[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_446":447,"_448":449},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_331":-5,"_20":332,"_22":333,"_334":335,"_336":337,"_26":338,"_24":339,"_340":-5,"_341":342,"_343":52,"_344":345,"_346":70,"_347":-5,"_348":-5,"_349":350},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":29,"_30":-5,"_31":32,"_33":34,"_35":-5},"handle","plusjade","name","source-nfl","branchName","source-diagnostics-tabs","version","path","lib/widgetItems.ts","project",{"_36":44,"_13":14,"_38":284,"_50":-5,"_285":52,"_53":54,"_286":54,"_287":288,"_289":-5,"_290":291,"_292":293,"_294":52,"_295":-5,"_296":-5,"_297":32,"_56":57,"_298":299,"_300":301,"_302":303,"_304":-5,"_305":306,"_307":306,"_308":309,"_310":309,"_311":309,"_312":306,"_313":306,"_314":315,"_316":317,"_318":319,"_51":52},"tree",[80,81,82,83,84,85,86,87],"file",{"_36":59,"_13":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_38":71,"_17":32,"_72":73,"_74":75,"_76":52,"_77":-5,"_18":78},"contents",[],"upstream",{"_36":37,"_38":39,"_40":41,"_13":42,"_43":44,"_17":45,"_46":-5,"_47":-5,"_48":49,"_50":-5,"_51":52,"_53":54,"_55":12,"_56":57,"_58":14},"pull","ahead",0,"behind",12,"envVars","id","61c73600-56ab-40cd-815a-59f4fefa923a","createdAt",["D",1788814020921],"updatedAt",["D",1789502858592],"main","projectId","244bcafd-364b-4df7-8955-55f2c3f7da2c",18,"forkedBranchId","forkedBranchVersion","lockfileKey","1789502858692-esm.town_v_plusjade_source-nfl@18-main","deletedAt","isOwned",false,"privacy","public","userHandle","orgId","5a10edca-919b-4a78-babb-71908f69af93","projectName","927fc3a5-b292-4d53-8f5f-7b1f6dcf3797","widgetItems.ts","fileId","01a08469-5acf-77cd-96b4-c5f59c30c85d","parentId","01a08469-5acf-77cd-96b4-cb329e0ee90c","branchId","4ea9b2e9-d5dd-48b9-b3c8-0b7c4041a665","branchVersion",1,"latest",true,["D",1788927892177],"fileType","script","content","\nimport type { Catalog } from \"./catalog.ts\";\nimport { teamLabel } from \"./catalog.ts\";\nimport { type ChannelInfo } from \"./channels.ts\";\nimport { flattenByStartTime, type EnrichedGame, type GamesBySport } from \"./games.ts\";\nimport type { Item } from \"../sdk/contract.ts\";\n\ntype Status = \"scheduled\" | \"live\" | \"final\";\n\nconst STATUS_MAP: Record = {\n scheduled: \"scheduled\",\n pre_game: \"scheduled\",\n postponed: \"scheduled\",\n delayed: \"scheduled\",\n in_game: \"live\",\n in_progress: \"live\",\n live: \"live\",\n halftime: \"live\",\n complete: \"final\",\n final: \"final\",\n closed: \"final\",\n};\n\nfunction normalizeStatus(raw: string | null): Status {\n return (raw && STATUS_MAP[raw]) || \"scheduled\";\n}\n\nfunction captionFor(status: Status): { caption: string | null; emphasized: boolean } {\n if (status === \"live\") return { caption: \"LIVE\", emphasized: true };\n if (status === \"final\") return { caption: \"END\", emphasized: false };\n return { caption: null, emphasized: false };\n}\n\nfunction channelText(channel: ChannelInfo): string {\n if (!channel.label) return \"TBD\";\n if (channel.directv_channel) return `${channel.label} · ${channel.directv_channel}`;\n if (channel.note) return `${channel.label} · ${channel.note}`;\n return channel.label;\n}\n\nfunction widgetItem(game: EnrichedGame, catalog: Catalog): { item: Item; status: Status } {\n const status = normalizeStatus(game.statusRaw);\n const away = teamLabel(game.sport, game.away, catalog) ?? game.away ?? \"\";\n const home = teamLabel(game.sport, game.home, catalog) ?? game.home ?? \"\";\n const emoji = catalog.competitions.find((competition) => competition.code === game.sport)?.emoji;\n return {\n item: {\n id: game.id ?? `${game.sport}:${game.away}-${game.home}:${game.start_time}`,\n mainText: `${emoji ? `${emoji} ` : \"\"}${away} @ ${home}`,\n subText: channelText(game.channel),\n ...captionFor(status),\n timestamp: Math.floor(game.start_time / 1000),\n },\n status,\n };\n}\n\nexport function widgetItems(\n bySport: GamesBySport,\n catalog: Catalog,\n hideCompleted = false,\n): Item[] {\n const built = flattenByStartTime(bySport).map((game) => widgetItem(game, catalog));\n return (hideCompleted ? built.filter((b) => b.status !== \"final\") : built).map((b) => b.item);\n}\n","deleted","label",[79,60],"lib",{"_36":204,"_13":79,"_61":64,"_63":-5,"_65":66,"_67":68,"_69":70,"_38":205,"_17":32,"_72":125,"_74":-5,"_76":52,"_77":-5,"_96":206,"_18":207},{"_36":190,"_13":191,"_61":192,"_63":-5,"_65":66,"_67":68,"_69":70,"_38":193,"_17":32,"_72":125,"_74":-5,"_76":52,"_77":-5,"_96":194,"_18":195},{"_36":144,"_13":145,"_61":146,"_63":-5,"_65":66,"_67":68,"_69":70,"_38":147,"_17":32,"_72":125,"_74":-5,"_76":52,"_77":-5,"_96":148,"_18":149},{"_36":121,"_13":122,"_61":123,"_63":-5,"_65":66,"_67":68,"_69":70,"_38":124,"_17":32,"_72":125,"_74":-5,"_76":52,"_77":-5,"_96":126,"_18":127},{"_36":113,"_13":114,"_61":115,"_63":-5,"_65":66,"_67":116,"_69":70,"_38":117,"_17":32,"_72":73,"_74":118,"_76":52,"_77":-5,"_96":119,"_18":120},{"_36":106,"_13":107,"_61":108,"_63":-5,"_65":66,"_67":93,"_69":70,"_38":109,"_17":32,"_72":73,"_74":110,"_76":52,"_77":-5,"_96":111,"_18":112},{"_36":99,"_13":100,"_61":101,"_63":-5,"_65":66,"_67":68,"_69":70,"_38":102,"_17":32,"_72":73,"_74":103,"_76":52,"_77":-5,"_96":104,"_18":105},{"_36":88,"_13":89,"_61":90,"_63":-5,"_65":66,"_67":91,"_69":70,"_38":92,"_17":93,"_72":94,"_74":95,"_76":52,"_77":-5,"_96":97,"_18":98},"65640576-6953-49c3-b2a3-4af088931b97","rpc.ts","01a08469-5acf-77cd-96b4-fd45f65b5b65",4,["D",1788927904464],2,"http","// Authenticated NFL source protocol and cache coverage diagnostics.\nimport { diagnostics } from \"./diagnostics.ts\";\nimport { serveSource } from \"./sdk/serve.ts\";\nimport nflSource from \"./nflSource.ts\";\nimport { readCatalog } from \"./lib/catalogStore.ts\";\nimport { cachedGamesCoverage } from \"./lib/cachedGames.ts\";\nexport default async function handler(req:Request):Promise {\n const expected=Deno.env.get(\"SOURCE_NFL_V1_TOKEN\");\n if(!expected) return Response.json({error:\"RPC token not configured\"},{status:503});\n if(req.headers.get(\"authorization\") !== `Bearer ${expected}`) return Response.json({error:\"unauthorized\"},{status:401});\n const url = new URL(req.url);\n if (req.method === \"GET\" && url.pathname === \"/diagnostics\") return Response.json(await diagnostics(), { headers: { \"cache-control\": \"no-store\" } });\n if(url.pathname.startsWith(\"/v1/\")) return serveSource(nflSource,req);\n if(req.method===\"GET\"&&url.pathname===\"/health\") return Response.json({ok:true});\n if(req.method===\"GET\"&&url.pathname===\"/catalog\") return Response.json(await readCatalog());\n if(req.method===\"GET\"&&url.pathname===\"/cached-games/coverage\") return Response.json(await cachedGamesCoverage());\n return new Response(\"Not found\",{status:404});\n}\n","children",[],[89],"c7810331-b919-4d15-89db-41fd2b5daa09","nflSource.ts","01a08469-5acf-77cd-96b4-fb9760e1322c",["D",1788927892177],"// NFL settings and operations exported through the shared source SDK.\nimport { readCatalog } from \"./lib/catalogStore.ts\";\nimport { nflItems } from \"./lib/nflFeed.ts\";\nimport { ingestSleeperWindow } from \"./lib/sleeperIngest.ts\";\nimport type { Catalog } from \"./lib/catalog.ts\";\nimport { accept, reject } from \"./sdk/contract.ts\";\nimport { defineSource } from \"./sdk/defineSource.ts\";\n\n// parseSettings' output, not the wire shape. It carries the catalog snapshot\n// it validated against so the read doesn't go back to SQLite for a second\n// copy — and so selection is resolved against exactly the catalog the request\n// was checked against, even if someone edits a team mid-request.\ntype NFLRead = {\n teams: string[];\n intradayFilter: boolean;\n catalog: Catalog;\n};\n\nasync function settingsSchema() {\n const catalog = await readCatalog();\n return {\n type: \"object\",\n properties: {\n teams: {\n type: \"array\", title: \"Teams\", default: [], uniqueItems: true,\n description: \"Choose teams to follow. No selection produces an empty feed.\",\n items: { type: \"string\", oneOf: catalog.competitions.flatMap((competition) =>\n catalog.teams.filter((team) => team.competitionCode === competition.code).map((team) => ({\n const: team.slug, title: team.displayName, \"x-group\": competition.displayName,\n }))) },\n },\n intradayFilter: {\n type: \"boolean\", title: \"Hide a game as soon as it ends\", default: false,\n description: \"When unchecked, keep showing ended games for the rest of the day.\",\n },\n },\n required: [\"teams\"],\n additionalProperties: false,\n };\n}\n\nconst SETTING_KEYS = [\"teams\", \"intradayFilter\"];\n\nexport default defineSource({\n key: \"nfl\",\n temporal: true,\n settingsSchema,\n\n // Hand-written rather than driven off settingsSchema above: the schema is\n // published for the parent's UI, and running a JSON Schema validator here to\n // re-derive checks this function states in four lines would add a dependency\n // to save nothing. They are two audiences, not one mechanism — if they ever\n // drift, this one is the one that decides.\n //\n // `unknown_team` is a distinct code from `invalid_settings` on purpose: the\n // parent can tell \"this caller's saved selection references a team we\n // dropped from the catalog\" from \"this request is malformed\".\n parseSettings: async (raw) => {\n if (\n !Array.isArray(raw.teams) || !raw.teams.every((t) => typeof t === \"string\")\n || new Set(raw.teams).size !== raw.teams.length\n || (raw.intradayFilter !== undefined && typeof raw.intradayFilter !== \"boolean\")\n || Object.keys(raw).some((k) => !SETTING_KEYS.includes(k))\n ) return reject(\"invalid_settings\");\n\n const catalog = await readCatalog();\n const teams = raw.teams as string[];\n if (teams.some((slug) => !catalog.teams.some((team) => team.slug === slug))) {\n return reject(\"unknown_team\");\n }\n\n return accept({ teams, intradayFilter: raw.intradayFilter === true, catalog });\n },\n\n read: ({ teams, intradayFilter, catalog }, { utcOffsetSeconds }) =>\n nflItems({ teams, intradayFilter }, utcOffsetSeconds, catalog),\n\n writes: {\n // Pull the next N days of Sleeper's slate into cached_games. Bounded at 31\n // because each day is a separate upstream request.\n \"sleeper.refresh\": async (payload) => {\n const days = payload.days;\n if (typeof days !== \"number\" || !Number.isInteger(days) || days < 1 || days > 31) {\n return reject(\"invalid_days\");\n }\n return accept(await ingestSleeperWindow(days));\n },\n },\n});\n",[],[100],"2ddd7123-1e4c-4e39-be72-14cfef69b839","diagnostics.ts","69676718-ac06-11f1-807d-1607ee4eb77e",["D",1788927896301],"// Source-owned storage projection; the parent never interprets these tables.