Available settings

\") === (tab === \"settings\"), \"settings isolation\");\n check(html.includes(\"

Attached devices

\") === (tab === \"devices\"), \"devices isolation\");\n check(html.includes(\"

Stored coverage

\") === (tab === \"diagnostics\"), \"diagnostics isolation\");\n if (tab === \"diagnostics\") check(html.includes(\"1.0 days ahead\"), \"future horizon\");\n}\nfor (const state of [\"unsupported\",\"unavailable\"] as const) {\n const html=sourceShowDocument(source,\"diagnostics\",{state,checkedAt});\n check(html.includes(\"Coverage is unknown\") && !html.includes(\"

Total items

\"), \"unknown is not zero\");\n}\ncheck(sourceShowDocument(source,\"diagnostics\",{state:\"ready\",value:parseDiagnostics(empty,\"arbitrary\"),checkedAt})\n .includes(\"No stored items.\"), \"empty presentation\");\nconsole.log({checks, result:\"passed\"});\n",[],[159,292],"919c9c55-ce15-4ee5-bf45-e371b4161d1a","source-boundary-check.ts","01a0a679-3dab-7374-aab8-e9741e889a14",["D",1789499358648],"// Route and composition checks use a disposable device and never send pushes.\nimport app from \"../main.ts\";\nimport {sqlite} from \"https://esm.town/v/std/sqlite/main.ts\";\nimport {addDeviceSource,getDevice,listAvailableSources,updateDeviceSource} from \"../lib/deviceStore.ts\";\nimport {composeDeviceFeed,sourcePointer,sourceRpc} from \"../lib/sourceClient.ts\";\nimport {normalizeItems,phase} from \"../lib/sourceContract.ts\";\nfunction assert(ok:unknown,msg:string):asserts ok {if(!ok)throw new Error(msg);}\nconst stamp=new Date().toISOString(), install=\"source-boundary-fixture-\"+crypto.randomUUID();\nconst d=await sqlite.execute({sql:\"INSERT INTO devices(bunch_id,install_id,name,created_at,updated_at) VALUES(1,?,'Boundary fixture',?,?) RETURNING id\",args:[install,stamp,stamp]});\nconst id=Number(d.rows[0].id);\nconst originalFetch=globalThis.fetch;\nlet providerRequests=0;\nglobalThis.fetch=async(input,init)=>{\n const url=new URL(input instanceof Request?input.url:String(input));\n if(url.hostname.endsWith(\".web.val.run\"))providerRequests++;\n return originalFetch(input,init);\n};\nconst call=(path:string,method=\"GET\")=>app(new Request(\"https://parent.invalid\"+path,{method}));\ntry {\n const empty=await composeDeviceFeed([]);\n const payload=await empty.json();\n assert(payload.schemaVersion===3&&payload.items.length===0,\"empty composition\");\n assert(empty.headers.get(\"x-effective-source-count\")===\"0\"&&empty.headers.get(\"x-effective-sources\")===\"\",\"empty diagnostics\");\n assert(providerRequests===0,\"empty composition fetched provider\");\n for(const route of [\"/config/resolve\",\"/devices/resolve\"]){\n for(const query of [\"\",\"?device=unknown-retirement-fixture\",\"?device=\"+install]){\n const r=await call(route+query),p=await r.json();\n assert(r.ok&&p.schemaVersion===3&&p.items.length===0,\"empty resolver\");\n }\n }\n assert(providerRequests===0,\"unassigned resolver fetched provider\");\n const page=await (await call(\"/devices/\"+id)).text();\n assert(page.includes(\"No sources assigned.\")&&!page.includes(\"starter games\"),\"empty device copy\");\n for(const route of [\"/\",\"/?teams[]=fever&sports[]=nba\"]){\n const r=await call(route);assert(r.ok&&r.headers.get(\"content-type\")?.includes(\"text/html\"),\"browser root\");\n }\n assert((await call(\"/ingest/fiba/2000-01-01\",\"POST\")).status===404,\"retired ingest route\");\n assert((await call(\"/ingest/moon/2000-01-01\",\"POST\")).status===404,\"retired Moon adapter\");\n const available=await listAvailableSources(id);\n assert(available.some(s=>s.id===5)&&available.some(s=>s.id===3),\"available sources\");\n const a=await addDeviceSource(id,5,{teams:[\"rams\"],intradayFilter:false});assert(a,\"NFL assignment\");\n assert(await addDeviceSource(id,3,{}),\"Moon assignment\");\n assert(await updateDeviceSource(id,a,{teams:[\"rams\"],intradayFilter:false}),\"settings update\");\n const device=await getDevice(id);assert(device?.sources.length===2,\"device projection\");\n for(const path of [\"/sources\",\"/sources/5\",\"/sources/3\",\"/devices/\"+id,\"/devices/\"+id+\"/sources/\"+a,\"/devices/\"+id+\"/preview\"]){\n // /sources/:id redirects to its overview tab, so a 3xx is a pass here.\n const r=await call(path);assert(r.ok||r.status===302,`browser route ${path} returned ${r.status}`);assert(!(await r.text()).includes('name=\"priority\"'),\"priority control\");\n }\n for(const route of [\"/config/resolve\",\"/devices/resolve\"]){\n const r=await call(route+\"?device=\"+install+\"&tz=-25200\"),p=await r.json();\n assert(r.ok&&p.schemaVersion===3&&p.items.some((x:any)=>x.id.startsWith(\"5:\"))&&p.items.some((x:any)=>x.id.startsWith(\"3:\")),\"mixed source response\");\n assert(p.items.every((x:any,i:number)=>x.startsAt<1e11&&(i===0||p.items[i-1].startsAt<=x.startsAt)),\"seconds and ordering\");\n // Every item is a window, and the legacy field still mirrors the start for iOS\n // builds that predate it.\n assert(p.items.every((x:any)=>x.expiresAt>x.startsAt&&x.timestamp===x.startsAt),\"window and legacy mirror\");\n // Moon's peak is instantaneous: a one-second window, current at no other instant.\n const moon=p.items.find((x:any)=>x.id.startsWith(\"3:\"));\n assert(moon.expiresAt===moon.startsAt+1,\"an instantaneous item survives composition intact\");\n assert(phase(moon,moon.startsAt-1)===\"upcoming\"&&phase(moon,moon.startsAt)===\"current\"\n &&phase(moon,moon.startsAt+1)===\"expired\",\"instantaneous phase\");\n }\n // A source still publishing a bare timestamp is upgraded rather than rejected.\n const upgraded=normalizeItems([{id:\"legacy\",mainText:\"m\",subText:\"s\",caption:null,emphasized:false,timestamp:1788739200}]);\n assert(upgraded?.[0].startsAt===1788739200&&upgraded?.[0].expiresAt===1788739201,\"legacy item upgraded to an instant\");\n assert(normalizeItems([{id:\"bad\",mainText:\"m\",subText:\"s\",caption:null,emphasized:false,startsAt:1,expiresAt:1}])===null,\"a zero-length window is refused\");\n const status=await (await call(\"/config/status/\"+install)).json();\n assert(status.paired&&status.activeSource===\"moon\"&&Array.isArray(status.teams),\"status compatibility\");\n const p=await sourcePointer(5),desc=await (await sourceRpc(p,\"/v1/descriptor\")).json();\n assert(desc.sourceKey===\"nfl\"&&!desc.capabilities.publish,\"descriptor\");\n console.log(\"PASS: no-provider empty feeds, both resolvers, browser pages, retired ingest, status compatibility and NFL/Moon composition\");\n} finally {\n globalThis.fetch=originalFetch;\n await sqlite.execute({sql:\"DELETE FROM device_sources WHERE device_id=?\",args:[id]});\n await sqlite.execute({sql:\"DELETE FROM devices WHERE id=?\",args:[id]});\n}\n",[],[159,299],"284c5d2f-c1e4-4e15-8606-b9506d6da692","remove-assignment-bunch-constraints.ts","facbff0c-b138-11f1-8ae3-1607ee4eb77e",4,["D",1789499370908],"// One-time, idempotent migration: bunch membership does not own source assignments.\n// Keep foreign keys, unique device/source pairs, and settings validation intact.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nawait sqlite.batch([\n \"DROP TRIGGER IF EXISTS device_bunch_move\",\n \"DROP TRIGGER IF EXISTS source_assignment_bunch_insert\",\n \"DROP TRIGGER IF EXISTS source_assignment_bunch_update\",\n \"DROP TRIGGER IF EXISTS source_owner_update\",\n]);\nconsole.log(\"Removed obsolete assignment bunch constraints.\");\n",[],[159,306],"75897370-fdcd-4615-9486-dbfe11d47d94","reminder-check.ts","01a0a679-3dab-7374-aab8-e50236bb8d96",["D",1789499358648],"// Proves the reminder boundary: due-predicate selection, single-claim delivery,\n// cancellation, lateness guards and the disabled dry run. Uses disposable fixtures\n// and cleans them up. Sends no real APNs requests.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { reminderFor } from \"../lib/reminderBuilder.ts\";\nimport { drainReminders, remindersEnabled } from \"../lib/reminderDrainer.ts\";\nimport {\n claimReminder,\n DEFAULT_LEAD_SECONDS,\n dueReminders,\n ensureReminderSchema,\n failAbandonedClaims,\n isoFromUnix,\n MAX_LATENESS_SECONDS,\n syncDeviceReminders,\n} from \"../lib/reminderStore.ts\";\nimport { ensureAlertSchema } from \"../lib/alertPush.ts\";\nimport type { Item } from \"../lib/sourceContract.ts\";\n\nfunction assert(value: unknown, message: string) {\n if (!value) throw new Error(message);\n}\n\nconst now = Math.floor(Date.now() / 1000);\nconst device = {\n id: -1,\n installId: \"reminder-check-\" + crypto.randomUUID(),\n leadSeconds: DEFAULT_LEAD_SECONDS,\n tzOffsetSeconds: -25200,\n};\n\n// Two hours is a plausible source-owned duration; `durationSeconds: 1` is the\n// instantaneous case (a moon peak), which must survive queuing like any other.\nfunction item(id: string, startsAt: number, durationSeconds = 7200): Item {\n return {\n id,\n mainText: \"Away @ Home\",\n subText: \"Network\",\n caption: null,\n emphasized: false,\n startsAt,\n expiresAt: startsAt + durationSeconds,\n };\n}\n\n// Lead time is not quantized to the tick: send_after is exact, and the tick only\n// bounds how late delivery can be. A dropdown of quarter-hours would encode a\n// deployment detail into the product.\nconst odd = { ...device, leadSeconds: 50 * 60 };\nconst oddReminder = reminderFor(item(\"5:odd\", now + 3600), odd, now);\nassert(oddReminder?.sendAfter === isoFromUnix(now + 3600 - 50 * 60), \"arbitrary lead is exact\");\nassert(oddReminder?.rule === \"lead:3000\", \"rule carries the lead so leads never collide\");\n\n// Stored times must match Date.toISOString() byte for byte. The `T` separator is the\n// part that matters: SQLite's datetime() emits a space, and a mix of the two would\n// break the due predicate silently, since string order stops being time order.\nconst ISO_UTC = /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/;\nassert(ISO_UTC.test(oddReminder!.eventAt) && ISO_UTC.test(oddReminder!.sendAfter), \"ISO UTC storage format\");\nassert(oddReminder!.sendAfter < oddReminder!.eventAt, \"text timestamps compare chronologically\");\n\n// The lateness cap must clear the drain cadence plus the scheduler's slack, or a row\n// coming due just after a tick is voided rather than sent. Val Town cron has been seen\n// firing ~5 minutes past its configured minute, so a cap equal to the cadence drops\n// reminders silently. Kept as a relationship, not a number, so retuning the cadence\n// cannot quietly reintroduce it.\nconst DRAIN_INTERVAL_SECONDS = 15 * 60;\nconst OBSERVED_CRON_SLACK_SECONDS = 5 * 60;\nassert(\n MAX_LATENESS_SECONDS > DRAIN_INTERVAL_SECONDS + OBSERVED_CRON_SLACK_SECONDS,\n \"lateness cap must exceed drain cadence plus cron slack\",\n);\n\n// The window is carried into the ledger so send-time policy can ask whether the\n// event is over without another read. An instantaneous item queues like any other:\n// it is the start that schedules a reminder, and a one-second expiry is not a null.\nconst windowed = reminderFor(item(\"5:window\", now + 7200), device, now);\nassert(windowed?.expiresAt === isoFromUnix(now + 7200 + 7200), \"the item's expiry reaches the ledger\");\nconst moment = reminderFor(item(\"3:peak\", now + 7200, 1), device, now);\nassert(moment?.expiresAt === isoFromUnix(now + 7201), \"an instantaneous item queues with its one-second window\");\nassert(moment!.eventAt < moment!.expiresAt, \"expiry sorts after the start as text\");\n\nassert(reminderFor(item(\"5:past\", now - 60), device, now) === null, \"started events are not queued\");\nassert(reminderFor(item(\"5:far\", now + 200 * 3600), device, now) === null, \"beyond horizon is not queued\");\n\nconst clocked = reminderFor(item(\"5:clock\", now + 7200), device, now);\nassert(/^Starts at \\d{1,2}:\\d{2} (AM|PM)$/.test(clocked?.body ?? \"\"), \"local clock body\");\nconst unknownTz = reminderFor(item(\"5:clock\", now + 7200), { ...device, tzOffsetSeconds: null }, now);\nassert(unknownTz?.body === \"Starts in 60 minutes\", \"no offset names no clock time\");\n\nawait ensureReminderSchema();\nawait ensureAlertSchema();\n\nconst fixture = await sqlite.execute({\n sql: `INSERT INTO devices (bunch_id, install_id, name, created_at, updated_at)\n SELECT (SELECT id FROM bunches ORDER BY id LIMIT 1), ?, ?, ?, ? RETURNING id`,\n args: [device.installId, \"reminder check\", new Date().toISOString(), new Date().toISOString()],\n});\nconst deviceId = Number((fixture.rows[0] as { id: number }).id);\n\ntry {\n // Due means \"send_after has passed and nothing sent it\", not \"falls in this tick's\n // window\". That is what survives a skipped tick or a late-published event.\n await syncDeviceReminders(deviceId, [\n { itemId: \"5:due\", rule: \"lead:3600\", eventAt: isoFromUnix(now + 3540), expiresAt: isoFromUnix(now + 10740), sendAfter: isoFromUnix(now - 60), title: \"Due\", body: \"Body\" },\n { itemId: \"5:later\", rule: \"lead:3600\", eventAt: isoFromUnix(now + 90000), expiresAt: isoFromUnix(now + 97200), sendAfter: isoFromUnix(now + 86400), title: \"Later\", body: \"Body\" },\n ]);\n const due = (await dueReminders(50)).filter((row) => row.deviceId === deviceId);\n assert(due.length === 1 && due[0].itemId === \"5:due\", \"only past-due rows are selected\");\n\n // The claim is the lock. Two racing drains cannot both own one row.\n assert(await claimReminder(due[0].id), \"first claim wins\");\n assert(!await claimReminder(due[0].id), \"second claim is refused\");\n await sqlite.execute({\n sql: \"UPDATE notification_queue SET state='pending', claimed_at=NULL WHERE id=?\",\n args: [due[0].id],\n });\n\n // Re-enqueueing is a no-op; an item that left the feed is cancelled in place.\n await syncDeviceReminders(deviceId, [\n { itemId: \"5:due\", rule: \"lead:3600\", eventAt: isoFromUnix(now + 3540), expiresAt: isoFromUnix(now + 10740), sendAfter: isoFromUnix(now - 60), title: \"Due\", body: \"Body\" },\n ]);\n const counts = await sqlite.execute({\n sql: \"SELECT state, COUNT(*) AS total FROM notification_queue WHERE device_id=? GROUP BY state\",\n args: [deviceId],\n });\n const byState = Object.fromEntries(\n (counts.rows as { state: string; total: number }[]).map((row) => [row.state, Number(row.total)]),\n );\n assert(byState.pending === 1 && byState.void === 1, \"vanished item voided, surviving item kept\");\n\n const drained = await drainReminders({ limit: 50 });\n const settled = await sqlite.execute({\n sql: \"SELECT state, apns_status FROM notification_queue WHERE device_id=? AND item_id='5:due'\",\n args: [deviceId],\n });\n const row = settled.rows[0] as { state: string; apns_status: string };\n if (remindersEnabled()) {\n // With no alert token registered for this disposable install, delivery cannot\n // reach APNs; the row must still be settled rather than left claimed.\n assert(row.state === \"failed\" && row.apns_status === \"NoAlertToken\", \"missing token settles the row\");\n } else {\n assert(row.state === \"disabled\", \"kill switch drains without delivering\");\n assert(!drained.enabled && drained.sent === 0, \"disabled drain sends nothing\");\n }\n\n // A reminder is worthless once its event has started, and nearly so once it is\n // more than a tick overdue. Both are voided at send time rather than delivered,\n // which is what stops a backlog from firing all at once after an outage.\n await syncDeviceReminders(deviceId, [\n { itemId: \"5:started\", rule: \"lead:3600\", eventAt: isoFromUnix(now - 60), expiresAt: isoFromUnix(now + 7140), sendAfter: isoFromUnix(now - 120), title: \"Started\", body: \"Body\" },\n { itemId: \"5:stale\", rule: \"lead:3600\", eventAt: isoFromUnix(now + 3600), expiresAt: isoFromUnix(now + 10800), sendAfter: isoFromUnix(now - 7200), title: \"Stale\", body: \"Body\" },\n { itemId: \"5:over\", rule: \"lead:3600\", eventAt: isoFromUnix(now - 7200), expiresAt: isoFromUnix(now - 60), sendAfter: isoFromUnix(now - 30), title: \"Over\", body: \"Body\" },\n ]);\n await drainReminders({ limit: 50 });\n const guarded = await sqlite.execute({\n sql: `SELECT item_id, state, apns_status FROM notification_queue\n WHERE device_id=? AND item_id IN ('5:started','5:stale','5:over') ORDER BY item_id`,\n args: [deviceId],\n });\n const guards = Object.fromEntries(\n (guarded.rows as { item_id: string; state: string; apns_status: string }[])\n .map((row) => [row.item_id, `${row.state}:${row.apns_status}`]),\n );\n assert(guards[\"5:started\"] === \"void:EventStarted\", \"a started event is never announced\");\n assert(guards[\"5:stale\"] === \"void:TooLate\", \"a badly overdue reminder is dropped, not delivered\");\n // \"Started\" and \"over\" are different facts and settle differently, which is what\n // an expiry-anchored rule will need once one exists.\n assert(guards[\"5:over\"] === \"void:EventExpired\", \"an event already over is recorded as expired\");\n\n // An abandoned claim is failed, never retried: at-most-once resolves the\n // ambiguity of a run that died mid-send against sending.\n await sqlite.execute({\n sql: `UPDATE notification_queue SET state='claimed', claimed_at=?\n WHERE device_id=? AND item_id='5:due'`,\n args: [isoFromUnix(now - 3600), deviceId],\n });\n assert(await failAbandonedClaims() >= 1, \"abandoned claims fail\");\n const abandoned = await sqlite.execute({\n sql: \"SELECT state, apns_status FROM notification_queue WHERE device_id=? AND item_id='5:due'\",\n args: [deviceId],\n });\n assert((abandoned.rows[0] as { apns_status: string }).apns_status === \"AbandonedClaim\", \"abandonment recorded\");\n} finally {\n await sqlite.execute({ sql: \"DELETE FROM notification_queue WHERE device_id=?\", args: [deviceId] });\n await sqlite.execute({ sql: \"DELETE FROM devices WHERE id=?\", args: [deviceId] });\n}\n\nconsole.log(\n `Reminder checks passed (delivery ${remindersEnabled() ? \"enabled\" : \"disabled\"}): ` +\n \"arbitrary leads, horizon and started-event guards, clock text, due predicate, \" +\n \"single claim, cancellation, settlement and abandoned-claim policy. No APNs requests sent.\",\n);\n",[],[159,314],"1b8775cc-b4d6-4069-ae19-828f54ca4d23","presentation-check.ts","01a0a679-3dab-7374-aab8-e286010c265d",["D",1789499358648],"// Deterministic checks for the device presentation contract.\n//\n// Rewritten 2026-09-06. Every assertion here still described the retired v1\n// contract — `fullColor.primarySurface`, and `system-v1`/`future-v2` templates\n// — so this file had been failing since the Beacon migration rather than\n// guarding anything. It now covers the v2 shape actually in use.\n\nimport {\n DEFAULT_WIDGET_PRESENTATION,\n parseStoredPresentation,\n presentationFromForm,\n} from \"../lib/presentation.ts\";\n\nfunction assert(condition: boolean, message: string): void {\n if (!condition) throw new Error(message);\n}\n\nfunction isDefault(value: unknown): boolean {\n return JSON.stringify(value) === JSON.stringify(DEFAULT_WIDGET_PRESENTATION);\n}\n\n// A stored row keeps a template the editor no longer offers, and normalizes\n// its surfaces on the way out.\nconst parsed = parseStoredPresentation(\n '{\"version\":2,\"template\":\"standard-v1\",\"rootSurface\":{\"light\":\"#abcdef\",\"dark\":\"#123456\"}}',\n);\nassert(parsed.template === \"standard-v1\", \"a stored deprecated template should survive a read\");\nassert(parsed.rootSurface.light === \"#ABCDEF\", \"surfaces should normalize to uppercase\");\nassert(parsed.rootSurface.dark === \"#123456\", \"both surfaces should survive\");\n\n// Loss tolerance: anything the contract cannot read becomes the default rather\n// than throwing, because this parses whatever is already in the devices table.\nassert(\n isDefault(parseStoredPresentation(\n '{\"version\":1,\"rootSurface\":{\"light\":\"#abcdef\",\"dark\":\"#123456\"}}',\n )),\n \"an unsupported version should fall back to the default presentation\",\n);\nassert(\n isDefault(parseStoredPresentation('{\"version\":2}')),\n \"a v2 value without rootSurface should fall back to the default presentation\",\n);\nassert(\n isDefault(parseStoredPresentation(\"not json\")),\n \"unparseable stored JSON should fall back to the default presentation\",\n);\nassert(\n parseStoredPresentation(\n '{\"version\":2,\"template\":\"beacon\",\"rootSurface\":{\"light\":\"red\",\"dark\":\"#123456\"}}',\n ).rootSurface.light === DEFAULT_WIDGET_PRESENTATION.rootSurface.light,\n \"a non-contract color should fall back to the default surface\",\n);\n\n// The editor accepts only what SUPPORTED_WIDGET_TEMPLATES currently lists,\n// which is narrower than what a stored row may hold.\nconst form = presentationFromForm(\"beacon\", \"#abcdef\", \"#123456\");\nassert(form?.template === \"beacon\", \"the editor should accept the supported template\");\nassert(form?.rootSurface.light === \"#ABCDEF\", \"a valid form should normalize its surfaces\");\nassert(\n presentationFromForm(\"standard-v1\", \"#abcdef\", \"#123456\") === null,\n \"the editor should reject a stored-only template it no longer offers\",\n);\nassert(\n presentationFromForm(\"beacon\", \"red\", \"#123456\") === null,\n \"the editor should reject non-contract colors\",\n);\n\nconsole.log(\"presentation checks passed\");\n",[],[159,321],"88f52667-c627-4ff4-91de-fb362ad7e972","device-token-check.ts","01a0a679-3dab-7374-aab8-df494c392f6b",["D",1789499358648],"// Read-only checks for the token seam, which is where push.ts's deterministic\n// coverage has to stop — anything past the lookup hits Apple's live endpoint.\n//\n// Guards the 2026-09-06 removal of the `device_tokens` backfill: the schema call\n// must not recreate that table, and lookup must still prefer a device's native\n// widget token over any legacy app-background row.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport {\n ensureDeviceTokenSchema,\n getTokenForDevice,\n} from \"../lib/deviceTokenStore.ts\";\n\nfunction assert(condition: boolean, message: string): void {\n if (!condition) throw new Error(message);\n}\n\nasync function count(sql: string): Promise {\n const result = await sqlite.execute(sql);\n return Number((result.rows[0] as { n: number }).n);\n}\n\nawait ensureDeviceTokenSchema();\n\nassert(\n await count(\n \"SELECT COUNT(*) AS n FROM sqlite_master WHERE type = 'table' AND name = 'device_tokens'\",\n ) === 0,\n \"the schema call must not recreate the retired device_tokens table\",\n);\n\nassert(\n await count(`\n SELECT COUNT(*) AS n\n FROM device_push_tokens t\n LEFT JOIN devices d ON d.install_id = t.device_id\n WHERE d.id IS NULL\n `) === 0,\n \"no token row should reference an install that is not a registered device\",\n);\n\nconst widgetDevice = await sqlite.execute(`\n SELECT d.id\n FROM devices d\n JOIN device_push_tokens t ON t.device_id = d.install_id\n WHERE t.push_kind = 'widget'\n LIMIT 1\n`);\nconst deviceId = (widgetDevice.rows[0] as { id: number } | undefined)?.id;\nassert(deviceId != null, \"expected at least one device with a widget token\");\n\nconst token = await getTokenForDevice(Number(deviceId));\nassert(token !== null, \"lookup should find a token for a device that has one\");\nassert(token?.kind === \"widget\", \"lookup should prefer the widget token\");\n\nconsole.log(\"device token checks passed\");\n",[],[159,328],"44dbe54e-a828-44d2-8e25-01b2da930429","assignment-bunch-check.ts","fcff2af6-b138-11f1-96e3-1607ee4eb77e",["D",1789499374596],"// Disposable persistence regression: no provider requests, pushes, or real device changes.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { addDeviceSource, getDevice, listAvailableSources, updateDeviceSource } from \"../lib/deviceStore.ts\";\nimport { getDeviceFeedConfiguration } from \"../lib/deviceSourceStore.ts\";\n\nfunction assert(ok: unknown, message: string): asserts ok {\n if (!ok) throw new Error(message);\n}\nconst stamp = new Date().toISOString();\nconst install = \"assignment-bunch-fixture-\" + crypto.randomUUID();\nconst bunchIds: number[] = [];\nlet deviceId: number | undefined;\nlet sourceId: number | undefined;\ntry {\n for (const name of [\"Assignment fixture A\", \"Assignment fixture B\"]) {\n const r = await sqlite.execute({\n sql: \"INSERT INTO bunches(name,created_at,updated_at) VALUES(?,?,?) RETURNING id\",\n args: [name, stamp, stamp],\n });\n bunchIds.push(Number(r.rows[0].id));\n }\n const d = await sqlite.execute({\n sql: \"INSERT INTO devices(bunch_id,install_id,name,created_at,updated_at) VALUES(?,?,'Assignment fixture',?,?) RETURNING id\",\n args: [bunchIds[0], install, stamp, stamp],\n });\n deviceId = Number(d.rows[0].id);\n const s = await sqlite.execute({\n sql: `INSERT INTO sources(bunch_id,name,kind,description,settings_schema,endpoint,remote_source_key,contract_version,credential_ref,created_at,updated_at)\n VALUES(?,'Assignment fixture','fixture','','{}','https://fixture.invalid','fixture',1,'',?,?) RETURNING id`,\n args: [bunchIds[0], stamp, stamp],\n });\n sourceId = Number(s.rows[0].id);\n const settings = { selections: [\"keep\"], enabled: true };\n const assignmentId = await addDeviceSource(deviceId, sourceId, settings);\n assert(assignmentId, \"initial assignment\");\n const readAssignment = async () => (await sqlite.execute({\n sql: \"SELECT * FROM device_sources WHERE id=?\", args: [assignmentId],\n })).rows[0];\n const before = JSON.stringify(await readAssignment());\n await sqlite.execute({sql: \"UPDATE devices SET bunch_id=? WHERE id=?\", args: [bunchIds[1], deviceId]});\n assert(JSON.stringify(await readAssignment()) === before, \"device bunch move must preserve the entire assignment\");\n assert((await getDevice(deviceId))?.sources.length === 1, \"browser still sees assignment\");\n const feed = await getDeviceFeedConfiguration(install);\n assert(feed?.sources[0]?.sourceId === sourceId && JSON.stringify(feed.sources[0].settings) === JSON.stringify(settings),\n \"widget still sees source and settings\");\n assert(await updateDeviceSource(deviceId, assignmentId, { enabled: false }), \"edit across bunches\");\n // Even an explicit unchanged FK update must not reapply the retired bunch rule.\n await sqlite.execute({sql: \"UPDATE device_sources SET source_id=source_id WHERE id=?\", args: [assignmentId]});\n await sqlite.execute({sql: \"UPDATE sources SET bunch_id=? WHERE id=?\", args: [bunchIds[1], sourceId]});\n await sqlite.execute({sql: \"UPDATE sources SET bunch_id=? WHERE id=?\", args: [bunchIds[0], sourceId]});\n assert(await readAssignment(), \"source bunch move preserves assignment\");\n assert(await addDeviceSource(deviceId, sourceId, {}) === null, \"duplicate remains blocked\");\n await sqlite.execute({sql: \"DELETE FROM device_sources WHERE id=?\", args: [assignmentId]});\n assert((await listAvailableSources(deviceId)).some(s => s.id === sourceId), \"cross-bunch source is available\");\n assert(await addDeviceSource(deviceId, sourceId, settings), \"cross-bunch attach\");\n assert((await listAvailableSources(deviceId)).every(s => s.id !== sourceId), \"attached source excluded\");\n await sqlite.execute({sql: \"DELETE FROM devices WHERE id=?\", args: [deviceId]});\n const remaining = await sqlite.execute({sql: \"SELECT id FROM device_sources WHERE device_id=?\", args: [deviceId]});\n assert(remaining.rows.length === 0, \"device deletion still cascades\");\n console.log(\"PASS: bunch moves preserve assignments and settings; browser/widget reads, editing, cross-bunch attachment, duplicate guard, and deletion cascade.\");\n} finally {\n if (deviceId !== undefined) {\n await sqlite.execute({sql: \"DELETE FROM device_sources WHERE device_id=?\", args: [deviceId]});\n await sqlite.execute({sql: \"DELETE FROM devices WHERE id=?\", args: [deviceId]});\n }\n if (sourceId !== undefined) await sqlite.execute({sql: \"DELETE FROM sources WHERE id=?\", args: [sourceId]});\n for (const id of bunchIds) await sqlite.execute({sql: \"DELETE FROM bunches WHERE id=?\", args: [id]});\n}\n",[],[159,335],"d7134047-c12d-469e-a8a0-eb209d15fa33","apns-credentials-check.ts","01a0a679-3dab-7374-aab8-daf362923e2d",["D",1789499358648],"// Checks credential shape and signing inside the server runtime without exposing secrets or sending pushes.\nconst names = [\"APNS_TEAM_ID\", \"APNS_KEY_ID\", \"APNS_AUTH_KEY\"];\nconst values = names.map((name) => Deno.env.get(name) ?? \"\");\nconst missing = names.filter((_, index) => !values[index]);\nif (missing.length) {\n console.log(JSON.stringify({ ok: false, missing }));\n} else if (!/^[A-Z0-9]{10}$/.test(values[0]) || !/^[A-Z0-9]{10}$/.test(values[1])) {\n console.log(JSON.stringify({ ok: false, error: \"Team ID and Key ID must each be 10 uppercase letters/digits.\" }));\n} else {\n try {\n const der = values[2].replace(/-----BEGIN PRIVATE KEY-----/, \"\").replace(/-----END PRIVATE KEY-----/, \"\").replace(/\\s+/g, \"\");\n const key = await crypto.subtle.importKey(\"pkcs8\", Uint8Array.from(atob(der), c => c.charCodeAt(0)), { name: \"ECDSA\", namedCurve: \"P-256\" }, false, [\"sign\"]);\n const signature = await crypto.subtle.sign({ name: \"ECDSA\", hash: \"SHA-256\" }, key, new TextEncoder().encode(\"Clark View APNs credential check\"));\n console.log(JSON.stringify({ ok: signature.byteLength === 64, credentialFormat: \"valid\", signing: signature.byteLength === 64 ? \"passed\" : \"failed\", appleAuthentication: \"not tested\", deviceDelivery: \"not tested\" }));\n } catch {\n console.log(JSON.stringify({ ok: false, error: \"Private key could not be imported or used for P-256 signing. Check the complete PEM contents.\" }));\n }\n}\n",[],[159,342],"804fa124-db1d-404f-a31a-aae086a231e5","alert-push-check.ts","01a0a679-3dab-7374-aab8-d5ccaf733751",["D",1789499358648],"import { sendAPNs } from \"../lib/push.ts\";\nimport { saveAlertToken, ensureAlertSchema } from \"../lib/alertPush.ts\";\nimport { alertRoutes } from \"../http/routes/notifications.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nfunction assert(v: unknown, message: string) { if (!v) throw new Error(message); }\nlet calls = 0;\nconst transport: typeof fetch = async (input, init) => {\n calls++;\n assert(String(input).startsWith(\"https://api.push.apple.com/\"), \"production host\");\n const headers = new Headers(init?.headers);\n assert(headers.get(\"apns-push-type\") === \"alert\", \"alert type\");\n assert(headers.get(\"apns-topic\") === \"plusjade.clark-view\", \"app topic\");\n assert(headers.get(\"apns-priority\") === \"10\", \"alert priority\");\n assert(JSON.parse(String(init?.body)).aps.alert.title === \"Test\", \"alert payload\");\n return new Response(\"\", {status:200});\n};\nconst result = await sendAPNs(\"00\".repeat(32), \"app-alert\", \"production\", {title:\"Test\",body:\"Test\"}, transport);\nassert(result.ok && calls === 1, \"production signing and request\");\nif (!Deno.env.has(\"APNS_SANDBOX_KEY_ID\")) {\n const sandbox = await sendAPNs(\"00\".repeat(32), \"app-alert\", \"sandbox\", {title:\"Test\",body:\"Test\"}, transport);\n assert(sandbox.reason === \"MissingCredentials:sandbox\" && calls === 1, \"sandbox must not use production credentials\");\n}\nconst bad = await sendAPNs(\"00\".repeat(32), \"app-alert\", \"production\", {title:\"Test\",body:\"Test\"},\n async () => new Response(JSON.stringify({reason:\"BadDeviceToken\"}), {status:400}));\nassert(!bad.deadToken && bad.reason === \"BadDeviceToken\", \"configuration mismatch must not delete token\");\nconst gone = await sendAPNs(\"00\".repeat(32), \"app-alert\", \"production\", {title:\"Test\",body:\"Test\"},\n async () => new Response(JSON.stringify({reason:\"Unregistered\"}), {status:410}));\nassert(gone.deadToken, \"unregistered cleanup\");\nawait ensureAlertSchema();\nconst device = \"push-check-\" + crypto.randomUUID();\nconst token = \"00\".repeat(32);\ntry {\n await saveAlertToken(device, token, \"production\", true);\n await saveAlertToken(device, token, \"sandbox\", false);\n const rows = await sqlite.execute({sql:\"SELECT environment,allowed FROM device_alert_tokens WHERE device_id=?\",args:[device]});\n assert(rows.rows.length === 2, \"environments coexist\");\n await saveAlertToken(device, token, \"production\", false);\n const response = await alertRoutes.request(\"/device/notifications/test\", {method:\"POST\", headers:{\"Content-Type\":\"application/json\"},body:JSON.stringify({device,token,environment:\"production\"})});\n assert(response.status === 409, \"permission denial blocks test\");\n const malformed = await alertRoutes.request(\"/device/notifications/register\", {method:\"POST\",headers:{\"Content-Type\":\"application/json\"},body:JSON.stringify({device,token,allowed:true})});\n assert(malformed.status === 400, \"explicit environment required\");\n // Cooldown timestamps follow the parent ISO convention; never-tested is NULL, not a\n // sentinel, so a fresh registration is eligible rather than blocked.\n const fresh = await sqlite.execute({sql:\"SELECT last_test_at FROM device_alert_tokens WHERE device_id=? AND environment='sandbox'\",args:[device]});\n assert((fresh.rows[0] as {last_test_at:string|null}).last_test_at === null, \"never tested is null\");\n await saveAlertToken(device, token, \"sandbox\", true);\n await sqlite.execute({sql:`UPDATE device_alert_tokens SET last_test_at=strftime('%Y-%m-%dT%H:%M:%fZ','now') WHERE device_id=? AND environment='sandbox'`,args:[device]});\n const stamped = await sqlite.execute({sql:\"SELECT typeof(last_test_at) AS t, last_test_at FROM device_alert_tokens WHERE device_id=? AND environment='sandbox'\",args:[device]});\n const cooldown = stamped.rows[0] as {t:string; last_test_at:string};\n assert(cooldown.t === \"text\" && /^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{3}Z$/.test(cooldown.last_test_at), \"cooldown stored as ISO UTC text\");\n const throttled = await alertRoutes.request(\"/device/notifications/test\", {method:\"POST\", headers:{\"Content-Type\":\"application/json\"},body:JSON.stringify({device,token,environment:\"sandbox\"})});\n assert(throttled.status === 409, \"cooldown still throttles after retype\");\n} finally {\n await sqlite.execute({sql:\"DELETE FROM device_alert_tokens WHERE device_id=?\",args:[device]});\n}\nconsole.log(\"Push checks passed: signing, routing, payload, missing sandbox credentials, cleanup policy, environment isolation, permission and validation. No APNs requests sent.\");\n",[],[159,349],"41c90a39-1ffe-4976-9dd2-6be7172a9b12","fixtures","01a0a679-3dab-7374-aab8-d0f3812cefde",["D",1789499358648],[],[159,356],["D",1789499358648],[243,244,245,246,247,248,249,250,251,252,253,254,255,256],[159],"af19449b-002c-47a0-aa54-a84c9628866b","sourceHtml.tsx","01a0a679-3dab-7374-aab8-cb1127661df1",["D",1789499358648],"// Read-only React documents for inspecting source contracts and consumers.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\nimport { renderToStaticMarkup } from \"npm:react-dom@18.2.0/server\";\nimport { isRecord } from \"../lib/guards.ts\";\nimport type { SourceDetail, SourceSummary } from \"../lib/sourceStore.ts\";\nimport { Cell, DataTable, Row } from \"./dataTable.tsx\";\nimport { pageShell } from \"./pageShell.ts\";\n\nimport type { DiagnosticsResult } from \"../lib/sourceDiagnostics.ts\";\n\ntype JsonObject = Record;\n\nfunction documentMarkup(title: string, node: ReactNode): string {\n return pageShell(title, renderToStaticMarkup(

