Available settings

\") === (tab === \"settings\"), \"settings isolation\");\n check(html.includes(\"

Attached devices

\") === (tab === \"devices\"), \"devices isolation\");\n check(html.includes(\"

Stored coverage

\") === (tab === \"diagnostics\"), \"diagnostics isolation\");\n if (tab === \"diagnostics\") check(html.includes(\"1.0 days ahead\"), \"future horizon\");\n}\nfor (const state of [\"unsupported\",\"unavailable\"] as const) {\n const html=sourceShowDocument(source,\"diagnostics\",{state,checkedAt});\n check(html.includes(\"Coverage is unknown\") && !html.includes(\"

Total items

\"), \"unknown is not zero\");\n}\ncheck(sourceShowDocument(source,\"diagnostics\",{state:\"ready\",value:parseDiagnostics(empty,\"arbitrary\"),checkedAt})\n .includes(\"No stored items.\"), \"empty presentation\");\nconsole.log({checks, result:\"passed\"});\n",[],[296,320],"db7b2db0-1bc9-43de-972a-230c0385773f","source-boundary-check.ts","01a08d58-6277-7763-a63c-1e28a2dc492d",25,["D",1789077980130],6,"// Route and composition checks use a disposable device and never send pushes.\nimport app from \"../main.ts\";\nimport {sqlite} from \"https://esm.town/v/std/sqlite/main.ts\";\nimport {addDeviceSource,getDevice,listAvailableSources,updateDeviceSource} from \"../lib/deviceStore.ts\";\nimport {composeDeviceFeed,sourcePointer,sourceRpc} from \"../lib/sourceClient.ts\";\nimport {normalizeItems,phase} from \"../lib/sourceContract.ts\";\nfunction assert(ok:unknown,msg:string):asserts ok {if(!ok)throw new Error(msg);}\nconst stamp=new Date().toISOString(), install=\"source-boundary-fixture-\"+crypto.randomUUID();\nconst d=await sqlite.execute({sql:\"INSERT INTO devices(bunch_id,install_id,name,created_at,updated_at) VALUES(1,?,'Boundary fixture',?,?) RETURNING id\",args:[install,stamp,stamp]});\nconst id=Number(d.rows[0].id);\nconst originalFetch=globalThis.fetch;\nlet providerRequests=0;\nglobalThis.fetch=async(input,init)=>{\n const url=new URL(input instanceof Request?input.url:String(input));\n if(url.hostname.endsWith(\".web.val.run\"))providerRequests++;\n return originalFetch(input,init);\n};\nconst call=(path:string,method=\"GET\")=>app(new Request(\"https://parent.invalid\"+path,{method}));\ntry {\n const empty=await composeDeviceFeed([]);\n const payload=await empty.json();\n assert(payload.schemaVersion===3&&payload.items.length===0,\"empty composition\");\n assert(empty.headers.get(\"x-effective-source-count\")===\"0\"&&empty.headers.get(\"x-effective-sources\")===\"\",\"empty diagnostics\");\n assert(providerRequests===0,\"empty composition fetched provider\");\n for(const route of [\"/config/resolve\",\"/devices/resolve\"]){\n for(const query of [\"\",\"?device=unknown-retirement-fixture\",\"?device=\"+install]){\n const r=await call(route+query),p=await r.json();\n assert(r.ok&&p.schemaVersion===3&&p.items.length===0,\"empty resolver\");\n }\n }\n assert(providerRequests===0,\"unassigned resolver fetched provider\");\n const page=await (await call(\"/devices/\"+id)).text();\n assert(page.includes(\"No sources assigned.\")&&!page.includes(\"starter games\"),\"empty device copy\");\n for(const route of [\"/\",\"/?teams[]=fever&sports[]=nba\"]){\n const r=await call(route);assert(r.ok&&r.headers.get(\"content-type\")?.includes(\"text/html\"),\"browser root\");\n }\n assert((await call(\"/ingest/fiba/2000-01-01\",\"POST\")).status===404,\"retired ingest route\");\n assert((await call(\"/ingest/moon/2000-01-01\",\"POST\")).status===404,\"retired Moon adapter\");\n const available=await listAvailableSources(id);\n assert(available.some(s=>s.id===5)&&available.some(s=>s.id===3),\"available sources\");\n const a=await addDeviceSource(id,5,{teams:[\"rams\"],intradayFilter:false});assert(a,\"NFL assignment\");\n assert(await addDeviceSource(id,3,{}),\"Moon assignment\");\n assert(await updateDeviceSource(id,a,{teams:[\"rams\"],intradayFilter:false}),\"settings update\");\n const device=await getDevice(id);assert(device?.sources.length===2,\"device projection\");\n for(const path of [\"/sources\",\"/sources/5\",\"/sources/3\",\"/devices/\"+id,\"/devices/\"+id+\"/sources/\"+a,\"/devices/\"+id+\"/preview\"]){\n // /sources/:id redirects to its overview tab, so a 3xx is a pass here.\n const r=await call(path);assert(r.ok||r.status===302,`browser route ${path} returned ${r.status}`);assert(!(await r.text()).includes('name=\"priority\"'),\"priority control\");\n }\n for(const route of [\"/config/resolve\",\"/devices/resolve\"]){\n const r=await call(route+\"?device=\"+install+\"&tz=-25200\"),p=await r.json();\n assert(r.ok&&p.schemaVersion===3&&p.items.some((x:any)=>x.id.startsWith(\"5:\"))&&p.items.some((x:any)=>x.id.startsWith(\"3:\")),\"mixed source response\");\n assert(p.items.every((x:any,i:number)=>x.startsAt<1e11&&(i===0||p.items[i-1].startsAt<=x.startsAt)),\"seconds and ordering\");\n // Every item is a window, and the legacy field still mirrors the start for iOS\n // builds that predate it.\n assert(p.items.every((x:any)=>x.expiresAt>x.startsAt&&x.timestamp===x.startsAt),\"window and legacy mirror\");\n // Moon's peak is instantaneous: a one-second window, current at no other instant.\n const moon=p.items.find((x:any)=>x.id.startsWith(\"3:\"));\n assert(moon.expiresAt===moon.startsAt+1,\"an instantaneous item survives composition intact\");\n assert(phase(moon,moon.startsAt-1)===\"upcoming\"&&phase(moon,moon.startsAt)===\"current\"\n &&phase(moon,moon.startsAt+1)===\"expired\",\"instantaneous phase\");\n }\n // A source still publishing a bare timestamp is upgraded rather than rejected.\n const upgraded=normalizeItems([{id:\"legacy\",mainText:\"m\",subText:\"s\",caption:null,emphasized:false,timestamp:1788739200}]);\n assert(upgraded?.[0].startsAt===1788739200&&upgraded?.[0].expiresAt===1788739201,\"legacy item upgraded to an instant\");\n assert(normalizeItems([{id:\"bad\",mainText:\"m\",subText:\"s\",caption:null,emphasized:false,startsAt:1,expiresAt:1}])===null,\"a zero-length window is refused\");\n const status=await (await call(\"/config/status/\"+install)).json();\n assert(status.paired&&status.activeSource===\"moon\"&&Array.isArray(status.teams),\"status compatibility\");\n const p=await sourcePointer(5),desc=await (await sourceRpc(p,\"/v1/descriptor\")).json();\n assert(desc.sourceKey===\"nfl\"&&!desc.capabilities.publish,\"descriptor\");\n console.log(\"PASS: no-provider empty feeds, both resolvers, browser pages, retired ingest, status compatibility and NFL/Moon composition\");\n} finally {\n globalThis.fetch=originalFetch;\n await sqlite.execute({sql:\"DELETE FROM device_sources WHERE device_id=?\",args:[id]});\n await sqlite.execute({sql:\"DELETE FROM devices WHERE id=?\",args:[id]});\n}\n",[],[296,327],"5cb7c605-f22d-49a7-a610-1611a317462f","reminder-check.ts","01a08d58-6277-7763-a63c-1b8eab505918",32,["D",1789078026338],7,"// Proves the reminder boundary: due-predicate selection, single-claim delivery,\n// cancellation, lateness guards and the disabled dry run. Uses disposable fixtures\n// and cleans them up. Sends no real APNs requests.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { reminderFor } from \"../lib/reminderBuilder.ts\";\nimport { drainReminders, remindersEnabled } from \"../lib/reminderDrainer.ts\";\nimport {\n claimReminder,\n DEFAULT_LEAD_SECONDS,\n dueReminders,\n ensureReminderSchema,\n failAbandonedClaims,\n isoFromUnix,\n MAX_LATENESS_SECONDS,\n syncDeviceReminders,\n} from \"../lib/reminderStore.ts\";\nimport { ensureAlertSchema } from \"../lib/alertPush.ts\";\nimport type { Item } from \"../lib/sourceContract.ts\";\n\nfunction assert(value: unknown, message: string) {\n if (!value) throw new Error(message);\n}\n\nconst now = Math.floor(Date.now() / 1000);\nconst device = {\n id: -1,\n installId: \"reminder-check-\" + crypto.randomUUID(),\n leadSeconds: DEFAULT_LEAD_SECONDS,\n tzOffsetSeconds: -25200,\n};\n\n// Two hours is a plausible source-owned duration; `durationSeconds: 1` is the\n// instantaneous case (a moon peak), which must survive queuing like any other.\nfunction item(id: string, startsAt: number, durationSeconds = 7200): Item {\n return {\n id,\n mainText: \"Away @ Home\",\n subText: \"Network\",\n caption: null,\n emphasized: false,\n startsAt,\n expiresAt: startsAt + durationSeconds,\n };\n}\n\n// Lead time is not quantized to the tick: send_after is exact, and the tick only\n// bounds how late delivery can be. A dropdown of quarter-hours would encode a\n// deployment detail into the product.\nconst odd = { ...device, leadSeconds: 50 * 60 };\nconst oddReminder = reminderFor(item(\"5:odd\", now + 3600), odd, now);\nassert(oddReminder?.sendAfter === isoFromUnix(now + 3600 - 50 * 60), \"arbitrary lead is exact\");\nassert(oddReminder?.rule === \"lead:3000\", \"rule carries the lead so leads never collide\");\n\n// Stored times must match Date.toISOString() byte for byte. The `T` separator is the\n// part that matters: SQLite's datetime() emits a space, and a mix of the two would\n// break the due predicate silently, since string order stops being time order.\nconst ISO_UTC = /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/;\nassert(ISO_UTC.test(oddReminder!.eventAt) && ISO_UTC.test(oddReminder!.sendAfter), \"ISO UTC storage format\");\nassert(oddReminder!.sendAfter < oddReminder!.eventAt, \"text timestamps compare chronologically\");\n\n// The lateness cap must clear the drain cadence plus the scheduler's slack, or a row\n// coming due just after a tick is voided rather than sent. Val Town cron has been seen\n// firing ~5 minutes past its configured minute, so a cap equal to the cadence drops\n// reminders silently. Kept as a relationship, not a number, so retuning the cadence\n// cannot quietly reintroduce it.\nconst DRAIN_INTERVAL_SECONDS = 15 * 60;\nconst OBSERVED_CRON_SLACK_SECONDS = 5 * 60;\nassert(\n MAX_LATENESS_SECONDS > DRAIN_INTERVAL_SECONDS + OBSERVED_CRON_SLACK_SECONDS,\n \"lateness cap must exceed drain cadence plus cron slack\",\n);\n\n// The window is carried into the ledger so send-time policy can ask whether the\n// event is over without another read. An instantaneous item queues like any other:\n// it is the start that schedules a reminder, and a one-second expiry is not a null.\nconst windowed = reminderFor(item(\"5:window\", now + 7200), device, now);\nassert(windowed?.expiresAt === isoFromUnix(now + 7200 + 7200), \"the item's expiry reaches the ledger\");\nconst moment = reminderFor(item(\"3:peak\", now + 7200, 1), device, now);\nassert(moment?.expiresAt === isoFromUnix(now + 7201), \"an instantaneous item queues with its one-second window\");\nassert(moment!.eventAt < moment!.expiresAt, \"expiry sorts after the start as text\");\n\nassert(reminderFor(item(\"5:past\", now - 60), device, now) === null, \"started events are not queued\");\nassert(reminderFor(item(\"5:far\", now + 200 * 3600), device, now) === null, \"beyond horizon is not queued\");\n\nconst clocked = reminderFor(item(\"5:clock\", now + 7200), device, now);\nassert(/^Starts at \\d{1,2}:\\d{2} (AM|PM)$/.test(clocked?.body ?? \"\"), \"local clock body\");\nconst unknownTz = reminderFor(item(\"5:clock\", now + 7200), { ...device, tzOffsetSeconds: null }, now);\nassert(unknownTz?.body === \"Starts in 60 minutes\", \"no offset names no clock time\");\n\nawait ensureReminderSchema();\nawait ensureAlertSchema();\n\nconst fixture = await sqlite.execute({\n sql: `INSERT INTO devices (bunch_id, install_id, name, created_at, updated_at)\n SELECT (SELECT id FROM bunches ORDER BY id LIMIT 1), ?, ?, ?, ? RETURNING id`,\n args: [device.installId, \"reminder check\", new Date().toISOString(), new Date().toISOString()],\n});\nconst deviceId = Number((fixture.rows[0] as { id: number }).id);\n\ntry {\n // Due means \"send_after has passed and nothing sent it\", not \"falls in this tick's\n // window\". That is what survives a skipped tick or a late-published event.\n await syncDeviceReminders(deviceId, [\n { itemId: \"5:due\", rule: \"lead:3600\", eventAt: isoFromUnix(now + 3540), expiresAt: isoFromUnix(now + 10740), sendAfter: isoFromUnix(now - 60), title: \"Due\", body: \"Body\" },\n { itemId: \"5:later\", rule: \"lead:3600\", eventAt: isoFromUnix(now + 90000), expiresAt: isoFromUnix(now + 97200), sendAfter: isoFromUnix(now + 86400), title: \"Later\", body: \"Body\" },\n ]);\n const due = (await dueReminders(50)).filter((row) => row.deviceId === deviceId);\n assert(due.length === 1 && due[0].itemId === \"5:due\", \"only past-due rows are selected\");\n\n // The claim is the lock. Two racing drains cannot both own one row.\n assert(await claimReminder(due[0].id), \"first claim wins\");\n assert(!await claimReminder(due[0].id), \"second claim is refused\");\n await sqlite.execute({\n sql: \"UPDATE notification_queue SET state='pending', claimed_at=NULL WHERE id=?\",\n args: [due[0].id],\n });\n\n // Re-enqueueing is a no-op; an item that left the feed is cancelled in place.\n await syncDeviceReminders(deviceId, [\n { itemId: \"5:due\", rule: \"lead:3600\", eventAt: isoFromUnix(now + 3540), expiresAt: isoFromUnix(now + 10740), sendAfter: isoFromUnix(now - 60), title: \"Due\", body: \"Body\" },\n ]);\n const counts = await sqlite.execute({\n sql: \"SELECT state, COUNT(*) AS total FROM notification_queue WHERE device_id=? GROUP BY state\",\n args: [deviceId],\n });\n const byState = Object.fromEntries(\n (counts.rows as { state: string; total: number }[]).map((row) => [row.state, Number(row.total)]),\n );\n assert(byState.pending === 1 && byState.void === 1, \"vanished item voided, surviving item kept\");\n\n const drained = await drainReminders({ limit: 50 });\n const settled = await sqlite.execute({\n sql: \"SELECT state, apns_status FROM notification_queue WHERE device_id=? AND item_id='5:due'\",\n args: [deviceId],\n });\n const row = settled.rows[0] as { state: string; apns_status: string };\n if (remindersEnabled()) {\n // With no alert token registered for this disposable install, delivery cannot\n // reach APNs; the row must still be settled rather than left claimed.\n assert(row.state === \"failed\" && row.apns_status === \"NoAlertToken\", \"missing token settles the row\");\n } else {\n assert(row.state === \"disabled\", \"kill switch drains without delivering\");\n assert(!drained.enabled && drained.sent === 0, \"disabled drain sends nothing\");\n }\n\n // A reminder is worthless once its event has started, and nearly so once it is\n // more than a tick overdue. Both are voided at send time rather than delivered,\n // which is what stops a backlog from firing all at once after an outage.\n await syncDeviceReminders(deviceId, [\n { itemId: \"5:started\", rule: \"lead:3600\", eventAt: isoFromUnix(now - 60), expiresAt: isoFromUnix(now + 7140), sendAfter: isoFromUnix(now - 120), title: \"Started\", body: \"Body\" },\n { itemId: \"5:stale\", rule: \"lead:3600\", eventAt: isoFromUnix(now + 3600), expiresAt: isoFromUnix(now + 10800), sendAfter: isoFromUnix(now - 7200), title: \"Stale\", body: \"Body\" },\n { itemId: \"5:over\", rule: \"lead:3600\", eventAt: isoFromUnix(now - 7200), expiresAt: isoFromUnix(now - 60), sendAfter: isoFromUnix(now - 30), title: \"Over\", body: \"Body\" },\n ]);\n await drainReminders({ limit: 50 });\n const guarded = await sqlite.execute({\n sql: `SELECT item_id, state, apns_status FROM notification_queue\n WHERE device_id=? AND item_id IN ('5:started','5:stale','5:over') ORDER BY item_id`,\n args: [deviceId],\n });\n const guards = Object.fromEntries(\n (guarded.rows as { item_id: string; state: string; apns_status: string }[])\n .map((row) => [row.item_id, `${row.state}:${row.apns_status}`]),\n );\n assert(guards[\"5:started\"] === \"void:EventStarted\", \"a started event is never announced\");\n assert(guards[\"5:stale\"] === \"void:TooLate\", \"a badly overdue reminder is dropped, not delivered\");\n // \"Started\" and \"over\" are different facts and settle differently, which is what\n // an expiry-anchored rule will need once one exists.\n assert(guards[\"5:over\"] === \"void:EventExpired\", \"an event already over is recorded as expired\");\n\n // An abandoned claim is failed, never retried: at-most-once resolves the\n // ambiguity of a run that died mid-send against sending.\n await sqlite.execute({\n sql: `UPDATE notification_queue SET state='claimed', claimed_at=?\n WHERE device_id=? AND item_id='5:due'`,\n args: [isoFromUnix(now - 3600), deviceId],\n });\n assert(await failAbandonedClaims() >= 1, \"abandoned claims fail\");\n const abandoned = await sqlite.execute({\n sql: \"SELECT state, apns_status FROM notification_queue WHERE device_id=? AND item_id='5:due'\",\n args: [deviceId],\n });\n assert((abandoned.rows[0] as { apns_status: string }).apns_status === \"AbandonedClaim\", \"abandonment recorded\");\n} finally {\n await sqlite.execute({ sql: \"DELETE FROM notification_queue WHERE device_id=?\", args: [deviceId] });\n await sqlite.execute({ sql: \"DELETE FROM devices WHERE id=?\", args: [deviceId] });\n}\n\nconsole.log(\n `Reminder checks passed (delivery ${remindersEnabled() ? \"enabled\" : \"disabled\"}): ` +\n \"arbitrary leads, horizon and started-event guards, clock text, due predicate, \" +\n \"single claim, cancellation, settlement and abandoned-claim policy. No APNs requests sent.\",\n);\n",[],[296,336],"ffb2fcd5-9a13-4622-bdf1-d2da47d6a0da","presentation-check.ts","01a08d58-6277-7763-a63c-158df64ace5f",["D",1789077774974],"// Deterministic checks for the device presentation contract.\n//\n// Rewritten 2026-09-06. Every assertion here still described the retired v1\n// contract — `fullColor.primarySurface`, and `system-v1`/`future-v2` templates\n// — so this file had been failing since the Beacon migration rather than\n// guarding anything. It now covers the v2 shape actually in use.\n\nimport {\n DEFAULT_WIDGET_PRESENTATION,\n parseStoredPresentation,\n presentationFromForm,\n} from \"../lib/presentation.ts\";\n\nfunction assert(condition: boolean, message: string): void {\n if (!condition) throw new Error(message);\n}\n\nfunction isDefault(value: unknown): boolean {\n return JSON.stringify(value) === JSON.stringify(DEFAULT_WIDGET_PRESENTATION);\n}\n\n// A stored row keeps a template the editor no longer offers, and normalizes\n// its surfaces on the way out.\nconst parsed = parseStoredPresentation(\n '{\"version\":2,\"template\":\"standard-v1\",\"rootSurface\":{\"light\":\"#abcdef\",\"dark\":\"#123456\"}}',\n);\nassert(parsed.template === \"standard-v1\", \"a stored deprecated template should survive a read\");\nassert(parsed.rootSurface.light === \"#ABCDEF\", \"surfaces should normalize to uppercase\");\nassert(parsed.rootSurface.dark === \"#123456\", \"both surfaces should survive\");\n\n// Loss tolerance: anything the contract cannot read becomes the default rather\n// than throwing, because this parses whatever is already in the devices table.\nassert(\n isDefault(parseStoredPresentation(\n '{\"version\":1,\"rootSurface\":{\"light\":\"#abcdef\",\"dark\":\"#123456\"}}',\n )),\n \"an unsupported version should fall back to the default presentation\",\n);\nassert(\n isDefault(parseStoredPresentation('{\"version\":2}')),\n \"a v2 value without rootSurface should fall back to the default presentation\",\n);\nassert(\n isDefault(parseStoredPresentation(\"not json\")),\n \"unparseable stored JSON should fall back to the default presentation\",\n);\nassert(\n parseStoredPresentation(\n '{\"version\":2,\"template\":\"beacon\",\"rootSurface\":{\"light\":\"red\",\"dark\":\"#123456\"}}',\n ).rootSurface.light === DEFAULT_WIDGET_PRESENTATION.rootSurface.light,\n \"a non-contract color should fall back to the default surface\",\n);\n\n// The editor accepts only what SUPPORTED_WIDGET_TEMPLATES currently lists,\n// which is narrower than what a stored row may hold.\nconst form = presentationFromForm(\"beacon\", \"#abcdef\", \"#123456\");\nassert(form?.template === \"beacon\", \"the editor should accept the supported template\");\nassert(form?.rootSurface.light === \"#ABCDEF\", \"a valid form should normalize its surfaces\");\nassert(\n presentationFromForm(\"standard-v1\", \"#abcdef\", \"#123456\") === null,\n \"the editor should reject a stored-only template it no longer offers\",\n);\nassert(\n presentationFromForm(\"beacon\", \"red\", \"#123456\") === null,\n \"the editor should reject non-contract colors\",\n);\n\nconsole.log(\"presentation checks passed\");\n",[],[296,345],"e0bdb672-8097-4b80-8f3c-53ab24db0026","device-token-check.ts","01a08d58-6277-7763-a63c-11f8b6184a2f",["D",1789077774974],"// Read-only checks for the token seam, which is where push.ts's deterministic\n// coverage has to stop — anything past the lookup hits Apple's live endpoint.\n//\n// Guards the 2026-09-06 removal of the `device_tokens` backfill: the schema call\n// must not recreate that table, and lookup must still prefer a device's native\n// widget token over any legacy app-background row.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport {\n ensureDeviceTokenSchema,\n getTokenForDevice,\n} from \"../lib/deviceTokenStore.ts\";\n\nfunction assert(condition: boolean, message: string): void {\n if (!condition) throw new Error(message);\n}\n\nasync function count(sql: string): Promise {\n const result = await sqlite.execute(sql);\n return Number((result.rows[0] as { n: number }).n);\n}\n\nawait ensureDeviceTokenSchema();\n\nassert(\n await count(\n \"SELECT COUNT(*) AS n FROM sqlite_master WHERE type = 'table' AND name = 'device_tokens'\",\n ) === 0,\n \"the schema call must not recreate the retired device_tokens table\",\n);\n\nassert(\n await count(`\n SELECT COUNT(*) AS n\n FROM device_push_tokens t\n LEFT JOIN devices d ON d.install_id = t.device_id\n WHERE d.id IS NULL\n `) === 0,\n \"no token row should reference an install that is not a registered device\",\n);\n\nconst widgetDevice = await sqlite.execute(`\n SELECT d.id\n FROM devices d\n JOIN device_push_tokens t ON t.device_id = d.install_id\n WHERE t.push_kind = 'widget'\n LIMIT 1\n`);\nconst deviceId = (widgetDevice.rows[0] as { id: number } | undefined)?.id;\nassert(deviceId != null, \"expected at least one device with a widget token\");\n\nconst token = await getTokenForDevice(Number(deviceId));\nassert(token !== null, \"lookup should find a token for a device that has one\");\nassert(token?.kind === \"widget\", \"lookup should prefer the widget token\");\n\nconsole.log(\"device token checks passed\");\n",[],[296,352],"4f80ab5b-2997-44c6-b4de-bd46de8f6422","apns-credentials-check.ts","01a08d58-6277-7763-a63c-0e755806ad3a",["D",1789077774974],"// Checks credential shape and signing inside the server runtime without exposing secrets or sending pushes.\nconst names = [\"APNS_TEAM_ID\", \"APNS_KEY_ID\", \"APNS_AUTH_KEY\"];\nconst values = names.map((name) => Deno.env.get(name) ?? \"\");\nconst missing = names.filter((_, index) => !values[index]);\nif (missing.length) {\n console.log(JSON.stringify({ ok: false, missing }));\n} else if (!/^[A-Z0-9]{10}$/.test(values[0]) || !/^[A-Z0-9]{10}$/.test(values[1])) {\n console.log(JSON.stringify({ ok: false, error: \"Team ID and Key ID must each be 10 uppercase letters/digits.\" }));\n} else {\n try {\n const der = values[2].replace(/-----BEGIN PRIVATE KEY-----/, \"\").replace(/-----END PRIVATE KEY-----/, \"\").replace(/\\s+/g, \"\");\n const key = await crypto.subtle.importKey(\"pkcs8\", Uint8Array.from(atob(der), c => c.charCodeAt(0)), { name: \"ECDSA\", namedCurve: \"P-256\" }, false, [\"sign\"]);\n const signature = await crypto.subtle.sign({ name: \"ECDSA\", hash: \"SHA-256\" }, key, new TextEncoder().encode(\"Clark View APNs credential check\"));\n console.log(JSON.stringify({ ok: signature.byteLength === 64, credentialFormat: \"valid\", signing: signature.byteLength === 64 ? \"passed\" : \"failed\", appleAuthentication: \"not tested\", deviceDelivery: \"not tested\" }));\n } catch {\n console.log(JSON.stringify({ ok: false, error: \"Private key could not be imported or used for P-256 signing. Check the complete PEM contents.\" }));\n }\n}\n",[],[296,359],"be40b74d-4f9d-4045-899b-03c9f215532b","alert-push-check.ts","01a08d58-6277-7763-a63c-0b59c2da3fb3",["D",1789077774974],"import { sendAPNs } from \"../lib/push.ts\";\nimport { saveAlertToken, ensureAlertSchema } from \"../lib/alertPush.ts\";\nimport { alertRoutes } from \"../http/routes/notifications.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nfunction assert(v: unknown, message: string) { if (!v) throw new Error(message); }\nlet calls = 0;\nconst transport: typeof fetch = async (input, init) => {\n calls++;\n assert(String(input).startsWith(\"https://api.push.apple.com/\"), \"production host\");\n const headers = new Headers(init?.headers);\n assert(headers.get(\"apns-push-type\") === \"alert\", \"alert type\");\n assert(headers.get(\"apns-topic\") === \"plusjade.clark-view\", \"app topic\");\n assert(headers.get(\"apns-priority\") === \"10\", \"alert priority\");\n assert(JSON.parse(String(init?.body)).aps.alert.title === \"Test\", \"alert payload\");\n return new Response(\"\", {status:200});\n};\nconst result = await sendAPNs(\"00\".repeat(32), \"app-alert\", \"production\", {title:\"Test\",body:\"Test\"}, transport);\nassert(result.ok && calls === 1, \"production signing and request\");\nif (!Deno.env.has(\"APNS_SANDBOX_KEY_ID\")) {\n const sandbox = await sendAPNs(\"00\".repeat(32), \"app-alert\", \"sandbox\", {title:\"Test\",body:\"Test\"}, transport);\n assert(sandbox.reason === \"MissingCredentials:sandbox\" && calls === 1, \"sandbox must not use production credentials\");\n}\nconst bad = await sendAPNs(\"00\".repeat(32), \"app-alert\", \"production\", {title:\"Test\",body:\"Test\"},\n async () => new Response(JSON.stringify({reason:\"BadDeviceToken\"}), {status:400}));\nassert(!bad.deadToken && bad.reason === \"BadDeviceToken\", \"configuration mismatch must not delete token\");\nconst gone = await sendAPNs(\"00\".repeat(32), \"app-alert\", \"production\", {title:\"Test\",body:\"Test\"},\n async () => new Response(JSON.stringify({reason:\"Unregistered\"}), {status:410}));\nassert(gone.deadToken, \"unregistered cleanup\");\nawait ensureAlertSchema();\nconst device = \"push-check-\" + crypto.randomUUID();\nconst token = \"00\".repeat(32);\ntry {\n await saveAlertToken(device, token, \"production\", true);\n await saveAlertToken(device, token, \"sandbox\", false);\n const rows = await sqlite.execute({sql:\"SELECT environment,allowed FROM device_alert_tokens WHERE device_id=?\",args:[device]});\n assert(rows.rows.length === 2, \"environments coexist\");\n await saveAlertToken(device, token, \"production\", false);\n const response = await alertRoutes.request(\"/device/notifications/test\", {method:\"POST\", headers:{\"Content-Type\":\"application/json\"},body:JSON.stringify({device,token,environment:\"production\"})});\n assert(response.status === 409, \"permission denial blocks test\");\n const malformed = await alertRoutes.request(\"/device/notifications/register\", {method:\"POST\",headers:{\"Content-Type\":\"application/json\"},body:JSON.stringify({device,token,allowed:true})});\n assert(malformed.status === 400, \"explicit environment required\");\n // Cooldown timestamps follow the parent ISO convention; never-tested is NULL, not a\n // sentinel, so a fresh registration is eligible rather than blocked.\n const fresh = await sqlite.execute({sql:\"SELECT last_test_at FROM device_alert_tokens WHERE device_id=? AND environment='sandbox'\",args:[device]});\n assert((fresh.rows[0] as {last_test_at:string|null}).last_test_at === null, \"never tested is null\");\n await saveAlertToken(device, token, \"sandbox\", true);\n await sqlite.execute({sql:`UPDATE device_alert_tokens SET last_test_at=strftime('%Y-%m-%dT%H:%M:%fZ','now') WHERE device_id=? AND environment='sandbox'`,args:[device]});\n const stamped = await sqlite.execute({sql:\"SELECT typeof(last_test_at) AS t, last_test_at FROM device_alert_tokens WHERE device_id=? AND environment='sandbox'\",args:[device]});\n const cooldown = stamped.rows[0] as {t:string; last_test_at:string};\n assert(cooldown.t === \"text\" && /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/.test(cooldown.last_test_at), \"cooldown stored as ISO UTC text\");\n const throttled = await alertRoutes.request(\"/device/notifications/test\", {method:\"POST\", headers:{\"Content-Type\":\"application/json\"},body:JSON.stringify({device,token,environment:\"sandbox\"})});\n assert(throttled.status === 409, \"cooldown still throttles after retype\");\n} finally {\n await sqlite.execute({sql:\"DELETE FROM device_alert_tokens WHERE device_id=?\",args:[device]});\n}\nconsole.log(\"Push checks passed: signing, routing, payload, missing sandbox credentials, cleanup policy, environment isolation, permission and validation. No APNs requests sent.\");\n",[],[296,366],"8eff6ed9-2768-48cf-907f-6396611cd681","fixtures","01a08d58-6277-7763-a63c-05627408a79c",["D",1789077774974],[],[296,373],"35e3861f-2532-42a0-b508-265cb0480301",["D",1789077774974],[265,266,267,268,269,270,271,272,273,274,275,276],[296],"02c16228-835e-4112-b0d2-250b43139070","sourceHtml.tsx","01a08d58-6277-7763-a63b-fc334bc37968","01a08d58-6277-7763-a63c-02cc7bc9ae4f",["D",1789077774974],"// Read-only React documents for inspecting source contracts and consumers.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\nimport { renderToStaticMarkup } from \"npm:react-dom@18.2.0/server\";\nimport { isRecord } from \"../lib/guards.ts\";\nimport type { SourceDetail, SourceSummary } from \"../lib/sourceStore.ts\";\nimport { Cell, DataTable, Row } from \"./dataTable.tsx\";\nimport { pageShell } from \"./pageShell.ts\";\n\nimport type { DiagnosticsResult } from \"../lib/sourceDiagnostics.ts\";\n\ntype JsonObject = Record;\n\nfunction documentMarkup(title: string, node: ReactNode): string {\n return pageShell(title, renderToStaticMarkup(

