[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_234":235,"_236":237},"routes/_app.x.$handle.$name",{"_94":93,"_32":45,"_102":84,"_27":53,"_13":14,"_103":-5,"_11":104,"_105":106,"_107":108,"_109":110,"_111":112,"_20":-5,"_113":-5,"_114":-5,"_115":25,"_116":117,"_118":119,"_120":-5,"_121":-5,"_122":123},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",18,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","backend.val.ts","latestPath","fileId","d0b590b8-0d21-11f1-89a0-42dde27851f2","name","fileType","http","content","/**\n * Hatzolah Stock Check — Val.town Backend\n *\n * Deploy as an HTTP Val on val.town. This acts as a proxy to DDBook Cloud,\n * maintaining a shared session and exposing a simple JSON API.\n *\n * Environment variables (set in Val.town):\n * DDBOOK_EMAIL — organisational login email\n * DDBOOK_PASSWORD — organisational login password\n * ALLOWED_ORIGIN — frontend origin for CORS (e.g. https://yourusername.github.io)\n */\n\n// ---------- Types ----------\n\ninterface UserMapping {\n id: string;\n name: string;\n registerId: string;\n registerName: string;\n}\n\ninterface StockStatus {\n userId: string;\n name: string;\n registerName: string;\n registerId: string;\n drugName: string;\n drugId: string;\n calculatedBalance: number | null;\n lastChecked: string | null;\n weekStatus: \"done\" | \"due\" | \"overdue\";\n overdue: boolean;\n}\n\n// ---------- Configuration ----------\n\nconst DDBOOK_BASE = \"https://app.ddbook.com.au\";\nconst DRUG_ID = \"5\";\nconst DRUG_NAME = \"methoxyflurane inhalation device, 3 mL\";\n\n// User-to-register mapping\nconst USER_REGISTER_MAP: Record<\n string,\n { registerId: string; registerName: string; name: string }\n> = {\n \"169023\": {\n registerId: \"6\",\n registerName: \"73 Ahron Golberg Kit\",\n name: \"Ahron Golberg\",\n },\n \"168545\": {\n registerId: \"7\",\n registerName: \"75 Yidi Goldberger Kit\",\n name: \"Yidi Goldberger\",\n },\n \"169456\": {\n registerId: \"8\",\n registerName: \"74 Efraim Izak\",\n name: \"Efraim Izak\",\n },\n \"169997\": {\n registerId: \"9\",\n registerName: \"71 Mendy Nagel\",\n name: \"Mendy Nagel\",\n },\n \"169998\": {\n registerId: \"10\",\n registerName: \"69 Igor Lyulev\",\n name: \"Igor Lyulev\",\n },\n \"170740\": {\n registerId: \"13\",\n registerName: \"76 Liam Levy\",\n name: \"Liam Levy\",\n },\n \"172545\": {\n registerId: \"14\",\n registerName: \"70 Chaim Dovid Wilhelm\",\n name: \"Chaim Dovid Wilhelm\",\n },\n \"222758\": {\n registerId: \"17\",\n registerName: \"78 Gaby Silver\",\n name: \"Gaby Silver\",\n },\n \"222759\": {\n registerId: \"18\",\n registerName: \"79 Shalev NessAiver\",\n name: \"Shalev NessAiver\",\n },\n};\n\nconst ALL_AUTHORIZED_USERS = [\n { id: \"160980\", name: \"Adrian Martin\" },\n { id: \"169023\", name: \"Ahron Golberg\" },\n { id: \"186968\", name: \"Amanda Creagh\" },\n { id: \"170336\", name: \"Ari Esterman\" },\n { id: \"169345\", name: \"Bec Nelson\" },\n { id: \"172545\", name: \"Chaim Dovid Wilhelm\" },\n { id: \"170347\", name: \"Chaim Eluzer Fixler\" },\n { id: \"174303\", name: \"Christina Katsifolis\" },\n { id: \"164422\", name: \"Daniel Van Der Plaat\" },\n { id: \"169456\", name: \"Efraim Izak\" },\n { id: \"222758\", name: \"Gaby Silver\" },\n { id: \"169998\", name: \"Igor Lyulev\" },\n { id: \"187149\", name: \"Joel Arber\" },\n { id: \"170740\", name: \"Liam Levy\" },\n { id: \"169997\", name: \"Mendy Nagel\" },\n { id: \"169206\", name: \"Michael Lewis\" },\n { id: \"170073\", name: \"Nelson Yeung\" },\n { id: \"185855\", name: \"Rafi Goodman\" },\n { id: \"222759\", name: \"Shalev NessAiver\" },\n { id: \"168545\", name: \"Yidi Goldberger\" },\n];\n\n// ---------- DDBook Session Manager ----------\n\nlet sessionCookies: string[] = [];\nlet antiForgeryToken = \"\";\nlet lastAuth = 0;\n\nfunction getEnv(key: string): string {\n // @ts-ignore — Val.town provides Deno.env\n const val = typeof Deno !== \"undefined\" ? Deno.env.get(key) : undefined;\n if (!val) throw new Error(`Missing environment variable: ${key}`);\n return val;\n}\n\nfunction cookieHeader(): string {\n return sessionCookies.join(\"; \");\n}\n\nfunction extractSetCookies(res: Response): void {\n const setCookies = res.headers.getSetCookie?.() ?? [];\n for (const sc of setCookies) {\n const nameVal = sc.split(\";\")[0];\n const name = nameVal.split(\"=\")[0];\n // Replace existing cookie with same name\n sessionCookies = sessionCookies.filter((c) => !c.startsWith(name + \"=\"));\n sessionCookies.push(nameVal);\n }\n}\n\nfunction extractToken(html: string): string {\n const match = html.match(\n /name=\"__RequestVerificationToken\"[^>]*value=\"([^\"]+)\"/,\n );\n if (!match) {\n const match2 = html.match(\n /value=\"([^\"]+)\"[^>]*name=\"__RequestVerificationToken\"/,\n );\n if (!match2)\n throw new Error(\"Could not find anti-forgery token in DDBook HTML\");\n return match2[1];\n }\n return match[1];\n}\n\nasync function authenticate(): Promise {\n const email = getEnv(\"DDBOOK_EMAIL\");\n const password = getEnv(\"DDBOOK_PASSWORD\");\n\n // Step 1: GET login page to get initial cookies\n const loginPage = await fetch(DDBOOK_BASE + \"/access/login\", {\n redirect: \"manual\",\n });\n extractSetCookies(loginPage);\n\n // Get token from login page\n const loginHtml = await loginPage.text();\n let token = \"\";\n try {\n token = extractToken(loginHtml);\n } catch {\n // Some login pages might not have the token\n }\n\n // Step 2: POST login\n const formData = new URLSearchParams();\n formData.set(\"model.Email\", email);\n formData.set(\"model.Password\", password);\n if (token) formData.set(\"__RequestVerificationToken\", token);\n\n const loginRes = await fetch(DDBOOK_BASE + \"/access/Login\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n Cookie: cookieHeader(),\n },\n body: formData.toString(),\n redirect: \"manual\",\n });\n extractSetCookies(loginRes);\n\n // Follow redirect if any\n if (loginRes.status >= 300 && loginRes.status < 400) {\n const loc = loginRes.headers.get(\"Location\") || \"/\";\n const redirectUrl = loc.startsWith(\"http\") ? loc : DDBOOK_BASE + loc;\n const redir = await fetch(redirectUrl, {\n headers: { Cookie: cookieHeader() },\n redirect: \"manual\",\n });\n extractSetCookies(redir);\n }\n\n // Step 3: Fetch a page to get anti-forgery token\n const stockPage = await fetch(DDBOOK_BASE + \"/General/StockCheck2\", {\n headers: { Cookie: cookieHeader() },\n redirect: \"manual\",\n });\n extractSetCookies(stockPage);\n const stockHtml = await stockPage.text();\n antiForgeryToken = extractToken(stockHtml);\n lastAuth = Date.now();\n}\n\nasync function ensureAuth(): Promise {\n // Re-auth if session is older than 15 minutes or not initialized\n if (!lastAuth || Date.now() - lastAuth > 15 * 60 * 1000) {\n await authenticate();\n }\n}\n\nasync function ddbookFetch(\n path: string,\n options: RequestInit = {},\n): Promise {\n await ensureAuth();\n\n const headers: Record = {\n Cookie: cookieHeader(),\n ...