{node}

));\n}\n\nfunction Timestamp({ value }: { value: string }): React.ReactElement {\n return {value};\n}\n\nfunction isRecord(value: unknown): value is JsonObject {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction humanize(value: string): string {\n return value\n .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n .replace(/[_-]+/g, \" \")\n .replace(/\\bId\\b/g, \"ID\")\n .replace(/^./, (letter) => letter.toUpperCase());\n}\n\nfunction settingCount(schema: unknown): number {\n if (!isRecord(schema) || !isRecord(schema.properties)) return 0;\n return Object.keys(schema.properties).length;\n}\n\nfunction Value({ value }: { value: unknown }): React.ReactElement {\n if (Array.isArray(value)) {\n if (value.length === 0) return None;\n return (\n

\n );\n }\n if (isRecord(value)) return ;\n if (typeof value === \"boolean\") return {value ? \"Yes\" : \"No\"};\n if (value == null) return None;\n return {String(value)};\n}\n\nfunction Settings({ value }: { value: unknown }): React.ReactElement {\n if (!isRecord(value) || Object.keys(value).length === 0) {\n return

No settings.

;\n }\n return (\n

{humanize(key)}

\n );\n}\n\nfunction schemaType(definition: JsonObject): string {\n if (definition.type === \"array\" && isRecord(definition.items)) {\n return `Array of ${String(definition.items.type ?? \"values\")}`;\n }\n return humanize(String(definition.type ?? \"value\"));\n}\n\nfunction Schema({ value }: { value: unknown }): React.ReactElement {\n if (!isRecord(value)) {\n return (\n <>\n

The stored schema is not valid JSON.

{String(value)}

\n \n );\n }\n\n const properties = isRecord(value.properties) ? value.properties : {};\n const required = new Set(\n Array.isArray(value.required)\n ? value.required.filter((item): item is string => typeof item === \"string\")\n : [],\n );\n\n return (\n <>\n {Object.keys(properties).length === 0\n ?

No configurable settings.

\n : (\n

{name}

\n {schemaType(definition)}\n {\" · \"}\n {required.has(name) ? \"Required\" : \"Optional\"}\n {definition.readOnly === true ? \" · Read only\" : \"\"}\n

\n {typeof definition.description === \"string\" &&\n

{definition.description}

}\n {Object.hasOwn(definition, \"default\") &&\n

Default:

}\n {Array.isArray(definition.enum) &&\n

Allowed:

}\n {definition.uniqueItems === true &&\n

Values must be unique.

}\n

\n )}\n\n

Raw schema

{JSON.stringify(value, null, 2)}

\n \n );\n}\n\nexport function sourceIndexDocument(sources: SourceSummary[]): string {\n return documentMarkup(\n \"Widget favorites — Sources\",\n <>\n

Sources

Available feed definitions and their current device use.

\n {sources.length === 0\n ?

No sources yet.

\n : (\n \n {sources.map((source) => (\n \n \n {humanize(source.kind)}\n Source {source.id}\n \n {source.description}\n {settingCount(source.settingsSchema)}\n {source.deviceCount}\n \n ))}\n \n )}\n ,\n );\n}\n\nexport function sourceShowDocument(source: SourceDetail): string {\n return documentMarkup(\n `Widget favorites — ${humanize(source.kind)}`,\n <>\n

← All sources

\n {source.kind === \"messages\" && (\n \n )}\n

{humanize(source.kind)}

{source.description}

\n\n

Source: {source.id}
Devices: {source.deviceCount}
Created
Updated

\n\n

Available settings

Schema fields define the shape accepted by each device assignment.

\n \n

\n\n

Attached devices

\n {source.devices.length === 0\n ?

No devices attached.

\n : (\n \n {source.devices.map((device) => (\n \n \n {device.name}\n {device.installId}\n \n {device.priority}\n \n

View settings

\n \n

\n \n \n \n ))}\n \n )}\n

\n ,\n );\n}\n\nexport type SourceMessageView = {\n id: number;\n main: string;\n sub: string;\n timestamp: string;\n};\n\nexport function sourceMessagesDocument(\n source: SourceDetail,\n messages: SourceMessageView[],\n added = false,\n): string {\n return documentMarkup(\n \"Widget favorites — Messages\",\n <>\n

← All sources

\n \n

Messages

Shared by every device with the Messages source.

\n {added &&

Message added.

}\n \n

\n Add a message\n Main \n Sub \n Time \n \n

\n \n \n

Existing messages

\n {messages.length === 0\n ?

No messages yet.

\n : (\n \n {messages.map((message) => (\n \n {message.main}\n {message.sub}\n \n \n ))}\n \n )}\n

\n ,\n );\n}\n\nexport function sourceNotFoundDocument(): string {\n return documentMarkup(\n \"Widget favorites — Source not found\",\n <>\n

← All sources

Source not found

No source exists with that internal ID.

\n ,\n );\n}\n",[],[190,172],"5fb23483-81b6-486a-afe9-d516951f9437",["D",1788724042065],"// Static shell for the browser-managed app entry point.\n//\n// Standalone by design — it is the one page that does not use `pageShell`,\n// since the shell's own header would repeat the navigation this page exists\n// to present. It restates the shell's tokens so both agree on a phone in\n// Dark Mode.\n\nexport function rootHtml(): string {\n return `\n\n \n \n \n Sports Today\n \n \n \n

Sports Today

\n \n

\n \n`;\n}\n",[],[190,166],"1f2fa7fc-5044-434f-a0ba-ce0057baf5fd",["D",1788724042065],"// Shared semantic shell for every browser administration view.\n//\n// The stylesheet is mobile-first: the unqualified rules describe a phone in\n// portrait, and each `min-width` block adds back the wider-viewport layout.\n// Two consequences are load-bearing for the views. Resource tables stack\n// into labeled rows below 40em, which is why `dataTable.tsx` emits a\n// `data-label` and an explicit ARIA role on every cell — CSS drops the\n// native table roles the moment `display` changes. And every control clears\n// a 44px touch target with a 16px font, since anything smaller is both hard\n// to hit and triggers iOS Safari's zoom-on-focus.\n\nconst PAGE_STYLE = `\n /* Light values are the established palette; the dark set mirrors the same\n hierarchy rather than introducing a second visual language. */\n :root {\n color-scheme: light dark;\n --page: #fff;\n --ink: #1a1a1a;\n --ink-muted: #666;\n --accent: #2563eb;\n --accent-strong: #1d4ed8;\n --rule: #eee;\n --edge: #ddd;\n --field-edge: #ccc;\n --inset: #f6f6f6;\n --tap: 44px;\n }\n @media (prefers-color-scheme: dark) {\n :root {\n --page: #16181c;\n --ink: #e8e9ec;\n --ink-muted: #a1a5ae;\n --accent: #7aa7ff;\n --accent-strong: #a3c0ff;\n --rule: #26282e;\n --edge: #34373e;\n --field-edge: #4b4f58;\n --inset: #1c1f24;\n }\n }\n\n *, *::before, *::after { box-sizing: border-box; }\n\n body {\n font-family: system-ui, -apple-system, sans-serif;\n background: var(--page);\n color: var(--ink);\n line-height: 1.5;\n max-width: 40rem;\n margin: 0 auto;\n padding: 1rem 1rem 3rem;\n overflow-wrap: break-word;\n }\n main { min-width: 0; }\n @media (min-width: 40em) { body { padding: 2rem 1rem 4rem; } }\n\n h1 { font-size: clamp(1.4rem, 1.25rem + 0.8vw, 1.65rem); line-height: 1.2; margin: 0 0 1rem; }\n h2 { font-size: clamp(1.05rem, 1rem + 0.3vw, 1.2rem); line-height: 1.25; margin: 0 0 0.5rem; }\n h3 { font-size: 0.95rem; line-height: 1.3; margin: 1rem 0 0.4rem; }\n p { margin: 0.5rem 0 1rem; }\n ul, ol { margin: 0.5rem 0 1rem; padding-left: 1.25rem; }\n li { margin: 0.35rem 0; }\n a { color: var(--accent); }\n /* A paragraph holding nothing but a link is an action (\"+ Add source\"), so\n it gets a target taller than its text. */\n p:not(.breadcrumb) > a:only-child, li > a:first-child { display: inline-block; padding: 0.3rem 0; }\n code { font-family: ui-monospace, monospace; font-size: 0.85em; overflow-wrap: anywhere; }\n strong { overflow-wrap: anywhere; }\n :focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }\n\n details { margin-top: 0.75rem; }\n summary { cursor: pointer; font-weight: 600; padding: 0.6rem 0; }\n dl.schema-fields { margin: 0.75rem 0 0; }\n dl.schema-fields > div { padding: 0.75rem 0; border-bottom: 1px solid var(--rule); }\n dl.schema-fields dt { font-weight: 600; }\n dl.schema-fields dd { margin: 0.25rem 0 0; }\n dl.schema-fields p { margin: 0.25rem 0; }\n .schema-detail { color: var(--ink-muted); font-size: 0.85rem; }\n section { margin-top: 2rem; padding-top: 1rem; border-top: 1px solid var(--rule); }\n pre {\n background: var(--inset);\n border: 1px solid var(--edge);\n border-radius: 6px;\n padding: 0.75rem;\n overflow-x: auto;\n font-size: 0.8rem;\n line-height: 1.5;\n }\n\n /* Navigation. Wrapping keeps every destination reachable on a narrow\n screen instead of pushing links off-screen. */\n header.global-header { margin: 0 0 1.5rem; border-bottom: 1px solid var(--edge); }\n header.global-header nav, nav.resource-nav { display: flex; flex-wrap: wrap; gap: 0 1.25rem; }\n header.global-header a, nav.resource-nav a, .breadcrumb a {\n display: inline-flex;\n align-items: center;\n min-height: var(--tap);\n color: var(--accent);\n text-decoration: none;\n font-size: 0.95rem;\n }\n nav.resource-nav { margin: 0 0 1.5rem; border-bottom: 1px solid var(--edge); }\n nav.resource-nav a { border-bottom: 2px solid transparent; margin-bottom: -1px; }\n nav.resource-nav a.active { color: var(--ink); font-weight: 600; border-bottom-color: var(--accent); }\n .breadcrumb { margin: 0; }\n .breadcrumb a { font-size: 0.9rem; }\n\n /* Label/value metadata reads as an aligned two-column list on a phone and\n collapses to one inline run once there is room for it. */\n dl.device-meta { display: grid; grid-template-columns: minmax(5rem, auto) 1fr; gap: 0.35rem 0.75rem; margin: 1.25rem 0 1rem; }\n dl.device-meta > div { display: contents; }\n dl.device-meta dt { color: var(--ink-muted); font-size: 0.8rem; text-transform: uppercase; letter-spacing: 0.02em; }\n dl.device-meta dd { margin: 0; font-size: 0.85rem; }\n dl.device-meta dd.device-id { font-family: ui-monospace, monospace; }\n dl.device-meta ul { margin: 0; padding-left: 1.1rem; }\n @media (min-width: 40em) {\n dl.device-meta { display: flex; flex-wrap: wrap; gap: 0 1.5rem; margin: 1.25rem 0 0.5rem; }\n dl.device-meta > div { display: flex; gap: 0.35rem; }\n }\n\n /* Resource tables. Below 40em each row becomes a labeled record: the first\n cell is its title and every other cell prints its column name from\n data-label, so no operational column has to be dropped or scrolled to. */\n table.resource-index { width: 100%; border-collapse: collapse; margin-top: 1rem; }\n table.resource-index thead { display: none; }\n table.resource-index tr { display: block; padding: 0.85rem 0; border-bottom: 1px solid var(--rule); }\n table.resource-index td { display: grid; grid-template-columns: 7rem 1fr; gap: 0 0.75rem; padding: 0.15rem 0; font-size: 0.95rem; }\n table.resource-index td::before {\n content: attr(data-label);\n color: var(--ink-muted);\n font-size: 0.8rem;\n text-transform: uppercase;\n letter-spacing: 0.02em;\n line-height: 1.6;\n }\n table.resource-index td:empty { display: none; }\n table.resource-index td:first-child { display: block; font-weight: 600; margin-bottom: 0.35rem; }\n table.resource-index td:first-child::before { content: none; }\n table.resource-index td:first-child a { display: inline-block; padding: 0.3rem 0; }\n /* Settings nested in a cell already sit in the value column, so they run as\n a plain label-then-value flow rather than indenting a second time. */\n table.resource-index td details { margin-top: 0; }\n table.resource-index td summary { padding: 0 0 0.4rem; }\n table.resource-index td .device-meta { display: block; margin: 0; }\n table.resource-index td .device-meta > div { display: block; margin-bottom: 0.35rem; }\n .resource-id { display: block; font-family: ui-monospace, monospace; font-size: 0.8rem; font-weight: 400; color: var(--ink-muted); overflow-wrap: anywhere; }\n @media (min-width: 40em) {\n table.resource-index thead { display: table-header-group; }\n table.resource-index tr { display: table-row; padding: 0; border-bottom: 0; }\n table.resource-index th, table.resource-index td {\n display: table-cell;\n text-align: left;\n padding: 0.5rem 0.6rem;\n border-bottom: 1px solid var(--rule);\n }\n table.resource-index th { color: var(--ink-muted); font-weight: 600; font-size: 0.8rem; text-transform: uppercase; letter-spacing: 0.02em; }\n table.resource-index td::before { content: none; }\n table.resource-index td:first-child { font-weight: inherit; margin-bottom: 0; }\n table.resource-index td:first-child a { padding: 0; }\n table.resource-index td .device-meta { display: flex; }\n table.resource-index td .device-meta > div { display: flex; margin-bottom: 0; }\n }\n\n /* Forms. Controls are full-width and thumb-sized by default; the 1rem font\n size is what keeps iOS Safari from zooming the page on focus. */\n fieldset { border: 1px solid var(--edge); border-radius: 6px; margin: 0 0 1rem; padding: 0.5rem 1rem 1rem; min-width: 0; }\n legend { font-weight: 600; padding: 0 0.25rem; }\n label { display: flex; flex-wrap: wrap; align-items: center; gap: 0.5rem; min-height: var(--tap); margin: 0; }\n /* A text field's label sits above it so every field in a form starts at the\n same left edge; checkbox and color rows stay on one line. */\n label:has(input[type=\"text\"]), label:has(input[type=\"number\"]),\n label:has(input[type=\"datetime-local\"]), label:has(select) {\n flex-direction: column;\n align-items: stretch;\n gap: 0.25rem;\n min-height: 0;\n margin-bottom: 0.75rem;\n }\n input[type=\"text\"], input[type=\"number\"], input[type=\"datetime-local\"], select {\n font: inherit;\n font-size: 1rem;\n min-height: var(--tap);\n max-width: 100%;\n padding: 0.5rem 0.65rem;\n border: 1px solid var(--field-edge);\n border-radius: 6px;\n background: var(--page);\n color: var(--ink);\n }\n input[type=\"text\"] { flex: 1 1 12rem; }\n input[type=\"number\"] { inline-size: 6rem; }\n input[type=\"datetime-local\"], select { flex: 1 1 14rem; }\n fieldset > input[type=\"text\"] { width: 100%; max-width: 24rem; }\n input[type=\"checkbox\"] { inline-size: 1.15rem; block-size: 1.15rem; accent-color: var(--accent); }\n input[type=\"color\"] {\n inline-size: 3.25rem;\n block-size: 2.75rem;\n padding: 0.2rem;\n border: 1px solid var(--field-edge);\n border-radius: 6px;\n background: var(--page);\n }\n /* A checkbox fieldset is a selection list, so it gets as many columns as the\n viewport fits at a readable width — two on a phone, four in the full\n container — instead of one 70-row column. */\n fieldset:has(input[type=\"checkbox\"]) { display: grid; grid-template-columns: repeat(auto-fill, minmax(8rem, 1fr)); gap: 0 1rem; }\n button {\n font: inherit;\n font-size: 1rem;\n font-weight: 600;\n min-height: var(--tap);\n inline-size: 100%;\n padding: 0.65rem 1.25rem;\n border: none;\n border-radius: 6px;\n background: var(--accent);\n color: var(--page);\n cursor: pointer;\n }\n button:hover { background: var(--accent-strong); }\n @media (min-width: 40em) { button { inline-size: auto; } }\n`;\n\nconst PAGE_SCRIPT = `\n document.querySelectorAll(\"time[datetime]\").forEach(function (el) {\n var d = new Date(el.getAttribute(\"datetime\"));\n if (!isNaN(d.getTime())) el.textContent = d.toLocaleString();\n });\n document.querySelectorAll(\"form[data-iso-timestamp]\").forEach(function (form) {\n var local = form.querySelector('input[name=\"timestampLocal\"]');\n var iso = form.querySelector('input[name=\"timestamp\"]');\n if (!local || !iso) return;\n if (!local.value) {\n var now = new Date();\n var localNow = new Date(now.getTime() - now.getTimezoneOffset() * 60000);\n local.value = localNow.toISOString().slice(0, 16);\n }\n form.addEventListener(\"submit\", function () {\n var parsed = new Date(local.value);\n if (!isNaN(parsed.getTime())) iso.value = parsed.toISOString();\n });\n });\n`;\n\nexport function pageShell(title: string, body: string): string {\n return `\n\n\n\n\n${title}\n\n\n\n\n${body}\n\n\n`;\n}\n",[],[190,148],"8f81edd3-af87-4d14-bc15-5215198fcc20",["D",1788724042065],"// Server-rendered device administration built on the device-centric model.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\nimport { renderToStaticMarkup } from \"npm:react-dom@18.2.0/server\";\nimport { SPORTS, TEAMS } from \"../lib/catalog.ts\";\nimport type {\n AvailableSource,\n DeviceDetail,\n DeviceSourceView,\n DeviceSummary,\n} from \"../lib/deviceStore.ts\";\nimport { SUPPORTED_WIDGET_TEMPLATES } from \"../lib/presentation.ts\";\nimport { titleCase } from \"../lib/text.ts\";\nimport { Cell, DataTable, Row } from \"./dataTable.tsx\";\nimport { pageShell } from \"./pageShell.ts\";\n\nexport type DevicePreviewItem = {\n id: string;\n mainText: string;\n subText: string;\n caption: string | null;\n emphasized: boolean;\n timestamp: number;\n};\n\ntype PreviewResult =\n | { ok: true; items: DevicePreviewItem[]; rawJson: string }\n | { ok: false; error: string };\n\nfunction documentMarkup(title: string, node: ReactNode): string {\n return pageShell(title, renderToStaticMarkup(

