[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_501":502,"_503":504},"routes/_app.x.$handle.$name",{"_102":101,"_32":46,"_111":92,"_27":112,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_20":-5,"_123":-5,"_124":-5,"_125":25,"_126":127,"_128":61,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":56,"_18":57,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":65,"_66":67,"_68":69,"_70":71,"_72":73,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":25},"version",341,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","backend/db.ts","latestPath","fileId","aad2cfa2-48c5-11f1-bfb8-42b51c65c3df","name","db.ts","fileType","script","content","// db.ts — SQLite helpers for this App's isolated database.\n// Each val (App) gets its own SQLite — no shared namespace with other vals.\n// Docs: https://docs.val.town/reference/std/sqlite/\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// ── Schema Migration ──────────────────────────────────────────────────────────\n// Lazily run on first DB call, not at import time. This prevents crashes\n// when running locally (off Val Town) where the SQLite API isn't available.\n\nlet migration: Promise | null = null;\n\n/** Share one migration across concurrent calls and reset it after failure. */\nasync function migrate(): Promise {\n migration ??= runMigration();\n await migration;\n}\n\nasync function runMigration(): Promise {\n return await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS visits (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n path TEXT NOT NULL,\n ts TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS cron_runs (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n task TEXT NOT NULL,\n note TEXT,\n ts TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS users (\n username TEXT PRIMARY KEY,\n email TEXT,\n first_login TEXT NOT NULL DEFAULT (datetime('now')),\n last_login TEXT NOT NULL DEFAULT (datetime('now')),\n is_admin INTEGER NOT NULL DEFAULT 0\n )`,\n ]).then(() => undefined).catch((error) => {\n migration = null;\n throw error;\n });\n}\n\n// ── Visits ────────────────────────────────────────────────────────────────────\n\n/** Record a page visit. */\nexport async function recordVisit(path: string): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO visits (path) VALUES (?)`,\n args: [path],\n });\n}\n\n/** Get total visit count. */\nexport async function getVisitCount(): Promise {\n await migrate();\n const { rows } = await sqlite.execute(\n `SELECT COUNT(*) as count FROM visits`,\n );\n // Row supports [key: number] indexing — no cast required.\n return Number(rows[0][0]);\n}\n\n/** Get the N most recent visits. */\nexport async function getRecentVisits(\n limit = 20,\n): Promise> {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT id, path, ts FROM visits ORDER BY ts DESC LIMIT ?`,\n args: [limit],\n });\n // Row is ArrayLike with [key: number]: Value — index directly, no cast.\n return rows.map((r) => ({\n id: Number(r[0]),\n path: String(r[1]),\n ts: String(r[2]),\n }));\n}\n\n/** Delete visits older than `days` days. Idempotent — safe to call repeatedly. */\nexport async function pruneOldVisits(days = 30): Promise {\n await migrate();\n const interval = `-${Math.floor(Math.abs(days))} days`;\n await sqlite.execute({\n sql: `DELETE FROM visits WHERE ts < datetime('now', ?)`,\n args: [interval],\n });\n}\n\n// ── Cron runs ─────────────────────────────────────────────────────────────────\n\n/** Append a cron run log entry. Called by cron.ts tasks. */\nexport async function logCronRun(task: string, note?: string): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO cron_runs (task, note) VALUES (?, ?)`,\n args: [task, note ?? null],\n });\n}\n\n/** Get the N most recent cron run entries across all tasks. */\nexport async function getCronRuns(\n limit = 30,\n): Promise<\n Array<{ id: number; task: string; note: string | null; ts: string }>\n> {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT id, task, note, ts FROM cron_runs ORDER BY ts DESC LIMIT ?`,\n args: [limit],\n });\n // Row is ArrayLike with [key: number]: Value — index directly, no cast.\n return rows.map((r) => ({\n id: Number(r[0]),\n task: String(r[1]),\n note: r[2] != null ? String(r[2]) : null,\n ts: String(r[3]),\n }));\n}\n\n// ── Users ─────────────────────────────────────────────────────────────────────\n\nexport interface UserRow {\n username: string;\n email: string | null;\n first_login: string;\n last_login: string;\n is_admin: boolean;\n}\n\n/** Upsert user on login — sets first_login on create, updates last_login always. */\nexport async function upsertUser(\n username: string,\n email?: string | null,\n): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO users (username, email)\n VALUES (?, ?)\n ON CONFLICT(username) DO UPDATE SET\n last_login = datetime('now'),\n email = COALESCE(excluded.email, users.email)`,\n args: [username, email ?? null],\n });\n}\n\n/** Get a single user by username. */\nexport async function getUser(username: string): Promise {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT username, email, first_login, last_login, is_admin FROM users WHERE username = ?`,\n args: [username],\n });\n if (!rows.length) return null;\n return rowToUser(rows[0]);\n}\n\n/** List all registered users (most recent login first). */\nexport async function listUsers(): Promise {\n await migrate();\n const { rows } = await sqlite.execute(\n `SELECT username, email, first_login, last_login, is_admin FROM users ORDER BY last_login DESC`,\n );\n return rows.map(rowToUser);\n}\n\n/** Set is_admin flag for a user. Only super-admins should call this. */\nexport async function setUserAdmin(\n username: string,\n isAdmin: boolean,\n): Promise {\n await migrate();\n const { rowsAffected } = await sqlite.execute({\n sql: `UPDATE users SET is_admin = ? WHERE username = ?`,\n args: [isAdmin ? 