[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_479":480,"_481":482},"routes/_app.x.$handle.$name",{"_100":99,"_31":44,"_109":90,"_26":110,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":24,"_124":125,"_126":59,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_31":44,"_37":45,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":54,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":24},"version",257,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":24},"previous","deleted",false,"deletedHere","path","frontend/astryx/components.ts","latestPath","fileId","abfdcca6-a4a5-11f1-8a13-1607ee4eb77e","name","components.ts","fileType","script","content","// components.ts — Single pin point for every Astryx/React/StyleX import used by\n// this val. Bump versions here only; every page imports components from this\n// barrel instead of touching esm.sh URLs directly.\n//\n// Pinned: react/react-dom 19.2.0, @astryxdesign/* 0.5.2, @stylexjs/stylex 0.19.0.\n// Astryx requires React 19+ and an exact-matching version across all\n// @astryxdesign/* packages (peerDependencies: @stylexjs/stylex ^0.19.0).\nimport \"./ssr-shims.ts\";\n\nexport { renderToString } from \"https://esm.sh/react-dom@19.2.0/server?deps=react@19.2.0\";\n\nexport { Theme } from \"https://esm.sh/@astryxdesign/core@0.5.2/theme?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport { neutralTheme } from \"https://esm.sh/@astryxdesign/theme-neutral@0.5.2/built?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\n\nexport { AppShell } from \"https://esm.sh/@astryxdesign/core@0.5.2/AppShell?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport {\n SideNav,\n SideNavHeading,\n SideNavItem,\n} from \"https://esm.sh/@astryxdesign/core@0.5.2/SideNav?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\n\nexport { Heading } from \"https://esm.sh/@astryxdesign/core@0.5.2/Heading?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport { Text } from \"https://esm.sh/@astryxdesign/core@0.5.2/Text?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport { Section } from \"https://esm.sh/@astryxdesign/core@0.5.2/Section?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport { Card } from \"https://esm.sh/@astryxdesign/core@0.5.2/Card?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport { ClickableCard } from \"https://esm.sh/@astryxdesign/core@0.5.2/ClickableCard?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport {\n HStack,\n Stack,\n VStack,\n} from \"https://esm.sh/@astryxdesign/core@0.5.2/Stack?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport { Grid } from \"https://esm.sh/@astryxdesign/core@0.5.2/Grid?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport { Divider } from \"https://esm.sh/@astryxdesign/core@0.5.2/Divider?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\n\nexport { Badge } from \"https://esm.sh/@astryxdesign/core@0.5.2/Badge?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport { StatusDot } from \"https://esm.sh/@astryxdesign/core@0.5.2/StatusDot?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport { Banner } from \"https://esm.sh/@astryxdesign/core@0.5.2/Banner?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport { EmptyState } from \"https://esm.sh/@astryxdesign/core@0.5.2/EmptyState?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport { Avatar } from \"https://esm.sh/@astryxdesign/core@0.5.2/Avatar?