[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_246":247,"_248":249},"routes/_app.x.$handle.$name",{"_96":95,"_31":43,"_105":86,"_26":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":24,"_120":121,"_122":123,"_124":-5,"_125":-5,"_126":127},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":-5,"_55":24,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":63,"_64":65,"_66":67,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":24},"version",49,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","broadcast.ts","latestPath","fileId","4a2692e0-7e82-11f1-9526-1607ee4eb77e","name","fileType","script","content","// Announce a release. Run this by hand when a \"what's new\" popup goes out.\n// Only reaches people who left \"App updates\" switched on.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { pushToUser } from \"./push.ts\";\n\n// ---- edit these two lines, then run ----\nconst TITLE = \"Stash just got notifications\";\nconst BODY = \"Bills, cash-flow forecasting and a proper desktop layout. Tap to see what's new.\";\nconst DRY_RUN = true; // flip to false to actually send\n// ----------------------------------------\n\nconst users = await sqlite.execute(\n `SELECT DISTINCT u.id, u.username FROM mb_users u JOIN mb_push p ON p.user_id = u.id`,\n);\n\nconsole.log(`${DRY_RUN ? \"[DRY RUN] \" : \"\"}\"${TITLE}\"`);\nconsole.log(`${users.rows.length} user(s) have a device subscribed\\n`);\n\nlet total = 0;\nfor (const u of users.rows as any[]) {\n const st: any = (await blob.getJSON(\"bud_\" + u.id)) ?? {};\n const n = st.notify || {};\n if (!n.enabled) { console.log(`@${u.username}: notifications off — skipped`); continue; }\n if (n.updates === false) { console.log(`@${u.username}: opted out of update notices — skipped`); continue; }\n\n if (DRY_RUN) {\n console.log(`@${u.username}: WOULD send`);\n continue;\n }\n const sent = await pushToUser(u.id, { title: TITLE, body: BODY, url: \"/\", tag: \"update\" });\n total += sent;\n console.log(`@${u.username}: sent to ${sent} device(s)`);\n}\n\nconsole.log(`\\n${DRY_RUN ? \"dry run — nothing sent\" : `delivered to ${total} device(s)`}`);\n","createdAt",["D",1783923347989],"branchVersion","branchId","1d7321a2-4f46-4733-b86a-498e1d666a4b","id","9a8f532d-d413-48dd-9c0f-576fd227edcf","money-budget",["D",1783644524287],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Pocket budgeting app — syncs across phone and laptop","imageUrl","9ce636d8-a261-43ee-aad5-aba0afcc9805","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f497e-7eff-7029-9247-01cc1300f2ae","tursoName","9a8f532dd41348dd9c0f576fd227edcf","tursoHostname","9a8f532dd41348dd9c0f576fd227edcf-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789525245864],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":53,"_101":102,"_103":24},"branch",{"_13":85,"_31":86,"_41":40,"_87":42,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":43,"_94":95},"isOwned",70,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","rileys1011","handle","displayName","Riley