[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_547":548,"_549":550},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_17":18,"_40":-7,"_145":-5,"_19":146,"_147":148,"_149":150,"_151":152,"_153":154,"_21":155,"_156":-5,"_157":-5,"_158":24,"_159":160,"_161":103,"_162":-5,"_163":-5,"_164":165},"routes/_app.x.$handle.$name.branch.$branch.history_.$",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":22,"_23":24,"_25":26,"_27":28,"_29":24,"_30":-5},"handle","pikachu","name","Quickstart-Full-Stack","branchName","main","path","backend/handlers.ts","project",{"_34":89,"_13":14,"_38":90,"_91":-5,"_92":24,"_93":94,"_95":94,"_96":97,"_98":99,"_30":69,"_100":101,"_102":103,"_104":-5,"_105":-5,"_106":107,"_42":43,"_108":109,"_110":111,"_112":113,"_114":-5,"_115":116,"_117":116,"_118":119,"_120":119,"_121":119,"_122":116,"_123":116,"_53":124,"_125":126,"_127":128,"_129":24},"file",{"_63":64,"_13":65,"_66":67,"_68":24,"_88":-5},"isDirectory",false,"page",0,"history",[31,32,33],"hasNext","userId",{"_34":80,"_36":37,"_38":81,"_40":82,"_42":43,"_44":83,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":84,"_21":85,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":86},{"_34":72,"_36":37,"_38":73,"_40":74,"_42":43,"_44":75,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":76,"_21":77,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":78},{"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":54,"_21":55,"_56":-5,"_57":-5,"_58":-5,"_59":-5,"_60":61},"id","080f9dee-5023-11f1-915b-ee650bb23af1","branchId","5a0a7ac8-4895-11f1-80ec-42b51c65c3df","createdAt",["D",1778824681421],"version",232,"orgId","019df771-9af8-7238-99a4-541e39355038","parentId","ea41ddb6-4f02-11f1-8367-ee650bb23af1","incomingCommitId","aiChatMessageId","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle","source","clientLabel","user",{"_34":69,"_42":43,"_11":12,"_70":71},{"_63":64,"_13":65,"_66":67,"_68":24},"pull","merge","revert","multiple","commits",[62],{"_34":35,"_36":37,"_38":39,"_40":41,"_42":43,"_44":45,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":54,"_21":55,"_56":-5,"_57":-5,"_58":-5},"fileId","080cdc9e-5023-11f1-915b-ee650bb23af1","handlers.ts","fileType","script","deleted","173e7424-8658-428f-a3bc-ae4faeaabd1c","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/22c8ba37-42c8-4af4-8daf-8cdd2f5f1800/square512?exp=1789538399&sig=21cdba23f818845c8391e88088eb5ea9255dbc43e05efe79e25bd70ab9ddb43a","03480c8b-7e90-4532-b985-7c89732f7cc9",["D",1788122838965],302,"50055c47-00bc-4a77-87d3-e643e220435e",{"_34":69,"_42":43,"_11":12,"_70":71},{"_63":64,"_13":65,"_66":67,"_68":24},[79],{"_34":72,"_36":37,"_38":73,"_40":74,"_42":43,"_44":75,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":76,"_21":77,"_56":-5,"_57":-5,"_58":-5},"21d7399d-f076-4545-9193-57f531373485",["D",1788140102348],340,"151ae281-a955-43c8-9e67-fcc927025aba",{"_34":69,"_42":43,"_11":12,"_70":71},{"_63":64,"_13":65,"_66":67,"_68":24},[87],{"_34":80,"_36":37,"_38":81,"_40":82,"_42":43,"_44":83,"_46":-5,"_47":-5,"_48":-5,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":84,"_21":85,"_56":-5,"_57":-5,"_58":-5},"deletedAtVersion","5a09ae54-4895-11f1-80ec-42b51c65c3df",["D",1777994172310],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","An elegant template for an elegant single-person full stack app.","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/3ed9401e-3850-4a69-dec2-1bdd924c0900/square512?exp=1789538399&sig=8ded5b974bfebef9817e2fbdffe4de4e1704e0d4cab9518c811db2594c0af107","pinnedFileId","e1c705aa-4b18-11f1-b4ae-ee650bb23af1","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",1,"tursoName","5a09ae54489511f180ec42b51c65c3df","tursoHostname","5a09ae54489511f180ec42b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789511441255],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_11":12,"_144":71},"org",{"_11":12,"_139":140,"_70":71,"_30":69,"_141":142,"_143":24},"branch",{"_40":130,"_13":16,"_34":37,"_131":89,"_132":-5,"_133":-5,"_134":-5,"_135":-5,"_136":-5,"_137":14,"_138":12},"isOwned",384,"projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Minion","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_34":89,"_13":14,"_38":542,"_91":-5,"_92":24,"_93":94,"_95":94,"_96":97,"_98":99,"_30":69,"_100":101,"_102":103,"_104":-5,"_105":-5,"_106":107,"_42":43,"_108":109,"_110":111,"_112":543,"_114":-5,"_115":116,"_117":116,"_118":119,"_120":119,"_121":119,"_122":116,"_123":116,"_53":544,"_125":545,"_127":546,"_129":24},"tree",[187,195,217,220,221,222,223,224,225],"files",[187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225],"counts",{"_177":26,"_178":107,"_179":107,"_180":181,"_182":183},"contents",[],{"_34":166,"_13":65,"_63":64,"_44":167,"_36":37,"_168":82,"_169":103,"_38":170,"_40":171,"_66":67,"_172":173,"_68":24,"_174":-5,"_17":175},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},"79a7c1ac-adb4-4a22-b1a2-6f18265cb2de","8630361c-4951-11f1-a193-42b51c65c3df","branchVersion","latest",["D",1788140102348],2,"content","// handlers.ts — API route handler implementations.