[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_422":423,"_424":425},"routes/_app.x.$handle.$name",{"_101":100,"_32":45,"_110":91,"_27":111,"_13":14,"_112":-5,"_11":113,"_114":115,"_116":117,"_118":119,"_120":121,"_20":-5,"_122":-5,"_123":-5,"_124":25,"_125":126,"_127":60,"_128":-5,"_129":-5,"_130":131},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",95,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","email.ts","latestPath","fileId","aa7742d6-48c5-11f1-831b-42b51c65c3df","name","fileType","email","content","// email.ts — Inbound handler + outbound helpers. UI: + → EMAIL → address: .@valtown.email\n\nimport { email as sendEmail } from \"https://esm.town/v/std/email\";\nimport { APP_NAME, type Email } from \"./backend/shared.ts\";\n\n// ── Inbound ───────────────────────────────────────────────────────────────────\n\nexport default async function emailHandler(inbound: Email): Promise {\n console.log(`📧 [${APP_NAME}] From: ${inbound.from} Subject: ${inbound.subject ?? \"(none)\"}`);\n console.log(` Body: ${inbound.text?.slice(0, 200) ?? \"(empty)\"}...`);\n\n for (const file of inbound.attachments) {\n console.log(` 📎 ${file.name} (${file.type}, ${file.size}b)`);\n // await blob.set(`emails/${file.name}`, await file.arrayBuffer());\n }\n\n // await sendNotification(`Re: ${inbound.subject}`, \"Got your message!\");\n}\n\n// ── Outbound ──────────────────────────────────────────────────────────────────\n// Free plan: sends to yourself only. Pro: send to anyone + cc/bcc.\n\nexport async function sendNotification(\n subject: string,\n body: string,\n options?: { to?: string; html?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n ...(options?.to && { to: options.to }),\n ...(options?.html && { html: options.html }),\n });\n console.log(`📤 [${APP_NAME}] Sent: \"${subject}\"`);\n}\n\n/** `attachment.content` must be base64-encoded (use `btoa()`). */\nexport async function sendWithAttachment(\n subject: string,\n body: string,\n attachment: { content: string; filename: string; type?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n attachments: [{\n content: attachment.content,\n filename: attachment.filename,\n type: attachment.type ?? \"application/octet-stream\",\n disposition: \"attachment\",\n }],\n });\n console.log(`📤 [${APP_NAME}] Sent with attachment: \"${attachment.filename}\"`);\n}\n","// email.ts — Inbound handler + outbound helpers. UI: + → EMAIL → address: .@valtown.email\n\nimport { email as sendEmail } from \"https://esm.town/v/std/email\";\nimport { APP_NAME, type Email } from \"./backend/shared.ts\";\nimport { type JsonObject, stringField } from \"./backend/api-utils.ts\";\n\nexport interface TestEmailResult {\n subject: string;\n text: string;\n toSelf: boolean;\n sentAt: string;\n}\n\nexport interface InboundEmailTestResult {\n from: string;\n subject: string;\n text: string;\n simulatedAt: string;\n}\n\n// -----------------------------------------------------------------------------\n// inbound\n// -----------------------------------------------------------------------------\n\nexport default async function emailHandler(inbound: Email): Promise {\n console.log(\n `📧 [${APP_NAME}] From: ${inbound.from} Subject: ${\n inbound.subject ?? \"(none)\"\n }`,\n );\n console.log(` Body: ${inbound.text?.slice(0, 200) ?? \"(empty)\"}...`);\n\n for (const file of inbound.attachments) {\n console.log(` 📎 ${file.name} (${file.type}, ${file.size}b)`);\n // await blob.set(`emails/${file.name}`, await file.arrayBuffer());\n }\n\n // await sendNotification(`Re: ${inbound.subject}`, \"Got your message!\");\n}\n\n// -----------------------------------------------------------------------------\n// outbound\n// -----------------------------------------------------------------------------\n// Free plan: sends to yourself only. Pro: send to anyone + cc/bcc.\n\nexport async function sendNotification(\n subject: string,\n body: string,\n options?: { to?: string; html?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n ...(options?.to && { to: options.to }),\n ...(options?.html && { html: options.html }),\n });\n console.log(`📤 [${APP_NAME}] Sent: \"${subject}\"`);\n}\n\n/** `attachment.content` must be base64-encoded (use `btoa()`). */\nexport async function sendWithAttachment(\n subject: string,\n body: string,\n attachment: { content: string; filename: string; type?: string },\n): Promise {\n await sendEmail({\n subject,\n text: body,\n attachments: [{\n content: attachment.content,\n filename: attachment.filename,\n type: attachment.type ?? \"application/octet-stream\",\n disposition: \"attachment\",\n }],\n });\n console.log(\n `📤 [${APP_NAME}] Sent with attachment: \"${attachment.filename}\"`,\n );\n}\n\n// -----------------------------------------------------------------------------\n// test helpers\n// -----------------------------------------------------------------------------\n\nexport async function sendTestNotification(\n input: JsonObject,\n): Promise {\n const subject = stringField(input, \"subject\", `Test email from ${APP_NAME}`);\n const text = stringField(\n input,\n \"text\",\n \"This is a Val Town email smoke test.\",\n );\n const to = stringField(input, \"to\");\n const html = stringField(input, \"html\");\n\n await sendNotification(subject, text, {\n ...(to && { to }),\n ...(html && { html }),\n });\n return { subject, text, toSelf: !to, sentAt: new Date().toISOString() };\n}\n\nexport async function simulateInboundEmail(\n input: JsonObject,\n): Promise {\n const inbound = makeInboundEmail(input);\n await emailHandler(inbound);\n return {\n from: inbound.from,\n subject: inbound.subject ?? \"\",\n text: inbound.text ?? \"\",\n simulatedAt: new Date().toISOString(),\n };\n}\n\nfunction makeInboundEmail(input: JsonObject): Email {\n return {\n from: stringField(input, \"from\", \"tester@example.com\"),\n to: [stringField(input, \"to\", \"template@valtown.email\")],\n subject: stringField(input, \"subject\", `Inbound test for ${APP_NAME}`),\n text: stringField(\n input,\n \"text\",\n \"This simulates an inbound Val Town email.\",\n ),\n html: stringField(input, \"html\"),\n attachments: [],\n headers: { \"x-template-test\": \"true\" },\n };\n}\n","createdAt",["D",1778274175988],"branchVersion","branchId","5a0a7ac8-4895-11f1-80ec-42b51c65c3df","id","5a09ae54-4895-11f1-80ec-42b51c65c3df","Quickstart-Full-Stack",["D",1777994172310],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","An elegant template for an elegant single-person full stack app.","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/3ed9401e-3850-4a69-dec2-1bdd924c0900/square512?exp=1789563599&sig=949e18d6e3d53df0e871cc55a26ace59925880a3a49ee0345a74cff23d1eeed5","173e7424-8658-428f-a3bc-ae4faeaabd1c","pinnedFileId","e1c705aa-4b18-11f1-b4ae-ee650bb23af1","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",1,"orgId","019df771-9af8-7238-99a4-541e39355038","tursoName","5a09ae54489511f180ec42b51c65c3df","tursoHostname","5a09ae54489511f180ec42b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789511441255],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_101":100,"_109":105},"org",{"_101":100,"_102":103,"_104":105,"_18":56,"_106":107,"_108":25},"branch",{"_13":90,"_32":91,"_43":42,"_92":44,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":45,"_99":100},"isOwned",384,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","pikachu","handle","displayName","Minion","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/22c8ba37-42c8-4af4-8daf-8cdd2f5f1800/square512?exp=1789563599&sig=cb5d66f6293d68d61d827500a55a452bd7d976b3783ca53dd0fb8b9c04afdb42","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":417,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":55,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":418,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":419,"_85":420,"_87":421,"_89":25},"tree",[236,242,253,254,255,256,257,258,259,260,261],"files",[236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,258,259,260,261],"counts",{"_226":159,"_227":64,"_228":64,"_229":230,"_231":232},"contents",[132,133,134,135,136,137,138,139,140,141,142],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":220,"_32":221,"_30":222,"_146":-5,"_41":42,"_40":223,"_148":60,"_38":224,"_13":159,"_33":218,"_35":-5,"_24":25,"_152":-5,"_27":225},{"_43":213,"_32":214,"_30":215,"_146":-5,"_41":42,"_40":216,"_148":60,"_38":217,"_13":159,"_33":218,"_35":-5,"_24":25,"_152":-5,"_27":219},{"_43":205,"_32":206,"_30":207,"_146":-5,"_41":42,"_40":208,"_148":25,"_38":209,"_13":210,"_33":20,"_35":211,"_24":25,"_152":-5,"_27":212},{"_43":197,"_32":198,"_30":199,"_146":-5,"_41":42,"_40":200,"_148":25,"_38":201,"_13":183,"_33":202,"_35":203,"_24":25,"_152":-5,"_27":204},{"_43":190,"_32":191,"_30":192,"_146":-5,"_41":42,"_40":193,"_148":25,"_38":194,"_13":150,"_33":20,"_35":195,"_24":25,"_152":-5,"_27":196},{"_43":187,"_32":28,"_30":31,"_146":-5,"_41":42,"_40":14,"_148":25,"_38":188,"_13":175,"_33":34,"_35":37,"_24":25,"_152":-5,"_27":189},{"_43":179,"_32":180,"_30":58,"_146":-5,"_41":42,"_40":181,"_148":25,"_38":182,"_13":183,"_33":160,"_35":184,"_24":25,"_152":185,"_27":186},{"_43":170,"_32":171,"_30":172,"_146":-5,"_41":42,"_40":173,"_148":25,"_38":174,"_13":175,"_33":176,"_35":177,"_24":25,"_152":-5,"_27":178},{"_43":163,"_32":164,"_30":165,"_146":-5,"_41":42,"_40":166,"_148":25,"_38":167,"_13":159,"_33":160,"_35":168,"_24":25,"_152":-5,"_27":169},{"_43":154,"_32":155,"_30":156,"_146":-5,"_41":42,"_40":157,"_148":25,"_38":158,"_13":159,"_33":160,"_35":161,"_24":25,"_152":-5,"_27":162},{"_43":143,"_32":144,"_30":145,"_146":-5,"_41":42,"_40":147,"_148":25,"_38":149,"_13":150,"_33":20,"_35":151,"_24":25,"_152":-5,"_27":153},"492a34d0-4b21-11f1-b54f-ee650bb23af1","val.yml","aa729402-48c5-11f1-87ca-42b51c65c3df","parentId",94,"latest",["D",1778274175831],2,"name: \"sample-val\"\npublic: true\nfiles:\n index.http.ts: http\n cron.ts: interval\n email.ts: email\n # Optional examples — uncomment after pushing them if they become canonical.\n # test.http.ts: http\n # preact.http.tsx: http\n","label",[144],"4923e8be-4b21-11f1-861e-ee650bb23af1","test.http.ts","4923e99a-4b21-11f1-861e-ee650bb23af1",93,["D",1778274175790],0,"http","// test.http.ts — Minimal HTTP trigger used to verify vt's new-file type inference.\n\nexport default function handler(req: Request): Response {\n const url = new URL(req.url);\n return Response.json({\n ok: true,\n trigger: \"http\",\n file: \"test.http.ts\",\n path: url.pathname,\n method: req.method,\n timestamp: new Date().toISOString(),\n });\n}\n",[155],"48f6f2a0-4b21-11f1-81f8-ee650bb23af1","preact.http.tsx","48f6f37c-4b21-11f1-81f8-ee650bb23af1",89,["D",1778274175528],"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// preact.http.tsx — Preact SSR example for Val Town HTTP triggers.\n\nimport { render } from \"https://esm.sh/preact-render-to-string@6.6.7?deps=preact@10.29.1\";\n\ninterface AppProps {\n path: string;\n timestamp: string;\n}\n\nfunction App({ path, timestamp }: AppProps) {\n return (\n \n \n \n \n Preact on Val Town\n \n \n \n