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport async function diagnostics() {\n const result = await sqlite.execute(`SELECT COUNT(*) AS total,\n MIN(start_time_ms / 1000.0) AS earliest, MAX(start_time_ms / 1000.0) AS latest,\n MAX(ingested_at) AS updated FROM cached_games WHERE sport = 'nfl'`);\n const row = result.rows[0];\n return {\n diagnosticsVersion: 1, sourceKey: \"nfl\", scope: \"stored\",\n totalItems: Number(row.total),\n earliestTimestamp: row.earliest === null ? null : Number(row.earliest),\n latestTimestamp: row.latest === null ? null : Number(row.latest),\n lastIngestedAt: row.updated === null ? null : String(row.updated),\n };\n}\n",[],[107],"a5261986-de44-4827-89a5-9c6b2dfec4f6","diagnostics-check.ts","bc19db76-ac06-11f1-9e63-1607ee4eb77e",5,["D",1788928035052],"// Read-only verification of the diagnostics mount and existing descriptor.\nimport handler from \"./rpc.ts\";\nconst headers = { authorization: `Bearer ${Deno.env.get(\"SOURCE_NFL_V1_TOKEN\")}` };\nfunction check(ok: unknown, label: string) { if (!ok) throw new Error(label); }\nconst denied = await handler(new Request(\"https://check.invalid/diagnostics\"));\ncheck(denied.status === 401, \"diagnostics requires authentication\");\nconst response = await handler(new Request(\"https://check.invalid/diagnostics\", { headers }));\ncheck(response.status === 200, \"diagnostics status\");\ncheck(response.headers.get(\"cache-control\") === \"no-store\", \"uncached diagnostics\");\nconst value = await response.json();\ncheck(value.diagnosticsVersion === 1 && value.sourceKey === \"nfl\" && value.scope === \"stored\", \"identity\");\ncheck(Number.isSafeInteger(value.totalItems) && value.totalItems >= 0, \"total\");\ncheck(value.totalItems === 0\n ? value.earliestTimestamp === null && value.latestTimestamp === null\n : Number.isFinite(value.earliestTimestamp) && Number.isFinite(value.latestTimestamp)\n && value.earliestTimestamp <= value.latestTimestamp, \"bounds\");\nconst descriptor = await handler(new Request(\"https://check.invalid/v1/descriptor?sourceKey=nfl\", { headers }));\ncheck(descriptor.status === 200, \"descriptor preserved\");\nconsole.log({ source: value.sourceKey, totalItems: value.totalItems,\n earliest: value.earliestTimestamp, latest: value.latestTimestamp, checks: \"passed\" });\n",[],[114],"4a41fe38-897a-4ca8-b2d7-8f89ab408cdf","tools","01a08469-5acf-77cd-96b4-f68d0ee0cd14",["D",1788927892177],"directory",[128,129],[122],{"_36":137,"_13":138,"_61":139,"_63":123,"_65":66,"_67":68,"_69":70,"_38":140,"_17":32,"_72":73,"_74":141,"_76":52,"_77":-5,"_96":142,"_18":143},{"_36":130,"_13":131,"_61":132,"_63":123,"_65":66,"_67":68,"_69":70,"_38":133,"_17":32,"_72":73,"_74":134,"_76":52,"_77":-5,"_96":135,"_18":136},"402fe6f4-de0a-41d8-9b80-67cd0be97176","source-contract-check.ts","01a08469-5acf-77cd-96b4-f1c4c9ba0920",["D",1788927892177],"// NFL contract and deterministic selection checks. No production writes.\nimport handler from \"../rpc.ts\";\nimport { items } from \"../sdk/contract.ts\";\nimport { readCatalog } from \"../lib/catalogStore.ts\";\nimport { pickNextPerTeam } from \"../lib/games.ts\";\nimport { widgetItems } from \"../lib/widgetItems.ts\";\nimport { normalizeGame } from \"../lib/sleeperIngest.ts\";\nimport { dayStartMsAtOffset } from \"../lib/dates.ts\";\nlet checks=0;\nfunction check(ok:unknown,msg:string){if(!ok)throw new Error(msg);checks++;}\nconst token=Deno.env.get(\"SOURCE_NFL_V1_TOKEN\");\nasync function call(path:string,body?:unknown,auth=true){\n const r=await handler(new Request(\"https://fixture.invalid\"+path,{method:body?\"POST\":\"GET\",headers:auth?{authorization:`Bearer ${token}`}:{},body:body?JSON.stringify(body):undefined}));\n return {status:r.status,body:await r.json().catch(()=>null)};\n}\nconst base={protocolVersion:1,sourceKey:\"nfl\",settings:{teams:[\"rams\"],intradayFilter:false},context:{utcOffsetSeconds:0}};\ncheck((await call(\"/v1/descriptor\",undefined,false)).status===401,\"auth\");\nconst d=(await call(\"/v1/descriptor?sourceKey=nfl\")).body;\ncheck(d.sourceKey===\"nfl\"&&d.protocolVersion===1&&d.temporal,\"identity\");\ncheck(d.capabilities.validateSettings&&JSON.stringify(d.capabilities.write)==='[\"sleeper.refresh\"]'&&!d.capabilities.publish,\"capabilities\");\nconst s=d.settingsSchema;\ncheck(s.additionalProperties===false&&s.required.includes(\"teams\"),\"closed settings\");\ncheck(s.properties.teams.uniqueItems&&s.properties.teams.items.type===\"string\"&&s.properties.teams.items.oneOf.length===32,\"32 choices\");\ncheck(s.properties.teams.items.oneOf.every((x:any)=>typeof x.const===\"string\"&&typeof x.title===\"string\"&&x[\"x-group\"]===\"NFL\"),\"choice labels\");\ncheck(s.properties.intradayFilter.type===\"boolean\"&&s.properties.intradayFilter.default===false,\"boolean settings\");\nfor(const offset of [-43200,-25200,0,50400,null]){\n const r=await call(\"/v1/read\",{...base,context:{utcOffsetSeconds:offset}});\n check(r.status===200&&items(r.body.items),\"read \"+offset);\n}\nconst valid=await call(\"/v1/validate-settings\",base);\ncheck(valid.status===200&&Object.keys(valid.body).length===3&&valid.body.ok,\"validation isolation\");\nfor(const settings of [{teams:[\"rams\",\"rams\"]},{teams:[],unexpected:true},{teams:[],intradayFilter:\"true\"},{teams:\"rams\"}]){\n check((await call(\"/v1/validate-settings\",{...base,settings})).body.error===\"invalid_settings\",\"invalid settings\");\n}\nfor(const slug of [\"fever\",\"united-states\",\"trojans\",\"missing\"]){\n check((await call(\"/v1/read\",{...base,settings:{teams:[slug]}})).body.error===\"unknown_team\",\"non NFL \"+slug);\n}\ncheck((await call(\"/v1/read\",{...base,settings:{teams:[]}})).body.items.length===0,\"empty\");\ncheck((await call(\"/v1/read\",{...base,sourceKey:\"sports\"})).status===404,\"old key\");\ncheck((await call(\"/v1/read\",{...base,protocolVersion:2})).status===400,\"protocol\");\ncheck((await call(\"/v1/publish\",base)).status===501,\"publish\");\nfor(const operation of [\"cache.put\",\"toString\",\"sql\"]){\n check((await call(\"/v1/write\",{...base,operation,payload:{}})).status===422,\"write guard\");\n}\nfor(const days of [0,32,1.5,\"1\"]){\n check((await call(\"/v1/write\",{...base,operation:\"sleeper.refresh\",payload:{days}})).body.error===\"invalid_days\",\"days\");\n}\nconst catalog=await readCatalog();\nconst game={sport:\"nfl\",game_id:\"fixture\",start_time:1788739200000,status:\"final\",metadata:{away_team:\"LAR\",home_team:\"SEA\",channel:\"NBC\"}};\nconst picked=pickNextPerTeam([game],[{sport:\"nfl\",code:\"LAR\"},{sport:\"nfl\",code:\"SEA\"}],[\"nfl\"])!;\nconst built=widgetItems(picked.bySport,catalog);\ncheck(built.length===1&&built[0].timestamp===1788739200&&built[0].mainText===\"🏈 Rams @ Seahawks\",\"union and seconds\");\ncheck(built[0].caption===\"END\"&&!built[0].emphasized&&widgetItems(picked.bySport,catalog,true).length===0,\"final filter\");\ncheck(normalizeGame({...game,sport:\"cfb\"})===null,\"ingest league guard\");\ncheck(normalizeGame(game)?.away_code===\"LAR\",\"flat NFL shape\");\ncheck(dayStartMsAtOffset(50400,new Date(\"2026-09-07T20:00:00Z\"))===Date.parse(\"2026-09-07T10:00:00Z\"),\"UTC+14 boundary\");\nconsole.log(\"PASS: \"+checks+\" NFL assertions\");\n",[],[122,131],"fcd0d8c0-9d25-4871-b6b3-78f2015b48a5","sdk-check.ts","01a08469-5acf-77cd-96b4-ee623dfc0657",["D",1788927892177],"// Two things, both about the SDK rather than about sports:\n//\n// 1. The boundary lint. sdk/ must not import anything outside sdk/, and must\n// not mention this val's domain. That is what makes the directory liftable\n// into its own published val, and it is the kind of rule that decays\n// silently under a hurry, so it is checked rather than asked for.\n//\n// 2. A conformance suite run against a FIXTURE source defined right here —\n// no database, no network, no games. If this passes, serveSource\n// implements the protocol for any source, not just this val's.\n//\n// The fixture below doubles as the reference implementation: it is the\n// smallest thing that is a complete source, and copying it is a reasonable way\n// to start a new one.\n//\n// Touches no storage and no production data. Safe to run anywhere.\n\nimport { readFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { accept, type Item, reject } from \"../sdk/contract.ts\";\nimport { defineSource, type SourceDefinition } from \"../sdk/defineSource.ts\";\nimport { serveSource } from \"../sdk/serve.ts\";\n\nfunction check(value: unknown, message: string): asserts value {\n if (!value) throw new Error(message);\n}\n\n// ---------------------------------------------------------------- boundary --\n\nconst SDK_FILES = [\"/sdk/contract.ts\", \"/sdk/defineSource.ts\", \"/sdk/serve.ts\"];\n\n// Words that mean this val in particular. The SDK may not know any of them.\n// (Checked against code only — sdk/README.md uses them in its examples, which\n// is exactly where domain vocabulary belongs.)\nconst DOMAIN_WORDS = [\"sport\", \"team\", \"game\", \"sleeper\", \"fiba\", \"catalog\", \"widget\", \"channel\"];\n\nfor (const path of SDK_FILES) {\n const code = await readFile(path, import.meta.url);\n\n // Every import must be relative and stay inside sdk/. This also rules out\n // remote imports, so the published SDK has zero dependencies — including on\n // Val Town's own std, which is what lets a source run somewhere else.\n for (const [, specifier] of code.matchAll(/(?:^|\\n)\\s*(?:import|export)[^;]*?from\\s+[\"']([^\"']+)[\"']/g)) {\n check(\n specifier.startsWith(\"./\") && !specifier.includes(\"..\"),\n `${path} imports outside sdk/: ${specifier}`,\n );\n }\n\n // Strip comments before the vocabulary scan: prose may say \"a catalog, say\"\n // while explaining what `options` is for. Identifiers may not.\n const source = code.replace(/\\/\\/[^\\n]*/g, \"\").replace(/\\/\\*[\\s\\S]*?\\*\\//g, \"\").toLowerCase();\n for (const word of DOMAIN_WORDS) {\n check(!source.includes(word), `${path} names this val's domain in code: \"${word}\"`);\n }\n}\n\n// ------------------------------------------------------------- conformance --\n\nconst fixture = defineSource<{ count: number }>({\n key: \"fixture\",\n // `temporal` deliberately omitted, to prove the descriptor defaults it.\n settingsSchema: {\n type: \"object\",\n properties: { count: { type: \"integer\" } },\n required: [\"count\"],\n additionalProperties: false,\n },\n parseSettings: (raw) =>\n typeof raw.count === \"number\" && Number.isInteger(raw.count) && raw.count >= 0\n ? accept({ count: raw.count })\n : reject(\"invalid_settings\"),\n read: ({ count }, context) =>\n Promise.resolve(Array.from({ length: count }, (_, i): Item => ({\n id: `fixture-${i}`,\n mainText: `Item ${i}`,\n // Echoed so the assertions below can prove the context reached the\n // source rather than being swallowed by the protocol layer.