Available settings

\") === (tab === \"settings\"), \"settings isolation\");\n check(html.includes(\"

Attached devices

\") === (tab === \"devices\"), \"devices isolation\");\n check(html.includes(\"

Stored coverage

\") === (tab === \"diagnostics\"), \"diagnostics isolation\");\n if (tab === \"diagnostics\") check(html.includes(\"1.0 days ahead\"), \"future horizon\");\n}\nfor (const state of [\"unsupported\",\"unavailable\"] as const) {\n const html=sourceShowDocument(source,\"diagnostics\",{state,checkedAt});\n check(html.includes(\"Coverage is unknown\") && !html.includes(\"

Total items

\"), \"unknown is not zero\");\n}\ncheck(sourceShowDocument(source,\"diagnostics\",{state:\"ready\",value:parseDiagnostics(empty,\"arbitrary\"),checkedAt})\n .includes(\"No stored items.\"), \"empty presentation\");\nconsole.log({checks, result:\"passed\"});\n",[],[412,451],"610ca4b0-9db1-4c16-9939-4b701f42bbc8","source-boundary-check.ts","01a0a6cc-b75f-7474-bf3d-39b8ba59c24c",["D",1789504829282],"// Route and composition checks use a disposable device and never send pushes.\nimport app from \"../main.ts\";\nimport {sqlite} from \"https://esm.town/v/std/sqlite/main.ts\";\nimport {addDeviceSource,getDevice,listAvailableSources,updateDeviceSource} from \"../lib/deviceStore.ts\";\nimport {composeDeviceFeed,sourcePointer,sourceRpc} from \"../lib/sourceClient.ts\";\nimport {normalizeItems,phase} from \"../lib/sourceContract.ts\";\nfunction assert(ok:unknown,msg:string):asserts ok {if(!ok)throw new Error(msg);}\nconst stamp=new Date().toISOString(), install=\"source-boundary-fixture-\"+crypto.randomUUID();\nconst d=await sqlite.execute({sql:\"INSERT INTO devices(bunch_id,install_id,name,created_at,updated_at) VALUES(1,?,'Boundary fixture',?,?) RETURNING id\",args:[install,stamp,stamp]});\nconst id=Number(d.rows[0].id);\nconst originalFetch=globalThis.fetch;\nlet providerRequests=0;\nglobalThis.fetch=async(input,init)=>{\n const url=new URL(input instanceof Request?input.url:String(input));\n if(url.hostname.endsWith(\".web.val.run\"))providerRequests++;\n return originalFetch(input,init);\n};\nconst call=(path:string,method=\"GET\")=>app(new Request(\"https://parent.invalid\"+path,{method}));\ntry {\n const empty=await composeDeviceFeed([]);\n const payload=await empty.json();\n assert(payload.schemaVersion===3&&payload.items.length===0,\"empty composition\");\n assert(empty.headers.get(\"x-effective-source-count\")===\"0\"&&empty.headers.get(\"x-effective-sources\")===\"\",\"empty diagnostics\");\n assert(providerRequests===0,\"empty composition fetched provider\");\n for(const route of [\"/config/resolve\",\"/devices/resolve\"]){\n for(const query of [\"\",\"?device=unknown-retirement-fixture\",\"?device=\"+install]){\n const r=await call(route+query),p=await r.json();\n assert(r.ok&&p.schemaVersion===3&&p.items.length===0,\"empty resolver\");\n }\n }\n assert(providerRequests===0,\"unassigned resolver fetched provider\");\n const page=await (await call(\"/devices/\"+id)).text();\n assert(page.includes(\"No sources assigned.\")&&!page.includes(\"starter games\"),\"empty device copy\");\n for(const route of [\"/\",\"/?teams[]=fever&sports[]=nba\"]){\n const r=await call(route);assert(r.ok&&r.headers.get(\"content-type\")?.includes(\"text/html\"),\"browser root\");\n }\n assert((await call(\"/ingest/fiba/2000-01-01\",\"POST\")).status===404,\"retired ingest route\");\n assert((await call(\"/ingest/moon/2000-01-01\",\"POST\")).status===404,\"retired Moon adapter\");\n const available=await listAvailableSources(id);\n assert(available.some(s=>s.id===5)&&available.some(s=>s.id===3),\"available sources\");\n const a=await addDeviceSource(id,5,{teams:[\"rams\"]});assert(a,\"NFL assignment\");\n assert(await addDeviceSource(id,3,{}),\"Moon assignment\");\n assert(await updateDeviceSource(id,a,{teams:[\"rams\"]}),\"settings update\");\n const device=await getDevice(id);assert(device?.sources.length===2,\"device projection\");\n for(const path of [\"/sources\",\"/sources/5\",\"/sources/3\",\"/devices/\"+id,\"/devices/\"+id+\"/sources/\"+a]){\n // /sources/:id redirects to its overview tab, so a 3xx is a pass here.\n const r=await call(path);assert(r.ok||r.status===302,`browser route ${path} returned ${r.status}`);assert(!(await r.text()).includes('name=\"priority\"'),\"priority control\");\n }\n for(const route of [\"/config/resolve\",\"/devices/resolve\"]){\n const r=await call(route+\"?device=\"+install+\"&tz=-25200\"),p=await r.json();\n assert(r.ok&&p.schemaVersion===3&&p.items.some((x:any)=>x.id.startsWith(\"5:\"))&&p.items.some((x:any)=>x.id.startsWith(\"3:\")),\"mixed source response\");\n assert(p.items.every((x:any,i:number)=>x.startsAt<1e11&&(i===0||p.items[i-1].startsAt<=x.startsAt)),\"seconds and ordering\");\n // Every item is a window, and the legacy field still mirrors the start for iOS\n // builds that predate it.\n assert(p.items.every((x:any)=>x.expiresAt>x.startsAt&&x.timestamp===x.startsAt),\"window and legacy mirror\");\n // Moon's peak is instantaneous: a one-second window, current at no other instant.\n const moon=p.items.find((x:any)=>x.id.startsWith(\"3:\"));\n assert(moon.expiresAt===moon.startsAt+1,\"an instantaneous item survives composition intact\");\n assert(phase(moon,moon.startsAt-1)===\"upcoming\"&&phase(moon,moon.startsAt)===\"current\"\n &&phase(moon,moon.startsAt+1)===\"expired\",\"instantaneous phase\");\n }\n // A source still publishing a bare timestamp is upgraded rather than rejected.\n const upgraded=normalizeItems([{id:\"legacy\",mainText:\"m\",subText:\"s\",caption:null,emphasized:false,timestamp:1788739200}]);\n assert(upgraded?.[0].startsAt===1788739200&&upgraded?.[0].expiresAt===1788739201,\"legacy item upgraded to an instant\");\n assert(normalizeItems([{id:\"bad\",mainText:\"m\",subText:\"s\",caption:null,emphasized:false,startsAt:1,expiresAt:1}])===null,\"a zero-length window is refused\");\n const status=await (await call(\"/config/status/\"+install)).json();\n assert(status.paired&&status.activeSource===\"moon\"&&Array.isArray(status.teams),\"status compatibility\");\n const p=await sourcePointer(5),desc=await (await sourceRpc(p,\"/v1/descriptor\")).json();\n assert(desc.sourceKey===\"nfl\"&&!desc.capabilities.publish,\"descriptor\");\n console.log(\"PASS: no-provider empty feeds, both resolvers, browser pages, retired ingest, status compatibility and NFL/Moon composition\");\n} finally {\n globalThis.fetch=originalFetch;\n await sqlite.execute({sql:\"DELETE FROM device_sources WHERE device_id=?\",args:[id]});\n await sqlite.execute({sql:\"DELETE FROM devices WHERE id=?\",args:[id]});\n}\n",[],[412,458],"81a98f67-40fb-40a6-a01f-4e49a448b56f","remove-source-intraday.ts","01a0a6cc-b75f-7474-bf3d-34d5a9f62085",["D",1789504829282],"// One-time cutover cleanup. No runtime compatibility path and no source data writes.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nconst scope = \"source_id IN (SELECT id FROM sources WHERE remote_source_key IN ('wfiba','nfl','cfb','wnba'))\";\nconst before = await sqlite.execute({sql:\"SELECT id,settings FROM device_sources WHERE \"+scope});\nconst presentations = await sqlite.execute(\"SELECT id,presentation FROM devices ORDER BY id\");\nconst now = new Date().toISOString();\nconst results = await sqlite.batch([\n {sql:\"UPDATE devices SET updated_at=? WHERE id IN (SELECT device_id FROM device_sources WHERE \"+scope+\" AND json_type(settings,'$.intradayFilter') IS NOT NULL)\",args:[now]},\n {sql:\"UPDATE device_sources SET settings=json_remove(settings,'$.intradayFilter'),updated_at=? WHERE \"+scope+\" AND json_type(settings,'$.intradayFilter') IS NOT NULL\",args:[now]},\n]);\nconst after = await sqlite.execute({sql:\"SELECT id,settings FROM device_sources WHERE \"+scope});\nfor (const row of before.rows) {\n const expected = JSON.parse(String(row.settings)); delete expected.intradayFilter;\n const actual = after.rows.find(candidate=>candidate.id===row.id);\n if (!actual || JSON.stringify(JSON.parse(String(actual.settings)))!==JSON.stringify(expected)) throw new Error(\"Assignment preservation check failed\");\n}\nif (JSON.stringify((await sqlite.execute(\"SELECT id,presentation FROM devices ORDER BY id\")).rows)!==JSON.stringify(presentations.rows)) throw new Error(\"Presentation changed during cleanup\");\nconsole.log(JSON.stringify({ok:true,removedKeys:results[1].rowsAffected,assignmentsChecked:after.rows.length,presentationPreserved:true}));\n",[],[412,465],"70f596cc-dfdd-4d35-bbef-b2ad4f7b1a4d","remove-assignment-bunch-constraints.ts","01a0a6cc-b75f-7474-bf3d-3275d637459d",["D",1789504829282],"// One-time, idempotent migration: bunch membership does not own source assignments.\n// Keep foreign keys, unique device/source pairs, and settings validation intact.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nawait sqlite.batch([\n \"DROP TRIGGER IF EXISTS device_bunch_move\",\n \"DROP TRIGGER IF EXISTS source_assignment_bunch_insert\",\n \"DROP TRIGGER IF EXISTS source_assignment_bunch_update\",\n \"DROP TRIGGER IF EXISTS source_owner_update\",\n]);\nconsole.log(\"Removed obsolete assignment bunch constraints.\");\n",[],[412,472],"d840b508-a0cc-4efe-8e95-386b62898103","reminder-check.ts","01a0a6cc-b75f-7474-bf3d-2e3fdc8a433c",48,["D",1789505203106],5,"// Proves the reminder boundary: due-predicate selection, single-claim delivery,\n// cancellation, lateness guards and the disabled dry run. Uses disposable fixtures\n// and cleans them up. Sends no real APNs requests.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { addDeviceSource } from \"../lib/deviceStore.ts\";\nimport { reminderFor } from \"../lib/reminderBuilder.ts\";\nimport { drainReminders, remindersEnabled } from \"../lib/reminderDrainer.ts\";\nimport {\n claimReminder,\n DEFAULT_LEAD_SECONDS,\n dueReminders,\n ensureReminderSchema,\n failAbandonedClaims,\n isoFromUnix,\n MAX_LATENESS_SECONDS,\n syncDeviceReminders,\n} from \"../lib/reminderStore.ts\";\nimport { ensureAlertSchema } from \"../lib/alertPush.ts\";\nimport type { Item } from \"../lib/sourceContract.ts\";\n\nfunction assert(value: unknown, message: string) {\n if (!value) throw new Error(message);\n}\n\nconst now = Math.floor(Date.now() / 1000);\nconst device = {\n id: -1,\n installId: \"reminder-check-\" + crypto.randomUUID(),\n leadSeconds: DEFAULT_LEAD_SECONDS,\n tzOffsetSeconds: -25200,\n};\n\n// Two hours is a plausible source-owned duration; `durationSeconds: 1` is the\n// instantaneous case (a moon peak), which must survive queuing like any other.\nfunction item(id: string, startsAt: number, durationSeconds = 7200): Item {\n return {\n id,\n mainText: \"Away @ Home\",\n subText: \"Network\",\n caption: null,\n emphasized: false,\n startsAt,\n expiresAt: startsAt + durationSeconds,\n };\n}\n\n// Lead time is not quantized to the tick: send_after is exact, and the tick only\n// bounds how late delivery can be. A dropdown of quarter-hours would encode a\n// deployment detail into the product.\nconst odd = { ...device, leadSeconds: 50 * 60 };\nconst oddReminder = reminderFor(item(\"5:odd\", now + 3600), odd, now);\nassert(oddReminder?.sendAfter === isoFromUnix(now + 3600 - 50 * 60), \"arbitrary lead is exact\");\nassert(oddReminder?.rule === \"lead:3000\", \"rule carries the lead so leads never collide\");\n\n// Stored times must match Date.toISOString() byte for byte. The `T` separator is the\n// part that matters: SQLite's datetime() emits a space, and a mix of the two would\n// break the due predicate silently, since string order stops being time order.\nconst ISO_UTC = /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/;\nassert(ISO_UTC.test(oddReminder!.eventAt) && ISO_UTC.test(oddReminder!.sendAfter), \"ISO UTC storage format\");\nassert(oddReminder!.sendAfter < oddReminder!.eventAt, \"text timestamps compare chronologically\");\n\n// The lateness cap must clear the drain cadence plus the scheduler's slack, or a row\n// coming due just after a tick is voided rather than sent. Val Town cron has been seen\n// firing ~5 minutes past its configured minute, so a cap equal to the cadence drops\n// reminders silently. Kept as a relationship, not a number, so retuning the cadence\n// cannot quietly reintroduce it.\nconst DRAIN_INTERVAL_SECONDS = 15 * 60;\nconst OBSERVED_CRON_SLACK_SECONDS = 5 * 60;\nassert(\n MAX_LATENESS_SECONDS > DRAIN_INTERVAL_SECONDS + OBSERVED_CRON_SLACK_SECONDS,\n \"lateness cap must exceed drain cadence plus cron slack\",\n);\n\n// The window is carried into the ledger so send-time policy can ask whether the\n// event is over without another read. An instantaneous item queues like any other:\n// it is the start that schedules a reminder, and a one-second expiry is not a null.\nconst windowed = reminderFor(item(\"5:window\", now + 7200), device, now);\nassert(windowed?.expiresAt === isoFromUnix(now + 7200 + 7200), \"the item's expiry reaches the ledger\");\nconst moment = reminderFor(item(\"3:peak\", now + 7200, 1), device, now);\nassert(moment?.expiresAt === isoFromUnix(now + 7201), \"an instantaneous item queues with its one-second window\");\nassert(moment!.eventAt < moment!.expiresAt, \"expiry sorts after the start as text\");\n\nassert(reminderFor(item(\"5:past\", now - 60), device, now) === null, \"started events are not queued\");\nassert(reminderFor(item(\"5:far\", now + 200 * 3600), device, now) === null, \"beyond horizon is not queued\");\n\nconst clocked = reminderFor(item(\"5:clock\", now + 7200), device, now);\nassert(/^Starts at \\d{1,2}:\\d{2} (AM|PM)$/.test(clocked?.body ?? \"\"), \"local clock body\");\nconst unknownTz = reminderFor(item(\"5:clock\", now + 7200), { ...device, tzOffsetSeconds: null }, now);\nassert(unknownTz?.body === \"Starts in 60 minutes\", \"no offset names no clock time\");\n\nawait ensureReminderSchema();\nawait ensureAlertSchema();\n\nconst fixture = await sqlite.execute({\n sql: `INSERT INTO devices (bunch_id, install_id, name, created_at, updated_at)\n SELECT (SELECT id FROM bunches ORDER BY id LIMIT 1), ?, ?, ?, ? RETURNING id`,\n args: [device.installId, \"reminder check\", new Date().toISOString(), new Date().toISOString()],\n});\nconst deviceId = Number((fixture.rows[0] as { id: number }).id);\n\ntry {\n await addDeviceSource(deviceId, 5, {teams: []});\n // Due means \"send_after has passed and nothing sent it\", not \"falls in this tick's\n // window\". That is what survives a skipped tick or a late-published event.\n await syncDeviceReminders(deviceId, [\n { itemId: \"5:due\", rule: \"lead:3600\", eventAt: isoFromUnix(now + 3540), expiresAt: isoFromUnix(now + 10740), sendAfter: isoFromUnix(now - 60), title: \"Due\", body: \"Body\" },\n { itemId: \"5:later\", rule: \"lead:3600\", eventAt: isoFromUnix(now + 90000), expiresAt: isoFromUnix(now + 97200), sendAfter: isoFromUnix(now + 86400), title: \"Later\", body: \"Body\" },\n ]);\n const due = (await dueReminders(50)).filter((row) => row.deviceId === deviceId);\n assert(due.length === 1 && due[0].itemId === \"5:due\", \"only past-due rows are selected\");\n\n // The claim is the lock. Two racing drains cannot both own one row.