⚡ Preact HTTP Trigger

This page was rendered server-side by Preact on Val Town.

\n Path: {path}\n
\n Rendered: {timestamp}\n

\n \n \n );\n}\n\nexport default function handler(req: Request): Response {\n const url = new URL(req.url);\n const html = \"\" + render(\n ,\n );\n\n return new Response(html, {\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n}\n",[164],"94169bf4-4b18-11f1-976a-ee650bb23af1","index.ts","5ae332be-4895-11f1-a469-42b51c65c3df",76,["D",1778270436076],7,"script","// index.http.ts — HTTP handler. Serves frontend/ and JSON API.\n// Docs: https://docs.val.town/vals/http\n\nimport { serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { getRecentVisits, getVisitCount, recordVisit } from \"./backend/db.ts\";\nimport { APP_NAME } from \"./backend/shared.ts\";\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const { pathname } = url;\n\n // ── 1. Static Asset Routing (Frontend) ──────────────────────────────────\n if (pathname.startsWith(\"/frontend/\")) {\n return await serveFile(pathname, import.meta.url);\n }\n\n // ── 2. Landing Page (Serves HTML & records visit) ───────────────────────\n if (pathname === \"/\" || pathname === \"\") {\n try {\n await recordVisit(\"/\");\n } catch {\n // SQLite might not be available locally\n }\n return await serveFile(\"/frontend/index.html\", import.meta.url);\n }\n\n // ── 3. API Routes (Backend) ─────────────────────────────────────────────\n\n if (pathname === \"/api/health\") {\n return Response.json({\n ok: true,\n name: APP_NAME,\n timestamp: new Date().toISOString(),\n runtime: `Deno ${Deno.version?.deno || \"unknown\"}`,\n });\n }\n\n if (pathname === \"/api/visits\") {\n try {\n const visits = await getRecentVisits(20);\n const total = await getVisitCount();\n return Response.json({ total, visits });\n } catch {\n return Response.json({\n error: \"SQLite not available (running off-platform?)\",\n }, { status: 503 });\n }\n }\n\n if (pathname === \"/api/echo\" && req.method === \"POST\") {\n try {\n const body = await req.json();\n return Response.json({\n echo: body,\n receivedAt: new Date().toISOString(),\n });\n } catch {\n return Response.json({ error: \"Invalid JSON body\" }, { status: 400 });\n }\n }\n\n // ── 4. Fallback ─────────────────────────────────────────────────────────\n return Response.json(\n { error: \"Not found\", path: pathname },\n { status: 404 },\n );\n}\n",[171],"eff9b938-4b18-11f1-b94f-ee650bb23af1","index.http.ts",81,["D",1778270590244],4,"// index.http.ts — HTTP handler. Serves frontend/ and JSON API.\n// Docs: https://docs.val.town/vals/http\n\nimport { serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { getRecentVisits, getVisitCount, recordVisit } from \"./backend/db.ts\";\nimport { APP_NAME } from \"./backend/shared.ts\";\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const { pathname } = url;\n\n // ── 1. Static Asset Routing (Frontend) ──────────────────────────────────\n if (pathname.startsWith(\"/frontend/\")) {\n return await serveFile(pathname, import.meta.url);\n }\n\n // ── 2. Landing Page (Serves HTML & records visit) ───────────────────────\n if (pathname === \"/\" || pathname === \"\") {\n try {\n await recordVisit(\"/\");\n } catch {\n // SQLite might not be available locally\n }\n return await serveFile(\"/frontend/index.html\", import.meta.url);\n }\n\n // ── 3. API Routes (Backend) ─────────────────────────────────────────────\n\n if (pathname === \"/api/health\") {\n return Response.json({\n ok: true,\n name: APP_NAME,\n timestamp: new Date().toISOString(),\n runtime: `Deno ${Deno.version?.deno || \"unknown\"}`,\n });\n }\n\n if (pathname === \"/api/visits\") {\n try {\n const visits = await getRecentVisits(20);\n const total = await getVisitCount();\n return Response.json({ total, visits });\n } catch {\n return Response.json({\n error: \"SQLite not available (running off-platform?)\",\n }, { status: 503 });\n }\n }\n\n if (pathname === \"/api/echo\" && req.method === \"POST\") {\n try {\n const body = await req.json();\n return Response.json({\n echo: body,\n receivedAt: new Date().toISOString(),\n });\n } catch {\n return Response.json({ error: \"Invalid JSON body\" }, { status: 400 });\n }\n }\n\n // ── 4. Fallback ─────────────────────────────────────────────────────────\n return Response.json(\n { error: \"Not found\", path: pathname },\n { status: 404 },\n );\n}","d-template",[180],"49400ea4-4b21-11f1-874d-ee650bb23af1",["D",1778274175988],[28],"a8e0a8b4-4b17-11f1-9fc9-ee650bb23af1","deno.json","86adc21c-4951-11f1-b797-42b51c65c3df",55,["D",1778270041449],"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\",\n \"no-external-import\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"unstable\": [\"temporal\", \"worker-options\", \"sloppy-imports\", \"node-globals\"]\n}\n",[191],"a92b239e-4b17-11f1-a377-ee650bb23af1","cron.ts","aa651980-48c5-11f1-bfb8-42b51c65c3df",60,["D",1778270041959],"interval","// cron.ts — Two tasks (pulse + maintenance), one trigger. UI: + → CRON → \"every 5 minutes\"\n// Env: CRON_PULSE_INTERVAL (\"5m\"/\"1h\"/\"DISABLED\"), CRON_MAINTENANCE_INTERVAL (\"1h\"/\"1d\"/\"DISABLED\")\n\nimport { APP_NAME, env, parseDuration } from \"./backend/shared.ts\";\nimport { getMetaValue, pruneOldVisits, setMetaValue } from \"./backend/db.ts\";\n\n// ── Gate: true if intervalMs has elapsed since last run; records now in SQLite ──\n\nasync function shouldRun(\n metaKey: string,\n intervalMs: number,\n now: Date,\n): Promise {\n const lastStr = await getMetaValue(metaKey).catch(() => null);\n if (lastStr) {\n const elapsed = now.getTime() - new Date(lastStr).getTime();\n if (elapsed < intervalMs) return false;\n }\n await setMetaValue(metaKey, now.toISOString());\n return true;\n}\n\n// ── Entry point ───────────────────────────────────────────────────────────────\n\nexport default async function (\n _interval: { lastRunAt: Date | undefined },\n): Promise {\n const now = new Date();\n await pulse(now);\n await maintenance(now);\n}\n\n// ── Pulse — polling, health-checks, work-queues ───────────────────────────────\n\nasync function pulse(now: Date): Promise {\n const raw = env(\"CRON_PULSE_INTERVAL\", \"5m\");\n if (raw.toUpperCase() === \"DISABLED\") return;\n const intervalMs = parseDuration(raw) ?? parseDuration(\"5m\")!;\n if (!await shouldRun(\"cron_pulse_last_run\", intervalMs, now)) return;\n\n console.log(`⚡ [${APP_NAME}] Pulse (${raw})`);\n // TODO: add your polling/health-check logic here\n // const res = await fetch(\"https://api.example.com/feed\");\n}\n\n// ── Maintenance — prune, archive, digest ─────────────────────────────────────\n\nasync function maintenance(now: Date): Promise {\n const raw = env(\"CRON_MAINTENANCE_INTERVAL\", \"1d\");\n if (raw.toUpperCase() === \"DISABLED\") return;\n const intervalMs = parseDuration(raw) ?? parseDuration(\"1d\")!;\n if (!await shouldRun(\"cron_maintenance_last_run\", intervalMs, now)) return;\n\n console.log(`🔧 [${APP_NAME}] Maintenance (${raw})`);\n await pruneOldVisits(30);\n console.log(`✅ [${APP_NAME}] Maintenance done`);\n}\n",[198],"a948f0ea-4b17-11f1-b038-ee650bb23af1","README.md","aabf7b64-48c5-11f1-9920-42b51c65c3df",61,["D",1778270041957],3,"# Val Town Template\n\nStarter val with HTTP, Cron, Email, SQLite, and Blob. Fork it, delete what you\ndon't need.\n\n---\n\n## High-Level Architecture\n\n```mermaid\ngraph TB\n subgraph VAL[\"val: sample-val\"]\n direction TB\n SHARED[\"backend/shared.ts