Smith","avatar","https://lh3.googleusercontent.com/a/ACg8ocKLn-WocVfdzaKwIdLHV1VQfr-Cu-Zr_dXM84NUtd0tHciAd52i=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":241,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":-5,"_55":24,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":63,"_64":65,"_66":242,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":243,"_80":244,"_82":245,"_84":24},"tree",[208,209,210,211,212,213,214,215],"files",[208,209,210,211,212,213,214,215],"counts",{"_196":59,"_197":198,"_199":59,"_200":201,"_202":203},"contents",[128,129,130,131,132,133,134,135],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_41":193,"_31":27,"_29":30,"_139":-5,"_39":40,"_38":14,"_141":24,"_36":194,"_13":59,"_32":33,"_34":35,"_23":24,"_144":-5,"_26":195},{"_41":186,"_31":187,"_29":188,"_139":-5,"_39":40,"_38":189,"_141":123,"_36":190,"_13":59,"_32":151,"_34":191,"_23":24,"_144":-5,"_26":192},{"_41":179,"_31":180,"_29":181,"_139":-5,"_39":40,"_38":182,"_141":123,"_36":183,"_13":59,"_32":20,"_34":184,"_23":24,"_144":-5,"_26":185},{"_41":172,"_31":173,"_29":174,"_139":-5,"_39":40,"_38":175,"_141":123,"_36":176,"_13":59,"_32":20,"_34":177,"_23":24,"_144":-5,"_26":178},{"_41":164,"_31":165,"_29":166,"_139":-5,"_39":40,"_38":167,"_141":24,"_36":168,"_13":169,"_32":20,"_34":170,"_23":24,"_144":-5,"_26":171},{"_41":154,"_31":155,"_29":156,"_139":-5,"_39":40,"_38":157,"_141":24,"_36":158,"_13":159,"_32":160,"_34":161,"_23":24,"_144":162,"_26":163},{"_41":146,"_31":147,"_29":148,"_139":-5,"_39":40,"_38":149,"_141":24,"_36":150,"_13":59,"_32":151,"_34":152,"_23":24,"_144":-5,"_26":153},{"_41":136,"_31":137,"_29":138,"_139":-5,"_39":40,"_38":140,"_141":123,"_36":142,"_13":59,"_32":33,"_34":143,"_23":24,"_144":-5,"_26":145},"c31f8aea-8615-414c-ad4b-6d4c1e0eba66","push.ts","1cf0f1b2-7e82-11f1-b75d-1607ee4eb77e","parentId",47,"latest",["D",1783923272134],"// Web Push sender (lives on main so the cron can use it).\nimport * as webpush from \"jsr:@negrel/webpush\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst PRIV = JSON.parse(Deno.env.get(\"VAPID_PRIVATE_JWK\") || \"{}\");\n\nfunction vapidJwks() {\n const { kty, crv, x, y, d } = PRIV;\n return {\n publicKey: { kty, crv, x, y, key_ops: [\"verify\"], ext: true },\n privateKey: { kty, crv, x, y, d, key_ops: [\"sign\"], ext: true },\n };\n}\n\nlet _server: any = null;\nasync function server() {\n if (_server) return _server;\n const keys = await webpush.importVapidKeys(vapidJwks() as any, { extractable: false });\n _server = await webpush.ApplicationServer.new({\n contactInformation: \"mailto:rileysmith1272@gmail.com\",\n vapidKeys: keys,\n });\n return _server;\n}\n\nexport type Sub = { endpoint: string; p256dh: string; auth: string };\n\nexport async function sendPush(sub: Sub, payload: Record): Promise {\n try {\n const app = await server();\n const subscriber = app.subscribe({\n endpoint: sub.endpoint,\n keys: { p256dh: sub.p256dh, auth: sub.auth },\n } as any);\n await subscriber.pushTextMessage(JSON.stringify(payload), {});\n return true;\n } catch (e: any) {\n const msg = String(e?.message || e);\n if (msg.includes(\"404\") || msg.includes(\"410\") || msg.includes(\"Gone\") || msg.includes(\"NotFound\")) {\n try { await sqlite.execute({ sql: \"DELETE FROM mb_push WHERE endpoint = ?\", args: [sub.endpoint] }); } catch (_) {}\n return false;\n }\n console.log(\"push failed:\", msg);\n return false;\n }\n}\n\nexport async function pushToUser(userId: string, payload: Record): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT endpoint, p256dh, auth FROM mb_push WHERE user_id = ?\",\n args: [userId],\n });\n let ok = 0;\n for (const s of r.rows as unknown as Sub[]) if (await sendPush(s, payload)) ok++;\n return ok;\n}\n","label",[137],"702f4d83-d417-4967-9bf4-1c6fdaaab1e1","notify.ts","2fc67780-7e82-11f1-963c-1607ee4eb77e",48,["D",1783923303745],"interval","// Daily notification run. Decides what is worth interrupting someone for, and nothing else.