[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_343":344,"_345":346},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":-7,"_18":19,"_17":-7,"_251":-5,"_20":252,"_22":253,"_254":255,"_256":257,"_26":258,"_24":259,"_260":261,"_262":263,"_264":51,"_265":266,"_267":73,"_268":-5,"_269":-5,"_270":271},"routes/_app.x.$handle.$name.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":29,"_30":-5,"_31":32,"_33":34,"_35":-5},"handle","nbbaier","name","team-artifacts","branchName","main","version","path","examples","project",{"_36":204,"_13":14,"_38":205,"_49":-5,"_206":51,"_52":53,"_207":53,"_208":209,"_210":-5,"_211":212,"_213":104,"_214":73,"_215":-5,"_216":-5,"_217":34,"_56":218,"_219":220,"_221":222,"_223":224,"_225":-5,"_226":227,"_228":227,"_229":230,"_231":230,"_232":230,"_233":227,"_234":227,"_235":236,"_237":238,"_239":240,"_50":51},"tree",[97,98,99,100,101],"file",{"_36":93,"_68":69,"_64":67,"_13":19,"_76":-5,"_75":94,"_17":34,"_66":-5,"_38":95,"_70":71,"_79":-5,"_18":96},"contents",[59,60,61],"upstream",{"_36":37,"_38":39,"_40":41,"_13":16,"_42":43,"_17":44,"_45":-5,"_46":-5,"_47":48,"_49":-5,"_50":51,"_52":53,"_54":55,"_56":57,"_58":14},"pull","ahead",3,"behind",0,"envVars","id","b06b90cc-3145-4e0c-a601-5498a45bf388","createdAt",["D",1781376559305],"updatedAt",["D",1786052184563],"projectId","d790bcce-8376-49d3-8ba5-0bbcf66987bc",50,"forkedBranchId","forkedBranchVersion","lockfileKey","1786052184690-esm.town_v_templates_team-artifacts@50-main","deletedAt","isOwned",false,"privacy","public","userHandle","templates","orgId","019aa807-52c2-709c-928b-2029bae9a558","projectName",{"_36":87,"_13":88,"_64":89,"_66":67,"_68":69,"_70":71,"_72":73,"_38":90,"_17":34,"_75":24,"_76":91,"_78":51,"_79":-5,"_18":92},{"_36":81,"_13":82,"_64":83,"_66":67,"_68":69,"_70":71,"_72":73,"_38":84,"_17":34,"_75":24,"_76":85,"_78":51,"_79":-5,"_18":86},{"_36":62,"_13":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_38":74,"_17":34,"_75":24,"_76":77,"_78":51,"_79":-5,"_18":80},"2e80b4a6-2a15-4999-9917-dc0e1bf8cf63","welcome.html","fileId","01a01be0-4031-7689-ba3a-03136df79e0c","parentId","01a01be0-4031-7689-ba3a-05c7ed77db47","branchId","860f0895-51f6-4554-8b9f-49785639d5aa","branchVersion",1,"latest",true,["D",1787174076294],"fileType","content","\n\n\n \n \n Welcome\n \n\n\n

👋 This is an artifact

It's a single HTML file, hosted and shared from Val Town.

Make your own by dragging an .html file onto the dashboard.

\n\n\n","deleted","label",[19,63],"493b1e06-1bbf-462c-a929-2a5554195212","markdown-demo.md","01a01be0-4031-7689-ba39-fe49d862ceb7",["D",1787174076294],"# Welcome to Team Artifacts\n\nThis is a **Markdown** artifact. Drop a `.md` file on the dashboard and it\nrenders as a clean, readable page — no build step, no HTML required.\n\n## What renders\n\n- **Bold**, _italic_, and `inline code`\n- Lists, like this one\n- [Links](https://val.town) to anywhere\n- Tables, quotes, and fenced code blocks\n\n```ts\n// Code blocks get monospace styling.\nexport function hello(name: string) {\n return `Hi, ${name}!`;\n}\n```\n\n> Markdown artifacts render in the same sandboxed iframe as HTML ones, so the\n> security model is identical.\n\n| Format | Extension | Rendered as |\n| ------ | -------------- | ------------------------ |\n| HTML | `.html` | served as-is |\n| Markdown | `.md` / `.markdown` | converted to HTML |\n\nDelete this example whenever you like — it won't come back.\n",[19,82],"2aaf54cc-d9ec-4ea5-afa9-01fb435991f1","live-clock.html","01a01be0-4031-7689-ba39-f908feee3757",["D",1787174076294],"\n\n\n \n \n Live clock\n \n\n\n

--:--:--

This artifact runs JavaScript — inside a sandboxed frame.

