`, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_267":268,"_269":270},"routes/_app.x.$handle.$name",{"_98":97,"_31":43,"_107":88,"_26":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":24,"_122":123,"_124":57,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",6,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":20,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","skills/ag-builder/SKILL.md","latestPath","fileId","115408da-a36c-11f1-a855-1607ee4eb77e","name","SKILL.md","fileType","content","# AG Builder Skill\n\n## Identity\n\nName: AG Builder\nVersion: 1.0.0\nMission: IC-AG-GENERAL-AGENT-PLATFORM-001\nSystem: IMPERIAL Core\nPrimary product: AG\nCommand authority: HANTER as AI Command Center / Deputy to the Architect\nFleet: 8 federated Orchestrator-Directors / 100 Nano Core Agents\nORION: always-on advisory collective intelligence only\n\n## Purpose\n\nUse this skill whenever work concerns AG, HANTER, the 100-NCA fleet, CRM, GitHub integration, provider redundancy, dashboards, missions, evidence, runtime recovery, or CYBER-HAK defensive capabilities.\n\nThe objective is to turn user intent into verified engineering progress without confusing architecture, implementation, test results, runtime state, or production status.\n\n## Non-negotiable operating laws\n\n1. Architecture Before Implementation.\n2. Identity != Authority.\n3. Capability != Approval.\n4. Intelligence != Privilege.\n5. No SUCCESS, PROGRESS, LIVE, HEALTHY, DEPLOYED, CONNECTED, REVENUE, or PRODUCTION claim without current evidence.\n6. ORION may recommend and coordinate but has no execution authority.\n7. HANTER remains one command center; do not clone HANTER into independent authorities.\n8. The fleet remains federated; no global orchestrator may replace the eight directors.\n9. High-impact, financial, irreversible, security-sensitive, publishing, or credential actions must pass explicit approval gates.\n10. CYBER-HAK is defensive and governed. No autonomous offensive activity, credential theft, destructive exploitation, malware deployment, persistence, evasion, or unauthorized access.\n11. Never expose tokens, API keys, seed phrases, passwords, private keys, or raw authorization secrets in logs, UI, commits, prompts, or evidence.\n12. Never fabricate CRM contacts, opportunities, money, customers, health checks, commits, agents, skills, benchmarks, or provider state.\n\n## Canonical execution chain\n\nArchitect -> HANTER -> Federated Directors -> NCA -> ORION advisory feedback -> governed execution\n\nEvery executable action should be evaluated through:\n\nAI Passport -> Enterprise IMPERIAL Skills -> Guardian Core -> Approval Gateway -> Runtime Domain -> Audit Ledger\n\n## AG architecture target\n\nAG is a multi-agent operating environment, not a single chat interface.\n\nRequired planes:\n\n- Command Plane: HANTER mission intake, decomposition, routing, escalation, approvals.\n- Agent Plane: 100 persistent NCA identities under eight directors.\n- ORION Plane: collective learning, critic, verifier, recommendations, fleet feedback.\n- Execution Plane: safe tool adapters, browser/computer-use adapters, provider routing, resumable jobs.\n- Memory Plane: canonical project memory, evidence ledger, Obsidian-compatible continuity.\n- CRM Plane: contacts, accounts, opportunities, activities, evidence, ownership, pipeline.\n- GitHub Plane: repository status, branches, commits, pull requests, issues, checks, deploy evidence.\n- Security Plane: AI Passport, Guardian, Approval, CYBER-HAK defensive controls, audit.\n- Observability Plane: traces, provider health, queue state, agent state, task graph, replay.\n- Artifact Plane: documents, code, research, media, dashboards, reports.\n\n## Provider strategy\n\nTarget HANTER continuity across three free-tier providers when technically available:\n\n- Provider 1: Val Town\n- Provider 2: Netlify\n- Provider 3: Supabase\n\nRules:\n\n- Treat presence as different from health.\n- Treat health as different from readiness.