{node}

));\n}\n\nfunction Timestamp({ value }: { value: string }): React.ReactElement {\n return {value};\n}\n\nfunction humanize(key: string): string {\n return key\n .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n .replace(/[_-]+/g, \" \")\n .replace(/\\bId\\b/g, \"ID\")\n .replace(/^./, (letter) => letter.toUpperCase());\n}\n\nfunction isRecord(value: unknown): value is Record {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction stringArray(value: unknown): string[] {\n return Array.isArray(value)\n ? value.filter((item): item is string => typeof item === \"string\")\n : [];\n}\n\nfunction SettingValue({ value }: { value: unknown }): React.ReactElement {\n if (Array.isArray(value)) {\n if (value.length === 0) return None;\n return

;\n }\n if (isRecord(value)) return ;\n if (typeof value === \"boolean\") return {value ? \"Yes\" : \"No\"};\n if (value == null) return None;\n return {String(value)};\n}\n\nfunction Settings({ value }: { value: unknown }): React.ReactElement {\n if (!isRecord(value) || Object.keys(value).length === 0) return

No settings.

;\n return (\n

{humanize(key)}

\n );\n}\n\ntype DeviceNavActive = \"sources\" | \"presentation\" | \"preview\";\n\nfunction DeviceNav({ id, active }: { id: number; active: DeviceNavActive }): React.ReactElement {\n return (\n <>\n

← All devices

\n \n \n );\n}\n\nfunction SourceSettingsFields({\n kind,\n settings,\n}: {\n kind: \"games\" | \"messages\" | \"moon\";\n settings: unknown;\n}): React.ReactElement {\n const values = isRecord(settings) ? settings : {};\n if (kind === \"messages\") {\n return

Messages has no per-device settings.

;\n }\n if (kind === \"moon\") {\n return

Moon has no per-device settings.

;\n }\n\n // Teams are the whole selection. The former \"Sports (used only when no\n // teams below are selected)\" fieldset is gone with the `sports[]`\n // parameter — SPORTS survives here purely to order and head the groups\n // below. Selecting nothing now means an empty feed, not every game.\n const selectedTeams = stringArray(values.teams);\n return (\n <>\n {SPORTS.map((sport) => {\n const slugs = Object.entries(TEAMS)\n .filter(([, ref]) => ref.sport === sport)\n .map(([slug]) => slug);\n if (slugs.length === 0) return null;\n return (\n

\n {sport.toUpperCase()}\n {slugs.map((slug) => (\n \n {\" \"}{titleCase(slug)}\n \n ))}\n

\n );\n })}\n

\n Ended games\n \n \n \n \n

\n \n );\n}\n\nexport function deviceIndexDocument(devices: DeviceSummary[]): string {\n return documentMarkup(\n \"Widget favorites — Devices\",\n <>\n

Devices

\n {devices.length === 0\n ?

No devices yet.

\n : (\n \n {devices.map((device) => (\n \n \n {device.name}\n {device.installId}\n \n {device.sourceCount}\n \n \n ))}\n \n )}\n ,\n );\n}\n\nexport function deviceShowDocument(\n device: DeviceDetail,\n saved = false,\n): string {\n return documentMarkup(\n `Widget favorites — ${device.name}`,\n <>\n \n

{device.name}

\n {saved &&

Saved.

}\n \n\n

Device: {device.installId}
Sources: {device.sourceCount}
Created
Updated

\n\n

Sources

Priority is ascending. Equal priorities are resolved by assignment ID.

+ Add source

\n {device.sources.length === 0\n ?

No sources assigned.

\n : (\n \n {device.sources.map((source) => (\n \n \n \n {humanize(source.kind)}\n \n Assignment {source.assignmentId}\n \n {source.priority}\n \n \n \n ))}\n \n )}\n

\n ,\n );\n}\n\nexport function devicePresentationDocument(\n device: DeviceDetail,\n saved = false,\n): string {\n const { presentation } = device;\n return documentMarkup(\n `Widget favorites — Presentation for ${device.name}`,\n <>\n \n

Presentation

These values are sent to WidgetKit for every size of this widget.

\n {saved &&

Saved.

}\n \n ,\n );\n}\n\nexport function deviceSourceNewDocument(\n device: DeviceDetail,\n available: AvailableSource[],\n selected: AvailableSource | null,\n): string {\n const nextPriority = device.sources.reduce((max, source) => Math.max(max, source.priority), 0) + 1;\n return documentMarkup(\n `Widget favorites — Add source to ${device.name}`,\n <>\n \n

Add source

\n {available.length === 0\n ?

Every available source is already attached.

\n : (\n <>\n

\n \n {humanize(source.kind)}\n {\" — \"}{source.description}\n

\n {selected && (\n

\n \n

\n Priority\n \n Priority{\" \"}\n \n \n

\n \n \n \n )}\n \n )}\n ,\n );\n}\n\nexport function deviceSourceEditDocument(\n device: DeviceDetail,\n source: DeviceSourceView,\n saved = false,\n): string {\n return documentMarkup(\n `Widget favorites — ${humanize(source.kind)} for ${device.name}`,\n <>\n \n

{humanize(source.kind)}

{source.description}

\n {saved &&

Saved.

}\n

\n Priority\n \n Priority{\" \"}\n \n \n

\n \n \n \n

Remove source

This removes the assignment from this device. It does not delete the source or its data.

\n \n

\n ,\n );\n}\n\nfunction Preview({ result }: { result: PreviewResult }): React.ReactElement {\n if (!result.ok) return

Couldn't build a preview: {result.error}

;\n return (\n <>\n {result.items.length === 0\n ?

No items — nothing in this device's source windows right now.

\n : (\n \n {result.items.map((item) => {\n const when = new Date(item.timestamp * 1000).toISOString();\n return (\n \n \n {item.mainText}\n {item.subText}\n {item.caption ?? \"\"}\n {item.emphasized ? \"Yes\" : \"\"}\n \n );\n })}\n \n )}\n

Raw response

{result.rawJson}

\n \n );\n}\n\nexport function devicePreviewDocument(\n device: DeviceDetail,\n result: PreviewResult,\n): string {\n return documentMarkup(\n `Widget favorites — Preview ${device.name}`,\n <>\n \n

Preview

\n {device.sources.length > 0\n ? (\n

\n Combining{\" \"}\n {device.sources.map((source) =>\n `${humanize(source.kind)} (priority ${source.priority})`\n ).join(\", \")}.\n

\n )\n :

No sources assigned; using the starter games feed.

}\n \n ,\n );\n}\n\nexport function deviceNotFoundDocument(): string {\n return documentMarkup(\n \"Widget favorites — Device not found\",\n <>\n

← All devices

Device not found

No device exists with that internal ID.

\n ,\n );\n}\n",[],[190,106],"a386d6d2-c18f-48b9-ac9f-02c511cd0698",["D",1788724042065],"// The resource table every administration index and detail view shares.\n//\n// Two things are centralized here because getting either wrong is invisible\n// until someone opens a page on a phone. Each cell carries its column name in\n// `data-label`, which is what the stacked layout in `pageShell` prints in\n// place of the hidden header row. Each element also carries the ARIA role its\n// tag already implies, because changing `display` on a table element drops\n// the native role and would otherwise leave assistive technology with a pile\n// of anonymous blocks.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\n\nexport function DataTable(\n { columns, children }: { columns: string[]; children: ReactNode },\n): React.ReactElement {\n return (\n \n \n \n {columns.map((column) => (\n \n ))}\n \n \n {children}\n

{column}

\n );\n}\n\nexport function Row({ children }: { children: ReactNode }): React.ReactElement {\n return {children};\n}\n\n// `label` must match this cell's column heading; the stacked layout shows it\n// as the row's label for this value.\nexport function Cell(\n { label, children }: { label: string; children?: ReactNode },\n): React.ReactElement {\n return {children};\n}\n",[],[190,100],"6cb72154-97de-46a0-8954-ef939dbafe50",["D",1788724042065],"// Server-rendered administration for bunch enrollment and access scope.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\nimport { renderToStaticMarkup } from \"npm:react-dom@18.2.0/server\";\nimport type {\n BunchCode,\n BunchDetail,\n BunchSummary,\n} from \"../lib/bunchStore.ts\";\nimport { Cell, DataTable, Row } from \"./dataTable.tsx\";\nimport { pageShell } from \"./pageShell.ts\";\n\nfunction documentMarkup(title: string, node: ReactNode): string {\n return pageShell(title, renderToStaticMarkup(

{node}

));\n}\n\nfunction Timestamp({ value }: { value: string }): React.ReactElement {\n return {value};\n}\n\nfunction BunchNav({ id, active }: { id: number; active: \"details\" | \"pair\" }): React.ReactElement {\n return (\n <>\n

← All bunches

\n \n \n );\n}\n\nexport function bunchIndexDocument(bunches: BunchSummary[]): string {\n return documentMarkup(\n \"Widget favorites — Bunches\",\n <>\n

Bunches

Bunches define enrollment and future access scope; feed settings stay on devices.

