[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_392":393,"_394":395},"routes/_app.x.$handle.$name",{"_101":100,"_32":45,"_110":91,"_27":111,"_13":14,"_112":-5,"_11":113,"_114":115,"_116":117,"_118":119,"_120":121,"_20":-5,"_122":-5,"_123":-5,"_124":25,"_125":126,"_127":60,"_128":-5,"_129":-5,"_130":131},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",108,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","email.ts","latestPath","fileId","aa7742d6-48c5-11f1-831b-42b51c65c3df","name","fileType","email","content","// email.ts — Inbound handler + outbound helpers. UI: + → EMAIL → address: .@valtown.email\n\nimport { email as sendEmail } from \"https://esm.town/v/std/email\";\nimport { APP_NAME, type Email } from \"./backend/shared.ts\";\nimport { type JsonObject, stringField } from \"./backend/api-utils.ts\";\n\nexport interface TestEmailResult {\n subject: string;\n text: string;\n toSelf: boolean;\n sentAt: string;\n}\n\nexport interface InboundEmailTestResult {\n from: string;\n subject: string;\n text: string;\n simulatedAt: string;\n}\n\n// -----------------------------------------------------------------------------\n// inbound\n// -----------------------------------------------------------------------------\n\nexport default async function emailHandler(inbound: Email): Promise {\n console.log(\n `📧 [${APP_NAME}] From: ${inbound.from} Subject: ${\n inbound.subject ?? \"(none)\"\n }`,\n );\n console.log(` Body: ${inbound.text?.slice(0, 200) ?? \"(empty)\"}...`);\n\n for (const file of inbound.attachments) {\n console.log(` 📎 ${file.name} (${file.type}, ${file.size}b)`);\n // await blob.set(`emails/${file.name}`, await file.arrayBuffer());\n }\n\n // await sendNotification(`Re: ${inbound.subject}`, \"Got your message!\");\n}\n\n// -----------------------------------------------------------------------------\n// outbound\n// -----------------------------------------------------------------------------\n// Free plan: sends to yourself only. Pro: send to anyone + cc/bcc.\n\nexport async function sendNotification(\n subject: string,\n body: string,\n options?: { to?: string; html?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n ...(options?.to && { to: options.to }),\n ...(options?.html && { html: options.html }),\n });\n console.log(`📤 [${APP_NAME}] Sent: \"${subject}\"`);\n}\n\n/** `attachment.content` must be base64-encoded (use `btoa()`). */\nexport async function sendWithAttachment(\n subject: string,\n body: string,\n attachment: { content: string; filename: string; type?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n attachments: [{\n content: attachment.content,\n filename: attachment.filename,\n type: attachment.type ?? \"application/octet-stream\",\n disposition: \"attachment\",\n }],\n });\n console.log(\n `📤 [${APP_NAME}] Sent with attachment: \"${attachment.filename}\"`,\n );\n}\n\n// -----------------------------------------------------------------------------\n// test helpers\n// -----------------------------------------------------------------------------\n\nexport async function sendTestNotification(\n input: JsonObject,\n): Promise {\n const subject = stringField(input, \"subject\", `Test email from ${APP_NAME}`);\n const text = stringField(\n input,\n \"text\",\n \"This is a Val Town email smoke test.\",\n );\n const to = stringField(input, \"to\");\n const html = stringField(input, \"html\");\n\n await sendNotification(subject, text, {\n ...(to && { to }),\n ...(html && { html }),\n });\n return { subject, text, toSelf: !to, sentAt: new Date().toISOString() };\n}\n\nexport async function simulateInboundEmail(\n input: JsonObject,\n): Promise {\n const inbound = makeInboundEmail(input);\n await emailHandler(inbound);\n return {\n from: inbound.from,\n subject: inbound.subject ?? \"\",\n text: inbound.text ?? \"\",\n simulatedAt: new Date().toISOString(),\n };\n}\n\nfunction makeInboundEmail(input: JsonObject): Email {\n return {\n from: stringField(input, \"from\", \"tester@example.com\"),\n to: [stringField(input, \"to\", \"template@valtown.email\")],\n subject: stringField(input, \"subject\", `Inbound test for ${APP_NAME}`),\n text: stringField(\n input,\n \"text\",\n \"This simulates an inbound Val Town email.\",\n ),\n html: stringField(input, \"html\"),\n attachments: [],\n headers: { \"x-template-test\": \"true\" },\n };\n}\n","// email.ts — Inbound handler + outbound helpers. UI: + → EMAIL.\n// Address shape: .@valtown.email\n\nimport { email as sendEmail } from \"https://esm.town/v/std/email\";\nimport { APP_NAME, type Email } from \"./backend/shared.ts\";\n\n// -----------------------------------------------------------------------------\n// inbound\n// -----------------------------------------------------------------------------\n\nexport default async function emailHandler(inbound: Email): Promise {\n console.log(\n `📧 [${APP_NAME}] From: ${inbound.from} Subject: ${\n inbound.subject ?? \"(none)\"\n }`,\n );\n console.log(` Body: ${inbound.text?.slice(0, 200) ?? \"(empty)\"}...`);\n\n for (const file of inbound.attachments) {\n console.log(` 📎 ${file.name} (${file.type}, ${file.size}b)`);\n // await blob.set(`emails/${file.name}`, await file.arrayBuffer());\n }\n\n // await sendNotification(`Re: ${inbound.subject}`, \"Got your message!\");\n}\n\n// -----------------------------------------------------------------------------\n// outbound\n// -----------------------------------------------------------------------------\n// Free plan: sends to yourself only. Pro: send to anyone + cc/bcc.\n\nexport async function sendNotification(\n subject: string,\n body: string,\n options?: { to?: string; html?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n ...(options?.to && { to: options.to }),\n ...(options?.html && { html: options.html }),\n });\n console.log(`📤 [${APP_NAME}] Sent: \"${subject}\"`);\n}\n\n/** `attachment.content` must be base64-encoded (use `btoa()`). */\nexport async function sendWithAttachment(\n subject: string,\n body: string,\n attachment: { content: string; filename: string; type?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n attachments: [{\n content: attachment.content,\n filename: attachment.filename,\n type: attachment.type ?? \"application/octet-stream\",\n disposition: \"attachment\",\n }],\n });\n console.log(\n `📤 [${APP_NAME}] Sent with attachment: \"${attachment.filename}\"`,\n );\n}\n","createdAt",["D",1778319601107],"branchVersion","branchId","5a0a7ac8-4895-11f1-80ec-42b51c65c3df","id","5a09ae54-4895-11f1-80ec-42b51c65c3df","Quickstart-Full-Stack",["D",1777994172310],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","An elegant template for an elegant single-person full stack app.","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/3ed9401e-3850-4a69-dec2-1bdd924c0900/square512?exp=1789538399&sig=8ded5b974bfebef9817e2fbdffe4de4e1704e0d4cab9518c811db2594c0af107","173e7424-8658-428f-a3bc-ae4faeaabd1c","pinnedFileId","e1c705aa-4b18-11f1-b4ae-ee650bb23af1","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",1,"orgId","019df771-9af8-7238-99a4-541e39355038","tursoName","5a09ae54489511f180ec42b51c65c3df","tursoHostname","5a09ae54489511f180ec42b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789511441255],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_101":100,"_109":105},"org",{"_101":100,"_102":103,"_104":105,"_18":56,"_106":107,"_108":25},"branch",{"_13":90,"_32":91,"_43":42,"_92":44,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":45,"_99":100},"isOwned",384,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","pikachu","handle","displayName","Minion","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/22c8ba37-42c8-4af4-8daf-8cdd2f5f1800/square512?exp=1789538399&sig=21cdba23f818845c8391e88088eb5ea9255dbc43e05efe79e25bd70ab9ddb43a","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":387,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":388,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":389,"_85":390,"_87":391,"_89":25},"tree",[228,234,243,244,245,246,247,248,249,250],"files",[228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250],"counts",{"_218":158,"_219":64,"_220":64,"_221":222,"_223":224},"contents",[132,133,134,135,136,137,138,139,140,141],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":212,"_32":213,"_30":214,"_145":-5,"_41":42,"_40":215,"_147":60,"_38":216,"_13":158,"_33":210,"_35":-5,"_24":25,"_151":-5,"_27":217},{"_43":205,"_32":206,"_30":207,"_145":-5,"_41":42,"_40":208,"_147":60,"_38":209,"_13":158,"_33":210,"_35":-5,"_24":25,"_151":-5,"_27":211},{"_43":198,"_32":199,"_30":200,"_145":-5,"_41":42,"_40":201,"_147":25,"_38":202,"_13":173,"_33":20,"_35":203,"_24":25,"_151":-5,"_27":204},{"_43":189,"_32":190,"_30":191,"_145":-5,"_41":42,"_40":192,"_147":25,"_38":193,"_13":194,"_33":195,"_35":196,"_24":25,"_151":-5,"_27":197},{"_43":181,"_32":182,"_30":183,"_145":-5,"_41":42,"_40":184,"_147":25,"_38":185,"_13":186,"_33":20,"_35":187,"_24":25,"_151":-5,"_27":188},{"_43":177,"_32":28,"_30":31,"_145":-5,"_41":42,"_40":14,"_147":25,"_38":178,"_13":179,"_33":34,"_35":37,"_24":25,"_151":-5,"_27":180},{"_43":169,"_32":170,"_30":58,"_145":-5,"_41":42,"_40":171,"_147":25,"_38":172,"_13":173,"_33":159,"_35":174,"_24":25,"_151":175,"_27":176},{"_43":162,"_32":163,"_30":164,"_145":-5,"_41":42,"_40":165,"_147":25,"_38":166,"_13":158,"_33":159,"_35":167,"_24":25,"_151":-5,"_27":168},{"_43":153,"_32":154,"_30":155,"_145":-5,"_41":42,"_40":156,"_147":25,"_38":157,"_13":158,"_33":159,"_35":160,"_24":25,"_151":-5,"_27":161},{"_43":142,"_32":143,"_30":144,"_145":-5,"_41":42,"_40":146,"_147":25,"_38":148,"_13":149,"_33":20,"_35":150,"_24":25,"_151":-5,"_27":152},"0cb9c65e-4b8b-11f1-8936-ee650bb23af1","val.yml","aa729402-48c5-11f1-87ca-42b51c65c3df","parentId",107,"latest",["D",1778319601077],3,"name: \"sample-val\"\npublic: true\nfiles:\n index.http.ts: http\n cron.ts: interval\n email.ts: email\n","label",[143],"4923e8be-4b21-11f1-861e-ee650bb23af1","test.http.ts","4923e99a-4b21-11f1-861e-ee650bb23af1",93,["D",1778274175790],0,"http","// test.http.ts — Minimal HTTP trigger used to verify vt's new-file type inference.\n\nexport default function handler(req: Request): Response {\n const url = new URL(req.url);\n return Response.json({\n ok: true,\n trigger: \"http\",\n file: \"test.http.ts\",\n path: url.pathname,\n method: req.method,\n timestamp: new Date().toISOString(),\n });\n}\n",[154],"48f6f2a0-4b21-11f1-81f8-ee650bb23af1","preact.http.tsx","48f6f37c-4b21-11f1-81f8-ee650bb23af1",89,["D",1778274175528],"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// preact.http.tsx — Preact SSR example for Val Town HTTP triggers.\n\nimport { render } from \"https://esm.sh/preact-render-to-string@6.6.7?deps=preact@10.29.1\";\n\ninterface AppProps {\n path: string;\n timestamp: string;\n}\n\nfunction App({ path, timestamp }: AppProps) {\n return (\n \n \n \n \n Preact on Val Town\n \n \n \n