\n \n

\n \n\n\n",[19,88],"cdb4cc12-92d2-416d-ab46-ad136c432475","directory",["D",1787174076294],[19],{"_36":182,"_13":183,"_64":184,"_66":-5,"_68":69,"_70":71,"_72":73,"_38":185,"_17":34,"_75":94,"_76":-5,"_78":51,"_79":-5,"_109":186,"_18":187},{"_36":93,"_13":19,"_64":67,"_66":-5,"_68":69,"_70":71,"_72":73,"_38":167,"_17":34,"_75":94,"_76":-5,"_78":51,"_79":-5,"_109":168,"_18":169},{"_36":120,"_13":121,"_64":122,"_66":-5,"_68":69,"_70":71,"_72":73,"_38":123,"_17":34,"_75":94,"_76":-5,"_78":51,"_79":-5,"_109":124,"_18":125},{"_36":112,"_13":113,"_64":114,"_66":-5,"_68":69,"_70":115,"_72":73,"_38":116,"_17":71,"_75":24,"_76":117,"_78":51,"_79":-5,"_109":118,"_18":119},{"_36":102,"_13":103,"_64":104,"_66":-5,"_68":69,"_70":32,"_72":73,"_38":105,"_17":106,"_75":107,"_76":108,"_78":51,"_79":-5,"_109":110,"_18":111},"19525a57-678e-4bf8-9e95-f78cfce3d3e6","main.tsx","01a01be0-4032-74fe-b778-9ea05628c043",["D",1787341576565],2,"http","/** @jsxImportSource npm:hono@4/jsx */\nimport { Hono, type Context } from \"npm:hono@4\";\nimport { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\n\nimport {\n createArtifact,\n deleteArtifact,\n getArtifact,\n initDb,\n listArtifacts,\n renameArtifact,\n} from \"./backend/db.ts\";\nimport { renderArtifact } from \"./backend/render.ts\";\nimport { Dashboard } from \"./frontend/Dashboard.tsx\";\nimport { Landing } from \"./frontend/Landing.tsx\";\nimport { Layout } from \"./frontend/Layout.tsx\";\nimport { Viewer } from \"./frontend/Viewer.tsx\";\n\nconst ORG = parseVal().username;\nconst IS_TEMPLATE_DEMO = ORG === \"templates\";\nconst IDENTITY_HEADER = \"X-Val-Town-User\";\n\nawait initDb();\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err)); // surface real stack traces\n\n// Render a JSX page as a full HTML document.\nconst page = (node: any, status = 200) =>\n new Response(\"\" + node.toString(), {\n status,\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n\n// Resolve the signed identity added by Val Town Access for human viewers.\n// Public and automation-bypass requests have no viewer identity.\nasync function getViewer(req: Request): Promise<{ username: string | null } | null> {\n const signed = req.headers.get(IDENTITY_HEADER);\n const token = Deno.env.get(\"valtown\");\n if (!signed || !token) return null;\n\n const response = await fetch(\"https://api.val.town/v3/val/viewer\", {\n headers: {\n Authorization: `Bearer ${token}`,\n [IDENTITY_HEADER]: signed,\n },\n });\n if (!response.ok) return null;\n return await response.json();\n}\n\n// Val Town Access can restrict this entire app to designated team members.\n// It runs before this handler, so the app itself needs no OAuth routes or keys.\napp.get(\"/\", (c) =>\n page());\n\napp.get(\"/dashboard\", async (c) => {\n const artifacts = await listArtifacts();\n return page(\n \n \n ,\n );\n});\n\n// --- Programmatic API -----------------------------------------------------\n// The /api/* routes are gated behind ARTIFACTS_API_KEY so only the owner can\n// upload or list artifacts through the API, while the browser UI (/upload)\n// stays open. Set the key in the val's environment variables.\n\nfunction requireKey(c: Context): boolean {\n const supplied =\n c.req.header(\"authorization\")?.replace(/^Bearer\\s+/i, \"\") ??\n c.req.header(\"x-api-key\") ??\n \"\";\n const expected = Deno.env.get(\"ARTIFACTS_API_KEY\");\n return !!expected && supplied.length > 0 && supplied === expected;\n}\n\n// Parse a multipart upload into the fields createArtifact needs, or null when\n// the payload carries no content. Shared by the UI route and the API route so\n// their behavior stays identical.\nasync function artifactFromForm(form: FormData) {\n const file = form.get(\"file\");\n const source = file instanceof File\n ? await file.text()\n : (form.get(\"html\")?.toString() ?? \"\");\n if (!source.trim()) return null;\n const rawName = form.get(\"name\")?.toString()\n || (file instanceof File ? file.name : \"\")\n || \"untitled\";\n // Markdown when the filename says so (or the form explicitly asks); else HTML.\n const kind = /\\.(md|markdown)$/i.test(rawName) ||\n form.get(\"kind\")?.toString() === \"md\"\n ? \"md\"\n : \"html\";\n const name = rawName.replace(/\\.(html?|md|markdown)$/i, \"\").trim().slice(0, 80) ||\n \"untitled\";\n return { name, kind, source };\n}\n\n// List all artifacts as JSON (metadata only, no bodies).\napp.get(\"/api/artifacts\", async (c) => {\n if (!requireKey(c)) return c.json({ error: \"Unauthorized\" }, 401);\n return c.json(await listArtifacts());\n});\n\n// Create an artifact via the API. Accepts multipart (a `file` field, like the\n// UI) or JSON ({ html, name?, kind? }). Returns an absolute URL.\napp.post(\"/api/artifacts\", async (c) => {\n if (!requireKey(c)) return c.json({ error: \"Unauthorized\" }, 401);\n if (IS_TEMPLATE_DEMO) return c.json({ error: \"Uploads are disabled in the template demo.\" }, 403);\n const contentType = c.req.header(\"content-type\") ?? \"\";\n let parsed;\n if (contentType.includes(\"application/json\")) {\n const body = await c.req.json();\n if (typeof body?.html !== \"string\" || !body.html.trim()) {\n return c.json({ error: \"html is required\" }, 400);\n }\n parsed = {\n name: typeof body.name === \"string\"\n ? body.name.trim().slice(0, 80) || \"untitled\"\n : \"untitled\",\n kind: body.kind === \"md\" ? \"md\" : \"html\",\n source: body.html,\n };\n } else {\n parsed = await artifactFromForm(await c.req.formData());\n if (!parsed) return c.json({ error: \"That file is empty.