constants · env() · parseDuration()\"]\n\n subgraph TRIGGERS[\"Triggers\"]\n HTTP[\"index.http.ts
🟦 HTTP\"]\n CRON[\"cron.ts
🟪 Cron\"]\n EMAIL[\"email.ts
🟧 Email\"]\n end\n\n subgraph STORAGE[\"Storage\"]\n DB[\"backend/db.ts
SQLite\"]\n BLOB[\"backend/storage.ts
Blob (R2)\"]\n end\n\n subgraph FRONTEND[\"Frontend\"]\n HTML[\"frontend/index.html\"]\n JS[\"frontend/main.js\"]\n end\n end\n\n SHARED --> HTTP\n SHARED --> CRON\n SHARED --> EMAIL\n\n HTTP -->|\"serveFile()\"| HTML\n HTTP -->|\"serveFile()\"| JS\n HTTP -->|\"recordVisit()\"| DB\n HTTP -->|\"queries\"| DB\n\n CRON -->|\"prune / meta\"| DB\n CRON -->|\"read/write\"| BLOB\n\n EMAIL -->|\"save attachments\"| BLOB\n\n USER[\"🌐 User / Browser\"] -->|\"GET /\"| HTTP\n USER -->|\"GET /api/*\"| HTTP\n SCHEDULER[\"⏰ Scheduler\"] -->|\"every 5m\"| CRON\n SENDER[\"📧 Email Sender\"] -->|\"inbound\"| EMAIL\n```\n\n---\n\n## Quick Start\n\n**1. Create a new val from this template**\n\n```bash\ncd /path/to/uApps\nvt new my-app\ncd vals/my-app\n```\n\n**2. Push it to Val Town**\n\n```bash\nvt push\n# or: vt watch (auto-push on save)\n```\n\n> **Important:** `vt push` auto-detects triggers from filenames (e.g.,\n> `index.http.ts` → HTTP, `cron.ts` → Cron, `email.ts` → Email). If triggers\n> don't appear on the Val Town platform after pushing, manually add them via the\n> `+` button in the val editor. Then point each trigger at its file.\n\n**3. Open it in your browser**\n\n```bash\nvt url # prints your live URL\n```\n\nVisit the URL → you should see the starter page with a visit counter.\n\n**4. Try the API**\n\n```\nGET /api/health → JSON health check\nGET /api/visits → visit history from SQLite\nPOST /api/echo → echoes your JSON body back\n```\n\n---\n\n## HTTP Trigger (`index.http.ts`)\n\n```mermaid\nsequenceDiagram\n actor User\n participant HTTP as index.http.ts\n participant Frontend as frontend/\n participant DB as backend/db.ts\n\n User->>HTTP: GET /\n HTTP->>DB: recordVisit(\"/\")\n HTTP->>Frontend: serveFile(\"/frontend/index.html\")\n Frontend-->>User: HTML + visit counter\n\n User->>HTTP: GET /api/visits\n HTTP->>DB: getRecentVisits(20)\n HTTP->>DB: getVisitCount()\n DB-->>HTTP: rows\n HTTP-->>User: { total, visits }\n\n User->>HTTP: POST /api/echo\n HTTP-->>User: { echo: body, receivedAt }\n```\n\nRoute dispatch via `if/else` path matching — no framework needed:\n\n| Route | Method | What it does |\n|-------|--------|-------------|\n| `/` | GET | Serves `frontend/index.html`, records visit |\n| `/frontend/*` | GET | Serves static files from `frontend/` |\n| `/api/health` | GET | JSON health check |\n| `/api/visits` | GET | Recent visits + total count from SQLite |\n| `/api/echo` | POST | Echoes request body back |\n| `*` | any | 404 JSON |\n\n---\n\n## Cron Trigger (`cron.ts`)\n\n```mermaid\nflowchart LR\n subgraph CRON[\"cron.ts — runs every 5 min\"]\n direction TB\n ENTRY[\"export default()\"] --> PULSE[\"pulse()\"]\n ENTRY --> MAINT[\"maintenance()\"]\n\n PULSE -->|\"shouldRun()\"| P_GATE{\"Interval elapsed?\"}\n P_GATE -->|\"yes\"| P_WORK[\"⚡ Pulse task
(polling / health-checks)\"]\n P_GATE -->|\"no\"| P_SKIP[\"skip\"]\n\n MAINT -->|\"shouldRun()\"| M_GATE{\"Interval elapsed?\"}\n M_GATE -->|\"yes\"| M_WORK[\"🔧 Maintenance
(prune old visits)\"]\n M_GATE -->|\"no\"| M_SKIP[\"skip\"]\n end\n\n P_WORK --> DB[(SQLite)]\n M_WORK --> DB\n```\n\nTwo independent tasks, one trigger. Each gates itself via `shouldRun()` which\nstores last-run timestamps in SQLite.\n\n| Task | Default interval | Env var to control |\n|------|-----------------|--------------------|\n| Pulse | Every 5 min | `CRON_PULSE_INTERVAL` (`\"5m\"`, `\"1h\"`, `\"DISABLED\"`) |\n| Maintenance | Every 1 day | `CRON_MAINTENANCE_INTERVAL` (`\"1d\"`, `\"6h\"`, `\"DISABLED\"`) |\n\n---\n\n## Email Trigger (`email.ts`)\n\n```mermaid\nflowchart TB\n INBOUND[\"📧 Inbound email
.@valtown.email\"] --> HANDLER[\"emailHandler()\"]\n HANDLER --> LOG[\"log subject + body\"]\n HANDLER --> ATTACH[\"process attachments\"]\n\n subgraph OUTBOUND[\"Outbound helpers\"]\n NOTIFY[\"sendNotification()\"]\n ATTACH_SEND[\"sendWithAttachment()\"]\n end\n\n HANDLER -.->|\"optional: reply\"| NOTIFY\n ATTACH --> BLOB[(\"Blob Store\")]\n```\n\nTwo parts in one file:\n\n**Inbound** — `export default async function emailHandler(inbound)` handles\nincoming mail. Logs subject/body, saves attachments to Blob.\n\n**Outbound** — exported helper functions for sending email programmatically:\n- `sendNotification(subject, body, opts?)` — plain text email\n- `sendWithAttachment(subject, body, attachment)` — with base64 attachment\n\n> **Free plan:** outbound sends to yourself only. **Pro:** send to anyone.\n\n---\n\n## SQLite (`backend/db.ts`)\n\n```mermaid\nerDiagram\n VISITS {\n int id PK\n text page\n timestamp created_at\n }\n META {\n text key PK\n text value\n }\n```\n\nTwo tables, auto-migrated on first use:\n\n| Table | Purpose |\n|-------|---------|\n| `visits` | Page visit log — each HTTP request to `/` inserts a row |\n| `meta` | Key-value store — cron uses it for `last_run` timestamps |\n\nKey functions:\n- `recordVisit(page)` — insert a visit\n- `getRecentVisits(limit)` — latest N visits\n- `getVisitCount()` — total rows in `visits`\n- `getMetaValue(key)` / `setMetaValue(key, value)` — KV read/write\n- `pruneOldVisits(days)` — delete visits older than N days\n\n**Gotcha:** SQLite is per-val. Use the `/main.ts` import path (val-scoped), not\n`/dummy.ts` (shared).\n\n---\n\n## Blob Storage (`backend/storage.ts`)\n\n```mermaid\nflowchart LR\n subgraph BLOB[\"Account-scoped Blob (Cloudflare R2)\"]\n direction TB\n SET[\"blob.set(key, value)\"]\n GET[\"blob.get(key)\"]\n LIST[\"blob.list()\"]\n DEL[\"blob.delete(key)\"]\n end\n\n APP[\"any val in account\"] --> SET\n APP --> GET\n APP --> LIST\n APP --> DEL\n```\n\nShared across **all vals** in your account. Good for cross-val state, config,\nfile uploads.\n\nKey functions:\n- `saveJSON(key, data)` / `getJSON(key)` — typed JSON storage\n- `saveText(key, text)` — plain text\n- `listBlobs()` — all keys\n- `deleteBlob(key)` — remove\n\n> **Warning:** Blob is account-scoped. Key collisions across vals are possible\n> — use namespaced keys like `emails/`, `config/`, etc.\n\n---\n\n## Shared (`backend/shared.ts`)\n\nLayer 0 — every other file depends on this. Zero dependencies itself.