⚡ Preact HTTP Trigger

This page was rendered server-side by Preact on Val Town.

\n Path: {path}\n
\n Rendered: {timestamp}\n

\n \n \n );\n}\n\nexport default function handler(req: Request): Response {\n const url = new URL(req.url);\n const html = \"\" + render(\n ,\n );\n\n return new Response(html, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n}\n",[163],"499c949e-4b21-11f1-8ab3-ee650bb23af1","index.http.ts",99,["D",1778274176601],5,"// index.http.ts — HTTP handler. Renders Preact HTML and JSON API.\n// Docs: https://docs.val.town/vals/http\n\nimport { getRecentVisits, getVisitCount, recordVisit } from \"./backend/db.ts\";\nimport {\n assertTestAccess,\n jsonError,\n jsonOk,\n readJsonObject,\n readJsonOrError,\n stringField,\n testEndpointInfo,\n} from \"./backend/api-utils.ts\";\nimport { runOpenAiSmokeTest } from \"./backend/openai-test.ts\";\nimport { APP_NAME, env } from \"./backend/shared.ts\";\nimport { sendTestNotification, simulateInboundEmail } from \"./email.ts\";\nimport { renderHomePage } from \"./frontend/app.tsx\";\n\n// -----------------------------------------------------------------------------\n// entry\n// -----------------------------------------------------------------------------\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const { pathname } = url;\n\n if (pathname === \"/\" || pathname === \"\") return await landingPage();\n\n return await routeApi(req, url);\n}\n\nasync function landingPage(): Promise {\n try {\n await recordVisit(\"/\");\n } catch {\n // SQLite might not be available locally.\n }\n const html = renderHomePage({\n appName: APP_NAME,\n emailEnabled: env(\"EMAIL_TEST_ENABLED\").toLowerCase() === \"true\",\n openAiEnabled: env(\"OPENAI_TEST_ENABLED\").toLowerCase() === \"true\",\n hasTestSecret: env(\"TEMPLATE_TEST_SECRET\") !== \"\",\n openAiModel: env(\"OPENAI_TEST_MODEL\", \"gpt-5-nano\"),\n renderedAt: new Date().toISOString(),\n });\n return new Response(html, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n}\n\n// -----------------------------------------------------------------------------\n// api routes\n// -----------------------------------------------------------------------------\n\nasync function routeApi(req: Request, url: URL): Promise {\n const route = `${req.method} ${url.pathname}`;\n if (route === \"GET /api/health\") return healthCheck();\n if (route === \"GET /api/visits\") return await visits();\n if (route === \"POST /api/echo\") return await echo(req);\n if (route === \"GET /api/email-test\") return emailTestInfo();\n if (route === \"POST /api/email-test\") return await emailTest(req);\n if (route === \"POST /api/email-test/inbound\") {\n return await inboundEmailTest(req);\n }\n if (route === \"GET /api/openai-test\") return openAiTestInfo();\n if (route === \"POST /api/openai-test\") return await openAiTest(req);\n return jsonError(`Not found: ${url.pathname}`, 404);\n}\n\nfunction healthCheck(): Response {\n return jsonOk({\n name: APP_NAME,\n timestamp: new Date().toISOString(),\n runtime: `Deno ${Deno.version?.deno || \"unknown\"}`,\n });\n}\n\nasync function visits(): Promise {\n try {\n const visits = await getRecentVisits(20);\n const total = await getVisitCount();\n return Response.json({ total, visits });\n } catch {\n return jsonError(\"SQLite not available (running off-platform?)\", 503);\n }\n}\n\nasync function echo(req: Request): Promise {\n try {\n const body = await readJsonObject(req);\n return jsonOk({ echo: body, receivedAt: new Date().toISOString() });\n } catch {\n return jsonError(\"Invalid JSON object body\", 400);\n }\n}\n\n// -----------------------------------------------------------------------------\n// test routes\n// -----------------------------------------------------------------------------\n\nfunction emailTestInfo(): Response {\n return jsonOk({\n ...testEndpointInfo(\"EMAIL_TEST_ENABLED\"),\n send: \"POST /api/email-test\",\n inboundSimulation: \"POST /api/email-test/inbound\",\n });\n}\n\nasync function emailTest(req: Request): Promise {\n const denied = assertTestAccess(req, \"EMAIL_TEST_ENABLED\", \"Email test\");\n if (denied) return denied;\n const { body, error } = await readJsonOrError(req);\n if (error) return error;\n const result = await sendTestNotification(body);\n return jsonOk({ result });\n}\n\nasync function inboundEmailTest(req: Request): Promise {\n const denied = assertTestAccess(\n req,\n \"EMAIL_TEST_ENABLED\",\n \"Inbound email test\",\n );\n if (denied) return denied;\n const { body, error } = await readJsonOrError(req);\n if (error) return error;\n const result = await simulateInboundEmail(body);\n return jsonOk({ result });\n}\n\nfunction openAiTestInfo(): Response {\n return jsonOk({\n ...testEndpointInfo(\"OPENAI_TEST_ENABLED\"),\n run: \"POST /api/openai-test\",\n modelEnv: \"OPENAI_TEST_MODEL (default: gpt-5-nano)\",\n });\n}\n\nasync function openAiTest(req: Request): Promise {\n const denied = assertTestAccess(req, \"OPENAI_TEST_ENABLED\", \"OpenAI test\");\n if (denied) return denied;\n const { body, error } = await readJsonOrError(req);\n if (error) return error;\n const prompt = stringField(body, \"prompt\", \"Say hello from the template.\");\n return jsonOk({ result: await runOpenAiSmokeTest(prompt) });\n}\n","d-template",[170],"0cc9d012-4b8b-11f1-ae50-ee650bb23af1",["D",1778319601107],8,[28],"a8e0a8b4-4b17-11f1-9fc9-ee650bb23af1","deno.json","86adc21c-4951-11f1-b797-42b51c65c3df",55,["D",1778270041449],2,"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\",\n \"no-external-import\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"unstable\": [\"temporal\", \"worker-options\", \"sloppy-imports\", \"node-globals\"]\n}\n",[182],"a92b239e-4b17-11f1-a377-ee650bb23af1","cron.ts","aa651980-48c5-11f1-bfb8-42b51c65c3df",60,["D",1778270041959],4,"interval","// cron.ts — Two tasks (pulse + maintenance), one trigger. UI: + → CRON → \"every 5 minutes\"\n// Env: CRON_PULSE_INTERVAL (\"5m\"/\"1h\"/\"DISABLED\"), CRON_MAINTENANCE_INTERVAL (\"1h\"/\"1d\"/\"DISABLED\")\n\nimport { APP_NAME, env, parseDuration } from \"./backend/shared.ts\";\nimport { getMetaValue, pruneOldVisits, setMetaValue } from \"./backend/db.ts\";\n\n// ── Gate: true if intervalMs has elapsed since last run; records now in SQLite ──\n\nasync function shouldRun(\n metaKey: string,\n intervalMs: number,\n now: Date,\n): Promise {\n const lastStr = await getMetaValue(metaKey).catch(() => null);\n if (lastStr) {\n const elapsed = now.getTime() - new Date(lastStr).getTime();\n if (elapsed < intervalMs) return false;\n }\n await setMetaValue(metaKey, now.toISOString());\n return true;\n}\n\n// ── Entry point ───────────────────────────────────────────────────────────────\n\nexport default async function (\n _interval: { lastRunAt: Date | undefined },\n): Promise {\n const now = new Date();\n await pulse(now);\n await maintenance(now);\n}\n\n// ── Pulse — polling, health-checks, work-queues ───────────────────────────────\n\nasync function pulse(now: Date): Promise {\n const raw = env(\"CRON_PULSE_INTERVAL\", \"5m\");\n if (raw.toUpperCase() === \"DISABLED\") return;\n const intervalMs = parseDuration(raw) ?? parseDuration(\"5m\")!;\n if (!await shouldRun(\"cron_pulse_last_run\", intervalMs, now)) return;\n\n console.log(`⚡ [${APP_NAME}] Pulse (${raw})`);\n // TODO: add your polling/health-check logic here\n // const res = await fetch(\"https://api.example.com/feed\");\n}\n\n// ── Maintenance — prune, archive, digest ─────────────────────────────────────\n\nasync function maintenance(now: Date): Promise {\n const raw = env(\"CRON_MAINTENANCE_INTERVAL\", \"1d\");\n if (raw.toUpperCase() === \"DISABLED\") return;\n const intervalMs = parseDuration(raw) ?? parseDuration(\"1d\")!;\n if (!await shouldRun(\"cron_maintenance_last_run\", intervalMs, now)) return;\n\n console.log(`🔧 [${APP_NAME}] Maintenance (${raw})`);\n await pruneOldVisits(30);\n console.log(`✅ [${APP_NAME}] Maintenance done`);\n}\n",[190],"392ad19a-4b7e-11f1-8585-ee650bb23af1","README.md","aabf7b64-48c5-11f1-9920-42b51c65c3df",101,["D",1778314092196],"# Val Town Template\n\nStarter val with Preact SSR, Oat CSS, HTTP, Cron, Email, SQLite, Blob, and Val\nTown OpenAI. Fork it, delete what you don't need.\n\n---\n\n## High-Level Architecture\n\n```mermaid\ngraph TB\n subgraph VAL[\"val: sample-val\"]\n direction TB\n SHARED[\"backend/shared.ts