((options.headers as Record) || {}),\n };\n\n const res = await fetch(DDBOOK_BASE + path, {\n ...options,\n headers,\n redirect: \"manual\",\n });\n extractSetCookies(res);\n\n // If redirected to login, re-auth and retry once\n if (res.status >= 300 && res.status < 400) {\n const loc = res.headers.get(\"Location\") || \"\";\n if (loc.toLowerCase().includes(\"login\")) {\n await authenticate();\n const retryHeaders: Record = {\n Cookie: cookieHeader(),\n ...((options.headers as Record) || {}),\n };\n if (retryHeaders[\"__RequestVerificationToken\"]) {\n retryHeaders[\"__RequestVerificationToken\"] = antiForgeryToken;\n }\n const retry = await fetch(DDBOOK_BASE + path, {\n ...options,\n headers: retryHeaders,\n redirect: \"manual\",\n });\n extractSetCookies(retry);\n return retry;\n }\n }\n\n return res;\n}\n\n// ---------- DDBook API calls ----------\n\ninterface StockCheckRow {\n registerId: string;\n registerName: string;\n drugId: string;\n drugName: string;\n lastChecked: string | null;\n calculatedBalance: number;\n}\n\nasync function loadStockCheckData(): Promise {\n const formData = new URLSearchParams();\n formData.set(\"sEcho\", \"1\");\n formData.set(\"iDisplayStart\", \"0\");\n formData.set(\"iDisplayLength\", \"100\");\n formData.set(\"localOffset\", \"-660\"); // AEST\n formData.set(\"accountRegisterTypeId\", \"-1\");\n formData.set(\"accountRegisterId\", \"\");\n formData.set(\"drugId\", \"\");\n formData.set(\"locationId\", \"\");\n formData.set(\"includeZeroBalances\", \"false\");\n formData.set(\"activePatientsOnly\", \"false\");\n formData.set(\"overdueStockCheck\", \"false\");\n formData.set(\"schedule\", \"\");\n formData.set(\"drugClass\", \"\");\n\n const res = await ddbookFetch(\"/General/StockCheck2_Load\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n __RequestVerificationToken: antiForgeryToken,\n },\n body: formData.toString(),\n });\n\n const data = await res.json();\n const rows: StockCheckRow[] = [];\n\n for (const row of data.aaData || []) {\n // Column 0: hidden fields with IDs\n const col0 = row[0] || \"\";\n const regIdMatch = col0.match(/tsAccountRegisterId[^>]*value=\"(\\d+)\"/);\n const drugIdMatch = col0.match(/tsDrugId[^>]*value=\"(\\d+)\"/);\n if (!regIdMatch) continue;\n\n const registerId = regIdMatch[1];\n const drugId = drugIdMatch ? drugIdMatch[1] : \"\";\n\n // Column 1: register name\n const registerName = (row[1] || \"\").replace(/<[^>]+>/g, \"\").trim();\n\n // Column 2: drug name\n const drugNameMatch = (row[2] || \"\").match(/>([^<]+)]+>/g, \"\").trim();\n const calculatedBalance = parseInt(balanceText, 10) || 0;\n\n rows.push({\n registerId,\n registerName,\n drugId,\n drugName,\n lastChecked,\n calculatedBalance,\n });\n }\n\n return rows;\n}\n\nfunction convertTo24h(time12: string): string {\n const match = time12.match(/^(\\d{1,2}):(\\d{2})\\s*([APap][Mm])$/);\n if (!match) return \"00:00:00\";\n let [, h, m, ampm] = match;\n let hour = parseInt(h, 10);\n if (ampm.toLowerCase() === \"pm\" && hour !== 12) hour += 12;\n if (ampm.toLowerCase() === \"am\" && hour === 12) hour = 0;\n return `${String(hour).padStart(2, \"0\")}:${m}:00`;\n}\n\nasync function submitStockCheck(opts: {\n userId: string;\n password: string;\n actualBalance: number;\n witnessName: string | null;\n witnessType: \"person\" | \"photo\";\n}): Promise<{ success: boolean; message: string }> {\n const mapping = USER_REGISTER_MAP[opts.userId];\n if (!mapping) {\n return { success: false, message: \"Unknown user ID\" };\n }\n\n // Load current data to get calculated balance\n const rows = await loadStockCheckData();\n const row = rows.find(\n (r) => r.registerId === mapping.registerId && r.drugId === DRUG_ID,\n );\n const currentBalance = row ? row.calculatedBalance : 0;\n\n const note =\n opts.witnessType === \"photo\"\n ? \"Photo submitted via email\"\n : `Witnessed by ${opts.witnessName}`;\n\n let balanceMessage = \"\";\n if (opts.actualBalance !== currentBalance) {\n if (currentBalance > opts.actualBalance) {\n balanceMessage = `CALCULATED balance = ${currentBalance} is GREATER than ACTUAL balance = ${opts.actualBalance}`;\n } else {\n balanceMessage = `CALCULATED balance = ${currentBalance} is LESS than ACTUAL balance = ${opts.actualBalance}`;\n }\n }\n\n const entropy = crypto.randomUUID();\n\n const body = {\n StockCheckItemModel: [\n {\n DrugId: DRUG_ID,\n DrugName: DRUG_NAME,\n AccountRegisterId: mapping.registerId,\n DrugContainerId: \"\",\n CurrentBalance: String(currentBalance),\n ActualBalance: String(opts.actualBalance),\n Expiry: \"\",\n Note: note,\n BalanceMessage: balanceMessage,\n },\n ],\n UserAuthorization: {\n UserId: opts.userId,\n Password: opts.password,\n },\n VerifyAuthorization: {\n UserId: \"0\",\n Password: \"\",\n },\n };\n console.log(\"CHECK\", body);\n // return { success: true, message: \"Demo\" };\n const res = await ddbookFetch(\"/General/StockCheck_Save\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n __RequestVerificationToken: antiForgeryToken,\n __Entropy: entropy,\n },\n body: JSON.stringify(body),\n });\n\n const result = await res.json();\n if (result.Result === \"success\") {\n return { success: true, message: result.Message || \"Stock check saved\" };\n }\n return { success: false, message: result.Message || \"Stock check failed\" };\n}\n\n// ---------- Week status (Sunday–Saturday) ----------\n\nfunction computeWeekStatus(\n lastCheckedISO: string | null,\n): \"done\" | \"due\" | \"overdue\" {\n if (!lastCheckedISO) return \"overdue\";\n const now = new Date();\n const lastChecked = new Date(lastCheckedISO);\n\n // Compute current week start (Sunday 00:00 AEST)\n // AEDT = UTC+11\n const AEST_OFFSET_MS = 11 * 60 * 60 * 1000;\n const nowAest = new Date(\n now.getTime() + now.getTimezoneOffset() * 60000 + AEST_OFFSET_MS,\n );\n const day = nowAest.getDay(); // 0=Sun\n const startOfWeekAest = new Date(nowAest);\n startOfWeekAest.setDate(nowAest.getDate() - day);\n startOfWeekAest.setHours(0, 0, 0, 0);\n // Convert back to UTC\n const startOfWeekUtc = new Date(\n startOfWeekAest.getTime() -\n AEST_OFFSET_MS +\n nowAest.getTimezoneOffset() * 60000,\n );\n\n if (lastChecked >= startOfWeekUtc) return \"done\";\n const diffDays =\n (now.getTime() - lastChecked.getTime()) / (1000 * 60 * 60 * 24);\n return diffDays > 7 ? \"overdue\" : \"due\";\n}\n\n// ---------- CORS ----------\n\nfunction corsHeaders(req: Request): Record {\n // @ts-ignore\n const allowed =\n typeof Deno !