\" }, 400);\n }\n const id = await createArtifact({\n name: parsed.name,\n html: parsed.source,\n kind: parsed.kind,\n createdBy: \"api\",\n });\n return c.json(\n { id, url: `${new URL(c.req.url).origin}/a/${id}` },\n 201,\n );\n});\n\n// Create an artifact from a dropped/selected HTML or Markdown file (browser UI).\napp.post(\"/upload\", async (c) => {\n if (IS_TEMPLATE_DEMO) return c.text(\"Uploads are disabled in the template demo.\", 403);\n const parsed = await artifactFromForm(await c.req.formData());\n if (!parsed) return c.text(\"That file is empty.\", 400);\n const viewer = await getViewer(c.req.raw);\n const id = await createArtifact({\n name: parsed.name,\n html: parsed.source,\n kind: parsed.kind,\n createdBy: viewer?.username ?? \"anonymous\",\n });\n return c.json({ id, url: `/a/${id}` });\n});\n\n// View an artifact, rendered inside a sandboxed iframe (see Viewer).\napp.get(\"/a/:id\", async (c) => {\n const artifact = await getArtifact(c.req.param(\"id\"));\n if (!artifact) {\n return page(, 404);\n }\n return page(\n ,\n );\n});\n\n// Raw artifact HTML — the source for the sandboxed iframe. The CSP `sandbox`\n// directive forces an opaque origin even on a top-level visit, so uploaded\n// scripts can never act as the viewer (mirrors Viewer).\napp.get(\"/a/:id/raw\", async (c) => {\n const artifact = await getArtifact(c.req.param(\"id\"));\n if (!artifact) return c.text(\"Not found\", 404);\n return new Response(renderArtifact(artifact), {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"content-security-policy\":\n \"sandbox allow-scripts allow-forms allow-popups allow-modals\",\n \"x-content-type-options\": \"nosniff\",\n },\n });\n});\n\napp.post(\"/a/:id/rename\", async (c) => {\n if (IS_TEMPLATE_DEMO) return c.text(\"Renaming is disabled in the template demo.\", 403);\n const form = await c.req.formData();\n const name = (form.get(\"name\")?.toString() ?? \"\").trim().slice(0, 80);\n if (!name) return c.text(\"Name is required.\", 400);\n if (!await renameArtifact(c.req.param(\"id\"), name)) {\n return c.text(\"Not found\", 404);\n }\n return c.redirect(\"/dashboard\");\n});\n\napp.post(\"/a/:id/delete\", async (c) => {\n if (IS_TEMPLATE_DEMO) return c.text(\"Deleting is disabled in the template demo.\", 403);\n await deleteArtifact(c.req.param(\"id\"));\n return c.redirect(\"/dashboard\");\n});\n\n// Drag-and-drop client script (kept out of the markup per house style).\napp.get(\n \"/upload.client.js\",\n (c) => serveFile(\"./frontend/upload.client.ts\", import.meta.url),\n);\n\n// Every Val Town app links to its own source.\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\nexport default app.fetch;\n","children",[],[103],"cfa4f21c-476c-4e30-a65d-468923514215","README.md","01a01be0-4032-74fe-b778-9abf2f200005",4,["D",1787342240415],"# Team Artifacts\n\nHost and share HTML pages and Markdown docs. Drop an `.html` or `.md` file onto\nthe dashboard and get a link you can send to your team.\n\n**Live demo:** https://artifacts-demo.val.run/\n\nClick **Remix** to get your own isolated copy.\n\n## What you get\n\n- A dashboard that lists every artifact and supports drag-and-drop uploads.\n- **HTML and Markdown** support — HTML is served as-is; Markdown becomes a\n clean, readable page.\n- Rename artifacts and see who uploaded each one.\n- **Team-only:** Orgs can enable restricted access so only designated team\n members can access the page, behind a Val Town login with a single click.\n- Artifact contents in this val's **blob storage**, with searchable metadata in\n SQLite.\n- Each artifact rendered in a **sandboxed iframe**, so its scripts can't act as\n the viewer.\n- Example artifacts to start — delete them whenever.\n\n## Access\n\nThe app is public by default. An org should enable **restricted access** in Val\nTown to put the whole app behind Val Town login and choose which team members\ncan open it. Because Val Town applies the gate before the request reaches\n`main.tsx`, every page and action is covered without callback routes, secrets,\nor app-level auth code.\n\nIf you leave access public, anyone with the URL can view, upload, rename, and\ndelete artifacts.\n\n## Creating artifacts\n\nOpen `/dashboard`, then drag in an `.html`, `.htm`, `.md`, or `.markdown` file.\nThe format is detected from the extension and the artifact gets a short URL such\nas `/a/3fa9c21b1e`.\n\nOn a restricted app, Val Town supplies the uploader's username through its\nsigned viewer identity. Public and automation-bypass uploads are recorded as\n`anonymous`.\n\n## Programmatic API\n\nThe `/api/*` routes let you upload and list artifacts from a script, CI, or\nanother val. They're gated behind an API key set as the `ARTIFACTS_API_KEY`\nenvironment variable — without it they answer `401`. Send the key as a\n`Bearer` token or an `x-api-key` header:\n\n```bash\nKEY=your-secret\nBASE=https://.val.run\n\n# Create an artifact from a file (multipart, like the UI)\ncurl -X POST \"$BASE/api/artifacts\" -H \"Authorization: Bearer $KEY\" -F \"file=@./report.html\"\n\n# Create one from a raw string (JSON)\ncurl -X POST \"$BASE/api/artifacts\" \\\n -H \"Authorization: Bearer $KEY\" -H \"Content-Type: application/json\" \\\n -d '{\"html\":\"