\n// Each handler receives a RouteCxt and returns a Response.\n\nimport {\n createReminder,\n deleteReminder,\n getCronRuns,\n getRecentVisits,\n getVisitCount,\n listRecentEmails,\n listReminders,\n listUsers,\n pruneOldVisits,\n setReminderDone,\n setUserAdmin,\n} from \"./db.ts\";\nimport { jsonError, jsonOk, type RouteCxt } from \"./api-utils.ts\";\nimport { APP_NAME } from \"./shared.ts\";\nimport { listKeys, loadJSON, saveJSON } from \"./storage.ts\";\n\n// ── Core ──────────────────────────────────────────────────────────────────────\n\nexport function healthCheck(): Response {\n return jsonOk({\n name: APP_NAME,\n timestamp: new Date().toISOString(),\n runtime: `Deno ${Deno.version?.deno ?? \"unknown\"}`,\n });\n}\n\nexport function me(cxt: RouteCxt): Response {\n return jsonOk({\n user: cxt.uc.user,\n isAdmin: cxt.uc.isAdmin,\n isSuperAdmin: cxt.uc.isSuperAdmin,\n });\n}\n\n// ── SQLite demos ──────────────────────────────────────────────────────────────\n\nexport async function visits(): Promise {\n try {\n const total = await getVisitCount();\n const recent = await getRecentVisits(20);\n return jsonOk({ total, recent });\n } catch {\n return jsonError(\"SQLite unavailable (off-platform?)\", 503);\n }\n}\n\nexport async function pruneVisits(): Promise {\n try {\n await pruneOldVisits(30);\n return jsonOk({ pruned: \"visits older than 30 days\" });\n } catch {\n return jsonError(\"SQLite unavailable (off-platform?)\", 503);\n }\n}\n\nexport async function cronRuns(): Promise {\n try {\n const runs = await getCronRuns(30);\n return jsonOk({ runs });\n } catch {\n return jsonError(\"SQLite unavailable (off-platform?)\", 503);\n }\n}\n\n// ── Reminders — the flagship shared \"tiny app\" demo ───────────────────────────\n// Public read; sign-in required to write (see index.http.ts's route table).\n\nexport async function remindersList(): Promise {\n try {\n const reminders = await listReminders();\n return jsonOk({ reminders });\n } catch {\n return jsonError(\"SQLite unavailable (off-platform?)\", 503);\n }\n}\n\nexport async function remindersCreate(cxt: RouteCxt): Promise {\n try {\n const body = await cxt.req.json() as { title?: string; note?: string; dueDate?: string };\n const title = (body.title ?? \"\").trim();\n if (!title) return jsonError(\"title required\");\n await createReminder(\n title,\n body.note?.trim() || null,\n body.dueDate?.trim() || null,\n cxt.uc.user!.username,\n );\n return jsonOk({ reminders: await listReminders() });\n } catch {\n return jsonError(\"Failed to create reminder\", 500);\n }\n}\n\nexport async function remindersSetDone(cxt: RouteCxt): Promise {\n try {\n const body = await cxt.req.json() as { id?: number; done?: boolean };\n if (typeof body.id !== \"number\") return jsonError(\"id required\");\n if (typeof body.done !== \"boolean\") return jsonError(\"done must be boolean\");\n const updated = await setReminderDone(body.id, body.done);\n if (!updated) return jsonError(\"Reminder not found\", 404);\n return jsonOk({ reminders: await listReminders() });\n } catch {\n return jsonError(\"Failed to update reminder\", 500);\n }\n}\n\nexport async function remindersDelete(cxt: RouteCxt): Promise {\n try {\n const body = await cxt.req.json() as { id?: number };\n if (typeof body.id !== \"number\") return jsonError(\"id required\");\n const deleted = await deleteReminder(body.id);\n if (!deleted) return jsonError(\"Reminder not found\", 404);\n return jsonOk({ reminders: await listReminders() });\n } catch {\n return jsonError(\"Failed to delete reminder\", 500);\n }\n}\n\n// ── Inbound email inbox — the AI spam/summary triage demo ─────────────────────\n// Public read-only; written by email.ts's inbound handler.\n\nexport async function emailsList(): Promise {\n try {\n const emails = await listRecentEmails();\n return jsonOk({ emails });\n } catch {\n return jsonError(\"SQLite unavailable (off-platform?)\", 503);\n }\n}\n\n// ── Blob demos ────────────────────────────────────────────────────────────────\n// Any signed-in user may read/write — keys are namespaced per-user so\n// concurrent demo visitors don't collide.