`, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter

\n Clicked\n setCount((c) => c + 1)}\n class=\"bg-blue-500 hover:bg-blue-600 text-white font-medium px-4 py-2 rounded-lg transition-colors cursor-pointer\"\n >\n {count}\n \n times\n

\n );\n}\n",[190,107,78],"f6d75beb-e405-48b2-9d9b-9136d2b43d23",["D",1787983360389],"/** @jsxRuntime automatic */\n/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport React, { useEffect, useMemo, useState } from \"https://esm.sh/react@18.2.0\";\n\nconst panel = \"rounded-2xl border border-cyan-950/80 bg-slate-950/75 shadow-[0_0_30px_rgba(8,145,178,.08)]\";\nconst label = \"text-[11px] uppercase tracking-[.22em] text-cyan-400/70\";\nconst tabs = [[\"overview\",\"Главная\"],[\"agents\",\"Агенты\"],[\"missions\",\"Миссии\"],[\"crm\",\"CRM\"],[\"github\",\"GitHub\"],[\"orion\",\"ORION\"],[\"security\",\"Безопасность\"]];\nfunction Pill({children,state}:{children:any,state?:string}){const good=[\"PASS\",\"HEALTHY\",\"CONNECTED\",\"ACTIVE_BOUNDED\"].includes(state??String(children));return {children}}\nfunction Metric({title,value,sub}:{title:string,value:any,sub?:string}){return

{title}

{value}

{sub&&

{sub}

}

}\nfunction Empty({children}:{children:any}){return

{children}

}\n\nexport function App(){\n const [tab,setTab]=useState(\"overview\"),[overview,setOverview]=useState(null),[crm,setCrm]=useState(null),[agents,setAgents]=useState(null),[missions,setMissions]=useState(null),[orion,setOrion]=useState(null),[security,setSecurity]=useState(null),[error,setError]=useState(null);\n async function refresh(){try{setError(null);const [o,c,a,m,r,s]=await Promise.all([\"overview\",\"crm\",\"agents\",\"missions\",\"orion\",\"security\"].map(x=>fetch(`/api/${x}`).then(async q=>{if(!q.ok)throw new Error(`${x}:${q.status}`);return q.json()})));setOverview(o);setCrm(c);setAgents(a);setMissions(m);setOrion(r);setSecurity(s)}catch(e){setError(String(e))}}\n useEffect(()=>{refresh();const id=setInterval(refresh,30000);return()=>clearInterval(id)},[]);\n const entities=crm?.entities??{};const providerHealthy=useMemo(()=>overview?.providers?.filter((x:any)=>x.health_state===\"HEALTHY\").length??0,[overview]);\n return

AG COMMAND CENTER

HANTER · IMPERIAL CORE · EVIDENCE FIRST

PRODUCTION: NO{overview?.mission?.checkpoint??\"LOADING\"}

\n {error&&

{error}

}\n \n {tab===\"overview\"&&<>

Command chain

Architect → HANTER → 8 Directors → 100 NCA

{overview?.directors?.map((d:any)=>

{d.name}{d.agents}

{d.domain}

)}

Provider fabric

{overview?.providers?.map((p:any)=>

{p.name}{p.health_state}

HTTP {p.http_status??\"—\"} · authority {p.authority_state} · {p.checked_at}

)}

}\n {tab===\"agents\"&&

Canonical roster

{overview?.directors?.map((d:any)=>

{d.name}

{d.id}

{d.agents}

{d.domain}

)}

Total endpoint: {agents?.count??\"—\"}. Heartbeat и SUCCESS не выводятся без evidence.

}\n {tab===\"missions\"&&

Mission graph

{missions?.missions?.length?missions.missions.map((x:any)=>

{x.title}

{x.status} · approval {x.approval_state}

):Миссии в AG DB пока не созданы; фиктивный progress не добавляется.}

}\n {tab===\"crm\"&&

{Object.entries(entities).map(([name,rows]:any)=>

{name}

{rows.length}

{rows.length?rows.slice(0,8).map((x:any)=>

{x.name??x.title??x.subject??x.body}

):Проверенных записей нет.}

)}

}\n {tab===\"github\"&&

GitHub Direct Connect

{overview?.github?.state!==\"CONNECTED\"&&

{overview?.github?.reason??\"Authenticated repository read unavailable\"}. Configured ≠ CONNECTED.

}

}\n {tab===\"orion\"&&

ORION

Advisory coordination only

{JSON.stringify(orion?.runtime?.evidence?.orion??{},null,2)}

}\n {tab===\"security\"&&

Zero Trust

{security?.chain?.map((x:string)=>

✓ {x}

)}

CYBER-HAK: DEFENSIVE / GOVERNED. Autonomous offensive authority: DENIED.