\n assert(await claimReminder(due[0].id), \"first claim wins\");\n assert(!await claimReminder(due[0].id), \"second claim is refused\");\n await sqlite.execute({\n sql: \"UPDATE notification_queue SET state='pending', claimed_at=NULL WHERE id=?\",\n args: [due[0].id],\n });\n\n // Re-enqueueing is a no-op; an item that left the feed is cancelled in place.\n await syncDeviceReminders(deviceId, [\n { itemId: \"5:due\", rule: \"lead:3600\", eventAt: isoFromUnix(now + 3540), expiresAt: isoFromUnix(now + 10740), sendAfter: isoFromUnix(now - 60), title: \"Due\", body: \"Body\" },\n ]);\n const counts = await sqlite.execute({\n sql: \"SELECT state, COUNT(*) AS total FROM notification_queue WHERE device_id=? GROUP BY state\",\n args: [deviceId],\n });\n const byState = Object.fromEntries(\n (counts.rows as { state: string; total: number }[]).map((row) => [row.state, Number(row.total)]),\n );\n assert(byState.pending === 1 && byState.void === 1, \"vanished item voided, surviving item kept\");\n\n const drained = await drainReminders({ id: due[0].id });\n const settled = await sqlite.execute({\n sql: \"SELECT state, apns_status FROM notification_queue WHERE device_id=? AND item_id='5:due'\",\n args: [deviceId],\n });\n const row = settled.rows[0] as { state: string; apns_status: string };\n if (remindersEnabled()) {\n // With no alert token registered for this disposable install, delivery cannot\n // reach APNs; the row must still be settled rather than left claimed.\n assert(row.state === \"failed\" && row.apns_status === \"NoAlertToken\", \"missing token settles the row\");\n } else {\n assert(row.state === \"disabled\", \"kill switch drains without delivering\");\n assert(!drained.enabled && drained.sent === 0, \"disabled drain sends nothing\");\n }\n\n // A reminder is worthless once its event has started, and nearly so once it is\n // more than a tick overdue. Both are voided at send time rather than delivered,\n // which is what stops a backlog from firing all at once after an outage.\n await syncDeviceReminders(deviceId, [\n { itemId: \"5:started\", rule: \"lead:3600\", eventAt: isoFromUnix(now - 60), expiresAt: isoFromUnix(now + 7140), sendAfter: isoFromUnix(now - 120), title: \"Started\", body: \"Body\" },\n { itemId: \"5:stale\", rule: \"lead:3600\", eventAt: isoFromUnix(now + 3600), expiresAt: isoFromUnix(now + 10800), sendAfter: isoFromUnix(now - 7200), title: \"Stale\", body: \"Body\" },\n { itemId: \"5:over\", rule: \"lead:3600\", eventAt: isoFromUnix(now - 7200), expiresAt: isoFromUnix(now - 60), sendAfter: isoFromUnix(now - 30), title: \"Over\", body: \"Body\" },\n ]);\n const fixtureDue = await sqlite.execute({sql:\"SELECT id FROM notification_queue WHERE device_id=? AND state='pending'\",args:[deviceId]});\n for (const row of fixtureDue.rows) await drainReminders({id:Number(row.id)});\n const guarded = await sqlite.execute({\n sql: `SELECT item_id, state, apns_status FROM notification_queue\n WHERE device_id=? AND item_id IN ('5:started','5:stale','5:over') ORDER BY item_id`,\n args: [deviceId],\n });\n const guards = Object.fromEntries(\n (guarded.rows as { item_id: string; state: string; apns_status: string }[])\n .map((row) => [row.item_id, `${row.state}:${row.apns_status}`]),\n );\n assert(guards[\"5:started\"] === \"void:EventStarted\", \"a started event is never announced\");\n assert(guards[\"5:stale\"] === \"void:TooLate\", \"a badly overdue reminder is dropped, not delivered\");\n // \"Started\" and \"over\" are different facts and settle differently, which is what\n // an expiry-anchored rule will need once one exists.\n assert(guards[\"5:over\"] === \"void:EventExpired\", \"an event already over is recorded as expired\");\n\n // An abandoned claim is failed, never retried: at-most-once resolves the\n // ambiguity of a run that died mid-send against sending.\n await sqlite.execute({\n sql: `UPDATE notification_queue SET state='claimed', claimed_at=?\n WHERE device_id=? AND item_id='5:due'`,\n args: [isoFromUnix(now - 3600), deviceId],\n });\n assert(await failAbandonedClaims() >= 1, \"abandoned claims fail\");\n const abandoned = await sqlite.execute({\n sql: \"SELECT state, apns_status FROM notification_queue WHERE device_id=? AND item_id='5:due'\",\n args: [deviceId],\n });\n assert((abandoned.rows[0] as { apns_status: string }).apns_status === \"AbandonedClaim\", \"abandonment recorded\");\n} finally {\n await sqlite.execute({ sql: \"DELETE FROM notification_queue WHERE device_id=?\", args: [deviceId] });\n await sqlite.execute({ sql: \"DELETE FROM device_sources WHERE device_id=?\", args: [deviceId] });\n await sqlite.execute({ sql: \"DELETE FROM devices WHERE id=?\", args: [deviceId] });\n}\n\nconsole.log(\n `Reminder checks passed (delivery ${remindersEnabled() ? \"enabled\" : \"disabled\"}): ` +\n \"arbitrary leads, horizon and started-event guards, clock text, due predicate, \" +\n \"single claim, cancellation, settlement and abandoned-claim policy. No APNs requests sent.\",\n);\n",[],[412,479],"56f8e987-d1a5-4c2c-b46b-febfcfa3477d","presentation-check.ts","01a0a6cc-b75f-7474-bf3d-29f32b27081a",["D",1789504829282],"// Deterministic checks for the device presentation contract.\n//\n// Rewritten 2026-09-06. Every assertion here still described the retired v1\n// contract — `fullColor.primarySurface`, and `system-v1`/`future-v2` templates\n// — so this file had been failing since the Beacon migration rather than\n// guarding anything. It now covers the v2 shape actually in use.\n\nimport {\n DEFAULT_WIDGET_PRESENTATION,\n parseStoredPresentation,\n presentationFromForm,\n} from \"../lib/presentation.ts\";\n\nfunction assert(condition: boolean, message: string): void {\n if (!condition) throw new Error(message);\n}\n\nfunction isDefault(value: unknown): boolean {\n return JSON.stringify(value) === JSON.stringify(DEFAULT_WIDGET_PRESENTATION);\n}\n\n// A stored row keeps a template the editor no longer offers, and normalizes\n// its surfaces on the way out.\nconst parsed = parseStoredPresentation(\n '{\"version\":2,\"template\":\"standard-v1\",\"rootSurface\":{\"light\":\"#abcdef\",\"dark\":\"#123456\"}}',\n);\nassert(parsed.template === \"standard-v1\", \"a stored deprecated template should survive a read\");\nassert(parsed.rootSurface.light === \"#ABCDEF\", \"surfaces should normalize to uppercase\");\nassert(parsed.rootSurface.dark === \"#123456\", \"both surfaces should survive\");\n\n// Loss tolerance: anything the contract cannot read becomes the default rather\n// than throwing, because this parses whatever is already in the devices table.\nassert(\n isDefault(parseStoredPresentation(\n '{\"version\":1,\"rootSurface\":{\"light\":\"#abcdef\",\"dark\":\"#123456\"}}',\n )),\n \"an unsupported version should fall back to the default presentation\",\n);\nassert(\n isDefault(parseStoredPresentation('{\"version\":2}')),\n \"a v2 value without rootSurface should fall back to the default presentation\",\n);\nassert(\n isDefault(parseStoredPresentation(\"not json\")),\n \"unparseable stored JSON should fall back to the default presentation\",\n);\nassert(\n parseStoredPresentation(\n '{\"version\":2,\"template\":\"beacon\",\"rootSurface\":{\"light\":\"red\",\"dark\":\"#123456\"}}',\n ).rootSurface.light === DEFAULT_WIDGET_PRESENTATION.rootSurface.light,\n \"a non-contract color should fall back to the default surface\",\n);\n\n// The editor accepts only what SUPPORTED_WIDGET_TEMPLATES currently lists,\n// which is narrower than what a stored row may hold.\nconst form = presentationFromForm(\"beacon\", \"#abcdef\", \"#123456\");\nassert(form?.template === \"beacon\", \"the editor should accept the supported template\");\nassert(form?.rootSurface.light === \"#ABCDEF\", \"a valid form should normalize its surfaces\");\nassert(\n presentationFromForm(\"standard-v1\", \"#abcdef\", \"#123456\") === null,\n \"the editor should reject a stored-only template it no longer offers\",\n);\nassert(\n presentationFromForm(\"beacon\", \"red\", \"#123456\") === null,\n \"the editor should reject non-contract colors\",\n);\n\nconsole.log(\"presentation checks passed\");\n",[],[412,488],"1fca4ce0-a187-4232-bd39-16c1cebaa0ed","intraday-filter-check.ts","01a0a6cc-b75f-7474-bf3d-26e1234550ef",["D",1789504829282],"// Disposable device; synthetic source responses; no ingest or push tokens.\nimport app from \"../main.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { addDeviceSource, getDevice } from \"../lib/deviceStore.ts\";\nimport { composeDeviceItems } from \"../lib/sourceClient.ts\";\nimport { compose, type Item } from \"../lib/sourceContract.ts\";\nimport { DEFAULT_WIDGET_PRESENTATION as defaults, parseStoredPresentation, presentationFromForm, filterPresentedItems } from \"../lib/presentation.ts\";\nfunction assert(ok: unknown, message: string): asserts ok { if (!ok) throw new Error(message); }\nconst now = Math.floor(Date.now()/1000);\nconst item = (id: string, start: number, end: number, caption: string | null = null): Item =>\n ({id, mainText: id, subText: \"\", caption, emphasized: false, startsAt: start, expiresAt: end});\nconst input = [\n item(\"expired\", now-20, now-10),\n item(\"boundary\", now-10, now),\n item(\"current\", now, now+1000, \"END\"),\n item(\"future\", now+2000, now+3000),\n item(\"instant\", now-1, now),\n];\nconst enabled = {...defaults, intradayFilter: true};\nassert(filterPresentedItems(input, enabled, now).map(x=>x.id).join(\",\")===\"current,future\", \"half-open windows; captions are not lifecycle\");\nassert(filterPresentedItems(input, defaults, now).length===5, \"off retains returned items\");\nassert(filterPresentedItems([item(\"peak\",now,now+1)],enabled,now).length===1,\"one-second peak at start\");\nassert(!parseStoredPresentation({...defaults,intradayFilter:\"true\"}).intradayFilter,\"malformed stored boolean\");\nconst {intradayFilter: omitted,...oldStored}=defaults;\nassert(!parseStoredPresentation(oldStored).intradayFilter,\"existing rows default off\");\nassert(parseStoredPresentation(JSON.stringify(enabled)).intradayFilter,\"stored true\");\nassert(presentationFromForm(\"beacon\",\"#ffffff\",\"#000000\",\"true\")?.intradayFilter,\"checked form\");\nassert(presentationFromForm(\"beacon\",\"#ffffff\",\"#000000\",\"false\")===null,\"invalid checkbox\");\nconst sorted = compose([{sourceId:5,items:[input[2]]},{sourceId:3,items:[input[2]]}]);\nassert(filterPresentedItems(sorted,enabled,now).map(x=>x.id).join(\",\")===\"3:current,5:current\",\"namespacing and tie order\");\nconst stamp=new Date().toISOString(), install=\"intraday-check-\"+crypto.randomUUID();\nconst inserted=await sqlite.execute({sql:\"INSERT INTO devices(bunch_id,install_id,name,created_at,updated_at) VALUES(1,?,'Intraday fixture',?,?) RETURNING id\",args:[install,stamp,stamp]});\nconst id=Number(inserted.rows[0].id);\nconst originalFetch=globalThis.fetch;\nlet mode=\"normal\", requests=0;\nglobalThis.fetch=async(input,init)=>{\n const url=new URL(input instanceof Request?input.url:String(input));\n if(url.pathname===\"/v1/read\"){\n requests++;\n const body=JSON.parse(String(init?.body));\n assert(!(\"presentation\" in body)&&!(\"intradayFilter\" in body.settings),\"device policy never sent to source\");\n if(mode===\"failure\") return Response.json({error:\"fixture_failure\"},{status:503});\n return Response.json({protocolVersion:1,sourceKey:body.sourceKey,items:mode===\"invalid\"?[item(\"bad\",now,now)]:[\n item(\"expired\",now-2000,now-1000),item(\"current\",now-100,now+1000),item(\"future\",now+2000,now+3000)\n ]});\n }\n if(url.hostname.endsWith(\"push.apple.com\")) throw new Error(\"unexpected APNs call\");\n return originalFetch(input,init);\n};\nconst call=(path:string,body?:URLSearchParams)=>app(new Request(\"https://fixture.invalid\"+path,body?{method:\"POST\",body}:{}));\nconst form=(checked=false)=>new URLSearchParams({template:\"beacon\",lightRootSurface:\"#ffffff\",darkRootSurface:\"#000000\",...(checked?{intradayFilter:\"true\"}:{})});\ntry {\n for(const route of [\"/config/resolve\",\"/devices/resolve\"]){\n for(const suffix of [\"\",\"?device=unknown-intraday-fixture\",\"?device=\"+install]){\n const r=await call(route+suffix), p=await r.json();\n assert(r.ok&&p.items.length===0&&r.headers.get(\"x-effective-source-count\")===\"0\",\"empty resolver\");\n }\n }\n assert(requests===0,\"no source requests for empty devices\");\n await addDeviceSource(id,3,{});\n await addDeviceSource(id,5,{teams:[\"rams\"]});\n for(const checked of [true,false]){\n assert((await call(\"/devices/\"+id+\"/presentation\",form(checked))).status===303,\"presentation saved\");\n assert((await getDevice(id))?.presentation.intradayFilter===checked,\"persisted checkbox round trip\");\n const html=await (await call(\"/devices/\"+id+\"/presentation\")).text();\n assert(html.includes('name=\"intradayFilter\"') && /name=\"intradayFilter\"[^>]*checked/.test(html)===checked,\"checkbox rendering\");\n for(const route of [\"/config/resolve\",\"/devices/resolve\"]){\n const r=await call(route+\"?device=\"+install+\"&tz=-25200\"),p=await r.json();\n assert(r.ok&&p.items.length===(checked?4:6),\"uniform mixed source filtering\");\n assert(r.headers.get(\"x-effective-sources\")===\"3:moon,5:nfl\",\"effective source diagnostics\");\n assert(p.items[0].id===(checked?\"3:current\":\"3:expired\"),\"chronological tie order\");\n assert(!(\"intradayFilter\" in p.presentation)&&p.presentation.version===2,\"native wire unchanged\");\n }\n const preview=await (await call(\"/devices/\"+id)).text();\n assert(preview.includes(\"3:future\")&&preview.includes(\"3:expired\")===!checked,\"preview shares filter\");\n }\n const invalid=form();invalid.set(\"intradayFilter\",\"invalid\");\n assert((await call(\"/devices/\"+id+\"/presentation\",invalid)).status===400,\"invalid input rejected\");\n assert((await getDevice(id))?.presentation.intradayFilter===false,\"invalid input not persisted\");\n for(const next of [\"failure\",\"invalid\"]){\n mode=next;let failed=false;\n try {await composeDeviceItems([{sourceId:3,settings:{}}],{},enabled,now);}catch{failed=true;}\n assert(failed,\"failed or malformed source cannot be hidden by filtering\");\n }\n console.log(\"PASS: expiry boundaries, defaults, mixed sources, both resolvers, preview, form persistence, invalid input, unchanged wire and source failures\");\n} finally {\n globalThis.fetch=originalFetch;\n await sqlite.execute({sql:\"DELETE FROM device_sources WHERE device_id=?\",args:[id]});\n await sqlite.execute({sql:\"DELETE FROM devices WHERE id=?\",args:[id]});\n}\n",[],[412,495],"1e0735fc-56d2-42c0-81e1-52547748dea3","enable-device-sources.ts","4098f78a-b146-11f1-b202-1607ee4eb77e",40,["D",1789505071431],"// Add the assignment switch before deploying readers; branches share this database.