[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_249":250,"_251":252},"routes/_app.x.$handle.$name",{"_98":97,"_32":45,"_107":88,"_27":108,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":125,"_126":-5,"_127":-5,"_128":129},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":25},"version",57,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.tsx","latestPath","fileId","1a504146-7bf9-11f1-b957-1607ee4eb77e","name","fileType","http","content","// Money — Pocket Budget (Val Town HTTP val)\n// Serves the app at / and stores one shared budget document so your\n// phone and laptop stay in sync. Access is gated by a secret code kept\n// in the APP_KEY environment variable (never in this source).\nimport { Hono } from \"npm:hono\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { readFile } from \"https://esm.town/v/std/utils/index.ts\";\n\nconst KEY = \"budget_state\";\nconst APP_KEY = Deno.env.get(\"APP_KEY\") || \"\";\nconst app = new Hono();\napp.onError((err) => Promise.reject(err));\n\nfunction ok(c: any) {\n const k = c.req.header(\"x-app-key\") || new URL(c.req.url).searchParams.get(\"k\") || \"\";\n return APP_KEY.length > 0 && k === APP_KEY;\n}\n\napp.get(\"/api/state\", async (c) => {\n if (!ok(c)) return c.json({ error: \"unauthorized\" }, 401);\n const data = (await blob.getJSON(KEY)) ?? {};\n return c.json(data);\n});\n\napp.post(\"/api/state\", async (c) => {\n if (!ok(c)) return c.json({ error: \"unauthorized\" }, 401);\n const body = await c.req.json();\n if (!body || !body.accounts) return c.json({ error: \"bad state\" }, 400);\n await blob.setJSON(KEY, body);\n return c.json({ ok: true, updated: Date.now() });\n});\n\n// Pull transactions from Akahu (server-side, using your private tokens)\napp.get(\"/api/akahu\", async (c: any) => {\n if (!ok(c)) return c.json({ error: \"unauthorized\" }, 401);\n const U = Deno.env.get(\"AKAHU_USER_TOKEN\") || \"\";\n const A = Deno.env.get(\"AKAHU_APP_TOKEN\") || \"\";\n if (!U || !A) return c.json({ error: \"no_tokens\" }, 400);\n const h = { Authorization: `Bearer ${U}`, \"X-Akahu-Id\": A };\n const names: Record = {};\n try {\n const ar = await fetch(\"https://api.akahu.io/v1/accounts\", { headers: h });\n if (ar.ok) {\n const aj = await ar.json();\n (aj.items || []).forEach((a: any) => { names[a._id] = a.name || a.formatted_account || \"\"; });\n }\n } catch (_) { /* names are optional */ }\n const days = Math.min(parseInt(c.req.query(\"days\") || \"35\") || 35, 365);\n const start = new Date(Date.now() - days * 86400000).toISOString();\n const items: any[] = [];\n let cursor: string | undefined;\n let guard = 0;\n try {\n do {\n const u = new URL(\"https://api.akahu.io/v1/transactions\");\n u.searchParams.set(\"start\", start);\n if (cursor) u.searchParams.set(\"cursor\", cursor);\n const r = await fetch(u.toString(), { headers: h });\n if (!r.ok) return c.json({ error: \"akahu_\" + r.status }, 502);\n const j = await r.json();\n (j.items || []).forEach((t: any) => items.push({\n id: t._id,\n date: t.date,\n amount: t.amount,\n description: t.description || \"\",\n merchant: (t.merchant && t.merchant.name) || \"\",\n category: (t.category && t.category.name) || \"\",\n account: names[t._account] || \"\",\n }));\n cursor = j.cursor && j.cursor.next ? j.cursor.next : undefined;\n guard++;\n } while (cursor && guard < 25);\n } catch (_) {\n return c.json({ error: \"akahu_fetch\" }, 502);\n }\n return c.json({ items });\n});\n\n// File away every current inbox item as \"already handled\" (server-side)\napp.post(\"/api/inbox/clear\", async (c: any) => {\n if (!ok(c)) return c.json({ error: \"unauthorized\" }, 401);\n const st: any = await blob.getJSON(KEY);\n if (!st || !st.accounts) return c.json({ error: \"no_state\" }, 400);\n st.done = st.done || [];\n st.handled = st.handled || [];\n const now = Date.now();\n const cleared = (st.inbox || []).length;\n (st.inbox || []).forEach((it: any) => {\n st.done.unshift(Object.assign({}, it, { resolution: \"Cleared (already handled)\", resolvedAt: now }));\n if (it.id) st.handled.push(it.id);\n });\n st.inbox = [];\n st.updated = now;\n await blob.setJSON(KEY, st);\n return c.json({ ok: true, cleared });\n});\n\n// Remove all test transactions from the budget\napp.post(\"/api/admin/striptests\", async (c: any) => {\n if (!ok(c)) return c.json({ error: \"unauthorized\" }, 401);\n const st: any = await blob.getJSON(KEY);\n if (!st) return c.json({ error: \"no_state\" }, 400);\n const isTest = (id: any) => typeof id === \"string\" && id.indexOf(\"test_\") === 0;\n st.inbox = (st.inbox || []).filter((x: any) => !isTest(x.id));\n st.done = (st.done || []).filter((x: any) => !isTest(x.id));\n st.handled = (st.handled || []).filter((h: any) => !isTest(h));\n st.updated = Date.now();\n await blob.setJSON(KEY, st);\n return c.json({ ok: true, inbox: (st.inbox || []).length, done: (st.done || []).length });\n});\n\n// ---- PWA: icon, manifest, service worker (public, no auth needed) ----\nconst ICON_SVG = ``;\nconst MANIFEST = JSON.stringify({\n name: \"Money — Pocket Budget\",\n short_name: \"Money\",\n start_url: \"/?k=2vly-9ggq-toe0\",\n scope: \"/\",\n display: \"standalone\",\n orientation: \"portrait\",\n background_color: \"#f4f6f8\",\n theme_color: \"#0f766e\",\n icons: [\n { src: \"/icon.svg\", sizes: \"any\", type: \"image/svg+xml\", purpose: \"any\" },\n { src: \"/icon.svg\", sizes: \"any\", type: \"image/svg+xml\", purpose: \"maskable\" },\n ],\n});\nconst SW_JS = `self.addEventListener('install',e=>self.skipWaiting());self.addEventListener('activate',e=>self.clients.claim());self.addEventListener('fetch',e=>{});`;\napp.get(\"/icon.svg\", (c) => new Response(ICON_SVG, { headers: { \"content-type\": \"image/svg+xml\", \"cache-control\": \"public, max-age=86400\" } }));\napp.get(\"/manifest.webmanifest\", (c) => new Response(MANIFEST, { headers: { \"content-type\": \"application/manifest+json\" } }));\napp.get(\"/sw.js\", (c) => new Response(SW_JS, { headers: { \"content-type\": \"application/javascript\" } }));\n\napp.get(\"/\", async (c) => c.html(await readFile(\"/index.html\", import.meta.url)));\n\nexport default app.fetch;\n","// The old (pre-multiuser) copy of Stash used to be served from here. It was three days stale and\n// running against the same live database, which meant anyone still on this URL could write bad\n// state. The app now lives at stash.val.run.\n//\n// This branch exists only to host the scheduled jobs (daily_refresh.ts, notify.ts) and the push\n// sender, because Val Town only runs intervals on `main`.\n//\n// Anything hitting the old URL is sent to the real app rather than a dead page — someone may have\n// it bookmarked or installed on a home screen.