (!cookie) throw new Error(\"no cookie\");\n const r2 = await fetch(\"https://query1.finance.yahoo.com/v1/test/getcrumb\", {\n headers: { \"User-Agent\": UA, \"Cookie\": cookie },\n });\n const crumb = (await r2.text()).trim();\n if (!crumb || crumb.includes(\"<\")) throw new Error(\"no crumb\");\n YC = { cookie, crumb, ts: Date.now() };\n return YC;\n}\n\n// ---- PWA assets ----\nconst MANIFEST = JSON.stringify({\n name: \"EGX Dashboard\",\n short_name: \"EGX\",\n start_url: \"/\",\n scope: \"/\",\n display: \"standalone\",\n background_color: \"#060b16\",\n theme_color: \"#060b16\",\n icons: [\n { src: \"/icon-192.png\", sizes: \"192x192\", type: \"image/png\" },\n { src: \"/icon-512.png\", sizes: \"512x512\", type: \"image/png\" },\n ],\n});\n\nconst SW = [\n \"const C='egx-app-v1';\",\n \"self.addEventListener('install',e=>self.skipWaiting());\",\n \"self.addEventListener('activate',e=>e.waitUntil(clients.claim()));\",\n \"self.addEventListener('fetch',e=>{\",\n \" const u=new URL(e.request.url);\",\n \" if(e.request.method!=='GET'||u.origin!==location.origin)return;\",\n \" if(u.pathname!=='/'&&!u.pathname.match(/\\\\.(png|json)$/))return;\",\n \" if(u.search)return;\",\n \" e.respondWith(fetch(e.request).then(r=>{const cp=r.clone();caches.open(C).then(c=>c.put(e.request,cp));return r}).catch(()=>caches.match(e.request)));\",\n \"});\",\n].join(\"\\n\");\n\nconst ICON192 =\n \"iVBORw0KGgoAAAANSUhEUgAAAMAAAADACAYAAABS3GwHAAAEp0lEQVR42u3dO3rTUBBAYUkfbQoKsoRQ0VNDwY5YBDuigJqeCi/BFBRZQKjS+ItjvXVn5j8leUg259y5Qrbpu8a4u3946pCWx/Opb+l8erKjchQ96VE5hp74qBxCT3xUDqEnPiqH0BMflUMYyI9IrO1YT3xUngYD+VF5GgzkR+UIBvKjcgQD+VE5goH8qBzBQH5UjmAgPypHMJAflSMYyI/KEQyeJlRmsPqj8hQYyI/KEdgCwRbI6o+qU8AEgAlg9UfVKWACwASw+qPqFDABYAJY/VF1CpgAMAGA0gHY/qDqNsgEgAkACAAQAFCL3gUwTABAAIAAAAEAAgAEAAgAEAAgAEAAQB7eeAowlXc/fl392t/PH0M9Fq8FwmLpI8dgC4RN5F/ycwJAePmjRCAAbC5vyxEIALtI22oEAsBusrYYgQCwq6StRSAAlEYAEACw5/akpW2QAGACAAIABAAIABAAIACUYc9/mmzpfQICQIjX7QsA5BcAosvf2tskBUD+svILAKXlF4DVv7T8AiB/afkFQP7S8nedT4Yjf0HpBUD+krLbApGf/AIgP/kFQH7yCwC15ReA1b88AiB/2dVfAOQvLX/XuQ/wIp++/nnxz39+e09+E6Cm/Le+Rv6Y+D/CFsjdwkQgvwlwiPwtTATyC+Aw+Y+OgPwCOFz+1q8NyC+A3aTdMwI3ugTQpKx7RGDrI4CmJd3y95NfACG2KVsch/wCCHWhuubxyC+AUPKveVzyCyCk/Gscn/wCCC3/kvMgvwBSyN/S+ZC/SACt3pkde15udAkgnfxjz8/WRwBp5b91nuQXQHr5r50v+QVQRv7L8ya/AMrJb+UXQAj5t3zb4+8v/8gvgPbl3yIC8gsg1Mrf8keikL9QAEdue9aKYKvVH8kDaGHPvzQCWx8BhL/gnRsB+QUQXv65309+AaSRf87Pffj+lvwCyCP/0RGQfx2a/WzQaDe5pp7vki0R+ZNPgIh3eKf+vrnTgPzJA4j88oatIyB/8gCiv7Znzu8ntQDSyD/1OM/fNyYCoSS+CM4k/9jHde18Xnp5NPkTT4Cs8r923NfO51J28icOILP8144/5nyepSd/4i1QBfkvH2+El1QLgPywBSI/BEB+CID8EAD5IQDyQwDNQX40G8DWqz/5UXYCkB9NB7Dl6k9+lJ0A5EfZAMiPsgGQH2UDID/CBbCWtORH2QlAfoQOYInA5EeKCTBHZPJjL3Z7R9iYG2PER9oAXguB+CgTAFDqGgAQACAAQACAAAABAAIABAAIABAAIABAAIAAAAEAWwbweD71ngZU5PF86k0A2AIBAgAEABQMwIUwKl4AmwAwATwFEIBtEApuf0wAmADXygCyr/4mAEyAW4UAWVd/EwAmwNhSgGyrvwkAE2BqMUCW1f/mBBABMstvCwRboKUFAVFX/9ETQATIKP+kLZAIkE3+ydcAIkAm+WddBIsAWeSfFYAIkEX+2QGIABnkXxSACBBd/sUBiACR5e+6rltV3rv7hyd/LYgg/moTwDRAVPlXnwCmAaKIv3kAQkCEXcVuWxYhoMXt9O57diGgpevIQy9axYAjpG8mAFGQ/Wj+A5W6UKM3II4RAAAAAElFTkSuQmCC\";\n\nconst ICON512 =\n \"iVBORw0KGgoAAAANSUhEUgAAAgAAAAIACAYAAAD0eNT6AAAOMklEQVR42u3cMXJTSRuFYd8upwomQEsQETkxBLMjFsGOCCAmJ8JLMMEEXoAmcpXLZSFb0lX31+d5wr/mN3aLqvfclvByw5A2293eKQAzeLi/W5zCeLwoAg9gIBgAiD2AUWAAIPgABoEBgOADGAQGgOgDYAwYAKIPgDFgAIg+AMaAASD8ABgCBoDoA2AMGADCD4AhYAAIPwCGgAEg/AAYAgaA8ANgCBgAwg+AIfBWTfwBIK8dixcPAPJuA6b7oYQfAEPguKneAhB/ADQm6AZA+AFwGxB2AyD+AGhP2AAQfwA06DSLQweA81R8S6DcDYD4A6BNYQNA/AHQqMtYHCoAXFaFtwSGvwEQfwDcBoQNAPEHwAgIGwDiD4AREDYAxB8AIyBsAIg/AEZA2AAQfwCMgLABIP4AGAFhA0D8ATACwgaA+ANgBIQNAPEHwAgIGwDiD4AR0K+FLe0HBgAjoMMAEH8A6N/GNvsPCABGQMcBIP4AME4r22w/EAAYAQPdAAAA41h9AHj6B4Dx2tmq/wAAYAQMNADEHwDGbanPAABAoFUGgKd/ABi7qa3KNwoARsCgA0D8AaDGCPAZAAAIdLEB4OkfAOrcArTRviEAYP3megsAAAKdPQA8/QNAvVsANwAA4AbA0z8AJNwCtF5/MADQbwR4CwAAAp00ADz9A0DtWwA3AADgBsDTPwAk3AK4AQAANwCe/gEg4RbADQAAuAHw9A8ACbcAbgAAwA2Ap38ASLgFcAMAAG4AAAAD4Mb1PwBU85p2uwEAADcAnv4BIOEWwA0AALgBAACiB4DrfwCo7W8tdwMAAG4AAIDYAeD6HwDmcKjpbgAAwA0AABA5AFz/A8BcXmq7GwAAcAMAABgAAMD8A8D7/wAwp+eNdwMAAOk3AACAAQAAzD4AvP8PAHN72no3AACQfAMAABgAAIABAABMNwB8ABAAMjw23w0AAKTeAAAABgAAYAAAAAYAAGAAAAAGAABQwOJ3AACAGwAAwAAAAAwAAMAAAAAMAADAAAAADAAAwAAAAAwAAMAAAAAMAADAAAAADAAAwAAAAAwAAMAAAAAMAAAwAAAAAwAAMAAAAAMAADAAAIA6bh0BwPzeff/56v/2z+ePDizAstnu9o4BIDP2RoEBAIDwGwIGAACibwwYAAAIvyEwFf8KAED8p/p+cAMAIPxuA3ADACD+vk8MAADx9/0aAACIqe/bAABARI0AAwAA8TQCDAAARNMIMAAAEEsjwAAAQCSNAAMAAHE0AgwAAMAAACDtqdgtgAEAIP6hMTQCDAAAwAAA8BTs58cAAAAMAADAAAAoy/W3czAAAAADAMBTr/PAAAAADAAAwAAAAAwAAMAAABiOD7w5FwMAADAAAAADAAAwAAAAAwAAMAAAAAMAADAAAAADAAAwAADAAABgNX7d7WF/Pn90CAYAgPiDAQAAGAAAnv7BAAAQfzAAAMS/Gh8ANAAAxB8MAADx9/SPAQAg/mAAAIg/GAAA4l+M638DAAAwAAA8/Xv6xwAAEH/xxwAAEH8wAADE39M/BgCA+Is/BgCA+Is/BgCA+Is/BgCA+Iu/AQAA4m8AAODpX/wNAADxR/wNAADxR/xLu3UEAOIv/G4AAMRf/MXfDQCA+CP8BgCA+Is+BgCA+As/BgAAYo8BAODpX+AZlX8FAIi/+GMAAIg/GAAA4u/pHwMAQPzFHwMAQPzFHwMAQPzFHwMAQPzFHwMAAPHHAADw9C/+GAAA4i/+GAAA4g8GAID4e/rHAAAQf/HHAAAQfzAAAPEXfzAAAPEXfzAAAMQfDADA07/4YwAAiL/4YwAAiD8YAADi7+mfadw6ApJ8+vL76H/z4+t7ByX+4s/0ls12t3cMpEffGBB/8ccAgPDoGwPiL/4k8BkAxL/z10X8xR83AFAk0G4DDADxxw0AhMXfbYD4iz9uACAs/G4DxF/8cQMA4u82QPzBAIDk6BoB4u/pHwMAQmNrBIi/+GMAQGhkjQDxF38MAAiNqxEg/uKPAQChUTUCxF/8MQAgNKZGAOKPAQChETUCPP2LPwYAhMbTCBB/8ccAgNBoGgHiDwYAhMbSCBB/T/8YABAaSSNA/MEAgNA4po8A8QcDAGKjmDoCxB8MAIiPYdrPLf5gAEB8/P384g8GAOLnHDz9iz8YAIie8xB/8QcDALFzLuIPGACInPMRf0//YAAgbs5J/MUfDABEzXmJv/iDAYCYOTfxF38wABAx5yf+4g8GAOLlHBF/DAAQLefp6V/8MQBA/J2r+Is/BgCIv/MVfzAAQPydsw/9gQEA4p923uIPBgCIf9i5iz8YACD+Yecv/mAAgPiHvQ7iDwYAiL/XQ/zBAEBsmP118W/9wQBAZBxC2Osj/mAAIC4OIex18ot+wABAVBxC2OvlQ39gACAmDiHsdRN/MAAQEYcQ9vqJPxgAiIdDCHsdxR8MAETDIYS9nuIPBgBi4RC8ruIPBgAiweyvr3/rDwYA4kDY6yz+YAAgCoS93n7RDxgAiAFhfOgPDADEnzC//v1P/MEAQPxz/fj6XvzFHwwAxD8x/kkjQPwBA0D8xT/sJkD8AQNA/MX/Df874g8GAOI/afxnHwFpT//iDwYA4v/muM82AsQfMADEX/