{node}

));\n}\n\nfunction Timestamp({ value }: { value: string }): React.ReactElement {\n return {value};\n}\n\nfunction humanize(value: string): string {\n return value\n .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n .replace(/[_-]+/g, \" \")\n .replace(/\\bId\\b/g, \"ID\")\n .replace(/^./, (letter) => letter.toUpperCase());\n}\n\nfunction settingCount(schema: unknown): number {\n if (!isRecord(schema) || !isRecord(schema.properties)) return 0;\n return Object.keys(schema.properties).length;\n}\n\nfunction Value({ value }: { value: unknown }): React.ReactElement {\n if (Array.isArray(value)) {\n if (value.length === 0) return None;\n return (\n

\n );\n }\n if (isRecord(value)) return ;\n if (typeof value === \"boolean\") return {value ? \"Yes\" : \"No\"};\n if (value == null) return None;\n return {String(value)};\n}\n\nfunction Settings({ value }: { value: unknown }): React.ReactElement {\n if (!isRecord(value) || Object.keys(value).length === 0) {\n return

No settings.

;\n }\n return (\n

{humanize(key)}

\n );\n}\n\nfunction schemaType(definition: JsonObject): string {\n if (definition.type === \"array\" && isRecord(definition.items)) {\n return `Array of ${String(definition.items.type ?? \"values\")}`;\n }\n return humanize(String(definition.type ?? \"value\"));\n}\n\nfunction Schema({ value }: { value: unknown }): React.ReactElement {\n if (!isRecord(value)) {\n return (\n <>\n

The stored schema is not valid JSON.

{String(value)}

\n \n );\n }\n\n const properties = isRecord(value.properties) ? value.properties : {};\n const required = new Set(\n Array.isArray(value.required)\n ? value.required.filter((item): item is string => typeof item === \"string\")\n : [],\n );\n\n return (\n <>\n {Object.keys(properties).length === 0\n ?

No configurable settings.

\n : (\n

{name}

\n {schemaType(definition)}\n {\" · \"}\n {required.has(name) ? \"Required\" : \"Optional\"}\n {definition.readOnly === true ? \" · Read only\" : \"\"}\n

\n {typeof definition.description === \"string\" &&\n

{definition.description}

}\n {Object.hasOwn(definition, \"default\") &&\n

Default:

}\n {Array.isArray(definition.enum) &&\n

Allowed:

}\n {definition.uniqueItems === true &&\n

Values must be unique.

}\n

\n )}\n\n

Raw schema

{JSON.stringify(value, null, 2)}

\n \n );\n}\n\nexport function sourceIndexDocument(sources: SourceSummary[]): string {\n return documentMarkup(\n \"Widget favorites — Sources\",\n <>\n

Sources

Bunch-owned sources and their current device use.

\n {sources.length === 0\n ?

No sources yet.

\n : (\n \n {sources.map((source) => (\n \n \n {source.name}\n Source {source.id}\n \n {source.description}\n {settingCount(source.settingsSchema)}\n {source.deviceCount}\n \n ))}\n \n )}\n ,\n );\n}\n\nexport type SourceTab = \"overview\" | \"diagnostics\" | \"settings\" | \"devices\";\n\nfunction Diagnostics({ result }: { result?: DiagnosticsResult }): React.ReactElement {\n if (!result || result.state !== \"ready\") {\n return <>

Stored coverage

{result?.state === \"unsupported\"\n ? \"Diagnostics are not supported by this source.\"\n : \"Diagnostics are unavailable. The source could not be reached or returned an invalid response.\"}

Coverage is unknown; this does not mean the source is empty.

;\n }\n const data = result.value;\n const first = data.earliestTimestamp, last = data.latestTimestamp;\n const days = last === null ? null : (last - Date.parse(result.checkedAt) / 1000) / 86400;\n return <>\n

Stored coverage

All stored items before device settings and upcoming-item selection. Bounds do not establish complete coverage or current event status.

Total items: {data.totalItems}
Earliest event: {first === null ? \"None\" : }
Latest event: {last === null ? \"None\" : }
Date span: {first === null || last === null ? \"None\" : `${((last - first) / 86400).toFixed(1)} days`}
Latest event relative to check: {days === null ? \"None\" : days >= 0 ? `${days.toFixed(1)} days ahead` : `${Math.abs(days).toFixed(1)} days ago`}
Last ingest: {data.lastIngestedAt === null ? \"Unknown\" : }
Checked

\n {data.totalItems === 0 &&

No stored items.

}\n ;\n}\n\nexport function sourceShowDocument(source: SourceDetail, tab: SourceTab = \"overview\", diagnostics?: DiagnosticsResult): string {\n return documentMarkup(\n `Widget favorites — ${source.name}`,\n <>\n

← All sources

{source.name}

{source.description}

\n\n \n\n {tab === \"overview\" &&

Source: {source.id}
Bunch: {source.bunchId}
Implementation: {source.endpoint}
Devices: {source.deviceCount}
Created
Updated

}\n\n {tab === \"diagnostics\" && }\n\n {tab === \"settings\" &&

Available settings

Schema fields define the shape accepted by each device assignment.

\n \n

}\n\n {tab === \"devices\" &&

Attached devices

\n {source.devices.length === 0\n ?

No devices attached.

\n : (\n \n {source.devices.map((device) => (\n \n \n {device.name}\n {device.installId}\n \n \n

View settings

\n \n

\n \n \n \n ))}\n \n )}\n

}\n ,\n );\n}\n\nexport function sourceNotFoundDocument(): string {\n return documentMarkup(\n \"Widget favorites — Source not found\",\n <>\n

← All sources

Source not found

No source exists with that internal ID.

\n ,\n );\n}\n\n",[],[165,365],"c799d7db-96db-4f3e-82da-49ebad53d004","rootHtml.ts","01a0a679-3dab-7374-aab8-c573df2c1281",["D",1789499358648],"// Static shell for the browser-managed app entry point.\n//\n// Standalone by design — it is the one page that does not use `pageShell`,\n// since the shell's own header would repeat the navigation this page exists\n// to present. It restates the shell's tokens so both agree on a phone in\n// Dark Mode.\n\nexport function rootHtml(): string {\n return `\n\n \n \n \n Sports Today\n \n \n \n