\n- Treat readiness as different from authority to execute.\n- Never claim 3/3 healthy unless each provider has a fresh health/readiness probe.\n- Prefer stateless bridges and durable canonical state rather than conflicting writable replicas.\n- Use idempotency keys for commands and writes.\n- Use signed command envelopes and replay protection.\n- Define one canonical write authority for every state class.\n- Fail closed on ambiguous authorization or split-brain state.\n\n## Fleet routing\n\nRoute work by professional domain, while allowing bounded cross-team collaboration.\n\n- ORCH-DROPSHIPPING-001 / 16 NCA: commerce workflow prototyping, browser automation use cases, commerce CRM requirements.\n- ORCH-AI-AUTOMATION-001 / 13 NCA: runtime, task graph, orchestration, model routing, worker execution.\n- ORCH-B2B-REVENUE-001 / 13 NCA: CRM, sales workflows, enterprise collaboration, pipeline and approval UX.\n- ORCH-CREATIVE-DIGITAL-001 / 13 NCA: premium UI, mobile/tablet/desktop experience, artifact studio, design system.\n- ORCH-EDUCATION-001 / 13 NCA: skills, learning loops, evaluation curricula, knowledge workflows.\n- ORCH-DATA-MARKET-001 / 12 NCA: market benchmarks, research, metrics, competitive evaluation.\n- ORCH-SME-SERVICES-001 / 12 NCA: connectors, multi-tenant operations, customer operations patterns.\n- ORCH-KIDS-MEDIA-001 / 8 NCA: safe multimodal media workflows and content pipeline testing.\n\n## Task execution protocol\n\nFor every mission:\n\n1. DISCOVER\n - Read current persistent state before changing anything.\n - Inspect relevant provider, repository, database, runtime, and files.\n - Identify what is fact, historical baseline, target, and unknown.\n\n2. DEFINE\n - State mission ID, owner, scope, acceptance criteria, constraints, dependencies, and evidence required.\n - Split work into smallest independently verifiable deliverables.\n\n3. ROUTE\n - Assign each deliverable to the correct director/NCA domain.\n - Cross-route only when necessary.\n - ORION may review routing but cannot grant authority.\n\n4. IMPLEMENT\n - Prefer small reversible changes.\n - Preserve existing working behavior.\n - Use typed interfaces and explicit contracts.\n - Use parameterized SQL.\n - Use least privilege and deny-by-default.\n\n5. TEST\n - Run focused unit tests first.\n - Then integration tests.\n - Then E2E/live probes where technically possible.\n - Test negative cases and authorization boundaries.\n\n6. VERIFY\n - Confirm the deployed/runtime state independently from source state.\n - Confirm provider health separately.\n - Confirm UI endpoint and API endpoint separately.\n - Confirm GitHub access separately from merely having integration code.\n\n7. EVIDENCE\n - Store exact timestamp, source, command/action, result, artifact reference, and status.\n - Positive outcomes require evidence created at or after the claimed action.\n - If evidence is stale, downgrade the claim.\n\n8. REPORT\n - Separate DONE / VERIFIED / BLOCKED / NOT CLAIMED.\n - Name the exact blocker and next executable action.\n\n## Evidence state model\n\nAllowed outcome semantics:\n\n- PLANNED: architecture or assignment only.\n- IMPLEMENTED: source/code/config exists.\n- TESTED: test executed and result captured.\n- DEPLOYED: deployment action has evidence.\n- LIVE_VERIFIED: live endpoint/state has fresh evidence.\n- PROGRESS_EVIDENCED: checkpoint moved with qualifying evidence.\n- REJECTED_NOT_APPLIED: proposal failed policy/governance/application.\n- BLOCKED: action cannot proceed with current authority, credentials, dependency, or platform state.\n\nNever translate IMPLEMENTED into LIVE_VERIFIED automatically.\nNever translate assignment into agent execution.\nNever translate a heartbeat into business progress.\n\n## GitHub direct-connect requirements\n\nAG should expose a GitHub integration plane, but connection is only CONNECTED when a real authenticated repository read succeeds.