1 : 0, username],\n });\n return rowsAffected > 0;\n}\n\nfunction rowToUser(r: ArrayLike): UserRow {\n return {\n username: String(r[0]),\n email: r[1] != null ? String(r[1]) : null,\n first_login: String(r[2]),\n last_login: String(r[3]),\n is_admin: Number(r[4]) === 1,\n };\n}\n","// db.ts — SQLite helpers for this App's isolated database.\n// Each val (App) gets its own SQLite — no shared namespace with other vals.\n// Docs: https://docs.val.town/reference/std/sqlite/\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { DEMO_DATA_RETENTION_HOURS } from \"./shared.ts\";\n\n// ── Schema Migration ──────────────────────────────────────────────────────────\n// Lazily run on first DB call, not at import time. This prevents crashes\n// when running locally (off Val Town) where the SQLite API isn't available.\n\nlet migration: Promise | null = null;\n\n/** Share one migration across concurrent calls and reset it after failure. */\nasync function migrate(): Promise {\n migration ??= runMigration();\n await migration;\n}\n\nasync function runMigration(): Promise {\n return await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS visits (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n path TEXT NOT NULL,\n ts TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS cron_runs (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n task TEXT NOT NULL,\n note TEXT,\n ts TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS users (\n username TEXT PRIMARY KEY,\n email TEXT,\n first_login TEXT NOT NULL DEFAULT (datetime('now')),\n last_login TEXT NOT NULL DEFAULT (datetime('now')),\n is_admin INTEGER NOT NULL DEFAULT 0\n )`,\n `CREATE TABLE IF NOT EXISTS reminders (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n title TEXT NOT NULL,\n note TEXT,\n due_date TEXT,\n done INTEGER NOT NULL DEFAULT 0,\n created_by TEXT NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS inbound_emails (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n from_addr TEXT NOT NULL,\n subject TEXT,\n is_spam INTEGER NOT NULL DEFAULT 0,\n summary TEXT,\n received_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n ]).then(() => undefined).catch((error) => {\n migration = null;\n throw error;\n });\n}\n\n// ── Visits ────────────────────────────────────────────────────────────────────\n\n/** Record a page visit. */\nexport async function recordVisit(path: string): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO visits (path) VALUES (?)`,\n args: [path],\n });\n}\n\n/** Get total visit count. */\nexport async function getVisitCount(): Promise {\n await migrate();\n const { rows } = await sqlite.execute(\n `SELECT COUNT(*) as count FROM visits`,\n );\n // Row supports [key: number] indexing — no cast required.\n return Number(rows[0][0]);\n}\n\n/** Get the N most recent visits. */\nexport async function getRecentVisits(\n limit = 20,\n): Promise> {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT id, path, ts FROM visits ORDER BY ts DESC LIMIT ?`,\n args: [limit],\n });\n // Row is ArrayLike with [key: number]: Value — index directly, no cast.\n return rows.map((r) => ({\n id: Number(r[0]),\n path: String(r[1]),\n ts: String(r[2]),\n }));\n}\n\n/** Delete visits older than `days` days. Idempotent — safe to call repeatedly. */\nexport async function pruneOldVisits(days = 30): Promise {\n await migrate();\n const interval = `-${Math.floor(Math.abs(days))} days`;\n await sqlite.execute({\n sql: `DELETE FROM visits WHERE ts < datetime('now', ?)`,\n args: [interval],\n });\n}\n\n// ── Cron runs ─────────────────────────────────────────────────────────────────\n\n/** Append a cron run log entry. Called by cron.ts tasks. */\nexport async function logCronRun(task: string, note?: string): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO cron_runs (task, note) VALUES (?, ?)`,\n args: [task, note ?? null],\n });\n}\n\n/** Get the N most recent cron run entries across all tasks. */\nexport async function getCronRuns(\n limit = 30,\n): Promise<\n Array<{ id: number; task: string; note: string | null; ts: string }>\n> {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT id, task, note, ts FROM cron_runs ORDER BY ts DESC LIMIT ?`,\n args: [limit],\n });\n // Row is ArrayLike with [key: number]: Value — index directly, no cast.\n return rows.map((r) => ({\n id: Number(r[0]),\n task: String(r[1]),\n note: r[2] != null ? String(r[2]) : null,\n ts: String(r[3]),\n }));\n}\n\n// ── Users ─────────────────────────────────────────────────────────────────────\n\nexport interface UserRow {\n username: string;\n email: string | null;\n first_login: string;\n last_login: string;\n is_admin: boolean;\n}\n\n/** Upsert user on login — sets first_login on create, updates last_login always. */\nexport async function upsertUser(\n username: string,\n email?: string | null,\n): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO users (username, email)\n VALUES (?, ?)\n ON CONFLICT(username) DO UPDATE SET\n last_login = datetime('now'),\n email = COALESCE(excluded.email, users.email)`,\n args: [username, email ?? null],\n });\n}\n\n/** Get a single user by username. */\nexport async function getUser(username: string): Promise {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT username, email, first_login, last_login, is_admin FROM users WHERE username = ?`,\n args: [username],\n });\n if (!rows.length) return null;\n return rowToUser(rows[0]);\n}\n\n/** List all registered users (most recent login first). */\nexport async function listUsers(): Promise {\n await migrate();\n const { rows } = await sqlite.execute(\n `SELECT username, email, first_login, last_login, is_admin FROM users ORDER BY last_login DESC`,\n );\n return rows.map(rowToUser);\n}\n\n/** Set is_admin flag for a user. Only super-admins should call this. */\nexport async function setUserAdmin(\n username: string,\n isAdmin: boolean,\n): Promise {\n await migrate();\n const { rowsAffected } = await sqlite.execute({\n sql: `UPDATE users SET is_admin = ? WHERE username = ?