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst columns = await sqlite.execute(\"PRAGMA table_info(device_sources)\");\nif (!columns.rows.some(row => row.name === \"enabled\")) {\n await sqlite.execute(\"ALTER TABLE device_sources ADD COLUMN enabled INTEGER NOT NULL DEFAULT 1 CHECK(enabled IN (0,1))\");\n}\nconst invalid = await sqlite.execute(\"SELECT COUNT(*) AS total FROM device_sources WHERE enabled IS NULL OR enabled NOT IN (0,1)\");\nif (Number(invalid.rows[0].total) !== 0) throw new Error(\"Invalid assignment state\");\nconsole.log(\"Assignment enabled column ready; existing settings and associations retained.\");\n",[],[412,502],"83c0dc31-7646-4b2f-ad29-7401f36594be","device-token-check.ts","01a0a6cc-b75f-7474-bf3d-20bf928790d5",["D",1789504829282],"// Read-only checks for the token seam, which is where push.ts's deterministic\n// coverage has to stop — anything past the lookup hits Apple's live endpoint.\n//\n// Guards the 2026-09-06 removal of the `device_tokens` backfill: the schema call\n// must not recreate that table, and lookup must still prefer a device's native\n// widget token over any legacy app-background row.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport {\n ensureDeviceTokenSchema,\n getTokenForDevice,\n} from \"../lib/deviceTokenStore.ts\";\n\nfunction assert(condition: boolean, message: string): void {\n if (!condition) throw new Error(message);\n}\n\nasync function count(sql: string): Promise {\n const result = await sqlite.execute(sql);\n return Number((result.rows[0] as { n: number }).n);\n}\n\nawait ensureDeviceTokenSchema();\n\nassert(\n await count(\n \"SELECT COUNT(*) AS n FROM sqlite_master WHERE type = 'table' AND name = 'device_tokens'\",\n ) === 0,\n \"the schema call must not recreate the retired device_tokens table\",\n);\n\nassert(\n await count(`\n SELECT COUNT(*) AS n\n FROM device_push_tokens t\n LEFT JOIN devices d ON d.install_id = t.device_id\n WHERE d.id IS NULL\n `) === 0,\n \"no token row should reference an install that is not a registered device\",\n);\n\nconst widgetDevice = await sqlite.execute(`\n SELECT d.id\n FROM devices d\n JOIN device_push_tokens t ON t.device_id = d.install_id\n WHERE t.push_kind = 'widget'\n LIMIT 1\n`);\nconst deviceId = (widgetDevice.rows[0] as { id: number } | undefined)?.id;\nassert(deviceId != null, \"expected at least one device with a widget token\");\n\nconst token = await getTokenForDevice(Number(deviceId));\nassert(token !== null, \"lookup should find a token for a device that has one\");\nassert(token?.kind === \"widget\", \"lookup should prefer the widget token\");\n\nconsole.log(\"device token checks passed\");\n",[],[412,510],"412ace08-688e-43ca-af4f-0e53b5208596","assignment-bunch-check.ts","01a0a6cc-b75f-7474-bf3d-1e62e03f50c5",["D",1789504829282],"// Disposable persistence regression: no provider requests, pushes, or real device changes.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { addDeviceSource, getDevice, listAvailableSources, updateDeviceSource } from \"../lib/deviceStore.ts\";\nimport { getDeviceFeedConfiguration } from \"../lib/deviceSourceStore.ts\";\n\nfunction assert(ok: unknown, message: string): asserts ok {\n if (!ok) throw new Error(message);\n}\nconst stamp = new Date().toISOString();\nconst install = \"assignment-bunch-fixture-\" + crypto.randomUUID();\nconst bunchIds: number[] = [];\nlet deviceId: number | undefined;\nlet sourceId: number | undefined;\ntry {\n for (const name of [\"Assignment fixture A\", \"Assignment fixture B\"]) {\n const r = await sqlite.execute({\n sql: \"INSERT INTO bunches(name,created_at,updated_at) VALUES(?,?,?) RETURNING id\",\n args: [name, stamp, stamp],\n });\n bunchIds.push(Number(r.rows[0].id));\n }\n const d = await sqlite.execute({\n sql: \"INSERT INTO devices(bunch_id,install_id,name,created_at,updated_at) VALUES(?,?,'Assignment fixture',?,?) RETURNING id\",\n args: [bunchIds[0], install, stamp, stamp],\n });\n deviceId = Number(d.rows[0].id);\n const s = await sqlite.execute({\n sql: `INSERT INTO sources(bunch_id,name,kind,description,settings_schema,endpoint,remote_source_key,contract_version,credential_ref,created_at,updated_at)\n VALUES(?,'Assignment fixture','fixture','','{}','https://fixture.invalid','fixture',1,'',?,?) RETURNING id`,\n args: [bunchIds[0], stamp, stamp],\n });\n sourceId = Number(s.rows[0].id);\n const settings = { selections: [\"keep\"], enabled: true };\n const assignmentId = await addDeviceSource(deviceId, sourceId, settings);\n assert(assignmentId, \"initial assignment\");\n const readAssignment = async () => (await sqlite.execute({\n sql: \"SELECT * FROM device_sources WHERE id=?\", args: [assignmentId],\n })).rows[0];\n const before = JSON.stringify(await readAssignment());\n await sqlite.execute({sql: \"UPDATE devices SET bunch_id=? WHERE id=?\", args: [bunchIds[1], deviceId]});\n assert(JSON.stringify(await readAssignment()) === before, \"device bunch move must preserve the entire assignment\");\n assert((await getDevice(deviceId))?.sources.length === 1, \"browser still sees assignment\");\n const feed = await getDeviceFeedConfiguration(install);\n assert(feed?.sources[0]?.sourceId === sourceId && JSON.stringify(feed.sources[0].settings) === JSON.stringify(settings),\n \"widget still sees source and settings\");\n assert(await updateDeviceSource(deviceId, assignmentId, { enabled: false }), \"edit across bunches\");\n // Even an explicit unchanged FK update must not reapply the retired bunch rule.\n await sqlite.execute({sql: \"UPDATE device_sources SET source_id=source_id WHERE id=?\", args: [assignmentId]});\n await sqlite.execute({sql: \"UPDATE sources SET bunch_id=? WHERE id=?\", args: [bunchIds[1], sourceId]});\n await sqlite.execute({sql: \"UPDATE sources SET bunch_id=? WHERE id=?\", args: [bunchIds[0], sourceId]});\n assert(await readAssignment(), \"source bunch move preserves assignment\");\n assert(await addDeviceSource(deviceId, sourceId, {}) === null, \"duplicate remains blocked\");\n await sqlite.execute({sql: \"DELETE FROM device_sources WHERE id=?\", args: [assignmentId]});\n assert((await listAvailableSources(deviceId)).some(s => s.id === sourceId), \"cross-bunch source is available\");\n assert(await addDeviceSource(deviceId, sourceId, settings), \"cross-bunch attach\");\n assert((await listAvailableSources(deviceId)).every(s => s.id !== sourceId), \"attached source excluded\");\n await sqlite.execute({sql: \"DELETE FROM devices WHERE id=?\", args: [deviceId]});\n const remaining = await sqlite.execute({sql: \"SELECT id FROM device_sources WHERE device_id=?\", args: [deviceId]});\n assert(remaining.rows.length === 0, \"device deletion still cascades\");\n console.log(\"PASS: bunch moves preserve assignments and settings; browser/widget reads, editing, cross-bunch attachment, duplicate guard, and deletion cascade.\");\n} finally {\n if (deviceId !== undefined) {\n await sqlite.execute({sql: \"DELETE FROM device_sources WHERE device_id=?\", args: [deviceId]});\n await sqlite.execute({sql: \"DELETE FROM devices WHERE id=?\", args: [deviceId]});\n }\n if (sourceId !== undefined) await sqlite.execute({sql: \"DELETE FROM sources WHERE id=?\", args: [sourceId]});\n for (const id of bunchIds) await sqlite.execute({sql: \"DELETE FROM bunches WHERE id=?\", args: [id]});\n}\n",[],[412,517],"52bc63f8-6705-4ae1-80d9-c974035f6bce","apns-credentials-check.ts","01a0a6cc-b75f-7474-bf3d-1a541b888e57",["D",1789504829282],"// Checks credential shape and signing inside the server runtime without exposing secrets or sending pushes.\nconst names = [\"APNS_TEAM_ID\", \"APNS_KEY_ID\", \"APNS_AUTH_KEY\"];\nconst values = names.map((name) => Deno.env.get(name) ?? \"\");\nconst missing = names.filter((_, index) => !values[index]);\nif (missing.length) {\n console.log(JSON.stringify({ ok: false, missing }));\n} else if (!/^[A-Z0-9]{10}$/.test(values[0]) || !/^[A-Z0-9]{10}$/.test(values[1])) {\n console.log(JSON.stringify({ ok: false, error: \"Team ID and Key ID must each be 10 uppercase letters/digits.\" }));\n} else {\n try {\n const der = values[2].replace(/-----BEGIN PRIVATE KEY-----/, \"\").replace(/-----END PRIVATE KEY-----/, \"\").replace(/\\s+/g, \"\");\n const key = await crypto.subtle.importKey(\"pkcs8\", Uint8Array.from(atob(der), c => c.charCodeAt(0)), { name: \"ECDSA\", namedCurve: \"P-256\" }, false, [\"sign\"]);\n const signature = await crypto.subtle.sign({ name: \"ECDSA\", hash: \"SHA-256\" }, key, new TextEncoder().encode(\"Clark View APNs credential check\"));\n console.log(JSON.stringify({ ok: signature.byteLength === 64, credentialFormat: \"valid\", signing: signature.byteLength === 64 ? \"passed\" : \"failed\", appleAuthentication: \"not tested\", deviceDelivery: \"not tested\" }));\n } catch {\n console.log(JSON.stringify({ ok: false, error: \"Private key could not be imported or used for P-256 signing. Check the complete PEM contents.\" }));\n }\n}\n",[],[412,524],"2da8b787-d6e7-4961-878b-de57d2a1247e","alert-push-check.ts","01a0a6cc-b75f-7474-bf3d-1539851fd9ca",["D",1789504829282],"import { sendAPNs } from \"../lib/push.ts\";\nimport { saveAlertToken, ensureAlertSchema } from \"../lib/alertPush.ts\";\nimport { alertRoutes } from \"../http/routes/notifications.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nfunction assert(v: unknown, message: string) { if (!v) throw new Error(message); }\nlet calls = 0;\nconst transport: typeof fetch = async (input, init) => {\n calls++;\n assert(String(input).startsWith(\"https://api.push.apple.com/\"), \"production host\");\n const headers = new Headers(init?.headers);\n assert(headers.get(\"apns-push-type\") === \"alert\", \"alert type\");\n assert(headers.get(\"apns-topic\") === \"plusjade.clark-view\", \"app topic\");\n assert(headers.get(\"apns-priority\") === \"10\", \"alert priority\");\n assert(JSON.parse(String(init?.body)).aps.alert.title === \"Test\", \"alert payload\");\n return new Response(\"\", {status:200});\n};\nconst result = await sendAPNs(\"00\".repeat(32), \"app-alert\", \"production\", {title:\"Test\",body:\"Test\"}, transport);\nassert(result.ok && calls === 1, \"production signing and request\");\nif (!Deno.env.has(\"APNS_SANDBOX_KEY_ID\")) {\n const sandbox = await sendAPNs(\"00\".repeat(32), \"app-alert\", \"sandbox\", {title:\"Test\",body:\"Test\"}, transport);\n assert(sandbox.reason === \"MissingCredentials:sandbox\" && calls === 1, \"sandbox must not use production credentials\");\n}\nconst bad = await sendAPNs(\"00\".repeat(32), \"app-alert\", \"production\", {title:\"Test\",body:\"Test\"},\n async () => new Response(JSON.stringify({reason:\"BadDeviceToken\"}), {status:400}));\nassert(!bad.deadToken && bad.reason === \"BadDeviceToken\", \"configuration mismatch must not delete token\");\nconst gone = await sendAPNs(\"00\".repeat(32), \"app-alert\", \"production\", {title:\"Test\",body:\"Test\"},\n async () => new Response(JSON.stringify({reason:\"Unregistered\"}), {status:410}));\nassert(gone.deadToken, \"unregistered cleanup\");\nawait ensureAlertSchema();\nconst device = \"push-check-\" + crypto.randomUUID();\nconst token = \"00\".repeat(32);\ntry {\n await saveAlertToken(device, token, \"production\", true);\n await saveAlertToken(device, token, \"sandbox\", false);\n const rows = await sqlite.execute({sql:\"SELECT environment,allowed FROM device_alert_tokens WHERE device_id=?\",args:[device]});\n assert(rows.rows.length === 2, \"environments coexist\");\n await saveAlertToken(device, token, \"production\", false);\n const response = await alertRoutes.request(\"/device/notifications/test\", {method:\"POST\", headers:{\"Content-Type\":\"application/json\"},body:JSON.stringify({device,token,environment:\"production\"})});\n assert(response.status === 409, \"permission denial blocks test\");\n const malformed = await alertRoutes.request(\"/device/notifications/register\", {method:\"POST\",headers:{\"Content-Type\":\"application/json\"},body:JSON.stringify({device,token,allowed:true})});\n assert(malformed.status === 400, \"explicit environment required\");\n // Cooldown timestamps follow the parent ISO convention; never-tested is NULL, not a\n // sentinel, so a fresh registration is eligible rather than blocked.\n const fresh = await sqlite.execute({sql:\"SELECT last_test_at FROM device_alert_tokens WHERE device_id=? AND environment='sandbox'\",args:[device]});\n assert((fresh.rows[0] as {last_test_at:string|null}).last_test_at === null, \"never tested is null\");\n await saveAlertToken(device, token, \"sandbox\", true);\n await sqlite.execute({sql:`UPDATE device_alert_tokens SET last_test_at=strftime('%Y-%m-%dT%H:%M:%fZ','now') WHERE device_id=? AND environment='sandbox'`,args:[device]});\n const stamped = await sqlite.execute({sql:\"SELECT typeof(last_test_at) AS t, last_test_at FROM device_alert_tokens WHERE device_id=? AND environment='sandbox'\",args:[device]});\n const cooldown = stamped.rows[0] as {t:string; last_test_at:string};\n assert(cooldown.t === \"text\" && /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/.test(cooldown.last_test_at), \"cooldown stored as ISO UTC text\");\n const throttled = await alertRoutes.request(\"/device/notifications/test\", {method:\"POST\", headers:{\"Content-Type\":\"application/json\"},body:JSON.stringify({device,token,environment:\"sandbox\"})});\n assert(throttled.status === 409, \"cooldown still throttles after retype\");\n} finally {\n await sqlite.execute({sql:\"DELETE FROM device_alert_tokens WHERE device_id=?\",args:[device]});\n}\nconsole.log(\"Push checks passed: signing, routing, payload, missing sandbox credentials, cleanup policy, environment isolation, permission and validation. No APNs requests sent.\");\n",[],[412,531],"3902dc65-4acc-4d74-a080-b32350641a7b","fixtures","01a0a6cc-b75f-7474-bf3d-12e4651482c8",["D",1789504829282],[],[412,538],"bf040bc7-65a0-40f0-8a35-6e43f8a40883",["D",1789504829282],[375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393],[412],"04f14289-2f3d-4e6d-958d-371088a0be14","sourceHtml.tsx","01a0a6cc-b75f-7474-bf3d-08961845ccfd","01a0a6cc-b75f-7474-bf3d-0ed563055a3d",["D",1789504829282],"// Read-only React documents for inspecting source contracts and consumers.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\nimport { renderToStaticMarkup } from \"npm:react-dom@18.2.0/server\";\nimport { isRecord } from \"../lib/guards.ts\";\nimport type { SourceDetail, SourceSummary } from \"../lib/sourceStore.ts\";\nimport { Cell, DataTable, Row } from \"./dataTable.tsx\";\nimport { pageShell } from \"./pageShell.ts\";\n\nimport type { DiagnosticsResult } from \"../lib/sourceDiagnostics.ts\";\n\ntype JsonObject = Record;\n\nfunction documentMarkup(title: string, node: ReactNode): string {\n return pageShell(title, renderToStaticMarkup(