\n\nRequired capabilities, subject to authorization:\n\n- repository metadata\n- default branch\n- branch list\n- recent commits\n- pull requests\n- issues\n- workflow/check status\n- deployment evidence links\n- source-to-runtime traceability\n\nRequirements:\n\n- GitHub token/app credentials only from secrets/env vars.\n- Never put GitHub token in client-side code.\n- Repository allowlist required.\n- Write operations require explicit scoped authority.\n- CYBER-HAK repository capabilities remain defensive and governed.\n\n## CRM requirements\n\nMinimum entities:\n\n- Contact\n- Account/Company\n- Opportunity\n- Activity\n- Mission\n- Agent owner\n- Evidence reference\n- Approval state\n- Audit event\n\nCRM rules:\n\n- Never invent contact data.\n- Never mark a deal WON without evidence.\n- Never claim revenue without settlement/payment evidence.\n- Every opportunity must identify owner, stage, source, updated_at, and evidence state.\n- High-volume outreach must enforce anti-spam rules and lawful contact policy.\n\n## UI / UX requirements\n\nVisual baseline is the Architect-provided HANTER concept: premium dark cosmic command center, cyan/blue luminous accents, high information density, responsive iPhone/iPad/desktop layouts.\n\nDo not copy decorative fake metrics from concept images. Replace them with live data or explicit NOT VERIFIED / 0 states.\n\nCore navigation:\n\n- Home\n- Missions\n- Agents\n- CRM\n- GitHub\n- ORION\n- Security\n- Research\n- Knowledge\n- Skills\n- Settings\n\nDashboard should expose:\n\n- HANTER status\n- provider status\n- 100 NCA / eight directors\n- active missions\n- task/checkpoint state\n- ORION state\n- CRM pipeline\n- GitHub state\n- security state\n- evidence freshness\n\n## Security requirements\n\n- Deny by default.\n- Authenticate writes.\n- Protect CSRF where browser sessions are used.\n- Parameterize SQL.\n- Validate all input.\n- Rate-limit externally exposed mutation endpoints where possible.\n- Separate public read routes from privileged mutation routes.\n- Redact secrets from logs.\n- Add immutable audit events for privileged actions.\n- No browser-side privileged provider credentials.\n- No direct SQLite bypass of an authorization boundary.\n- Defensive CYBER-HAK modules may scan, validate, monitor, harden, detect, analyze, or simulate in authorized labs only.\n\n## Testing matrix\n\nAG work is not complete without relevant tests from this matrix:\n\n- unit\n- integration\n- E2E\n- live HTTP health\n- provider failover\n- authorization negative tests\n- replay/idempotency\n- malformed input\n- CRM data integrity\n- GitHub credential absent/invalid/valid\n- ORION advisory-only boundary\n- security policy / CYBER-HAK defensive boundary\n- responsive UI smoke test\n- stale evidence detection\n- split-brain/fail-closed tests where replication is involved\n\n## Quality gate\n\nBefore declaring a deliverable complete, answer YES to all applicable checks:\n\n- Does source exist?\n- Was it tested?\n- Was deployment verified?\n- Is the live endpoint/state fresh?\n- Are claims supported by evidence?\n- Are negative authorization cases tested?\n- Are secrets absent from source/client/logs?\n- Is the implementation reversible?\n- Is audit evidence present?\n- Did ORION remain advisory?\n- Did HANTER remain a single command center?\n- Did federation remain intact?\n\nIf any required answer is NO, report the exact incomplete gate.\n\n## Default AG build priority\n\nP0. Runtime truth and provider health\nP0. HANTER command envelope and authority model\nP0. 100-NCA registry and fleet task graph\nP0. Security + audit + approval gates\nP0. AG responsive control-center shell\nP0. CRM core\nP0. GitHub authenticated read integration\nP1. ORION live feedback visualization\nP1. Task execution/replay UI\nP1. Connectors and artifact studio\nP1. Evaluation/benchmark harness\nP2. Advanced browser/computer-use execution\nP2. Multi-tenant enterprise features\nP2. Performance optimization and global routing\n\n## Response behavior\n\nWhen using this skill, keep reports operational and factual. Prefer direct execution over speculative planning when tools and authority permit it. Never say a future task is already done. Never hide a blocker. Continue from the current state instead of restarting completed work.