\n\nfunction blobKeyPrefix(cxt: RouteCxt): string {\n return `${cxt.uc.user!.username}/`;\n}\n\nexport function blobKeys(cxt: RouteCxt): Response | Promise {\n return listKeys(blobKeyPrefix(cxt))\n .then((keys) => jsonOk({ keys }))\n .catch(() => jsonError(\"Blob unavailable (off-platform?)\", 503));\n}\n\nexport async function blobWrite(cxt: RouteCxt): Promise {\n try {\n const { key, value } = await cxt.req.json() as { key: string; value: unknown };\n if (!key) return jsonError(\"key required\");\n await saveJSON(`${blobKeyPrefix(cxt)}${key}`, value);\n return jsonOk({ key });\n } catch {\n return jsonError(\"Blob write failed\", 500);\n }\n}\n\nexport async function blobRead(cxt: RouteCxt): Promise {\n try {\n const key = cxt.url.searchParams.get(\"key\") ?? \"\";\n if (!key) return jsonError(\"key required\");\n const value = await loadJSON(`${blobKeyPrefix(cxt)}${key}`);\n return jsonOk({ key, value });\n } catch {\n return jsonError(\"Blob read failed\", 500);\n }\n}\n\n// ── Admin (super-admin only) ──────────────────────────────────────────────────\n\nexport async function adminListUsers(): Promise {\n try {\n const users = await listUsers();\n return jsonOk({ users });\n } catch {\n return jsonError(\"SQLite unavailable (off-platform?)\", 503);\n }\n}\n\nexport async function adminSetAdmin(cxt: RouteCxt): Promise {\n try {\n const body = await cxt.req.json() as { username: string; isAdmin: boolean };\n const username = (body.username ?? \"\").trim();\n if (!username) return jsonError(\"username required\");\n if (typeof body.isAdmin !== \"boolean\") return jsonError(\"isAdmin must be boolean\");\n const updated = await setUserAdmin(username, body.isAdmin);\n if (!updated) return jsonError(\"User not found\", 404);\n return jsonOk({ username, isAdmin: body.isAdmin });\n } catch {\n return jsonError(\"Failed to update admin status\", 500);\n }\n}\n","label",[176,65],"backend","pulls","branches","forks","envVars",{"_184":107,"_186":26},"connections",{"_184":26,"_185":26},"count","unfilledCount","emptyCount",{"_34":537,"_13":176,"_63":167,"_44":-5,"_36":37,"_168":538,"_169":103,"_38":539,"_40":26,"_66":304,"_172":-5,"_68":24,"_174":-5,"_233":540,"_17":541},{"_34":529,"_13":530,"_63":531,"_44":167,"_36":37,"_168":532,"_169":103,"_38":533,"_40":26,"_66":67,"_172":534,"_68":24,"_174":-5,"_233":535,"_17":536},{"_34":521,"_13":522,"_63":523,"_44":167,"_36":37,"_168":524,"_169":103,"_38":525,"_40":261,"_66":67,"_172":526,"_68":24,"_174":-5,"_233":527,"_17":528},{"_34":513,"_13":514,"_63":515,"_44":167,"_36":37,"_168":516,"_169":103,"_38":517,"_40":261,"_66":67,"_172":518,"_68":24,"_174":-5,"_233":519,"_17":520},{"_34":504,"_13":505,"_63":506,"_44":167,"_36":37,"_168":507,"_169":103,"_38":508,"_40":509,"_66":67,"_172":510,"_68":24,"_174":-5,"_233":511,"_17":512},{"_34":166,"_13":65,"_63":64,"_44":167,"_36":37,"_168":82,"_169":103,"_38":501,"_40":171,"_66":67,"_172":173,"_68":24,"_174":-5,"_233":502,"_17":503},{"_34":492,"_13":493,"_63":494,"_44":167,"_36":37,"_168":495,"_169":103,"_38":496,"_40":497,"_66":67,"_172":498,"_68":24,"_174":-5,"_233":499,"_17":500},{"_34":484,"_13":485,"_63":486,"_44":167,"_36":37,"_168":487,"_169":103,"_38":488,"_40":251,"_66":67,"_172":489,"_68":24,"_174":-5,"_233":490,"_17":491},{"_34":479,"_13":316,"_63":310,"_44":-5,"_36":37,"_168":480,"_169":103,"_38":481,"_40":26,"_66":304,"_172":-5,"_68":24,"_174":-5,"_233":482,"_17":483},{"_34":474,"_13":457,"_63":451,"_44":310,"_36":37,"_168":475,"_169":103,"_38":476,"_40":26,"_66":304,"_172":-5,"_68":24,"_174":-5,"_233":477,"_17":478},{"_34":466,"_13":467,"_63":468,"_44":451,"_36":37,"_168":469,"_169":103,"_38":470,"_40":340,"_66":67,"_172":471,"_68":24,"_174":-5,"_233":472,"_17":473},{"_34":458,"_13":459,"_63":460,"_44":451,"_36":37,"_168":461,"_169":103,"_38":462,"_40":434,"_66":67,"_172":463,"_68":24,"_174":-5,"_233":464,"_17":465},{"_34":448,"_13":449,"_63":450,"_44":451,"_36":37,"_168":452,"_169":103,"_38":453,"_40":26,"_66":67,"_172":454,"_68":24,"_174":-5,"_233":455,"_17":456},{"_34":443,"_13":344,"_63":337,"_44":310,"_36":37,"_168":444,"_169":103,"_38":445,"_40":26,"_66":304,"_172":-5,"_68":24,"_174":-5,"_233":446,"_17":447},{"_34":438,"_13":412,"_63":405,"_44":337,"_36":37,"_168":439,"_169":103,"_38":440,"_40":26,"_66":304,"_172":-5,"_68":24,"_174":-5,"_233":441,"_17":442},{"_34":429,"_13":430,"_63":431,"_44":405,"_36":37,"_168":432,"_169":103,"_38":433,"_40":434,"_66":67,"_172":435,"_68":24,"