[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_163":164,"_165":166},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_61":133,"_16":-7,"_134":-5,"_17":135,"_136":137,"_28":138,"_21":139,"_23":140,"_141":-5,"_142":-5,"_143":-5,"_144":35,"_145":146,"_147":38,"_148":-5,"_149":-5,"_150":151},"routes/_app.x.$handle.$name._index",{"_11":12,"_13":14,"_15":-7,"_16":-7,"_17":18,"_19":20,"_21":22,"_23":24,"_25":-7,"_26":-5,"_27":-5,"_28":29,"_30":31,"_32":-5,"_33":-5,"_34":35,"_36":35,"_37":38},"handle","mokudeli","name","h153plants","branchName","version","project",{"_39":78,"_13":14,"_50":79,"_80":-5,"_81":35,"_82":83,"_84":83,"_85":86,"_87":-5,"_88":89,"_90":43,"_91":38,"_92":-5,"_93":-5,"_94":67,"_95":96,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":102,"_103":102,"_104":105,"_106":105,"_107":105,"_108":102,"_109":102,"_110":111,"_112":113,"_114":115,"_116":35},"tags",[],"counts",{"_66":67,"_68":69,"_70":67,"_71":72,"_73":74},"contents",[63],"readme","upstream","pull","files",[31],"preview",{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":38,"_50":51,"_16":52,"_53":54,"_55":56,"_57":35,"_58":-5,"_59":60,"_61":62},"ahead","behind","showHomeCustomizationHint",false,"showHTTPPreviewSettingsHint","hasHTTPFiles",true,"id","663e25e7-7d3b-48f4-9f78-7d683081b608","main.ts","fileId","a0126bfe-88c6-11f1-a82c-1607ee4eb77e","parentId","branchId","08160583-a9b4-48a2-b214-85013afee77a","branchVersion",10,"latest","createdAt",["D",1785613046122],9,"fileType","http","content","/**\n * Plant checklist — deploy-once shell.\n *\n * You paste this ONE time. After that the page content is pushed over HTTP and\n * this code never needs to change again.\n *\n * Setup:\n * 1. val.town -> New -> HTTP val, paste this whole file, save\n * 2. In the val's settings sidebar, add an environment variable:\n * name: PLANT_SECRET\n * value: any passphrase you like\n * Then make any trivial edit and save again — Val Town only picks up new\n * env vars on redeploy, so a fresh variable is invisible to a running instance.\n * 3. Send me the *.val.run URL and the passphrase. I push the page from there on.\n *\n * Routes\n * GET / -> the stored page (or a setup notice if nothing pushed yet)\n * GET /state?week= -> this week's checkmarks\n * POST /state -> {week,id,checked,by} or {week,reset:true}\n * GET /content -> {configured,version,bytes,at} (metadata only, no secret needed)\n * POST /content -> {secret,html} replaces the page, bumps version\n *\n * Why the secret lives in an env var: on Val Town's free tier new vals are\n * PUBLIC, so anything hardcoded here is readable by anyone. Env vars are not —\n * others can see that the variable is referenced, never its value.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst CHECKS = \"plant_check_v1\";\nconst PAGES = \"plant_page_v1\";\nconst MAX_BYTES = 2_000_000;\n\nlet ready: Promise | null = null;\nfunction init() {\n ready ??= (async () => {\n await sqlite.execute(\n `CREATE TABLE IF NOT EXISTS ${CHECKS} (\n id TEXT PRIMARY KEY,\n week TEXT NOT NULL,\n who TEXT,\n at INTEGER\n )`,\n );\n await sqlite.execute(\n `CREATE TABLE IF NOT EXISTS ${PAGES} (\n id TEXT PRIMARY KEY,\n html TEXT NOT NULL,\n version INTEGER NOT NULL,\n at INTEGER NOT NULL\n )`,\n );\n })();\n return ready;\n}\n\nconst json = (body: unknown, status = 200) =>\n new Response(JSON.stringify(body), {\n status,\n headers: {\n \"Content-Type\": \"application/json\",\n \"Cache-Control\": \"no-store\",\n },\n });\n\nconst html = (body: string, status = 200) =>\n new Response(body, {\n status,\n headers: {\n \"Content-Type\": \"text/html; charset=utf-8\",\n \"Cache-Control\": \"no-store\",\n },\n });\n\n/** Hash both sides before comparing so the check doesn't leak length or prefix by timing. */\nasync function sha(s: string): Promise {\n const buf = await crypto.subtle.digest(\n \"SHA-256\",\n new TextEncoder().encode(s),\n );\n return Array.from(new Uint8Array(buf)).map((b) =>\n b.toString(16).padStart(2, \"0\")\n ).join(\"\");\n}\n\nasync function readWeek(week: string) {\n const res = await sqlite.execute({\n sql: `SELECT id, who, at FROM ${CHECKS} WHERE week = ?`,\n args: [week],\n });\n const done: Record = {};\n for (const row of res.rows as unknown[][]) {\n done[String(row[0])] = {\n by: String(row[1] ?? \"\"),\n at: Number(row[2] ?? 0),\n };\n }\n return { week, done };\n}\n\nasync function storedPage(): Promise<\n { html: string; version: number; at: number } | null\n> {\n const res = await sqlite.execute({\n sql: `SELECT html, version, at FROM ${PAGES} WHERE id = 'current'`,\n args: [],\n });\n const row = (res.rows as unknown[][])[0];\n if (!row) return null;\n return { html: String(row[0]), version: Number(row[1]), at: Number(row[2]) };\n}\n\nconst SETUP_NOTICE = `\n\n\nPlant checklist — not configured\n

