[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_244":245,"_246":247},"routes/_app.x.$handle.$name",{"_110":109,"_34":56,"_118":100,"_29":119,"_13":14,"_120":-5,"_11":121,"_122":123,"_124":125,"_126":127,"_128":129,"_21":-5,"_130":-5,"_131":-5,"_132":28,"_133":134,"_135":26,"_136":-5,"_137":-5,"_138":139},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_54":55,"_34":56,"_41":57,"_58":-5,"_59":28,"_60":61,"_62":61,"_63":64,"_65":-5,"_18":66,"_67":68,"_69":28,"_70":-5,"_71":-5,"_72":73,"_74":75,"_76":77,"_78":79,"_80":81,"_82":-5,"_83":84,"_85":84,"_86":87,"_88":87,"_89":87,"_90":84,"_91":84,"_92":93,"_94":95,"_96":97,"_98":28},"version",6,"changes",[19,20],"aiChatInfo","userId",{"_21":46,"_23":47,"_25":26,"_27":28,"_29":48,"_31":48},{"_21":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":30},"file",{"_32":33,"_34":35,"_36":37,"_38":40,"_41":42,"_43":14,"_44":45,"_25":28},"previous",{"_32":33,"_34":35,"_36":37,"_38":39},"deleted",true,"deletedHere",false,"path","sdk/serve.ts","latestPath","fileId","01a07d2f-949b-717b-943b-a55dc9bd6822","name","serve.ts","fileType","script","content","// Version 1 of the source protocol, as a function of a SourceDefinition.\n// Everything here is the same for every source, which is exactly why it is\n// here and not in the source: an implementer who writes this by hand writes\n// the envelopes, the status codes and the output guard slightly differently\n// each time, and the parent is the one that finds out.\n//\n// The routes:\n// GET /v1/descriptor what this source is, and what settings it takes\n// POST /v1/read settings + context in, items out\n// POST /v1/write a named side effect from `writes`\n// POST /v1/publish 501; reserved, no source implements it yet\n//\n// Auth is NOT here. It belongs to whatever mounts this (rpc.ts), because the\n// credential is a deployment concern and a source shouldn't have an opinion\n// about how it is fronted.\n//\n// Part of the SDK — see sdk/contract.ts's header for the import rule.\n\nimport { items, PROTOCOL_VERSION, record } from \"./contract.ts\";\nimport type { SourceDefinition } from \"./defineSource.ts\";\n\n// Every response the protocol emits carries protocolVersion, and every\n// failure carries `ok:false` plus a code. Kept as two helpers so no route can\n// invent a third envelope shape.\nfunction fail(error: string, status = 400): Response {\n return Response.json({ protocolVersion: PROTOCOL_VERSION, ok: false, error }, { status });\n}\n\nexport async function serveSource(\n definition: SourceDefinition,\n req: Request,\n): Promise {\n const url = new URL(req.url);\n\n let body: Record = {};\n if (req.method === \"POST\") {\n try {\n const raw = await req.json();\n if (!record(raw)) return fail(\"invalid_body\");\n body = raw;\n } catch {\n return fail(\"invalid_json\");\n }\n if (body.protocolVersion !== PROTOCOL_VERSION) return fail(\"unsupported_protocol\");\n }\n\n // Identity is checked before routing, so a request addressed to the wrong\n // source is a 404 on every path — including /v1/publish. A val that mounts\n // several definitions dispatches on this key.\n const key = req.method === \"GET\" ? url.searchParams.get(\"sourceKey\") ?? definition.key : body.sourceKey;\n if (key !== definition.key) return fail(\"unknown_source\", 404);\n\n if (req.method === \"GET\" && url.pathname === \"/v1/descriptor\") {\n return Response.json({\n protocolVersion: PROTOCOL_VERSION,\n sourceKey: definition.key,\n temporal: definition.temporal ?? true,\n settingsSchema: definition.settingsSchema,\n ...(definition.options ? { options: await definition.options() } : {}),\n // Derived, never declared: capabilities are read off the definition, so\n // a source cannot advertise a write it doesn't implement or hide one it\n // does.\n capabilities: {\n read: true,\n write: Object.keys(definition.writes ?? {}),\n publish: false,\n },\n });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/v1/read\") {\n if (!record(body.settings) || !record(body.context)) return fail(\"settings_and_context_required\");\n // The offset is protocol-level, so it is checked here rather than by each\n // source. This is the wide guard — a source's own fallback narrows it\n // further (see ReadContext).\n const tz = body.context.utcOffsetSeconds;\n if (tz !== null && (typeof tz !== \"number\" || !Number.isInteger(tz) || Math.abs(tz) > 86400)) {\n return fail(\"invalid_timezone\");\n }\n const parsed = await definition.parseSettings(body.settings);\n if (!parsed.ok) return fail(parsed.error, parsed.status ?? 400);\n\n const produced = await definition.read(parsed.value, { utcOffsetSeconds: tz as number | null });\n // Guarding the source's own output, not a remote's: a duplicate id or a\n // non-finite timestamp is rejected here rather than at the parent, where\n // the whole composition would fail without naming which source produced\n // it. 502 and not 500 — the source answered, the answer was unusable.