Sports Today

\n \n

\n \n`;\n}\n",[],[165,372],"1d5dbe03-daaf-4eef-ab62-88f8ace0d023","pageShell.ts","01a0a679-3dab-7374-aab8-c2adb3078ce1",["D",1789499358648],"// Shared semantic shell for every browser administration view.\n//\n// The stylesheet is mobile-first: the unqualified rules describe a phone in\n// portrait, and each `min-width` block adds back the wider-viewport layout.\n// Two consequences are load-bearing for the views. Resource tables stack\n// into labeled rows below 40em, which is why `dataTable.tsx` emits a\n// `data-label` and an explicit ARIA role on every cell — CSS drops the\n// native table roles the moment `display` changes. And every control clears\n// a 44px touch target with a 16px font, since anything smaller is both hard\n// to hit and triggers iOS Safari's zoom-on-focus.\n\nconst PAGE_STYLE = `\n /* Light values are the established palette; the dark set mirrors the same\n hierarchy rather than introducing a second visual language. */\n :root {\n color-scheme: light dark;\n --page: #fff;\n --ink: #1a1a1a;\n --ink-muted: #666;\n --accent: #2563eb;\n --accent-strong: #1d4ed8;\n --rule: #eee;\n --edge: #ddd;\n --field-edge: #ccc;\n --inset: #f6f6f6;\n --tap: 44px;\n }\n @media (prefers-color-scheme: dark) {\n :root {\n --page: #16181c;\n --ink: #e8e9ec;\n --ink-muted: #a1a5ae;\n --accent: #7aa7ff;\n --accent-strong: #a3c0ff;\n --rule: #26282e;\n --edge: #34373e;\n --field-edge: #4b4f58;\n --inset: #1c1f24;\n }\n }\n\n *, *::before, *::after { box-sizing: border-box; }\n\n body {\n font-family: system-ui, -apple-system, sans-serif;\n background: var(--page);\n color: var(--ink);\n line-height: 1.5;\n max-width: 40rem;\n margin: 0 auto;\n padding: 1rem 1rem 3rem;\n overflow-wrap: break-word;\n }\n main { min-width: 0; }\n @media (min-width: 40em) { body { padding: 2rem 1rem 4rem; } }\n\n h1 { font-size: clamp(1.4rem, 1.25rem + 0.8vw, 1.65rem); line-height: 1.2; margin: 0 0 1rem; }\n h2 { font-size: clamp(1.05rem, 1rem + 0.3vw, 1.2rem); line-height: 1.25; margin: 0 0 0.5rem; }\n h3 { font-size: 0.95rem; line-height: 1.3; margin: 1rem 0 0.4rem; }\n p { margin: 0.5rem 0 1rem; }\n ul, ol { margin: 0.5rem 0 1rem; padding-left: 1.25rem; }\n li { margin: 0.35rem 0; }\n a { color: var(--accent); }\n /* A paragraph holding nothing but a link is an action (\"+ Add source\"), so\n it gets a target taller than its text. */\n p:not(.breadcrumb) > a:only-child, li > a:first-child { display: inline-block; padding: 0.3rem 0; }\n code { font-family: ui-monospace, monospace; font-size: 0.85em; overflow-wrap: anywhere; }\n strong { overflow-wrap: anywhere; }\n :focus-visible { outline: 2px solid var(--accent); outline-offset: 2px; }\n\n details { margin-top: 0.75rem; }\n summary { cursor: pointer; font-weight: 600; padding: 0.6rem 0; }\n dl.schema-fields { margin: 0.75rem 0 0; }\n dl.schema-fields > div { padding: 0.75rem 0; border-bottom: 1px solid var(--rule); }\n dl.schema-fields dt { font-weight: 600; }\n dl.schema-fields dd { margin: 0.25rem 0 0; }\n dl.schema-fields p { margin: 0.25rem 0; }\n .schema-detail { color: var(--ink-muted); font-size: 0.85rem; }\n section { margin-top: 2rem; padding-top: 1rem; border-top: 1px solid var(--rule); }\n pre {\n background: var(--inset);\n border: 1px solid var(--edge);\n border-radius: 6px;\n padding: 0.75rem;\n overflow-x: auto;\n font-size: 0.8rem;\n line-height: 1.5;\n }\n\n /* Navigation. Wrapping keeps every destination reachable on a narrow\n screen instead of pushing links off-screen. */\n header.global-header { margin: 0 0 1.5rem; border-bottom: 1px solid var(--edge); }\n header.global-header nav, nav.resource-nav { display: flex; flex-wrap: wrap; gap: 0 1.25rem; }\n header.global-header a, nav.resource-nav a, .breadcrumb a {\n display: inline-flex;\n align-items: center;\n min-height: var(--tap);\n color: var(--accent);\n text-decoration: none;\n font-size: 0.95rem;\n }\n nav.resource-nav { margin: 0 0 1.5rem; border-bottom: 1px solid var(--edge); }\n nav.resource-nav a { border-bottom: 2px solid transparent; margin-bottom: -1px; }\n nav.resource-nav a.active { color: var(--ink); font-weight: 600; border-bottom-color: var(--accent); }\n .breadcrumb { margin: 0; }\n .breadcrumb a { font-size: 0.9rem; }\n\n /* Label/value metadata reads as an aligned two-column list on a phone and\n collapses to one inline run once there is room for it. */\n dl.device-meta { display: grid; grid-template-columns: minmax(5rem, auto) 1fr; gap: 0.35rem 0.75rem; margin: 1.25rem 0 1rem; }\n dl.device-meta > div { display: contents; }\n dl.device-meta dt { color: var(--ink-muted); font-size: 0.8rem; text-transform: uppercase; letter-spacing: 0.02em; }\n dl.device-meta dd { margin: 0; font-size: 0.85rem; }\n dl.device-meta dd.device-id { font-family: ui-monospace, monospace; }\n dl.device-meta ul { margin: 0; padding-left: 1.1rem; }\n @media (min-width: 40em) {\n dl.device-meta { display: flex; flex-wrap: wrap; gap: 0 1.5rem; margin: 1.25rem 0 0.5rem; }\n dl.device-meta > div { display: flex; gap: 0.35rem; }\n }\n\n /* Resource tables. Below 40em each row becomes a labeled record: the first\n cell is its title and every other cell prints its column name from\n data-label, so no operational column has to be dropped or scrolled to. */\n table.resource-index { width: 100%; border-collapse: collapse; margin-top: 1rem; }\n table.resource-index thead { display: none; }\n table.resource-index tr { display: block; padding: 0.85rem 0; border-bottom: 1px solid var(--rule); }\n table.resource-index td { display: grid; grid-template-columns: 7rem 1fr; gap: 0 0.75rem; padding: 0.15rem 0; font-size: 0.95rem; }\n table.resource-index td::before {\n content: attr(data-label);\n color: var(--ink-muted);\n font-size: 0.8rem;\n text-transform: uppercase;\n letter-spacing: 0.02em;\n line-height: 1.6;\n }\n table.resource-index td:empty { display: none; }\n table.resource-index td:first-child { display: block; font-weight: 600; margin-bottom: 0.35rem; }\n table.resource-index td:first-child::before { content: none; }\n table.resource-index td:first-child a { display: inline-block; padding: 0.3rem 0; }\n /* Settings nested in a cell already sit in the value column, so they run as\n a plain label-then-value flow rather than indenting a second time. */\n table.resource-index td details { margin-top: 0; }\n table.resource-index td summary { padding: 0 0 0.4rem; }\n table.resource-index td .device-meta { display: block; margin: 0; }\n table.resource-index td .device-meta > div { display: block; margin-bottom: 0.35rem; }\n .resource-id { display: block; font-family: ui-monospace, monospace; font-size: 0.8rem; font-weight: 400; color: var(--ink-muted); overflow-wrap: anywhere; }\n @media (min-width: 40em) {\n table.resource-index thead { display: table-header-group; }\n table.resource-index tr { display: table-row; padding: 0; border-bottom: 0; }\n table.resource-index th, table.resource-index td {\n display: table-cell;\n text-align: left;\n padding: 0.5rem 0.6rem;\n border-bottom: 1px solid var(--rule);\n }\n table.resource-index th { color: var(--ink-muted); font-weight: 600; font-size: 0.8rem; text-transform: uppercase; letter-spacing: 0.02em; }\n table.resource-index td::before { content: none; }\n table.resource-index td:first-child { font-weight: inherit; margin-bottom: 0; }\n table.resource-index td:first-child a { padding: 0; }\n table.resource-index td .device-meta { display: flex; }\n table.resource-index td .device-meta > div { display: flex; margin-bottom: 0; }\n }\n\n /* Forms. Controls are full-width and thumb-sized by default; the 1rem font\n size is what keeps iOS Safari from zooming the page on focus. */\n fieldset { border: 1px solid var(--edge); border-radius: 6px; margin: 0 0 1rem; padding: 0.5rem 1rem 1rem; min-width: 0; }\n legend { font-weight: 600; padding: 0 0.25rem; }\n label { display: flex; flex-wrap: wrap; align-items: center; gap: 0.5rem; min-height: var(--tap); margin: 0; }\n /* A text field's label sits above it so every field in a form starts at the\n same left edge; checkbox and color rows stay on one line. */\n label:has(input[type=\"text\"]), label:has(input[type=\"number\"]), label:has(select) {\n flex-direction: column;\n align-items: stretch;\n gap: 0.25rem;\n min-height: 0;\n margin-bottom: 0.75rem;\n }\n input[type=\"text\"], input[type=\"number\"], select {\n font: inherit;\n font-size: 1rem;\n min-height: var(--tap);\n max-width: 100%;\n padding: 0.5rem 0.65rem;\n border: 1px solid var(--field-edge);\n border-radius: 6px;\n background: var(--page);\n color: var(--ink);\n }\n input[type=\"text\"] { flex: 1 1 12rem; }\n input[type=\"number\"] { inline-size: 6rem; }\n select { flex: 1 1 14rem; }\n fieldset > input[type=\"text\"] { width: 100%; max-width: 24rem; }\n input[type=\"checkbox\"] { inline-size: 1.15rem; block-size: 1.15rem; accent-color: var(--accent); }\n input[type=\"color\"] {\n inline-size: 3.25rem;\n block-size: 2.75rem;\n padding: 0.2rem;\n border: 1px solid var(--field-edge);\n border-radius: 6px;\n background: var(--page);\n }\n /* A checkbox fieldset is a selection list, so it gets as many columns as the\n viewport fits at a readable width — two on a phone, four in the full\n container — instead of one 70-row column. */\n fieldset:has(input[type=\"checkbox\"]) { display: grid; grid-template-columns: repeat(auto-fill, minmax(8rem, 1fr)); gap: 0 1rem; }\n button {\n font: inherit;\n font-size: 1rem;\n font-weight: 600;\n min-height: var(--tap);\n inline-size: 100%;\n padding: 0.65rem 1.25rem;\n border: none;\n border-radius: 6px;\n background: var(--accent);\n color: var(--page);\n cursor: pointer;\n }\n button:hover { background: var(--accent-strong); }\n @media (min-width: 40em) { button { inline-size: auto; } }\n`;\n\nconst PAGE_SCRIPT = `\n document.querySelectorAll(\"time[datetime]\").forEach(function (el) {\n var d = new Date(el.getAttribute(\"datetime\"));\n if (!isNaN(d.getTime())) el.textContent = d.toLocaleString();\n });\n`;\n\nexport function pageShell(title: string, body: string): string {\n return `\n\n\n\n\n${title}\n\n\n\n\n${body}\n\n\n`;\n}\n",[],[165,379],"9ff0fb72-2c92-4cbc-81cd-ba261fc5ebdf","deviceHtml.tsx","01a0a679-3dab-7374-aab8-beaf7f101e0c",["D",1789499358648],"// Server-rendered device administration built on the device-centric model.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\nimport { renderToStaticMarkup } from \"npm:react-dom@18.2.0/server\";\nimport type { SettingsForm } from \"../lib/sourceSettings.ts\";\nimport { isRecord } from \"../lib/guards.ts\";\nimport { phase } from \"../lib/sourceContract.ts\";\nimport type {\n AvailableSource,\n DeviceDetail,\n DeviceSourceView,\n DeviceSummary,\n} from \"../lib/deviceStore.ts\";\nimport { SUPPORTED_WIDGET_TEMPLATES } from \"../lib/presentation.ts\";\nimport { titleCase } from \"../lib/text.ts\";\nimport { Cell, DataTable, Row } from \"./dataTable.tsx\";\nimport { pageShell } from \"./pageShell.ts\";\n\nexport type DevicePreviewItem = {\n id: string;\n mainText: string;\n subText: string;\n caption: string | null;\n emphasized: boolean;\n startsAt: number;\n expiresAt: number;\n};\n\ntype PreviewResult =\n | { ok: true; items: DevicePreviewItem[]; rawJson: string }\n | { ok: false; error: string };\n\nfunction documentMarkup(title: string, node: ReactNode): string {\n return pageShell(title, renderToStaticMarkup(

{node}

));\n}\n\nfunction Timestamp({ value }: { value: string }): React.ReactElement {\n return {value};\n}\n\nfunction humanize(key: string): string {\n return key\n .replace(/([a-z0-9])([A-Z])/g, \"$1 $2\")\n .replace(/[_-]+/g, \" \")\n .replace(/\\bId\\b/g, \"ID\")\n .replace(/^./, (letter) => letter.toUpperCase());\n}\n\nfunction stringArray(value: unknown): string[] {\n return Array.isArray(value)\n ? value.filter((item): item is string => typeof item === \"string\")\n : [];\n}\n\nfunction SettingValue({ value }: { value: unknown }): React.ReactElement {\n if (Array.isArray(value)) {\n if (value.length === 0) return None;\n return

;\n }\n if (isRecord(value)) return ;\n if (typeof value === \"boolean\") return {value ? \"Yes\" : \"No\"};\n if (value == null) return None;\n return {String(value)};\n}\n\nfunction Settings({ value }: { value: unknown }): React.ReactElement {\n if (!isRecord(value) || Object.keys(value).length === 0) return

No settings.

;\n return (\n

{humanize(key)}

\n );\n}\n\ntype DeviceNavActive = \"preview\" | \"sources\" | \"presentation\" | \"settings\";\n\nfunction DeviceNav({ id, active }: { id: number; active: DeviceNavActive }): React.ReactElement {\n const tabs = [\n [\"preview\", \"Preview\", \"\"],\n [\"sources\", \"Sources\", \"/sources\"],\n [\"presentation\", \"Presentation\", \"/presentation\"],\n [\"settings\", \"Settings\", \"/settings\"],\n ] as const;\n return (\n <>\n

← All devices

\n \n \n );\n}\n\nexport function SourceSettingsFields({form,settings}: {\n form: SettingsForm; settings: unknown;\n}): React.ReactElement {\n const values = isRecord(settings) ? settings : {};\n return <>\n \n {form.fields.length === 0 &&

No per-device settings.

}\n {form.fields.map(field => {\n const value = Object.hasOwn(values,field.key) ? values[field.key] : field.default;\n if (field.type === \"boolean\") return

\n {field.title}\n {\" \"}{field.title}\n {field.description &&

{field.description}

}\n

;\n const selected = stringArray(value);\n const missing = selected.filter(v => !field.choices.some(c => c.const === v));\n const groups = [...new Set(field.choices.map(c => c[\"x-group\"] ?? \"\"))];\n return

\n {field.title}\n {field.description &&

{field.description}

}\n {groups.map(group =>

\n {group || \"Choices\"}\n {field.choices.filter(c => (c[\"x-group\"] ?? \"\") === group).map(choice =>\n {\" \"}{choice.title}\n )}\n

)}\n {missing.length > 0 &&

Unavailable selections\n

Uncheck these unavailable values before saving.

\n {missing.map(value => {\" \"}{value})}\n

}\n

;\n })}\n ;\n}\n\nexport function deviceIndexDocument(devices: DeviceSummary[]): string {\n return documentMarkup(\n \"Widget favorites — Devices\",\n <>\n

Devices

\n {devices.length === 0\n ?

No devices yet.

\n : (\n \n {devices.map((device) => (\n \n \n {device.name}\n {device.installId}\n \n {device.sourceCount}\n \n \n ))}\n \n )}\n ,\n );\n}\n\nexport function deviceSettingsDocument(\n device: DeviceDetail,\n saved = false,\n): string {\n return documentMarkup(\n `Widget favorites — ${device.name}`,\n <>\n \n

{device.name}

Settings

\n {saved &&

Saved.

}\n \n\n

Device: {device.installId}
Sources: {device.sourceCount}
Created
Updated

\n\n\n\n

Merge

\n If this device replaces one that was reinstalled, its install can take over\n the older device instead.\n

Merge into another device

\n ,\n );\n}\n\nexport function deviceSourcesDocument(device: DeviceDetail): string {\n return documentMarkup(\n `Widget favorites — Sources for ${device.name}`,\n <>\n \n

{device.name}

Sources

Items from all sources are ordered by start time.

+ Add source

\n {device.sources.length === 0\n ?

No sources assigned.

\n : (\n \n {device.sources.map((source) => (\n \n \n \n {source.name}\n \n Assignment {source.assignmentId}\n \n \n \n \n ))}\n \n )}\n

\n ,\n );\n}\n\nexport function deviceMergeDocument(\n device: DeviceDetail,\n candidates: DeviceSummary[],\n error?: string,\n): string {\n return documentMarkup(\n `Widget favorites — Merge ${device.name}`,\n <>\n

← {device.name} settings

Merge into another device

\n Use this after reinstalling the app: pairing created this device, and the\n configuration you want still belongs to the device it replaces.\n

\n This install ({device.installId}) moves onto the device you choose, which keeps its\n name, sources, presentation and page. This device is deleted, along with\n its {device.sourceCount} assigned {device.sourceCount === 1 ? \"source\" : \"sources\"} and\n its presentation. The replaced device stops receiving notifications.\n

\n {error &&

{error}

}\n {candidates.length === 0\n ?

No other device exists to merge into.

\n : (\n \n )}\n ,\n );\n}\n\nexport function devicePresentationDocument(\n device: DeviceDetail,\n saved = false,\n): string {\n const { presentation } = device;\n return documentMarkup(\n `Widget favorites — Presentation for ${device.name}`,\n <>\n \n

Presentation

These values are sent to WidgetKit for every size of this widget.

\n {saved &&

Saved.

}\n \n ,\n );\n}\n\nexport function deviceSourceNewDocument(\n device: DeviceDetail,\n available: AvailableSource[],\n selected: AvailableSource | null,\n form: SettingsForm,\n): string {\n return documentMarkup(\n `Widget favorites — Add source to ${device.name}`,\n <>\n \n

Add source

\n {available.length === 0\n ?

Every available source is already attached.

\n : (\n <>\n

\n \n {source.name}\n {\" — \"}{source.description}\n

\n {selected && (\n

\n \n \n \n \n )}\n \n )}\n ,\n );\n}\n\nexport function deviceSourceEditDocument(\n device: DeviceDetail,\n source: DeviceSourceView,\n form: SettingsForm,\n saved = false,\n): string {\n return documentMarkup(\n `Widget favorites — ${source.name} for ${device.name}`,\n <>\n \n

{source.name}

{source.description}

\n {saved &&

Saved.

}\n

\n \n \n \n

Remove source

This removes the assignment from this device. It does not delete the source or its data.

\n \n

\n ,\n );\n}\n\nfunction Preview({ result }: { result: PreviewResult }): React.ReactElement {\n if (!result.ok) return

Couldn't build a preview: {result.error}

;\n return (\n <>\n {result.items.length === 0\n ?

No items — nothing in this device's source windows right now.

\n : (\n \n {result.items.map((item) => {\n const when = new Date(item.startsAt * 1000).toISOString();\n return (\n \n \n {/* Derived state, for diagnosing what a device sees right now. The\n expiry bound itself is an estimate and is deliberately not shown,\n here or anywhere else. */}\n {phase(item, Math.floor(Date.now() / 1000))}\n {item.mainText}\n {item.subText}\n {item.caption ?? \"\"}\n {item.emphasized ? \"Yes\" : \"\"}\n \n );\n })}\n \n )}\n

Raw response

{result.rawJson}

\n \n );\n}\n\nexport function devicePreviewDocument(\n device: DeviceDetail,\n result: PreviewResult,\n): string {\n return documentMarkup(\n `Widget favorites — Preview ${device.name}`,\n <>\n \n

{device.name}

Preview

\n {device.sources.length > 0\n ? (\n

\n Combining{\" \"}\n {device.sources.map((source) =>\n source.name\n ).join(\", \")}.\n

\n )\n :

No sources assigned. Add a source to populate this device’s feed.

}\n \n ,\n );\n}\n\nexport function deviceNotFoundDocument(): string {\n return documentMarkup(\n \"Widget favorites — Device not found\",\n <>\n

← All devices

Device not found

No device exists with that internal ID.

\n ,\n );\n}\n\n",[],[165,386],"f1f7ae6e-d073-496f-b20d-95415a476f86","dataTable.tsx","01a0a679-3dab-7374-aab8-ba8363defc22",["D",1789499358648],"// The resource table every administration index and detail view shares.\n//\n// Two things are centralized here because getting either wrong is invisible\n// until someone opens a page on a phone. Each cell carries its column name in\n// `data-label`, which is what the stacked layout in `pageShell` prints in\n// place of the hidden header row. Each element also carries the ARIA role its\n// tag already implies, because changing `display` on a table element drops\n// the native role and would otherwise leave assistive technology with a pile\n// of anonymous blocks.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\n\nexport function DataTable(\n { columns, children }: { columns: string[]; children: ReactNode },\n): React.ReactElement {\n return (\n \n \n \n {columns.map((column) => (\n \n ))}\n \n \n {children}\n

{column}

\n );\n}\n\nexport function Row({ children }: { children: ReactNode }): React.ReactElement {\n return {children};\n}\n\n// `label` must match this cell's column heading; the stacked layout shows it\n// as the row's label for this value.\nexport function Cell(\n { label, children }: { label: string; children?: ReactNode },\n): React.ReactElement {\n return {children};\n}\n",[],[165,393],"a5326bfd-e150-44e3-b5a9-c02dcd20a792","bunchHtml.tsx","01a0a679-3dab-7374-aab8-b5fdce64d7f7",["D",1789499358648],"// Server-rendered administration for bunch enrollment and access scope.\n\nimport React, { type ReactNode } from \"npm:react@18.2.0\";\nimport { renderToStaticMarkup } from \"npm:react-dom@18.2.0/server\";\nimport type {\n BunchCode,\n BunchDetail,\n BunchSummary,\n} from \"../lib/bunchStore.ts\";\nimport { Cell, DataTable, Row } from \"./dataTable.tsx\";\nimport { pageShell } from \"./pageShell.ts\";\n\nfunction documentMarkup(title: string, node: ReactNode): string {\n return pageShell(title, renderToStaticMarkup(

{node}

));\n}\n\nfunction Timestamp({ value }: { value: string }): React.ReactElement {\n return {value};\n}\n\nfunction BunchNav({ id, active }: { id: number; active: \"details\" | \"pair\" }): React.ReactElement {\n return (\n <>\n

← All bunches

\n \n \n );\n}\n\nexport function bunchIndexDocument(bunches: BunchSummary[]): string {\n return documentMarkup(\n \"Widget favorites — Bunches\",\n <>\n

Bunches

Bunches define enrollment and future access scope; feed settings stay on devices.

+ New bunch

\n {bunches.length === 0\n ?

No bunches yet.

\n : (\n \n {bunches.map((bunch) => (\n \n {bunch.name}\n {bunch.deviceCount}\n \n \n ))}\n \n )}\n ,\n );\n}\n\nexport function bunchNewDocument(): string {\n return documentMarkup(\n \"Widget favorites — New bunch\",\n <>\n

← All bunches

New bunch

\n \n ,\n );\n}\n\nexport function bunchShowDocument(bunch: BunchDetail, saved = false): string {\n return documentMarkup(\n `Widget favorites — ${bunch.name}`,\n <>\n \n

{bunch.name}

\n {saved &&

Saved.

}\n \n

Devices

\n {bunch.devices.length === 0\n ?

No devices registered yet.

\n : (\n \n {bunch.devices.map((device) => (\n \n \n {device.name}\n {device.installId}\n \n \n \n \n ))}\n \n )}\n

\n ,\n );\n}\n\nexport function bunchPairDocument(\n bunch: BunchDetail,\n codes: BunchCode[],\n created: BunchCode | null = null,\n): string {\n return documentMarkup(\n `Widget favorites — Pair to ${bunch.name}`,\n <>\n \n

Pair a device

A device can register into this bunch only with one of its unexpired codes.

\n \n {created && (\n

\n Code: {created.code}{\" — \"}enter this in the app. Expires{\" \"}\n . Reusable until then.\n

\n )}\n

Code history

\n {codes.length === 0\n ?

No codes yet.

\n : (\n \n {codes.map((code) => (\n \n {code.code}\n {code.active ? \"Active\" : \"Expired\"}\n \n \n \n ))}\n \n )}\n

\n ,\n );\n}\n\nexport function bunchNotFoundDocument(): string {\n return documentMarkup(\n \"Widget favorites — Bunch not found\",\n <>\n

← All bunches

Bunch not found

No bunch exists with that internal ID.