}\n \n

\n}\n",[190,107,89],"pulls","branches","forks","envVars",{"_85":26,"_210":26},"connections",{"_85":26,"_209":26},"unfilledCount","emptyCount",{"_35":526,"_13":190,"_76":185,"_45":-5,"_37":38,"_187":42,"_194":24,"_39":527,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":528,"_17":529},{"_35":183,"_13":107,"_76":106,"_45":185,"_37":38,"_187":42,"_194":24,"_39":523,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":524,"_17":525},{"_35":198,"_13":89,"_76":88,"_45":106,"_37":38,"_187":100,"_194":24,"_39":520,"_41":86,"_79":80,"_184":200,"_81":30,"_188":-5,"_258":521,"_17":522},{"_35":193,"_13":78,"_76":77,"_45":106,"_37":38,"_187":42,"_194":24,"_39":517,"_41":26,"_79":80,"_184":196,"_81":30,"_188":-5,"_258":518,"_17":519},{"_35":510,"_13":511,"_76":512,"_45":185,"_37":38,"_187":42,"_194":24,"_39":513,"_41":26,"_79":21,"_184":514,"_81":30,"_188":-5,"_258":515,"_17":516},{"_35":502,"_13":503,"_76":504,"_45":185,"_37":38,"_187":505,"_194":24,"_39":506,"_41":42,"_79":80,"_184":507,"_81":30,"_188":-5,"_258":508,"_17":509},{"_35":494,"_13":495,"_76":496,"_45":185,"_37":38,"_187":497,"_194":24,"_39":498,"_41":86,"_79":80,"_184":499,"_81":30,"_188":-5,"_258":500,"_17":501},{"_35":490,"_13":481,"_76":475,"_45":-5,"_37":38,"_187":476,"_194":24,"_39":491,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":492,"_17":493},{"_35":482,"_13":483,"_76":484,"_45":475,"_37":38,"_187":485,"_194":24,"_39":486,"_41":26,"_79":80,"_184":487,"_81":30,"_188":-5,"_258":488,"_17":489},{"_35":472,"_13":473,"_76":474,"_45":475,"_37":38,"_187":476,"_194":24,"_39":477,"_41":26,"_79":21,"_184":478,"_81":30,"_188":-5,"_258":479,"_17":480},{"_35":467,"_13":292,"_76":295,"_45":-5,"_37":38,"_187":468,"_194":24,"_39":469,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":470,"_17":471},{"_35":462,"_13":461,"_76":455,"_45":295,"_37":38,"_187":463,"_194":24,"_39":464,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":465,"_17":466},{"_35":453,"_13":284,"_76":454,"_45":455,"_37":38,"_187":456,"_194":24,"_39":457,"_41":42,"_79":21,"_184":458,"_81":30,"_188":-5,"_258":459,"_17":460},{"_35":448,"_13":447,"_76":441,"_45":295,"_37":38,"_187":449,"_194":24,"_39":450,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":451,"_17":452},{"_35":439,"_13":284,"_76":440,"_45":441,"_37":38,"_187":442,"_194":24,"_39":443,"_41":26,"_79":21,"_184":444,"_81":30,"_188":-5,"_258":445,"_17":446},{"_35":434,"_13":433,"_76":427,"_45":295,"_37":38,"_187":435,"_194":24,"_39":436,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":437,"_17":438},{"_35":425,"_13":284,"_76":426,"_45":427,"_37":38,"_187":428,"_194":24,"_39":429,"_41":26,"_79":21,"_184":430,"_81":30,"_188":-5,"_258":431,"_17":432},{"_35":420,"_13":419,"_76":413,"_45":295,"_37":38,"_187":421,"_194":24,"_39":422,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":423,"_17":424},{"_35":411,"_13":284,"_76":412,"_45":413,"_37":38,"_187":414,"_194":24,"_39":415,"_41":26,"_79":21,"_184":416,"_81":30,"_188":-5,"_258":417,"_17":418},{"_35":406,"_13":405,"_76":399,"_45":295,"_37":38,"_187":407,"_194":24,"_39":408,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":409,"_17":410},{"_35":397,"_13":284,"_76":398,"_45":399,"_37":38,"_187":400,"_194":24,"_39":401,"_41":26,"_79":21,"_184":402,"_81":30,"_188":-5,"_258":403,"_17":404},{"_35":393,"_13":392,"_76":386,"_45":295,"_37":38,"_187":387,"_194":24,"_39":394,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":395,"_17":396},{"_35":384,"_13":284,"_76":385,"_45":386,"_37":38,"_187":387,"_194":24,"_39":388,"_41":26,"_79":21,"_184":389,"_81":30,"_188":-5,"_258":390,"_17":391},{"_35":379,"_13":378,"_76":372,"_45":295,"_37":38,"_187":380,"_194":24,"_39":381,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":382,"_17":383},{"_35":370,"_13":284,"_76":371,"_45":372,"_37":38,"_187":373,"_194":24,"_39":374,"_41":26,"_79":21,"_184":375,"_81":30,"_188":-5,"_258":376,"_17":377},{"_35":365,"_13":364,"_76":358,"_45":295,"_37":38,"_187":366,"_194":24,"_39":367,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":368,"_17":369},{"_35":356,"_13":284,"_76":357,"_45":358,"_37":38,"_187":359,"_194":24,"_39":360,"_41":26,"_79":21,"_184":361,"_81":30,"_188":-5,"_258":362,"_17":363},{"_35":351,"_13":350,"_76":344,"_45":295,"_37":38,"_187":352,"_194":24,"_39":353,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":354,"_17":355},{"_35":342,"_13":284,"_76":343,"_45":344,"_37":38,"_187":345,"_194":24,"_39":346,"_41":26,"_79":21,"_184":347,"_81":30,"_188":-5,"_258":348,"_17":349},{"_35":337,"_13":336,"_76":330,"_45":295,"_37":38,"_187":338,"_194":24,"_39":339,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":340,"_17":341},{"_35":328,"_13":284,"_76":329,"_45":330,"_37":38,"_187":331,"_194":24,"_39":332,"_41":26,"_79":21,"_184":333,"_81":30,"_188":-5,"_258":334,"_17":335},{"_35":323,"_13":322,"_76":316,"_45":295,"_37":38,"_187":324,"_194":24,"_39":325,