\n subText: String(context.utcOffsetSeconds),\n caption: null,\n emphasized: false,\n timestamp: 1788739200 + i,\n }))),\n writes: {\n echo: (payload) =>\n typeof payload.value === \"string\"\n ? accept({ echoed: payload.value })\n : reject(\"invalid_value\"),\n },\n});\n\n// A source that breaks the item contract, to prove the SDK catches it rather\n// than passing it to the parent: two items with the same id.\nconst brokenSource = defineSource({\n key: \"broken\",\n settingsSchema: {},\n parseSettings: () => accept(null),\n read: () =>\n Promise.resolve([0, 0].map((): Item => ({\n id: \"duplicate\",\n mainText: \"\",\n subText: \"\",\n caption: null,\n emphasized: false,\n timestamp: 1788739200,\n }))),\n});\n\nconst BASE = { protocolVersion: 1, sourceKey: \"fixture\" };\n// deno-lint-ignore no-explicit-any -- the harness drives two differently-typed\n// definitions through one helper; serveSource's own generic is what's under test.\ntype Definition = SourceDefinition;\n\nfunction call(definition: Definition, path: string, body?: unknown, rawBody?: string) {\n const init: RequestInit = body !== undefined || rawBody !== undefined\n ? { method: \"POST\", body: rawBody ?? JSON.stringify(body) }\n : {};\n return serveSource(definition, new Request(\"https://fixture.invalid\" + path, init));\n}\nasync function status(definition: Definition, path: string, body?: unknown, rawBody?: string) {\n const response = await call(definition, path, body, rawBody);\n return { code: response.status, json: await response.json() };\n}\n\n// Descriptor: derived capabilities, defaulted temporal, absent options.\nconst descriptor = await (await call(fixture, \"/v1/descriptor\")).json();\ncheck(descriptor.sourceKey === \"fixture\" && descriptor.protocolVersion === 1, \"descriptor identity\");\ncheck(descriptor.temporal === true, \"temporal did not default to true\");\ncheck(!(\"options\" in descriptor), \"options published by a source that declares none\");\ncheck(\n JSON.stringify(descriptor.capabilities) === JSON.stringify({ read: true, validateSettings: true, write: [\"echo\"], publish: false }),\n \"capabilities not derived from the definition\",\n);\ncheck((await status(fixture, \"/v1/descriptor?sourceKey=other\")).code === 404, \"wrong key reached the descriptor\");\n\n// Validation does not read, write, or leak parseSettings' internal output.\nlet readCalls = 0;\nconst validationFixture = defineSource({\n key:\"validation\",\n settingsSchema: async () => ({type:\"object\",properties:{},additionalProperties:false}),\n parseSettings: (raw) => Object.keys(raw).length === 0 ? accept({privateContext:\"secret\"}) : reject(\"invalid_settings\"),\n read: async () => { readCalls++; return []; },\n});\nconst valid = await status(validationFixture,\"/v1/validate-settings\",{\n protocolVersion:1,sourceKey:\"validation\",settings:{},\n});\ncheck(valid.code === 200 && valid.json.ok === true && !(\"privateContext\" in valid.json) &&\n Object.keys(valid.json).length === 3 && readCalls === 0, \"validation-only boundary\");\ncheck((await status(validationFixture,\"/v1/validate-settings\",{\n protocolVersion:1,sourceKey:\"validation\",settings:{unknown:true},\n})).code === 400,\"validation rejected unknown settings\");\ncheck((await status(validationFixture,\"/v1/descriptor\")).json.settingsSchema.type === \"object\",\"dynamic schema\");\n\n// Read: the happy path, and that context and settings both arrive intact.\nconst read = await status(fixture, \"/v1/read\", {\n ...BASE,\n settings: { count: 3 },\n context: { utcOffsetSeconds: -25200 },\n});\ncheck(read.code === 200 && read.json.items.length === 3, \"read did not return the source's items\");\ncheck(read.json.items[0].subText === \"-25200\", \"context.utcOffsetSeconds did not reach the source\");\ncheck(read.json.sourceKey === \"fixture\", \"read envelope identity\");\n\nconst nullOffset = await status(fixture, \"/v1/read\", {\n ...BASE,\n settings: { count: 1 },\n context: { utcOffsetSeconds: null },\n});\n// null must arrive AS null. Coercing it to 0 here would silently move every\n// day boundary to UTC for callers the parent couldn't resolve.\ncheck(nullOffset.json.items[0].subText === \"null\", \"null offset was coerced before the source saw it\");\n\n// Read: the ways it is refused.\nconst badSettings = await status(fixture, \"/v1/read\", {\n ...BASE,\n settings: { count: \"x\" },\n context: { utcOffsetSeconds: 0 },\n});\ncheck(badSettings.code === 400 && badSettings.json.error === \"invalid_settings\", \"parseSettings rejection not surfaced\");\n// The offset guard runs BEFORE parseSettings, so an absent utcOffsetSeconds is\n// invalid_timezone and not the source's business. The parent always sends the\n// key (null when it has no value), so this only bites a hand-written request.\ncheck(\n (await status(fixture, \"/v1/read\", { ...BASE, settings: { count: 1 }, context: {} })).json.error === \"invalid_timezone\",\n \"absent offset silently accepted\",\n);\ncheck((await status(fixture, \"/v1/read\", { ...BASE, settings: { count: 1 } })).code === 400, \"missing context accepted\");\ncheck(\n (await status(fixture, \"/v1/read\", { ...BASE, settings: { count: 1 }, context: { utcOffsetSeconds: 86401 } }))\n .json.error === \"invalid_timezone\",\n \"out-of-range offset accepted\",\n);\ncheck((await status(fixture, \"/v1/read\", { ...BASE, protocolVersion: 2 })).json.error === \"unsupported_protocol\", \"protocol version\");\ncheck((await status(fixture, \"/v1/read\", undefined, \"{not json\")).json.error === \"invalid_json\", \"malformed json\");\ncheck((await status(fixture, \"/v1/read\", [])).json.error === \"invalid_body\", \"array body accepted\");\ncheck((await status(fixture, \"/v1/read\", { ...BASE, sourceKey: \"other\" })).code === 404, \"foreign sourceKey\");\n\n// The output guard: a source that breaks the contract fails here, not at the\n// parent.\nconst broken = await status(\n brokenSource,\n \"/v1/read\",\n { protocolVersion: 1, sourceKey: \"broken\", settings: {}, context: { utcOffsetSeconds: 0 } },\n);\ncheck(broken.code === 502 && broken.json.error === \"invalid_source_output\", \"duplicate ids escaped the source\");\n\n// Writes.\nconst echo = await status(fixture, \"/v1/write\", { ...BASE, operation: \"echo\", payload: { value: \"hi\" } });\ncheck(echo.code === 200 && echo.json.ok === true && echo.json.result.echoed === \"hi\", \"write did not run\");\ncheck(\n (await status(fixture, \"/v1/write\", { ...BASE, operation: \"echo\", payload: { value: 1 } })).json.error === \"invalid_value\",\n \"write rejection not surfaced\",\n);\ncheck((await status(fixture, \"/v1/write\", { ...BASE, operation: \"nope\", payload: {} })).code === 422, \"unknown operation\");\n// Object.prototype must not be reachable as an operation.\ncheck((await status(fixture, \"/v1/write\", { ...BASE, operation: \"toString\", payload: {} })).code === 422, \"prototype method invoked as an operation\");\ncheck((await status(fixture, \"/v1/write\", { ...BASE, operation: \"echo\", payload: \"x\" })).json.error === \"invalid_payload\", \"non-object payload accepted\");\ncheck(\n (await status(brokenSource, \"/v1/write\", { protocolVersion: 1, sourceKey: \"broken\", operation: \"echo\", payload: {} })).code === 422,\n \"a source with no writes accepted one\",\n);\n\n// Reserved and unknown routes.\ncheck((await status(fixture, \"/v1/publish\", BASE)).code === 501, \"publish stub\");\ncheck((await status(fixture, \"/v1/nope\", BASE)).json.error === \"not_found\", \"unknown route\");\n\nconsole.log(`PASS: sdk/ imports nothing outside itself and names no domain concept; serveSource conforms for a fixture source with no storage.`);\n",[],[122,138],"d98f5f1d-4fe5-427d-9430-76023714a5f1","sdk","01a08469-5acf-77cd-96b4-eb5e0e78635d",["D",1788927892177],[150,151,152,153,154],[145],{"_36":183,"_13":184,"_61":185,"_63":146,"_65":66,"_67":68,"_69":70,"_38":186,"_17":32,"_72":24,"_74":187,"_76":52,"_77":-5,"_96":188,"_18":189},{"_36":176,"_13":177,"_61":178,"_63":146,"_65":66,"_67":68,"_69":70,"_38":179,"_17":32,"_72":73,"_74":180,"_76":52,"_77":-5,"_96":181,"_18":182},{"_36":169,"_13":170,"_61":171,"_63":146,"_65":66,"_67":68,"_69":70,"_38":172,"_17":32,"_72":73,"_74":173,"_76":52,"_77":-5,"_96":174,"_18":175},{"_36":162,"_13":163,"_61":164,"_63":146,"_65":66,"_67":68,"_69":70,"_38":165,"_17":32,"_72":73,"_74":166,"_76":52,"_77":-5,"_96":167,"_18":168},{"_36":155,"_13":156,"_61":157,"_63":146,"_65":66,"_67":68,"_69":70,"_38":158,"_17":32,"_72":24,"_74":159,"_76":52,"_77":-5,"_96":160,"_18":161},"68c2d3f5-6c2c-4f13-bcbc-e7dfeb9b4983","settings-form.md","01a08469-5acf-77cd-96b4-e633b1c8399c",["D",1788927892177],"# Source settings form contract\n\nThe parent renders source settings from authenticated `GET /v1/descriptor?sourceKey=...`.\nIt checks protocol/source identity, `temporal:true`, and\n`capabilities.validateSettings:true`. The live schema is authoritative for the\nform; stored registry schema snapshots are not used for editing.\n\n## Supported JSON Schema subset\n\nThe root is `{type:\"object\",properties:{...},additionalProperties:false}`.\nAn optional `required` array names declared properties. Each property has a\n`title`, optional `description`, and one of these shapes:\n\n- Boolean: `{type:\"boolean\",title:\"Show alerts\",default:false}`.\n- Multiple choices: `{type:\"array\",title:\"Locations\",default:[],uniqueItems:true,\n items:{type:\"string\",oneOf:[{const:\"west\",title:\"West\",\"x-group\":\"Regions\"}]}}`.\n\n`x-group` is the only UI extension. Choice values are stable strings;\ntitles and optional groups are display text. Declaration order determines form\norder. Defaults apply when displaying a field with no saved value. Empty\n`properties` means no settings. Field names start with a letter and contain\nonly letters, digits, and underscores; prototype-related names are rejected.\n\nUnsupported property types or constraints fail closed, with no save form.\nThis is deliberately not a general JSON Schema renderer. No nested objects,\nfree text, numbers, conditional fields, pagination, or source-supplied HTML/JS.\nAll labels are escaped by React. Legacy descriptor `options` is not consumed:\nthe choice-to-property binding is inside `settingsSchema`.\n\nA source may provide a static schema or an async `settingsSchema()` function.\nSports builds choices from its catalog in one descriptor request. Moon publishes\nthe empty object schema. No source data tables need changing.\n\n## Saving\n\nThe form includes a fingerprint of the rendered fields. The parent reloads the\ndescriptor on POST and rejects a changed fingerprint with 409; it does not\nsilently interpret an old form against new controls or choices.\n\nThe parent decodes only declared fields. Unchecked booleans become false and\nunselected arrays become []; defaults do not override an intentional clearing.