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\n\nexport {\n Button,\n} from \"https://esm.sh/@astryxdesign/core@0.5.2/Button?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport { ButtonGroup } from \"https://esm.sh/@astryxdesign/core@0.5.2/ButtonGroup?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\nexport {\n Code,\n CodeBlock,\n} from \"https://esm.sh/@astryxdesign/core@0.5.2/CodeBlock?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\n\nexport {\n Table,\n TableBody,\n TableCell,\n TableHeader,\n TableHeaderCell,\n TableRow,\n} from \"https://esm.sh/@astryxdesign/core@0.5.2/Table?deps=react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\n\n/** Deps query used when a page needs to build an Astryx subpath URL directly. */\nexport const ASTRYX_DEPS = \"react@19.2.0,react-dom@19.2.0,@stylexjs/stylex@0.19.0\";\n","createdAt",["D",1788116688554],"branchVersion","branchId","5a0a7ac8-4895-11f1-80ec-42b51c65c3df","id","5a09ae54-4895-11f1-80ec-42b51c65c3df","Quickstart-Full-Stack",["D",1777994172310],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","An elegant template for an elegant single-person full stack app.","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/3ed9401e-3850-4a69-dec2-1bdd924c0900/square512?exp=1789585199&sig=6897849355d2af74c70b25315ed11ca1e0717f9e94b7aed9fb15c190afac9af1","173e7424-8658-428f-a3bc-ae4faeaabd1c","pinnedFileId","e1c705aa-4b18-11f1-b4ae-ee650bb23af1","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",1,"orgId","019df771-9af8-7238-99a4-541e39355038","tursoName","5a09ae54489511f180ec42b51c65c3df","tursoHostname","5a09ae54489511f180ec42b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789511441255],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_100":99,"_108":104},"org",{"_100":99,"_101":102,"_103":104,"_18":55,"_105":106,"_107":24},"branch",{"_13":89,"_31":90,"_42":41,"_91":43,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":44,"_98":99},"isOwned",384,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","pikachu","handle","displayName","Minion","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/22c8ba37-42c8-4af4-8daf-8cdd2f5f1800/square512?exp=1789585199&sig=216f8e9dd2d9fbbd91dbf6eb857f4e834c1387b2668bd9f5bafa65396f8cfad4","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_31":44,"_37":474,"_46":-5,"_47":24,"_48":49,"_50":49,"_51":52,"_53":54,"_18":55,"_56":57,"_58":59,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":475,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":476,"_84":477,"_86":478,"_88":24},"tree",[215,222,242,243,244,245,246,247],"files",[215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247],"counts",{"_205":196,"_206":63,"_207":63,"_208":209,"_210":211},"contents",[131,132,133,134,135,136,137,138],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":199,"_31":200,"_29":201,"_142":-5,"_40":41,"_39":202,"_144":59,"_37":203,"_13":196,"_33":197,"_35":-5,"_23":24,"_148":-5,"_26":204},{"_42":191,"_31":192,"_29":193,"_142":-5,"_40":41,"_39":194,"_144":59,"_37":195,"_13":196,"_33":197,"_35":-5,"_23":24,"_148":-5,"_26":198},{"_42":184,"_31":185,"_29":186,"_142":-5,"_40":41,"_39":187,"_144":24,"_37":188,"_13":146,"_33":20,"_35":189,"_23":24,"_148":-5,"_26":190},{"_42":176,"_31":177,"_29":178,"_142":-5,"_40":41,"_39":179,"_144":24,"_37":180,"_13":164,"_33":181,"_35":182,"_23":24,"_148":-5,"_26":183},{"_42":168,"_31":169,"_29":170,"_142":-5,"_40":41,"_39":171,"_144":59,"_37":172,"_13":173,"_33":20,"_35":