_174":-5,"_233":436,"_17":437},{"_34":421,"_13":422,"_63":423,"_44":405,"_36":37,"_168":424,"_169":103,"_38":425,"_40":359,"_66":67,"_172":426,"_68":24,"_174":-5,"_233":427,"_17":428},{"_34":413,"_13":414,"_63":415,"_44":405,"_36":37,"_168":416,"_169":103,"_38":417,"_40":408,"_66":67,"_172":418,"_68":24,"_174":-5,"_233":419,"_17":420},{"_34":402,"_13":403,"_63":404,"_44":405,"_36":37,"_168":406,"_169":103,"_38":407,"_40":408,"_66":67,"_172":409,"_68":24,"_174":-5,"_233":410,"_17":411},{"_34":397,"_13":363,"_63":356,"_44":337,"_36":37,"_168":398,"_169":103,"_38":399,"_40":26,"_66":304,"_172":-5,"_68":24,"_174":-5,"_233":400,"_17":401},{"_34":389,"_13":390,"_63":391,"_44":356,"_36":37,"_168":392,"_169":103,"_38":393,"_40":171,"_66":67,"_172":394,"_68":24,"_174":-5,"_233":395,"_17":396},{"_34":380,"_13":381,"_63":382,"_44":356,"_36":37,"_168":383,"_169":103,"_38":384,"_40":385,"_66":67,"_172":386,"_68":24,"_174":-5,"_233":387,"_17":388},{"_34":372,"_13":373,"_63":374,"_44":356,"_36":37,"_168":375,"_169":103,"_38":376,"_40":251,"_66":67,"_172":377,"_68":24,"_174":-5,"_233":378,"_17":379},{"_34":364,"_13":365,"_63":366,"_44":356,"_36":37,"_168":367,"_169":103,"_38":368,"_40":171,"_66":67,"_172":369,"_68":24,"_174":-5,"_233":370,"_17":371},{"_34":353,"_13":354,"_63":355,"_44":356,"_36":37,"_168":357,"_169":103,"_38":358,"_40":359,"_66":67,"_172":360,"_68":24,"_174":-5,"_233":361,"_17":362},{"_34":345,"_13":346,"_63":347,"_44":337,"_36":37,"_168":130,"_169":103,"_38":348,"_40":349,"_66":67,"_172":350,"_68":24,"_174":-5,"_233":351,"_17":352},{"_34":334,"_13":335,"_63":336,"_44":337,"_36":37,"_168":338,"_169":103,"_38":339,"_40":340,"_66":67,"_172":341,"_68":24,"_174":-5,"_233":342,"_17":343},{"_34":325,"_13":326,"_63":327,"_44":310,"_36":37,"_168":328,"_169":103,"_38":329,"_40":330,"_66":67,"_172":331,"_68":24,"_174":-5,"_233":332,"_17":333},{"_34":317,"_13":318,"_63":319,"_44":310,"_36":37,"_168":320,"_169":103,"_38":321,"_40":279,"_66":67,"_172":322,"_68":24,"_174":-5,"_233":323,"_17":324},{"_34":307,"_13":308,"_63":309,"_44":310,"_36":37,"_168":311,"_169":103,"_38":312,"_40":107,"_66":67,"_172":313,"_68":24,"_174":-5,"_233":314,"_17":315},{"_34":301,"_13":292,"_63":286,"_44":-5,"_36":37,"_168":302,"_169":103,"_38":303,"_40":26,"_66":304,"_172":-5,"_68":24,"_174":-5,"_233":305,"_17":306},{"_34":293,"_13":294,"_63":295,"_44":286,"_36":37,"_168":296,"_169":103,"_38":297,"_40":26,"_66":67,"_172":298,"_68":24,"_174":-5,"_233":299,"_17":300},{"_34":283,"_13":284,"_63":285,"_44":286,"_36":37,"_168":287,"_169":103,"_38":288,"_40":26,"_66":67,"_172":289,"_68":24,"_174":-5,"_233":290,"_17":291},{"_34":274,"_13":275,"_63":276,"_44":-5,"_36":37,"_168":277,"_169":103,"_38":278,"_40":279,"_66":21,"_172":280,"_68":24,"_174":-5,"_233":281,"_17":282},{"_34":265,"_13":266,"_63":267,"_44":-5,"_36":37,"_168":268,"_169":103,"_38":269,"_40":231,"_66":270,"_172":271,"_68":24,"_174":-5,"_233":272,"_17":273},{"_34":256,"_13":257,"_63":258,"_44":-5,"_36":37,"_168":259,"_169":103,"_38":260,"_40":261,"_66":21,"_172":262,"_68":24,"_174":-5,"_233":263,"_17":264},{"_34":246,"_13":247,"_63":248,"_44":-5,"_36":37,"_168":249,"_169":103,"_38":250,"_40":251,"_66":252,"_172":253,"_68":24,"_174":-5,"_233":254,"_17":255},{"_34":236,"_13":237,"_63":101,"_44":-5,"_36":37,"_168":238,"_169":103,"_38":239,"_40":240,"_66":241,"_172":242,"_68":24,"_174":243,"_233":244,"_17":245},{"_34":226,"_13":227,"_63":228,"_44":-5,"_36":37,"_168":229,"_169":103,"_38":230,"_40":231,"_66":21,"_172":232,"_68":24,"_174":-5,"_233":234,"_17":235},"490a09b0-2a98-4fc5-a448-02058c3a5820","val.yml","aa729402-48c5-11f1-87ca-42b51c65c3df",337,["D",1788140101761],10,"name: \"Val-Town-Quickstart\"\npublic: true\n# Each file here is a service. Services share one isolated SQLite DB.\n# index.http.ts → HTTP service (SPA + API routes)\n# cron.ts → Cron service (scheduled tasks)\n# email.ts → Email service (inbound trigger + outbound helpers)\nfiles:\n index.http.ts: http\n cron.ts: interval\n email.ts: email\n# Env vars this App reads. Set them in the Val Town UI sidebar — never in code.\n# required: App will not work without it | optional: has a safe default\nenv:\n APP_NAME: optional # display/logging name (vtx new sets the code fallback)\n VAL_TOWN_USERNAME: optional # your Val Town username — powers \"view source\"/Fork links (see README)\n DAILY_HOUR_UTC: optional # 0-23 UTC hour for the daily cron task (default: \"2\")\n AUTH_SUPER_ADMINS: optional # comma-separated Val Town usernames — these users are super-admins\n","children",[],[227],"bb0a8ae5-55f3-45b9-86b6-c6e1c53666b6","index.http.ts",367,["D",1788210559007],19,"http","// index.http.ts — HTTP entry point: per-route SSR page serving + API route\n// table. Handlers live in backend/handlers.ts; this file is pure wiring.