\nUnknown fields, duplicate values, and unavailable choices are rejected.\nPreviously saved choices that disappear remain visible as checked unavailable\nvalues, requiring explicit removal.\n\nBefore persisting, the parent sends\n`POST /v1/validate-settings` with\n`{protocolVersion:1,sourceKey,settings}`.\nThe SDK invokes the same `parseSettings` used by reads and returns only\n`{protocolVersion:1,sourceKey,ok:true}`. It does not call `read`, perform writes,\nor expose parsed internal context. Implementers must keep `parseSettings`\nfree of mutation. Validation remains source-authoritative on every feed read,\nsince data/choices may change after a settings save.\n\nSource validation errors retain their stable error code. Unavailability returns\n502, invalid settings 422, and stale forms 409. None changes the assignment.\nSuccessful saves persist the original wire settings, then use the existing\ndevice notification path.\n\n## Scope and remaining coupling\n\nDevice settings routes and rendering have no source-kind dispatch, field-name\nknowledge, or sports catalog import. Another source supporting this profile\nneeds only a registered pointer and its descriptor/validation/read implementation.\n\nPrototype starter-feed defaults and operator ingestion/catalog/coverage adapters\nstill refer to Sports/Moon instance IDs. Removing those is separate from settings\nforms. Immutable releases, descriptor caching, schema migrations, and agent ACLs\nremain deferred.\n",[],[145,156],"29f9863d-8566-4c1a-ae27-241ac9011473","serve.ts","01a08469-5acf-77cd-96b4-e3d4ea5f7173",["D",1788927892177],"// Version 1 of the source protocol, as a function of a SourceDefinition.\n// Everything here is the same for every source, which is exactly why it is\n// here and not in the source: an implementer who writes this by hand writes\n// the envelopes, the status codes and the output guard slightly differently\n// each time, and the parent is the one that finds out.\n//\n// The routes:\n// GET /v1/descriptor what this source is, and what settings it takes\n// POST /v1/read settings + context in, items out\n// POST /v1/write a named side effect from `writes`\n// POST /v1/publish 501; reserved, no source implements it yet\n//\n// Auth is NOT here. It belongs to whatever mounts this (rpc.ts), because the\n// credential is a deployment concern and a source shouldn't have an opinion\n// about how it is fronted.\n//\n// Part of the SDK — see sdk/contract.ts's header for the import rule.\n\nimport { items, PROTOCOL_VERSION, record } from \"./contract.ts\";\nimport type { SourceDefinition } from \"./defineSource.ts\";\n\n// Every response the protocol emits carries protocolVersion, and every\n// failure carries `ok:false` plus a code. Kept as two helpers so no route can\n// invent a third envelope shape.\nfunction fail(error: string, status = 400): Response {\n return Response.json({ protocolVersion: PROTOCOL_VERSION, ok: false, error }, { status });\n}\n\nexport async function serveSource(\n definition: SourceDefinition,\n req: Request,\n): Promise {\n const url = new URL(req.url);\n\n let body: Record = {};\n if (req.method === \"POST\") {\n try {\n const raw = await req.json();\n if (!record(raw)) return fail(\"invalid_body\");\n body = raw;\n } catch {\n return fail(\"invalid_json\");\n }\n if (body.protocolVersion !== PROTOCOL_VERSION) return fail(\"unsupported_protocol\");\n }\n\n // Identity is checked before routing, so a request addressed to the wrong\n // source is a 404 on every path — including /v1/publish. A val that mounts\n // several definitions dispatches on this key.\n const key = req.method === \"GET\" ? url.searchParams.get(\"sourceKey\") ?? definition.key : body.sourceKey;\n if (key !== definition.key) return fail(\"unknown_source\", 404);\n\n if (req.method === \"GET\" && url.pathname === \"/v1/descriptor\") {\n return Response.json({\n protocolVersion: PROTOCOL_VERSION,\n sourceKey: definition.key,\n temporal: definition.temporal ?? true,\n settingsSchema: typeof definition.settingsSchema === \"function\"\n ? await definition.settingsSchema() : definition.settingsSchema,\n ...(definition.options ? { options: await definition.options() } : {}),\n // Derived, never declared: capabilities are read off the definition, so\n // a source cannot advertise a write it doesn't implement or hide one it\n // does.\n capabilities: {\n read: true,\n validateSettings: true,\n write: Object.keys(definition.writes ?? {}),\n publish: false,\n },\n });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/v1/validate-settings\") {\n if (!record(body.settings)) return fail(\"invalid_settings\");\n const parsed = await definition.parseSettings(body.settings);\n if (!parsed.ok) return fail(parsed.error, parsed.status ?? 400);\n // Parsed values can contain private implementation context. Never export them.\n return Response.json({ protocolVersion: PROTOCOL_VERSION, sourceKey: definition.key, ok: true },\n { headers: { \"cache-control\": \"no-store\" } });\n }\n\n if (req.method === \"POST\" && url.pathname === \"/v1/read\") {\n if (!record(body.settings) || !record(body.context)) return fail(\"settings_and_context_required\");\n // The offset is protocol-level, so it is checked here rather than by each\n // source. This is the wide guard — a source's own fallback narrows it\n // further (see ReadContext).\n const tz = body.context.utcOffsetSeconds;\n if (tz !== null && (typeof tz !== \"number\" || !Number.isInteger(tz) || Math.abs(tz) > 86400)) {\n return fail(\"invalid_timezone\");\n }\n const parsed = await definition.parseSettings(body.settings);\n if (!parsed.ok) return fail(parsed.error, parsed.status ?? 400);\n\n const produced = await definition.read(parsed.value, { utcOffsetSeconds: tz as number | null });\n // Guarding the source's own output, not a remote's: a duplicate id or a\n // non-finite timestamp is rejected here rather than at the parent, where\n // the whole composition would fail without naming which source produced\n // it. 502 and not 500 — the source answered, the answer was unusable.\n if (!items(produced)) return fail(\"invalid_source_output\", 502);\n return Response.json(\n { protocolVersion: PROTOCOL_VERSION, sourceKey: definition.key, items: produced },\n { headers: { \"cache-control\": \"no-store\" } },\n );\n }\n\n if (req.method === \"POST\" && url.pathname === \"/v1/write\") {\n if (!record(body.payload)) return fail(\"invalid_payload\");\n // Object.hasOwn, not a plain lookup: `writes` is an object literal, so\n // `operation: \"toString\"` would otherwise resolve to Object.prototype's\n // method and get called with the payload.\n const writes = definition.writes ?? {};\n const operation = typeof body.operation === \"string\" ? body.operation : \"\";\n if (!Object.hasOwn(writes, operation)) return fail(\"unsupported_operation\", 422);\n const handler = writes[operation];\n const outcome = await handler(body.payload);\n if (!outcome.ok) return fail(outcome.error, outcome.status ?? 400);\n return Response.json({\n protocolVersion: PROTOCOL_VERSION,\n sourceKey: definition.key,\n ok: true,\n result: outcome.value,\n });\n }\n\n // Reserved rather than absent: the parent already knows the route, and a\n // 501 tells it \"not yet\" where a 404 would say \"never\".\n if (url.pathname === \"/v1/publish\") return fail(\"not_implemented\", 501);\n return fail(\"not_found\", 404);\n}\n",[],[145,163],"fae335a0-0708-4256-9166-54ba9a89dee4","defineSource.ts","01a08469-5acf-77cd-96b4-ddcb2a8441ab",["D",1788927892177],"// The author-facing surface: everything an implementer writes, and nothing\n// they don't. A source is one object. serveSource turns it into the protocol.\n//\n// Part of the SDK — see sdk/contract.ts's header for the import rule.\n\nimport type { Item, Result } from \"./contract.ts\";\n\n// Everything the parent forwards about the caller, which is deliberately\n// almost nothing: no device identity, no user id, no presentation. A source\n// gets a timezone offset and the settings that caller chose, and that is the\n// whole input surface.\n//\n// `utcOffsetSeconds: null` means the parent had no offset to forward. It does\n// NOT mean UTC, and treating it as UTC is a bug: it silently shifts every\n// day boundary to Greenwich for callers the parent couldn't resolve. Fall\n// back to a default the source picks.\nexport type ReadContext = { utcOffsetSeconds: number | null };\n\n// A write handler. The SDK has already checked that `payload` is a JSON\n// object; validating its contents is the operation's own job, because only it\n// knows the shape. Return `reject(\"...\")` for bad input rather than throwing.\nexport type WriteHandler = (\n payload: Record,\n) => Promise> | Result;\n\nexport type SourceDefinition = {\n // The protocol `sourceKey`. The parent addresses this source by it and the\n // SDK rejects any request naming a different one.\n key: string;\n\n // Whether items carry meaningful times. Advertised in the descriptor;\n // defaults to true, which is the only shape v1's Item can express.\n temporal?: boolean;\n\n // JSON Schema for `settings`, published in the descriptor so the parent can\n // build a settings UI without knowing what this source is. It is\n // DOCUMENTATION, not enforcement — the SDK does not validate against it.\n // parseSettings is what actually decides.\n settingsSchema: Record | (() => Promise> | Record);\n\n // The choices a caller can pick from, published alongside the schema — a\n // catalog, a list of channels, whatever this source's settings reference.\n // Called on every descriptor request, so it may hit storage. Omit it for a\n // source whose settings are free-form.\n options?: () => Promise | unknown;\n\n // Raw `settings` in, whatever `read` needs out. This is the ONLY place a\n // source validates caller input, and it must be total: reject anything not\n // recognized, including unknown keys.\n //\n // It may do I/O, and that is a feature — it is where to load a snapshot\n // that both validation and the read itself need (a catalog, say), so the\n // request pays for it once. Whatever it returns is handed to `read`\n // verbatim, so the returned type is free to be richer than the wire\n // settings.\n parseSettings: (\n raw: Record,\n ) => Promise> | Result;\n\n // The source itself. Parsed settings in, items out. Anything it returns is\n // validated against the item contract before it leaves the val, so this can\n // return its natural output and let the SDK be the gate.\n read: (settings: Settings, context: ReadContext) => Promise;\n\n // Named side effects the parent can invoke, if this source has any. The\n // keys become the protocol's `operation` values and the descriptor's\n // advertised write capabilities — declared once, so what a source says it\n // can do cannot drift from what it does.