== \"undefined\" ? Deno.env.get(\"ALLOWED_ORIGIN\") || \"*\" : \"*\";\n return {\n \"Access-Control-Allow-Origin\": allowed,\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n}\n\nfunction jsonResponse(data: unknown, status = 200, req?: Request): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: {\n \"Content-Type\": \"application/json\",\n ...corsHeaders(req!),\n },\n });\n}\n\n// ---------- Router ----------\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // Handle CORS preflight\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: corsHeaders(req) });\n }\n\n try {\n // GET /api/users\n if (path === \"/api/users\" && req.method === \"GET\") {\n const users = Object.entries(USER_REGISTER_MAP).map(([id, info]) => ({\n id,\n name: info.name,\n registerId: info.registerId,\n registerName: info.registerName,\n }));\n return jsonResponse({ users }, 200, req);\n }\n\n // GET /api/all-users (includes those without kits, for witness list)\n if (path === \"/api/all-users\" && req.method === \"GET\") {\n return jsonResponse({ users: ALL_AUTHORIZED_USERS }, 200, req);\n }\n\n // GET /api/status/:userId\n const statusMatch = path.match(/^\\/api\\/status\\/(\\d+)$/);\n if (statusMatch && req.method === \"GET\") {\n const userId = statusMatch[1];\n const mapping = USER_REGISTER_MAP[userId];\n if (!mapping) {\n return jsonResponse({ error: \"Unknown user\" }, 404, req);\n }\n\n const rows = await loadStockCheckData();\n const row = rows.find(\n (r) => r.registerId === mapping.registerId && r.drugId === DRUG_ID,\n );\n\n const lastChecked = row?.lastChecked || null;\n const weekStatus = computeWeekStatus(lastChecked);\n\n const status: StockStatus = {\n userId,\n name: mapping.name,\n registerName: mapping.registerName,\n registerId: mapping.registerId,\n drugName: DRUG_NAME,\n drugId: DRUG_ID,\n calculatedBalance: row?.calculatedBalance ?? null,\n lastChecked,\n weekStatus,\n overdue: weekStatus === \"overdue\",\n };\n\n return jsonResponse(status, 200, req);\n }\n\n // POST /api/stock-check\n if (path === \"/api/stock-check\" && req.method === \"POST\") {\n const body = await req.json();\n const { userId, password, actualBalance, witnessName, witnessType } =\n body;\n\n if (!userId || !password || actualBalance == null) {\n return jsonResponse(\n { success: false, message: \"Missing required fields\" },\n 400,\n req,\n );\n }\n\n const result = await submitStockCheck({\n userId,\n password,\n actualBalance: Number(actualBalance),\n witnessName: witnessName || null,\n witnessType: witnessType || \"person\",\n });\n\n return jsonResponse(result, result.success ? 200 : 400, req);\n }\n\n // DEBUG: raw stock data\n if (path === \"/api/debug/stock-data\" && req.method === \"GET\") {\n const rows = await loadStockCheckData();\n return jsonResponse({ rows }, 200, req);\n }\n\n // Health check\n if (path === \"/\" || path === \"/api/health\") {\n return jsonResponse(\n { status: \"ok\", service: \"hatzolah-stock-check\" },\n 200,\n req,\n );\n }\n\n return jsonResponse({ error: \"Not found\" }, 404, req);\n } catch (err: any) {\n console.error(\"Handler error:\", err);\n return jsonResponse(\n { success: false, message: err.message || \"Internal server error\" },\n 500,\n req,\n );\n }\n}","/**\n * Hatzolah Stock Check — Val.town Backend\n *\n * Deploy as an HTTP Val on val.town. This acts as a proxy to DDBook Cloud,\n * maintaining a shared session and exposing a simple JSON API.\n *\n * Environment variables (set in Val.town):\n * DDBOOK_EMAIL — organisational login email\n * DDBOOK_PASSWORD — organisational login password\n * ALLOWED_ORIGIN — frontend origin for CORS (e.g. https://yourusername.github.io)\n */\n\n// ---------- Types ----------\n\ninterface UserMapping {\n id: string;\n name: string;\n registerId: string;\n registerName: string;\n}\n\ninterface StockStatus {\n userId: string;\n name: string;\n registerName: string;\n registerId: string;\n drugName: string;\n drugId: string;\n calculatedBalance: number | null;\n lastChecked: string | null;\n weekStatus: \"done\" | \"due\" | \"overdue\";\n overdue: boolean;\n}\n\n// ---------- Configuration ----------\n\nconst DDBOOK_BASE = \"https://app.ddbook.com.au\";\nconst DRUG_ID = \"5\";\nconst DRUG_NAME = \"methoxyflurane inhalation device, 3 mL\";\n\n// User-to-register mapping\nconst USER_REGISTER_MAP: Record<\n string,\n { registerId: string; registerName: string; name: string }\n> = {\n \"169023\": {\n registerId: \"6\",\n registerName: \"73 Ahron Golberg Kit\",\n name: \"Ahron Golberg\",\n },\n \"168545\": {\n registerId: \"7\",\n registerName: \"75 Yidi Goldberger Kit\",\n name: \"Yidi Goldberger\",\n },\n \"169456\": {\n registerId: \"8\",\n registerName: \"74 Efraim Izak\",\n name: \"Efraim Izak\",\n },\n \"169997\": {\n registerId: \"9\",\n registerName: \"71 Mendy Nagel\",\n name: \"Mendy Nagel\",\n },\n \"169998\": {\n registerId: \"10\",\n registerName: \"69 Igor Lyulev\",\n name: \"Igor Lyulev\",\n },\n \"170740\": {\n registerId: \"13\",\n registerName: \"76 Liam Levy\",\n name: \"Liam Levy\",\n },\n \"172545\": {\n registerId: \"14\",\n registerName: \"70 Chaim Dovid Wilhelm\",\n name: \"Chaim Dovid Wilhelm\",\n },\n \"222758\": {\n registerId: \"17\",\n registerName: \"78 Gaby Silver\",\n name: \"Gaby Silver\",\n },\n \"222759\": {\n registerId: \"18\",\n registerName: \"79 Shalev NessAiver\",\n name: \"Shalev NessAiver\",\n },\n \"228867\": {\n registerId: \"20\",\n registerName: \"80 Boruch Broh\",\n name: \"Boruch Broh\",\n },\n \"228496\": {\n registerId: \"19\",\n registerName: \"81 Solomon Gluck\",\n name: \"Solomon Gluck\",\n },\n \"228901\": {\n registerId: \"21\",\n registerName: \"82 Shmuly Korman\",\n name: \"Shmuly Korman\",\n },\n};\n\nconst ALL_AUTHORIZED_USERS = [\n { id: \"160980\", name: \"Adrian Martin\" },\n { id: \"169023\", name: \"Ahron Golberg\" },\n { id: \"186968\", name: \"Amanda Creagh\" },\n { id: \"170336\", name: \"Ari Esterman\" },\n { id: \"169345\", name: \"Bec Nelson\" },\n { id: \"172545\", name: \"Chaim Dovid Wilhelm\" },\n { id: \"170347\", name: \"Chaim Eluzer Fixler\" },\n { id: \"174303\", name: \"Christina Katsifolis\" },\n { id: \"164422\", name: \"Daniel Van Der Plaat\" },\n { id: \"169456\", name: \"Efraim Izak\" },\n { id: \"222758\", name: \"Gaby Silver\" },\n { id: \"169998\", name: \"Igor Lyulev\" },\n { id: \"187149\", name: \"Joel Arber\" },\n { id: \"170740\", name: \"Liam Levy\" },\n { id: \"169997\", name: \"Mendy Nagel\" },\n { id: \"169206\", name: \"Michael Lewis\" },\n { id: \"170073\", name: \"Nelson Yeung\" },\n { id: \"185855\", name: \"Rafi Goodman\" },\n { id: \"168545\", name: \"Yidi Goldberger\" },\n { id: \"222759\", name: \"Shalev NessAiver\" },\n { id: \"228867\", name: \"Boruch Broh\" },\n { id: \"228496\", name: \"Solomon Gluck\" },\n { id: \"228901\", name: \"Shmuly Korman\" },\n];\n\n// ---------- DDBook Session Manager ----------\n\nlet sessionCookies: string[] = [];\nlet antiForgeryToken = \"\";\nlet lastAuth = 0;\n\nfunction getEnv(key: string): string {\n // @ts-ignore — Val.town provides Deno.env\n const val = typeof Deno !