\n// Runs after the bank refresh cron. Every check is opt-out per user.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { pushToUser } from \"./push.ts\";\n\nconst DAY = 86400000;\nconst PER: Record = { weekly: 7, fortnightly: 14, monthly: 30.44, \"2-monthly\": 60.9, quarterly: 91.3, yearly: 365 };\nconst r2 = (v: number) => Math.round((v + Number.EPSILON) * 100) / 100;\nconst money = (v: number) => (v < 0 ? \"-$\" : \"$\") + Math.abs(v).toFixed(2);\nconst fmtDay = (ts: number) => new Date(ts).toLocaleDateString(\"en-NZ\", { day: \"numeric\", month: \"short\" });\n\n/** Don't send the same thing every single day. Remembers what we last told each user. */\nasync function seen(userId: string) {\n return ((await blob.getJSON(\"notif_\" + userId)) ?? {}) as Record;\n}\nasync function markSeen(userId: string, s: Record) {\n await blob.setJSON(\"notif_\" + userId, s);\n}\nfunction due(s: Record, key: string, everyDays: number) {\n const last = s[key] || 0;\n return Date.now() - last > everyDays * DAY;\n}\n\nfunction acctTotal(a: any) {\n return r2((a.pockets || []).reduce((t: number, p: any) => t + (p.balance || 0), 0));\n}\n\n/** Forward cash-flow, same rules as the app: needs income AND outgoings or it stays quiet. */\nfunction cashflow(st: any, days: number) {\n const now = Date.now(), to = now + days * DAY;\n const bills = (st.bills || []).filter((b: any) => !b.paused);\n const loans: any[] = [];\n ((st.worth && st.worth.debts) || []).forEach((d: any) => {\n const parts = (d.kind === \"mortgage\" && (d.splits || []).length) ? d.splits : [d];\n parts.forEach((p: any) => {\n const pay = Math.abs(parseFloat(p.repayment) || 0);\n if (!pay) return;\n const f = p.freq || \"monthly\";\n const next = p.nextDue ? Date.parse(p.nextDue + \"T00:00:00\") : now + PER[f] * DAY;\n loans.push({ name: d.name, amount: pay, freq: f, kind: \"loan\", nextTs: isNaN(next) ? now + PER[f] * DAY : next });\n });\n });\n const items = bills.concat(loans);\n const hasIncome = items.some((i: any) => i.kind === \"income\");\n const hasOut = items.some((i: any) => i.kind !== \"income\");\n if (!hasIncome || !hasOut) return null; // half a picture is worse than none\n\n const evs: any[] = [];\n items.forEach((it: any) => {\n const p = (PER[it.freq] || 30.44) * DAY;\n let t = it.nextTs, guard = 0;\n while (t < now) t += p;\n while (t <= to && guard++ < 600) {\n evs.push({ ts: t, amt: it.kind === \"income\" ? Math.abs(it.amount) : -Math.abs(it.amount), name: it.name });\n t += p;\n }\n });\n evs.sort((a, b) => a.ts - b.ts);\n let bal = r2((st.accounts || []).reduce((t: number, a: any) => t + acctTotal(a), 0));\n let shortfall: any = null;\n for (const e of evs) {\n bal = r2(bal + e.amt);\n if (bal < 0 && !shortfall) shortfall = { ts: e.ts, bal, name: e.name };\n }\n return { shortfall, events: evs };\n}\n\nconst users = await sqlite.execute(\n `SELECT DISTINCT u.id, u.username FROM mb_users u JOIN mb_push p ON p.user_id = u.id`,\n);\nconsole.log(`checking ${users.rows.length} user(s) with notifications on`);\n\nfor (const u of users.rows as any[]) {\n const st: any = (await blob.getJSON(\"bud_\" + u.id)) ?? {};\n const n = st.notify || {};\n if (!n.enabled) { console.log(`@${u.username}: notifications off`); continue; }\n const s = await seen(u.id);\n const sent: string[] = [];\n\n // --- transactions waiting to be sorted ---\n if (n.inbox !