\n if (!items(produced)) return fail(\"invalid_source_output\", 502);\n return Response.json(\n { protocolVersion: PROTOCOL_VERSION, sourceKey: definition.key, items: produced },\n { headers: { \"cache-control\": \"no-store\" } },\n );\n }\n\n if (req.method === \"POST\" && url.pathname === \"/v1/write\") {\n if (!record(body.payload)) return fail(\"invalid_payload\");\n // Object.hasOwn, not a plain lookup: `writes` is an object literal, so\n // `operation: \"toString\"` would otherwise resolve to Object.prototype's\n // method and get called with the payload.\n const writes = definition.writes ?? {};\n const operation = typeof body.operation === \"string\" ? body.operation : \"\";\n if (!Object.hasOwn(writes, operation)) return fail(\"unsupported_operation\", 422);\n const handler = writes[operation];\n const outcome = await handler(body.payload);\n if (!outcome.ok) return fail(outcome.error, outcome.status ?? 400);\n return Response.json({\n protocolVersion: PROTOCOL_VERSION,\n sourceKey: definition.key,\n ok: true,\n result: outcome.value,\n });\n }\n\n // Reserved rather than absent: the parent already knows the route, and a\n // 501 tells it \"not yet\" where a 404 would say \"never\".\n if (url.pathname === \"/v1/publish\") return fail(\"not_implemented\", 501);\n return fail(\"not_found\", 404);\n}\n","// Version 1 of the source protocol, as a function of a SourceDefinition.\n// Everything here is the same for every source, which is exactly why it is\n// here and not in the source: an implementer who writes this by hand writes\n// the envelopes, the status codes and the output guard slightly differently\n// each time, and the parent is the one that finds out.\n//\n// The routes:\n// GET /v1/descriptor what this source is, and what settings it takes\n// POST /v1/read settings + context in, items out\n// POST /v1/write a named side effect from `writes`\n// POST /v1/publish 501; reserved, no source implements it yet\n//\n// Auth is NOT here. It belongs to whatever mounts this (rpc.ts), because the\n// credential is a deployment concern and a source shouldn't have an opinion\n// about how it is fronted.\n//\n// Part of the SDK — see sdk/contract.ts's header for the import rule.\n\nimport { items, PROTOCOL_VERSION, record } from \"./contract.ts\";\nimport type { SourceDefinition } from \"./defineSource.ts\";\n\n// Every response the protocol emits carries protocolVersion, and every\n// failure carries `ok:false` plus a code. Kept as two helpers so no route can\n// invent a third envelope shape.\nfunction fail(error: string, status = 400): Response {\n return Response.json({ protocolVersion: PROTOCOL_VERSION, ok: false, error }, { status });\n}\n\nexport async function serveSource(\n definition: SourceDefinition,\n req: Request,\n): Promise {\n const url = new URL(req.url);\n\n let body: Record = {};\n if (req.method === \"POST\") {\n try {\n const raw = await req.json();\n if (!record(raw)) return fail(\"invalid_body\");\n body = raw;\n } catch {\n return fail(\"invalid_json\");\n }\n if (body.protocolVersion !== PROTOCOL_VERSION) return fail(\"unsupported_protocol\");\n }\n\n // Identity is checked before routing, so a request addressed to the wrong\n // source is a 404 on every path — including /v1/publish. A val that mounts\n // several definitions dispatches on this key.\n const key = req.method === \"GET\" ? url.searchParams.get(\"sourceKey\") ?? definition.key : body.sourceKey;\n if (key !== definition.key) return fail(\"unknown_source\", 404);\n\n if (req.method === \"GET\" && url.pathname === \"/v1/descriptor\") {\n return Response.json({\n protocolVersion: PROTOCOL_VERSION,\n sourceKey: definition.key,\n temporal: definition.temporal ?? true,\n settingsSchema: typeof definition.settingsSchema === \"function\"\n ? await definition.settingsSchema() : definition.settingsSchema,\n ...(definition.options ? { options: await definition.options() } : {}),\n // Derived, never declared: capabilities are read off the definition, so\n // a source cannot advertise a write it doesn't implement or hide one it\n // does.\n capabilities: {\n read: true,\n validateSettings: true,\n write: Object.keys(definition.writes ?? {}),\n publish: false,\n },\n });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/v1/validate-settings\") {\n if (!record(body.settings)) return fail(\"invalid_settings\");\n const parsed = await definition.parseSettings(body.settings);\n if (!parsed.ok) return fail(parsed.error, parsed.status ?? 400);\n // Parsed values can contain private implementation context. Never export them.\n return Response.json({ protocolVersion: PROTOCOL_VERSION, sourceKey: definition.key, ok: true },\n { headers: { \"cache-control\": \"no-store\" } });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/v1/read\") {\n if (!record(body.settings) || !record(body.context)) return fail(\"settings_and_context_required\");\n // The offset is protocol-level, so it is checked here rather than by each\n // source. This is the wide guard — a source's own fallback narrows it\n // further (see ReadContext).\n const tz = body.context.utcOffsetSeconds;\n if (tz !== null && (typeof tz !== \"number\" || !Number.isInteger(tz) || Math.abs(tz) > 86400)) {\n return fail(\"invalid_timezone\");\n }\n const parsed = await definition.parseSettings(body.settings);\n if (!parsed.ok) return fail(parsed.error, parsed.status ?? 