[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_393":394,"_395":396},"routes/_app.x.$handle.$name",{"_102":101,"_33":47,"_111":92,"_28":112,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_20":-5,"_123":-5,"_124":-5,"_125":27,"_126":127,"_128":25,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_45":46,"_33":47,"_40":48,"_49":-5,"_50":27,"_51":52,"_53":52,"_54":55,"_56":57,"_18":58,"_59":60,"_61":25,"_62":-5,"_63":-5,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":27},"version",105,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":27,"_28":29,"_30":29},"file",{"_31":32,"_33":34,"_35":36,"_37":39,"_40":41,"_42":14,"_43":44,"_24":27},"previous",{"_31":32,"_33":34,"_35":36,"_37":38},"deleted",true,"deletedHere",false,"path","frontend/ui/data.ts","latestPath","fileId","48c092be-4b21-11f1-81f8-ee650bb23af1","name","data.ts","fileType","script","content","// data.ts — Static copy for the landing page.\n\nimport type { FeatureItem, RouteItem } from \"./types.ts\";\n\nexport const routes: RouteItem[] = [\n { method: \"GET\", path: \"/\", purpose: \"Preact SSR explainer UI\" },\n { method: \"GET\", path: \"/api/health\", purpose: \"Runtime health check\" },\n { method: \"GET\", path: \"/api/visits\", purpose: \"SQLite visit counter\" },\n { method: \"POST\", path: \"/api/echo\", purpose: \"JSON request smoke test\" },\n {\n method: \"POST\",\n path: \"/api/email-test\",\n purpose: \"Outbound email smoke test\",\n },\n {\n method: \"POST\",\n path: \"/api/email-test/inbound\",\n purpose: \"Inbound simulation\",\n },\n {\n method: \"POST\",\n path: \"/api/openai-test\",\n purpose: \"Val Town OpenAI proxy\",\n },\n];\n\nexport const features: FeatureItem[] = [\n {\n title: \"HTTP\",\n icon: \"🌐\",\n body: [\n \"index.http.ts routes API calls and renders this page.\",\n \"Root HTML is server-rendered by frontend/app.tsx.\",\n ],\n },\n {\n title: \"Frontend\",\n icon: \"🎨\",\n body: [\n \"Preact produces semantic HTML; Oat provides class-light styling.\",\n \"frontend/client.ts inlines form and theme enhancements.\",\n ],\n },\n {\n title: \"Storage\",\n icon: \"🗄️\",\n body: [\n \"SQLite tracks visits and cron timestamps.\",\n \"Blob helpers show namespaced account-scoped storage.\",\n ],\n },\n {\n title: \"Triggers\",\n icon: \"⚡\",\n body: [\n \"cron.ts runs interval work; email.ts handles inbound mail.\",\n \"New file types are inferred from path words: http, cron, email.\",\n ],\n },\n];\n","// data.ts — Declarative page copy for the template docs.\n\nimport type { ModuleDoc, RouteItem, StatItem } from \"./types.ts\";\n\nexport const stats: StatItem[] = [\n {\n title: \"HTTP files\",\n value: \"1\",\n note: \"Only index.http.ts is public HTTP surface.\",\n },\n {\n title: \"Visits\",\n value: \"…\",\n note: \"Loaded from SQLite via /api/visits.\",\n id: \"visit-count\",\n },\n {\n title: \"Frontend\",\n value: \"Preact\",\n note: \"Server-rendered HTML with Oat CSS.\",\n },\n {\n title: \"Triggers\",\n value: \"3\",\n note: \"HTTP, Cron, and Email examples.\",\n },\n];\n\nexport const routes: RouteItem[] = [\n { method: \"GET\", path: \"/\", purpose: \"Preact docs UI\" },\n { method: \"GET\", path: \"/api/health\", purpose: \"Runtime health check\" },\n { method: \"GET\", path: \"/api/visits\", purpose: \"SQLite visit counter\" },\n];\n\nexport const moduleDocs: ModuleDoc[] = [\n {\n key: \"http\",\n title: \"HTTP trigger\",\n badge: \"public edge\",\n summary:\n \"index.http.ts is the only HTTP file. It renders Preact and exposes a tiny JSON API.\",\n files: [\"index.http.ts\", \"backend/api-utils.ts\"],\n points: [\n \"Val Town HTTP endpoints are public even when source is private.\",\n \"Root requests render frontend/app.tsx and record a SQLite visit.\",\n \"API routes stay boring: /api/health and /api/visits only.\",\n \"Add auth before adding write, private-data, or expensive routes.\",\n ],\n },\n {\n key: \"preact\",\n title: \"Preact UI\",\n badge: \"SSR\",\n summary:\n \"The webapp is the detailed documentation surface for this template.\",\n files: [\n \"frontend/app.tsx\",\n \"frontend/ui/sections.tsx\",\n \"frontend/ui/data.ts\",\n \"frontend/ui/styles.ts\",\n \"frontend/client.ts\",\n ],\n points: [\n \"Every .tsx file with JSX starts with @jsxImportSource.\",\n \"frontend/ui/data.ts owns copy; components map that data declaratively.\",\n \"Oat CSS supplies defaults; styles.ts adds one small theme layer.\",\n \"client.ts only enhances theme, docs selection, and visit count.\",\n ],\n },\n {\n key: \"sqlite\",\n title: \"SQLite\",\n badge: \"state\",\n summary: \"Per-val SQLite stores visit rows and cron metadata.\",\n files: [\"backend/db.ts\"],\n points: [\n \"Use https://esm.town/v/std/sqlite/main.ts for the val-scoped database.\",\n \"Migrations run lazily so local/off-platform rendering can still work.\",\n \"template_visits powers the visit counter.\",\n \"template_meta stores cron last-run timestamps.\",\n ],\n },\n {\n key: \"cron\",\n title: \"Cron trigger\",\n badge: \"scheduled\",\n summary:\n \"cron.ts demonstrates small scheduled tasks gated by env-configured intervals.\",\n files: [\"cron.ts\", \"backend/shared.ts\", \"backend/db.ts\"],\n points: [\n \"Val Town cron minimum interval is 15 minutes and runs in UTC.\",\n \"CRON_PULSE_INTERVAL defaults to 5m; set DISABLED to skip.\",\n \"CRON_MAINTENANCE_INTERVAL defaults to 1d and prunes old visits.\",\n \"shouldRun() records timestamps in SQLite before work begins.\",\n ],\n },\n {\n key: \"email\",\n title: \"Email trigger\",\n badge: \"inbound/outbound\",\n summary:\n \"email.ts handles inbound mail and exports simple outbound helpers.\",\n files: [\"email.ts\", \"backend/shared.ts\"],\n points: [\n \"Inbound address shape: .@valtown.email.\",\n \"Free plans send outbound mail to yourself; Pro can send to anyone.\",\n \"Attachments are File objects; save them to Blob if needed.\",\n \"Do not expose email-sending HTTP routes without auth.\",\n ],\n },\n {\n key: \"blob\",\n title: \"Blob storage\",\n badge: \"account scoped\",\n summary:\n \"backend/storage.ts wraps Val Town Blob for JSON, text, list, and delete.\",\n files: [\"backend/storage.ts\"],\n points: [\n \"Blob is shared across all vals in the account.\",\n \"Namespace keys to avoid collisions, e.g. template/config.json.\",\n \"Use Blob for uploads, cached config, and cross-val state.\",\n \"Keep secrets in Val Town environment variables, not Blob.\",\n ],\n },\n {\n key: \"metadata\",\n title: \"File metadata\",\n badge: \"vt gotcha\",\n summary:\n \"Val Town trigger type is metadata; filenames only help when creating new remote files.\",\n files: [\"val.yml\", \"deno.json\"],\n points: [\n \"New files containing http, cron, or email infer HTTP, interval, or email type.\",\n \"Existing remote files keep sticky metadata; verify with vt types.\",\n \"val.yml files: records the intended trigger contract for this repo.\",\n \"deno.json carries Val Town types and must not fake external import maps.\",\n ],\n },\n];\n","createdAt",["D",1778319600727],"branchVersion","branchId","5a0a7ac8-4895-11f1-80ec-42b51c65c3df","id","5a09ae54-4895-11f1-80ec-42b51c65c3df","Quickstart-Full-Stack",["D",1777994172310],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","An elegant template for an elegant single-person full stack app.","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/3ed9401e-3850-4a69-dec2-1bdd924c0900/square512?exp=1789585199&sig=6897849355d2af74c70b25315ed11ca1e0717f9e94b7aed9fb15c190afac9af1","173e7424-8658-428f-a3bc-ae4faeaabd1c","pinnedFileId","e1c705aa-4b18-11f1-b4ae-ee650bb23af1","pinPreview","pinMigrated","screenshotVersion","likeCount",1,"orgId","019df771-9af8-7238-99a4-541e39355038","tursoName","5a09ae54489511f180ec42b51c65c3df","tursoHostname","5a09ae54489511f180ec42b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789511441255],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_102":101,"_110":106},"org",{"_102":101,"_103":104,"_105":106,"_18":58,"_107":108,"_109":27},"branch",{"_13":91,"_33":92,"_45":44,"_93":46,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":47,"_100":101},"isOwned",384,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","pikachu","handle","displayName","Minion","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/22c8ba37-42c8-4af4-8daf-8cdd2f5f1800/square512?exp=1789585199&sig=216f8e9dd2d9fbbd91dbf6eb857f4e834c1387b2668bd9f5bafa65396f8cfad4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_45":46,"_33":47,"_40":388,"_49":-5,"_50":27,"_51":52,"_53":52,"_54":55,"_56":57,"_18":58,"_59":60,"_61":25,"_62":-5,"_63":-5,"_64":65,"_66":67,"_68":69,"_70":71,"_72":389,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":390,"_86":391,"_88":392,"_90":27},"tree",[233,239,248,249,250,251,252,253,254,255],"files",[233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255],"counts",{"_223":159,"_224":65,"_225":65,"_226":227,"_228":229},"contents",[133,134,135,136,137,138,139,140,141,142],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_45":217,"_33":218,"_31":219,"_146":-5,"_43":44,"_42":220,"_148":25,"_40":221,"_13":159,"_35":215,"_37":-5,"_24":27,"_152":-5,"_28":222},{"_45":210,"_33":211,"_31":212,"_146":-5,"_43":44,"_42":213,"_148":25,"_40":214,"_13":159,"_35":215,"_37":-5,"_24":27,"_152":-5,"_28":216},{"_45":203,"_33":204,"_31":205,"_146":-5,"_43":44,"_42":206,"_148":27,"_40":207,"_13":174,"_35":20,"_37":208,"_24":27,"_152":-5,"_28":209},{"_45":194,"_33":195,"_31":196,"_146":-5,"_43":44,"_42":197,"_148":27,"_40":198,"_13":199,"_35":200,"_37":201,"_24":27,"_152":-5,"_28":202},{"_45":187,"_33":188,"_31":189,"_146":-5,"_43":44,"_42":190,"_148":27,"_40":191,"_13":150,"_35":20,"_37":192,"_24":27,"_152":-5,"_28":193},{"_45":178,"_33":179,"_31":180,"_146":-5,"_43":44,"_42":181,"_148":27,"_40":182,"_13":183,"_35":184,"_37":185,"_24":27,"_152":-5,"_28":186},{"_45":170,"_33":171,"_31":60,"_146":-5,"_43":44,"_42":172,"_148":27,"_40":173,"_13":174,"_35":160,"_37":175,"_24":27,"_152":176,"_28":177},{"_45":163,"_33":164,"_31":165,"_146":-5,"_43":44,"_42":166,"_148":27,"_40":167,"_13":159,"_35":160,"_37":168,"_24":27,"_152":-5,"_28":169},{"_45":154,"_33":155,"_31":156,"_146":-5,"_43":44,"_42":157,"_148":27,"_40":158,"_13":159,"_35":160,"_37":161,"_24":27,"_152":-5,"_28":162},{"_45":143,"_33":144,"_31":145,"_146":-5,"_43":44,"_42":147,"_148":27,"_40":149,"_13":150,"_35":20,"_37":151,"_24":27,"_152":-5,"_28":153},"492a34d0-4b21-11f1-b54f-ee650bb23af1","val.yml","aa729402-48c5-11f1-87ca-42b51c65c3df","parentId",94,"latest",["D",1778274175831],2,"name: \"sample-val\"\npublic: true\nfiles:\n index.http.ts: http\n cron.ts: interval\n email.ts: email\n # Optional examples — uncomment after pushing them if they become canonical.\n # test.http.ts: http\n # preact.http.tsx: http\n","label",[144],"4923e8be-4b21-11f1-861e-ee650bb23af1","test.http.ts","4923e99a-4b21-11f1-861e-ee650bb23af1",93,["D",1778274175790],0,"http","// test.http.ts — Minimal HTTP trigger used to verify vt's new-file type inference.\n\nexport default function handler(req: Request): Response {\n const url = new URL(req.url);\n return Response.json({\n ok: true,\n trigger: \"http\",\n file: \"test.http.ts\",\n path: url.pathname,\n method: req.method,\n timestamp: new Date().toISOString(),\n });\n}\n",[155],"48f6f2a0-4b21-11f1-81f8-ee650bb23af1","preact.http.tsx","48f6f37c-4b21-11f1-81f8-ee650bb23af1",89,["D",1778274175528],"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// preact.http.tsx — Preact SSR example for Val Town HTTP triggers.\n\nimport { render } from \"https://esm.sh/preact-render-to-string@6.6.7?deps=preact@10.29.1\";\n\ninterface AppProps {\n path: string;\n timestamp: string;\n}\n\nfunction App({ path, timestamp }: AppProps) {\n return (\n \n \n \n \n Preact on Val Town\n \n \n \n