hi

\",\"name\":\"release\",\"kind\":\"html\"}'\n\n# List all artifacts (metadata only)\ncurl \"$BASE/api/artifacts\" -H \"Authorization: Bearer $KEY\"\n```\n\n`POST /api/artifacts` returns `201` with `{ \"id\", \"url\" }` (an absolute URL);\n`GET /api/artifacts` returns the artifact list. The browser UI's `/upload`\nroute is unchanged and stays open.\n\n## How it works\n\n```\nmain.tsx Hono routes (the HTTP entry)\nbackend/\n db.ts SQLite metadata + val-scoped blob contents\n render.ts Markdown → HTML; HTML passes through as-is\nfrontend/\n Layout.tsx HTML shell\n Landing.tsx overview and dashboard link\n Dashboard.tsx list, upload, rename, and delete artifacts\n Viewer.tsx sandboxed iframe for one artifact\n upload.client.ts drag-and-drop browser script\nexamples/ seed artifacts\n```\n\n## Storage\n\nSQLite stores each artifact's id, name, kind, blob key, uploader, and creation\ntime. The uploaded source lives under the `artifacts/` prefix in this val's\nproject-scoped blob storage. New remixes therefore start with isolated data.\n\n## Security model\n\nArtifacts are untrusted content, including Markdown that contains raw HTML:\n\n- They render in an iframe without `allow-same-origin`. JavaScript can run, but\n it cannot read the app's cookies or call app routes as the viewer.\n- `/a/:id/raw` also sends `Content-Security-Policy: sandbox`, so opening it\n directly keeps the same opaque-origin boundary.\n- Markdown goes through the same sandbox as uploaded HTML.\n\nIf the app is restricted, anyone allowed through the Val Town access gate can\nupload, rename, and delete artifacts.",[],[113],"fc899a6a-9bd2-4344-8789-467a49713f55","frontend","01a01be0-4032-74fe-b778-9660538c09f1",["D",1787174076294],[126,127,128,129,130],[121],{"_36":160,"_13":161,"_64":162,"_66":122,"_68":69,"_70":71,"_72":73,"_38":163,"_17":34,"_75":135,"_76":164,"_78":51,"_79":-5,"_109":165,"_18":166},{"_36":153,"_13":154,"_64":155,"_66":122,"_68":69,"_70":71,"_72":73,"_38":156,"_17":34,"_75":135,"_76":157,"_78":51,"_79":-5,"_109":158,"_18":159},{"_36":146,"_13":147,"_64":148,"_66":122,"_68":69,"_70":71,"_72":73,"_38":149,"_17":34,"_75":135,"_76":150,"_78":51,"_79":-5,"_109":151,"_18":152},{"_36":139,"_13":140,"_64":141,"_66":122,"_68":69,"_70":71,"_72":73,"_38":142,"_17":34,"_75":135,"_76":143,"_78":51,"_79":-5,"_109":144,"_18":145},{"_36":131,"_13":132,"_64":133,"_66":122,"_68":69,"_70":71,"_72":73,"_38":134,"_17":34,"_75":135,"_76":136,"_78":51,"_79":-5,"_109":137,"_18":138},"084d3e5b-7141-4487-98a9-1d5a73eff7ee","upload.client.ts","01a01be0-4032-74fe-b778-9054966e8bd4",["D",1787174076294],"script","// Drag-and-drop / file-picker uploader for the dashboard, plus a small\n// confirm() for delete forms. Kept out of the markup per house style.\n\nconst zone = document.getElementById(\"dropzone\");\nconst input = document.getElementById(\"fileInput\") as HTMLInputElement | null;\nconst statusEl = document.getElementById(\"dropStatus\");\n\nfunction setStatus(msg: string) {\n if (statusEl) statusEl.textContent = msg;\n}\n\nif (zone && input) {\n const highlight = (on: boolean) =>\n zone.classList.toggle(\"border-blue-400\", on);\n\n zone.addEventListener(\"dragover\", (e) => {\n e.preventDefault();\n highlight(true);\n });\n zone.addEventListener(\"dragleave\", (e) => {\n // dragleave also fires when the pointer moves onto a child element; only\n // clear the highlight when it actually leaves the zone.\n if (!zone.contains((e as DragEvent).relatedTarget as Node | null)) {\n highlight(false);\n }\n });\n zone.addEventListener(\"drop\", (e) => {\n e.preventDefault();\n highlight(false);\n const files = (e as DragEvent).dataTransfer?.files;\n if (files && files.length) uploadAll(files);\n });\n input.addEventListener(\"change\", () => {\n if (input.files && input.files.length) uploadAll(input.files);\n });\n}\n\nasync function uploadAll(files: FileList) {\n const list = [...files].filter(\n (f) =>\n /\\.(html?|md|markdown)$/i.test(f.name) ||\n f.type === \"text/html\" ||\n f.type === \"text/markdown\",\n );\n if (!list.length) {\n setStatus(\"Please drop .html or .md files.\");\n return;\n }\n setStatus(`Uploading ${list.length} file${list.length > 1 ? \"s\" : \"\"}…`);\n let lastUrl = \"\";\n try {\n for (const file of list) {\n const body = new FormData();\n body.set(\"file\", file);\n body.set(\"name\", file.name);\n const res = await fetch(\"/upload\", { method: \"POST\", body });\n if (!res.ok) throw new Error(await res.text());\n lastUrl = (await res.json()).url;\n }\n } catch (err) {\n setStatus(\n \"Upload failed: \" + (err instanceof Error ? err.message : String(err)),\n );\n return;\n }\n location.href = list.length === 1 ? lastUrl : \"/dashboard\";\n}\n\n// Confirm before submitting any form marked with data-confirm.\nfor (\n const form of document.querySelectorAll(\"form[data-confirm]\")\n) {\n form.addEventListener(\"submit\", (e) => {\n if (!confirm(form.getAttribute(\"data-confirm\") || \"Are you sure?\")) {\n e.preventDefault();\n }\n });\n}\n",[],[121,132],"0efb2b8c-5422-4261-a003-117975194855","Viewer.tsx","01a01be0-4032-74fe-b778-8fc6f65f6622",["D",1787174076294],"/** @jsxImportSource npm:hono@4/jsx */\nimport type { Artifact } from \"../backend/db.ts\";\n\nexport function Viewer(props: { artifact?: Artifact; notFound?: boolean }) {\n if (props.notFound || !props.artifact) {\n return (\n