{node}

));\n}\n\nfunction Timestamp({ value }: { value: string }): React.ReactElement {\n return {value};\n}\n\nfunction humanize(value: string): string {\n return value\n .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n .replace(/[_-]+/g, \" \")\n .replace(/\\bId\\b/g, \"ID\")\n .replace(/^./, (letter) => letter.toUpperCase());\n}\n\nfunction settingCount(schema: unknown): number {\n if (!isRecord(schema) || !isRecord(schema.properties)) return 0;\n return Object.keys(schema.properties).length;\n}\n\nfunction Value({ value }: { value: unknown }): React.ReactElement {\n if (Array.isArray(value)) {\n if (value.length === 0) return None;\n return (\n

\n );\n }\n if (isRecord(value)) return ;\n if (typeof value === \"boolean\") return {value ? \"Yes\" : \"No\"};\n if (value == null) return None;\n return {String(value)};\n}\n\nfunction Settings({ value }: { value: unknown }): React.ReactElement {\n if (!isRecord(value) || Object.keys(value).length === 0) {\n return

No settings.

;\n }\n return (\n

{humanize(key)}

\n );\n}\n\nfunction schemaType(definition: JsonObject): string {\n if (definition.type === \"array\" && isRecord(definition.items)) {\n return `Array of ${String(definition.items.type ?? \"values\")}`;\n }\n return humanize(String(definition.type ?? \"value\"));\n}\n\nfunction Schema({ value }: { value: unknown }): React.ReactElement {\n if (!isRecord(value)) {\n return (\n <>\n

The stored schema is not valid JSON.

{String(value)}

\n \n );\n }\n\n const properties = isRecord(value.properties) ? value.properties : {};\n const required = new Set(\n Array.isArray(value.required)\n ? value.required.filter((item): item is string => typeof item === \"string\")\n : [],\n );\n\n return (\n <>\n {Object.keys(properties).length === 0\n ?

No configurable settings.

\n : (\n

{name}

\n {schemaType(definition)}\n {\" · \"}\n {required.has(name) ? \"Required\" : \"Optional\"}\n {definition.readOnly === true ? \" · Read only\" : \"\"}\n

\n {typeof definition.description === \"string\" &&\n

{definition.description}

}\n {Object.hasOwn(definition, \"default\") &&\n

Default:

}\n {Array.isArray(definition.enum) &&\n

Allowed:

}\n {definition.uniqueItems === true &&\n

Values must be unique.

}\n

\n )}\n\n

Raw schema

{JSON.stringify(value, null, 2)}

\n \n );\n}\n\nexport function sourceIndexDocument(sources: SourceSummary[]): string {\n return documentMarkup(\n \"Widget favorites — Sources\",\n <>\n

Sources

Bunch-owned sources and their current device use.

\n {sources.length === 0\n ?

No sources yet.

\n : (\n \n {sources.map((source) => (\n \n \n {source.name}\n Source {source.id}\n \n {source.description}\n {settingCount(source.settingsSchema)}\n {source.deviceCount}\n \n ))}\n \n )}\n ,\n );\n}\n\nexport type SourceTab = \"overview\" | \"diagnostics\" | \"settings\" | \"devices\";\n\nfunction Diagnostics({ result }: { result?: DiagnosticsResult }): React.ReactElement {\n if (!result || result.state !== \"ready\") {\n return <>

Stored coverage

{result?.state === \"unsupported\"\n ? \"Diagnostics are not supported by this source.\"\n : \"Diagnostics are unavailable. The source could not be reached or returned an invalid response.\"}

Coverage is unknown; this does not mean the source is empty.

;\n }\n const data = result.value;\n const first = data.earliestTimestamp, last = data.latestTimestamp;\n const days = last === null ? null : (last - Date.parse(result.checkedAt) / 1000) / 86400;\n return <>\n

Stored coverage

All stored items before device settings and upcoming-item selection. Bounds do not establish complete coverage or current event status.

Total items: {data.totalItems}
Earliest event: {first === null ? \"None\" : }
Latest event: {last === null ? \"None\" : }
Date span: {first === null || last === null ? \"None\" : `${((last - first) / 86400).toFixed(1)} days`}
Latest event relative to check: {days === null ? \"None\" : days >= 0 ? `${days.toFixed(1)} days ahead` : `${Math.abs(days).toFixed(1)} days ago`}
Last ingest: {data.lastIngestedAt === null ? \"Unknown\" : }
Checked

\n {data.totalItems === 0 &&

No stored items.

}\n ;\n}\n\nexport function sourceShowDocument(source: SourceDetail, tab: SourceTab = \"overview\", diagnostics?: DiagnosticsResult): string {\n return documentMarkup(\n `Widget favorites — ${source.name}`,\n <>\n

← All sources

{source.name}

{source.description}

\n\n \n\n {tab === \"overview\" &&

Source: {source.id}
Bunch: {source.bunchId}
Implementation: {source.endpoint}
Devices: {source.deviceCount}
Created
Updated

}\n\n {tab === \"diagnostics\" && }\n\n {tab === \"settings\" &&

Available settings

Schema fields define the shape accepted by each device assignment.

\n \n

}\n\n {tab === \"devices\" &&

Attached devices

\n {source.devices.length === 0\n ?

No devices attached.

\n : (\n \n {source.devices.map((device) => (\n \n \n {device.name}\n {device.installId}\n \n \n

View settings

\n \n

\n \n \n \n ))}\n \n )}\n

}\n ,\n );\n}\n\nexport function sourceNotFoundDocument(): string {\n return documentMarkup(\n \"Widget favorites — Source not found\",\n <>\n

← All sources

Source not found

No source exists with that internal ID.

\n ,\n );\n}\n\n",[],[390,383],"render","1f13c1ef-4efe-4afb-b72c-d7441264a19f","rootHtml.ts","01a08d58-6277-7763-a63b-f800a9621df4",["D",1789077774974],"// Static shell for the browser-managed app entry point.\n//\n// Standalone by design — it is the one page that does not use `pageShell`,\n// since the shell's own header would repeat the navigation this page exists\n// to present. It restates the shell's tokens so both agree on a phone in\n// Dark Mode.\n\nexport function rootHtml(): string {\n return `\n\n \n \n \n Sports Today\n \n \n \n

