My Todos

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_228":229,"_230":231},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_172":-5,"_20":173,"_22":174,"_175":176,"_177":178,"_26":179,"_24":180,"_181":-5,"_182":-5,"_183":57,"_184":185,"_186":54,"_187":-5,"_188":-5,"_189":190},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","ocarater","name","per-user-todos","branchName","main","version","path","main.ts","project",{"_33":114,"_13":14,"_45":115,"_116":-5,"_117":57,"_118":119,"_120":119,"_121":122,"_123":-5,"_124":125,"_126":38,"_127":54,"_128":-5,"_129":-5,"_130":66,"_131":132,"_133":134,"_135":136,"_137":138,"_139":-5,"_140":141,"_142":141,"_143":144,"_145":144,"_146":144,"_147":141,"_148":141,"_149":150,"_151":152,"_153":154,"_155":57},"tree",[51,52],"file",{"_33":34,"_35":36,"_37":38,"_13":19,"_39":40,"_41":42,"_17":43,"_44":-5,"_45":46,"_47":48,"_49":-5,"_18":50},"contents",[],"upstream","pull","ahead","behind","envVars","id","e03afd2f-cccc-4b77-898f-b97ce2675d7f","branchId","f5b6e2f0-ecfe-43de-b706-6197bf74aca4","fileId","ad281d64-9c05-11f1-932d-1607ee4eb77e","content","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { getOAuthUserData, oauthMiddleware } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { Root } from \"./frontend/root.tsx\";\n\n// Set up the todos table\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS todos (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n user TEXT NOT NULL,\n text TEXT NOT NULL,\n done INTEGER DEFAULT 0,\n created_at TEXT DEFAULT (datetime('now'))\n)`);\n\nconst app = new Hono();\n\n// Gate the whole app behind \"Log in with Val Town\".\n// The /auth/* routes are handled by oauthMiddleware before reaching here,\n// so login/logout stay reachable. Everything else requires a session.\napp.use(async (c, next) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user) return c.redirect(\"/auth/login\");\n await next();\n});\n\n// Identify the current user via \"Log in with Val Town\" OAuth session\nasync function currentUser(c: { req: { raw: Request } }): Promise {\n const session = await getOAuthUserData(c.req.raw);\n return session?.user?.username ?? \"anonymous\";\n}\n\n// Serve the (never-cached) HTML shell at the root /\napp.get(\"/\", (c) => c.html(Root()));\n\n// Serve frontend files at the version-addressed URLs Root() stamps, cached immutably\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\n\n// View source redirect\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ---- API endpoints ----\napp.get(\"/api/me\", async (c) => c.json({ user: await currentUser(c) }));\n\napp.get(\"/api/todos\", async (c) => {\n const result = await sqlite.execute({ sql: `SELECT * FROM todos ORDER BY id DESC LIMIT 100`, args: [] });\n return c.json(result.rows);\n});\n\napp.post(\"/api/todos\", async (c) => {\n const user = await currentUser(c);\n const { text } = await c.req.json();\n if (!text) return c.json({ error: \"text required\" }, 400);\n await sqlite.execute({ sql: `INSERT INTO todos (user, text) VALUES (?, ?)`, args: [user, text] });\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/todos\", async (c) => {\n const user = await currentUser(c);\n const { id } = await c.req.json();\n await sqlite.execute({ sql: `DELETE FROM todos WHERE id = ? AND user = ?`, args: [id, user] });\n return c.json({ ok: true });\n});\n\napp.patch(\"/api/todos\", async (c) => {\n const user = await currentUser(c);\n const { id, done } = await c.req.json();\n await sqlite.execute({ sql: `UPDATE todos SET done = ? WHERE id = ? AND user = ?`, args: [done ? 1 : 0, id, user] });\n return c.json({ ok: true });\n});\n\n// Unwrap and rethrow Hono errors as the original error\napp.onError((err) => Promise.reject(err));\n\n// HTTP vals expect an exported \"fetch handler\"\n// Wrapped in oauthMiddleware to add /auth/login, /auth/callback, /auth/logout\nexport default oauthMiddleware(app.fetch);\n","fileType","http",12,"parentId","createdAt",["D",1787168709094],"branchVersion",20,"label",[19],{"_33":61,"_13":62,"_37":63,"_44":-5,"_35":36,"_47":64,"_53":54,"_45":65,"_17":66,"_41":67,"_39":-5,"_56":57,"_49":-5,"_58":68,"_18":69},{"_33":34,"_13":19,"_37":38,"_44":-5,"_35":36,"_47":48,"_53":54,"_45":55,"_17":43,"_41":42,"_39":40,"_56":57,"_49":-5,"_58":59,"_18":60},"latest",true,["D",1787168709094],"deleted",false,"children",[],[19],"1c29abe4-bade-4d40-b0a3-441350097cec","frontend","01a01b8a-98dd-7649-bb37-029616a01d29",4,["D",1787168463076],0,"directory",[70,71,72,73],[62],{"_33":98,"_13":99,"_37":100,"_44":63,"_35":36,"_47":101,"_53":54,"_45":102,"_17":66,"_41":67,"_39":-5,"_56":57,"_49":-5,"_58":103,"_18":104},{"_33":91,"_13":92,"_37":93,"_44":63,"_35":36,"_47":64,"_53":54,"_45":94,"_17":66,"_41":24,"_39":95,"_56":57,"_49":-5,"_58":96,"_18":97},{"_33":84,"_13":85,"_37":86,"_44":63,"_35":36,"_47":64,"_53":54,"_45":87,"_17":66,"_41":80,"_39":88,"_56":57,"_49":-5,"_58":89,"_18":90},{"_33":74,"_13":75,"_37":76,"_44":63,"_35":36,"_47":77,"_53":54,"_45":78,"_17":79,"_41":80,"_39":81,"_56":57,"_49":-5,"_58":82,"_18":83},"0c178dec-4137-4ab8-afda-70369d5b6969","root.tsx","01a01b8a-98de-71a9-9b1e-a6842e2760ae",5,["D",1787168466501],1,"script","/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"\")}\n \n \n \n \n My Todos\n