+ New bunch

\n {bunches.length === 0\n ?

No bunches yet.

\n : (\n \n {bunches.map((bunch) => (\n \n {bunch.name}\n {bunch.deviceCount}\n \n \n ))}\n \n )}\n ,\n );\n}\n\nexport function bunchNewDocument(): string {\n return documentMarkup(\n \"Widget favorites — New bunch\",\n <>\n

← All bunches

New bunch

\n \n ,\n );\n}\n\nexport function bunchShowDocument(bunch: BunchDetail, saved = false): string {\n return documentMarkup(\n `Widget favorites — ${bunch.name}`,\n <>\n \n

{bunch.name}

\n {saved &&

Saved.

}\n \n

Devices

\n {bunch.devices.length === 0\n ?

No devices registered yet.

\n : (\n \n {bunch.devices.map((device) => (\n \n \n {device.name}\n {device.installId}\n \n \n \n \n ))}\n \n )}\n

\n ,\n );\n}\n\nexport function bunchPairDocument(\n bunch: BunchDetail,\n codes: BunchCode[],\n created: BunchCode | null = null,\n): string {\n return documentMarkup(\n `Widget favorites — Pair to ${bunch.name}`,\n <>\n \n

Pair a device

A device can register into this bunch only with one of its unexpired codes.

\n \n {created && (\n

\n Code: {created.code}{\" — \"}enter this in the app. Expires{\" \"}\n . Reusable until then.\n

\n )}\n

Code history

\n {codes.length === 0\n ?

No codes yet.

\n : (\n \n {codes.map((code) => (\n \n {code.code}\n {code.active ? \"Active\" : \"Expired\"}\n \n \n \n ))}\n \n )}\n

\n ,\n );\n}\n\nexport function bunchNotFoundDocument(): string {\n return documentMarkup(\n \"Widget favorites — Bunch not found\",\n <>\n

← All bunches

Bunch not found

No bunch exists with that internal ID.