Sports Today

\n \n

\n \n`;\n}\n",[],[390,392],"295140e1-9a8d-4869-bd4c-fc3a4b5af3d7","pageShell.ts","01a08d58-6277-7763-a63b-f541e110afe4",["D",1789077774974],"// Shared semantic shell for every browser administration view.\n//\n// The stylesheet is mobile-first: the unqualified rules describe a phone in\n// portrait, and each `min-width` block adds back the wider-viewport layout.\n// Two consequences are load-bearing for the views. Resource tables stack\n// into labeled rows below 40em, which is why `dataTable.tsx` emits a\n// `data-label` and an explicit ARIA role on every cell — CSS drops the\n// native table roles the moment `display` changes. And every control clears\n// a 44px touch target with a 16px font, since anything smaller is both hard\n// to hit and triggers iOS Safari's zoom-on-focus.\n\nconst PAGE_STYLE = `\n /* Light values are the established palette; the dark set mirrors the same\n hierarchy rather than introducing a second visual language. */\n :root {\n color-scheme: light dark;\n --page: #fff;\n --ink: #1a1a1a;\n --ink-muted: #666;\n --accent: #2563eb;\n --accent-strong: #1d4ed8;\n --rule: #eee;\n --edge: #ddd;\n --field-edge: #ccc;\n --inset: #f6f6f6;\n --tap: 44px;\n }\n @media (prefers-color-scheme: dark) {\n :root {\n --page: #16181c;\n --ink: #e8e9ec;\n --ink-muted: #a1a5ae;\n --accent: #7aa7ff;\n --accent-strong: #a3c0ff;\n --rule: #26282e;\n --edge: #34373e;\n --field-edge: #4b4f58;\n --inset: #1c1f24;\n }\n }\n\n *, *::before, *::after { box-sizing: border-box; }\n\n body {\n font-family: system-ui, -apple-system, sans-serif;\n background: var(--page);\n color: var(--ink);\n line-height: 1.5;\n max-width: 40rem;\n margin: 0 auto;\n padding: 1rem 1rem 3rem;\n overflow-wrap: break-word;\n }\n main { min-width: 0; }\n @media (min-width: 40em) { body { padding: 2rem 1rem 4rem; } }\n\n h1 { font-size: clamp(1.4rem, 1.25rem + 0.8vw, 1.65rem); line-height: 1.2; margin: 0 0 1rem; }\n h2 { font-size: clamp(1.05rem, 1rem + 0.3vw, 1.2rem); line-height: 1.25; margin: 0 0 0.5rem; }\n h3 { font-size: 0.95rem; line-height: 1.3; margin: 1rem 0 0.4rem; }\n p { margin: 0.5rem 0 1rem; }\n ul, ol { margin: 0.5rem 0 1rem; padding-left: 1.25rem; }\n li { margin: 0.35rem 0; }\n a { color: var(--accent); }\n /* A paragraph holding nothing but a link is an action (\"+ Add source\"), so\n it gets a target taller than its text. */\n p:not(.breadcrumb) > a:only-child, li > a:first-child { display: inline-block; padding: 0.3rem 0; }\n code { font-family: ui-monospace, monospace; font-size: 0.85em; overflow-wrap: anywhere; }\n strong { overflow-wrap: anywhere; }\n :focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }\n\n details { margin-top: 0.75rem; }\n summary { cursor: pointer; font-weight: 600; padding: 0.6rem 0; }\n dl.schema-fields { margin: 0.75rem 0 0; }\n dl.schema-fields > div { padding: 0.75rem 0; border-bottom: 1px solid var(--rule); }\n dl.schema-fields dt { font-weight: 600; }\n dl.schema-fields dd { margin: 0.25rem 0 0; }\n dl.schema-fields p { margin: 0.25rem 0; }\n .schema-detail { color: var(--ink-muted); font-size: 0.85rem; }\n section { margin-top: 2rem; padding-top: 1rem; border-top: 1px solid var(--rule); }\n pre {\n background: var(--inset);\n border: 1px solid var(--edge);\n border-radius: 6px;\n padding: 0.75rem;\n overflow-x: auto;\n font-size: 0.8rem;\n line-height: 1.5;\n }\n\n /* Navigation. Wrapping keeps every destination reachable on a narrow\n screen instead of pushing links off-screen. */\n header.global-header { margin: 0 0 1.5rem; border-bottom: 1px solid var(--edge); }\n header.global-header nav, nav.resource-nav { display: flex; flex-wrap: wrap; gap: 0 1.25rem; }\n header.global-header a, nav.resource-nav a, .breadcrumb a {\n display: inline-flex;\n align-items: center;\n min-height: var(--tap);\n color: var(--accent);\n text-decoration: none;\n font-size: 0.95rem;\n }\n nav.resource-nav { margin: 0 0 1.5rem; border-bottom: 1px solid var(--edge); }\n nav.resource-nav a { border-bottom: 2px solid transparent; margin-bottom: -1px; }\n nav.resource-nav a.active { color: var(--ink); font-weight: 600; border-bottom-color: var(--accent); }\n .breadcrumb { margin: 0; }\n .breadcrumb a { font-size: 0.9rem; }\n\n /* Label/value metadata reads as an aligned two-column list on a phone and\n collapses to one inline run once there is room for it. */\n dl.device-meta { display: grid; grid-template-columns: minmax(5rem, auto) 1fr; gap: 0.35rem 0.75rem; margin: 1.25rem 0 1rem; }\n dl.device-meta > div { display: contents; }\n dl.device-meta dt { color: var(--ink-muted); font-size: 0.8rem; text-transform: uppercase; letter-spacing: 0.02em; }\n dl.device-meta dd { margin: 0; font-size: 0.85rem; }\n dl.device-meta dd.device-id { font-family: ui-monospace, monospace; }\n dl.device-meta ul { margin: 0; padding-left: 1.1rem; }\n @media (min-width: 40em) {\n dl.device-meta { display: flex; flex-wrap: wrap; gap: 0 1.5rem; margin: 1.25rem 0 0.5rem; }\n dl.device-meta > div { display: flex; gap: 0.35rem; }\n }\n\n /* Resource tables. Below 40em each row becomes a labeled record: the first\n cell is its title and every other cell prints its column name from\n data-label, so no operational column has to be dropped or scrolled to. */\n table.resource-index { width: 100%; border-collapse: collapse; margin-top: 1rem; }\n table.resource-index thead { display: none; }\n table.resource-index tr { display: block; padding: 0.85rem 0; border-bottom: 1px solid var(--rule); }\n table.resource-index td { display: grid; grid-template-columns: 7rem 1fr; gap: 0 0.75rem; padding: 0.15rem 0; font-size: 0.95rem; }\n table.resource-index td::before {\n content: attr(data-label);\n color: var(--ink-muted);\n font-size: 0.8rem;\n text-transform: uppercase;\n letter-spacing: 0.02em;\n line-height: 1.6;\n }\n table.resource-index td:empty { display: none; }\n table.resource-index td:first-child { display: block; font-weight: 600; margin-bottom: 0.35rem; }\n table.resource-index td:first-child::before { content: none; }\n table.resource-index td:first-child a { display: inline-block; padding: 0.3rem 0; }\n /* Settings nested in a cell already sit in the value column, so they run as\n a plain label-then-value flow rather than indenting a second time. */\n table.resource-index td details { margin-top: 0; }\n table.resource-index td summary { padding: 0 0 0.4rem; }\n table.resource-index td .device-meta { display: block; margin: 0; }\n table.resource-index td .device-meta > div { display: block; margin-bottom: 0.35rem; }\n .resource-id { display: block; font-family: ui-monospace, monospace; font-size: 0.8rem; font-weight: 400; color: var(--ink-muted); overflow-wrap: anywhere; }\n @media (min-width: 40em) {\n table.resource-index thead { display: table-header-group; }\n table.resource-index tr { display: table-row; padding: 0; border-bottom: 0; }\n table.resource-index th, table.resource-index td {\n display: table-cell;\n text-align: left;\n padding: 0.5rem 0.6rem;\n border-bottom: 1px solid var(--rule);\n }\n table.resource-index th { color: var(--ink-muted); font-weight: 600; font-size: 0.8rem; text-transform: uppercase; letter-spacing: 0.02em; }\n table.resource-index td::before { content: none; }\n table.resource-index td:first-child { font-weight: inherit; margin-bottom: 0; }\n table.resource-index td:first-child a { padding: 0; }\n table.resource-index td .device-meta { display: flex; }\n table.resource-index td .device-meta > div { display: flex; margin-bottom: 0; }\n }\n\n /* Forms. Controls are full-width and thumb-sized by default; the 1rem font\n size is what keeps iOS Safari from zooming the page on focus. */\n fieldset { border: 1px solid var(--edge); border-radius: 6px; margin: 0 0 1rem; padding: 0.5rem 1rem 1rem; min-width: 0; }\n legend { font-weight: 600; padding: 0 0.25rem; }\n label { display: flex; flex-wrap: wrap; align-items: center; gap: 0.5rem; min-height: var(--tap); margin: 0; }\n /* A text field's label sits above it so every field in a form starts at the\n same left edge; checkbox and color rows stay on one line. */\n label:has(input[type=\"text\"]), label:has(input[type=\"number\"]), label:has(select) {\n flex-direction: column;\n align-items: stretch;\n gap: 0.25rem;\n min-height: 0;\n margin-bottom: 0.75rem;\n }\n input[type=\"text\"], input[type=\"number\"], select {\n font: inherit;\n font-size: 1rem;\n min-height: var(--tap);\n max-width: 100%;\n padding: 0.5rem 0.65rem;\n border: 1px solid var(--field-edge);\n border-radius: 6px;\n background: var(--page);\n color: var(--ink);\n }\n input[type=\"text\"] { flex: 1 1 12rem; }\n input[type=\"number\"] { inline-size: 6rem; }\n select { flex: 1 1 14rem; }\n fieldset > input[type=\"text\"] { width: 100%; max-width: 24rem; }\n input[type=\"checkbox\"] { inline-size: 1.15rem; block-size: 1.15rem; accent-color: var(--accent); }\n input[type=\"color\"] {\n inline-size: 3.25rem;\n block-size: 2.75rem;\n padding: 0.2rem;\n border: 1px solid var(--field-edge);\n border-radius: 6px;\n background: var(--page);\n }\n /* A checkbox fieldset is a selection list, so it gets as many columns as the\n viewport fits at a readable width — two on a phone, four in the full\n container — instead of one 70-row column. */\n fieldset:has(input[type=\"checkbox\"]) { display: grid; grid-template-columns: repeat(auto-fill, minmax(8rem, 1fr)); gap: 0 1rem; }\n button {\n font: inherit;\n font-size: 1rem;\n font-weight: 600;\n min-height: var(--tap);\n inline-size: 100%;\n padding: 0.65rem 1.25rem;\n border: none;\n border-radius: 6px;\n background: var(--accent);\n color: var(--page);\n cursor: pointer;\n }\n button:hover { background: var(--accent-strong); }\n @media (min-width: 40em) { button { inline-size: auto; } }\n`;\n\nconst PAGE_SCRIPT = `\n document.querySelectorAll(\"time[datetime]\").forEach(function (el) {\n var d = new Date(el.getAttribute(\"datetime\"));\n if (!isNaN(d.getTime())) el.textContent = d.toLocaleString();\n });\n`;\n\nexport function pageShell(title: string, body: string): string {\n return `\n\n\n\n\n${title}\n\n\n\n\n${body}\n\n\n`;\n}\n",[],[390,399],"3c7d5c0d-5446-41af-bcb8-5c53597a8e35","deviceHtml.tsx","01a08d58-6277-7763-a63b-f1f473b0e6db",18,["D",1789077903849],4,"// Server-rendered device administration built on the device-centric model.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\nimport { renderToStaticMarkup } from \"npm:react-dom@18.2.0/server\";\nimport type { SettingsForm } from \"../lib/sourceSettings.ts\";\nimport { isRecord } from \"../lib/guards.ts\";\nimport { phase } from \"../lib/sourceContract.ts\";\nimport type {\n AvailableSource,\n DeviceDetail,\n DeviceSourceView,\n DeviceSummary,\n} from \"../lib/deviceStore.ts\";\nimport { SUPPORTED_WIDGET_TEMPLATES } from \"../lib/presentation.ts\";\nimport { titleCase } from \"../lib/text.ts\";\nimport { Cell, DataTable, Row } from \"./dataTable.tsx\";\nimport { pageShell } from \"./pageShell.ts\";\n\nexport type DevicePreviewItem = {\n id: string;\n mainText: string;\n subText: string;\n caption: string | null;\n emphasized: boolean;\n startsAt: number;\n expiresAt: number;\n};\n\ntype PreviewResult =\n | { ok: true; items: DevicePreviewItem[]; rawJson: string }\n | { ok: false; error: string };\n\nfunction documentMarkup(title: string, node: ReactNode): string {\n return pageShell(title, renderToStaticMarkup(

{node}

));\n}\n\nfunction Timestamp({ value }: { value: string }): React.ReactElement {\n return {value};\n}\n\nfunction humanize(key: string): string {\n return key\n .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n .replace(/[_-]+/g, \" \")\n .replace(/\\bId\\b/g, \"ID\")\n .replace(/^./, (letter) => letter.toUpperCase());\n}\n\nfunction stringArray(value: unknown): string[] {\n return Array.isArray(value)\n ? value.filter((item): item is string => typeof item === \"string\")\n : [];\n}\n\nfunction SettingValue({ value }: { value: unknown }): React.ReactElement {\n if (Array.isArray(value)) {\n if (value.length === 0) return None;\n return

;\n }\n if (isRecord(value)) return ;\n if (typeof value === \"boolean\") return {value ? \"Yes\" : \"No\"};\n if (value == null) return None;\n return {String(value)};\n}\n\nfunction Settings({ value }: { value: unknown }): React.ReactElement {\n if (!isRecord(value) || Object.keys(value).length === 0) return

No settings.

;\n return (\n

{humanize(key)}

\n );\n}\n\ntype DeviceNavActive = \"sources\" | \"presentation\" | \"preview\";\n\nfunction DeviceNav({ id, active }: { id: number; active: DeviceNavActive }): React.ReactElement {\n return (\n <>\n

← All devices

\n \n \n );\n}\n\nexport function SourceSettingsFields({form,settings}: {\n form: SettingsForm; settings: unknown;\n}): React.ReactElement {\n const values = isRecord(settings) ? settings : {};\n return <>\n \n {form.fields.length === 0 &&

No per-device settings.

}\n {form.fields.map(field => {\n const value = Object.hasOwn(values,field.key) ? values[field.key] : field.default;\n if (field.type === \"boolean\") return

\n {field.title}\n {\" \"}{field.title}\n {field.description &&

{field.description}

}\n

;\n const selected = stringArray(value);\n const missing = selected.filter(v => !field.choices.some(c => c.const === v));\n const groups = [...new Set(field.choices.map(c => c[\"x-group\"] ?? \"\"))];\n return

\n {field.title}\n {field.description &&

{field.description}

}\n {groups.map(group =>

\n {group || \"Choices\"}\n {field.choices.filter(c => (c[\"x-group\"] ?? \"\") === group).map(choice =>\n {\" \"}{choice.title}\n )}\n

)}\n {missing.length > 0 &&

Unavailable selections\n

Uncheck these unavailable values before saving.

\n {missing.map(value => {\" \"}{value})}\n

}\n

;\n })}\n ;\n}\n\nexport function deviceIndexDocument(devices: DeviceSummary[]): string {\n return documentMarkup(\n \"Widget favorites — Devices\",\n <>\n

Devices

\n {devices.length === 0\n ?

No devices yet.

\n : (\n \n {devices.map((device) => (\n \n \n {device.name}\n {device.installId}\n \n {device.sourceCount}\n \n \n ))}\n \n )}\n ,\n );\n}\n\nexport function deviceShowDocument(\n device: DeviceDetail,\n saved = false,\n): string {\n return documentMarkup(\n `Widget favorites — ${device.name}`,\n <>\n \n

{device.name}

\n {saved &&

Saved.

}\n \n\n

Device: {device.installId}
Sources: {device.sourceCount}
Created
Updated

\n\n

Sources

Items from all sources are ordered by start time.

+ Add source

\n {device.sources.length === 0\n ?

No sources assigned.

\n : (\n \n {device.sources.map((source) => (\n \n \n \n {source.name}\n \n Assignment {source.assignmentId}\n \n \n \n \n ))}\n \n )}\n

\n\n

Merge

\n If this device replaces one that was reinstalled, its install can take over\n the older device instead.\n

Merge into another device

\n ,\n );\n}\n\nexport function deviceMergeDocument(\n device: DeviceDetail,\n candidates: DeviceSummary[],\n error?: string,\n): string {\n return documentMarkup(\n `Widget favorites — Merge ${device.name}`,\n <>\n

← {device.name}

Merge into another device

\n Use this after reinstalling the app: pairing created this device, and the\n configuration you want still belongs to the device it replaces.\n

\n This install ({device.installId}) moves onto the device you choose, which keeps its\n name, sources, presentation and page. This device is deleted, along with\n its {device.sourceCount} assigned {device.sourceCount === 1 ? \"source\" : \"sources\"} and\n its presentation. The replaced device stops receiving notifications.\n

\n {error &&

{error}

}\n {candidates.length === 0\n ?

No other device exists to merge into.

\n : (\n \n )}\n ,\n );\n}\n\nexport function devicePresentationDocument(\n device: DeviceDetail,\n saved = false,\n): string {\n const { presentation } = device;\n return documentMarkup(\n `Widget favorites — Presentation for ${device.name}`,\n <>\n \n

Presentation

These values are sent to WidgetKit for every size of this widget.

\n {saved &&

Saved.

}\n \n ,\n );\n}\n\nexport function deviceSourceNewDocument(\n device: DeviceDetail,\n available: AvailableSource[],\n selected: AvailableSource | null,\n form: SettingsForm,\n): string {\n return documentMarkup(\n `Widget favorites — Add source to ${device.name}`,\n <>\n \n

Add source

\n {available.length === 0\n ?

Every available source is already attached.

\n : (\n <>\n

\n \n {source.name}\n {\" — \"}{source.description}\n

\n {selected && (\n

\n \n \n \n \n )}\n \n )}\n ,\n );\n}\n\nexport function deviceSourceEditDocument(\n device: DeviceDetail,\n source: DeviceSourceView,\n form: SettingsForm,\n saved = false,\n): string {\n return documentMarkup(\n `Widget favorites — ${source.name} for ${device.name}`,\n <>\n \n

{source.name}

{source.description}

\n {saved &&

Saved.

}\n

\n \n \n \n

Remove source

This removes the assignment from this device. It does not delete the source or its data.

\n \n

\n ,\n );\n}\n\nfunction Preview({ result }: { result: PreviewResult }): React.ReactElement {\n if (!result.ok) return

Couldn't build a preview: {result.error}

;\n return (\n <>\n {result.items.length === 0\n ?

No items — nothing in this device's source windows right now.

\n : (\n \n {result.items.map((item) => {\n const when = new Date(item.startsAt * 1000).toISOString();\n return (\n \n \n {/* Derived state, for diagnosing what a device sees right now. The\n expiry bound itself is an estimate and is deliberately not shown,\n here or anywhere else. */}\n {phase(item, Math.floor(Date.now() / 1000))}\n {item.mainText}\n {item.subText}\n {item.caption ?? \"\"}\n {item.emphasized ? \"Yes\" : \"\"}\n \n );\n })}\n \n )}\n

Raw response

{result.rawJson}

\n \n );\n}\n\nexport function devicePreviewDocument(\n device: DeviceDetail,\n result: PreviewResult,\n): string {\n return documentMarkup(\n `Widget favorites — Preview ${device.name}`,\n <>\n \n

Preview

\n {device.sources.length > 0\n ? (\n

\n Combining{\" \"}\n {device.sources.map((source) =>\n source.name\n ).join(\", \")}.\n

\n )\n :

No sources assigned. Add a source to populate this device’s feed.

}\n \n ,\n );\n}\n\nexport function deviceNotFoundDocument(): string {\n return documentMarkup(\n \"Widget favorites — Device not found\",\n <>\n

← All devices

Device not found

No device exists with that internal ID.

\n ,\n );\n}\n\n",[],[390,406],"b68e0413-dc24-42e2-b459-692dd88c9f0b","dataTable.tsx","01a08d58-6277-7763-a63b-ef50d048724a",["D",1789077774974],"// The resource table every administration index and detail view shares.\n//\n// Two things are centralized here because getting either wrong is invisible\n// until someone opens a page on a phone. Each cell carries its column name in\n// `data-label`, which is what the stacked layout in `pageShell` prints in\n// place of the hidden header row. Each element also carries the ARIA role its\n// tag already implies, because changing `display` on a table element drops\n// the native role and would otherwise leave assistive technology with a pile\n// of anonymous blocks.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\n\nexport function DataTable(\n { columns, children }: { columns: string[]; children: ReactNode },\n): React.ReactElement {\n return (\n \n \n \n {columns.map((column) => (\n \n ))}\n \n \n {children}\n

{column}

\n );\n}\n\nexport function Row({ children }: { children: ReactNode }): React.ReactElement {\n return {children};\n}\n\n// `label` must match this cell's column heading; the stacked layout shows it\n// as the row's label for this value.\nexport function Cell(\n { label, children }: { label: string; children?: ReactNode },\n): React.ReactElement {\n return {children};\n}\n",[],[390,415],"23f14029-06f7-4cdb-a744-d51776e1976d","bunchHtml.tsx","01a08d58-6277-7763-a63b-e97a423aa416",["D",1789077774974],"// Server-rendered administration for bunch enrollment and access scope.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\nimport { renderToStaticMarkup } from \"npm:react-dom@18.2.0/server\";\nimport type {\n BunchCode,\n BunchDetail,\n BunchSummary,\n} from \"../lib/bunchStore.ts\";\nimport { Cell, DataTable, Row } from \"./dataTable.tsx\";\nimport { pageShell } from \"./pageShell.ts\";\n\nfunction documentMarkup(title: string, node: ReactNode): string {\n return pageShell(title, renderToStaticMarkup(

{node}

));\n}\n\nfunction Timestamp({ value }: { value: string }): React.ReactElement {\n return {value};\n}\n\nfunction BunchNav({ id, active }: { id: number; active: \"details\" | \"pair\" }): React.ReactElement {\n return (\n <>\n

← All bunches

\n \n \n );\n}\n\nexport function bunchIndexDocument(bunches: BunchSummary[]): string {\n return documentMarkup(\n \"Widget favorites — Bunches\",\n <>\n

Bunches

Bunches define enrollment and future access scope; feed settings stay on devices.

+ New bunch

\n {bunches.length === 0\n ?

No bunches yet.

\n : (\n \n {bunches.map((bunch) => (\n \n {bunch.name}\n {bunch.deviceCount}\n \n \n ))}\n \n )}\n ,\n );\n}\n\nexport function bunchNewDocument(): string {\n return documentMarkup(\n \"Widget favorites — New bunch\",\n <>\n

← All bunches

New bunch

\n \n ,\n );\n}\n\nexport function bunchShowDocument(bunch: BunchDetail, saved = false): string {\n return documentMarkup(\n `Widget favorites — ${bunch.name}`,\n <>\n \n

{bunch.name}

\n {saved &&

Saved.

}\n \n

Devices

\n {bunch.devices.length === 0\n ?

No devices registered yet.

\n : (\n \n {bunch.devices.map((device) => (\n \n \n {device.name}\n {device.installId}\n \n \n \n \n ))}\n \n )}\n

\n ,\n );\n}\n\nexport function bunchPairDocument(\n bunch: BunchDetail,\n codes: BunchCode[],\n created: BunchCode | null = null,\n): string {\n return documentMarkup(\n `Widget favorites — Pair to ${bunch.name}`,\n <>\n \n

Pair a device

A device can register into this bunch only with one of its unexpired codes.

\n \n {created && (\n

\n Code: {created.code}{\" — \"}enter this in the app. Expires{\" \"}\n . Reusable until then.\n

\n )}\n

Code history

\n {codes.length === 0\n ?

No codes yet.

\n : (\n \n {codes.map((code) => (\n \n {code.code}\n {code.active ? \"Active\" : \"Expired\"}\n \n \n \n ))}\n \n )}\n

\n ,\n );\n}\n\nexport function bunchNotFoundDocument(): string {\n return documentMarkup(\n \"Widget favorites — Bunch not found\",\n <>\n

← All bunches

Bunch not found

No bunch exists with that internal ID.

