[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_455":456,"_457":458},"routes/_app.x.$handle.$name",{"_104":103,"_33":48,"_113":94,"_27":114,"_13":14,"_115":-5,"_11":116,"_117":118,"_119":120,"_121":122,"_123":124,"_20":-5,"_125":-5,"_126":-5,"_127":25,"_128":129,"_130":63,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_46":47,"_33":48,"_41":49,"_50":-5,"_51":25,"_52":53,"_54":53,"_55":56,"_57":58,"_18":59,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":75,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":87,"_88":89,"_90":91,"_92":25},"version",274,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":30},"file",{"_31":32,"_33":39,"_35":36,"_37":40,"_41":42,"_43":14,"_44":45,"_24":25},"previous",{"_31":32,"_33":34,"_35":36,"_37":38},"deleted",false,"deletedHere","path","frontend/pages/page-mail.tsx","latestPath","frontend/pages/features/page-mail.tsx","fileId","09235c92-4c96-11f1-987c-ee650bb23af1","name","page-email.tsx","fileType","email","content","/** @jsxImportSource https://esm.sh/react@19.2.0 */\n// page-email.tsx — Email Trigger: inbound handler + outbound helpers.\n\nimport {\n Badge,\n Banner,\n CodeBlock,\n Heading,\n Table,\n TableBody,\n TableCell,\n TableHeader,\n TableHeaderCell,\n TableRow,\n Text,\n VStack,\n} from \"../astryx/components.ts\";\nimport { PageLinks } from \"./kit.tsx\";\nimport type { CodeSnippet } from \"../types.ts\";\n\nconst LINKS = [\n { href: \"https://docs.val.town/vals/email/\", label: \"Email docs\" },\n { href: \"https://docs.val.town/reference/std/email/\", label: \"std/email reference\" },\n];\n\nconst TYPE_SNIPPET: CodeSnippet = {\n filename: \"backend/shared.ts — Email interface\",\n code: `export interface Email {\n from: string;\n to: string[];\n cc?: string | string[];\n subject?: string;\n text?: string;\n html?: string;\n attachments: File[];\n headers: Record;\n}`,\n};\n\nconst INBOUND_SNIPPET: CodeSnippet = {\n filename: \"email.ts — inbound handler\",\n code: `import { type Email } from \"./backend/shared.ts\";\n\nexport default async function emailHandler(inbound: Email): Promise {\n console.log(\\`📧 From: \\${inbound.from} Subject: \\${inbound.subject}\\`);\n\n for (const file of inbound.attachments) {\n console.log(\\`📎 \\${file.name} (\\${file.size}b)\\`);\n // await blob.set(\\`emails/\\${file.name}\\`, await file.arrayBuffer());\n }\n}`,\n};\n\nconst OUTBOUND_SNIPPET: CodeSnippet = {\n filename: \"email.ts — sendNotification()\",\n code: `import { email as sendEmail } from \"https://esm.town/v/std/email\";\n\nexport async function sendNotification(\n subject: string,\n body: string,\n options?: { to?: string; html?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n ...(options?.to && { to: options.to }),\n ...(options?.html && { html: options.html }),\n });\n}`,\n};\n\nconst RULE_ROWS: {\n rule: string;\n variant: \"info\" | \"neutral\" | \"purple\" | \"error\";\n detail: string;\n}[] = [\n { rule: \"Address shape\", variant: \"info\", detail: \".@valtown.email\" },\n {\n rule: \"Outbound plan\",\n variant: \"neutral\",\n detail: \"Free plan: send to yourself only. Pro: send to anyone + cc/bcc\",\n },\n {\n rule: \"Attachments\",\n variant: \"purple\",\n detail: \"Arrive as File objects — save to Blob if persistence needed\",\n },\n {\n rule: \"No auth on HTTP\",\n variant: \"error\",\n detail: \"Never expose email-sending via HTTP routes without auth\",\n },\n];\n\nexport function EmailPage() {\n return (\n \n \n Email Trigger\n \n Val Town email vals receive messages sent to{\" \"}\n {\".@valtown.email\"}. The same file can also send outbound mail using\n @std/email.\n \n \n \n\n \n Key rules\n \n \n \n Rule\n Detail\n \n \n \n {RULE_ROWS.map((r) => (\n \n \n \n \n {r.detail}\n \n ))}\n \n