\n That artifact doesn't exist.{\" \"}\n Back to artifacts\n

\n );\n }\n const a = props.artifact;\n return (\n

\n \n ← all\n \n \n {a.name}\n \n \n by {a.createdBy}\n \n

\n \n

\n );\n}\n",[],[121,140],"905e99a1-65b0-4877-85c7-cd0cdf080fe5","Layout.tsx","01a01be0-4032-74fe-b778-8858b4e1a17a",["D",1787174076294],"/** @jsxImportSource npm:hono@4/jsx */\n\nexport function Layout(\n props: { title: string; bare?: boolean; children: any },\n) {\n return (\n \n \n \n \n {props.title}\n \n \n \n \n {props.bare ? props.children : (\n

\n {props.children}\n

\n )}\n \n \n );\n}\n\nfunction Footer() {\n return (\n \n );\n}\n",[],[121,147],"c5eed6c1-68e4-45a3-bbb8-ad53f288c2fa","Landing.tsx","01a01be0-4031-7689-ba3a-0eb72c04f2ca",["D",1787174076294],"/** @jsxImportSource npm:hono@4/jsx */\n\nexport function Landing(props: { org: string }) {\n return (\n

\n \n Built for{\" \"}\n @{props.org}\n

\n Artifacts\n

\n A simple place to host and share HTML pages and Markdown docs. Drop in an{\" \"}\n \n .html\n {\" \"}\n or{\" \"}\n \n .md\n {\" \"}\n file and get a link you can share.\n

\n\n

\n \n Open artifacts\n \n

\n\n

\n \n \n \n

\n );\n}\n\nfunction Feature(props: { title: string; body: string }) {\n return (\n

{props.title}

{props.body}

\n );\n}\n",[],[121,154],"c08c3529-1254-4626-8e2b-18aaedae61fa","Dashboard.tsx","01a01be0-4031-7689-ba3a-08eb8304f1d2",["D",1787174076294],"/** @jsxImportSource npm:hono@4/jsx */\nimport type { Artifact } from \"../backend/db.ts\";\n\nexport function Dashboard(\n props: { org: string; artifacts: Artifact[]; readOnly?: boolean },\n) {\n const count = props.artifacts.length;\n return (\n

\n Artifacts\n

\n @{props.org} · {count} {count === 1 ? \"page\" : \"pages\"}\n

\n \n about\n \n

\n\n {props.readOnly && (\n

\n Note:{\" \"}\n for this demo, uploads are not enabled. When you remix this val, your\n team will be able to upload / rename / delete artifacts!\n

\n )}\n\n \n \n

\n Drop an HTML or Markdown file here\n

\n .html or .md · or click to choose · published instantly\n

\n \n\n {count === 0\n ? (\n

\n No artifacts yet. Drop an HTML or Markdown file above to create your\n first one.\n

\n )\n : (\n

\n ))}\n

\n )}\n\n {!props.readOnly && (\n \n )}\n

\n );\n}\n\nfunction Row(props: { a: Artifact; readOnly?: boolean }) {\n const a = props.a;\n return (\n

\n \n

\n {a.name}\n \n {a.kind === \"md\" ? \"MD\" : \"HTML\"}\n \n

\n by {a.createdBy} · /a/{a.id}\n

\n \n

\n \n open\n \n {props.readOnly\n ? (\n <>\n \n rename\n \n \n delete\n \n \n )\n : (\n <>\n

