`, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_290":291,"_292":293},"routes/_app.x.$handle.$name",{"_104":103,"_32":49,"_113":94,"_27":114,"_13":14,"_115":-5,"_11":116,"_117":118,"_119":120,"_121":122,"_123":124,"_21":-5,"_125":-5,"_126":-5,"_127":25,"_128":129,"_130":63,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_47":48,"_32":49,"_36":50,"_51":-5,"_52":25,"_53":54,"_55":54,"_56":57,"_58":-5,"_18":59,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":87,"_88":89,"_90":91,"_92":25},"version",8,"changes",[19,20],"aiChatInfo","userId",{"_21":41,"_23":-7,"_24":25,"_26":25,"_27":42,"_29":42},{"_21":22,"_23":-7,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":-5,"_36":37,"_38":14,"_39":40,"_24":25},"previous","deleted",false,"deletedHere","path","lib","latestPath","fileId","b84f0ed9-e0a8-4f0c-aecc-622bd854c450","name","fileType","directory","content","createdAt",["D",1787983359008],"branchVersion","branchId","24770712-378b-401f-a93f-7fe807c5dda9",{"_30":43,"_32":44,"_33":21,"_35":45,"_36":46,"_38":14,"_39":40,"_24":25},"lib/policy.mjs","3d4ae99c-a36f-11f1-897a-1607ee4eb77e","policy.mjs","export const GITHUB_STATES = Object.freeze([\n \"CONNECTED\",\n \"NOT_CONNECTED\",\n \"AUTH_FAILED\",\n \"REPO_NOT_FOUND\",\n \"ACCESS_DENIED\",\n \"STALE\",\n]);\n\nexport function normalizeRepo(value) {\n if (typeof value !== \"string\") return null;\n const trimmed = value.trim();\n if (!/^[A-Za-z0-9_.-]+\\/[A-Za-z0-9_.-]+$/.test(trimmed)) return null;\n return trimmed;\n}\n\nexport function parseRepoAllowlist(value) {\n if (typeof value !== \"string\") return [];\n return [...new Set(value.split(\",\").map(normalizeRepo).filter(Boolean).map((x) => x.toLowerCase()))];\n}\n\nexport function isRepoAllowed(repo, allowlist) {\n const normalized = normalizeRepo(repo);\n return Boolean(normalized && allowlist.includes(normalized.toLowerCase()));\n}\n\nexport function githubFailureState(status) {\n if (status === 401) return \"AUTH_FAILED\";\n if (status === 403) return \"ACCESS_DENIED\";\n if (status === 404) return \"REPO_NOT_FOUND\";\n return \"STALE\";\n}\n\nexport function isAgentId(value) {\n const match = /^NCA-(\\d{3})$/.exec(String(value ?? \"\"));\n return Boolean(match && Number(match[1]) >= 1 && Number(match[1]) <= 100);\n}\n\nexport function boundedText(value, max, required = false) {\n if (value == null || value === \"\") return required ? null : \"\";\n if (typeof value !== \"string\") return null;\n const text = value.trim();\n if ((required && !text) || text.length > max) return null;\n return text;\n}\n\nexport function providerSemantic(httpOk, body, expectedNode) {\n const nodeMatches = body && body.node === expectedNode;\n const sideEffectsDenied = body && body.side_effects === \"denied\";\n const noAuthority = body && body.authority === \"none\";\n return {\n health_state: httpOk && nodeMatches ? \"HEALTHY\" : \"NOT_VERIFIED\",\n readiness_state: \"NOT_VERIFIED\",\n authority_state: noAuthority ? \"NONE\" : \"NOT_VERIFIED\",\n boundary_valid: Boolean(nodeMatches && sideEffectsDenied && noAuthority),\n };\n}\n\nexport function safeEqual(a, b) {\n const left = new TextEncoder().encode(String(a ?? \"\"));\n const right = new TextEncoder().encode(String(b ?? \"\"));\n let diff = left.length ^ right.length;\n const length = Math.max(left.length, right.length);\n for (let i = 0; i < length; i++) diff |= (left[i] ?? 0) ^ (right[i] ?? 