\n \n\n .sample-val@valtown.email and check the Val Town logs.\"\n />\n\n \n \n \n \n );\n}\n","page-mail.tsx","/** @jsxImportSource https://esm.sh/react@19.2.0 */\n// page-mail.tsx — Email Trigger: inbound handler + outbound helpers.\n\nimport {\n Badge,\n Banner,\n CodeBlock,\n Heading,\n Table,\n TableBody,\n TableCell,\n TableHeader,\n TableHeaderCell,\n TableRow,\n Text,\n VStack,\n} from \"../astryx/components.ts\";\nimport { PageLinks } from \"./kit.tsx\";\nimport type { CodeSnippet } from \"../types.ts\";\n\nconst LINKS = [\n { href: \"https://docs.val.town/vals/email/\", label: \"Email docs\" },\n { href: \"https://docs.val.town/reference/std/email/\", label: \"std/email reference\" },\n];\n\nconst TYPE_SNIPPET: CodeSnippet = {\n filename: \"backend/shared.ts — Email interface\",\n code: `export interface Email {\n from: string;\n to: string[];\n cc?: string | string[];\n subject?: string;\n text?: string;\n html?: string;\n attachments: File[];\n headers: Record;\n}`,\n};\n\nconst INBOUND_SNIPPET: CodeSnippet = {\n filename: \"email.ts — inbound handler\",\n code: `import { type Email } from \"./backend/shared.ts\";\n\nexport default async function emailHandler(inbound: Email): Promise {\n console.log(\\`📧 From: \\${inbound.from} Subject: \\${inbound.subject}\\`);\n\n for (const file of inbound.attachments) {\n console.log(\\`📎 \\${file.name} (\\${file.size}b)\\`);\n // await blob.set(\\`emails/\\${file.name}\\`, await file.arrayBuffer());\n }\n}`,\n};\n\nconst OUTBOUND_SNIPPET: CodeSnippet = {\n filename: \"email.ts — sendNotification()\",\n code: `import { email as sendEmail } from \"https://esm.town/v/std/email\";\n\nexport async function sendNotification(\n subject: string,\n body: string,\n options?: { to?: string; html?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n ...(options?.to && { to: options.to }),\n ...(options?.html && { html: options.html }),\n });\n}`,\n};\n\nconst RULE_ROWS: {\n rule: string;\n variant: \"info\" | \"neutral\" | \"purple\" | \"error\";\n detail: string;\n}[] = [\n { rule: \"Address shape\", variant: \"info\", detail: \".@valtown.email\" },\n {\n rule: \"Outbound plan\",\n variant: \"neutral\",\n detail: \"Free plan: send to yourself only. Pro: send to anyone + cc/bcc\",\n },\n {\n rule: \"Attachments\",\n variant: \"purple\",\n detail: \"Arrive as File objects — save to Blob if persistence needed\",\n },\n {\n rule: \"No auth on HTTP\",\n variant: \"error\",\n detail: \"Never expose email-sending via HTTP routes without auth\",\n },\n];\n\nexport function EmailPage() {\n return (\n \n \n Email Trigger\n \n Val Town email vals receive messages sent to{\" \"}\n {\".@valtown.email\"}. The same file can also send outbound mail using\n @std/email.\n \n \n \n\n \n Key rules\n \n \n \n Rule\n Detail\n \n \n \n {RULE_ROWS.map((r) => (\n \n \n \n \n {r.detail}\n \n ))}\n \n

\n \n\n .sample-val@valtown.email and check the Val Town logs.\"\n />\n\n \n \n \n \n );\n}\n","createdAt",["D",1788117584620],"branchVersion","branchId","5a0a7ac8-4895-11f1-80ec-42b51c65c3df","id","5a09ae54-4895-11f1-80ec-42b51c65c3df","Quickstart-Full-Stack",["D",1777994172310],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","An elegant template for an elegant single-person full stack app.","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/3ed9401e-3850-4a69-dec2-1bdd924c0900/square512?exp=1789538399&sig=8ded5b974bfebef9817e2fbdffe4de4e1704e0d4cab9518c811db2594c0af107","173e7424-8658-428f-a3bc-ae4faeaabd1c","pinnedFileId","e1c705aa-4b18-11f1-b4ae-ee650bb23af1","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",1,"orgId","019df771-9af8-7238-99a4-541e39355038","tursoName","5a09ae54489511f180ec42b51c65c3df","tursoHostname","5a09ae54489511f180ec42b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789511441255],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_104":103,"_112":108},"org",{"_104":103,"_105":106,"_107":108,"_18":59,"_109":110,"_111":25},"branch",{"_13":93,"_33":94,"_46":45,"_95":47,"_96":-5,"_97":-5,"_98":-5,"_99":-5,"_100":-5,"_101":48,"_102":103},"isOwned",384,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","pikachu","handle","displayName","Minion","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