[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_165":166,"_167":168},"routes/_app.x.$handle.$name",{"_95":94,"_31":43,"_103":85,"_26":104,"_13":14,"_105":-5,"_11":106,"_107":108,"_109":110,"_111":112,"_113":114,"_20":-5,"_115":-5,"_116":-5,"_117":24,"_118":119,"_120":57,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":24},"version",18,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","ui.ts","latestPath","fileId","272f4dc2-8904-11f1-8594-1607ee4eb77e","name","fileType","script","content","// The single-page UI. It lives in its own file because val.town caps a file at 80k\n// characters, and the app plus this template is past that.\ntype PageConsts = {\n\tDEFAULT_STAGES: readonly string[];\n\tPEOPLE: readonly string[];\n\tGRADES: readonly string[];\n\tMEETINGS: readonly string[];\n\tLOST_REASONS: readonly string[];\n\tSOURCES: readonly string[];\n\tSTALE_DAYS: number;\n};\n\nexport const makePage = ({\n\tDEFAULT_STAGES,\n\tPEOPLE,\n\tGRADES,\n\tMEETINGS,\n\tLOST_REASONS,\n\tSOURCES,\n\tSTALE_DAYS,\n}: PageConsts) => `\n\n\n\n\nMini ATS\n\n\n\n