\n// Docs: https://docs.val.town/vals/http\n\nimport { recordVisit } from \"./backend/db.ts\";\nimport { type ApiRoute, jsonError, route } from \"./backend/api-utils.ts\";\nimport {\n getAdminUc,\n getAuthedUc,\n getSuperAdminUc,\n getUc,\n getUcWithTracking,\n isAuthError,\n type UserCxt,\n withValTownAuth,\n} from \"./backend/auth.ts\";\nimport {\n adminListUsers,\n adminSetAdmin,\n blobKeys,\n blobRead,\n blobWrite,\n cronRuns,\n emailsList,\n healthCheck,\n me,\n pruneVisits,\n remindersCreate,\n remindersDelete,\n remindersList,\n remindersSetDone,\n visits,\n} from \"./backend/handlers.ts\";\nimport { APP_NAME, VAL_TOWN_USERNAME } from \"./backend/shared.ts\";\nimport { renderApp } from \"./frontend/app.tsx\";\nimport type { ThemeMode, UserInfo } from \"./frontend/types.ts\";\n\n// Valid page slugs — anything else falls back to \"home\".\n// Keep in sync with PAGES in frontend/app.tsx.\nconst PAGES = new Set([\n \"home\",\n \"reminders\",\n \"docs\",\n \"http\",\n \"sqlite\",\n \"cron\",\n \"email\",\n \"blob\",\n \"admin\",\n \"ui\",\n]);\nconst MODES = new Set([\"light\", \"dark\", \"system\"]);\nconst THEME_COOKIE = \"theme\";\n\n// -----------------------------------------------------------------------------\n// entry\n// -----------------------------------------------------------------------------\n\nasync function handler(req: Request): Promise {\n const url = new URL(req.url);\n if (url.pathname.startsWith(\"/api/\")) return await routeApi(req, url);\n if (url.pathname === \"/theme\") return setThemeAndRedirect(url);\n return await servePage(req, url);\n}\n\nexport default withValTownAuth(handler);\n\n// -----------------------------------------------------------------------------\n// page rendering\n// -----------------------------------------------------------------------------\n\nasync function servePage(req: Request, url: URL): Promise {\n try {\n await recordVisit(url.pathname);\n } catch { /* off-platform */ }\n\n const uc = await getUcWithTracking(req);\n const html = renderApp({\n appName: APP_NAME,\n renderedAt: new Date().toISOString(),\n mode: cookieMode(req),\n page: pathToPage(url.pathname),\n user: ucToUserInfo(uc),\n valTownUsername: VAL_TOWN_USERNAME,\n });\n return new Response(html, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n}\n\n/** GET /theme?mode=light|dark|system&page= — sets the mode cookie, redirects back. */\nfunction setThemeAndRedirect(url: URL): Response {\n const mode = url.searchParams.get(\"mode\");\n const page = pathToPage(`/${url.searchParams.get(\"page\") ?? \"\"}`);\n const headers = new Headers({ location: page === \"home\" ? \"/\" : `/${page}` });\n if (mode && (MODES as Set).has(mode)) {\n headers.append(\"set-cookie\", `${THEME_COOKIE}=${mode}; Path=/; Max-Age=31536000; SameSite=Lax`);\n }\n return new Response(null, { status: 303, headers });\n}\n\n/** Map backend UserCxt → frontend UserInfo (layer boundary). */\nfunction ucToUserInfo(uc: UserCxt): UserInfo | null {\n if (!uc.user) return null;\n return {\n username: uc.user.username,\n avatarUrl: uc.user.avatarUrl,\n isAdmin: uc.isAdmin,\n isSuperAdmin: uc.isSuperAdmin,\n };\n}\n\nfunction cookieMode(req: Request): ThemeMode {\n const cookie = req.headers.get(\"Cookie\") ?? \"\";\n const m = cookie.match(new RegExp(`(?:^|;\\\\s*)${THEME_COOKIE}=([^;]+)`));\n const value = m ? decodeURIComponent(m[1]) : \"\";\n return (MODES as Set).has(value) ? (value as ThemeMode) : \"system\";\n}\n\nfunction pathToPage(pathname: string): string {\n const seg = pathname.slice(1);\n return PAGES.has(seg) ? seg : \"home\";\n}\n\n// -----------------------------------------------------------------------------\n// API routing\n// -----------------------------------------------------------------------------\n\nconst API_ROUTES = new Map([\n [\"GET /api/health\", route(getUc, healthCheck)],\n [\"GET /api/me\", route(getUcWithTracking, me)],\n [\"GET /api/visits\", route(getUc, visits)],\n [\"POST /api/prune-visits\", route(getAdminUc, pruneVisits)],\n [\"GET /api/cron-runs\", route(getUc, cronRuns)],\n [\"GET /api/reminders\", route(getUc, remindersList)],\n [\"POST /api/reminders\", route(getAuthedUc, remindersCreate)],\n [\"POST /api/reminders/done\", route(getAuthedUc, remindersSetDone)],\n [\"POST /api/reminders/delete\", route(getAuthedUc, remindersDelete)],\n [\"GET /api/emails\", route(getUc, emailsList)],\n [\"GET /api/blob-keys\", route(getAuthedUc, blobKeys)],\n [\"POST /api/blob-write\", route(getAuthedUc, blobWrite)],\n [\"GET /api/blob-read\", route(getAuthedUc, blobRead)],\n [\"GET /api/admin/users\", route(getSuperAdminUc, adminListUsers)],\n [\"POST /api/admin/set-admin\", route(getSuperAdminUc, adminSetAdmin)],\n]);\n\nasync function routeApi(req: Request, url: URL): Promise {\n const apiRoute = API_ROUTES.get(`${req.method} ${url.pathname}`);\n if (!apiRoute) return jsonError(`Not found: ${url.pathname}`, 404);\n\n try {\n const uc = await apiRoute.resolveUc(req);\n return await apiRoute.handle({ req, url, uc });\n } catch (error) {\n if (isAuthError(error)) return jsonError(error.message, error.status);\n throw error;\n }\n}\n","d-template",[],[237],"6da22813-bc26-432e-8840-2d89796753cd","email.ts","aa7742d6-48c5-11f1-831b-42b51c65c3df",339,["D",1788140102069],11,"email","// email.ts — Email service: inbound handler + outbound helpers.\n// Address shape: .@valtown.email\n\nimport { email as sendEmail } from \"https://esm.town/v/std/email\";\nimport { APP_NAME, type Email } from \"./backend/shared.ts\";\nimport { triageEmail } from \"./backend/ai.ts\";\nimport { recordInboundEmail } from \"./backend/db.ts\";\n\n// -----------------------------------------------------------------------------\n// inbound\n// -----------------------------------------------------------------------------\n\nexport default async function emailHandler(inbound: Email): Promise {\n console.log(\n `📧 [${APP_NAME}] From: ${inbound.from} Subject: ${inbound.subject ?? \"(none)\"}`,\n );\n console.log(` Body: ${inbound.text?.slice(0, 200) ?? \"(empty)\"}...`);\n\n for (const file of inbound.attachments) {\n console.log(` 📎 ${file.name} (${file.type}, ${file.size}b)`);\n // await blob.set(`emails/${file.name}`, await file.arrayBuffer());\n }\n\n // AI triage feeds the live \"Email Inbox\" demo (frontend/pages/page-mail.tsx) —\n // best-effort: a triage/DB hiccup should never fail the inbound trigger.\n try {\n const subject = inbound.subject ?? \"\";\n const { isSpam, summary } = await triageEmail(subject, inbound.text ?? \"\");\n await recordInboundEmail(inbound.from, subject, isSpam, summary);\n } catch (error) {\n console.error(` ⚠️ triage/record failed: ${error}`);\n }\n\n // await sendNotification(`Re: ${inbound.subject}`, \"Got your message!\");\n}\n\n// -----------------------------------------------------------------------------\n// outbound\n// -----------------------------------------------------------------------------\n// Free plan: sends to yourself only. Pro: send to anyone + cc/bcc.\n\nexport async function sendNotification(\n subject: string,\n body: string,\n options?: { to?: string; html?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n ...(options?.to && { to: options.to }),\n ...(options?.html && { html: options.html }),\n });\n console.log(`📤 [${APP_NAME}] Sent: \"${subject}\"`);\n}\n\n/** `attachment.content` must be base64-encoded (use `btoa()`). */\nexport async function sendWithAttachment(\n subject: string,\n body: string,\n attachment: { content: string; filename: string; type?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n attachments: [{\n content: attachment.content,\n filename: attachment.filename,\n type: attachment.type ?? \"application/octet-stream\",\n disposition: \"attachment\",\n }],\n });\n console.log(\n `📤 [${APP_NAME}] Sent with attachment: \"${attachment.filename}\"`,\n );\n}\n",[],[247],"e9ede3b4-4f02-11f1-8b31-ee650bb23af1","deno.json","86adc21c-4951-11f1-b797-42b51c65c3df",225,["D",1778700935796],3,"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"fmt\": {\n \"lineWidth\": 100\n },\n \"lint\": {\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\",\n \"no-external-import\",\n \"no-import-prefix\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"unstable\": [\"temporal\", \"worker-options\", \"sloppy-imports\", \"node-globals\"]\n}\n",[],[257],"0a74464d-228b-4071-9a89-a17e86f0c8ff","cron.ts","aa651980-48c5-11f1-bfb8-42b51c65c3df",344,["D",1788140103018],"interval","// cron.ts — Cron service: pulse (every run) + daily (UTC-hour window).\n// Schedule is set in the Val Town UI via a cron expression. Free tier: ≥ 15 min.\n// Tasks are intentionally idempotent. Val Town fires each tick once; concurrent\n// cold-starts are rare but possible on Pro — design tasks to tolerate it.