== \"undefined\" ? Deno.env.get(key) : undefined;\n if (!val) throw new Error(`Missing environment variable: ${key}`);\n return val;\n}\n\nfunction cookieHeader(): string {\n return sessionCookies.join(\"; \");\n}\n\nfunction extractSetCookies(res: Response): void {\n const setCookies = res.headers.getSetCookie?.() ?? [];\n for (const sc of setCookies) {\n const nameVal = sc.split(\";\")[0];\n const name = nameVal.split(\"=\")[0];\n // Replace existing cookie with same name\n sessionCookies = sessionCookies.filter((c) => !c.startsWith(name + \"=\"));\n sessionCookies.push(nameVal);\n }\n}\n\nfunction extractToken(html: string): string {\n const match = html.match(\n /name=\"__RequestVerificationToken\"[^>]*value=\"([^\"]+)\"/,\n );\n if (!match) {\n const match2 = html.match(\n /value=\"([^\"]+)\"[^>]*name=\"__RequestVerificationToken\"/,\n );\n if (!match2) {\n throw new Error(\"Could not find anti-forgery token in DDBook HTML\");\n }\n return match2[1];\n }\n return match[1];\n}\n\nasync function authenticate(): Promise {\n const email = getEnv(\"DDBOOK_EMAIL\");\n const password = getEnv(\"DDBOOK_PASSWORD\");\n\n // Step 1: GET login page to get initial cookies\n const loginPage = await fetch(DDBOOK_BASE + \"/access/login\", {\n redirect: \"manual\",\n });\n extractSetCookies(loginPage);\n\n // Get token from login page\n const loginHtml = await loginPage.text();\n let token = \"\";\n try {\n token = extractToken(loginHtml);\n } catch {\n // Some login pages might not have the token\n }\n\n // Step 2: POST login\n const formData = new URLSearchParams();\n formData.set(\"model.Email\", email);\n formData.set(\"model.Password\", password);\n if (token) formData.set(\"__RequestVerificationToken\", token);\n\n const loginRes = await fetch(DDBOOK_BASE + \"/access/Login\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n Cookie: cookieHeader(),\n },\n body: formData.toString(),\n redirect: \"manual\",\n });\n extractSetCookies(loginRes);\n\n // Follow redirect if any\n if (loginRes.status >= 300 && loginRes.status < 400) {\n const loc = loginRes.headers.get(\"Location\") || \"/\";\n const redirectUrl = loc.startsWith(\"http\") ? loc : DDBOOK_BASE + loc;\n const redir = await fetch(redirectUrl, {\n headers: { Cookie: cookieHeader() },\n redirect: \"manual\",\n });\n extractSetCookies(redir);\n }\n\n // Step 3: Fetch a page to get anti-forgery token\n const stockPage = await fetch(DDBOOK_BASE + \"/General/StockCheck2\", {\n headers: { Cookie: cookieHeader() },\n redirect: \"manual\",\n });\n extractSetCookies(stockPage);\n const stockHtml = await stockPage.text();\n antiForgeryToken = extractToken(stockHtml);\n lastAuth = Date.now();\n}\n\nasync function ensureAuth(): Promise {\n // Re-auth if session is older than 15 minutes or not initialized\n if (!lastAuth || Date.now() - lastAuth > 15 * 60 * 1000) {\n await authenticate();\n }\n}\n\nasync function ddbookFetch(\n path: string,\n options: RequestInit = {},\n): Promise {\n await ensureAuth();\n\n const headers: Record = {\n Cookie: cookieHeader(),\n ...((options.headers as Record) || {}),\n };\n\n const res = await fetch(DDBOOK_BASE + path, {\n ...options,\n headers,\n redirect: \"manual\",\n });\n extractSetCookies(res);\n\n // If redirected to login, re-auth and retry once\n if (res.status >= 300 && res.status < 400) {\n const loc = res.headers.get(\"Location\") || \"\";\n if (loc.toLowerCase().includes(\"login\")) {\n await authenticate();\n const retryHeaders: Record = {\n Cookie: cookieHeader(),\n ...((options.headers as Record) || {}),\n };\n if (retryHeaders[\"__RequestVerificationToken\"]) {\n retryHeaders[\"__RequestVerificationToken\"] = antiForgeryToken;\n }\n const retry = await fetch(DDBOOK_BASE + path, {\n ...options,\n headers: retryHeaders,\n redirect: \"manual\",\n });\n extractSetCookies(retry);\n return retry;\n }\n }\n\n return res;\n}\n\n// ---------- DDBook API calls ----------\n\ninterface StockCheckRow {\n registerId: string;\n registerName: string;\n drugId: string;\n drugName: string;\n lastChecked: string | null;\n calculatedBalance: number;\n}\n\nasync function loadStockCheckData(): Promise {\n const formData = new URLSearchParams();\n formData.set(\"sEcho\", \"1\");\n formData.set(\"iDisplayStart\", \"0\");\n formData.set(\"iDisplayLength\", \"100\");\n formData.set(\"localOffset\", \"-660\"); // AEST\n formData.set(\"accountRegisterTypeId\", \"-1\");\n formData.set(\"accountRegisterId\", \"\");\n formData.set(\"drugId\", \"\");\n formData.set(\"locationId\", \"\");\n formData.set(\"includeZeroBalances\", \"false\");\n formData.set(\"activePatientsOnly\", \"false\");\n formData.set(\"overdueStockCheck\", \"false\");\n formData.set(\"schedule\", \"\");\n formData.set(\"drugClass\", \"\");\n\n const res = await ddbookFetch(\"/General/StockCheck2_Load\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n __RequestVerificationToken: antiForgeryToken,\n },\n body: formData.toString(),\n });\n\n const data = await res.json();\n const rows: StockCheckRow[] = [];\n\n for (const row of data.aaData || []) {\n // Column 0: hidden fields with IDs\n const col0 = row[0] || \"\";\n const regIdMatch = col0.match(/tsAccountRegisterId[^>]*value=\"(\\d+)\"/);\n const drugIdMatch = col0.match(/tsDrugId[^>]*value=\"(\\d+)\"/);\n if (!regIdMatch) continue;\n\n const registerId = regIdMatch[1];\n const drugId = drugIdMatch ? drugIdMatch[1] : \"\";\n\n // Column 1: register name\n const registerName = (row[1] || \"\").replace(/<[^>]+>/g, \"\").trim();\n\n // Column 2: drug name\n const drugNameMatch = (row[2] || \"\").match(/>([^<]+)]+>/g, \"\").trim();\n const calculatedBalance = parseInt(balanceText, 10) || 0;\n\n rows.push({\n registerId,\n registerName,\n drugId,\n drugName,\n lastChecked,\n calculatedBalance,\n });\n }\n\n return rows;\n}\n\nfunction convertTo24h(time12: string): string {\n const match = time12.match(/^(\\d{1,2}):(\\d{2})\\s*([APap][Mm])$/);\n if (!match) return \"00:00:00\";\n let [, h, m, ampm] = match;\n let hour = parseInt(h, 10);\n if (ampm.toLowerCase() === \"pm\" && hour !