== false) {\n const c = (st.inbox || []).length;\n if (c > 0 && due(s, \"inbox\", 1)) {\n await pushToUser(u.id, {\n title: c === 1 ? \"1 transaction to sort\" : `${c} transactions to sort`,\n body: \"Your bank sent through new activity.\",\n url: \"/\", tag: \"inbox\",\n });\n s.inbox = Date.now(); sent.push(\"inbox\");\n }\n }\n\n // --- a bill lands tomorrow ---\n if (n.bills !== false) {\n const now = Date.now();\n const soon = (st.bills || []).filter((b: any) =>\n !b.paused && b.kind !== \"income\" && b.nextTs > now && b.nextTs <= now + 2 * DAY);\n if (soon.length && due(s, \"bills\", 1)) {\n const b = soon[0];\n await pushToUser(u.id, {\n title: `${b.name} — ${money(Math.abs(b.amount))}`,\n body: soon.length > 1 ? `Due ${fmtDay(b.nextTs)}, plus ${soon.length - 1} more.` : `Due ${fmtDay(b.nextTs)}.`,\n url: \"/\", tag: \"bills\",\n });\n s.bills = Date.now(); sent.push(\"bills\");\n }\n }\n\n // --- the forecast says you run out of money ---\n if (n.shortfall !== false) {\n const cf = cashflow(st, 60);\n if (cf && cf.shortfall && due(s, \"shortfall\", 7)) {\n await pushToUser(u.id, {\n title: \"You are heading for empty\",\n body: `Your forecast runs out on ${fmtDay(cf.shortfall.ts)} after ${cf.shortfall.name}.`,\n url: \"/\", tag: \"shortfall\",\n });\n s.shortfall = Date.now(); sent.push(\"shortfall\");\n }\n }\n\n // --- a fixed mortgage rate is about to end ---\n if (n.refix !== false) {\n const debts = (st.worth && st.worth.debts) || [];\n for (const d of debts) {\n for (const p of (d.splits || [])) {\n if (p.type !== \"fixed\" || !p.fixedUntil) continue;\n const days = Math.ceil((Date.parse(p.fixedUntil + \"T00:00:00\") - Date.now()) / DAY);\n if (days > 0 && days <= 90 && due(s, \"refix:\" + d.id, 30)) {\n await pushToUser(u.id, {\n title: \"Your fixed rate is ending\",\n body: `${d.name} comes off ${p.rate}% in ${days} days. Worth shopping around.`,\n url: \"/\", tag: \"refix\",\n });\n s[\"refix:\" + d.id] = Date.now(); sent.push(\"refix\");\n }\n }\n }\n }\n\n await markSeen(u.id, s);\n console.log(`@${u.username}: ${sent.length ? \"sent \" + sent.join(\", \") : \"nothing worth saying\"}`);\n}\n\nconsole.log(\"done\");\n",[147],"60ddf7e5-2d06-4fd9-b1ac-f3a89f7b9162","main.tsx","1a504146-7bf9-11f1-b957-1607ee4eb77e",45,["D",1783661338740],7,"http","// Money — Pocket Budget (Val Town HTTP val)\n// Serves the app at / and stores one shared budget document so your\n// phone and laptop stay in sync. Access is gated by a secret code kept\n// in the APP_KEY environment variable (never in this source).\nimport { Hono } from \"npm:hono\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { readFile } from \"https://esm.town/v/std/utils/index.ts\";\n\nconst KEY = \"budget_state\";\nconst APP_KEY = Deno.env.get(\"APP_KEY\") || \"\";\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nfunction ok(c: any) {\n const k = c.req.header(\"x-app-key\") || new URL(c.req.url).searchParams.get(\"k\") || \"\";\n return APP_KEY.length > 0 && k === APP_KEY;\n}\n\napp.get(\"/api/state\", async (c) => {\n if (!ok(c)) return c.json({ error: \"unauthorized\" }, 401);\n const data = (await blob.getJSON(KEY)) ?? {};\n return c.json(data);\n});\n\napp.post(\"/api/state\", async (c) => {\n if (!ok(c)) return c.json({ error: \"unauthorized\" }, 401);\n const body = await c.req.json();\n if (!body || !body.accounts) return c.json({ error: \"bad state\" }, 400);\n await blob.setJSON(KEY, body);\n return c.json({ ok: true, updated: Date.now() });\n});\n\n// Pull transactions from Akahu (server-side, using your private tokens)\napp.get(\"/api/akahu\", async (c: any) => {\n if (!ok(c)) return c.json({ error: \"unauthorized\" }, 401);\n const U = Deno.env.get(\"AKAHU_USER_TOKEN\") || \"\";\n const A = Deno.env.get(\"AKAHU_APP_TOKEN\") || \"\";\n if (!U || !A) return c.json({ error: \"no_tokens\" }, 400);\n const h = { Authorization: `Bearer ${U}`, \"X-Akahu-Id\": A };\n const names: Record = {};\n try {\n const ar = await fetch(\"https://api.akahu.io/v1/accounts\", { headers: h });\n if (ar.ok) {\n const aj = await ar.json();\n (aj.items || []).forEach((a: any) => { names[a._id] = a.name || a.formatted_account || \"\"; });\n }\n } catch (_) { /* names are optional */ }\n const days = Math.min(parseInt(c.req.query(\"days\") || \"35\") || 35, 365);\n const start = new Date(Date.now() - days * 86400000).toISOString();\n const items: any[] = [];\n let cursor: string | undefined;\n let guard = 0;\n try {\n do {\n const u = new URL(\"https://api.akahu.io/v1/transactions\");\n u.searchParams.set(\"start\", start);\n if (cursor) u.searchParams.set(\"cursor\", cursor);\n const r = await fetch(u.toString(), { headers: h });\n if (!r.ok) return c.json({ error: \"akahu_\" + r.status }, 502);\n const j = await r.json();\n (j.items || []).forEach((t: any) => items.push({\n id: t._id,\n date: t.date,\n amount: t.amount,\n description: t.description || \"\",\n merchant: (t.merchant && t.merchant.name) || \"\",\n category: (t.category && t.category.name) || \"\",\n account: names[t._account] || \"\",\n }));\n cursor = j.cursor && j.cursor.next ? j.cursor.next : undefined;\n guard++;\n } while (cursor && guard < 25);\n } catch (_) {\n return c.json({ error: \"akahu_fetch\" }, 502);\n }\n return c.json({ items });\n});\n\n// File away every current inbox item as \"already handled\" (server-side)\napp.post(\"/api/inbox/clear\", async (c: any) => {\n if (!ok(c)) return c.json({ error: \"unauthorized\" }, 401);\n const st: any = await blob.getJSON(KEY);\n if (!st || !st.accounts) return c.json({ error: \"no_state\" }, 400);\n st.done = st.done || [];\n st.handled = st.handled || [];\n const now = Date.now();\n const cleared = (st.inbox || []).length;\n (st.inbox || []).forEach((it: any) => {\n st.done.unshift(Object.assign({}, it, { resolution: \"Cleared (already handled)\", resolvedAt: now }));\n if (it.id) st.handled.push(it.id);\n });\n st.inbox = [];\n st.updated = now;\n await blob.setJSON(KEY, st);\n return c.json({ ok: true, cleared });\n});\n\n// Remove all test transactions from the budget\napp.post(\"/api/admin/striptests\", async (c: any) => {\n if (!ok(c)) return c.json({ error: \"unauthorized\" }, 401);\n const st: any = await blob.getJSON(KEY);\n if (!st) return c.json({ error: \"no_state\" }, 400);\n const isTest = (id: any) => typeof id === \"string\" && id.indexOf(\"test_\") === 0;\n st.inbox = (st.inbox || []).filter((x: any) => !isTest(x.id));\n st.done = (st.done || []).filter((x: any) => !isTest(x.id));\n st.handled = (st.handled || []).filter((h: any) => !isTest(h));\n st.updated = Date.now();\n await blob.setJSON(KEY, st);\n return c.json({ ok: true, inbox: (st.inbox || []).length, done: (st.done || []).length });\n});\n\n// ---- PWA: icon, manifest, service worker (public, no auth needed) ----\nconst ICON_SVG = ``;\nconst MANIFEST = JSON.stringify({\n name: \"Money — Pocket Budget\",\n short_name: \"Money\",\n start_url: \"/?k=2vly-9ggq-toe0\",\n scope: \"/\",\n display: \"standalone\",\n orientation: \"portrait\",\n background_color: \"#f4f6f8\",\n theme_color: \"#0f766e\",\n