\n\n| Export | Purpose |\n|--------|---------|\n| `APP_NAME` | App name constant (change this to rename your app) |\n| `Email` type | Inbound email shape (`from`, `to`, `subject`, `text`, `html`, `attachments`) |\n| `env(key, fallback)` | Read env vars with a default fallback |\n| `parseDuration(raw)` | Parse `\"5m\"`, `\"1h\"`, `\"1d\"` → milliseconds |\n\n---\n\n## Layering\n\n```mermaid\ngraph BT\n subgraph \"Layer 2 — Triggers\"\n HTTP[\"index.http.ts\"]\n CRON[\"cron.ts\"]\n EMAIL[\"email.ts\"]\n end\n\n subgraph \"Layer 1 — Backend\"\n DB[\"backend/db.ts\"]\n BLOB[\"backend/storage.ts\"]\n end\n\n subgraph \"Layer 0 — Foundation\"\n SHARED[\"backend/shared.ts\"]\n end\n\n HTTP --> DB\n HTTP --> BLOB\n HTTP --> SHARED\n CRON --> DB\n CRON --> BLOB\n CRON --> SHARED\n EMAIL --> BLOB\n EMAIL --> SHARED\n DB --> SHARED\n```\n\nEvery file depends only on lower layers. You can delete any trigger or backend\nmodule without breaking the rest — except `shared.ts`, which everything depends\non.\n\n---\n\n## Customize\n\n**Rename the app** — change `APP_NAME` in `backend/shared.ts`.\n\n**Add a route** — add a new `if (pathname === \"/api/thing\")` block in\n`index.http.ts`.\n\n**Add a SQLite table** — add a `CREATE TABLE IF NOT EXISTS` call in\n`db.ts → migrate()`.\n\n**Change visibility** — edit `val.yml`:\n\n```yaml\nname: \"my-app\"\npublic: false # true | false\norg: \"uapps\" # your org, or omit for personal\n```\n\n**Sync** — `vt push` / `vt pull` / `vt status`\n\n---\n\n## Key Files\n\n| File | Purpose |\n|------|---------|\n| `index.http.ts` | HTTP handler — routes, JSON API, static frontend |\n| `cron.ts` | Two scheduled tasks (pulse + maintenance) |\n| `email.ts` | Inbound email handler + outbound send helpers |\n| `backend/db.ts` | SQLite schema, queries, migration |\n| `backend/storage.ts` | Blob storage read/write/list/delete |\n| `backend/shared.ts` | Constants, `env()`, `parseDuration()`, `Email` type |\n| `frontend/index.html` | Landing page |\n| `frontend/main.js` | Fetches visit count from `/api/visits` |\n| `val.yml` | Val name, visibility, org |\n",[206],"85f9d626-4951-11f1-a16a-42b51c65c3df","frontend","85f9d6f8-4951-11f1-a16a-42b51c65c3df",34,["D",1778074991402],"directory",[214],"86303568-4951-11f1-a193-42b51c65c3df","backend","8630361c-4951-11f1-a193-42b51c65c3df",35,["D",1778074991756],[221],"pulls","branches","forks","envVars",{"_233":64,"_235":159},"connections",{"_233":159,"_234":159},"count","unfilledCount","emptyCount",{"_43":220,"_32":221,"_30":222,"_146":-5,"_41":42,"_40":223,"_148":60,"_38":414,"_13":159,"_33":218,"_35":-5,"_24":25,"_152":-5,"_263":415,"_27":416},{"_43":406,"_32":407,"_30":408,"_146":222,"_41":42,"_40":409,"_148":25,"_38":410,"_13":159,"_33":176,"_35":411,"_24":25,"_152":-5,"_263":412,"_27":413},{"_43":397,"_32":398,"_30":399,"_146":222,"_41":42,"_40":400,"_148":25,"_38":401,"_13":402,"_33":176,"_35":403,"_24":25,"_152":-5,"_263":404,"_27":405},{"_43":389,"_32":390,"_30":391,"_146":222,"_41":42,"_40":392,"_148":25,"_38":393,"_13":159,"_33":176,"_35":394,"_24":25,"_152":-5,"_263":395,"_27":396},{"_43":381,"_32":382,"_30":383,"_146":222,"_41":42,"_40":384,"_148":25,"_38":385,"_13":183,"_33":176,"_35":386,"_24":25,"_152":-5,"_263":387,"_27":388},{"_43":372,"_32":373,"_30":374,"_146":222,"_41":42,"_40":375,"_148":25,"_38":376,"_13":377,"_33":176,"_35":378,"_24":25,"_152":-5,"_263":379,"_27":380},{"_43":213,"_32":214,"_30":215,"_146":-5,"_41":42,"_40":216,"_148":60,"_38":369,"_13":159,"_33":218,"_35":-5,"_24":25,"_152":-5,"_263":370,"_27":371},{"_43":364,"_32":331,"_30":325,"_146":215,"_41":42,"_40":365,"_148":25,"_38":366,"_13":159,"_33":218,"_35":-5,"_24":25,"_152":-5,"_263":367,"_27":368},{"_43":356,"_32":357,"_30":358,"_146":325,"_41":42,"_40":359,"_148":25,"_38":360,"_13":159,"_33":176,"_35":361,"_24":25,"_152":-5,"_263":362,"_27":363},{"_43":348,"_32":349,"_30":350,"_146":325,"_41":42,"_40":351,"_148":25,"_38":352,"_13":159,"_33":176,"_35":353,"_24":25,"_152":-5,"_263":354,"_27":355},{"_43":340,"_32":341,"_30":342,"_146":325,"_41":42,"_40":343,"_148":25,"_38":344,"_13":159,"_33":176,"_35":345,"_24":25,"_152":-5,"_263":346,"_27":347},{"_43":332,"_32":333,"_30":334,"_146":325,"_41":42,"_40":335,"_148":25,"_38":336,"_13":159,"_33":176,"_35":337,"_24":25,"_152":-5,"_263":338,"_27":339},{"_43":322,"_32":323,"_30":324,"_146":325,"_41":42,"_40":326,"_148":25,"_38":327,"_13":159,"_33":176,"_35":328,"_24":25,"_152":-5,"_263":329,"_27":330},{"_43":314,"_32":315,"_30":316,"_146":215,"_41":42,"_40":317,"_148":25,"_38":318,"_13":159,"_33":176,"_35":319,"_24":25,"_152":-5,"_263":320,"_27":321},{"_43":306,"_32":307,"_30":308,"_146":215,"_41":42,"_40":309,"_148":25,"_38":310,"_13":159,"_33":176,"_35":311,"_24":25,"_152":-5,"_263":312,"_27":313},{"_43":298,"_32":299,"_30":300,"_146":215,"_41":42,"_40":301,"_148":25,"_38":302,"_13":159,"_33":20,"_35":303,"_24":25,"_152":-5,"_263":304,"_27":305},{"_43":290,"_32":291,"_30":292,"_146":215,"_41":42,"_40":293,"_148":25,"_38":294,"_13":64,"_33":176,"_35":295,"_24":25,"_152":-5,"_263":296,"_27":297},{"_43":205,"_32":206,"_30":207,"_146":-5,"_41":42,"_40":208,"_148":25,"_38":287,"_13":210,"_33":20,"_35":211,"_24":25,"_152":-5,"_263":288,"_27":289},{"_43":197,"_32":198,"_30":199,"_146":-5,"_41":42,"_40":200,"_148":25,"_38":284,"_13":183,"_33":202,"_35":203,"_24":25,"_152":-5,"_263":285,"_27":286},{"_43":190,"_32":191,"_30":192,"_146":-5,"_41":42,"_40":193,"_148":25,"_38":281,"_13":150,"_33":20,"_35":195,"_24":25,"_152":-5,"_263":282,"_27":283},{"_43":187,"_32":28,"_30":31,"_146":-5,"_41":42,"_40":14,"_148":25,"_38":278,"_13":175,"_33":34,"_35":37,"_24":25,"_152":-5,"_263":279,"_27":280},{"_43":179,"_32":180,"_30":58,"_146":-5,"_41":42,"_40":181,"_148":25,"_38":275,"_13":183,"_33":160,"_35":184,"_24":25,"_152":185,"_263":276,"_27":277},{"_43":170,"_32":171,"_30":172,"_146":-5,"_41":42,"_40":173,"_148":25,"_38":272,"_13":175,"_33":176,"_35":177,"_24":25,"_152":-5,"_263":273,"_27":274},{"_43":163,"_32":164,"_30":165,"_146":-5,"_41":42,"_40":166,"_148":25,"_38":269,"_13":159,"_33":160,"_35":168,"_24":25,"_152":-5,"_263":270,"_27":271},{"_43":154,"_32":155,"_30":156,"_146":-5,"_41":42,"_40":157,"_148":25,"_38":266,"_13":159,"_33":160,"_35":161,"_24":25,"_152":-5,"_263":267,"_27":268},{"_43":143,"_32":144,"_30":145,"_146":-5,"_41":42,"_40":147,"_148":25,"_38":262,"_13":150,"_33":20,"_35":151,"_24":25,"_152":-5,"_263":264,"_27":265},["D",1778274175831],"children",[],[144],["D",1778274175790],[],[155],["D",1778274175528],[],[164],["D",1778270436076],[],[171],["D",1778270590244],[],[180],["D",1778274175988],[],[28],["D",1778270041449],[],[191],["D",1778270041959],[],[198],["D",1778270041957],[],[206],"a997587a-4b17-11f1-8616-ee650bb23af1","main.js","866c91f2-4951-11f1-9e49-42b51c65c3df",63,["D",1778270042020],"// Fetch visit stats from the API and update the page\nasync function fetchVisits() {\n try {\n const res = await fetch(\"/api/visits\");\n const data = await res.json();\n if (data.total !== undefined) {\n document.getElementById(\"visit-count\").textContent = data.total;\n }\n } catch (err) {\n console.error(\"Failed to fetch visits:\", err);\n document.getElementById(\"visit-count\").textContent = \"—\";\n }\n}\n\nfetchVisits();\n",[],[214,291],"86797160-4951-11f1-bc82-42b51c65c3df","index.html","8679720a-4951-11f1-bc82-42b51c65c3df",38,["D",1778074992194],"\n\n\n \n \n uApps Starter Val\n \n\n\n