0);\n return diff === 0;\n}\n",["D",1787983359008],"id","d711419f-af68-49ff-b31a-45902d9292f1","ag-command-center",["D",1787981826165],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","AG HANTER + 100 NCA + CRM command center","imageUrl","fe39b163-4b50-466e-82d1-8bd01133e4b6","pinnedFileId","01a04c05-88bb-772a-8ca1-918bb0a15986","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a03585-eb44-758d-92a4-77db1a9a243c","tursoName","d711419faf6849ffb31a45902d9292f1","tursoHostname","d711419faf6849ffb31a45902d9292f1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789456888508],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_104":103,"_112":108},"org",{"_104":103,"_105":106,"_107":108,"_18":59,"_109":110,"_111":25},"branch",{"_13":93,"_32":94,"_47":40,"_95":48,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":49,"_102":103},"isOwned",43,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","oromaskevic23","handle","displayName","Олександр Ромаскевич","avatar","https://lh3.googleusercontent.com/a/ACg8ocIo1MJ3hDjpQrinMIRok3d2YY1vpHgehs8m2u1_vc7pmFovRGI=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_47":48,"_32":49,"_36":285,"_51":-5,"_52":25,"_53":54,"_55":54,"_56":57,"_58":-5,"_18":59,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":286,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":287,"_88":288,"_90":289,"_92":25},"tree",[188,195,197,200,201,202],"files",[188,189,190,191,192,193,194,195,196,197,198,199,200,201,202],"counts",{"_178":67,"_179":147,"_180":67,"_181":182,"_183":184},"contents",[135,136,137,138,139,140],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_47":173,"_32":174,"_30":175,"_143":-5,"_39":40,"_38":147,"_145":63,"_36":176,"_13":67,"_33":34,"_35":-5,"_24":25,"_150":-5,"_27":177},{"_47":170,"_32":28,"_30":31,"_143":-5,"_39":40,"_38":14,"_145":63,"_36":171,"_13":67,"_33":34,"_35":-5,"_24":25,"_150":-5,"_27":172},{"_47":164,"_32":165,"_30":166,"_143":-5,"_39":40,"_38":167,"_145":63,"_36":168,"_13":67,"_33":34,"_35":-5,"_24":25,"_150":-5,"_27":169},{"_47":158,"_32":159,"_30":160,"_143":-5,"_39":40,"_38":147,"_145":63,"_36":161,"_13":67,"_33":21,"_35":162,"_24":25,"_150":-5,"_27":163},{"_47":152,"_32":153,"_30":154,"_143":-5,"_39":40,"_38":147,"_145":63,"_36":155,"_13":67,"_33":21,"_35":156,"_24":25,"_150":-5,"_27":157},{"_47":141,"_32":142,"_30":61,"_143":-5,"_39":40,"_38":144,"_145":25,"_36":146,"_13":147,"_33":148,"_35":149,"_24":25,"_150":49,"_27":151},"9919180f-2d8c-45bd-bddf-343f7fa20137","index.ts","parentId",2,"latest",["D",1787981912108],1,"http","import { parseVal, serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { Hono } from \"npm:hono\";\nimport { Root } from \"./frontend/root.tsx\";\n\nconst app = new Hono();\n\nawait sqlite.batch([\n { sql: `CREATE TABLE IF NOT EXISTS crm_contacts (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL,\n company TEXT,\n email TEXT,\n source TEXT NOT NULL DEFAULT 'manual',\n owner_agent_id TEXT,\n status TEXT NOT NULL DEFAULT 'LEAD',\n created_at TEXT NOT NULL\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS crm_opportunities (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n contact_id INTEGER,\n title TEXT NOT NULL,\n stage TEXT NOT NULL DEFAULT 'QUALIFY',\n value_usd REAL,\n probability INTEGER NOT NULL DEFAULT 0,\n owner_agent_id TEXT,\n evidence_ref TEXT,\n created_at TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )` },\n { sql: `CREATE TABLE IF NOT EXISTS ag_audit (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n event_type TEXT NOT NULL,\n detail TEXT NOT NULL,\n created_at TEXT NOT NULL\n )` },\n]);\n\nconst DIRECTORS = [\n { id: \"ORCH-DROPSHIPPING-001\", name: \"Mason Reed\", agents: 16, domain: \"Dropshipping Commerce\" },\n { id: \"ORCH-AI-AUTOMATION-001\", name: \"Ethan Cole\", agents: 13, domain: \"AI Automation\" },\n { id: \"ORCH-B2B-REVENUE-001\", name: \"Sophia Laurent\", agents: 13, domain: \"B2B Revenue\" },\n { id: \"ORCH-CREATIVE-DIGITAL-001\", name: \"Adrian Wolfe\", agents: 13, domain: \"Creative & Digital\" },\n { id: \"ORCH-EDUCATION-001\", name: \"Amelia Grant\", agents: 13, domain: \"Education\" },\n { id: \"ORCH-DATA-MARKET-001\", name: \"Victor Hayes\", agents: 12, domain: \"Data & Market Intelligence\" },\n { id: \"ORCH-SME-SERVICES-001\", name: \"Olivia Morgan\", agents: 12, domain: \"SME Services\" },\n { id: \"ORCH-KIDS-MEDIA-001\", name: \"Lucas Bennett\", agents: 8, domain: \"Kids Media\" },\n];\n\nfunction requireAdmin(c: any) {\n const configured = Deno.env.get(\"AG_ADMIN_TOKEN\");\n if (!configured) return c.json({ ok: false, error: \"AG_ADMIN_TOKEN_NOT_CONFIGURED\" }, 503);\n const provided = c.req.header(\"authorization\")?.replace(/^Bearer\\s+/i, \"\");\n if (provided !