⚡ Preact HTTP Trigger

This page was rendered server-side by Preact on Val Town.

\n Path: {path}\n
\n Rendered: {timestamp}\n

\n \n \n );\n}\n\nexport default function handler(req: Request): Response {\n const url = new URL(req.url);\n const html = \"\" + render(\n ,\n );\n\n return new Response(html, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n}\n",[164],"499c949e-4b21-11f1-8ab3-ee650bb23af1","index.http.ts",99,["D",1778274176601],5,"// index.http.ts — HTTP handler. Renders Preact HTML and JSON API.\n// Docs: https://docs.val.town/vals/http\n\nimport { getRecentVisits, getVisitCount, recordVisit } from \"./backend/db.ts\";\nimport {\n assertTestAccess,\n jsonError,\n jsonOk,\n readJsonObject,\n readJsonOrError,\n stringField,\n testEndpointInfo,\n} from \"./backend/api-utils.ts\";\nimport { runOpenAiSmokeTest } from \"./backend/openai-test.ts\";\nimport { APP_NAME, env } from \"./backend/shared.ts\";\nimport { sendTestNotification, simulateInboundEmail } from \"./email.ts\";\nimport { renderHomePage } from \"./frontend/app.tsx\";\n\n// -----------------------------------------------------------------------------\n// entry\n// -----------------------------------------------------------------------------\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const { pathname } = url;\n\n if (pathname === \"/\" || pathname === \"\") return await landingPage();\n\n return await routeApi(req, url);\n}\n\nasync function landingPage(): Promise {\n try {\n await recordVisit(\"/\");\n } catch {\n // SQLite might not be available locally.\n }\n const html = renderHomePage({\n appName: APP_NAME,\n emailEnabled: env(\"EMAIL_TEST_ENABLED\").toLowerCase() === \"true\",\n openAiEnabled: env(\"OPENAI_TEST_ENABLED\").toLowerCase() === \"true\",\n hasTestSecret: env(\"TEMPLATE_TEST_SECRET\") !== \"\",\n openAiModel: env(\"OPENAI_TEST_MODEL\", \"gpt-5-nano\"),\n renderedAt: new Date().toISOString(),\n });\n return new Response(html, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n}\n\n// -----------------------------------------------------------------------------\n// api routes\n// -----------------------------------------------------------------------------\n\nasync function routeApi(req: Request, url: URL): Promise {\n const route = `${req.method} ${url.pathname}`;\n if (route === \"GET /api/health\") return healthCheck();\n if (route === \"GET /api/visits\") return await visits();\n if (route === \"POST /api/echo\") return await echo(req);\n if (route === \"GET /api/email-test\") return emailTestInfo();\n if (route === \"POST /api/email-test\") return await emailTest(req);\n if (route === \"POST /api/email-test/inbound\") {\n return await inboundEmailTest(req);\n }\n if (route === \"GET /api/openai-test\") return openAiTestInfo();\n if (route === \"POST /api/openai-test\") return await openAiTest(req);\n return jsonError(`Not found: ${url.pathname}`, 404);\n}\n\nfunction healthCheck(): Response {\n return jsonOk({\n name: APP_NAME,\n timestamp: new Date().toISOString(),\n runtime: `Deno ${Deno.version?.deno || \"unknown\"}`,\n });\n}\n\nasync function visits(): Promise {\n try {\n const visits = await getRecentVisits(20);\n const total = await getVisitCount();\n return Response.json({ total, visits });\n } catch {\n return jsonError(\"SQLite not available (running off-platform?)\", 503);\n }\n}\n\nasync function echo(req: Request): Promise {\n try {\n const body = await readJsonObject(req);\n return jsonOk({ echo: body, receivedAt: new Date().toISOString() });\n } catch {\n return jsonError(\"Invalid JSON object body\", 400);\n }\n}\n\n// -----------------------------------------------------------------------------\n// test routes\n// -----------------------------------------------------------------------------\n\nfunction emailTestInfo(): Response {\n return jsonOk({\n ...testEndpointInfo(\"EMAIL_TEST_ENABLED\"),\n send: \"POST /api/email-test\",\n inboundSimulation: \"POST /api/email-test/inbound\",\n });\n}\n\nasync function emailTest(req: Request): Promise {\n const denied = assertTestAccess(req, \"EMAIL_TEST_ENABLED\", \"Email test\");\n if (denied) return denied;\n const { body, error } = await readJsonOrError(req);\n if (error) return error;\n const result = await sendTestNotification(body);\n return jsonOk({ result });\n}\n\nasync function inboundEmailTest(req: Request): Promise {\n const denied = assertTestAccess(\n req,\n \"EMAIL_TEST_ENABLED\",\n \"Inbound email test\",\n );\n if (denied) return denied;\n const { body, error } = await readJsonOrError(req);\n if (error) return error;\n const result = await simulateInboundEmail(body);\n return jsonOk({ result });\n}\n\nfunction openAiTestInfo(): Response {\n return jsonOk({\n ...testEndpointInfo(\"OPENAI_TEST_ENABLED\"),\n run: \"POST /api/openai-test\",\n modelEnv: \"OPENAI_TEST_MODEL (default: gpt-5-nano)\",\n });\n}\n\nasync function openAiTest(req: Request): Promise {\n const denied = assertTestAccess(req, \"OPENAI_TEST_ENABLED\", \"OpenAI test\");\n if (denied) return denied;\n const { body, error } = await readJsonOrError(req);\n if (error) return error;\n const prompt = stringField(body, \"prompt\", \"Say hello from the template.\");\n return jsonOk({ result: await runOpenAiSmokeTest(prompt) });\n}\n","d-template",[171],"49400ea4-4b21-11f1-874d-ee650bb23af1","email.ts","aa7742d6-48c5-11f1-831b-42b51c65c3df",95,["D",1778274175988],7,"email","// email.ts — Inbound handler + outbound helpers. UI: + → EMAIL → address: .@valtown.email\n\nimport { email as sendEmail } from \"https://esm.town/v/std/email\";\nimport { APP_NAME, type Email } from \"./backend/shared.ts\";\nimport { type JsonObject, stringField } from \"./backend/api-utils.ts\";\n\nexport interface TestEmailResult {\n subject: string;\n text: string;\n toSelf: boolean;\n sentAt: string;\n}\n\nexport interface InboundEmailTestResult {\n from: string;\n subject: string;\n text: string;\n simulatedAt: string;\n}\n\n// -----------------------------------------------------------------------------\n// inbound\n// -----------------------------------------------------------------------------\n\nexport default async function emailHandler(inbound: Email): Promise {\n console.log(\n `📧 [${APP_NAME}] From: ${inbound.from} Subject: ${\n inbound.subject ?? \"(none)\"\n }`,\n );\n console.log(` Body: ${inbound.text?.slice(0, 200) ?? \"(empty)\"}...`);\n\n for (const file of inbound.attachments) {\n console.log(` 📎 ${file.name} (${file.type}, ${file.size}b)`);\n // await blob.set(`emails/${file.name}`, await file.arrayBuffer());\n }\n\n // await sendNotification(`Re: ${inbound.subject}`, \"Got your message!\");\n}\n\n// -----------------------------------------------------------------------------\n// outbound\n// -----------------------------------------------------------------------------\n// Free plan: sends to yourself only. Pro: send to anyone + cc/bcc.\n\nexport async function sendNotification(\n subject: string,\n body: string,\n options?: { to?: string; html?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n ...(options?.to && { to: options.to }),\n ...(options?.html && { html: options.html }),\n });\n console.log(`📤 [${APP_NAME}] Sent: \"${subject}\"`);\n}\n\n/** `attachment.content` must be base64-encoded (use `btoa()`). */\nexport async function sendWithAttachment(\n subject: string,\n body: string,\n attachment: { content: string; filename: string; type?