\n ,\n );\n}\n",[],[390,422],"7c04a5bd-6e55-4db4-bcaf-e769559d52ab",["D",1789077774974],[258,259,260,261,262,263],[390],"5afac74b-5ff2-4399-95df-a0d71bc5a20c","time.ts","01a08d58-6277-7763-a63b-e16b51cc7fa3","01a08d58-6277-7763-a63b-e72917d305e8",["D",1789077774974],"// The parent's stored-time convention: ISO-8601 UTC text matching Date.toISOString().\n//\n// Fixed-width and zero-padded, so string comparison is chronological comparison and\n// SQL can compare times without conversion. **The `T` separator is load-bearing**:\n// SQLite's own `datetime()` emits a space instead, and 'T' sorts above ' ', so a column\n// mixing the two orders wrongly and silently. Write stored times through NOW_UTC or\n// isoFromUnix — never `datetime()` or `unixepoch()`.\n//\n// Unix seconds remain the wire format for source-protocol and widget item timestamps.\n// That contract predates this convention and is the reason epoch integers spread\n// inward in the first place; converting at the storage boundary keeps it contained.\n\nexport const ISO_FORMAT = \"%Y-%m-%dT%H:%M:%fZ\";\nexport const NOW_UTC = `strftime('${ISO_FORMAT}','now')`;\n\nexport function nowIsoUtc(): string {\n return new Date().toISOString();\n}\n\nexport function isoFromUnix(seconds: number): string {\n return new Date(Math.round(seconds) * 1000).toISOString();\n}\n\nexport function unixFromIso(value: string): number {\n return Math.floor(Date.parse(value) / 1000);\n}\n\n// SQL fragment converting a stored epoch column to the convention, for migrations.\nexport function isoFromEpochColumn(column: string): string {\n return `strftime('${ISO_FORMAT}',${column},'unixepoch')`;\n}\n",[],[440,433],"lib","ba9e3c2a-7df8-4938-9ca7-7ee559724091","text.ts","01a08d58-6277-7763-a63b-dcc1785c33fc",["D",1789077774974],"// Pure string helpers. Domain-free: nothing here knows about games or teams,\n// which is what keeps them safe to call from anywhere in lib/ without\n// creating an import cycle.\n\nexport function titleCase(slug: string): string {\n return slug\n .split(\"-\")\n .map((word) => word.charAt(0).toUpperCase() + word.slice(1))\n .join(\" \");\n}\n",[],[440,442],"ecab6acc-c989-4a37-9fd1-b147f539b742","sourceStore.ts","01a08d58-6277-7763-a63b-dbae217ba2aa",["D",1789077774974],"// Read-only projection of bunch-owned deployed sources and their device assignments.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type SourceKind = string;\n\nexport type SourceSummary = {\n id: number;\n kind: SourceKind;\n name: string;\n bunchId: number;\n endpoint: string;\n description: string;\n settingsSchema: unknown;\n createdAt: string;\n updatedAt: string;\n deviceCount: number;\n};\n\nexport type SourceDeviceView = {\n assignmentId: number;\n deviceId: number;\n installId: string;\n name: string;\n settings: unknown;\n createdAt: string;\n updatedAt: string;\n};\n\nexport type SourceDetail = SourceSummary & {\n devices: SourceDeviceView[];\n};\n\nfunction parseJson(raw: string | null): unknown {\n if (raw == null) return {};\n try {\n return JSON.parse(raw);\n } catch {\n return raw;\n }\n}\n\nexport async function listSources(): Promise {\n const result = await sqlite.execute(`\n SELECT\n s.id,\n s.kind,\n s.name,\n s.bunch_id, s.endpoint,\n s.description,\n s.settings_schema,\n s.created_at,\n s.updated_at,\n COUNT(ds.id) AS device_count\n FROM sources s\n LEFT JOIN device_sources ds ON ds.source_id = s.id\n GROUP BY s.id\n ORDER BY s.kind COLLATE NOCASE, s.id\n `);\n\n return (result.rows as {\n id: number;\n kind: SourceKind;\n name: string;\n description: string;\n bunch_id: number; endpoint: string;\n settings_schema: string | null;\n created_at: string;\n updated_at: string;\n device_count: number;\n }[]).map((row) => ({\n id: row.id,\n kind: row.kind,\n name: row.name,\n bunchId: row.bunch_id,\n endpoint: row.endpoint,\n description: row.description,\n settingsSchema: parseJson(row.settings_schema),\n createdAt: row.created_at,\n updatedAt: row.updated_at,\n deviceCount: Number(row.device_count),\n }));\n}\n\nexport async function getSource(id: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT\n s.id,\n s.kind,\n s.name AS source_name,\n s.bunch_id, s.endpoint,\n s.description,\n s.settings_schema,\n s.created_at,\n s.updated_at,\n ds.id AS assignment_id,\n ds.settings,\n ds.created_at AS assignment_created_at,\n ds.updated_at AS assignment_updated_at,\n d.id AS device_id,\n d.install_id,\n d.name\n FROM sources s\n LEFT JOIN device_sources ds ON ds.source_id = s.id\n LEFT JOIN devices d ON d.id = ds.device_id\n WHERE s.id = ?\n ORDER BY d.name COLLATE NOCASE, d.id, ds.id\n `,\n args: [id],\n });\n\n const rows = result.rows as {\n id: number;\n kind: SourceKind;\n source_name: string;\n description: string;\n bunch_id: number; endpoint: string;\n settings_schema: string | null;\n created_at: string;\n updated_at: string;\n assignment_id: number | null;\n settings: string | null;\n assignment_created_at: string | null;\n assignment_updated_at: string | null;\n device_id: number | null;\n install_id: string | null;\n name: string | null;\n }[];\n\n const first = rows[0];\n if (!first) return null;\n\n const devices = rows.flatMap((row) => {\n if (\n row.assignment_id == null ||\n row.settings == null ||\n row.assignment_created_at == null ||\n row.assignment_updated_at == null ||\n row.device_id == null ||\n row.install_id == null ||\n row.name == null\n ) {\n return [];\n }\n\n return [{\n assignmentId: row.assignment_id,\n deviceId: row.device_id,\n installId: row.install_id,\n name: row.name,\n settings: parseJson(row.settings),\n createdAt: row.assignment_created_at,\n updatedAt: row.assignment_updated_at,\n }];\n });\n\n return {\n id: first.id,\n kind: first.kind,\n name: first.source_name,\n bunchId: first.bunch_id,\n endpoint: first.endpoint,\n description: first.description,\n settingsSchema: parseJson(first.settings_schema),\n createdAt: first.created_at,\n updatedAt: first.updated_at,\n deviceCount: devices.length,\n devices,\n };\n}\n\n",[],[440,449],"11beaf27-ebe6-4c00-851b-b69f3537424d","sourceSettings.ts","01a08d58-6277-7763-a63b-d5e677e18f3b",["D",1789077774974],"// The intentionally small form profile: booleans and grouped string choices.\n// This validates the renderer's supported subset, not arbitrary JSON Schema.\nimport { record } from \"./sourceContract.ts\";\nimport { sourcePointer, sourceRpc, SourceRpcError } from \"./sourceClient.ts\";\nimport { HTTPException } from \"npm:hono/http-exception\";\nexport type Choice = { const: string; title: string; \"x-group\"?: string };\nexport type Field = { key: string; title: string; description?: string } & (\n { type: \"boolean\"; default: boolean } |\n { type: \"array\"; default: string[]; choices: Choice[] }\n);\nexport type SettingsForm = { fields: Field[]; revision: string };\nfunction ensure(ok: unknown): asserts ok {\n if (!ok) throw new Error(\"Source settings schema is unsupported or malformed\");\n}\nfunction keys(value: Record, allowed: string[]) {\n ensure(Object.keys(value).every(k => allowed.includes(k)));\n}\nexport function parseFormSchema(raw: unknown): Field[] {\n ensure(record(raw));\n keys(raw, [\"type\",\"properties\",\"required\",\"additionalProperties\",\"title\",\"description\"]);\n ensure(raw.type === \"object\" && raw.additionalProperties === false && record(raw.properties));\n const properties = raw.properties;\n ensure(raw.required === undefined || (Array.isArray(raw.required) &&\n raw.required.every(k => typeof k === \"string\" && Object.hasOwn(properties,k))));\n return Object.entries(properties).map(([key, value]) => {\n ensure(/^[A-Za-z][A-Za-z0-9_]*$/.test(key) && ![\"constructor\",\"prototype\",\"__proto__\"].includes(key));\n ensure(record(value) && typeof value.title === \"string\" && value.title.length > 0);\n ensure(value.description === undefined || typeof value.description === \"string\");\n const base = {key, title:value.title, description:value.description as string | undefined};\n if (value.type === \"boolean\") {\n keys(value, [\"type\",\"title\",\"description\",\"default\"]);\n ensure(typeof value.default === \"boolean\");\n return {...base, type:\"boolean\", default:value.default};\n }\n keys(value, [\"type\",\"title\",\"description\",\"default\",\"items\",\"uniqueItems\"]);\n ensure(value.type === \"array\" && value.uniqueItems === true && record(value.items));\n keys(value.items, [\"type\",\"oneOf\"]);\n ensure(value.items.type === \"string\" && Array.isArray(value.items.oneOf));\n const choices = value.items.oneOf.map(choice => {\n ensure(record(choice));\n keys(choice, [\"const\",\"title\",\"x-group\"]);\n ensure(typeof choice.const === \"string\" && typeof choice.title === \"string\");\n ensure(choice[\"x-group\"] === undefined || typeof choice[\"x-group\"] === \"string\");\n return choice as Choice;\n });\n ensure(new Set(choices.map(c => c.const)).size === choices.length);\n ensure(Array.isArray(value.default) && value.default.every(v => typeof v === \"string\" && choices.some(c => c.const === v)));\n ensure(new Set(value.default).size === value.default.length);\n return {...base,type:\"array\",default:value.default as string[],choices};\n });\n}\nexport async function loadSettingsForm(sourceId: number): Promise {\n try {\n const pointer = await sourcePointer(sourceId);\n const descriptor = await (await sourceRpc(pointer,\n \"/v1/descriptor?sourceKey=\" + encodeURIComponent(pointer.remote_source_key))).json();\n ensure(record(descriptor) && descriptor.protocolVersion === 1 &&\n descriptor.sourceKey === pointer.remote_source_key && descriptor.temporal === true &&\n record(descriptor.capabilities) && descriptor.capabilities.validateSettings === true);\n const fields = parseFormSchema(descriptor.settingsSchema);\n const digest = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(JSON.stringify(fields)));\n const revision = Array.from(new Uint8Array(digest), b => b.toString(16).padStart(2,\"0\")).join(\"\");\n return {fields,revision};\n } catch {\n throw new HTTPException(502, {message:\"Source settings are unavailable or unsupported. No settings were changed.\"});\n }\n}\nexport function decodeSettings(form: SettingsForm, body: Record): Record {\n if (body.settingsRevision !== form.revision)\n throw new HTTPException(409, {message:\"Source choices changed. Reload the form and try again.\"});\n const expected = new Set([\"sourceId\",\"settingsRevision\",...form.fields.map(f => \"setting.\" + f.key + (f.type === \"array\" ? \"[]\" : \"\"))]);\n if (Object.keys(body).some(key => !expected.has(key)))\n throw new HTTPException(422, {message:\"Unknown settings field.\"});\n const settings: Record = {};\n for (const field of form.fields) {\n const value = body[\"setting.\" + field.key + (field.type === \"array\" ? \"[]\" : \"\")];\n if (field.type === \"boolean\") {\n if (value !== undefined && value !== \"true\") throw new HTTPException(422, {message:\"Invalid boolean setting.\"});\n settings[field.key] = value === \"true\";\n } else {\n const selected = value === undefined ? [] : Array.isArray(value) ? value : [value];\n if (selected.some(v => typeof v !== \"string\" || !field.choices.some(c => c.const === v)) ||\n new Set(selected).size !== selected.length)\n throw new HTTPException(422, {message:\"Invalid or unavailable choice. Reload the form and review your selection.\"});\n settings[field.key] = selected;\n }\n }\n return settings;\n}\nexport async function settingsFromForm(sourceId: number, body: Record) {\n const form = await loadSettingsForm(sourceId);\n const settings = decodeSettings(form, body);\n const pointer = await sourcePointer(sourceId);\n try {\n const result = await (await sourceRpc(pointer, \"/v1/validate-settings\", {\n method:\"POST\",headers:{\"content-type\":\"application/json\"},\n body:JSON.stringify({protocolVersion:1,sourceKey:pointer.remote_source_key,settings}),\n })).json();\n ensure(record(result) && result.protocolVersion === 1 &&\n result.sourceKey === pointer.remote_source_key && result.ok === true);\n } catch (error) {\n if (error instanceof SourceRpcError && (error.status === 400 || error.status === 422))\n throw new HTTPException(422, {message:\"Source rejected settings: \" + error.code + \". No settings were changed.\"});\n throw new HTTPException(502, {message:\"Source validation is unavailable. No settings were changed.\"});\n }\n return settings;\n}\n",[],[440,456],"32c20cc3-7342-4478-b222-0fd114e16d25","sourceDiagnosticsClient.ts","01a08d58-6277-7763-a63b-d138eced0b5b",["D",1789077774974],"// Diagnostics failures stay local to the explorer and never affect widget reads.\nimport { sourcePointer, sourceRpc, SourceRpcError } from \"./sourceClient.ts\";\nimport { parseDiagnostics, type DiagnosticsResult } from \"./sourceDiagnostics.ts\";\n\nexport async function loadSourceDiagnostics(id: number): Promise {\n try {\n const pointer = await sourcePointer(id);\n const response = await sourceRpc(pointer, \"/diagnostics\");\n const value = parseDiagnostics(await response.json(), pointer.remote_source_key);\n return { state: \"ready\", value, checkedAt: new Date().toISOString() };\n } catch (error) {\n return {\n state: error instanceof SourceRpcError && [404, 405, 501].includes(error.status)\n ? \"unsupported\" : \"unavailable\",\n checkedAt: new Date().toISOString(),\n };\n }\n}\n",[],[440,463],"e937c036-6368-42e0-87bb-ca1812668c52","sourceDiagnostics.ts","01a08d58-6277-7763-a63b-cf2e55363eb4",["D",1789077774974],"// Validated, storage-agnostic coverage supplied by a source over HTTP.\nimport { record } from \"./sourceContract.ts\";\n\nexport type SourceDiagnostics = {\n diagnosticsVersion: 1;\n sourceKey: string;\n scope: \"stored\";\n totalItems: number;\n earliestTimestamp: number | null;\n latestTimestamp: number | null;\n lastIngestedAt: string | null;\n};\nexport type DiagnosticsResult =\n | { state: \"ready\"; value: SourceDiagnostics; checkedAt: string }\n | { state: \"unsupported\" | \"unavailable\"; checkedAt: string };\n\nfunction timestamp(value: unknown): value is number {\n return typeof value === \"number\" && Number.isFinite(value)\n && Math.abs(value) <= 8640000000000;\n}\n\nexport function parseDiagnostics(value: unknown, sourceKey: string): SourceDiagnostics {\n if (!record(value) || value.diagnosticsVersion !== 1 || value.sourceKey !== sourceKey\n || value.scope !== \"stored\" || !Number.isSafeInteger(value.totalItems) || (value.totalItems as number) < 0\n || !(value.earliestTimestamp === null || timestamp(value.earliestTimestamp))\n || !(value.latestTimestamp === null || timestamp(value.latestTimestamp))\n || !(value.lastIngestedAt === null || (typeof value.lastIngestedAt === \"string\"\n && /^\\d{4}-\\d{2}-\\d{2}T/.test(value.lastIngestedAt) && Number.isFinite(Date.parse(value.lastIngestedAt))))) {\n throw new Error(\"Invalid source diagnostics\");\n }\n const first = value.earliestTimestamp, last = value.latestTimestamp;\n if ((first === null) !== (last === null)\n || (value.totalItems === 0 && first !== null)\n || (value.totalItems !== 0 && first === null)\n || (typeof first === \"number\" && typeof last === \"number\" && first > last)) {\n throw new Error(\"Inconsistent source diagnostics\");\n }\n return value as SourceDiagnostics;\n}\n",[],[440,470],"e0032e72-038f-4c01-9d60-7cabdff39e5c","sourceContract.ts","01a08d58-6277-7763-a63b-c9ca90e6831e",["D",1789077793305],"// Versioned temporal item contract shared by source shims and the parent composer.\n//\n// An item is a WINDOW, `[startsAt, expiresAt)`, in Unix epoch SECONDS. Both bounds\n// are required and expiresAt is strictly greater, so lifecycle is derivable from the\n// clock alone — no re-read, no ingest. `expiresAt` is an estimate the source owns; it\n// bounds phase and refresh scheduling and is never rendered as a fact.\nexport type Item = {\n id: string;\n mainText: string;\n subText: string;\n caption: string | null;\n emphasized: boolean;\n startsAt: number;\n expiresAt: number;\n // Transitional duplicate of startsAt for iOS builds that predate the window.\n // Drop it once no such build remains in the field.\n timestamp?: number;\n};\n\n// Mirrors the SDK's `phase()` so both sides of the seam agree on one definition of\n// \"current\". The vocabulary is domain-free on purpose: a source decides whether\n// `current` reads as \"LIVE\" or \"PEAK\", and the parent has no games model to decide\n// it with. These values are state, never display text.\nexport type Phase = \"upcoming\" | \"current\" | \"expired\";\nexport function phase(item: Pick, now: number): Phase {\n if (now < item.startsAt) return \"upcoming\";\n return now < item.expiresAt ? \"current\" : \"expired\";\n}\n\n// The widest window accepted, matching the SDK. A longer span almost always means\n// one bound was written in milliseconds.\nexport const MAX_ITEM_SPAN_SECONDS = 30 * 24 * 60 * 60;\n\nexport function record(value: unknown): value is Record {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\nfunction instant(value: unknown): value is number {\n return typeof value === \"number\" && Number.isFinite(value) && Math.abs(value) <= 8640000000000;\n}\nfunction fields(v: Record): boolean {\n return typeof v.id === \"string\" && v.id.length > 0\n && typeof v.mainText === \"string\" && typeof v.subText === \"string\"\n && (v.caption === null || typeof v.caption === \"string\")\n && typeof v.emphasized === \"boolean\";\n}\nexport function items(value: unknown): value is Item[] {\n return Array.isArray(value) && value.every(v => record(v) && fields(v)\n && instant(v.startsAt) && instant(v.expiresAt)\n && (v.expiresAt as number) > (v.startsAt as number)\n && (v.expiresAt as number) - (v.startsAt as number) <= MAX_ITEM_SPAN_SECONDS)\n && new Set(value.map(v => v.id)).size === value.length;\n}\n\n// A source still on the single-instant contract publishes `timestamp` and no window.\n// It is upgraded here rather than rejected, so an out-of-date source keeps working\n// through the migration. The parent has no domain model and so cannot invent a\n// duration: the item is treated as instantaneous, which is the only claim it can\n// make honestly. Such an item is therefore never `current`. Remove this path once\n// every registered source publishes a window.\nconst LEGACY_INSTANT_SECONDS = 1;\nfunction legacy(value: unknown): value is (Item & { timestamp: number })[] {\n return Array.isArray(value) && value.every(v => record(v) && fields(v) && instant(v.timestamp)\n && v.startsAt === undefined && v.expiresAt === undefined)\n && new Set(value.map(v => v.id)).size === value.length;\n}\nexport function normalizeItems(value: unknown): Item[] | null {\n if (items(value)) return value;\n if (!legacy(value)) return null;\n return value.map(v => ({ ...v, startsAt: v.timestamp, expiresAt: v.timestamp + LEGACY_INSTANT_SECONDS }));\n}\n\n// Chronological by start, then source id, then source-local item id, so ties are\n// deterministic across composes rather than dependent on source response order.\nexport function compose(results: { sourceId: number; items: Item[] }[]): Item[] {\n return results.flatMap(result => result.items.map(item => ({ sourceId: result.sourceId, item })))\n .sort((a,b) => a.item.startsAt - b.item.startsAt || a.sourceId - b.sourceId\n || (a.item.id < b.item.id ? -1 : a.item.id > b.item.id ? 1 : 0))\n .map(({sourceId,item}) => ({...item, id: `${sourceId}:${item.id}`, timestamp: item.startsAt}));\n}\n",[],[440,477],"f8f91f6c-c35f-4677-9c2a-74624a344b17","sourceClient.ts","01a08d58-6277-7763-a63b-c5f1d1df45a4",5,["D",1789077808822],"// Generic source RPC; destinations come from the parent registry, never device settings.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { record, normalizeItems, compose, type Item } from \"./sourceContract.ts\";\nimport { DEFAULT_WIDGET_PRESENTATION, type WidgetPresentation } from \"./presentation.ts\";\nexport type DeviceSourceSelection = { sourceId: number; settings: unknown };\nexport type FeedQuery = { tz?: string | number | null };\nexport type SourcePointer = {id:number; endpoint:string; remote_source_key:string; credential_ref:string; contract_version:number};\nexport async function sourcePointer(id:number):Promise {\n const r=await sqlite.execute({sql:\"SELECT id, endpoint, remote_source_key, credential_ref, contract_version FROM sources WHERE id = ?\",args:[id]});\n const p=r.rows[0] as SourcePointer | undefined;\n if (!p || p.contract_version !== 1) throw new Error(`Source ${id} has no compatible pointer`);\n return p;\n}\nexport class SourceRpcError extends Error {\n constructor(public readonly status: number, public readonly code: string) {\n super(code);\n }\n}\nexport async function sourceRpc(p:SourcePointer,path:string,init:RequestInit={}):Promise {\n const base=new URL(p.endpoint);\n if(base.protocol!==\"https:\" || base.username || base.password) throw new Error(\"Invalid source endpoint\");\n const token=Deno.env.get(p.credential_ref);\n if(!token) throw new Error(`Source ${p.id} RPC credential is not configured`);\n const headers=new Headers(init.headers); headers.set(\"authorization\",`Bearer ${token}`);\n const r=await fetch(new URL(path,base),{...init,headers,redirect:\"error\",signal:AbortSignal.timeout(20000)});\n if(!r.ok) {\n const error = await r.json().catch(() => null);\n const code = record(error) && typeof error.error === \"string\" && /^[a-z0-9_]+$/.test(error.error)\n ? error.error : \"source_request_failed\";\n throw new SourceRpcError(r.status, code);\n }\n return r;\n}\nexport function utcOffsetFromQuery(tz:string|number|null|undefined):number|null {\n const raw=tz == null ? null:Number(tz);\n return raw!