\n writes?: Record;\n};\n\n// Identity function. It exists purely so `Settings` is inferred from\n// parseSettings and checked against read's parameter at the definition site,\n// where the mismatch is legible, instead of at the serveSource call.\nexport function defineSource(\n definition: SourceDefinition,\n): SourceDefinition {\n return definition;\n}\n",[],[145,170],"7768a940-15cb-4fdd-8a27-4c6ca978eb48","contract.ts","01a08469-5acf-77cd-96b4-db8095be93d3",["D",1788927892177],"// What a source is held to: version 1 of the temporal item contract.\n//\n// This directory is the SDK. It is the half of this val that knows nothing\n// about sports, and the boundary is structural, not stylistic: NOTHING under\n// sdk/ may import anything outside sdk/. tools/sdk-boundary-check.ts fails if\n// that is ever violated, which is what keeps this directory extractable into\n// its own published val without a rewrite. See sdk/README.md before editing.\n\nexport const PROTOCOL_VERSION = 1;\n\n// The one payload shape every source produces, whatever it is a source of.\n// There is no away/home, no score, no sport — a source decides what to *say*\n// and the client renders these six fields blind.\n//\n// `caption: null` is a protocol value, not an absent field: it tells the\n// client to format `timestamp` itself as a local time. A source that wants\n// no caption at all still sends null.\n//\n// `timestamp` is Unix EPOCH SECONDS, not milliseconds. This is the single\n// most common implementation mistake: sending ms decodes on the client as a\n// date ~57,000 years out, and no type-level check catches it because both are\n// numbers. `items()` below cannot catch it either — it can only reject values\n// too large to be a plausible second-precision timestamp.\nexport type Item = {\n id: string;\n mainText: string;\n subText: string;\n caption: string | null;\n emphasized: boolean;\n timestamp: number;\n};\n\nexport function record(value: unknown): value is Record {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\n// The gate every source's output passes through before it leaves the val.\n// serveSource applies this automatically, so an implementer cannot ship a\n// malformed item by forgetting to check: a failing read returns 502\n// invalid_source_output from this source rather than failing composition at\n// the parent, where nothing would name which source produced the bad item.\n//\n// `id` must be unique within one response and stable across polls of the same\n// underlying thing; the parent namespaces it per source, so it only has to be\n// unique here.\nexport function items(value: unknown): value is Item[] {\n return Array.isArray(value) && value.every(v => record(v)\n && typeof v.id === \"string\" && v.id.length > 0\n && typeof v.mainText === \"string\" && typeof v.subText === \"string\"\n && (v.caption === null || typeof v.caption === \"string\")\n && typeof v.emphasized === \"boolean\" && typeof v.timestamp === \"number\"\n && Number.isFinite(v.timestamp) && Math.abs(v.timestamp) <= 8640000000000)\n && new Set(value.map(v => v.id)).size === value.length;\n}\n\n// How a source hands a rejection back to the SDK instead of throwing. One\n// type for both settings parsing and write operations, so there is a single\n// failure idiom to learn.\n//\n// `error` becomes the protocol's error code verbatim, so it should be a\n// stable snake_case token the parent can branch on (\"unknown_team\"), not a\n// sentence. `status` defaults to 400 — the codes worth overriding are 404 for\n// a thing that does not exist and 422 for a well-formed request this source\n// will not perform.\n//\n// Returning a rejection is not the same as throwing: a throw is a bug and\n// surfaces as a 500, while a rejection is this source correctly refusing.\nexport type Result =\n | { ok: true; value: T }\n | { ok: false; error: string; status?: number };\n\nexport function accept(value: T): Result {\n return { ok: true, value };\n}\n\nexport function reject(error: string, status = 400): Result {\n return { ok: false, error, status };\n}\n",[],[145,177],"29be23ef-756e-429b-9a0e-62b6dec198e4","README.md","01a08469-5acf-77cd-96b4-d56f20bb0488",["D",1788927892177],"# Source SDK (protocol v1)\n\nA **source** answers one question: *given these settings and this caller's\ntimezone, what are the next few things worth showing?* It returns a flat list\nof items. It does not know who is asking, what else is on the screen, or how\nany of it is rendered.\n\nThis directory is everything that is true of every source. It has **no\ndependencies** — not on npm, not on Val Town's `std`, not on the val around it.\nThree files:\n\n| File | What's in it |\n| --- | --- |\n| `contract.ts` | `Item`, the validator that enforces it, and `accept`/`reject` |\n| `defineSource.ts` | `SourceDefinition` — the whole author-facing surface |\n| `serve.ts` | `serveSource()` — the protocol, as a function of a definition |\n\n## Write a source\n\nFor the parent’s supported browser forms, see [the settings form contract](settings-form.md).\nThe protocol permits broader schemas; the parent deliberately rejects forms outside\nits small supported subset. The example below illustrates the broader protocol,\nnot a browser-renderable form.\n\nOne object, one mount. That is the entire API.\n\n```ts\nimport { accept, reject } from \"./sdk/contract.ts\";\nimport { defineSource } from \"./sdk/defineSource.ts\";\n\nexport default defineSource<{ city: string }>({\n key: \"weather\",\n\n settingsSchema: {\n type: \"object\",\n properties: { city: { type: \"string\" } },\n required: [\"city\"],\n additionalProperties: false,\n },\n\n // Optional legacy metadata. The parent does not render this; browser choices\n // must be bound to properties in settingsSchema (see settings-form.md).\n options: () => listCities(),\n\n // The only place caller input is validated. Must be total — reject anything\n // you don't recognize, unknown keys included. May do I/O.\n parseSettings: (raw) =>\n typeof raw.city === \"string\" && known(raw.city)\n ? accept({ city: raw.city })\n : reject(\"unknown_city\"),\n\n // The source itself. Timestamps are Unix SECONDS.\n read: async ({ city }, { utcOffsetSeconds }) => [{\n id: `weather:${city}:tomorrow`,\n mainText: \"Rain expected\",\n subText: \"Portland\",\n caption: null,\n emphasized: false,\n timestamp: 1788739200,\n }],\n\n // Optional: named side effects. The keys become the protocol's `operation`\n // values and the descriptor's advertised capabilities.\n writes: {\n \"cache.put\": async (payload) =>\n typeof payload.dateKey === \"string\"\n ? accept(await store(payload))\n : reject(\"invalid_cache_payload\"),\n },\n});\n```\n\nThen mount it behind whatever auth the deployment wants:\n\n```ts\n// rpc.ts — an HTTP val\nexport default (req: Request) =>\n authorized(req) ? serveSource(mySource, req) : unauthorized();\n```\n\n`tools/sdk-check.ts` in this val defines a complete fixture source in ~30\nlines and asserts the protocol against it. It is the shortest working example;\ncopying it is a reasonable way to start.\n\n## What the SDK does, so you don't\n\n- Routes `/v1/descriptor`, `/v1/validate-settings`, `/v1/read`, `/v1/write`, `/v1/publish`.\n- Validation-only requests call `parseSettings` without calling `read` or returning\n the parsed internal value. Keep `parseSettings` free of mutations.\n- `settingsSchema` may be an object or an async function returning one.\n- Parses and shape-checks the request body; rejects a wrong `protocolVersion`\n or a `sourceKey` that isn't yours.\n- Validates `context.utcOffsetSeconds` before your code sees it.\n- **Validates your output.** Items that break the contract — a duplicate `id`,\n a non-finite timestamp — never leave the val; the request fails 502\n `invalid_source_output` instead of failing composition at the parent, where\n nothing would say which source produced the bad item.\n- Derives `capabilities` from the definition, so what a source advertises\n cannot drift from what it implements.\n- Writes every response envelope, so no route can invent a new one.\n\n## What is yours\n\n- **Validating settings.** `settingsSchema` is published for the parent's UI;\n the SDK does not enforce it. The parent checks its supported form subset and\n posted values, then asks `parseSettings` to decide before saving. Reads also\n call `parseSettings` independently.\n- **Being total.** Reject unknown keys. A setting you silently ignore is a\n setting a caller thinks is working.\n- **Failing by returning, not throwing.** `reject(\"code\")` is this source\n correctly refusing, and the code reaches the parent verbatim — make it a\n stable snake_case token it can branch on, not a sentence. A throw is a bug\n and surfaces as a 500.\n- **Deciding what `null` means.** `utcOffsetSeconds: null` means the parent had\n no offset to forward. It does **not** mean UTC. Fall back to a zone you pick;\n treating it as 0 quietly moves every day boundary to Greenwich.\n\n## What is nobody's job here\n\nThese belong to the parent, and a source that does them will conflict with it:\n\n- Composition across sources, and namespacing ids (the parent prefixes yours).\n- Presentation: envelopes, eyebrows, section headers, empty-state copy.\n- Device or user identity — a source never learns who is asking.\n- Auth. That is the mount's business, not the source's.\n\n## Three things that go wrong\n\n1. **Milliseconds in `timestamp`.** It is Unix *seconds*. Sending ms decodes on\n the client as a date ~57,000 years out, and nothing catches it: both are\n numbers, and the contract validator can only reject values too large to be a\n plausible timestamp — a real ms value is not. Pin it in a test.\n2. **An `id` that isn't stable.** It must be the same across polls of the same\n underlying thing, and unique within one response. An id containing \"now\"\n makes every poll look like new content.\n3. **Re-reading storage in `read`.** `parseSettings` may do I/O and hands its\n return value to `read` verbatim — load the snapshot there once, and pass it\n along. As a bonus the request is then resolved against one consistent\n snapshot rather than two.\n\n## The one structural rule\n\n**Nothing under `sdk/` may import anything outside `sdk/`.**\n\nThat is what makes this directory liftable into its own published val without a\nrewrite, and it is the kind of rule that decays quietly, so it is enforced\nrather than asked for: `tools/sdk-check.ts` fails if an import escapes the\ndirectory, or if SDK *code* so much as names one of the host val's domain\nconcepts. Run it after touching anything in here.\n\nDomain vocabulary belongs on the other side of the seam — in this val, that is\n`sportsSource.ts` (the definition) and `lib/` (how it gets its data).