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":326,"_17":327},{"_35":314,"_13":284,"_76":315,"_45":316,"_37":38,"_187":317,"_194":24,"_39":318,"_41":26,"_79":21,"_184":319,"_81":30,"_188":-5,"_258":320,"_17":321},{"_35":309,"_13":308,"_76":302,"_45":295,"_37":38,"_187":310,"_194":24,"_39":311,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":312,"_17":313},{"_35":300,"_13":284,"_76":301,"_45":302,"_37":38,"_187":303,"_194":24,"_39":304,"_41":42,"_79":21,"_184":305,"_81":30,"_188":-5,"_258":306,"_17":307},{"_35":294,"_13":293,"_76":286,"_45":295,"_37":38,"_187":296,"_194":24,"_39":297,"_41":26,"_79":108,"_184":-5,"_81":30,"_188":-5,"_258":298,"_17":299},{"_35":283,"_13":284,"_76":285,"_45":286,"_37":38,"_187":287,"_194":24,"_39":288,"_41":26,"_79":21,"_184":289,"_81":30,"_188":-5,"_258":290,"_17":291},{"_35":276,"_13":277,"_76":278,"_45":-5,"_37":38,"_187":42,"_194":24,"_39":279,"_41":26,"_79":21,"_184":280,"_81":30,"_188":-5,"_258":281,"_17":282},{"_35":269,"_13":270,"_76":271,"_45":-5,"_37":38,"_187":42,"_194":24,"_39":272,"_41":26,"_79":21,"_184":273,"_81":30,"_188":-5,"_258":274,"_17":275},{"_35":261,"_13":262,"_76":263,"_45":-5,"_37":38,"_187":264,"_194":24,"_39":265,"_41":26,"_79":80,"_184":266,"_81":30,"_188":-5,"_258":267,"_17":268},{"_35":252,"_13":253,"_76":120,"_45":-5,"_37":38,"_187":147,"_194":24,"_39":254,"_41":255,"_79":256,"_184":257,"_81":30,"_188":14,"_258":259,"_17":260},"f4e989ac-b52b-4a10-9ef7-698c593d8f54","index.ts",["D",1789074870084],6,"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { Hono } from \"npm:hono@4.9.5\";\nimport { Root } from \"./frontend/root.tsx\";\nimport { commandStatus, submitCommand, transitionCommand } from \"./lib/command_bus.ts\";\nimport {\n boundedText,\n githubFailureState,\n isAgentId,\n isRepoAllowed,\n normalizeRepo,\n parseRepoAllowlist,\n providerSemantic,\n safeEqual,\n} from \"./lib/policy.mjs\";\n\nconst app = new Hono();\nconst MISSION_ID = \"IC-AG-GENERAL-AGENT-PLATFORM-001\";\nconst CANONICAL_REPO = \"oromaskevic23-cmd/CYBER-HAK-Public\";\nconst RECOVERY_STATUS_URL = \"https://oromaskevic23--6796d66aa32f11f1bd771607ee4eb77e.web.val.run\";\nconst PROVIDERS = [\n { id: \"provider-1\", name: \"Val Town\", node: \"hanter-bridge-node-1\", endpoint: \"https://oromaskevic23--46761dd0a2bf11f18ae41607ee4eb77e.web.val.run/health\", present: true },\n { id: \"provider-2\", name: \"Netlify\", node: \"hanter-bridge-node-2\", endpoint: \"https://hanter-bridge-node-2.netlify.app/health\", present: true },\n { id: \"provider-3\", name: \"Supabase\", node: \"hanter-bridge-node-3\", endpoint: \"https://flqxwhibxnyujynmopmr.supabase.co/functions/v1/hanter-bridge-node-3\", present: true },\n];\n\nconst DIRECTORS = [\n { id: \"ORCH-KIDS-MEDIA-001\", name: \"Lucas Bennett\", agents: 8, domain: \"Kids Media\" },\n { id: \"ORCH-DROPSHIPPING-001\", name: \"Mason Reed\", agents: 16, domain: \"Dropshipping Commerce\" },\n { id: \"ORCH-AI-AUTOMATION-001\", name: \"Ethan Cole\", agents: 13, domain: \"AI Automation\" },\n { id: \"ORCH-B2B-REVENUE-001\", name: \"Sophia Laurent\", agents: 13, domain: \"B2B Revenue\" },\n { id: \"ORCH-CREATIVE-DIGITAL-001\", name: \"Adrian Wolfe\", agents: 13, domain: \"Creative & Digital\" },\n { id: \"ORCH-EDUCATION-001\", name: \"Amelia Grant\", agents: 13, domain: \"Education\" },\n { id: \"ORCH-DATA-MARKET-001\", name: \"Victor Hayes\", agents: 12, domain: \"Data & Market Intelligence\" },\n { id: \"ORCH-SME-SERVICES-001\", name: \"Olivia Morgan\", agents: 12, domain: \"SME Services\" },\n];\n\nconst ROSTER = (() => {\n let n = 1;\n return DIRECTORS.flatMap((director) => Array.from({ length: director.agents }, () => ({\n agent_id: `NCA-${String(n++).padStart(3, \"0\")}`,\n director_id: director.id,\n director: director.name,\n department: director.domain,\n current_mission: MISSION_ID,\n current_task: null,\n checkpoint: \"AG-M1-GOVERNED-INTEGRATION\",\n runtime_state: \"RECOVERY_RUNTIME_REPORTED\",\n skill_bindings: [\"AG Builder 1.1.0\"],\n evidence_count: 0,\n heartbeat: null,\n orion_state: \"ADVISORY_ONLY\",\n truth_boundary: \"ASSIGNMENT_NOT_EXECUTION_EVIDENCE\",\n })));\n})();\n\nawait sqlite.batch([\n { sql: \"CREATE TABLE IF NOT EXISTS ag_crm_organizations (id TEXT PRIMARY KEY,name TEXT NOT NULL,website TEXT,owner_agent_id TEXT,evidence_ref TEXT,created_at TEXT NOT NULL,updated_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_crm_contacts (id TEXT PRIMARY KEY,organization_id TEXT,name TEXT NOT NULL,email TEXT,source TEXT NOT NULL,status TEXT NOT NULL,owner_agent_id TEXT,evidence_ref TEXT,created_at TEXT NOT NULL,updated_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_crm_leads (id TEXT PRIMARY KEY,title TEXT NOT NULL,stage TEXT NOT NULL,owner_agent_id TEXT,evidence_ref TEXT,created_at TEXT NOT NULL,updated_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_crm_opportunities (id TEXT PRIMARY KEY,title TEXT NOT NULL,stage TEXT NOT NULL,value_usd