`,\n args: [isAdmin ? 1 : 0, username],\n });\n return rowsAffected > 0;\n}\n\nfunction rowToUser(r: ArrayLike): UserRow {\n return {\n username: String(r[0]),\n email: r[1] != null ? String(r[1]) : null,\n first_login: String(r[2]),\n last_login: String(r[3]),\n is_admin: Number(r[4]) === 1,\n };\n}\n\n// ── Reminders — the flagship shared \"tiny app\" demo ───────────────────────────\n// Public read, sign-in-required write (see backend/auth.ts's getAuthedUc).\n// Demo data — filtered at read time AND physically pruned by cron.ts's pulse\n// so the \"wiped every 24 hours\" promise holds even between cron ticks.\n\nexport interface Reminder {\n id: number;\n title: string;\n note: string | null;\n dueDate: string | null;\n done: boolean;\n createdBy: string;\n createdAt: string;\n}\n\nexport async function createReminder(\n title: string,\n note: string | null,\n dueDate: string | null,\n createdBy: string,\n): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO reminders (title, note, due_date, created_by) VALUES (?, ?, ?, ?)`,\n args: [title, note, dueDate, createdBy],\n });\n}\n\n/** List reminders created within the retention window — oldest expired rows never surface. */\nexport async function listReminders(\n hours = DEMO_DATA_RETENTION_HOURS,\n): Promise {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT id, title, note, due_date, done, created_by, created_at\n FROM reminders\n WHERE created_at > datetime('now', ?)\n ORDER BY done ASC, (due_date IS NULL), due_date ASC, created_at DESC`,\n args: [`-${hours} hours`],\n });\n return rows.map(rowToReminder);\n}\n\nexport async function setReminderDone(id: number, done: boolean): Promise {\n await migrate();\n const { rowsAffected } = await sqlite.execute({\n sql: `UPDATE reminders SET done = ? WHERE id = ?`,\n args: [done ? 1 : 0, id],\n });\n return rowsAffected > 0;\n}\n\nexport async function deleteReminder(id: number): Promise {\n await migrate();\n const { rowsAffected } = await sqlite.execute({\n sql: `DELETE FROM reminders WHERE id = ?`,\n args: [id],\n });\n return rowsAffected > 0;\n}\n\n/** Physically delete reminders past the retention window. Idempotent. */\nexport async function pruneOldReminders(hours = DEMO_DATA_RETENTION_HOURS): Promise {\n await migrate();\n await sqlite.execute({\n sql: `DELETE FROM reminders WHERE created_at < datetime('now', ?)`,\n args: [`-${hours} hours`],\n });\n}\n\nfunction rowToReminder(r: ArrayLike): Reminder {\n return {\n id: Number(r[0]),\n title: String(r[1]),\n note: r[2] != null ? String(r[2]) : null,\n dueDate: r[3] != null ? String(r[3]) : null,\n done: Number(r[4]) === 1,\n createdBy: String(r[5]),\n createdAt: String(r[6]),\n };\n}\n\n// ── Inbound emails — the AI spam/summary triage demo ──────────────────────────\n// Public read-only. Written by email.ts's inbound handler. Same 24h demo-data\n// retention as Reminders.\n\nexport interface InboundEmail {\n id: number;\n from: string;\n subject: string;\n isSpam: boolean;\n summary: string | null;\n receivedAt: string;\n}\n\nexport async function recordInboundEmail(\n from: string,\n subject: string,\n isSpam: boolean,\n summary: string | null,\n): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO inbound_emails (from_addr, subject, is_spam, summary) VALUES (?, ?, ?, ?)`,\n args: [from, subject, isSpam ? 1 : 0, summary],\n });\n}\n\nexport async function listRecentEmails(\n hours = DEMO_DATA_RETENTION_HOURS,\n limit = 20,\n): Promise {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT id, from_addr, subject, is_spam, summary, received_at\n FROM inbound_emails\n WHERE received_at > datetime('now', ?)\n ORDER BY received_at DESC\n LIMIT ?`,\n args: [`-${hours} hours`, limit],\n });\n return rows.map(rowToInboundEmail);\n}\n\n/** Physically delete inbound emails past the retention window. Idempotent. */\nexport async function pruneOldEmails(hours = DEMO_DATA_RETENTION_HOURS): Promise {\n await migrate();\n await sqlite.execute({\n sql: `DELETE FROM inbound_emails WHERE received_at < datetime('now', ?)`,\n args: [`-${hours} hours`],\n });\n}\n\nfunction rowToInboundEmail(r: ArrayLike): InboundEmail {\n return {\n id: Number(r[0]),\n from: String(r[1]),\n subject: String(r[2]),\n isSpam: Number(r[3]) === 1,\n summary: r[4] != null ? String(r[4]) : null,\n receivedAt: String(r[5]),\n };\n}\n","createdAt",["D",1788140102565],"branchVersion","branchId","5a0a7ac8-4895-11f1-80ec-42b51c65c3df","id","5a09ae54-4895-11f1-80ec-42b51c65c3df","Quickstart-Full-Stack",["D",1777994172310],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","An elegant template for an elegant single-person full stack app.","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/3ed9401e-3850-4a69-dec2-1bdd924c0900/square512?exp=1789538399&sig=8ded5b974bfebef9817e2fbdffe4de4e1704e0d4cab9518c811db2594c0af107","173e7424-8658-428f-a3bc-ae4faeaabd1c","pinnedFileId","e1c705aa-4b18-11f1-b4ae-ee650bb23af1","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",1,"orgId","019df771-9af8-7238-99a4-541e39355038","tursoName","5a09ae54489511f180ec42b51c65c3df","tursoHostname","5a09ae54489511f180ec42b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789511441255],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_102":101,"_110":106},"org",{"_102":101,"_103":104,"_105":106,"_18":57,"_107":108,"_109":25},"branch",{"_13":91,"_32":92,"_44":43,"_93":45,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":46,"_100":101},"isOwned",384,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","pikachu","handle","displayName","Minion","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/22c8ba37-42c8-4af4-8daf-8cdd2f5f1800/square512?exp=1789538399&sig=21cdba23f818845c8391e88088eb5ea9255dbc43e05efe79e25bd70ab9ddb43a","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_44":45,"