\nexport default function (req: Request): Response {\n const url = new URL(req.url);\n return Response.redirect(\"https://stash.val.run\" + url.pathname + url.search, 301);\n}\n","createdAt",["D",1783930267820],"branchVersion","branchId","1d7321a2-4f46-4733-b86a-498e1d666a4b","id","9a8f532d-d413-48dd-9c0f-576fd227edcf","money-budget",["D",1783644524287],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Pocket budgeting app — syncs across phone and laptop","imageUrl","9ce636d8-a261-43ee-aad5-aba0afcc9805","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019f497e-7eff-7029-9247-01cc1300f2ae","tursoName","9a8f532dd41348dd9c0f576fd227edcf","tursoHostname","9a8f532dd41348dd9c0f576fd227edcf-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789525245864],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_106":102},"org",{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},"branch",{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"isOwned",70,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","rileys1011","handle","displayName","Riley Smith","avatar","https://lh3.googleusercontent.com/a/ACg8ocKLn-WocVfdzaKwIdLHV1VQfr-Cu-Zr_dXM84NUtd0tHciAd52i=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":244,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":-5,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":245,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":246,"_82":247,"_84":248,"_86":25},"tree",[211,212,213,214,215,216,217,218],"files",[211,212,213,214,215,216,217,218],"counts",{"_200":61,"_201":202,"_203":61,"_204":205,"_206":207},"contents",[130,131,132,133,134,135,136,137],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":192,"_32":193,"_30":194,"_141":-5,"_41":42,"_40":195,"_143":25,"_38":196,"_13":197,"_33":145,"_35":198,"_24":25,"_147":-5,"_27":199},{"_43":185,"_32":186,"_30":187,"_141":-5,"_41":42,"_40":188,"_143":125,"_38":189,"_13":61,"_33":155,"_35":190,"_24":25,"_147":-5,"_27":191},{"_43":178,"_32":179,"_30":180,"_141":-5,"_41":42,"_40":181,"_143":125,"_38":182,"_13":61,"_33":20,"_35":183,"_24":25,"_147":-5,"_27":184},{"_43":171,"_32":172,"_30":173,"_141":-5,"_41":42,"_40":174,"_143":125,"_38":175,"_13":61,"_33":20,"_35":176,"_24":25,"_147":-5,"_27":177},{"_43":163,"_32":164,"_30":165,"_141":-5,"_41":42,"_40":166,"_143":25,"_38":167,"_13":168,"_33":20,"_35":169,"_24":25,"_147":-5,"_27":170},{"_43":158,"_32":28,"_30":31,"_141":-5,"_41":42,"_40":14,"_143":125,"_38":159,"_13":160,"_33":34,"_35":37,"_24":25,"_147":161,"_27":162},{"_43":149,"_32":150,"_30":151,"_141":-5,"_41":42,"_40":152,"_143":25,"_38":153,"_13":154,"_33":155,"_35":156,"_24":25,"_147":-5,"_27":157},{"_43":138,"_32":139,"_30":140,"_141":-5,"_41":42,"_40":142,"_143":125,"_38":144,"_13":61,"_33":145,"_35":146,"_24":25,"_147":-5,"_27":148},"c31f8aea-8615-414c-ad4b-6d4c1e0eba66","push.ts","1cf0f1b2-7e82-11f1-b75d-1607ee4eb77e","parentId",47,"latest",["D",1783923272134],"script","// Web Push sender (lives on main so the cron can use it).\nimport * as webpush from \"jsr:@negrel/webpush\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst PRIV = JSON.parse(Deno.env.get(\"VAPID_PRIVATE_JWK\") || \"{}\");\n\nfunction vapidJwks() {\n const { kty, crv, x, y, d } = PRIV;\n return {\n publicKey: { kty, crv, x, y, key_ops: [\"verify\"], ext: true },\n privateKey: { kty, crv, x, y, d, key_ops: [\"sign\"], ext: true },\n };\n}\n\nlet _server: any = null;\nasync function server() {\n if (_server) return _server;\n const keys = await webpush.importVapidKeys(vapidJwks() as any, { extractable: false });\n _server = await webpush.ApplicationServer.new({\n