\n ,\n );\n}\n",[],[165,400],["D",1789499358648],[236,237,238,239,240,241],[165],"cd2eaa10-5b61-4bf2-919d-103f78c6e22e","time.ts","01a0a679-3dab-7374-aab8-afd86079af1e",["D",1789499358648],"// The parent's stored-time convention: ISO-8601 UTC text matching Date.toISOString().\n//\n// Fixed-width and zero-padded, so string comparison is chronological comparison and\n// SQL can compare times without conversion. **The `T` separator is load-bearing**:\n// SQLite's own `datetime()` emits a space instead, and 'T' sorts above ' ', so a column\n// mixing the two orders wrongly and silently. Write stored times through NOW_UTC or\n// isoFromUnix — never `datetime()` or `unixepoch()`.\n//\n// Unix seconds remain the wire format for source-protocol and widget item timestamps.\n// That contract predates this convention and is the reason epoch integers spread\n// inward in the first place; converting at the storage boundary keeps it contained.\n\nexport const ISO_FORMAT = \"%Y-%m-%dT%H:%M:%fZ\";\nexport const NOW_UTC = `strftime('${ISO_FORMAT}','now')`;\n\nexport function nowIsoUtc(): string {\n return new Date().toISOString();\n}\n\nexport function isoFromUnix(seconds: number): string {\n return new Date(Math.round(seconds) * 1000).toISOString();\n}\n\nexport function unixFromIso(value: string): number {\n return Math.floor(Date.parse(value) / 1000);\n}\n\n// SQL fragment converting a stored epoch column to the convention, for migrations.\nexport function isoFromEpochColumn(column: string): string {\n return `strftime('${ISO_FORMAT}',${column},'unixepoch')`;\n}\n",[],[170,410],"b27d64e4-2c7d-4e99-b2b1-94955be27a10","text.ts","01a0a679-3dab-7374-aab8-a87bde210d9b",["D",1789499358648],"// Pure string helpers. Domain-free: nothing here knows about games or teams,\n// which is what keeps them safe to call from anywhere in lib/ without\n// creating an import cycle.\n\nexport function titleCase(slug: string): string {\n return slug\n .split(\"-\")\n .map((word) => word.charAt(0).toUpperCase() + word.slice(1))\n .join(\" \");\n}\n",[],[170,417],"6a5d3df3-024f-42b3-bf0d-5c7be24f5c52","sourceStore.ts","01a0a679-3dab-7374-aab8-a48c296b29df",["D",1789499358648],"// Read-only projection of bunch-owned deployed sources and their device assignments.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type SourceKind = string;\n\nexport type SourceSummary = {\n id: number;\n kind: SourceKind;\n name: string;\n bunchId: number;\n endpoint: string;\n description: string;\n settingsSchema: unknown;\n createdAt: string;\n updatedAt: string;\n deviceCount: number;\n};\n\nexport type SourceDeviceView = {\n assignmentId: number;\n deviceId: number;\n installId: string;\n name: string;\n settings: unknown;\n createdAt: string;\n updatedAt: string;\n};\n\nexport type SourceDetail = SourceSummary & {\n devices: SourceDeviceView[];\n};\n\nfunction parseJson(raw: string | null): unknown {\n if (raw == null) return {};\n try {\n return JSON.parse(raw);\n } catch {\n return raw;\n }\n}\n\nexport async function listSources(): Promise {\n const result = await sqlite.execute(`\n SELECT\n s.id,\n s.kind,\n s.name,\n s.bunch_id, s.endpoint,\n s.description,\n s.settings_schema,\n s.created_at,\n s.updated_at,\n COUNT(ds.id) AS device_count\n FROM sources s\n LEFT JOIN device_sources ds ON ds.source_id = s.id\n GROUP BY s.id\n ORDER BY s.kind COLLATE NOCASE, s.id\n `);\n\n return (result.rows as {\n id: number;\n kind: SourceKind;\n name: string;\n description: string;\n bunch_id: number; endpoint: string;\n settings_schema: string | null;\n created_at: string;\n updated_at: string;\n device_count: number;\n }[]).map((row) => ({\n id: row.id,\n kind: row.kind,\n name: row.name,\n bunchId: row.bunch_id,\n endpoint: row.endpoint,\n description: row.description,\n settingsSchema: parseJson(row.settings_schema),\n createdAt: row.created_at,\n updatedAt: row.updated_at,\n deviceCount: Number(row.device_count),\n }));\n}\n\nexport async function getSource(id: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT\n s.id,\n s.kind,\n s.name AS source_name,\n s.bunch_id, s.endpoint,\n s.description,\n s.settings_schema,\n s.created_at,\n s.updated_at,\n ds.id AS assignment_id,\n ds.settings,\n ds.created_at AS assignment_created_at,\n ds.updated_at AS assignment_updated_at,\n d.id AS device_id,\n d.install_id,\n d.name\n FROM sources s\n LEFT JOIN device_sources ds ON ds.source_id = s.id\n LEFT JOIN devices d ON d.id = ds.device_id\n WHERE s.id = ?\n ORDER BY d.name COLLATE NOCASE, d.id, ds.id\n `,\n args: [id],\n });\n\n const rows = result.rows as {\n id: number;\n kind: SourceKind;\n source_name: string;\n description: string;\n bunch_id: number; endpoint: string;\n settings_schema: string | null;\n created_at: string;\n updated_at: string;\n assignment_id: number | null;\n settings: string | null;\n assignment_created_at: string | null;\n assignment_updated_at: string | null;\n device_id: number | null;\n install_id: string | null;\n name: string | null;\n }[];\n\n const first = rows[0];\n if (!first) return null;\n\n const devices = rows.flatMap((row) => {\n if (\n row.assignment_id == null ||\n row.settings == null ||\n row.assignment_created_at == null ||\n row.assignment_updated_at == null ||\n row.device_id == null ||\n row.install_id == null ||\n row.name == null\n ) {\n return [];\n }\n\n return [{\n assignmentId: row.assignment_id,\n deviceId: row.device_id,\n installId: row.install_id,\n name: row.name,\n settings: parseJson(row.settings),\n createdAt: row.assignment_created_at,\n updatedAt: row.assignment_updated_at,\n }];\n });\n\n return {\n id: first.id,\n kind: first.kind,\n name: first.source_name,\n bunchId: first.bunch_id,\n endpoint: first.endpoint,\n description: first.description,\n settingsSchema: parseJson(first.settings_schema),\n createdAt: first.created_at,\n updatedAt: first.updated_at,\n deviceCount: devices.length,\n devices,\n };\n}\n\n",[],[170,424],"fdb5928c-e5b7-4110-bfc9-1e16e7a0fed2","sourceSettings.ts","01a0a679-3dab-7374-aab8-a01c5b12dc83",["D",1789499358648],"// The intentionally small form profile: booleans and grouped string choices.\n// This validates the renderer's supported subset, not arbitrary JSON Schema.\nimport { record } from \"./sourceContract.ts\";\nimport { sourcePointer, sourceRpc, SourceRpcError } from \"./sourceClient.ts\";\nimport { HTTPException } from \"npm:hono/http-exception\";\nexport type Choice = { const: string; title: string; \"x-group\"?: string };\nexport type Field = { key: string; title: string; description?: string } & (\n { type: \"boolean\"; default: boolean } |\n { type: \"array\"; default: string[]; choices: Choice[] }\n);\nexport type SettingsForm = { fields: Field[]; revision: string };\nfunction ensure(ok: unknown): asserts ok {\n if (!ok) throw new Error(\"Source settings schema is unsupported or malformed\");\n}\nfunction keys(value: Record, allowed: string[]) {\n ensure(Object.keys(value).every(k => allowed.includes(k)));\n}\nexport function parseFormSchema(raw: unknown): Field[] {\n ensure(record(raw));\n keys(raw, [\"type\",\"properties\",\"required\",\"additionalProperties\",\"title\",\"description\"]);\n ensure(raw.type === \"object\" && raw.additionalProperties === false && record(raw.properties));\n const properties = raw.properties;\n ensure(raw.required === undefined || (Array.isArray(raw.required) &&\n raw.required.every(k => typeof k === \"string\" && Object.hasOwn(properties,k))));\n return Object.entries(properties).map(([key, value]) => {\n ensure(/^[A-Za-z][A-Za-z0-9_]*$/.test(key) && ![\"constructor\",\"prototype\",\"__proto__\"].includes(key));\n ensure(record(value) && typeof value.title === \"string\" && value.title.length > 0);\n ensure(value.description === undefined || typeof value.description === \"string\");\n const base = {key, title:value.title, description:value.description as string | undefined};\n if (value.type === \"boolean\") {\n keys(value, [\"type\",\"title\",\"description\",\"default\"]);\n ensure(typeof value.default === \"boolean\");\n return {...base, type:\"boolean\", default:value.default};\n }\n keys(value, [\"type\",\"title\",\"description\",\"default\",\"items\",\"uniqueItems\"]);\n ensure(value.type === \"array\" && value.uniqueItems === true && record(value.items));\n keys(value.items, [\"type\",\"oneOf\"]);\n ensure(value.items.type === \"string\" && Array.isArray(value.items.oneOf));\n const choices = value.items.oneOf.map(choice => {\n ensure(record(choice));\n keys(choice, [\"const\",\"title\",\"x-group\"]);\n ensure(typeof choice.const === \"string\" && typeof choice.title === \"string\");\n ensure(choice[\"x-group\"] === undefined || typeof choice[\"x-group\"] === \"string\");\n return choice as Choice;\n });\n ensure(new Set(choices.map(c => c.const)).size === choices.length);\n ensure(Array.isArray(value.default) && value.default.every(v => typeof v === \"string\" && choices.some(c => c.const === v)));\n ensure(new Set(value.default).size === value.default.length);\n return {...base,type:\"array\",default:value.default as string[],choices};\n });\n}\nexport async function loadSettingsForm(sourceId: number): Promise {\n try {\n const pointer = await sourcePointer(sourceId);\n const descriptor = await (await sourceRpc(pointer,\n \"/v1/descriptor?sourceKey=\" + encodeURIComponent(pointer.remote_source_key))).json();\n ensure(record(descriptor) && descriptor.protocolVersion === 1 &&\n descriptor.sourceKey === pointer.remote_source_key && descriptor.temporal === true &&\n record(descriptor.capabilities) && descriptor.capabilities.validateSettings === true);\n const fields = parseFormSchema(descriptor.settingsSchema);\n const digest = await crypto.subtle.digest(\"SHA-256\", new TextEncoder().encode(JSON.stringify(fields)));\n const revision = Array.from(new Uint8Array(digest), b => b.toString(16).padStart(2,\"0\")).join(\"\");\n return {fields,revision};\n } catch {\n throw new HTTPException(502, {message:\"Source settings are unavailable or unsupported. No settings were changed.\"});\n }\n}\nexport function decodeSettings(form: SettingsForm, body: Record): Record {\n if (body.settingsRevision !== form.revision)\n throw new HTTPException(409, {message:\"Source choices changed. Reload the form and try again.\"});\n const expected = new Set([\"sourceId\",\"settingsRevision\",...form.fields.map(f => \"setting.\" + f.key + (f.type === \"array\" ? \"[]\" : \"\"))]);\n if (Object.keys(body).some(key => !expected.has(key)))\n throw new HTTPException(422, {message:\"Unknown settings field.\"});\n const settings: Record = {};\n for (const field of form.fields) {\n const value = body[\"setting.\" + field.key + (field.type === \"array\" ? \"[]\" : \"\")];\n if (field.type === \"boolean\") {\n if (value !== undefined && value !== \"true\") throw new HTTPException(422, {message:\"Invalid boolean setting.\"});\n settings[field.key] = value === \"true\";\n } else {\n const selected = value === undefined ? [] : Array.isArray(value) ? value : [value];\n if (selected.some(v => typeof v !== \"string\" || !field.choices.some(c => c.const === v)) ||\n new Set(selected).size !== selected.length)\n throw new HTTPException(422, {message:\"Invalid or unavailable choice. Reload the form and review your selection.\"});\n settings[field.key] = selected;\n }\n }\n return settings;\n}\nexport async function settingsFromForm(sourceId: number, body: Record) {\n const form = await loadSettingsForm(sourceId);\n const settings = decodeSettings(form, body);\n const pointer = await sourcePointer(sourceId);\n try {\n const result = await (await sourceRpc(pointer, \"/v1/validate-settings\", {\n method:\"POST\",headers:{\"content-type\":\"application/json\"},\n body:JSON.stringify({protocolVersion:1,sourceKey:pointer.remote_source_key,settings}),\n })).json();\n ensure(record(result) && result.protocolVersion === 1 &&\n result.sourceKey === pointer.remote_source_key && result.ok === true);\n } catch (error) {\n if (error instanceof SourceRpcError && (error.status === 400 || error.status === 422))\n throw new HTTPException(422, {message:\"Source rejected settings: \" + error.code + \". No settings were changed.\"});\n throw new HTTPException(502, {message:\"Source validation is unavailable. No settings were changed.\"});\n }\n return settings;\n}\n",[],[170,431],"28526aa3-2e3a-4739-a21a-b2f58698f8b4","sourceDiagnosticsClient.ts","01a0a679-3dab-7374-aab8-9f6678b4100d",["D",1789499358648],"// Diagnostics failures stay local to the explorer and never affect widget reads.\nimport { sourcePointer, sourceRpc, SourceRpcError } from \"./sourceClient.ts\";\nimport { parseDiagnostics, type DiagnosticsResult } from \"./sourceDiagnostics.ts\";\n\nexport async function loadSourceDiagnostics(id: number): Promise {\n try {\n const pointer = await sourcePointer(id);\n const response = await sourceRpc(pointer, \"/diagnostics\");\n const value = parseDiagnostics(await response.json(), pointer.remote_source_key);\n return { state: \"ready\", value, checkedAt: new Date().toISOString() };\n } catch (error) {\n return {\n state: error instanceof SourceRpcError && [404, 405, 501].includes(error.status)\n ? \"unsupported\" : \"unavailable\",\n checkedAt: new Date().toISOString(),\n };\n }\n}\n",[],[170,438],"62a76f46-29ee-4539-afd0-f14adcbfa6b9","sourceDiagnostics.ts","01a0a679-3dab-7374-aab8-991bb3ef02f7",["D",1789499358648],"// Validated, storage-agnostic coverage supplied by a source over HTTP.\nimport { record } from \"./sourceContract.ts\";\n\nexport type SourceDiagnostics = {\n diagnosticsVersion: 1;\n sourceKey: string;\n scope: \"stored\";\n totalItems: number;\n earliestTimestamp: number | null;\n latestTimestamp: number | null;\n lastIngestedAt: string | null;\n};\nexport type DiagnosticsResult =\n | { state: \"ready\"; value: SourceDiagnostics; checkedAt: string }\n | { state: \"unsupported\" | \"unavailable\"; checkedAt: string };\n\nfunction timestamp(value: unknown): value is number {\n return typeof value === \"number\" && Number.isFinite(value)\n && Math.abs(value) <= 8640000000000;\n}\n\nexport function parseDiagnostics(value: unknown, sourceKey: string): SourceDiagnostics {\n if (!record(value) || value.diagnosticsVersion !== 1 || value.sourceKey !== sourceKey\n || value.scope !== \"stored\" || !Number.isSafeInteger(value.totalItems) || (value.totalItems as number) < 0\n || !(value.earliestTimestamp === null || timestamp(value.earliestTimestamp))\n || !(value.latestTimestamp === null || timestamp(value.latestTimestamp))\n || !(value.lastIngestedAt === null || (typeof value.lastIngestedAt === \"string\"\n && /^\\d{4}-\\d{2}-\\d{2}T/.test(value.lastIngestedAt) && Number.isFinite(Date.parse(value.lastIngestedAt))))) {\n throw new Error(\"Invalid source diagnostics\");\n }\n const first = value.earliestTimestamp, last = value.latestTimestamp;\n if ((first === null) !== (last === null)\n || (value.totalItems === 0 && first !== null)\n || (value.totalItems !== 0 && first === null)\n || (typeof first === \"number\" && typeof last === \"number\" && first > last)) {\n throw new Error(\"Inconsistent source diagnostics\");\n }\n return value as SourceDiagnostics;\n}\n",[],[170,445],"9c5a349f-5d33-4be2-bd39-b1e165eba820","sourceContract.ts","01a0a679-3dab-7374-aab8-9459e7b192e4",["D",1789499358648],"// Versioned temporal item contract shared by source shims and the parent composer.\n//\n// An item is a WINDOW, `[startsAt, expiresAt)`, in Unix epoch SECONDS. Both bounds\n// are required and expiresAt is strictly greater, so lifecycle is derivable from the\n// clock alone — no re-read, no ingest. `expiresAt` is an estimate the source owns; it\n// bounds phase and refresh scheduling and is never rendered as a fact.\nexport type Item = {\n id: string;\n mainText: string;\n subText: string;\n caption: string | null;\n emphasized: boolean;\n startsAt: number;\n expiresAt: number;\n // Transitional duplicate of startsAt for iOS builds that predate the window.\n // Drop it once no such build remains in the field.\n timestamp?: number;\n};\n\n// Mirrors the SDK's `phase()` so both sides of the seam agree on one definition of\n// \"current\". The vocabulary is domain-free on purpose: a source decides whether\n// `current` reads as \"LIVE\" or \"PEAK\", and the parent has no games model to decide\n// it with. These values are state, never display text.\nexport type Phase = \"upcoming\" | \"current\" | \"expired\";\nexport function phase(item: Pick, now: number): Phase {\n if (now < item.startsAt) return \"upcoming\";\n return now < item.expiresAt ? \"current\" : \"expired\";\n}\n\n// The widest window accepted, matching the SDK. A longer span almost always means\n// one bound was written in milliseconds.\nexport const MAX_ITEM_SPAN_SECONDS = 30 * 24 * 60 * 60;\n\nexport function record(value: unknown): value is Record {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\nfunction instant(value: unknown): value is number {\n return typeof value === \"number\" && Number.isFinite(value) && Math.abs(value) <= 8640000000000;\n}\nfunction fields(v: Record): boolean {\n return typeof v.id === \"string\" && v.id.length > 0\n && typeof v.mainText === \"string\" && typeof v.subText === \"string\"\n && (v.caption === null || typeof v.caption === \"string\")\n && typeof v.emphasized === \"boolean\";\n}\nexport function items(value: unknown): value is Item[] {\n return Array.isArray(value) && value.every(v => record(v) && fields(v)\n && instant(v.startsAt) && instant(v.expiresAt)\n && (v.expiresAt as number) > (v.startsAt as number)\n && (v.expiresAt as number) - (v.startsAt as number) <= MAX_ITEM_SPAN_SECONDS)\n && new Set(value.map(v => v.id)).size === value.length;\n}\n\n// A source still on the single-instant contract publishes `timestamp` and no window.\n// It is upgraded here rather than rejected, so an out-of-date source keeps working\n// through the migration. The parent has no domain model and so cannot invent a\n// duration: the item is treated as instantaneous, which is the only claim it can\n// make honestly. Such an item is therefore never `current`. Remove this path once\n// every registered source publishes a window.\nconst LEGACY_INSTANT_SECONDS = 1;\nfunction legacy(value: unknown): value is (Item & { timestamp: number })[] {\n return Array.isArray(value) && value.every(v => record(v) && fields(v) && instant(v.timestamp)\n && v.startsAt === undefined && v.expiresAt === undefined)\n && new Set(value.map(v => v.id)).size === value.length;\n}\nexport function normalizeItems(value: unknown): Item[] | null {\n if (items(value)) return value;\n if (!legacy(value)) return null;\n return value.map(v => ({ ...v, startsAt: v.timestamp, expiresAt: v.timestamp + LEGACY_INSTANT_SECONDS }));\n}\n\n// Chronological by start, then source id, then source-local item id, so ties are\n// deterministic across composes rather than dependent on source response order.\nexport function compose(results: { sourceId: number; items: Item[] }[]): Item[] {\n return results.flatMap(result => result.items.map(item => ({ sourceId: result.sourceId, item })))\n .sort((a,b) => a.item.startsAt - b.item.startsAt || a.sourceId - b.sourceId\n || (a.item.id < b.item.id ? -1 : a.item.id > b.item.id ? 1 : 0))\n .map(({sourceId,item}) => ({...item, id: `${sourceId}:${item.id}`, timestamp: item.startsAt}));\n}\n",[],[170,452],"ca0ac0ad-b8d2-4128-bf70-7fa9ad175879","sourceClient.ts","01a0a679-3dab-7374-aab8-911a9bf9567f",["D",1789499358648],"// Generic source RPC; destinations come from the parent registry, never device settings.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { record, normalizeItems, compose, type Item } from \"./sourceContract.ts\";\nimport { DEFAULT_WIDGET_PRESENTATION, type WidgetPresentation } from \"./presentation.ts\";\nexport type DeviceSourceSelection = { sourceId: number; settings: unknown };\nexport type FeedQuery = { tz?: string | number | null };\nexport type SourcePointer = {id:number; endpoint:string; remote_source_key:string; credential_ref:string; contract_version:number};\nexport async function sourcePointer(id:number):Promise {\n const r=await sqlite.execute({sql:\"SELECT id, endpoint, remote_source_key, credential_ref, contract_version FROM sources WHERE id = ?\",args:[id]});\n const p=r.rows[0] as SourcePointer | undefined;\n if (!p || p.contract_version !== 1) throw new Error(`Source ${id} has no compatible pointer`);\n return p;\n}\nexport class SourceRpcError extends Error {\n constructor(public readonly status: number, public readonly code: string) {\n super(code);\n }\n}\nexport async function sourceRpc(p:SourcePointer,path:string,init:RequestInit={}):Promise {\n const base=new URL(p.endpoint);\n if(base.protocol!==\"https:\" || base.username || base.password) throw new Error(\"Invalid source endpoint\");\n const token=Deno.env.get(p.credential_ref);\n if(!token) throw new Error(`Source ${p.id} RPC credential is not configured`);\n const headers=new Headers(init.headers); headers.set(\"authorization\",`Bearer ${token}`);\n const r=await fetch(new URL(path,base),{...init,headers,redirect:\"error\",signal:AbortSignal.timeout(20000)});\n if(!r.ok) {\n const error = await r.json().catch(() => null);\n const code = record(error) && typeof error.error === \"string\" && /^[a-z0-9_]+$/.test(error.error)\n ? error.error : \"source_request_failed\";\n throw new SourceRpcError(r.status, code);\n }\n return r;\n}\nexport function utcOffsetFromQuery(tz:string|number|null|undefined):number|null {\n const raw=tz == null ? null:Number(tz);\n return raw!==null&&Number.isInteger(raw)&&Math.abs(raw)<=86400?raw:null;\n}\nexport type ComposedFeed = {items:Item[]; pointers:SourcePointer[]};\n// Non-HTTP callers (the reminder builder) need the composed items themselves, so\n// composition stops at the item list and only the widget route wraps it in a Response.\nexport async function composeDeviceItems(sources:DeviceSourceSelection[],passthrough:FeedQuery={}):Promise {\n const utcOffsetSeconds=utcOffsetFromQuery(passthrough.tz);\n const pointers=await Promise.all(sources.map(s=>sourcePointer(s.sourceId)));\n const results=await Promise.all(sources.map(async (selection,i)=>{\n const p=pointers[i];\n const r=await sourceRpc(p,\"/v1/read\",{method:\"POST\",headers:{\"content-type\":\"application/json\"},body:JSON.stringify({protocolVersion:1,sourceKey:p.remote_source_key,settings:selection.settings,context:{utcOffsetSeconds}})});\n const value=await r.json();\n // normalizeItems accepts a window and upgrades a source still publishing a bare\n // `timestamp`, so an out-of-date source degrades instead of failing composition.