_32":46,"_39":496,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":56,"_18":57,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":65,"_66":67,"_68":69,"_70":71,"_72":497,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":498,"_86":499,"_88":500,"_90":25},"tree",[225,233,251,254,255,256,257,258,259],"files",[225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259],"counts",{"_215":200,"_216":65,"_217":65,"_218":219,"_220":221},"contents",[133,134,135,136,137,138,139,140,141],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":209,"_32":210,"_30":211,"_145":-5,"_42":43,"_41":212,"_147":61,"_39":213,"_13":200,"_34":201,"_36":-5,"_24":25,"_151":-5,"_27":214},{"_44":203,"_32":204,"_30":205,"_145":-5,"_42":43,"_41":206,"_147":61,"_39":207,"_13":200,"_34":201,"_36":-5,"_24":25,"_151":-5,"_27":208},{"_44":195,"_32":196,"_30":197,"_145":-5,"_42":43,"_41":198,"_147":61,"_39":199,"_13":200,"_34":201,"_36":-5,"_24":25,"_151":-5,"_27":202},{"_44":188,"_32":189,"_30":190,"_145":-5,"_42":43,"_41":191,"_147":25,"_39":192,"_13":167,"_34":20,"_36":193,"_24":25,"_151":-5,"_27":194},{"_44":179,"_32":180,"_30":181,"_145":-5,"_42":43,"_41":182,"_147":25,"_39":183,"_13":184,"_34":185,"_36":186,"_24":25,"_151":-5,"_27":187},{"_44":171,"_32":172,"_30":173,"_145":-5,"_42":43,"_41":174,"_147":61,"_39":175,"_13":176,"_34":20,"_36":177,"_24":25,"_151":-5,"_27":178},{"_44":162,"_32":163,"_30":164,"_145":-5,"_42":43,"_41":165,"_147":61,"_39":166,"_13":167,"_34":168,"_36":169,"_24":25,"_151":-5,"_27":170},{"_44":153,"_32":154,"_30":59,"_145":-5,"_42":43,"_41":155,"_147":25,"_39":156,"_13":157,"_34":158,"_36":159,"_24":25,"_151":160,"_27":161},{"_44":142,"_32":143,"_30":144,"_145":-5,"_42":43,"_41":146,"_147":61,"_39":148,"_13":149,"_34":20,"_36":150,"_24":25,"_151":-5,"_27":152},"490a09b0-2a98-4fc5-a448-02058c3a5820","val.yml","aa729402-48c5-11f1-87ca-42b51c65c3df","parentId",337,"latest",["D",1788140101761],10,"name: \"Val-Town-Quickstart\"\npublic: true\n# Each file here is a service. Services share one isolated SQLite DB.\n# index.http.ts → HTTP service (SPA + API routes)\n# cron.ts → Cron service (scheduled tasks)\n# email.ts → Email service (inbound trigger + outbound helpers)\nfiles:\n index.http.ts: http\n cron.ts: interval\n email.ts: email\n# Env vars this App reads. Set them in the Val Town UI sidebar — never in code.\n# required: App will not work without it | optional: has a safe default\nenv:\n APP_NAME: optional # display/logging name (vtx new sets the code fallback)\n VAL_TOWN_USERNAME: optional # your Val Town username — powers \"view source\"/Fork links (see README)\n DAILY_HOUR_UTC: optional # 0-23 UTC hour for the daily cron task (default: \"2\")\n AUTH_SUPER_ADMINS: optional # comma-separated Val Town usernames — these users are super-admins\n","label",[143],"0d29c21a-0254-4800-af28-981986567366","index.http.ts",306,["D",1788122839148],17,"http","// index.http.ts — HTTP entry point: per-route SSR page serving + API route\n// table. Handlers live in backend/handlers.ts; this file is pure wiring.\n// Docs: https://docs.val.town/vals/http\n\nimport { recordVisit } from \"./backend/db.ts\";\nimport { type ApiRoute, jsonError, route } from \"./backend/api-utils.ts\";\nimport {\n getAdminUc,\n getSuperAdminUc,\n getUc,\n getUcWithTracking,\n isAuthError,\n type UserCxt,\n withValTownAuth,\n} from \"./backend/auth.ts\";\nimport {\n adminListUsers,\n adminSetAdmin,\n blobKeys,\n blobRead,\n blobWrite,\n cronRuns,\n healthCheck,\n me,\n pruneVisits,\n visits,\n} from \"./backend/handlers.ts\";\nimport { APP_NAME, VAL_TOWN_USERNAME } from \"./backend/shared.ts\";\nimport { renderApp } from \"./frontend/app.tsx\";\nimport type { ThemeMode, UserInfo } from \"./frontend/types.ts\";\n\n// Valid page slugs — anything else falls back to \"home\".\n// Keep in sync with PAGES in frontend/app.tsx.\nconst PAGES = new Set([\"home\", \"anatomy\", \"http\", \"sqlite\", \"cron\", \"email\", \"blob\", \"ui\"]);\nconst MODES = new Set([\"light\", \"dark\", \"system\"]);\nconst THEME_COOKIE = \"theme\";\n\n// -----------------------------------------------------------------------------\n// entry\n// -----------------------------------------------------------------------------\n\nasync function handler(req: Request): Promise {\n const url = new URL(req.url);\n if (url.pathname.startsWith(\"/api/\")) return await routeApi(req, url);\n if (url.pathname === \"/theme\") return setThemeAndRedirect(url);\n return await servePage(req, url);\n}\n\nexport default withValTownAuth(handler);\n\n// -----------------------------------------------------------------------------\n// page rendering\n// -----------------------------------------------------------------------------\n\nasync function servePage(req: Request, url: URL): Promise {\n try {\n await recordVisit(url.pathname);\n } catch { /* off-platform */ }\n\n const uc = await getUcWithTracking(req);\n const html = renderApp({\n appName: APP_NAME,\n renderedAt: new Date().toISOString(),\n mode: cookieMode(req),\n page: pathToPage(url.pathname),\n user: ucToUserInfo(uc),\n valTownUsername: VAL_TOWN_USERNAME,\n });\n return new Response(html, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n}\n\n/** GET /theme?mode=light|dark|system&page= — sets the mode cookie, redirects back. */\nfunction setThemeAndRedirect(url: URL): Response {\n const mode = url.searchParams.get(\"mode\");\n const page = pathToPage(`/${url.searchParams.get(\"page\") ?? \"\"}`);\n const headers = new Headers({ location: page === \"home\" ? \"/\" : `/${page}` });\n if (mode && (MODES as Set).has(mode)) {\n headers.append(\"set-cookie\", `${THEME_COOKIE}=${mode}; Path=/; Max-Age=31536000; SameSite=Lax`);\n }\n return new Response(null, { status: 303, headers });\n}\n\n/** Map backend UserCxt → frontend UserInfo (layer boundary). */\nfunction ucToUserInfo(uc: UserCxt): UserInfo | null {\n if (!uc.user) return