constants · env() · parseDuration()\"]\n\n subgraph TRIGGERS[\"Triggers\"]\n HTTP[\"index.http.ts
🟦 HTTP\"]\n CRON[\"cron.ts
🟪 Cron\"]\n EMAIL[\"email.ts
🟧 Email\"]\n end\n\n subgraph STORAGE[\"Storage\"]\n DB[\"backend/db.ts
SQLite\"]\n BLOB[\"backend/storage.ts
Blob (R2)\"]\n end\n\n subgraph FRONTEND[\"Frontend\"]\n APP[\"frontend/app.tsx
Preact SSR shell\"]\n UI[\"frontend/ui/*
sections · forms · styles\"]\n CLIENT[\"frontend/client.ts
inline enhancement script\"]\n end\n end\n\n SHARED --> HTTP\n SHARED --> CRON\n SHARED --> EMAIL\n\n HTTP -->|\"renderHomePage()\"| APP\n APP --> UI\n APP --> CLIENT\n HTTP -->|\"recordVisit()\"| DB\n HTTP -->|\"queries\"| DB\n\n CRON -->|\"prune / meta\"| DB\n CRON -->|\"read/write\"| BLOB\n\n EMAIL -->|\"save attachments\"| BLOB\n\n USER[\"🌐 User / Browser\"] -->|\"GET /\"| HTTP\n USER -->|\"GET /api/*\"| HTTP\n SCHEDULER[\"⏰ Scheduler\"] -->|\"every 5m\"| CRON\n SENDER[\"📧 Email Sender\"] -->|\"inbound\"| EMAIL\n```\n\n---\n\n## Quick Start\n\n**1. Create a new val from this template**\n\n```bash\ncd /path/to/uApps\nvt create my-app\ncd vals/my-app\n```\n\n**2. Push it to Val Town**\n\n```bash\nvt push\n# or: vt watch (auto-push on save)\n```\n\n> **Important:** upstream `vt` only auto-detects trigger type when creating a\n> new remote file. Existing files keep their Val Town metadata. If a file was\n> created as `script`, renaming it to `index.http.ts` is not enough — create a\n> fresh HTTP file or use the Val Town UI `+` → `HTTP` flow.\n\n**3. Open it in your browser**\n\n```bash\nvt url # prints your live URL\n```\n\nVisit the URL → you should see the starter page with a visit counter.\n\n**4. Try the API**\n\n```\nGET /api/health → JSON health check\nGET /api/visits → visit history from SQLite\nGET /api/email-test → email test status\nGET /api/openai-test → OpenAI test status\nPOST /api/echo → echoes your JSON body back\n```\n\n---\n\n## HTTP Trigger (`index.http.ts`)\n\n```mermaid\nsequenceDiagram\n actor User\n participant HTTP as index.http.ts\n participant Frontend as frontend/\n participant DB as backend/db.ts\n\n User->>HTTP: GET /\n HTTP->>DB: recordVisit(\"/\")\n HTTP->>Frontend: renderHomePage()\n Frontend-->>User: Preact HTML + Oat CSS + inline JS\n\n User->>HTTP: GET /api/visits\n HTTP->>DB: getRecentVisits(20)\n HTTP->>DB: getVisitCount()\n DB-->>HTTP: rows\n HTTP-->>User: { total, visits }\n\n User->>HTTP: POST /api/echo\n HTTP-->>User: { echo: body, receivedAt }\n```\n\nRoute dispatch via `if/else` path matching — no framework needed:\n\n| Route | Method | What it does |\n| ------------------------- | ------ | ---------------------------------------- |\n| `/` | GET | Renders Preact SSR page, records visit |\n| `/api/health` | GET | JSON health check |\n| `/api/visits` | GET | Recent visits + total count from SQLite |\n| `/api/echo` | POST | Echoes request body back |\n| `/api/email-test` | GET | Shows email smoke-test enablement |\n| `/api/email-test` | POST | Sends outbound test email when enabled |\n| `/api/email-test/inbound` | POST | Simulates inbound email handler locally |\n| `/api/openai-test` | GET | Shows OpenAI smoke-test enablement |\n| `/api/openai-test` | POST | Calls Val Town `std/openai` when enabled |\n| `*` | any | 404 JSON |\n\n---\n\n## Preact + Oat UI\n\nThe main page is server-rendered Preact:\n\n| File | Purpose |\n| -------------------------- | --------------------------------------------------------- |\n| `frontend/app.tsx` | HTML shell, Oat CSS include, Preact render entry |\n| `frontend/ui/sections.tsx` | Hero, architecture, auth, routes, footer |\n| `frontend/ui/forms.tsx` | Email, inbound email, and OpenAI smoke-test forms |\n| `frontend/ui/data.ts` | Route and feature copy |\n| `frontend/ui/styles.ts` | Small custom layer on top of Oat |\n| `frontend/client.ts` | Inline theme toggle, visit counter, JSON form submissions |\n\nOat is included in the simplest documented way:\n\n```html\n\n```\n\nNo frontend build step. No hydration bundle. Preact renders the HTML on each\nrequest and inlines a tiny script from `frontend/client.ts` to progressively\nenhance forms. The HTTP handler does not expose the server-side `.tsx` UI\nmodules as public static assets.\n\n---\n\n## Trigger Metadata Gotcha\n\nVal Town stores trigger type as file metadata. For **new** `.ts`, `.tsx`, `.js`,\nor `.jsx` files, `vt` infers type by checking the full path:\n\n| Path contains | New remote type |\n| ------------- | --------------- |\n| `http` | `http` |\n| `cron` | `interval` |\n| `email` | `email` |\n| none | `script` |\n\nUse explicit trigger filenames:\n\n| File | Required Val Town type |\n| --------------- | ---------------------- |\n| `index.http.ts` | `http` |\n| `cron.ts` | `interval` |\n| `email.ts` | `email` |\n\nAvoid trigger words in helper paths. For example, `backend/http-utils.ts` would\nbecome an HTTP trigger if created remotely as a new file. This template uses\n`backend/api-utils.ts` instead.\n\nThis repo records that intent in `val.yml`:\n\n```yaml\nfiles:\n index.http.ts: http\n cron.ts: interval\n email.ts: email\n```\n\nThat block is a **repo-side contract**. Upstream `vt` does not automatically\napply it, but this repo's wrapper can audit and apply it:\n\n```bash\nvt types # read-only: compare val.yml → Val Town metadata\nvt apply-types # mutates existing remote files to match val.yml\n```\n\nUnder the hood, `vt apply-types` uses Val Town's generated SDK/API:\n`vals.files.update(..., { type: \"http\" })`. This is API-supported, but the\nupstream `vt push` command intentionally avoids touching existing metadata.\n\nIf Val Town shows `(script) index.http.ts`, the file is not an HTTP trigger even\nif the code is a valid `Request → Response` handler.\n\nPreact, React, Vue, and Solid are not Val Town trigger types. They are just UI\nlibraries. Use `.http.tsx` when a JSX file should be an HTTP endpoint.\n\n---\n\n## HTTP Examples\n\n### Minimal HTTP probe (`test.http.ts`)\n\n`test.http.ts` is a tiny JSON endpoint used to verify `vt` new-file inference.\nDry-run confirms it is created as HTTP:\n\n```txt\nA (http) test.http.ts\n```\n\n### Preact SSR (`preact.http.tsx`)\n\n`preact.http.tsx` shows server-side rendered Preact with Val Town HTTP triggers.\nVal Town's JSX docs require a TypeScript per-file pragma so the JSX runtime is\nknown. This pragma must be the first line in every `.tsx` module that contains\nJSX:\n\n```tsx\n/** @jsxImportSource https://esm.sh/preact@10.29.1 */\nimport { render } from \"https://esm.sh/preact-render-to-string@6.6.7?deps=preact@10.29.1\";\n```\n\nThe pragma configures JSX only. It does not create an HTTP trigger; `http` in\n`preact.http.tsx` is what lets `vt` infer the new file as HTTP.\n\nDry-run confirms it is created as HTTP:\n\n```txt\nA (http) preact.http.tsx\n```\n\nBoth examples type-check locally with:\n\n```bash\ndeno check --allow-import test.http.ts preact.http.tsx\n```\n\n---\n\n## Cron Trigger (`cron.ts`)\n\n```mermaid\nflowchart LR\n subgraph CRON[\"cron.ts — runs every 5 min\"]\n direction TB\n ENTRY[\"export default()\"] --> PULSE[\"pulse()\"]\n ENTRY --> MAINT[\"maintenance()\"]\n\n PULSE -->|\"shouldRun()\"| P_GATE{\"Interval elapsed?\"}\n P_GATE -->|\"yes\"| P_WORK[\"⚡ Pulse task
(polling / health-checks)\"]\n P_GATE -->|\"no\"| P_SKIP[\"skip\"]\n\n MAINT -->|\"shouldRun()\"| M_GATE{\"Interval elapsed?\"}\n M_GATE -->|\"yes\"| M_WORK[\"🔧 Maintenance
(prune old visits)\"]\n M_GATE -->|\"no\"| M_SKIP[\"skip\"]\n end\n\n P_WORK --> DB[(SQLite)]\n M_WORK --> DB\n```\n\nTwo independent tasks, one trigger. Each gates itself via `shouldRun()` which\nstores last-run timestamps in SQLite.\n\n| Task | Default interval | Env var to control |\n| ----------- | ---------------- | ---------------------------------------------------------- |\n| Pulse | Every 5 min | `CRON_PULSE_INTERVAL` (`\"5m\"`, `\"1h\"`, `\"DISABLED\"`) |\n| Maintenance | Every 1 day | `CRON_MAINTENANCE_INTERVAL` (`\"1d\"`, `\"6h\"`, `\"DISABLED\"`) |\n\n---\n\n## Email Trigger (`email.ts`)\n\n```mermaid\nflowchart TB\n INBOUND[\"📧 Inbound email