\n ,\n );\n}\n",[],[190,88],["D",1788724042065],[345,346,347,348,349,350],[190],"def7bee6-07a1-46f9-b996-60903679dd9e","text.ts","01a07842-d94c-70bd-b232-875b30b3badf",["D",1788724042065],"// Pure string helpers. Domain-free: nothing here knows about games,\n// channels or teams, which is what keeps them safe to call from anywhere\n// in lib/ without creating an import cycle.\n\n// A blunt chop rather than a width measurement — see MAX_CHANNEL_LABEL in\n// catalog.ts for why that is all this needs to be.\nexport function chop(text: string, max: number): string {\n return text.length <= max ? text : `${text.slice(0, max - 1)}…`;\n}\n\nexport function titleCase(slug: string): string {\n return slug\n .split(\"-\")\n .map((word) => word.charAt(0).toUpperCase() + word.slice(1))\n .join(\" \");\n}\n",[],[304,439],"b9d8729a-e095-4f69-adba-ccdbd5d802ab","sourceStore.ts","01a07842-d94c-70bd-b232-7fc677f9f7bf",["D",1788724042065],"// Read-only projection of source definitions and their device assignments.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type SourceKind = \"games\" | \"messages\" | \"moon\";\n\nexport type SourceSummary = {\n id: number;\n kind: SourceKind;\n description: string;\n settingsSchema: unknown;\n createdAt: string;\n updatedAt: string;\n deviceCount: number;\n};\n\nexport type SourceDeviceView = {\n assignmentId: number;\n deviceId: number;\n installId: string;\n name: string;\n priority: number;\n settings: unknown;\n createdAt: string;\n updatedAt: string;\n};\n\nexport type SourceDetail = SourceSummary & {\n devices: SourceDeviceView[];\n};\n\nfunction parseJson(raw: string | null): unknown {\n if (raw == null) return {};\n try {\n return JSON.parse(raw);\n } catch {\n return raw;\n }\n}\n\nexport async function listSources(): Promise {\n const result = await sqlite.execute(`\n SELECT\n s.id,\n s.kind,\n s.description,\n s.settings_schema,\n s.created_at,\n s.updated_at,\n COUNT(ds.id) AS device_count\n FROM sources s\n LEFT JOIN device_sources ds ON ds.source_id = s.id\n GROUP BY s.id\n ORDER BY s.kind COLLATE NOCASE, s.id\n `);\n\n return (result.rows as {\n id: number;\n kind: SourceKind;\n description: string;\n settings_schema: string | null;\n created_at: string;\n updated_at: string;\n device_count: number;\n }[]).map((row) => ({\n id: row.id,\n kind: row.kind,\n description: row.description,\n settingsSchema: parseJson(row.settings_schema),\n createdAt: row.created_at,\n updatedAt: row.updated_at,\n deviceCount: Number(row.device_count),\n }));\n}\n\nexport async function getSource(id: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT\n s.id,\n s.kind,\n s.description,\n s.settings_schema,\n s.created_at,\n s.updated_at,\n ds.id AS assignment_id,\n ds.priority,\n ds.settings,\n ds.created_at AS assignment_created_at,\n ds.updated_at AS assignment_updated_at,\n d.id AS device_id,\n d.install_id,\n d.name\n FROM sources s\n LEFT JOIN device_sources ds ON ds.source_id = s.id\n LEFT JOIN devices d ON d.id = ds.device_id\n WHERE s.id = ?\n ORDER BY d.name COLLATE NOCASE, d.id, ds.id\n `,\n args: [id],\n });\n\n const rows = result.rows as {\n id: number;\n kind: SourceKind;\n description: string;\n settings_schema: string | null;\n created_at: string;\n updated_at: string;\n assignment_id: number | null;\n priority: number | null;\n settings: string | null;\n assignment_created_at: string | null;\n assignment_updated_at: string | null;\n device_id: number | null;\n install_id: string | null;\n name: string | null;\n }[];\n\n const first = rows[0];\n if (!first) return null;\n\n const devices = rows.flatMap((row) => {\n if (\n row.assignment_id == null ||\n row.priority == null ||\n row.settings == null ||\n row.assignment_created_at == null ||\n row.assignment_updated_at == null ||\n row.device_id == null ||\n row.install_id == null ||\n row.name == null\n ) {\n return [];\n }\n\n return [{\n assignmentId: row.assignment_id,\n deviceId: row.device_id,\n installId: row.install_id,\n name: row.name,\n priority: row.priority,\n settings: parseJson(row.settings),\n createdAt: row.assignment_created_at,\n updatedAt: row.assignment_updated_at,\n }];\n });\n\n return {\n id: first.id,\n kind: first.kind,\n description: first.description,\n settingsSchema: parseJson(first.settings_schema),\n createdAt: first.created_at,\n updatedAt: first.updated_at,\n deviceCount: devices.length,\n devices,\n };\n}\n",[],[304,446],"b300c587-7d27-45fd-80d9-0cfafcfc400f","resolver.ts","01a07842-d94c-70bd-b232-79a0f574bb1f",["D",1788724084833],"// Parent-side source assignment types and status projection.\n// Feed execution and request normalization belong to the sibling provider.\n\nexport type GamesSettings = { teams: string[] };\n\nexport type ResolverPassthrough = {\n d?: string | null;\n tz?: string | null;\n};\n\nexport type DataFeed = \"games\" | \"messages\" | \"moon\";\n\nexport type DeviceSourceSelection = {\n kind: DataFeed;\n settings: unknown;\n};\n\nfunction isRecord(value: unknown): value is Record {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction stringArray(value: unknown): string[] {\n return Array.isArray(value)\n ? value.filter((item): item is string => typeof item === \"string\")\n : [];\n}\n\nexport function resolveDeviceSource(\n source: DeviceSourceSelection,\n): { games: GamesSettings } {\n const settings = isRecord(source.settings) ? source.settings : {};\n return {\n games: {\n teams: stringArray(settings.teams),\n },\n };\n}\n",[],[304,453],"bbf5f505-3d25-49b6-9b6c-2ae510675e2e","push.ts","01a07842-d94c-70bd-b232-75920551297d",["D",1788724042065],"// Best-effort APNs delivery for a device or every device attached to a source.\n// Native WidgetKit pushes are preferred; older app-background tokens are a migration fallback.\n// Deterministic tests stop at the token lookup seam because delivery hits Apple's live endpoint.\n//\n// Requires APNS_KEY_ID, APNS_TEAM_ID, and APNS_AUTH_KEY (the PEM-armored .p8\n// contents). Topic env vars are optional and default to the app and widget-extension\n// bundle identifiers. Each uploaded token carries its sandbox or production host.\n\nimport {\n deleteDeviceToken,\n type DevicePushToken,\n getTokenForDevice,\n getTokensForSource,\n type PushEnvironment,\n} from \"./deviceTokenStore.ts\";\n\nconst APNS_KEY_ID = Deno.env.get(\"APNS_KEY_ID\");\nconst APNS_TEAM_ID = Deno.env.get(\"APNS_TEAM_ID\");\nconst APNS_AUTH_KEY = Deno.env.get(\"APNS_AUTH_KEY\");\nconst APNS_APP_TOPIC = Deno.env.get(\"APNS_APP_TOPIC\") ?? \"plusjade.clark-view\";\nconst APNS_WIDGET_TOPIC = Deno.env.get(\"APNS_WIDGET_TOPIC\")\n ?? \"plusjade.clark-view.ClarkViewWidget.push-type.widgets\";\n\nfunction base64UrlFromBytes(bytes: Uint8Array): string {\n let binary = \"\";\n for (const byte of bytes) binary += String.fromCharCode(byte);\n return btoa(binary).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nfunction base64UrlFromString(value: string): string {\n return base64UrlFromBytes(new TextEncoder().encode(value));\n}\n\nfunction pkcs8KeyFromPem(pem: string): Promise {\n const der = pem\n .replace(/-----BEGIN PRIVATE KEY-----/, \"\")\n .replace(/-----END PRIVATE KEY-----/, \"\")\n .replace(/\\s+/g, \"\");\n const bytes = Uint8Array.from(atob(der), (character) => character.charCodeAt(0));\n return crypto.subtle.importKey(\n \"pkcs8\",\n bytes,\n { name: \"ECDSA\", namedCurve: \"P-256\" },\n false,\n [\"sign\"],\n );\n}\n\nlet cachedToken: { jwt: string; mintedAt: number } | null = null;\nconst TOKEN_TTL_SECONDS = 50 * 60;\n\nasync function authToken(): Promise {\n if (!APNS_KEY_ID || !APNS_TEAM_ID || !APNS_AUTH_KEY) return null;\n const now = Math.floor(Date.now() / 1000);\n if (cachedToken && now - cachedToken.mintedAt < TOKEN_TTL_SECONDS) {\n return cachedToken.jwt;\n }\n\n const header = base64UrlFromString(JSON.stringify({ alg: \"ES256\", kid: APNS_KEY_ID }));\n const claims = base64UrlFromString(JSON.stringify({ iss: APNS_TEAM_ID, iat: now }));\n const signingInput = `${header}.${claims}`;\n const key = await pkcs8KeyFromPem(APNS_AUTH_KEY);\n const signature = await crypto.subtle.sign(\n { name: \"ECDSA\", hash: \"SHA-256\" },\n key,\n new TextEncoder().encode(signingInput),\n );\n const jwt = `${signingInput}.${base64UrlFromBytes(new Uint8Array(signature))}`;\n cachedToken = { jwt, mintedAt: now };\n return jwt;\n}\n\ninterface DeliveryResult {\n ok: boolean;\n deadToken: boolean;\n}\n\nasync function sendAPNs(\n token: string,\n kind: DevicePushToken[\"kind\"],\n environment: PushEnvironment,\n): Promise {\n const jwt = await authToken();\n if (!jwt) return { ok: false, deadToken: false };\n\n const isWidget = kind === \"widget\";\n const host = environment === \"production\"\n ? \"api.push.apple.com\"\n : \"api.sandbox.push.apple.com\";\n const response = await fetch(`https://${host}/3/device/${token}`, {\n method: \"POST\",\n headers: {\n authorization: `bearer ${jwt}`,\n \"apns-topic\": isWidget ? APNS_WIDGET_TOPIC : APNS_APP_TOPIC,\n \"apns-push-type\": isWidget ? \"widgets\" : \"background\",\n ...(isWidget ? {} : { \"apns-priority\": \"5\" }),\n },\n body: JSON.stringify(\n isWidget\n ? { aps: { \"content-changed\": true } }\n : { aps: { \"content-available\": 1 } },\n ),\n });\n if (response.ok) return { ok: true, deadToken: false };\n\n const reason = await response.json()\n .then((body) => (body as { reason?: string })?.reason)\n .catch(() => null);\n return {\n ok: false,\n deadToken: response.status === 410 || reason === \"BadDeviceToken\",\n };\n}\n\n// Kept as a narrow compatibility seam for any existing script-level callers.\nexport function sendSilentPush(\n token: string,\n environment: PushEnvironment = \"sandbox\",\n): Promise {\n return sendAPNs(token, \"app-background\", environment);\n}\n\nexport function sendWidgetPush(\n token: string,\n environment: PushEnvironment = \"sandbox\",\n): Promise {\n return sendAPNs(token, \"widget\", environment);\n}\n\nasync function notifyDevices(devices: DevicePushToken[]): Promise {\n await Promise.all(devices.map(async (device) => {\n const { deadToken } = await sendAPNs(\n device.token,\n device.kind,\n device.environment,\n );\n if (deadToken) await deleteDeviceToken(device.deviceId, device.kind);\n }));\n}\n\nexport async function notifyDevice(deviceId: number): Promise {\n const device = await getTokenForDevice(deviceId);\n if (device) await notifyDevices([device]);\n}\n\nexport async function notifySourceDevices(\n kind: \"games\" | \"messages\" | \"moon\",\n): Promise {\n await notifyDevices(await getTokensForSource(kind));\n}\n",[],[304,460],"f9b5a067-dcc2-4892-876e-0ffdb61eb27e","presentation.ts","01a07842-d94c-70bd-b232-70a6041b7feb",["D",1788724042065],"// Versioned device-owned presentation values for the native WidgetKit renderer.\n\nexport const SUPPORTED_WIDGET_TEMPLATES = [\"beacon\"] as const;\nconst STORED_WIDGET_TEMPLATES = [\"beacon\", \"standard-v1\"] as const;\n\nexport type WidgetTemplate = (typeof STORED_WIDGET_TEMPLATES)[number];\n\nexport type WidgetPresentation = {\n version: 2;\n template: WidgetTemplate;\n rootSurface: {\n light: string;\n dark: string;\n };\n};\n\nexport const DEFAULT_WIDGET_PRESENTATION: WidgetPresentation = {\n version: 2,\n template: \"beacon\",\n rootSurface: {\n light: \"#FFFFFF\",\n dark: \"#000000\",\n },\n};\n\n// Compatibility name for older internal imports; the control is now Beacon.\nexport const CONTROL_WIDGET_PRESENTATION = DEFAULT_WIDGET_PRESENTATION;\nexport const INITIAL_DEVICE_PRESENTATION = DEFAULT_WIDGET_PRESENTATION;\n\nfunction isRecord(value: unknown): value is Record {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction normalizedHex(value: unknown): string | null {\n if (typeof value !== \"string\" || !/^#[0-9a-f]{6}$/i.test(value)) return null;\n return value.toUpperCase();\n}\n\nfunction storedTemplate(value: unknown): WidgetTemplate {\n return typeof value === \"string\"\n && STORED_WIDGET_TEMPLATES.includes(value as WidgetTemplate)\n ? value as WidgetTemplate\n : DEFAULT_WIDGET_PRESENTATION.template;\n}\n\nexport function parseStoredPresentation(raw: unknown): WidgetPresentation {\n let value = raw;\n if (typeof value === \"string\") {\n try {\n value = JSON.parse(value);\n } catch {\n return DEFAULT_WIDGET_PRESENTATION;\n }\n }\n if (!isRecord(value) || value.version !== 2 || !isRecord(value.rootSurface)) {\n return DEFAULT_WIDGET_PRESENTATION;\n }\n\n return {\n version: 2,\n template: storedTemplate(value.template),\n rootSurface: {\n light: normalizedHex(value.rootSurface.light)\n ?? DEFAULT_WIDGET_PRESENTATION.rootSurface.light,\n dark: normalizedHex(value.rootSurface.dark)\n ?? DEFAULT_WIDGET_PRESENTATION.rootSurface.dark,\n },\n };\n}\n\nexport function presentationFromForm(\n template: unknown,\n lightRootSurface: unknown,\n darkRootSurface: unknown,\n): WidgetPresentation | null {\n if (\n typeof template !== \"string\"\n || !SUPPORTED_WIDGET_TEMPLATES.includes(\n template as (typeof SUPPORTED_WIDGET_TEMPLATES)[number],\n )\n ) return null;\n const light = normalizedHex(lightRootSurface);\n const dark = normalizedHex(darkRootSurface);\n if (!light || !dark) return null;\n\n return {\n version: 2,\n template: template as (typeof SUPPORTED_WIDGET_TEMPLATES)[number],\n rootSurface: {\n light,\n dark,\n },\n };\n}\n",[],[304,467],"474ee1d2-e613-42ed-bb25-5afb2cd5798a","deviceTokenStore.ts","01a07842-d94c-70bd-b232-65445e7ce3a4",["D",1788724042065],"// APNs token persistence keyed by the public install identifier.\n// Native widget tokens are preferred; legacy app-background tokens keep older beta builds working.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { DataFeed } from \"./resolver.ts\";\n\nexport type PushKind = \"app-background\" | \"widget\";\nexport type PushEnvironment = \"sandbox\" | \"production\";\n\nexport interface DevicePushToken {\n deviceId: string;\n token: string;\n kind: PushKind;\n environment: PushEnvironment;\n}\n\nlet schemaReady: Promise | null = null;\n\nexport function ensureDeviceTokenSchema(): Promise {\n if (!schemaReady) {\n schemaReady = (async () => {\n await sqlite.batch([\n {\n sql: `\n CREATE TABLE IF NOT EXISTS device_tokens (\n device_id TEXT PRIMARY KEY,\n apns_token TEXT NOT NULL,\n updated_at TEXT NOT NULL\n )\n `,\n },\n {\n sql: `\n CREATE TABLE IF NOT EXISTS device_push_tokens (\n device_id TEXT NOT NULL,\n push_kind TEXT NOT NULL CHECK(push_kind IN ('app-background', 'widget')),\n apns_token TEXT NOT NULL,\n apns_environment TEXT NOT NULL DEFAULT 'sandbox'\n CHECK(apns_environment IN ('sandbox', 'production')),\n updated_at TEXT NOT NULL,\n PRIMARY KEY(device_id, push_kind)\n )\n `,\n },\n ]);\n try {\n await sqlite.execute(`\n ALTER TABLE device_push_tokens\n ADD COLUMN apns_environment TEXT NOT NULL DEFAULT 'sandbox'\n CHECK(apns_environment IN ('sandbox', 'production'))\n `);\n } catch (error) {\n if (!