{node}

));\n}\n\nfunction Timestamp({ value }: { value: string }): React.ReactElement {\n return {value};\n}\n\nfunction humanize(value: string): string {\n return value\n .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n .replace(/[_-]+/g, \" \")\n .replace(/\\bId\\b/g, \"ID\")\n .replace(/^./, (letter) => letter.toUpperCase());\n}\n\nfunction settingCount(schema: unknown): number {\n if (!isRecord(schema) || !isRecord(schema.properties)) return 0;\n return Object.keys(schema.properties).length;\n}\n\nfunction Value({ value }: { value: unknown }): React.ReactElement {\n if (Array.isArray(value)) {\n if (value.length === 0) return None;\n return (\n

\n );\n }\n if (isRecord(value)) return ;\n if (typeof value === \"boolean\") return {value ? \"Yes\" : \"No\"};\n if (value == null) return None;\n return {String(value)};\n}\n\nfunction Settings({ value }: { value: unknown }): React.ReactElement {\n if (!isRecord(value) || Object.keys(value).length === 0) {\n return

No settings.

;\n }\n return (\n

{humanize(key)}

\n );\n}\n\nfunction schemaType(definition: JsonObject): string {\n if (definition.type === \"array\" && isRecord(definition.items)) {\n return `Array of ${String(definition.items.type ?? \"values\")}`;\n }\n return humanize(String(definition.type ?? \"value\"));\n}\n\nfunction Schema({ value }: { value: unknown }): React.ReactElement {\n if (!isRecord(value)) {\n return (\n <>\n

The stored schema is not valid JSON.

{String(value)}

\n \n );\n }\n\n const properties = isRecord(value.properties) ? value.properties : {};\n const required = new Set(\n Array.isArray(value.required)\n ? value.required.filter((item): item is string => typeof item === \"string\")\n : [],\n );\n\n return (\n <>\n {Object.keys(properties).length === 0\n ?

No configurable settings.

\n : (\n

{name}

\n {schemaType(definition)}\n {\" · \"}\n {required.has(name) ? \"Required\" : \"Optional\"}\n {definition.readOnly === true ? \" · Read only\" : \"\"}\n

\n {typeof definition.description === \"string\" &&\n

{definition.description}

}\n {Object.hasOwn(definition, \"default\") &&\n

Default:

}\n {Array.isArray(definition.enum) &&\n

Allowed:

}\n {definition.uniqueItems === true &&\n

Values must be unique.

}\n

\n )}\n\n

Raw schema

{JSON.stringify(value, null, 2)}

\n \n );\n}\n\nexport function sourceIndexDocument(sources: SourceSummary[]): string {\n return documentMarkup(\n \"Widget favorites — Sources\",\n <>\n

Sources

Bunch-owned sources and their current device use.

\n {sources.length === 0\n ?

No sources yet.

\n : (\n \n {sources.map((source) => (\n \n \n {source.name}\n Source {source.id}\n \n {source.description}\n {settingCount(source.settingsSchema)}\n {source.deviceCount}\n \n ))}\n \n )}\n ,\n );\n}\n\nexport type SourceTab = \"overview\" | \"diagnostics\" | \"settings\" | \"devices\";\n\nfunction Diagnostics({ result }: { result?: DiagnosticsResult }): React.ReactElement {\n if (!result || result.state !== \"ready\") {\n return <>

Stored coverage

{result?.state === \"unsupported\"\n ? \"Diagnostics are not supported by this source.\"\n : \"Diagnostics are unavailable. The source could not be reached or returned an invalid response.\"}

Coverage is unknown; this does not mean the source is empty.

;\n }\n const data = result.value;\n const first = data.earliestTimestamp, last = data.latestTimestamp;\n const days = last === null ? null : (last - Date.parse(result.checkedAt) / 1000) / 86400;\n return <>\n

Stored coverage

All stored items before device settings and upcoming-item selection. Bounds do not establish complete coverage or current event status.

Total items: {data.totalItems}
Earliest event: {first === null ? \"None\" : }
Latest event: {last === null ? \"None\" : }
Date span: {first === null || last === null ? \"None\" : `${((last - first) / 86400).toFixed(1)} days`}
Latest event relative to check: {days === null ? \"None\" : days >= 0 ? `${days.toFixed(1)} days ahead` : `${Math.abs(days).toFixed(1)} days ago`}
Last ingest: {data.lastIngestedAt === null ? \"Unknown\" : }
Checked

\n {data.totalItems === 0 &&

No stored items.

}\n ;\n}\n\nexport function sourceShowDocument(source: SourceDetail, tab: SourceTab = \"overview\", diagnostics?: DiagnosticsResult): string {\n return documentMarkup(\n `Widget favorites — ${source.name}`,\n <>\n

← All sources

{source.name}

{source.description}

\n\n \n\n {tab === \"overview\" &&

Source: {source.id}
Bunch: {source.bunchId}
Implementation: {source.endpoint}
Devices: {source.deviceCount}
Created
Updated

}\n\n {tab === \"diagnostics\" && }\n\n {tab === \"settings\" &&

Available settings

Schema fields define the shape accepted by each device assignment.

\n \n

}\n\n {tab === \"devices\" &&

Attached devices

\n {source.devices.length === 0\n ?

No devices attached.

\n : (\n \n {source.devices.map((device) => (\n \n \n {device.name}\n {device.installId}\n \n \n

View settings

\n \n

\n \n \n \n ))}\n \n )}\n

}\n ,\n );\n}\n\nexport function sourceNotFoundDocument(): string {\n return documentMarkup(\n \"Widget favorites — Source not found\",\n <>\n

← All sources

Source not found

No source exists with that internal ID.

\n ,\n );\n}\n\n",[],[555,548],"render","7f3292cd-65b6-40a2-bcef-17596e7d194f","rootHtml.ts","01a0a6cc-b75f-7474-bf3d-04c71b6efae8",["D",1789504829282],"// Static shell for the browser-managed app entry point.\n//\n// Standalone by design — it is the one page that does not use `pageShell`,\n// since the shell's own header would repeat the navigation this page exists\n// to present. It restates the shell's tokens so both agree on a phone in\n// Dark Mode.\n\nexport function rootHtml(): string {\n return `\n\n \n \n \n Sports Today\n \n \n \n

Sports Today

\n \n

\n \n`;\n}\n",[],[555,557],"8e85887f-9a6f-409d-bd6d-6d9cb9a21b19","pageShell.ts","01a0a6cc-b75f-7474-bf3d-03f86d3c70a3",["D",1789504829282],"// Shared semantic shell for every browser administration view.\n//\n// The stylesheet is mobile-first: the unqualified rules describe a phone in\n// portrait, and each `min-width` block adds back the wider-viewport layout.\n// Two consequences are load-bearing for the views. Resource tables stack\n// into labeled rows below 40em, which is why `dataTable.tsx` emits a\n// `data-label` and an explicit ARIA role on every cell — CSS drops the\n// native table roles the moment `display` changes. And every control clears\n// a 44px touch target with a 16px font, since anything smaller is both hard\n// to hit and triggers iOS Safari's zoom-on-focus.\n\nconst PAGE_STYLE = `\n /* Light values are the established palette; the dark set mirrors the same\n hierarchy rather than introducing a second visual language. */\n :root {\n color-scheme: light dark;\n --page: #fff;\n --ink: #1a1a1a;\n --ink-muted: #666;\n --accent: #2563eb;\n --accent-strong: #1d4ed8;\n --rule: #eee;\n --edge: #ddd;\n --field-edge: #ccc;\n --inset: #f6f6f6;\n --tap: 44px;\n }\n @media (prefers-color-scheme: dark) {\n :root {\n --page: #16181c;\n --ink: #e8e9ec;\n --ink-muted: #a1a5ae;\n --accent: #7aa7ff;\n --accent-strong: #a3c0ff;\n --rule: #26282e;\n --edge: #34373e;\n --field-edge: #4b4f58;\n --inset: #1c1f24;\n }\n }\n\n *, *::before, *::after { box-sizing: border-box; }\n\n body {\n font-family: system-ui, -apple-system, sans-serif;\n background: var(--page);\n color: var(--ink);\n line-height: 1.5;\n max-width: 40rem;\n margin: 0 auto;\n padding: 1rem 1rem 3rem;\n overflow-wrap: break-word;\n }\n main { min-width: 0; }\n @media (min-width: 40em) { body { padding: 2rem 1rem 4rem; } }\n\n h1 { font-size: clamp(1.4rem, 1.25rem + 0.8vw, 1.65rem); line-height: 1.2; margin: 0 0 1rem; }\n h2 { font-size: clamp(1.05rem, 1rem + 0.3vw, 1.2rem); line-height: 1.25; margin: 0 0 0.5rem; }\n h3 { font-size: 0.95rem; line-height: 1.3; margin: 1rem 0 0.4rem; }\n p { margin: 0.5rem 0 1rem; }\n ul, ol { margin: 0.5rem 0 1rem; padding-left: 1.25rem; }\n li { margin: 0.35rem 0; }\n a { color: var(--accent); }\n /* A paragraph holding nothing but a link is an action (\"+ Add source\"), so\n it gets a target taller than its text. */\n p:not(.breadcrumb) > a:only-child, li > a:first-child { display: inline-block; padding: 0.3rem 0; }\n code { font-family: ui-monospace, monospace; font-size: 0.85em; overflow-wrap: anywhere; }\n strong { overflow-wrap: anywhere; }\n :focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }\n\n details { margin-top: 0.75rem; }\n summary { cursor: pointer; font-weight: 600; padding: 0.6rem 0; }\n dl.schema-fields { margin: 0.75rem 0 0; }\n dl.schema-fields > div { padding: 0.75rem 0; border-bottom: 1px solid var(--rule); }\n dl.schema-fields dt { font-weight: 600; }\n dl.schema-fields dd { margin: 0.25rem 0 0; }\n dl.schema-fields p { margin: 0.25rem 0; }\n .schema-detail { color: var(--ink-muted); font-size: 0.85rem; }\n section { margin-top: 2rem; padding-top: 1rem; border-top: 1px solid var(--rule); }\n pre {\n background: var(--inset);\n border: 1px solid var(--edge);\n border-radius: 6px;\n padding: 0.75rem;\n overflow-x: auto;\n font-size: 0.8rem;\n line-height: 1.5;\n }\n\n /* Navigation. Wrapping keeps every destination reachable on a narrow\n screen instead of pushing links off-screen. */\n header.global-header { margin: 0 0 1.5rem; border-bottom: 1px solid var(--edge); }\n header.global-header nav, nav.resource-nav { display: flex; flex-wrap: wrap; gap: 0 1.25rem; }\n header.global-header a, nav.resource-nav a, .breadcrumb a {\n display: inline-flex;\n align-items: center;\n min-height: var(--tap);\n color: var(--accent);\n text-decoration: none;\n font-size: 0.95rem;\n }\n nav.resource-nav { margin: 0 0 1.5rem; border-bottom: 1px solid var(--edge); }\n nav.resource-nav a { border-bottom: 2px solid transparent; margin-bottom: -1px; }\n nav.resource-nav a.active { color: var(--ink); font-weight: 600; border-bottom-color: var(--accent); }\n .breadcrumb { margin: 0; }\n .breadcrumb a { font-size: 0.9rem; }\n\n\n /* Fixed-width destinations leave a glimpse of the next device on phones. */\n header.global-header .home-link { gap: 0.5rem; color: var(--ink-muted); }\n header.global-header nav.device-gallery { display: block; }\n .device-gallery ul { display: flex; gap: 0.75rem; list-style: none; margin: 0; padding: 0.5rem 0.25rem 1rem; overflow-x: auto; overscroll-behavior-x: contain; scroll-snap-type: x proximity; scrollbar-width: thin; }\n .device-gallery li { flex: 0 0 5rem; margin: 0; scroll-snap-align: start; }\n header.global-header .device-gallery a { display: flex; flex-direction: column; gap: 0.5rem; padding: 0.25rem; color: var(--ink-muted); text-align: center; font-size: 0.8rem; line-height: 1.3; }\n .device-avatar { display: grid; place-items: center; width: 3.5rem; height: 3.5rem; border: 1px solid var(--edge); border-radius: 50%; background: var(--inset); color: var(--ink); font-size: 1rem; font-weight: 600; }\n .device-name { width: 100%; overflow-wrap: anywhere; }\n .device-gallery a[aria-current] { color: var(--ink); font-weight: 600; }\n .device-gallery a[aria-current] .device-avatar { outline: 2px solid var(--accent); outline-offset: 3px; }\n .device-gallery a:hover .device-avatar { border-color: var(--accent); }\n\n /* Label/value metadata reads as an aligned two-column list on a phone and\n collapses to one inline run once there is room for it. */\n dl.device-meta { display: grid; grid-template-columns: minmax(5rem, auto) 1fr; gap: 0.35rem 0.75rem; margin: 1.25rem 0 1rem; }\n dl.device-meta > div { display: contents; }\n dl.device-meta dt { color: var(--ink-muted); font-size: 0.8rem; text-transform: uppercase; letter-spacing: 0.02em; }\n dl.device-meta dd { margin: 0; font-size: 0.85rem; }\n dl.device-meta dd.device-id { font-family: ui-monospace, monospace; }\n dl.device-meta ul { margin: 0; padding-left: 1.1rem; }\n @media (min-width: 40em) {\n dl.device-meta { display: flex; flex-wrap: wrap; gap: 0 1.5rem; margin: 1.25rem 0 0.5rem; }\n dl.device-meta > div { display: flex; gap: 0.35rem; }\n }\n\n /* Resource tables. Below 40em each row becomes a labeled record: the first\n cell is its title and every other cell prints its column name from\n data-label, so no operational column has to be dropped or scrolled to. */\n table.resource-index { width: 100%; border-collapse: collapse; margin-top: 1rem; }\n table.resource-index thead { display: none; }\n table.resource-index tr { display: block; padding: 0.85rem 0; border-bottom: 1px solid var(--rule); }\n table.resource-index td { display: grid; grid-template-columns: 7rem 1fr; gap: 0 0.75rem; padding: 0.15rem 0; font-size: 0.95rem; }\n table.resource-index td::before {\n content: attr(data-label);\n color: var(--ink-muted);\n font-size: 0.8rem;\n text-transform: uppercase;\n letter-spacing: 0.02em;\n line-height: 1.6;\n }\n table.resource-index td:empty { display: none; }\n table.resource-index td:first-child { display: block; font-weight: 600; margin-bottom: 0.35rem; }\n table.resource-index td:first-child::before { content: none; }\n table.resource-index td:first-child a { display: inline-block; padding: 0.3rem 0; }\n /* Settings nested in a cell already sit in the value column, so they run as\n a plain label-then-value flow rather than indenting a second time. */\n table.resource-index td details { margin-top: 0; }\n table.resource-index td summary { padding: 0 0 0.4rem; }\n table.resource-index td .device-meta { display: block; margin: 0; }\n table.resource-index td .device-meta > div { display: block; margin-bottom: 0.35rem; }\n .resource-id { display: block; font-family: ui-monospace, monospace; font-size: 0.8rem; font-weight: 400; color: var(--ink-muted); overflow-wrap: anywhere; }\n @media (min-width: 40em) {\n table.resource-index thead { display: table-header-group; }\n table.resource-index tr { display: table-row; padding: 0; border-bottom: 0; }\n table.resource-index th, table.resource-index td {\n display: table-cell;\n text-align: left;\n padding: 0.5rem 0.6rem;\n border-bottom: 1px solid var(--rule);\n }\n table.resource-index th { color: var(--ink-muted); font-weight: 600; font-size: 0.8rem; text-transform: uppercase; letter-spacing: 0.02em; }\n table.resource-index td::before { content: none; }\n table.resource-index td:first-child { font-weight: inherit; margin-bottom: 0; }\n table.resource-index td:first-child a { padding: 0; }\n table.resource-index td .device-meta { display: flex; }\n table.resource-index td .device-meta > div { display: flex; margin-bottom: 0; }\n }\n\n /* Forms. Controls are full-width and thumb-sized by default; the 1rem font\n size is what keeps iOS Safari from zooming the page on focus. */\n fieldset { border: 1px solid var(--edge); border-radius: 6px; margin: 0 0 1rem; padding: 0.5rem 1rem 1rem; min-width: 0; }\n legend { font-weight: 600; padding: 0 0.25rem; }\n label { display: flex; flex-wrap: wrap; align-items: center; gap: 0.5rem; min-height: var(--tap); margin: 0; }\n /* A text field's label sits above it so every field in a form starts at the\n same left edge; checkbox and color rows stay on one line. */\n label:has(input[type=\"text\"]), label:has(input[type=\"number\"]), label:has(select) {\n flex-direction: column;\n align-items: stretch;\n gap: 0.25rem;\n min-height: 0;\n margin-bottom: 0.75rem;\n }\n input[type=\"text\"], input[type=\"number\"], select {\n font: inherit;\n font-size: 1rem;\n min-height: var(--tap);\n max-width: 100%;\n padding: 0.5rem 0.65rem;\n border: 1px solid var(--field-edge);\n border-radius: 6px;\n background: var(--page);\n color: var(--ink);\n }\n input[type=\"text\"] { flex: 1 1 12rem; }\n input[type=\"number\"] { inline-size: 6rem; }\n select { flex: 1 1 14rem; }\n fieldset > input[type=\"text\"] { width: 100%; max-width: 24rem; }\n input[type=\"checkbox\"] { inline-size: 1.15rem; block-size: 1.15rem; accent-color: var(--accent); }\n input[type=\"color\"] {\n inline-size: 3.25rem;\n block-size: 2.75rem;\n padding: 0.2rem;\n border: 1px solid var(--field-edge);\n border-radius: 6px;\n background: var(--page);\n }\n /* A checkbox fieldset is a selection list, so it gets as many columns as the\n viewport fits at a readable width — two on a phone, four in the full\n container — instead of one 70-row column. */\n fieldset:has(input[type=\"checkbox\"]) { display: grid; grid-template-columns: repeat(auto-fill, minmax(8rem, 1fr)); gap: 0 1rem; }\n button {\n font: inherit;\n font-size: 1rem;\n font-weight: 600;\n min-height: var(--tap);\n inline-size: 100%;\n padding: 0.65rem 1.25rem;\n border: none;\n border-radius: 6px;\n background: var(--accent);\n color: var(--page);\n cursor: pointer;\n }\n button:hover { background: var(--accent-strong); }\n @media (min-width: 40em) { button { inline-size: auto; } }\n`;\n\nconst PAGE_SCRIPT = `\n document.querySelectorAll(\"time[datetime]\").forEach(function (el) {\n var d = new Date(el.getAttribute(\"datetime\"));\n if (!isNaN(d.getTime())) el.textContent = d.toLocaleString();\n });\n`;\n\n\nexport const DEVICE_GALLERY_SLOT = \"\";\n\nexport function deviceGallery(devices: { id: number; name: string }[], pathname: string): string {\n const escape = (value: string) => value.replace(/[&<>\"']/g, (char) =>\n ({ \"&\": \"&\", \"<\": \"<\", \">\": \">\", '\"': \""\", \"'\": \"'\" }[char]!));\n const currentId = /^\\/devices\\/(\\d+)(?:\\/|$)/.exec(pathname)?.[1];\n if (!devices.length) return \"\";\n return '