\n\t

Mini ATS

\n\t

\n\t\t\n\t\t

\n\t

Viewing as \n\t\t\n\t

\n\n

\n\n\n`;\n","createdAt",["D",1785078635532],"branchVersion","branchId","5a7d57eb-74d9-48a3-b178-163a90d765c3","id","04c0f7c6-4c1f-4b9e-aab6-d9c106c4ea6d","mini-ats",["D",1784991101203],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Simple ATS for candidate tracking","imageUrl","9f5b2c99-966e-4045-8d52-ec0106bbec23","pinnedFileId","5d23079c-8838-11f1-9b3d-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","d187c0c4-be62-436b-95a1-8e9a7449c340","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_102":98},"org",{"_95":94,"_96":-5,"_97":98,"_18":53,"_99":100,"_101":24},"branch",{"_13":84,"_31":85,"_41":40,"_86":42,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":43,"_93":94},"isOwned",25,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","sawyeraltman","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoicHJveHkiLCJzcmMiOiJodHRwczovL2ltYWdlcy5jbGVyay5kZXYvb2F1dGhfZ2l0aHViL2ltZ18ybndOSkVHc0U0QnJqZkRma3pwMW9KSm44b3QifQ","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":161,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":162,"_79":163,"_81":164,"_83":24},"tree",[152,153],"files",[152,153],"counts",{"_141":61,"_142":143,"_144":61,"_145":146,"_147":148},"contents",[125,126],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":133,"_31":134,"_29":55,"_128":-5,"_39":40,"_38":135,"_129":24,"_36":136,"_13":137,"_32":138,"_34":139,"_23":24,"_131":-5,"_26":140},{"_41":127,"_31":27,"_29":30,"_128":-5,"_39":40,"_38":14,"_129":24,"_36":130,"_13":61,"_32":33,"_34":35,"_23":24,"_131":-5,"_26":132},"2a5ce74c-7855-4865-a8a3-924bf8c128e3","parentId","latest",["D",1785078635532],"label",[27],"0d494a35-eadc-4aac-9bb3-bbdc04b67bf8","main.tsx",17,["D",1785070615873],16,"http","import { Hono } from \"npm:hono\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nconst DEFAULT_STAGES = [\"Applied\", \"Screening\", \"Interview\", \"Offer\", \"Hired\"] as const;\n\nconst LOST_REASONS = [\"Rejected\", \"They declined\", \"Ghosted\", \"Bad timing\", \"Needs remote\", \"Other\"] as const;\n\nconst PEOPLE = [\"Sawyer\", \"Alp\", \"Andy\"] as const;\n\nconst GRADES = [\"Strong yes\", \"Yes\", \"Neutral\", \"No\", \"Strong no\"] as const;\n\nconst MEETINGS = [\"In-person\", \"Video\", \"Phone\"] as const;\n\nconst SOURCES = [\"Referral\", \"Inbound\", \"Outbound\", \"Event\", \"Agency\", \"Other\"] as const;\n\n// A candidate who sits in one stage longer than this gets flagged in the pipeline.\nconst STALE_DAYS = 7;\n\nawait sqlite.batch([\n\t`CREATE TABLE IF NOT EXISTS ats_people (\n\t\tid INTEGER PRIMARY KEY AUTOINCREMENT,\n\t\tname TEXT NOT NULL,\n\t\temail TEXT DEFAULT '',\n\t\tnotes TEXT DEFAULT '',\n\t\tcreated_at TEXT DEFAULT (datetime('now')),\n\t\tupdated_at TEXT DEFAULT (datetime('now'))\n\t)`,\n\t`CREATE TABLE IF NOT EXISTS ats_roles (\n\t\tid INTEGER PRIMARY KEY AUTOINCREMENT,\n\t\ttitle TEXT NOT NULL,\n\t\tarchived INTEGER DEFAULT 0,\n\t\tcreated_at TEXT DEFAULT (datetime('now'))\n\t)`,\n\t`CREATE TABLE IF NOT EXISTS ats_applications (\n\t\tid INTEGER PRIMARY KEY AUTOINCREMENT,\n\t\tperson_id INTEGER NOT NULL,\n\t\trole_id INTEGER NOT NULL,\n\t\tstage TEXT NOT NULL DEFAULT 'Applied',\n\t\towner TEXT DEFAULT '',\n\t\tgrade TEXT DEFAULT '',\n\t\tnotes TEXT DEFAULT '',\n\t\tcreated_at TEXT DEFAULT (datetime('now')),\n\t\tupdated_at TEXT DEFAULT (datetime('now')),\n\t\tUNIQUE(person_id, role_id)\n\t)`,\n\t`CREATE TABLE IF NOT EXISTS ats_stage_owners (\n\t\trole_id INTEGER NOT NULL,\n\t\tstage TEXT NOT NULL,\n\t\towner TEXT NOT NULL DEFAULT '',\n\t\tUNIQUE(role_id, stage)\n\t)`,\n\t`CREATE TABLE IF NOT EXISTS ats_role_stages (\n\t\tid INTEGER PRIMARY KEY AUTOINCREMENT,\n\t\trole_id INTEGER NOT NULL,\n\t\tposition INTEGER NOT NULL,\n\t\tname TEXT NOT NULL,\n\t\tUNIQUE(role_id, name)\n\t)`,\n\t`CREATE TABLE IF NOT EXISTS ats_events (\n\t\tid INTEGER PRIMARY KEY AUTOINCREMENT,\n\t\tperson_id INTEGER NOT NULL,\n\t\trole_id INTEGER,\n\t\tauthor TEXT DEFAULT '',\n\t\tkind TEXT NOT NULL DEFAULT 'note',\n\t\tbody TEXT NOT NULL,\n\t\tcreated_at TEXT DEFAULT (datetime('now'))\n\t)`,\n]);\n\nfor (const statement of [\n\t`ALTER TABLE ats_applications ADD COLUMN meeting TEXT DEFAULT ''`,\n\t`ALTER TABLE ats_applications ADD COLUMN lost_reason TEXT DEFAULT ''`,\n\t`ALTER TABLE ats_applications ADD COLUMN