(error instanceof Error) || !error.message.includes(\"duplicate column name\")) {\n throw error;\n }\n }\n await sqlite.execute(`\n INSERT OR IGNORE INTO device_push_tokens (\n device_id,\n push_kind,\n apns_token,\n apns_environment,\n updated_at\n )\n SELECT device_id, 'app-background', apns_token, 'sandbox', updated_at\n FROM device_tokens\n `);\n })().catch((error) => {\n schemaReady = null;\n throw error;\n });\n }\n return schemaReady;\n}\n\nfunction nowIso(): string {\n return new Date().toISOString();\n}\n\nexport async function saveDeviceToken(\n installId: string,\n token: string,\n kind: PushKind,\n environment: PushEnvironment,\n active: boolean,\n): Promise {\n await ensureDeviceTokenSchema();\n if (!active) {\n await deleteDeviceToken(installId, kind);\n return;\n }\n\n await sqlite.execute({\n sql: `\n INSERT INTO device_push_tokens (\n device_id,\n push_kind,\n apns_token,\n apns_environment,\n updated_at\n )\n VALUES (?, ?, ?, ?, ?)\n ON CONFLICT(device_id, push_kind) DO UPDATE SET\n apns_token = excluded.apns_token,\n apns_environment = excluded.apns_environment,\n updated_at = excluded.updated_at\n `,\n args: [installId, kind, token, environment, nowIso()],\n });\n}\n\nexport async function deleteDeviceToken(\n installId: string,\n kind: PushKind,\n): Promise {\n await ensureDeviceTokenSchema();\n await sqlite.execute({\n sql: \"DELETE FROM device_push_tokens WHERE device_id = ? AND push_kind = ?\",\n args: [installId, kind],\n });\n}\n\nexport async function getTokenForDevice(\n deviceId: number,\n): Promise {\n await ensureDeviceTokenSchema();\n const result = await sqlite.execute({\n sql: `\n SELECT dt.device_id, dt.apns_token, dt.push_kind, dt.apns_environment\n FROM devices d\n JOIN device_push_tokens dt ON dt.device_id = d.install_id\n WHERE d.id = ?\n ORDER BY CASE dt.push_kind WHEN 'widget' THEN 0 ELSE 1 END\n LIMIT 1\n `,\n args: [deviceId],\n });\n const row = result.rows[0] as {\n device_id: string;\n apns_token: string;\n push_kind: PushKind;\n apns_environment: PushEnvironment;\n } | undefined;\n return row\n ? {\n deviceId: row.device_id,\n token: row.apns_token,\n kind: row.push_kind,\n environment: row.apns_environment,\n }\n : null;\n}\n\nexport async function getTokensForSource(\n kind: DataFeed,\n): Promise {\n await ensureDeviceTokenSchema();\n const result = await sqlite.execute({\n sql: `\n SELECT DISTINCT\n dt.device_id,\n dt.apns_token,\n dt.push_kind,\n dt.apns_environment\n FROM device_push_tokens dt\n JOIN devices d ON d.install_id = dt.device_id\n JOIN device_sources ds ON ds.device_id = d.id\n JOIN sources s ON s.id = ds.source_id\n WHERE s.kind = ?\n AND (\n dt.push_kind = 'widget'\n OR NOT EXISTS (\n SELECT 1\n FROM device_push_tokens preferred\n WHERE preferred.device_id = dt.device_id\n AND preferred.push_kind = 'widget'\n )\n )\n ORDER BY dt.device_id\n `,\n args: [kind],\n });\n return (result.rows as {\n device_id: string;\n apns_token: string;\n push_kind: PushKind;\n apns_environment: PushEnvironment;\n }[]).map((row) => ({\n deviceId: row.device_id,\n token: row.apns_token,\n kind: row.push_kind,\n environment: row.apns_environment,\n }));\n}\n",[],[304,474],"1bdee4c9-4e3a-4dcb-9b70-e6eba9828e53","deviceStore.ts","01a07842-d94c-70bd-b232-6065327d1005",["D",1788724042065],"// Device-centric persistence for browser inspection and source assignment.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { SourceKind } from \"./sourceStore.ts\";\nimport {\n parseStoredPresentation,\n type WidgetPresentation,\n} from \"./presentation.ts\";\n\nexport type DeviceSummary = {\n id: number;\n installId: string;\n name: string;\n createdAt: string;\n updatedAt: string;\n sourceCount: number;\n};\n\nexport type DeviceSourceView = {\n assignmentId: number;\n sourceId: number;\n kind: SourceKind;\n description: string;\n priority: number;\n settings: unknown;\n settingsSchema: unknown;\n createdAt: string;\n updatedAt: string;\n};\n\nexport type DeviceDetail = DeviceSummary & {\n presentation: WidgetPresentation;\n sources: DeviceSourceView[];\n};\n\nexport type AvailableSource = {\n id: number;\n kind: SourceKind;\n description: string;\n settingsSchema: unknown;\n};\n\nfunction parseJson(raw: string | null): unknown {\n if (raw == null) return {};\n try {\n return JSON.parse(raw);\n } catch {\n return raw;\n }\n}\n\nfunction nowIso(): string {\n return new Date().toISOString();\n}\n\nfunction mapSourceRow(row: {\n assignment_id: number;\n source_id: number;\n kind: SourceKind;\n description: string;\n priority: number;\n settings: string;\n settings_schema: string;\n assignment_created_at: string;\n assignment_updated_at: string;\n}): DeviceSourceView {\n return {\n assignmentId: row.assignment_id,\n sourceId: row.source_id,\n kind: row.kind,\n description: row.description,\n priority: row.priority,\n settings: parseJson(row.settings),\n settingsSchema: parseJson(row.settings_schema),\n createdAt: row.assignment_created_at,\n updatedAt: row.assignment_updated_at,\n };\n}\n\nexport async function listDevices(): Promise {\n const result = await sqlite.execute(`\n SELECT\n d.id, d.install_id, d.name, d.created_at, d.updated_at,\n COUNT(ds.id) AS source_count\n FROM devices d\n LEFT JOIN device_sources ds ON ds.device_id = d.id\n GROUP BY d.id\n ORDER BY d.name COLLATE NOCASE, d.id\n `);\n return (result.rows as {\n id: number; install_id: string; name: string; created_at: string;\n updated_at: string; source_count: number;\n }[]).map((row) => ({\n id: row.id,\n installId: row.install_id,\n name: row.name,\n createdAt: row.created_at,\n updatedAt: row.updated_at,\n sourceCount: Number(row.source_count),\n }));\n}\n\nexport async function getDevice(id: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT\n d.id, d.install_id, d.name, d.created_at, d.updated_at, d.presentation,\n ds.id AS assignment_id, ds.priority, ds.settings,\n ds.created_at AS assignment_created_at,\n ds.updated_at AS assignment_updated_at,\n s.id AS source_id, s.kind, s.description, s.settings_schema\n FROM devices d\n LEFT JOIN device_sources ds ON ds.device_id = d.id\n LEFT JOIN sources s ON s.id = ds.source_id\n WHERE d.id = ?\n ORDER BY ds.priority ASC, ds.id ASC\n `,\n args: [id],\n });\n const rows = result.rows as {\n id: number; install_id: string; name: string; created_at: string; updated_at: string;\n presentation: string;\n assignment_id: number | null; priority: number | null; settings: string | null;\n assignment_created_at: string | null; assignment_updated_at: string | null;\n source_id: number | null; kind: SourceKind | null; description: string | null;\n settings_schema: string | null;\n }[];\n const first = rows[0];\n if (!first) return null;\n\n const sources = rows.flatMap((row) => {\n if (\n row.assignment_id == null || row.source_id == null || row.priority == null ||\n row.settings == null || row.assignment_created_at == null ||\n row.assignment_updated_at == null || row.kind == null ||\n row.description == null || row.settings_schema == null\n ) return [];\n return [mapSourceRow({\n assignment_id: row.assignment_id,\n source_id: row.source_id,\n kind: row.kind,\n description: row.description,\n priority: row.priority,\n settings: row.settings,\n settings_schema: row.settings_schema,\n assignment_created_at: row.assignment_created_at,\n assignment_updated_at: row.assignment_updated_at,\n })];\n });\n\n return {\n id: first.id,\n installId: first.install_id,\n name: first.name,\n createdAt: first.created_at,\n updatedAt: first.updated_at,\n sourceCount: sources.length,\n presentation: parseStoredPresentation(first.presentation),\n sources,\n };\n}\n\nexport async function getDeviceByInstallId(installId: string): Promise {\n const result = await sqlite.execute({\n sql: \"SELECT id FROM devices WHERE install_id = ?\",\n args: [installId],\n });\n const row = result.rows[0] as { id: number } | undefined;\n return row ? getDevice(Number(row.id)) : null;\n}\n\nexport async function renameDevice(id: number, name: string): Promise {\n const result = await sqlite.execute({\n sql: \"UPDATE devices SET name = ?, updated_at = ? WHERE id = ?\",\n args: [name, nowIso(), id],\n });\n return result.rowsAffected === 1;\n}\n\nexport async function updateDevicePresentation(\n id: number,\n presentation: WidgetPresentation,\n): Promise {\n const result = await sqlite.execute({\n sql: \"UPDATE devices SET presentation = ?, updated_at = ? WHERE id = ?\",\n args: [JSON.stringify(presentation), nowIso(), id],\n });\n return result.rowsAffected === 1;\n}\n\nexport async function listAvailableSources(deviceId: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT s.id, s.kind, s.description, s.settings_schema\n FROM sources s\n WHERE NOT EXISTS (\n SELECT 1 FROM device_sources ds\n WHERE ds.device_id = ? AND ds.source_id = s.id\n )\n ORDER BY s.kind COLLATE NOCASE, s.id\n `,\n args: [deviceId],\n });\n return (result.rows as {\n id: number; kind: SourceKind; description: string; settings_schema: string;\n }[]).map((row) => ({\n id: row.id,\n kind: row.kind,\n description: row.description,\n settingsSchema: parseJson(row.settings_schema),\n }));\n}\n\nexport async function getDeviceSource(\n deviceId: number,\n assignmentId: number,\n): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT\n ds.id AS assignment_id, ds.priority, ds.settings,\n ds.created_at AS assignment_created_at,\n ds.updated_at AS assignment_updated_at,\n s.id AS source_id, s.kind, s.description, s.settings_schema\n FROM device_sources ds\n JOIN sources s ON s.id = ds.source_id\n WHERE ds.device_id = ? AND ds.id = ?\n `,\n args: [deviceId, assignmentId],\n });\n const row = result.rows[0] as {\n assignment_id: number; source_id: number; kind: SourceKind; description: string;\n priority: number; settings: string; settings_schema: string;\n assignment_created_at: string; assignment_updated_at: string;\n } | undefined;\n return row ? mapSourceRow(row) : null;\n}\n\nexport async function addDeviceSource(\n deviceId: number,\n sourceId: number,\n priority: number,\n settings: unknown,\n): Promise {\n const timestamp = nowIso();\n const results = await sqlite.batch([\n {\n sql: `\n INSERT INTO device_sources\n (device_id, source_id, priority, settings, created_at, updated_at)\n SELECT ?, s.id, ?, ?, ?, ?\n FROM sources s\n WHERE s.id = ?\n AND EXISTS (SELECT 1 FROM devices d WHERE d.id = ?)\n AND NOT EXISTS (\n SELECT 1 FROM device_sources ds\n WHERE ds.device_id = ? AND ds.source_id = s.id\n )\n RETURNING id\n `,\n args: [\n deviceId, priority, JSON.stringify(settings), timestamp, timestamp,\n sourceId, deviceId, deviceId,\n ],\n },\n {\n sql: \"UPDATE devices SET updated_at = ? WHERE id = ? AND changes() = 1\",\n args: [timestamp, deviceId],\n },\n ]);\n const row = results[0].rows[0] as { id: number } | undefined;\n return row ? Number(row.id) : null;\n}\n\nexport async function updateDeviceSource(\n deviceId: number,\n assignmentId: number,\n priority: number,\n settings: unknown,\n): Promise {\n const timestamp = nowIso();\n const results = await sqlite.batch([\n {\n sql: `\n UPDATE device_sources\n SET priority = ?, settings = ?, updated_at = ?\n WHERE device_id = ? AND id = ?\n `,\n args: [priority, JSON.stringify(settings), timestamp, deviceId, assignmentId],\n },\n {\n sql: `\n UPDATE devices SET updated_at = ?\n WHERE id = ? AND EXISTS (\n SELECT 1 FROM device_sources\n WHERE device_id = ? AND id = ?\n )\n `,\n args: [timestamp, deviceId, deviceId, assignmentId],\n },\n ]);\n return results[0].rowsAffected === 1;\n}\n\nexport async function removeDeviceSource(\n deviceId: number,\n assignmentId: number,\n): Promise {\n const timestamp = nowIso();\n const results = await sqlite.batch([\n {\n sql: \"DELETE FROM device_sources WHERE device_id = ? AND id = ?\",\n args: [deviceId, assignmentId],\n },\n {\n sql: \"UPDATE devices SET updated_at = ? WHERE id = ?\",\n args: [timestamp, deviceId],\n },\n ]);\n return results[0].rowsAffected === 1;\n}\n",[],[304,481],"0f6b0614-6930-45f2-aa9b-0284b5a83f28","deviceSourceStore.ts","01a07842-d94c-70bd-b232-5e0ad8f563a9",["D",1788724042065],"// Widget-facing read seam for a device's presentation and ordered source assignments.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { DeviceSourceSelection } from \"./resolver.ts\";\nimport {\n parseStoredPresentation,\n type WidgetPresentation,\n} from \"./presentation.ts\";\n\nexport type DeviceFeedConfiguration = {\n presentation: WidgetPresentation;\n sources: DeviceSourceSelection[];\n};\n\nexport async function getDeviceFeedConfiguration(\n installId: string,\n): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT d.presentation, s.kind, ds.settings\n FROM devices d\n LEFT JOIN device_sources ds ON ds.device_id = d.id\n LEFT JOIN sources s ON s.id = ds.source_id\n WHERE d.install_id = ?\n ORDER BY ds.priority ASC, ds.id ASC\n `,\n args: [installId],\n });\n const rows = result.rows as {\n presentation: string;\n kind: \"games\" | \"messages\" | \"moon\" | null;\n settings: string | null;\n }[];\n const first = rows[0];\n if (!first) return null;\n\n const sources = rows.flatMap((row) => {\n if (row.kind == null || row.settings == null) return [];\n let settings: unknown = {};\n try {\n settings = JSON.parse(row.settings);\n } catch {\n // Hardened rows are valid JSON; this keeps a corrupt row from crashing lookup.\n }\n return [{ kind: row.kind, settings }];\n });\n return {\n presentation: parseStoredPresentation(first.presentation),\n sources,\n };\n}\n",[],[304,488],"a26d3dc6-6fea-423c-83eb-201315dff747","deviceFeedClient.ts","01a07842-d94c-70bd-b232-583b148a1af2",3,["D",1788724088698],"// Authenticated client for database-backed work owned by the sibling feed val.