REAL,probability INTEGER NOT NULL,owner_agent_id TEXT,evidence_ref TEXT,created_at TEXT NOT NULL,updated_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_crm_activities (id TEXT PRIMARY KEY,kind TEXT NOT NULL,subject TEXT NOT NULL,related_type TEXT,related_id TEXT,owner_agent_id TEXT,evidence_ref TEXT,created_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_crm_tasks (id TEXT PRIMARY KEY,title TEXT NOT NULL,status TEXT NOT NULL,due_at TEXT,owner_agent_id TEXT,evidence_ref TEXT,created_at TEXT NOT NULL,updated_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_crm_notes (id TEXT PRIMARY KEY,body TEXT NOT NULL,related_type TEXT,related_id TEXT,owner_agent_id TEXT,evidence_ref TEXT,created_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_missions (id TEXT PRIMARY KEY,title TEXT NOT NULL,status TEXT NOT NULL,director_id TEXT,task_graph_json TEXT NOT NULL,evidence_ref TEXT,approval_state TEXT NOT NULL,created_at TEXT NOT NULL,updated_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_audit_v2 (id INTEGER PRIMARY KEY AUTOINCREMENT,event_type TEXT NOT NULL,subject_id TEXT,detail_json TEXT NOT NULL,created_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_idempotency (key TEXT PRIMARY KEY,request_hash TEXT NOT NULL,response_json TEXT,created_at TEXT NOT NULL)\" },\n { sql: \"CREATE TABLE IF NOT EXISTS ag_skill_bindings (agent_id TEXT NOT NULL,skill_id TEXT NOT NULL,skill_version TEXT NOT NULL,state TEXT NOT NULL,PRIMARY KEY(agent_id,skill_id))\" },\n]);\nfor (const agent of ROSTER) await sqlite.execute({ sql: \"INSERT OR IGNORE INTO ag_skill_bindings(agent_id,skill_id,skill_version,state) VALUES(?,?,?,?)\", args: [agent.agent_id, \"ag-builder\", \"1.1.0\", \"ACTIVE_BOUNDED\"] });\n\napp.use(\"*\", async (c, next) => {\n await next();\n c.header(\"X-Content-Type-Options\", \"nosniff\");\n c.header(\"X-Frame-Options\", \"DENY\");\n c.header(\"Referrer-Policy\", \"no-referrer\");\n c.header(\"Permissions-Policy\", \"camera=(), microphone=(), geolocation=(), payment=()\");\n c.header(\"Content-Security-Policy\", \"default-src 'self'; script-src 'self' https://cdn.twind.style https://esm.town https://esm.sh; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data:; frame-ancestors 'none'; base-uri 'none'; form-action 'self'\");\n if (c.req.path.startsWith(\"/api/\")) c.header(\"Cache-Control\", \"no-store\");\n});\n\nfunction requireAdmin(c: any) {\n const configured = Deno.env.get(\"AG_ADMIN_TOKEN\");\n if (!configured) return c.json({ ok: false, status: \"BLOCKED\", error: \"AG_ADMIN_TOKEN_NOT_CONFIGURED\" }, 503);\n const provided = c.req.header(\"authorization\")?.replace(/^Bearer\\s+/i, \"\") ?? \"\";\n if (!safeEqual(provided, configured)) return c.json({ ok: false, status: \"BLOCKED\", error: \"UNAUTHORIZED\" }, 401);\n const origin = c.req.header(\"origin\");\n if (origin && origin !== new URL(c.req.url).origin) return c.json({ ok: false, status: \"BLOCKED\", error: \"ORIGIN_DENIED\" }, 403);\n return null;\n}\n\nasync function parseMutation(c: any) {\n if (!/^application\\/json(?:;|$)/i.test(c.req.header(\"content-type\") ?? \"\")) return { error: c.json({ ok: false, error: \"JSON_CONTENT_TYPE_REQUIRED\" }, 415) };\n const length = Number(c.req.header(\"content-length\") ?? 0);\n if (length > 32768) return { error: c.json({ ok: false, error: \"BODY_TOO_LARGE\" }, 413) };\n const key = c.req.header(\"idempotency-key\");\n if (!key || !/^[A-Za-z0-9._:-]{8,128}$/.test(key)) return { error: c.json({ ok: false, error: \"VALID_IDEMPOTENCY_KEY_REQUIRED\" }, 400) };\n try { return { body: await c.req.json(), key }; } catch { return { error: c.json({ ok: false, error: \"MALFORMED_JSON\" }, 400) }; }\n}\n\nasync function fetchJson(url: string, headers: Record = {}, timeoutMs = 5000) {\n const controller = new AbortController();\n const timer = setTimeout(() => controller.abort(), timeoutMs);\n try {\n const response = await fetch(url, { headers, redirect: \"error\", signal: controller.signal });\n const text = (await response.text()).slice(0, 1000000);\n let body: any = null;\n try { body = text ? JSON.parse(text) : null; } catch { body = { parse_error: true }; }\n return { ok: response.ok, status: response.status, body };\n } finally { clearTimeout(timer); }\n}\n\nlet providerCache: { at: number; value: any[] } | null = null;\nasync function providerHealth() {\n if (providerCache && Date.now() - providerCache.at < 30000) return providerCache.value;\n const checkedAt = new Date().toISOString();\n const value = await Promise.all(PROVIDERS.map(async (provider) => {\n try {\n const result = await fetchJson(provider.endpoint, {}, 4500);\n return { ...provider, http_status: result.status, response: result.body, checked_at: checkedAt, ...providerSemantic(result.ok, result.body, provider.node), side_effect_boundary: \"DENIED\", evidence_reference: `${provider.endpoint} @ ${checkedAt}` };\n } catch (error) {\n return { ...provider, http_status: null, response: null, checked_at: checkedAt, health_state: \"NOT_VERIFIED\", readiness_state: \"NOT_VERIFIED\", authority_state: \"NONE\", boundary_valid: false, side_effect_boundary: \"DENIED\", error: error instanceof Error ? error.name : \"FETCH_FAILED\", evidence_reference: `${provider.endpoint} @ ${checkedAt}` };\n }\n }));\n providerCache = { at: Date.now(), value };\n return value;\n}\n\nlet githubCache: { at: number; repo: string; value: any } | null = null;\nasync function githubStatus(requestedRepo?: string | null) {\n const token = Deno.env.get(\"GITHUB_TOKEN\");\n const configuredRepo = normalizeRepo(Deno.env.get(\"AG_GITHUB_REPO\") ?? CANONICAL_REPO);\n const allowlist = parseRepoAllowlist(Deno.env.get(\"AG_GITHUB_REPO_ALLOWLIST\") ?? \"\");\n const repo = normalizeRepo(requestedRepo ?? configuredRepo);\n if (!repo) return { state: \"REPO_NOT_FOUND\", connected: false, verified_at: new Date().toISOString() };\n if (!token) return { state: \"NOT_CONNECTED\", connected: false, repo, reason: \"GITHUB_CREDENTIAL_NOT_CONFIGURED\", verified_at: new Date().toISOString() };\n if (!isRepoAllowed(repo, allowlist)) return { state: \"ACCESS_DENIED\", connected: false, repo, reason: \"REPOSITORY_NOT_ALLOWLISTED\", verified_at: new Date().toISOString() };\n if (githubCache && githubCache.repo === repo && Date.now() - githubCache.at < 30000) return githubCache.value;\n const headers = { Authorization: `Bearer ${token}`, Accept: \"application/vnd.github+json\", \"User-Agent\": \"AG-Command-Center\" };\n const base = `https://api.github.com/repos/${repo}`;\n try {\n const metadata = await fetchJson(base, headers, 6500);\n if (!metadata.ok) return { state: githubFailureState(metadata.status), connected: false, repo, http_status: metadata.status, verified_at: new Date().toISOString() };\n const [branches, commits, pulls, issues, runs] = await Promise.all([\n fetchJson(`${base}/branches?per_page=100`, headers), fetchJson(`${base}/commits?per_page=1`, headers),\n fetchJson(`${base}/pulls?state=open&per_page=20`, headers), fetchJson(`${base}/issues?state=open&per_page=20`, headers),\n fetchJson(`${base}/actions/runs?per_page=10`, headers),\n ]);\n const latest = Array.isArray(commits.body) ? commits.body[0] : null;\n const value = {\n state: \"CONNECTED\", connected: true, repo: metadata.body.full_name, private: Boolean(metadata.body.private),\n default_branch: metadata.body.default_branch, latest_commit: latest ? { sha: latest.sha, message: latest.commit?.message, url: latest.html_url } : null,\n branches: Array.isArray(branches.body) ? branches.body.map((x: any) => ({ name: x.name, protected: x.protected })) : [],\n pull_requests: Array.isArray(pulls.body) ? pulls.body.map((x: any) => ({ number: x.number, title: x.title, state: x.state, url: x.html_url })) : [],\n issues: Array.isArray(issues.body) ? issues.body.filter((x: any) => !x.pull_request).map((x: any) => ({ number: x.number, title: x.title, state: x.state, url: x.html_url })) : [],\n actions: runs.ok ? (runs.body.workflow_runs ?? []).map((x: any) => ({ id: x.id, name: x.name, status: x.status, conclusion: x.conclusion, url: x.html_url })) : [],\n capability_status: { metadata: metadata.status, branches: branches.status, commits: commits.status, pull_requests: pulls.status, issues: issues.status, actions: runs.status },\n verified_at: new Date().toISOString(), credential_exposed: false,\n };\n githubCache = { at: Date.now(), repo, value };\n return value;\n } catch (error) {\n if (githubCache && githubCache.repo === repo && Date.now() - githubCache.at < 300000) return { ...githubCache.value, state: \"STALE\", connected: false, stale_since: new Date(githubCache.at).toISOString() };\n return { state: \"STALE\", connected: false, repo, reason: error instanceof Error ? error.name : \"FETCH_FAILED\", verified_at: new Date().toISOString() };\n }\n}\n\nasync function recoveryStatus() {\n try { const value = await fetchJson(RECOVERY_STATUS_URL, {}, 5000); return { status: value.ok ? \"PASS\" : \"NOT_VERIFIED\", http_status: value.status, evidence: value.body, verified_at: new Date().toISOString() }; }\n catch (error) { return { status: \"NOT_VERIFIED\", http_status: null, error: error instanceof Error ? error.name : \"FETCH_FAILED\", verified_at: new Date().toISOString() }; }\n}\n\napp.get(\"/\", (c) => c.html(Root()));\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.get(\"/api/health\", (c) => c.json({ ok: true, status: \"PASS\", product: \"AG\", component: \"ag-command-center\", mission_id: MISSION_ID, checkpoint: \"AG-M1-GOVERNED-INTEGRATION\", production: false, timestamp: new Date().toISOString() }));\napp.get(\"/api/command-bus/:commandId\", async (c) => {\n const command = await commandStatus(c.req.param(\"commandId\"));\n return command ? c.json({ ok: true, command }) : c.json({ ok: false, error: \"COMMAND_NOT_FOUND\" }, 404);\n});\napp.post(\"/api/command-bus\", async (c) => {\n const denied = requireAdmin(c); if (denied) return denied;\n const parsed = await parseMutation(c); if (parsed.error) return parsed.error;\n const body:any = parsed.body;\n try {\n const result = await submitCommand({ command_id: String(body.command_id ?? parsed.key), mission_id: String(body.mission_id ?? \"\"), actor: \"ARCHITECT\", priority: Number(body.priority ?? 