${escape(initials)}${escape(name)}

\";\n}\n\nexport function pageShell(title: string, body: string): string {\n return `\n\n\n\n\n${title}\n\n\n\n\n${body}\n\n\n`;\n}\n",[],[555,564],"60f7a62a-c922-4f83-ae8d-5685c68599fa","deviceHtml.tsx","01a0a6cc-b75f-7474-bf3c-ffb469fbc306",53,["D",1789505268094],12,"// Server-rendered device administration built on the device-centric model.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\nimport { renderToStaticMarkup } from \"npm:react-dom@18.2.0/server\";\nimport type { SettingsForm } from \"../lib/sourceSettings.ts\";\nimport { isRecord } from \"../lib/guards.ts\";\nimport { phase } from \"../lib/sourceContract.ts\";\nimport type {\n AvailableSource,\n DeviceDetail,\n DeviceSourceView,\n DeviceSummary,\n} from \"../lib/deviceStore.ts\";\nimport { SUPPORTED_WIDGET_TEMPLATES } from \"../lib/presentation.ts\";\nimport { titleCase } from \"../lib/text.ts\";\nimport { Cell, DataTable, Row } from \"./dataTable.tsx\";\nimport { pageShell } from \"./pageShell.ts\";\n\nexport type DevicePreviewItem = {\n id: string;\n mainText: string;\n subText: string;\n caption: string | null;\n emphasized: boolean;\n startsAt: number;\n expiresAt: number;\n};\n\ntype PreviewResult =\n | { ok: true; items: DevicePreviewItem[]; rawJson: string }\n | { ok: false; error: string };\n\nfunction documentMarkup(title: string, node: ReactNode): string {\n return pageShell(title, renderToStaticMarkup(

{node}

));\n}\n\nfunction Timestamp({ value }: { value: string }): React.ReactElement {\n return {value};\n}\n\nfunction humanize(key: string): string {\n return key\n .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n .replace(/[_-]+/g, \" \")\n .replace(/\\bId\\b/g, \"ID\")\n .replace(/^./, (letter) => letter.toUpperCase());\n}\n\nfunction stringArray(value: unknown): string[] {\n return Array.isArray(value)\n ? value.filter((item): item is string => typeof item === \"string\")\n : [];\n}\n\nfunction SettingValue({ value }: { value: unknown }): React.ReactElement {\n if (Array.isArray(value)) {\n if (value.length === 0) return None;\n return

;\n }\n if (isRecord(value)) return ;\n if (typeof value === \"boolean\") return {value ? \"Yes\" : \"No\"};\n if (value == null) return None;\n return {String(value)};\n}\n\nfunction Settings({ value }: { value: unknown }): React.ReactElement {\n if (!isRecord(value) || Object.keys(value).length === 0) return

No settings.

;\n return (\n

{humanize(key)}

\n );\n}\n\ntype DeviceNavActive = \"preview\" | \"sources\" | \"presentation\" | \"settings\";\n\nfunction DeviceNav({ id, active }: { id: number; active: DeviceNavActive }): React.ReactElement {\n const tabs = [\n [\"preview\", \"Feed\", \"\"],\n [\"sources\", \"Sources\", \"/sources\"],\n [\"presentation\", \"Presentation\", \"/presentation\"],\n [\"settings\", \"Settings\", \"/settings\"],\n ] as const;\n return (\n \n );\n}\n\nexport function SourceSettingsFields({form,settings}: {\n form: SettingsForm; settings: unknown;\n}): React.ReactElement {\n const values = isRecord(settings) ? settings : {};\n return <>\n \n {form.fields.length === 0 &&

No per-device settings.

}\n {form.fields.map(field => {\n const value = Object.hasOwn(values,field.key) ? values[field.key] : field.default;\n if (field.type === \"boolean\") return

\n {field.title}\n {\" \"}{field.title}\n {field.description &&

{field.description}

}\n

;\n const selected = stringArray(value);\n const missing = selected.filter(v => !field.choices.some(c => c.const === v));\n const groups = [...new Set(field.choices.map(c => c[\"x-group\"] ?? \"\"))];\n return

\n {field.title}\n {field.description &&

{field.description}

}\n {groups.map(group =>

\n {group || \"Choices\"}\n {field.choices.filter(c => (c[\"x-group\"] ?? \"\") === group).map(choice =>\n {\" \"}{choice.title}\n )}\n

)}\n {missing.length > 0 &&

Unavailable selections\n

Uncheck these unavailable values before saving.

\n {missing.map(value => {\" \"}{value})}\n

}\n

;\n })}\n ;\n}\n\nexport function deviceIndexDocument(devices: DeviceSummary[]): string {\n return documentMarkup(\n \"Widget favorites — Devices\",\n <>\n

Devices

\n {devices.length === 0\n ?

No devices yet.

\n : (\n \n {devices.map((device) => (\n \n \n {device.name}\n {device.installId}\n \n {device.sourceCount}\n \n \n ))}\n \n )}\n ,\n );\n}\n\nexport function deviceSettingsDocument(\n device: DeviceDetail,\n saved = false,\n): string {\n return documentMarkup(\n `Widget favorites — ${device.name}`,\n <>\n \n {saved &&

Saved.

}\n \n\n

Device: {device.installId}
Sources: {device.sourceCount}
Created
Updated

\n\n\n\n

Merge

\n If this device replaces one that was reinstalled, its install can take over\n the older device instead.\n

Merge into another device

\n ,\n );\n}\n\nexport function deviceSourcesDocument(device: DeviceDetail): string {\n return documentMarkup(\n `Widget favorites — Sources for ${device.name}`,\n <>\n \n

Live sources contribute to the feed. Disabled sources retain their saved settings.

+ Add source

\n {device.sources.length === 0\n ?

No sources assigned.

\n : (\n \n {device.sources.map((source) => (\n \n \n \n {source.name}\n \n Assignment {source.assignmentId}\n \n {source.enabled ? \"Live\" : \"Disabled\"}\n \n \n \n ))}\n \n )}\n ,\n );\n}\n\nexport function deviceMergeDocument(\n device: DeviceDetail,\n candidates: DeviceSummary[],\n error?: string,\n): string {\n return documentMarkup(\n `Widget favorites — Merge ${device.name}`,\n <>\n \n

Merge into another device

\n Use this after reinstalling the app: pairing created this device, and the\n configuration you want still belongs to the device it replaces.\n

\n This install ({device.installId}) moves onto the device you choose, which keeps its\n name, sources, presentation and page. This device is deleted, along with\n its {device.sourceCount} assigned {device.sourceCount === 1 ? \"source\" : \"sources\"} and\n its presentation. The replaced device stops receiving notifications.\n

\n {error &&

{error}

}\n {candidates.length === 0\n ?

No other device exists to merge into.

\n : (\n \n )}\n ,\n );\n}\n\nexport function devicePresentationDocument(\n device: DeviceDetail,\n saved = false,\n): string {\n const { presentation } = device;\n return documentMarkup(\n `Widget favorites — Presentation for ${device.name}`,\n <>\n \n

Control which items this device shows and how its widget looks.

\n {saved &&

Saved.

}\n

\n Item visibility\n Hide expired items\n

Hide items when their source-provided time window expires, across all assigned sources.

When unchecked, keep all items returned by your sources.

\n Layout template\n

Beacon is the current template. Standard v1 is deprecated.

\n \n Template{\" \"}\n \n \n

\n Root surface\n

WidgetKit selects the matching value for the device appearance.

\n \n Light Mode{\" \"}\n \n {presentation.rootSurface.light}\n \n \n Dark Mode{\" \"}\n \n {presentation.rootSurface.dark}\n \n

\n \n

\n ,\n );\n}\n\nexport function deviceSourceNewDocument(\n device: DeviceDetail,\n available: AvailableSource[],\n selected: AvailableSource | null,\n form: SettingsForm,\n): string {\n return documentMarkup(\n `Widget favorites — Add source to ${device.name}`,\n <>\n \n

Add source

\n {available.length === 0\n ?

Every available source is already attached.

\n : (\n <>\n

\n \n {source.name}\n {\" — \"}{source.description}\n

\n {selected && (\n

\n \n

\n Feed participation\n Live\n Disabled\n

Choose Disabled to configure and preview this source before including it in the feed.

\n \n \n \n )}\n \n )}\n ,\n );\n}\n\nexport function deviceSourceEditDocument(\n device: DeviceDetail,\n source: DeviceSourceView,\n form: SettingsForm | null,\n saved = false,\n preview?: PreviewResult,\n settingsError?: string,\n): string {\n return documentMarkup(\n `Widget favorites — ${source.name} for ${device.name}`,\n <>\n \n

{source.name}

{source.description}

{source.enabled ? \"Live\" : \"Disabled\"} — {source.enabled\n ? \"Included in this device’s feed. Saving settings affects future widget refreshes.\"\n : \"Excluded from this device’s feed and reminders. Saved settings are retained.\"}

\n {saved &&

Saved.

}\n \n

Settings

\n {settingsError &&

{settingsError}

}\n {form &&

\n \n \n }\n

Source preview

Results from this source only, using saved settings and this device’s presentation rules.\n Unsaved changes are not shown. Previewing does not change whether the source is live.

\n \n {preview && }\n

Remove source

This removes the assignment from this device. It does not delete the source or its data.

\n \n

\n ,\n );\n}\n\nfunction Preview({ result }: { result: PreviewResult }): React.ReactElement {\n if (!result.ok) return

Couldn't load results: {result.error}

;\n return (\n <>\n {result.items.length === 0\n ?

No items returned after applying this device's presentation rules.

\n : (\n \n {result.items.map((item) => {\n const when = new Date(item.startsAt * 1000).toISOString();\n return (\n \n \n {/* Derived state, for diagnosing what a device sees right now. The\n expiry bound itself is an estimate and is deliberately not shown,\n here or anywhere else. */}\n {phase(item, Math.floor(Date.now() / 1000))}\n {item.mainText}\n {item.subText}\n {item.caption ?? \"\"}\n {item.emphasized ? \"Yes\" : \"\"}\n \n );\n })}\n \n )}\n

Raw response

{result.rawJson}

\n \n );\n}\n\nfunction FeedContext({ device }: { device: DeviceDetail }): React.ReactElement {\n return <>\n

{device.tzOffsetSeconds == null\n ? \"The device has not reported a timezone yet; source default timezones apply.\"\n : \"Using the device’s last reported timezone offset.\"}

\n {device.presentation.intradayFilter &&

Hide expired items is enabled.

}\n ;\n}\n\nexport function devicePreviewDocument(\n device: DeviceDetail,\n result: PreviewResult,\n): string {\n return documentMarkup(\n `Widget favorites — Feed ${device.name}`,\n <>\n \n

Includes all live sources, using this device’s settings and presentation rules.\n This is what the server sends when the widget refreshes.

\n \n {device.sources.some(source => source.enabled)\n ?

Combining {device.sources.filter(source => source.enabled).map(source => source.name).join(\", \")}.

\n :

No live sources. Add or enable a source to populate this device’s feed.

}\n \n ,\n );\n}\n\nexport function deviceNotFoundDocument(): string {\n return documentMarkup(\n \"Widget favorites — Device not found\",\n <>\n

Device not found

No device exists with that internal ID.