\n\nimport type { WidgetPresentation } from \"./presentation.ts\";\nimport type {\n DeviceSourceSelection,\n ResolverPassthrough,\n} from \"./resolver.ts\";\n\nconst RPC_ORIGIN = \"https://plusjade--0d4599dcaa2611f1be611607ee4eb77e.web.val.run\";\n\nexport type StoredMessage = {\n id: number;\n main: string;\n sub: string;\n timestamp: string;\n};\n\nexport type IngestReport = {\n dates: string[];\n fetched: number;\n stored: number;\n skipped: number;\n bySport: Record;\n};\n\nexport type CachedGamesCoverage = {\n sport: string;\n games: number;\n firstStartMs: number;\n lastStartMs: number;\n ingestedAt: string;\n};\n\nfunction rpcToken(): string {\n const token = Deno.env.get(\"DEVICE_FEED_RPC_TOKEN\");\n if (!token) throw new Error(\"DEVICE_FEED_RPC_TOKEN is not configured\");\n return token;\n}\n\nasync function rpcResponse(\n path: string,\n init: RequestInit = {},\n): Promise {\n const response = await fetch(new URL(path, RPC_ORIGIN), {\n ...init,\n headers: {\n ...init.headers,\n authorization: `Bearer ${rpcToken()}`,\n },\n });\n if (!response.ok) {\n const detail = (await response.text()).slice(0, 240);\n throw new Error(`device-feed RPC ${path} returned ${response.status}: ${detail}`);\n }\n return response;\n}\n\nasync function rpcJson(\n path: string,\n init: RequestInit = {},\n): Promise {\n const response = await rpcResponse(path, init);\n return await response.json() as T;\n}\n\nfunction postJson(path: string, value: unknown): Promise {\n return rpcResponse(path, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify(value),\n });\n}\n\nexport function deviceFeedResponse(\n sources: DeviceSourceSelection[],\n requestUrl: string,\n passthrough: ResolverPassthrough = {},\n presentation?: WidgetPresentation,\n): Promise {\n return postJson(\"/device-feed\", {\n sources,\n requestUrl,\n passthrough,\n presentation,\n });\n}\n\nexport function listMessages(): Promise {\n return rpcJson(\"/messages\");\n}\n\nexport async function createMessage(\n message: Omit,\n): Promise {\n await postJson(\"/messages\", message);\n}\n\nexport async function saveSourcePayload(\n source: string,\n dateKey: string,\n payload: unknown,\n): Promise {\n await postJson(\n `/source-cache/${encodeURIComponent(source)}/${encodeURIComponent(dateKey)}`,\n { payload },\n );\n}\n\nexport function ingestSleeperWindow(days = 7): Promise {\n return rpcJson(\"/cached-games/ingest-sleeper\", {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({ days }),\n });\n}\n\nexport function cachedGamesCoverage(): Promise {\n return rpcJson(\"/cached-games/coverage\");\n}\n\nexport function fetchCachedFibaScoreboard(\n dateKey: string,\n): Promise {\n return rpcJson(`/fiba/${encodeURIComponent(dateKey)}`);\n}\n",[],[304,495],"64880957-1354-421e-9a5f-497ddd4a9931","catalog.ts","01a07842-d94c-70bd-b232-49e35054ee2e",["D",1788724042065],"// The static tables the rest of the val reads: what sports exist, how\n// channels map to display forms and DirecTV numbers, and which team slugs\n// the URL accepts. Data only — no functions, no I/O — so every other module\n// can import it without dragging behaviour along.\n//\n// Ported from app/controllers/games_controller.rb.\n\n// The sport vocabulary: which fetch paths exist and what order groups are\n// emitted in. It stopped being a request allowlist on 2026-09-05, when the\n// `sports[]` param was removed — nothing outside lib/params.ts's\n// orderBySports and the configurator's team-group headings reads it now,\n// and the fetch list is derived from the selected teams. Order is display\n// order, not\n// significance — nfl first because it's the one with a hard weekly cadence,\n// cfb next to it because it shares that cadence (and that Saturday cadence\n// is also why cfb is the sport most exposed to windowDatesFor's 3-day scan:\n// outside a Thu/Fri/Sat window a cfb-only selection legitimately resolves\n// to no slate at all, exactly as an nfl-only one does midweek).\n//\n// An unfiltered slate is no longer reachable at all: cfb alone returned 68\n// games on 2026-09-05, and removing `sports[]` that same day removed the\n// only way to ask for them. `teams[]` is the whole selector now — see\n// docs/widget-param-contract.md.\n//\n// mlb was removed 2026-09-05: a daily 15-game slate for a sport this\n// product doesn't follow was the single largest contributor to that\n// unfiltered size, and no live device assignment referenced an mlb team.\n// Dropping the sport here also drops its 30 TEAMS rows; nothing else in\n// the pipeline is sport-aware, so removal is symmetric with addition.\nexport const SPORTS = [\"nfl\", \"cfb\", \"wnba\", \"nba\", \"fiba\"];\n\n// Which fetch path a sport's games come from — sleeper.ts's live per-date\n// request for everything ported from the Rails app, lib/fiba.ts's\n// source_cache-backed read for fiba. Pure data (no I/O here), read by\n// http/handlers/games.ts to route each requested sport to the right\n// fetcher instead of assuming Sleeper serves all of them. A sport with no\n// entry here is Sleeper's — that's every pre-existing one, so this table\n// only had to grow when fiba (which Sleeper doesn't carry at all) arrived.\nexport const SPORT_SOURCE: Partial> = {\n fiba: \"fiba\",\n};\n\n// Per-sport decoration for the widget's mainText template\n// (render/templates.ts's DEFAULT_WIDGET_TEMPLATE), at explicit request.\n// wnba and nba share the basketball emoji — same sport, same ball, just two\n// separate SPORTS entries (see the nba-deferred note on TEAMS above), and\n// nfl and cfb share the football one for the same reason. Keyed on the\n// same sport string as\n// SPORTS/TEAMS, not a separate vocabulary. `Partial` because a sport added\n// to SPORTS later has no entry until one is deliberately added here — a\n// plain `Record` would claim every sport already does.\nexport const SPORT_EMOJI: Partial> = {\n nfl: \"🏈\",\n cfb: \"🏈\",\n wnba: \"🏀\",\n nba: \"🏀\",\n fiba: \"🏀\",\n};\n\n// Ported from GamesController::NATIONAL_CHANNELS /\n// GamesController::STREAMING_CHANNELS. See that file for the reasoning\n// behind word-boundary matching (plain substring mislabels \"NBCS-PH\" as an\n// NBC affiliate) and the amzn/amazon dual-key (Sleeper sends the long form\n// for mlb/wnba).\n//\n// `label` is this file's own addition, not in the Rails port: the short form\n// the png draws. It exists because Sleeper's raw strings are not sized for a\n// widget — \"Amazon Prime Video\" is 18 characters and ran off the side of a\n// large card. The values are a small bounded set, so they get a mapping\n// rather than a measuring algorithm. AMZN is Sleeper's own abbreviation for\n// that channel (it sends both forms, hence the dual key below), so this\n// shortens to something the source already uses rather than inventing one.\nexport const NATIONAL_CHANNELS: Record = {\n abc: { label: \"ABC\", directv_channel: 4, note: null },\n cbs: { label: \"CBS\", directv_channel: 2, note: null },\n espn: { label: \"ESPN\", directv_channel: 206, note: null },\n ion: { label: \"ION\", directv_channel: 305, note: null },\n nbatv: { label: \"NBATV\", directv_channel: 216, note: null },\n nbc: { label: \"NBC\", directv_channel: 4, note: null },\n tbs: { label: \"TBS\", directv_channel: 247, note: null },\n usa: { label: \"USA\", directv_channel: 242, note: null },\n sportsnet: { label: \"SportsNet\", directv_channel: 691, note: null },\n};\n\nexport const STREAMING_CHANNELS: Record = {\n amzn: { label: \"AMZN\", note: \"computer only\" },\n amazon: { label: \"AMZN\", note: \"computer only\" },\n peacock: { label: \"Peacock\", note: \"computer only\" },\n // ESPN's broadcasts[].names for the fiba source, not a Sleeper value —\n // added here rather than left to the regional fallback because it's the\n // one broadcaster actually confirmed live for the 2026 Women's World Cup.\n \"hbo max\": { label: \"HBO Max\", note: \"computer only\" },\n};\n\n// The backstop for the one category that has no mapping: a regional channel\n// is whatever free text Sleeper sent, so it cannot be bounded by a\n// dictionary the way the two above are. Real values are already short\n// (SNY, MARQ, NESN, MASN, NBCS-PH), so this only fires on something\n// unusual — a blunt chop rather than a width measurement, which is all a\n// backstop needs to be.\nexport const MAX_CHANNEL_LABEL = 10;\n\n// ---- favorite teams ----\n//\n// Slug -> (sport, Sleeper code). The pair matters: Sleeper's abbreviations\n// are NOT unique across sports. `IND` is the Fever (wnba), the Colts (nfl)\n// and the Pacers (nba) — all three confirmed in live data and captured in\n// test/fixtures/files/sleeper/. Matching a bare code would make \"fever\" pull\n// in Colts and Pacers games. `WAS` (nfl + wnba) plus ATL/MIN/CHI/DET/TOR/SEA\n// are the same trap — every one of those codes names a different franchise\n// depending on sport, which is exactly why the pair (not the bare code) is\n// what's stored. This held with mlb in the table (it added BOS/HOU/TB/PHI/PIT\n// to that list, and used `WSH` where nfl/wnba use `WAS`) and still holds\n// without it: two sports are enough to make a bare-code match wrong.\n//\n// A second, separate collision shows up on the *slug* side, not the code\n// side: two mascots can share a name across sports even when their codes\n// don't collide. The standing rule is that the slug claimed first keeps the\n// bare mascot name and the later one takes a city prefix, spelled out rather\n// than abbreviated — titleCase() only capitalizes each hyphen-split word's\n// first letter, so `sf-giants` would render as \"Sf Giants\", not \"SF Giants\".\n// No pair in the table collides today; the rule was established by mlb's\n// Cardinals and Giants (`st-louis-cardinals`, `san-francisco-giants`) losing\n// to their nfl namesakes, and it survives that sport's removal because the\n// next collision will want the same answer.\n//\n// The URL carries slugs, not codes, and this table is the only place the\n// mapping lives. That's deliberate: the iOS app ships a picker, and every\n// app-side change costs a build-number bump on both the app and the widget\n// extension plus an upload. Adding a team here is a val deploy instead. See\n// docs/widget-ios-brief.md.\n//\n// Every code here is asserted against a real captured fixture for its sport\n// — but a fixture only proves the code was valid on its capture date, not\n// that Sleeper still uses it. The runtime echo (rejected/unmatched surfaced\n// to the caller) is the actual drift detector.\nexport type TeamRef = { sport: string; code: string };\n\nexport const TEAMS: Record = {\n // wnba — all 15 teams for the 2026 season (includes the Valkyries,\n // Tempo, and Fire expansions), codes confirmed against live\n // api.sleeper.app/scores responses.\n dream: { sport: \"wnba\", code: \"ATL\" },\n sky: { sport: \"wnba\", code: \"CHI\" },\n sun: { sport: \"wnba\", code: \"CON\" },\n wings: { sport: \"wnba\", code: \"DAL\" },\n valkyries: { sport: \"wnba\", code: \"GSV\" },\n fever: { sport: \"wnba\", code: \"IND\" },\n sparks: { sport: \"wnba\", code: \"LAS\" },\n aces: { sport: \"wnba\", code: \"LVA\" },\n lynx: { sport: \"wnba\", code: \"MIN\" },\n liberty: { sport: \"wnba\", code: \"NYL\" },\n fire: { sport: \"wnba\", code: \"PDX\" },\n mercury: { sport: \"wnba\", code: \"PHO\" },\n storm: { sport: \"wnba\", code: \"SEA\" },\n tempo: { sport: \"wnba\", code: \"TOR\" },\n mystics: { sport: \"wnba\", code: \"WAS\" },\n\n // nfl — all 32 teams, codes confirmed against live\n // api.sleeper.app/scores responses.\n cardinals: { sport: \"nfl\", code: \"ARI\" },\n falcons: { sport: \"nfl\", code: \"ATL\" },\n ravens: { sport: \"nfl\", code: \"BAL\" },\n bills: { sport: \"nfl\", code: \"BUF\" },\n panthers: { sport: \"nfl\", code: \"CAR\" },\n bears: { sport: \"nfl\", code: \"CHI\" },\n bengals: { sport: \"nfl\", code: \"CIN\" },\n browns: { sport: \"nfl\", code: \"CLE\" },\n cowboys: { sport: \"nfl\", code: \"DAL\" },\n broncos: { sport: \"nfl\", code: \"DEN\" },\n lions: { sport: \"nfl\", code: \"DET\" },\n packers: { sport: \"nfl\", code: \"GB\" },\n texans: { sport: \"nfl\", code: \"HOU\" },\n colts: { sport: \"nfl\", code: \"IND\" },\n jaguars: { sport: \"nfl\", code: \"JAX\" },\n chiefs: { sport: \"nfl\", code: \"KC\" },\n chargers: { sport: \"nfl\", code: \"LAC\" },\n rams: { sport: \"nfl\", code: \"LAR\" },\n raiders: { sport: \"nfl\", code: \"LV\" },\n dolphins: { sport: \"nfl\", code: \"MIA\" },\n vikings: { sport: \"nfl\", code: \"MIN\" },\n patriots: { sport: \"nfl\", code: \"NE\" },\n saints: { sport: \"nfl\", code: \"NO\" },\n giants: { sport: \"nfl\", code: \"NYG\" },\n jets: { sport: \"nfl\", code: \"NYJ\" },\n eagles: { sport: \"nfl\", code: \"PHI\" },\n steelers: { sport: \"nfl\", code: \"PIT\" },\n seahawks: { sport: \"nfl\", code: \"SEA\" },\n \"49ers\": { sport: \"nfl\", code: \"SF\" },\n buccaneers: { sport: \"nfl\", code: \"TB\" },\n titans: { sport: \"nfl\", code: \"TEN\" },\n commanders: { sport: \"nfl\", code: \"WAS\" },\n\n // cfb — Sleeper's own `sports[]=cfb`, not a second data source: /scores\n // carries it with the same flat metadata shape nfl uses (away_team /\n // home_team as plain code strings, scores in sibling away_score /\n // home_score fields), so teamCode/teamScore, enrichGames, filterByTeams,\n // groupBySport and pickNextSlate all needed zero changes, and cfb wants no\n // SPORT_SOURCE entry — an absent entry already means \"Sleeper's\".\n //\n // Two teams on purpose. The FBS is ~136 schools, and mapping them all\n // would be a table twice the size of every other sport combined for a\n // widget nobody has asked to point at more than these two — see the\n // fiba block for the same \"roster in hand, not a standing table\" rule.\n //\n // Slugs are mascots, matching every other league here rather than the\n // school abbreviation: teamLabel is titleCase(slug) with no acronym\n // handling, so \"usc\"/\"ucla\" would render as \"Usc\"/\"Ucla\". Neither mascot\n // collides with a slug already in this table. Note that Sleeper's cfb feed\n // does carry a *second* Trojans (TROY, Troy University) — it just has no\n // entry here, and if it ever gets one it needs a city-prefixed slug under\n // the standing rule in this table's header.\n //\n // Codes confirmed against live api.sleeper.app/scores responses\n // (2026-09-05): both schools appear as plain \"USC\" and \"UCLA\". Sleeper\n // gives South Carolina \"SCAR\", so \"USC\" is unambiguously Southern Cal.\n trojans: { sport: \"cfb\", code: \"USC\" },\n bruins: { sport: \"cfb\", code: \"UCLA\" },\n\n // nba — left as-is for now, deferred until later.\n lakers: { sport: \"nba\", code: \"LAL\" },\n warriors: { sport: \"nba\", code: \"GSW\" },\n\n // fiba — the 16-team group stage of the 2026 FIBA Women's Basketball\n // World Cup, confirmed against source_cache's seeded ESPN payloads\n // (2026-09-02). Slugs are full country names, not ESPN's 3-letter codes:\n // teamLabel derives the display name from the slug via titleCase, which\n // has no acronym handling, so a code-based slug like \"usa\" would render\n // as \"Usa\". \"turkey\" (not ESPN's \"Türkiye\") to keep the slug plain ASCII.\n // This entire block is a single flagship tournament's roster, not a\n // standing national-team table — see docs/valtown-brief.md's FIBA\n // section for why the source itself doesn't persist past this window.