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n attachments: [{\n content: attachment.content,\n filename: attachment.filename,\n type: attachment.type ?? \"application/octet-stream\",\n disposition: \"attachment\",\n }],\n });\n console.log(\n `📤 [${APP_NAME}] Sent with attachment: \"${attachment.filename}\"`,\n );\n}\n\n// -----------------------------------------------------------------------------\n// test helpers\n// -----------------------------------------------------------------------------\n\nexport async function sendTestNotification(\n input: JsonObject,\n): Promise {\n const subject = stringField(input, \"subject\", `Test email from ${APP_NAME}`);\n const text = stringField(\n input,\n \"text\",\n \"This is a Val Town email smoke test.\",\n );\n const to = stringField(input, \"to\");\n const html = stringField(input, \"html\");\n\n await sendNotification(subject, text, {\n ...(to && { to }),\n ...(html && { html }),\n });\n return { subject, text, toSelf: !to, sentAt: new Date().toISOString() };\n}\n\nexport async function simulateInboundEmail(\n input: JsonObject,\n): Promise {\n const inbound = makeInboundEmail(input);\n await emailHandler(inbound);\n return {\n from: inbound.from,\n subject: inbound.subject ?? \"\",\n text: inbound.text ?? \"\",\n simulatedAt: new Date().toISOString(),\n };\n}\n\nfunction makeInboundEmail(input: JsonObject): Email {\n return {\n from: stringField(input, \"from\", \"tester@example.com\"),\n to: [stringField(input, \"to\", \"template@valtown.email\")],\n subject: stringField(input, \"subject\", `Inbound test for ${APP_NAME}`),\n text: stringField(\n input,\n \"text\",\n \"This simulates an inbound Val Town email.\",\n ),\n html: stringField(input, \"html\"),\n attachments: [],\n headers: { \"x-template-test\": \"true\" },\n };\n}\n",[179],"a8e0a8b4-4b17-11f1-9fc9-ee650bb23af1","deno.json","86adc21c-4951-11f1-b797-42b51c65c3df",55,["D",1778270041449],"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\",\n \"no-external-import\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"unstable\": [\"temporal\", \"worker-options\", \"sloppy-imports\", \"node-globals\"]\n}\n",[188],"a92b239e-4b17-11f1-a377-ee650bb23af1","cron.ts","aa651980-48c5-11f1-bfb8-42b51c65c3df",60,["D",1778270041959],4,"interval","// cron.ts — Two tasks (pulse + maintenance), one trigger. UI: + → CRON → \"every 5 minutes\"\n// Env: CRON_PULSE_INTERVAL (\"5m\"/\"1h\"/\"DISABLED\"), CRON_MAINTENANCE_INTERVAL (\"1h\"/\"1d\"/\"DISABLED\")\n\nimport { APP_NAME, env, parseDuration } from \"./backend/shared.ts\";\nimport { getMetaValue, pruneOldVisits, setMetaValue } from \"./backend/db.ts\";\n\n// ── Gate: true if intervalMs has elapsed since last run; records now in SQLite ──\n\nasync function shouldRun(\n metaKey: string,\n intervalMs: number,\n now: Date,\n): Promise {\n const lastStr = await getMetaValue(metaKey).catch(() => null);\n if (lastStr) {\n const elapsed = now.getTime() - new Date(lastStr).getTime();\n if (elapsed < intervalMs) return false;\n }\n await setMetaValue(metaKey, now.toISOString());\n return true;\n}\n\n// ── Entry point ───────────────────────────────────────────────────────────────\n\nexport default async function (\n _interval: { lastRunAt: Date | undefined },\n): Promise {\n const now = new Date();\n await pulse(now);\n await maintenance(now);\n}\n\n// ── Pulse — polling, health-checks, work-queues ───────────────────────────────\n\nasync function pulse(now: Date): Promise {\n const raw = env(\"CRON_PULSE_INTERVAL\", \"5m\");\n if (raw.toUpperCase() === \"DISABLED\") return;\n const intervalMs = parseDuration(raw) ?? parseDuration(\"5m\")!;\n if (!await shouldRun(\"cron_pulse_last_run\", intervalMs, now)) return;\n\n console.log(`⚡ [${APP_NAME}] Pulse (${raw})`);\n // TODO: add your polling/health-check logic here\n // const res = await fetch(\"https://api.example.com/feed\");\n}\n\n// ── Maintenance — prune, archive, digest ─────────────────────────────────────\n\nasync function maintenance(now: Date): Promise {\n const raw = env(\"CRON_MAINTENANCE_INTERVAL\", \"1d\");\n if (raw.toUpperCase() === \"DISABLED\") return;\n const intervalMs = parseDuration(raw) ?? parseDuration(\"1d\")!;\n if (!await shouldRun(\"cron_maintenance_last_run\", intervalMs, now)) return;\n\n console.log(`🔧 [${APP_NAME}] Maintenance (${raw})`);\n await pruneOldVisits(30);\n console.log(`✅ [${APP_NAME}] Maintenance done`);\n}\n",[195],"392ad19a-4b7e-11f1-8585-ee650bb23af1","README.md","aabf7b64-48c5-11f1-9920-42b51c65c3df",101,["D",1778314092196],"# Val Town Template\n\nStarter val with Preact SSR, Oat CSS, HTTP, Cron, Email, SQLite, Blob, and Val\nTown OpenAI. Fork it, delete what you don't need.\n\n---\n\n## High-Level Architecture\n\n```mermaid\ngraph TB\n subgraph VAL[\"val: sample-val\"]\n direction TB\n SHARED[\"backend/shared.ts
constants · env() · parseDuration()\"]\n\n subgraph TRIGGERS[\"Triggers\"]\n HTTP[\"index.http.ts
🟦 HTTP\"]\n CRON[\"cron.ts
🟪 Cron\"]\n EMAIL[\"email.ts
🟧 Email\"]\n end\n\n subgraph STORAGE[\"Storage\"]\n DB[\"backend/db.ts
SQLite\"]\n BLOB[\"backend/storage.ts
Blob (R2)\"]\n end\n\n subgraph FRONTEND[\"Frontend\"]\n APP[\"frontend/app.tsx
Preact SSR shell\"]\n UI[\"frontend/ui/*
sections · forms · styles\"]\n CLIENT[\"frontend/client.ts
inline enhancement script\"]\n end\n end\n\n SHARED --> HTTP\n SHARED --> CRON\n SHARED --> EMAIL\n\n HTTP -->|\"renderHomePage()\"| APP\n APP --> UI\n APP --> CLIENT\n HTTP -->|\"recordVisit()\"| DB\n HTTP -->|\"queries\"| DB\n\n CRON -->|\"prune / meta\"| DB\n CRON -->|\"read/write\"| BLOB\n\n EMAIL -->|\"save attachments\"| BLOB\n\n USER[\"🌐 User / Browser\"] -->|\"GET /\"| HTTP\n USER -->|\"GET /api/*\"| HTTP\n SCHEDULER[\"⏰ Scheduler\"] -->|\"every 5m\"| CRON\n SENDER[\"📧 Email Sender\"] -->|\"inbound\"| EMAIL\n```\n\n---\n\n## Quick Start\n\n**1. Create a new val from this template**\n\n```bash\ncd /path/to/uApps\nvt create my-app\ncd vals/my-app\n```\n\n**2. Push it to Val Town**\n\n```bash\nvt push\n# or: vt watch (auto-push on save)\n```\n\n> **Important:** upstream `vt` only auto-detects trigger type when creating a\n> new remote file. Existing files keep their Val Town metadata. If a file was\n> created as `script`, renaming it to `index.http.ts` is not enough — create a\n> fresh HTTP file or use the Val Town UI `+` → `HTTP` flow.\n\n**3. Open it in your browser**\n\n```bash\nvt url # prints your live URL\n```\n\nVisit the URL → you should see the starter page with a visit counter.