174,"_23":24,"_148":-5,"_26":175},{"_42":159,"_31":160,"_29":161,"_142":-5,"_40":41,"_39":162,"_144":24,"_37":163,"_13":164,"_33":165,"_35":166,"_23":24,"_148":-5,"_26":167},{"_42":150,"_31":151,"_29":57,"_142":-5,"_40":41,"_39":152,"_144":24,"_37":153,"_13":154,"_33":155,"_35":156,"_23":24,"_148":157,"_26":158},{"_42":139,"_31":140,"_29":141,"_142":-5,"_40":41,"_39":143,"_144":24,"_37":145,"_13":146,"_33":20,"_35":147,"_23":24,"_148":-5,"_26":149},"08486638-5023-11f1-a5af-ee650bb23af1","val.yml","aa729402-48c5-11f1-87ca-42b51c65c3df","parentId",238,"latest",["D",1778824681802],8,"name: \"sample-val\"\npublic: true\n# Each file here is a service. Services share one isolated SQLite DB.\n# index.http.ts → HTTP service (SPA + API routes)\n# cron.ts → Cron service (scheduled tasks)\n# email.ts → Email service (inbound trigger + outbound helpers)\nfiles:\n index.http.ts: http\n cron.ts: interval\n email.ts: email\n# Env vars this App reads. Set them in the Val Town UI sidebar — never in code.\n# required: App will not work without it | optional: has a safe default\nenv:\n APP_NAME: optional # display/logging name (vtx new sets the code fallback)\n DAILY_HOUR_UTC: optional # 0-23 UTC hour for the daily cron task (default: \"2\")\n BLOB_DEMO_TOKEN: optional # protects public Blob demo read/write/list routes\n AUTH_SUPER_ADMINS: optional # comma-separated Val Town usernames — these users are super-admins\n","label",[140],"0860ec3a-5023-11f1-a5af-ee650bb23af1","index.http.ts",241,["D",1778824681889],14,"http","// index.http.ts — HTTP entry point: SPA serving + API route table.\n// Handlers live in backend/handlers.ts; this file is pure wiring.\n// Docs: https://docs.val.town/vals/http\n\nimport { recordVisit } from \"./backend/db.ts\";\nimport {\n type ApiRoute,\n jsonError,\n route,\n} from \"./backend/api-utils.ts\";\nimport {\n getAdminUc,\n getSuperAdminUc,\n getUc,\n getUcWithTracking,\n isAuthError,\n type UserCtx,\n withValTownAuth,\n} from \"./backend/auth.ts\";\nimport {\n adminListUsers,\n adminSetAdmin,\n blobKeys,\n blobRead,\n blobWrite,\n cronRuns,\n healthCheck,\n me,\n pruneVisits,\n visits,\n} from \"./backend/handlers.ts\";\nimport { APP_NAME } from \"./backend/shared.ts\";\nimport { renderApp } from \"./frontend/app.tsx\";\nimport type { UserInfo } from \"./frontend/ui/types.ts\";\n\n// Valid SPA page slugs — anything else falls back to \"home\".\n// Keep in sync with PAGES in frontend/client.ts.\nconst PAGES = new Set([\"home\", \"http\", \"sqlite\", \"cron\", \"email\", \"blob\", \"ui\"]);\n\n// -----------------------------------------------------------------------------\n// entry\n// -----------------------------------------------------------------------------\n\nasync function handler(req: Request): Promise {\n const url = new URL(req.url);\n if (url.pathname.startsWith(\"/api/\")) return await routeApi(req, url);\n return await serveSpa(req, url);\n}\n\nexport default withValTownAuth(handler);\n\n// -----------------------------------------------------------------------------\n// SPA\n// -----------------------------------------------------------------------------\n\nasync function serveSpa(req: Request, url: URL): Promise {\n try { await recordVisit(url.pathname); } catch { /* off-platform */ }\n\n const uc = await getUcWithTracking(req);\n const html = renderApp({\n appName: APP_NAME,\n renderedAt: new Date().toISOString(),\n theme: cookieTheme(req),\n page: pathToPage(url.pathname),\n user: ucToUserInfo(uc),\n });\n return new Response(html, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n}\n\n/** Map backend UserCtx → frontend UserInfo (layer boundary). */\nfunction ucToUserInfo(uc: UserCtx): UserInfo | null {\n if (!uc.user) return null;\n return {\n username: uc.user.username,\n avatarUrl: uc.user.avatarUrl,\n isAdmin: uc.isAdmin,\n isSuperAdmin: uc.isSuperAdmin,\n };\n}\n\nfunction cookieTheme(req: Request): string {\n const cookie = req.headers.get(\"Cookie\") ?? \"\";\n const m = cookie.match(/(?:^|;\\s*)theme=([^;]+)/);\n if (!m) return \"\";\n try { return decodeURIComponent(m[1]); } catch { return \"\"; }\n}\n\nfunction pathToPage(pathname: string): string {\n const seg = pathname.slice(1);\n return PAGES.has(seg) ? seg : \"home\";\n}\n\n// -----------------------------------------------------------------------------\n// API routing\n// -----------------------------------------------------------------------------\n\nconst API_ROUTES = new Map([\n [\"GET /api/health\", route(getUc, healthCheck)],\n [\"GET /api/me\", route(getUcWithTracking, me)],\n [\"GET /api/visits\", route(getUc, visits)],\n [\"POST /api/prune-visits\", route(getAdminUc, pruneVisits)],\n [\"GET /api/cron-runs\", route(getUc, cronRuns)],\n [\"GET /api/blob-keys\", route(getUc, blobKeys)],\n [\"POST /api/blob-write\", route(getUc, blobWrite)],\n [\"GET /api/blob-read\", route(getUc, blobRead)],\n [\"GET /api/admin/users\", route(getSuperAdminUc, adminListUsers)],\n [\"POST /api/admin/set-admin\", route(getSuperAdminUc, adminSetAdmin)],\n]);\n\nasync function routeApi(req: Request, url: URL): Promise {\n const apiRoute = API_ROUTES.get(`${req.method} ${url.pathname}`);\n if (!apiRoute) return jsonError(`Not found: ${url.pathname}`, 404);\n\n try {\n const uc = await apiRoute.resolveUc(req);\n return await apiRoute.handle({ req, url, uc });\n } catch (error) {\n if (isAuthError(error)) return jsonError(error.message, error.status);\n throw error;\n }\n}\n","d-template",[151],"a1efbd3e-4cb0-11f1-b51c-ee650bb23af1","email.ts","aa7742d6-48c5-11f1-831b-42b51c65c3df",183,["D",1778445693986],9,"email","// email.ts — Email service: inbound handler + outbound helpers.\n// Address shape: .@valtown.email\n\nimport { email as sendEmail } from \"https://esm.town/v/std/email\";\nimport { APP_NAME, type Email } from \"./backend/shared.ts\";\n\n// -----------------------------------------------------------------------------\n// inbound\n// -----------------------------------------------------------------------------\n\nexport default async function emailHandler(inbound: Email): Promise {\n console.log(\n `📧 [${APP_NAME}] From: ${inbound.from} Subject: ${\n inbound.subject ?? \"(none)\"\n }`,\n );\n console.log(` Body: ${inbound.text?.slice(0, 200) ?? \"(empty)\"}...`);\n\n for (const file of inbound.attachments) {\n console.log(` 📎 ${file.name} (${file.type}, ${file.size}b)`);\n // await blob.set(`emails/${file.name}`, await file.arrayBuffer());\n }\n\n // await sendNotification(`Re: ${inbound.subject}`, \"Got your message!\");\n}\n\n// -----------------------------------------------------------------------------\n// outbound\n// -----------------------------------------------------------------------------\n// Free plan: sends to yourself only. Pro: send to anyone + cc/bcc.\n\nexport async function sendNotification(\n subject: string,\n body: string,\n options?: { to?: string; html?