null;\n return {\n username: uc.user.username,\n avatarUrl: uc.user.avatarUrl,\n isAdmin: uc.isAdmin,\n isSuperAdmin: uc.isSuperAdmin,\n };\n}\n\nfunction cookieMode(req: Request): ThemeMode {\n const cookie = req.headers.get(\"Cookie\") ?? \"\";\n const m = cookie.match(new RegExp(`(?:^|;\\\\s*)${THEME_COOKIE}=([^;]+)`));\n const value = m ? decodeURIComponent(m[1]) : \"\";\n return (MODES as Set).has(value) ? (value as ThemeMode) : \"system\";\n}\n\nfunction pathToPage(pathname: string): string {\n const seg = pathname.slice(1);\n return PAGES.has(seg) ? seg : \"home\";\n}\n\n// -----------------------------------------------------------------------------\n// API routing\n// -----------------------------------------------------------------------------\n\nconst API_ROUTES = new Map([\n [\"GET /api/health\", route(getUc, healthCheck)],\n [\"GET /api/me\", route(getUcWithTracking, me)],\n [\"GET /api/visits\", route(getUc, visits)],\n [\"POST /api/prune-visits\", route(getAdminUc, pruneVisits)],\n [\"GET /api/cron-runs\", route(getUc, cronRuns)],\n [\"GET /api/blob-keys\", route(getUc, blobKeys)],\n [\"POST /api/blob-write\", route(getUc, blobWrite)],\n [\"GET /api/blob-read\", route(getUc, blobRead)],\n [\"GET /api/admin/users\", route(getSuperAdminUc, adminListUsers)],\n [\"POST /api/admin/set-admin\", route(getSuperAdminUc, adminSetAdmin)],\n]);\n\nasync function routeApi(req: Request, url: URL): Promise {\n const apiRoute = API_ROUTES.get(`${req.method} ${url.pathname}`);\n if (!apiRoute) return jsonError(`Not found: ${url.pathname}`, 404);\n\n try {\n const uc = await apiRoute.resolveUc(req);\n return await apiRoute.handle({ req, url, uc });\n } catch (error) {\n if (isAuthError(error)) return jsonError(error.message, error.status);\n throw error;\n }\n}\n","d-template",[154],"6da22813-bc26-432e-8840-2d89796753cd","email.ts","aa7742d6-48c5-11f1-831b-42b51c65c3df",339,["D",1788140102069],11,"email","// email.ts — Email service: inbound handler + outbound helpers.\n// Address shape: .@valtown.email\n\nimport { email as sendEmail } from \"https://esm.town/v/std/email\";\nimport { APP_NAME, type Email } from \"./backend/shared.ts\";\nimport { triageEmail } from \"./backend/ai.ts\";\nimport { recordInboundEmail } from \"./backend/db.ts\";\n\n// -----------------------------------------------------------------------------\n// inbound\n// -----------------------------------------------------------------------------\n\nexport default async function emailHandler(inbound: Email): Promise {\n console.log(\n `📧 [${APP_NAME}] From: ${inbound.from} Subject: ${inbound.subject ?? \"(none)\"}`,\n );\n console.log(` Body: ${inbound.text?.slice(0, 200) ?? \"(empty)\"}...`);\n\n for (const file of inbound.attachments) {\n console.log(` 📎 ${file.name} (${file.type}, ${file.size}b)`);\n // await blob.set(`emails/${file.name}`, await file.arrayBuffer());\n }\n\n // AI triage feeds the live \"Email Inbox\" demo (frontend/pages/page-mail.tsx) —\n // best-effort: a triage/DB hiccup should never fail the inbound trigger.\n try {\n const subject = inbound.subject ?? \"\";\n const { isSpam, summary } = await triageEmail(subject, inbound.text ?? \"\");\n await recordInboundEmail(inbound.from, subject, isSpam, summary);\n } catch (error) {\n console.error(` ⚠️ triage/record failed: ${error}`);\n }\n\n // await sendNotification(`Re: ${inbound.subject}`, \"Got your message!\");\n}\n\n// -----------------------------------------------------------------------------\n// outbound\n// -----------------------------------------------------------------------------\n// Free plan: sends to yourself only. Pro: send to anyone + cc/bcc.\n\nexport async function sendNotification(\n subject: string,\n body: string,\n options?: { to?: string; html?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n ...(options?.to && { to: options.to }),\n ...(options?.html && { html: options.html }),\n });\n console.log(`📤 [${APP_NAME}] Sent: \"${subject}\"`);\n}\n\n/** `attachment.content` must be base64-encoded (use `btoa()`). */\nexport async function sendWithAttachment(\n subject: string,\n body: string,\n attachment: { content: string; filename: string; type?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n attachments: [{\n content: attachment.content,\n filename: attachment.filename,\n type: attachment.type ?? \"application/octet-stream\",\n disposition: \"attachment\",\n }],\n });\n console.log(\n `📤 [${APP_NAME}] Sent with attachment: \"${attachment.filename}\"`,\n );\n}\n",[163],"e9ede3b4-4f02-11f1-8b31-ee650bb23af1","deno.json","86adc21c-4951-11f1-b797-42b51c65c3df",225,["D",1778700935796],3,"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"fmt\": {\n \"lineWidth\": 100\n },\n \"lint\": {\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\",\n \"no-external-import\",\n \"no-import-prefix\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"unstable\": [\"temporal\", \"worker-options\", \"sloppy-imports\", \"node-globals\"]\n}\n",[172],"ea1f8c34-4f02-11f1-ac5b-ee650bb23af1","cron.ts","aa651980-48c5-11f1-bfb8-42b51c65c3df",228,["D",1778700936143],9,"interval","// cron.ts — Cron service: pulse (every run) + daily (UTC-hour window).\n// Schedule is set in the Val Town UI via a cron expression. Free tier: ≥ 15 min.\n// Tasks are intentionally idempotent. Val Town fires each tick once; concurrent\n// cold-starts are rare but possible on Pro — design tasks to tolerate it.\n\nimport { APP_NAME, env } from \"./backend/shared.ts\";\nimport { logCronRun, pruneOldVisits } from \"./backend/db.ts\";\n\nexport default async function (\n interval: { lastRunAt: Date | undefined },\n): Promise {\n const now = new Date();\n await pulse(now);\n await daily(now, interval.lastRunAt);\n}\n\n// ── Pulse — runs on every cron tick ───────────────────────────────────────────\n// Good for health-checks, polling an external feed, draining a work queue.