\n const normalized=record(value)&&value.protocolVersion===1&&value.sourceKey===p.remote_source_key\n ? normalizeItems(value.items) : null;\n if(!normalized) throw new Error(`Source ${p.id} invalid temporal items`);\n return {sourceId:p.id,items:normalized};\n }));\n return {items:compose(results),pointers};\n}\nexport async function composeDeviceFeed(sources:DeviceSourceSelection[],passthrough:FeedQuery={},presentation:WidgetPresentation=DEFAULT_WIDGET_PRESENTATION):Promise {\n const {items:composed,pointers}=await composeDeviceItems(sources,passthrough);\n // Schema 3 is the item window: every item carries startsAt/expiresAt, and the\n // legacy `timestamp` rides along for iOS builds that predate it. Both the\n // duplicate field and this note go once those builds are gone.\n return Response.json({schemaVersion:3,eyebrow:\"NEXT\",items:composed,presentation},{headers:{\"cache-control\":\"no-store\",\"x-device-feed-provider\":\"source-registry-v1\",\"x-effective-source-count\":String(sources.length),\"x-effective-sources\":pointers.map(p=>`${p.id}:${p.remote_source_key}`).join(\",\")}});\n}\n",[],[170,459],"dff9b7de-0346-4509-99df-31c3f53a6d7e","reminderStore.ts","01a0a679-3dab-7374-aab8-8d71ec7982ae",["D",1789499358648],"// Durable ledger for event reminders: one row per intended notification.\n//\n// The row is the unit of both scheduling and idempotency. UNIQUE(device_id,item_id,rule)\n// makes re-enqueueing a no-op, and the claim below is a single compare-and-swap, so\n// overlapping runs and repeated triggers can never send twice. Delivery is\n// at-most-once by design: an abandoned claim is failed, never retried.\n//\n// Stored times follow the parent convention in `time.ts`: ISO-8601 UTC text, compared\n// as text because the format is fixed-width. Read that module before touching a\n// timestamp here — the `T` separator is load-bearing.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport {\n ISO_FORMAT,\n isoFromEpochColumn,\n isoFromUnix,\n NOW_UTC,\n nowIsoUtc,\n} from \"./time.ts\";\n\nexport { isoFromUnix, unixFromIso } from \"./time.ts\";\n\nexport type ReminderState =\n | \"pending\"\n | \"claimed\"\n | \"sent\"\n | \"failed\"\n | \"void\"\n | \"disabled\";\n\nexport type ReminderRow = {\n id: number;\n deviceId: number;\n installId: string;\n itemId: string;\n rule: string;\n eventAt: string;\n // The item's expiry bound. An estimate the source published, stored so send-time\n // policy can ask \"is this event over?\" without another read. Never shown to anyone.\n expiresAt: string;\n sendAfter: string;\n title: string;\n body: string;\n state: ReminderState;\n};\n\nexport const DEFAULT_LEAD_SECONDS = 3600;\n\n// How overdue a reminder may be and still be worth sending. This must exceed the\n// drain interval plus the scheduler's slack, or rows that come due just after a tick\n// are voided instead of sent — a silently dropped reminder. Val Town cron fires up to\n// ~5 minutes past its configured minute (observed 2026-09-10: a :35 tick ran at :40),\n// so a 15-minute cadence needs a cap well above 20 minutes, not equal to the cadence.\n// Being 30 minutes late still leaves a default 60-minute lead half its usefulness;\n// the guard that actually protects the user is the started-event check, not this one.\nexport const MAX_LATENESS_SECONDS = 30 * 60;\n\n// A claim older than this belongs to a run that died mid-send. Its outcome is\n// unknowable, and at-most-once resolves that ambiguity against sending.\nexport const ABANDONED_CLAIM_SECONDS = 10 * 60;\n\nasync function columnTypes(table: string): Promise> {\n const result = await sqlite.execute(`PRAGMA table_info(${table})`);\n return new Map(\n (result.rows as { name: string; type: string }[]).map((row) => [row.name, row.type]),\n );\n}\n\nconst QUEUE_COLUMNS = `\n id INTEGER PRIMARY KEY,\n device_id INTEGER NOT NULL REFERENCES devices(id) ON DELETE CASCADE,\n item_id TEXT NOT NULL,\n rule TEXT NOT NULL,\n event_at TEXT NOT NULL,\n expires_at TEXT NOT NULL,\n send_after TEXT NOT NULL,\n title TEXT NOT NULL,\n body TEXT NOT NULL,\n state TEXT NOT NULL DEFAULT 'pending'\n CHECK(state IN ('pending','claimed','sent','failed','void','disabled')),\n claimed_at TEXT,\n sent_at TEXT,\n attempts INTEGER NOT NULL DEFAULT 0,\n apns_status TEXT,\n created_at TEXT NOT NULL,\n UNIQUE(device_id, item_id, rule)`;\n\n// The first cut of this table stored epoch integers. Rebuilding is the only way to\n// change a column's declared type in SQLite, and the conversion is lossless.\nasync function migrateEpochQueue() {\n const existing = await columnTypes(\"notification_queue\");\n if (existing.get(\"event_at\") !== \"INTEGER\") return;\n\n const asIso = isoFromEpochColumn;\n await sqlite.execute(\"ALTER TABLE notification_queue RENAME TO notification_queue_epoch\");\n await sqlite.execute(`CREATE TABLE notification_queue (${QUEUE_COLUMNS})`);\n await sqlite.execute(`INSERT INTO notification_queue\n (id,device_id,item_id,rule,event_at,expires_at,send_after,title,body,state,\n claimed_at,sent_at,attempts,apns_status,created_at)\n SELECT id,device_id,item_id,rule,${asIso(\"event_at\")},\n strftime('${ISO_FORMAT}',event_at+1,'unixepoch'),${asIso(\"send_after\")},\n title,body,state,\n CASE WHEN claimed_at IS NULL THEN NULL ELSE ${asIso(\"claimed_at\")} END,\n CASE WHEN sent_at IS NULL THEN NULL ELSE ${asIso(\"sent_at\")} END,\n attempts,apns_status,${asIso(\"created_at\")}\n FROM notification_queue_epoch`);\n await sqlite.execute(\"DROP TABLE notification_queue_epoch\");\n}\n\n// Rows queued before the item window carry no expiry. SQLite cannot add a NOT NULL\n// column without a constant default, and there is no honest constant — the parent\n// has no domain model to infer a duration from — so the table is rebuilt and each\n// existing row is backfilled as instantaneous (one second). The next build refreshes\n// every pending row with the source's real window, so the sentinel is short-lived.\nasync function migrateWindowQueue() {\n const existing = await columnTypes(\"notification_queue\");\n if (existing.size === 0 || existing.has(\"expires_at\")) return;\n\n await sqlite.execute(\"ALTER TABLE notification_queue RENAME TO notification_queue_instant\");\n await sqlite.execute(`CREATE TABLE notification_queue (${QUEUE_COLUMNS})`);\n await sqlite.execute(`INSERT INTO notification_queue\n (id,device_id,item_id,rule,event_at,expires_at,send_after,title,body,state,\n claimed_at,sent_at,attempts,apns_status,created_at)\n SELECT id,device_id,item_id,rule,event_at,\n strftime('${ISO_FORMAT}',event_at,'+1 second'),send_after,\n title,body,state,claimed_at,sent_at,attempts,apns_status,created_at\n FROM notification_queue_instant`);\n await sqlite.execute(\"DROP TABLE notification_queue_instant\");\n}\n\nexport async function ensureReminderSchema() {\n await migrateEpochQueue();\n await migrateWindowQueue();\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS notification_queue (${QUEUE_COLUMNS})`);\n await sqlite.execute(\n `CREATE INDEX IF NOT EXISTS notification_queue_due\n ON notification_queue(state, send_after)`,\n );\n\n // Reminder policy and the widget's last observed offset live on the device row;\n // both are inferred or defaulted, never required configuration.\n const columns = await columnTypes(\"devices\");\n const additions: [string, string][] = [\n [\"reminder_lead_seconds\", `INTEGER NOT NULL DEFAULT ${DEFAULT_LEAD_SECONDS}`],\n [\"last_tz_offset_seconds\", \"INTEGER\"],\n [\"last_tz_seen_at\", \"TEXT\"],\n [\"reminders_built_at\", \"TEXT\"],\n ];\n for (const [name, definition] of additions) {\n if (columns.has(name)) continue;\n await sqlite.execute(`ALTER TABLE devices ADD COLUMN ${name} ${definition}`);\n }\n}\n\nexport type BuildCandidate = {\n id: number;\n installId: string;\n leadSeconds: number;\n tzOffsetSeconds: number | null;\n};\n\n// Ordering by staleness makes the sweep self-healing: a run killed by the wall-clock\n// limit leaves the devices it finished marked, and the next run resumes at the rest.\n// Newly paired devices sort first because their column is null.\nexport async function stalestDevices(limit: number): Promise {\n const result = await sqlite.execute({\n sql: `SELECT id, install_id, reminder_lead_seconds, last_tz_offset_seconds\n FROM devices\n ORDER BY reminders_built_at IS NOT NULL, reminders_built_at, id\n LIMIT ?`,\n args: [limit],\n });\n return (result.rows as {\n id: number;\n install_id: string;\n reminder_lead_seconds: number | null;\n last_tz_offset_seconds: number | null;\n }[]).map((row) => ({\n id: Number(row.id),\n installId: row.install_id,\n leadSeconds: Number(row.reminder_lead_seconds ?? DEFAULT_LEAD_SECONDS),\n tzOffsetSeconds: row.last_tz_offset_seconds == null\n ? null\n : Number(row.last_tz_offset_seconds),\n }));\n}\n\nexport async function markDeviceBuilt(deviceId: number) {\n await sqlite.execute({\n sql: \"UPDATE devices SET reminders_built_at = ? WHERE id = ?\",\n args: [nowIsoUtc(), deviceId],\n });\n}\n\nexport type PendingReminder = {\n itemId: string;\n rule: string;\n eventAt: string;\n expiresAt: string;\n sendAfter: string;\n title: string;\n body: string;\n};\n\n// One batch per device keeps round trips down while still committing device by\n// device, so a run cut short by the wall-clock limit loses at most one device's work.\nexport async function syncDeviceReminders(\n deviceId: number,\n reminders: PendingReminder[],\n): Promise {\n const now = nowIsoUtc();\n const statements = reminders.map((reminder) => ({\n sql: `INSERT INTO notification_queue\n (device_id,item_id,rule,event_at,expires_at,send_after,title,body,created_at)\n VALUES (?,?,?,?,?,?,?,?,?)\n ON CONFLICT(device_id,item_id,rule) DO UPDATE SET\n event_at=excluded.event_at,\n expires_at=excluded.expires_at,\n send_after=excluded.send_after,\n title=excluded.title,\n body=excluded.body\n WHERE notification_queue.state='pending'`,\n args: [\n deviceId,\n reminder.itemId,\n reminder.rule,\n reminder.eventAt,\n reminder.expiresAt,\n reminder.sendAfter,\n reminder.title,\n reminder.body,\n now,\n ],\n }));\n\n // An item that left the feed is cancelled in place. Voiding is enough because the\n // drainer treats a non-pending row as nothing to do, so no external schedule\n // needs to be recalled.\n const keep = reminders.map((reminder) => reminder.itemId);\n const placeholders = keep.map(() => \"?\").join(\",\");\n statements.push({\n sql: `UPDATE notification_queue SET state='void'\n WHERE device_id=? AND state='pending'\n ${keep.length ? `AND item_id NOT IN (${placeholders})` : \"\"}`,\n args: [deviceId, ...keep],\n });\n\n await sqlite.batch(statements);\n}\n\nexport async function dueReminders(limit: number): Promise {\n const result = await sqlite.execute({\n sql: `SELECT q.id, q.device_id, d.install_id, q.item_id, q.rule,\n q.event_at, q.expires_at, q.send_after, q.title, q.body, q.state\n FROM notification_queue q\n JOIN devices d ON d.id = q.device_id\n WHERE q.state='pending' AND q.send_after <= ${NOW_UTC}\n ORDER BY q.send_after, q.id\n LIMIT ?`,\n args: [limit],\n });\n return (result.rows as {\n id: number;\n device_id: number;\n install_id: string;\n item_id: string;\n rule: string;\n event_at: string;\n expires_at: string;\n send_after: string;\n title: string;\n body: string;\n state: ReminderState;\n }[]).map((row) => ({\n id: Number(row.id),\n deviceId: Number(row.device_id),\n installId: row.install_id,\n itemId: row.item_id,\n rule: row.rule,\n eventAt: row.event_at,\n expiresAt: row.expires_at,\n sendAfter: row.send_after,\n title: row.title,\n body: row.body,\n state: row.state,\n }));\n}\n\n// The only lock in the system. Rows affected is the answer to \"is this send mine?\",\n// which is what makes a duplicate trigger — a retried webhook, an overlapping run —\n// harmless rather than a second notification.\nexport async function claimReminder(id: number): Promise {\n const result = await sqlite.execute({\n sql: `UPDATE notification_queue\n SET state='claimed', claimed_at=${NOW_UTC}, attempts=attempts+1\n WHERE id=? AND state='pending'`,\n args: [id],\n });\n return result.rowsAffected === 1;\n}\n\nexport async function settleReminder(\n id: number,\n state: Extract,\n apnsStatus: string | null,\n) {\n await sqlite.execute({\n sql: `UPDATE notification_queue\n SET state=?, sent_at=${NOW_UTC}, apns_status=?\n WHERE id=?`,\n args: [state, apnsStatus, id],\n });\n}\n\nexport async function failAbandonedClaims(): Promise {\n const result = await sqlite.execute({\n sql: `UPDATE notification_queue SET state='failed', apns_status='AbandonedClaim'\n WHERE state='claimed'\n AND claimed_at < strftime('${ISO_FORMAT}','now',?)`,\n args: [`-${ABANDONED_CLAIM_SECONDS} seconds`],\n });\n return result.rowsAffected;\n}\n\nexport type ReminderCounts = Record;\n\nexport async function reminderCounts(): Promise {\n const result = await sqlite.execute(\n \"SELECT state, COUNT(*) AS total FROM notification_queue GROUP BY state\",\n );\n return Object.fromEntries(\n (result.rows as { state: string; total: number }[])\n .map((row) => [row.state, Number(row.total)]),\n );\n}\n",[],[170,466],"f1c34acf-3386-404c-9d7a-906ee97fc6ad","reminderDrainer.ts","01a0a679-3dab-7374-aab8-8a380ece7099",["D",1789499358648],"// Delivers claimed reminders as visible alerts.\n//\n// Delivery is gated by REMINDERS_ENABLED. When it is off the queue still drains,\n// settling rows as 'disabled' — a dry run that shows exactly what would have been\n// sent and when, without reaching a real device.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { sendAPNs } from \"./push.ts\";\nimport { ensureAlertSchema } from \"./alertPush.ts\";\nimport type { PushEnvironment } from \"./deviceTokenStore.ts\";\nimport {\n claimReminder,\n dueReminders,\n failAbandonedClaims,\n MAX_LATENESS_SECONDS,\n type ReminderRow,\n settleReminder,\n unixFromIso,\n} from \"./reminderStore.ts\";\n\nexport const DEFAULT_DRAIN_LIMIT = 50;\n\nexport function remindersEnabled(): boolean {\n return Deno.env.has(\"REMINDERS_ENABLED\") &&\n Deno.env.get(\"REMINDERS_ENABLED\") === \"true\";\n}\n\nexport type DrainSummary = {\n enabled: boolean;\n considered: number;\n sent: number;\n skipped: number;\n failed: number;\n abandoned: number;\n};\n\ntype AlertTarget = { token: string; environment: PushEnvironment };\n\nasync function alertTarget(installId: string): Promise {\n // Alert tokens key on the install UUID, not the device row id.\n const result = await sqlite.execute({\n sql: `SELECT token, environment FROM device_alert_tokens\n WHERE device_id=? AND allowed=1\n ORDER BY updated_at DESC LIMIT 1`,\n args: [installId],\n });\n const row = result.rows[0] as\n | { token: string; environment: PushEnvironment }\n | undefined;\n return row ?? null;\n}\n\nasync function deliver(reminder: ReminderRow, now: number): Promise {\n // Stored times are readable UTC text; these two guards are the only arithmetic\n // on them, so they convert here rather than costing the ledger its legibility.\n // Two distinct facts, recorded distinctly: the event has begun, or it is already\n // over. Under a lead-before-start rule the started guard always fires first, so\n // the expiry branch only bites a row whose event ran past its send window — and it\n // is what an expiry-anchored rule would settle against once one exists.\n if (unixFromIso(reminder.expiresAt) <= now) {\n await settleReminder(reminder.id, \"void\", \"EventExpired\");\n return false;\n }\n if (unixFromIso(reminder.eventAt) <= now) {\n await settleReminder(reminder.id, \"void\", \"EventStarted\");\n return false;\n }\n if (now - unixFromIso(reminder.sendAfter) > MAX_LATENESS_SECONDS) {\n await settleReminder(reminder.id, \"void\", \"TooLate\");\n return false;\n }\n if (!remindersEnabled()) {\n await settleReminder(reminder.id, \"disabled\", \"RemindersDisabled\");\n return false;\n }\n\n const target = await alertTarget(reminder.installId);\n if (!target) {\n await settleReminder(reminder.id, \"failed\", \"NoAlertToken\");\n return false;\n }\n\n try {\n const delivery = await sendAPNs(\n target.token,\n \"app-alert\",\n target.environment,\n { title: reminder.title, body: reminder.body },\n );\n await settleReminder(\n reminder.id,\n delivery.ok ? \"sent\" : \"failed\",\n delivery.reason ?? (delivery.ok ? \"Accepted\" : \"Unknown\"),\n );\n if (delivery.deadToken) {\n await sqlite.execute({\n sql: \"DELETE FROM device_alert_tokens WHERE device_id=? AND environment=? AND token=?\",\n args: [reminder.installId, target.environment, target.token],\n });\n }\n return delivery.ok;\n } catch {\n // The claim is already spent. At-most-once means this row is done, not retried.\n await settleReminder(reminder.id, \"failed\", \"PushTransportOrSigningFailed\");\n return false;\n }\n}\n\nexport async function drainReminders(\n options: { id?: number; limit?: number } = {},\n): Promise {\n await ensureAlertSchema();\n const abandoned = await failAbandonedClaims();\n const enabled = remindersEnabled();\n\n const candidates = options.id != null\n ? (await dueReminders(DEFAULT_DRAIN_LIMIT)).filter((row) => row.id === options.id)\n : await dueReminders(options.limit ?? DEFAULT_DRAIN_LIMIT);\n\n const summary: DrainSummary = {\n enabled,\n considered: candidates.length,\n sent: 0,\n skipped: 0,\n failed: 0,\n abandoned,\n };\n\n // Sequential and settled one at a time: a run cut short leaves every earlier row\n // recorded, and the claim keeps an overlapping run off the rows this one owns.\n for (const reminder of candidates) {\n if (!await claimReminder(reminder.id)) {\n summary.skipped++;\n continue;\n }\n const now = Math.floor(Date.now() / 1000);\n if (await deliver(reminder, now)) summary.sent++;\n else if (enabled) summary.failed++;\n else summary.skipped++;\n }\n\n return summary;\n}\n",[],[170,473],"15931a4e-5ea0-415c-bd43-2c22f0a64c4f","reminderBuilder.ts","01a0a679-3dab-7374-aab8-850b7aff8ae8",["D",1789499358648],"// Turns each device's composed feed into queued reminders.\n//\n// The builder is allowed to run behind; the drainer is not. Every device only has\n// to be visited once within its own reminder lead, which is what lets this work in\n// bounded chunks under a short wall-clock limit.\n\nimport { getDeviceFeedConfiguration } from \"./deviceSourceStore.ts\";\nimport { composeDeviceItems } from \"./sourceClient.ts\";\nimport type { Item } from \"./sourceContract.ts\";\nimport {\n type BuildCandidate,\n isoFromUnix,\n markDeviceBuilt,\n type PendingReminder,\n stalestDevices,\n syncDeviceReminders,\n} from \"./reminderStore.ts\";\n\nexport const DEFAULT_DEVICE_CHUNK = 8;\n\n// Queuing further out than this churns rows for events whose time is still moving.\nconst HORIZON_SECONDS = 36 * 60 * 60;\n\nexport type DeviceBuildResult = {\n deviceId: number;\n queued: number;\n error?: string;\n};\n\nexport type BuildSummary = {\n devices: number;\n queued: number;\n failures: DeviceBuildResult[];\n};\n\nfunction ruleName(leadSeconds: number): string {\n return `lead:${leadSeconds}`;\n}\n\n// The offset is the device's last observed one, so the clock time shown matches the\n// widget. With no offset yet, the reminder names no time rather than a wrong one.\nfunction localClock(eventAt: number, offsetSeconds: number | null): string | null {\n if (offsetSeconds == null) return null;\n const local = new Date((eventAt + offsetSeconds) * 1000);\n const hours = local.getUTCHours();\n const minutes = local.getUTCMinutes().toString().padStart(2, \"0\");\n const suffix = hours < 12 ? \"AM\" : \"PM\";\n return `${((hours + 11) % 12) + 1}:${minutes} ${suffix}`;\n}\n\nexport function reminderFor(\n item: Item,\n device: BuildCandidate,\n now: number,\n): PendingReminder | null {\n const eventAt = Math.floor(item.startsAt);\n if (eventAt <= now || eventAt > now + HORIZON_SECONDS) return null;\n\n const clock = localClock(eventAt, device.tzOffsetSeconds);\n const lead = Math.round(device.leadSeconds / 60);\n // Item bounds are Unix seconds on the wire; the ledger stores readable UTC.\n // `rule` names the lead and is implicitly anchored to the start — an expiry-anchored\n // policy would extend the value (`lead:0@expiry`), not add a column, so distinct\n // rules keep coexisting per item under UNIQUE(device_id,item_id,rule).\n return {\n itemId: item.id,\n rule: ruleName(device.leadSeconds),\n eventAt: isoFromUnix(eventAt),\n expiresAt: isoFromUnix(Math.floor(item.expiresAt)),\n sendAfter: isoFromUnix(eventAt - device.leadSeconds),\n // Source-owned text is a display decision; the parent adds only the timing.\n title: item.mainText,\n body: clock ? `Starts at ${clock}` : `Starts in ${lead} minutes`,\n };\n}\n\nasync function buildDevice(\n device: BuildCandidate,\n now: number,\n): Promise {\n const configuration = await getDeviceFeedConfiguration(device.installId);\n const sources = configuration?.sources ?? [];\n // An unassigned device still gets swept so its stale rows are voided.\n const { items } = sources.length\n ? await composeDeviceItems(sources, { tz: device.tzOffsetSeconds })\n : { items: [] as Item[] };\n\n const reminders = items\n .map((item) => reminderFor(item, device, now))\n .filter((reminder): reminder is PendingReminder => reminder !== null);\n await syncDeviceReminders(device.id, reminders);\n return { deviceId: device.id, queued: reminders.length };\n}\n\nexport async function buildReminders(\n chunk: number = DEFAULT_DEVICE_CHUNK,\n): Promise {\n const devices = await stalestDevices(chunk);\n const now = Math.floor(Date.now() / 1000);\n const failures: DeviceBuildResult[] = [];\n let queued = 0;\n\n // Sequential by device: each one commits before the next starts, so a run cut\n // short by the wall-clock limit costs at most one device's work.\n for (const device of devices) {\n try {\n const result = await buildDevice(device, now);\n queued += result.queued;\n } catch (error) {\n // A single failing source fails that device's whole composition. Recording it\n // keeps a broken source from silently costing that device its reminders.\n failures.push({\n deviceId: device.id,\n queued: 0,\n error: error instanceof Error ? error.message : String(error),\n });\n }\n // Marked either way; a device that always fails must not starve the others.\n await markDeviceBuilt(device.id);\n }\n\n return { devices: devices.length, queued, failures };\n}\n",[],[170,480],"b4c0a755-fcb0-44fe-b859-33b907df4024","push.ts","01a0a679-3dab-7374-aab8-82f1f119de6e",["D",1789499358648],"// Best-effort APNs delivery to one device.\n// Native WidgetKit pushes are preferred; older app-background tokens are a migration fallback.\n// Production credentials never fall back to sandbox. BadDeviceToken can mean a\n// signing/environment mismatch, so only a confirmed unregistration removes a token.\n//\n// Requires APNS_KEY_ID, APNS_TEAM_ID, and APNS_AUTH_KEY (the PEM-armored .p8\n// contents). Topic env vars are optional and default to the app and widget-extension\n// bundle identifiers. Each uploaded token carries its sandbox or production host.\n\nimport {\n deleteDeviceToken,\n type DevicePushToken,\n getTokenForDevice,\n type PushEnvironment,\n} from \"./deviceTokenStore.ts\";\n\n// Val Town warns on missing env.get reads; absent push configuration is intentional.