stage_since TEXT DEFAULT ''`,\n\t`ALTER TABLE ats_people ADD COLUMN starred INTEGER DEFAULT 0`,\n\t`ALTER TABLE ats_people ADD COLUMN source TEXT DEFAULT ''`,\n\t`ALTER TABLE ats_people ADD COLUMN source_detail TEXT DEFAULT ''`,\n\t`ALTER TABLE ats_people ADD COLUMN linkedin TEXT DEFAULT ''`,\n\t`ALTER TABLE ats_people ADD COLUMN github TEXT DEFAULT ''`,\n\t`ALTER TABLE ats_people ADD COLUMN website TEXT DEFAULT ''`,\n]) {\n\ttry {\n\t\tawait sqlite.execute(statement);\n\t} catch {\n\t\t// column already exists\n\t}\n}\n\n// stage_since drives the stale flag. Rows that predate the column fall back to their\n// last recorded move, then to when the application was created.\nawait sqlite.execute(`UPDATE ats_applications SET stage_since = COALESCE(\n\t(SELECT MAX(e.created_at) FROM ats_events e\n\t\tWHERE e.person_id = ats_applications.person_id\n\t\tAND e.role_id = ats_applications.role_id\n\t\tAND e.kind = 'system'\n\t\tAND e.body LIKE 'Moved from %'),\n\tcreated_at,\n\tdatetime('now')\n) WHERE stage_since IS NULL OR stage_since = ''`);\n\nconst getRoleStages = async (roleId: number) => {\n\tconst rs = await sqlite.execute({\n\t\tsql: \"SELECT name FROM ats_role_stages WHERE role_id = ? ORDER BY position\",\n\t\targs: [roleId],\n\t});\n\treturn rs.rows.map((r: any) => r[0] as string);\n};\n\nconst setRoleStages = async (roleId: number, names: readonly string[]) => {\n\tawait sqlite.execute({ sql: \"DELETE FROM ats_role_stages WHERE role_id = ?\", args: [roleId] });\n\tfor (const [i, name] of names.entries()) {\n\t\tawait sqlite.execute({\n\t\t\tsql: \"INSERT INTO ats_role_stages (role_id, position, name) VALUES (?, ?, ?)\",\n\t\t\targs: [roleId, i, name],\n\t\t});\n\t}\n};\n\n// Roles created before funnels were configurable keep the original five stages,\n// plus any stage name their applications already use.\nconst allRoles = await sqlite.execute(\"SELECT id FROM ats_roles\");\nfor (const row of allRoles.rows) {\n\tconst roleId = row[0] as number;\n\tif ((await getRoleStages(roleId)).length > 0) continue;\n\tconst used = await sqlite.execute({\n\t\tsql: \"SELECT DISTINCT stage FROM ats_applications WHERE role_id = ?\",\n\t\targs: [roleId],\n\t});\n\tconst extra = used.rows\n\t\t.map((r: any) => r[0] as string)\n\t\t.filter((s) => s && !DEFAULT_STAGES.includes(s as any));\n\tawait setRoleStages(roleId, [...DEFAULT_STAGES, ...extra]);\n}\n\nconst app = new Hono();\n\napp.use(\"*\", async (c, next) => {\n\tawait next();\n\tc.header(\"cache-control\", \"no-store\");\n});\n\n// This val is public and its source is readable by anyone, so the passphrase lives in\n// val.town environment settings and never in this file.\nconst PASSPHRASE = Deno.env.get(\"ATS_PASSPHRASE\") ?? \"\";\n\nconst SESSION_COOKIE = \"ats_session\";\n\nconst SESSION_MAX_AGE = 30 * 24 * 60 * 60;\n\nconst encoder = new TextEncoder();\n\nconst sign = async (message: string) => {\n\tconst key = await crypto.subtle.importKey(\n\t\t\"raw\",\n\t\tencoder.encode(PASSPHRASE),\n\t\t{ name: \"HMAC\", hash: \"SHA-256\" },\n\t\tfalse,\n\t\t[\"sign\"],\n\t);\n\tconst mac = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(message));\n\treturn [...new Uint8Array(mac)].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n};\n\nconst equals = (a: string, b: string) => {\n\tif (a.length !== b.length) return false;\n\tlet diff = 0;\n\tfor (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n\treturn diff === 0;\n};\n\nconst makeToken = async () => {\n\tconst expiry = String(Date.now() + SESSION_MAX_AGE * 1000);\n\treturn `${expiry}.${await sign(expiry)}`;\n};\n\nconst isValidToken = async (token: string) => {\n\tconst [expiry, mac] = token.split(\".\");\n\tif (!expiry || !mac || !/^\\d+$/.test(expiry)) return false;\n\tif (Number(expiry) < Date.now()) return false;\n\treturn equals(mac, await sign(expiry));\n};\n\nconst setSession = (c: any, token: string) =>\n\tc.header(\n\t\t\"set-cookie\",\n\t\t`${SESSION_COOKIE}=${token}; Max-Age=${SESSION_MAX_AGE}; HttpOnly; Secure; SameSite=Lax; Path=/`,\n\t\t{ append: true },\n\t);\n\nconst readCookie = (c: any) =>\n\t(c.req.header(\"cookie\") ?? \"\")\n\t\t.split(\";\")\n\t\t.map((part: string) => part.trim())\n\t\t.find((part: string) => part.startsWith(`${SESSION_COOKIE}=`))\n\t\t?.slice(SESSION_COOKIE.length + 1) ?? \"\";\n\nconst SETUP_PAGE = `\nMini ATS -- setup\n\n