contactInformation: \"mailto:rileysmith1272@gmail.com\",\n vapidKeys: keys,\n });\n return _server;\n}\n\nexport type Sub = { endpoint: string; p256dh: string; auth: string };\n\nexport async function sendPush(sub: Sub, payload: Record): Promise {\n try {\n const app = await server();\n const subscriber = app.subscribe({\n endpoint: sub.endpoint,\n keys: { p256dh: sub.p256dh, auth: sub.auth },\n } as any);\n await subscriber.pushTextMessage(JSON.stringify(payload), {});\n return true;\n } catch (e: any) {\n const msg = String(e?.message || e);\n if (msg.includes(\"404\") || msg.includes(\"410\") || msg.includes(\"Gone\") || msg.includes(\"NotFound\")) {\n try { await sqlite.execute({ sql: \"DELETE FROM mb_push WHERE endpoint = ?\", args: [sub.endpoint] }); } catch (_) {}\n return false;\n }\n console.log(\"push failed:\", msg);\n return false;\n }\n}\n\nexport async function pushToUser(userId: string, payload: Record): Promise {\n const r = await sqlite.execute({\n sql: \"SELECT endpoint, p256dh, auth FROM mb_push WHERE user_id = ?\",\n args: [userId],\n });\n let ok = 0;\n for (const s of r.rows as unknown as Sub[]) if (await sendPush(s, payload)) ok++;\n return ok;\n}\n","label",[139],"1ef6a8e3-9e53-4e4c-9219-d3bf3e3b92c8","notify.ts","2fc67780-7e82-11f1-963c-1607ee4eb77e",51,["D",1783923375766],2,"interval","// Daily notification run. Decides what is worth interrupting someone for, and nothing else.\n// Runs after the bank refresh cron. Every check is opt-out per user.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { pushToUser } from \"./push.ts\";\n\nconst DAY = 86400000;\nconst PER: Record = { weekly: 7, fortnightly: 14, monthly: 30.44, \"2-monthly\": 60.9, quarterly: 91.3, yearly: 365 };\nconst r2 = (v: number) => Math.round((v + Number.EPSILON) * 100) / 100;\nconst money = (v: number) => (v < 0 ? \"-$\" : \"$\") + Math.abs(v).toFixed(2);\nconst fmtDay = (ts: number) => new Date(ts).toLocaleDateString(\"en-NZ\", { day: \"numeric\", month: \"short\" });\n\n/** Don't send the same thing every single day. Remembers what we last told each user. */\nasync function seen(userId: string) {\n return ((await blob.getJSON(\"notif_\" + userId)) ?? {}) as Record;\n}\nasync function markSeen(userId: string, s: Record) {\n await blob.setJSON(\"notif_\" + userId, s);\n}\nfunction due(s: Record, key: string, everyDays: number) {\n const last = s[key] || 0;\n return Date.now() - last > everyDays * DAY;\n}\n\nfunction acctTotal(a: any) {\n return r2((a.pockets || []).reduce((t: number, p: any) => t + (p.balance || 0), 0));\n}\n\n/** Forward cash-flow, same rules as the app: needs income AND outgoings or it stays quiet. */\nfunction cashflow(st: any, days: number) {\n const now = Date.now(), to = now + days * DAY;\n const bills = (st.bills || []).filter((b: any) => !b.paused);\n const loans: any[] = [];\n ((st.worth && st.worth.debts) || []).forEach((d: any) => {\n const parts = (d.kind === \"mortgage\" && (d.splits || []).length) ? d.splits : [d];\n parts.forEach((p: any) => {\n const pay = Math.abs(parseFloat(p.repayment) || 0);\n if (!pay) return;\n const f = p.freq || \"monthly\";\n const next = p.nextDue ? Date.parse(p.nextDue + \"T00:00:00\") : now + PER[f] * DAY;\n loans.push({ name: d.name, amount: pay, freq: f, kind: \"loan\", nextTs: isNaN(next) ? now + PER[f] * DAY : next });\n });\n });\n const items = bills.concat(loans);\n const hasIncome = items.some((i: any) => i.kind === \"income\");\n const hasOut = items.some((i: any) => i.kind !