400);\n\n const produced = await definition.read(parsed.value, { utcOffsetSeconds: tz as number | null });\n // Guarding the source's own output, not a remote's: a duplicate id or a\n // non-finite timestamp is rejected here rather than at the parent, where\n // the whole composition would fail without naming which source produced\n // it. 502 and not 500 — the source answered, the answer was unusable.\n if (!items(produced)) return fail(\"invalid_source_output\", 502);\n return Response.json(\n { protocolVersion: PROTOCOL_VERSION, sourceKey: definition.key, items: produced },\n { headers: { \"cache-control\": \"no-store\" } },\n );\n }\n\n if (req.method === \"POST\" && url.pathname === \"/v1/write\") {\n if (!record(body.payload)) return fail(\"invalid_payload\");\n // Object.hasOwn, not a plain lookup: `writes` is an object literal, so\n // `operation: \"toString\"` would otherwise resolve to Object.prototype's\n // method and get called with the payload.\n const writes = definition.writes ?? {};\n const operation = typeof body.operation === \"string\" ? body.operation : \"\";\n if (!Object.hasOwn(writes, operation)) return fail(\"unsupported_operation\", 422);\n const handler = writes[operation];\n const outcome = await handler(body.payload);\n if (!outcome.ok) return fail(outcome.error, outcome.status ?? 400);\n return Response.json({\n protocolVersion: PROTOCOL_VERSION,\n sourceKey: definition.key,\n ok: true,\n result: outcome.value,\n });\n }\n\n // Reserved rather than absent: the parent already knows the route, and a\n // 501 tells it \"not yet\" where a 404 would say \"never\".\n if (url.pathname === \"/v1/publish\") return fail(\"not_implemented\", 501);\n return fail(\"not_found\", 404);\n}\n","createdAt",["D",1788808013614],"branchVersion","branchId","1a99f650-ba92-42d1-bb22-1cd93410c30e",{"_32":49,"_34":50,"_36":37,"_38":52,"_41":53,"_43":14,"_44":45,"_25":28},{"_32":49,"_34":50,"_36":37,"_38":51},"sdk/defineSource.ts","01a07d2f-949b-717b-943b-a18a7bcf874e","defineSource.ts","// The author-facing surface: everything an implementer writes, and nothing\n// they don't. A source is one object. serveSource turns it into the protocol.\n//\n// Part of the SDK — see sdk/contract.ts's header for the import rule.\n\nimport type { Item, Result } from \"./contract.ts\";\n\n// Everything the parent forwards about the caller, which is deliberately\n// almost nothing: no device identity, no user id, no presentation. A source\n// gets a timezone offset and the settings that caller chose, and that is the\n// whole input surface.\n//\n// `utcOffsetSeconds: null` means the parent had no offset to forward. It does\n// NOT mean UTC, and treating it as UTC is a bug: it silently shifts every\n// day boundary to Greenwich for callers the parent couldn't resolve. Fall\n// back to a default the source picks.\nexport type ReadContext = { utcOffsetSeconds: number | null };\n\n// A write handler. The SDK has already checked that `payload` is a JSON\n// object; validating its contents is the operation's own job, because only it\n// knows the shape. Return `reject(\"...\")` for bad input rather than throwing.\nexport type WriteHandler = (\n payload: Record,\n) => Promise> | Result;\n\nexport type SourceDefinition = {\n // The protocol `sourceKey`. The parent addresses this source by it and the\n // SDK rejects any request naming a different one.\n key: string;\n\n // Whether items carry meaningful times. Advertised in the descriptor;\n // defaults to true, which is the only shape v1's Item can express.\n temporal?: boolean;\n\n // JSON Schema for `settings`, published in the descriptor so the parent can\n // build a settings UI without knowing what this source is. It is\n // DOCUMENTATION, not enforcement — the SDK does not validate against it.\n // parseSettings is what actually decides.\n settingsSchema: Record;\n\n // The choices a caller can pick from, published alongside the schema — a\n // catalog, a list of channels, whatever this source's settings reference.\n // Called on every descriptor request, so it may hit storage. Omit it for a\n // source whose settings are free-form.\n options?: () => Promise | unknown;\n\n // Raw `settings` in, whatever `read` needs out. This is the ONLY place a\n // source validates caller input, and it must be total: reject anything not\n // recognized, including unknown keys.\n //\n // It may do I/O, and that is a feature — it is where to load a snapshot\n // that both validation and the read itself need (a catalog, say), so the\n // request pays for it once. Whatever it returns is handed to `read`\n // verbatim, so the returned type is free to be richer than the wire\n // settings.\n parseSettings: (\n raw: Record,\n ) => Promise> | Result;\n\n // The source itself. Parsed settings in, items out. Anything it returns is\n // validated against the item contract before it leaves the val, so this can\n // return its natural output and let the SDK be the gate.\n read: (settings: Settings, context: ReadContext) => Promise;\n\n // Named side effects the parent can invoke, if this source has any. The\n // keys become the protocol's `operation` values and the descriptor's\n // advertised write capabilities — declared once, so what a source says it\n // can do cannot drift from what it does.