🏔️ uApps Val Town Starter

\n \n

Analytics

This val has been visited ... times.

\n\n

Try the API

GET /api/health — JSON health check
GET /api/visits — Recent visits (SQLite)
POST /api/echo — Echo back your JSON body

\n\n

Learn More

Read the Val Town docs or view this val's source to explore every platform feature.

\n\n \n\n\n",[],[214,299],"48ed4c1e-4b21-11f1-b54f-ee650bb23af1","client.ts","48ed4cf0-4b21-11f1-b54f-ee650bb23af1",87,["D",1778274175458],"// client.ts — Inline browser script for progressive enhancement.\n\nexport const clientJs = String.raw`\nconst themeToggle = document.getElementById(\"theme-toggle\");\nconst forms = {\n email: document.getElementById(\"email-form\"),\n inbound: document.getElementById(\"inbound-form\"),\n openai: document.getElementById(\"openai-form\")\n};\n\nfunction initTheme() {\n const saved = localStorage.getItem(\"theme\") || \"auto\";\n applyTheme(saved);\n setThemeLabel(saved);\n}\n\nfunction cycleTheme() {\n const current = localStorage.getItem(\"theme\") || \"auto\";\n const next = current === \"auto\" ? \"light\" : current === \"light\" ? \"dark\" : \"auto\";\n localStorage.setItem(\"theme\", next);\n applyTheme(next);\n setThemeLabel(next);\n}\n\nfunction applyTheme(theme) {\n if (theme === \"auto\") {\n document.documentElement.removeAttribute(\"data-theme\");\n return;\n }\n document.documentElement.dataset.theme = theme;\n}\n\nfunction setThemeLabel(theme) {\n themeToggle.textContent = \"Theme: \" + theme;\n}\n\nasync function fetchVisits() {\n const el = document.getElementById(\"visit-count\");\n try {\n const data = await getJson(\"/api/visits\");\n el.textContent = data.total ?? \"—\";\n } catch (err) {\n console.error(\"Failed to fetch visits:\", err);\n el.textContent = \"—\";\n }\n}\n\nasync function getJson(path) {\n const res = await fetch(path);\n const data = await res.json();\n if (!res.ok) throw new Error(data.error || \"HTTP \" + res.status);\n return data;\n}\n\nasync function postJson(path, body, secret) {\n const headers = { \"content-type\": \"application/json\" };\n if (secret) headers[\"x-template-secret\"] = secret;\n const res = await fetch(path, {\n method: \"POST\",\n headers,\n body: JSON.stringify(body)\n });\n const data = await res.json();\n if (!res.ok) throw new Error(data.error || \"HTTP \" + res.status);\n return data;\n}\n\nfunction readForm(form) {\n return Object.fromEntries(new FormData(form).entries());\n}\n\nfunction showResult(id, value) {\n document.getElementById(id).textContent = JSON.stringify(value, null, 2);\n}\n\nfunction showError(id, err) {\n document.getElementById(id).textContent = \"Error: \" + err.message;\n}\n\nfunction wireJsonForm(form, path, resultId, payloadKeys) {\n form.addEventListener(\"submit\", async (event) => {\n event.preventDefault();\n const fields = readForm(form);\n const body = Object.fromEntries(payloadKeys.map((key) => [key, fields[key]]));\n try {\n showResult(resultId, { status: \"sending\" });\n showResult(resultId, await postJson(path, body, String(fields.secret || \"\")));\n } catch (err) {\n showError(resultId, err);\n }\n });\n}\n\nthemeToggle.addEventListener(\"click\", cycleTheme);\nwireJsonForm(forms.email, \"/api/email-test\", \"email-result\", [\"subject\", \"text\", \"to\"]);\nwireJsonForm(forms.inbound, \"/api/email-test/inbound\", \"inbound-result\", [\"from\", \"subject\", \"text\"]);\nwireJsonForm(forms.openai, \"/api/openai-test\", \"openai-result\", [\"prompt\"]);\ninitTheme();\nfetchVisits();\n`;\n",[],[214,307],"48f1fb74-4b21-11f1-aeb4-ee650bb23af1","app.tsx","48f1fc50-4b21-11f1-aeb4-ee650bb23af1",88,["D",1778274175490],"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// app.tsx — Server-rendered Preact landing page for the template val.\n\nimport { render } from \"https://esm.sh/preact-render-to-string@6.6.7?deps=preact@10.29.1\";\nimport { clientJs } from \"./client.ts\";\nimport { InteractiveTests } from \"./ui/forms.tsx\";\nimport {\n Architecture,\n AuthGuide,\n Footer,\n Hero,\n RouteTable,\n StatusGrid,\n} from \"./ui/sections.tsx\";\nimport { css } from \"./ui/styles.ts\";\nimport type { HomePageProps } from \"./ui/types.ts\";\n\n// -----------------------------------------------------------------------------\n// public renderer\n// -----------------------------------------------------------------------------\n\nexport function renderHomePage(props: HomePageProps): string {\n return \"\" + render();\n}\n\n// -----------------------------------------------------------------------------\n// shell\n// -----------------------------------------------------------------------------\n\nfunction App(props: HomePageProps) {\n return (\n \n \n \n \n {props.appName}\n \n \n \n \n

\n \n \n \n \n \n \n

\n \n \n \n );\n}\n",[],[214,315],"48ba5714-4b21-11f1-b54f-ee650bb23af1","types.ts","48ba57fa-4b21-11f1-b54f-ee650bb23af1","4888d3e2-4b21-11f1-81f8-ee650bb23af1",83,["D",1778274175126],"// types.ts — Shared Preact UI data contracts.\n\nexport interface HomePageProps {\n appName: string;\n emailEnabled: boolean;\n openAiEnabled: boolean;\n hasTestSecret: boolean;\n openAiModel: string;\n renderedAt: string;\n}\n\nexport interface RouteItem {\n method: string;\n path: string;\n purpose: string;\n}\n\nexport interface FeatureItem {\n title: string;\n icon: string;\n body: string[];\n}\n",[],[214,331,323],"ui","48c5eafc-4b21-11f1-9ccf-ee650bb23af1","styles.ts","48c5ebec-4b21-11f1-9ccf-ee650bb23af1",85,["D",1778274175202],"// styles.ts — Small custom layer on top of Oat CSS.\n\nexport const css = `\n:root {\n --bg: #f8fafc;\n --fg: #111827;\n --muted: #64748b;\n --brand: #7c3aed;\n --soft: color-mix(in srgb, var(--brand), transparent 88%);\n}\n[data-theme=\"dark\"] {\n color-scheme: dark;\n --bg: #0f172a;\n --fg: #e2e8f0;\n --muted: #94a3b8;\n --brand: #a78bfa;\n}\n[data-theme=\"light\"] { color-scheme: light; }\nbody { background: linear-gradient(135deg, var(--bg), var(--soft)); color: var(--fg); }\n.page { max-width: 1120px; margin: 0 auto; padding: 40px 20px 72px; }\n.hero { display: grid; gap: 18px; margin-bottom: 24px; }\n.hero h1 { font-size: clamp(2.4rem, 8vw, 5.8rem); letter-spacing: -0.07em; margin: 0; }\n.hero p { max-width: 780px; }\n.eyebrow { color: var(--brand); font-weight: 700; letter-spacing: 0.12em; text-transform: uppercase; }\n.actions { display: flex; flex-wrap: wrap; gap: 10px; align-items: center; }\n.grid { display: grid; gap: 16px; }\n.two { grid-template-columns: repeat(auto-fit, minmax(270px, 1fr)); }\n.three { grid-template-columns: repeat(auto-fit, minmax(220px, 1fr)); }\n.card { backdrop-filter: blur(10px); border-color: color-mix(in srgb, var(--fg), transparent 84%); box-shadow: 0 18px 60px rgb(15 23 42 / 0.08); }\n.spacious { padding: 28px; }\n.stat span { color: var(--muted); font-size: 0.9rem; text-transform: uppercase; }\n.stat strong { display: block; font-size: 2rem; margin: 6px 0; }\n.feature { border: 1px solid color-mix(in srgb, var(--fg), transparent 88%); border-radius: 16px; padding: 18px; }\n.stack { display: grid; gap: 14px; }\n.result { max-height: 220px; overflow: auto; white-space: pre-wrap; }\ntable code { white-space: nowrap; }\n.footer { color: var(--muted); margin-top: 28px; text-align: center; }\n`;\n",[],[214,331,333],"490e4d1a-4b21-11f1-874d-ee650bb23af1","sections.tsx","490e4de2-4b21-11f1-874d-ee650bb23af1",91,["D",1778274175678],"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// sections.tsx — Explanatory page sections.\n\nimport type { ComponentChildren } from \"https://esm.sh/preact@10.29.1\";\nimport { features, routes } from \"./data.ts\";\nimport type { HomePageProps } from \"./types.ts\";\n\n// -----------------------------------------------------------------------------\n// top sections\n// -----------------------------------------------------------------------------\n\nexport function Hero(_props: HomePageProps) {\n return (\n

Val Town starter · Preact SSR · Oat CSS

{_props.appName}

\n A compact template that demonstrates HTTP, Cron, Email, SQLite, Blob,\n Val Town OpenAI, trigger metadata, and safe public test endpoints.\n

\n Health check\n View routes\n \n

\n Security note:{\" \"}\n Val Town HTTP endpoints are public even when code is private. Gate\n write/action routes with env vars and secrets.\n

\n );\n}\n\nexport function StatusGrid(props: HomePageProps) {\n return (\n

\n \n Loaded from SQLite via /api/visits.\n \n \n Set EMAIL_TEST_ENABLED=true.\n \n \n Model: {props.openAiModel}\n \n \n Set TEMPLATE_TEST_SECRET to protect test forms.\n \n

\n );\n}\n\nfunction Stat(props: {\n title: string;\n value: string;\n id?: string;\n children: ComponentChildren;\n}) {\n return (\n

\n {props.title}\n {props.value}\n

{props.children}

\n );\n}\n\n// -----------------------------------------------------------------------------\n// explainers\n// -----------------------------------------------------------------------------\n\nexport function Architecture() {\n return (\n

How this template is wired

\n {features.map((item) => (\n \n {item.body.map((line) =>

{line}

)}\n \n ))}\n

\n );\n}\n\nexport function AuthGuide() {\n return (\n

Login and auth patterns

\n \n

Best for Val Town community apps.