.@valtown.email\"] --> HANDLER[\"emailHandler()\"]\n HANDLER --> LOG[\"log subject + body\"]\n HANDLER --> ATTACH[\"process attachments\"]\n\n subgraph OUTBOUND[\"Outbound helpers\"]\n NOTIFY[\"sendNotification()\"]\n ATTACH_SEND[\"sendWithAttachment()\"]\n end\n\n HANDLER -.->|\"optional: reply\"| NOTIFY\n ATTACH --> BLOB[(\"Blob Store\")]\n```\n\nTwo parts in one file:\n\n**Inbound** — `export default async function emailHandler(inbound)` handles\nincoming mail. Logs subject/body, saves attachments to Blob.\n\n**Outbound** — exported helper functions for sending email programmatically:\n\n- `sendNotification(subject, body, opts?)` — plain text email\n- `sendWithAttachment(subject, body, attachment)` — with base64 attachment\n- `sendTestNotification(body)` — HTTP smoke-test helper\n- `simulateInboundEmail(body)` — HTTP-safe inbound simulation helper\n\n> **Free plan:** outbound sends to yourself only. **Pro:** send to anyone.\n\n### Email smoke tests\n\nHTTP test routes are disabled by default:\n\n```bash\nEMAIL_TEST_ENABLED=true\n# optional shared secret for public endpoints\nTEMPLATE_TEST_SECRET=change-me\n```\n\nSend a test email to yourself:\n\n```bash\ncurl -X POST \"$BASE/api/email-test\" \\\n -H 'content-type: application/json' \\\n -H 'x-template-secret: change-me' \\\n -d '{\"subject\":\"Template email test\",\"text\":\"Hello from Val Town\"}'\n```\n\nSimulate inbound email without sending real mail:\n\n```bash\ncurl -X POST \"$BASE/api/email-test/inbound\" \\\n -H 'content-type: application/json' \\\n -H 'x-template-secret: change-me' \\\n -d '{\"from\":\"tester@example.com\",\"subject\":\"Inbound test\"}'\n```\n\n---\n\n## OpenAI Smoke Test\n\n`backend/openai-test.ts` calls Val Town's bundled `std/openai` proxy. No OpenAI\nAPI key is required for cheap models like `gpt-5-nano`.\n\nHTTP test routes are disabled by default:\n\n```bash\nOPENAI_TEST_ENABLED=true\nOPENAI_TEST_MODEL=gpt-5-nano\n# optional shared secret for public endpoints\nTEMPLATE_TEST_SECRET=change-me\n```\n\nRun the smoke test:\n\n```bash\ncurl -X POST \"$BASE/api/openai-test\" \\\n -H 'content-type: application/json' \\\n -H 'x-template-secret: change-me' \\\n -d '{\"prompt\":\"Say hello from Val Town.\"}'\n```\n\nVal Town limits the proxy to chat completions and rate-limits usage. Keep this\nendpoint gated because HTTP endpoints are public.\n\n---\n\n## Login and Auth Patterns\n\nVal Town HTTP endpoints are public regardless of val privacy. Use auth for any\nroute that writes data, sends email, spends tokens, or exposes private data.\n\n| Pattern | Best for | Sketch |\n| -------------- | ------------------- | ------------------------------------------------------------- |\n| Val Town OAuth | Community apps | Use `std/oauth`; link `/auth/login` and `/auth/logout` |\n| Basic Auth | Quick admin wall | Compare `Authorization` with `BASIC_AUTH_USER/PASS` env vars |\n| Cookie login | Personal dashboards | Check `APP_PASSWORD`, set HttpOnly cookie, clear on `/logout` |\n| Magic link | Multi-user app | Use SQLite + Email + a session library such as Lucia |\n\nThe template's smoke-test endpoints use a simpler gate:\n\n```bash\nEMAIL_TEST_ENABLED=true\nOPENAI_TEST_ENABLED=true\nTEMPLATE_TEST_SECRET=change-me\n```\n\nThat is intentional for a template: safe by default, easy to test, and easy to\nreplace with real login later.\n\n---\n\n## SQLite (`backend/db.ts`)\n\n```mermaid\nerDiagram\n VISITS {\n int id PK\n text page\n timestamp created_at\n }\n META {\n text key PK\n text value\n }\n```\n\nTwo tables, auto-migrated on first use:\n\n| Table | Purpose |\n| -------- | -------------------------------------------------------- |\n| `visits` | Page visit log — each HTTP request to `/` inserts a row |\n| `meta` | Key-value store — cron uses it for `last_run` timestamps |\n\nKey functions:\n\n- `recordVisit(page)` — insert a visit\n- `getRecentVisits(limit)` — latest N visits\n- `getVisitCount()` — total rows in `visits`\n- `getMetaValue(key)` / `setMetaValue(key, value)` — KV read/write\n- `pruneOldVisits(days)` — delete visits older than N days\n\n**Gotcha:** SQLite is per-val. Use the `/main.ts` import path (val-scoped), not\n`/dummy.ts` (shared).\n\n---\n\n## Blob Storage (`backend/storage.ts`)\n\n```mermaid\nflowchart LR\n subgraph BLOB[\"Account-scoped Blob (Cloudflare R2)\"]\n direction TB\n SET[\"blob.set(key, value)\"]\n GET[\"blob.get(key)\"]\n LIST[\"blob.list()\"]\n DEL[\"blob.delete(key)\"]\n end\n\n APP[\"any val in account\"] --> SET\n APP --> GET\n APP --> LIST\n APP --> DEL\n```\n\nShared across **all vals** in your account. Good for cross-val state, config,\nfile uploads.\n\nKey functions:\n\n- `saveJSON(key, data)` / `getJSON(key)` — typed JSON storage\n- `saveText(key, text)` — plain text\n- `listBlobs()` — all keys\n- `deleteBlob(key)` — remove\n\n> **Warning:** Blob is account-scoped. Key collisions across vals are possible —\n> use namespaced keys like `emails/`, `config/`, etc.\n\n---\n\n## Shared (`backend/shared.ts`)\n\nLayer 0 — every other file depends on this. Zero dependencies itself.\n\n| Export | Purpose |\n| -------------------- | ---------------------------------------------------------------------------- |\n| `APP_NAME` | App name constant (change this to rename your app) |\n| `Email` type | Inbound email shape (`from`, `to`, `subject`, `text`, `html`, `attachments`) |\n| `env(key, fallback)` | Read env vars with a default fallback |\n| `parseDuration(raw)` | Parse `\"5m\"`, `\"1h\"`, `\"1d\"` → milliseconds |\n\n---\n\n## Layering\n\n```mermaid\ngraph BT\n subgraph \"Layer 3 — Triggers\"\n HTTP[\"index.http.ts\"]\n CRON[\"cron.ts\"]\n EMAIL[\"email.ts\"]\n end\n\n subgraph \"Layer 2 — UI\"\n APP[\"frontend/app.tsx\"]\n FORMS[\"frontend/ui/forms.tsx\"]\n SECTIONS[\"frontend/ui/sections.tsx\"]\n DATA[\"frontend/ui/data.ts\"]\n STYLES[\"frontend/ui/styles.ts\"]\n end\n\n subgraph \"Layer 1 — Backend\"\n DB[\"backend/db.ts\"]\n BLOB[\"backend/storage.ts\"]\n API[\"backend/api-utils.ts\"]\n AI[\"backend/openai-test.ts\"]\n end\n\n subgraph \"Layer 0 — Foundation\"\n SHARED[\"backend/shared.ts\"]\n end\n\n HTTP --> APP\n HTTP --> DB\n HTTP --> API\n HTTP --> AI\n HTTP --> SHARED\n APP --> FORMS\n APP --> SECTIONS\n APP --> STYLES\n SECTIONS --> DATA\n CRON --> DB\n CRON --> BLOB\n CRON --> SHARED\n EMAIL --> API\n EMAIL --> BLOB\n EMAIL --> SHARED\n DB --> SHARED\n API --> SHARED\n AI --> SHARED\n```\n\nEvery file depends only on lower layers. You can delete any trigger or backend\nmodule without breaking the rest — except `shared.ts`, which everything depends\non.\n\n---\n\n## Customize\n\n**Rename the app** — change `APP_NAME` in `backend/shared.ts`.\n\n**Add a route** — add a new route branch in `index.http.ts → routeApi()`.\n\n**Add a SQLite table** — add a `CREATE TABLE IF NOT EXISTS` call in\n`db.ts → migrate()`.\n\n**Change visibility** — edit `val.yml`:\n\n```yaml\nname: \"my-app\"\npublic: false # true | false\norg: \"uapps\" # your org, or omit for personal\n```\n\n**Sync** — `vt push` / `vt pull` / `vt status`\n\n---\n\n## Key Files\n\n| File | Purpose |\n| ------------------------ | ------------------------------------------------------------------- |\n| `index.http.ts` | HTTP handler — routes, JSON API, Preact SSR page |\n| `test.http.ts` | Minimal JSON HTTP probe for trigger inference testing |\n| `preact.http.tsx` | Preact SSR HTTP trigger example |\n| `cron.ts` | Two scheduled tasks (pulse + maintenance) |\n| `email.ts` | Inbound email handler + outbound send helpers |\n| `backend/db.ts` | SQLite schema, queries, migration |\n| `backend/storage.ts` | Blob storage read/write/list/delete |\n| `backend/api-utils.ts` | JSON responses, body parsing, public test gates |\n| `backend/openai-test.ts` | Val Town `std/openai` smoke test |\n| `backend/shared.ts` | Constants, `env()`, `parseDuration()`, `Email` type |\n| `frontend/app.tsx` | Server-rendered Preact HTML shell with Oat CSS |\n| `frontend/ui/` | Preact sections, forms, static data, styles |\n| `frontend/client.ts` | Inline theme toggle, visit count, email/inbound/OpenAI form actions |\n| `val.yml` | Val name, visibility, org |\n",[199],"85f9d626-4951-11f1-a16a-42b51c65c3df","frontend","85f9d6f8-4951-11f1-a16a-42b51c65c3df",34,["D",1778074991402],"directory",[206],"86303568-4951-11f1-a193-42b51c65c3df","backend","8630361c-4951-11f1-a193-42b51c65c3df",35,["D",1778074991756],[213],"pulls","branches","forks","envVars",{"_225":64,"_227":158},"connections",{"_225":158,"_226":158},"count","unfilledCount","emptyCount",{"_43":212,"_32":213,"_30":214,"_145":-5,"_41":42,"_40":215,"_147":60,"_38":384,"_13":158,"_33":210,"_35":-5,"_24":25,"_151":-5,"_252":385,"_27":386},{"_43":376,"_32":377,"_30":378,"_145":214,"_41":42,"_40":379,"_147":25,"_38":380,"_13":158,"_33":281,"_35":381,"_24":25,"_151":-5,"_252":382,"_27":383},{"_43":368,"_32":369,"_30":370,"_145":214,"_41":42,"_40":371,"_147":25,"_38":372,"_13":179,"_33":281,"_35":373,"_24":25,"_151":-5,"_252":374,"_27":375},{"_43":360,"_32":361,"_30":362,"_145":214,"_41":42,"_40":363,"_147":25,"_38":364,"_13":158,"_33":281,"_35":365,"_24":25,"_151":-5,"_252":366,"_27":367},{"_43":352,"_32":353,"_30":354,"_145":214,"_41":42,"_40":355,"_147":25,"_38":356,"_13":194,"_33":281,"_35":357,"_24":25,"_151":-5,"_252":358,"_27":359},{"_43":343,"_32":344,"_30":345,"_145":214,"_41":42,"_40":346,"_147":25,"_38":347,"_13":348,"_33":281,"_35":349,"_24":25,"_151":-5,"_252":350,"_27":351},{"_43":205,"_32":206,"_30":207,"_145":-5,"_41":42,"_40":208,"_147":60,"_38":340,"_13":158,"_33":210,"_35":-5,"_24":25,"_151":-5,"_252":341,"_27":342},{"_43":335,"_32":302,"_30":296,"_145":207,"_41":42,"_40":336,"_147":25,"_38":337,"_13":158,"_33":210,"_35":-5,"_24":25,"_151":-5,"_252":338,"_27":339},{"_43":327,"_32":328,"_30":329,"_145":296,"_41":42,"_40":330,"_147":25,"_38":331,"_13":64,"_33":281,"_35":332,"_24":25,"_151":-5,"_252":333,"_27":334},{"_43":319,"_32":320,"_30":321,"_145":296,"_41":42,"_40":322,"_147":25,"_38":323,"_13":158,"_33":281,"_35":324,"_24":25,"_151":-5,"_252":325,"_27":326},{"_43":311,"_32":312,"_30":313,"_145":296,"_41":42,"_40":314,"_147":25,"_38":315,"_13":64,"_33":281,"_35":316,"_24":25,"_151":-5,"_252":317,"_27":318},{"_43":303,"_32":304,"_30":305,"_145":296,"_41":42,"_40":306,"_147":25,"_38":307,"_13":64,"_33":281,"_35":308,"_24":25,"_151":-5,"_252":309,"_27":310},{"_43":293,"_32":294,"_30":295,"_145":296,"_41":42,"_40":297,"_147":25,"_38":298,"_13":64,"_33":281,"_35":299,"_24":25,"_151":-5,"_252":300,"_27":301},{"_43":285,"_32":286,"_30":287,"_145":207,"_41":42,"_40":288,"_147":25,"_38":289,"_13":64,"_33":281,"_35":290,"_24":25,"_151":-5,"_252":291,"_27":292},{"_43":276,"_32":277,"_30":278,"_145":207,"_41":42,"_40":279,"_147":25,"_38":280,"_13":158,"_33":281,"_35":282,"_24":25,"_151":-5,"_252":283,"_27":284},{"_43":198,"_32":199,"_30":200,"_145":-5,"_41":42,"_40":201,"_147":25,"_38":273,"_13":173,"_33":20,"_35":203,"_24":25,"_151":-5,"_252":274,"_27":275},{"_43":189,"_32":190,"_30":191,"_145":-5,"_41":42,"_40":192,"_147":25,"_38":270,"_13":194,"_33":195,"_35":196,"_24":25,"_151":-5,"_252":271,"_27":272},{"_43":181,"_32":182,"_30":183,"_145":-5,"_41":42,"_40":184,"_147":25,"_38":267,"_13":186,"_33":20,"_35":187,"_24":25,"_151":-5,"_252":268,"_27":269},{"_43":177,"_32":28,"_30":31,"_145":-5,"_41":42,"_40":14,"_147":25,"_38":264,"_13":179,"_33":34,"_35":37,"_24":25,"_151":-5,"_252":265,"_27":266},{"_43":169,"_32":170,"_30":58,"_145":-5,"_41":42,"_40":171,"_147":25,"_38":261,"_13":173,"_33":159,"_35":174,"_24":25,"_151":175,"_252":262,"_27":263},{"_43":162,"_32":163,"_30":164,"_145":-5,"_41":42,"_40":165,"_147":25,"_38":258,"_13":158,"_33":159,"_35":167,"_24":25,"_151":-5,"_252":259,"_27":260},{"_43":153,"_32":154,"_30":155,"_145":-5,"_41":42,"_40":156,"_147":25,"_38":255,"_13":158,"_33":159,"_35":160,"_24":25,"_151":-5,"_252":256,"_27":257},{"_43":142,"_32":143,"_30":144,"_145":-5,"_41":42,"_40":146,"_147":25,"_38":251,"_13":149,"_33":20,"_35":150,"_24":25,"_151":-5,"_252":253,"_27":254},["D",1778319601077],"children",[],[143],["D",1778274175790],[],[154],["D",1778274175528],[],[163],["D",1778274176601],[],[170],["D",1778319601107],[],[28],["D",1778270041449],[],[182],["D",1778270041959],[],[190],["D",1778314092196],[],[199],"48ed4c1e-4b21-11f1-b54f-ee650bb23af1","client.ts","48ed4cf0-4b21-11f1-b54f-ee650bb23af1",87,["D",1778274175458],"script","// client.ts — Inline browser script for progressive enhancement.\n\nexport const clientJs = String.raw`\nconst themeToggle = document.getElementById(\"theme-toggle\");\nconst forms = {\n email: document.getElementById(\"email-form\"),\n inbound: document.getElementById(\"inbound-form\"),\n openai: document.getElementById(\"openai-form\")\n};\n\nfunction initTheme() {\n const saved = localStorage.getItem(\"theme\") || \"auto\";\n applyTheme(saved);\n setThemeLabel(saved);\n}\n\nfunction cycleTheme() {\n const current = localStorage.getItem(\"theme\") || \"auto\";\n const next = current === \"auto\" ? \"light\" : current === \"light\" ? \"dark\" : \"auto\";\n localStorage.setItem(\"theme\", next);\n applyTheme(next);\n setThemeLabel(next);\n}\n\nfunction applyTheme(theme) {\n if (theme === \"auto\") {\n document.documentElement.removeAttribute(\"data-theme\");\n return;\n }\n document.documentElement.dataset.theme = theme;\n}\n\nfunction setThemeLabel(theme) {\n themeToggle.textContent = \"Theme: \" + theme;\n}\n\nasync function fetchVisits() {\n const el = document.getElementById(\"visit-count\");\n try {\n const data = await getJson(\"/api/visits\");\n el.textContent = data.total ?? \"—\";\n } catch (err) {\n console.error(\"Failed to fetch visits:\", err);\n el.textContent = \"—\";\n }\n}\n\nasync function getJson(path) {\n const res = await fetch(path);\n const data = await res.json();\n if (!res.ok) throw new Error(data.error || \"HTTP \" + res.status);\n return data;\n}\n\nasync function postJson(path, body, secret) {\n const headers = { \"content-type\": \"application/json\" };\n if (secret) headers[\"x-template-secret\"] = secret;\n const res = await fetch(path, {\n method: \"POST\",\n headers,\n body: JSON.stringify(body)\n });\n const data = await res.json();\n if (!res.ok) throw new Error(data.error || \"HTTP \" + res.status);\n return data;\n}\n\nfunction readForm(form) {\n return Object.fromEntries(new FormData(form).entries());\n}\n\nfunction showResult(id, value) {\n document.getElementById(id).textContent = JSON.stringify(value, null, 2);\n}\n\nfunction showError(id, err) {\n document.getElementById(id).textContent = \"Error: \" + err.message;\n}\n\nfunction wireJsonForm(form, path, resultId, payloadKeys) {\n form.addEventListener(\"submit\", async (event) => {\n event.preventDefault();\n const fields = readForm(form);\n const body = Object.fromEntries(payloadKeys.map((key) => [key, fields[key]]));\n try {\n showResult(resultId, { status: \"sending\" });\n showResult(resultId, await postJson(path, body, String(fields.secret || \"\")));\n } catch (err) {\n showError(resultId, err);\n }\n });\n}\n\nthemeToggle.addEventListener(\"click\", cycleTheme);\nwireJsonForm(forms.email, \"/api/email-test\", \"email-result\", [\"subject\", \"text\", \"to\"]);\nwireJsonForm(forms.inbound, \"/api/email-test/inbound\", \"inbound-result\", [\"from\", \"subject\", \"text\"]);\nwireJsonForm(forms.openai, \"/api/openai-test\", \"openai-result\", [\"prompt\"]);\ninitTheme();\nfetchVisits();\n`;\n",[],[206,277],"0c77fb84-4b8b-11f1-8936-ee650bb23af1","app.tsx","48f1fc50-4b21-11f1-aeb4-ee650bb23af1",103,["D",1778319600631],"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// app.tsx — Server-rendered Preact documentation app for the template val.\n\nimport { render } from \"https://esm.sh/preact-render-to-string@6.6.7?deps=preact@10.29.1\";\nimport { clientJs } from \"./client.ts\";\nimport {\n Footer,\n Hero,\n ModuleDocs,\n RouteTable,\n StatusGrid,\n} from \"./ui/sections.tsx\";\nimport { css } from \"./ui/styles.ts\";\nimport type { HomePageProps } from \"./ui/types.ts\";\n\n// -----------------------------------------------------------------------------\n// public renderer\n// -----------------------------------------------------------------------------\n\nexport function renderHomePage(props: HomePageProps): string {\n return \"\" + render();\n}\n\n// -----------------------------------------------------------------------------\n// shell\n// -----------------------------------------------------------------------------\n\nfunction App(props: HomePageProps) {\n return (\n \n \n \n \n {props.appName}\n \n \n \n \n