\nfunction optionalEnv(name: string): string | undefined {\n return Deno.env.has(name) ? Deno.env.get(name) : undefined;\n}\n\n\nconst APNS_TEAM_ID = optionalEnv(\"APNS_TEAM_ID\");\n\nconst APNS_APP_TOPIC = optionalEnv(\"APNS_APP_TOPIC\") ?? \"plusjade.clark-view\";\nconst APNS_WIDGET_TOPIC = optionalEnv(\"APNS_WIDGET_TOPIC\")\n ?? \"plusjade.clark-view.push-type.widgets\";\n\nfunction base64UrlFromBytes(bytes: Uint8Array): string {\n let binary = \"\";\n for (const byte of bytes) binary += String.fromCharCode(byte);\n return btoa(binary).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n\nfunction base64UrlFromString(value: string): string {\n return base64UrlFromBytes(new TextEncoder().encode(value));\n}\n\nfunction pkcs8KeyFromPem(pem: string): Promise {\n const der = pem\n .replace(/-----BEGIN PRIVATE KEY-----/, \"\")\n .replace(/-----END PRIVATE KEY-----/, \"\")\n .replace(/\\s+/g, \"\");\n const bytes = Uint8Array.from(atob(der), (character) => character.charCodeAt(0));\n return crypto.subtle.importKey(\n \"pkcs8\",\n bytes,\n { name: \"ECDSA\", namedCurve: \"P-256\" },\n false,\n [\"sign\"],\n );\n}\n\nconst cachedTokens = new Map();\nconst TOKEN_TTL_SECONDS = 50 * 60;\n\nasync function authToken(environment: PushEnvironment): Promise {\n const prefix = environment === \"production\" ? \"APNS_\" : \"APNS_SANDBOX_\";\n const APNS_KEY_ID = optionalEnv(`${prefix}KEY_ID`);\n const APNS_AUTH_KEY = optionalEnv(`${prefix}AUTH_KEY`);\n const cachedToken = cachedTokens.get(environment);\n if (!APNS_KEY_ID || !APNS_TEAM_ID || !APNS_AUTH_KEY) return null;\n const now = Math.floor(Date.now() / 1000);\n if (cachedToken && now - cachedToken.mintedAt < TOKEN_TTL_SECONDS) {\n return cachedToken.jwt;\n }\n\n const header = base64UrlFromString(JSON.stringify({ alg: \"ES256\", kid: APNS_KEY_ID }));\n const claims = base64UrlFromString(JSON.stringify({ iss: APNS_TEAM_ID, iat: now }));\n const signingInput = `${header}.${claims}`;\n const key = await pkcs8KeyFromPem(APNS_AUTH_KEY);\n const signature = await crypto.subtle.sign(\n { name: \"ECDSA\", hash: \"SHA-256\" },\n key,\n new TextEncoder().encode(signingInput),\n );\n const jwt = `${signingInput}.${base64UrlFromBytes(new Uint8Array(signature))}`;\n cachedTokens.set(environment, { jwt, mintedAt: now });\n return jwt;\n}\n\nexport interface DeliveryResult {\n reason?: string;\n ok: boolean;\n deadToken: boolean;\n}\n\nexport async function sendAPNs(\n token: string,\n kind: DevicePushToken[\"kind\"] | \"app-alert\",\n environment: PushEnvironment,\n alert?: { title: string; body: string },\n transport: typeof fetch = fetch,\n): Promise {\n if (kind === \"app-alert\" && !alert) return { ok: false, deadToken: false, reason: \"MissingAlert\" };\n const jwt = await authToken(environment);\n if (!jwt) return { ok: false, deadToken: false, reason: \"MissingCredentials:\" + environment };\n\n const isWidget = kind === \"widget\";\n const host = environment === \"production\"\n ? \"api.push.apple.com\"\n : \"api.sandbox.push.apple.com\";\n const response = await transport(`https://${host}/3/device/${token}`, {\n method: \"POST\",\n signal: AbortSignal.timeout(10000),\n headers: {\n authorization: `bearer ${jwt}`,\n \"apns-topic\": isWidget ? APNS_WIDGET_TOPIC : APNS_APP_TOPIC,\n \"apns-push-type\": isWidget ? \"widgets\" : kind === \"app-alert\" ? \"alert\" : \"background\",\n \"apns-expiration\": \"0\",\n ...(isWidget ? {} : { \"apns-priority\": kind === \"app-alert\" ? \"10\" : \"5\" }),\n },\n body: JSON.stringify(\n isWidget\n ? { aps: { \"content-changed\": true } }\n : kind === \"app-alert\" ? { aps: { alert, sound: \"default\" } } : { aps: { \"content-available\": 1 } },\n ),\n });\n if (response.ok) return { ok: true, deadToken: false };\n\n const reason = await response.json()\n .then((body) => (body as { reason?: string })?.reason)\n .catch(() => null);\n return {\n ok: false,\n deadToken: response.status === 410,\n reason: reason ?? `APNsHTTP${response.status}`,\n };\n}\n\nexport async function notifyDevice(deviceId: number): Promise {\n const device = await getTokenForDevice(deviceId);\n if (!device) return;\n const { deadToken } = await sendAPNs(\n device.token,\n device.kind,\n device.environment,\n );\n if (deadToken) await deleteDeviceToken(device.deviceId, device.kind);\n}\n",[],[170,487],"b7c9bd89-d2ad-4929-ba7a-68af689cab31","presentation.ts","01a0a679-3dab-7374-aab8-7f3deb596198",["D",1789499358648],"// Versioned device-owned presentation values for the native WidgetKit renderer.\n\nimport { isRecord } from \"./guards.ts\";\n\nexport const SUPPORTED_WIDGET_TEMPLATES = [\"beacon\"] as const;\nconst STORED_WIDGET_TEMPLATES = [\"beacon\", \"standard-v1\"] as const;\n\nexport type WidgetTemplate = (typeof STORED_WIDGET_TEMPLATES)[number];\n\nexport type WidgetPresentation = {\n version: 2;\n template: WidgetTemplate;\n rootSurface: {\n light: string;\n dark: string;\n };\n};\n\n// Both the fallback for an unreadable stored value and the seed written at\n// device registration. It carried three names for those two jobs until\n// 2026-09-06; they were always the same object.\nexport const DEFAULT_WIDGET_PRESENTATION: WidgetPresentation = {\n version: 2,\n template: \"beacon\",\n rootSurface: {\n light: \"#FFFFFF\",\n dark: \"#000000\",\n },\n};\n\nfunction normalizedHex(value: unknown): string | null {\n if (typeof value !== \"string\" || !/^#[0-9a-f]{6}$/i.test(value)) return null;\n return value.toUpperCase();\n}\n\nfunction storedTemplate(value: unknown): WidgetTemplate {\n return typeof value === \"string\"\n && STORED_WIDGET_TEMPLATES.includes(value as WidgetTemplate)\n ? value as WidgetTemplate\n : DEFAULT_WIDGET_PRESENTATION.template;\n}\n\nexport function parseStoredPresentation(raw: unknown): WidgetPresentation {\n let value = raw;\n if (typeof value === \"string\") {\n try {\n value = JSON.parse(value);\n } catch {\n return DEFAULT_WIDGET_PRESENTATION;\n }\n }\n if (!isRecord(value) || value.version !== 2 || !isRecord(value.rootSurface)) {\n return DEFAULT_WIDGET_PRESENTATION;\n }\n\n return {\n version: 2,\n template: storedTemplate(value.template),\n rootSurface: {\n light: normalizedHex(value.rootSurface.light)\n ?? DEFAULT_WIDGET_PRESENTATION.rootSurface.light,\n dark: normalizedHex(value.rootSurface.dark)\n ?? DEFAULT_WIDGET_PRESENTATION.rootSurface.dark,\n },\n };\n}\n\nexport function presentationFromForm(\n template: unknown,\n lightRootSurface: unknown,\n darkRootSurface: unknown,\n): WidgetPresentation | null {\n if (\n typeof template !== \"string\"\n || !SUPPORTED_WIDGET_TEMPLATES.includes(\n template as (typeof SUPPORTED_WIDGET_TEMPLATES)[number],\n )\n ) return null;\n const light = normalizedHex(lightRootSurface);\n const dark = normalizedHex(darkRootSurface);\n if (!light || !dark) return null;\n\n return {\n version: 2,\n template: template as (typeof SUPPORTED_WIDGET_TEMPLATES)[number],\n rootSurface: {\n light,\n dark,\n },\n };\n}\n",[],[170,494],"ab8e074d-8090-4d82-83f3-91b0df07e8fe","guards.ts","01a0a679-3dab-7374-aab8-78d42046b839",["D",1789499358648],"// Pure runtime type guards. Domain-free like text.ts, so anything in lib/,\n// http/ or render/ can import them without creating a cycle.\n\nexport function isRecord(value: unknown): value is Record {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n",[],[170,501],"2ebac4e0-945b-46cf-8634-6ad2642bb5f9","deviceTokenStore.ts","01a0a679-3dab-7374-aab8-77bab472060b",["D",1789499358648],"// APNs token persistence keyed by the public install identifier.\n// Native widget tokens are preferred; legacy app-background tokens keep older beta builds working.\n//\n// The pre-`device_push_tokens` `device_tokens` table and its one-way backfill were removed on\n// 2026-09-06. The backfill had long since run, but replaying it on every cold start resurrected\n// rows that dead-token cleanup had deleted — `INSERT OR IGNORE` only skips rows that still exist.\n// The `apns_environment` ALTER went with it: the column is in the CREATE below, so on an existing\n// database it threw \"duplicate column name\" every cold start and on a fresh one it was redundant.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type PushKind = \"app-background\" | \"widget\";\nexport type PushEnvironment = \"sandbox\" | \"production\";\n\nexport interface DevicePushToken {\n deviceId: string;\n token: string;\n kind: PushKind;\n environment: PushEnvironment;\n}\n\nlet schemaReady: Promise | null = null;\n\nexport function ensureDeviceTokenSchema(): Promise {\n if (!schemaReady) {\n schemaReady = (async () => {\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS device_push_tokens (\n device_id TEXT NOT NULL,\n push_kind TEXT NOT NULL CHECK(push_kind IN ('app-background', 'widget')),\n apns_token TEXT NOT NULL,\n apns_environment TEXT NOT NULL DEFAULT 'sandbox'\n CHECK(apns_environment IN ('sandbox', 'production')),\n updated_at TEXT NOT NULL,\n PRIMARY KEY(device_id, push_kind)\n )\n `);\n })().catch((error) => {\n schemaReady = null;\n throw error;\n });\n }\n return schemaReady;\n}\n\nfunction nowIso(): string {\n return new Date().toISOString();\n}\n\nexport async function saveDeviceToken(\n installId: string,\n token: string,\n kind: PushKind,\n environment: PushEnvironment,\n active: boolean,\n): Promise {\n await ensureDeviceTokenSchema();\n if (!active) {\n await deleteDeviceToken(installId, kind);\n return;\n }\n\n await sqlite.execute({\n sql: `\n INSERT INTO device_push_tokens (\n device_id,\n push_kind,\n apns_token,\n apns_environment,\n updated_at\n )\n VALUES (?, ?, ?, ?, ?)\n ON CONFLICT(device_id, push_kind) DO UPDATE SET\n apns_token = excluded.apns_token,\n apns_environment = excluded.apns_environment,\n updated_at = excluded.updated_at\n `,\n args: [installId, kind, token, environment, nowIso()],\n });\n}\n\nexport async function deleteDeviceToken(\n installId: string,\n kind: PushKind,\n): Promise {\n await ensureDeviceTokenSchema();\n await sqlite.execute({\n sql: \"DELETE FROM device_push_tokens WHERE device_id = ? AND push_kind = ?\",\n args: [installId, kind],\n });\n}\n\nexport async function getTokenForDevice(\n deviceId: number,\n): Promise {\n await ensureDeviceTokenSchema();\n const result = await sqlite.execute({\n sql: `\n SELECT dt.device_id, dt.apns_token, dt.push_kind, dt.apns_environment\n FROM devices d\n JOIN device_push_tokens dt ON dt.device_id = d.install_id\n WHERE d.id = ?\n ORDER BY CASE dt.push_kind WHEN 'widget' THEN 0 ELSE 1 END\n LIMIT 1\n `,\n args: [deviceId],\n });\n const row = result.rows[0] as {\n device_id: string;\n apns_token: string;\n push_kind: PushKind;\n apns_environment: PushEnvironment;\n } | undefined;\n return row\n ? {\n deviceId: row.device_id,\n token: row.apns_token,\n kind: row.push_kind,\n environment: row.apns_environment,\n }\n : null;\n}\n",[],[170,508],"fe6c6a5e-b61b-46e0-8fbc-55868e0b4909","deviceStore.ts","01a0a679-3dab-7374-aab8-72c67377a8a3",3,["D",1789499365740],2,"// Device-centric persistence for browser inspection and source assignment.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { SourceKind } from \"./sourceStore.ts\";\nimport {\n parseStoredPresentation,\n type WidgetPresentation,\n} from \"./presentation.ts\";\n\nexport type DeviceSummary = {\n id: number;\n installId: string;\n name: string;\n createdAt: string;\n updatedAt: string;\n sourceCount: number;\n};\n\nexport type DeviceSourceView = {\n assignmentId: number;\n sourceId: number;\n kind: SourceKind;\n name: string;\n description: string;\n settings: unknown;\n settingsSchema: unknown;\n createdAt: string;\n updatedAt: string;\n};\n\nexport type DeviceDetail = DeviceSummary & {\n presentation: WidgetPresentation;\n sources: DeviceSourceView[];\n};\n\nexport type AvailableSource = {\n id: number;\n kind: SourceKind;\n name: string;\n description: string;\n settingsSchema: unknown;\n};\n\nfunction parseJson(raw: string | null): unknown {\n if (raw == null) return {};\n try {\n return JSON.parse(raw);\n } catch {\n return raw;\n }\n}\n\nfunction nowIso(): string {\n return new Date().toISOString();\n}\n\nfunction mapSourceRow(row: {\n assignment_id: number;\n source_id: number;\n kind: SourceKind;\n name: string;\n description: string;\n settings: string;\n settings_schema: string;\n assignment_created_at: string;\n assignment_updated_at: string;\n}): DeviceSourceView {\n return {\n assignmentId: row.assignment_id,\n sourceId: row.source_id,\n kind: row.kind,\n name: row.name,\n description: row.description,\n settings: parseJson(row.settings),\n settingsSchema: parseJson(row.settings_schema),\n createdAt: row.assignment_created_at,\n updatedAt: row.assignment_updated_at,\n };\n}\n\nexport async function listDevices(): Promise {\n const result = await sqlite.execute(`\n SELECT\n d.id, d.install_id, d.name, d.created_at, d.updated_at,\n COUNT(ds.id) AS source_count\n FROM devices d\n LEFT JOIN device_sources ds ON ds.device_id = d.id\n GROUP BY d.id\n ORDER BY d.name COLLATE NOCASE, d.id\n `);\n return (result.rows as {\n id: number; install_id: string; name: string; created_at: string;\n updated_at: string; source_count: number;\n }[]).map((row) => ({\n id: row.id,\n installId: row.install_id,\n name: row.name,\n createdAt: row.created_at,\n updatedAt: row.updated_at,\n sourceCount: Number(row.source_count),\n }));\n}\n\nexport async function getDevice(id: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT\n d.id, d.install_id, d.name, d.created_at, d.updated_at, d.presentation,\n ds.id AS assignment_id, ds.settings,\n ds.created_at AS assignment_created_at,\n ds.updated_at AS assignment_updated_at,\n s.id AS source_id, s.kind, s.name AS source_name, s.description, s.settings_schema\n FROM devices d\n LEFT JOIN device_sources ds ON ds.device_id = d.id\n LEFT JOIN sources s ON s.id = ds.source_id\n WHERE d.id = ?\n ORDER BY s.id\n `,\n args: [id],\n });\n const rows = result.rows as {\n id: number; install_id: string; name: string; created_at: string; updated_at: string;\n presentation: string;\n assignment_id: number | null; settings: string | null;\n assignment_created_at: string | null; assignment_updated_at: string | null;\n source_id: number | null; kind: SourceKind | null; source_name: string | null; description: string | null;\n settings_schema: string | null;\n }[];\n const first = rows[0];\n if (!first) return null;\n\n const sources = rows.flatMap((row) => {\n if (\n row.assignment_id == null || row.source_id == null ||\n row.settings == null || row.assignment_created_at == null ||\n row.assignment_updated_at == null || row.kind == null ||\n row.description == null || row.settings_schema == null\n ) return [];\n return [mapSourceRow({\n assignment_id: row.assignment_id,\n source_id: row.source_id,\n kind: row.kind,\n name: row.source_name ?? row.kind,\n description: row.description,\n settings: row.settings,\n settings_schema: row.settings_schema,\n assignment_created_at: row.assignment_created_at,\n assignment_updated_at: row.assignment_updated_at,\n })];\n });\n\n return {\n id: first.id,\n installId: first.install_id,\n name: first.name,\n createdAt: first.created_at,\n updatedAt: first.updated_at,\n sourceCount: sources.length,\n presentation: parseStoredPresentation(first.presentation),\n sources,\n };\n}\n\nexport async function getDeviceByInstallId(installId: string): Promise {\n const result = await sqlite.execute({\n sql: \"SELECT id FROM devices WHERE install_id = ?\",\n args: [installId],\n });\n const row = result.rows[0] as { id: number } | undefined;\n return row ? getDevice(Number(row.id)) : null;\n}\n\n// The widget reports its offset on every resolve, so the parent infers it rather\n// than asking anyone to configure it. Reminders need it to compose the same items\n// the widget sees and to name a local clock time.\n//\n// Two properties matter here. It is conditional: resolve is the hot read path, and\n// an unconditional write would turn every widget refresh into one. And it is\n// best-effort: capturing a timezone must never fail a feed request.\nconst TZ_REFRESH_SECONDS = 6 * 60 * 60;\n\nexport async function recordDeviceTimeZone(\n installId: string,\n offsetSeconds: number | null,\n): Promise {\n if (offsetSeconds == null) return;\n const stale = new Date(Date.now() - TZ_REFRESH_SECONDS * 1000).toISOString();\n try {\n await sqlite.execute({\n sql: `UPDATE devices SET last_tz_offset_seconds = ?, last_tz_seen_at = ?\n WHERE install_id = ?\n AND (last_tz_offset_seconds IS NOT ?\n OR last_tz_seen_at IS NULL\n OR last_tz_seen_at < ?)`,\n args: [offsetSeconds, nowIso(), installId, offsetSeconds, stale],\n });\n } catch {\n // The columns arrive with the reminder schema; a feed read predating it still serves.\n }\n}\n\nexport async function renameDevice(id: number, name: string): Promise {\n const result = await sqlite.execute({\n sql: \"UPDATE devices SET name = ?, updated_at = ? WHERE id = ?\",\n args: [name, nowIso(), id],\n });\n return result.rowsAffected === 1;\n}\n\nexport type MergeDeviceResult =\n | { ok: true; targetId: number }\n | { ok: false; reason: \"origin\" | \"target\" | \"same\" };\n\n// A reinstalled app pairs into a fresh row, stranding the configuration the\n// person already built. Merging keeps the configured (target) row and moves the\n// live install id onto it, so assignments, presentation, name and browser URL\n// all survive; the origin row is dropped. The install id — not the row id — is\n// what the widget and the token tables key on, which is why adoption is enough.\nexport async function mergeDeviceInto(\n originId: number,\n targetId: number,\n): Promise {\n if (originId === targetId) return { ok: false, reason: \"same\" };\n\n const result = await sqlite.execute({\n sql: \"SELECT id, install_id FROM devices WHERE id IN (?, ?)\",\n args: [originId, targetId],\n });\n const rows = result.rows as { id: number; install_id: string }[];\n const origin = rows.find((row) => Number(row.id) === originId);\n const target = rows.find((row) => Number(row.id) === targetId);\n if (!origin) return { ok: false, reason: \"origin\" };\n if (!target) return { ok: false, reason: \"target\" };\n\n // Deleting the origin first frees the unique install id the target adopts;\n // one batch keeps the target from ever pointing at a retired install.\n await sqlite.batch([\n { sql: \"DELETE FROM devices WHERE id = ?\", args: [originId] },\n {\n sql: \"UPDATE devices SET install_id = ?, updated_at = ? WHERE id = ?\",\n args: [origin.install_id, nowIso(), targetId],\n },\n {\n sql: \"DELETE FROM device_push_tokens WHERE device_id = ?\",\n args: [target.install_id],\n },\n {\n sql: \"DELETE FROM device_alert_tokens WHERE device_id = ?\",\n args: [target.install_id],\n },\n ]);\n return { ok: true, targetId };\n}\n\nexport async function updateDevicePresentation(\n id: number,\n presentation: WidgetPresentation,\n): Promise {\n const result = await sqlite.execute({\n sql: \"UPDATE devices SET presentation = ?, updated_at = ? WHERE id = ?\",\n args: [JSON.stringify(presentation), nowIso(), id],\n });\n return result.rowsAffected === 1;\n}\n\nexport async function listAvailableSources(deviceId: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT s.id, s.kind, s.name AS source_name, s.description, s.settings_schema\n FROM sources s\n WHERE EXISTS (SELECT 1 FROM devices WHERE id = ?) AND NOT EXISTS (\n SELECT 1 FROM device_sources ds\n WHERE ds.device_id = ? AND ds.source_id = s.id\n )\n ORDER BY s.kind COLLATE NOCASE, s.id\n `,\n args: [deviceId, deviceId],\n });\n return (result.rows as {\n id: number; kind: SourceKind; source_name: string; description: string; settings_schema: string;\n }[]).map((row) => ({\n id: row.id,\n kind: row.kind,\n name: row.source_name,\n description: row.description,\n settingsSchema: parseJson(row.settings_schema),\n }));\n}\n\nexport async function getDeviceSource(\n deviceId: number,\n assignmentId: number,\n): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT\n ds.id AS assignment_id, ds.settings,\n ds.created_at AS assignment_created_at,\n ds.updated_at AS assignment_updated_at,\n s.id AS source_id, s.kind, s.name AS source_name, s.description, s.settings_schema\n FROM device_sources ds\n JOIN sources s ON s.id = ds.source_id\n WHERE ds.device_id = ? AND ds.id = ?\n `,\n args: [deviceId, assignmentId],\n });\n const row = result.rows[0] as {\n assignment_id: number; source_id: number; kind: SourceKind; source_name: string; description: string;\n settings: string; settings_schema: string;\n assignment_created_at: string; assignment_updated_at: string;\n } | undefined;\n return row ? mapSourceRow({...row,name:row.source_name}) : null;\n}\n\nexport async function addDeviceSource(\n deviceId: number,\n sourceId: number,\n settings: unknown,\n): Promise {\n const timestamp = nowIso();\n const results = await sqlite.batch([\n {\n sql: `\n INSERT INTO device_sources\n (device_id, source_id, settings, created_at, updated_at)\n SELECT ?, s.id, ?, ?, ?\n FROM sources s\n WHERE s.id = ?\n AND EXISTS (SELECT 1 FROM devices d WHERE d.id = ?)\n AND NOT EXISTS (\n SELECT 1 FROM device_sources ds\n WHERE ds.device_id = ? AND ds.source_id = s.id\n )\n RETURNING id\n `,\n args: [\n deviceId, JSON.stringify(settings), timestamp, timestamp,\n sourceId, deviceId, deviceId,\n ],\n },\n {\n sql: \"UPDATE devices SET updated_at = ? WHERE id = ? AND changes() = 1\",\n args: [timestamp, deviceId],\n },\n ]);\n const row = results[0].rows[0] as { id: number } | undefined;\n return row ? Number(row.id) : null;\n}\n\nexport async function updateDeviceSource(\n deviceId: number,\n assignmentId: number,\n settings: unknown,\n): Promise {\n const timestamp = nowIso();\n const results = await sqlite.batch([\n {\n sql: `\n UPDATE device_sources\n SET settings = ?, updated_at = ?\n WHERE device_id = ? AND id = ?\n `,\n args: [JSON.stringify(settings), timestamp, deviceId, assignmentId],\n },\n {\n sql: `\n UPDATE devices SET updated_at = ?\n WHERE id = ? AND EXISTS (\n SELECT 1 FROM device_sources\n WHERE device_id = ? AND id = ?\n )\n `,\n args: [timestamp, deviceId, deviceId, assignmentId],\n },\n ]);\n return results[0].rowsAffected === 1;\n}\n\nexport async function removeDeviceSource(\n deviceId: number,\n assignmentId: number,\n): Promise {\n const timestamp = nowIso();\n const results = await sqlite.batch([\n {\n sql: \"DELETE FROM device_sources WHERE device_id = ? AND id = ?\",\n args: [deviceId, assignmentId],\n },\n {\n sql: \"UPDATE devices SET updated_at = ? WHERE id = ?\",\n args: [timestamp, deviceId],\n },\n ]);\n return results[0].rowsAffected === 1;\n}\n\n",[],[170,515],"8b60f765-cfcf-498c-8c1f-31ffa520d301","deviceSourceStore.ts","01a0a679-3dab-7374-aab8-6c935eb6920e",["D",1789499358648],"// Widget-facing read seam for a device's presentation and source assignments.