\n writes?: Record;\n};\n\n// Identity function. It exists purely so `Settings` is inferred from\n// parseSettings and checked against read's parameter at the definition site,\n// where the mismatch is legible, instead of at the serveSource call.\nexport function defineSource(\n definition: SourceDefinition,\n): SourceDefinition {\n return definition;\n}\n","// The author-facing surface: everything an implementer writes, and nothing\n// they don't. A source is one object. serveSource turns it into the protocol.\n//\n// Part of the SDK — see sdk/contract.ts's header for the import rule.\n\nimport type { Item, Result } from \"./contract.ts\";\n\n// Everything the parent forwards about the caller, which is deliberately\n// almost nothing: no device identity, no user id, no presentation. A source\n// gets a timezone offset and the settings that caller chose, and that is the\n// whole input surface.\n//\n// `utcOffsetSeconds: null` means the parent had no offset to forward. It does\n// NOT mean UTC, and treating it as UTC is a bug: it silently shifts every\n// day boundary to Greenwich for callers the parent couldn't resolve. Fall\n// back to a default the source picks.\nexport type ReadContext = { utcOffsetSeconds: number | null };\n\n// A write handler. The SDK has already checked that `payload` is a JSON\n// object; validating its contents is the operation's own job, because only it\n// knows the shape. Return `reject(\"...\")` for bad input rather than throwing.\nexport type WriteHandler = (\n payload: Record,\n) => Promise> | Result;\n\nexport type SourceDefinition = {\n // The protocol `sourceKey`. The parent addresses this source by it and the\n // SDK rejects any request naming a different one.\n key: string;\n\n // Whether items carry meaningful times. Advertised in the descriptor;\n // defaults to true, which is the only shape v1's Item can express.\n temporal?: boolean;\n\n // JSON Schema for `settings`, published in the descriptor so the parent can\n // build a settings UI without knowing what this source is. It is\n // DOCUMENTATION, not enforcement — the SDK does not validate against it.\n // parseSettings is what actually decides.\n settingsSchema: Record | (() => Promise> | Record);\n\n // The choices a caller can pick from, published alongside the schema — a\n // catalog, a list of channels, whatever this source's settings reference.\n // Called on every descriptor request, so it may hit storage. Omit it for a\n // source whose settings are free-form.\n options?: () => Promise | unknown;\n\n // Raw `settings` in, whatever `read` needs out. This is the ONLY place a\n // source validates caller input, and it must be total: reject anything not\n // recognized, including unknown keys.\n //\n // It may do I/O, and that is a feature — it is where to load a snapshot\n // that both validation and the read itself need (a catalog, say), so the\n // request pays for it once. Whatever it returns is handed to `read`\n // verbatim, so the returned type is free to be richer than the wire\n // settings.\n parseSettings: (\n raw: Record,\n ) => Promise> | Result;\n\n // The source itself. Parsed settings in, items out. Anything it returns is\n // validated against the item contract before it leaves the val, so this can\n // return its natural output and let the SDK be the gate.\n read: (settings: Settings, context: ReadContext) => Promise;\n\n // Named side effects the parent can invoke, if this source has any. The\n // keys become the protocol's `operation` values and the descriptor's\n // advertised write capabilities — declared once, so what a source says it\n // can do cannot drift from what it does.\n writes?: Record;\n};\n\n// Identity function. It exists purely so `Settings` is inferred from\n// parseSettings and checked against read's parameter at the definition site,\n// where the mismatch is legible, instead of at the serveSource call.\nexport function defineSource(\n definition: SourceDefinition,\n): SourceDefinition {\n return definition;\n}\n",["D",1788808013614],"id","e3ae15b8-4f32-4fb0-8b61-fc05375aa5cf","source-moon",["D",1788806619199],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Full-moon temporal source; no per-device settings","imageUrl","b0a8da26-58e7-4d19-8b5c-eedf487df9a9","pinnedFileId","2f093378-aaec-11f1-932c-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","5a10edca-919b-4a78-babb-71908f69af93","tursoName","e3ae15b84f324fb08b61fc05375aa5cf","tursoHostname","e3ae15b84f324fb08b61fc05375aa5cf-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789501878689],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_110":109,"_117":113},"org",{"_110":109,"_111":-5,"_112":113,"_18":66,"_114":115,"_116":28},"branch",{"_13":99,"_34":100,"_54":45,"_101":55,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":-5,"_107":56,"_108":109},"isOwned",12,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","plusjade","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yVHpab25kTlBTM3M3WmpCa3NMSTd5akVwWksuanBlZyJ9","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_54":55,"_34":56,"_41":239,"_58":-5,"_59":28,"_60":61,"_62":61,"_63":64,"_65":-5,"_18":66,"_67":68,"_69":28,"_70":-5,"_71":-5,"_72":73,"_74":75,"_76":77,"_78":