\n \n \n \n \n

\n \n \n \n );\n}\n",[],[206,286],"0c7e0dee-4b8b-11f1-92c4-ee650bb23af1","types.ts","48ba57fa-4b21-11f1-b54f-ee650bb23af1","4888d3e2-4b21-11f1-81f8-ee650bb23af1",104,["D",1778319600684],"// types.ts — Shared Preact UI data contracts.\n\nexport interface HomePageProps {\n appName: string;\n renderedAt: string;\n}\n\nexport interface RouteItem {\n method: string;\n path: string;\n purpose: string;\n}\n\nexport interface StatItem {\n title: string;\n value: string;\n note: string;\n id?: string;\n}\n\nexport interface ModuleDoc {\n key: string;\n title: string;\n badge: string;\n summary: string;\n files: string[];\n points: string[];\n}\n",[],[206,302,294],"ui","0c914724-4b8b-11f1-afdc-ee650bb23af1","styles.ts","48c5ebec-4b21-11f1-9ccf-ee650bb23af1",106,["D",1778319600687],"// styles.ts — Small theme and layout layer on top of Oat CSS.\n\nexport const css = `\n:root {\n color-scheme: light;\n --bg: #f8fafc;\n --fg: #111827;\n --muted: #64748b;\n --brand: #7c3aed;\n --line: rgb(15 23 42 / 0.12);\n --soft: color-mix(in srgb, var(--brand), transparent 90%);\n}\n[data-theme=\"dark\"] {\n color-scheme: dark;\n --bg: #0f172a;\n --fg: #e2e8f0;\n --muted: #94a3b8;\n --brand: #a78bfa;\n --line: rgb(226 232 240 / 0.14);\n}\n[data-theme=\"light\"] { color-scheme: light; }\nbody { background: linear-gradient(135deg, var(--bg), var(--soft)); color: var(--fg); }\n.page { max-width: 1120px; margin: 0 auto; padding: 40px 20px 72px; }\n.hero { display: grid; gap: 18px; margin-bottom: 24px; }\n.hero h1 { font-size: clamp(2.4rem, 8vw, 5.8rem); letter-spacing: -0.07em; margin: 0; }\n.hero p { max-width: 780px; }\n.eyebrow { color: var(--brand); font-weight: 700; letter-spacing: 0.12em; margin: 0; text-transform: uppercase; }\n.actions { align-items: center; display: flex; flex-wrap: wrap; gap: 10px; }\n.theme-field { align-items: center; display: inline-flex; gap: 8px; margin: 0; }\n.grid { display: grid; gap: 16px; }\n.four { grid-template-columns: repeat(auto-fit, minmax(190px, 1fr)); }\n.card { border-color: var(--line); box-shadow: 0 18px 60px rgb(15 23 42 / 0.08); }\n.spacious { margin-top: 18px; padding: 28px; }\n.section-head { align-items: end; display: flex; gap: 16px; justify-content: space-between; margin-bottom: 18px; }\n.section-head p { max-width: 520px; }\n.stat span { color: var(--muted); font-size: 0.86rem; text-transform: uppercase; }\n.stat strong { display: block; font-size: 2rem; margin: 6px 0; }\n.docs-layout { display: grid; gap: 18px; grid-template-columns: minmax(180px, 260px) 1fr; }\n.doc-tabs { display: grid; gap: 8px; }\n.doc-tab { justify-content: start; padding: 12px 14px; text-align: left; }\n.doc-tab[aria-selected=\"true\"] { border-color: var(--brand); box-shadow: 0 0 0 2px var(--soft); }\n.doc-tab span, .badge { color: var(--muted); display: block; font-size: 0.85rem; text-transform: uppercase; }\n.doc-panel { border: 1px solid var(--line); border-radius: 16px; padding: 22px; }\n.file-list { display: flex; flex-wrap: wrap; gap: 8px; margin: 16px 0; }\ntable code, .file-list code { white-space: nowrap; }\n.footer { color: var(--muted); margin-top: 28px; text-align: center; }\n@media (max-width: 720px) {\n .docs-layout, .section-head { display: block; }\n .doc-tabs { margin-bottom: 14px; }\n}\n`;\n",[],[206,302,304],"0c7086f6-4b8b-11f1-ac34-ee650bb23af1","sections.tsx","490e4de2-4b21-11f1-874d-ee650bb23af1",102,["D",1778319600629],"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// sections.tsx — Declarative documentation sections.\n\nimport { moduleDocs, routes, stats } from \"./data.ts\";\nimport type { HomePageProps, ModuleDoc, StatItem } from \"./types.ts\";\n\n// -----------------------------------------------------------------------------\n// top sections\n// -----------------------------------------------------------------------------\n\nexport function Hero(props: HomePageProps) {\n return (\n

Val Town starter · Preact SSR · one HTTP file

{props.appName}

\n A compact, inspectable template for Val Town apps. The README stays\n short; this page carries the module-by-module documentation.\n

\n \n

\n Public endpoint rule:{\" \"}\n every Val Town HTTP route is reachable by URL. Add auth before exposing\n private data, writes, or expensive calls.\n

\n );\n}\n\nexport function StatusGrid() {\n return (\n

\n {stats.map((item) => )}\n

\n );\n}\n\nfunction Stat(props: { item: StatItem }) {\n return (\n

\n {props.item.title}\n {props.item.value}\n

{props.item.note}

\n );\n}\n\n// -----------------------------------------------------------------------------\n// docs\n// -----------------------------------------------------------------------------\n\nexport function ModuleDocs() {\n return (\n

Docs

Pick a module

\n The content below is data-driven from{\" \"}\n frontend/ui/data.ts.\n

\n {moduleDocs.map((doc, index) => )}\n

\n {moduleDocs.map((doc, index) => (\n \n ))}\n

\n );\n}\n\nfunction DocTab(props: { doc: ModuleDoc; active: boolean }) {\n return (\n \n {props.doc.title}\n {props.doc.badge}\n \n );\n}\n\nfunction DocPanel(props: { doc: ModuleDoc; active: boolean }) {\n return (\n