\n",[],[145,184],"bcb841aa-fa69-49eb-ba98-eb10c3aac391","scripts","01a08469-5acf-77cd-96b4-d3da1dc8cd6f",["D",1788927892177],[196],[191],{"_36":197,"_13":198,"_61":199,"_63":192,"_65":66,"_67":68,"_69":70,"_38":200,"_17":32,"_72":73,"_74":201,"_76":52,"_77":-5,"_96":202,"_18":203},"f6e269af-8215-48e9-b529-229134c045e2","ingestSeason.ts","01a08469-5acf-77cd-96b4-cdb48b24df99",["D",1788927892177],"// One-off backfill: pull a whole season's slate into cached_games.\n//\n// The `sleeper.refresh` write is a rolling window anchored on today and capped\n// at 31 days, which is right for keeping the cache warm and useless for\n// reaching Week 18. This names the range instead. Run it by hand; it is not on\n// any schedule and nothing imports it.\n//\n// Bounds are Eastern slate dates — the bucket Sleeper's /scores keys on.\nimport { datesBetween, ingestDates } from \"../lib/sleeperIngest.ts\";\n\nconst SEASON_START = \"2026-09-01\";\nconst SEASON_END = \"2027-01-12\"; // through the end of Week 18 (Jan 9-10)\n\nconst dates = datesBetween(SEASON_START, SEASON_END);\nconst report = await ingestDates(dates);\n\nconsole.log(JSON.stringify({\n range: [SEASON_START, SEASON_END],\n days: dates.length,\n fetched: report.fetched,\n stored: report.stored,\n skipped: report.skipped,\n bySport: report.bySport,\n}, null, 2));\n",[],[191,198],"b4415fb6-969d-4373-bc84-8515128a3588",["D",1788927892177],[208,209,210,211,212,213,214,215,216,217],[79],{"_36":277,"_13":278,"_61":279,"_63":64,"_65":66,"_67":68,"_69":70,"_38":280,"_17":32,"_72":73,"_74":281,"_76":52,"_77":-5,"_96":282,"_18":283},{"_36":270,"_13":271,"_61":272,"_63":64,"_65":66,"_67":68,"_69":70,"_38":273,"_17":32,"_72":73,"_74":274,"_76":52,"_77":-5,"_96":275,"_18":276},{"_36":263,"_13":264,"_61":265,"_63":64,"_65":66,"_67":68,"_69":70,"_38":266,"_17":32,"_72":73,"_74":267,"_76":52,"_77":-5,"_96":268,"_18":269},{"_36":256,"_13":257,"_61":258,"_63":64,"_65":66,"_67":68,"_69":70,"_38":259,"_17":32,"_72":73,"_74":260,"_76":52,"_77":-5,"_96":261,"_18":262},{"_36":249,"_13":250,"_61":251,"_63":64,"_65":66,"_67":68,"_69":70,"_38":252,"_17":32,"_72":73,"_74":253,"_76":52,"_77":-5,"_96":254,"_18":255},{"_36":242,"_13":243,"_61":244,"_63":64,"_65":66,"_67":68,"_69":70,"_38":245,"_17":32,"_72":73,"_74":246,"_76":52,"_77":-5,"_96":247,"_18":248},{"_36":235,"_13":236,"_61":237,"_63":64,"_65":66,"_67":68,"_69":70,"_38":238,"_17":32,"_72":73,"_74":239,"_76":52,"_77":-5,"_96":240,"_18":241},{"_36":228,"_13":229,"_61":230,"_63":64,"_65":66,"_67":68,"_69":70,"_38":231,"_17":32,"_72":73,"_74":232,"_76":52,"_77":-5,"_96":233,"_18":234},{"_36":221,"_13":222,"_61":223,"_63":64,"_65":66,"_67":68,"_69":70,"_38":224,"_17":32,"_72":73,"_74":225,"_76":52,"_77":-5,"_96":226,"_18":227},{"_36":59,"_13":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_38":218,"_17":32,"_72":73,"_74":75,"_76":52,"_77":-5,"_96":219,"_18":220},["D",1788927892177],[],[79,60],"ce7ecb02-e83f-4d4f-9eac-1cc739c7b3ff","sleeperIngest.ts","01a08469-5acf-77cd-96b4-c2a3f2198640",["D",1788927892177],"\nimport { readCatalog } from \"./catalogStore.ts\";\nimport { saveCachedGames, type CachedGameRow } from \"./cachedGames.ts\";\nimport { addDays, todaySlateDate } from \"./dates.ts\";\nimport { teamCode, type Game } from \"./games.ts\";\nimport { fetchScores } from \"./sleeper.ts\";\n\nexport type IngestReport = {\n dates: string[];\n fetched: number;\n stored: number;\n skipped: number;\n bySport: Record;\n};\n\n// Sleeper's /scores is keyed by a single Eastern day, so a season-length\n// ingest is one upstream request per date. Fired in bounded waves rather than\n// all at once: 130 simultaneous fetches is a good way to get rate-limited by\n// a public endpoint that owes us nothing.\nconst FETCH_CONCURRENCY = 12;\n\nexport function normalizeGame(game: Game): CachedGameRow | null {\n const gameId = game.game_id;\n const id = typeof gameId === \"string\" || typeof gameId === \"number\" ? String(gameId) : null;\n const startTimeMs = typeof game.start_time === \"number\" ? game.start_time : NaN;\n if (!id || game.sport !== \"nfl\" || !Number.isFinite(startTimeMs) || startTimeMs <= 0) return null;\n\n return {\n sport: game.sport,\n game_id: id,\n away_code: teamCode(game.metadata?.away_team),\n home_code: teamCode(game.metadata?.home_team),\n start_time_ms: startTimeMs,\n status: typeof game.status === \"string\" ? game.status : null,\n channel: game.metadata?.channel ?? null,\n };\n}\n\n// Inclusive on both ends. Both bounds are Eastern slate dates (YYYY-MM-DD),\n// the same bucket Sleeper keys on — not client days.\nexport function datesBetween(from: string, to: string): string[] {\n const dates: string[] = [];\n for (let date = from; date <= to; date = addDays(date, 1)) dates.push(date);\n return dates;\n}\n\n// The ingest itself, over an explicit list of slate dates. Split out from\n// ingestSleeperWindow so a backfill can name a season's date range directly\n// instead of being expressed as an offset from today — the rolling window is\n// one caller of this, not the only shape an ingest comes in.\nexport async function ingestDates(dates: string[]): Promise {\n const catalog = await readCatalog();\n const competitions = catalog.competitions.filter((competition) => competition.adapter === \"sleeper\");\n const codes = new Map(competitions.map((competition) => [competition.providerKey, competition.code]));\n if (codes.size === 0) return { dates, fetched: 0, stored: 0, skipped: 0, bySport: {} };\n\n const providerKeys = [...codes.keys()];\n const fetched: Game[] = [];\n for (let i = 0; i < dates.length; i += FETCH_CONCURRENCY) {\n const wave = await Promise.all(\n dates.slice(i, i + FETCH_CONCURRENCY).map((date) => fetchScores(date, providerKeys)),\n );\n for (const games of wave) fetched.push(...games);\n }\n\n const rows: CachedGameRow[] = [];\n let skipped = 0;\n for (const game of fetched) {\n const sport = codes.get(game.sport);\n const row = sport ? normalizeGame({ ...game, sport }) : null;\n if (row) rows.push(row);\n else skipped++;\n }\n\n const byKey = new Map();\n for (const row of rows) byKey.set(`${row.sport}:${row.game_id}`, row);\n const deduped = [...byKey.values()];\n\n const stored = await saveCachedGames(deduped);\n\n const bySport: Record = {};\n for (const row of deduped) bySport[row.sport] = (bySport[row.sport] ?? 0) + 1;\n\n return { dates, fetched: fetched.length, stored, skipped, bySport };\n}\n\nexport async function ingestSleeperWindow(\n days = 7,\n now = new Date(),\n backfillDays = 1,\n): Promise {\n const start = addDays(todaySlateDate(now), -backfillDays);\n return ingestDates(\n Array.from({ length: days + backfillDays + 1 }, (_, i) => addDays(start, i)),\n );\n}\n",[],[79,222],"a7c4c7d2-24df-44b2-b98c-d19cd152569b","sleeper.ts","01a08469-5acf-77cd-96b4-bc518b770f98",["D",1788927892177],"// Sleeper's outbound I/O. Everything else under lib/ is pure or SQLite,\n// which is what lets tests/ run the whole slate pipeline against captured\n// fixtures with no network — this file is the seam they stop at, and the\n// deployed endpoint is what covers it (see docs/HANDOFF.md).\n//\n// No longer on the request path. Until cached_games arrived this was called\n// live, once per date in the scan window, on every widget request; it is now\n// reached only from lib/sleeperIngest.ts. That is the whole point of the\n// move — a request answers from an index instead of from N third-party\n// round trips whose cost is what forced the window to be narrow.\n\nimport { type Game } from \"./games.ts\";\n\nexport async function fetchScores(date: string, sports: string[]): Promise {\n const url = new URL(\"https://api.sleeper.app/scores\");\n for (const sport of sports) url.searchParams.append(\"sports[]\", sport);\n url.searchParams.set(\"date\", date);\n\n const res = await fetch(url);\n if (!res.ok) throw new Error(`Sleeper /scores returned ${res.status}`);\n return (await res.json()) ?? [];\n}\n",[],[79,229],"227a0754-2054-47df-8d65-c276f884e74d","nflFeed.ts","01a08469-5acf-77cd-96b4-b90d41a679e2",["D",1788927892177],"// Each selected NFL team's next cached game, unioned into temporal items.\nimport type { Catalog } from \"./catalog.ts\";\nimport { nextGamesForTeams } from \"./cachedGames.ts\";\nimport { clientOffsetSeconds, dayStartMsAtOffset } from \"./dates.ts\";\nimport { pickNextPerTeam } from \"./games.ts\";\nimport { widgetItems } from \"./widgetItems.ts\";\n\nexport async function nflItems(\n settings: { teams: string[]; intradayFilter: boolean },\n utcOffsetSeconds: number | null,\n catalog: Catalog,\n) {\n const teams = settings.teams.map((slug) => ({\n sport: \"nfl\", code: catalog.teams.find((team) => team.slug === slug)!.providerCode,\n }));\n const fromMs = dayStartMsAtOffset(clientOffsetSeconds(utcOffsetSeconds));\n const candidates = await nextGamesForTeams(teams, fromMs);\n const picked = pickNextPerTeam(candidates, teams, [\"nfl\"]);\n return widgetItems(picked?.bySport ?? [], catalog, settings.intradayFilter);\n}\n",[],[79,236],"6b695958-671e-4ef0-83eb-039e165a7802","games.ts","01a08469-5acf-77cd-96b4-b756e996cc36",["D",1788927892177],"\nimport { type TeamRef } from \"./catalog.ts\";\nimport { channelInfo, type ChannelInfo } from \"./channels.ts\";\n\nexport function teamCode(value: unknown): string | null {\n return typeof value === \"string\" ? value : null;\n}\n\nexport type Game = {\n sport: string;\n start_time: number;\n status?: unknown;\n game_id?: unknown;\n metadata: {\n away_team?: unknown;\n home_team?: unknown;\n channel?: string | null;\n };\n};\n\nexport type EnrichedGame = Game & {\n away: string | null;\n home: string | null;\n channel: ChannelInfo;\n id: string | null;\n statusRaw: string | null;\n};\n\nexport type GamesBySport = { sport: string; games: EnrichedGame[] }[];\n\nfunction enrichGames(games: Game[]): EnrichedGame[] {\n return (games ?? []).map((game) => ({\n ...game,\n away: teamCode(game.metadata?.away_team),\n home: teamCode(game.metadata?.home_team),\n channel: channelInfo(game.metadata?.channel),\n id: typeof game.game_id === \"string\" || typeof game.game_id === \"number\" ? String(game.game_id) : null,\n statusRaw: typeof game.status === \"string\" ? game.status : null,\n }));\n}\n\nfunction filterByTeams(enriched: EnrichedGame[], teams: TeamRef[]): EnrichedGame[] {\n if (!teams.length) return enriched;\n return enriched.filter((game) =>\n teams.some((t) => t.sport === game.sport && (game.away === t.code || game.home === t.code)),\n );\n}\n\nfunction groupBySport(enriched: EnrichedGame[], sports: string[]): GamesBySport {\n const bySport = Object.groupBy(enriched, (g) => g.sport) as Record;\n return sports\n .filter((sport) => bySport[sport]?.length)\n .map((sport) => ({ sport, games: bySport[sport].toSorted((a, b) => a.start_time - b.start_time) }));\n}\n\nexport function flattenByStartTime(bySport: GamesBySport): EnrichedGame[] {\n return bySport.flatMap((group) => group.games).toSorted((a, b) => a.start_time - b.start_time);\n}\n\nexport function pickNextPerTeam(\n candidates: Game[],\n teams: TeamRef[],\n sports: string[],\n): { earliestStartMs: number; bySport: GamesBySport } | null {\n if (!teams.length) return null;\n\n const enriched = enrichGames(candidates).toSorted((a, b) => a.start_time - b.start_time);\n\n const matched: EnrichedGame[] = [];\n for (const team of teams) {\n const next = enriched.find((game) => filterByTeams([game], [team]).length > 0);\n if (next) matched.push(next);\n }\n if (!matched.length) return null;\n\n const seen = new Set();\n const deduped = matched.filter((g) => {\n const key = g.id ?? `${g.sport}:${g.away}-${g.home}:${g.start_time}`;\n if (seen.has(key)) return false;\n seen.add(key);\n return true;\n });\n\n return {\n earliestStartMs: Math.min(...deduped.map((g) => g.start_time)),\n bySport: groupBySport(deduped, sports),\n };\n}\n",[],[79,243],"bd2e12cb-7c2f-45ef-8378-b6c77c810bdf","dates.ts","01a08469-5acf-77cd-96b4-b3aa92706be2",["D",1788927892177],"// Pure date math for the sports slate. No formatting of games, no I/O —\n// every function here takes an explicit `now`, which is what lets tests pin\n// behaviour without freezing the clock.