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n ...(options?.to && { to: options.to }),\n ...(options?.html && { html: options.html }),\n });\n console.log(`📤 [${APP_NAME}] Sent: \"${subject}\"`);\n}\n\n/** `attachment.content` must be base64-encoded (use `btoa()`). */\nexport async function sendWithAttachment(\n subject: string,\n body: string,\n attachment: { content: string; filename: string; type?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n attachments: [{\n content: attachment.content,\n filename: attachment.filename,\n type: attachment.type ?? \"application/octet-stream\",\n disposition: \"attachment\",\n }],\n });\n console.log(\n `📤 [${APP_NAME}] Sent with attachment: \"${attachment.filename}\"`,\n );\n}\n",[160],"e9ede3b4-4f02-11f1-8b31-ee650bb23af1","deno.json","86adc21c-4951-11f1-b797-42b51c65c3df",225,["D",1778700935796],3,"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"fmt\": {\n \"lineWidth\": 100\n },\n \"lint\": {\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\",\n \"no-external-import\",\n \"no-import-prefix\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"unstable\": [\"temporal\", \"worker-options\", \"sloppy-imports\", \"node-globals\"]\n}\n",[169],"ea1f8c34-4f02-11f1-ac5b-ee650bb23af1","cron.ts","aa651980-48c5-11f1-bfb8-42b51c65c3df",228,["D",1778700936143],"interval","// cron.ts — Cron service: pulse (every run) + daily (UTC-hour window).\n// Schedule is set in the Val Town UI via a cron expression. Free tier: ≥ 15 min.\n// Tasks are intentionally idempotent. Val Town fires each tick once; concurrent\n// cold-starts are rare but possible on Pro — design tasks to tolerate it.\n\nimport { APP_NAME, env } from \"./backend/shared.ts\";\nimport { logCronRun, pruneOldVisits } from \"./backend/db.ts\";\n\nexport default async function (\n interval: { lastRunAt: Date | undefined },\n): Promise {\n const now = new Date();\n await pulse(now);\n await daily(now, interval.lastRunAt);\n}\n\n// ── Pulse — runs on every cron tick ───────────────────────────────────────────\n// Good for health-checks, polling an external feed, draining a work queue.\n// Set the Val Town cron to your desired cadence (UI → val → Cron → expression).\n\nasync function pulse(now: Date): Promise {\n console.log(`⚡ [${APP_NAME}] pulse ${now.toISOString()}`);\n await logCronRun(\"pulse\", `hello at ${now.toISOString()}`);\n // TODO: replace with your high-frequency task\n // await fetch(\"https://api.example.com/feed\");\n}\n\n// ── Daily — runs once per day in a UTC-hour window ────────────────────────────\n// Uses Val Town's lastRunAt to run only on the first tick inside the target hour.\n// Env: DAILY_HOUR_UTC — which UTC hour to run (0-23, default \"2\").\n\nasync function daily(now: Date, lastRunAt: Date | undefined): Promise {\n const targetHour = Number(env(\"DAILY_HOUR_UTC\", \"2\"));\n if (!shouldRunDaily(now, lastRunAt, targetHour)) return;\n\n console.log(`🔧 [${APP_NAME}] daily ${now.toISOString()}`);\n await pruneOldVisits(30);\n await logCronRun(\"daily\", `pruned visits older than 30 days`);\n console.log(`✅ [${APP_NAME}] daily done`);\n}\n\nfunction shouldRunDaily(\n now: Date,\n lastRunAt: Date | undefined,\n targetHour: number,\n): boolean {\n if (now.getUTCHours() !