==null&&Number.isInteger(raw)&&Math.abs(raw)<=86400?raw:null;\n}\nexport type ComposedFeed = {items:Item[]; pointers:SourcePointer[]};\n// Non-HTTP callers (the reminder builder) need the composed items themselves, so\n// composition stops at the item list and only the widget route wraps it in a Response.\nexport async function composeDeviceItems(sources:DeviceSourceSelection[],passthrough:FeedQuery={}):Promise {\n const utcOffsetSeconds=utcOffsetFromQuery(passthrough.tz);\n const pointers=await Promise.all(sources.map(s=>sourcePointer(s.sourceId)));\n const results=await Promise.all(sources.map(async (selection,i)=>{\n const p=pointers[i];\n const r=await sourceRpc(p,\"/v1/read\",{method:\"POST\",headers:{\"content-type\":\"application/json\"},body:JSON.stringify({protocolVersion:1,sourceKey:p.remote_source_key,settings:selection.settings,context:{utcOffsetSeconds}})});\n const value=await r.json();\n // normalizeItems accepts a window and upgrades a source still publishing a bare\n // `timestamp`, so an out-of-date source degrades instead of failing composition.\n const normalized=record(value)&&value.protocolVersion===1&&value.sourceKey===p.remote_source_key\n ? normalizeItems(value.items) : null;\n if(!normalized) throw new Error(`Source ${p.id} invalid temporal items`);\n return {sourceId:p.id,items:normalized};\n }));\n return {items:compose(results),pointers};\n}\nexport async function composeDeviceFeed(sources:DeviceSourceSelection[],passthrough:FeedQuery={},presentation:WidgetPresentation=DEFAULT_WIDGET_PRESENTATION):Promise {\n const {items:composed,pointers}=await composeDeviceItems(sources,passthrough);\n // Schema 3 is the item window: every item carries startsAt/expiresAt, and the\n // legacy `timestamp` rides along for iOS builds that predate it. Both the\n // duplicate field and this note go once those builds are gone.\n return Response.json({schemaVersion:3,eyebrow:\"NEXT\",items:composed,presentation},{headers:{\"cache-control\":\"no-store\",\"x-device-feed-provider\":\"source-registry-v1\",\"x-effective-source-count\":String(sources.length),\"x-effective-sources\":pointers.map(p=>`${p.id}:${p.remote_source_key}`).join(\",\")}});\n}\n",[],[440,484],"841d56a2-2f0d-4b99-9edb-4129e75b4974","reminderStore.ts","01a08d58-6277-7763-a63b-c2566714fdab",12,["D",1789077869329],"// Durable ledger for event reminders: one row per intended notification.\n//\n// The row is the unit of both scheduling and idempotency. UNIQUE(device_id,item_id,rule)\n// makes re-enqueueing a no-op, and the claim below is a single compare-and-swap, so\n// overlapping runs and repeated triggers can never send twice. Delivery is\n// at-most-once by design: an abandoned claim is failed, never retried.\n//\n// Stored times follow the parent convention in `time.ts`: ISO-8601 UTC text, compared\n// as text because the format is fixed-width. Read that module before touching a\n// timestamp here — the `T` separator is load-bearing.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport {\n ISO_FORMAT,\n isoFromEpochColumn,\n isoFromUnix,\n NOW_UTC,\n nowIsoUtc,\n} from \"./time.ts\";\n\nexport { isoFromUnix, unixFromIso } from \"./time.ts\";\n\nexport type ReminderState =\n | \"pending\"\n | \"claimed\"\n | \"sent\"\n | \"failed\"\n | \"void\"\n | \"disabled\";\n\nexport type ReminderRow = {\n id: number;\n deviceId: number;\n installId: string;\n itemId: string;\n rule: string;\n eventAt: string;\n // The item's expiry bound. An estimate the source published, stored so send-time\n // policy can ask \"is this event over?\" without another read. Never shown to anyone.\n expiresAt: string;\n sendAfter: string;\n title: string;\n body: string;\n state: ReminderState;\n};\n\nexport const DEFAULT_LEAD_SECONDS = 3600;\n\n// How overdue a reminder may be and still be worth sending. This must exceed the\n// drain interval plus the scheduler's slack, or rows that come due just after a tick\n// are voided instead of sent — a silently dropped reminder. Val Town cron fires up to\n// ~5 minutes past its configured minute (observed 2026-09-10: a :35 tick ran at :40),\n// so a 15-minute cadence needs a cap well above 20 minutes, not equal to the cadence.\n// Being 30 minutes late still leaves a default 60-minute lead half its usefulness;\n// the guard that actually protects the user is the started-event check, not this one.\nexport const MAX_LATENESS_SECONDS = 30 * 60;\n\n// A claim older than this belongs to a run that died mid-send. Its outcome is\n// unknowable, and at-most-once resolves that ambiguity against sending.\nexport const ABANDONED_CLAIM_SECONDS = 10 * 60;\n\nasync function columnTypes(table: string): Promise> {\n const result = await sqlite.execute(`PRAGMA table_info(${table})`);\n return new Map(\n (result.rows as { name: string; type: string }[]).map((row) => [row.name, row.type]),\n );\n}\n\nconst QUEUE_COLUMNS = `\n id INTEGER PRIMARY KEY,\n device_id INTEGER NOT NULL REFERENCES devices(id) ON DELETE CASCADE,\n item_id TEXT NOT NULL,\n rule TEXT NOT NULL,\n event_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n send_after TEXT NOT NULL,\n title TEXT NOT NULL,\n body TEXT NOT NULL,\n state TEXT NOT NULL DEFAULT 'pending'\n CHECK(state IN ('pending','claimed','sent','failed','void','disabled')),\n claimed_at TEXT,\n sent_at TEXT,\n attempts INTEGER NOT NULL DEFAULT 0,\n apns_status TEXT,\n created_at TEXT NOT NULL,\n UNIQUE(device_id, item_id, rule)`;\n\n// The first cut of this table stored epoch integers. Rebuilding is the only way to\n// change a column's declared type in SQLite, and the conversion is lossless.\nasync function migrateEpochQueue() {\n const existing = await columnTypes(\"notification_queue\");\n if (existing.get(\"event_at\") !== \"INTEGER\") return;\n\n const asIso = isoFromEpochColumn;\n await sqlite.execute(\"ALTER TABLE notification_queue RENAME TO notification_queue_epoch\");\n await sqlite.execute(`CREATE TABLE notification_queue (${QUEUE_COLUMNS})`);\n await sqlite.execute(`INSERT INTO notification_queue\n (id,device_id,item_id,rule,event_at,expires_at,send_after,title,body,state,\n claimed_at,sent_at,attempts,apns_status,created_at)\n SELECT id,device_id,item_id,rule,${asIso(\"event_at\")},\n strftime('${ISO_FORMAT}',event_at+1,'unixepoch'),${asIso(\"send_after\")},\n title,body,state,\n CASE WHEN claimed_at IS NULL THEN NULL ELSE ${asIso(\"claimed_at\")} END,\n CASE WHEN sent_at IS NULL THEN NULL ELSE ${asIso(\"sent_at\")} END,\n attempts,apns_status,${asIso(\"created_at\")}\n FROM notification_queue_epoch`);\n await sqlite.execute(\"DROP TABLE notification_queue_epoch\");\n}\n\n// Rows queued before the item window carry no expiry. SQLite cannot add a NOT NULL\n// column without a constant default, and there is no honest constant — the parent\n// has no domain model to infer a duration from — so the table is rebuilt and each\n// existing row is backfilled as instantaneous (one second). The next build refreshes\n// every pending row with the source's real window, so the sentinel is short-lived.\nasync function migrateWindowQueue() {\n const existing = await columnTypes(\"notification_queue\");\n if (existing.size === 0 || existing.has(\"expires_at\")) return;\n\n await sqlite.execute(\"ALTER TABLE notification_queue RENAME TO notification_queue_instant\");\n await sqlite.execute(`CREATE TABLE notification_queue (${QUEUE_COLUMNS})`);\n await sqlite.execute(`INSERT INTO notification_queue\n (id,device_id,item_id,rule,event_at,expires_at,send_after,title,body,state,\n claimed_at,sent_at,attempts,apns_status,created_at)\n SELECT id,device_id,item_id,rule,event_at,\n strftime('${ISO_FORMAT}',event_at,'+1 second'),send_after,\n title,body,state,claimed_at,sent_at,attempts,apns_status,created_at\n FROM notification_queue_instant`);\n await sqlite.execute(\"DROP TABLE notification_queue_instant\");\n}\n\nexport async function ensureReminderSchema() {\n await migrateEpochQueue();\n await migrateWindowQueue();\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS notification_queue (${QUEUE_COLUMNS})`);\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS notification_queue_due\n ON notification_queue(state, send_after)`,\n );\n\n // Reminder policy and the widget's last observed offset live on the device row;\n // both are inferred or defaulted, never required configuration.\n const columns = await columnTypes(\"devices\");\n const additions: [string, string][] = [\n [\"reminder_lead_seconds\", `INTEGER NOT NULL DEFAULT ${DEFAULT_LEAD_SECONDS}`],\n [\"last_tz_offset_seconds\", \"INTEGER\"],\n [\"last_tz_seen_at\", \"TEXT\"],\n [\"reminders_built_at\", \"TEXT\"],\n ];\n for (const [name, definition] of additions) {\n if (columns.has(name)) continue;\n await sqlite.execute(`ALTER TABLE devices ADD COLUMN ${name} ${definition}`);\n }\n}\n\nexport type BuildCandidate = {\n id: number;\n installId: string;\n leadSeconds: number;\n tzOffsetSeconds: number | null;\n};\n\n// Ordering by staleness makes the sweep self-healing: a run killed by the wall-clock\n// limit leaves the devices it finished marked, and the next run resumes at the rest.\n// Newly paired devices sort first because their column is null.\nexport async function stalestDevices(limit: number): Promise {\n const result = await sqlite.execute({\n sql: `SELECT id, install_id, reminder_lead_seconds, last_tz_offset_seconds\n FROM devices\n ORDER BY reminders_built_at IS NOT NULL, reminders_built_at, id\n LIMIT ?`,\n args: [limit],\n });\n return (result.rows as {\n id: number;\n install_id: string;\n reminder_lead_seconds: number | null;\n last_tz_offset_seconds: number | null;\n }[]).map((row) => ({\n id: Number(row.id),\n installId: row.install_id,\n leadSeconds: Number(row.reminder_lead_seconds ?? DEFAULT_LEAD_SECONDS),\n tzOffsetSeconds: row.last_tz_offset_seconds == null\n ? null\n : Number(row.last_tz_offset_seconds),\n }));\n}\n\nexport async function markDeviceBuilt(deviceId: number) {\n await sqlite.execute({\n sql: \"UPDATE devices SET reminders_built_at = ? WHERE id = ?\",\n args: [nowIsoUtc(), deviceId],\n });\n}\n\nexport type PendingReminder = {\n itemId: string;\n rule: string;\n eventAt: string;\n expiresAt: string;\n sendAfter: string;\n title: string;\n body: string;\n};\n\n// One batch per device keeps round trips down while still committing device by\n// device, so a run cut short by the wall-clock limit loses at most one device's work.\nexport async function syncDeviceReminders(\n deviceId: number,\n reminders: PendingReminder[],\n): Promise {\n const now = nowIsoUtc();\n const statements = reminders.map((reminder) => ({\n sql: `INSERT INTO notification_queue\n (device_id,item_id,rule,event_at,expires_at,send_after,title,body,created_at)\n VALUES (?,?,?,?,?,?,?,?,?)\n ON CONFLICT(device_id,item_id,rule) DO UPDATE SET\n event_at=excluded.event_at,\n expires_at=excluded.expires_at,\n send_after=excluded.send_after,\n title=excluded.title,\n body=excluded.body\n WHERE notification_queue.state='pending'`,\n args: [\n deviceId,\n reminder.itemId,\n reminder.rule,\n reminder.eventAt,\n reminder.expiresAt,\n reminder.sendAfter,\n reminder.title,\n reminder.body,\n now,\n ],\n }));\n\n // An item that left the feed is cancelled in place. Voiding is enough because the\n // drainer treats a non-pending row as nothing to do, so no external schedule\n // needs to be recalled.\n const keep = reminders.map((reminder) => reminder.itemId);\n const placeholders = keep.map(() => \"?\").join(\",\");\n statements.push({\n sql: `UPDATE notification_queue SET state='void'\n WHERE device_id=? AND state='pending'\n ${keep.length ? `AND item_id NOT IN (${placeholders})` : \"\"}`,\n args: [deviceId, ...keep],\n });\n\n await sqlite.batch(statements);\n}\n\nexport async function dueReminders(limit: number): Promise {\n const result = await sqlite.execute({\n sql: `SELECT q.id, q.device_id, d.install_id, q.item_id, q.rule,\n q.event_at, q.expires_at, q.send_after, q.title, q.body, q.state\n FROM notification_queue q\n JOIN devices d ON d.id = q.device_id\n WHERE q.state='pending' AND q.send_after <= ${NOW_UTC}\n ORDER BY q.send_after, q.id\n LIMIT ?`,\n args: [limit],\n });\n return (result.rows as {\n id: number;\n device_id: number;\n install_id: string;\n item_id: string;\n rule: string;\n event_at: string;\n expires_at: string;\n send_after: string;\n title: string;\n body: string;\n state: ReminderState;\n }[]).map((row) => ({\n id: Number(row.id),\n deviceId: Number(row.device_id),\n installId: row.install_id,\n itemId: row.item_id,\n rule: row.rule,\n eventAt: row.event_at,\n expiresAt: row.expires_at,\n sendAfter: row.send_after,\n title: row.title,\n body: row.body,\n state: row.state,\n }));\n}\n\n// The only lock in the system. Rows affected is the answer to \"is this send mine?\",\n// which is what makes a duplicate trigger — a retried webhook, an overlapping run —\n// harmless rather than a second notification.\nexport async function claimReminder(id: number): Promise {\n const result = await sqlite.execute({\n sql: `UPDATE notification_queue\n SET state='claimed', claimed_at=${NOW_UTC}, attempts=attempts+1\n WHERE id=? AND state='pending'`,\n args: [id],\n });\n return result.rowsAffected === 1;\n}\n\nexport async function settleReminder(\n id: number,\n state: Extract,\n apnsStatus: string | null,\n) {\n await sqlite.execute({\n sql: `UPDATE notification_queue\n SET state=?, sent_at=${NOW_UTC}, apns_status=?\n WHERE id=?`,\n args: [state, apnsStatus, id],\n });\n}\n\nexport async function failAbandonedClaims(): Promise {\n const result = await sqlite.execute({\n sql: `UPDATE notification_queue SET state='failed', apns_status='AbandonedClaim'\n WHERE state='claimed'\n AND claimed_at < strftime('${ISO_FORMAT}','now',?)`,\n args: [`-${ABANDONED_CLAIM_SECONDS} seconds`],\n });\n return result.rowsAffected;\n}\n\nexport type ReminderCounts = Record;\n\nexport async function reminderCounts(): Promise {\n const result = await sqlite.execute(\n \"SELECT state, COUNT(*) AS total FROM notification_queue GROUP BY state\",\n );\n return Object.fromEntries(\n (result.rows as { state: string; total: number }[])\n .map((row) => [row.state, Number(row.total)]),\n );\n}\n",[],[440,492],"1ed309b2-1149-4fef-bfeb-76b09aa0d82c","reminderDrainer.ts","01a08d58-6277-7763-a63b-be4f00845690",14,["D",1789077884638],"// Delivers claimed reminders as visible alerts.\n//\n// Delivery is gated by REMINDERS_ENABLED. When it is off the queue still drains,\n// settling rows as 'disabled' — a dry run that shows exactly what would have been\n// sent and when, without reaching a real device.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { sendAPNs } from \"./push.ts\";\nimport { ensureAlertSchema } from \"./alertPush.ts\";\nimport type { PushEnvironment } from \"./deviceTokenStore.ts\";\nimport {\n claimReminder,\n dueReminders,\n failAbandonedClaims,\n MAX_LATENESS_SECONDS,\n type ReminderRow,\n settleReminder,\n unixFromIso,\n} from \"./reminderStore.ts\";\n\nexport const DEFAULT_DRAIN_LIMIT = 50;\n\nexport function remindersEnabled(): boolean {\n return Deno.env.has(\"REMINDERS_ENABLED\") &&\n Deno.env.get(\"REMINDERS_ENABLED\") === \"true\";\n}\n\nexport type DrainSummary = {\n enabled: boolean;\n considered: number;\n sent: number;\n skipped: number;\n failed: number;\n abandoned: number;\n};\n\ntype AlertTarget = { token: string; environment: PushEnvironment };\n\nasync function alertTarget(installId: string): Promise {\n // Alert tokens key on the install UUID, not the device row id.\n const result = await sqlite.execute({\n sql: `SELECT token, environment FROM device_alert_tokens\n WHERE device_id=? AND allowed=1\n ORDER BY updated_at DESC LIMIT 1`,\n args: [installId],\n });\n const row = result.rows[0] as\n | { token: string; environment: PushEnvironment }\n | undefined;\n return row ?? null;\n}\n\nasync function deliver(reminder: ReminderRow, now: number): Promise {\n // Stored times are readable UTC text; these two guards are the only arithmetic\n // on them, so they convert here rather than costing the ledger its legibility.\n // Two distinct facts, recorded distinctly: the event has begun, or it is already\n // over. Under a lead-before-start rule the started guard always fires first, so\n // the expiry branch only bites a row whose event ran past its send window — and it\n // is what an expiry-anchored rule would settle against once one exists.\n if (unixFromIso(reminder.expiresAt) <= now) {\n await settleReminder(reminder.id, \"void\", \"EventExpired\");\n return false;\n }\n if (unixFromIso(reminder.eventAt) <= now) {\n await settleReminder(reminder.id, \"void\", \"EventStarted\");\n return false;\n }\n if (now - unixFromIso(reminder.sendAfter) > MAX_LATENESS_SECONDS) {\n await settleReminder(reminder.id, \"void\", \"TooLate\");\n return false;\n }\n if (!remindersEnabled()) {\n await settleReminder(reminder.id, \"disabled\", \"RemindersDisabled\");\n return false;\n }\n\n const target = await alertTarget(reminder.installId);\n if (!target) {\n await settleReminder(reminder.id, \"failed\", \"NoAlertToken\");\n return false;\n }\n\n try {\n const delivery = await sendAPNs(\n target.token,\n \"app-alert\",\n target.environment,\n { title: reminder.title, body: reminder.body },\n );\n await settleReminder(\n reminder.id,\n delivery.ok ? \"sent\" : \"failed\",\n delivery.reason ?? (delivery.ok ? \"Accepted\" : \"Unknown\"),\n );\n if (delivery.deadToken) {\n await sqlite.execute({\n sql: \"DELETE FROM device_alert_tokens WHERE device_id=? AND environment=? AND token=?\",\n args: [reminder.installId, target.environment, target.token],\n });\n }\n return delivery.ok;\n } catch {\n // The claim is already spent. At-most-once means this row is done, not retried.\n await settleReminder(reminder.id, \"failed\", \"PushTransportOrSigningFailed\");\n return false;\n }\n}\n\nexport async function drainReminders(\n options: { id?: number; limit?: number } = {},\n): Promise {\n await ensureAlertSchema();\n const abandoned = await failAbandonedClaims();\n const enabled = remindersEnabled();\n\n const candidates = options.id != null\n ? (await dueReminders(DEFAULT_DRAIN_LIMIT)).filter((row) => row.id === options.id)\n : await dueReminders(options.limit ?? DEFAULT_DRAIN_LIMIT);\n\n const summary: DrainSummary = {\n enabled,\n considered: candidates.length,\n sent: 0,\n skipped: 0,\n failed: 0,\n abandoned,\n };\n\n // Sequential and settled one at a time: a run cut short leaves every earlier row\n // recorded, and the claim keeps an overlapping run off the rows this one owns.\n for (const reminder of candidates) {\n if (!await claimReminder(reminder.id)) {\n summary.skipped++;\n continue;\n }\n const now = Math.floor(Date.now() / 1000);\n if (await deliver(reminder, now)) summary.sent++;\n else if (enabled) summary.failed++;\n else summary.skipped++;\n }\n\n return summary;\n}\n",[],[440,500],"0d72170f-3b72-4907-8526-f5590085c22f","reminderBuilder.ts","01a08d58-6277-7763-a63b-ba4519767af9",13,["D",1789077877167],"// Turns each device's composed feed into queued reminders.\n//\n// The builder is allowed to run behind; the drainer is not. Every device only has\n// to be visited once within its own reminder lead, which is what lets this work in\n// bounded chunks under a short wall-clock limit.\n\nimport { getDeviceFeedConfiguration } from \"./deviceSourceStore.ts\";\nimport { composeDeviceItems } from \"./sourceClient.ts\";\nimport type { Item } from \"./sourceContract.ts\";\nimport {\n type BuildCandidate,\n isoFromUnix,\n markDeviceBuilt,\n type PendingReminder,\n stalestDevices,\n syncDeviceReminders,\n} from \"./reminderStore.ts\";\n\nexport const DEFAULT_DEVICE_CHUNK = 8;\n\n// Queuing further out than this churns rows for events whose time is still moving.\nconst HORIZON_SECONDS = 36 * 60 * 60;\n\nexport type DeviceBuildResult = {\n deviceId: number;\n queued: number;\n error?: string;\n};\n\nexport type BuildSummary = {\n devices: number;\n queued: number;\n failures: DeviceBuildResult[];\n};\n\nfunction ruleName(leadSeconds: number): string {\n return `lead:${leadSeconds}`;\n}\n\n// The offset is the device's last observed one, so the clock time shown matches the\n// widget. With no offset yet, the reminder names no time rather than a wrong one.\nfunction localClock(eventAt: number, offsetSeconds: number | null): string | null {\n if (offsetSeconds == null) return null;\n const local = new Date((eventAt + offsetSeconds) * 1000);\n const hours = local.getUTCHours();\n const minutes = local.getUTCMinutes().toString().padStart(2, \"0\");\n const suffix = hours < 12 ? \"AM\" : \"PM\";\n return `${((hours + 11) % 12) + 1}:${minutes} ${suffix}`;\n}\n\nexport function reminderFor(\n item: Item,\n device: BuildCandidate,\n now: number,\n): PendingReminder | null {\n const eventAt = Math.floor(item.startsAt);\n if (eventAt <= now || eventAt > now + HORIZON_SECONDS) return null;\n\n const clock = localClock(eventAt, device.tzOffsetSeconds);\n const lead = Math.round(device.leadSeconds / 60);\n // Item bounds are Unix seconds on the wire; the ledger stores readable UTC.