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { DeviceSourceSelection } from \"./sourceClient.ts\";\nimport {\n parseStoredPresentation,\n type WidgetPresentation,\n} from \"./presentation.ts\";\n\nexport type DeviceFeedConfiguration = {\n presentation: WidgetPresentation;\n sources: DeviceSourceSelection[];\n};\n\nexport async function getDeviceFeedConfiguration(\n installId: string,\n): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT d.presentation, s.id AS source_id, ds.settings\n FROM devices d\n LEFT JOIN device_sources ds ON ds.device_id = d.id\n LEFT JOIN sources s ON s.id = ds.source_id\n WHERE d.install_id = ?\n ORDER BY s.id\n `,\n args: [installId],\n });\n const rows = result.rows as {\n presentation: string;\n source_id: number | null;\n settings: string | null;\n }[];\n const first = rows[0];\n if (!first) return null;\n\n const sources = rows.flatMap((row) => {\n if (row.source_id == null || row.settings == null) return [];\n let settings: unknown = {};\n try {\n settings = JSON.parse(row.settings);\n } catch {\n // Hardened rows are valid JSON; this keeps a corrupt row from crashing lookup.\n }\n return [{ sourceId: row.source_id, settings }];\n });\n return {\n presentation: parseStoredPresentation(first.presentation),\n sources,\n };\n}\n\n",[],[170,524],"9b45c0e1-a422-4946-9bb2-61b66bff2335","bunchStore.ts","01a0a679-3dab-7374-aab8-6a51ec57ee30",["D",1789499358648],"// Enrollment and access-scope persistence for the device-centric model.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { DEFAULT_WIDGET_PRESENTATION } from \"./presentation.ts\";\n\nconst CODE_ALPHABET = \"ABCDEFGHJKMNPQRSTUVWXYZ23456789\";\nconst CODE_LENGTH = 6;\nconst CODE_TTL_SECONDS = 30 * 60;\n\nexport type BunchSummary = {\n id: number;\n name: string;\n createdAt: string;\n updatedAt: string;\n deviceCount: number;\n};\n\nexport type BunchDevice = {\n id: number;\n installId: string;\n name: string;\n createdAt: string;\n updatedAt: string;\n};\n\nexport type BunchDetail = BunchSummary & { devices: BunchDevice[] };\n\nexport type BunchCode = {\n code: string;\n createdAt: string;\n expiresAt: string;\n active: boolean;\n};\n\nfunction nowIso(): string {\n return new Date().toISOString();\n}\n\nfunction randomCode(): string {\n const bytes = crypto.getRandomValues(new Uint8Array(CODE_LENGTH));\n return Array.from(bytes, (byte) => CODE_ALPHABET[byte % CODE_ALPHABET.length]).join(\"\");\n}\n\nexport async function listBunches(): Promise {\n const result = await sqlite.execute(`\n SELECT b.id, b.name, b.created_at, b.updated_at, COUNT(d.id) AS device_count\n FROM bunches b\n LEFT JOIN devices d ON d.bunch_id = b.id\n GROUP BY b.id\n ORDER BY b.name COLLATE NOCASE, b.id\n `);\n return (result.rows as {\n id: number; name: string; created_at: string; updated_at: string; device_count: number;\n }[]).map((row) => ({\n id: row.id,\n name: row.name,\n createdAt: row.created_at,\n updatedAt: row.updated_at,\n deviceCount: Number(row.device_count),\n }));\n}\n\nexport async function createBunch(name: string): Promise {\n const timestamp = nowIso();\n const result = await sqlite.execute({\n sql: \"INSERT INTO bunches (name, created_at, updated_at) VALUES (?, ?, ?) RETURNING id\",\n args: [name, timestamp, timestamp],\n });\n return Number((result.rows[0] as { id: number }).id);\n}\n\nexport async function getBunch(id: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT\n b.id, b.name, b.created_at, b.updated_at,\n d.id AS device_id, d.install_id, d.name AS device_name,\n d.created_at AS device_created_at, d.updated_at AS device_updated_at\n FROM bunches b\n LEFT JOIN devices d ON d.bunch_id = b.id\n WHERE b.id = ?\n ORDER BY d.name COLLATE NOCASE, d.id\n `,\n args: [id],\n });\n const rows = result.rows as {\n id: number; name: string; created_at: string; updated_at: string;\n device_id: number | null; install_id: string | null; device_name: string | null;\n device_created_at: string | null; device_updated_at: string | null;\n }[];\n const first = rows[0];\n if (!first) return null;\n const devices = rows.flatMap((row) =>\n row.device_id == null || row.install_id == null || row.device_name == null ||\n row.device_created_at == null || row.device_updated_at == null\n ? []\n : [{\n id: row.device_id,\n installId: row.install_id,\n name: row.device_name,\n createdAt: row.device_created_at,\n updatedAt: row.device_updated_at,\n }]\n );\n return {\n id: first.id,\n name: first.name,\n createdAt: first.created_at,\n updatedAt: first.updated_at,\n deviceCount: devices.length,\n devices,\n };\n}\n\nexport async function renameBunch(id: number, name: string): Promise {\n const result = await sqlite.execute({\n sql: \"UPDATE bunches SET name = ?, updated_at = ? WHERE id = ?\",\n args: [name, nowIso(), id],\n });\n return result.rowsAffected === 1;\n}\n\nexport async function listBunchCodes(bunchId: number): Promise {\n const result = await sqlite.execute({\n sql: `\n SELECT code, created_at, expires_at,\n CASE WHEN datetime(expires_at) > datetime('now') THEN 1 ELSE 0 END AS active\n FROM bunch_codes\n WHERE bunch_id = ?\n ORDER BY datetime(created_at) DESC, code\n `,\n args: [bunchId],\n });\n return (result.rows as {\n code: string; created_at: string; expires_at: string; active: number;\n }[]).map((row) => ({\n code: row.code,\n createdAt: row.created_at,\n expiresAt: row.expires_at,\n active: Number(row.active) === 1,\n }));\n}\n\nexport async function createBunchCode(bunchId: number): Promise {\n const createdAt = nowIso();\n const expiresAt = new Date(Date.now() + CODE_TTL_SECONDS * 1000).toISOString();\n for (let attempt = 0; attempt < 5; attempt += 1) {\n const code = randomCode();\n try {\n await sqlite.execute({\n sql: \"INSERT INTO bunch_codes (code, bunch_id, expires_at, created_at) VALUES (?, ?, ?, ?)\",\n args: [code, bunchId, expiresAt, createdAt],\n });\n return { code, createdAt, expiresAt, active: true };\n } catch (error) {\n const collision = String(error).includes(\"UNIQUE constraint failed\");\n if (!collision || attempt === 4) throw error;\n }\n }\n throw new Error(\"Could not create a unique bunch code\");\n}\n\nexport type RegisterDeviceResult =\n | { ok: true; deviceId: number }\n | { ok: false; reason: \"unknown\" | \"expired\" };\n\nexport async function registerDevice(\n code: string,\n installId: string,\n submittedName: string | null,\n): Promise {\n const codeResult = await sqlite.execute({\n sql: \"SELECT bunch_id, expires_at FROM bunch_codes WHERE code = ?\",\n args: [code],\n });\n const codeRow = codeResult.rows[0] as { bunch_id: number; expires_at: string } | undefined;\n if (!codeRow) return { ok: false, reason: \"unknown\" };\n if (new Date(codeRow.expires_at).getTime() <= Date.now()) {\n return { ok: false, reason: \"expired\" };\n }\n\n const timestamp = nowIso();\n const cleanName = submittedName?.trim() ?? \"\";\n const fallbackName = `Device ${installId.slice(0, 8)}`;\n const result = await sqlite.execute({\n sql: `\n INSERT INTO devices (\n bunch_id, install_id, name, created_at, updated_at, presentation\n )\n SELECT bunch_id, ?, ?, ?, ?, ?\n FROM bunch_codes\n WHERE code = ? AND datetime(expires_at) > datetime('now')\n ON CONFLICT(install_id) DO UPDATE SET\n bunch_id = excluded.bunch_id,\n name = CASE WHEN ? THEN excluded.name ELSE devices.name END,\n updated_at = excluded.updated_at\n RETURNING id\n `,\n args: [\n installId,\n cleanName || fallbackName,\n timestamp,\n timestamp,\n JSON.stringify(DEFAULT_WIDGET_PRESENTATION),\n code,\n cleanName.length > 0,\n ],\n });\n const row = result.rows[0] as { id: number } | undefined;\n if (!row) return { ok: false, reason: \"expired\" };\n return { ok: true, deviceId: Number(row.id) };\n}\n",[],[170,531],"7e36c121-78ae-4364-8755-6427b52ac4ae","alertPush.ts","01a0a679-3dab-7374-aab8-651ade2dd946",["D",1789499358648],"// App-alert registrations are separate from widget refresh tokens and keyed by APNs environment.\n// A disabled registration retains its token so permission changes never affect widget refreshes.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { sendAPNs } from \"./push.ts\";\nimport { ISO_FORMAT, isoFromEpochColumn, NOW_UTC, nowIsoUtc } from \"./time.ts\";\nimport type { PushEnvironment } from \"./deviceTokenStore.ts\";\n\nconst TEST_COOLDOWN_SECONDS = 60;\n\nconst ALERT_COLUMNS = `\n device_id TEXT NOT NULL,\n environment TEXT NOT NULL CHECK(environment IN ('sandbox','production')),\n token TEXT NOT NULL,\n allowed INTEGER NOT NULL CHECK(allowed IN (0,1)),\n updated_at TEXT NOT NULL,\n last_test_at TEXT,\n PRIMARY KEY(device_id, environment)`;\n\n// last_test_at was epoch seconds with 0 meaning \"never tested\". Rebuilding is the only\n// way to retype a column in SQLite, and it lets never-tested become an honest NULL.\nasync function migrateEpochCooldown() {\n const info = await sqlite.execute(\"PRAGMA table_info(device_alert_tokens)\");\n const column = (info.rows as { name: string; type: string }[])\n .find((row) => row.name === \"last_test_at\");\n if (!column || column.type !== \"INTEGER\") return;\n\n await sqlite.execute(\"ALTER TABLE device_alert_tokens RENAME TO device_alert_tokens_epoch\");\n await sqlite.execute(`CREATE TABLE device_alert_tokens (${ALERT_COLUMNS})`);\n await sqlite.execute(`INSERT INTO device_alert_tokens\n (device_id,environment,token,allowed,updated_at,last_test_at)\n SELECT device_id,environment,token,allowed,updated_at,\n CASE WHEN last_test_at = 0 THEN NULL ELSE ${isoFromEpochColumn(\"last_test_at\")} END\n FROM device_alert_tokens_epoch`);\n await sqlite.execute(\"DROP TABLE device_alert_tokens_epoch\");\n}\n\nexport async function ensureAlertSchema() {\n await migrateEpochCooldown();\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS device_alert_tokens (${ALERT_COLUMNS})`);\n}\n\nexport async function saveAlertToken(device: string, token: string, environment: PushEnvironment, allowed: boolean) {\n await ensureAlertSchema();\n await sqlite.execute({\n sql: `INSERT INTO device_alert_tokens(device_id,environment,token,allowed,updated_at)\n VALUES(?,?,?,?,?) ON CONFLICT(device_id,environment) DO UPDATE SET\n token=excluded.token,allowed=excluded.allowed,updated_at=excluded.updated_at`,\n args: [device, environment, token, allowed ? 1 : 0, nowIsoUtc()],\n });\n}\n\nexport async function sendTestAlert(device: string, token: string, environment: PushEnvironment) {\n await ensureAlertSchema();\n // Knowledge of the current APNs token is required; a public device ID alone cannot send a test.\n // A never-tested registration is NULL rather than a sentinel, so it passes the cooldown.\n const result = await sqlite.execute({\n sql: `UPDATE device_alert_tokens SET last_test_at=${NOW_UTC}\n WHERE device_id=? AND environment=? AND token=? AND allowed=1\n AND (last_test_at IS NULL OR last_test_at < strftime('${ISO_FORMAT}','now',?))\n RETURNING device_id`,\n args: [device, environment, token, `-${TEST_COOLDOWN_SECONDS} seconds`],\n });\n if (!result.rows.length) return { ok: false, reason: \"NotAllowedOrRateLimited\" };\n try {\n const delivery = await sendAPNs(token, \"app-alert\", environment, {\n title: \"Clark View\", body: \"Push notifications are connected.\",\n });\n if (delivery.deadToken) {\n await sqlite.execute({sql: \"DELETE FROM device_alert_tokens WHERE device_id=? AND environment=? AND token=?\",\n args: [device, environment, token]});\n }\n return { ok: delivery.ok, reason: delivery.reason };\n } catch {\n return { ok: false, reason: \"PushTransportOrSigningFailed\" };\n }\n}\n",[],[170,538],["D",1789499358648],[216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234],[170],"f20a8738-55ae-408c-be5a-3b6e7e22016b","widget.ts","01a0a679-3dab-7374-aab8-5b44cfb92bdf","01a0a679-3dab-7374-aab8-5c0ccc6a5749",["D",1789499358648],"// Stable iOS-facing routes backed exclusively by the device model.\n\nimport { Hono } from \"npm:hono\";\nimport { isRecord } from \"../../lib/guards.ts\";\nimport { getDeviceFeedConfiguration } from \"../../lib/deviceSourceStore.ts\";\nimport { getDeviceByInstallId, recordDeviceTimeZone } from \"../../lib/deviceStore.ts\";\nimport { composeDeviceFeed, utcOffsetFromQuery } from \"../../lib/sourceClient.ts\";\n\nexport const widgetRoutes = new Hono();\n\nwidgetRoutes.get(\"/resolve\", async (c) => {\n const url = new URL(c.req.url);\n const installId = url.searchParams.get(\"device\");\n const tz = url.searchParams.get(\"tz\");\n const configuration = installId\n ? await getDeviceFeedConfiguration(installId)\n : null;\n if (installId) await recordDeviceTimeZone(installId, utcOffsetFromQuery(tz));\n return composeDeviceFeed(configuration?.sources ?? [], { tz }, configuration?.presentation);\n});\n\nwidgetRoutes.get(\"/status/:deviceId\", async (c) => {\n const deviceId = c.req.param(\"deviceId\");\n const device = await getDeviceByInstallId(deviceId);\n if (!device) return c.json({ deviceId, paired: false });\n\n const primary = device.sources[0] ?? null;\n // Compatibility projection for the containing app; feed composition is source-agnostic.\n const settings = isRecord(primary?.settings) ? primary.settings : {};\n const teams = Array.isArray(settings.teams)\n ? settings.teams.filter((value): value is string => typeof value === \"string\")\n : [];\n return c.json({\n deviceId,\n paired: true,\n name: device.name,\n activeSource: primary?.kind ?? null,\n teams,\n });\n});\n\n",[],[153,555,548],"routes","2b26e59d-810b-4609-ae0b-b948c6be503f","sources.ts","01a0a679-3dab-7374-aab8-56a63f60cb85",["D",1789499358648],"// Read-only source resource pages. Only Diagnostics contacts the implementing source.\nimport { Hono } from \"npm:hono\";\nimport { getSource, listSources } from \"../../lib/sourceStore.ts\";\nimport { loadSourceDiagnostics } from \"../../lib/sourceDiagnosticsClient.ts\";\nimport {\n sourceIndexDocument, sourceNotFoundDocument, sourceShowDocument, type SourceTab,\n} from \"../../render/sourceHtml.tsx\";\n\nfunction positiveInteger(value: string): number | null {\n const number = Number(value);\n return Number.isSafeInteger(number) && number > 0 ? number : null;\n}\n\nexport const sourceRoutes = new Hono();\nsourceRoutes.get(\"/sources\", async (c) => c.html(sourceIndexDocument(await listSources())));\n\nfor (const tab of [\"overview\", \"diagnostics\", \"settings\", \"devices\"] as SourceTab[]) {\n sourceRoutes.get(`/sources/:id/${tab}`, async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const source = id ? await getSource(id) : null;\n if (!source) return c.html(sourceNotFoundDocument(), 404);\n const diagnostics = tab === \"diagnostics\" ? await loadSourceDiagnostics(source.id) : undefined;\n c.header(\"cache-control\", \"no-store\");\n return c.html(sourceShowDocument(source, tab, diagnostics));\n });\n}\n\nsourceRoutes.get(\"/sources/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id || !await getSource(id)) return c.html(sourceNotFoundDocument(), 404);\n return c.redirect(`/sources/${id}/overview`);\n});\n",[],[153,555,557],"94170d45-fad3-4aff-af8c-88a532b7fcae","root.ts","01a0a679-3dab-7374-aab8-533e9c194021",["D",1789499358648],"// Browser entry point for the parent administration app.\n\nimport { Hono } from \"npm:hono\";\nimport { rootHtml } from \"../../render/rootHtml.ts\";\n\nexport const rootRoutes = new Hono();\n\nrootRoutes.get(\"/\", (c) => c.html(rootHtml()));\n",[],[153,555,564],"ae132541-4258-44d1-b412-90387d719583","reminders.ts","01a0a679-3dab-7374-aab8-4d09c59dd802",["D",1789499358648],"// Internal reminder operations, driven by this val's crons today.\n//\n// Drain is a route rather than a cron-only function so the trigger stays swappable:\n// a scheduling service that calls back at an exact instant would post the same route\n// with a row id. The claim makes a duplicate or retried call a no-op, which is what\n// lets an untrusted external trigger be accepted at all.\n\nimport { Hono } from \"npm:hono\";\nimport { buildReminders } from \"../../lib/reminderBuilder.ts\";\nimport { drainReminders } from \"../../lib/reminderDrainer.ts\";\nimport { ensureReminderSchema, reminderCounts } from \"../../lib/reminderStore.ts\";\nimport { isRecord } from \"../../lib/guards.ts\";\n\nexport const reminderRoutes = new Hono();\n\nfunction authorized(header: string | undefined): boolean {\n const expected = Deno.env.has(\"REMINDERS_TOKEN\")\n ? Deno.env.get(\"REMINDERS_TOKEN\")\n : undefined;\n if (!expected || !header) return false;\n const presented = header.replace(/^Bearer /i, \"\");\n // Length-independent comparison is not worth a constant-time routine here; the\n // token is a deployment secret, not a per-user credential.\n return presented === expected;\n}\n\nfunction positiveInteger(value: unknown): number | undefined {\n return typeof value === \"number\" && Number.isInteger(value) && value > 0\n ? value\n : undefined;\n}\n\nreminderRoutes.post(\"/internal/reminders/:operation\", async (c) => {\n const operation = c.req.param(\"operation\");\n if (operation !== \"build\" && operation !== \"drain\") return c.json({ ok: false }, 404);\n if (!authorized(c.req.header(\"authorization\"))) return c.json({ ok: false }, 401);\n\n const value = await c.req.json().catch(() => null);\n const body = isRecord(value) ? value : {};\n await ensureReminderSchema();\n\n if (operation === \"build\") {\n const summary = await buildReminders(positiveInteger(body.chunk));\n return c.json({ ok: true, ...summary, counts: await reminderCounts() });\n }\n\n const summary = await drainReminders({\n id: positiveInteger(body.id),\n limit: positiveInteger(body.limit),\n });\n return c.json({ ok: true, ...summary, counts: await reminderCounts() });\n});\n",[],[153,555,571],"4fd48ae9-16d5-46a8-9f19-5bcc59509ee2","notifications.ts","01a0a679-3dab-7374-aab8-4a410cd1c0d8",["D",1789499358648],"// Fixed self-test messages only; token proof and a persistent cooldown guard delivery.\nimport { Hono } from \"npm:hono\";\nimport { saveAlertToken, sendTestAlert } from \"../../lib/alertPush.ts\";\nimport { isRecord } from \"../../lib/guards.ts\";\n\nexport const alertRoutes = new Hono();\nalertRoutes.post(\"/device/notifications/:operation\", async c => {\n const operation = c.req.param(\"operation\");\n if (operation !== \"register\" && operation !== \"test\") return c.json({ok:false},404);\n const value = await c.req.json().catch(() => null);\n if (!isRecord(value) || typeof value.device !== \"string\" || value.device.length > 128 || !value.device\n || (value.environment !== \"sandbox\" && value.environment !== \"production\")\n || typeof value.token !== \"string\" || !/^(?:[a-f0-9]{2}){16,256}$/.test(value.token)\n || (operation === \"register\" && typeof value.allowed !== \"boolean\")) return c.json({ok:false},400);\n if (operation === \"register\") {\n await saveAlertToken(value.device, value.token, value.environment, value.allowed as boolean);\n return c.json({ok:true});\n }\n const result = await sendTestAlert(value.device, value.token, value.environment);\n return c.json(result, result.ok ? 200 : 409);\n});\n",[],[153,555,578],"994c0973-096d-4b45-a4ff-dd71b030a260","devices.ts","01a0a679-3dab-7374-aab8-446d8826d016",["D",1789499358648],"// Device administration plus parallel new-model registration/status endpoints.\n\nimport { Hono } from \"npm:hono\";\nimport { HTTPException } from \"npm:hono/http-exception\";\nimport { loadSettingsForm, settingsFromForm } from \"../../lib/sourceSettings.ts\";\n\nimport { isRecord } from \"../../lib/guards.ts\";\nimport {\n addDeviceSource,\n getDevice,\n getDeviceByInstallId,\n getDeviceSource,\n listAvailableSources,\n listDevices,\n mergeDeviceInto,\n removeDeviceSource,\n renameDevice,\n updateDevicePresentation,\n updateDeviceSource,\n} from \"../../lib/deviceStore.ts\";\nimport {\n presentationFromForm,\n type WidgetPresentation,\n} from \"../../lib/presentation.ts\";\nimport { registerDevice } from \"../../lib/bunchStore.ts\";\nimport { saveDeviceToken } from \"../../lib/deviceTokenStore.ts\";\nimport { notifyDevice } from \"../../lib/push.ts\";\nimport {\n deviceIndexDocument,\n deviceMergeDocument,\n deviceNotFoundDocument,\n devicePresentationDocument,\n devicePreviewDocument,\n deviceSettingsDocument,\n deviceSourcesDocument,\n deviceSourceEditDocument,\n deviceSourceNewDocument,\n type DevicePreviewItem,\n} from \"../../render/deviceHtml.tsx\";\nimport { composeDeviceFeed } from \"../../lib/sourceClient.ts\";\n\n\nfunction positiveInteger(value: string): number | null {\n const number = Number(value);\n return Number.isSafeInteger(number) && number > 0 ? number : null;\n}\n\nfunction isPreviewItem(value: unknown): value is DevicePreviewItem {\n return isRecord(value)\n && typeof value.id === \"string\"\n && typeof value.mainText === \"string\"\n && typeof value.subText === \"string\"\n && (value.caption === null || typeof value.caption === \"string\")\n && typeof value.emphasized === \"boolean\"\n && typeof value.startsAt === \"number\"\n && typeof value.expiresAt === \"number\";\n}\n\n// The preview is the only place the parent reads inside the widget payload\n// instead of streaming it through, so it is the only place that has to check\n// the shape. A provider drift surfaces as this page's ordinary error state\n// rather than a render-time crash on an absent field.\nasync function previewResponse(\n sources: { sourceId: number; settings: unknown }[],\n presentation: WidgetPresentation,\n): Promise<{ items: DevicePreviewItem[]; rawJson: string }> {\n const response = await composeDeviceFeed(sources, {}, presentation);\n const payload = await response.json();\n if (\n !isRecord(payload) || !Array.isArray(payload.items)\n || !payload.items.every(isPreviewItem)\n ) {\n throw new Error(\"device feed returned an unexpected preview payload\");\n }\n return { items: payload.items, rawJson: JSON.stringify(payload, null, 2) };\n}\n\nexport const deviceRoutes = new Hono();\n// Expected form errors must survive the application's operational error handler.\ndeviceRoutes.onError((error) => {\n if (error instanceof HTTPException) return error.getResponse();\n throw error;\n});\n\ndeviceRoutes.get(\"/devices\", async (c) => {\n return c.html(deviceIndexDocument(await listDevices()));\n});\n\n// Device-named alias for the stable iOS resolver route.\ndeviceRoutes.get(\"/devices/resolve\", async (c) => {\n const url = new URL(c.req.url);\n const installId = url.searchParams.get(\"device\");\n const device = installId ? await getDeviceByInstallId(installId) : null;\n const sources = device?.sources.map((source) => ({\n sourceId: source.sourceId,\n settings: source.settings,\n })) ?? [];\n return composeDeviceFeed(sources, {\n tz: url.searchParams.get(\"tz\"),\n }, device?.presentation);\n});\n\ndeviceRoutes.get(\"/devices/status/:installId\", async (c) => {\n const installId = c.req.param(\"installId\");\n const device = await getDeviceByInstallId(installId);\n if (!device) return c.json({ deviceId: installId, registered: false });\n return c.json({\n deviceId: installId,\n registered: true,\n name: device.name,\n activeSource: device.sources[0]?.kind ?? null,\n sources: device.sources.map((source) => ({\n kind: source.kind,\n settings: source.settings,\n })),\n });\n});\n\ndeviceRoutes.post(\"/devices/register\", async (c) => {\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false }, 400);\n }\n const values = (body ?? {}) as { code?: unknown; device?: unknown; name?: unknown };\n if (typeof values.code !