\n","createdAt",["D",1787981996760],"branchVersion","branchId","24770712-378b-401f-a93f-7fe807c5dda9","id","d711419f-af68-49ff-b31a-45902d9292f1","ag-command-center",["D",1787981826165],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","AG HANTER + 100 NCA + CRM command center","imageUrl","fe39b163-4b50-466e-82d1-8bd01133e4b6","pinnedFileId","01a04c05-88bb-772a-8ca1-918bb0a15986","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a03585-eb44-758d-92a4-77db1a9a243c","tursoName","d711419faf6849ffb31a45902d9292f1","tursoHostname","d711419faf6849ffb31a45902d9292f1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789543856531],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":53,"_103":104,"_105":24},"branch",{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"isOwned",43,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","oromaskevic23","handle","displayName","Олександр Ромаскевич","avatar","https://lh3.googleusercontent.com/a/ACg8ocIo1MJ3hDjpQrinMIRok3d2YY1vpHgehs8m2u1_vc7pmFovRGI=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":262,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":263,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":264,"_82":265,"_84":266,"_86":24},"tree",[179,186,189,190,191],"files",[179,180,181,182,183,184,185,186,187,188,189,190,191],"counts",{"_169":61,"_170":140,"_171":61,"_172":173,"_174":175},"contents",[129,130,131,132,133],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":164,"_31":165,"_29":166,"_136":-5,"_39":40,"_38":140,"_138":57,"_36":167,"_13":61,"_33":162,"_34":-5,"_23":24,"_143":-5,"_26":168},{"_41":157,"_31":158,"_29":159,"_136":-5,"_39":40,"_38":160,"_138":57,"_36":161,"_13":61,"_33":162,"_34":-5,"_23":24,"_143":-5,"_26":163},{"_41":151,"_31":152,"_29":153,"_136":-5,"_39":40,"_38":140,"_138":57,"_36":154,"_13":61,"_33":20,"_34":155,"_23":24,"_143":-5,"_26":156},{"_41":145,"_31":146,"_29":147,"_136":-5,"_39":40,"_38":140,"_138":57,"_36":148,"_13":61,"_33":20,"_34":149,"_23":24,"_143":-5,"_26":150},{"_41":134,"_31":135,"_29":55,"_136":-5,"_39":40,"_38":137,"_138":24,"_36":139,"_13":140,"_33":141,"_34":142,"_23":24,"_143":43,"_26":144},"9919180f-2d8c-45bd-bddf-343f7fa20137","index.ts","parentId",2,"latest",["D",1787981912108],1,"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { Hono } from \"npm:hono\";\nimport { Root } from \"./frontend/root.tsx\";\n\nconst app = new Hono();\n\nawait sqlite.batch([\n { sql: `CREATE TABLE IF NOT EXISTS crm_contacts (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n company TEXT,\n email TEXT,\n source TEXT NOT NULL DEFAULT 'manual',\n owner_agent_id TEXT,\n status TEXT NOT NULL DEFAULT 'LEAD',\n created_at TEXT NOT NULL\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS crm_opportunities (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n contact_id INTEGER,\n title TEXT NOT NULL,\n stage TEXT NOT NULL DEFAULT 'QUALIFY',\n value_usd REAL,\n probability INTEGER NOT NULL DEFAULT 0,\n owner_agent_id TEXT,\n evidence_ref TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS ag_audit (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_type TEXT NOT NULL,\n detail TEXT NOT NULL,\n created_at TEXT NOT NULL\n )` },\n]);\n\nconst DIRECTORS = [\n { id: \"ORCH-DROPSHIPPING-001\", name: \"Mason Reed\", agents: 16, domain: \"Dropshipping Commerce\" },\n { id: \"ORCH-AI-AUTOMATION-001\", name: \"Ethan Cole\", agents: 13, domain: \"AI Automation\" },\n { id: \"ORCH-B2B-REVENUE-001\", name: \"Sophia Laurent\", agents: 13, domain: \"B2B Revenue\" },\n { id: \"ORCH-CREATIVE-DIGITAL-001\", name: \"Adrian Wolfe\", agents: 13, domain: \"Creative & Digital\" },\n { id: \"ORCH-EDUCATION-001\", name: \"Amelia Grant\", agents: 13, domain: \"Education\" },\n { id: \"ORCH-DATA-MARKET-001\", name: \"Victor Hayes\", agents: 12, domain: \"Data & Market Intelligence\" },\n { id: \"ORCH-SME-SERVICES-001\", name: \"Olivia Morgan\", agents: 12, domain: \"SME Services\" },\n { id: \"ORCH-KIDS-MEDIA-001\", name: \"Lucas Bennett\", agents: 8, domain: \"Kids Media\" },\n];\n\nfunction requireAdmin(c: any) {\n const configured = Deno.env.get(\"AG_ADMIN_TOKEN\");\n if (!configured) return c.json({ ok: false, error: \"AG_ADMIN_TOKEN_NOT_CONFIGURED\" }, 503);\n const provided = c.req.header(\"authorization\")?.replace(/^Bearer\\s+/i, \"\");\n if (provided !