79,"_80":240,"_82":-5,"_83":84,"_85":84,"_86":87,"_88":87,"_89":87,"_90":84,"_91":84,"_92":241,"_94":242,"_96":243,"_98":28},"tree",[193,198,199,200,201],"files",[193,194,195,196,197,198,199,200,201],"counts",{"_183":73,"_184":172,"_185":73,"_186":187,"_188":189},"contents",[140,141,142,143,144],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_54":176,"_34":177,"_32":178,"_147":-5,"_44":45,"_43":179,"_149":28,"_41":180,"_13":73,"_36":181,"_38":-5,"_25":28,"_153":-5,"_29":182},{"_54":169,"_34":170,"_32":171,"_147":-5,"_44":45,"_43":172,"_149":28,"_41":173,"_13":73,"_36":21,"_38":174,"_25":28,"_153":-5,"_29":175},{"_54":162,"_34":163,"_32":164,"_147":-5,"_44":45,"_43":165,"_149":28,"_41":166,"_13":73,"_36":37,"_38":167,"_25":28,"_153":-5,"_29":168},{"_54":155,"_34":156,"_32":157,"_147":-5,"_44":45,"_43":158,"_149":28,"_41":159,"_13":73,"_36":37,"_38":160,"_25":28,"_153":-5,"_29":161},{"_54":145,"_34":146,"_32":68,"_147":-5,"_44":45,"_43":148,"_149":28,"_41":150,"_13":73,"_36":151,"_38":152,"_25":28,"_153":-5,"_29":154},"a4b2cd1a-a93e-4daa-9b48-6a64107afe2c","rpc.ts","parentId",3,"latest",["D",1788806680319],"http","// Deployment authentication around the shared source protocol.\nimport { serveSource } from \"./sdk/serve.ts\";\nimport moon from \"./moonSource.ts\";\nexport default function handler(req: Request): Promise | Response {\n const token = Deno.env.get(\"SOURCE_MOON_V1_TOKEN\");\n if (!token) return Response.json({error:\"RPC token not configured\"},{status:503});\n if (req.headers.get(\"authorization\") !== `Bearer ${token}`) {\n return Response.json({error:\"unauthorized\"},{status:401});\n }\n return serveSource(moon, req);\n}\n","label",[146],"498a3fe5-20a9-4229-9fd4-8ecee492d9d1","moonSource.ts","287c5120-aaec-11f1-bba4-1607ee4eb77e",2,["D",1788806669329],"// Moon storage and source definition. Device settings are always empty.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { accept, reject, record, type Item } from \"./sdk/contract.ts\";\nimport { defineSource } from \"./sdk/defineSource.ts\";\n\n// Preserve the existing UTC-date selection policy and Pacific fallback.\nexport function fromDate(offset: number | null, now = new Date()): string {\n return offset !== null && offset >= -43200 && offset <= 50400\n ? new Date(now.getTime() + offset * 1000).toISOString().slice(0, 10)\n : now.toLocaleDateString(\"en-CA\", { timeZone: \"America/Los_Angeles\" });\n}\n\nexport async function moonItems(dateKey: string): Promise {\n const result = await sqlite.execute({\n sql: \"SELECT date_key, payload FROM full_moons WHERE date_key >= ? ORDER BY date_key LIMIT 1\",\n args: [dateKey],\n });\n const row = result.rows[0];\n if (!row) return [];\n const payload = JSON.parse(String(row.payload));\n return [{\n id: `moon-${row.date_key}`,\n mainText: \"Full Moon\",\n subText: payload.name,\n // A peak instant is not a moonrise or an invitation to look outside.\n caption: \"PEAK\",\n emphasized: false,\n timestamp: Math.floor(Date.parse(payload.peakTime) / 1000),\n }];\n}\n\nexport default defineSource({\n key: \"moon\",\n settingsSchema: { type: \"object\", properties: {}, additionalProperties: false },\n parseSettings: (raw) => Object.keys(raw).length === 0 ? accept(null) : reject(\"invalid_settings\"),\n read: (_, { utcOffsetSeconds }) => moonItems(fromDate(utcOffsetSeconds)),\n writes: {\n // Retains the parent's existing ingest envelope; storage is Moon-only.\n \"cache.put\": async (raw) => {\n const p = raw.payload;\n if (raw.source !== \"moon\" || typeof raw.dateKey !== \"string\"\n || !/^\\d{4}-\\d{2}-\\d{2}$/.test(raw.dateKey)\n || !record(p) || typeof p.name !== \"string\" || !p.name.trim()\n || typeof p.peakTime !== \"string\" || !Number.isFinite(Date.parse(p.peakTime))\n || new Date(p.peakTime).toISOString().slice(0, 10) !== raw.dateKey\n || (p.isBlueMoon !== undefined && typeof p.isBlueMoon !== \"boolean\")) {\n return reject(\"invalid_cache_payload\");\n }\n await sqlite.execute({\n sql: `INSERT INTO full_moons(date_key,payload,fetched_at) VALUES(?,?,?)\n ON CONFLICT(date_key) DO UPDATE SET payload=excluded.payload,fetched_at=excluded.fetched_at`,\n args: [raw.dateKey, JSON.stringify(p), new Date().toISOString()],\n });\n return accept({ source: \"moon\", dateKey: raw.dateKey });\n },\n },\n});\n",[156],"a3fb5785-bd02-4254-90d1-81dbb821d459","check.ts","697fe4ac-aaec-11f1-b85f-1607ee4eb77e",4,["D",1788806778333],"// Moon contract and storage checks; the disposable write is always removed.\nimport handler from \"./rpc.ts\";\nimport { fromDate, moonItems } from \"./moonSource.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nfunction check(ok: unknown, message: string) { if (!ok) throw new Error(message); }\nconst base = {protocolVersion:1,sourceKey:\"moon\"};\nasync function call(path: string, body?: unknown, auth=true) {\n return await handler(new Request(\"https://moon.invalid\"+path,{\n method:body===undefined?\"GET\":\"POST\",\n headers:auth?{authorization:`Bearer ${Deno.env.get(\"SOURCE_MOON_V1_TOKEN\")}`}:{},\n ...(body===undefined?{}:{body:JSON.stringify(body)})\n }));\n}\ncheck((await call(\"/v1/descriptor\",undefined,false)).status===401,\"auth\");\nconst desc=await (await call(\"/v1/descriptor\")).json();\ncheck(desc.temporal && desc.sourceKey===\"moon\" && !