== targetHour) return false;\n const target = new Date(Date.UTC(\n now.getUTCFullYear(),\n now.getUTCMonth(),\n now.getUTCDate(),\n targetHour,\n ));\n return !lastRunAt || lastRunAt < target;\n}\n",[177],"58175df1-9bfa-4a64-a414-f5b71a992b1a","README.md","aabf7b64-48c5-11f1-9920-42b51c65c3df",252,["D",1788104438281],"# Val Town Reference Template\n\n`_template` is the executable reference and scaffold source for uApps vals. It demonstrates one HTTP\napplication with auth, APIs, SQLite, Blob, Cron, Email, SSR pages, and small browser controllers.\n\nThe current UI uses Preact and custom Gruvbox components. Its approved next design pass is the\nincremental migration in [`_specs/astryx-template.md`](../../_specs/astryx-template.md).\n\n`_template` is excluded from main-branch deployment because its directory starts with `_`.\n\n---\n\n## Create a Val\n\nFrom any directory after sourcing the uApps shell plugin:\n\n```bash\nvtx new my-app\ncd vals/my-app\nvtx status\nvtx push --dry-run\nvtx push\nvtx url\n```\n\n`vtx new` copies the template, replaces the application name and account-scoped Blob prefix, writes\nthe new `val.yml` name, and links the new remote val. Existing destinations are refused.\n\n## Application Shape\n\nThe HTTP entry wraps the app in Val Town OAuth, routes `/api/*` through typed auth boundaries, and\nrenders the selected SSR page for every other path.\n\nPages:\n\n- `/` — application and platform overview.\n- `/http` — HTTP routes and live request demos.\n- `/sqlite` — visit log and admin controls.\n- `/cron` — scheduled task history.\n- `/email` — inbound and outbound email examples.\n- `/blob` — token-protected Blob read/write/list demo.\n- `/ui` — current theme and component reference.\n\nAPI routes:\n\n| Method | Path | Access |\n| ------ | ---------------------- | ---------------------- |\n| `GET` | `/api/health` | Public |\n| `GET` | `/api/me` | Public session context |\n| `GET` | `/api/visits` | Public |\n| `POST` | `/api/prune-visits` | Admin |\n| `GET` | `/api/cron-runs` | Public |\n| `GET` | `/api/blob-keys` | Demo token |\n| `POST` | `/api/blob-write` | Demo token |\n| `GET` | `/api/blob-read` | Demo token |\n| `GET` | `/api/admin/users` | Super-admin |\n| `POST` | `/api/admin/set-admin` | Super-admin |\n\n## Runtime Configuration\n\nSet these in the created val's Val Town environment UI, never in Git or GitHub Actions:\n\n| Variable | Kind | Purpose |\n| ------------------- | -------- | ---------------------------------- |\n| `APP_NAME` | Optional | Display name override |\n| `DAILY_HOUR_UTC` | Optional | Daily task hour, `0`–`23` UTC |\n| `BLOB_DEMO_TOKEN` | Optional | Enables public Blob demo routes |\n| `AUTH_SUPER_ADMINS` | Optional | Comma-separated Val Town usernames |\n\nThe repository-level `VAL_TOWN_API_KEY` secret is only for CI deployment. See the root\n[`README.md`](../../README.md#cicd).\n\n## Trigger Contract\n\n`val.yml.files` declares the intended remote types:\n\n```yaml\nfiles:\n index.http.ts: http\n cron.ts: interval\n email.ts: email\n```\n\nRun `vtx types` after linking. Use `vtx apply-types` only when deliberately repairing remote trigger\nmetadata.\n\n## Architecture\n\n- `index.http.ts` — HTTP composition root and route table.\n- `backend/auth.ts` — OAuth context and role enforcement.\n- `backend/handlers.ts` — focused API handlers.\n- `backend/db.ts` — retryable migration, visits, Cron runs, and users.\n- `backend/storage.ts` — val-namespaced account Blob access.\n- `frontend/app.tsx` — Preact SSR composition root.\n- `frontend/pages/` — platform capability pages.\n- `frontend/ui/` — current components, sidebar, styles, themes, and types.