xX+u/FHzAAEP/i8Z9lBPjQH2AAiL/4d/r/i7/4gwGA+BeLf9URIP6AASD+4j/o1xN/8QcDAPEfPP5VRoD4AwaA+It/0a+P+IMBgPgPGucRR4B/6w8YAOIv/mEjQPwBA0D8xT9sBPhFP4ABIP7iH/bn+9AfYACIv/gHfh8fvv0j/oABIP7ibwSIP2AAiL/4GwHiDxgA4i/+RoD4A08tm+1u7xjEX/zneb1m+XCg+IMbAPEX/3K/ga/n9zvDbYD4gwEg/uJf9tfvGgHiDwYA4h8WfyMAMAAQ/9D4GwGe/sEAQPxD428EiD8YAIh/aPyNAPEHAwDxD42/ESD+YAAg/qHxNwLEHwwAxD80/kaA+MMo/CZA8Rf/4Ne/128NFH9wAyD+4u/nD3sKF38wAMRf/P1F6HgOj3+uIIMBgPiLf8h5PP/zrjUCjA0wAMRf7Oh0Lof+nLXjLP5gAIi/yNHpfI59/bUiLf5gAIi/uNHpnF77dS8da/EHA0D8RY1O5/XWr3epaIs/GADiL2Z0OrdTv8658RZ/MADEX8TodH7n/v9Pjbj4w/j8JkDxF/9J/z5d+vzfff8p/uAGAPEX/5HPc43zF3YwABB/8R/4XNc8/2MjwEgAA0D8RYoO53uN8z8UefEHA0D8xYkO53zN838ee/EHA0D8RYkO593j/B+jL/5Qk38FIP7iX/zvn/MHDADxF38AXsVbAOIv/gAGAOIv/gAGAOIv/gAGgPiLv/gDGADiL/4AGADiL/4AGADiL/4AGADiL/4AGADiL/4AGADiL/4AGADiL/4AGADiL/4AnOlW+IVf/AHcAIi/+ANgACD+ABgAnv7FHwADQPzFHwADQPzFHwADAPEHwADw9C/+ABgAiD8ABoCnf/EHwABA/AEwABB/AAwAxB8AA+CotPf/xR8AA8CTPwAYAOIPAAaA+ANgACD+ABgAiD8ABgDiD4ABgPgDYAAg/gAYAILpZwHAAED8ATAAEH8ADADEHwADQETFHwADwJM/ABgAIUEVfwAMAE/+AGAAzBxX8QfAAAiLrPgDYACExVb8ATAAAAADYPanbk//AFzbstnu9o7h5ubTl9/CD4AbALcB4g+AAWAEiD8AE/EWwAFrvCUg/AAYAEFDQPgBMAACBoHgA2AAAADD8SFAADAAAAADAAAwAAAAAwAAMAAAAAMAADAAAAADAAAwAAAAAwAAMAAAAAMAADAAAAADAAAwAAAAAwAAMAAAwAAAAAwAAMAAAAAMAADAAAAADAAAwAAAAAwAAMAAAAAMAADAAAAADAAAwAAAAAwAAMAAAABeHgAP93eLYwCAHA/3d4sbAABIvAFwBABgAAAABgAAYAAAAAYAAGAAAACVBoDfBQAAGR6b7wYAAFJvAAAAAwAAMAAAgGkHgA8CAsDcnrbeDQAAJN8AAAAGAACQMgB8DgAA5vS88W4AACD9BgAAMAAAgJQB4HMAADCXl9ruBgAA3AAAALEDwNsAADCHQ013AwAAbgAAgOgB4G0AAKjtby13AwAAbgAAgPgB4G0AAKjpWMPdAACAGwC3AAAw+9O/GwAAcAMAABgAT3gbAABqeG2z3QAAgBsAtwAAMPvTvxsAAHAD4BYAABKe/t0AAIAbALcAAJDw9O8GAADcALgFAICEp383AADgBsAtAAAkPP2ffQNgBABAvfifPQAAgJrOHgBuAQCg1tO/GwAAcAPgFgAAEp7+L3oDYAQAQI34X3QAAAB1XHQAuAUAgPGf/le5ATACAGD8trYq3ygAiP/gAwAAGNtqA8AtAACM29JW9RsHAPEfdAAYAQAwZjt9BgAAAl1lALgFAICxmtlm+4EAQPwHGgBGAACM08g2+w8IAOI/wAAwAgCgfxNb2g8MAOnx7zoAjAAAxL+fln4AAJDYvuYgACCvec2BAEBe65qDAYC8