50), assigned_agent: body.assigned_agent ?? null, runtime_domain: String(body.runtime_domain ?? \"CONTROL\"), payload: body.payload ?? {} });\n return c.json({ ok: true, result }, result.duplicate ? 200 : 201);\n } catch (error) { return c.json({ ok: false, error: error instanceof Error ? error.message : \"COMMAND_SUBMIT_FAILED\" }, 409); }\n});\napp.post(\"/api/command-bus/:commandId/transition\", async (c) => {\n const denied = requireAdmin(c); if (denied) return denied;\n const parsed = await parseMutation(c); if (parsed.error) return parsed.error;\n const body:any = parsed.body;\n try { return c.json({ ok: true, result: await transitionCommand(c.req.param(\"commandId\"), String(body.to_state) as any, String(body.actor ?? \"HANTER\"), body.evidence ?? {}) }); }\n catch (error) { return c.json({ ok: false, error: error instanceof Error ? error.message : \"COMMAND_TRANSITION_FAILED\" }, 409); }\n});\n\napp.get(\"/api/providers\", async (c) => c.json({ logical_hanter_instances: 1, canonical_state_authority: \"RECOVERY_RUNTIME_UNTIL_ORIGINAL_RESTORED\", rules: { stale_after_seconds: 90, retry: \"EXPONENTIAL_BACKOFF_WITH_JITTER\", idempotency: \"REQUIRED_FOR_MUTATIONS\", replay_protection: \"SIGNED_ENVELOPE_NONCE_AND_EXPIRY_REQUIRED\", split_brain: \"FAIL_CLOSED\", failover: \"HEALTHY_IS_NOT_AUTHORITY\" }, providers: await providerHealth() }));\napp.get(\"/api/runtime/recovery\", async (c) => c.json(await recoveryStatus()));\napp.get(\"/api/agents\", (c) => c.json({ count: ROSTER.length, directors: DIRECTORS.length, agents: ROSTER }));\napp.get(\"/api/missions\", async (c) => c.json({ missions: (await sqlite.execute(\"SELECT * FROM ag_missions ORDER BY updated_at DESC LIMIT 100\")).rows }));\napp.get(\"/api/orion\", async (c) => { const runtime = await recoveryStatus(); return c.json({ role: \"ADVISORY_COORDINATION_ONLY\", authority: \"NONE\", always_on_required: true, runtime }); });\napp.get(\"/api/skills/ag-builder\", async (c) => { const result = await sqlite.execute(\"SELECT state,COUNT(*) count FROM ag_skill_bindings WHERE skill_id='ag-builder' GROUP BY state\"); return c.json({ file: \"skills/ag-builder/SKILL.md\", version: \"1.1.0\", binding_target: 100, bindings: result.rows, governance: \"SKILL_DOES_NOT_GRANT_AUTHORITY\", discoverability: \"SOURCE_PRESENT_AND_AG_RUNTIME_REGISTRY_BOUND\" }); });\napp.get(\"/api/security\", (c) => c.json({ policy: \"DENY_BY_DEFAULT\", chain: [\"AI Passport\", \"Enterprise IMPERIAL Skills\", \"Guardian Core\", \"Approval Gateway\", \"Runtime Domain\", \"Audit Ledger\"], laws: [\"Identity != Authority\", \"Capability != Approval\", \"Intelligence != Privilege\"], cyber_hak: { repository: CANONICAL_REPO, role: \"DEFENSIVE_GOVERNED_CAPABILITY_LAYER\", autonomous_offensive_activity: \"DENIED\", execution_authority: \"NONE\", credential_authority: \"NONE\", financial_authority: \"NONE\" } }));\napp.get(\"/api/github/status\", async (c) => c.json(await githubStatus(c.req.query(\"repo\"))));\n\napp.get(\"/api/crm\", async (c) => {\n const names = [\"organizations\", \"contacts\", \"leads\", \"opportunities\", \"activities\", \"tasks\", \"notes\"];\n const entries = await Promise.all(names.map(async (name) => [name, (await sqlite.execute(`SELECT * FROM ag_crm_${name} ORDER BY created_at DESC LIMIT 100`)).rows]));\n return c.json({ entities: Object.fromEntries(entries), pipeline_stages: [\"NEW\", \"QUALIFY\", \"DISCOVERY\", \"PROPOSAL\", \"NEGOTIATION\", \"WON_EVIDENCED\", \"LOST\"], revenue_claimed_usd: 0, truth_boundary: \"NO_PAYMENT_EVIDENCE_NO_REVENUE\" });\n});\n\napp.post(\"/api/crm/:entity\", async (c) => {\n const denied = requireAdmin(c); if (denied) return denied;\n const parsed = await parseMutation(c); if (parsed.error) return parsed.error;\n const entity = c.req.param(\"entity\");\n const body: any = parsed.body;\n const owner = body.owner_agent_id == null ? null : (isAgentId(body.owner_agent_id) ? body.owner_agent_id : undefined);\n if (owner === undefined) return c.json({ ok: false, error: \"INVALID_OWNER_AGENT_ID\" }, 400);\n const now = new Date().toISOString(); const id = crypto.randomUUID();\n const title = boundedText(body.title ?? body.name ?? body.subject, 240, true);\n if (!title) return c.json({ ok: false, error: \"TITLE_OR_NAME_REQUIRED\" }, 400);\n const statements: Record = {\n organizations: { sql: \"INSERT INTO ag_crm_organizations VALUES(?,?,?,?,?,?,?)\", args: [id, title, boundedText(body.website, 500), owner, boundedText(body.evidence_ref, 500), now, now] },\n contacts: { sql: \"INSERT INTO ag_crm_contacts VALUES(?,?,?,?,?,?,?,?,?,?,?)