== configured) return c.json({ ok: false, error: \"UNAUTHORIZED\" }, 401);\n return null;\n}\n\napp.get(\"/\", (c) => c.html(Root()));\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\napp.get(\"/api/health\", (c) => c.json({\n ok: true,\n product: \"AG\",\n component: \"ag-command-center\",\n mission_id: \"IC-AG-GENERAL-AGENT-PLATFORM-001\",\n authority: \"HANTER_COMMAND_CENTER\",\n timestamp: new Date().toISOString(),\n}));\n\napp.get(\"/api/overview\", async (c) => {\n const contacts = await sqlite.execute(\"SELECT COUNT(*) AS n FROM crm_contacts\");\n const opportunities = await sqlite.execute(\"SELECT COUNT(*) AS n FROM crm_opportunities\");\n const evidenced = await sqlite.execute(\"SELECT COUNT(*) AS n FROM crm_opportunities WHERE evidence_ref IS NOT NULL AND evidence_ref <> ''\");\n return c.json({\n product: \"AG\",\n mode: \"RIGHT_HAND_MODE\",\n mission: { id: \"IC-AG-GENERAL-AGENT-PLATFORM-001\", status: \"ACTIVE_BUILD\", checkpoint: \"AG-M0-FOUNDATION\" },\n fleet: { registered_agents: 100, directors: 8, roster_type: \"CANONICAL_ASSIGNMENT\", live_execution_claimed: false },\n directors: DIRECTORS,\n orion: { role: \"ADVISORY_COORDINATION_ONLY\", always_on_required: true },\n governance: [\"AI Passport\", \"Enterprise Skills\", \"Guardian Core\", \"Approval Gateway\", \"Runtime Domain\", \"Audit Ledger\"],\n providers: [\n { id: \"provider-1\", name: \"Val Town\", role: \"recovery-runtime + AG control center\", status: \"ACTIVE\" },\n { id: \"provider-2\", name: \"Netlify\", role: \"HANTER bridge node #2\", status: \"PRESENT_HEALTH_UNVERIFIED\" },\n { id: \"provider-3\", name: \"Supabase\", role: \"HANTER bridge node #3\", status: \"ACTIVE_HEALTHY_LAST_VERIFIED\" },\n ],\n crm: {\n contacts: Number((contacts.rows[0] as any)?.n ?? 0),\n opportunities: Number((opportunities.rows[0] as any)?.n ?? 0),\n evidenced_opportunities: Number((evidenced.rows[0] as any)?.n ?? 0),\n revenue_claimed_usd: 0,\n },\n github: {\n integration_layer: \"IMPLEMENTED_STATUS_ROUTE\",\n repository_target: Deno.env.get(\"AG_GITHUB_REPO\") ?? \"CYBER-HAK repository not connected\",\n credential_configured: Boolean(Deno.env.get(\"GITHUB_TOKEN\")),\n },\n });\n});\n\napp.get(\"/api/crm\", async (c) => {\n const contacts = await sqlite.execute(\"SELECT * FROM crm_contacts ORDER BY id DESC LIMIT 100\");\n const opportunities = await sqlite.execute(\"SELECT * FROM crm_opportunities ORDER BY id DESC LIMIT 100\");\n return c.json({ contacts: contacts.rows, opportunities: opportunities.rows });\n});\n\napp.post(\"/api/crm/contacts\", async (c) => {\n const denied = requireAdmin(c); if (denied) return denied;\n const body = await c.req.json();\n if (!body?.name) return c.json({ ok: false, error: \"NAME_REQUIRED\" }, 400);\n const now = new Date().toISOString();\n const r = await sqlite.execute({\n sql: \"INSERT INTO crm_contacts(name,company,email,source,owner_agent_id,status,created_at) VALUES(?,?,?,?,?,?,?)\",\n args: [body.name, body.company ?? null, body.email ?? null, body.source ?? \"manual\", body.owner_agent_id ?? null, body.status ?? \"LEAD\", now],\n });\n return c.json({ ok: true, id: Number(r.lastInsertRowid) }, 201);\n});\n\napp.post(\"/api/crm/opportunities\", async (c) => {\n const denied = requireAdmin(c); if (denied) return denied;\n const body = await c.req.json();\n if (!body?.title) return c.json({ ok: false, error: \"TITLE_REQUIRED\" }, 400);\n const now = new Date().toISOString();\n const r = await sqlite.execute({\n sql: \"INSERT INTO crm_opportunities(contact_id,title,stage,value_usd,probability,owner_agent_id,evidence_ref,created_at,updated_at) VALUES(?,?,?,?,?,?,?,?,?)