\n Use{\" \"}\n std/oauth; it owns login, callback, and logout routes.\n

\n \n \n

Fastest private admin gate.

\n Compare Authorization against env-stored credentials.\n

\n \n \n

Good for personal dashboards.

\n Use{\" \"}\n APP_PASSWORD, an HttpOnly cookie, and logout clearing.\n

\n \n

Rule of thumb

Protect writes, expensive calls, private data, and admin screens.

\n );\n}\n\nfunction Feature(\n props: { title: string; icon: string; children: ComponentChildren },\n) {\n return (\n

{props.icon} {props.title}

\n {props.children}\n

\n );\n}\n\n// -----------------------------------------------------------------------------\n// reference\n// -----------------------------------------------------------------------------\n\nexport function RouteTable() {\n return (\n

Routes and files

\n \n \n \n \n \n \n \n \n \n {routes.map((r) => (\n \n \n \n \n \n ))}\n \n

Method	Path	Purpose
{r.method}	\n `{r.path}`\n	{r.purpose}

\n );\n}\n\nexport function Footer(props: { renderedAt: string }) {\n return (\n \n );\n}\n",[],[214,331,341],"48d4e476-4b21-11f1-b96f-ee650bb23af1","forms.tsx","48d4e52a-4b21-11f1-b96f-ee650bb23af1",86,["D",1778274175108],"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// forms.tsx — Public smoke-test forms.\n\n// -----------------------------------------------------------------------------\n// aggregate\n// -----------------------------------------------------------------------------\n\nexport function InteractiveTests() {\n return (\n

Test the platform features

\n These forms call public HTTP routes. They are disabled until env flags\n are set.\n

\n \n \n \n

\n );\n}\n\n// -----------------------------------------------------------------------------\n// forms\n// -----------------------------------------------------------------------------\n\nfunction EmailForm() {\n return (\n

📤 Outbound email

\n Enable with{\" \"}\n EMAIL_TEST_ENABLED=true. Free plans send to yourself.\n

\n \n Subject \n \n \n Text{\" \"}\n \n \n \n Optional recipient{\" \"}\n \n \n \n Optional secret{\" \"}\n \n \n \n

Waiting…

\n );\n}\n\nfunction InboundForm() {\n return (\n

📥 Inbound email

\n Simulate <user>.<val>@valtown.email{\" \"}\n without real mail.\n

\n \n From \n \n \n Subject \n \n \n Text{\" \"}\n \n \n \n Optional secret{\" \"}\n \n \n \n