xjUHBAB5bWsOCgDymtYcGADktaw5OADIa1hzgACQ165Scd1sd3t/rQAQ/oAbALcBAGhU+AAwAgDQpssoHVNvCQAg/CE3AG4DANCg8AFgBACgPaeZKp7eEgBA+ENuANwGAKAx4TcAbgMAEP7wAWAIACD8hzUvIADktSMqjm4DAPDQGDgADAEA0sMfPQAMAQBSw28AGAIAwh/MADAEAITfAMAYABB9AwBDAED4DQBjwBgAEH0DwBgAQPQNAGMAANE3AAwCAATfADAIABB8A8AoMAoAxN4AwEAABJ5r+h+gwB8s+chWCwAAAABJRU5ErkJggg==\";\n\nconst APPLE =\n \"iVBORw0KGgoAAAANSUhEUgAAALQAAAC0CAIAAACyr5FlAAADUklEQVR42u3dP1IUQRTA4YUiNTDQI0BkboyBN+IQ3MhAYnMjzmDgFQyssigWd2Z3pl+/7vf9MqitWWrn803PH/Dq3cfbg/RW1z4CwSE4BIfgEByCQ3AIDsEhOCQ4BIfgEByCQ3AIDsEhOASHBIfgEByCQ3AIDsEhOASH4JDgEByCQ3AIDsEhOASH4BAcgkOCQ+u78RHk6cP3H8ff/PXlc6+f58ofxk/LojsROLKz6EjEmmMYGRe8Ho4qMuJ9wDGSjGAfcAiOWcZG5PCAQ3BMNDbChgccgkNwCA7BITicqsBBxp4yAu7QwmFmwDGXjJgHO+AwM+CYSEbY82BwkAHHFAU/Q+pXE5y4wjGsjI6/twJHOhkdNVhzkAEHGXCQAQcZcJABBxn5ZcDRucwyDnNc57h/eH755dPj3ShjI3lj/32OVyyCiUx8QBkbxwkWMUSmlzHqmmOljLNeScYMOM7d37v7KCJjPByX7ekdfdSRMRiOLft4Fx+lZIyEY/ve3biFajKGwbHXceHi7RSUMQaOfVeUjc5f5pMxAI4W+/Lcbc59GXRUHO3+la/fcs0DSnYcref/mu1XlpEXR8zK4PS7FJdxyHlvJX7NeHwLhoyMkyNexvGbkpERRxcZr96ajIyHlY4y/vXz628y0k0OMuBoKCPy6cAKMlLg2FHGFh8bx8aUXU8jY8v8cEBJh6PR0eRcH2Skw9F0nbHeBxnpTmXDVqCn34iMdJMj8tzk9Ms+fXtPRiIc8WetLXxUkBGNo9f1jH19FJERiqPvla69fNSREbcgTXINdPHHOL1ELSUjaHLkuTq+uJEtS1Q4BpaxZlNPj3f/Gw/VxkZzHDnvqC1eOjt2UFBGWxyZ77UuXnR/qaGmjIY48t+FX7xd99dEWRmtzlYGej7j/uG574MgtXBM8OSOmhxWyICDDDjIgIMMtcJBBhxkwBEeGXPi2D42yDA5yICDDDjIgIMMOGJ3MxkmBxlwnLO/yag4OdbsdTLqHlYWH+n2QY/Yzk+CdfyPGpUdhxxWBIfgkOAQHIJDcAgOwSE4BIfgEBwSHIJDcAgOwSE4BIfgEByCQ4JDcAgOwSE4BIfgEByCQ3AIDgkOwSE4BIfgEByCQ3AIDsEhwSE4BIea9Qd6x2TkA6KFSQAAAABJRU5ErkJggg==\";\n\nfunction pngResp(b64, cors) {\n const bin = atob(b64);\n const arr = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) arr[i] = bin.charCodeAt(i);\n return new Response(arr, {\n headers: {\n ...cors,\n \"Content-Type\": \"image/png\",\n \"Cache-Control\": \"public, max-age=86400\",\n },\n });\n}\n\nconst SETUP_PAGE = [\n \"\",\n \"EGX App — Setup