/22c8ba37-42c8-4af4-8daf-8cdd2f5f1800/square512?exp=1789538399&sig=21cdba23f818845c8391e88088eb5ea9255dbc43e05efe79e25bd70ab9ddb43a","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_46":47,"_33":48,"_41":450,"_50":-5,"_51":25,"_52":53,"_54":53,"_55":56,"_57":58,"_18":59,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":71,"_72":73,"_74":451,"_76":-5,"_77":78,"_79":78,"_80":81,"_82":81,"_83":81,"_84":78,"_85":78,"_86":452,"_88":453,"_90":454,"_92":25},"tree",[218,225,242,243,244,245,246,247],"files",[218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247],"counts",{"_208":199,"_209":67,"_210":67,"_211":212,"_213":214},"contents",[135,136,137,138,139,140,141,142],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_46":202,"_33":203,"_31":204,"_146":-5,"_44":45,"_43":205,"_148":63,"_41":206,"_13":199,"_35":200,"_37":-5,"_24":25,"_152":-5,"_27":207},{"_46":194,"_33":195,"_31":196,"_146":-5,"_44":45,"_43":197,"_148":63,"_41":198,"_13":199,"_35":200,"_37":-5,"_24":25,"_152":-5,"_27":201},{"_46":187,"_33":188,"_31":189,"_146":-5,"_44":45,"_43":190,"_148":25,"_41":191,"_13":168,"_35":20,"_37":192,"_24":25,"_152":-5,"_27":193},{"_46":179,"_33":180,"_31":181,"_146":-5,"_44":45,"_43":182,"_148":25,"_41":183,"_13":168,"_35":184,"_37":185,"_24":25,"_152":-5,"_27":186},{"_46":171,"_33":172,"_31":173,"_146":-5,"_44":45,"_43":174,"_148":63,"_41":175,"_13":176,"_35":20,"_37":177,"_24":25,"_152":-5,"_27":178},{"_46":163,"_33":164,"_31":165,"_146":-5,"_44":45,"_43":166,"_148":25,"_41":167,"_13":168,"_35":36,"_37":169,"_24":25,"_152":-5,"_27":170},{"_46":154,"_33":155,"_31":61,"_146":-5,"_44":45,"_43":156,"_148":25,"_41":157,"_13":158,"_35":159,"_37":160,"_24":25,"_152":161,"_27":162},{"_46":143,"_33":144,"_31":145,"_146":-5,"_44":45,"_43":147,"_148":25,"_41":149,"_13":150,"_35":20,"_37":151,"_24":25,"_152":-5,"_27":153},"08486638-5023-11f1-a5af-ee650bb23af1","val.yml","aa729402-48c5-11f1-87ca-42b51c65c3df","parentId",238,"latest",["D",1778824681802],8,"name: \"sample-val\"\npublic: true\n# Each file here is a service. Services share one isolated SQLite DB.\n# index.http.ts → HTTP service (SPA + API routes)\n# cron.ts → Cron service (scheduled tasks)\n# email.ts → Email service (inbound trigger + outbound helpers)\nfiles:\n index.http.ts: http\n cron.ts: interval\n email.ts: email\n# Env vars this App reads. Set them in the Val Town UI sidebar — never in code.\n# required: App will not work without it | optional: has a safe default\nenv:\n APP_NAME: optional # display/logging name (vtx new sets the code fallback)\n DAILY_HOUR_UTC: optional # 0-23 UTC hour for the daily cron task (default: \"2\")\n BLOB_DEMO_TOKEN: optional # protects public Blob demo read/write/list routes\n AUTH_SUPER_ADMINS: optional # comma-separated Val Town usernames — these users are super-admins\n","label",[144],"b2e44c9b-47eb-488c-ab09-c493abed986c","index.http.ts",269,["D",1788116690543],15,"http","// index.http.ts — HTTP entry point: per-route SSR page serving + API route\n// table. Handlers live in backend/handlers.ts; this file is pure wiring.\n// Docs: https://docs.val.town/vals/http\n\nimport { recordVisit } from \"./backend/db.ts\";\nimport {\n type ApiRoute,\n jsonError,\n route,\n} from \"./backend/api-utils.ts\";\nimport {\n getAdminUc,\n getSuperAdminUc,\n getUc,\n getUcWithTracking,\n isAuthError,\n type UserCtx,\n withValTownAuth,\n} from \"./backend/auth.ts\";\nimport {\n adminListUsers,\n adminSetAdmin,\n blobKeys,\n blobRead,\n blobWrite,\n cronRuns,\n healthCheck,\n me,\n pruneVisits,\n visits,\n} from \"./backend/handlers.ts\";\nimport { APP_NAME } from \"./backend/shared.ts\";\nimport { renderApp } from \"./frontend/app.tsx\";\nimport type { ThemeMode, UserInfo } from \"./frontend/types.ts\";\n\n// Valid page slugs — anything else falls back to \"home\".\n// Keep in sync with PAGES in frontend/app.tsx.