\n//\n// Two halves that must not be confused, which is why they never share a\n// function: Sleeper's ingest half speaks IANA zone names (DST needs a real\n// zone), and the client-facing half speaks offset seconds that already have\n// DST folded in by iOS.\n\n// Sleeper buckets /scores by Eastern day, not UTC. This is a server-side\n// fact about Sleeper, never client-supplied.\nconst SLEEPER_TIME_ZONE = \"America/New_York\";\n\n// The client's timezone when the parent has no offset to pass on. Resolved\n// to a live, DST-correct offset via offsetSecondsForZone rather than being\n// stored as a constant number of seconds, so it does not go stale twice a\n// year.\nconst DEFAULT_CLIENT_TIME_ZONE = \"America/Los_Angeles\";\n\n// Eastern's calendar date for `now` — the bucket Sleeper's /scores keys on.\n// Anchored off real UTC \"now\", not any app-local notion of \"today\". en-CA\n// gives YYYY-MM-DD directly, sorted the way ISO date math wants it.\n//\n// This is Sleeper's half of the pipeline, and it takes an IANA zone name;\n// the client's half is dateAtOffset below, which takes offset seconds. Kept\n// as separate functions on purpose so the two kinds of timezone value can't\n// be swapped for each other by mistake.\nexport function todaySlateDate(now = new Date()): string {\n return now.toLocaleDateString(\"en-CA\", { timeZone: SLEEPER_TIME_ZONE });\n}\n\nexport function addDays(isoDate: string, days: number): string {\n const [y, m, d] = isoDate.split(\"-\").map(Number);\n const date = new Date(Date.UTC(y, m - 1, d));\n date.setUTCDate(date.getUTCDate() + days);\n return date.toISOString().slice(0, 10);\n}\n\n// The calendar date `now` falls on at a fixed UTC offset — the client-offset\n// counterpart to todaySlateDate's IANA version. No DST table lookup, because\n// the offset it's given has already had DST folded into it (by the iOS\n// client, or by offsetSecondsForZone's live Intl lookup for the fallback\n// case), so adding seconds is all that's left to do.\nexport function dateAtOffset(offsetSeconds: number, now = new Date()): string {\n return new Date(now.getTime() + offsetSeconds * 1000).toISOString().slice(0, 10);\n}\n\n// The lower bound on candidate games, as an absolute instant: UTC midnight\n// of the client's current calendar day.\n//\n// The bound is the day's START, not `now`, and that is deliberate — it is\n// what implements the \"keep showing a game for the rest of the day once it\n// ends\" assignment setting. A game that finished at noon stays a candidate\n// until the client's day rolls over, and `intradayFilter` is the opt-out.\n//\n// There is no `day=today|tomorrow|next` term any more. The source protocol\n// has no such parameter: every read means \"from the start of the client's\n// today\", which is what all three terms resolved to on this path anyway\n// (`tomorrow` was the only distinct offset, and nothing ever sent it).\nexport function dayStartMsAtOffset(offsetSeconds: number, now = new Date()): number {\n const localDate = dateAtOffset(offsetSeconds, now);\n return Date.parse(`${localDate}T00:00:00.000Z`) - offsetSeconds * 1000;\n}\n\n// The live GMT offset for an IANA zone at `now`, via Intl's own tables — so\n// the fallback path stays DST-correct without this file carrying a DST table\n// of its own. \"longOffset\" is the Intl.DateTimeFormat mode that always\n// renders as \"GMT±HH:MM\", never a zone abbreviation, which is what makes it\n// parseable here.\nfunction offsetSecondsForZone(timeZone: string, now: Date): number {\n const part = new Intl.DateTimeFormat(\"en-US\", { timeZone, timeZoneName: \"longOffset\" })\n .formatToParts(now)\n .find((p) => p.type === \"timeZoneName\")?.value;\n const match = part && /^GMT([+-])(\\d{1,2}):(\\d{2})$/.exec(part);\n if (!match) return 0;\n const sign = match[1] === \"-\" ? -1 : 1;\n return sign * (Number(match[2]) * 3600 + Number(match[3]) * 60);\n}\n\n// The protocol's `context.utcOffsetSeconds`, resolved to a usable offset.\n// iOS sends TimeZone.current.secondsFromGMT(), an integer seconds-east-of-GMT\n// that already has DST folded in, so there is no DST table to consult on this\n// side — just range-check it.\n//\n// `null` means the parent had no client offset to forward, not \"UTC\": it\n// falls back to DEFAULT_CLIENT_TIME_ZONE's live offset. An out-of-range value\n// takes the same fallback rather than throwing — a failed source fails the\n// whole composition, which is worse than a slightly-off day boundary. The\n// range [-12:00, +14:00] is every real-world UTC offset (Baker Island to\n// Kiribati); the protocol's own guard is wider, so this is the narrower of\n// the two checks and the one that decides.\n//\n// One trade this accepts, deliberately not engineered around: a WidgetKit\n// timeline entry built before a DST transition and rendered after it still\n// carries the pre-transition offset until iOS refreshes the timeline. The\n// client owns DST now; this file no longer has the information to catch it.\nexport function clientOffsetSeconds(raw: number | null, now = new Date()): number {\n return raw !== null && Number.isInteger(raw) && raw >= -43200 && raw <= 50400\n ? raw\n : offsetSecondsForZone(DEFAULT_CLIENT_TIME_ZONE, now);\n}\n",[],[79,250],"21c3c868-f4da-48f9-a92e-8dfcf767f74b","channels.ts","01a08469-5acf-77cd-96b4-ad41c643bf7b",["D",1788927892177],"// Turns Sleeper's raw channel string into the shape the item builder reads.\n// Pure; broadcaster display rules are independent of the team catalog.\n\n// Existing broadcaster presentation rules; these are outside the selection catalog.\n// A blunt chop rather than a width measurement: this is a fallback label for a\n// regional broadcaster nobody has mapped, not a layout decision.\nconst MAX_CHANNEL_LABEL = 10;\nfunction chop(text: string, max: number): string {\n return text.length <= max ? text : `${text.slice(0, max - 1)}…`;\n}\nconst NATIONAL_CHANNELS: Record = {\n \"abc\": {\n \"label\": \"ABC\",\n \"directv_channel\": 4,\n \"note\": null\n },\n \"cbs\": {\n \"label\": \"CBS\",\n \"directv_channel\": 2,\n \"note\": null\n },\n \"espn\": {\n \"label\": \"ESPN\",\n \"directv_channel\": 206,\n \"note\": null\n },\n \"ion\": {\n \"label\": \"ION\",\n \"directv_channel\": 305,\n \"note\": null\n },\n \"nbatv\": {\n \"label\": \"NBATV\",\n \"directv_channel\": 216,\n \"note\": null\n },\n \"nbc\": {\n \"label\": \"NBC\",\n \"directv_channel\": 4,\n \"note\": null\n },\n \"tbs\": {\n \"label\": \"TBS\",\n \"directv_channel\": 247,\n \"note\": null\n },\n \"usa\": {\n \"label\": \"USA\",\n \"directv_channel\": 242,\n \"note\": null\n },\n \"sportsnet\": {\n \"label\": \"SportsNet\",\n \"directv_channel\": 691,\n \"note\": null\n }\n};\nconst STREAMING_CHANNELS: Record = {\n \"amzn\": {\n \"label\": \"AMZN\",\n \"note\": \"computer only\"\n },\n \"amazon\": {\n \"label\": \"AMZN\",\n \"note\": \"computer only\"\n },\n \"peacock\": {\n \"label\": \"Peacock\",\n \"note\": \"computer only\"\n },\n \"hbo max\": {\n \"label\": \"HBO Max\",\n \"note\": \"computer only\"\n }\n};\n\n\n// `name` stays the raw string Sleeper sent — it is the drift-detection\n// value, and the json format has to keep reporting what actually arrived.\n// `label` is the display form: dictionary-mapped where there is a mapping,\n// chopped raw text where there isn't.\nexport type ChannelInfo = {\n category: string;\n name: string | null;\n label: string | null;\n directv_channel: number | null;\n note: string | null;\n};\n\nfunction channelMatches(rawChannel: string, key: string) {\n return new RegExp(`\\\\b${key.replace(/[.*+?^${}()|[\\]\\\\]/g, \"\\\\$&\")}\\\\b`, \"i\").test(rawChannel);\n}\n\nexport function channelInfo(rawChannel: string | null | undefined): ChannelInfo {\n if (!rawChannel) return { category: \"unknown\", name: null, label: null, directv_channel: null, note: null };\n\n const nationalKey = Object.keys(NATIONAL_CHANNELS).find((key) => channelMatches(rawChannel, key));\n if (nationalKey) return { category: \"national\", name: rawChannel, ...NATIONAL_CHANNELS[nationalKey] };\n\n const streamingKey = Object.keys(STREAMING_CHANNELS).find((key) => channelMatches(rawChannel, key));\n if (streamingKey) {\n return { category: \"streaming\", name: rawChannel, directv_channel: null, ...STREAMING_CHANNELS[streamingKey] };\n }\n\n return {\n category: \"regional\",\n name: rawChannel,\n label: chop(rawChannel, MAX_CHANNEL_LABEL),\n directv_channel: null,\n note: null,\n };\n}\n",[],[79,257],"56413f67-1817-4d65-a3a5-53bc032361af","catalogStore.ts","01a08469-5acf-77cd-96b4-aa0990a8ba80",["D",1788927892177],"// Canonical selection catalog in this val's SQLite. Read once at the I/O edge\n// and pass the snapshot through the pure pipeline; edits are visible next request.