\",\n \"

EGX Dashboard — App Setup

\",\n \"

Upload your egx-dashboard.html file once. After that, this URL becomes your app — open it on any device and add it to your home screen.

\",\n \"Dashboard HTML file\",\n \"Upload key (6+ characters — needed for future updates)\",\n \"

\",\n \"

\",\n \"\",\n \"

EGX Dashboard

Enter your password to continue

\",\n \"\",\n \"

\",\n \"

\",\n].join(\"\\n\");\n\n// ---- Yahoo cookie+crumb (needed for fundamentals) ----\nlet YC = { cookie: \"\", crumb: \"\", ts: 0 };\nasync function yahooCrumb() {\n if (YC.crumb && Date.now() - YC.ts < 3600000) return YC;\n const r1 = await fetch(\"https://fc.yahoo.com/\", {\n headers: { \"User-Agent\": UA },\n });\n const cookie = (r1.headers.get(\"set-cookie\") || \"\").split(\";\")[0];\n if (!cookie) throw new Error(\"no cookie\");\n const r2 = await fetch(\"https://query1.finance.yahoo.com/v1/test/getcrumb\", {\n headers: { \"User-Agent\": UA, \"Cookie\": cookie },\n });\n const crumb = (await r2.text()).trim();\n if (!crumb || crumb.includes(\"<\")) throw new Error(\"no crumb\");\n YC = { cookie, crumb, ts: Date.now() };\n return YC;\n}\n\n// ---- PWA assets ----\nconst MANIFEST = JSON.stringify({\n name: \"EGX Dashboard\",\n short_name: \"EGX\",\n start_url: \"/\",\n scope: \"/\",\n display: \"standalone\",\n background_color: \"#060b16\",\n theme_color: \"#060b16\",\n icons: [\n { src: \"/icon-192.png\", sizes: \"192x192\", type: \"image/png\" },\n { src: \"/icon-512.png\", sizes: \"512x512\", type: \"image/png\" },\n ],\n});\n\nconst SW = [\n \"const C='egx-app-v2';\",\n \"self.addEventListener('install',e=>self.skipWaiting());\",\n \"self.addEventListener('activate',e=>e.waitUntil(clients.claim()));\",\n \"self.addEventListener('fetch',e=>{\",\n \" const u=new URL(e.request.url);\",\n \" if(e.request.method!=='GET'||u.origin!==location.origin)return;\",\n \" if(u.pathname!=='/'&&!u.pathname.match(/\\\\.(png|json)$/))return;\",\n \" if(u.search)return;\",\n \" e.respondWith(fetch(e.request).then(r=>{\",\n \" const cacheable=u.pathname!=='/'||r.headers.get('x-egx')==='app';\", // never cache the lock screen\n \" if(cacheable){const cp=r.clone();caches.open(C).then(c=>c.put(e.request,cp))}\",\n \" return r;\",\n \" }).catch(()=>caches.match(e.request)));\",\n \"});\",\n].join(\"\\n\");\n\nconst ICON192 =\n \"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\";\n\nconst ICON512 =\n \"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\";\n\nconst APPLE =\n \"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\";\n\nfunction pngResp(b64, cors) {\n const bin = atob(b64);\n const arr = new Uint8Array(bin.length);\n for (let i = 0; i < bin.length; i++) arr[i] = bin.charCodeAt(i);\n return new Response(arr, {\n headers: {\n ...cors,\n \"Content-Type\": \"image/png\",\n \"Cache-Control\": \"public, max-age=86400\",\n },\n });\n}\n\nconst SETUP_PAGE = [\n \"\",\n \"EGX App — Setup

\",\n \"

EGX Dashboard — App Setup

\",\n \"

Upload your egx-dashboard.html file once. After that, this URL becomes your app — open it on any device and add it to your home screen.

\",\n \"Dashboard HTML file\",\n \"Upload key (6+ characters — needed for future updates)\",\n \"App password (optional — required to open the app; type none to remove an existing one)\",\n \"

\",\n \"