== \"income\");\n if (!hasIncome || !hasOut) return null; // half a picture is worse than none\n\n const evs: any[] = [];\n items.forEach((it: any) => {\n const p = (PER[it.freq] || 30.44) * DAY;\n let t = it.nextTs, guard = 0;\n while (t < now) t += p;\n while (t <= to && guard++ < 600) {\n evs.push({ ts: t, amt: it.kind === \"income\" ? Math.abs(it.amount) : -Math.abs(it.amount), name: it.name });\n t += p;\n }\n });\n evs.sort((a, b) => a.ts - b.ts);\n let bal = r2((st.accounts || []).reduce((t: number, a: any) => t + acctTotal(a), 0));\n let shortfall: any = null;\n for (const e of evs) {\n bal = r2(bal + e.amt);\n if (bal < 0 && !shortfall) shortfall = { ts: e.ts, bal, name: e.name };\n }\n return { shortfall, events: evs };\n}\n\nexport default async function () {\n await run();\n}\n\nasync function run() {\nconst users = await sqlite.execute(\n `SELECT DISTINCT u.id, u.username FROM mb_users u JOIN mb_push p ON p.user_id = u.id`,\n);\nconsole.log(`checking ${users.rows.length} user(s) with notifications on`);\n\nfor (const u of users.rows as any[]) {\n const st: any = (await blob.getJSON(\"bud_\" + u.id)) ?? {};\n const n = st.notify || {};\n if (!n.enabled) { console.log(`@${u.username}: notifications off`); continue; }\n const s = await seen(u.id);\n const sent: string[] = [];\n\n // --- transactions waiting to be sorted ---\n if (n.inbox !== false) {\n const c = (st.inbox || []).length;\n if (c > 0 && due(s, \"inbox\", 1)) {\n await pushToUser(u.id, {\n title: c === 1 ? \"1 transaction to sort\" : `${c} transactions to sort`,\n body: \"Your bank sent through new activity.\",\n url: \"/\", tag: \"inbox\",\n });\n s.inbox = Date.now(); sent.push(\"inbox\");\n }\n }\n\n // --- a bill lands tomorrow ---\n if (n.bills !== false) {\n const now = Date.now();\n const soon = (st.bills || []).filter((b: any) =>\n !b.paused && b.kind !== \"income\" && b.nextTs > now && b.nextTs <= now + 2 * DAY);\n if (soon.length && due(s, \"bills\", 1)) {\n const b = soon[0];\n await pushToUser(u.id, {\n title: `${b.name} — ${money(Math.abs(b.amount))}`,\n body: soon.length > 1 ? `Due ${fmtDay(b.nextTs)}, plus ${soon.length - 1} more.` : `Due ${fmtDay(b.nextTs)}.`,\n url: \"/\", tag: \"bills\",\n });\n s.bills = Date.now(); sent.push(\"bills\");\n }\n }\n\n // --- the forecast says you run out of money ---\n if (n.shortfall !== false) {\n const cf = cashflow(st, 60);\n if (cf && cf.shortfall && due(s, \"shortfall\", 7)) {\n await pushToUser(u.id, {\n title: \"You are heading for empty\",\n body: `Your forecast runs out on ${fmtDay(cf.shortfall.ts)} after ${cf.shortfall.name}.`,\n url: \"/\", tag: \"shortfall\",\n });\n s.shortfall = Date.now(); sent.push(\"shortfall\");\n }\n }\n\n // --- a fixed mortgage rate is about to end ---\n if (n.refix !== false) {\n const debts = (st.worth && st.worth.debts) || [];\n for (const d of debts) {\n for (const p of (d.splits || [])) {\n if (p.type !== \"fixed\" || !p.fixedUntil) continue;\n const days = Math.ceil((Date.parse(p.fixedUntil + \"T00:00:00\") - Date.now()) / DAY);\n if (days > 0 && days <= 90 && due(s, \"refix:\" + d.id, 30)) {\n await pushToUser(u.id, {\n title: \"Your fixed rate is ending\",\n body: `${d.name} comes off ${p.rate}% in ${days} days. Worth shopping around.`,\n url: \"/\", tag: \"refix\",\n });\n s[\"refix:\" + d.id] = Date.now(); sent.push(\"refix\");\n }\n }\n }\n }\n\n await markSeen(u.id, s);\n console.log(`@${u.username}: ${sent.length ? \"sent \" + sent.join(\", \") : \"nothing worth saying\"}`);\n}\n\nconsole.log(\"done\");\n}\n",[150],"ebf230aa-365c-4031-83af-057c4c336440",["D",1783930267820],8,"riley-pocket-money",[28],"781697c7-5447-43cf-8c1d-abb5bbfa7b0f","index.html","c18e242c-7bfa-11f1-91f7-1607ee4eb77e",44,["D",1783661328993],34,"\n\n\n\n\n\n\n\n\n\n\n\n\nMoney — Pocket Budget\n\n\n\n