\n- `frontend/client.ts` — non-hydrated theme, routing, and demo controllers.\n\nEvery TSX module containing JSX keeps its pinned `@jsxImportSource` pragma until the Astryx React\nmigration replaces Preact.\n\n## Key Files\n\n| Path | Purpose |\n| --------------------------------- | -------------------------------------------- |\n| `index.http.ts` | HTTP and API composition root |\n| `backend/auth.ts` | Val Town OAuth and roles |\n| `backend/db.ts` | Val-scoped SQLite repositories |\n| `backend/storage.ts` | Account-scoped Blob adapter |\n| `frontend/app.tsx` | Current Preact SSR root |\n| `frontend/pages/` | Interactive reference pages |\n| `frontend/client.ts` | Browser controllers |\n| `cron.ts` | Scheduled tasks |\n| `email.ts` | Email trigger and helpers |\n| `val.yml` | Identity, triggers, and environment contract |\n| `../../_specs/astryx-template.md` | Approved Astryx migration plan |\n",[185],"85f9d626-4951-11f1-a16a-42b51c65c3df","frontend","85f9d6f8-4951-11f1-a16a-42b51c65c3df",34,["D",1778074991402],0,"directory",[192],"86303568-4951-11f1-a193-42b51c65c3df","backend","8630361c-4951-11f1-a193-42b51c65c3df",35,["D",1778074991756],[200],"pulls","branches","forks","envVars",{"_212":63,"_214":196},"connections",{"_212":196,"_213":196},"count","unfilledCount","emptyCount",{"_42":199,"_31":200,"_29":201,"_142":-5,"_40":41,"_39":202,"_144":59,"_37":471,"_13":196,"_33":197,"_35":-5,"_23":24,"_148":-5,"_249":472,"_26":473},{"_42":462,"_31":463,"_29":464,"_142":201,"_40":41,"_39":465,"_144":24,"_37":466,"_13":467,"_33":34,"_35":468,"_23":24,"_148":-5,"_249":469,"_26":470},{"_42":454,"_31":455,"_29":456,"_142":201,"_40":41,"_39":457,"_144":24,"_37":458,"_13":63,"_33":34,"_35":459,"_23":24,"_148":-5,"_249":460,"_26":461},{"_42":445,"_31":446,"_29":447,"_142":201,"_40":41,"_39":448,"_144":24,"_37":449,"_13":450,"_33":34,"_35":451,"_23":24,"_148":-5,"_249":452,"_26":453},{"_42":437,"_31":438,"_29":439,"_142":201,"_40":41,"_39":440,"_144":24,"_37":441,"_13":196,"_33":34,"_35":442,"_23":24,"_148":-5,"_249":443,"_26":444},{"_42":429,"_31":430,"_29":431,"_142":201,"_40":41,"_39":432,"_144":24,"_37":433,"_13":324,"_33":34,"_35":434,"_23":24,"_148":-5,"_249":435,"_26":436},{"_42":420,"_31":421,"_29":422,"_142":201,"_40":41,"_39":423,"_144":24,"_37":424,"_13":425,"_33":34,"_35":426,"_23":24,"_148":-5,"_249":427,"_26":428},{"_42":191,"_31":192,"_29":193,"_142":-5,"_40":41,"_39":194,"_144":59,"_37":417,"_13":196,"_33":197,"_35":-5,"_23":24,"_148":-5,"_249":418,"_26":419},{"_42":412,"_31":407,"_29":401,"_142":193,"_40":41,"_39":413,"_144":59,"_37":414,"_13":196,"_33":197,"_35":-5,"_23":24,"_148":-5,"_249":415,"_26":416},{"_42":408,"_31":32,"_29":30,"_142":401,"_40":41,"_39":14,"_144":24,"_37":409,"_13":196,"_33":34,"_35":36,"_23":24,"_148":-5,"_249":410,"_26":411},{"_42":398,"_31":399,"_29":400,"_142":401,"_40":41,"_39":402,"_144":24,"_37":403,"_13":196,"_33":34,"_35":404,"_23":24,"_148":-5,"_249":405,"_26":406},{"_42":393,"_31":343,"_29":336,"_142":193,"_40":41,"_39":394,"_144":59,"_37":395,"_13":196,"_33":197,"_35":-5,"_23":24,"_148":-5,"_249":396,"_26":397},{"_42":385,"_31":386,"_29":387,"_142":336,"_40":41,"_39":388,"_144":24,"_37":389,"_13":289,"_33":34,"_35":390,"_23":24,"_148":-5,"_249":391,"_26":392},{"_42":377,"_31":378,"_29":379,"_142":336,"_40":41,"_39":380,"_144":24,"_37":381,"_13":324,"_33":34,"_35":382,"_23":24,"_148":-5,"_249":383,"_26":384},{"_42":369,"_31":370