\",\n].join(\"\\n\");\n\nexport default async function (req) {\n const cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"*\",\n };\n if (req.method === \"OPTIONS\") return new Response(null, { headers: cors });\n const u = new URL(req.url);\n const path = u.pathname;\n const jsonHeaders = { ...cors, \"Content-Type\": \"application/json\" };\n\n // ---- cloud sync storage: GET/POST /data?key=PASSPHRASE ----\n // extras: &list=1 lists daily backup snapshots, &restore=YYYY-MM-DD returns one\n if (path === \"/data\") {\n const key = (u.searchParams.get(\"key\") || \"\").trim();\n if (key.length < 6) {\n return new Response(\"key too short\", { status: 400, headers: cors });\n }\n const bkey = \"egx_data_\" + encodeURIComponent(key);\n const bakPrefix = \"egx_bak_\" + encodeURIComponent(key) + \"_\";\n\n if (u.searchParams.get(\"list\") === \"1\") {\n const entries = await blob.list(bakPrefix).catch(() => []);\n const dates = entries.map((e) => (e.key || \"\").slice(bakPrefix.length))\n .filter(Boolean).sort().reverse();\n return new Response(JSON.stringify(dates), { headers: jsonHeaders });\n }\n const restore = u.searchParams.get(\"restore\");\n if (restore) {\n const snap = await blob.getJSON(bakPrefix + restore).catch(() => null);\n return new Response(JSON.stringify(snap ?? null), {\n headers: jsonHeaders,\n });\n }\n if (req.method === \"POST\") {\n const j = await req.json();\n await blob.setJSON(bkey, j);\n // daily snapshot, keep the most recent 7\n try {\n const today = new Date().toISOString().slice(0, 10);\n await blob.setJSON(bakPrefix + today, j);\n const entries = await blob.list(bakPrefix).catch(() => []);\n const keys = entries.map((e) => e.key).filter(Boolean).sort();\n for (let i = 0; i < keys.length - 7; i++) {\n await blob.delete(keys[i]).catch(() => {});\n }\n } catch (e) { /* snapshots are best-effort */ }\n return new Response(JSON.stringify({ ok: true }), {\n headers: jsonHeaders,\n });\n }\n const d = await blob.getJSON(bkey).catch(() => null);\n return new Response(JSON.stringify(d ?? null), { headers: jsonHeaders });\n }\n\n // ---- password gate: unlock / lock-out ----\n if (path === \"/unlock\") {\n if (req.method === \"POST\") {\n const pass = (await req.text()).trim();\n const lock = await blob.getJSON(\"egx_app_lock\").catch(() => null);\n if (!lock || !lock.pass) {\n return new Response(\"no lock set\", { status: 400, headers: cors });\n }\n if (pass !== lock.pass) {\n return new Response(\"wrong password\", { status: 403, headers: cors });\n }\n return new Response(\"ok\", {\n headers: {\n ...cors,\n \"Set-Cookie\": \"egx_auth=\" + tok(lock.pass) +\n \"; Max-Age=2592000; Path=/; Secure; SameSite=Lax; HttpOnly\",\n },\n });\n }\n if (u.searchParams.get(\"out\") === \"1\") {\n return new Response(\"locked\", {\n headers: {\n ...cors,\n \"Set-Cookie\":\n \"egx_auth=x; Max-Age=0; Path=/; Secure; SameSite=Lax; HttpOnly\",\n },\n });\n }\n return new Response(\"bad request\", { status: 400, headers: cors });\n }\n\n // ---- app HTML upload: POST /html?key=UPLOADKEY ----\n if (path === \"/html\" && req.method === \"POST\") {\n const key = (u.searchParams.get(\"key\") || \"\").trim();\n if (key.length < 6) {\n return new Response(\"key too short\", { status: 400, headers: cors });\n }\n const saved = await blob.getJSON(\"egx_app_key\").catch(() => null);\n if (saved && saved.key !== key) {\n return new Response(\"wrong upload key\", { status: 403, headers: cors });\n }\n const html = await req.text();\n if (html.length < 10000 || !html.includes(\"EGX\")) {\n return new Response(\"that does not look like the dashboard file\", {\n status: 400,\n headers: cors,\n });\n }\n await blob.set(\"egx_app_html\", html);\n if (!saved) await blob.setJSON(\"egx_app_key\", { key });\n // optional app password: ?lock=mypassword sets it, ?lock=none removes it\n const lockParam = u.searchParams.get(\"lock\");\n if (lockParam) {\n if (lockParam === \"none\") {\n await blob.delete(\"egx_app_lock\").catch(() => {});\n } else if (lockParam.length >= 4) {\n await blob.setJSON(\"egx_app_lock\", { pass: lockParam });\n }\n }\n return new Response(\"ok\", { headers: cors });\n }\n\n // ---- PWA assets ----\n if (path === \"/sw.js\") {\n return new Response(SW, {\n headers: { ...cors, \"Content-Type\": \"application/javascript\" },\n });\n }\n if (path === \"/manifest.json\") {\n return new Response(MANIFEST, {\n headers: { ...cors, \"Content-Type\": \"application/manifest+json\" },\n });\n }\n if (path === \"/icon-192.png\") return pngResp(ICON192, cors);\n if (path === \"/icon-512.png\") return pngResp(ICON512, cors);\n