\n\nimport { APP_NAME, DEMO_DATA_RETENTION_HOURS, env } from \"./backend/shared.ts\";\nimport { logCronRun, pruneOldEmails, pruneOldReminders, pruneOldVisits } from \"./backend/db.ts\";\n\nexport default async function (\n interval: { lastRunAt: Date | undefined },\n): Promise {\n const now = new Date();\n await pulse(now);\n await daily(now, interval.lastRunAt);\n}\n\n// ── Pulse — runs on every cron tick ───────────────────────────────────────────\n// Good for health-checks, polling an external feed, draining a work queue.\n// Set the Val Town cron to your desired cadence (UI → val → Cron → expression).\n\nasync function pulse(now: Date): Promise {\n console.log(`⚡ [${APP_NAME}] pulse ${now.toISOString()}`);\n await logCronRun(\"pulse\", `hello at ${now.toISOString()}`);\n // Demo data (Reminders, Email inbox) is wiped on a rolling window — see\n // backend/shared.ts's DEMO_DATA_RETENTION_HOURS and the README's demo notice.\n await pruneOldReminders(DEMO_DATA_RETENTION_HOURS);\n await pruneOldEmails(DEMO_DATA_RETENTION_HOURS);\n // TODO: replace with your own high-frequency task\n // await fetch(\"https://api.example.com/feed\");\n}\n\n// ── Daily — runs once per day in a UTC-hour window ────────────────────────────\n// Uses Val Town's lastRunAt to run only on the first tick inside the target hour.\n// Env: DAILY_HOUR_UTC — which UTC hour to run (0-23, default \"2\").\n\nasync function daily(now: Date, lastRunAt: Date | undefined): Promise {\n const targetHour = Number(env(\"DAILY_HOUR_UTC\", \"2\"));\n if (!shouldRunDaily(now, lastRunAt, targetHour)) return;\n\n console.log(`🔧 [${APP_NAME}] daily ${now.toISOString()}`);\n await pruneOldVisits(30);\n await logCronRun(\"daily\", `pruned visits older than 30 days`);\n console.log(`✅ [${APP_NAME}] daily done`);\n}\n\nfunction shouldRunDaily(\n now: Date,\n lastRunAt: Date | undefined,\n targetHour: number,\n): boolean {\n if (now.getUTCHours() !== targetHour) return false;\n const target = new Date(Date.UTC(\n now.getUTCFullYear(),\n now.getUTCMonth(),\n now.getUTCDate(),\n targetHour,\n ));\n return !lastRunAt || lastRunAt < target;\n}\n",[],[266],"3d8b63af-625e-401b-a675-b02284a05ddf","README.md","aabf7b64-48c5-11f1-9920-42b51c65c3df",347,["D",1788140102864],12,"# Val Town Quickstart\n\nA live, forkable full-stack Val Town starter — disguised as a working app. Sign in, add a reminder\nto the shared list, email its inbox and watch AI triage it as spam or not. Then fork it and swap in\nyour own idea. Sized for a solo project or a family's shared tools (<10 people), not an enterprise\nplatform.\n\n**Try it live, then fork:** open this App, click **Fork this App** on the home page. `vtx new` (see\nbelow) is for the CLI-first workflow inside this monorepo; forking on val.town works standalone too.\n\nAll demo data (the shared Reminders list, the AI email inbox) is public and is **permanently deleted\n24 hours after creation** — see `backend/db.ts`'s `pruneOld*` functions and `cron.ts`. Don't put\nanything sensitive in it.\n\nThe UI is built on [Astryx](https://astryx.atmeta.com), Meta's open-source React + StyleX design\nsystem. See [`_specs/astryx-template.md`](../../_specs/astryx-template.md) for the migration\nhistory, version pins, and the Deno SSR workarounds.\n\n`_template` is excluded from main-branch deployment because its directory starts with `_`.\n\nSince every Val Town HTTP val is browsable source, the deployed copy of this App is readable at\n`https://www.val.town/x///code/` — e.g.\n`https://www.val.town/x/pikachu/Val-Town-Quickstart/code/backend/auth.ts`. In-app \"view source\" and\n\"Fork\" links use this same pattern (see `VAL_TOWN_USERNAME` below).\n\n---\n\n## What it demos\n\n| Page | What you'll see |\n| ------------ | -------------------------------------------------------------------------------------------------------- |\n| `/` (Home) | Demo-first landing: fork CTA, live-demo cards, then the building blocks |\n| `/reminders` | **Flagship demo.** Shared list any signed-in user can add to / check off / delete |\n| `/email` | **AI demo.** Your App's real inbound address; a free GPT-mini model triages spam and summarises the rest |\n| `/anatomy` | Block diagram of Val Town's infra layer, this App's routing, and its core stack |\n| `/http` | HTTP routes and live request demos |\n| `/sqlite` | Visit log and admin controls |\n| `/cron` | Scheduled task history — this is what wipes demo data every 24h |\n| `/blob` | Sign-in-gated Blob read/write/list demo, keys namespaced per user |\n| `/ui` | Astryx theming explainer + component showcase |\n\n## Create Your Own Fork\n\n**On val.town:** open the deployed App → **Fork this App** on the home page → rename → done.