== 12) hour += 12;\n if (ampm.toLowerCase() === \"am\" && hour === 12) hour = 0;\n return `${String(hour).padStart(2, \"0\")}:${m}:00`;\n}\n\nasync function submitStockCheck(opts: {\n userId: string;\n password: string;\n actualBalance: number;\n witnessName: string | null;\n witnessType: \"person\" | \"photo\";\n}): Promise<{ success: boolean; message: string }> {\n const mapping = USER_REGISTER_MAP[opts.userId];\n if (!mapping) {\n return { success: false, message: \"Unknown user ID\" };\n }\n\n // Load current data to get calculated balance\n const rows = await loadStockCheckData();\n const row = rows.find(\n (r) => r.registerId === mapping.registerId && r.drugId === DRUG_ID,\n );\n const currentBalance = row ? row.calculatedBalance : 0;\n\n const note = opts.witnessType === \"photo\"\n ? \"Photo submitted via email\"\n : `Witnessed by ${opts.witnessName}`;\n\n let balanceMessage = \"\";\n if (opts.actualBalance !== currentBalance) {\n if (currentBalance > opts.actualBalance) {\n balanceMessage =\n `CALCULATED balance = ${currentBalance} is GREATER than ACTUAL balance = ${opts.actualBalance}`;\n } else {\n balanceMessage =\n `CALCULATED balance = ${currentBalance} is LESS than ACTUAL balance = ${opts.actualBalance}`;\n }\n }\n\n const entropy = crypto.randomUUID();\n\n const body = {\n StockCheckItemModel: [\n {\n DrugId: DRUG_ID,\n DrugName: DRUG_NAME,\n AccountRegisterId: mapping.registerId,\n DrugContainerId: \"\",\n CurrentBalance: String(currentBalance),\n ActualBalance: String(opts.actualBalance),\n Expiry: \"\",\n Note: note,\n BalanceMessage: balanceMessage,\n },\n ],\n UserAuthorization: {\n UserId: opts.userId,\n Password: opts.password,\n },\n VerifyAuthorization: {\n UserId: \"0\",\n Password: \"\",\n },\n };\n console.log(\"CHECK\", body);\n // return { success: true, message: \"Demo\" };\n const res = await ddbookFetch(\"/General/StockCheck_Save\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n __RequestVerificationToken: antiForgeryToken,\n __Entropy: entropy,\n },\n body: JSON.stringify(body),\n });\n\n const result = await res.json();\n if (result.Result === \"success\") {\n return { success: true, message: result.Message || \"Stock check saved\" };\n }\n return { success: false, message: result.Message || \"Stock check failed\" };\n}\n\n// ---------- Week status (Sunday–Saturday) ----------\n\nfunction computeWeekStatus(\n lastCheckedISO: string | null,\n): \"done\" | \"due\" | \"overdue\" {\n if (!lastCheckedISO) return \"overdue\";\n const now = new Date();\n const lastChecked = new Date(lastCheckedISO);\n\n // Compute current week start (Sunday 00:00 AEST)\n // AEDT = UTC+11\n const AEST_OFFSET_MS = 11 * 60 * 60 * 1000;\n const nowAest = new Date(\n now.getTime() + now.getTimezoneOffset() * 60000 + AEST_OFFSET_MS,\n );\n const day = nowAest.getDay(); // 0=Sun\n const startOfWeekAest = new Date(nowAest);\n startOfWeekAest.setDate(nowAest.getDate() - day);\n startOfWeekAest.setHours(0, 0, 0, 0);\n // Convert back to UTC\n const startOfWeekUtc = new Date(\n startOfWeekAest.getTime() -\n AEST_OFFSET_MS +\n nowAest.getTimezoneOffset() * 60000,\n );\n\n if (lastChecked >= startOfWeekUtc) return \"done\";\n const diffDays = (now.getTime() - lastChecked.getTime()) /\n (1000 * 60 * 60 * 24);\n return diffDays > 7 ? \"overdue\" : \"due\";\n}\n\n// ---------- CORS ----------\n\nfunction corsHeaders(req: Request): Record {\n // @ts-ignore\n const allowed = typeof Deno !== \"undefined\"\n ? Deno.env.get(\"ALLOWED_ORIGIN\") || \"*\"\n : \"*\";\n return {\n \"Access-Control-Allow-Origin\": allowed,\n \"Access-Control-Allow-Methods\": \"GET, POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n };\n}\n\nfunction jsonResponse(data: unknown, status = 200, req?: Request): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: {\n \"Content-Type\": \"application/json\",\n ...corsHeaders(req!),\n },\n });\n}\n\n// ---------- Router ----------\n\nexport default async function handler(req: Request): Promise {\n const url = new URL(req.url);\n const path = url.pathname;\n\n // Handle CORS preflight\n if (req.method === \"OPTIONS\") {\n return new Response(null, { status: 204, headers: corsHeaders(req) });\n }\n\n try {\n // GET /api/users\n if (path === \"/api/users\" && req.method === \"GET\") {\n const users = Object.entries(USER_REGISTER_MAP).map(([id, info]) => ({\n id,\n name: info.name,\n registerId: info.registerId,\n registerName: info.registerName,\n }));\n return jsonResponse({ users }, 200, req);\n }\n\n // GET /api/all-users (includes those without kits, for witness list)\n if (path === \"/api/all-users\" && req.method === \"GET\") {\n return jsonResponse({ users: ALL_AUTHORIZED_USERS }, 200, req);\n }\n\n // GET /api/status/:userId\n const statusMatch = path.match(/^\\/api\\/status\\/(\\d+)$/);\n if (statusMatch && req.method === \"GET\") {\n const userId = statusMatch[1];\n const mapping = USER_REGISTER_MAP[userId];\n if (!mapping) {\n return jsonResponse({ error: \"Unknown user\" }, 404, req);\n }\n\n const rows = await loadStockCheckData();\n const row = rows.find(\n (r) => r.registerId === mapping.registerId && r.drugId === DRUG_ID,\n );\n\n const lastChecked = row?.lastChecked || null;\n const weekStatus = computeWeekStatus(lastChecked);\n\n const status: StockStatus = {\n userId,\n name: mapping.name,\n registerName: mapping.registerName,\n registerId: mapping.registerId,\n drugName: DRUG_NAME,\n drugId: DRUG_ID,\n calculatedBalance: row?.calculatedBalance ?? null,\n lastChecked,\n weekStatus,\n overdue: weekStatus === \"overdue\",\n };\n\n return jsonResponse(status, 200, req);\n }\n\n // POST /api/stock-check\n if (path === \"/api/stock-check\" && req.method === \"POST\") {\n const body = await req.json();\n const { userId, password, actualBalance, witnessName, witnessType } =\n body;\n\n if (!userId || !password || actualBalance == null) {\n return jsonResponse(\n { success: false, message: \"Missing required fields\" },\n 400,\n req,\n );\n }\n\n const result = await submitStockCheck({\n userId,\n password,\n actualBalance: Number(actualBalance),\n witnessName: witnessName || null,\n witnessType: witnessType || \"person\",\n });\n\n return jsonResponse(result, result.success ? 