\n// Set the Val Town cron to your desired cadence (UI → val → Cron → expression).\n\nasync function pulse(now: Date): Promise {\n console.log(`⚡ [${APP_NAME}] pulse ${now.toISOString()}`);\n await logCronRun(\"pulse\", `hello at ${now.toISOString()}`);\n // TODO: replace with your high-frequency task\n // await fetch(\"https://api.example.com/feed\");\n}\n\n// ── Daily — runs once per day in a UTC-hour window ────────────────────────────\n// Uses Val Town's lastRunAt to run only on the first tick inside the target hour.\n// Env: DAILY_HOUR_UTC — which UTC hour to run (0-23, default \"2\").\n\nasync function daily(now: Date, lastRunAt: Date | undefined): Promise {\n const targetHour = Number(env(\"DAILY_HOUR_UTC\", \"2\"));\n if (!shouldRunDaily(now, lastRunAt, targetHour)) return;\n\n console.log(`🔧 [${APP_NAME}] daily ${now.toISOString()}`);\n await pruneOldVisits(30);\n await logCronRun(\"daily\", `pruned visits older than 30 days`);\n console.log(`✅ [${APP_NAME}] daily done`);\n}\n\nfunction shouldRunDaily(\n now: Date,\n lastRunAt: Date | undefined,\n targetHour: number,\n): boolean {\n if (now.getUTCHours() !== targetHour) return false;\n const target = new Date(Date.UTC(\n now.getUTCFullYear(),\n now.getUTCMonth(),\n now.getUTCDate(),\n targetHour,\n ));\n return !lastRunAt || lastRunAt < target;\n}\n",[180],"8847569b-3cc7-47b7-8dd7-016542787858","README.md","aabf7b64-48c5-11f1-9920-42b51c65c3df",305,["D",1788122839143],"# Quickstart-Full-Stack\n\n`_template` is uApps' onboarding tutorial and scaffold source: a small, production-shaped full-stack\nVal Town App you read top to bottom to learn the platform, then copy as the starting point for your\nown single-person or family app. It demonstrates one HTTP application with auth, APIs, SQLite, Blob,\nCron, Email, SSR pages, and small browser controllers — sized for a solo project, not an enterprise\nplatform team.\n\nThe UI is built on [Astryx](https://astryx.atmeta.com), Meta's open-source React + StyleX design\nsystem. See [`_specs/astryx-template.md`](../../_specs/astryx-template.md) for the migration\nhistory, version pins, and the two Deno SSR bugs that had to be worked around.\n\n`_template` is excluded from main-branch deployment because its directory starts with `_`.\n\nSince every Val Town HTTP val is browsable source, the deployed copy of this App is readable at\n`https://www.val.town/x///code/` — e.g.\n`https://www.val.town/x/pikachu/Quickstart-Full-Stack/code/backend/auth.ts`. In-app \"view source\"\nlinks use this same pattern (see `VAL_TOWN_USERNAME` below).\n\n---\n\n## Create a Val\n\nFrom any directory after sourcing the uApps shell plugin:\n\n```bash\nvtx new my-app\ncd vals/my-app\nvtx status\nvtx push --dry-run\nvtx push\nvtx url\n```\n\n`vtx new` copies the template, replaces the application name and account-scoped Blob prefix, writes\nthe new `val.yml` name, and links the new remote val. Existing destinations are refused.\n\n## Application Shape\n\nThe HTTP entry wraps the app in Val Town OAuth, routes `/api/*` through typed auth boundaries, and\nrenders the selected SSR page for every other path.\n\nPages — read in this order the first time:\n\n- `/` — what this App is, who it's for, and where to go next.\n- `/anatomy` — block diagram of Val Town's infra layer, this App's routing, and its core stack.\n- `/http` — HTTP routes and live request demos.\n- `/sqlite` — visit log and admin controls.\n- `/cron` — scheduled task history.\n- `/email` — inbound and outbound email examples.\n- `/blob` — token-protected Blob read/write/list demo.\n- `/ui` — Astryx theming explainer + component showcase.\n\nAPI routes:\n\n| Method | Path | Access |\n| ------ | ---------------------- | ---------------------- |\n| `GET` | `/api/health` | Public |\n| `GET` | `/api/me` | Public session context |\n| `GET` | `/api/visits` | Public |\n| `POST` | `/api/prune-visits` | Admin |\n| `GET` | `/api/cron-runs` | Public |\n| `GET` | `/api/blob-keys` | Demo token |\n| `POST` | `/api/blob-write` | Demo token |\n| `GET` | `/api/blob-read` | Demo token |\n| `GET` | `/api/admin/users` | Super-admin |\n| `POST` | `/api/admin/set-admin` | Super-admin |\n\n## Runtime Configuration\n\nSet these in the created val's Val Town environment UI, never in Git or GitHub Actions:\n\n| Variable | Kind | Purpose |\n| ------------------- | -------- | ------------------------------------------------------------------------- |\n| `APP_NAME` | Optional | Display name override |\n| `VAL_TOWN_USERNAME` | Optional | Your Val Town username — powers \"view source\" links on `/` and `/anatomy` |\n| `DAILY_HOUR_UTC` | Optional | Daily task hour, `0`–`23` UTC |\n| `BLOB_DEMO_TOKEN` | Optional | Enables public Blob demo routes |\n| `AUTH_SUPER_ADMINS` | Optional | Comma-separated Val Town usernames |\n\nThe repository-level `VAL_TOWN_API_KEY` secret is only for CI deployment. See the root\n[`README.md`](../../README.md#cicd).\n\n## Trigger Contract\n\n`val.yml.files` declares the intended remote types:\n\n```yaml\nfiles:\n index.http.ts: http\n cron.ts: interval\n email.ts: email\n```\n\nRun `vtx types` after linking. Use `vtx apply-types` only when deliberately repairing remote trigger\nmetadata.\n\n## Architecture\n\n- `index.http.ts` — HTTP composition root: per-route SSR page serving, `GET /theme` (zero-JS mode\n switch), and the API route table.\n- `backend/auth.ts` — OAuth context and role enforcement. Auth types use `Cxt` (e.g. `UserCxt`,\n `RouteCxt`) — the more common short form for \"context\" — not `Ctx`.\n- `backend/handlers.ts` — focused API handlers.\n- `backend/db.ts` — retryable migration, visits, Cron runs, and users.\n- `backend/storage.ts` — val-namespaced account Blob access.\n- `frontend/app.tsx` — React SSR composition root; dispatches one page per request via a `PAGES` map\n (no client-side router — navigation is real ``).