\", args: [id, body.organization_id ?? null, title, boundedText(body.email, 320), boundedText(body.source, 80) || \"manual\", boundedText(body.status, 40) || \"NEW\", owner, boundedText(body.evidence_ref, 500), now, now] },\n leads: { sql: \"INSERT INTO ag_crm_leads VALUES(?,?,?,?,?,?,?)\", args: [id, title, boundedText(body.stage, 40) || \"NEW\", owner, boundedText(body.evidence_ref, 500), now, now] },\n opportunities: { sql: \"INSERT INTO ag_crm_opportunities VALUES(?,?,?,?,?,?,?,?,?)\", args: [id, title, boundedText(body.stage, 40) || \"QUALIFY\", Number.isFinite(body.value_usd) ? body.value_usd : null, Number.isInteger(body.probability) && body.probability >= 0 && body.probability <= 100 ? body.probability : 0, owner, boundedText(body.evidence_ref, 500), now, now] },\n activities: { sql: \"INSERT INTO ag_crm_activities VALUES(?,?,?,?,?,?,?,?,?)\", args: [id, boundedText(body.kind, 60) || \"NOTE\", title, boundedText(body.related_type, 60), body.related_id ?? null, owner, boundedText(body.evidence_ref, 500), now] },\n tasks: { sql: \"INSERT INTO ag_crm_tasks VALUES(?,?,?,?,?,?,?,?)\", args: [id, title, boundedText(body.status, 40) || \"OPEN\", body.due_at ?? null, owner, boundedText(body.evidence_ref, 500), now, now] },\n notes: { sql: \"INSERT INTO ag_crm_notes VALUES(?,?,?,?,?,?,?)\", args: [id, boundedText(body.body, 8000, true), boundedText(body.related_type, 60), body.related_id ?? null, owner, boundedText(body.evidence_ref, 500), now] },\n };\n const statement = statements[entity]; if (!statement || statement.args.includes(null) && entity === \"notes\" && !statement.args[1]) return c.json({ ok: false, error: \"ENTITY_OR_INPUT_INVALID\" }, 400);\n const requestHash = Array.from(new Uint8Array(await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(JSON.stringify(body))))).map((x) => x.toString(16).padStart(2, \"0\")).join(\"\");\n const existing = await sqlite.execute({ sql: \"SELECT request_hash,response_json FROM ag_idempotency WHERE key=?\", args: [parsed.key] });\n if (existing.rows.length) return (existing.rows[0] as any).request_hash === requestHash ? c.json(JSON.parse(String((existing.rows[0] as any).response_json))) : c.json({ ok: false, error: \"IDEMPOTENCY_KEY_CONFLICT\" }, 409);\n const response = { ok: true, entity, id, created_at: now };\n await sqlite.batch([statement, { sql: \"INSERT INTO ag_audit_v2(event_type,subject_id,detail_json,created_at) VALUES(?,?,?,?)\", args: [\"CRM_ENTITY_CREATED\", id, JSON.stringify({ entity, owner, evidence_ref: body.evidence_ref ?? null }), now] }, { sql: \"INSERT INTO ag_idempotency(key,request_hash,response_json,created_at) VALUES(?,?,?,?)\", args: [parsed.key, requestHash, JSON.stringify(response), now] }]);\n return c.json(response, 201);\n});\n\napp.get(\"/api/overview\", async (c) => {\n const crm = await sqlite.execute(\"SELECT (SELECT COUNT(*) FROM ag_crm_contacts) contacts,(SELECT COUNT(*) FROM ag_crm_organizations) organizations,(SELECT COUNT(*) FROM ag_crm_leads) leads,(SELECT COUNT(*) FROM ag_crm_opportunities) opportunities,(SELECT COUNT(*) FROM ag_crm_opportunities WHERE evidence_ref IS NOT NULL AND evidence_ref<>'') evidenced_opportunities\");\n const [providers, github, runtime] = await Promise.all([providerHealth(), githubStatus(), recoveryStatus()]);\n return c.json({ product: \"AG\", mode: \"RIGHT_HAND_MODE\", mission: { id: MISSION_ID, status: \"ACTIVE_BUILD\", checkpoint: \"AG-M1-GOVERNED-INTEGRATION\" }, hanter: { role: \"SINGLE_AI_COMMAND_CENTER_DEPUTY\", global_orchestrator: false, production: false }, fleet: { registered_agents: ROSTER.length, directors: DIRECTORS.length, roster_type: \"CANONICAL_ASSIGNMENT\", live_execution_claimed: false }, directors: DIRECTORS, orion: { role: \"ADVISORY_COORDINATION_ONLY\", always_on_required: true, status: runtime.status }, governance: [\"AI Passport\", \"Enterprise IMPERIAL Skills\", \"Guardian Core\", \"Approval Gateway\", \"Runtime Domain\", \"Audit Ledger\"], providers, crm: { ...(crm.rows[0] as any), revenue_claimed_usd: 0 }, github });\n});\n\napp.notFound((c) => c.json({ ok: false, status: \"BLOCKED\", error: \"ROUTE_NOT_FOUND\" }, 404));\napp.onError((error, c) => { console.error(\"AG_REQUEST_FAILED\", error instanceof Error ? error.name : \"UNKNOWN\"); return c.json({ ok: false, status: \"BLOCKED\", error: \"INTERNAL_ERROR\" }, 500); });\nexport default app.fetch;\n","children",[],[253],"53a5e604-fb31-435a-90ff-12772bb95284","command_bus_test.ts","89dd9380-ad5c-11f1-9e38-1607ee4eb77e",41,["D",1789074838663],"// IMPERIAL Core Command Bus runtime verification\n// Author & Chief Architect: Alexander Romaskevich / RomaskevicH\nimport { submitCommand,transitionCommand,commandStatus } from './lib/command_bus.ts';\n\nconst id=`IC-COMMAND-BUS-TEST-${Date.now()}`;\nconst mission='IC-IMPERIAL-CORE-24H-FULL-ACTIVATION-001';\nconst first=await