Money

\n ···\n

Accounts

Inbox

History

Settings

\n\n

\n \n \n \n \n

\n\n

\n\n\n\n\n\n\n\n\n\n",[164],"7260bf76-a81e-44c0-bc1e-0c912ff5f09d","icon192.b64","cbf0c2ee-7c1d-11f1-9082-1607ee4eb77e",38,["D",1783660284254],"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",[172],"04052dc5-44ea-47d4-8fc5-9827a874a999","icon180.b64","d8eed9a4-7c1d-11f1-979a-1607ee4eb77e",39,["D",1783660306051],"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",[179],"b2f7f845-f3d6-40b7-ba59-2a54ea24dbb8","daily_refresh.ts","869aea5c-7cb4-11f1-9d8a-1607ee4eb77e",46,["D",1783725021934],"// Daily bank refresh for every connected user.\n// Triggers Akahu to pull fresh transactions so each user's inbox is up to date.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst APP_SECRET = Deno.env.get(\"APP_KEY\") || \"dev-secret\";\nconst enc = new TextEncoder();\nconst dec = new TextDecoder();\nfunction fromHex(h: string) { const a = new Uint8Array(h.length / 2); for (let i = 0; i < a.length; i++) a[i] = parseInt(h.substr(i * 2, 2), 16); return a; }\nasync function aesKey() {\n const base = await crypto.subtle.importKey(\"raw\", enc.encode(APP_SECRET), \"PBKDF2\", false, [\"deriveKey\"]);\n return crypto.subtle.deriveKey({ name: \"PBKDF2\", salt: enc.encode(\"mb-bank-salt\"), iterations: 100000, hash: \"SHA-256\" }, base, { name: \"AES-GCM\", length: 256 }, false, [\"encrypt\", \"decrypt\"]);\n}\nasync function decTok(s: string) {\n const [ivh, cth] = s.split(\":\"); const key = await aesKey();\n const pt = await crypto.subtle.decrypt({ name: \"AES-GCM\", iv: fromHex(ivh) }, key, fromHex(cth));\n return dec.decode(pt);\n}\n\nexport default async function () {\n let ok = 0, fail = 0;\n // mb_bank may not exist yet if no one has connected a bank — guard for that.\n let rows: any[] = [];\n try {\n const r = await sqlite.execute(\"SELECT user_id, akahu_user, akahu_app FROM mb_bank\");\n rows = r.rows as any[];\n } catch (e) { console.log(\"no mb_bank yet\", String(e)); return; }\n for (const row of rows) {\n try {\n const U = await decTok(row.akahu_user);\n const A = await decTok(row.akahu_app);\n const resp = await fetch(\"https://api.akahu.io/v1/refresh\", { method: \"POST\", headers: { Authorization: `Bearer ${U}`, \"X-Akahu-Id\": A } });\n if (resp.ok) ok++; else { fail++; console.log(\"refresh non-ok\", row.user_id, resp.status); }\n } catch (e) { fail++; console.log(\"refresh error\", row.user_id, String(e)); }\n }\n console.log(`daily_refresh done — ok=${ok} fail=${fail} total=${rows.length}`);\n}\n",[186],"66cb9989-7c03-41eb-8cbb-67317d3eef27","broadcast.ts","4a2692e0-7e82-11f1-9526-1607ee4eb77e",56,["D",1783929693746],5,"// Announce a release. Run this by hand when a \"what's new\" popup goes out.\n// Only reaches people who left \"App updates\" switched on.\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\nimport { pushToUser } from \"./push.ts\";\n\n// ---- edit these two lines, then run ----\nconst TITLE = \"History has moved\";\nconst BODY = \"It now lives inside the Inbox tab — tap Inbox, then History. One less tab up top.