== configured) return c.json({ ok: false, error: \"UNAUTHORIZED\" }, 401);\n return null;\n}\n\napp.get(\"/\", (c) => c.html(Root()));\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/api/health\", (c) => c.json({\n ok: true,\n product: \"AG\",\n component: \"ag-command-center\",\n mission_id: \"IC-AG-GENERAL-AGENT-PLATFORM-001\",\n authority: \"HANTER_COMMAND_CENTER\",\n timestamp: new Date().toISOString(),\n}));\n\napp.get(\"/api/overview\", async (c) => {\n const contacts = await sqlite.execute(\"SELECT COUNT(*) AS n FROM crm_contacts\");\n const opportunities = await sqlite.execute(\"SELECT COUNT(*) AS n FROM crm_opportunities\");\n const evidenced = await sqlite.execute(\"SELECT COUNT(*) AS n FROM crm_opportunities WHERE evidence_ref IS NOT NULL AND evidence_ref <> ''\");\n return c.json({\n product: \"AG\",\n mode: \"RIGHT_HAND_MODE\",\n mission: { id: \"IC-AG-GENERAL-AGENT-PLATFORM-001\", status: \"ACTIVE_BUILD\", checkpoint: \"AG-M0-FOUNDATION\" },\n fleet: { registered_agents: 100, directors: 8, roster_type: \"CANONICAL_ASSIGNMENT\", live_execution_claimed: false },\n directors: DIRECTORS,\n orion: { role: \"ADVISORY_COORDINATION_ONLY\", always_on_required: true },\n governance: [\"AI Passport\", \"Enterprise Skills\", \"Guardian Core\", \"Approval Gateway\", \"Runtime Domain\", \"Audit Ledger\"],\n providers: [\n { id: \"provider-1\", name: \"Val Town\", role: \"recovery-runtime + AG control center\", status: \"ACTIVE\" },\n { id: \"provider-2\", name: \"Netlify\", role: \"HANTER bridge node #2\", status: \"PRESENT_HEALTH_UNVERIFIED\" },\n { id: \"provider-3\", name: \"Supabase\", role: \"HANTER bridge node #3\", status: \"ACTIVE_HEALTHY_LAST_VERIFIED\" },\n ],\n crm: {\n contacts: Number((contacts.rows[0] as any)?.n ?? 0),\n opportunities: Number((opportunities.rows[0] as any)?.n ?? 0),\n evidenced_opportunities: Number((evidenced.rows[0] as any)?.n ?? 0),\n revenue_claimed_usd: 0,\n },\n github: {\n integration_layer: \"IMPLEMENTED_STATUS_ROUTE\",\n repository_target: Deno.env.get(\"AG_GITHUB_REPO\") ?? \"CYBER-HAK repository not connected\",\n credential_configured: Boolean(Deno.env.get(\"GITHUB_TOKEN\")),\n },\n });\n});\n\napp.get(\"/api/crm\", async (c) => {\n const contacts = await sqlite.execute(\"SELECT * FROM crm_contacts ORDER BY id DESC LIMIT 100\");\n const opportunities = await sqlite.execute(\"SELECT * FROM crm_opportunities ORDER BY id DESC LIMIT 100\");\n return c.json({ contacts: contacts.rows, opportunities: opportunities.rows });\n});\n\napp.post(\"/api/crm/contacts\", async (c) => {\n const denied = requireAdmin(c); if (denied) return denied;\n const body = await c.req.json();\n if (!body?.name) return c.json({ ok: false, error: \"NAME_REQUIRED\" }, 400);\n const now = new Date().toISOString();\n const r = await sqlite.execute({\n sql: \"INSERT INTO crm_contacts(name,company,email,source,owner_agent_id,status,created_at) VALUES(?,?,?,?,?,?,?)\",\n args: [body.name, body.company ?? null, body.email ?? null, body.source ?? \"manual\", body.owner_agent_id ?? null, body.status ?? \"LEAD\", now],\n });\n return c.json({ ok: true, id: Number(r.lastInsertRowid) }, 201);\n});\n\napp.post(\"/api/crm/opportunities\", async (c) => {\n const denied = requireAdmin(c); if (denied) return denied;\n const body = await c.req.json();\n if (!body?.title) return c.json({ ok: false, error: \"TITLE_REQUIRED\" }, 400);\n const now = new Date().toISOString();\n const r = await sqlite.execute({\n sql: \"INSERT INTO crm_opportunities(contact_id,title,stage,value_usd,probability,owner_agent_id,evidence_ref,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?)