\n\n**4. Try the API**\n\n```\nGET /api/health → JSON health check\nGET /api/visits → visit history from SQLite\nGET /api/email-test → email test status\nGET /api/openai-test → OpenAI test status\nPOST /api/echo → echoes your JSON body back\n```\n\n---\n\n## HTTP Trigger (`index.http.ts`)\n\n```mermaid\nsequenceDiagram\n actor User\n participant HTTP as index.http.ts\n participant Frontend as frontend/\n participant DB as backend/db.ts\n\n User->>HTTP: GET /\n HTTP->>DB: recordVisit(\"/\")\n HTTP->>Frontend: renderHomePage()\n Frontend-->>User: Preact HTML + Oat CSS + inline JS\n\n User->>HTTP: GET /api/visits\n HTTP->>DB: getRecentVisits(20)\n HTTP->>DB: getVisitCount()\n DB-->>HTTP: rows\n HTTP-->>User: { total, visits }\n\n User->>HTTP: POST /api/echo\n HTTP-->>User: { echo: body, receivedAt }\n```\n\nRoute dispatch via `if/else` path matching — no framework needed:\n\n| Route | Method | What it does |\n| ------------------------- | ------ | ---------------------------------------- |\n| `/` | GET | Renders Preact SSR page, records visit |\n| `/api/health` | GET | JSON health check |\n| `/api/visits` | GET | Recent visits + total count from SQLite |\n| `/api/echo` | POST | Echoes request body back |\n| `/api/email-test` | GET | Shows email smoke-test enablement |\n| `/api/email-test` | POST | Sends outbound test email when enabled |\n| `/api/email-test/inbound` | POST | Simulates inbound email handler locally |\n| `/api/openai-test` | GET | Shows OpenAI smoke-test enablement |\n| `/api/openai-test` | POST | Calls Val Town `std/openai` when enabled |\n| `*` | any | 404 JSON |\n\n---\n\n## Preact + Oat UI\n\nThe main page is server-rendered Preact:\n\n| File | Purpose |\n| -------------------------- | --------------------------------------------------------- |\n| `frontend/app.tsx` | HTML shell, Oat CSS include, Preact render entry |\n| `frontend/ui/sections.tsx` | Hero, architecture, auth, routes, footer |\n| `frontend/ui/forms.tsx` | Email, inbound email, and OpenAI smoke-test forms |\n| `frontend/ui/data.ts` | Route and feature copy |\n| `frontend/ui/styles.ts` | Small custom layer on top of Oat |\n| `frontend/client.ts` | Inline theme toggle, visit counter, JSON form submissions |\n\nOat is included in the simplest documented way:\n\n```html\n\n```\n\nNo frontend build step. No hydration bundle. Preact renders the HTML on each\nrequest and inlines a tiny script from `frontend/client.ts` to progressively\nenhance forms. The HTTP handler does not expose the server-side `.tsx` UI\nmodules as public static assets.\n\n---\n\n## Trigger Metadata Gotcha\n\nVal Town stores trigger type as file metadata. For **new** `.ts`, `.tsx`, `.js`,\nor `.jsx` files, `vt` infers type by checking the full path:\n\n| Path contains | New remote type |\n| ------------- | --------------- |\n| `http` | `http` |\n| `cron` | `interval` |\n| `email` | `email` |\n| none | `script` |\n\nUse explicit trigger filenames:\n\n| File | Required Val Town type |\n| --------------- | ---------------------- |\n| `index.http.ts` | `http` |\n| `cron.ts` | `interval` |\n| `email.ts` | `email` |\n\nAvoid trigger words in helper paths. For example, `backend/http-utils.ts` would\nbecome an HTTP trigger if created remotely as a new file. This template uses\n`backend/api-utils.ts` instead.\n\nThis repo records that intent in `val.yml`:\n\n```yaml\nfiles:\n index.http.ts: http\n cron.ts: interval\n email.ts: email\n```\n\nThat block is a **repo-side contract**. Upstream `vt` does not automatically\napply it, but this repo's wrapper can audit and apply it:\n\n```bash\nvt types # read-only: compare val.yml → Val Town metadata\nvt apply-types # mutates existing remote files to match val.yml\n```\n\nUnder the hood, `vt apply-types` uses Val Town's generated SDK/API:\n`vals.files.update(..., { type: \"http\" })`. This is API-supported, but the\nupstream `vt push` command intentionally avoids touching existing metadata.\n\nIf Val Town shows `(script) index.http.ts`, the file is not an HTTP trigger even\nif the code is a valid `Request → Response` handler.\n\nPreact, React, Vue, and Solid are not Val Town trigger types. They are just UI\nlibraries. Use `.http.tsx` when a JSX file should be an HTTP endpoint.\n\n---\n\n## HTTP Examples\n\n### Minimal HTTP probe (`test.http.ts`)\n\n`test.http.ts` is a tiny JSON endpoint used to verify `vt` new-file inference.\nDry-run confirms it is created as HTTP:\n\n```txt\nA (http) test.http.ts\n```\n\n### Preact SSR (`preact.http.tsx`)\n\n`preact.http.tsx` shows server-side rendered Preact with Val Town HTTP triggers.\nVal Town's JSX docs require a TypeScript per-file pragma so the JSX runtime is\nknown. This pragma must be the first line in every `.tsx` module that contains\nJSX:\n\n```tsx\n/** @jsxImportSource https://esm.sh/preact@10.29.1 */\nimport { render } from \"https://esm.sh/preact-render-to-string@6.6.7?deps=preact@10.29.1\";\n```\n\nThe pragma configures JSX only. It does not create an HTTP trigger; `http` in\n`preact.http.tsx` is what lets `vt` infer the new file as HTTP.\n\nDry-run confirms it is created as HTTP:\n\n```txt\nA (http) preact.http.tsx\n```\n\nBoth examples type-check locally with:\n\n```bash\ndeno check --allow-import test.http.ts preact.http.tsx\n```\n\n---\n\n## Cron Trigger (`cron.ts`)\n\n```mermaid\nflowchart LR\n subgraph CRON[\"cron.ts — runs every 5 min\"]\n direction TB\n ENTRY[\"export default()\"] --> PULSE[\"pulse()\"]\n ENTRY --> MAINT[\"maintenance()\"]\n\n PULSE -->|\"shouldRun()\"| P_GATE{\"Interval elapsed?\"}\n P_GATE -->|\"yes\"| P_WORK[\"⚡ Pulse task
(polling / health-checks)\"]\n P_GATE -->|\"no\"| P_SKIP[\"skip\"]\n\n MAINT -->|\"shouldRun()\"| M_GATE{\"Interval elapsed?\"}\n M_GATE -->|\"yes\"| M_WORK[\"🔧 Maintenance
(prune old visits)\"]\n M_GATE -->|\"no\"| M_SKIP[\"skip\"]\n end\n\n P_WORK --> DB[(SQLite)]\n M_WORK --> DB\n```\n\nTwo independent tasks, one trigger. Each gates itself via `shouldRun()` which\nstores last-run timestamps in SQLite.\n\n| Task | Default interval | Env var to control |\n| ----------- | ---------------- | ---------------------------------------------------------- |\n| Pulse | Every 5 min | `CRON_PULSE_INTERVAL` (`\"5m\"`, `\"1h\"`, `\"DISABLED\"`) |\n| Maintenance | Every 1 day | `CRON_MAINTENANCE_INTERVAL` (`\"1d\"`, `\"6h\"`, `\"DISABLED\"`) |\n\n---\n\n## Email Trigger (`email.ts`)\n\n```mermaid\nflowchart TB\n INBOUND[\"📧 Inbound email
.@valtown.email\"] --> HANDLER[\"emailHandler()\"]\n HANDLER --> LOG[\"log subject + body\"]\n HANDLER --> ATTACH[\"process attachments\"]\n\n subgraph OUTBOUND[\"Outbound helpers\"]\n NOTIFY[\"sendNotification()\"]\n ATTACH_SEND[\"sendWithAttachment()\"]\n end\n\n HANDLER -.->|\"optional: reply\"| NOTIFY\n ATTACH --> BLOB[(\"Blob Store\")]\n```\n\nTwo parts in one file:\n\n**Inbound** — `export default async function emailHandler(inbound)` handles\nincoming mail. Logs subject/body, saves attachments to Blob.\n\n**Outbound** — exported helper functions for sending email programmatically:\n\n- `sendNotification(subject, body, opts?)` — plain text email\n- `sendWithAttachment(subject, body, attachment)` — with base64 attachment\n- `sendTestNotification(body)` — HTTP smoke-test helper\n- `simulateInboundEmail(body)` — HTTP-safe inbound simulation helper\n\n> **Free plan:** outbound sends to yourself only. **Pro:** send to anyone.\n\n### Email smoke tests\n\nHTTP test routes are disabled by default:\n\n```bash\nEMAIL_TEST_ENABLED=true\n# optional shared secret for public endpoints\nTEMPLATE_TEST_SECRET=change-me\n```\n\nSend a test email to yourself:\n\n```bash\ncurl -X POST \"$BASE/api/email-test\" \\\n -H 'content-type: application/json' \\\n -H 'x-template-secret: change-me' \\\n -d '{\"subject\":\"Template email test\",\"text\":\"Hello from Val Town\"}'\n```\n\nSimulate inbound email without sending real mail:\n\n```bash\ncurl -X POST \"$BASE/api/email-test/inbound\" \\\n -H 'content-type: application/json' \\\n -H 'x-template-secret: change-me' \\\n -d '{\"from\":\"tester@example.com\",\"subject\":\"Inbound test\"}'\n```\n\n---\n\n## OpenAI Smoke Test\n\n`backend/openai-test.ts` calls Val Town's bundled `std/openai` proxy. No OpenAI\nAPI key is required for cheap models like `gpt-5-nano`.