icons: [\n { src: \"/icon.svg\", sizes: \"any\", type: \"image/svg+xml\", purpose: \"any\" },\n { src: \"/icon.svg\", sizes: \"any\", type: \"image/svg+xml\", purpose: \"maskable\" },\n ],\n});\nconst SW_JS = `self.addEventListener('install',e=>self.skipWaiting());self.addEventListener('activate',e=>self.clients.claim());self.addEventListener('fetch',e=>{});`;\napp.get(\"/icon.svg\", (c) => new Response(ICON_SVG, { headers: { \"content-type\": \"image/svg+xml\", \"cache-control\": \"public, max-age=86400\" } }));\napp.get(\"/manifest.webmanifest\", (c) => new Response(MANIFEST, { headers: { \"content-type\": \"application/manifest+json\" } }));\napp.get(\"/sw.js\", (c) => new Response(SW_JS, { headers: { \"content-type\": \"application/javascript\" } }));\n\napp.get(\"/\", async (c) => c.html(await readFile(\"/index.html\", import.meta.url)));\n\nexport default app.fetch;\n","riley-pocket-money",[155],"781697c7-5447-43cf-8c1d-abb5bbfa7b0f","index.html","c18e242c-7bfa-11f1-91f7-1607ee4eb77e",44,["D",1783661328993],34,"\n\n\n\n\n\n\n\n\n\n\n\n\nMoney — Pocket Budget\n\n\n\n

Money

\n ···\n

Accounts

Inbox

History

Settings

\n\n

\n \n \n \n \n

\n\n

\n\n\n\n\n\n\n\n\n\n",[165],"7260bf76-a81e-44c0-bc1e-0c912ff5f09d","icon192.b64","cbf0c2ee-7c1d-11f1-9082-1607ee4eb77e",38,["D",1783660284254],"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",[173],"04052dc5-44ea-47d4-8fc5-9827a874a999","icon180.b64","d8eed9a4-7c1d-11f1-979a-1607ee4eb77e",39,["D",1783660306051],"iVBORw0KGgoAAAANSUhEUgAAALQAAAC0CAYAAAA9zQYyAAAGyklEQVR42u3dfWhVdRzH8c85u3Pryp7U9qBLp3NzUzNtmpQp2ECthKiQBlEEQhDIgoKVRuBDUA4CFUIQIgopEc1q+0OpLBqaq6VtbVlmzuncTKLtTtqc3of+sAfMu3m3e7bd8zvv15/Lmf3u2+/9nnOuZikBZFRVRgTXC1TvsMb612ARMEwK3CJimBS3RcQwKW6LkGFS2DYxw6SbARYhw6RpbRMzTJrWFiHDpGltEzNMmtY2McOkqG1ihklR28QMk6K2iRkmRW0TM0yK2iZmmBS1TcwwKWqbmGFS1DYxw6SobWKGSVHbxAyTorY5JpjEZjrDpCltEfPIa16/UfmZWeoPBpXzyosciAMGeprIygHzVw6ms7ssQQzKOLUWLiGXUtjsNHpZ8yAelw/q7FMXDJ9geWERvKr08b6qphflzdP4t9+W5OZnVd4Kqq5ZpTOXrunMpIF99YBcLPrKAs+WIdmqPyRk5uUqsst5U1p+M9y+aiOMbLtCTz9myVFvzzYWyBznjxzu9YfN2rN+K9v9RuVn5mlmPzNbdfaZ04ry9frDwrJ8LZaFTr/ZjbW3xfeu3d5rvTKG3rIzS0N4uzt1PXWlt1eir9c5f11tvS1r0lFakoxFRK1Tc0KVdff59W1t3wxTdIdC1YFa1dTdG4uz36+/tj57rVUdW+dt15tt87e0/HeZOnRWfHQZ3Zc76e6TZ8AlqDwzPwXi3bF4vqZ8emlUvi3MnjuHF8u8dfPPKSTOTF2u/68/RKzXO3G+aq6P59rH3zdqf2edzxNRWsB0PxydH1WV/xkfWx+f/HxHRJ/nz2SPB13n7ZoxdHafU/nZ/9wRZm7mkNvbHnkl3zzY5+eOOlL39Uu6R9dYcPRr7O6/H6+7pV/LrmHXvHnvo/GO+5o4Y+QZzsRA0XwUwHi6JVL2VVDrqO2Sp+cqm1PJ2vLdHRz+9Xu5Y4Q8Y3iN6/Bhn/gAAAABJRU5ErkJggg==",[180],"b2f7f845-f3d6-40b7-ba59-2a54ea24dbb8","daily_refresh.ts","869aea5c-7cb4-11f1-9d8a-1607ee4eb77e",46,["D",1783725021934],"// Daily bank refresh for every connected user.\n// Triggers Akahu to pull fresh transactions so each user's inbox is up to date.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst APP_SECRET = Deno.env.get(\"APP_KEY\") || \"dev-secret\";\nconst enc = new TextEncoder();\nconst dec = new TextDecoder();\nfunction fromHex(h: string) { const a = new Uint8Array(h.length / 2); for (let i = 0; i < a.length; i++) a[i] = parseInt(h.substr(i * 2, 2), 16); return a; }\nasync function aesKey() {\n const base = await crypto.subtle.importKey(\"raw\", enc.encode(APP_SECRET), \"PBKDF2\", false, [\"deriveKey\"]);\n return crypto.subtle.deriveKey({ name: \"PBKDF2\", salt: enc.encode(\"mb-bank-salt\"), iterations: 100000, hash: \"SHA-256\" }, base, { name: \"AES-GCM\", length: 256 }, false, [\"encrypt\", \"decrypt\"]);\n}\nasync function decTok(s: string) {\n const [ivh, cth] = s.split(\":\"); const key = await aesKey();\n const pt = await crypto.subtle.decrypt({ name: \"AES-GCM\", iv: fromHex(ivh) }, key, fromHex(cth));\n return dec.decode(pt);\n}\n\nexport default async function () {\n let ok = 0, fail = 0;\n // mb_bank may not exist yet if no one has connected a bank — guard for that.