\n rename\n

\n \n \n \n save\n \n \n

\n \n \n delete\n \n \n \n )}\n

\n );\n}",[],[121,161],["D",1787174076294],[170,171,172],[19],{"_36":87,"_13":88,"_64":89,"_66":67,"_68":69,"_70":71,"_72":73,"_38":179,"_17":34,"_75":24,"_76":91,"_78":51,"_79":-5,"_109":180,"_18":181},{"_36":81,"_13":82,"_64":83,"_66":67,"_68":69,"_70":71,"_72":73,"_38":176,"_17":34,"_75":24,"_76":85,"_78":51,"_79":-5,"_109":177,"_18":178},{"_36":62,"_13":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_38":173,"_17":34,"_75":24,"_76":77,"_78":51,"_79":-5,"_109":174,"_18":175},["D",1787174076294],[],[19,63],["D",1787174076294],[],[19,82],["D",1787174076294],[],[19,88],"6f5d4a68-bd2d-4b85-becc-c9e11633f3b5","backend","01a01be0-4031-7689-ba39-f6230036eaea",["D",1787174076294],[188,189],[183],{"_36":197,"_13":198,"_64":199,"_66":184,"_68":69,"_70":71,"_72":73,"_38":200,"_17":34,"_75":135,"_76":201,"_78":51,"_79":-5,"_109":202,"_18":203},{"_36":190,"_13":191,"_64":192,"_66":184,"_68":69,"_70":71,"_72":73,"_38":193,"_17":34,"_75":135,"_76":194,"_78":51,"_79":-5,"_109":195,"_18":196},"6ec90e16-dac5-4d15-935b-4df1c10f8f3f","render.ts","01a01be0-4031-7689-ba39-f072f50a38f6",["D",1787174076294],"import { marked } from \"npm:marked@12\";\nimport type { Artifact } from \"./db.ts\";\n\n// Minimal GitHub-ish styling so a bare Markdown doc reads nicely inside the\n// sandboxed iframe. The artifact still renders with an opaque origin (see the\n// CSP/sandbox in main.tsx), so this HTML is treated as untrusted either way.\nconst MD_STYLES = `\n :root { color-scheme: light dark; }\n body {\n font: 16px/1.6 -apple-system, BlinkMacSystemFont, \"Segoe UI\", Roboto, Helvetica, Arial, sans-serif;\n max-width: 760px;\n margin: 0 auto;\n padding: 2.5rem 1.25rem 4rem;\n color: #1f2328;\n }\n h1, h2 { border-bottom: 1px solid #d1d9e0; padding-bottom: .3em; }\n h1, h2, h3, h4 { margin-top: 1.6em; line-height: 1.25; }\n a { color: #0969da; }\n code {\n background: rgba(129,139,152,.16);\n padding: .2em .4em;\n border-radius: 6px;\n font-size: 85%;\n }\n pre {\n background: #f6f8fa;\n padding: 1rem;\n border-radius: 8px;\n overflow: auto;\n }\n pre code { background: none; padding: 0; font-size: 100%; }\n blockquote {\n margin: 0;\n padding: 0 1em;\n color: #59636e;\n border-left: .25em solid #d1d9e0;\n }\n table { border-collapse: collapse; }\n th, td { border: 1px solid #d1d9e0; padding: 6px 13px; }\n img { max-width: 100%; }\n @media (prefers-color-scheme: dark) {\n body { color: #e6edf3; }\n h1, h2 { border-color: #3d444d; }\n a { color: #4493f8; }\n pre { background: #161b22; }\n blockquote { color: #9198a1; border-color: #3d444d; }\n th, td { border-color: #3d444d; }\n }\n`;\n\n/** The HTML to serve for an artifact, given its kind. */\nexport function renderArtifact(artifact: Artifact): string {\n if (artifact.kind !== \"md\") return artifact.html;\n const body = marked.parse(artifact.html, { gfm: true, breaks: false });\n const title = escapeHtml(artifact.name);\n return `\n\n\n\n\n${title}\n\n\n${body}\n`;\n}\n\nfunction escapeHtml(s: string): string {\n return s.replace(/[&<>\"]/g, (c) =>\n ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\" }[c]!));\n}\n",[],[183,191],"7d65792d-6d4d-4975-9d92-433acf16fd47","db.ts","01a01be0-4031-7689-ba39-edac9463dca1",["D",1787174076294],"import { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { listFiles, readFile } from \"https://esm.town/v/std/utils/index.ts\";\n\n/** How the stored source should be rendered when viewed. */\nexport type ArtifactKind = \"html\" | \"md\";\n\nexport type Artifact = {\n id: string;\n name: string;\n /** Raw uploaded source, loaded from blob storage when fetching one artifact. */\n html: string;\n kind: ArtifactKind;\n createdBy: string;\n createdAt: number;\n};\n\nconst TABLE = \"artifacts_v2\";\nconst META = \"artifacts_meta_v1\";\nconst BLOB_PREFIX = \"artifacts/\";\n\nlet ready: Promise | null = null;\n\n/** Idempotent: creates storage and seeds examples once. */\nexport function initDb(): Promise {\n if (!ready) ready = setup();\n return ready;\n}\n\nasync function setup() {\n await sqlite.execute(\n `CREATE TABLE IF NOT EXISTS ${TABLE} (\n id TEXT PRIMARY KEY,\n name TEXT NOT NULL,\n blob_key TEXT NOT NULL UNIQUE,\n kind TEXT NOT NULL DEFAULT 'html',\n created_by TEXT NOT NULL,\n created_at INTEGER NOT NULL\n )`,\n );\n await sqlite.execute(\n `CREATE TABLE IF NOT EXISTS ${META} (key TEXT PRIMARY KEY, value TEXT NOT NULL)`,\n );\n await seedExamples();\n}\n\n// Seed example artifacts exactly once. Deterministic ids plus INSERT OR IGNORE\n// make concurrent cold starts safe.