Shell is live — no page pushed yet

The server half is running. It just hasn't been given any content.

Add an environment variable PLANT_SECRET in this val's settings sidebar.
Make any trivial edit and save, so the running instance picks the variable up.
Send Claude this URL and the passphrase — the checklist gets pushed here.

Checkmark storage is already working; only the page is missing.

`;\n\nexport default async function (req: Request): Promise {\n await init();\n const url = new URL(req.url);\n const path = url.pathname.replace(/\\/+$/, \"\");\n\n // ---------------- content: metadata (public) ----------------\n if (path.endsWith(\"/content\") && req.method === \"GET\") {\n const cur = await storedPage();\n return json({\n configured: !!cur,\n version: cur?.version ?? 0,\n bytes: cur?.html.length ?? 0,\n at: cur?.at ?? 0,\n secretSet: !!Deno.env.get(\"PLANT_SECRET\"),\n });\n }\n\n // ---------------- content: replace the page ----------------\n if (path.endsWith(\"/content\") && req.method === \"POST\") {\n const secret = Deno.env.get(\"PLANT_SECRET\");\n if (!secret) {\n return json({\n error:\n \"PLANT_SECRET is not set on this running instance. Add it in the val's settings sidebar, \" +\n \"then make any trivial code edit and save — env vars only reach a val on redeploy.\",\n }, 503);\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ error: \"malformed request body\" }, 400);\n }\n\n const given = typeof body?.secret === \"string\" ? body.secret : \"\";\n if (!given || (await sha(given)) !== (await sha(secret))) {\n return json({ error: \"bad secret\" }, 401);\n }\n\n const page = typeof body?.html === \"string\" ? body.html : \"\";\n if (!page) return json({ error: \"missing html\" }, 400);\n if (page.length > MAX_BYTES) {\n return json({\n error: \"page too large\",\n bytes: page.length,\n max: MAX_BYTES,\n }, 413);\n }\n\n await sqlite.execute({\n sql:\n `INSERT INTO ${PAGES} (id, html, version, at) VALUES ('current', ?, 1, ?)\n ON CONFLICT(id) DO UPDATE SET html = excluded.html,\n version = ${PAGES}.version + 1,\n at = excluded.at`,\n args: [page, Math.floor(Date.now() / 1000)],\n });\n\n const cur = await storedPage();\n return json({ ok: true, version: cur?.version ?? 1, bytes: page.length });\n }\n\n // ---------------- checkmark state ----------------\n if (path.endsWith(\"/state\")) {\n if (req.method === \"GET\") {\n const week = url.searchParams.get(\"week\") ?? \"\";\n if (!week) return json({ week: \"\", done: {} });\n // Sweep finished weeks so the table never grows without bound.\n await sqlite.execute({\n sql: `DELETE FROM ${CHECKS} WHERE week <> ?`,\n args: [week],\n });\n return json(await readWeek(week));\n }\n\n if (req.method === \"POST\") {\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ error: \"malformed request body\" }, 400);\n }\n\n const week = typeof body?.week === \"string\" ? body.week : \"\";\n if (!week) return json({ error: \"missing week\" }, 400);\n\n if (body?.reset) {\n await sqlite.execute({\n sql: `DELETE FROM ${CHECKS} WHERE week = ?