\n let rows: any[] = [];\n try {\n const r = await sqlite.execute(\"SELECT user_id, akahu_user, akahu_app FROM mb_bank\");\n rows = r.rows as any[];\n } catch (e) { console.log(\"no mb_bank yet\", String(e)); return; }\n for (const row of rows) {\n try {\n const U = await decTok(row.akahu_user);\n const A = await decTok(row.akahu_app);\n const resp = await fetch(\"https://api.akahu.io/v1/refresh\", { method: \"POST\", headers: { Authorization: `Bearer ${U}`, \"X-Akahu-Id\": A } });\n if (resp.ok) ok++; else { fail++; console.log(\"refresh non-ok\", row.user_id, resp.status); }\n } catch (e) { fail++; console.log(\"refresh error\", row.user_id, String(e)); }\n }\n console.log(`daily_refresh done — ok=${ok} fail=${fail} total=${rows.length}`);\n}\n",[187],"4e824c4b-fb22-48ba-b5e5-27a07295af5a",["D",1783923347989],[27],"pulls","branches",3,"forks","envVars",{"_204":206,"_207":59},"connections",{"_204":59,"_205":59},"count","unfilledCount",5,"emptyCount",{"_41":193,"_31":27,"_29":30,"_139":-5,"_39":40,"_38":14,"_141":24,"_36":238,"_13":59,"_32":33,"_34":35,"_23":24,"_144":-5,"_217":239,"_26":240},{"_41":186,"_31":187,"_29":188,"_139":-5,"_39":40,"_38":189,"_141":123,"_36":235,"_13":59,"_32":151,"_34":191,"_23":24,"_144":-5,"_217":236,"_26":237},{"_41":179,"_31":180,"_29":181,"_139":-5,"_39":40,"_38":182,"_141":123,"_36":232,"_13":59,"_32":20,"_34":184,"_23":24,"_144":-5,"_217":233,"_26":234},{"_41":172,"_31":173,"_29":174,"_139":-5,"_39":40,"_38":175,"_141":123,"_36":229,"_13":59,"_32":20,"_34":177,"_23":24,"_144":-5,"_217":230,"_26":231},{"_41":164,"_31":165,"_29":166,"_139":-5,"_39":40,"_38":167,"_141":24,"_36":226,"_13":169,"_32":20,"_34":170,"_23":24,"_144":-5,"_217":227,"_26":228},{"_41":154,"_31":155,"_29":156,"_139":-5,"_39":40,"_38":157,"_141":24,"_36":223,"_13":159,"_32":160,"_34":161,"_23":24,"_144":162,"_217":224,"_26":225},{"_41":146,"_31":147,"_29":148,"_139":-5,"_39":40,"_38":149,"_141":24,"_36":220,"_13":59,"_32":151,"_34":152,"_23":24,"_144":-5,"_217":221,"_26":222},{"_41":136,"_31":137,"_29":138,"_139":-5,"_39":40,"_38":140,"_141":123,"_36":216,"_13":59,"_32":33,"_34":143,"_23":24,"_144":-5,"_217":218,"_26":219},["D",1783923272134],"children",[],[137],["D",1783923303745],[],[147],["D",1783661338740],[],[155],["D",1783661328993],[],[165],["D",1783660284254],[],[173],["D",1783660306051],[],[180],["D",1783725021934],[],[187],["D",1783923347989],[],[27],["D",1783644524287],["D",1789525245864],{"_96":95,"_104":100},{"_96":95,"_97":98,"_99":100,"_18":53,"_101":102,"_103":24},{"_13":85,"_31":86,"_41":40,"_87":42,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":43,"_94":95},"ctx",{"_78":-5,"_125":279,"_280":281,"_282":283,"_284":24,"_285":24,"_286":24,"_287":123,"_288":-5,"_289":-7,"_290":-7,"_291":59,"_292":24,"_293":24,"_294":-5,"_295":24,"_296":24,"_297":24,"_298":-5},"ENV",{"_250":251,"_252":253,"_254":86,"_255":256,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":270,"_271":272,"_273":274,"_275":276,"_277":278},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","9e167d8120a57de5d747867e0b686da51bcc19a4","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v49