submitCommand({command_id:id,mission_id:mission,actor:'ARCHITECT',priority:100,assigned_agent:'IMPERIAL-ADRIAN-WALKER-NCA-001',runtime_domain:'DEVELOPMENT',payload:{test:'safe-command-bus'}});\nconst duplicate=await submitCommand({command_id:id,mission_id:mission,actor:'ARCHITECT',priority:100,assigned_agent:'IMPERIAL-ADRIAN-WALKER-NCA-001',runtime_domain:'DEVELOPMENT',payload:{test:'safe-command-bus'}});\nlet conflictDenied=false; try{await submitCommand({command_id:id,mission_id:mission,actor:'ARCHITECT',payload:{test:'different'}});}catch(e){conflictDenied=String((e as Error).message)==='IDEMPOTENCY_CONFLICT';}\nlet authorityDenied=false; try{await submitCommand({command_id:`${id}-X`,mission_id:mission,actor:'UNKNOWN',payload:{}});}catch(e){authorityDenied=String((e as Error).message)==='AUTHORITY_DENIED';}\nawait transitionCommand(id,'POLICY_ALLOWED','GUARDIAN',{decision:'ALLOW',financial_authority:false});\nawait transitionCommand(id,'ASSIGNED','HANTER',{assigned_agent:'IMPERIAL-ADRIAN-WALKER-NCA-001'});\nawait transitionCommand(id,'EXECUTING','IMPERIAL-ADRIAN-WALKER-NCA-001',{execution:'SIMULATED_SAFE_TEST'});\nawait transitionCommand(id,'VERIFYING','IMPERIAL-LUCAS-BENNETT-NCA-002',{review:'INDEPENDENT_TEST_PATH'});\nawait transitionCommand(id,'COMPLETED','IMPERIAL-LUCAS-BENNETT-NCA-002',{result:'PASS',external_side_effects:false});\nlet invalidTransitionDenied=false; try{await transitionCommand(id,'EXECUTING','HANTER',{});}catch(e){invalidTransitionDenied=String((e as Error).message).startsWith('INVALID_TRANSITION_');}\nconst status=await commandStatus(id);\nconsole.log(JSON.stringify({status:'PASS',first_received:first.state==='RECEIVED',duplicate_suppressed:duplicate.duplicate===true,idempotency_conflict_denied:conflictDenied,unauthorized_actor_denied:authorityDenied,final_state:(status as any)?.state,invalid_terminal_transition_denied:invalidTransitionDenied,mission_id:mission,truth_boundary:'Command bus state machine/idempotency/audit path runtime-tested locally; external NCA tool execution not claimed.'}));\n",[],[262],"c248b291-25c7-4a77-ba0b-0b333cbab467","README.md","01a04c05-88bb-772a-8ca1-8d527cb36132",["D",1787981826165],"# React + Hono Starter\n\nA minimal starter template for building client-side React apps with a Hono\nbackend on Val Town. Click **Remix** to get your own copy.\n\n## Picking a starter\n\n| Starter | When to pick it |\n| --- | --- |\n| [`basic-html-starter`](https://www.val.town/x/templates/basic-html-starter) | Static HTML pages. Sprinkle of vanilla JS. No server-side rendering. |\n| [`hono-jsx-starter`](https://www.val.town/x/templates/hono-jsx-starter) | Dynamic server-rendered HTML with JSX. API routes. No React, no SPA. |\n| **[`react-hono-starter`](https://www.val.town/x/templates/react-hono-starter)** *(you're here)* | Client-side React SPA with a Hono API backend. |\n\n**Want to build UI?** Start writing React components in\n[`frontend/components/`](/frontend/components/). Import them into `App.tsx` and\nyou're good to go. Styling is [Twind](https://twind.style/) — just use Tailwind\nutility classes, zero config.\n\n**Want to add an API?** Add routes in [`index.ts`](/index.ts) (there's a\ncommented-out example). Fetch them from your React components.\n\n## Architecture\n\n```mermaid\ngraph LR\n Browser -->|\"GET /\"| Hono[\"index.ts
(Hono server)\"]\n Hono -->|serves| HTML[\"root.tsx\"]\n HTML -->|loads| Entry[\"index.tsx\"]\n Entry -->|renders| App[\"App.tsx\"]\n App -->|renders| Counter[\"Counter.tsx\"]\n```\n\n## File structure\n\n```\nindex.ts ← Hono backend (serves frontend + API routes)\nfrontend/\n root.tsx ← HTML shell (stamps immutable asset URLs)\n index.tsx ← React entrypoint (mounts )\n favicon.svg ← App icon\n components/\n App.tsx ← Root component (layout + view source link)\n Counter.tsx ← Example component with state\n```\n\n## How it works\n\n1. **`index.ts`** is the HTTP entrypoint — a Hono server that serves the\n frontend and any API routes you add.\n2. **`frontend/root.tsx`** is the HTML shell — it loads Twind and stamps\n immutable asset URLs for the favicon and React entrypoint.\n3. **`frontend/index.tsx`** mounts the React app.\n4. **`frontend/components/App.tsx`** is the root layout — add new components\n alongside it.\n5. **`frontend/components/Counter.tsx`** is an example stateful component —\n replace it with your own!\n\n## Next steps\n\n- Add API routes in `index.ts`\n- Add new components in `frontend/components/`\n- Add a SQLite database — see the\n [React Hono Example](https://www.val.town/x/stevekrouse/reactHonoExample) for\n a full-stack example with database, queries, and shared types\n\nTemplate updates and upgrade paths for existing remixes: [CHANGELOG.md](/CHANGELOG.md)\n",[],[270],"533e079a-a773-4761-bff1-01388a09ecfe","CHANGELOG.md","01a04c05-88bb-772a-8ca1-885b686d698f",["D",1787981826165],"# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

History · components