\nconst PAGES = new Set([\"home\", \"http\", \"sqlite\", \"cron\", \"email\", \"blob\", \"ui\"]);\nconst MODES = new Set([\"light\", \"dark\", \"system\"]);\nconst THEME_COOKIE = \"theme\";\n\n// -----------------------------------------------------------------------------\n// entry\n// -----------------------------------------------------------------------------\n\nasync function handler(req: Request): Promise {\n const url = new URL(req.url);\n if (url.pathname.startsWith(\"/api/\")) return await routeApi(req, url);\n if (url.pathname === \"/theme\") return setThemeAndRedirect(url);\n return await servePage(req, url);\n}\n\nexport default withValTownAuth(handler);\n\n// -----------------------------------------------------------------------------\n// page rendering\n// -----------------------------------------------------------------------------\n\nasync function servePage(req: Request, url: URL): Promise {\n try { await recordVisit(url.pathname); } catch { /* off-platform */ }\n\n const uc = await getUcWithTracking(req);\n const html = renderApp({\n appName: APP_NAME,\n renderedAt: new Date().toISOString(),\n mode: cookieMode(req),\n page: pathToPage(url.pathname),\n user: ucToUserInfo(uc),\n });\n return new Response(html, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n}\n\n/** GET /theme?mode=light|dark|system&page= — sets the mode cookie, redirects back. */\nfunction setThemeAndRedirect(url: URL): Response {\n const mode = url.searchParams.get(\"mode\");\n const page = pathToPage(`/${url.searchParams.get(\"page\") ?? \"\"}`);\n const headers = new Headers({ location: page === \"home\" ? \"/\" : `/${page}` });\n if (mode && (MODES as Set).has(mode)) {\n headers.append(\"set-cookie\", `${THEME_COOKIE}=${mode}; Path=/; Max-Age=31536000; SameSite=Lax`);\n }\n return new Response(null, { status: 303, headers });\n}\n\n/** Map backend UserCtx → frontend UserInfo (layer boundary). */\nfunction ucToUserInfo(uc: UserCtx): UserInfo | null {\n if (!uc.user) return null;\n return {\n username: uc.user.username,\n avatarUrl: uc.user.avatarUrl,\n isAdmin: uc.isAdmin,\n isSuperAdmin: uc.isSuperAdmin,\n };\n}\n\nfunction cookieMode(req: Request): ThemeMode {\n const cookie = req.headers.get(\"Cookie\") ?? \"\";\n const m = cookie.match(new RegExp(`(?:^|;\\\\s*)${THEME_COOKIE}=([^;]+)`));\n const value = m ? decodeURIComponent(m[1]) : \"\";\n return (MODES as Set).has(value) ? (value as ThemeMode) : \"system\";\n}\n\nfunction pathToPage(pathname: string): string {\n const seg = pathname.slice(1);\n return PAGES.has(seg) ? seg : \"home\";\n}\n\n// -----------------------------------------------------------------------------\n// API routing\n// -----------------------------------------------------------------------------\n\nconst API_ROUTES = new Map([\n [\"GET /api/health\", route(getUc, healthCheck)],\n [\"GET /api/me\", route(getUcWithTracking, me)],\n [\"GET /api/visits\", route(getUc, visits)],\n [\"POST /api/prune-visits\", route(getAdminUc, pruneVisits)],\n [\"GET /api/cron-runs\", route(getUc, cronRuns)],\n [\"GET /api/blob-keys\", route(getUc, blobKeys)],\n [\"POST /api/blob-write\", route(getUc, blobWrite)],\n [\"GET /api/blob-read\", route(getUc, blobRead)],\n [\"GET /api/admin/users\", route(getSuperAdminUc, adminListUsers)],\n [\"POST /api/admin/set-admin\", route(getSuperAdminUc, adminSetAdmin)],\n]);\n\nasync function routeApi(req: Request, url: URL): Promise {\n const apiRoute = API_ROUTES.get(`${req.method} ${url.pathname}`);\n if (!apiRoute) return jsonError(`Not found: ${url.pathname}`, 404);\n\n try {\n const uc = await apiRoute.resolveUc(req);\n return await apiRoute.handle({ req, url, uc });\n } catch (error) {\n if (isAuthError(error)) return jsonError(error.message, error.status);\n throw error;\n }\n}\n","d-template",[155],"a1efbd3e-4cb0-11f1-b51c-ee650bb23af1","email.ts","aa7742d6-48c5-11f1-831b-42b51c65c3df",183,["D",1778445693986],9,"// email.ts — Email service: inbound handler + outbound helpers.\n// Address shape: .