\n ,\n );\n}\n\n",[],[555,571],"204a492a-5380-4a81-806a-a5f9ddd65f74","dataTable.tsx","01a0a6cc-b75f-7474-bf3c-f86fb0281937",["D",1789504829282],"// The resource table every administration index and detail view shares.\n//\n// Two things are centralized here because getting either wrong is invisible\n// until someone opens a page on a phone. Each cell carries its column name in\n// `data-label`, which is what the stacked layout in `pageShell` prints in\n// place of the hidden header row. Each element also carries the ARIA role its\n// tag already implies, because changing `display` on a table element drops\n// the native role and would otherwise leave assistive technology with a pile\n// of anonymous blocks.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\n\nexport function DataTable(\n { columns, children }: { columns: string[]; children: ReactNode },\n): React.ReactElement {\n return (\n \n \n \n {columns.map((column) => (\n \n ))}\n \n \n {children}\n

{column}

\n );\n}\n\nexport function Row({ children }: { children: ReactNode }): React.ReactElement {\n return {children};\n}\n\n// `label` must match this cell's column heading; the stacked layout shows it\n// as the row's label for this value.\nexport function Cell(\n { label, children }: { label: string; children?: ReactNode },\n): React.ReactElement {\n return {children};\n}\n",[],[555,580],"382e73cc-5f3f-4ec2-9908-cf94b665171e","bunchHtml.tsx","01a0a6cc-b75f-7474-bf3c-f5514204c529",["D",1789504829282],"// Server-rendered administration for bunch enrollment and access scope.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\nimport { renderToStaticMarkup } from \"npm:react-dom@18.2.0/server\";\nimport type {\n BunchCode,\n BunchDetail,\n BunchSummary,\n} from \"../lib/bunchStore.ts\";\nimport { Cell, DataTable, Row } from \"./dataTable.tsx\";\nimport { pageShell } from \"./pageShell.ts\";\n\nfunction documentMarkup(title: string, node: ReactNode): string {\n return pageShell(title, renderToStaticMarkup(

{node}

));\n}\n\nfunction Timestamp({ value }: { value: string }): React.ReactElement {\n return {value};\n}\n\nfunction BunchNav({ id, active }: { id: number; active: \"details\" | \"pair\" }): React.ReactElement {\n return (\n <>\n

← All bunches

\n \n \n );\n}\n\nexport function bunchIndexDocument(bunches: BunchSummary[]): string {\n return documentMarkup(\n \"Widget favorites — Bunches\",\n <>\n

Bunches

Bunches define enrollment and future access scope; feed settings stay on devices.

+ New bunch

\n {bunches.length === 0\n ?

No bunches yet.

\n : (\n \n {bunches.map((bunch) => (\n \n {bunch.name}\n {bunch.deviceCount}\n \n \n ))}\n \n )}\n ,\n );\n}\n\nexport function bunchNewDocument(): string {\n return documentMarkup(\n \"Widget favorites — New bunch\",\n <>\n

← All bunches

New bunch

\n \n ,\n );\n}\n\nexport function bunchShowDocument(bunch: BunchDetail, saved = false): string {\n return documentMarkup(\n `Widget favorites — ${bunch.name}`,\n <>\n \n

{bunch.name}

\n {saved &&

Saved.

}\n \n

Devices

\n {bunch.devices.length === 0\n ?

No devices registered yet.

\n : (\n \n {bunch.devices.map((device) => (\n \n \n {device.name}\n {device.installId}\n \n \n \n \n ))}\n \n )}\n

\n ,\n );\n}\n\nexport function bunchPairDocument(\n bunch: BunchDetail,\n codes: BunchCode[],\n created: BunchCode | null = null,\n): string {\n return documentMarkup(\n `Widget favorites — Pair to ${bunch.name}`,\n <>\n \n

Pair a device

A device can register into this bunch only with one of its unexpired codes.

\n \n {created && (\n

\n Code: {created.code}{\" — \"}enter this in the app. Expires{\" \"}\n . Reusable until then.\n

\n )}\n

Code history

\n {codes.length === 0\n ?

No codes yet.

\n : (\n \n {codes.map((code) => (\n \n {code.code}\n {code.active ? \"Active\" : \"Expired\"}\n \n \n \n ))}\n \n )}\n

\n ,\n );\n}\n\nexport function bunchNotFoundDocument(): string {\n return documentMarkup(\n \"Widget favorites — Bunch not found\",\n <>\n

← All bunches

Bunch not found

No bunch exists with that internal ID.