\n // `rule` names the lead and is implicitly anchored to the start — an expiry-anchored\n // policy would extend the value (`lead:0@expiry`), not add a column, so distinct\n // rules keep coexisting per item under UNIQUE(device_id,item_id,rule).\n return {\n itemId: item.id,\n rule: ruleName(device.leadSeconds),\n eventAt: isoFromUnix(eventAt),\n expiresAt: isoFromUnix(Math.floor(item.expiresAt)),\n sendAfter: isoFromUnix(eventAt - device.leadSeconds),\n // Source-owned text is a display decision; the parent adds only the timing.\n title: item.mainText,\n body: clock ? `Starts at ${clock}` : `Starts in ${lead} minutes`,\n };\n}\n\nasync function buildDevice(\n device: BuildCandidate,\n now: number,\n): Promise {\n const configuration = await getDeviceFeedConfiguration(device.installId);\n const sources = configuration?.sources ?? [];\n // An unassigned device still gets swept so its stale rows are voided.\n const { items } = sources.length\n ? await composeDeviceItems(sources, { tz: device.tzOffsetSeconds })\n : { items: [] as Item[] };\n\n const reminders = items\n .map((item) => reminderFor(item, device, now))\n .filter((reminder): reminder is PendingReminder => reminder !== null);\n await syncDeviceReminders(device.id, reminders);\n return { deviceId: device.id, queued: reminders.length };\n}\n\nexport async function buildReminders(\n chunk: number = DEFAULT_DEVICE_CHUNK,\n): Promise {\n const devices = await stalestDevices(chunk);\n const now = Math.floor(Date.now() / 1000);\n const failures: DeviceBuildResult[] = [];\n let queued = 0;\n\n // Sequential by device: each one commits before the next starts, so a run cut\n // short by the wall-clock limit costs at most one device's work.\n for (const device of devices) {\n try {\n const result = await buildDevice(device, now);\n queued += result.queued;\n } catch (error) {\n // A single failing source fails that device's whole composition. Recording it\n // keeps a broken source from silently costing that device its reminders.\n failures.push({\n deviceId: device.id,\n queued: 0,\n error: error instanceof Error ? error.message : String(error),\n });\n }\n // Marked either way; a device that always fails must not starve the others.\n await markDeviceBuilt(device.id);\n }\n\n return { devices: devices.length, queued, failures };\n}\n",[],[440,508],"0ab678af-a751-48ad-9997-f936db5da271","push.ts","01a08d58-6277-7763-a63b-b5f96ea86a86",["D",1789077774974],"// Best-effort APNs delivery to one device.\n// Native WidgetKit pushes are preferred; older app-background tokens are a migration fallback.\n// Production credentials never fall back to sandbox. BadDeviceToken can mean a\n// signing/environment mismatch, so only a confirmed unregistration removes a token.\n//\n// Requires APNS_KEY_ID, APNS_TEAM_ID, and APNS_AUTH_KEY (the PEM-armored .p8\n// contents). Topic env vars are optional and default to the app and widget-extension\n// bundle identifiers. Each uploaded token carries its sandbox or production host.\n\nimport {\n deleteDeviceToken,\n type DevicePushToken,\n getTokenForDevice,\n type PushEnvironment,\n} from \"./deviceTokenStore.ts\";\n\n// Val Town warns on missing env.get reads; absent push configuration is intentional.\nfunction optionalEnv(name: string): string | undefined {\n return Deno.env.has(name) ? Deno.env.get(name) : undefined;\n}\n\n\nconst APNS_TEAM_ID = optionalEnv(\"APNS_TEAM_ID\");\n\nconst APNS_APP_TOPIC = optionalEnv(\"APNS_APP_TOPIC\") ?? \"plusjade.clark-view\";\nconst APNS_WIDGET_TOPIC = optionalEnv(\"APNS_WIDGET_TOPIC\")\n ?? \"plusjade.clark-view.push-type.widgets\";\n\nfunction base64UrlFromBytes(bytes: Uint8Array): string {\n let binary = \"\";\n for (const byte of bytes) binary += String.fromCharCode(byte);\n return btoa(binary).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nfunction base64UrlFromString(value: string): string {\n return base64UrlFromBytes(new TextEncoder().encode(value));\n}\n\nfunction pkcs8KeyFromPem(pem: string): Promise {\n const der = pem\n .replace(/-----BEGIN PRIVATE KEY-----/, \"\")\n .replace(/-----END PRIVATE KEY-----/, \"\")\n .replace(/\\s+/g, \"\");\n const bytes = Uint8Array.from(atob(der), (character) => character.charCodeAt(0));\n return crypto.subtle.importKey(\n \"pkcs8\",\n bytes,\n { name: \"ECDSA\", namedCurve: \"P-256\" },\n false,\n [\"sign\"],\n );\n}\n\nconst cachedTokens = new Map();\nconst TOKEN_TTL_SECONDS = 50 * 60;\n\nasync function authToken(environment: PushEnvironment): Promise {\n const prefix = environment === \"production\" ? \"APNS_\" : \"APNS_SANDBOX_\";\n const APNS_KEY_ID = optionalEnv(`${prefix}KEY_ID`);\n const APNS_AUTH_KEY = optionalEnv(`${prefix}AUTH_KEY`);\n const cachedToken = cachedTokens.get(environment);\n if (!APNS_KEY_ID || !APNS_TEAM_ID || !APNS_AUTH_KEY) return null;\n const now = Math.floor(Date.now() / 1000);\n if (cachedToken && now - cachedToken.mintedAt < TOKEN_TTL_SECONDS) {\n return cachedToken.jwt;\n }\n\n const header = base64UrlFromString(JSON.stringify({ alg: \"ES256\", kid: APNS_KEY_ID }));\n const claims = base64UrlFromString(JSON.stringify({ iss: APNS_TEAM_ID, iat: now }));\n const signingInput = `${header}.${claims}`;\n const key = await pkcs8KeyFromPem(APNS_AUTH_KEY);\n const signature = await crypto.subtle.sign(\n { name: \"ECDSA\", hash: \"SHA-256\" },\n key,\n new TextEncoder().encode(signingInput),\n );\n const jwt = `${signingInput}.${base64UrlFromBytes(new Uint8Array(signature))}`;\n cachedTokens.set(environment, { jwt, mintedAt: now });\n return jwt;\n}\n\nexport interface DeliveryResult {\n reason?: string;\n ok: boolean;\n deadToken: boolean;\n}\n\nexport async function sendAPNs(\n token: string,\n kind: DevicePushToken[\"kind\"] | \"app-alert\",\n environment: PushEnvironment,\n alert?: { title: string; body: string },\n transport: typeof fetch = fetch,\n): Promise {\n if (kind === \"app-alert\" && !alert) return { ok: false, deadToken: false, reason: \"MissingAlert\" };\n const jwt = await authToken(environment);\n if (!jwt) return { ok: false, deadToken: false, reason: \"MissingCredentials:\" + environment };\n\n const isWidget = kind === \"widget\";\n const host = environment === \"production\"\n ? \"api.push.apple.com\"\n : \"api.sandbox.push.apple.com\";\n const response = await transport(`https://${host}/3/device/${token}`, {\n method: \"POST\",\n signal: AbortSignal.timeout(10000),\n headers: {\n authorization: `bearer ${jwt}`,\n \"apns-topic\": isWidget ? APNS_WIDGET_TOPIC : APNS_APP_TOPIC,\n \"apns-push-type\": isWidget ? \"widgets\" : kind === \"app-alert\" ? \"alert\" : \"background\",\n \"apns-expiration\": \"0\",\n ...(isWidget ? {} : { \"apns-priority\": kind === \"app-alert\" ? \"10\" : \"5\" }),\n },\n body: JSON.stringify(\n isWidget\n ? { aps: { \"content-changed\": true } }\n : kind === \"app-alert\" ? { aps: { alert, sound: \"default\" } } : { aps: { \"content-available\": 1 } },\n ),\n });\n if (response.ok) return { ok: true, deadToken: false };\n\n const reason = await response.json()\n .then((body) => (body as { reason?: string })?.reason)\n .catch(() => null);\n return {\n ok: false,\n deadToken: response.status === 410,\n reason: reason ?? `APNsHTTP${response.status}`,\n };\n}\n\nexport async function notifyDevice(deviceId: number): Promise {\n const device = await getTokenForDevice(deviceId);\n if (!device) return;\n const { deadToken } = await sendAPNs(\n device.token,\n device.kind,\n device.environment,\n );\n if (deadToken) await deleteDeviceToken(device.deviceId, device.kind);\n}\n",[],[440,516],"5f9cad7e-430a-4576-98d4-0d65c97697ea","presentation.ts","01a08d58-6277-7763-a63b-b1628bf01f2f",["D",1789077774974],"// Versioned device-owned presentation values for the native WidgetKit renderer.\n\nimport { isRecord } from \"./guards.ts\";\n\nexport const SUPPORTED_WIDGET_TEMPLATES = [\"beacon\"] as const;\nconst STORED_WIDGET_TEMPLATES = [\"beacon\", \"standard-v1\"] as const;\n\nexport type WidgetTemplate = (typeof STORED_WIDGET_TEMPLATES)[number];\n\nexport type WidgetPresentation = {\n version: 2;\n template: WidgetTemplate;\n rootSurface: {\n light: string;\n dark: string;\n };\n};\n\n// Both the fallback for an unreadable stored value and the seed written at\n// device registration. It carried three names for those two jobs until\n// 2026-09-06; they were always the same object.\nexport const DEFAULT_WIDGET_PRESENTATION: WidgetPresentation = {\n version: 2,\n template: \"beacon\",\n rootSurface: {\n light: \"#FFFFFF\",\n dark: \"#000000\",\n },\n};\n\nfunction normalizedHex(value: unknown): string | null {\n if (typeof value !== \"string\" || !/^#[0-9a-f]{6}$/i.test(value)) return null;\n return value.toUpperCase();\n}\n\nfunction storedTemplate(value: unknown): WidgetTemplate {\n return typeof value === \"string\"\n && STORED_WIDGET_TEMPLATES.includes(value as WidgetTemplate)\n ? value as WidgetTemplate\n : DEFAULT_WIDGET_PRESENTATION.template;\n}\n\nexport function parseStoredPresentation(raw: unknown): WidgetPresentation {\n let value = raw;\n if (typeof value === \"string\") {\n try {\n value = JSON.parse(value);\n } catch {\n return DEFAULT_WIDGET_PRESENTATION;\n }\n }\n if (!isRecord(value) || value.version !== 2 || !isRecord(value.rootSurface)) {\n return DEFAULT_WIDGET_PRESENTATION;\n }\n\n return {\n version: 2,\n template: storedTemplate(value.template),\n rootSurface: {\n light: normalizedHex(value.rootSurface.light)\n ?? DEFAULT_WIDGET_PRESENTATION.rootSurface.light,\n dark: normalizedHex(value.rootSurface.dark)\n ?? DEFAULT_WIDGET_PRESENTATION.rootSurface.dark,\n },\n };\n}\n\nexport function presentationFromForm(\n template: unknown,\n lightRootSurface: unknown,\n darkRootSurface: unknown,\n): WidgetPresentation | null {\n if (\n typeof template !== \"string\"\n || !SUPPORTED_WIDGET_TEMPLATES.includes(\n template as (typeof SUPPORTED_WIDGET_TEMPLATES)[number],\n )\n ) return null;\n const light = normalizedHex(lightRootSurface);\n const dark = normalizedHex(darkRootSurface);\n if (!light || !dark) return null;\n\n return {\n version: 2,\n template: template as (typeof SUPPORTED_WIDGET_TEMPLATES)[number],\n rootSurface: {\n light,\n dark,\n },\n };\n}\n",[],[440,523],"b4ea8618-4c3d-4d80-8d50-72f822349eb2","guards.ts","01a08d58-6277-7763-a63b-ac77af76ce66",["D",1789077774974],"// Pure runtime type guards. Domain-free like text.ts, so anything in lib/,\n// http/ or render/ can import them without creating a cycle.\n\nexport function isRecord(value: unknown): value is Record {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n",[],[440,530],"9e75124e-a377-4615-ab00-a38b6786de7b","deviceTokenStore.ts","01a08d58-6277-7763-a63b-a8f6ccf909ce",["D",1789077774974],"// APNs token persistence keyed by the public install identifier.\n// Native widget tokens are preferred; legacy app-background tokens keep older beta builds working.\n//\n// The pre-`device_push_tokens` `device_tokens` table and its one-way backfill were removed on\n// 2026-09-06. The backfill had long since run, but replaying it on every cold start resurrected\n// rows that dead-token cleanup had deleted — `INSERT OR IGNORE` only skips rows that still exist.\n// The `apns_environment` ALTER went with it: the column is in the CREATE below, so on an existing\n// database it threw \"duplicate column name\" every cold start and on a fresh one it was redundant.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type PushKind = \"app-background\" | \"widget\";\nexport type PushEnvironment = \"sandbox\" | \"production\";\n\nexport interface DevicePushToken {\n deviceId: string;\n token: string;\n kind: PushKind;\n environment: PushEnvironment;\n}\n\nlet schemaReady: Promise | null = null;\n\nexport function ensureDeviceTokenSchema(): Promise {\n if (!schemaReady) {\n schemaReady = (async () => {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS device_push_tokens (\n device_id TEXT NOT NULL,\n push_kind TEXT NOT NULL CHECK(push_kind IN ('app-background', 'widget')),\n apns_token TEXT NOT NULL,\n apns_environment TEXT NOT NULL DEFAULT 'sandbox'\n CHECK(apns_environment IN ('sandbox', 'production')),\n updated_at TEXT NOT NULL,\n PRIMARY KEY(device_id, push_kind)\n )\n `);\n })().catch((error) => {\n schemaReady = null;\n throw error;\n });\n }\n return schemaReady;\n}\n\nfunction nowIso(): string {\n return new Date().toISOString();\n}\n\nexport async function saveDeviceToken(\n installId: string,\n token: string,\n kind: PushKind,\n environment: PushEnvironment,\n active: boolean,\n): Promise {\n await ensureDeviceTokenSchema();\n if (!active) {\n await deleteDeviceToken(installId, kind);\n return;\n }\n\n await sqlite.execute({\n sql: `\n INSERT INTO device_push_tokens (\n device_id,\n push_kind,\n apns_token,\n apns_environment,\n updated_at\n )\n VALUES (?, ?, ?, ?, ?)\n ON CONFLICT(device_id, push_kind) DO UPDATE SET\n apns_token = excluded.apns_token,\n apns_environment = excluded.apns_environment,\n updated_at = excluded.updated_at\n `,\n args: [installId, kind, token, environment, nowIso()],\n });\n}\n\nexport async function deleteDeviceToken(\n installId: string,\n kind: PushKind,\n): Promise {\n await ensureDeviceTokenSchema();\n await sqlite.execute({\n sql: \"DELETE FROM device_push_tokens WHERE device_id = ? AND push_kind = ?\",\n args: [installId, kind],\n });\n}\n\nexport async function getTokenForDevice(\n deviceId: number,\n): Promise {\n await ensureDeviceTokenSchema();\n const result = await sqlite.execute({\n sql: `\n SELECT dt.device_id, dt.apns_token, dt.push_kind, dt.apns_environment\n FROM devices d\n JOIN device_push_tokens dt ON dt.device_id = d.install_id\n WHERE d.id = ?\n ORDER BY CASE dt.push_kind WHEN 'widget' THEN 0 ELSE 1 END\n LIMIT 1\n `,\n args: [deviceId],\n });\n const row = result.rows[0] as {\n device_id: string;\n apns_token: string;\n push_kind: PushKind;\n apns_environment: PushEnvironment;\n } | undefined;\n return row\n ? {\n deviceId: row.device_id,\n token: row.apns_token,\n kind: row.push_kind,\n environment: row.apns_environment,\n }\n : null;\n}\n",[],[440,537],"c67b8d18-61ae-4080-8111-1ae184a5f690","deviceStore.ts","01a08d58-6277-7763-a63b-a6f369b50ea4",["D",1789077774974],"// Device-centric persistence for browser inspection and source assignment.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { SourceKind } from \"./sourceStore.ts\";\nimport {\n parseStoredPresentation,\n type WidgetPresentation,\n} from \"./presentation.ts\";\n\nexport type DeviceSummary = {\n id: number;\n installId: string;\n name: string;\n createdAt: string;\n updatedAt: string;\n sourceCount: number;\n};\n\nexport type DeviceSourceView = {\n assignmentId: number;\n sourceId: number;\n kind: SourceKind;\n name: string;\n description: string;\n settings: unknown;\n settingsSchema: unknown;\n createdAt: string;\n updatedAt: string;\n};\n\nexport type DeviceDetail = DeviceSummary & {\n presentation: WidgetPresentation;\n sources: DeviceSourceView[];\n};\n\nexport type AvailableSource = {\n id: number;\n kind: SourceKind;\n name: string;\n description: string;\n settingsSchema: unknown;\n};\n\nfunction parseJson(raw: string | null): unknown {\n if (raw == null) return {};\n try {\n return JSON.parse(raw);\n } catch {\n return raw;\n }\n}\n\nfunction nowIso(): string {\n return new Date().toISOString();\n}\n\nfunction mapSourceRow(row: {\n assignment_id: number;\n source_id: number;\n kind: SourceKind;\n name: string;\n description: string;\n settings: string;\n settings_schema: string;\n assignment_created_at: string;\n assignment_updated_at: string;\n}): DeviceSourceView {\n return {\n assignmentId: row.assignment_id,\n sourceId: row.source_id,\n kind: row.kind,\n name: row.name,\n description: row.description,\n settings: parseJson(row.settings),\n settingsSchema: parseJson(row.settings_schema),\n createdAt: row.assignment_created_at,\n updatedAt: row.assignment_updated_at,\n };\n}\n\nexport async function listDevices(): Promise {\n const result = await sqlite.execute(`\n SELECT\n d.id, d.install_id, d.name, d.created_at, d.updated_at,\n COUNT(ds.id) AS source_count\n FROM devices d\n LEFT JOIN device_sources ds ON ds.device_id = d.id\n GROUP BY d.id\n ORDER BY d.name COLLATE NOCASE, d.id\n `);\n return (result.rows as {\n id: number; install_id: string; name: string; created_at: string;\n updated_at: string; source_count: number;\n }[]).map((row) => ({\n id: row.id,\n installId: row.install_id,\n name: row.name,\n createdAt: row.created_at,\n updatedAt: row.updated_at,\n sourceCount: Number(row.source_count),\n }));\n}\n\nexport async function getDevice(id: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT\n d.id, d.install_id, d.name, d.created_at, d.updated_at, d.presentation,\n ds.id AS assignment_id, ds.settings,\n ds.created_at AS assignment_created_at,\n ds.updated_at AS assignment_updated_at,\n s.id AS source_id, s.kind, s.name AS source_name, s.description, s.settings_schema\n FROM devices d\n LEFT JOIN device_sources ds ON ds.device_id = d.id\n LEFT JOIN sources s ON s.id = ds.source_id\n WHERE d.id = ?\n ORDER BY s.id\n `,\n args: [id],\n });\n const rows = result.rows as {\n id: number; install_id: string; name: string; created_at: string; updated_at: string;\n presentation: string;\n assignment_id: number | null; settings: string | null;\n assignment_created_at: string | null; assignment_updated_at: string | null;\n source_id: number | null; kind: SourceKind | null; source_name: string | null; description: string | null;\n settings_schema: string | null;\n }[];\n const first = rows[0];\n if (!first) return null;\n\n const sources = rows.flatMap((row) => {\n if (\n row.assignment_id == null || row.source_id == null ||\n row.settings == null || row.assignment_created_at == null ||\n row.assignment_updated_at == null || row.kind == null ||\n row.description == null || row.settings_schema == null\n ) return [];\n return [mapSourceRow({\n assignment_id: row.assignment_id,\n source_id: row.source_id,\n kind: row.kind,\n name: row.source_name ?? row.kind,\n description: row.description,\n settings: row.settings,\n settings_schema: row.settings_schema,\n assignment_created_at: row.assignment_created_at,\n assignment_updated_at: row.assignment_updated_at,\n })];\n });\n\n return {\n id: first.id,\n installId: first.install_id,\n name: first.name,\n createdAt: first.created_at,\n updatedAt: first.updated_at,\n sourceCount: sources.length,\n presentation: parseStoredPresentation(first.presentation),\n sources,\n };\n}\n\nexport async function getDeviceByInstallId(installId: string): Promise {\n const result = await sqlite.execute({\n sql: \"SELECT id FROM devices WHERE install_id = ?\",\n args: [installId],\n });\n const row = result.rows[0] as { id: number } | undefined;\n return row ? getDevice(Number(row.id)) : null;\n}\n\n// The widget reports its offset on every resolve, so the parent infers it rather\n// than asking anyone to configure it. Reminders need it to compose the same items\n// the widget sees and to name a local clock time.\n//\n// Two properties matter here. It is conditional: resolve is the hot read path, and\n// an unconditional write would turn every widget refresh into one. And it is\n// best-effort: capturing a timezone must never fail a feed request.\nconst TZ_REFRESH_SECONDS = 6 * 60 * 60;\n\nexport async function recordDeviceTimeZone(\n installId: string,\n offsetSeconds: number | null,\n): Promise {\n if (offsetSeconds == null) return;\n const stale = new Date(Date.now() - TZ_REFRESH_SECONDS * 1000).toISOString();\n try {\n await sqlite.execute({\n sql: `UPDATE devices SET last_tz_offset_seconds = ?, last_tz_seen_at = ?\n WHERE install_id = ?\n AND (last_tz_offset_seconds IS NOT ?\n OR last_tz_seen_at IS NULL\n OR last_tz_seen_at < ?)`,\n args: [offsetSeconds, nowIso(), installId, offsetSeconds, stale],\n });\n } catch {\n // The columns arrive with the reminder schema; a feed read predating it still serves.\n }\n}\n\nexport async function renameDevice(id: number, name: string): Promise {\n const result = await sqlite.execute({\n sql: \"UPDATE devices SET name = ?, updated_at = ? WHERE id = ?\",\n args: [name, nowIso(), id],\n });\n return result.rowsAffected === 1;\n}\n\nexport type MergeDeviceResult =\n | { ok: true; targetId: number }\n | { ok: false; reason: \"origin\" | \"target\" | \"same\" };\n\n// A reinstalled app pairs into a fresh row, stranding the configuration the\n// person already built. Merging keeps the configured (target) row and moves the\n// live install id onto it, so assignments, presentation, name and browser URL\n// all survive; the origin row is dropped. The install id — not the row id — is\n// what the widget and the token tables key on, which is why adoption is enough.\nexport async function mergeDeviceInto(\n originId: number,\n targetId: number,\n): Promise {\n if (originId === targetId) return { ok: false, reason: \"same\" };\n\n const result = await sqlite.execute({\n sql: \"SELECT id, install_id FROM devices WHERE id IN (?, ?)