@valtown.email\n\nimport { email as sendEmail } from \"https://esm.town/v/std/email\";\nimport { APP_NAME, type Email } from \"./backend/shared.ts\";\n\n// -----------------------------------------------------------------------------\n// inbound\n// -----------------------------------------------------------------------------\n\nexport default async function emailHandler(inbound: Email): Promise {\n console.log(\n `📧 [${APP_NAME}] From: ${inbound.from} Subject: ${\n inbound.subject ?? \"(none)\"\n }`,\n );\n console.log(` Body: ${inbound.text?.slice(0, 200) ?? \"(empty)\"}...`);\n\n for (const file of inbound.attachments) {\n console.log(` 📎 ${file.name} (${file.type}, ${file.size}b)`);\n // await blob.set(`emails/${file.name}`, await file.arrayBuffer());\n }\n\n // await sendNotification(`Re: ${inbound.subject}`, \"Got your message!\");\n}\n\n// -----------------------------------------------------------------------------\n// outbound\n// -----------------------------------------------------------------------------\n// Free plan: sends to yourself only. Pro: send to anyone + cc/bcc.\n\nexport async function sendNotification(\n subject: string,\n body: string,\n options?: { to?: string; html?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n ...(options?.to && { to: options.to }),\n ...(options?.html && { html: options.html }),\n });\n console.log(`📤 [${APP_NAME}] Sent: \"${subject}\"`);\n}\n\n/** `attachment.content` must be base64-encoded (use `btoa()`). */\nexport async function sendWithAttachment(\n subject: string,\n body: string,\n attachment: { content: string; filename: string; type?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n attachments: [{\n content: attachment.content,\n filename: attachment.filename,\n type: attachment.type ?? \"application/octet-stream\",\n disposition: \"attachment\",\n }],\n });\n console.log(\n `📤 [${APP_NAME}] Sent with attachment: \"${attachment.filename}\"`,\n );\n}\n",[164],"e9ede3b4-4f02-11f1-8b31-ee650bb23af1","deno.json","86adc21c-4951-11f1-b797-42b51c65c3df",225,["D",1778700935796],3,"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"fmt\": {\n \"lineWidth\": 100\n },\n \"lint\": {\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\",\n \"no-external-import\",\n \"no-import-prefix\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"unstable\": [\"temporal\", \"worker-options\", \"sloppy-imports\", \"node-globals\"]\n}\n",[172],"ea1f8c34-4f02-11f1-ac5b-ee650bb23af1","cron.ts","aa651980-48c5-11f1-bfb8-42b51c65c3df",228,["D",1778700936143],"interval","// cron.ts — Cron service: pulse (every run) + daily (UTC-hour window).\n// Schedule is set in the Val Town UI via a cron expression. Free tier: ≥ 15 min.\n// Tasks are intentionally idempotent. Val Town fires each tick once; concurrent\n// cold-starts are rare but possible on Pro — design tasks to tolerate it.\n\nimport { APP_NAME, env } from \"./backend/shared.ts\";\nimport { logCronRun, pruneOldVisits } from \"./backend/db.ts\";\n\nexport default async function (\n interval: { lastRunAt: Date | undefined },\n): Promise {\n const now = new Date();\n await pulse(now);\n await daily(now, interval.lastRunAt);\n}\n\n// ── Pulse — runs on every cron tick ───────────────────────────────────────────\n// Good for health-checks, polling an external feed, draining a work queue.\n// Set the Val Town cron to your desired cadence (UI → val → Cron → expression).\n\nasync function pulse(now: Date): Promise {\n console.log(`⚡ [${APP_NAME}] pulse ${now.toISOString()}`);\n await logCronRun(\"pulse\", `hello at ${now.toISOString()}`);\n // TODO: replace with your high-frequency task\n // await fetch(\"https://api.example.com/feed\");\n}\n\n// ── Daily — runs once per day in a UTC-hour window ────────────────────────────\n// Uses Val Town's lastRunAt to run only on the first tick inside the target hour.\n// Env: DAILY_HOUR_UTC — which UTC hour to run (0-23, default \"2\").