\n ,\n );\n}\n",[],[555,587],"485febf8-a966-426b-b236-e459a71ae5d1",["D",1789504829282],[368,369,370,371,372,373],[555],["D",1789504829282],[],[18,210],["D",1789504829282],[],[18,216],["D",1789504829282],[],[18,78],["D",1789504829282],[],[18,90],["D",1789504829282],[],[18,96],["D",1789504829282],[],[18,102],["D",1789504829282],[],[18,238],["D",1789504829282],[],[18,244],["D",1789504829282],[],[18,250],["D",1789505054107],[],[18,256],["D",1789504829282],[],[18,263],["D",1789504829282],[],[18,269],["D",1789504829282],[],[18,275],["D",1789504829282],[],[18,281],["D",1789504829282],[],[18,287],["D",1789505260820],[],[18,293],["D",1789504947118],[],[18,301],["D",1789504829282],[],[18,308],["D",1789504829282],[],[18,314],["D",1789504829282],[348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366],[18],"1a0c24ad-4575-49d9-8300-ea44793f2c27","widget.ts","01a0a6cc-b75f-7474-bf3c-9b65596250ef","01a0a6cc-b75f-7474-bf3c-9f64d2565fba",["D",1789504982213],"// Stable iOS-facing routes backed exclusively by the device model.\n\nimport { Hono } from \"npm:hono\";\nimport { isRecord } from \"../../lib/guards.ts\";\nimport { getDeviceFeedConfiguration } from \"../../lib/deviceSourceStore.ts\";\nimport { getDeviceByInstallId, recordDeviceTimeZone } from \"../../lib/deviceStore.ts\";\nimport { composeDeviceFeed, utcOffsetFromQuery } from \"../../lib/sourceClient.ts\";\n\nexport const widgetRoutes = new Hono();\n\nwidgetRoutes.get(\"/resolve\", async (c) => {\n const url = new URL(c.req.url);\n const installId = url.searchParams.get(\"device\");\n const tz = url.searchParams.get(\"tz\");\n const configuration = installId\n ? await getDeviceFeedConfiguration(installId)\n : null;\n if (installId) await recordDeviceTimeZone(installId, utcOffsetFromQuery(tz));\n return composeDeviceFeed(configuration?.sources ?? [], { tz }, configuration?.presentation);\n});\n\nwidgetRoutes.get(\"/status/:deviceId\", async (c) => {\n const deviceId = c.req.param(\"deviceId\");\n const device = await getDeviceByInstallId(deviceId);\n if (!device) return c.json({ deviceId, paired: false });\n\n const primary = device.sources.find(source => source.enabled) ?? null;\n // Compatibility projection for the containing app; feed composition is source-agnostic.\n const settings = isRecord(primary?.settings) ? primary.settings : {};\n const teams = Array.isArray(settings.teams)\n ? settings.teams.filter((value): value is string => typeof value === \"string\")\n : [];\n return c.json({\n deviceId,\n paired: true,\n name: device.name,\n activeSource: primary?.kind ?? null,\n teams,\n });\n});\n\n",[],[399,665,658],"routes","e7885c81-640f-4733-9c58-8a366e6e71a1","sources.ts","01a0a6cc-b75f-7474-bf3c-9668bef2a795",["D",1789504829282],"// Read-only source resource pages. Only Diagnostics contacts the implementing source.\nimport { Hono } from \"npm:hono\";\nimport { getSource, listSources } from \"../../lib/sourceStore.ts\";\nimport { loadSourceDiagnostics } from \"../../lib/sourceDiagnosticsClient.ts\";\nimport {\n sourceIndexDocument, sourceNotFoundDocument, sourceShowDocument, type SourceTab,\n} from \"../../render/sourceHtml.tsx\";\n\nfunction positiveInteger(value: string): number | null {\n const number = Number(value);\n return Number.isSafeInteger(number) && number > 0 ? number : null;\n}\n\nexport const sourceRoutes = new Hono();\nsourceRoutes.get(\"/sources\", async (c) => c.html(sourceIndexDocument(await listSources())));\n\nfor (const tab of [\"overview\", \"diagnostics\", \"settings\", \"devices\"] as SourceTab[]) {\n sourceRoutes.get(`/sources/:id/${tab}`, async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const source = id ? await getSource(id) : null;\n if (!source) return c.html(sourceNotFoundDocument(), 404);\n const diagnostics = tab === \"diagnostics\" ? await loadSourceDiagnostics(source.id) : undefined;\n c.header(\"cache-control\", \"no-store\");\n return c.html(sourceShowDocument(source, tab, diagnostics));\n });\n}\n\nsourceRoutes.get(\"/sources/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id || !await getSource(id)) return c.html(sourceNotFoundDocument(), 404);\n return c.redirect(`/sources/${id}/overview`);\n});\n",[],[399,665,667],"6e906f6b-0087-4cd5-ba6e-2c649e7cf2e0","root.ts","01a0a6cc-b75f-7474-bf3c-92c1d281da4d",["D",1789504829282],"// Browser entry point for the parent administration app.\n\nimport { Hono } from \"npm:hono\";\nimport { rootHtml } from \"../../render/rootHtml.ts\";\n\nexport const rootRoutes = new Hono();\n\nrootRoutes.get(\"/\", (c) => c.html(rootHtml()));\n",[],[399,665,674],"301cc658-114c-483a-a905-bd462abd0463","reminders.ts","01a0a6cc-b75f-7474-bf3c-8e39a47ea5e3",["D",1789504829282],"// Internal reminder operations, driven by this val's crons today.\n//\n// Drain is a route rather than a cron-only function so the trigger stays swappable:\n// a scheduling service that calls back at an exact instant would post the same route\n// with a row id. The claim makes a duplicate or retried call a no-op, which is what\n// lets an untrusted external trigger be accepted at all.\n\nimport { Hono } from \"npm:hono\";\nimport { buildReminders } from \"../../lib/reminderBuilder.ts\";\nimport { drainReminders } from \"../../lib/reminderDrainer.ts\";\nimport { ensureReminderSchema, reminderCounts } from \"../../lib/reminderStore.ts\";\nimport { isRecord } from \"../../lib/guards.ts\";\n\nexport const reminderRoutes = new Hono();\n\nfunction authorized(header: string | undefined): boolean {\n const expected = Deno.env.has(\"REMINDERS_TOKEN\")\n ? Deno.env.get(\"REMINDERS_TOKEN\")\n : undefined;\n if (!expected || !header) return false;\n const presented = header.replace(/^Bearer /i, \"\");\n // Length-independent comparison is not worth a constant-time routine here; the\n // token is a deployment secret, not a per-user credential.\n return presented === expected;\n}\n\nfunction positiveInteger(value: unknown): number | undefined {\n return typeof value === \"number\" && Number.isInteger(value) && value > 0\n ? value\n : undefined;\n}\n\nreminderRoutes.post(\"/internal/reminders/:operation\", async (c) => {\n const operation = c.req.param(\"operation\");\n if (operation !== \"build\" && operation !== \"drain\") return c.json({ ok: false }, 404);\n if (!authorized(c.req.header(\"authorization\"))) return c.json({ ok: false }, 401);\n\n const value = await c.req.json().catch(() => null);\n const body = isRecord(value) ? value : {};\n await ensureReminderSchema();\n\n if (operation === \"build\") {\n const summary = await buildReminders(positiveInteger(body.chunk));\n return c.json({ ok: true, ...summary, counts: await reminderCounts() });\n }\n\n const summary = await drainReminders({\n id: positiveInteger(body.id),\n limit: positiveInteger(body.limit),\n });\n return c.json({ ok: true, ...summary, counts: await reminderCounts() });\n});\n",[],[399,665,681],"c1c48794-29f3-4332-ad80-c528189061c3","notifications.ts","01a0a6cc-b75f-7474-bf3c-8a6faf8d27bb",["D",1789504829282],"// Fixed self-test messages only; token proof and a persistent cooldown guard delivery.\nimport { Hono } from \"npm:hono\";\nimport { saveAlertToken, sendTestAlert } from \"../../lib/alertPush.ts\";\nimport { isRecord } from \"../../lib/guards.ts\";\n\nexport const alertRoutes = new Hono();\nalertRoutes.post(\"/device/notifications/:operation\", async c => {\n const operation = c.req.param(\"operation\");\n if (operation !== \"register\" && operation !== \"test\") return c.json({ok:false},404);\n const value = await c.req.json().catch(() => null);\n if (!isRecord(value) || typeof value.device !== \"string\" || value.device.length > 128 || !value.device\n || (value.environment !== \"sandbox\" && value.environment !== \"production\")\n || typeof value.token !== \"string\" || !/^(?:[a-f0-9]{2}){16,256}$/.test(value.token)\n || (operation === \"register\" && typeof value.allowed !== \"boolean\")) return c.json({ok:false},400);\n if (operation === \"register\") {\n await saveAlertToken(value.device, value.token, value.environment, value.allowed as boolean);\n return c.json({ok:true});\n }\n const result = await sendTestAlert(value.device, value.token, value.environment);\n return c.json(result, result.ok ? 200 : 409);\n});\n",[],[399,665,688],"d7f45cc4-5488-4abe-964f-c085cc9f7127","devices.ts","01a0a6cc-b75f-7474-bf3c-866ba65e270e",52,["D",1789505264401],13,"// Device administration plus parallel new-model registration/status endpoints.\n\nimport { Hono } from \"npm:hono\";\nimport { HTTPException } from \"npm:hono/http-exception\";\nimport { loadSettingsForm, settingsFromForm } from \"../../lib/sourceSettings.ts\";\n\nimport { isRecord } from \"../../lib/guards.ts\";\nimport {\n addDeviceSource,\n getDevice,\n getDeviceByInstallId,\n getDeviceSource,\n listAvailableSources,\n listDevices,\n mergeDeviceInto,\n removeDeviceSource,\n renameDevice,\n updateDevicePresentation,\n updateDeviceSource,\n setDeviceSourceEnabled,\n} from \"../../lib/deviceStore.ts\";\nimport {\n presentationFromForm,\n type WidgetPresentation,\n} from \"../../lib/presentation.ts\";\nimport { registerDevice } from \"../../lib/bunchStore.ts\";\nimport { saveDeviceToken } from \"../../lib/deviceTokenStore.ts\";\nimport { notifyDevice } from \"../../lib/push.ts\";\nimport {\n deviceIndexDocument,\n deviceMergeDocument,\n deviceNotFoundDocument,\n devicePresentationDocument,\n devicePreviewDocument,\n deviceSettingsDocument,\n deviceSourcesDocument,\n deviceSourceEditDocument,\n deviceSourceNewDocument,\n type DevicePreviewItem,\n} from \"../../render/deviceHtml.tsx\";\nimport { getDeviceFeedConfiguration } from \"../../lib/deviceSourceStore.ts\";\nimport { composeDeviceFeed } from \"../../lib/sourceClient.ts\";\n\n\nfunction positiveInteger(value: string): number | null {\n const number = Number(value);\n return Number.isSafeInteger(number) && number > 0 ? number : null;\n}\n\nfunction isPreviewItem(value: unknown): value is DevicePreviewItem {\n return isRecord(value)\n && typeof value.id === \"string\"\n && typeof value.mainText === \"string\"\n && typeof value.subText === \"string\"\n && (value.caption === null || typeof value.caption === \"string\")\n && typeof value.emphasized === \"boolean\"\n && typeof value.startsAt === \"number\"\n && typeof value.expiresAt === \"number\";\n}\n\n// The preview is the only place the parent reads inside the widget payload\n// instead of streaming it through, so it is the only place that has to check\n// the shape. A provider drift surfaces as this page's ordinary error state\n// rather than a render-time crash on an absent field.\nasync function previewResponse(\n sources: { sourceId: number; settings: unknown }[],\n presentation: WidgetPresentation,\n tz: number | null,\n): Promise<{ items: DevicePreviewItem[]; rawJson: string }> {\n const response = await composeDeviceFeed(sources, { tz }, presentation);\n const payload = await response.json();\n if (\n !isRecord(payload) || !Array.isArray(payload.items)\n || !payload.items.every(isPreviewItem)\n ) {\n throw new Error(\"device feed returned an unexpected preview payload\");\n }\n return { items: payload.items, rawJson: JSON.stringify(payload, null, 2) };\n}\n\nexport const deviceRoutes = new Hono();\n// Expected form errors must survive the application's operational error handler.\ndeviceRoutes.onError((error) => {\n if (error instanceof HTTPException) return error.getResponse();\n throw error;\n});\n\ndeviceRoutes.get(\"/devices\", async (c) => {\n return c.html(deviceIndexDocument(await listDevices()));\n});\n\n// Device-named alias for the stable iOS resolver route.\ndeviceRoutes.get(\"/devices/resolve\", async (c) => {\n const url = new URL(c.req.url);\n const installId = url.searchParams.get(\"device\");\n const configuration = installId ? await getDeviceFeedConfiguration(installId) : null;\n return composeDeviceFeed(configuration?.sources ?? [], {\n tz: url.searchParams.get(\"tz\"),\n }, configuration?.presentation);\n});\n\ndeviceRoutes.get(\"/devices/status/:installId\", async (c) => {\n const installId = c.req.param(\"installId\");\n const device = await getDeviceByInstallId(installId);\n if (!device) return c.json({ deviceId: installId, registered: false });\n return c.json({\n deviceId: installId,\n registered: true,\n name: device.name,\n activeSource: device.sources.find(source => source.enabled)?.kind ?? null,\n sources: device.sources.map((source) => ({\n kind: source.kind,\n settings: source.settings,\n enabled: source.enabled,\n })),\n });\n});\n\ndeviceRoutes.post(\"/devices/register\", async (c) => {\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false }, 400);\n }\n const values = (body ?? {}) as { code?: unknown; device?: unknown; name?: unknown };\n if (typeof values.code !== \"string\" || typeof values.device !== \"string\") {\n return c.json({ ok: false }, 400);\n }\n const code = values.code.trim().toUpperCase();\n const installId = values.device.trim();\n const name = typeof values.name === \"string\" ? values.name : null;\n if (!code || !installId) return c.json({ ok: false }, 400);\n\n const result = await registerDevice(code, installId, name);\n if (result.ok) return c.json(result);\n if (result.reason === \"expired\") {\n return c.json({ ok: false, message: \"expired\" }, 422);\n }\n return c.json({ ok: false }, 404);\n});\n\ndeviceRoutes.get(\"/devices/:id/sources\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n return c.html(deviceSourcesDocument(device));\n});\n\ndeviceRoutes.get(\"/devices/:id/sources/new\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n\n const available = await listAvailableSources(id);\n const requestedSource = positiveInteger(c.req.query(\"source\") ?? \"\");\n const selected = requestedSource\n ? available.find((source) => source.id === requestedSource) ?? null\n : null;\n return c.html(deviceSourceNewDocument(device, available, selected,\n selected ? await loadSettingsForm(selected.id) : {fields:[],revision:\"\"}));\n});\n\ndeviceRoutes.post(\"/devices/:id/sources\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id || !(await getDevice(id))) return c.text(\"Device not found\", 404);\n\n const body = await c.req.parseBody({ all: true });\n const sourceId = positiveInteger(String(body.sourceId ?? \"\"));\n if (!sourceId) return c.text(\"Source is required\", 400);\n\n const available = await listAvailableSources(id);\n const source = available.find((candidate) => candidate.id === sourceId);\n if (!source) return c.text(\"Source is not available for this device\", 422);\n\n const { enabled = \"1\", ...settingsBody } = body;\n if (enabled !== \"0\" && enabled !== \"1\") return c.text(\"Choose Live or Disabled\", 400);\n const assignmentId = await addDeviceSource(\n id,\n sourceId,\n await settingsFromForm(sourceId, settingsBody),\n enabled === \"1\",\n );\n if (!assignmentId) return c.text(\"Source could not be attached\", 422);\n if (enabled === \"1\") await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/sources/${assignmentId}`, 303);\n});\n\ndeviceRoutes.get(\"/devices/:id/sources/:assignmentId\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const assignmentId = positiveInteger(c.req.param(\"assignmentId\"));\n if (!id || !assignmentId) return c.html(deviceNotFoundDocument(), 404);\n const [device, source] = await Promise.all([\n getDevice(id),\n getDeviceSource(id, assignmentId),\n ]);\n if (!device || !source) return c.html(deviceNotFoundDocument(), 404);\n let form = null;\n let settingsError: string | undefined;\n try {\n form = await loadSettingsForm(source.sourceId);\n } catch {\n settingsError = \"Settings are unavailable. You can still change whether this source is live.\";\n }\n let preview;\n try {\n preview = { ok: true as const, ...await previewResponse(\n [source], device.presentation, device.tzOffsetSeconds,\n ) };\n } catch (error) {\n preview = { ok: false as const, error: error instanceof Error ? error.message : String(error) };\n }\n return c.html(deviceSourceEditDocument(\n device, source, form, c.req.query(\"saved\") === \"1\", preview, settingsError,\n ));\n});\n\ndeviceRoutes.post(\"/devices/:id/sources/:assignmentId\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const assignmentId = positiveInteger(c.req.param(\"assignmentId\"));\n if (!id || !assignmentId) return c.text(\"Source assignment not found\", 404);\n const source = await getDeviceSource(id, assignmentId);\n if (!source) return c.text(\"Source assignment not found\", 404);\n\n const body = await c.req.parseBody({ all: true });\n const updated = await updateDeviceSource(\n id,\n assignmentId,\n await settingsFromForm(source.sourceId, body),\n );\n if (!updated) return c.text(\"Source assignment not found\", 404);\n if (source.enabled) await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/sources/${assignmentId}?saved=1`, 303);\n});\n\ndeviceRoutes.post(\"/devices/:id/sources/:assignmentId/state\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const assignmentId = positiveInteger(c.req.param(\"assignmentId\"));\n if (!id || !assignmentId) return c.text(\"Source assignment not found\", 404);\n const body = await c.req.parseBody({ all: true });\n if (body.enabled !== \"0\" && body.enabled !== \"1\") return c.text(\"Choose Live or Disabled\", 400);\n if (!await setDeviceSourceEnabled(id, assignmentId, body.enabled === \"1\")) {\n return c.text(\"Source assignment not found\", 404);\n }\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/sources/${assignmentId}?saved=1`, 303);\n});\n\ndeviceRoutes.post(\"/devices/:id/sources/:assignmentId/delete\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const assignmentId = positiveInteger(c.req.param(\"assignmentId\"));\n if (!id || !assignmentId) return c.text(\"Source assignment not found\", 404);\n const removed = await removeDeviceSource(id, assignmentId);\n if (!removed) return c.text(\"Source assignment not found\", 404);\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/sources`, 303);\n});\n\ndeviceRoutes.get(\"/devices/:id/presentation\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n return c.html(devicePresentationDocument(\n device,\n c.req.query(\"saved\") === \"1\",\n ));\n});\n\ndeviceRoutes.post(\"/devices/:id/presentation\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id || !(await getDevice(id))) return c.text(\"Device not found\", 404);\n\n const body = await c.req.parseBody();\n const presentation = presentationFromForm(\n body.template,\n body.lightRootSurface,\n body.darkRootSurface,\n body.intradayFilter,\n );\n if (!presentation) {\n return c.text(\"Invalid presentation: choose a template, valid Light/Dark Mode #RRGGBB colors, and a valid filter checkbox\", 400);\n }\n if (!(await updateDevicePresentation(id, presentation))) {\n return c.text(\"Device not found\", 404);\n }\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/presentation?saved=1`, 303);\n});\n\nasync function mergeCandidates(deviceId: number) {\n return (await listDevices()).filter((candidate) => candidate.id !== deviceId);\n}\n\ndeviceRoutes.get(\"/devices/:id/merge\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n return c.html(deviceMergeDocument(device, await mergeCandidates(id)));\n});\n\ndeviceRoutes.post(\"/devices/:id/merge\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n\n const body = await c.req.parseBody();\n const targetId = positiveInteger(String(body.targetId ?? \"\"));\n if (!targetId) {\n return c.html(\n deviceMergeDocument(device, await mergeCandidates(id), \"Choose a device to merge into.\"),\n 400,\n );\n }\n\n const result = await mergeDeviceInto(id, targetId);\n if (!result.ok) {\n const message = result.reason === \"same\"\n ? \"A device cannot merge into itself.\"\n : \"That device no longer exists.\";\n return c.html(deviceMergeDocument(device, await mergeCandidates(id), message), 422);\n }\n await notifyDevice(result.targetId).catch(() => undefined);\n return c.redirect(`/devices/${result.targetId}/settings?saved=1`, 303);\n});\n\ndeviceRoutes.get(\"/devices/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n try {\n const preview = await previewResponse(\n device.sources.filter(source => source.enabled).map((source) => ({\n sourceId: source.sourceId,\n settings: source.settings,\n })),\n device.presentation,\n device.tzOffsetSeconds,\n );\n return c.html(devicePreviewDocument(device, { ok: true, ...preview }));\n } catch (error) {\n return c.html(devicePreviewDocument(device, {\n ok: false,\n error: error instanceof Error ? error.message : String(error),\n }));\n }\n});\n\ndeviceRoutes.get(\"/devices/:id/settings\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n return c.html(deviceSettingsDocument(device, c.req.query(\"saved\") === \"1\"));\n});\n\ndeviceRoutes.post(\"/devices/:id/settings\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.text(\"Device not found\", 404);\n const body = await c.req.parseBody();\n const name = String(body.name ?? \"\").trim();\n if (!name) return c.text(\"Name is required\", 400);\n if (!(await renameDevice(id, name))) return c.text(\"Device not found\", 404);\n return c.redirect(`/devices/${id}/settings?saved=1`, 303);\n});\n\n// Stable iOS path; the implementation now redeems bunch codes into devices.\ndeviceRoutes.post(\"/pair\", async (c) => {\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false }, 400);\n }\n const { code, device } = (body ?? {}) as { code?: unknown; device?: unknown };\n if (typeof code !== \"string\" || typeof device !== \"string\") {\n return c.json({ ok: false }, 400);\n }\n\n const normalizedCode = code.trim().toUpperCase();\n const installId = device.trim();\n if (!normalizedCode || !installId) return c.json({ ok: false }, 400);\n\n const result = await registerDevice(normalizedCode, installId, null);\n if (result.ok) return c.json(result, 200);\n if (result.reason === \"expired\") {\n return c.json({ ok: false, message: \"expired\" }, 422);\n }\n return c.json({ ok: false }, 404);\n});\n\ndeviceRoutes.post(\"/device/token\", async (c) => {\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false }, 400);\n }\n const values = (body ?? {}) as {\n device?: unknown;\n token?: unknown;\n kind?: unknown;\n environment?: unknown;\n active?: unknown;\n };\n if (typeof values.device !