\nasync function seedExamples() {\n const seen = await sqlite.execute(`SELECT 1 FROM ${META} WHERE key = 'seeded'`);\n if (seen.rows.length) return;\n\n const files = await listFiles();\n const examples = files\n .filter((f: any) =>\n f.type === \"file\" && f.path.startsWith(\"examples/\") &&\n /\\.(html?|md|markdown)$/i.test(f.path)\n )\n .map((f: any) => f.path as string)\n .sort();\n\n for (const path of examples) {\n const source = await readFile(path);\n const kind: ArtifactKind = /\\.(md|markdown)$/i.test(path) ? \"md\" : \"html\";\n const name = path.replace(/^examples\\//, \"\").replace(/\\.(html?|md|markdown)$/i, \"\");\n const id = kind === \"md\" ? `ex_${name}_md` : `ex_${name}`;\n await storeArtifact({\n id,\n name,\n html: source,\n kind,\n createdBy: \"example\",\n createdAt: Date.now(),\n });\n }\n\n await sqlite.execute({\n sql: `INSERT OR IGNORE INTO ${META} (key, value) VALUES ('seeded', ?)`,\n args: [String(Date.now())],\n });\n}\n\nfunction newId() {\n return crypto.randomUUID().replace(/-/g, \"\").slice(0, 12);\n}\n\nfunction artifactKey(id: string, kind: ArtifactKind) {\n return `${BLOB_PREFIX}${id}.${kind === \"md\" ? \"md\" : \"html\"}`;\n}\n\nasync function storeArtifact(\n input: {\n id: string;\n name: string;\n html: string;\n kind: ArtifactKind;\n createdBy: string;\n createdAt: number;\n },\n) {\n const blobKey = artifactKey(input.id, input.kind);\n await blob.set(blobKey, input.html);\n try {\n await sqlite.execute({\n sql:\n `INSERT OR IGNORE INTO ${TABLE} (id, name, blob_key, kind, created_by, created_at) VALUES (?, ?, ?, ?, ?, ?)`,\n args: [\n input.id,\n input.name,\n blobKey,\n input.kind,\n input.createdBy,\n input.createdAt,\n ],\n });\n } catch (error) {\n await blob.delete(blobKey);\n throw error;\n }\n}\n\nexport async function createArtifact(\n input: {\n name: string;\n html: string;\n kind: ArtifactKind;\n createdBy: string;\n },\n): Promise {\n const id = newId();\n await storeArtifact({ ...input, id, createdAt: Date.now() });\n return id;\n}\n\n/** List metadata only; artifact bodies stay in blob storage. */\nexport async function listArtifacts(): Promise {\n const { rows } = await sqlite.execute(\n `SELECT id, name, kind, created_by, created_at FROM ${TABLE} ORDER BY created_at DESC`,\n );\n return rows.map(toArtifact);\n}\n\nexport async function getArtifact(id: string): Promise {\n const { rows } = await sqlite.execute({\n sql:\n `SELECT id, name, blob_key, kind, created_by, created_at FROM ${TABLE} WHERE id = ?`,\n args: [id],\n });\n if (!rows.length) return null;\n const artifact = toArtifact(rows[0]);\n const source = await blob.get(rows[0].blob_key as string);\n return { ...artifact, html: await source.text() };\n}\n\nexport async function renameArtifact(id: string, name: string): Promise {\n const result = await sqlite.execute({\n sql: `UPDATE ${TABLE} SET name = ? WHERE id = ?`,\n args: [name, id],\n });\n return result.rowsAffected > 0;\n}\n\nexport async function deleteArtifact(id: string): Promise {\n const { rows } = await sqlite.execute({\n sql: `SELECT blob_key FROM ${TABLE} WHERE id = ?`,\n args: [id],\n });\n if (!rows.length) return;\n await blob.delete(rows[0].blob_key as string);\n await sqlite.execute({ sql: `DELETE FROM ${TABLE} WHERE id = ?`, args: [id] });\n}\n\nfunction toArtifact(r: any): Artifact {\n return {\n id: r.id as string,\n name: r.name as string,\n html: \"\",\n kind: (r.kind as ArtifactKind) ?? \"html\",\n createdBy: r.created_by as string,\n createdAt: Number(r.created_at),\n };\n}\n",[],[183,198],"07b94020-6885-4991-b086-21112c61d98c",["D",1787174076294],"legacyEnvVars","httpPrivacy","description","Host and share HTML and Markdown artifacts with your team","imageUrl","userId","5d1042a9-7b0b-499d-8a72-3a8ac7a4e185","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","5f80108f-7ca4-4327-b77b-089dbe4b5a82","tursoName","07b9402068854991b08621112c61d98c","tursoHostname","07b9402068854991b08621112c61d98c-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789521640046],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_250":246},"org",{"_11":12,"_244":-5,"_245":246,"_211":212,"_247":248,"_249":51},"branch",{"_17":115,"_13":16,"_36":69,"_42":204,"_45":37,"_46":44,"_241":53,"_242":43,"_243":57,"_58":14,"_54":12},"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","displayName","avatar","https://secure.gravatar.com/avatar/0129a541b7b3574e92c4afd06c5e32da&d=identicon","tier","pro","canRestrictVals","profileImageUrl","adoptOrgId",{"_36":204,"_13":14,"_38":338,"_49":-5,"_206":51,"_52":53,"_207":53,"_208":209,"_210":-5,"_211":212,"_213":104,"_214":73,"_215":-5,"_216":-5