\";\nconst DRY_RUN = true; // safety catch: flip to false only when you actually mean to send\n// ----------------------------------------\n\nconst users = await sqlite.execute(\n `SELECT DISTINCT u.id, u.username FROM mb_users u JOIN mb_push p ON p.user_id = u.id`,\n);\n\nconsole.log(`${DRY_RUN ? \"[DRY RUN] \" : \"\"}\"${TITLE}\"`);\nconsole.log(`${users.rows.length} user(s) have a device subscribed\\n`);\n\nlet total = 0;\nfor (const u of users.rows as any[]) {\n const st: any = (await blob.getJSON(\"bud_\" + u.id)) ?? {};\n const n = st.notify || {};\n if (!n.enabled) { console.log(`@${u.username}: notifications off — skipped`); continue; }\n if (n.updates === false) { console.log(`@${u.username}: opted out of update notices — skipped`); continue; }\n\n if (DRY_RUN) {\n console.log(`@${u.username}: WOULD send`);\n continue;\n }\n const sent = await pushToUser(u.id, { title: TITLE, body: BODY, url: \"/\", tag: \"update\" });\n total += sent;\n console.log(`@${u.username}: sent to ${sent} device(s)`);\n}\n\nconsole.log(`\\n${DRY_RUN ? \"dry run — nothing sent\" : `delivered to ${total} device(s)`}`);\n",[193],"pulls","branches",3,"forks","envVars",{"_208":197,"_210":61},"connections",{"_208":61,"_209":61},"count","unfilledCount","emptyCount",{"_43":192,"_32":193,"_30":194,"_141":-5,"_41":42,"_40":195,"_143":25,"_38":241,"_13":197,"_33":145,"_35":198,"_24":25,"_147":-5,"_220":242,"_27":243},{"_43":185,"_32":186,"_30":187,"_141":-5,"_41":42,"_40":188,"_143":125,"_38":238,"_13":61,"_33":155,"_35":190,"_24":25,"_147":-5,"_220":239,"_27":240},{"_43":178,"_32":179,"_30":180,"_141":-5,"_41":42,"_40":181,"_143":125,"_38":235,"_13":61,"_33":20,"_35":183,"_24":25,"_147":-5,"_220":236,"_27":237},{"_43":171,"_32":172,"_30":173,"_141":-5,"_41":42,"_40":174,"_143":125,"_38":232,"_13":61,"_33":20,"_35":176,"_24":25,"_147":-5,"_220":233,"_27":234},{"_43":163,"_32":164,"_30":165,"_141":-5,"_41":42,"_40":166,"_143":25,"_38":229,"_13":168,"_33":20,"_35":169,"_24":25,"_147":-5,"_220":230,"_27":231},{"_43":158,"_32":28,"_30":31,"_141":-5,"_41":42,"_40":14,"_143":125,"_38":226,"_13":160,"_33":34,"_35":37,"_24":25,"_147":161,"_220":227,"_27":228},{"_43":149,"_32":150,"_30":151,"_141":-5,"_41":42,"_40":152,"_143":25,"_38":223,"_13":154,"_33":155,"_35":156,"_24":25,"_147":-5,"_220":224,"_27":225},{"_43":138,"_32":139,"_30":140,"_141":-5,"_41":42,"_40":142,"_143":125,"_38":219,"_13":61,"_33":145,"_35":146,"_24":25,"_147":-5,"_220":221,"_27":222},["D",1783923272134],"children",[],[139],["D",1783923375766],[],[150],["D",1783930267820],[],[28],["D",1783661328993],[],[164],["D",1783660284254],[],[172],["D",1783660306051],[],[179],["D",1783725021934],[],[186],["D",1783929693746],[],[193],["D",1783644524287],["D",1789525245864],{"_98":97,"_106":102},{"_98":97,"_99":100,"_101":102,"_18":55,"_103":104,"_105":25},{"_13":87,"_32":88,"_43":42,"_89":44,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":45,"_96":97},"ctx",{"_80":-5,"_127":282,"_283":284,"_285":286,"_287":25,"_288":25,"_289":25,"_290":125,"_291":-5,"_292":-7,"_293":-7,"_294":61,"_295":25,"_296":25,"_297":-5,"_298":25,"_299":25,"_300":25,"_301":-5},"ENV",{"_253":254,"_255":256,"_257":88,"_258":259,"_260":261,"_262":263,"_264":265,"_266":267,"_268":269,"_270":271,"_272":273,"_274":275,"_276":277,"_278":279,"_280":281},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v57