(\"options\" in desc),\"descriptor\");\ncheck(JSON.stringify(desc.capabilities.write)==='[\"cache.put\"]',\"writes\");\nfor (const tz of [null,0,-43200,50400]) {\n const r=await call(\"/v1/read\",{...base,settings:{},context:{utcOffsetSeconds:tz}});\n const p=await r.json();check(r.ok&&p.items.length===1&&p.items[0].caption===\"PEAK\",\"read\");\n}\ncheck((await call(\"/v1/read\",{...base,settings:{x:1},context:{utcOffsetSeconds:0}})).status===400,\"settings\");\ncheck((await call(\"/v1/read\",{...base,sourceKey:\"sports\",settings:{},context:{utcOffsetSeconds:0}})).status===404,\"wrong source\");\ncheck((await call(\"/v1/write\",{...base,operation:\"toString\",payload:{}})).status===422,\"unsupported write\");\ncheck((await call(\"/v1/publish\",base)).status===501,\"publish\");\ncheck(fromDate(null,new Date(\"2026-01-04T07:30:00Z\"))===\"2026-01-03\",\"winter fallback\");\ncheck(fromDate(null,new Date(\"2026-07-04T06:30:00Z\"))===\"2026-07-03\",\"summer fallback\");\ncheck(fromDate(50400,new Date(\"2026-01-03T12:00:00Z\"))===\"2026-01-04\",\"positive boundary\");\ncheck((await moonItems(\"2026-05-31\"))[0].subText===\"Blue Moon\",\"blue moon\");\ncheck((await moonItems(\"2027-01-01\")).length===0,\"exhaustion\");\nconst dateKey=\"1900-01-01\";\ntry {\n const payload={source:\"moon\",dateKey,payload:{name:\"Fixture\",peakTime:dateKey+\"T12:00:00Z\",isBlueMoon:false}};\n const written=await call(\"/v1/write\",{...base,operation:\"cache.put\",payload});\n check(written.ok,\"write\");\n const item=(await moonItems(dateKey))[0];\n check(item.id===\"moon-\"+dateKey&&item.timestamp===Date.parse(payload.payload.peakTime)/1000,\"write readback seconds\");\n check((await call(\"/v1/write\",{...base,operation:\"cache.put\",payload:{...payload,source:\"fiba\"}})).status===400,\"foreign write\");\n check((await call(\"/v1/write\",{...base,operation:\"cache.put\",payload:{...payload,dateKey:\"1900-02-30\"}})).status===400,\"bad date\");\n} finally {\n await sqlite.execute({sql:\"DELETE FROM full_moons WHERE date_key=?\",args:[dateKey]});\n}\nconsole.log(\"PASS: Moon auth, descriptor, reads, empty settings, UTC boundaries, exhaustion, writes and cleanup\");\n",[163],"c8273f04-7ed3-4a94-a914-0ead3caef30d","README.md","e885f494-aaec-11f1-8fbf-1607ee4eb77e",5,["D",1788806991510],"# Moon source\n\nFive runtime modules: `rpc.ts`, `moonSource.ts`, and three vendored SDK modules copied unchanged from source-sports main version 11. `check.ts` is a manual Val Town verification script; it removes its disposable write in finally.\n\nThe only table is `full_moons(date_key TEXT PRIMARY KEY, payload TEXT NOT NULL CHECK(json_valid(payload)), fetched_at TEXT NOT NULL)`. It is provisioned at deployment, not during reads. Thirteen 2026 events were copied from the retired sibling. Coverage ends December 24, 2026; seed the next year through authenticated `cache.put`.\n\nSettings are exactly `{}`. Reads return one next event or an empty list. Selection deliberately preserves the former UTC date-key comparison against the client's calendar date, including the America/Los_Angeles fallback for null/out-of-range offsets; it does not change lunar day-boundary policy.\n\nThe parent owns source instance 3, assignments, composition, and presentation. HTTP auth uses SOURCE_MOON_V1_TOKEN. No legacy routes, schedulers, upstream fetches, or cross-val runtime imports.\n",[170],"48a94cd0-30c7-4b50-b94a-fac1902bb55e","sdk","01a07d2f-949b-717b-943b-975b153bd736",1,["D",1788806665372],"directory",[177],"pulls","branches","forks","envVars",{"_190":179,"_192":73},"connections",{"_190":73,"_191":73},"count","unfilledCount","emptyCount",{"_54":176,"_34":177,"_32":178,"_147":-5,"_44":45,"_43":179,"_149":28,"_41":236,"_13":73,"_36":181,"_38":-5,"_25":28,"_153":-5,"_203":237,"_29":238},{"_54":230,"_34":170,"_32":231,"_147":178,"_44":45,"_43":179,"_149":28,"_41":232,"_13":73,"_36":21,"_38":233,"_25":28,"_153":-5,"_203":234,"_29":235},{"_54":223,"_34":224,"_32":225,"_147":178,"_44":45,"_43":179,"_149":28,"_41":226,"_13":73,"_36":37,"_38":227,"_25":28,"_153":-5,"_203":228,"_29":229},{"_54":219,"_34":50,"_32":49,"_147":178,"_44":45,"_43":14,"_149":28,"_41":220,"_13":179,"_36":37,"_38":52,"_25":28,"_153":-5,"_203":221,"_29":222},{"_54":215,"_34":35,"_32":33,"_147":178,"_44":45,"_43":14,"_149":28,"_41":216,"_13":179,"_36":37,"_38":40,"_25":28,"_153":-5,"_203":217,"_29":218},{"_54":169,"_34":170,"_32":171,"_147":-5,"_44":45,"_43":172,"_149":28,"_41":212,"_13":73,"_36":21,"_38":174,"_25":28,"_153":-5,"_203":213,"_29":214},{"_54":162,"_34":163,"_32":164,"_147":-5,"_44":45,"_43":165,"_149":28,"_41":209,"_13":73,"_36":37,"_38":167,"_25":28,"_153":-5,"_203":210,"_29":211},{"_54":155,"_34":156,"_32":157,"_147":-5,"_44":45,"_43":158,"_149":28,"_41":206,"_13":73,"_36":37,"_38":160,"_25":28,"_153":-5,"_203":207,"_29":208},{"_54":145,"_34":146,"_32":68,"_147":-5,"_44":45,"_43":148,"_149":28,"_41":202,"_13":73,"_36":151,"_38":152,"_25":28,"_153":-5,"_203":204,"_29":205},["D",1788806680319],"children",[],[146],["D",1788806669329],[],[156],["D",1788806778333],[],[163],["D",1788806991510],[],[170],"45d002f6-d6cc-457a-b190-a38525c6da30",["D",1788808013614],[],[177,35],"58079353-3ce4-4901-b702-017bd80b1d7e",["D",1788808013614],[],[177,50],"c8ddf9dd-1813-40ba-9434-70b00892e2a3","contract.ts","01a07d2f-949b-717b-943b-9f69fabd2aa1",["D",1788806665372],"// What a source is held to: version 1 of the temporal item contract.