Waiting…

\n );\n}\n\nfunction OpenAiForm() {\n return (\n

🤖 OpenAI proxy

\n Enable with{\" \"}\n OPENAI_TEST_ENABLED=true. Uses Val Town's proxy.\n

\n \n Prompt{\" \"}\n \n \n \n Optional secret{\" \"}\n \n \n \n

Waiting…

\n );\n}\n",[],[214,331,349],"48c09214-4b21-11f1-81f8-ee650bb23af1","data.ts","48c092be-4b21-11f1-81f8-ee650bb23af1",84,["D",1778274175113],"// data.ts — Static copy for the landing page.\n\nimport type { FeatureItem, RouteItem } from \"./types.ts\";\n\nexport const routes: RouteItem[] = [\n { method: \"GET\", path: \"/\", purpose: \"Preact SSR explainer UI\" },\n { method: \"GET\", path: \"/api/health\", purpose: \"Runtime health check\" },\n { method: \"GET\", path: \"/api/visits\", purpose: \"SQLite visit counter\" },\n { method: \"POST\", path: \"/api/echo\", purpose: \"JSON request smoke test\" },\n {\n method: \"POST\",\n path: \"/api/email-test\",\n purpose: \"Outbound email smoke test\",\n },\n {\n method: \"POST\",\n path: \"/api/email-test/inbound\",\n purpose: \"Inbound simulation\",\n },\n {\n method: \"POST\",\n path: \"/api/openai-test\",\n purpose: \"Val Town OpenAI proxy\",\n },\n];\n\nexport const features: FeatureItem[] = [\n {\n title: \"HTTP\",\n icon: \"🌐\",\n body: [\n \"index.http.ts routes API calls and renders this page.\",\n \"Root HTML is server-rendered by frontend/app.tsx.\",\n ],\n },\n {\n title: \"Frontend\",\n icon: \"🎨\",\n body: [\n \"Preact produces semantic HTML; Oat provides class-light styling.\",\n \"frontend/client.ts inlines form and theme enhancements.\",\n ],\n },\n {\n title: \"Storage\",\n icon: \"🗄️\",\n body: [\n \"SQLite tracks visits and cron timestamps.\",\n \"Blob helpers show namespaced account-scoped storage.\",\n ],\n },\n {\n title: \"Triggers\",\n icon: \"⚡\",\n body: [\n \"cron.ts runs interval work; email.ts handles inbound mail.\",\n \"New file types are inferred from path words: http, cron, email.\",\n ],\n },\n];\n",[],[214,331,357],"4888d338-4b21-11f1-81f8-ee650bb23af1",82,["D",1778274174805],[244,245,246,247,248],[214,331],["D",1778074991402],[243,249,250,251,252],[214],"a8f09454-4b17-11f1-b625-ee650bb23af1","storage.ts","aa15db36-48c5-11f1-8bd1-42b51c65c3df",57,["D",1778270041461],6,"// storage.ts — Blob storage helpers (account-scoped; namespace keys with PREFIX)\n// Docs: https://docs.val.town/reference/std/blob\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\n/** Key prefix to avoid collisions with other vals. */\nconst PREFIX = \"template/\";\n\n// ── Read / Write ─────────────────────────────────────────────────────────────\n\n/** Store a JSON-serialisable value under a namespaced key. */\nexport async function saveJSON(key: string, value: unknown): Promise {\n await blob.setJSON(`${PREFIX}${key}`, value);\n}\n\n/** Retrieve a previously stored JSON value, or null if missing. */\nexport async function loadJSON(key: string): Promise {\n try {\n const data = await blob.getJSON(`${PREFIX}${key}`);\n return data !== undefined ? (data as T) : null;\n } catch {\n return null;\n }\n}\n\n// ── List / Delete ────────────────────────────────────────────────────────────\n\n/** List all blob keys under our namespace. */\nexport async function listKeys(): Promise {\n const keys = await blob.list(PREFIX);\n // Strip the prefix so callers see clean names\n return keys.map((k: { key: string }) => k.key.replace(PREFIX, \"\"));\n}\n\n/** Delete a namespaced blob. */\nexport async function remove(key: string): Promise {\n await blob.delete(`${PREFIX}${key}`);\n}\n",[],[221,373],"a8e546d0-4b17-11f1-bccd-ee650bb23af1","shared.ts","aada9642-48c5-11f1-b1d7-42b51c65c3df",56,["D",1778270041498],"// shared.ts — Constants, types, utils. No external dependencies.\n\n// ── Constants ─────────────────────────────────────────────────────────────────\n\nexport const APP_NAME = \"Val Town Template\";\n\n// ── Env ───────────────────────────────────────────────────────────────────────\n// Deno.env.set() is a no-op on Val Town — set vars in the UI sidebar only.\n\nexport function env(key: string, fallback = \"\"): string {\n return Deno.env.get(key) ?? fallback;\n}\n\n// ── Duration ──────────────────────────────────────────────────────────────────\n// \"30s\" | \"5m\" | \"2h\" | \"1d\" → ms. \"DISABLED\" | invalid → null.\nexport function parseDuration(raw: string): number | null {\n const s = raw.trim();\n if (s.toUpperCase() === \"DISABLED\") return null;\n const m = /^(\\d+)(s|m|h|d)$/i.exec(s);\n if (!m) return null;\n const n = parseInt(m[1], 10);\n if (n <= 0) return null;\n const factors: Record = {\n s: 1_000,\n m: 60_000,\n h: 3_600_000,\n d: 86_400_000,\n };\n return n * factors[m[2].toLowerCase()];\n}\n\n// ── Types ─────────────────────────────────────────────────────────────────────\n// Matches the platform's inbound Email trigger interface.\n\nexport interface Email {\n from: string;\n to: string[];\n cc?: string | string[];\n bcc?: string | string[];\n subject?: string;\n text?: string;\n html?: string;\n attachments: File[];\n headers: Record;\n}\n",[],[221,382],"490480aa-4b21-11f1-861e-ee650bb23af1","openai-test.ts","49048168-4b21-11f1-861e-ee650bb23af1",90,["D",1778274175617],"// openai-test.ts — Val Town std/openai smoke test helpers.\n\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nimport { env } from \"./shared.ts\";\n\nexport interface OpenAiTestResult {\n model: string;\n prompt: string;\n reply: string;\n testedAt: string;\n}\n\n// -----------------------------------------------------------------------------\n// smoke test\n// -----------------------------------------------------------------------------\n\nexport async function runOpenAiSmokeTest(\n prompt: string,\n): Promise {\n const model = env(\"OPENAI_TEST_MODEL\", \"gpt-5-nano\");\n const openai = new OpenAI();\n const completion: unknown = await openai.chat.completions.create({\n model,\n max_tokens: 80,\n messages: [\n {\n role: \"system\",\n content: \"Reply with one short sentence. Mention Val Town once.\",\n },\n { role: \"user\", content: prompt },\n ],\n });\n\n return {\n model,\n prompt,\n reply: extractReply(completion),\n testedAt: new Date().toISOString(),\n };\n}\n\nfunction extractReply(value: unknown): string {\n const choices = isRecord(value) ? value.choices : null;\n const first = Array.isArray(choices) ? choices[0] : null;\n const message = isRecord(first) ? first.message : null;\n const content = isRecord(message) ? message.content : null;\n return typeof content === \"string\" ? content : \"\";\n}\n\nfunction isRecord(value: unknown): value is Record {\n return typeof value === \"object\" && value !