\n\nHTTP test routes are disabled by default:\n\n```bash\nOPENAI_TEST_ENABLED=true\nOPENAI_TEST_MODEL=gpt-5-nano\n# optional shared secret for public endpoints\nTEMPLATE_TEST_SECRET=change-me\n```\n\nRun the smoke test:\n\n```bash\ncurl -X POST \"$BASE/api/openai-test\" \\\n -H 'content-type: application/json' \\\n -H 'x-template-secret: change-me' \\\n -d '{\"prompt\":\"Say hello from Val Town.\"}'\n```\n\nVal Town limits the proxy to chat completions and rate-limits usage. Keep this\nendpoint gated because HTTP endpoints are public.\n\n---\n\n## Login and Auth Patterns\n\nVal Town HTTP endpoints are public regardless of val privacy. Use auth for any\nroute that writes data, sends email, spends tokens, or exposes private data.\n\n| Pattern | Best for | Sketch |\n| -------------- | ------------------- | ------------------------------------------------------------- |\n| Val Town OAuth | Community apps | Use `std/oauth`; link `/auth/login` and `/auth/logout` |\n| Basic Auth | Quick admin wall | Compare `Authorization` with `BASIC_AUTH_USER/PASS` env vars |\n| Cookie login | Personal dashboards | Check `APP_PASSWORD`, set HttpOnly cookie, clear on `/logout` |\n| Magic link | Multi-user app | Use SQLite + Email + a session library such as Lucia |\n\nThe template's smoke-test endpoints use a simpler gate:\n\n```bash\nEMAIL_TEST_ENABLED=true\nOPENAI_TEST_ENABLED=true\nTEMPLATE_TEST_SECRET=change-me\n```\n\nThat is intentional for a template: safe by default, easy to test, and easy to\nreplace with real login later.\n\n---\n\n## SQLite (`backend/db.ts`)\n\n```mermaid\nerDiagram\n VISITS {\n int id PK\n text page\n timestamp created_at\n }\n META {\n text key PK\n text value\n }\n```\n\nTwo tables, auto-migrated on first use:\n\n| Table | Purpose |\n| -------- | -------------------------------------------------------- |\n| `visits` | Page visit log — each HTTP request to `/` inserts a row |\n| `meta` | Key-value store — cron uses it for `last_run` timestamps |\n\nKey functions:\n\n- `recordVisit(page)` — insert a visit\n- `getRecentVisits(limit)` — latest N visits\n- `getVisitCount()` — total rows in `visits`\n- `getMetaValue(key)` / `setMetaValue(key, value)` — KV read/write\n- `pruneOldVisits(days)` — delete visits older than N days\n\n**Gotcha:** SQLite is per-val. Use the `/main.ts` import path (val-scoped), not\n`/dummy.ts` (shared).\n\n---\n\n## Blob Storage (`backend/storage.ts`)\n\n```mermaid\nflowchart LR\n subgraph BLOB[\"Account-scoped Blob (Cloudflare R2)\"]\n direction TB\n SET[\"blob.set(key, value)\"]\n GET[\"blob.get(key)\"]\n LIST[\"blob.list()\"]\n DEL[\"blob.delete(key)\"]\n end\n\n APP[\"any val in account\"] --> SET\n APP --> GET\n APP --> LIST\n APP --> DEL\n```\n\nShared across **all vals** in your account. Good for cross-val state, config,\nfile uploads.\n\nKey functions:\n\n- `saveJSON(key, data)` / `getJSON(key)` — typed JSON storage\n- `saveText(key, text)` — plain text\n- `listBlobs()` — all keys\n- `deleteBlob(key)` — remove\n\n> **Warning:** Blob is account-scoped. Key collisions across vals are possible —\n> use namespaced keys like `emails/`, `config/`, etc.\n\n---\n\n## Shared (`backend/shared.ts`)\n\nLayer 0 — every other file depends on this. Zero dependencies itself.\n\n| Export | Purpose |\n| -------------------- | ---------------------------------------------------------------------------- |\n| `APP_NAME` | App name constant (change this to rename your app) |\n| `Email` type | Inbound email shape (`from`, `to`, `subject`, `text`, `html`, `attachments`) |\n| `env(key, fallback)` | Read env vars with a default fallback |\n| `parseDuration(raw)` | Parse `\"5m\"`, `\"1h\"`, `\"1d\"` → milliseconds |\n\n---\n\n## Layering\n\n```mermaid\ngraph BT\n subgraph \"Layer 3 — Triggers\"\n HTTP[\"index.http.ts\"]\n CRON[\"cron.ts\"]\n EMAIL[\"email.ts\"]\n end\n\n subgraph \"Layer 2 — UI\"\n APP[\"frontend/app.tsx\"]\n FORMS[\"frontend/ui/forms.tsx\"]\n SECTIONS[\"frontend/ui/sections.tsx\"]\n DATA[\"frontend/ui/data.ts\"]\n STYLES[\"frontend/ui/styles.ts\"]\n end\n\n subgraph \"Layer 1 — Backend\"\n DB[\"backend/db.ts\"]\n BLOB[\"backend/storage.ts\"]\n API[\"backend/api-utils.ts\"]\n AI[\"backend/openai-test.ts\"]\n end\n\n subgraph \"Layer 0 — Foundation\"\n SHARED[\"backend/shared.ts\"]\n end\n\n HTTP --> APP\n HTTP --> DB\n HTTP --> API\n HTTP --> AI\n HTTP --> SHARED\n APP --> FORMS\n APP --> SECTIONS\n APP --> STYLES\n SECTIONS --> DATA\n CRON --> DB\n CRON --> BLOB\n CRON --> SHARED\n EMAIL --> API\n EMAIL --> BLOB\n EMAIL --> SHARED\n DB --> SHARED\n API --> SHARED\n AI --> SHARED\n```\n\nEvery file depends only on lower layers. You can delete any trigger or backend\nmodule without breaking the rest — except `shared.ts`, which everything depends\non.\n\n---\n\n## Customize\n\n**Rename the app** — change `APP_NAME` in `backend/shared.ts`.\n\n**Add a route** — add a new route branch in `index.http.ts → routeApi()`.\n\n**Add a SQLite table** — add a `CREATE TABLE IF NOT EXISTS` call in\n`db.ts → migrate()`.\n\n**Change visibility** — edit `val.yml`:\n\n```yaml\nname: \"my-app\"\npublic: false # true | false\norg: \"uapps\" # your org, or omit for personal\n```\n\n**Sync** — `vt push` / `vt pull` / `vt status`\n\n---\n\n## Key Files\n\n| File | Purpose |\n| ------------------------ | ------------------------------------------------------------------- |\n| `index.http.ts` | HTTP handler — routes, JSON API, Preact SSR page |\n| `test.http.ts` | Minimal JSON HTTP probe for trigger inference testing |\n| `preact.http.tsx` | Preact SSR HTTP trigger example |\n| `cron.ts` | Two scheduled tasks (pulse + maintenance) |\n| `email.ts` | Inbound email handler + outbound send helpers |\n| `backend/db.ts` | SQLite schema, queries, migration |\n| `backend/storage.ts` | Blob storage read/write/list/delete |\n| `backend/api-utils.ts` | JSON responses, body parsing, public test gates |\n| `backend/openai-test.ts` | Val Town `std/openai` smoke test |\n| `backend/shared.ts` | Constants, `env()`, `parseDuration()`, `Email` type |\n| `frontend/app.tsx` | Server-rendered Preact HTML shell with Oat CSS |\n| `frontend/ui/` | Preact sections, forms, static data, styles |\n| `frontend/client.ts` | Inline theme toggle, visit count, email/inbound/OpenAI form actions |\n| `val.yml` | Val name, visibility, org |\n",[204],"85f9d626-4951-11f1-a16a-42b51c65c3df","frontend","85f9d6f8-4951-11f1-a16a-42b51c65c3df",34,["D",1778074991402],"directory",[211],"86303568-4951-11f1-a193-42b51c65c3df","backend","8630361c-4951-11f1-a193-42b51c65c3df",35,["D",1778074991756],[218],"pulls","branches","forks","envVars",{"_230":65,"_232":159},"connections",{"_230":159,"_231":159},"count","unfilledCount","emptyCount",{"_45":217,"_33":218,"_31":219,"_146":-5,"_43":44,"_42":220,"_148":25,"_40":385,"_13":159,"_35":215,"_37":-5,"_24":27,"_152":-5,"_257":386,"_28":387},{"_45":377,"_33":378,"_31":379,"_146":219,"_43":44,"_42":380,"_148":27,"_40":381,"_13":159,"_35":36,"_37":382,"_24":27,"_152":-5,"_257":383,"_28":384},{"_45":368,"_33":369,"_31":370,"_146":219,"_43":44,"_42":371,"_148":27,"_40":372,"_13":373,"_35":36,"_37":374,"_24":27,"_152":-5,"_257":375,"_28":376},{"_45":360,"_33":361,"_31":362,"_146":219,"_43":44,"_42":363,"_148":27,"_40":364,"_13":159,"_35":36,"_37":365,"_24":27,"_152":-5,"_257":366,"_28":367},{"_45":352,"_33":353,"_31":354,"_146":219,"_43":44,"_42":355,"_148":27,"_40":356,"_13":199,"_35":36,"_37":357,"_24":27,"_152":-5,"_257":358,"_28":359},{"_45":343,"_33":344,"_31":345,"_146":219,"_43":44,"_42":346,"_148":27,"_40":347,"_13":348,"_35":36,"_37":349,"_24":27,"_152":-5,"_257":350,"_28":351},{"_45":210,"_33":211,"_31":212,"_146":-5,"_43":44,"_42":213,"_148":25,"_40":340,"_13":159,"_35":215,"_37":-5,"_24":27,"_152":-5,"_257":341,"_28":342},{"_45":335,"_33":306,"_31":300,"_146":212,"_43":44,"_42":336,"_148":27,"_40":337,"_13":159,"_35":215,"_37":-5,"_24":27,"_152":-5,"_257":338,"_28":339},{"_45":331,"_33":34,"_31":32,"_146":300,"_43":44,"_42":14,"_148":27,"_40":332,"_13":65,"_35":36,"_37":39,"_24":27,"_152":-5,"_257":333,"_28":334},{"_45":323,"_33":324,"_31":325,"_146":300,"_43":44,"_42":326,"_148":27,"_40":327,"_13":159,"_35":36,"_37":328,"_24":27,"_152":-5,"_257":329,"_28":330},{"_45":315,"_33":316,"_31":317,"_146":300,"_43":44,"_42":318,"_148":27,"_40":319,"_13":65,"_35":36,"_37":320,"_24":27,"_152":-5,"_257":321,"_28":322},{"_45":307,"_33":308,"_31":309,"_146":300,"_43":44,"_42":310,"_148":27,"_40":311,"_13":159,"_35":36,"_37":312,"_24":27,"_152":-5,"_257":313,"_28":314},{"_45":297,"_33":298,"_31":299,"_146":300,"_43":44,"_42":301,"_148":27,"_40":302,"_13":65,"_35":36,"_37":303,"_24":27,"_152":-5,"_257":304,"_28":305},{"_45":289,"_33":290,"_31":291,"_146":212,"_43":44,"_42":292,"_148":27,"_40":293,"_13":65,"_35":36,"_37":294,"_24":27,"_152":-5,"_257":295,"_28":296},{"_45":281,"_33":282,"_31":283,"_146":212,"_43":44,"_42":284,"_148":27,"_40":285,"_13":159,"_35":36,"_37":286,"_24":27,"_152":-5,"_257":287,"_28":288},{"_45":203,"_33":204,"_31":205,"_146":-5,"_43":44,"_42":206,"_148":27,"_40":278,"_13":174,"_35":20,"_37":208,"_24":27,"_152":-5,"_257":279,"_28":280},{"_45":194,"_33":195,"_31":196,"_146":-5,"_43":44,"_42":197,"_148":27,"_40":275,"_13":199,"_35":200,"_37":201,"_24":27,"_152":-5,"_257":276,"_28":277},{"_45":187,"_33":188,"_31":189,"_146":-5,"_43":44,"_42":190,"_148":27,"_40":272,"_13":150,"_35":20,"_37":192,"_24":27,"_152":-5,"_257":273,"_28":274},{"_45":178,"_33":179,"_31":180,"_146":-5,"_43":44,"_42":181,"_148":27,"_40":269,"_13":183,"_35":184,"_37":185,"_24":27,"_152":-5,"_257":270,"_28":271},{"_45":170,"_33":171,"_31":60,"_146":-5,"_43":44,"_42":172,"_148":27,"_40":266,"_13":174,"_35":160,"_37":175,"_24":27,"_152":176,"_257":267,"_28":268},{"_45":163,"_33":164,"_31":165,"_146":-5,"_43":44,"_42":166,"_148":27,"_40":263,"_13":159,"_35":160,"_37":168,"_24":27,"_152":-5,"_257":264,"_28":265},{"_45":154,"_33":155,"_31":156,"_146":-5,"_43":44,"_42":157,"_148":27,"_40":260,"_13":159,"_35":160,"_37":161,"_24":27,"_152":-5,"_257":261,"_28":262},{"_45":143,"_33":144,"_31":145,"_146":-5,"_43":44,"_42":147,"_148":27,"_40":256,"_13":150,"_35":20,"_37":151,"_24":27,"_152":-5,"_257":258,"_28":259},["D",1778274175831],"children",[],[144],["D",1778274175790],[],[155],["D",1778274175528],[],[164],["D",1778274176601],[],[171],["D",1778274175988],[],[179],["D",1778270041449],[],[188],["D",1778270041959],[],[195],["D",1778314092196],[],[204],"48ed4c1e-4b21-11f1-b54f-ee650bb23af1","client.ts","48ed4cf0-4b21-11f1-b54f-ee650bb23af1",87,["D",1778274175458],"// client.ts — Inline browser script for progressive enhancement.\n\nexport const clientJs = String.raw`\nconst themeToggle = document.getElementById(\"theme-toggle\");\nconst forms = {\n email: document.getElementById(\"email-form\"),\n inbound: document.getElementById(\"inbound-form\"),\n openai: document.getElementById(\"openai-form\")\n};\n\nfunction initTheme() {\n const saved = localStorage.getItem(\"theme\") || \"auto\";\n applyTheme(saved);\n setThemeLabel(saved);\n}\n\nfunction cycleTheme() {\n const current = localStorage.getItem(\"theme\") || \"auto\";\n const next = current === \"auto\" ? \"light\" : current === \"light\" ? \"dark\" : \"auto\";\n localStorage.setItem(\"theme\", next);\n applyTheme(next);\n setThemeLabel(next);\n}\n\nfunction applyTheme(theme) {\n if (theme === \"auto\") {\n document.documentElement.removeAttribute(\"data-theme\");\n return;\n }\n document.documentElement.dataset.theme = theme;\n}\n\nfunction setThemeLabel(theme) {\n themeToggle.textContent = \"Theme: \" + theme;\n}\n\nasync function fetchVisits() {\n const el = document.getElementById(\"visit-count\");\n try {\n const data = await getJson(\"/api/visits\");\n el.textContent = data.total ?? \"—\";\n } catch (err) {\n console.error(\"Failed to fetch visits:\", err);\n el.textContent = \"—\";\n }\n}\n\nasync function getJson(path) {\n const res = await fetch(path);\n const data = await res.json();\n if (!res.ok) throw new Error(data.error || \"HTTP \" + res.status);\n return data;\n}\n\nasync function postJson(path, body, secret) {\n const headers = { \"content-type\": \"application/json\" };\n if (secret) headers[\"x-template-secret\"] = secret;\n const res = await fetch(path, {\n method: \"POST\",\n headers,\n body: JSON.stringify(body)\n });\n const data = await res.json();\n if (!res.ok) throw new Error(data.error || \"HTTP \" + res.status);\n return data;\n}\n\nfunction readForm(form) {\n return Object.fromEntries(new FormData(form).entries());\n}\n\nfunction showResult(id, value) {\n document.getElementById(id).textContent = JSON.stringify(value, null, 2);\n}\n\nfunction showError(id, err) {\n document.getElementById(id).textContent = \"Error: \" + err.message;\n}\n\nfunction wireJsonForm(form, path, resultId, payloadKeys) {\n form.addEventListener(\"submit\", async (event) => {\n event.preventDefault();\n const fields = readForm(form);\n const body = Object.fromEntries(payloadKeys.map((key) => [key, fields[key]]));\n try {\n showResult(resultId, { status: \"sending\" });\n showResult(resultId, await postJson(path, body, String(fields.secret || \"\")));\n } catch (err) {\n showError(resultId, err);\n }\n });\n}\n\nthemeToggle.addEventListener(\"click\", cycleTheme);\nwireJsonForm(forms.email, \"/api/email-test\", \"email-result\", [\"subject\", \"text\", \"to\"]);\nwireJsonForm(forms.inbound, \"/api/email-test/inbound\", \"inbound-result\", [\"from\", \"subject\", \"text\"]);\nwireJsonForm(forms.openai, \"/api/openai-test\", \"openai-result\", [\"prompt\"]);\ninitTheme();\nfetchVisits();\n`;\n",[],[211,282],"0c77fb84-4b8b-11f1-8936-ee650bb23af1","app.tsx","48f1fc50-4b21-11f1-aeb4-ee650bb23af1",103,["D",1778319600631],"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// app.tsx — Server-rendered Preact documentation app for the template val.\n\nimport { render } from \"https://esm.sh/preact-render-to-string@6.6.7?deps=preact@10.29.1\";\nimport { clientJs } from \"./client.ts\";\nimport {\n Footer,\n Hero,\n ModuleDocs,\n RouteTable,\n StatusGrid,\n} from \"./ui/sections.tsx\";\nimport { css } from \"./ui/styles.ts\";\nimport type { HomePageProps } from \"./ui/types.ts\";\n\n// -----------------------------------------------------------------------------\n// public renderer\n// -----------------------------------------------------------------------------\n\nexport function renderHomePage(props: HomePageProps): string {\n return \"\" + render();\n}\n\n// -----------------------------------------------------------------------------\n// shell\n// -----------------------------------------------------------------------------\n\nfunction App(props: HomePageProps) {\n return (\n \n \n \n \n {props.appName}\n \n \n \n \n