\n//\n// This directory is the SDK. It is the half of this val that knows nothing\n// about sports, and the boundary is structural, not stylistic: NOTHING under\n// sdk/ may import anything outside sdk/. tools/sdk-boundary-check.ts fails if\n// that is ever violated, which is what keeps this directory extractable into\n// its own published val without a rewrite. See sdk/README.md before editing.\n\nexport const PROTOCOL_VERSION = 1;\n\n// The one payload shape every source produces, whatever it is a source of.\n// There is no away/home, no score, no sport — a source decides what to *say*\n// and the client renders these six fields blind.\n//\n// `caption: null` is a protocol value, not an absent field: it tells the\n// client to format `timestamp` itself as a local time. A source that wants\n// no caption at all still sends null.\n//\n// `timestamp` is Unix EPOCH SECONDS, not milliseconds. This is the single\n// most common implementation mistake: sending ms decodes on the client as a\n// date ~57,000 years out, and no type-level check catches it because both are\n// numbers. `items()` below cannot catch it either — it can only reject values\n// too large to be a plausible second-precision timestamp.\nexport type Item = {\n id: string;\n mainText: string;\n subText: string;\n caption: string | null;\n emphasized: boolean;\n timestamp: number;\n};\n\nexport function record(value: unknown): value is Record {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n// The gate every source's output passes through before it leaves the val.\n// serveSource applies this automatically, so an implementer cannot ship a\n// malformed item by forgetting to check: a failing read returns 502\n// invalid_source_output from this source rather than failing composition at\n// the parent, where nothing would name which source produced the bad item.\n//\n// `id` must be unique within one response and stable across polls of the same\n// underlying thing; the parent namespaces it per source, so it only has to be\n// unique here.\nexport function items(value: unknown): value is Item[] {\n return Array.isArray(value) && value.every(v => record(v)\n && typeof v.id === \"string\" && v.id.length > 0\n && typeof v.mainText === \"string\" && typeof v.subText === \"string\"\n && (v.caption === null || typeof v.caption === \"string\")\n && typeof v.emphasized === \"boolean\" && typeof v.timestamp === \"number\"\n && Number.isFinite(v.timestamp) && Math.abs(v.timestamp) <= 8640000000000)\n && new Set(value.map(v => v.id)).size === value.length;\n}\n\n// How a source hands a rejection back to the SDK instead of throwing. One\n// type for both settings parsing and write operations, so there is a single\n// failure idiom to learn.\n//\n// `error` becomes the protocol's error code verbatim, so it should be a\n// stable snake_case token the parent can branch on (\"unknown_team\"), not a\n// sentence. `status` defaults to 400 — the codes worth overriding are 404 for\n// a thing that does not exist and 422 for a well-formed request this source\n// will not perform.\n//\n// Returning a rejection is not the same as throwing: a throw is a bug and\n// surfaces as a 500, while a rejection is this source correctly refusing.\nexport type Result =\n | { ok: true; value: T }\n | { ok: false; error: string; status?: number };\n\nexport function accept(value: T): Result {\n return { ok: true, value };\n}\n\nexport function reject(error: string, status = 400): Result {\n return { ok: false, error, status };\n}\n",[],[177,224],"fb4aa5c0-9fa5-4cd1-af73-ae6e9b388954","01a07d2f-949b-717b-943b-9bd342c9de20",["D",1788806665372],"# Source SDK (protocol v1)\n\nA **source** answers one question: *given these settings and this caller's\ntimezone, what are the next few things worth showing?* It returns a flat list\nof items. It does not know who is asking, what else is on the screen, or how\nany of it is rendered.\n\nThis directory is everything that is true of every source. It has **no\ndependencies** — not on npm, not on Val Town's `std`, not on the val around it.\nThree files:\n\n| File | What's in it |\n| --- | --- |\n| `contract.ts` | `Item`, the validator that enforces it, and `accept`/`reject` |\n| `defineSource.ts` | `SourceDefinition` — the whole author-facing surface |\n| `serve.ts` | `serveSource()` — the protocol, as a function of a definition |\n\n## Write a source\n\nOne object, one mount. That is the entire API.\n\n```ts\nimport { accept, reject } from \"./sdk/contract.ts\";\nimport { defineSource } from \"./sdk/defineSource.ts\";\n\nexport default defineSource<{ city: string }>({\n key: \"weather\",\n\n settingsSchema: {\n type: \"object\",\n properties: { city: { type: \"string\" } },\n required: [\"city\"],\n additionalProperties: false,\n },\n\n // Optional: the choices a caller can pick from, published in the descriptor\n // so the parent can build a settings UI without knowing what a city is.