== null;\n}\n",[],[221,390],"a919ef02-4b17-11f1-bff1-ee650bb23af1","db.ts","aad2cfa2-48c5-11f1-bfb8-42b51c65c3df",59,["D",1778270041839],8,"// db.ts — SQLite helpers (Turso-backed, shared across all vals — namespace tables)\n// Docs: https://docs.val.town/reference/std/sqlite/\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// ── Schema Migration ─────────────────────────────────────────────────────────\n// Lazily run on first DB call, not at import time. This prevents crashes\n// when running locally (off Val Town) where the SQLite API isn't available.\n\nlet migrated = false;\n\nasync function migrate(): Promise {\n if (migrated) return;\n migrated = true;\n await sqlite.batch([\n `CREATE TABLE IF NOT EXISTS template_visits (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n path TEXT NOT NULL,\n ts TEXT NOT NULL DEFAULT (datetime('now'))\n )`,\n `CREATE TABLE IF NOT EXISTS template_meta (\n key TEXT PRIMARY KEY,\n value TEXT NOT NULL\n )`,\n ]);\n}\n\n// ── Queries ──────────────────────────────────────────────────────────────────\n\n/** Record a page visit. */\nexport async function recordVisit(path: string): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT INTO template_visits (path) VALUES (?)`,\n args: [path],\n });\n}\n\n/** Get total visit count. */\nexport async function getVisitCount(): Promise {\n await migrate();\n const { rows } = await sqlite.execute(\n `SELECT COUNT(*) as count FROM template_visits`,\n );\n return Number(rows[0][0]);\n}\n\n// ── Meta Key-Value ────────────────────────────────────────────────────────────\n\n/** Read a value from the `template_meta` key-value store. Returns null if missing. */\nexport async function getMetaValue(key: string): Promise {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT value FROM template_meta WHERE key = ?`,\n args: [key],\n });\n return rows[0] ? String(rows[0][0]) : null;\n}\n\n/** Write (upsert) a value into the `template_meta` key-value store. */\nexport async function setMetaValue(key: string, value: string): Promise {\n await migrate();\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO template_meta (key, value) VALUES (?, ?)`,\n args: [key, value],\n });\n}\n\n/** Get the N most recent visits. */\nexport async function getRecentVisits(\n limit = 10,\n): Promise> {\n await migrate();\n const { rows } = await sqlite.execute({\n sql: `SELECT id, path, ts FROM template_visits ORDER BY ts DESC LIMIT ?`,\n args: [limit],\n });\n return (rows as unknown as unknown[][]).map((r) => ({\n id: Number(r[0]),\n path: String(r[1]),\n ts: String(r[2]),\n }));\n}\n\n/** Delete visits older than `days` days. Safe to call before migrate runs. */\nexport async function pruneOldVisits(days = 30): Promise {\n await migrate();\n await sqlite.execute({\n sql: `DELETE FROM template_visits WHERE ts < datetime('now', ?)`,\n args: [`-${days} days`],\n });\n}\n",[],[221,398],"491d0e22-4b21-11f1-8ab3-ee650bb23af1","api-utils.ts","491d0f08-4b21-11f1-8ab3-ee650bb23af1",92,["D",1778274175773],"// api-utils.ts — Small HTTP helpers for public test endpoints.\n\nimport { env } from \"./shared.ts\";\n\nexport type JsonObject = Record;\n\n// -----------------------------------------------------------------------------\n// responses\n// -----------------------------------------------------------------------------\n\nexport function jsonError(message: string, status = 400): Response {\n return Response.json({ ok: false, error: message }, { status });\n}\n\nexport function jsonOk(data: JsonObject = {}): Response {\n return Response.json({ ok: true, ...data });\n}\n\n// -----------------------------------------------------------------------------\n// request parsing\n// -----------------------------------------------------------------------------\n\nexport async function readJsonObject(req: Request): Promise {\n const text = await req.text();\n if (text.trim() === \"\") return {};\n const parsed: unknown = JSON.parse(text);\n if (!isJsonObject(parsed)) throw new Error(\"Expected a JSON object body\");\n return parsed;\n}\n\nexport async function readJsonOrError(\n req: Request,\n): Promise<\n { body: JsonObject; error: null } | { body: null; error: Response }\n> {\n try {\n return { body: await readJsonObject(req), error: null };\n } catch {\n return { body: null, error: jsonError(\"Invalid JSON object body\", 400) };\n }\n}\n\nexport function stringField(\n input: JsonObject,\n key: string,\n fallback = \"\",\n): string {\n const value = input[key];\n return typeof value === \"string\" && value.trim() !== \"\" ? value : fallback;\n}\n\nfunction isJsonObject(value: unknown): value is JsonObject {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n// -----------------------------------------------------------------------------\n// test gates\n// -----------------------------------------------------------------------------\n\nexport function testEndpointInfo(flag: string): JsonObject {\n return {\n enabled: isEnvFlagEnabled(flag),\n enableWithEnv: `${flag}=true`,\n optionalSecretEnv: \"TEMPLATE_TEST_SECRET\",\n optionalSecretHeader: \"x-template-secret\",\n };\n}\n\nexport function assertTestAccess(\n req: Request,\n flag: string,\n label: string,\n): Response | null {\n if (!isEnvFlagEnabled(flag)) {\n return jsonError(\n `${label} is disabled. Set ${flag}=true in Val Town.`,\n 403,\n );\n }\n\n const secret = env(\"TEMPLATE_TEST_SECRET\");\n if (!secret) return null;\n\n const actual = req.headers.get(\"x-template-secret\");\n return actual === secret\n ? null\n : jsonError(\"Invalid or missing test secret\", 401);\n}\n\nfunction isEnvFlagEnabled(key: string): boolean {\n return env(key).toLowerCase() === \"true\";\n}\n",[],[221,407],["D",1778074991756],[237,238,239,240,241],[221],["D",1777994172310],["D",1789511441255],{"_101":100,"_109":105},{"_101":100,"_102":103,"_104":105,"_18":56,"_106":107,"_108":25},{"_13":90,"_32":91,"_43":42,"_92":44,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":45,"_99":100},"ctx",{"_83":-5,"_129":455,"_456":457,"_458":459,"_460":25,"_461":25,"_462":25,"_463":60,"_464":-5,"_465":-7,"_466":-7,"_467":159,"_468":25,"_469":25,"_470":-5,"_471":25,"_472":25,"_473":25,"_474":-5},"ENV",{"_426":427,"_428":429,"_430":91,"_431":432,"_433":434,"_435":436,"_437":438,"_439":440,"_441":442,"_443":444,"_445":446,"_447":448,"_449":450,"_451":452,"_453":454},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v95