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport type { Catalog, CatalogCompetition, CatalogTeam } from \"./catalog.ts\";\n\nexport async function readCatalog(): Promise {\n const [competitions, teams] = await sqlite.batch([\n { sql: `SELECT code, display_name AS displayName, adapter,\n provider_competition_key AS providerKey, emoji, coverage_note AS coverageNote\n FROM catalog_competitions WHERE code = 'nfl' ORDER BY display_order, code`, args: [] },\n { sql: `SELECT t.slug, t.competition_code AS competitionCode,\n t.display_name AS displayName, t.provider_team_code AS providerCode\n FROM catalog_teams t JOIN catalog_competitions c ON c.code = t.competition_code\n WHERE t.competition_code = 'nfl'\n ORDER BY c.display_order, c.code, t.display_order, t.slug`, args: [] },\n ], \"read\");\n return {\n competitions: competitions.rows as CatalogCompetition[],\n teams: teams.rows as CatalogTeam[],\n };\n}\n",[],[79,264],"47f4e06d-bd56-439f-8f83-c2347b192dd0","catalog.ts","01a08469-5acf-77cd-96b4-a752dc2bb487",["D",1788927892177],"\nexport type TeamRef = { sport: string; code: string };\n\nexport type CatalogCompetition = {\n code: string;\n displayName: string;\n adapter: \"sleeper\";\n providerKey: string;\n emoji: string;\n coverageNote: string;\n};\n\nexport type CatalogTeam = {\n slug: string;\n competitionCode: string;\n displayName: string;\n providerCode: string;\n};\n\nexport type Catalog = {\n competitions: CatalogCompetition[];\n teams: CatalogTeam[];\n};\n\nexport function teamLabel(sport: string, code: string | null, catalog: Catalog): string | null {\n if (!code) return code;\n return catalog.teams.find((team) =>\n team.competitionCode === sport && team.providerCode === code\n )?.displayName ?? code;\n}\n",[],[79,271],"426e9e2b-4b3c-41bd-8fc5-e7c727f0b377","cachedGames.ts","01a08469-5acf-77cd-96b4-a34e03004afc",["D",1788927892177],"\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { type TeamRef } from \"./catalog.ts\";\nimport { type Game } from \"./games.ts\";\n\nexport type CachedGameRow = {\n sport: string;\n game_id: string;\n away_code: string | null;\n home_code: string | null;\n start_time_ms: number;\n status: string | null;\n channel: string | null;\n};\n\nfunction rowToGame(row: CachedGameRow): Game {\n return {\n sport: row.sport,\n start_time: Number(row.start_time_ms),\n status: row.status,\n game_id: row.game_id,\n metadata: {\n away_team: row.away_code,\n home_team: row.home_code,\n channel: row.channel,\n },\n };\n}\n\nconst SELECT_COLUMNS =\n \"sport, game_id, away_code, home_code, start_time_ms, status, channel\";\n\nexport async function nextGamesForTeams(teams: TeamRef[], fromMs: number): Promise {\n if (!teams.length) return [];\n\n const results = await sqlite.batch(\n teams.map((team) => ({\n sql: `SELECT ${SELECT_COLUMNS} FROM cached_games\n WHERE sport = ? AND (away_code = ? OR home_code = ?) AND start_time_ms >= ?\n ORDER BY start_time_ms ASC\n LIMIT 1`,\n args: [\"nfl\", team.code, team.code, fromMs],\n })),\n );\n\n return results.flatMap((result) => (result.rows as CachedGameRow[]).map(rowToGame));\n}\n\nexport async function saveCachedGames(rows: CachedGameRow[]): Promise {\n if (rows.some((row) => row.sport !== \"nfl\")) throw new Error(\"NFL rows required\");\n if (!rows.length) return 0;\n\n const ingestedAt = new Date().toISOString();\n const CHUNK = 50;\n let written = 0;\n\n for (let i = 0; i < rows.length; i += CHUNK) {\n const chunk = rows.slice(i, i + CHUNK);\n await sqlite.batch(\n chunk.map((row) => ({\n sql: `INSERT INTO cached_games\n (sport, game_id, away_code, home_code, start_time_ms,\n status, channel, ingested_at)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?)\n ON CONFLICT(sport, game_id) DO UPDATE SET\n away_code = excluded.away_code,\n home_code = excluded.home_code,\n start_time_ms = excluded.start_time_ms,\n status = excluded.status,\n channel = excluded.channel,\n ingested_at = excluded.ingested_at`,\n args: [\n row.sport, row.game_id, row.away_code, row.home_code, row.start_time_ms,\n row.status, row.channel, ingestedAt,\n ],\n })),\n );\n written += chunk.length;\n }\n\n return written;\n}\n\nexport async function cachedGamesCoverage(): Promise<\n { sport: string; games: number; firstStartMs: number; lastStartMs: number; ingestedAt: string }[]\n> {\n const result = await sqlite.execute(`\n SELECT sport,\n COUNT(*) AS games,\n MIN(start_time_ms) AS first_start_ms,\n MAX(start_time_ms) AS last_start_ms,\n MAX(ingested_at) AS ingested_at\n FROM cached_games\n WHERE sport = 'nfl'\n GROUP BY sport\n ORDER BY sport\n `);\n return (result.rows as {\n sport: string; games: number; first_start_ms: number;\n last_start_ms: number; ingested_at: string;\n }[]).map((row) => ({\n sport: row.sport,\n games: Number(row.games),\n firstStartMs: Number(row.first_start_ms),\n lastStartMs: Number(row.last_start_ms),\n ingestedAt: row.ingested_at,\n }));\n}\n",[],[79,278],["D",1788814020921],"legacyEnvVars","httpPrivacy","description","NFL schedules and widget items via the source SDK","imageUrl","userId","b0a8da26-58e7-4d19-8b5c-eedf487df9a9","pinnedFileId","01a07d9f-d1a7-75dc-86db-eb178f2b25b1","pinPreview","pinMigrated","screenshotVersion","likeCount","tursoName","244bcafd364b4df7895555f2c3f7da2c","tursoHostname","244bcafd364b4df7895555f2c3f7da2c-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789512044203],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_330":326},"org",{"_11":12,"_324":-5,"_325":326,"_290":291,"_327":328,"_329":52},"branch",{"_17":116,"_13":16,"_36":66,"_43":44,"_46":37,"_47":320,"_321":54,"_322":44,"_323":57,"_58":14,"_55":12},6,"forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yVHpab25kTlBTM3M3WmpCa3NMSTd5akVwWksuanBlZyJ9","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_36":44,"_13":14,"_38":441,"_50":-5,"_285":52,"_53":54,"_286":54,"_287":288,"_289":-5,"_290":291,"_292":293,"_294":52,"_295":-5,"_296":-5,"_297":32,"_56":57,"_298":299,"_300":301,"_302":442,"_304":-5,"_305":306,"_307":306,"_308":309,"_310":309,"_311":309,"_312":306,"_313":306,"_314":443,"_316":444,"_318":445,"_51":52},[363,374,376,382,385,386,387,388],"files",[363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388],"counts",{"_354":32,"_355":116,"_356":68,"_35":357,"_358":359},[],{"_36":59,"_13":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_38":71,"_17":32,"_72":73,"_74":75,"_76":52,"_77":-5,"_18":353},"upstreamProject","upstreamBranch",{"_36":37,"_38":351,"_40":352,"_13":42,"_43":44,"_17":45,"_46":-5,"_47":-5,"_48":49,"_50":-5,"_51":52,"_53":54,"_55":12,"_56":57,"_58":14},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1788814020921],["D",1789502858592],[79,60],"pulls","branches","forks",{"_360":91,"_362":32},"connections",{"_360":32,"_361":32},"count","unfilledCount","emptyCount",{"_36":204,"_13":79,"_61":64,"_63":-5,"_65":66,"_67":68,"_69":70,"_38":205,"_17":32,"_72":125,"_74":-5,"_76":52,"_77":-5,"_96":439,"_18":440},{"_36":277,"_13":278,"_61":279,"_63":64,"_65":66,"_67":68,"_69":70,"_38":280,"_17":32,"_72":73,"_74":281,"_76":52,"_77":-5,"_96":437,"_18":438},{"_36":270,"_13":271,"_61":272,"_63":64,"_65":66,"_67":68,"_69":70,"_38":273,"_17":32,"_72":73,"_74":274,"_76":52,"_77":-5,"_96":435,"_18":436},{"_36":263,"_13":264,"_61":265,"_63":64,"_65":66,"_67":68,"_69":70,"_38":266,"_17":32,"_72":73,"_74":267,"_76":52,"_77":-5,"_96":433,"_18":434},{"_36":256,"_13":257,"_61":258,"_63":64,"_65":66,"_67":68,"_69":70,"_38":259,"_17":32,"_72":73,"_74":260,"_76":52,"_77":-5,"_96":431,"_18":432},{"_36":249,"_13":250,"_61":251,"_63":64,"_65":66,"_67":68,"_69":70,"_38":252,"_17":32,"_72":73,"_74":253,"_76":52,"_77":-5,"_96":429,"_18":430},{"_36":242,"_13":243,"_61":244,"_63":64,"_65":66,"_67":68,"_69":70,"_38":245,"_17":32,"_72":73,"_74":246,"_76":52,"_77":-5,"_96":427,"_18":428},{"_36":235,"_13":236,"_61":237,"_63":64,"_65":66,"_67":68,"_69":70,"_38":238,"_17":32,"_72":73,"_74":239,"_76":52,"_77":-5,"_96":425,"_18":426},{"_36":228,"_13":229,"_61":230,"_63":64,"_65":66,"_67":68,"_69":70,"_38":231,"_17":32,"_72":73,"_74":232,"_76":52,"_77":-5,"_96":423,"_18":424},{"_36":221,"_13":222,"_61":223,"_63":64,"_65":66,"_67":68,"_69":70,"_38":224,"_17":32,"_72":73,"_74":225,"_76":52,"_77":-5,"_96":421,"_18":422},{"_36":59,"_13":60,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_38":218,"_17":32,"_72":73,"_74":75,"_76":52,"_77":-5,"_96":419,"_18":420},{"_36":190,"_13":191,"_61":192,"_63":-5,"_65":66,"_67":68,"_69":70,"_38":193,"_17":32,"_72":125,"_74":-5,"_76":52,"_77":-5,"_96":417,"_18":418},{"_36":197,"_13":198,"_61":199,"_63":192,"_65":66,"_67":68,"_69":70,"_38":200,"_17":32,"_72":73,"_74":201,"_76":52,"_77":-5,"_96":415,"_18":416},{"_36":144,"_13":145,"_61":146,"_63":-5,"_65":66,"_67":68,"_69":70,"_38":147,"_17":32,"_72":125,"_74":-5,"_76":52,"_77":-5,"_96":413,"_18":414},{"_36":183,"_13":184,"_61":185,"_63":146,"_65":66,"_67":68,"_69":70,"_38":186,"_17":32,"_72":24,"_74":187,"_76":52,"_77":-5,"_96":411,"_18":412},{"_36":176,"_13":177,"_61":178,"_63":146,"_65":66,"_67":68,"_69":70,"_38":179,"_17":32,"_72":73,"_74":180,"_76":52,"_77":-5,"_96":409,"_18":410},{"_36":169,"_13":170,"_61":171,"_63":146,"_65":66,"_67":68,"_69":70,"_38":172,"_17":32,"_72":73,"_74":173,"_76":52,"_77":-5,"_96":407,"_18":408},{"_36":162,"_13":163,"_61":164,"_63":146,"_65":66,"_67":68,"_69":70,"_38":165,"_17":32,"_72":73,"_74":166,"_76":52,"_77":-5,"_96":405,"_18":406},{"_36":155,"_13":156,"_61":157,"_63":146,"_65":66,"_67":68,"_69":70,"_38":158,"_17":32,"_72":24,"_74":159,"_76":52,"_77":-5,"_96":403,"_18":404},{"_36":121,"_13":122,"_61":123,"_63":-5,"_65":66,"_67":68,"_69":70,"_38":124,"_17":32,"_72":125,"_74":-5,"_76":52,"_77":-5,"_96":401,"_18":402},{"_36":137,"_13":138,"_61":139,"_63":123,"_65":66,"_67":68,"_69":70,"_38":140,"_17":32,"_72":73,"_74":141,"_76":52,"_77":-5,"_96":399,"_18":400},{"_36":130,"_13":131,"_61":132,"_63":123,"_65":66,"_67":68,"_69":70,"_38":133,"_17":32,"_72":73,"_74":134,"_76":52,"_77":-5,"_96":397,"_18":398},{"_36":113,"_13":114,"_61":115,"_63":-5,"_65":66,"_67":116,"_69":70,"_38":117,"_17":32,"_72":73,"_74":118,"_76":52,"_77":-5,"_96":395,"_18":396},{"_36":106,"_13":107,"_61":108,"_63":-5,"_65":66,"_67":93,"_69":70,"_38":109,"_17":32,"_72":73,"_74":110,"_76":52,"_77":-5,"_96":393,"_18":394},{"_36":99,"_13":100,"_61":101,"_63":-5,"_65":66,"_67":68,"_69":70,"_38":102,"_17":32,"_72":73,"_74":103,"_76":52,"_77":-5,"_96":391,"_18":392},{"_36":88,"_13":89,"_61":90,"_63":-5,"_65":66,"_67":91,"_69":70,"_38":92,"_17":93,"_72":94,"_74":95,"_76":52,"_77":-5,"_96":389,"_18":390},[],[89],[],[100],[],[107],[],[114],[],[122,131],[],[122,138],[383,384],[122],[],[145,156],[],[145,163],[],[145,170],[],[145,177],[],[145,184],[377,378,379,380,381],[145],[],[191,198],[375],[191],[],[79,60],[],[79,222],[],[79,229],[],[79,236],[],[79,243],[],[79,250],[],[79,257],[],[79,264],[],[79,271],[],[79,278],[364,365,366,367,368,369,370,371,372,373],[79],["D",1788814020921],["D",1789512044203],{"_11":12,"_330":326},{"_11":12,"_324":-5,"_325":326,"_290":291,"_327":328,"_329":52},{"_17":116,"_13":16,"_36":66,"_43":44,"_46":37,"_47":320,"_321":54,"_322":44,"_323":57,"_58":14,"_55":12},"ctx",{"_314":-5,"_348":479,"_480":481,"_482":483,"_484":52,"_485":52,"_486":52,"_487":70,"_488":-5,"_489":-7,"_490":-7,"_491":32,"_492":52,"_493":52,"_494":-5,"_495":52,"_496":52,"_497":52,"_498":-5},"ENV",{"_450":451,"_452":453,"_454":42,"_455":456,"_457":458,"_459":460,"_461":462,"_463":464,"_465":466,"_467":468,"_469":470,"_471":472,"_473":474,"_475":476,"_477":478},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]