\",\n args: [originId, targetId],\n });\n const rows = result.rows as { id: number; install_id: string }[];\n const origin = rows.find((row) => Number(row.id) === originId);\n const target = rows.find((row) => Number(row.id) === targetId);\n if (!origin) return { ok: false, reason: \"origin\" };\n if (!target) return { ok: false, reason: \"target\" };\n\n // Deleting the origin first frees the unique install id the target adopts;\n // one batch keeps the target from ever pointing at a retired install.\n await sqlite.batch([\n { sql: \"DELETE FROM devices WHERE id = ?\", args: [originId] },\n {\n sql: \"UPDATE devices SET install_id = ?, updated_at = ? WHERE id = ?\",\n args: [origin.install_id, nowIso(), targetId],\n },\n {\n sql: \"DELETE FROM device_push_tokens WHERE device_id = ?\",\n args: [target.install_id],\n },\n {\n sql: \"DELETE FROM device_alert_tokens WHERE device_id = ?\",\n args: [target.install_id],\n },\n ]);\n return { ok: true, targetId };\n}\n\nexport async function updateDevicePresentation(\n id: number,\n presentation: WidgetPresentation,\n): Promise {\n const result = await sqlite.execute({\n sql: \"UPDATE devices SET presentation = ?, updated_at = ? WHERE id = ?\",\n args: [JSON.stringify(presentation), nowIso(), id],\n });\n return result.rowsAffected === 1;\n}\n\nexport async function listAvailableSources(deviceId: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT s.id, s.kind, s.name AS source_name, s.description, s.settings_schema\n FROM sources s\n WHERE s.bunch_id = (SELECT bunch_id FROM devices WHERE id = ?) AND NOT EXISTS (\n SELECT 1 FROM device_sources ds\n WHERE ds.device_id = ? AND ds.source_id = s.id\n )\n ORDER BY s.kind COLLATE NOCASE, s.id\n `,\n args: [deviceId, deviceId],\n });\n return (result.rows as {\n id: number; kind: SourceKind; source_name: string; description: string; settings_schema: string;\n }[]).map((row) => ({\n id: row.id,\n kind: row.kind,\n name: row.source_name,\n description: row.description,\n settingsSchema: parseJson(row.settings_schema),\n }));\n}\n\nexport async function getDeviceSource(\n deviceId: number,\n assignmentId: number,\n): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT\n ds.id AS assignment_id, ds.settings,\n ds.created_at AS assignment_created_at,\n ds.updated_at AS assignment_updated_at,\n s.id AS source_id, s.kind, s.name AS source_name, s.description, s.settings_schema\n FROM device_sources ds\n JOIN sources s ON s.id = ds.source_id\n WHERE ds.device_id = ? AND ds.id = ?\n `,\n args: [deviceId, assignmentId],\n });\n const row = result.rows[0] as {\n assignment_id: number; source_id: number; kind: SourceKind; source_name: string; description: string;\n settings: string; settings_schema: string;\n assignment_created_at: string; assignment_updated_at: string;\n } | undefined;\n return row ? mapSourceRow({...row,name:row.source_name}) : null;\n}\n\nexport async function addDeviceSource(\n deviceId: number,\n sourceId: number,\n settings: unknown,\n): Promise {\n const timestamp = nowIso();\n const results = await sqlite.batch([\n {\n sql: `\n INSERT INTO device_sources\n (device_id, source_id, settings, created_at, updated_at)\n SELECT ?, s.id, ?, ?, ?\n FROM sources s\n WHERE s.id = ?\n AND EXISTS (SELECT 1 FROM devices d WHERE d.id = ? AND d.bunch_id = s.bunch_id)\n AND NOT EXISTS (\n SELECT 1 FROM device_sources ds\n WHERE ds.device_id = ? AND ds.source_id = s.id\n )\n RETURNING id\n `,\n args: [\n deviceId, JSON.stringify(settings), timestamp, timestamp,\n sourceId, deviceId, deviceId,\n ],\n },\n {\n sql: \"UPDATE devices SET updated_at = ? WHERE id = ? AND changes() = 1\",\n args: [timestamp, deviceId],\n },\n ]);\n const row = results[0].rows[0] as { id: number } | undefined;\n return row ? Number(row.id) : null;\n}\n\nexport async function updateDeviceSource(\n deviceId: number,\n assignmentId: number,\n settings: unknown,\n): Promise {\n const timestamp = nowIso();\n const results = await sqlite.batch([\n {\n sql: `\n UPDATE device_sources\n SET settings = ?, updated_at = ?\n WHERE device_id = ? AND id = ?\n `,\n args: [JSON.stringify(settings), timestamp, deviceId, assignmentId],\n },\n {\n sql: `\n UPDATE devices SET updated_at = ?\n WHERE id = ? AND EXISTS (\n SELECT 1 FROM device_sources\n WHERE device_id = ? AND id = ?\n )\n `,\n args: [timestamp, deviceId, deviceId, assignmentId],\n },\n ]);\n return results[0].rowsAffected === 1;\n}\n\nexport async function removeDeviceSource(\n deviceId: number,\n assignmentId: number,\n): Promise {\n const timestamp = nowIso();\n const results = await sqlite.batch([\n {\n sql: \"DELETE FROM device_sources WHERE device_id = ? AND id = ?\",\n args: [deviceId, assignmentId],\n },\n {\n sql: \"UPDATE devices SET updated_at = ? WHERE id = ?\",\n args: [timestamp, deviceId],\n },\n ]);\n return results[0].rowsAffected === 1;\n}\n\n",[],[440,544],"6e0ad7e1-3e04-4786-a4f4-cba0c0f4239c","deviceSourceStore.ts","01a08d58-6277-7763-a63b-a3ab4554ea81",["D",1789077774974],"// Widget-facing read seam for a device's presentation and source assignments.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { DeviceSourceSelection } from \"./sourceClient.ts\";\nimport {\n parseStoredPresentation,\n type WidgetPresentation,\n} from \"./presentation.ts\";\n\nexport type DeviceFeedConfiguration = {\n presentation: WidgetPresentation;\n sources: DeviceSourceSelection[];\n};\n\nexport async function getDeviceFeedConfiguration(\n installId: string,\n): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT d.presentation, s.id AS source_id, ds.settings\n FROM devices d\n LEFT JOIN device_sources ds ON ds.device_id = d.id\n LEFT JOIN sources s ON s.id = ds.source_id\n WHERE d.install_id = ?\n ORDER BY s.id\n `,\n args: [installId],\n });\n const rows = result.rows as {\n presentation: string;\n source_id: number | null;\n settings: string | null;\n }[];\n const first = rows[0];\n if (!first) return null;\n\n const sources = rows.flatMap((row) => {\n if (row.source_id == null || row.settings == null) return [];\n let settings: unknown = {};\n try {\n settings = JSON.parse(row.settings);\n } catch {\n // Hardened rows are valid JSON; this keeps a corrupt row from crashing lookup.\n }\n return [{ sourceId: row.source_id, settings }];\n });\n return {\n presentation: parseStoredPresentation(first.presentation),\n sources,\n };\n}\n\n",[],[440,551],"c2411267-9e01-4049-a1fa-bd9f5f04fc38","bunchStore.ts","01a08d58-6277-7763-a63b-9f1255dafc97",["D",1789077774974],"// Enrollment and access-scope persistence for the device-centric model.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { DEFAULT_WIDGET_PRESENTATION } from \"./presentation.ts\";\n\nconst CODE_ALPHABET = \"ABCDEFGHJKMNPQRSTUVWXYZ23456789\";\nconst CODE_LENGTH = 6;\nconst CODE_TTL_SECONDS = 30 * 60;\n\nexport type BunchSummary = {\n id: number;\n name: string;\n createdAt: string;\n updatedAt: string;\n deviceCount: number;\n};\n\nexport type BunchDevice = {\n id: number;\n installId: string;\n name: string;\n createdAt: string;\n updatedAt: string;\n};\n\nexport type BunchDetail = BunchSummary & { devices: BunchDevice[] };\n\nexport type BunchCode = {\n code: string;\n createdAt: string;\n expiresAt: string;\n active: boolean;\n};\n\nfunction nowIso(): string {\n return new Date().toISOString();\n}\n\nfunction randomCode(): string {\n const bytes = crypto.getRandomValues(new Uint8Array(CODE_LENGTH));\n return Array.from(bytes, (byte) => CODE_ALPHABET[byte % CODE_ALPHABET.length]).join(\"\");\n}\n\nexport async function listBunches(): Promise {\n const result = await sqlite.execute(`\n SELECT b.id, b.name, b.created_at, b.updated_at, COUNT(d.id) AS device_count\n FROM bunches b\n LEFT JOIN devices d ON d.bunch_id = b.id\n GROUP BY b.id\n ORDER BY b.name COLLATE NOCASE, b.id\n `);\n return (result.rows as {\n id: number; name: string; created_at: string; updated_at: string; device_count: number;\n }[]).map((row) => ({\n id: row.id,\n name: row.name,\n createdAt: row.created_at,\n updatedAt: row.updated_at,\n deviceCount: Number(row.device_count),\n }));\n}\n\nexport async function createBunch(name: string): Promise {\n const timestamp = nowIso();\n const result = await sqlite.execute({\n sql: \"INSERT INTO bunches (name, created_at, updated_at) VALUES (?, ?, ?) RETURNING id\",\n args: [name, timestamp, timestamp],\n });\n return Number((result.rows[0] as { id: number }).id);\n}\n\nexport async function getBunch(id: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT\n b.id, b.name, b.created_at, b.updated_at,\n d.id AS device_id, d.install_id, d.name AS device_name,\n d.created_at AS device_created_at, d.updated_at AS device_updated_at\n FROM bunches b\n LEFT JOIN devices d ON d.bunch_id = b.id\n WHERE b.id = ?\n ORDER BY d.name COLLATE NOCASE, d.id\n `,\n args: [id],\n });\n const rows = result.rows as {\n id: number; name: string; created_at: string; updated_at: string;\n device_id: number | null; install_id: string | null; device_name: string | null;\n device_created_at: string | null; device_updated_at: string | null;\n }[];\n const first = rows[0];\n if (!first) return null;\n const devices = rows.flatMap((row) =>\n row.device_id == null || row.install_id == null || row.device_name == null ||\n row.device_created_at == null || row.device_updated_at == null\n ? []\n : [{\n id: row.device_id,\n installId: row.install_id,\n name: row.device_name,\n createdAt: row.device_created_at,\n updatedAt: row.device_updated_at,\n }]\n );\n return {\n id: first.id,\n name: first.name,\n createdAt: first.created_at,\n updatedAt: first.updated_at,\n deviceCount: devices.length,\n devices,\n };\n}\n\nexport async function renameBunch(id: number, name: string): Promise {\n const result = await sqlite.execute({\n sql: \"UPDATE bunches SET name = ?, updated_at = ? WHERE id = ?\",\n args: [name, nowIso(), id],\n });\n return result.rowsAffected === 1;\n}\n\nexport async function listBunchCodes(bunchId: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT code, created_at, expires_at,\n CASE WHEN datetime(expires_at) > datetime('now') THEN 1 ELSE 0 END AS active\n FROM bunch_codes\n WHERE bunch_id = ?\n ORDER BY datetime(created_at) DESC, code\n `,\n args: [bunchId],\n });\n return (result.rows as {\n code: string; created_at: string; expires_at: string; active: number;\n }[]).map((row) => ({\n code: row.code,\n createdAt: row.created_at,\n expiresAt: row.expires_at,\n active: Number(row.active) === 1,\n }));\n}\n\nexport async function createBunchCode(bunchId: number): Promise {\n const createdAt = nowIso();\n const expiresAt = new Date(Date.now() + CODE_TTL_SECONDS * 1000).toISOString();\n for (let attempt = 0; attempt < 5; attempt += 1) {\n const code = randomCode();\n try {\n await sqlite.execute({\n sql: \"INSERT INTO bunch_codes (code, bunch_id, expires_at, created_at) VALUES (?, ?, ?, ?)\",\n args: [code, bunchId, expiresAt, createdAt],\n });\n return { code, createdAt, expiresAt, active: true };\n } catch (error) {\n const collision = String(error).includes(\"UNIQUE constraint failed\");\n if (!collision || attempt === 4) throw error;\n }\n }\n throw new Error(\"Could not create a unique bunch code\");\n}\n\nexport type RegisterDeviceResult =\n | { ok: true; deviceId: number }\n | { ok: false; reason: \"unknown\" | \"expired\" };\n\nexport async function registerDevice(\n code: string,\n installId: string,\n submittedName: string | null,\n): Promise {\n const codeResult = await sqlite.execute({\n sql: \"SELECT bunch_id, expires_at FROM bunch_codes WHERE code = ?\",\n args: [code],\n });\n const codeRow = codeResult.rows[0] as { bunch_id: number; expires_at: string } | undefined;\n if (!codeRow) return { ok: false, reason: \"unknown\" };\n if (new Date(codeRow.expires_at).getTime() <= Date.now()) {\n return { ok: false, reason: \"expired\" };\n }\n\n const timestamp = nowIso();\n const cleanName = submittedName?.trim() ?? \"\";\n const fallbackName = `Device ${installId.slice(0, 8)}`;\n const result = await sqlite.execute({\n sql: `\n INSERT INTO devices (\n bunch_id, install_id, name, created_at, updated_at, presentation\n )\n SELECT bunch_id, ?, ?, ?, ?, ?\n FROM bunch_codes\n WHERE code = ? AND datetime(expires_at) > datetime('now')\n ON CONFLICT(install_id) DO UPDATE SET\n bunch_id = excluded.bunch_id,\n name = CASE WHEN ? THEN excluded.name ELSE devices.name END,\n updated_at = excluded.updated_at\n RETURNING id\n `,\n args: [\n installId,\n cleanName || fallbackName,\n timestamp,\n timestamp,\n JSON.stringify(DEFAULT_WIDGET_PRESENTATION),\n code,\n cleanName.length > 0,\n ],\n });\n const row = result.rows[0] as { id: number } | undefined;\n if (!row) return { ok: false, reason: \"expired\" };\n return { ok: true, deviceId: Number(row.id) };\n}\n",[],[440,558],"3b4ea07d-cbb9-4530-95b8-369412f257a7","alertPush.ts","01a08d58-6277-7763-a63b-9b7d661555a4",["D",1789077774974],"// App-alert registrations are separate from widget refresh tokens and keyed by APNs environment.\n// A disabled registration retains its token so permission changes never affect widget refreshes.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { sendAPNs } from \"./push.ts\";\nimport { ISO_FORMAT, isoFromEpochColumn, NOW_UTC, nowIsoUtc } from \"./time.ts\";\nimport type { PushEnvironment } from \"./deviceTokenStore.ts\";\n\nconst TEST_COOLDOWN_SECONDS = 60;\n\nconst ALERT_COLUMNS = `\n device_id TEXT NOT NULL,\n environment TEXT NOT NULL CHECK(environment IN ('sandbox','production')),\n token TEXT NOT NULL,\n allowed INTEGER NOT NULL CHECK(allowed IN (0,1)),\n updated_at TEXT NOT NULL,\n last_test_at TEXT,\n PRIMARY KEY(device_id, environment)`;\n\n// last_test_at was epoch seconds with 0 meaning \"never tested\". Rebuilding is the only\n// way to retype a column in SQLite, and it lets never-tested become an honest NULL.\nasync function migrateEpochCooldown() {\n const info = await sqlite.execute(\"PRAGMA table_info(device_alert_tokens)\");\n const column = (info.rows as { name: string; type: string }[])\n .find((row) => row.name === \"last_test_at\");\n if (!column || column.type !== \"INTEGER\") return;\n\n await sqlite.execute(\"ALTER TABLE device_alert_tokens RENAME TO device_alert_tokens_epoch\");\n await sqlite.execute(`CREATE TABLE device_alert_tokens (${ALERT_COLUMNS})`);\n await sqlite.execute(`INSERT INTO device_alert_tokens\n (device_id,environment,token,allowed,updated_at,last_test_at)\n SELECT device_id,environment,token,allowed,updated_at,\n CASE WHEN last_test_at = 0 THEN NULL ELSE ${isoFromEpochColumn(\"last_test_at\")} END\n FROM device_alert_tokens_epoch`);\n await sqlite.execute(\"DROP TABLE device_alert_tokens_epoch\");\n}\n\nexport async function ensureAlertSchema() {\n await migrateEpochCooldown();\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS device_alert_tokens (${ALERT_COLUMNS})`);\n}\n\nexport async function saveAlertToken(device: string, token: string, environment: PushEnvironment, allowed: boolean) {\n await ensureAlertSchema();\n await sqlite.execute({\n sql: `INSERT INTO device_alert_tokens(device_id,environment,token,allowed,updated_at)\n VALUES(?,?,?,?,?) ON CONFLICT(device_id,environment) DO UPDATE SET\n token=excluded.token,allowed=excluded.allowed,updated_at=excluded.updated_at`,\n args: [device, environment, token, allowed ? 1 : 0, nowIsoUtc()],\n });\n}\n\nexport async function sendTestAlert(device: string, token: string, environment: PushEnvironment) {\n await ensureAlertSchema();\n // Knowledge of the current APNs token is required; a public device ID alone cannot send a test.\n // A never-tested registration is NULL rather than a sentinel, so it passes the cooldown.\n const result = await sqlite.execute({\n sql: `UPDATE device_alert_tokens SET last_test_at=${NOW_UTC}\n WHERE device_id=? AND environment=? AND token=? AND allowed=1\n AND (last_test_at IS NULL OR last_test_at < strftime('${ISO_FORMAT}','now',?))\n RETURNING device_id`,\n args: [device, environment, token, `-${TEST_COOLDOWN_SECONDS} seconds`],\n });\n if (!result.rows.length) return { ok: false, reason: \"NotAllowedOrRateLimited\" };\n try {\n const delivery = await sendAPNs(token, \"app-alert\", environment, {\n title: \"Clark View\", body: \"Push notifications are connected.\",\n });\n if (delivery.deadToken) {\n await sqlite.execute({sql: \"DELETE FROM device_alert_tokens WHERE device_id=? AND environment=? AND token=?\",\n args: [device, environment, token]});\n }\n return { ok: delivery.ok, reason: delivery.reason };\n } catch {\n return { ok: false, reason: \"PushTransportOrSigningFailed\" };\n }\n}\n",[],[440,565],"ffbfc066-094c-413d-8731-600ae4203d80",["D",1789077774974],[238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256],[440],"1fe8d051-30d2-4890-9579-57e737626f86","widget.ts","01a08d58-6277-7763-a63b-8cfc4336a063","01a08d58-6277-7763-a63b-90a786c9a141",["D",1789077774974],"// Stable iOS-facing routes backed exclusively by the device model.\n\nimport { Hono } from \"npm:hono\";\nimport { isRecord } from \"../../lib/guards.ts\";\nimport { getDeviceFeedConfiguration } from \"../../lib/deviceSourceStore.ts\";\nimport { getDeviceByInstallId, recordDeviceTimeZone } from \"../../lib/deviceStore.ts\";\nimport { composeDeviceFeed, utcOffsetFromQuery } from \"../../lib/sourceClient.ts\";\n\nexport const widgetRoutes = new Hono();\n\nwidgetRoutes.get(\"/resolve\", async (c) => {\n const url = new URL(c.req.url);\n const installId = url.searchParams.get(\"device\");\n const tz = url.searchParams.get(\"tz\");\n const configuration = installId\n ? await getDeviceFeedConfiguration(installId)\n : null;\n if (installId) await recordDeviceTimeZone(installId, utcOffsetFromQuery(tz));\n return composeDeviceFeed(configuration?.sources ?? [], { tz }, configuration?.presentation);\n});\n\nwidgetRoutes.get(\"/status/:deviceId\", async (c) => {\n const deviceId = c.req.param(\"deviceId\");\n const device = await getDeviceByInstallId(deviceId);\n if (!device) return c.json({ deviceId, paired: false });\n\n const primary = device.sources[0] ?? null;\n // Compatibility projection for the containing app; feed composition is source-agnostic.\n const settings = isRecord(primary?.settings) ? primary.settings : {};\n const teams = Array.isArray(settings.teams)\n ? settings.teams.filter((value): value is string => typeof value === \"string\")\n : [];\n return c.json({\n deviceId,\n paired: true,\n name: device.name,\n activeSource: primary?.kind ?? null,\n teams,\n });\n});\n\n",[],[282,583,576],"routes","0c29bc57-6e4b-4a74-a3fb-866f088f204a","sources.ts","01a08d58-6277-7763-a63b-892fa7a76bc2",["D",1789077774974],"// Read-only source resource pages. Only Diagnostics contacts the implementing source.\nimport { Hono } from \"npm:hono\";\nimport { getSource, listSources } from \"../../lib/sourceStore.ts\";\nimport { loadSourceDiagnostics } from \"../../lib/sourceDiagnosticsClient.ts\";\nimport {\n sourceIndexDocument, sourceNotFoundDocument, sourceShowDocument, type SourceTab,\n} from \"../../render/sourceHtml.tsx\";\n\nfunction positiveInteger(value: string): number | null {\n const number = Number(value);\n return Number.isSafeInteger(number) && number > 0 ? number : null;\n}\n\nexport const sourceRoutes = new Hono();\nsourceRoutes.get(\"/sources\", async (c) => c.html(sourceIndexDocument(await listSources())));\n\nfor (const tab of [\"overview\", \"diagnostics\", \"settings\", \"devices\"] as SourceTab[]) {\n sourceRoutes.get(`/sources/:id/${tab}`, async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const source = id ? await getSource(id) : null;\n if (!source) return c.html(sourceNotFoundDocument(), 404);\n const diagnostics = tab === \"diagnostics\" ? await loadSourceDiagnostics(source.id) : undefined;\n c.header(\"cache-control\", \"no-store\");\n return c.html(sourceShowDocument(source, tab, diagnostics));\n });\n}\n\nsourceRoutes.get(\"/sources/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id || !await getSource(id)) return c.html(sourceNotFoundDocument(), 404);\n return c.redirect(`/sources/${id}/overview`);\n});\n",[],[282,583,585],"e6dbeec1-f87b-4e16-a7f5-acdf5f1a05b3","root.ts","01a08d58-6277-7763-a63b-84307f783fbe",["D",1789077774974],"// Browser entry point for the parent administration app.\n\nimport { Hono } from \"npm:hono\";\nimport { rootHtml } from \"../../render/rootHtml.ts\";\n\nexport const rootRoutes = new Hono();\n\nrootRoutes.get(\"/\", (c) => c.html(rootHtml()));\n",[],[282,583,592],"134fc311-16b6-4f37-8974-33b6f2f65675","reminders.ts","01a08d58-6277-7763-a63b-804736d21d4c",["D",1789077774974],"// Internal reminder operations, driven by this val's crons today.\n//\n// Drain is a route rather than a cron-only function so the trigger stays swappable:\n// a scheduling service that calls back at an exact instant would post the same route\n// with a row id. The claim makes a duplicate or retried call a no-op, which is what\n// lets an untrusted external trigger be accepted at all.