\n options: () => listCities(),\n\n // The only place caller input is validated. Must be total — reject anything\n // you don't recognize, unknown keys included. May do I/O.\n parseSettings: (raw) =>\n typeof raw.city === \"string\" && known(raw.city)\n ? accept({ city: raw.city })\n : reject(\"unknown_city\"),\n\n // The source itself. Timestamps are Unix SECONDS.\n read: async ({ city }, { utcOffsetSeconds }) => [{\n id: `weather:${city}:tomorrow`,\n mainText: \"Rain expected\",\n subText: \"Portland\",\n caption: null,\n emphasized: false,\n timestamp: 1788739200,\n }],\n\n // Optional: named side effects. The keys become the protocol's `operation`\n // values and the descriptor's advertised capabilities.\n writes: {\n \"cache.put\": async (payload) =>\n typeof payload.dateKey === \"string\"\n ? accept(await store(payload))\n : reject(\"invalid_cache_payload\"),\n },\n});\n```\n\nThen mount it behind whatever auth the deployment wants:\n\n```ts\n// rpc.ts — an HTTP val\nexport default (req: Request) =>\n authorized(req) ? serveSource(mySource, req) : unauthorized();\n```\n\n`tools/sdk-check.ts` in this val defines a complete fixture source in ~30\nlines and asserts the protocol against it. It is the shortest working example;\ncopying it is a reasonable way to start.\n\n## What the SDK does, so you don't\n\n- Routes `/v1/descriptor`, `/v1/read`, `/v1/write`, `/v1/publish`.\n- Parses and shape-checks the request body; rejects a wrong `protocolVersion`\n or a `sourceKey` that isn't yours.\n- Validates `context.utcOffsetSeconds` before your code sees it.\n- **Validates your output.** Items that break the contract — a duplicate `id`,\n a non-finite timestamp — never leave the val; the request fails 502\n `invalid_source_output` instead of failing composition at the parent, where\n nothing would say which source produced the bad item.\n- Derives `capabilities` from the definition, so what a source advertises\n cannot drift from what it implements.\n- Writes every response envelope, so no route can invent a new one.\n\n## What is yours\n\n- **Validating settings.** `settingsSchema` is published for the parent's UI;\n it is *documentation*, and nothing validates against it. `parseSettings` is\n what decides.\n- **Being total.** Reject unknown keys. A setting you silently ignore is a\n setting a caller thinks is working.\n- **Failing by returning, not throwing.** `reject(\"code\")` is this source\n correctly refusing, and the code reaches the parent verbatim — make it a\n stable snake_case token it can branch on, not a sentence. A throw is a bug\n and surfaces as a 500.\n- **Deciding what `null` means.** `utcOffsetSeconds: null` means the parent had\n no offset to forward. It does **not** mean UTC. Fall back to a zone you pick;\n treating it as 0 quietly moves every day boundary to Greenwich.\n\n## What is nobody's job here\n\nThese belong to the parent, and a source that does them will conflict with it:\n\n- Composition across sources, and namespacing ids (the parent prefixes yours).\n- Presentation: envelopes, eyebrows, section headers, empty-state copy.\n- Device or user identity — a source never learns who is asking.\n- Auth. That is the mount's business, not the source's.\n\n## Three things that go wrong\n\n1. **Milliseconds in `timestamp`.** It is Unix *seconds*. Sending ms decodes on\n the client as a date ~57,000 years out, and nothing catches it: both are\n numbers, and the contract validator can only reject values too large to be a\n plausible timestamp — a real ms value is not. Pin it in a test.\n2. **An `id` that isn't stable.** It must be the same across polls of the same\n underlying thing, and unique within one response. An id containing \"now\"\n makes every poll look like new content.\n3. **Re-reading storage in `read`.** `parseSettings` may do I/O and hands its\n return value to `read` verbatim — load the snapshot there once, and pass it\n along. As a bonus the request is then resolved against one consistent\n snapshot rather than two.\n\n## The one structural rule\n\n**Nothing under `sdk/` may import anything outside `sdk/`.**\n\nThat is what makes this directory liftable into its own published val without a\nrewrite, and it is the kind of rule that decays quietly, so it is enforced\nrather than asked for: `tools/sdk-check.ts` fails if an import escapes the\ndirectory, or if SDK *code* so much as names one of the host val's domain\nconcepts. Run it after touching anything in here.\n\nDomain vocabulary belongs on the other side of the seam — in this val, that is\n`sportsSource.ts` (the definition) and `lib/` (how it gets its data).\n",[],[177,170],["D",1788806665372],[194,195,196,197],[177],["D",1788806619199],["D",1789501878689],{"_110":109,"_117":113},{"_110":109,"_111":-5,"_112":113,"_18":66,"_114":115,"_116":28},{"_13":99,"_34":100,"_54":45,"_101":55,"_102":-5,"_103":-5,"_104":-5,"_105":-5,"_106":-5,"_107":56,"_108":109},"ctx",{"_92":-5,"_137":277,"_278":279,"_280":281,"_282":28,"_283":28,"_284":28,"_285":26,"_286":-5,"_287":-7,"_288":-7,"_289":73,"_290":28,"_291":28,"_292":-5,"_293":28,"_294":28,"_295":28,"_296":-5},"ENV",{"_248":249,"_250":251,"_252":100,"_253":254,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v6