\n- `frontend/astryx/` — pinned Astryx component barrel (`components.ts`), the RAF/CAF SSR shim\n (`ssr-shims.ts`), and the side-nav/theme-form shell (`shell.tsx`).\n- `frontend/pages/` — one file per route, composed from Astryx components. `home.tsx` and\n `page-anatomy.tsx` are the tutorial's two \"read first\" pages; the rest are live feature demos.\n- `frontend/pages/kit.tsx` — shared page pieces, including `SourceLink`/`SourceLinkList` (the \"view\n source\" links, degrade gracefully when `VAL_TOWN_USERNAME` is unset).\n- `frontend/client.ts` — non-hydrated demo API wiring only (no router, no theme JS — both are\n server-driven).\n\nThis template does not hydrate React: `client.ts` is inlined via `dangerouslySetInnerHTML` and only\ndoes `fetch` + `textContent` DOM updates by element `id`. Components that need hydration (Astryx's\n`CodeBlock` copy button, `TextInput`/`Field`) are either disabled or avoided — see\n[`_specs/astryx-template.md`](../../_specs/astryx-template.md) for the full list and reasoning.\n\n## Key Files\n\n| Path | Purpose |\n| --------------------------------- | -------------------------------------------- |\n| `index.http.ts` | HTTP, page routing, `GET /theme`, API table |\n| `backend/auth.ts` | Val Town OAuth and roles |\n| `backend/db.ts` | Val-scoped SQLite repositories |\n| `backend/storage.ts` | Account-scoped Blob adapter |\n| `frontend/app.tsx` | React SSR root, per-route page dispatch |\n| `frontend/astryx/` | Pinned Astryx imports, SSR shim, nav shell |\n| `frontend/pages/home.tsx` | Tutorial intro: what/who-for + source links |\n| `frontend/pages/page-anatomy.tsx` | Infra diagram, routing flow, core stack |\n| `frontend/pages/` | Interactive reference pages |\n| `frontend/client.ts` | Non-hydrated demo API wiring |\n| `cron.ts` | Scheduled tasks |\n| `email.ts` | Email trigger and helpers |\n| `val.yml` | Identity, triggers, and environment contract |\n| `../../_specs/astryx-template.md` | Approved Astryx migration plan |\n",[189],"da547397-0b24-4a21-b428-980fc6197902","tests","2e57dcec-a4dc-11f1-9d85-1607ee4eb77e",326,["D",1788140100236],0,"directory",[196],"85f9d626-4951-11f1-a16a-42b51c65c3df","frontend","85f9d6f8-4951-11f1-a16a-42b51c65c3df",34,["D",1778074991402],[204],"86303568-4951-11f1-a193-42b51c65c3df","backend","8630361c-4951-11f1-a193-42b51c65c3df",35,["D",1778074991756],[210],"pulls","branches","forks","envVars",{"_222":65,"_224":200},"connections",{"_222":200,"_223":200},"count","unfilledCount","emptyCount",{"_44":209,"_32":210,"_30":211,"_145":-5,"_42":43,"_41":212,"_147":61,"_39":493,"_13":200,"_34":201,"_36":-5,"_24":25,"_151":-5,"_261":494,"_27":495},{"_44":485,"_32":486,"_30":487,"_145":211,"_42":43,"_41":488,"_147":61,"_39":489,"_13":200,"_34":35,"_36":490,"_24":25,"_151":-5,"_261":491,"_27":492},{"_44":477,"_32":478,"_30":479,"_145":211,"_42":43,"_41":480,"_147":61,"_39":481,"_13":176,"_34":35,"_36":482,"_24":25,"_151":-5,"_261":483,"_27":484},{"_44":469,"_32":470,"_30":471,"_145":211,"_42":43,"_41":472,"_147":25,"_39":473,"_13":461,"_34":35,"_36":474,"_24":25,"_151":-5,"_261":475,"_27":476},{"_44":465,"_32":33,"_30":31,"_145":211,"_42":43,"_41":14,"_147":61,"_39":466,"_13":157,"_34":35,"_36":38,"_24":25,"_151":-5,"_261":467,"_27":468},{"_44":456,"_32":457,"_30":458,"_145":211,"_42":43,"_41":459,"_147":61,"_39":460,"_13":461,"_34":35,"_36":462,"_24":25,"_151":-5,"_261":463,"_27":464},{"_44":447,"_32":448,"_30":449,"_145":211,"_42":43,"_41":450,"_147":25,"_39":451,"_13":452,"_34":35,"_36":453,"_24":25,"_151":-5,"_261":454,"_27":455},{"_44":439,"_32":440,"_30":441,"_145":211,"_42":43,"_41":442,"_147":61,"_39":443,"_13":167,"_34":35,"_36":444,"_24":25,"_151":-5,"_261":445,"_27":446},{"_44":203,"_32":204,"_30":205,"_145":-5,"_42":43,"_41":206,"_147":61,"_39":436,"_13":200,"_34":201,"_36":-5,"_24":25,"_151":-5,"_261":437,"_27":438},{"_44":431,"_32":414,"_30":408,"_145":205,"_42":43,"_41":432,"_147":61,"_39":433,"_13":200,"_34":201,"_36":-5,"_24":25,"_151":-5,"_261":434,"_27":435},{"_44":423,"_32":424,"_30":425,"_145":408,"_42":43,"_41":426,"_147":25,"_39":427,"_13":388,"_34":35,"_36":428,"_24":25,"_151":-5,"_261":429,"_27":430},{"_44":415,"_32":416,"_30":417,"_145":408,"_42":43,"_41":418,"_147":25,"_39":419,"_13":388,"_34":35,"_36":420,"_24":25,"_151":-5,"_261":421,"_27":422},{"_44":405,"_32":406,"_30":407,"_145":408,"_42":43,"_41":409,"_147":61,"_39":410,"_13":200,"_34":35,"_36":411,"_24":25,"_151":-5,"_261":412,"_27":413},{"_44":400,"_32":332,"_30":326,"_145":205,"_42":43,"_41":401,"_147":61,"_39":402,"_13":200,"_34":201,"_36":-5,"_24":25,"_151":-5,"_261":403,"_27":404},{"_44":392,"_32":393,"_30":394,"_145":326,"_42":43,"_41":395,"_147":25,"_39":396,"_13":167,"_34":35,"_36":397,"_24":25,"_151":-5,"_261":398,"_27":399},{"_44":383,"_32":384,"_30":385,"_145":326,"_42":43,"_41":386,"_147":25,"_39":387,"_13":388,"_34":35,"_36":389,"_24":25,"_151":-5,"_261":390,"_27":391},{"_44":375,"_32":376,"_30":377,"_145":326,"_42":43,"_41":378,"_147":25,"_39":379,"_13":176,"_34":35,"_36":380,"_24":25,"_151":-5,"_261":381,"_27":382},{"_44":366,"_32":367,"_30":368,"_145":326,"_42":43,"_41":369,"_147":25,"_39":370,"_13":371,"_34":35,"_36":372,"_24":25,"_151":-5,"_261":373,"_27":374},{"_44":358,"_32":359,"_30":360,"_145":326,"_42":43,"_41":361,"_147":25,"_39":362,"_13":184,"_34":35,"_36":363,"_24":25,"_151":-5,"_261":364,"_27":365},{"_44":350,"_32":351,"_30":352,"_145":326,"_42":43,"_41":353,"_147":25,"_39":354,"_13":167,"_34":35,"_36":355,"_24":25,"_151":-5,"_261":356,"_27":357},{"_44":342,"_32":343,"_30":344,"_145":326,"_42":43,"_41":345,"_147":25,"_39":346,"_13":338,"_34":35,"_36":347,"_24":25,"_151":-5,"_261":348,"_27":349},{"_44":333,"_32":334,"_30":335,"_145":326,"_42":43,"_41":336,"_147":25,"_39":337,"_13":338,"_34":35,"_36":339,"_24":25,"_151":-5,"_261":340,"_27":341},{"_44":323,"_32":324,"_30":325,"_145":326,"_42":43,"_41":327,"_147":25,"_39":328,"_13":167,"_34":35,"_36":329,"_24":25,"_151":-5,"_261":330