200 : 400, req);\n }\n\n // DEBUG: raw stock data\n if (path === \"/api/debug/stock-data\" && req.method === \"GET\") {\n const rows = await loadStockCheckData();\n return jsonResponse({ rows }, 200, req);\n }\n\n // Health check\n if (path === \"/\" || path === \"/api/health\") {\n return jsonResponse(\n { status: \"ok\", service: \"hatzolah-stock-check\" },\n 200,\n req,\n );\n }\n\n return jsonResponse({ error: \"Not found\" }, 404, req);\n } catch (err: any) {\n console.error(\"Handler error:\", err);\n return jsonResponse(\n { success: false, message: err.message || \"Internal server error\" },\n 500,\n req,\n );\n }\n}","createdAt",["D",1777376182349],"branchVersion","branchId","824ebf30-0d21-11f1-8793-42dde27851f2","id","824e4208-0d21-11f1-8793-42dde27851f2","hatzolahStockCheck",["D",1771457299640],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","d24a142c-c3cc-4e35-a818-5e2a592a70ae","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","325fed75-4200-4045-98bd-19800c2df917","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_94":93,"_101":97},"org",{"_94":93,"_95":-5,"_96":97,"_18":55,"_98":99,"_100":25},"branch",{"_13":14,"_32":84,"_43":42,"_85":44,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":45,"_92":93},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","pugio","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18yaUl3V1ZNbThMRUE4NHpZZ1lPU1M1enpYajMifQ","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":230,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":231,"_79":232,"_81":233,"_83":25},"tree",[175,180,181,182,183],"files",[175,176,177,178,179,180,181,182,183],"counts",{"_165":61,"_166":148,"_167":61,"_168":169,"_170":171},"contents",[124,125,126,127,128],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":158,"_32":159,"_30":160,"_132":-5,"_41":42,"_40":161,"_134":119,"_38":162,"_13":61,"_33":163,"_35":-5,"_24":25,"_137":-5,"_27":164},{"_43":151,"_32":152,"_30":153,"_132":-5,"_41":42,"_40":154,"_134":119,"_38":155,"_13":148,"_33":20,"_35":156,"_24":25,"_137":-5,"_27":157},{"_43":143,"_32":144,"_30":145,"_132":-5,"_41":42,"_40":146,"_134":119,"_38":147,"_13":148,"_33":20,"_35":149,"_24":25,"_137":-5,"_27":150},{"_43":139,"_32":28,"_30":31,"_132":-5,"_41":42,"_40":14,"_134":119,"_38":140,"_13":141,"_33":34,"_35":37,"_24":25,"_137":-5,"_27":142},{"_43":129,"_32":130,"_30":131,"_132":-5,"_41":42,"_40":133,"_134":119,"_38":135,"_13":61,"_33":20,"_35":136,"_24":25,"_137":-5,"_27":138},"d0c053ea-0d21-11f1-91b6-42dde27851f2","deno.json","d0c05480-0d21-11f1-91b6-42dde27851f2","parentId",3,"latest",["D",1771457431172],"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/98f62cee78e85bfc47c62ed703777c6bc8794f1c/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": true,\n \"types\": [\"https://www.val.town/types/valtown.d.ts\"],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"include\": [\"deno:/https/esm.town/**/*\"],\n \"rules\": {\n \"exclude\": [\"no-explicit-any\"]\n }\n },\n \"node_modules_dir\": false,\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true,\n \"unstable-sloppy-imports\": true\n }\n}","label",[130],"7b58b77a-42f6-11f1-adf1-42b51c65c3df",["D",1777376182349],7,[28],"caf85118-0d23-11f1-ae58-42dde27851f2","AGENTS.md","d0bb8b8a-0d21-11f1-882e-42dde27851f2",9,["D",1771458280518],1,"You are an advanced assistant specialized in generating Val Town code.\n\nUse the `vt` tool to re-deploy (we've already deployed once).\n\n## Core Guidelines\n\n- Ask clarifying questions when requirements are ambiguous\n- Provide complete, functional solutions rather than skeleton implementations\n- Test your logic against edge cases before presenting the final solution\n- Ensure all code follows Val Town's specific platform requirements\n- If a section of code that you're working on is getting too complex, consider refactoring it into subcomponents\n\n## Code Standards\n\n- Generate code in TypeScript or TSX\n- Add appropriate TypeScript types and interfaces for all data structures\n- Prefer official SDKs or libraries than writing API calls directly\n- Ask the user to supply API or library documentation if you are at all unsure about it\n- **Never bake in secrets into the code** - always use environment variables\n- Include comments explaining complex logic (avoid commenting obvious operations)\n- Follow modern ES6+ conventions and functional programming practices if possible\n\n## Types of triggers\n\n### 1. HTTP Trigger\n\n- Create web APIs and endpoints\n- Handle HTTP requests and responses\n- Example structure:\n\n```ts\nexport default async function (req: Request) {\n return new Response(\"Hello World\");\n}\n```\n\nFiles that are HTTP triggers have http in their name like `foobar.http.tsx`\n\n### 2. Cron Triggers\n\n- Run on a schedule\n- Use cron expressions for timing\n- Example structure:\n\n```ts\nexport default async function () {\n // Scheduled task code\n}\n```\n\nFiles that are Cron triggers have cron in their name like `foobar.cron.tsx`\n\n### 3. Email Triggers\n\n- Process incoming emails\n- Handle email-based workflows\n- Example structure:\n\n```ts\nexport default async function (email: Email) {\n // Process email\n}\n```\n\nFiles that are Email triggers have email in their name like `foobar.email.tsx`\n\n\n## Val Town Standard Libraries\n\nVal Town provides several hosted services and utility functions.\n\n### Blob Storage\n\n```ts\nimport { blob } from \"https://esm.town/v/std/blob\";\nawait blob.setJSON(\"myKey\", { hello: \"world\" });\nlet blobDemo = await blob.getJSON(\"myKey\");\nlet appKeys = await blob.list(\"app_\");\nawait blob.delete(\"myKey\");\n```\n\n### SQLite\n\n```ts\nimport { sqlite } from \"https://esm.town/v/stevekrouse/sqlite\";\nconst TABLE_NAME = 'todo_app_users_2';\n// Create table - do this before usage and change table name when modifying schema\nawait sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE_NAME} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n name TEXT NOT NULL\n)`);\n// Query data\nconst result = await sqlite.execute(`SELECT * FROM ${TABLE_NAME} WHERE id = ?`, [1]);\n```\n\nNote: When changing a SQLite table's schema, change the table's name (e.g., add _2 or _3) to create a fresh table.\n\n### OpenAI\n\n```ts\nimport { OpenAI } from \"https://esm.town/v/std/openai\";\nconst openai = new OpenAI();\nconst completion = await openai.chat.completions.create({\n messages: [\n { role: \"user\", content: \"Say hello in a creative way\" },\n ],\n model: \"gpt-4o-mini\",\n max_tokens: 30,\n});\n```\n\n### Email\n\n```ts\nimport { email } from \"https://esm.town/v/std/email\";\n// By default emails the owner of the val\nawait email({ \n subject: \"Hi\", \n text: \"Hi\", \n html: \"

Hi