\n\nimport { Hono } from \"npm:hono\";\nimport { buildReminders } from \"../../lib/reminderBuilder.ts\";\nimport { drainReminders } from \"../../lib/reminderDrainer.ts\";\nimport { ensureReminderSchema, reminderCounts } from \"../../lib/reminderStore.ts\";\nimport { isRecord } from \"../../lib/guards.ts\";\n\nexport const reminderRoutes = new Hono();\n\nfunction authorized(header: string | undefined): boolean {\n const expected = Deno.env.has(\"REMINDERS_TOKEN\")\n ? Deno.env.get(\"REMINDERS_TOKEN\")\n : undefined;\n if (!expected || !header) return false;\n const presented = header.replace(/^Bearer /i, \"\");\n // Length-independent comparison is not worth a constant-time routine here; the\n // token is a deployment secret, not a per-user credential.\n return presented === expected;\n}\n\nfunction positiveInteger(value: unknown): number | undefined {\n return typeof value === \"number\" && Number.isInteger(value) && value > 0\n ? value\n : undefined;\n}\n\nreminderRoutes.post(\"/internal/reminders/:operation\", async (c) => {\n const operation = c.req.param(\"operation\");\n if (operation !== \"build\" && operation !== \"drain\") return c.json({ ok: false }, 404);\n if (!authorized(c.req.header(\"authorization\"))) return c.json({ ok: false }, 401);\n\n const value = await c.req.json().catch(() => null);\n const body = isRecord(value) ? value : {};\n await ensureReminderSchema();\n\n if (operation === \"build\") {\n const summary = await buildReminders(positiveInteger(body.chunk));\n return c.json({ ok: true, ...summary, counts: await reminderCounts() });\n }\n\n const summary = await drainReminders({\n id: positiveInteger(body.id),\n limit: positiveInteger(body.limit),\n });\n return c.json({ ok: true, ...summary, counts: await reminderCounts() });\n});\n",[],[282,583,599],"5aec132a-3acb-4a20-8279-a0483f3ddeb0","notifications.ts","01a08d58-6277-7763-a63b-7f51cf684c4f",["D",1789077774974],"// Fixed self-test messages only; token proof and a persistent cooldown guard delivery.\nimport { Hono } from \"npm:hono\";\nimport { saveAlertToken, sendTestAlert } from \"../../lib/alertPush.ts\";\nimport { isRecord } from \"../../lib/guards.ts\";\n\nexport const alertRoutes = new Hono();\nalertRoutes.post(\"/device/notifications/:operation\", async c => {\n const operation = c.req.param(\"operation\");\n if (operation !== \"register\" && operation !== \"test\") return c.json({ok:false},404);\n const value = await c.req.json().catch(() => null);\n if (!isRecord(value) || typeof value.device !== \"string\" || value.device.length > 128 || !value.device\n || (value.environment !== \"sandbox\" && value.environment !== \"production\")\n || typeof value.token !== \"string\" || !/^(?:[a-f0-9]{2}){16,256}$/.test(value.token)\n || (operation === \"register\" && typeof value.allowed !== \"boolean\")) return c.json({ok:false},400);\n if (operation === \"register\") {\n await saveAlertToken(value.device, value.token, value.environment, value.allowed as boolean);\n return c.json({ok:true});\n }\n const result = await sendTestAlert(value.device, value.token, value.environment);\n return c.json(result, result.ok ? 200 : 409);\n});\n",[],[282,583,606],"633e127c-a3da-446f-b71e-e5c98fd1f9bc","devices.ts","01a08d58-6277-7763-a63b-79d61d64c159",23,["D",1789077951317],"// Device administration plus parallel new-model registration/status endpoints.\n\nimport { Hono } from \"npm:hono\";\nimport { HTTPException } from \"npm:hono/http-exception\";\nimport { loadSettingsForm, settingsFromForm } from \"../../lib/sourceSettings.ts\";\n\nimport { isRecord } from \"../../lib/guards.ts\";\nimport {\n addDeviceSource,\n getDevice,\n getDeviceByInstallId,\n getDeviceSource,\n listAvailableSources,\n listDevices,\n mergeDeviceInto,\n removeDeviceSource,\n renameDevice,\n updateDevicePresentation,\n updateDeviceSource,\n} from \"../../lib/deviceStore.ts\";\nimport {\n presentationFromForm,\n type WidgetPresentation,\n} from \"../../lib/presentation.ts\";\nimport { registerDevice } from \"../../lib/bunchStore.ts\";\nimport { saveDeviceToken } from \"../../lib/deviceTokenStore.ts\";\nimport { notifyDevice } from \"../../lib/push.ts\";\nimport {\n deviceIndexDocument,\n deviceMergeDocument,\n deviceNotFoundDocument,\n devicePresentationDocument,\n devicePreviewDocument,\n deviceShowDocument,\n deviceSourceEditDocument,\n deviceSourceNewDocument,\n type DevicePreviewItem,\n} from \"../../render/deviceHtml.tsx\";\nimport { composeDeviceFeed } from \"../../lib/sourceClient.ts\";\n\n\nfunction positiveInteger(value: string): number | null {\n const number = Number(value);\n return Number.isSafeInteger(number) && number > 0 ? number : null;\n}\n\nfunction isPreviewItem(value: unknown): value is DevicePreviewItem {\n return isRecord(value)\n && typeof value.id === \"string\"\n && typeof value.mainText === \"string\"\n && typeof value.subText === \"string\"\n && (value.caption === null || typeof value.caption === \"string\")\n && typeof value.emphasized === \"boolean\"\n && typeof value.startsAt === \"number\"\n && typeof value.expiresAt === \"number\";\n}\n\n// The preview is the only place the parent reads inside the widget payload\n// instead of streaming it through, so it is the only place that has to check\n// the shape. A provider drift surfaces as this page's ordinary error state\n// rather than a render-time crash on an absent field.\nasync function previewResponse(\n sources: { sourceId: number; settings: unknown }[],\n presentation: WidgetPresentation,\n): Promise<{ items: DevicePreviewItem[]; rawJson: string }> {\n const response = await composeDeviceFeed(sources, {}, presentation);\n const payload = await response.json();\n if (\n !isRecord(payload) || !Array.isArray(payload.items)\n || !payload.items.every(isPreviewItem)\n ) {\n throw new Error(\"device feed returned an unexpected preview payload\");\n }\n return { items: payload.items, rawJson: JSON.stringify(payload, null, 2) };\n}\n\nexport const deviceRoutes = new Hono();\n// Expected form errors must survive the application's operational error handler.\ndeviceRoutes.onError((error) => {\n if (error instanceof HTTPException) return error.getResponse();\n throw error;\n});\n\ndeviceRoutes.get(\"/devices\", async (c) => {\n return c.html(deviceIndexDocument(await listDevices()));\n});\n\n// Device-named alias for the stable iOS resolver route.\ndeviceRoutes.get(\"/devices/resolve\", async (c) => {\n const url = new URL(c.req.url);\n const installId = url.searchParams.get(\"device\");\n const device = installId ? await getDeviceByInstallId(installId) : null;\n const sources = device?.sources.map((source) => ({\n sourceId: source.sourceId,\n settings: source.settings,\n })) ?? [];\n return composeDeviceFeed(sources, {\n tz: url.searchParams.get(\"tz\"),\n }, device?.presentation);\n});\n\ndeviceRoutes.get(\"/devices/status/:installId\", async (c) => {\n const installId = c.req.param(\"installId\");\n const device = await getDeviceByInstallId(installId);\n if (!device) return c.json({ deviceId: installId, registered: false });\n return c.json({\n deviceId: installId,\n registered: true,\n name: device.name,\n activeSource: device.sources[0]?.kind ?? null,\n sources: device.sources.map((source) => ({\n kind: source.kind,\n settings: source.settings,\n })),\n });\n});\n\ndeviceRoutes.post(\"/devices/register\", async (c) => {\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false }, 400);\n }\n const values = (body ?? {}) as { code?: unknown; device?: unknown; name?: unknown };\n if (typeof values.code !== \"string\" || typeof values.device !== \"string\") {\n return c.json({ ok: false }, 400);\n }\n const code = values.code.trim().toUpperCase();\n const installId = values.device.trim();\n const name = typeof values.name === \"string\" ? values.name : null;\n if (!code || !installId) return c.json({ ok: false }, 400);\n\n const result = await registerDevice(code, installId, name);\n if (result.ok) return c.json(result);\n if (result.reason === \"expired\") {\n return c.json({ ok: false, message: \"expired\" }, 422);\n }\n return c.json({ ok: false }, 404);\n});\n\ndeviceRoutes.get(\"/devices/:id/sources/new\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n\n const available = await listAvailableSources(id);\n const requestedSource = positiveInteger(c.req.query(\"source\") ?? \"\");\n const selected = requestedSource\n ? available.find((source) => source.id === requestedSource) ?? null\n : null;\n return c.html(deviceSourceNewDocument(device, available, selected,\n selected ? await loadSettingsForm(selected.id) : {fields:[],revision:\"\"}));\n});\n\ndeviceRoutes.post(\"/devices/:id/sources\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id || !(await getDevice(id))) return c.text(\"Device not found\", 404);\n\n const body = await c.req.parseBody({ all: true });\n const sourceId = positiveInteger(String(body.sourceId ?? \"\"));\n if (!sourceId) return c.text(\"Source is required\", 400);\n\n const available = await listAvailableSources(id);\n const source = available.find((candidate) => candidate.id === sourceId);\n if (!source) return c.text(\"Source is not available for this device\", 422);\n\n const assignmentId = await addDeviceSource(\n id,\n sourceId,\n await settingsFromForm(sourceId, body),\n );\n if (!assignmentId) return c.text(\"Source could not be attached\", 422);\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/sources/${assignmentId}`, 303);\n});\n\ndeviceRoutes.get(\"/devices/:id/sources/:assignmentId\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const assignmentId = positiveInteger(c.req.param(\"assignmentId\"));\n if (!id || !assignmentId) return c.html(deviceNotFoundDocument(), 404);\n const [device, source] = await Promise.all([\n getDevice(id),\n getDeviceSource(id, assignmentId),\n ]);\n if (!device || !source) return c.html(deviceNotFoundDocument(), 404);\n return c.html(deviceSourceEditDocument(\n device,\n source,\n await loadSettingsForm(source.sourceId),\n c.req.query(\"saved\") === \"1\",\n ));\n});\n\ndeviceRoutes.post(\"/devices/:id/sources/:assignmentId\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const assignmentId = positiveInteger(c.req.param(\"assignmentId\"));\n if (!id || !assignmentId) return c.text(\"Source assignment not found\", 404);\n const source = await getDeviceSource(id, assignmentId);\n if (!source) return c.text(\"Source assignment not found\", 404);\n\n const body = await c.req.parseBody({ all: true });\n const updated = await updateDeviceSource(\n id,\n assignmentId,\n await settingsFromForm(source.sourceId, body),\n );\n if (!updated) return c.text(\"Source assignment not found\", 404);\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/sources/${assignmentId}?saved=1`, 303);\n});\n\ndeviceRoutes.post(\"/devices/:id/sources/:assignmentId/delete\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const assignmentId = positiveInteger(c.req.param(\"assignmentId\"));\n if (!id || !assignmentId) return c.text(\"Source assignment not found\", 404);\n const removed = await removeDeviceSource(id, assignmentId);\n if (!removed) return c.text(\"Source assignment not found\", 404);\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}`, 303);\n});\n\ndeviceRoutes.get(\"/devices/:id/presentation\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n return c.html(devicePresentationDocument(\n device,\n c.req.query(\"saved\") === \"1\",\n ));\n});\n\ndeviceRoutes.post(\"/devices/:id/presentation\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id || !(await getDevice(id))) return c.text(\"Device not found\", 404);\n\n const body = await c.req.parseBody();\n const presentation = presentationFromForm(\n body.template,\n body.lightRootSurface,\n body.darkRootSurface,\n );\n if (!presentation) {\n return c.text(\"Template and Light/Dark Mode #RRGGBB colors are required\", 400);\n }\n if (!(await updateDevicePresentation(id, presentation))) {\n return c.text(\"Device not found\", 404);\n }\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/presentation?saved=1`, 303);\n});\n\nasync function mergeCandidates(deviceId: number) {\n return (await listDevices()).filter((candidate) => candidate.id !== deviceId);\n}\n\ndeviceRoutes.get(\"/devices/:id/merge\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n return c.html(deviceMergeDocument(device, await mergeCandidates(id)));\n});\n\ndeviceRoutes.post(\"/devices/:id/merge\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n\n const body = await c.req.parseBody();\n const targetId = positiveInteger(String(body.targetId ?? \"\"));\n if (!targetId) {\n return c.html(\n deviceMergeDocument(device, await mergeCandidates(id), \"Choose a device to merge into.\"),\n 400,\n );\n }\n\n const result = await mergeDeviceInto(id, targetId);\n if (!result.ok) {\n const message = result.reason === \"same\"\n ? \"A device cannot merge into itself.\"\n : \"That device no longer exists.\";\n return c.html(deviceMergeDocument(device, await mergeCandidates(id), message), 422);\n }\n await notifyDevice(result.targetId).catch(() => undefined);\n return c.redirect(`/devices/${result.targetId}?saved=1`, 303);\n});\n\ndeviceRoutes.get(\"/devices/:id/preview\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n try {\n const preview = await previewResponse(\n device.sources.map((source) => ({\n sourceId: source.sourceId,\n settings: source.settings,\n })),\n device.presentation,\n );\n return c.html(devicePreviewDocument(device, { ok: true, ...preview }));\n } catch (error) {\n return c.html(devicePreviewDocument(device, {\n ok: false,\n error: error instanceof Error ? error.message : String(error),\n }));\n }\n});\n\ndeviceRoutes.get(\"/devices/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n return c.html(deviceShowDocument(device, c.req.query(\"saved\") === \"1\"));\n});\n\ndeviceRoutes.post(\"/devices/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.text(\"Device not found\", 404);\n const body = await c.req.parseBody();\n const name = String(body.name ?? \"\").trim();\n if (!name) return c.text(\"Name is required\", 400);\n if (!(await renameDevice(id, name))) return c.text(\"Device not found\", 404);\n return c.redirect(`/devices/${id}?saved=1`, 303);\n});\n\n// Stable iOS path; the implementation now redeems bunch codes into devices.\ndeviceRoutes.post(\"/pair\", async (c) => {\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false }, 400);\n }\n const { code, device } = (body ?? {}) as { code?: unknown; device?: unknown };\n if (typeof code !== \"string\" || typeof device !== \"string\") {\n return c.json({ ok: false }, 400);\n }\n\n const normalizedCode = code.trim().toUpperCase();\n const installId = device.trim();\n if (!normalizedCode || !installId) return c.json({ ok: false }, 400);\n\n const result = await registerDevice(normalizedCode, installId, null);\n if (result.ok) return c.json(result, 200);\n if (result.reason === \"expired\") {\n return c.json({ ok: false, message: \"expired\" }, 422);\n }\n return c.json({ ok: false }, 404);\n});\n\ndeviceRoutes.post(\"/device/token\", async (c) => {\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false }, 400);\n }\n const values = (body ?? {}) as {\n device?: unknown;\n token?: unknown;\n kind?: unknown;\n environment?: unknown;\n active?: unknown;\n };\n if (typeof values.device !== \"string\" || typeof values.token !== \"string\") {\n return c.json({ ok: false }, 400);\n }\n\n // Missing kind/environment/active preserves compatibility with beta builds that\n // upload the containing app's sandbox background-push token.\n const kind = values.kind ?? \"app-background\";\n const environment = values.environment ?? \"sandbox\";\n const active = values.active ?? true;\n if (\n (kind !== \"app-background\" && kind !== \"widget\")\n || (environment !== \"sandbox\" && environment !== \"production\")\n || typeof active !== \"boolean\"\n ) {\n return c.json({ ok: false }, 400);\n }\n\n await saveDeviceToken(values.device, values.token, kind, environment, active);\n return c.json({ ok: true });\n});\n\n",[],[282,583,613],"bbcb6c37-4260-40c1-85b9-e834f84972f3","bunches.ts","01a08d58-6277-7763-a63b-758af4a1fbdd",["D",1789077774974],"// Browser administration for bunch enrollment and access scope.\n\nimport { Hono } from \"npm:hono\";\nimport {\n createBunch,\n createBunchCode,\n getBunch,\n listBunchCodes,\n listBunches,\n renameBunch,\n} from \"../../lib/bunchStore.ts\";\nimport {\n bunchIndexDocument,\n bunchNewDocument,\n bunchNotFoundDocument,\n bunchPairDocument,\n bunchShowDocument,\n} from \"../../render/bunchHtml.tsx\";\n\nfunction positiveInteger(value: string): number | null {\n const number = Number(value);\n return Number.isSafeInteger(number) && number > 0 ? number : null;\n}\n\nexport const bunchRoutes = new Hono();\n\nbunchRoutes.get(\"/bunches\", async (c) => {\n return c.html(bunchIndexDocument(await listBunches()));\n});\n\nbunchRoutes.get(\"/bunches/new\", (c) => c.html(bunchNewDocument()));\n\nbunchRoutes.post(\"/bunches\", async (c) => {\n const body = await c.req.parseBody();\n const name = String(body.name ?? \"\").trim();\n if (!name) return c.text(\"Name is required\", 400);\n const id = await createBunch(name);\n return c.redirect(`/bunches/${id}`, 303);\n});\n\nbunchRoutes.get(\"/bunches/:id/pair\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(bunchNotFoundDocument(), 404);\n const bunch = await getBunch(id);\n if (!bunch) return c.html(bunchNotFoundDocument(), 404);\n return c.html(bunchPairDocument(bunch, await listBunchCodes(id)));\n});\n\nbunchRoutes.post(\"/bunches/:id/codes\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(bunchNotFoundDocument(), 404);\n const bunch = await getBunch(id);\n if (!bunch) return c.html(bunchNotFoundDocument(), 404);\n const created = await createBunchCode(id);\n return c.html(bunchPairDocument(bunch, await listBunchCodes(id), created));\n});\n\nbunchRoutes.get(\"/bunches/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(bunchNotFoundDocument(), 404);\n const bunch = await getBunch(id);\n if (!bunch) return c.html(bunchNotFoundDocument(), 404);\n return c.html(bunchShowDocument(bunch, c.req.query(\"saved\") === \"1\"));\n});\n\nbunchRoutes.post(\"/bunches/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.text(\"Bunch not found\", 404);\n const body = await c.req.parseBody();\n const name = String(body.name ?? \"\").trim();\n if (!name) return c.text(\"Name is required\", 400);\n if (!(await renameBunch(id, name))) return c.text(\"Bunch not found\", 404);\n return c.redirect(`/bunches/${id}?saved=1`, 303);\n});\n",[],[282,583,621],"97836494-d0d1-4a7d-813d-4bb6b0f451f2","01a08d58-6277-7763-a63b-967c09f7042e",["D",1789077774974],[230,231,232,233,234,235,236],[282,583],"ea6965b8-b418-4756-91fa-7421e5955dc9",["D",1789077774974],[229],[282],["D",1789077774974],[],[18,80],["D",1789078070220],[],[18,90],["D",1789077774974],[226,227],[18],"3f98cd5f-34dd-466d-b78c-05f88850e0ca","drainReminders.ts","01a08d58-6277-7763-a63b-60a985dc2660","01a08d58-6277-7763-a63b-641b6454c7d9",["D",1789077774974],"interval","// Sends every reminder that has come due.\n//\n// This is the timely half. It calls the same code path the internal drain route\n// exposes, so replacing this clock with a scheduling service that calls back at an\n// exact instant changes the trigger and nothing else.\n\nimport { drainReminders } from \"../lib/reminderDrainer.ts\";\nimport { ensureReminderSchema } from \"../lib/reminderStore.ts\";\n\nexport default async function () {\n await ensureReminderSchema();\n console.log(JSON.stringify(await drainReminders()));\n}\n",[],[654,646],"crons","616a98a4-2361-428f-992a-36b0a5e8785a","buildReminders.ts","01a08d58-6277-7763-a63b-5cb027e8b9fb",["D",1789077774974],"// Queues reminders for the devices whose queues are stalest.\n//\n// Correctness constraint: every device must be visited at least once inside its own\n// reminder lead, so the full sweep period (chunk size ÷ device count × this interval)\n// has to stay under that lead. Missing it does not make reminders late; it makes them\n// never queue at all. Watch the oldest reminders_built_at as the fleet grows.\n\nimport { buildReminders } from \"../lib/reminderBuilder.ts\";\nimport { ensureReminderSchema } from \"../lib/reminderStore.ts\";\n\nexport default async function () {\n await ensureReminderSchema();\n const summary = await buildReminders();\n for (const failure of summary.failures) {\n // A source failure fails that device's whole composition; surfacing it keeps a\n // broken source from silently costing a device its reminders.\n console.error(`device ${failure.deviceId} build failed: ${failure.error}`);\n }\n console.log(JSON.stringify(summary));\n}\n",[],[654,656],"c59cb222-e565-4ef8-a777-d961128df5d2",["D",1789077774974],[223,224],[654],["D",1787009561780],["D",1789532458193],{"_11":12,"_165":85},{"_11":12,"_161":-5,"_84":85,"_31":83,"_162":163,"_164":30},{"_42":108,"_13":16,"_36":39,"_152":116,"_153":74,"_154":155,"_156":120,"_157":116,"_158":45,"_159":14,"_160":12},"ctx",{"_57":-5,"_185":704,"_705":706,"_707":708,"_709":30,"_710":30,"_711":30,"_712":24,"_713":-5,"_714":-7,"_715":-7,"_716":26,"_717":30,"_718":30,"_719":-5,"_720":30,"_721":30,"_722":30,"_723":-5},"ENV",{"_675":676,"_677":678,"_679":75,"_680":681,"_682":683,"_684":685,"_686":687,"_688":689,"_690":691,"_692":693,"_694":695,"_696":697,"_698":699,"_700":701,"_702":703},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · docs