\n \n \n \n \n

\n \n \n \n );\n}\n",[],[211,290],"0c7e0dee-4b8b-11f1-92c4-ee650bb23af1","types.ts","48ba57fa-4b21-11f1-b54f-ee650bb23af1","4888d3e2-4b21-11f1-81f8-ee650bb23af1",104,["D",1778319600684],"// types.ts — Shared Preact UI data contracts.\n\nexport interface HomePageProps {\n appName: string;\n renderedAt: string;\n}\n\nexport interface RouteItem {\n method: string;\n path: string;\n purpose: string;\n}\n\nexport interface StatItem {\n title: string;\n value: string;\n note: string;\n id?: string;\n}\n\nexport interface ModuleDoc {\n key: string;\n title: string;\n badge: string;\n summary: string;\n files: string[];\n points: string[];\n}\n",[],[211,306,298],"ui","48c5eafc-4b21-11f1-9ccf-ee650bb23af1","styles.ts","48c5ebec-4b21-11f1-9ccf-ee650bb23af1",85,["D",1778274175202],"// styles.ts — Small custom layer on top of Oat CSS.\n\nexport const css = `\n:root {\n --bg: #f8fafc;\n --fg: #111827;\n --muted: #64748b;\n --brand: #7c3aed;\n --soft: color-mix(in srgb, var(--brand), transparent 88%);\n}\n[data-theme=\"dark\"] {\n color-scheme: dark;\n --bg: #0f172a;\n --fg: #e2e8f0;\n --muted: #94a3b8;\n --brand: #a78bfa;\n}\n[data-theme=\"light\"] { color-scheme: light; }\nbody { background: linear-gradient(135deg, var(--bg), var(--soft)); color: var(--fg); }\n.page { max-width: 1120px; margin: 0 auto; padding: 40px 20px 72px; }\n.hero { display: grid; gap: 18px; margin-bottom: 24px; }\n.hero h1 { font-size: clamp(2.4rem, 8vw, 5.8rem); letter-spacing: -0.07em; margin: 0; }\n.hero p { max-width: 780px; }\n.eyebrow { color: var(--brand); font-weight: 700; letter-spacing: 0.12em; text-transform: uppercase; }\n.actions { display: flex; flex-wrap: wrap; gap: 10px; align-items: center; }\n.grid { display: grid; gap: 16px; }\n.two { grid-template-columns: repeat(auto-fit, minmax(270px, 1fr)); }\n.three { grid-template-columns: repeat(auto-fit, minmax(220px, 1fr)); }\n.card { backdrop-filter: blur(10px); border-color: color-mix(in srgb, var(--fg), transparent 84%); box-shadow: 0 18px 60px rgb(15 23 42 / 0.08); }\n.spacious { padding: 28px; }\n.stat span { color: var(--muted); font-size: 0.9rem; text-transform: uppercase; }\n.stat strong { display: block; font-size: 2rem; margin: 6px 0; }\n.feature { border: 1px solid color-mix(in srgb, var(--fg), transparent 88%); border-radius: 16px; padding: 18px; }\n.stack { display: grid; gap: 14px; }\n.result { max-height: 220px; overflow: auto; white-space: pre-wrap; }\ntable code { white-space: nowrap; }\n.footer { color: var(--muted); margin-top: 28px; text-align: center; }\n`;\n",[],[211,306,308],"0c7086f6-4b8b-11f1-ac34-ee650bb23af1","sections.tsx","490e4de2-4b21-11f1-874d-ee650bb23af1",102,["D",1778319600629],"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// sections.tsx — Declarative documentation sections.\n\nimport { moduleDocs, routes, stats } from \"./data.ts\";\nimport type { HomePageProps, ModuleDoc, StatItem } from \"./types.ts\";\n\n// -----------------------------------------------------------------------------\n// top sections\n// -----------------------------------------------------------------------------\n\nexport function Hero(props: HomePageProps) {\n return (\n

Val Town starter · Preact SSR · one HTTP file

{props.appName}

\n A compact, inspectable template for Val Town apps. The README stays\n short; this page carries the module-by-module documentation.\n

\n \n

\n Public endpoint rule:{\" \"}\n every Val Town HTTP route is reachable by URL. Add auth before exposing\n private data, writes, or expensive calls.\n

\n );\n}\n\nexport function StatusGrid() {\n return (\n

\n {stats.map((item) => )}\n

\n );\n}\n\nfunction Stat(props: { item: StatItem }) {\n return (\n

\n {props.item.title}\n {props.item.value}\n

{props.item.note}

\n );\n}\n\n// -----------------------------------------------------------------------------\n// docs\n// -----------------------------------------------------------------------------\n\nexport function ModuleDocs() {\n return (\n

Docs

Pick a module

\n The content below is data-driven from{\" \"}\n frontend/ui/data.ts.\n

\n {moduleDocs.map((doc, index) => )}\n

\n {moduleDocs.map((doc, index) => (\n \n ))}\n

\n );\n}\n\nfunction DocTab(props: { doc: ModuleDoc; active: boolean }) {\n return (\n \n {props.doc.title}\n {props.doc.badge}\n \n );\n}\n\nfunction DocPanel(props: { doc: ModuleDoc; active: boolean }) {\n return (\n

\n );\n}\n\nfunction FileList(props: { files: string[] }) {\n return (\n

\n {props.files.map((file) => {file})}\n

\n );\n}\n\n// -----------------------------------------------------------------------------\n// reference\n// -----------------------------------------------------------------------------\n\nexport function RouteTable() {\n return (\n

HTTP

Routes

\n Keep this list small. Add real auth before adding powerful routes.\n

\n \n \n \n \n \n \n \n \n \n {routes.map((r) => (\n \n \n \n \n \n ))}\n \n

Method	Path	Purpose
{r.method}	\n `{r.path}`\n	{r.purpose}

\n );\n}\n\nexport function Footer(props: { renderedAt: string }) {\n return (\n \n );\n}\n",[],[211,306,316],"48d4e476-4b21-11f1-b96f-ee650bb23af1","forms.tsx","48d4e52a-4b21-11f1-b96f-ee650bb23af1",86,["D",1778274175108],"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// forms.tsx — Public smoke-test forms.\n\n// -----------------------------------------------------------------------------\n// aggregate\n// -----------------------------------------------------------------------------\n\nexport function InteractiveTests() {\n return (\n

Test the platform features

\n These forms call public HTTP routes. They are disabled until env flags\n are set.\n

\n \n \n \n

\n );\n}\n\n// -----------------------------------------------------------------------------\n// forms\n// -----------------------------------------------------------------------------\n\nfunction EmailForm() {\n return (\n

📤 Outbound email

\n Enable with{\" \"}\n EMAIL_TEST_ENABLED=true. Free plans send to yourself.\n

\n \n Subject \n \n \n Text{\" \"}\n \n \n \n Optional recipient{\" \"}\n \n \n \n Optional secret{\" \"}\n \n \n \n

Waiting…

\n );\n}\n\nfunction InboundForm() {\n return (\n

📥 Inbound email

\n Simulate <user>.<val>@valtown.email{\" \"}\n without real mail.\n

\n \n From \n \n \n Subject \n \n \n Text{\" \"}\n \n \n \n Optional secret{\" \"}\n \n \n \n