if (path === \"/apple-touch-icon.png\") return pngResp(APPLE, cors);\n\n // ---- fundamentals proxy: /?fund=SYM ----\n const fund = u.searchParams.get(\"fund\");\n if (fund) {\n try {\n const { cookie, crumb } = await yahooCrumb();\n const mods = \"summaryDetail,defaultKeyStatistics,financialData,price\";\n const qs = \"https://query1.finance.yahoo.com/v10/finance/quoteSummary/\" +\n encodeURIComponent(fund) + \"?modules=\" + mods + \"&crumb=\" +\n encodeURIComponent(crumb);\n const r = await fetch(qs, {\n headers: { \"User-Agent\": UA, \"Cookie\": cookie },\n });\n if (r.status === 401 || r.status === 403) {\n YC = { cookie: \"\", crumb: \"\", ts: 0 };\n }\n const body = await r.arrayBuffer();\n return new Response(body, { status: r.status, headers: jsonHeaders });\n } catch (e) {\n return new Response(JSON.stringify({ error: String(e) }), {\n status: 502,\n headers: jsonHeaders,\n });\n }\n }\n\n // ---- generic passthrough proxy: /?url=ENCODED ----\n const target = u.searchParams.get(\"url\");\n if (target) {\n let t;\n try {\n t = new URL(target);\n } catch {\n return new Response(\"bad url\", { status: 400, headers: cors });\n }\n if (!ALLOWED_HOSTS.includes(t.hostname)) {\n return new Response(\"host not allowed\", { status: 403, headers: cors });\n }\n const upstream = await fetch(target, {\n headers: {\n \"User-Agent\": UA,\n \"Accept\": \"application/json,text/plain,*/*\",\n },\n });\n const body = await upstream.arrayBuffer();\n return new Response(body, {\n status: upstream.status,\n headers: {\n ...cors,\n \"Content-Type\": upstream.headers.get(\"Content-Type\") ||\n \"application/json\",\n \"Cache-Control\": \"public, max-age=60\",\n },\n });\n }\n\n // ---- serve the app (or the setup page if nothing uploaded yet, or /setup to re-upload) ----\n const htmlHeaders = { ...cors, \"Content-Type\": \"text/html; charset=utf-8\" };\n if (path === \"/setup\") {\n return new Response(SETUP_PAGE, { headers: htmlHeaders });\n }\n // password gate on the app itself\n const lock = await blob.getJSON(\"egx_app_lock\").catch(() => null);\n if (lock && lock.pass && !hasAuth(req, lock.pass)) {\n return new Response(LOCK_PAGE, {\n headers: { ...htmlHeaders, \"Cache-Control\": \"no-store\" },\n });\n }\n let html = null;\n try {\n const res = await blob.get(\"egx_app_html\");\n html = res && res.text ? await res.text() : res;\n } catch (e) {\n html = null;\n }\n if (html && html.length > 1000) {\n return new Response(html, { headers: { ...htmlHeaders, \"X-Egx\": \"app\" } });\n }\n return new Response(SETUP_PAGE, { headers: htmlHeaders });\n}","createdAt",["D",1781303102912],"branchVersion","branchId","40453188-d5f2-412e-bc67-92097c4b9b34","id","76e4d94f-40b1-42fc-bbfb-e6dd96bd10c2","hello-http-3",["D",1781284411418],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Another simple HTTP endpoint example","imageUrl","76aa9d66-1d9e-4fbd-9c3f-f51bddceca81","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019ebc39-d20a-75f0-957f-26a0d618ddff","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_103":99},"org",{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",11,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","kariembarsoom","handle","displayName","Kariem Barsoom","avatar","https://lh3.googleusercontent.com/a/ACg8ocKOH7Z-mPBEUQZ3mEw0HkssYFfC4juWok-KRShiQXYoRGGz8nOzKA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":151,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":152,"_79":153,"_81":154,"_83":25},"tree",[146],"files",[146],"counts",{"_135":61,"_136":137,"_138":61,"_139":140,"_141":142},"contents",[127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":131,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_27":134},"66b5c397-50f3-4046-80f7-2578b8a697a4","parentId","latest",["D",1781303102912],2,"label",[28],"pulls","branches",1,"forks","envVars",{"_143":61,"_145":61},"connections",{"_143":61,"_144":61},"count","unfilledCount","emptyCount",{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":147,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_148":149,"_27":150},["D",1781303102912],"children",[],[28],["D",1781284411418],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":55,"_100":101,"_102":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_124":188,"_189":190,"_191":192,"_193":25,"_194":25,"_195":25,"_196":122,"_197":-5,"_198":-7,"_199":-7,"_200":61,"_201":25,"_202":25,"_203":-5,"_204":25,"_205":25,"_206":25,"_207":-5},"ENV",{"_159":160,"_161":162,"_163":85,"_164":165,"_166":167,"_168":169,"_170":171,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v3