,"_27":331},{"_44":314,"_32":315,"_30":316,"_145":205,"_42":43,"_41":317,"_147":25,"_39":318,"_13":319,"_34":35,"_36":320,"_24":25,"_151":-5,"_261":321,"_27":322},{"_44":306,"_32":307,"_30":308,"_145":205,"_42":43,"_41":309,"_147":25,"_39":310,"_13":167,"_34":35,"_36":311,"_24":25,"_151":-5,"_261":312,"_27":313},{"_44":298,"_32":299,"_30":300,"_145":205,"_42":43,"_41":301,"_147":61,"_39":302,"_13":65,"_34":35,"_36":303,"_24":25,"_151":-5,"_261":304,"_27":305},{"_44":195,"_32":196,"_30":197,"_145":-5,"_42":43,"_41":198,"_147":61,"_39":295,"_13":200,"_34":201,"_36":-5,"_24":25,"_151":-5,"_261":296,"_27":297},{"_44":287,"_32":288,"_30":289,"_145":197,"_42":43,"_41":290,"_147":61,"_39":291,"_13":200,"_34":35,"_36":292,"_24":25,"_151":-5,"_261":293,"_27":294},{"_44":279,"_32":280,"_30":281,"_145":197,"_42":43,"_41":282,"_147":61,"_39":283,"_13":200,"_34":35,"_36":284,"_24":25,"_151":-5,"_261":285,"_27":286},{"_44":188,"_32":189,"_30":190,"_145":-5,"_42":43,"_41":191,"_147":25,"_39":276,"_13":167,"_34":20,"_36":193,"_24":25,"_151":-5,"_261":277,"_27":278},{"_44":179,"_32":180,"_30":181,"_145":-5,"_42":43,"_41":182,"_147":25,"_39":273,"_13":184,"_34":185,"_36":186,"_24":25,"_151":-5,"_261":274,"_27":275},{"_44":171,"_32":172,"_30":173,"_145":-5,"_42":43,"_41":174,"_147":61,"_39":270,"_13":176,"_34":20,"_36":177,"_24":25,"_151":-5,"_261":271,"_27":272},{"_44":162,"_32":163,"_30":164,"_145":-5,"_42":43,"_41":165,"_147":61,"_39":267,"_13":167,"_34":168,"_36":169,"_24":25,"_151":-5,"_261":268,"_27":269},{"_44":153,"_32":154,"_30":59,"_145":-5,"_42":43,"_41":155,"_147":25,"_39":264,"_13":157,"_34":158,"_36":159,"_24":25,"_151":160,"_261":265,"_27":266},{"_44":142,"_32":143,"_30":144,"_145":-5,"_42":43,"_41":146,"_147":61,"_39":260,"_13":149,"_34":20,"_36":150,"_24":25,"_151":-5,"_261":262,"_27":263},["D",1788140101761],"children",[],[143],["D",1788122839148],[],[154],["D",1788140102069],[],[163],["D",1778700935796],[],[172],["D",1778700936143],[],[180],["D",1788122839143],[],[189],"1df9127a-96ba-4073-9ed7-962976ae2c22","shared_test.ts","2e7f5452-a4dc-11f1-9001-1607ee4eb77e",328,["D",1788140100486],"import { assertEquals } from \"jsr:@std/assert@1\";\nimport { emailSlug, maskEmail } from \"../backend/shared.ts\";\n\ninterface TestCase {\n name: string;\n input: Input;\n expected: Expected;\n}\n\nconst SLUG_CASES: TestCase[] = [\n { name: \"spaces to hyphens\", input: \"Val Town Quickstart\", expected: \"val-town-quickstart\" },\n { name: \"already lowercase\", input: \"sample-val\", expected: \"sample-val\" },\n { name: \"punctuation collapses\", input: \"My App!! v2\", expected: \"my-app-v2\" },\n { name: \"leading/trailing junk trimmed\", input: \"--Hello--\", expected: \"hello\" },\n];\n\nconst MASK_CASES: TestCase[] = [\n { name: \"typical address\", input: \"johndoe@example.com\", expected: \"jo*****@example.com\" },\n { name: \"short local part\", input: \"ab@example.com\", expected: \"ab***@example.com\" },\n { name: \"no @ sign\", input: \"not-an-email\", expected: \"***\" },\n];\n\nfor (const c of SLUG_CASES) {\n Deno.test(`emailSlug: ${c.name}`, () => assertEquals(emailSlug(c.input), c.expected));\n}\n\nfor (const c of MASK_CASES) {\n Deno.test(`maskEmail: ${c.name}`, () => assertEquals(maskEmail(c.input), c.expected));\n}\n",[],[196,280],"3e4aea82-ed7f-417d-93db-5edd9aac9090","ai_test.ts","2e924436-a4dc-11f1-8d39-1607ee4eb77e",329,["D",1788140100442],"import { assertEquals } from \"jsr:@std/assert@1\";\nimport { type EmailTriage, parseTriage } from \"../backend/ai.ts\";\n\ninterface TestCase {\n name: string;\n input: string;\n expected: EmailTriage;\n}\n\nconst CASES: TestCase[] = [\n {\n name: \"spam clears the summary\",\n input: JSON.stringify({ isSpam: true, summary: \"should be dropped\" }),\n expected: { isSpam: true, summary: null },\n },\n {\n name: \"genuine message keeps its summary\",\n input: JSON.stringify({ isSpam: false, summary: \"Asking to reschedule Tuesday's call.\" }),\n expected: { isSpam: false, summary: \"Asking to reschedule Tuesday's call.\" },\n },\n {\n name: \"long summary is truncated to 200 chars\",\n input: JSON.stringify({ isSpam: false, summary: \"x\".repeat(500) }),\n expected: { isSpam: false, summary: \"x\".repeat(200) },\n },\n {\n name: \"malformed JSON fails safe to not-spam, no summary\",\n input: \"not json at all\",\n expected: { isSpam: false, summary: null },\n },\n {\n name: \"missing fields default sanely\",\n input: \"{}\",\n expected: { isSpam: false, summary: null },\n },\n];\n\nfor (const c of CASES) {\n Deno.test(`parseTriage: ${c.name}`, () => assertEquals(parseTriage(c.input), c.expected));\n}\n",[],[196,288],["D",1788140100236],[252,253],[196],"c38b96ba-98e2-415e-b24e-45256ebcc7a3","types.ts","dda64cce-a4a5-11f1-99b0-1607ee4eb77e",297,["D",1788122838479],"// types.ts — Shared UI data contracts for the SSR app.\n\nexport interface UserInfo {\n username: string;\n avatarUrl?: string;\n isAdmin: boolean;\n isSuperAdmin: boolean;\n}\n\n/** One color mode axis Astryx understands: light, dark, or follow the OS. */\nexport type ThemeMode = \"light\" | \"dark\" | \"system\";\n\nexport interface AppProps {\n appName: string;\n renderedAt: string;\n mode: ThemeMode;\n page: string;\n user: UserInfo | null;\n /** Owner's Val Town username, or \"\" if VAL_TOWN_USERNAME isn't set — powers\n * \"view source\" links (see frontend/pages/kit.tsx's SourceLink). */\n valTownUsername: string;\n}\n\nexport interface CodeSnippet {\n filename: string;\n code: string;\n}\n",[],[204,299],"aa357d5e-3824-4142-9cde-64f85a1bc8c1","client.ts","48ed4cf0-4b21-11f1-b54f-ee650bb23af1",334,["D",1788140100750],"// client.ts — Small per-page demo wiring. No router, no theme JS: navigation\n// is real page loads and the theme switch is a plain HTML form\n// (see astryx/shell.tsx) — both work with JavaScript disabled.\n//\n// Note: clientJs is a raw JS string injected into

Diff · v341