\",\n args: [body.contact_id ?? null, body.title, body.stage ?? \"QUALIFY\", body.value_usd ?? null, body.probability ?? 0, body.owner_agent_id ?? null, body.evidence_ref ?? null, now, now],\n });\n return c.json({ ok: true, id: Number(r.lastInsertRowid) }, 201);\n});\n\napp.get(\"/api/github/status\", async (c) => {\n const token = Deno.env.get(\"GITHUB_TOKEN\");\n const repo = Deno.env.get(\"AG_GITHUB_REPO\");\n if (!token || !repo) return c.json({ connected: false, reason: \"GITHUB_CREDENTIAL_OR_REPO_NOT_CONFIGURED\" });\n const res = await fetch(`https://api.github.com/repos/${repo}`, {\n headers: { Authorization: `Bearer ${token}`, Accept: \"application/vnd.github+json\", \"User-Agent\": \"AG-Command-Center\" },\n });\n if (!res.ok) return c.json({ connected: false, status: res.status, reason: \"GITHUB_REPO_ACCESS_FAILED\" });\n const data = await res.json();\n return c.json({ connected: true, repo: data.full_name, private: data.private, default_branch: data.default_branch, pushed_at: data.pushed_at });\n});\n\napp.onError((err) => Promise.reject(err));\nexport default app.fetch;\n","label",[135],"c248b291-25c7-4a77-ba0b-0b333cbab467","README.md","01a04c05-88bb-772a-8ca1-8d527cb36132",["D",1787981826165],"# React + Hono Starter\n\nA minimal starter template for building client-side React apps with a Hono\nbackend on Val Town. Click **Remix** to get your own copy.\n\n## Picking a starter\n\n| Starter | When to pick it |\n| --- | --- |\n| [`basic-html-starter`](https://www.val.town/x/templates/basic-html-starter) | Static HTML pages. Sprinkle of vanilla JS. No server-side rendering. |\n| [`hono-jsx-starter`](https://www.val.town/x/templates/hono-jsx-starter) | Dynamic server-rendered HTML with JSX. API routes. No React, no SPA. |\n| **[`react-hono-starter`](https://www.val.town/x/templates/react-hono-starter)** *(you're here)* | Client-side React SPA with a Hono API backend. |\n\n**Want to build UI?** Start writing React components in\n[`frontend/components/`](/frontend/components/). Import them into `App.tsx` and\nyou're good to go. Styling is [Twind](https://twind.style/) — just use Tailwind\nutility classes, zero config.\n\n**Want to add an API?** Add routes in [`index.ts`](/index.ts) (there's a\ncommented-out example). Fetch them from your React components.\n\n## Architecture\n\n```mermaid\ngraph LR\n Browser -->|\"GET /\"| Hono[\"index.ts
(Hono server)\"]\n Hono -->|serves| HTML[\"root.tsx\"]\n HTML -->|loads| Entry[\"index.tsx\"]\n Entry -->|renders| App[\"App.tsx\"]\n App -->|renders| Counter[\"Counter.tsx\"]\n```\n\n## File structure\n\n```\nindex.ts ← Hono backend (serves frontend + API routes)\nfrontend/\n root.tsx ← HTML shell (stamps immutable asset URLs)\n index.tsx ← React entrypoint (mounts )\n favicon.svg ← App icon\n components/\n App.tsx ← Root component (layout + view source link)\n Counter.tsx ← Example component with state\n```\n\n## How it works\n\n1. **`index.ts`** is the HTTP entrypoint — a Hono server that serves the\n frontend and any API routes you add.\n2. **`frontend/root.tsx`** is the HTML shell — it loads Twind and stamps\n immutable asset URLs for the favicon and React entrypoint.\n3. **`frontend/index.tsx`** mounts the React app.\n4. **`frontend/components/App.tsx`** is the root layout — add new components\n alongside it.\n5. **`frontend/components/Counter.tsx`** is an example stateful component —\n replace it with your own!\n\n## Next steps\n\n- Add API routes in `index.ts`\n- Add new components in `frontend/components/`\n- Add a SQLite database — see the\n [React Hono Example](https://www.val.town/x/stevekrouse/reactHonoExample) for\n a full-stack example with database, queries, and shared types\n\nTemplate updates and upgrade paths for existing remixes: [CHANGELOG.md](/CHANGELOG.md)\n",[146],"533e079a-a773-4761-bff1-01388a09ecfe","CHANGELOG.md","01a04c05-88bb-772a-8ca1-885b686d698f",["D",1787981826165],"# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

Diff · v6