== \"string\" || typeof values.token !== \"string\") {\n return c.json({ ok: false }, 400);\n }\n\n // Missing kind/environment/active preserves compatibility with beta builds that\n // upload the containing app's sandbox background-push token.\n const kind = values.kind ?? \"app-background\";\n const environment = values.environment ?? \"sandbox\";\n const active = values.active ?? true;\n if (\n (kind !== \"app-background\" && kind !== \"widget\")\n || (environment !== \"sandbox\" && environment !== \"production\")\n || typeof active !== \"boolean\"\n ) {\n return c.json({ ok: false }, 400);\n }\n\n await saveDeviceToken(values.device, values.token, kind, environment, active);\n return c.json({ ok: true });\n});\n\n",[],[399,665,695],"effdb882-4d70-4f70-be47-bdee3137f911","bunches.ts","01a0a6cc-b75f-7474-bf3c-835f15a4caa3",["D",1789504829282],"// Browser administration for bunch enrollment and access scope.\n\nimport { Hono } from \"npm:hono\";\nimport {\n createBunch,\n createBunchCode,\n getBunch,\n listBunchCodes,\n listBunches,\n renameBunch,\n} from \"../../lib/bunchStore.ts\";\nimport {\n bunchIndexDocument,\n bunchNewDocument,\n bunchNotFoundDocument,\n bunchPairDocument,\n bunchShowDocument,\n} from \"../../render/bunchHtml.tsx\";\n\nfunction positiveInteger(value: string): number | null {\n const number = Number(value);\n return Number.isSafeInteger(number) && number > 0 ? number : null;\n}\n\nexport const bunchRoutes = new Hono();\n\nbunchRoutes.get(\"/bunches\", async (c) => {\n return c.html(bunchIndexDocument(await listBunches()));\n});\n\nbunchRoutes.get(\"/bunches/new\", (c) => c.html(bunchNewDocument()));\n\nbunchRoutes.post(\"/bunches\", async (c) => {\n const body = await c.req.parseBody();\n const name = String(body.name ?? \"\").trim();\n if (!name) return c.text(\"Name is required\", 400);\n const id = await createBunch(name);\n return c.redirect(`/bunches/${id}`, 303);\n});\n\nbunchRoutes.get(\"/bunches/:id/pair\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(bunchNotFoundDocument(), 404);\n const bunch = await getBunch(id);\n if (!bunch) return c.html(bunchNotFoundDocument(), 404);\n return c.html(bunchPairDocument(bunch, await listBunchCodes(id)));\n});\n\nbunchRoutes.post(\"/bunches/:id/codes\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(bunchNotFoundDocument(), 404);\n const bunch = await getBunch(id);\n if (!bunch) return c.html(bunchNotFoundDocument(), 404);\n const created = await createBunchCode(id);\n return c.html(bunchPairDocument(bunch, await listBunchCodes(id), created));\n});\n\nbunchRoutes.get(\"/bunches/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(bunchNotFoundDocument(), 404);\n const bunch = await getBunch(id);\n if (!bunch) return c.html(bunchNotFoundDocument(), 404);\n return c.html(bunchShowDocument(bunch, c.req.query(\"saved\") === \"1\"));\n});\n\nbunchRoutes.post(\"/bunches/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.text(\"Bunch not found\", 404);\n const body = await c.req.parseBody();\n const name = String(body.name ?? \"\").trim();\n if (!name) return c.text(\"Name is required\", 400);\n if (!(await renameBunch(id, name))) return c.text(\"Bunch not found\", 404);\n return c.redirect(`/bunches/${id}?saved=1`, 303);\n});\n",[],[399,665,704],"e43d12fb-fe03-4f13-abff-c141ce9f3cba","01a0a6cc-b75f-7474-bf3c-a09474e43265",["D",1789504829282],[340,341,342,343,344,345,346],[399,665],"f677b7ba-bb76-405f-aeb8-322211006c5f",["D",1789504829282],[339],[399],"3fb8bce7-2b29-4435-9d57-370e81caaac1","source-participation.md","00b618a4-b147-11f1-9bb8-1607ee4eb77e","01a0a6cc-b75f-7474-bf3c-7e23a1c46bbb",["D",1789505393731],"# Source participation\n\nAn assignment remains attached with its saved settings whether Live or Disabled.\n`device_sources.enabled` is INTEGER NOT NULL DEFAULT 1 CHECK(enabled IN (0,1)):\n1 is Live; 0 is Disabled. Existing and new assignments default to Live; the add\nform can explicitly attach a source as Disabled. There is no staged state or draft.\n\nRun `tools/enable-device-sources.ts` before deploying readers of this column.\nThe migration is idempotent and preserves assignments and settings; branches share\nthe database. Do not add schema writes to feed reads.\n\n## Browser\n\nThe device resource root is **Feed**: all live sources composed with device\npresentation rules. This describes the server response at the next widget refresh,\nnot confirmation of what WidgetKit currently displays.\n\nEvery assignment page shows its state, independent state controls, settings, and\n**Source preview**. Preview composes only that assignment, even when disabled, using\nsaved settings and device presentation. Save and preview persists settings; live\nsettings take effect on subsequent widget refreshes. Preview never changes state.\nBoth browser views use the device's last reported timezone offset; if unavailable,\nsources use their defaults. Item timestamps render in the viewing browser's local\ntimezone, as elsewhere in the administration UI.\n\nState changes POST to `/devices/:id/sources/:assignmentId/state`, accepting exactly\n`enabled=1` or `enabled=0`. They require an assignment belonging to that device but\ndo not contact the source or validate unchanged settings. Descriptor/read failures\nleave the state controls usable. Disabled sources remain unavailable in the add\npicker because they are already attached. Removing an assignment discards settings.\n\n## Live consumers\n\nBoth resolver aliases and the reminder builder use `getDeviceFeedConfiguration`,\nwhich selects only enabled assignments. Aggregate browser Feed also filters enabled\nassignments. All-disabled devices retain presentation and return an empty feed with\nzero effective-source diagnostics. Disabled source failures cannot break live reads.\n\nAt reminder delivery, the drainer verifies that the namespaced item's source is\nstill attached and live; otherwise the claimed row settles as `void:SourceNotLive`.\nThe builder cancels vanished items through the existing queue synchronization.\nAn APNs request already in flight cannot be recalled. Terminal reminder rows remain\nterminal under the existing at-most-once policy; enabling a source does not revive\ncancelled reminders for the same item/rule.\n\nAssignment state changes request a widget refresh and reset reminder build staleness.\nSaving disabled settings does not request a widget refresh. Status diagnostics retain\nall attached sources and expose `enabled`; legacy `activeSource` selects a live source.\nThe widget/source protocol payloads are unchanged.\n\n## Verification\n\n`tools/source-state-check.ts` uses disposable assignments to check disabled attachment,\nboth resolvers, all-disabled empty feeds, retained/editable settings, isolated previews,\ndevice timezone/filtering, source failures, state validation, ownership, and queued\nreminder suppression. `tools/intraday-filter-check.ts`, `tools/source-settings-check.ts`,\nand `tools/reminder-check.ts` cover the surrounding contracts. Reminder checks scope\ndrain calls to fixture row IDs and never send APNs requests.\n",[],[727,720],"docs","47ca3904-fe51-45f0-825e-6cf96400ac7e","source-diagnostics.md","01a0a6cc-b75f-7474-bf3c-78be7273a808",["D",1789504829282],"# Source diagnostics\n\nThe source explorer uses Overview, Diagnostics, Settings and Devices sub-routes under\n/sources/:id. The bare resource URL redirects to /overview. Only /diagnostics\ncalls the source; failures do not affect other tabs or widget composition.\n\n## Optional authenticated GET /diagnostics\n\nThis operational extension is independent of source protocol v1 and its SDK.\nUse the same bearer authentication as the source RPC. Return cache-control: no-store.\n\n```json\n{\n \"diagnosticsVersion\": 1,\n \"sourceKey\": \"example\",\n \"scope\": \"stored\",\n \"totalItems\": 2,\n \"earliestTimestamp\": 1788999600,\n \"latestTimestamp\": 1799604000,\n \"lastIngestedAt\": \"2026-09-09T00:00:00.000Z\"\n}\n```\n\nCount all stored temporal items belonging to this source before device settings,\ndate filtering and next-item selection. Count items, not arbitrary backing rows,\ncatalog entries, ingest buckets or unrelated copied data. Sources own the mapping:\nSQL aggregates, decoded documents or any other storage are implementation details.\nThe parent never queries a source database or guesses date columns.\n\nBounds use event instants in Unix seconds, not milliseconds or ingestion dates.\nCounts must be nonnegative safe integers. Empty sources return zero and two null\nbounds. Nonempty sources return finite ordered bounds within the JavaScript Date\nrange. lastIngestedAt is an ISO timestamp or null when unknown.\n\nThe parent checks version, identity and consistency. HTTP 404/405/501 means\nunsupported; transport/auth/invalid-response failures mean unavailable. Neither\nmeans zero items. Summary data is fetched on each Diagnostics page load.\nThe page computes elapsed-day span and latest-event horizon from the response;\nbrowser-local dates use the shared timestamp renderer.\n\nStored bounds do not prove schedule completeness, upstream freshness or current\nevent statuses. This endpoint never ingests or changes data.\n\n## Verification\n\nParent: tools/source-diagnostics-check.ts (pure validation and tab rendering).\nEach active source: diagnostics-check.ts (read-only authenticated diagnostics,\nauth rejection, bounds and existing descriptor).\n",[],[727,729],"bf66047c-8cc4-4d12-9b81-fb1c61bddfa8","intraday-filter.md","01a0a6cc-b75f-7474-bf3c-75579b55f00d",["D",1789504829282],"# Device item visibility\n\nDevice Presentation owns `intradayFilter`, a boolean stored in `devices.presentation`.\nThe editor labels it **Hide expired items**. The default is false, including existing\nrows without the key and malformed stored values. Saving an unchecked checkbox writes false.\n\n## Ownership and behavior\n\nSources own temporal windows, content, domain selection, and candidate coverage.\nThe parent owns whether this device displays expired candidates. Filtering consumes\nvalidated, normalized `[startsAt, expiresAt)` windows, so this policy needs no source\nkind, caption interpretation, timezone arithmetic, or SDK change.\n\n`lib/presentation.ts:filterPresentedItems` retains items with `expiresAt > now`\nwhen enabled; when disabled it retains all returned items. It does not promise\nrest-of-day retention: candidate coverage is still source-owned.\n`lib/sourceClient.ts:composeDeviceItems` applies the predicate after validation\nand chronological composition, using one Unix-second clock snapshot per invocation.\nIDs, ordering and effective-source diagnostics remain unchanged. Invalid output and\nsource failures still fail composition, even if filtering would hide every item.\n\nBoth resolver aliases, browser preview, and reminder composition use this seam.\nThe reminder builder supplies device presentation and its build clock; upcoming\nreminder eligibility is unchanged. The setting is removed from the native presentation\nenvelope and never forwarded as a source setting. Widget schema 3 / presentation\nversion 2 remain unchanged.\n\nVerify with `tools/intraday-filter-check.ts` and `tools/presentation-check.ts`.\nThe former cleans up a disposable device, mocks source read responses, and checks\npersistence, resolver/preview parity, temporal boundaries, ordering and failures.\n\n## Source contract\n\nNFL, CFB, WNBA and Women's FIBA accept only `teams`. The retired source key is\nrejected on reads and settings validation, whether true or false; no adapter or\nfallback exists. Moon, Lunar and GTB have empty settings and also reject unknown keys.\nSource candidates retain their existing date coverage and per-team next-game selection;\nfiltering does not refill a selection.\n\nSports captions and device visibility follow the same published window. Stored final\nstatus no longer overrides phase: without an actual end timestamp it cannot establish\na different temporal bound. Typical durations remain source-owned. An early-finished\ngame therefore remains current until its estimated expiry; no end time is fabricated.\n\n`tools/source-intraday-cutover-check.ts` verifies live descriptors, stored schema\nsnapshots, source forms, rejection of retired settings, every saved assignment, and\ndevice composition. `tools/remove-source-intraday.ts` owns the one-time assignment\ncleanup; it preserves teams and device presentation. The cutover completed 2026-09-15:\neight assignment keys and four schema properties removed; source main snapshots\nNFL 18, CFB 15, WNBA 16, WFIBA 53.\n\nThe existing timestamp-only source normalization is separate from this retirement.\nLunar still publishes its noon timestamp at the 2026-09-15 audit and is normalized\nto a one-second window. Its whole-day window upgrade remains separate source work;\nthe parent must not invent a duration for it.\n",[],[727,736],"14512bb5-616a-4a4f-84bc-53d5d5706aeb","event-reminders.md","01a0a6cc-b75f-7474-bf3c-72942adb5ad7",["D",1789504829282],"# Event reminders\n\nA visible alert some configurable time before an event starts. Two scheduled jobs\nshare one durable queue.\n\n## Shape\n\n`crons/buildReminders.ts` (`:00/:15/:30/:45`) sweeps the devices whose queues are\nstalest, composes each one's feed, and writes a `notification_queue` row per future\nitem. `crons/drainReminders.ts` (`:05/:20/:35/:50`) claims every row whose\n`send_after` has passed and sends it.\n\nThe split exists because the halves have opposite properties. Building is slow and\nfailure-prone — N devices times M source reads — and is allowed to run behind.\nDraining must be on time. Under a 1-minute wall clock a combined job would have to\ndo both inside one run.\n\n## Invariants\n\n- **Due, not windowed.** A row is due when `send_after` has passed and nothing has\n sent it. Window matching would drop reminders on a skipped tick or a late-published\n event; this recovers on the next tick instead.\n- **The claim is the only lock.** `claimReminder` is one compare-and-swap. Rows\n affected answers \"is this send mine?\", so overlapping runs and repeated triggers\n are harmless. This is what allows an external trigger to be accepted at all.\n- **At-most-once.** A claim abandoned by a run that died mid-send is failed, never\n retried. A duplicate alert is the more visible failure than a missing one.\n- **Lead time is not quantized to the tick.** `send_after` is exact; the tick bounds\n only lateness. Any duration works, with ±tick precision.\n- **Cancellation is in place.** An item that leaves the feed voids its pending row.\n Nothing external needs recalling.\n- **A row carries the event's whole window.** `event_at` is the item's `startsAt`\n and `expires_at` its `expiresAt`, so send-time policy can ask both \"has it begun?\"\n and \"is it over?\" without re-reading a source. They settle distinctly\n (`EventStarted` vs `EventExpired`). `expires_at` is a source-owned estimate and is\n never shown to anyone.\n- **`rule` names the policy, not a column.** `lead:3600` is implicitly anchored to\n the start. An expiry-anchored policy extends the value (`lead:0@expiry`) rather\n than adding a column, because `UNIQUE(device_id,item_id,rule)` is what lets\n distinct rules coexist for one item.\n\n## Timestamps\n\nEvery stored time is ISO-8601 UTC text matching `Date.toISOString()`\n(`2026-09-10T08:30:00.000Z`) — the format the rest of the parent's tables already use.\nFixed-width and zero-padded means string order is chronological order, so the due\npredicate and the abandoned-claim sweep compare text directly with no conversion. The\ndrainer's two lateness guards are the only arithmetic on stored times and convert at\nthe point of use.\n\n**The `T` separator is load-bearing.** SQLite's own `datetime()` emits a space instead,\nand `'T'` sorts above `' '`, so mixing the two would break the due predicate silently.\nWrite times through `NOW_UTC` or `isoFromUnix` — never `datetime()` or `unixepoch()`.\n`tools/reminder-check.ts` asserts the format and that text compares chronologically.\n\nItem bounds on the source protocol and widget wire stay Unix seconds; that is a\nseparate contract and is not affected. It is also the origin of the epoch integers that\nspread inward — the widget's item times set the habit, and storage copied it.\nConverting at the storage boundary is what keeps the wire format from dictating the\nschema. The shared helpers live in `lib/time.ts`.\n\n## Sizing\n\nEvery device must be visited at least once inside its own reminder lead:\n\n full sweep period < lead time − margin\n\nChunk size, cadence and device count set that period. Missing it does not make\nreminders late — it means they never queue. Watch the oldest `devices.reminders_built_at`.\n\nThe drain side has its own relationship, and it bites the other way:\n\n MAX_LATENESS_SECONDS > drain cadence + scheduler slack\n\nVal Town cron is not punctual — a `:35` tick was observed firing at `:40` on\n2026-09-10. A row coming due just after a tick therefore waits nearly a full cadence\nplus that slack, so a cap equal to the cadence voids it as `TooLate` instead of sending\nit: a reminder dropped silently. The cap is 30 minutes against a 15-minute cadence for\nthat reason, and `tools/reminder-check.ts` asserts the relationship rather than the\nnumber so retuning the cadence cannot quietly reintroduce the gap. Retune both together.\n\n## Configuration\n\n| Variable | Effect |\n| --- | --- |\n| `REMINDERS_ENABLED` | `\"true\"` sends. Anything else drains the queue settling rows `disabled` — a dry run showing what would have been sent. |\n| `REMINDERS_TOKEN` | Bearer secret for `POST /internal/reminders/{build,drain}`. Unset means 401. |\n\n`devices.reminder_lead_seconds` defaults to 3600. `devices.last_tz_offset_seconds`\nis captured from the widget's `tz` on resolve — conditionally, so the hot read path\nstays a read, and best-effort, so it can never fail a feed request.\n\n## The scheduler seam\n\nDrain is an HTTP route, not a cron-only function, and takes an optional row id. Today\nthe cron calls it with none and it sweeps. A scheduling service (QStash-style) that\nstores \"call this URL at time T\" would call the same route with an id, giving exact\ntiming without polling. The ledger stays here and stays authoritative; the external\nservice would hold no state and no business logic.\n\n## Known limit\n\nAn offset is not a timezone: it cannot survive a DST transition, so an event on the\nfar side of one composes against the wrong local day. Harmless for lead-time math,\nwhich is absolute instants throughout. Not harmless for quiet hours — that needs an\nIANA identifier from the app first.\n\n## Checks\n\n`tools/reminder-check.ts` covers arbitrary leads, the horizon, started-event and\nexpired-event guards, an instantaneous (one-second) item, the due predicate,\nsingle-claim delivery, cancellation, settlement and abandoned-claim policy. Disposable fixtures, cleaned up, no APNs requests.\n",[],[727,743],"0c5d8440-1574-4ff4-bc6c-613ff45a36fc",["D",1789504829282],[334,335,336,337],[727],"c1a5721e-91f8-44c7-9a55-bcfef02e3514","drainReminders.ts","01a0a6cc-b75f-7474-bf3c-693588d1e8a9","01a0a6cc-b75f-7474-bf3c-6f0816cc7a27",["D",1789504829282],"interval","// Sends every reminder that has come due.\n//\n// This is the timely half. It calls the same code path the internal drain route\n// exposes, so replacing this clock with a scheduling service that calls back at an\n// exact instant changes the trigger and nothing else.\n\nimport { drainReminders } from \"../lib/reminderDrainer.ts\";\nimport { ensureReminderSchema } from \"../lib/reminderStore.ts\";\n\nexport default async function () {\n await ensureReminderSchema();\n console.log(JSON.stringify(await drainReminders()));\n}\n",[],[762,754],"crons","accb5524-2e1d-4ff5-ab88-33ae7ca3d02f","buildReminders.ts","01a0a6cc-b75f-7474-bf3c-66b8611d618e",["D",1789504829282],"// Queues reminders for the devices whose queues are stalest.\n//\n// Correctness constraint: every device must be visited at least once inside its own\n// reminder lead, so the full sweep period (chunk size ÷ device count × this interval)\n// has to stay under that lead. Missing it does not make reminders late; it makes them\n// never queue at all. Watch the oldest reminders_built_at as the fleet grows.\n\nimport { buildReminders } from \"../lib/reminderBuilder.ts\";\nimport { ensureReminderSchema } from \"../lib/reminderStore.ts\";\n\nexport default async function () {\n await ensureReminderSchema();\n const summary = await buildReminders();\n for (const failure of summary.failures) {\n // A source failure fails that device's whole composition; surfacing it keeps a\n // broken source from silently costing a device its reminders.\n console.error(`device ${failure.deviceId} build failed: ${failure.error}`);\n }\n console.log(JSON.stringify(summary));\n}\n",[],[762,764],"cc9d14e6-3285-4f32-a0da-ecb5fbf1f79d",["D",1789504829282],[331,332],[762],["D",1787009561780],["D",1789532458193],{"_11":12,"_155":84},{"_11":12,"_151":-5,"_83":84,"_31":82,"_152":153,"_154":30},{"_39":142,"_13":16,"_33":36,"_143":106,"_144":72,"_145":74,"_146":110,"_147":106,"_148":41,"_149":14,"_150":12},"ctx",{"_53":-5,"_175":812,"_813":814,"_815":816,"_817":30,"_818":30,"_819":30,"_820":24,"_821":-5,"_822":-7,"_823":-7,"_824":100,"_825":30,"_826":30,"_827":-5,"_828":30,"_829":30,"_830":30,"_831":-5},"ENV",{"_783":784,"_785":786,"_787":73,"_788":789,"_790":791,"_792":793,"_794":795,"_796":797,"_798":799,"_800":801,"_802":803,"_804":805,"_806":807,"_808":809,"_810":811},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · lib