\n );\n}\n\nfunction FileList(props: { files: string[] }) {\n return (\n

\n {props.files.map((file) => {file})}\n

\n );\n}\n\n// -----------------------------------------------------------------------------\n// reference\n// -----------------------------------------------------------------------------\n\nexport function RouteTable() {\n return (\n

HTTP

Routes

\n Keep this list small. Add real auth before adding powerful routes.\n

\n \n \n \n \n \n \n \n \n \n {routes.map((r) => (\n \n \n \n \n \n ))}\n \n

Method	Path	Purpose
{r.method}	\n `{r.path}`\n	{r.purpose}

\n );\n}\n\nexport function Footer(props: { renderedAt: string }) {\n return (\n \n );\n}\n",[],[206,302,312],"48d4e476-4b21-11f1-b96f-ee650bb23af1","forms.tsx","48d4e52a-4b21-11f1-b96f-ee650bb23af1",86,["D",1778274175108],"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// forms.tsx — Public smoke-test forms.\n\n// -----------------------------------------------------------------------------\n// aggregate\n// -----------------------------------------------------------------------------\n\nexport function InteractiveTests() {\n return (\n

Test the platform features

\n These forms call public HTTP routes. They are disabled until env flags\n are set.\n

\n \n \n \n

\n );\n}\n\n// -----------------------------------------------------------------------------\n// forms\n// -----------------------------------------------------------------------------\n\nfunction EmailForm() {\n return (\n

📤 Outbound email

\n Enable with{\" \"}\n EMAIL_TEST_ENABLED=true. Free plans send to yourself.\n

\n \n Subject \n \n \n Text{\" \"}\n \n \n \n Optional recipient{\" \"}\n \n \n \n Optional secret{\" \"}\n \n \n \n

Waiting…

\n );\n}\n\nfunction InboundForm() {\n return (\n

📥 Inbound email

\n Simulate <user>.<val>@valtown.email{\" \"}\n without real mail.\n

\n \n From \n \n \n Subject \n \n \n Text{\" \"}\n \n \n \n Optional secret{\" \"}\n \n \n \n