\n australia: { sport: \"fiba\", code: \"AUS\" },\n belgium: { sport: \"fiba\", code: \"BEL\" },\n china: { sport: \"fiba\", code: \"CHN\" },\n czechia: { sport: \"fiba\", code: \"CZE\" },\n spain: { sport: \"fiba\", code: \"ESP\" },\n france: { sport: \"fiba\", code: \"FRA\" },\n germany: { sport: \"fiba\", code: \"GER\" },\n hungary: { sport: \"fiba\", code: \"HUN\" },\n italy: { sport: \"fiba\", code: \"ITA\" },\n japan: { sport: \"fiba\", code: \"JPN\" },\n \"south-korea\": { sport: \"fiba\", code: \"KOR\" },\n mali: { sport: \"fiba\", code: \"MLI\" },\n nigeria: { sport: \"fiba\", code: \"NGR\" },\n \"puerto-rico\": { sport: \"fiba\", code: \"PUR\" },\n turkey: { sport: \"fiba\", code: \"TUR\" },\n \"united-states\": { sport: \"fiba\", code: \"USA\" },\n};\n\n// This exists to bound a malformed URL, not to express a preference — it\n// must sit above any realistic favorites selection. 12 was fine when the\n// table only had 7 slugs total, but with nfl (32) and wnba (15) fully\n// mapped, a user favoriting a whole league — or several — is normal input,\n// not a malformed URL, and a lower cap would reject them with a drift\n// marker for doing nothing wrong.\n//\n// Deliberately NOT lowered when mlb's 30 rows came out. This is a ceiling\n// on garbage, not a budget tracking the table's size, and it already has\n// to clear a future fully-mapped nba (~30) plus whatever cfb grows into;\n// re-tuning it on every catalog change would be churn with no behavior\n// difference for any real request.\nexport const MAX_TEAMS = 120;\n",[],[304,503],"7321689b-ddc2-4703-acfc-4d195dececaf","bunchStore.ts","01a07842-d94c-70bd-b232-447a38d40c8f",["D",1788724042065],"// Enrollment and access-scope persistence for the device-centric model.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { INITIAL_DEVICE_PRESENTATION } from \"./presentation.ts\";\n\nconst CODE_ALPHABET = \"ABCDEFGHJKMNPQRSTUVWXYZ23456789\";\nconst CODE_LENGTH = 6;\nconst CODE_TTL_SECONDS = 30 * 60;\n\nexport type BunchSummary = {\n id: number;\n name: string;\n createdAt: string;\n updatedAt: string;\n deviceCount: number;\n};\n\nexport type BunchDevice = {\n id: number;\n installId: string;\n name: string;\n createdAt: string;\n updatedAt: string;\n};\n\nexport type BunchDetail = BunchSummary & { devices: BunchDevice[] };\n\nexport type BunchCode = {\n code: string;\n createdAt: string;\n expiresAt: string;\n active: boolean;\n};\n\nfunction nowIso(): string {\n return new Date().toISOString();\n}\n\nfunction randomCode(): string {\n const bytes = crypto.getRandomValues(new Uint8Array(CODE_LENGTH));\n return Array.from(bytes, (byte) => CODE_ALPHABET[byte % CODE_ALPHABET.length]).join(\"\");\n}\n\nexport async function listBunches(): Promise {\n const result = await sqlite.execute(`\n SELECT b.id, b.name, b.created_at, b.updated_at, COUNT(d.id) AS device_count\n FROM bunches b\n LEFT JOIN devices d ON d.bunch_id = b.id\n GROUP BY b.id\n ORDER BY b.name COLLATE NOCASE, b.id\n `);\n return (result.rows as {\n id: number; name: string; created_at: string; updated_at: string; device_count: number;\n }[]).map((row) => ({\n id: row.id,\n name: row.name,\n createdAt: row.created_at,\n updatedAt: row.updated_at,\n deviceCount: Number(row.device_count),\n }));\n}\n\nexport async function createBunch(name: string): Promise {\n const timestamp = nowIso();\n const result = await sqlite.execute({\n sql: \"INSERT INTO bunches (name, created_at, updated_at) VALUES (?, ?, ?) RETURNING id\",\n args: [name, timestamp, timestamp],\n });\n return Number((result.rows[0] as { id: number }).id);\n}\n\nexport async function getBunch(id: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT\n b.id, b.name, b.created_at, b.updated_at,\n d.id AS device_id, d.install_id, d.name AS device_name,\n d.created_at AS device_created_at, d.updated_at AS device_updated_at\n FROM bunches b\n LEFT JOIN devices d ON d.bunch_id = b.id\n WHERE b.id = ?\n ORDER BY d.name COLLATE NOCASE, d.id\n `,\n args: [id],\n });\n const rows = result.rows as {\n id: number; name: string; created_at: string; updated_at: string;\n device_id: number | null; install_id: string | null; device_name: string | null;\n device_created_at: string | null; device_updated_at: string | null;\n }[];\n const first = rows[0];\n if (!first) return null;\n const devices = rows.flatMap((row) =>\n row.device_id == null || row.install_id == null || row.device_name == null ||\n row.device_created_at == null || row.device_updated_at == null\n ? []\n : [{\n id: row.device_id,\n installId: row.install_id,\n name: row.device_name,\n createdAt: row.device_created_at,\n updatedAt: row.device_updated_at,\n }]\n );\n return {\n id: first.id,\n name: first.name,\n createdAt: first.created_at,\n updatedAt: first.updated_at,\n deviceCount: devices.length,\n devices,\n };\n}\n\nexport async function renameBunch(id: number, name: string): Promise {\n const result = await sqlite.execute({\n sql: \"UPDATE bunches SET name = ?, updated_at = ? WHERE id = ?\",\n args: [name, nowIso(), id],\n });\n return result.rowsAffected === 1;\n}\n\nexport async function listBunchCodes(bunchId: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT code, created_at, expires_at,\n CASE WHEN datetime(expires_at) > datetime('now') THEN 1 ELSE 0 END AS active\n FROM bunch_codes\n WHERE bunch_id = ?\n ORDER BY datetime(created_at) DESC, code\n `,\n args: [bunchId],\n });\n return (result.rows as {\n code: string; created_at: string; expires_at: string; active: number;\n }[]).map((row) => ({\n code: row.code,\n createdAt: row.created_at,\n expiresAt: row.expires_at,\n active: Number(row.active) === 1,\n }));\n}\n\nexport async function createBunchCode(bunchId: number): Promise {\n const createdAt = nowIso();\n const expiresAt = new Date(Date.now() + CODE_TTL_SECONDS * 1000).toISOString();\n for (let attempt = 0; attempt < 5; attempt += 1) {\n const code = randomCode();\n try {\n await sqlite.execute({\n sql: \"INSERT INTO bunch_codes (code, bunch_id, expires_at, created_at) VALUES (?, ?, ?, ?)\",\n args: [code, bunchId, expiresAt, createdAt],\n });\n return { code, createdAt, expiresAt, active: true };\n } catch (error) {\n const collision = String(error).includes(\"UNIQUE constraint failed\");\n if (!collision || attempt === 4) throw error;\n }\n }\n throw new Error(\"Could not create a unique bunch code\");\n}\n\nexport type RegisterDeviceResult =\n | { ok: true; deviceId: number }\n | { ok: false; reason: \"unknown\" | \"expired\" };\n\nexport async function registerDevice(\n code: string,\n installId: string,\n submittedName: string | null,\n): Promise {\n const codeResult = await sqlite.execute({\n sql: \"SELECT bunch_id, expires_at FROM bunch_codes WHERE code = ?\",\n args: [code],\n });\n const codeRow = codeResult.rows[0] as { bunch_id: number; expires_at: string } | undefined;\n if (!codeRow) return { ok: false, reason: \"unknown\" };\n if (new Date(codeRow.expires_at).getTime() <= Date.now()) {\n return { ok: false, reason: \"expired\" };\n }\n\n const timestamp = nowIso();\n const cleanName = submittedName?.trim() ?? \"\";\n const fallbackName = `Device ${installId.slice(0, 8)}`;\n const result = await sqlite.execute({\n sql: `\n INSERT INTO devices (\n bunch_id, install_id, name, created_at, updated_at, presentation\n )\n SELECT bunch_id, ?, ?, ?, ?, ?\n FROM bunch_codes\n WHERE code = ? AND datetime(expires_at) > datetime('now')\n ON CONFLICT(install_id) DO UPDATE SET\n bunch_id = excluded.bunch_id,\n name = CASE WHEN ? THEN excluded.name ELSE devices.name END,\n updated_at = excluded.updated_at\n RETURNING id\n `,\n args: [\n installId,\n cleanName || fallbackName,\n timestamp,\n timestamp,\n JSON.stringify(INITIAL_DEVICE_PRESENTATION),\n code,\n cleanName.length > 0,\n ],\n });\n const row = result.rows[0] as { id: number } | undefined;\n if (!row) return { ok: false, reason: \"expired\" };\n return { ok: true, deviceId: Number(row.id) };\n}\n",[],[304,510],["D",1788724042065],[333,334,335,336,337,338,339,340,341,342,343],[304],"be4b6588-7e91-4893-839a-98cf51b3921a","widget.ts","01a07842-d94c-70bd-b232-3941d96d53cf","01a07842-d94c-70bd-b232-3e5642ddcb49",["D",1788724042065],"// Stable iOS-facing routes backed exclusively by the device model.\n\nimport { Hono } from \"npm:hono\";\nimport { resolveDeviceSource } from \"../../lib/resolver.ts\";\nimport { getDeviceFeedConfiguration } from \"../../lib/deviceSourceStore.ts\";\nimport { getDeviceByInstallId } from \"../../lib/deviceStore.ts\";\nimport { deviceFeedResponse } from \"../../lib/deviceFeedClient.ts\";\n\nexport const widgetRoutes = new Hono();\n\nwidgetRoutes.get(\"/resolve\", async (c) => {\n const url = new URL(c.req.url);\n const installId = url.searchParams.get(\"device\");\n const configuration = installId\n ? await getDeviceFeedConfiguration(installId)\n : null;\n return deviceFeedResponse(configuration?.sources ?? [], c.req.url, {\n d: url.searchParams.get(\"d\"),\n tz: url.searchParams.get(\"tz\"),\n }, configuration?.presentation);\n});\n\nwidgetRoutes.get(\"/status/:deviceId\", async (c) => {\n const deviceId = c.req.param(\"deviceId\");\n const device = await getDeviceByInstallId(deviceId);\n if (!device) return c.json({ deviceId, paired: false });\n\n const primary = device.sources[0] ?? null;\n const resolved = primary\n ? resolveDeviceSource({ kind: primary.kind, settings: primary.settings })\n : null;\n return c.json({\n deviceId,\n paired: true,\n name: device.name,\n activeSource: primary?.kind ?? null,\n // `sports` was dropped from this body on 2026-09-05 with the `sports[]`\n // parameter. The containing app's diagnostics decode it optionally, so\n // an un-updated build degrades to showing no Sports row rather than\n // failing to decode.\n teams: resolved?.games.teams ?? [],\n });\n});\n",[],[290,527,520],"routes","c0d67dd8-9a36-4609-9d8b-3be5ca7ca703","sources.ts","01a07842-d94c-70bd-b232-376397eabdbb",["D",1788724042065],"// Source-definition routes; feed content is administered through sibling-val imports.\n\nimport { Hono } from \"npm:hono\";\nimport { createMessage, listMessages } from \"../../lib/deviceFeedClient.ts\";\nimport { notifySourceDevices } from \"../../lib/push.ts\";\nimport { getSource, listSources } from \"../../lib/sourceStore.ts\";\nimport {\n sourceIndexDocument,\n sourceMessagesDocument,\n sourceNotFoundDocument,\n sourceShowDocument,\n} from \"../../render/sourceHtml.tsx\";\n\nfunction positiveInteger(value: string): number | null {\n const number = Number(value);\n return Number.isSafeInteger(number) && number > 0 ? number : null;\n}\n\nexport const sourceRoutes = new Hono();\n\nsourceRoutes.get(\"/sources\", async (c) => {\n return c.html(sourceIndexDocument(await listSources()));\n});\n\nsourceRoutes.get(\"/sources/:id/messages\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(sourceNotFoundDocument(), 404);\n const source = await getSource(id);\n if (!source || source.kind !== \"messages\") {\n return c.html(sourceNotFoundDocument(), 404);\n }\n return c.html(sourceMessagesDocument(\n source,\n await listMessages(),\n c.req.query(\"added\") === \"1\",\n ));\n});\n\nsourceRoutes.post(\"/sources/:id/messages\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.text(\"Messages source not found\", 404);\n const source = await getSource(id);\n if (!source || source.kind !== \"messages\") {\n return c.text(\"Messages source not found\", 404);\n }\n\n const body = await c.req.parseBody();\n const main = String(body.main ?? \"\").trim();\n const sub = String(body.sub ?? \"\").trim();\n const submittedIso = String(body.timestamp ?? \"\").trim();\n const submittedLocal = String(body.timestampLocal ?? \"\").trim();\n const parsed = new Date(submittedIso || `${submittedLocal}:00Z`);\n if (!main || !Number.isFinite(parsed.getTime())) {\n return c.text(\"Main and a valid timestamp are required\", 400);\n }\n\n await createMessage({ main, sub, timestamp: parsed.toISOString() });\n await notifySourceDevices(\"messages\").catch(() => undefined);\n return c.redirect(`/sources/${id}/messages?added=1`, 303);\n});\n\nsourceRoutes.get(\"/sources/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(sourceNotFoundDocument(), 404);\n const source = await getSource(id);\n if (!source) return c.html(sourceNotFoundDocument(), 404);\n return c.html(sourceShowDocument(source));\n});\n",[],[290,527,529],"207c43e0-8ecd-48d4-bf8e-ff92ba8a70ce","root.ts","01a07842-d94c-70bd-b232-332515c2b123",5,["D",1788724095426],"// Browser entry point for the parent administration app.\n\nimport { Hono } from \"npm:hono\";\nimport { rootHtml } from \"../../render/rootHtml.ts\";\n\nexport const rootRoutes = new Hono();\n\nrootRoutes.get(\"/\", (c) => c.html(rootHtml()));\n",[],[290,527,536],"2c478082-628d-4abe-ba93-0d53655e88ae","ingest.ts","01a07842-d94c-70bd-b232-243475439000",["D",1788724042065],"// Central HTTP ingest edge for the sibling device-feed val. External callers\n// still use the parent's stable endpoint; the imported write function stores\n// payloads in the sibling's val-scoped database.\n\nimport { Hono } from \"npm:hono\";\nimport { saveSourcePayload } from \"../../lib/deviceFeedClient.ts\";\n\nexport const ingestRoutes = new Hono();\n\n// Bearer-token gated because this val is public by default and this is the\n// one route group that accepts arbitrary writes. A single shared secret\n// (INGEST_TOKEN) is adequate for a single-operator ingest script; it is not\n// a per-caller credential and shouldn't be treated as one if this ever\n// grows more callers.\ningestRoutes.post(\"/ingest/:source/:dateKey\", async (c) => {\n const expected = Deno.env.get(\"INGEST_TOKEN\");\n if (!expected) return c.json({ ok: false, error: \"INGEST_TOKEN not configured\" }, 503);\n\n const provided = c.req.header(\"authorization\")?.replace(/^Bearer\\s+/i, \"\");\n if (provided !== expected) return c.json({ ok: false, error: \"unauthorized\" }, 401);\n\n const { source, dateKey } = c.req.param();\n let payload: unknown;\n try {\n payload = await c.req.json();\n } catch {\n return c.json({ ok: false, error: \"invalid JSON body\" }, 400);\n }\n\n await saveSourcePayload(source, dateKey, payload);\n return c.json({ ok: true, source, dateKey });\n});\n",[],[290,527,544],"862463a3-971d-4e37-ac29-e44cc91347b0","devices.ts","01a07842-d94c-70bd-b232-221ab882641a",["D",1788724042065],"// Device administration plus parallel new-model registration/status endpoints.