,"_29":371,"_142":336,"_40":41,"_39":372,"_144":24,"_37":373,"_13":146,"_33":181,"_35":374,"_23":24,"_148":-5,"_249":375,"_26":376},{"_42":360,"_31":361,"_29":362,"_142":336,"_40":41,"_39":363,"_144":24,"_37":364,"_13":365,"_33":165,"_35":366,"_23":24,"_148":-5,"_249":367,"_26":368},{"_42":352,"_31":353,"_29":354,"_142":336,"_40":41,"_39":355,"_144":24,"_37":356,"_13":324,"_33":155,"_35":357,"_23":24,"_148":-5,"_249":358,"_26":359},{"_42":344,"_31":345,"_29":346,"_142":336,"_40":41,"_39":347,"_144":24,"_37":348,"_13":146,"_33":34,"_35":349,"_23":24,"_148":-5,"_249":350,"_26":351},{"_42":333,"_31":334,"_29":335,"_142":336,"_40":41,"_39":337,"_144":24,"_37":338,"_13":339,"_33":34,"_35":340,"_23":24,"_148":-5,"_249":341,"_26":342},{"_42":328,"_31":293,"_29":286,"_142":193,"_40":41,"_39":329,"_144":24,"_37":330,"_13":196,"_33":197,"_35":-5,"_23":24,"_148":-5,"_249":331,"_26":332},{"_42":319,"_31":320,"_29":321,"_142":286,"_40":41,"_39":322,"_144":24,"_37":323,"_13":324,"_33":34,"_35":325,"_23":24,"_148":-5,"_249":326,"_26":327},{"_42":311,"_31":312,"_29":313,"_142":286,"_40":41,"_39":314,"_144":24,"_37":315,"_13":63,"_33":34,"_35":316,"_23":24,"_148":-5,"_249":317,"_26":318},{"_42":302,"_31":303,"_29":304,"_142":286,"_40":41,"_39":305,"_144":24,"_37":306,"_13":307,"_33":34,"_35":308,"_23":24,"_148":-5,"_249":309,"_26":310},{"_42":294,"_31":295,"_29":296,"_142":286,"_40":41,"_39":297,"_144":24,"_37":298,"_13":196,"_33":34,"_35":299,"_23":24,"_148":-5,"_249":300,"_26":301},{"_42":283,"_31":284,"_29":285,"_142":286,"_40":41,"_39":287,"_144":24,"_37":288,"_13":289,"_33":34,"_35":290,"_23":24,"_148":-5,"_249":291,"_26":292},{"_42":275,"_31":276,"_29":277,"_142":193,"_40":41,"_39":278,"_144":24,"_37":279,"_13":164,"_33":34,"_35":280,"_23":24,"_148":-5,"_249":281,"_26":282},{"_42":267,"_31":268,"_29":269,"_142":193,"_40":41,"_39":270,"_144":24,"_37":271,"_13":164,"_33":34,"_35":272,"_23":24,"_148":-5,"_249":273,"_26":274},{"_42":184,"_31":185,"_29":186,"_142":-5,"_40":41,"_39":187,"_144":24,"_37":264,"_13":146,"_33":20,"_35":189,"_23":24,"_148":-5,"_249":265,"_26":266},{"_42":176,"_31":177,"_29":178,"_142":-5,"_40":41,"_39":179,"_144":24,"_37":261,"_13":164,"_33":181,"_35":182,"_23":24,"_148":-5,"_249":262,"_26":263},{"_42":168,"_31":169,"_29":170,"_142":-5,"_40":41,"_39":171,"_144":59,"_37":258,"_13":173,"_33":20,"_35":174,"_23":24,"_148":-5,"_249":259,"_26":260},{"_42":159,"_31":160,"_29":161,"_142":-5,"_40":41,"_39":162,"_144":24,"_37":255,"_13":164,"_33":165,"_35":166,"_23":24,"_148":-5,"_249":256,"_26":257},{"_42":150,"_31":151,"_29":57,"_142":-5,"_40":41,"_39":152,"_144":24,"_37":252,"_13":154,"_33":155,"_35":156,"_23":24,"_148":157,"_249":253,"_26":254},{"_42":139,"_31":140,"_29":141,"_142":-5,"_40":41,"_39":143,"_144":24,"_37":248,"_13":146,"_33":20,"_35":147,"_23":24,"_148":-5,"_249":250,"_26":251},["D",1778824681802],"children",[],[140],["D",1778824681889],[],[151],["D",1778445693986],[],[160],["D",1778700935796],[],[169],["D",1778700936143],[],[177],["D",1788104438281],[],[185],"e99b40e6-4f02-11f1-a378-ee650bb23af1","client.ts","48ed4cf0-4b21-11f1-b54f-ee650bb23af1",220,["D",1778700935281],"// client.ts — Path router, cookie-based theme switcher, per-page demo hydration.\n// Theme is set via a 1-year cookie (server reads it for zero-FOUC SSR).\n// Navigation uses history.pushState with real paths (/http, /sqlite, …).\n//\n// Note: clientJs is a raw JS string injected into

Diff · v257