,"_217":34,"_56":218,"_219":220,"_221":222,"_223":339,"_225":-5,"_226":227,"_228":227,"_229":230,"_231":230,"_232":230,"_233":227,"_234":227,"_235":340,"_237":341,"_239":342,"_50":51},[293,296,300,306,307],"files",[293,294,295,296,297,298,299,300,301,302,303,304,305,306,307],"counts",{"_284":34,"_285":71,"_286":34,"_35":287,"_288":289},[278,279,280],{"_36":93,"_13":19,"_64":67,"_66":-5,"_68":69,"_70":71,"_72":73,"_38":276,"_17":34,"_75":94,"_76":-5,"_78":51,"_79":-5,"_18":277},"upstreamProject",{"_36":43,"_13":14,"_208":209,"_210":-5,"_52":53,"_235":274},"upstreamBranch",{"_36":37,"_38":272,"_40":273,"_13":16,"_42":43,"_17":44,"_45":-5,"_46":-5,"_47":48,"_49":-5,"_50":51,"_52":53,"_54":55,"_56":57,"_58":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1781376559305],["D",1786052184563],{"_11":55,"_250":275},"https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/129cab32-3bd7-4c3e-f39b-f12900c76100/square512?exp=1789588383&sig=06604447a2cf9a076e2f692010042678a0587429b132b22286d6aea764ad194b",["D",1787174076294],[19],{"_36":87,"_13":88,"_64":89,"_66":67,"_68":69,"_70":71,"_72":73,"_38":90,"_17":34,"_75":24,"_76":91,"_78":51,"_79":-5,"_18":283},{"_36":81,"_13":82,"_64":83,"_66":67,"_68":69,"_70":71,"_72":73,"_38":84,"_17":34,"_75":24,"_76":85,"_78":51,"_79":-5,"_18":282},{"_36":62,"_13":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_38":74,"_17":34,"_75":24,"_76":77,"_78":51,"_79":-5,"_18":281},[19,63],[19,82],[19,88],"pulls","branches","forks",{"_290":71,"_292":34},"connections",{"_290":34,"_291":34},"count","unfilledCount","emptyCount",{"_36":182,"_13":183,"_64":184,"_66":-5,"_68":69,"_70":71,"_72":73,"_38":185,"_17":34,"_75":94,"_76":-5,"_78":51,"_79":-5,"_109":336,"_18":337},{"_36":197,"_13":198,"_64":199,"_66":184,"_68":69,"_70":71,"_72":73,"_38":200,"_17":34,"_75":135,"_76":201,"_78":51,"_79":-5,"_109":334,"_18":335},{"_36":190,"_13":191,"_64":192,"_66":184,"_68":69,"_70":71,"_72":73,"_38":193,"_17":34,"_75":135,"_76":194,"_78":51,"_79":-5,"_109":332,"_18":333},{"_36":93,"_13":19,"_64":67,"_66":-5,"_68":69,"_70":71,"_72":73,"_38":167,"_17":34,"_75":94,"_76":-5,"_78":51,"_79":-5,"_109":330,"_18":331},{"_36":87,"_13":88,"_64":89,"_66":67,"_68":69,"_70":71,"_72":73,"_38":179,"_17":34,"_75":24,"_76":91,"_78":51,"_79":-5,"_109":328,"_18":329},{"_36":81,"_13":82,"_64":83,"_66":67,"_68":69,"_70":71,"_72":73,"_38":176,"_17":34,"_75":24,"_76":85,"_78":51,"_79":-5,"_109":326,"_18":327},{"_36":62,"_13":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_38":173,"_17":34,"_75":24,"_76":77,"_78":51,"_79":-5,"_109":324,"_18":325},{"_36":120,"_13":121,"_64":122,"_66":-5,"_68":69,"_70":71,"_72":73,"_38":123,"_17":34,"_75":94,"_76":-5,"_78":51,"_79":-5,"_109":322,"_18":323},{"_36":160,"_13":161,"_64":162,"_66":122,"_68":69,"_70":71,"_72":73,"_38":163,"_17":34,"_75":135,"_76":164,"_78":51,"_79":-5,"_109":320,"_18":321},{"_36":153,"_13":154,"_64":155,"_66":122,"_68":69,"_70":71,"_72":73,"_38":156,"_17":34,"_75":135,"_76":157,"_78":51,"_79":-5,"_109":318,"_18":319},{"_36":146,"_13":147,"_64":148,"_66":122,"_68":69,"_70":71,"_72":73,"_38":149,"_17":34,"_75":135,"_76":150,"_78":51,"_79":-5,"_109":316,"_18":317},{"_36":139,"_13":140,"_64":141,"_66":122,"_68":69,"_70":71,"_72":73,"_38":142,"_17":34,"_75":135,"_76":143,"_78":51,"_79":-5,"_109":314,"_18":315},{"_36":131,"_13":132,"_64":133,"_66":122,"_68":69,"_70":71,"_72":73,"_38":134,"_17":34,"_75":135,"_76":136,"_78":51,"_79":-5,"_109":312,"_18":313},{"_36":112,"_13":113,"_64":114,"_66":-5,"_68":69,"_70":115,"_72":73,"_38":116,"_17":71,"_75":24,"_76":117,"_78":51,"_79":-5,"_109":310,"_18":311},{"_36":102,"_13":103,"_64":104,"_66":-5,"_68":69,"_70":32,"_72":73,"_38":105,"_17":106,"_75":107,"_76":108,"_78":51,"_79":-5,"_109":308,"_18":309},[],[103],[],[113],[],[121,132],[],[121,140],[],[121,147],[],[121,154],[],[121,161],[301,302,303,304,305],[121],[],[19,63],[],[19,82],[],[19,88],[297,298,299],[19],[],[183,191],[],[183,198],[294,295],[183],["D",1787174076294],["D",1789521640046],{"_11":12,"_250":246},{"_11":12,"_244":-5,"_245":246,"_211":212,"_247":248,"_249":51},{"_17":115,"_13":16,"_36":69,"_42":204,"_45":37,"_46":44,"_241":53,"_242":43,"_243":57,"_58":14,"_54":12},"ctx",{"_235":-5,"_269":376,"_377":378,"_379":380,"_381":51,"_382":51,"_383":51,"_384":73,"_385":-5,"_386":-7,"_387":-7,"_388":34,"_389":51,"_390":51,"_391":-5,"_392":51,"_393":51,"_394":51,"_395":-5},"ENV",{"_347":348,"_349":350,"_351":16,"_352":353,"_354":355,"_356":357,"_358":359,"_360":361,"_362":363,"_364":365,"_366":367,"_368":369,"_370":371,"_372":373,"_374":375},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]