== \"string\" || typeof values.device !== \"string\") {\n return c.json({ ok: false }, 400);\n }\n const code = values.code.trim().toUpperCase();\n const installId = values.device.trim();\n const name = typeof values.name === \"string\" ? values.name : null;\n if (!code || !installId) return c.json({ ok: false }, 400);\n\n const result = await registerDevice(code, installId, name);\n if (result.ok) return c.json(result);\n if (result.reason === \"expired\") {\n return c.json({ ok: false, message: \"expired\" }, 422);\n }\n return c.json({ ok: false }, 404);\n});\n\ndeviceRoutes.get(\"/devices/:id/sources\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n return c.html(deviceSourcesDocument(device));\n});\n\ndeviceRoutes.get(\"/devices/:id/sources/new\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n\n const available = await listAvailableSources(id);\n const requestedSource = positiveInteger(c.req.query(\"source\") ?? \"\");\n const selected = requestedSource\n ? available.find((source) => source.id === requestedSource) ?? null\n : null;\n return c.html(deviceSourceNewDocument(device, available, selected,\n selected ? await loadSettingsForm(selected.id) : {fields:[],revision:\"\"}));\n});\n\ndeviceRoutes.post(\"/devices/:id/sources\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id || !(await getDevice(id))) return c.text(\"Device not found\", 404);\n\n const body = await c.req.parseBody({ all: true });\n const sourceId = positiveInteger(String(body.sourceId ?? \"\"));\n if (!sourceId) return c.text(\"Source is required\", 400);\n\n const available = await listAvailableSources(id);\n const source = available.find((candidate) => candidate.id === sourceId);\n if (!source) return c.text(\"Source is not available for this device\", 422);\n\n const assignmentId = await addDeviceSource(\n id,\n sourceId,\n await settingsFromForm(sourceId, body),\n );\n if (!assignmentId) return c.text(\"Source could not be attached\", 422);\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/sources/${assignmentId}`, 303);\n});\n\ndeviceRoutes.get(\"/devices/:id/sources/:assignmentId\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const assignmentId = positiveInteger(c.req.param(\"assignmentId\"));\n if (!id || !assignmentId) return c.html(deviceNotFoundDocument(), 404);\n const [device, source] = await Promise.all([\n getDevice(id),\n getDeviceSource(id, assignmentId),\n ]);\n if (!device || !source) return c.html(deviceNotFoundDocument(), 404);\n return c.html(deviceSourceEditDocument(\n device,\n source,\n await loadSettingsForm(source.sourceId),\n c.req.query(\"saved\") === \"1\",\n ));\n});\n\ndeviceRoutes.post(\"/devices/:id/sources/:assignmentId\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const assignmentId = positiveInteger(c.req.param(\"assignmentId\"));\n if (!id || !assignmentId) return c.text(\"Source assignment not found\", 404);\n const source = await getDeviceSource(id, assignmentId);\n if (!source) return c.text(\"Source assignment not found\", 404);\n\n const body = await c.req.parseBody({ all: true });\n const updated = await updateDeviceSource(\n id,\n assignmentId,\n await settingsFromForm(source.sourceId, body),\n );\n if (!updated) return c.text(\"Source assignment not found\", 404);\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/sources/${assignmentId}?saved=1`, 303);\n});\n\ndeviceRoutes.post(\"/devices/:id/sources/:assignmentId/delete\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n const assignmentId = positiveInteger(c.req.param(\"assignmentId\"));\n if (!id || !assignmentId) return c.text(\"Source assignment not found\", 404);\n const removed = await removeDeviceSource(id, assignmentId);\n if (!removed) return c.text(\"Source assignment not found\", 404);\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/sources`, 303);\n});\n\ndeviceRoutes.get(\"/devices/:id/presentation\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n return c.html(devicePresentationDocument(\n device,\n c.req.query(\"saved\") === \"1\",\n ));\n});\n\ndeviceRoutes.post(\"/devices/:id/presentation\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id || !(await getDevice(id))) return c.text(\"Device not found\", 404);\n\n const body = await c.req.parseBody();\n const presentation = presentationFromForm(\n body.template,\n body.lightRootSurface,\n body.darkRootSurface,\n );\n if (!presentation) {\n return c.text(\"Template and Light/Dark Mode #RRGGBB colors are required\", 400);\n }\n if (!(await updateDevicePresentation(id, presentation))) {\n return c.text(\"Device not found\", 404);\n }\n await notifyDevice(id).catch(() => undefined);\n return c.redirect(`/devices/${id}/presentation?saved=1`, 303);\n});\n\nasync function mergeCandidates(deviceId: number) {\n return (await listDevices()).filter((candidate) => candidate.id !== deviceId);\n}\n\ndeviceRoutes.get(\"/devices/:id/merge\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n return c.html(deviceMergeDocument(device, await mergeCandidates(id)));\n});\n\ndeviceRoutes.post(\"/devices/:id/merge\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n\n const body = await c.req.parseBody();\n const targetId = positiveInteger(String(body.targetId ?? \"\"));\n if (!targetId) {\n return c.html(\n deviceMergeDocument(device, await mergeCandidates(id), \"Choose a device to merge into.\"),\n 400,\n );\n }\n\n const result = await mergeDeviceInto(id, targetId);\n if (!result.ok) {\n const message = result.reason === \"same\"\n ? \"A device cannot merge into itself.\"\n : \"That device no longer exists.\";\n return c.html(deviceMergeDocument(device, await mergeCandidates(id), message), 422);\n }\n await notifyDevice(result.targetId).catch(() => undefined);\n return c.redirect(`/devices/${result.targetId}/settings?saved=1`, 303);\n});\n\ndeviceRoutes.get(\"/devices/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n try {\n const preview = await previewResponse(\n device.sources.map((source) => ({\n sourceId: source.sourceId,\n settings: source.settings,\n })),\n device.presentation,\n );\n return c.html(devicePreviewDocument(device, { ok: true, ...preview }));\n } catch (error) {\n return c.html(devicePreviewDocument(device, {\n ok: false,\n error: error instanceof Error ? error.message : String(error),\n }));\n }\n});\n\ndeviceRoutes.get(\"/devices/:id/settings\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(deviceNotFoundDocument(), 404);\n const device = await getDevice(id);\n if (!device) return c.html(deviceNotFoundDocument(), 404);\n return c.html(deviceSettingsDocument(device, c.req.query(\"saved\") === \"1\"));\n});\n\ndeviceRoutes.post(\"/devices/:id/settings\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.text(\"Device not found\", 404);\n const body = await c.req.parseBody();\n const name = String(body.name ?? \"\").trim();\n if (!name) return c.text(\"Name is required\", 400);\n if (!(await renameDevice(id, name))) return c.text(\"Device not found\", 404);\n return c.redirect(`/devices/${id}/settings?saved=1`, 303);\n});\n\n// Stable iOS path; the implementation now redeems bunch codes into devices.\ndeviceRoutes.post(\"/pair\", async (c) => {\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false }, 400);\n }\n const { code, device } = (body ?? {}) as { code?: unknown; device?: unknown };\n if (typeof code !== \"string\" || typeof device !== \"string\") {\n return c.json({ ok: false }, 400);\n }\n\n const normalizedCode = code.trim().toUpperCase();\n const installId = device.trim();\n if (!normalizedCode || !installId) return c.json({ ok: false }, 400);\n\n const result = await registerDevice(normalizedCode, installId, null);\n if (result.ok) return c.json(result, 200);\n if (result.reason === \"expired\") {\n return c.json({ ok: false, message: \"expired\" }, 422);\n }\n return c.json({ ok: false }, 404);\n});\n\ndeviceRoutes.post(\"/device/token\", async (c) => {\n let body: unknown;\n try {\n body = await c.req.json();\n } catch {\n return c.json({ ok: false }, 400);\n }\n const values = (body ?? {}) as {\n device?: unknown;\n token?: unknown;\n kind?: unknown;\n environment?: unknown;\n active?: unknown;\n };\n if (typeof values.device !== \"string\" || typeof values.token !== \"string\") {\n return c.json({ ok: false }, 400);\n }\n\n // Missing kind/environment/active preserves compatibility with beta builds that\n // upload the containing app's sandbox background-push token.\n const kind = values.kind ?? \"app-background\";\n const environment = values.environment ?? \"sandbox\";\n const active = values.active ?? true;\n if (\n (kind !== \"app-background\" && kind !== \"widget\")\n || (environment !== \"sandbox\" && environment !== \"production\")\n || typeof active !== \"boolean\"\n ) {\n return c.json({ ok: false }, 400);\n }\n\n await saveDeviceToken(values.device, values.token, kind, environment, active);\n return c.json({ ok: true });\n});\n\n",[],[153,555,585],"de48a443-b0c3-43c8-88d1-97d179a30924","bunches.ts","01a0a679-3dab-7374-aab8-423d6cff29e6",["D",1789499358648],"// Browser administration for bunch enrollment and access scope.\n\nimport { Hono } from \"npm:hono\";\nimport {\n createBunch,\n createBunchCode,\n getBunch,\n listBunchCodes,\n listBunches,\n renameBunch,\n} from \"../../lib/bunchStore.ts\";\nimport {\n bunchIndexDocument,\n bunchNewDocument,\n bunchNotFoundDocument,\n bunchPairDocument,\n bunchShowDocument,\n} from \"../../render/bunchHtml.tsx\";\n\nfunction positiveInteger(value: string): number | null {\n const number = Number(value);\n return Number.isSafeInteger(number) && number > 0 ? number : null;\n}\n\nexport const bunchRoutes = new Hono();\n\nbunchRoutes.get(\"/bunches\", async (c) => {\n return c.html(bunchIndexDocument(await listBunches()));\n});\n\nbunchRoutes.get(\"/bunches/new\", (c) => c.html(bunchNewDocument()));\n\nbunchRoutes.post(\"/bunches\", async (c) => {\n const body = await c.req.parseBody();\n const name = String(body.name ?? \"\").trim();\n if (!name) return c.text(\"Name is required\", 400);\n const id = await createBunch(name);\n return c.redirect(`/bunches/${id}`, 303);\n});\n\nbunchRoutes.get(\"/bunches/:id/pair\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(bunchNotFoundDocument(), 404);\n const bunch = await getBunch(id);\n if (!bunch) return c.html(bunchNotFoundDocument(), 404);\n return c.html(bunchPairDocument(bunch, await listBunchCodes(id)));\n});\n\nbunchRoutes.post(\"/bunches/:id/codes\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(bunchNotFoundDocument(), 404);\n const bunch = await getBunch(id);\n if (!bunch) return c.html(bunchNotFoundDocument(), 404);\n const created = await createBunchCode(id);\n return c.html(bunchPairDocument(bunch, await listBunchCodes(id), created));\n});\n\nbunchRoutes.get(\"/bunches/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.html(bunchNotFoundDocument(), 404);\n const bunch = await getBunch(id);\n if (!bunch) return c.html(bunchNotFoundDocument(), 404);\n return c.html(bunchShowDocument(bunch, c.req.query(\"saved\") === \"1\"));\n});\n\nbunchRoutes.post(\"/bunches/:id\", async (c) => {\n const id = positiveInteger(c.req.param(\"id\"));\n if (!id) return c.text(\"Bunch not found\", 404);\n const body = await c.req.parseBody();\n const name = String(body.name ?? \"\").trim();\n if (!name) return c.text(\"Name is required\", 400);\n if (!(await renameBunch(id, name))) return c.text(\"Bunch not found\", 404);\n return c.redirect(`/bunches/${id}?saved=1`, 303);\n});\n",[],[153,555,592],"e08efb82-9efa-4a5c-ae9b-8f35a4d007a3",["D",1789499358648],[208,209,210,211,212,213,214],[153,555],["D",1789499358648],[207],[153],"3963dc08-c2de-4c6e-8cb6-3e3c5b0d2c72","source-diagnostics.md","01a0a679-3dab-7374-aab8-385118cac67e",["D",1789499358648],"# Source diagnostics\n\nThe source explorer uses Overview, Diagnostics, Settings and Devices sub-routes under\n/sources/:id. The bare resource URL redirects to /overview. Only /diagnostics\ncalls the source; failures do not affect other tabs or widget composition.\n\n## Optional authenticated GET /diagnostics\n\nThis operational extension is independent of source protocol v1 and its SDK.\nUse the same bearer authentication as the source RPC. Return cache-control: no-store.\n\n```json\n{\n \"diagnosticsVersion\": 1,\n \"sourceKey\": \"example\",\n \"scope\": \"stored\",\n \"totalItems\": 2,\n \"earliestTimestamp\": 1788999600,\n \"latestTimestamp\": 1799604000,\n \"lastIngestedAt\": \"2026-09-09T00:00:00.000Z\"\n}\n```\n\nCount all stored temporal items belonging to this source before device settings,\ndate filtering and next-item selection. Count items, not arbitrary backing rows,\ncatalog entries, ingest buckets or unrelated copied data. Sources own the mapping:\nSQL aggregates, decoded documents or any other storage are implementation details.\nThe parent never queries a source database or guesses date columns.\n\nBounds use event instants in Unix seconds, not milliseconds or ingestion dates.\nCounts must be nonnegative safe integers. Empty sources return zero and two null\nbounds. Nonempty sources return finite ordered bounds within the JavaScript Date\nrange. lastIngestedAt is an ISO timestamp or null when unknown.\n\nThe parent checks version, identity and consistency. HTTP 404/405/501 means\nunsupported; transport/auth/invalid-response failures mean unavailable. Neither\nmeans zero items. Summary data is fetched on each Diagnostics page load.\nThe page computes elapsed-day span and latest-event horizon from the response;\nbrowser-local dates use the shared timestamp renderer.\n\nStored bounds do not prove schedule completeness, upstream freshness or current\nevent statuses. This endpoint never ingests or changes data.\n\n## Verification\n\nParent: tools/source-diagnostics-check.ts (pure validation and tab rendering).\nEach active source: diagnostics-check.ts (read-only authenticated diagnostics,\nauth rejection, bounds and existing descriptor).\n",[],[179,606],"3f214a8e-4f94-476f-b1da-d2758e1388ec","event-reminders.md","01a0a679-3dab-7374-aab8-351f20c31740",["D",1789499358648],"# Event reminders\n\nA visible alert some configurable time before an event starts. Two scheduled jobs\nshare one durable queue.\n\n## Shape\n\n`crons/buildReminders.ts` (`:00/:15/:30/:45`) sweeps the devices whose queues are\nstalest, composes each one's feed, and writes a `notification_queue` row per future\nitem. `crons/drainReminders.ts` (`:05/:20/:35/:50`) claims every row whose\n`send_after` has passed and sends it.\n\nThe split exists because the halves have opposite properties. Building is slow and\nfailure-prone — N devices times M source reads — and is allowed to run behind.\nDraining must be on time. Under a 1-minute wall clock a combined job would have to\ndo both inside one run.\n\n## Invariants\n\n- **Due, not windowed.** A row is due when `send_after` has passed and nothing has\n sent it. Window matching would drop reminders on a skipped tick or a late-published\n event; this recovers on the next tick instead.\n- **The claim is the only lock.** `claimReminder` is one compare-and-swap. Rows\n affected answers \"is this send mine?\", so overlapping runs and repeated triggers\n are harmless. This is what allows an external trigger to be accepted at all.\n- **At-most-once.** A claim abandoned by a run that died mid-send is failed, never\n retried. A duplicate alert is the more visible failure than a missing one.\n- **Lead time is not quantized to the tick.** `send_after` is exact; the tick bounds\n only lateness. Any duration works, with ±tick precision.\n- **Cancellation is in place.** An item that leaves the feed voids its pending row.\n Nothing external needs recalling.\n- **A row carries the event's whole window.** `event_at` is the item's `startsAt`\n and `expires_at` its `expiresAt`, so send-time policy can ask both \"has it begun?\"\n and \"is it over?\" without re-reading a source. They settle distinctly\n (`EventStarted` vs `EventExpired`). `expires_at` is a source-owned estimate and is\n never shown to anyone.\n- **`rule` names the policy, not a column.** `lead:3600` is implicitly anchored to\n the start. An expiry-anchored policy extends the value (`lead:0@expiry`) rather\n than adding a column, because `UNIQUE(device_id,item_id,rule)` is what lets\n distinct rules coexist for one item.\n\n## Timestamps\n\nEvery stored time is ISO-8601 UTC text matching `Date.toISOString()`\n(`2026-09-10T08:30:00.000Z`) — the format the rest of the parent's tables already use.\nFixed-width and zero-padded means string order is chronological order, so the due\npredicate and the abandoned-claim sweep compare text directly with no conversion. The\ndrainer's two lateness guards are the only arithmetic on stored times and convert at\nthe point of use.\n\n**The `T` separator is load-bearing.** SQLite's own `datetime()` emits a space instead,\nand `'T'` sorts above `' '`, so mixing the two would break the due predicate silently.\nWrite times through `NOW_UTC` or `isoFromUnix` — never `datetime()` or `unixepoch()`.\n`tools/reminder-check.ts` asserts the format and that text compares chronologically.\n\nItem bounds on the source protocol and widget wire stay Unix seconds; that is a\nseparate contract and is not affected. It is also the origin of the epoch integers that\nspread inward — the widget's item times set the habit, and storage copied it.\nConverting at the storage boundary is what keeps the wire format from dictating the\nschema. The shared helpers live in `lib/time.ts`.\n\n## Sizing\n\nEvery device must be visited at least once inside its own reminder lead:\n\n full sweep period < lead time − margin\n\nChunk size, cadence and device count set that period. Missing it does not make\nreminders late — it means they never queue. Watch the oldest `devices.reminders_built_at`.\n\nThe drain side has its own relationship, and it bites the other way:\n\n MAX_LATENESS_SECONDS > drain cadence + scheduler slack\n\nVal Town cron is not punctual — a `:35` tick was observed firing at `:40` on\n2026-09-10. A row coming due just after a tick therefore waits nearly a full cadence\nplus that slack, so a cap equal to the cadence voids it as `TooLate` instead of sending\nit: a reminder dropped silently. The cap is 30 minutes against a 15-minute cadence for\nthat reason, and `tools/reminder-check.ts` asserts the relationship rather than the\nnumber so retuning the cadence cannot quietly reintroduce the gap. Retune both together.\n\n## Configuration\n\n| Variable | Effect |\n| --- | --- |\n| `REMINDERS_ENABLED` | `\"true\"` sends. Anything else drains the queue settling rows `disabled` — a dry run showing what would have been sent. |\n| `REMINDERS_TOKEN` | Bearer secret for `POST /internal/reminders/{build,drain}`. Unset means 401. |\n\n`devices.reminder_lead_seconds` defaults to 3600. `devices.last_tz_offset_seconds`\nis captured from the widget's `tz` on resolve — conditionally, so the hot read path\nstays a read, and best-effort, so it can never fail a feed request.\n\n## The scheduler seam\n\nDrain is an HTTP route, not a cron-only function, and takes an optional row id. Today\nthe cron calls it with none and it sweeps. A scheduling service (QStash-style) that\nstores \"call this URL at time T\" would call the same route with an id, giving exact\ntiming without polling. The ledger stays here and stays authoritative; the external\nservice would hold no state and no business logic.\n\n## Known limit\n\nAn offset is not a timezone: it cannot survive a DST transition, so an event on the\nfar side of one composes against the wrong local day. Harmless for lead-time math,\nwhich is absolute instants throughout. Not harmless for quiet hours — that needs an\nIANA identifier from the app first.\n\n## Checks\n\n`tools/reminder-check.ts` covers arbitrary leads, the horizon, started-event and\nexpired-event guards, an instantaneous (one-second) item, the due predicate,\nsingle-claim delivery, cancellation, settlement and abandoned-claim policy. Disposable fixtures, cleaned up, no APNs requests.\n",[],[179,613],["D",1789499358648],[204,205],[179],"9dda3d34-68eb-4ab6-8846-da32a67fe115","drainReminders.ts","01a0a679-3dab-7374-aab8-2e2d2fe353e7",["D",1789499358648],"interval","// Sends every reminder that has come due.\n//\n// This is the timely half. It calls the same code path the internal drain route\n// exposes, so replacing this clock with a scheduling service that calls back at an\n// exact instant changes the trigger and nothing else.\n\nimport { drainReminders } from \"../lib/reminderDrainer.ts\";\nimport { ensureReminderSchema } from \"../lib/reminderStore.ts\";\n\nexport default async function () {\n await ensureReminderSchema();\n console.log(JSON.stringify(await drainReminders()));\n}\n",[],[184,623],"fb4c1896-1c82-467b-9084-3242f0503b82","buildReminders.ts","01a0a679-3dab-7374-aab8-28ce6ca6200c",["D",1789499358648],"// Queues reminders for the devices whose queues are stalest.\n//\n// Correctness constraint: every device must be visited at least once inside its own\n// reminder lead, so the full sweep period (chunk size ÷ device count × this interval)\n// has to stay under that lead. Missing it does not make reminders late; it makes them\n// never queue at all. Watch the oldest reminders_built_at as the fleet grows.\n\nimport { buildReminders } from \"../lib/reminderBuilder.ts\";\nimport { ensureReminderSchema } from \"../lib/reminderStore.ts\";\n\nexport default async function () {\n await ensureReminderSchema();\n const summary = await buildReminders();\n for (const failure of summary.failures) {\n // A source failure fails that device's whole composition; surfacing it keeps a\n // broken source from silently costing a device its reminders.\n console.error(`device ${failure.deviceId} build failed: ${failure.error}`);\n }\n console.log(JSON.stringify(summary));\n}\n",[],[184,631],["D",1789499358648],[201,202],[184],["D",1787009561780],["D",1789445472057],{"_11":12,"_107":103},{"_11":12,"_101":-5,"_102":103,"_73":74,"_104":105,"_106":26},{"_41":55,"_13":16,"_32":56,"_39":40,"_43":33,"_44":57,"_58":50,"_59":40,"_60":53,"_54":14,"_51":12},"ctx",{"_96":-5,"_130":678,"_679":680,"_681":682,"_683":26,"_684":26,"_685":26,"_686":128,"_687":-5,"_688":-7,"_689":-7,"_690":20,"_691":26,"_692":26,"_693":-5,"_694":26,"_695":26,"_696":26,"_697":-5},"ENV",{"_649":650,"_651":652,"_653":38,"_654":655,"_656":657,"_658":659,"_660":661,"_662":663,"_664":665,"_666":667,"_668":669,"_670":671,"_672":673,"_674":675,"_676":677},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Compare

Mergebunch-independent-assignmentsintomain