\",\n args: [body.contact_id ?? null, body.title, body.stage ?? \"QUALIFY\", body.value_usd ?? null, body.probability ?? 0, body.owner_agent_id ?? null, body.evidence_ref ?? null, now, now],\n });\n return c.json({ ok: true, id: Number(r.lastInsertRowid) }, 201);\n});\n\napp.get(\"/api/github/status\", async (c) => {\n const token = Deno.env.get(\"GITHUB_TOKEN\");\n const repo = Deno.env.get(\"AG_GITHUB_REPO\");\n if (!token || !repo) return c.json({ connected: false, reason: \"GITHUB_CREDENTIAL_OR_REPO_NOT_CONFIGURED\" });\n const res = await fetch(`https://api.github.com/repos/${repo}`, {\n headers: { Authorization: `Bearer ${token}`, Accept: \"application/vnd.github+json\", \"User-Agent\": \"AG-Command-Center\" },\n });\n if (!res.ok) return c.json({ connected: false, status: res.status, reason: \"GITHUB_REPO_ACCESS_FAILED\" });\n const data = await res.json();\n return c.json({ connected: true, repo: data.full_name, private: data.private, default_branch: data.default_branch, pushed_at: data.pushed_at });\n});\n\napp.onError((err) => Promise.reject(err));\nexport default app.fetch;\n","label",[142],"c248b291-25c7-4a77-ba0b-0b333cbab467","README.md","01a04c05-88bb-772a-8ca1-8d527cb36132",["D",1787981826165],"# React + Hono Starter\n\nA minimal starter template for building client-side React apps with a Hono\nbackend on Val Town. Click **Remix** to get your own copy.\n\n## Picking a starter\n\n| Starter | When to pick it |\n| --- | --- |\n| [`basic-html-starter`](https://www.val.town/x/templates/basic-html-starter) | Static HTML pages. Sprinkle of vanilla JS. No server-side rendering. |\n| [`hono-jsx-starter`](https://www.val.town/x/templates/hono-jsx-starter) | Dynamic server-rendered HTML with JSX. API routes. No React, no SPA. |\n| **[`react-hono-starter`](https://www.val.town/x/templates/react-hono-starter)** *(you're here)* | Client-side React SPA with a Hono API backend. |\n\n**Want to build UI?** Start writing React components in\n[`frontend/components/`](/frontend/components/). Import them into `App.tsx` and\nyou're good to go. Styling is [Twind](https://twind.style/) — just use Tailwind\nutility classes, zero config.\n\n**Want to add an API?** Add routes in [`index.ts`](/index.ts) (there's a\ncommented-out example). Fetch them from your React components.\n\n## Architecture\n\n```mermaid\ngraph LR\n Browser -->|\"GET /\"| Hono[\"index.ts
(Hono server)\"]\n Hono -->|serves| HTML[\"root.tsx\"]\n HTML -->|loads| Entry[\"index.tsx\"]\n Entry -->|renders| App[\"App.tsx\"]\n App -->|renders| Counter[\"Counter.tsx\"]\n```\n\n## File structure\n\n```\nindex.ts ← Hono backend (serves frontend + API routes)\nfrontend/\n root.tsx ← HTML shell (stamps immutable asset URLs)\n index.tsx ← React entrypoint (mounts )\n favicon.svg ← App icon\n components/\n App.tsx ← Root component (layout + view source link)\n Counter.tsx ← Example component with state\n```\n\n## How it works\n\n1. **`index.ts`** is the HTTP entrypoint — a Hono server that serves the\n frontend and any API routes you add.\n2. **`frontend/root.tsx`** is the HTML shell — it loads Twind and stamps\n immutable asset URLs for the favicon and React entrypoint.\n3. **`frontend/index.tsx`** mounts the React app.\n4. **`frontend/components/App.tsx`** is the root layout — add new components\n alongside it.\n5. **`frontend/components/Counter.tsx`** is an example stateful component —\n replace it with your own!\n\n## Next steps\n\n- Add API routes in `index.ts`\n- Add new components in `frontend/components/`\n- Add a SQLite database — see the\n [React Hono Example](https://www.val.town/x/stevekrouse/reactHonoExample) for\n a full-stack example with database, queries, and shared types\n\nTemplate updates and upgrade paths for existing remixes: [CHANGELOG.md](/CHANGELOG.md)\n",[153],"533e079a-a773-4761-bff1-01388a09ecfe","CHANGELOG.md","01a04c05-88bb-772a-8ca1-885b686d698f",["D",1787981826165],"# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

Diff · v8