\n\nasync function daily(now: Date, lastRunAt: Date | undefined): Promise {\n const targetHour = Number(env(\"DAILY_HOUR_UTC\", \"2\"));\n if (!shouldRunDaily(now, lastRunAt, targetHour)) return;\n\n console.log(`🔧 [${APP_NAME}] daily ${now.toISOString()}`);\n await pruneOldVisits(30);\n await logCronRun(\"daily\", `pruned visits older than 30 days`);\n console.log(`✅ [${APP_NAME}] daily done`);\n}\n\nfunction shouldRunDaily(\n now: Date,\n lastRunAt: Date | undefined,\n targetHour: number,\n): boolean {\n if (now.getUTCHours() !== targetHour) return false;\n const target = new Date(Date.UTC(\n now.getUTCFullYear(),\n now.getUTCMonth(),\n now.getUTCDate(),\n targetHour,\n ));\n return !lastRunAt || lastRunAt < target;\n}\n",[180],"ec5736ea-6cd1-4212-b1d8-1e9f13fbae17","README.md","aabf7b64-48c5-11f1-9920-42b51c65c3df",268,["D",1788116690388],"# Val Town Reference Template\n\n`_template` is the executable reference and scaffold source for uApps vals. It demonstrates one HTTP\napplication with auth, APIs, SQLite, Blob, Cron, Email, SSR pages, and small browser controllers.\n\nThe UI is built on [Astryx](https://astryx.atmeta.com), Meta's open-source React + StyleX design\nsystem. See [`_specs/astryx-template.md`](../../_specs/astryx-template.md) for the migration\nhistory, version pins, and the two Deno SSR bugs that had to be worked around.\n\n`_template` is excluded from main-branch deployment because its directory starts with `_`.\n\n---\n\n## Create a Val\n\nFrom any directory after sourcing the uApps shell plugin:\n\n```bash\nvtx new my-app\ncd vals/my-app\nvtx status\nvtx push --dry-run\nvtx push\nvtx url\n```\n\n`vtx new` copies the template, replaces the application name and account-scoped Blob prefix, writes\nthe new `val.yml` name, and links the new remote val. Existing destinations are refused.\n\n## Application Shape\n\nThe HTTP entry wraps the app in Val Town OAuth, routes `/api/*` through typed auth boundaries, and\nrenders the selected SSR page for every other path.\n\nPages:\n\n- `/` — application and platform overview.\n- `/http` — HTTP routes and live request demos.\n- `/sqlite` — visit log and admin controls.\n- `/cron` — scheduled task history.\n- `/email` — inbound and outbound email examples.\n- `/blob` — token-protected Blob read/write/list demo.\n- `/ui` — Astryx theming explainer + component showcase.\n\nAPI routes:\n\n| Method | Path | Access |\n| ------ | ---------------------- | ---------------------- |\n| `GET` | `/api/health` | Public |\n| `GET` | `/api/me` | Public session context |\n| `GET` | `/api/visits` | Public |\n| `POST` | `/api/prune-visits` | Admin |\n| `GET` | `/api/cron-runs` | Public |\n| `GET` | `/api/blob-keys` | Demo token |\n| `POST` | `/api/blob-write` | Demo token |\n| `GET` | `/api/blob-read` | Demo token |\n| `GET` | `/api/admin/users` | Super-admin |\n| `POST` | `/api/admin/set-admin` | Super-admin |\n\n## Runtime Configuration\n\nSet these in the created val's Val Town environment UI, never in Git or GitHub Actions:\n\n| Variable | Kind | Purpose |\n| ------------------- | -------- | ---------------------------------- |\n| `APP_NAME` | Optional | Display name override |\n| `DAILY_HOUR_UTC` | Optional | Daily task hour, `0`–`23` UTC |\n| `BLOB_DEMO_TOKEN` | Optional | Enables public Blob demo routes |\n| `AUTH_SUPER_ADMINS` | Optional | Comma-separated Val Town usernames |\n\nThe repository-level `VAL_TOWN_API_KEY` secret is only for CI deployment. See the root\n[`README.md`](../../README.md#cicd).\n\n## Trigger Contract\n\n`val.yml.files` declares the intended remote types:\n\n```yaml\nfiles:\n index.http.ts: http\n cron.ts: interval\n email.ts: email\n```\n\nRun `vtx types` after linking. Use `vtx apply-types` only when deliberately repairing remote trigger\nmetadata.\n\n## Architecture\n\n- `index.http.ts` — HTTP composition root: per-route SSR page serving, `GET /theme` (zero-JS mode\n switch), and the API route table.\n- `backend/auth.ts` — OAuth context and role enforcement.\n- `backend/handlers.ts` — focused API handlers.\n- `backend/db.ts` — retryable migration, visits, Cron runs, and users.