\n\nimport { Hono } from \"npm:hono\";\nimport { TEAMS } from \"../../lib/catalog.ts\";\nimport {\n addDeviceSource,\n getDevice,\n getDeviceByInstallId,\n getDeviceSource,\n listAvailableSources,\n listDevices,\n removeDeviceSource,\n renameDevice,\n updateDevicePresentation,\n updateDeviceSource,\n} from \"../../lib/deviceStore.ts\";\nimport {\n presentationFromForm,\n type WidgetPresentation,\n} from \"../../lib/presentation.ts\";\nimport { registerDevice } from \"../../lib/bunchStore.ts\";\nimport { saveDeviceToken } from \"../../lib/deviceTokenStore.ts\";\nimport { notifyDevice } from \"../../lib/push.ts\";\nimport {\n deviceIndexDocument,\n deviceNotFoundDocument,\n devicePresentationDocument,\n devicePreviewDocument,\n deviceShowDocument,\n deviceSourceEditDocument,\n deviceSourceNewDocument,\n type DevicePreviewItem,\n} from \"../../render/deviceHtml.tsx\";\nimport { deviceFeedResponse } from \"../../lib/deviceFeedClient.ts\";\n\nconst TEAM_SLUGS = Object.keys(TEAMS);\n\nfunction positiveInteger(value: string): number | null {\n const number = Number(value);\n return Number.isSafeInteger(number) && number > 0 ? number : null;\n}\n\nfunction asArray(value: unknown): string[] {\n if (Array.isArray(value)) {\n return value.filter((item): item is string => typeof item === \"string\");\n }\n return typeof value === \"string\" ? [value] : [];\n}\n\nfunction settingsFor(\n kind: \"games\" | \"messages\" | \"moon\",\n body: Record,\n): Record {\n if (kind === \"messages\" || kind === \"moon\") return {};\n // A Games assignment is teams plus intraday behavior. `sports[]` is not\n // read even if an old form or a hand-posted body still sends it — the\n // key is dropped rather than stored, so re-saving an assignment written\n // before 2026-09-05 also cleans it out of SQLite.\n return {\n teams: asArray(body[\"teams[]\"]).filter((value) => TEAM_SLUGS.includes(value)),\n intradayFilter: body.intradayFilter === \"intraday\",\n };\n}\n\nasync function previewResponse(\n sources: { kind: \"games\" | \"messages\" | \"moon\"; settings: unknown }[],\n presentation: WidgetPresentation,\n requestUrl: string,\n): Promise<{ items: DevicePreviewItem[]; rawJson: string }> {\n const response = await deviceFeedResponse(sources, requestUrl, {}, presentation);\n const payload = await response.json() as { items: DevicePreviewItem[] };\n return { items: payload.items, rawJson: JSON.stringify(payload, null, 2) };\n}\n\nexport const deviceRoutes = new Hono();\n\ndeviceRoutes.get(\"/devices\", async (c) => {\n return c.html(deviceIndexDocument(await listDevices()));\n});\n\n// Device-named alias for the stable iOS resolver route.\ndeviceRoutes.get(\"/devices/resolve\", async (c) => {\n const url = new URL(c.req.url);\n const installId = url.searchParams.get(\"device\");\n const device = installId ? await getDeviceByInstallId(installId) : null;\n const sources = device?.sources.map((source) => ({\n kind: source.kind,\n settings: source.settings,\n })) ?? [];\n return deviceFeedResponse(sources, c.req.url, {\n d: url.searchParams.get(\"d\"),\n tz: url.searchParams.get(\"tz\"),\n }, device?.presentation);\n});\n\ndeviceRoutes.get(\"/devices/status/:installId\", async (c) => {\n const installId = c.req.param(\"installId\");\n const device = await getDeviceByInstallId(installId);\n if (!device) return c.json({ deviceId: installId, registered: false });\n return c.json({\n deviceId: installId,\n registered: true,\n name: device.name,\n activeSource: device.sources[0]?.kind ?? null,\n sources: device.sources.map((source) => ({\n kind: source.kind,\n priority: source.priority,\n settings: source.settings,\n })),\n });\n});\n\ndeviceRoutes.post(\"/devices/register\", async (c) => {\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false }, 400);\n }\n const values = (body ?? {}) as { code?: unknown; device?: unknown; name?: unknown };\n if (typeof values.code !== \"string\" || typeof values.device !== \"string\") {\n return c.json({ ok: false }, 400);\n }\n const code = values.code.trim().toUpperCase();\n const installId = values.device.trim();\n const name = typeof values.name === \"string\" ? values.name : null;\n if (!code || !installId) return c.json({ ok: false }, 400);\n\n const result = await registerDevice(code, installId, name);\n if (result.ok) return c.json(result);\n if (result.reason === \"expired\") {\n return c.json({ ok: false, message: \"expired\" }, 422);\n }\n return c.json({ ok: false }, 404);\n});\n\ndeviceRoutes.get(\"/devices/:id/sources/new\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n\n const available = await listAvailableSources(id);\n const requestedSource = positiveInteger(c.req.query(\"source\") ?? \"\");\n const selected = requestedSource\n ? available.find((source) => source.id === requestedSource) ?? null\n : null;\n return c.html(deviceSourceNewDocument(device, available, selected));\n});\n\ndeviceRoutes.post(\"/devices/:id/sources\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id || !(await getDevice(id))) return c.text(\"Device not found\", 404);\n\n const body = await c.req.parseBody({ all: true });\n const sourceId = positiveInteger(String(body.sourceId ?? \"\"));\n const priority = positiveInteger(String(body.priority ?? \"\"));\n if (!sourceId || !priority) return c.text(\"Source and priority are required\", 400);\n\n const available = await listAvailableSources(id);\n const source = available.find((candidate) => candidate.id === sourceId);\n if (!source) return c.text(\"Source is not available for this device\", 422);\n\n const assignmentId = await addDeviceSource(\n id,\n sourceId,\n priority,\n settingsFor(source.kind, body),\n );\n if (!assignmentId) return c.text(\"Source could not be attached\", 422);\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/sources/${assignmentId}`, 303);\n});\n\ndeviceRoutes.get(\"/devices/:id/sources/:assignmentId\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const assignmentId = positiveInteger(c.req.param(\"assignmentId\"));\n if (!id || !assignmentId) return c.html(deviceNotFoundDocument(), 404);\n const [device, source] = await Promise.all([\n getDevice(id),\n getDeviceSource(id, assignmentId),\n ]);\n if (!device || !source) return c.html(deviceNotFoundDocument(), 404);\n return c.html(deviceSourceEditDocument(\n device,\n source,\n c.req.query(\"saved\") === \"1\",\n ));\n});\n\ndeviceRoutes.post(\"/devices/:id/sources/:assignmentId\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const assignmentId = positiveInteger(c.req.param(\"assignmentId\"));\n if (!id || !assignmentId) return c.text(\"Source assignment not found\", 404);\n const source = await getDeviceSource(id, assignmentId);\n if (!source) return c.text(\"Source assignment not found\", 404);\n\n const body = await c.req.parseBody({ all: true });\n const priority = positiveInteger(String(body.priority ?? \"\"));\n if (!priority) return c.text(\"Priority must be a positive integer\", 400);\n const updated = await updateDeviceSource(\n id,\n assignmentId,\n priority,\n settingsFor(source.kind, body),\n );\n if (!updated) return c.text(\"Source assignment not found\", 404);\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/sources/${assignmentId}?saved=1`, 303);\n});\n\ndeviceRoutes.post(\"/devices/:id/sources/:assignmentId/delete\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const assignmentId = positiveInteger(c.req.param(\"assignmentId\"));\n if (!id || !assignmentId) return c.text(\"Source assignment not found\", 404);\n const removed = await removeDeviceSource(id, assignmentId);\n if (!removed) return c.text(\"Source assignment not found\", 404);\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}`, 303);\n});\n\ndeviceRoutes.get(\"/devices/:id/presentation\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n return c.html(devicePresentationDocument(\n device,\n c.req.query(\"saved\") === \"1\",\n ));\n});\n\ndeviceRoutes.post(\"/devices/:id/presentation\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id || !(await getDevice(id))) return c.text(\"Device not found\", 404);\n\n const body = await c.req.parseBody();\n const presentation = presentationFromForm(\n body.template,\n body.lightRootSurface,\n body.darkRootSurface,\n );\n if (!presentation) {\n return c.text(\"Template and Light/Dark Mode #RRGGBB colors are required\", 400);\n }\n if (!(await updateDevicePresentation(id, presentation))) {\n return c.text(\"Device not found\", 404);\n }\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/presentation?saved=1`, 303);\n});\n\ndeviceRoutes.get(\"/devices/:id/preview\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n try {\n const preview = await previewResponse(\n device.sources.map((source) => ({\n kind: source.kind,\n settings: source.settings,\n })),\n device.presentation,\n c.req.url,\n );\n return c.html(devicePreviewDocument(device, { ok: true, ...preview }));\n } catch (error) {\n return c.html(devicePreviewDocument(device, {\n ok: false,\n error: error instanceof Error ? error.message : String(error),\n }));\n }\n});\n\ndeviceRoutes.get(\"/devices/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n return c.html(deviceShowDocument(device, c.req.query(\"saved\") === \"1\"));\n});\n\ndeviceRoutes.post(\"/devices/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.text(\"Device not found\", 404);\n const body = await c.req.parseBody();\n const name = String(body.name ?? \"\").trim();\n if (!name) return c.text(\"Name is required\", 400);\n if (!(await renameDevice(id, name))) return c.text(\"Device not found\", 404);\n return c.redirect(`/devices/${id}?saved=1`, 303);\n});\n\n// Stable iOS path; the implementation now redeems bunch codes into devices.\ndeviceRoutes.post(\"/pair\", async (c) => {\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false }, 400);\n }\n const { code, device } = (body ?? {}) as { code?: unknown; device?: unknown };\n if (typeof code !== \"string\" || typeof device !== \"string\") {\n return c.json({ ok: false }, 400);\n }\n\n const normalizedCode = code.trim().toUpperCase();\n const installId = device.trim();\n if (!normalizedCode || !installId) return c.json({ ok: false }, 400);\n\n const result = await registerDevice(normalizedCode, installId, null);\n if (result.ok) return c.json(result, 200);\n if (result.reason === \"expired\") {\n return c.json({ ok: false, message: \"expired\" }, 422);\n }\n return c.json({ ok: false }, 404);\n});\n\ndeviceRoutes.post(\"/device/token\", async (c) => {\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false }, 400);\n }\n const values = (body ?? {}) as {\n device?: unknown;\n token?: unknown;\n kind?: unknown;\n environment?: unknown;\n active?: unknown;\n };\n if (typeof values.device !== \"string\" || typeof values.token !== \"string\") {\n return c.json({ ok: false }, 400);\n }\n\n // Missing kind/environment/active preserves compatibility with beta builds that\n // upload the containing app's sandbox background-push token.\n const kind = values.kind ?? \"app-background\";\n const environment = values.environment ?? \"sandbox\";\n const active = values.active ?? true;\n if (\n (kind !== \"app-background\" && kind !== \"widget\")\n || (environment !== \"sandbox\" && environment !== \"production\")\n || typeof active !== \"boolean\"\n ) {\n return c.json({ ok: false }, 400);\n }\n\n await saveDeviceToken(values.device, values.token, kind, environment, active);\n return c.json({ ok: true });\n});\n",[],[290,527,551],"10e1d032-30f2-460f-8731-02002796c6af","bunches.ts","01a07842-d94c-70bd-b232-1ca877f04829",["D",1788724042065],"// Browser administration for bunch enrollment and access scope.\n\nimport { Hono } from \"npm:hono\";\nimport {\n createBunch,\n createBunchCode,\n getBunch,\n listBunchCodes,\n listBunches,\n renameBunch,\n} from \"../../lib/bunchStore.ts\";\nimport {\n bunchIndexDocument,\n bunchNewDocument,\n bunchNotFoundDocument,\n bunchPairDocument,\n bunchShowDocument,\n} from \"../../render/bunchHtml.tsx\";\n\nfunction positiveInteger(value: string): number | null {\n const number = Number(value);\n return Number.isSafeInteger(number) && number > 0 ? number : null;\n}\n\nexport const bunchRoutes = new Hono();\n\nbunchRoutes.get(\"/bunches\", async (c) => {\n return c.html(bunchIndexDocument(await listBunches()));\n});\n\nbunchRoutes.get(\"/bunches/new\", (c) => c.html(bunchNewDocument()));\n\nbunchRoutes.post(\"/bunches\", async (c) => {\n const body = await c.req.parseBody();\n const name = String(body.name ?? \"\").trim();\n if (!name) return c.text(\"Name is required\", 400);\n const id = await createBunch(name);\n return c.redirect(`/bunches/${id}`, 303);\n});\n\nbunchRoutes.get(\"/bunches/:id/pair\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(bunchNotFoundDocument(), 404);\n const bunch = await getBunch(id);\n if (!bunch) return c.html(bunchNotFoundDocument(), 404);\n return c.html(bunchPairDocument(bunch, await listBunchCodes(id)));\n});\n\nbunchRoutes.post(\"/bunches/:id/codes\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(bunchNotFoundDocument(), 404);\n const bunch = await getBunch(id);\n if (!bunch) return c.html(bunchNotFoundDocument(), 404);\n const created = await createBunchCode(id);\n return c.html(bunchPairDocument(bunch, await listBunchCodes(id), created));\n});\n\nbunchRoutes.get(\"/bunches/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(bunchNotFoundDocument(), 404);\n const bunch = await getBunch(id);\n if (!bunch) return c.html(bunchNotFoundDocument(), 404);\n return c.html(bunchShowDocument(bunch, c.req.query(\"saved\") === \"1\"));\n});\n\nbunchRoutes.post(\"/bunches/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.text(\"Bunch not found\", 404);\n const body = await c.req.parseBody();\n const name = String(body.name ?? \"\").trim();\n if (!name) return c.text(\"Name is required\", 400);\n if (!(await renameBunch(id, name))) return c.text(\"Bunch not found\", 404);\n return c.redirect(`/bunches/${id}?saved=1`, 303);\n});\n",[],[290,527,558],"9a6644b6-21bf-4de5-8748-b075ce965705",["D",1788724042065],[326,327,328,329,330,331],[290,527],"ea6539d6-cc17-40da-b7fb-cfebfa4361eb","handlers","01a07842-d94c-70bd-b232-18601e5e481d",["D",1788724042065],[],[290,569],["D",1788724042065],[324,325],[290],["D",1787009561780],["D",1789532458193],{"_11":12,"_248":94},{"_11":12,"_244":-5,"_93":94,"_25":92,"_245":246,"_247":24},{"_33":234,"_13":16,"_27":30,"_235":198,"_236":82,"_237":238,"_239":202,"_240":198,"_241":36,"_242":14,"_243":12},"ctx",{"_48":-5,"_270":615,"_616":617,"_618":619,"_620":24,"_621":24,"_622":24,"_623":268,"_624":-5,"_625":-7,"_626":-7,"_627":195,"_628":24,"_629":24,"_630":-5,"_631":24,"_632":24,"_633":24,"_634":-5},"ENV",{"_586":587,"_588":589,"_590":83,"_591":592,"_593":594,"_595":596,"_597":598,"_599":600,"_601":602,"_603":604,"_605":606,"_607":608,"_609":610,"_611":612,"_613":614},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History