`,\n args: [week],\n });\n return json(await readWeek(week));\n }\n\n if (typeof body?.id === \"string\" && body.id) {\n const id = body.id.slice(0, 96);\n if (body.checked) {\n const who = String(body.by ?? \"\").trim().slice(0, 24);\n await sqlite.execute({\n sql: `INSERT INTO ${CHECKS} (id, week, who, at) VALUES (?, ?, ?, ?)\n ON CONFLICT(id) DO UPDATE SET week = excluded.week,\n who = excluded.who,\n at = excluded.at`,\n args: [id, week, who, Math.floor(Date.now() / 1000)],\n });\n } else {\n await sqlite.execute({\n sql: `DELETE FROM ${CHECKS} WHERE id = ?`,\n args: [id],\n });\n }\n }\n\n return json(await readWeek(week));\n }\n\n return json({ error: \"method not allowed\" }, 405);\n }\n\n // ---------------- everything else is the page ----------------\n const cur = await storedPage();\n return html(cur ? cur.html : SETUP_NOTICE, cur ? 200 : 503);\n}","deleted","label","children",[],"path",[41],{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":38,"_50":64,"_16":52,"_53":54,"_55":56,"_57":35,"_58":-5,"_61":65},["D",1785613046122],[41],"pulls",0,"branches",1,"forks","envVars",{"_75":69,"_77":67},"connections",{"_75":67,"_76":67},"count","unfilledCount","emptyCount","7c1df035-a884-4a1c-b1a1-b584e44e440e",["D",1785052209002],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","plants","imageUrl","userId","5fdf5b52-4bb0-4792-b85d-eb84870504ab","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","019f9d62-bf04-748a-a37b-1956d775cfeb","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_132":128},"org",{"_11":12,"_126":12,"_127":128,"_88":89,"_129":130,"_131":35},"branch",{"_16":48,"_13":117,"_39":46,"_118":78,"_119":-5,"_120":-5,"_121":-5,"_122":-5,"_123":-5,"_124":14,"_125":12},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/1e788f7e-ed80-40f9-c984-228c00f83200/square512?exp=1789534799&sig=082c58f2c9ebd781fe329aba92bcda600898f3760906d603f2d738a9cf3ca870","tier","free","canRestrictVals","profileImageUrl","","adoptOrgId",{"_39":78,"_13":14,"_50":159,"_80":-5,"_81":35,"_82":83,"_84":83,"_85":86,"_87":-5,"_88":89,"_90":43,"_91":38,"_92":-5,"_93":-5,"_94":67,"_95":96,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":102,"_103":102,"_104":105,"_106":105,"_107":105,"_108":102,"_109":102,"_110":160,"_112":161,"_114":162,"_116":35},"tree",[156],[156],{"_66":67,"_68":69,"_70":67,"_71":154,"_73":155},[152],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":38,"_50":64,"_16":52,"_53":54,"_55":56,"_57":35,"_58":-5,"_61":153},[41],{"_75":69,"_77":67},{"_75":67,"_76":67},{"_39":40,"_13":41,"_42":43,"_44":-5,"_45":46,"_47":48,"_49":38,"_50":51,"_16":52,"_53":54,"_55":56,"_57":35,"_58":-5,"_59":157,"_61":158},[],[41],["D",1785052209002],{"_11":12,"_132":128},{"_11":12,"_126":12,"_127":128,"_88":89,"_129":130,"_131":35},{"_16":48,"_13":117,"_39":46,"_118":78,"_119":-5,"_120":-5,"_121":-5,"_122":-5,"_123":-5,"_124":14,"_125":12},"ctx",{"_110":-5,"_149":196,"_197":198,"_199":200,"_201":35,"_202":35,"_203":35,"_204":38,"_205":-5,"_206":-7,"_207":-7,"_208":67,"_209":35,"_210":35,"_211":-5,"_212":35,"_213":35,"_214":35,"_215":-5},"ENV",{"_167":168,"_169":170,"_171":117,"_172":173,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]