Waiting…

\n );\n}\n\nfunction OpenAiForm() {\n return (\n

🤖 OpenAI proxy

\n Enable with{\" \"}\n OPENAI_TEST_ENABLED=true. Uses Val Town's proxy.\n

\n \n Prompt{\" \"}\n \n \n \n Optional secret{\" \"}\n \n \n \n

Waiting…

\n );\n}\n",[],[211,306,324],"0c834bc4-4b8b-11f1-89d0-ee650bb23af1",["D",1778319600727],[],[211,306,34],"4888d338-4b21-11f1-81f8-ee650bb23af1",82,["D",1778274174805],[241,242,243,244,245],[211,306],["D",1778074991402],[240,246,247],[211],"a8f09454-4b17-11f1-b625-ee650bb23af1","storage.ts","aa15db36-48c5-11f1-8bd1-42b51c65c3df",57,["D",1778270041461],6,"// storage.ts — Blob storage helpers (account-scoped; namespace keys with PREFIX)\n// Docs: https://docs.val.town/reference/std/blob\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\n/** Key prefix to avoid collisions with other vals. */\nconst PREFIX = \"template/\";\n\n// ── Read / Write ─────────────────────────────────────────────────────────────\n\n/** Store a JSON-serialisable value under a namespaced key. */\nexport async function saveJSON(key: string, value: unknown): Promise {\n await blob.setJSON(`${PREFIX}${key}`, value);\n}\n\n/** Retrieve a previously stored JSON value, or null if missing. */\nexport async function loadJSON(key: string): Promise {\n try {\n const data = await blob.getJSON(`${PREFIX}${key}`);\n return data !== undefined ? (data as T) : null;\n } catch {\n return null;\n }\n}\n\n// ── List / Delete ────────────────────────────────────────────────────────────\n\n/** List all blob keys under our namespace. */\nexport async function listKeys(): Promise {\n const keys = await blob.list(PREFIX);\n // Strip the prefix so callers see clean names\n return keys.map((k: { key: string }) => k.key.replace(PREFIX, \"\"));\n}\n\n/** Delete a namespaced blob. */\nexport async function remove(key: string): Promise {\n await blob.delete(`${PREFIX}${key}`);\n}\n",[],[218,344],"a8e546d0-4b17-11f1-bccd-ee650bb23af1","shared.ts","aada9642-48c5-11f1-b1d7-42b51c65c3df",56,["D",1778270041498],"// shared.ts — Constants, types, utils. No external dependencies.\n\n// ── Constants ─────────────────────────────────────────────────────────────────\n\nexport const APP_NAME = \"Val Town Template\";\n\n// ── Env ───────────────────────────────────────────────────────────────────────\n// Deno.env.set() is a no-op on Val Town — set vars in the UI sidebar only.\n\nexport function env(key: string, fallback = \"\"): string {\n return Deno.env.get(key) ?? fallback;\n}\n\n// ── Duration ──────────────────────────────────────────────────────────────────\n// \"30s\" | \"5m\" | \"2h\" | \"1d\" → ms. \"DISABLED\" | invalid → null.\nexport function parseDuration(raw: string): number | null {\n const s = raw.trim();\n if (s.toUpperCase() === \"DISABLED\") return null;\n const m = /^(\\d+)(s|m|h|d)$/i.exec(s);\n if (!m) return null;\n const n = parseInt(m[1], 10);\n if (n <= 0) return null;\n const factors: Record = {\n s: 1_000,\n m: 60_000,\n h: 3_600_000,\n d: 86_400_000,\n };\n return n * factors[m[2].toLowerCase()];\n}\n\n// ── Types ─────────────────────────────────────────────────────────────────────\n// Matches the platform's inbound Email trigger interface.\n\nexport interface Email {\n from: string;\n to: string[];\n cc?: string | string[];\n bcc?: string | string[];\n subject?: string;\n text?: string;\n html?: string;\n attachments: File[];\n headers: Record;\n}\n",[],[218,353],"490480aa-4b21-11f1-861e-ee650bb23af1","openai-test.ts","49048168-4b21-11f1-861e-ee650bb23af1",90,["D",1778274175617],"// openai-test.ts — Val Town std/openai smoke test helpers.\n\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nimport { env } from \"./shared.ts\";\n\nexport interface OpenAiTestResult {\n model: string;\n prompt: string;\n reply: string;\n testedAt: string;\n}\n\n// -----------------------------------------------------------------------------\n// smoke test\n// -----------------------------------------------------------------------------\n\nexport async function runOpenAiSmokeTest(\n prompt: string,\n): Promise {\n const model = env(\"OPENAI_TEST_MODEL\", \"gpt-5-nano\");\n const openai = new OpenAI();\n const completion: unknown = await openai.chat.completions.create({\n model,\n max_tokens: 80,\n messages: [\n {\n role: \"system\",\n content: \"Reply with one short sentence. Mention Val Town once.\",\n },\n { role: \"user\", content: prompt },\n ],\n });\n\n return {\n model,\n prompt,\n reply: extractReply(completion),\n testedAt: new Date().toISOString(),\n };\n}\n\nfunction extractReply(value: unknown): string {\n const choices = isRecord(value) ? value.choices : null;\n const first = Array.isArray(choices) ? choices[0] : null;\n const message = isRecord(first) ? first.message : null;\n const content = isRecord(message) ? message.content : null;\n return typeof content === \"string\" ? content : \"\";\n}\n\nfunction isRecord(value: unknown): value is Record {\n return typeof value === \"object\" && value !== null;\n}\n",[],[218,361],"a919ef02-4b17-11f1-bff1-ee650bb23af1","db.ts","aad2cfa2-48c5-11f1-bfb8-42b51c65c3df",59,["D",1778270041839],8,"// db.ts — SQLite helpers (Turso-backed, shared across all vals — namespace tables)\n// Docs: https://docs.val.town/reference/std/sqlite/\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// ── Schema Migration ─────────────────────────────────────────────────────────\n// Lazily run on first DB call, not at import time. This prevents crashes\n// when running locally (off Val Town) where the SQLite API isn't available.\n\nlet migrated = false;\n\nasync function migrate(): Promise {\n if (migrated) return;\n migrated = true;\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS template_visits (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n path TEXT NOT NULL,\n ts TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS template_meta (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL\n )`,\n ]);\n}\n\n// ── Queries ──────────────────────────────────────────────────────────────────\n\n/** Record a page visit. */\nexport async function recordVisit(path: string): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO template_visits (path) VALUES (?)`,\n args: [path],\n });\n}\n\n/** Get total visit count. */\nexport async function getVisitCount(): Promise {\n await migrate();\n const { rows } = await sqlite.execute(\n `SELECT COUNT(*) as count FROM template_visits`,\n );\n return Number(rows[0][0]);\n}\n\n// ── Meta Key-Value ────────────────────────────────────────────────────────────\n\n/** Read a value from the `template_meta` key-value store. Returns null if missing. */\nexport async function getMetaValue(key: string): Promise {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT value FROM template_meta WHERE key = ?`,\n args: [key],\n });\n return rows[0] ? String(rows[0][0]) : null;\n}\n\n/** Write (upsert) a value into the `template_meta` key-value store. */\nexport async function setMetaValue(key: string, value: string): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO template_meta (key, value) VALUES (?, ?)`,\n args: [key, value],\n });\n}\n\n/** Get the N most recent visits. */\nexport async function getRecentVisits(\n limit = 10,\n): Promise> {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT id, path, ts FROM template_visits ORDER BY ts DESC LIMIT ?`,\n args: [limit],\n });\n return (rows as unknown as unknown[][]).map((r) => ({\n id: Number(r[0]),\n path: String(r[1]),\n ts: String(r[2]),\n }));\n}\n\n/** Delete visits older than `days` days. Safe to call before migrate runs. */\nexport async function pruneOldVisits(days = 30): Promise {\n await migrate();\n await sqlite.execute({\n sql: `DELETE FROM template_visits WHERE ts < datetime('now', ?)`,\n args: [`-${days} days`],\n });\n}\n",[],[218,369],"491d0e22-4b21-11f1-8ab3-ee650bb23af1","api-utils.ts","491d0f08-4b21-11f1-8ab3-ee650bb23af1",92,["D",1778274175773],"// api-utils.ts — Small HTTP helpers for public test endpoints.\n\nimport { env } from \"./shared.ts\";\n\nexport type JsonObject = Record;\n\n// -----------------------------------------------------------------------------\n// responses\n// -----------------------------------------------------------------------------\n\nexport function jsonError(message: string, status = 400): Response {\n return Response.json({ ok: false, error: message }, { status });\n}\n\nexport function jsonOk(data: JsonObject = {}): Response {\n return Response.json({ ok: true, ...data });\n}\n\n// -----------------------------------------------------------------------------\n// request parsing\n// -----------------------------------------------------------------------------\n\nexport async function readJsonObject(req: Request): Promise {\n const text = await req.text();\n if (text.trim() === \"\") return {};\n const parsed: unknown = JSON.parse(text);\n if (!isJsonObject(parsed)) throw new Error(\"Expected a JSON object body\");\n return parsed;\n}\n\nexport async function readJsonOrError(\n req: Request,\n): Promise<\n { body: JsonObject; error: null } | { body: null; error: Response }\n> {\n try {\n return { body: await readJsonObject(req), error: null };\n } catch {\n return { body: null, error: jsonError(\"Invalid JSON object body\", 400) };\n }\n}\n\nexport function stringField(\n input: JsonObject,\n key: string,\n fallback = \"\",\n): string {\n const value = input[key];\n return typeof value === \"string\" && value.trim() !== \"\" ? value : fallback;\n}\n\nfunction isJsonObject(value: unknown): value is JsonObject {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n// -----------------------------------------------------------------------------\n// test gates\n// -----------------------------------------------------------------------------\n\nexport function testEndpointInfo(flag: string): JsonObject {\n return {\n enabled: isEnvFlagEnabled(flag),\n enableWithEnv: `${flag}=true`,\n optionalSecretEnv: \"TEMPLATE_TEST_SECRET\",\n optionalSecretHeader: \"x-template-secret\",\n };\n}\n\nexport function assertTestAccess(\n req: Request,\n flag: string,\n label: string,\n): Response | null {\n if (!isEnvFlagEnabled(flag)) {\n return jsonError(\n `${label} is disabled. Set ${flag}=true in Val Town.`,\n 403,\n );\n }\n\n const secret = env(\"TEMPLATE_TEST_SECRET\");\n if (!secret) return null;\n\n const actual = req.headers.get(\"x-template-secret\");\n return actual === secret\n ? null\n : jsonError(\"Invalid or missing test secret\", 401);\n}\n\nfunction isEnvFlagEnabled(key: string): boolean {\n return env(key).toLowerCase() === \"true\";\n}\n",[],[218,378],["D",1778074991756],[234,235,236,237,238],[218],["D",1777994172310],["D",1789511441255],{"_102":101,"_110":106},{"_102":101,"_103":104,"_105":106,"_18":58,"_107":108,"_109":27},{"_13":91,"_33":92,"_45":44,"_93":46,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":47,"_100":101},"ctx",{"_84":-5,"_130":426,"_427":428,"_429":430,"_431":27,"_432":27,"_433":27,"_434":25,"_435":-5,"_436":-7,"_437":-7,"_438":159,"_439":27,"_440":27,"_441":-5,"_442":27,"_443":27,"_444":27,"_445":-5},"ENV",{"_397":398,"_399":400,"_401":92,"_402":403,"_404":405,"_406":407,"_408":409,"_410":411,"_412":413,"_414":415,"_416":417,"_418":419,"_420":421,"_422":423,"_424":425},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","fdb67791413f4386b4dbf18f354029a617f6160f","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v105