\"\n});\n```\n\n## Val Town Utility Functions\n\nVal Town provides several utility functions to help with common project tasks.\n\n### Importing Utilities\n\nAlways import utilities with version pins to avoid breaking changes:\n\n```ts\nimport { parseProject, readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n```\n\n### Available Utilities\n\n\n#### **serveFile** - Serve project files with proper content types\n\nFor example, in Hono:\n\n```ts\n// serve all files in frontend/ and shared/\napp.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n```\n\n#### **readFile** - Read files from within the project:\n\n```ts\n// Read a file from the project\nconst fileContent = await readFile(\"/frontend/index.html\", import.meta.url);\n```\n\n#### **listFiles** - List all files in the project\n\n```ts\nconst files = await listFiles(import.meta.url);\n```\n\n#### **parseProject** - Extract information about the current project from import.meta.url\n\nThis is useful for including info for linking back to a val, ie in \"view source\" urls:\n\n```ts\nconst projectVal = parseProject(import.meta.url);\nconsole.log(projectVal.username); // Owner of the project\nconsole.log(projectVal.name); // Project name\nconsole.log(projectVal.version); // Version number\nconsole.log(projectVal.branch); // Branch name\nconsole.log(projectVal.links.self.project); // URL to the project page\n```\n\nHowever, it's *extremely importing* to note that `parseProject` and other Standard Library utilities ONLY RUN ON THE SERVER.\nIf you need access to this data on the client, run it in the server and pass it to the client by splicing it into the HTML page\nor by making an API request for it.\n\n## Val Town Platform Specifics\n\n- **Redirects:** Use `return new Response(null, { status: 302, headers: { Location: \"/place/to/redirect\" }})` instead of `Response.redirect` which is broken\n- **Images:** Avoid external images or base64 images. Use emojis, unicode symbols, or icon fonts/libraries instead\n- **AI Image:** To inline generate an AI image use: `

`\n- **Storage:** DO NOT use the Deno KV module for storage\n- **Browser APIs:** DO NOT use the `alert()`, `prompt()`, or `confirm()` methods\n- **Weather Data:** Use open-meteo for weather data (doesn't require API keys) unless otherwise specified\n- **View Source:** Add a view source link by importing & using `import.meta.url.replace(\"ems.sh\", \"val.town)\"` (or passing this data to the client) and include `target=\"_top\"` attribute\n- **Error Debugging:** Add `` to HTML to capture client-side errors\n- **Error Handling:** Only use try...catch when there's a clear local resolution; Avoid catches that merely log or return 500s. Let errors bubble up with full context\n- **Environment Variables:** Use `Deno.env.get('keyname')` when you need to, but generally prefer APIs that don't require keys\n- **Imports:** Use `https://esm.sh` for npm and Deno dependencies to ensure compatibility on server and browser\n- **Storage Strategy:** Only use backend storage if explicitly required; prefer simple static client-side sites\n- **React Configuration:** When using React libraries, pin versions with `?deps=react@18.2.0,react-dom@18.2.0` and start the file with `/** @jsxImportSource https://esm.sh/react@18.2.0 */`\n- Ensure all React dependencies and sub-dependencies are pinned to the same version\n- **Styling:** Default to using TailwindCSS via `` unless otherwise specified\n\n## Project Structure and Design Patterns\n\n### Recommended Directory Structure\n```\n├── backend/\n│ ├── database/\n│ │ ├── migrations.ts # Schema definitions\n│ │ ├── queries.ts # DB query functions\n│ │ └── README.md\n│ └── routes/ # Route modules\n│ ├── [route].ts\n│ └── static.ts # Static file serving\n│ ├── index.ts # Main entry point\n│ └── README.md\n├── frontend/\n│ ├── components/\n│ │ ├── App.tsx\n│ │ └── [Component].tsx\n│ ├── favicon.svg\n│ ├── index.html # Main HTML template\n│ ├── index.tsx # Frontend JS entry point\n│ ├── README.md\n│ └── style.css\n├── README.md\n└── shared/\n ├── README.md\n └── utils.ts # Shared types and functions\n```\n\n### Backend (Hono) Best Practices\n\n- Hono is the recommended API framework\n- Main entry point should be `backend/index.ts`\n- **Static asset serving:** Use the utility functions to read and serve project files:\n ```ts\n import { readFile, serveFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\n \n // serve all files in frontend/ and shared/\n app.get(\"/frontend/*\", c => serveFile(c.req.path, import.meta.url));\n app.get(\"/shared/*\", c => serveFile(c.req.path, import.meta.url));\n \n // For index.html, often you'll want to bootstrap with initial data\n app.get(\"/\", async c => {\n let html = await readFile(\"/frontend/index.html\", import.meta.url);\n \n // Inject data to avoid extra round-trips\n const initialData = await fetchInitialData();\n const dataScript = ``;\n \n html = html.replace(\"\", `${dataScript}`);\n return c.html(html);\n });\n ```\n- Create RESTful API routes for CRUD operations\n- Always include this snippet at the top-level Hono app to re-throwing errors to see full stack traces:\n ```ts\n // Unwrap Hono errors to see original error details\n app.onError((err, c) => {\n throw err;\n });\n ```\n\n### Database Patterns\n- Run migrations on startup or comment out for performance\n- Change table names when modifying schemas rather than altering\n- Export clear query functions with proper TypeScript typing\n\n## Common Gotchas and Solutions\n\n1. **Environment Limitations:** \n - Val Town runs on Deno in a serverless context, not Node.js\n - Code in `shared/` must work in both frontend and backend environments\n - Cannot use `Deno` keyword in shared code\n - Use `https://esm.sh` for imports that work in both environments\n\n2. **SQLite Peculiarities:**\n - Limited support for ALTER TABLE operations\n - Create new tables with updated schemas and copy data when needed\n - Always run table creation before querying\n\n3. **React Configuration:**\n - All React dependencies must be pinned to 18.2.0\n - Always include `@jsxImportSource https://esm.sh/react@18.2.0` at the top of React files\n - Rendering issues often come from mismatched React versions\n\n4. **File Handling:**\n - Val Town only supports text files, not binary\n - Use the provided utilities to read files across branches and forks\n - For files in the project, use `readFile` helpers\n\n5. **API Design:**\n - `fetch` handler is the entry point for HTTP vals\n - Run the Hono app with `export default app.fetch // This is the entry point for HTTP