\n- `backend/storage.ts` — val-namespaced account Blob access.\n- `frontend/app.tsx` — React SSR composition root; dispatches one page per request via a `PAGES`\n map (no client-side router — navigation is real ``).\n- `frontend/astryx/` — pinned Astryx component barrel (`components.ts`), the RAF/CAF SSR shim\n (`ssr-shims.ts`), and the side-nav/theme-form shell (`shell.tsx`).\n- `frontend/pages/` — one file per route, composed from Astryx components.\n- `frontend/client.ts` — non-hydrated demo API wiring only (no router, no theme JS — both are\n server-driven).\n\nThis template does not hydrate React: `client.ts` is inlined via `dangerouslySetInnerHTML` and only\ndoes `fetch` + `textContent` DOM updates by element `id`. Components that need hydration (Astryx's\n`CodeBlock` copy button, `TextInput`/`Field`) are either disabled or avoided — see\n[`_specs/astryx-template.md`](../../_specs/astryx-template.md) for the full list and reasoning.\n\n## Key Files\n\n| Path | Purpose |\n| --------------------------------- | -------------------------------------------- |\n| `index.http.ts` | HTTP, page routing, `GET /theme`, API table |\n| `backend/auth.ts` | Val Town OAuth and roles |\n| `backend/db.ts` | Val-scoped SQLite repositories |\n| `backend/storage.ts` | Account-scoped Blob adapter |\n| `frontend/app.tsx` | React SSR root, per-route page dispatch |\n| `frontend/astryx/` | Pinned Astryx imports, SSR shim, nav shell |\n| `frontend/pages/` | Interactive reference pages |\n| `frontend/client.ts` | Non-hydrated demo API wiring |\n| `cron.ts` | Scheduled tasks |\n| `email.ts` | Email trigger and helpers |\n| `val.yml` | Identity, triggers, and environment contract |\n| `../../_specs/astryx-template.md` | Approved Astryx migration plan |\n",[188],"85f9d626-4951-11f1-a16a-42b51c65c3df","frontend","85f9d6f8-4951-11f1-a16a-42b51c65c3df",34,["D",1778074991402],0,"directory",[195],"86303568-4951-11f1-a193-42b51c65c3df","backend","8630361c-4951-11f1-a193-42b51c65c3df",35,["D",1778074991756],[203],"pulls","branches","forks","envVars",{"_215":67,"_217":199},"connections",{"_215":199,"_216":199},"count","unfilledCount","emptyCount",{"_46":202,"_33":203,"_31":204,"_146":-5,"_44":45,"_43":205,"_148":63,"_41":447,"_13":199,"_35":200,"_37":-5,"_24":25,"_152":-5,"_249":448,"_27":449},{"_46":438,"_33":439,"_31":440,"_146":204,"_44":45,"_43":441,"_148":25,"_41":442,"_13":443,"_35":272,"_37":444,"_24":25,"_152":-5,"_249":445,"_27":446},{"_46":430,"_33":431,"_31":432,"_146":204,"_44":45,"_43":433,"_148":25,"_41":434,"_13":67,"_35":272,"_37":435,"_24":25,"_152":-5,"_249":436,"_27":437},{"_46":421,"_33":422,"_31":423,"_146":204,"_44":45,"_43":424,"_148":25,"_41":425,"_13":426,"_35":272,"_37":427,"_24":25,"_152":-5,"_249":428,"_27":429},{"_46":413,"_33":414,"_31":415,"_146":204,"_44":45,"_43":416,"_148":25,"_41":417,"_13":199,"_35":272,"_37":418,"_24":25,"_152":-5,"_249":419,"_27":420},{"_46":405,"_33":406,"_31":407,"_146":204,"_44":45,"_43":408,"_148":25,"_41":409,"_13":300,"_35":272,"_37":410,"_24":25,"_152":-5,"_249":411,"_27":412},{"_46":397,"_33":398,"_31":399,"_146":204,"_44":45,"_43":400,"_148":25,"_41":401,"_13":281,"_35":272,"_37":402,"_24":25,"_152":-5,"_249":403,"_27":404},{"_46":194,"_33":195,"_31":196,"_146":-5,"_44":45,"_43":197,"_148":63,"_41":394,"_13":199,"_35":200,"_37":-5,"_24":25,"_152":-5,"_249":395,"_27":396},{"_46":389,"_33":372,"_31":366,"_146":196,"_44":45,"_43":390,"_148":63,"_41":391,"_13":199,"_35":200,"_37":-5,"_24":25,"_152":-5,"_249":392,"_27":393},{"_46":381,"_33":382,"_31":383,"_146":366,"_44":45,"_43":384,"_148":25,"_41":385,"_13":199,"_35":272,"_37":386,"_24":25,"_152":-5,"_249":387,"_27":388},{"_46":373,"_33":374,"_31":375,"_146":366,"_44":45,"_43":376,"_148":25,"_41":377,"_13":199,"_35":272,"_37":378,"_24":25,"_152":-5,"_249":379,"_27":380},{"_46":363,"_33":364,"_31":365,"_146":366,"_44":45,"_43":367,"_148":63,"_41":368,"_13":199,"_35":272,"_37":369,"_24":25,"_152":-5,"_249