Waiting…

\n );\n}\n\nfunction OpenAiForm() {\n return (\n

🤖 OpenAI proxy

\n Enable with{\" \"}\n OPENAI_TEST_ENABLED=true. Uses Val Town's proxy.\n

\n \n Prompt{\" \"}\n \n \n \n Optional secret{\" \"}\n \n \n \n

Waiting…

\n );\n}\n",[],[206,302,320],"0c834bc4-4b8b-11f1-89d0-ee650bb23af1","data.ts","48c092be-4b21-11f1-81f8-ee650bb23af1",105,["D",1778319600727],"// data.ts — Declarative page copy for the template docs.\n\nimport type { ModuleDoc, RouteItem, StatItem } from \"./types.ts\";\n\nexport const stats: StatItem[] = [\n {\n title: \"HTTP files\",\n value: \"1\",\n note: \"Only index.http.ts is public HTTP surface.\",\n },\n {\n title: \"Visits\",\n value: \"…\",\n note: \"Loaded from SQLite via /api/visits.\",\n id: \"visit-count\",\n },\n {\n title: \"Frontend\",\n value: \"Preact\",\n note: \"Server-rendered HTML with Oat CSS.\",\n },\n {\n title: \"Triggers\",\n value: \"3\",\n note: \"HTTP, Cron, and Email examples.\",\n },\n];\n\nexport const routes: RouteItem[] = [\n { method: \"GET\", path: \"/\", purpose: \"Preact docs UI\" },\n { method: \"GET\", path: \"/api/health\", purpose: \"Runtime health check\" },\n { method: \"GET\", path: \"/api/visits\", purpose: \"SQLite visit counter\" },\n];\n\nexport const moduleDocs: ModuleDoc[] = [\n {\n key: \"http\",\n title: \"HTTP trigger\",\n badge: \"public edge\",\n summary:\n \"index.http.ts is the only HTTP file. It renders Preact and exposes a tiny JSON API.\",\n files: [\"index.http.ts\", \"backend/api-utils.ts\"],\n points: [\n \"Val Town HTTP endpoints are public even when source is private.\",\n \"Root requests render frontend/app.tsx and record a SQLite visit.\",\n \"API routes stay boring: /api/health and /api/visits only.\",\n \"Add auth before adding write, private-data, or expensive routes.\",\n ],\n },\n {\n key: \"preact\",\n title: \"Preact UI\",\n badge: \"SSR\",\n summary:\n \"The webapp is the detailed documentation surface for this template.\",\n files: [\n \"frontend/app.tsx\",\n \"frontend/ui/sections.tsx\",\n \"frontend/ui/data.ts\",\n \"frontend/ui/styles.ts\",\n \"frontend/client.ts\",\n ],\n points: [\n \"Every .tsx file with JSX starts with @jsxImportSource.\",\n \"frontend/ui/data.ts owns copy; components map that data declaratively.\",\n \"Oat CSS supplies defaults; styles.ts adds one small theme layer.\",\n \"client.ts only enhances theme, docs selection, and visit count.\",\n ],\n },\n {\n key: \"sqlite\",\n title: \"SQLite\",\n badge: \"state\",\n summary: \"Per-val SQLite stores visit rows and cron metadata.\",\n files: [\"backend/db.ts\"],\n points: [\n \"Use https://esm.town/v/std/sqlite/main.ts for the val-scoped database.\",\n \"Migrations run lazily so local/off-platform rendering can still work.\",\n \"template_visits powers the visit counter.\",\n \"template_meta stores cron last-run timestamps.\",\n ],\n },\n {\n key: \"cron\",\n title: \"Cron trigger\",\n badge: \"scheduled\",\n summary:\n \"cron.ts demonstrates small scheduled tasks gated by env-configured intervals.\",\n files: [\"cron.ts\", \"backend/shared.ts\", \"backend/db.ts\"],\n points: [\n \"Val Town cron minimum interval is 15 minutes and runs in UTC.\",\n \"CRON_PULSE_INTERVAL defaults to 5m; set DISABLED to skip.\",\n \"CRON_MAINTENANCE_INTERVAL defaults to 1d and prunes old visits.\",\n \"shouldRun() records timestamps in SQLite before work begins.\",\n ],\n },\n {\n key: \"email\",\n title: \"Email trigger\",\n badge: \"inbound/outbound\",\n summary:\n \"email.ts handles inbound mail and exports simple outbound helpers.\",\n files: [\"email.ts\", \"backend/shared.ts\"],\n points: [\n \"Inbound address shape: .@valtown.email.\",\n \"Free plans send outbound mail to yourself; Pro can send to anyone.\",\n \"Attachments are File objects; save them to Blob if needed.\",\n \"Do not expose email-sending HTTP routes without auth.\",\n ],\n },\n {\n key: \"blob\",\n title: \"Blob storage\",\n badge: \"account scoped\",\n summary:\n \"backend/storage.ts wraps Val Town Blob for JSON, text, list, and delete.\",\n files: [\"backend/storage.ts\"],\n points: [\n \"Blob is shared across all vals in the account.\",\n \"Namespace keys to avoid collisions, e.g. template/config.json.\",\n \"Use Blob for uploads, cached config, and cross-val state.\",\n \"Keep secrets in Val Town environment variables, not Blob.\",\n ],\n },\n {\n key: \"metadata\",\n title: \"File metadata\",\n badge: \"vt gotcha\",\n summary:\n \"Val Town trigger type is metadata; filenames only help when creating new remote files.\",\n files: [\"val.yml\", \"deno.json\"],\n points: [\n \"New files containing http, cron, or email infer HTTP, interval, or email type.\",\n \"Existing remote files keep sticky metadata; verify with vt types.\",\n \"val.yml files: records the intended trigger contract for this repo.\",\n \"deno.json carries Val Town types and must not fake external import maps.\",\n ],\n },\n];\n",[],[206,302,328],"4888d338-4b21-11f1-81f8-ee650bb23af1",82,["D",1778274174805],[236,237,238,239,240],[206,302],["D",1778074991402],[235,241,242],[206],"a8f09454-4b17-11f1-b625-ee650bb23af1","storage.ts","aa15db36-48c5-11f1-8bd1-42b51c65c3df",57,["D",1778270041461],6,"// storage.ts — Blob storage helpers (account-scoped; namespace keys with PREFIX)\n// Docs: https://docs.val.town/reference/std/blob\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\n/** Key prefix to avoid collisions with other vals. */\nconst PREFIX = \"template/\";\n\n// ── Read / Write ─────────────────────────────────────────────────────────────\n\n/** Store a JSON-serialisable value under a namespaced key. */\nexport async function saveJSON(key: string, value: unknown): Promise {\n await blob.setJSON(`${PREFIX}${key}`, value);\n}\n\n/** Retrieve a previously stored JSON value, or null if missing. */\nexport async function loadJSON(key: string): Promise {\n try {\n const data = await blob.getJSON(`${PREFIX}${key}`);\n return data !== undefined ? (data as T) : null;\n } catch {\n return null;\n }\n}\n\n// ── List / Delete ────────────────────────────────────────────────────────────\n\n/** List all blob keys under our namespace. */\nexport async function listKeys(): Promise {\n const keys = await blob.list(PREFIX);\n // Strip the prefix so callers see clean names\n return keys.map((k: { key: string }) => k.key.replace(PREFIX, \"\"));\n}\n\n/** Delete a namespaced blob. */\nexport async function remove(key: string): Promise {\n await blob.delete(`${PREFIX}${key}`);\n}\n",[],[213,344],"a8e546d0-4b17-11f1-bccd-ee650bb23af1","shared.ts","aada9642-48c5-11f1-b1d7-42b51c65c3df",56,["D",1778270041498],"// shared.ts — Constants, types, utils. No external dependencies.\n\n// ── Constants ─────────────────────────────────────────────────────────────────\n\nexport const APP_NAME = \"Val Town Template\";\n\n// ── Env ───────────────────────────────────────────────────────────────────────\n// Deno.env.set() is a no-op on Val Town — set vars in the UI sidebar only.\n\nexport function env(key: string, fallback = \"\"): string {\n return Deno.env.get(key) ?? fallback;\n}\n\n// ── Duration ──────────────────────────────────────────────────────────────────\n// \"30s\" | \"5m\" | \"2h\" | \"1d\" → ms. \"DISABLED\" | invalid → null.\nexport function parseDuration(raw: string): number | null {\n const s = raw.trim();\n if (s.toUpperCase() === \"DISABLED\") return null;\n const m = /^(\\d+)(s|m|h|d)$/i.exec(s);\n if (!m) return null;\n const n = parseInt(m[1], 10);\n if (n <= 0) return null;\n const factors: Record = {\n s: 1_000,\n m: 60_000,\n h: 3_600_000,\n d: 86_400_000,\n };\n return n * factors[m[2].toLowerCase()];\n}\n\n// ── Types ─────────────────────────────────────────────────────────────────────\n// Matches the platform's inbound Email trigger interface.\n\nexport interface Email {\n from: string;\n to: string[];\n cc?: string | string[];\n bcc?: string | string[];\n subject?: string;\n text?: string;\n html?: string;\n attachments: File[];\n headers: Record;\n}\n",[],[213,353],"490480aa-4b21-11f1-861e-ee650bb23af1","openai-test.ts","49048168-4b21-11f1-861e-ee650bb23af1",90,["D",1778274175617],"// openai-test.ts — Val Town std/openai smoke test helpers.\n\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nimport { env } from \"./shared.ts\";\n\nexport interface OpenAiTestResult {\n model: string;\n prompt: string;\n reply: string;\n testedAt: string;\n}\n\n// -----------------------------------------------------------------------------\n// smoke test\n// -----------------------------------------------------------------------------\n\nexport async function runOpenAiSmokeTest(\n prompt: string,\n): Promise {\n const model = env(\"OPENAI_TEST_MODEL\", \"gpt-5-nano\");\n const openai = new OpenAI();\n const completion: unknown = await openai.chat.completions.create({\n model,\n max_tokens: 80,\n messages: [\n {\n role: \"system\",\n content: \"Reply with one short sentence. Mention Val Town once.\",\n },\n { role: \"user\", content: prompt },\n ],\n });\n\n return {\n model,\n prompt,\n reply: extractReply(completion),\n testedAt: new Date().toISOString(),\n };\n}\n\nfunction extractReply(value: unknown): string {\n const choices = isRecord(value) ? value.choices : null;\n const first = Array.isArray(choices) ? choices[0] : null;\n const message = isRecord(first) ? first.message : null;\n const content = isRecord(message) ? message.content : null;\n return typeof content === \"string\" ? content : \"\";\n}\n\nfunction isRecord(value: unknown): value is Record {\n return typeof value === \"object\" && value !== null;\n}\n",[],[213,361],"a919ef02-4b17-11f1-bff1-ee650bb23af1","db.ts","aad2cfa2-48c5-11f1-bfb8-42b51c65c3df",59,["D",1778270041839],"// db.ts — SQLite helpers (Turso-backed, shared across all vals — namespace tables)\n// Docs: https://docs.val.town/reference/std/sqlite/\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// ── Schema Migration ─────────────────────────────────────────────────────────\n// Lazily run on first DB call, not at import time. This prevents crashes\n// when running locally (off Val Town) where the SQLite API isn't available.\n\nlet migrated = false;\n\nasync function migrate(): Promise {\n if (migrated) return;\n migrated = true;\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS template_visits (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n path TEXT NOT NULL,\n ts TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS template_meta (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL\n )`,\n ]);\n}\n\n// ── Queries ──────────────────────────────────────────────────────────────────\n\n/** Record a page visit. */\nexport async function recordVisit(path: string): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO template_visits (path) VALUES (?)`,\n args: [path],\n });\n}\n\n/** Get total visit count. */\nexport async function getVisitCount(): Promise {\n await migrate();\n const { rows } = await sqlite.execute(\n `SELECT COUNT(*) as count FROM template_visits`,\n );\n return Number(rows[0][0]);\n}\n\n// ── Meta Key-Value ────────────────────────────────────────────────────────────\n\n/** Read a value from the `template_meta` key-value store. Returns null if missing. */\nexport async function getMetaValue(key: string): Promise {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT value FROM template_meta WHERE key = ?`,\n args: [key],\n });\n return rows[0] ? String(rows[0][0]) : null;\n}\n\n/** Write (upsert) a value into the `template_meta` key-value store. */\nexport async function setMetaValue(key: string, value: string): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO template_meta (key, value) VALUES (?, ?)`,\n args: [key, value],\n });\n}\n\n/** Get the N most recent visits. */\nexport async function getRecentVisits(\n limit = 10,\n): Promise> {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT id, path, ts FROM template_visits ORDER BY ts DESC LIMIT ?`,\n args: [limit],\n });\n return (rows as unknown as unknown[][]).map((r) => ({\n id: Number(r[0]),\n path: String(r[1]),\n ts: String(r[2]),\n }));\n}\n\n/** Delete visits older than `days` days. Safe to call before migrate runs. */\nexport async function pruneOldVisits(days = 30): Promise {\n await migrate();\n await sqlite.execute({\n sql: `DELETE FROM template_visits WHERE ts < datetime('now', ?)`,\n args: [`-${days} days`],\n });\n}\n",[],[213,369],"491d0e22-4b21-11f1-8ab3-ee650bb23af1","api-utils.ts","491d0f08-4b21-11f1-8ab3-ee650bb23af1",92,["D",1778274175773],"// api-utils.ts — Small HTTP helpers for public test endpoints.\n\nimport { env } from \"./shared.ts\";\n\nexport type JsonObject = Record;\n\n// -----------------------------------------------------------------------------\n// responses\n// -----------------------------------------------------------------------------\n\nexport function jsonError(message: string, status = 400): Response {\n return Response.json({ ok: false, error: message }, { status });\n}\n\nexport function jsonOk(data: JsonObject = {}): Response {\n return Response.json({ ok: true, ...data });\n}\n\n// -----------------------------------------------------------------------------\n// request parsing\n// -----------------------------------------------------------------------------\n\nexport async function readJsonObject(req: Request): Promise {\n const text = await req.text();\n if (text.trim() === \"\") return {};\n const parsed: unknown = JSON.parse(text);\n if (!isJsonObject(parsed)) throw new Error(\"Expected a JSON object body\");\n return parsed;\n}\n\nexport async function readJsonOrError(\n req: Request,\n): Promise<\n { body: JsonObject; error: null } | { body: null; error: Response }\n> {\n try {\n return { body: await readJsonObject(req), error: null };\n } catch {\n return { body: null, error: jsonError(\"Invalid JSON object body\", 400) };\n }\n}\n\nexport function stringField(\n input: JsonObject,\n key: string,\n fallback = \"\",\n): string {\n const value = input[key];\n return typeof value === \"string\" && value.trim() !== \"\" ? value : fallback;\n}\n\nfunction isJsonObject(value: unknown): value is JsonObject {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n// -----------------------------------------------------------------------------\n// test gates\n// -----------------------------------------------------------------------------\n\nexport function testEndpointInfo(flag: string): JsonObject {\n return {\n enabled: isEnvFlagEnabled(flag),\n enableWithEnv: `${flag}=true`,\n optionalSecretEnv: \"TEMPLATE_TEST_SECRET\",\n optionalSecretHeader: \"x-template-secret\",\n };\n}\n\nexport function assertTestAccess(\n req: Request,\n flag: string,\n label: string,\n): Response | null {\n if (!isEnvFlagEnabled(flag)) {\n return jsonError(\n `${label} is disabled. Set ${flag}=true in Val Town.`,\n 403,\n );\n }\n\n const secret = env(\"TEMPLATE_TEST_SECRET\");\n if (!secret) return null;\n\n const actual = req.headers.get(\"x-template-secret\");\n return actual === secret\n ? null\n : jsonError(\"Invalid or missing test secret\", 401);\n}\n\nfunction isEnvFlagEnabled(key: string): boolean {\n return env(key).toLowerCase() === \"true\";\n}\n",[],[213,377],["D",1778074991756],[229,230,231,232,233],[213],["D",1777994172310],["D",1789511441255],{"_101":100,"_109":105},{"_101":100,"_102":103,"_104":105,"_18":56,"_106":107,"_108":25},{"_13":90,"_32":91,"_43":42,"_92":44,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":45,"_99":100},"ctx",{"_83":-5,"_129":425,"_426":427,"_428":429,"_430":25,"_431":25,"_432":25,"_433":60,"_434":-5,"_435":-7,"_436":-7,"_437":158,"_438":25,"_439":25,"_440":-5,"_441":25,"_442":25,"_443":25,"_444":-5},"ENV",{"_396":397,"_398":399,"_400":91,"_401":402,"_403":404,"_405":406,"_407":408,"_409":410,"_411":412,"_413":414,"_415":416,"_417":418,"_419":420,"_421":422,"_423":424},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v108