vals`\n\n",[144],"254f87f2-0d2f-11f1-adb7-42dde27851f2",".vtignore","d0cdd182-0d21-11f1-bb08-42dde27851f2",14,["D",1771463156563],".git\n.vscode\n.cursorrules\n.DS_Store\n.specstory\n.vt\nnode_modules\nvendor",[152],"ca6f638a-0d23-11f1-8538-42dde27851f2",".specstory","ca6f6452-0d23-11f1-8538-42dde27851f2",6,["D",1771458279644],"directory",[159],"pulls","branches","forks","envVars",{"_172":133,"_174":61},"connections",{"_172":61,"_173":61},"count","unfilledCount","emptyCount",{"_43":158,"_32":159,"_30":160,"_132":-5,"_41":42,"_40":161,"_134":119,"_38":227,"_13":61,"_33":163,"_35":-5,"_24":25,"_137":-5,"_185":228,"_27":229},{"_43":221,"_32":222,"_30":223,"_132":160,"_41":42,"_40":141,"_134":119,"_38":224,"_13":61,"_33":163,"_35":-5,"_24":25,"_137":-5,"_185":225,"_27":226},{"_43":213,"_32":214,"_30":215,"_132":160,"_41":42,"_40":216,"_134":119,"_38":217,"_13":61,"_33":20,"_35":218,"_24":25,"_137":-5,"_185":219,"_27":220},{"_43":205,"_32":206,"_30":207,"_132":160,"_41":42,"_40":208,"_134":119,"_38":209,"_13":61,"_33":20,"_35":210,"_24":25,"_137":-5,"_185":211,"_27":212},{"_43":197,"_32":198,"_30":199,"_132":160,"_41":42,"_40":200,"_134":119,"_38":201,"_13":61,"_33":20,"_35":202,"_24":25,"_137":-5,"_185":203,"_27":204},{"_43":151,"_32":152,"_30":153,"_132":-5,"_41":42,"_40":154,"_134":119,"_38":194,"_13":148,"_33":20,"_35":156,"_24":25,"_137":-5,"_185":195,"_27":196},{"_43":143,"_32":144,"_30":145,"_132":-5,"_41":42,"_40":146,"_134":119,"_38":191,"_13":148,"_33":20,"_35":149,"_24":25,"_137":-5,"_185":192,"_27":193},{"_43":139,"_32":28,"_30":31,"_132":-5,"_41":42,"_40":14,"_134":119,"_38":188,"_13":141,"_33":34,"_35":37,"_24":25,"_137":-5,"_185":189,"_27":190},{"_43":129,"_32":130,"_30":131,"_132":-5,"_41":42,"_40":133,"_134":119,"_38":184,"_13":61,"_33":20,"_35":136,"_24":25,"_137":-5,"_185":186,"_27":187},["D",1771457431172],"children",[],[130],["D",1777376182349],[],[28],["D",1771458280518],[],[144],["D",1771463156563],[],[152],"cb29975a-0d23-11f1-8a57-42dde27851f2",".what-is-this.md","cb29980e-0d23-11f1-8a57-42dde27851f2",12,["D",1771458280865],"# SpecStory Artifacts Directory\n \nThis directory is automatically created and maintained by the SpecStory extension to preserve your AI chat history.\n \n## What's Here?\n \n- `.specstory/history`: Contains auto-saved markdown files of your AI coding sessions (default path, configurable in `specstory.outputPath` setting)\n - Each file represents a separate AI chat session\n - If you enable auto-save, files are automatically updated as you work\n - You can enable/disable the auto-save feature in the SpecStory settings, it is disabled by default\n- `.specstory/.project.json`: Contains the persistent project identity for the current workspace\n - This file is only present if you enable AI rules derivation\n - This is used to provide consistent project identity of your project, even as the workspace is moved or renamed\n- `.specstory/ai_rules_backups`: Contains backups of the `.cursor/rules/derived-cursor-rules.mdc` or the `.github/copilot-instructions.md` file\n - Backups are automatically created each time the `.cursor/rules/derived-cursor-rules.mdc` or the `.github/copilot-instructions.md` file is updated\n - You can enable/disable the AI Rules derivation feature in the SpecStory settings, it is disabled by default\n- `.specstory/.gitignore`: Contains directives to exclude non-essential contents of the `.specstory` directory from version control\n - Add `/history` to exclude the auto-saved chat history from version control\n\n## Valuable Uses\n \n- Capture: Keep your context window up-to-date when starting new Chat/Composer sessions via @ references\n- Search: For previous prompts and code snippets \n- Learn: Meta-analyze your patterns and learn from your past experiences\n- Derive: Keep the AI on course with your past decisions by automatically deriving rules from your AI interactions\n \n## Version Control\n \nWe recommend keeping this directory under version control to maintain a history of your AI interactions. However, if you prefer not to version these files, you can exclude them by adding this to your `.gitignore`:\n \n```\n.specstory/**\n```\n\nWe recommend __not__ keeping the `.specstory/ai_rules_backups` directory under version control if you are already using git to version your AI rules, and committing regularly. You can exclude it by adding this to your `.gitignore`:\n\n```\n.specstory/ai_rules_backups\n```\n\n## Searching Your Codebase\n \nWhen searching your codebase, search results may include your previous AI coding interactions. To focus solely on your actual code files, you can exclude the AI interaction history from search results.\n \nTo exclude AI interaction history:\n \n1. Open the \"Find in Files\" search in Cursor or VSCode (Cmd/Ctrl + Shift + F)\n2. Navigate to the \"files to exclude\" section\n3. Add the following pattern:\n \n```\n.specstory/*\n```\n \nThis will ensure your searches only return results from your working codebase files.\n\n## Notes\n\n- Auto-save only works when Cursor or VSCode flushes sqlite database data to disk. This results in a small delay after the AI response is complete before SpecStory can save the history.\n\n## Settings\n \nYou can control auto-saving behavior in Cursor or VSCode:\n \n1. Open Cursor/Code → Settings → VS Code Settings (Cmd/Ctrl + ,)\n2. Search for \"SpecStory\"\n3. Find \"Auto Save\" setting to enable/disable\n \nAuto-save occurs when changes are detected in the sqlite database, or every 2 minutes as a safety net.",[],[159,198],"cafea982-0d23-11f1-974c-42dde27851f2",".project.json","cafeaa4a-0d23-11f1-974c-42dde27851f2",10,["D",1771458280477],"{\n \"workspace_id\": \"e7cd-ceb3-57f3-0640\",\n \"workspace_id_at\": \"2026-02-18T23:39:45.117Z\",\n \"project_name\": \"backend\",\n \"cloud_sync\": false\n}",[],[159,206],"caede2b4-0d23-11f1-aaed-42dde27851f2",".gitignore","caede49e-0d23-11f1-aaed-42dde27851f2",8,["D",1771458280471],"# SpecStory project identity file\n/.project.json\n# SpecStory explanation file\n/.what-is-this.md\n",[],[159,214],"cab2466e-0d23-11f1-8e4c-42dde27851f2","history","cab24722-0d23-11f1-8e4c-42dde27851f2",["D",1771458280081],[],[159,222],["D",1771458279644],[176,177,178,179],[159],["D",1771457299640],{"_94":93,"_101":97},{"_94":93,"_95":-5,"_96":97,"_18":55,"_98":99,"_100":25},{"_13":14,"_32":84,"_43":42,"_85":44,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":45,"_92":93},"ctx",{"_77":-5,"_121":267,"_268":269,"_270":271,"_272":25,"_273":25,"_274":25,"_275":119,"_276":-5,"_277":-7,"_278":-7,"_279":61,"_280":25,"_281":25,"_282":-5,"_283":25,"_284":25,"_285":25,"_286":-5},"ENV",{"_238":239,"_240":241,"_242":84,"_243":244,"_245":246,"_247":248,"_249":250,"_251":252,"_253":254,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v18