":370,"_27":371},{"_46":358,"_33":304,"_31":297,"_146":196,"_44":45,"_43":359,"_148":63,"_41":360,"_13":199,"_35":200,"_37":-5,"_24":25,"_152":-5,"_249":361,"_27":362},{"_46":350,"_33":351,"_31":352,"_146":297,"_44":45,"_43":353,"_148":25,"_41":354,"_13":315,"_35":272,"_37":355,"_24":25,"_152":-5,"_249":356,"_27":357},{"_46":342,"_33":343,"_31":344,"_146":297,"_44":45,"_43":345,"_148":25,"_41":346,"_13":199,"_35":272,"_37":347,"_24":25,"_152":-5,"_249":348,"_27":349},{"_46":334,"_33":335,"_31":336,"_146":297,"_44":45,"_43":337,"_148":25,"_41":338,"_13":150,"_35":272,"_37":339,"_24":25,"_152":-5,"_249":340,"_27":341},{"_46":326,"_33":327,"_31":328,"_146":297,"_44":45,"_43":329,"_148":25,"_41":330,"_13":168,"_35":184,"_37":331,"_24":25,"_152":-5,"_249":332,"_27":333},{"_46":318,"_33":319,"_31":320,"_146":297,"_44":45,"_43":321,"_148":25,"_41":322,"_13":150,"_35":159,"_37":323,"_24":25,"_152":-5,"_249":324,"_27":325},{"_46":313,"_33":39,"_31":32,"_146":297,"_44":45,"_43":14,"_148":25,"_41":314,"_13":315,"_35":36,"_37":40,"_24":25,"_152":-5,"_249":316,"_27":317},{"_46":305,"_33":306,"_31":307,"_146":297,"_44":45,"_43":308,"_148":25,"_41":309,"_13":168,"_35":272,"_37":310,"_24":25,"_152":-5,"_249":311,"_27":312},{"_46":294,"_33":295,"_31":296,"_146":297,"_44":45,"_43":298,"_148":25,"_41":299,"_13":300,"_35":272,"_37":301,"_24":25,"_152":-5,"_249":302,"_27":303},{"_46":285,"_33":286,"_31":287,"_146":196,"_44":45,"_43":288,"_148":25,"_41":289,"_13":290,"_35":272,"_37":291,"_24":25,"_152":-5,"_249":292,"_27":293},{"_46":276,"_33":277,"_31":278,"_146":196,"_44":45,"_43":279,"_148":25,"_41":280,"_13":281,"_35":272,"_37":282,"_24":25,"_152":-5,"_249":283,"_27":284},{"_46":267,"_33":268,"_31":269,"_146":196,"_44":45,"_43":270,"_148":25,"_41":271,"_13":199,"_35":272,"_37":273,"_24":25,"_152":-5,"_249":274,"_27":275},{"_46":187,"_33":188,"_31":189,"_146":-5,"_44":45,"_43":190,"_148":25,"_41":264,"_13":168,"_35":20,"_37":192,"_24":25,"_152":-5,"_249":265,"_27":266},{"_46":179,"_33":180,"_31":181,"_146":-5,"_44":45,"_43":182,"_148":25,"_41":261,"_13":168,"_35":184,"_37":185,"_24":25,"_152":-5,"_249":262,"_27":263},{"_46":171,"_33":172,"_31":173,"_146":-5,"_44":45,"_43":174,"_148":63,"_41":258,"_13":176,"_35":20,"_37":177,"_24":25,"_152":-5,"_249":259,"_27":260},{"_46":163,"_33":164,"_31":165,"_146":-5,"_44":45,"_43":166,"_148":25,"_41":255,"_13":168,"_35":36,"_37":169,"_24":25,"_152":-5,"_249":256,"_27":257},{"_46":154,"_33":155,"_31":61,"_146":-5,"_44":45,"_43":156,"_148":25,"_41":252,"_13":158,"_35":159,"_37":160,"_24":25,"_152":161,"_249":253,"_27":254},{"_46":143,"_33":144,"_31":145,"_146":-5,"_44":45,"_43":147,"_148":25,"_41":248,"_13":150,"_35":20,"_37":151,"_24":25,"_152":-5,"_249":250,"_27":251},["D",1778824681802],"children",[],[144],["D",1788116690543],[],[155],["D",1778445693986],[],[164],["D",1778700935796],[],[172],["D",1778700936143],[],[180],["D",1788116690388],[],[188],"2b6fd125-d3a1-45c9-82ff-05693aebf789","types.ts","dda64cce-a4a5-11f1-99b0-1607ee4eb77e",272,["D",1788116772035],"script","// types.ts — Shared UI data contracts for the SSR app.\n\nexport interface UserInfo {\n username: string;\n avatarUrl?: string;\n isAdmin: boolean;\n isSuperAdmin: boolean;\n}\n\n/** One color mode axis Astryx understands: light, dark, or follow the OS. */\nexport type ThemeMode = \"light\" | \"dark\" | \"system\";\n\nexport interface AppProps {\n appName: string;\n renderedAt: string;\n mode: ThemeMode;\n page: string;\n user: UserInfo | null;\n}\n\nexport interface CodeSnippet {\n filename: string;\n code: string;\n}\n",[],[195,268],"4f2fa568-b5c5-4d6b-9aa8-6d99344c1ec0","client.ts","48ed4cf0-4b21-11f1-b54f-ee650bb23af1",260,["D",1788116689438],10,"// client.ts — Small per-page demo wiring. No router, no theme JS: navigation\n// is real page loads and the theme switch is a plain HTML form\n// (see astryx/shell.tsx) — both work with JavaScript disabled.\n//\n// Note: clientJs is a raw JS string injected into

Diff · v274