\n\n**Inside this monorepo**, from any directory after sourcing the uApps shell plugin:\n\n```bash\nvtx new my-app\ncd vals/my-app\nvtx status\nvtx push --dry-run\nvtx push\nvtx url\n```\n\n`vtx new` copies the template, replaces the application name and account-scoped Blob prefix, writes\nthe new `val.yml` name, and links the new remote val. Existing destinations are refused.\n\n## Application Shape\n\nThe HTTP entry wraps the app in Val Town OAuth, routes `/api/*` through typed auth boundaries, and\nrenders the selected SSR page for every other path.\n\nAPI routes:\n\n| Method | Path | Access |\n| ------ | ----------------------- | ---------------------- |\n| `GET` | `/api/health` | Public |\n| `GET` | `/api/me` | Public session context |\n| `GET` | `/api/visits` | Public |\n| `POST` | `/api/prune-visits` | Admin |\n| `GET` | `/api/cron-runs` | Public |\n| `GET` | `/api/reminders` | Public read |\n| `POST` | `/api/reminders` | Signed-in |\n| `POST` | `/api/reminders/done` | Signed-in |\n| `POST` | `/api/reminders/delete` | Signed-in |\n| `GET` | `/api/emails` | Public read |\n| `GET` | `/api/blob-keys` | Signed-in, per-user |\n| `POST` | `/api/blob-write` | Signed-in, per-user |\n| `GET` | `/api/blob-read` | Signed-in, per-user |\n| `GET` | `/api/admin/users` | Super-admin |\n| `POST` | `/api/admin/set-admin` | Super-admin |\n\n\"Signed-in\" means any authenticated Val Town user — see `backend/auth.ts`'s `getAuthedUc` — not just\nadmins. This App is deliberately open: it's a shared demo, not a private tool.\n\n## Runtime Configuration\n\nSet these in the created val's Val Town environment UI, never in Git or GitHub Actions:\n\n| Variable | Kind | Purpose |\n| ------------------- | -------- | -------------------------------------------------------------------------------------- |\n| `APP_NAME` | Optional | Display name override |\n| `VAL_TOWN_USERNAME` | Optional | Your Val Town username — powers \"view source\"/Fork links and the inbound email address |\n| `DAILY_HOUR_UTC` | Optional | Daily task hour, `0`–`23` UTC |\n| `AUTH_SUPER_ADMINS` | Optional | Comma-separated Val Town usernames |\n\nNo API key is needed for the AI email triage — `backend/ai.ts` uses Val Town's free-tier\n`ValTownOpenAI` proxy.\n\nThe repository-level `VAL_TOWN_API_KEY` secret is only for CI deployment. See the root\n[`README.md`](../../README.md#cicd).\n\n## Trigger Contract\n\n`val.yml.files` declares the intended remote types:\n\n```yaml\nfiles:\n index.http.ts: http\n cron.ts: interval\n email.ts: email\n```\n\nRun `vtx types` after linking. Use `vtx apply-types` only when deliberately repairing remote trigger\nmetadata.\n\n## Architecture\n\n- `index.http.ts` — HTTP composition root: per-route SSR page serving, `GET /theme` (zero-JS mode\n switch), and the API route table.\n- `backend/auth.ts` — OAuth context and role enforcement (`getUc`/`getAuthedUc`/`getAdminUc`/\n `getSuperAdminUc`). Auth types use `Cxt` (e.g. `UserCxt`, `RouteCxt`) — the more common short form\n for \"context\" — not `Ctx`.\n- `backend/handlers.ts` — focused API handlers, including Reminders CRUD and the email inbox list.\n- `backend/db.ts` — retryable migration, visits, Cron runs, users, Reminders, and the inbound email\n log — the latter two carry a 24h retention window baked into every query.\n- `backend/ai.ts` — spam/summary triage via Val Town's free `ValTownOpenAI` proxy, using Structured\n Outputs so the response is guaranteed valid JSON.\n- `backend/storage.ts` — val-namespaced account Blob access, with per-user key sub-prefixing.\n- `frontend/app.tsx` — React SSR composition root; dispatches one page per request via a `PAGES` map\n (no client-side router — navigation is real ``).\n- `frontend/astryx/` — pinned Astryx component barrel (`components.ts`), the RAF/CAF SSR shim\n (`ssr-shims.ts`), and the side-nav/theme-form shell (`shell.tsx`).\n- `frontend/pages/` — one file per route, composed from Astryx components. `home.tsx` leads with the\n live demos and a Fork CTA; `page-anatomy.tsx` is the code deep-dive for visitors who want it.\n- `frontend/pages/kit.tsx` — shared page pieces: `SourceLink`/`SourceLinkList` (\"view source\") and\n `ForkButton` — both degrade gracefully when `VAL_TOWN_USERNAME` is unset.\n- `frontend/client.ts` — non-hydrated demo API wiring only (no router, no theme JS — both are\n server-driven). Dynamic table rows (Reminders, the email inbox) are cloned from a hidden, real\n Astryx-rendered `

History · handlers.ts