Mini ATS is locked

No ATS_PASSPHRASE is set, so the app will not serve any data.

Open the val on val.town, go to Environment variables, add ATS_PASSPHRASE with the shared passphrase, then reload this page.

\n`;\n\nconst LOGIN_PAGE = `\n\nMini ATS\n\n\n\n`;\n\napp.post(\"/api/login\", async (c) => {\n\tif (!PASSPHRASE) return c.json({ error: \"not configured\" }, 503);\n\tconst body = await c.req.json().catch(() => ({}));\n\tif (!equals(String(body.passphrase ?? \"\"), PASSPHRASE)) {\n\t\treturn c.json({ error: \"wrong passphrase\" }, 401);\n\t}\n\tsetSession(c, await makeToken());\n\treturn c.json({ ok: true });\n});\n\napp.post(\"/api/logout\", (c) => {\n\tc.header(\"set-cookie\", `${SESSION_COOKIE}=; Max-Age=0; HttpOnly; Secure; SameSite=Lax; Path=/`);\n\treturn c.json({ ok: true });\n});\n\napp.use(\"*\", async (c, next) => {\n\tif (!PASSPHRASE) return c.html(SETUP_PAGE, 503);\n\tif (await isValidToken(readCookie(c))) {\n\t\t// Sliding window: an active device pushes its expiry out and never sees the\n\t\t// login page again.\n\t\tsetSession(c, await makeToken());\n\t\treturn next();\n\t}\n\tif (c.req.path.startsWith(\"/api/\")) return c.json({ error: \"unauthorized\" }, 401);\n\treturn c.html(LOGIN_PAGE, 401);\n});\n\nconst asPerson = (r: any) => ({\n\tid: r[0],\n\tname: r[1],\n\temail: r[2],\n\tnotes: r[3],\n\tstarred: !!r[4],\n\tsource: r[5] ?? \"\",\n\tsource_detail: r[6] ?? \"\",\n\tlinkedin: r[7] ?? \"\",\n\tgithub: r[8] ?? \"\",\n\twebsite: r[9] ?? \"\",\n});\n\nconst asRole = (r: any) => ({ id: r[0], title: r[1], archived: !!r[2] });\n\nconst logEvent = async (e: {\n\tperson_id: number;\n\trole_id?: number | null;\n\tauthor?: string;\n\tkind: \"note\" | \"system\";\n\tbody: string;\n}) => {\n\tawait sqlite.execute({\n\t\tsql: \"INSERT INTO ats_events (person_id, role_id, author, kind, body) VALUES (?, ?, ?, ?, ?)\",\n\t\targs: [e.person_id, e.role_id ?? null, PEOPLE.includes(e.author as any) ? e.author : \"\", e.kind, e.body],\n\t});\n};\n\nconst getRoleTitle = async (roleId: number) => {\n\tconst rs = await sqlite.execute({ sql: \"SELECT title FROM ats_roles WHERE id = ?\", args: [roleId] });\n\treturn (rs.rows[0]?.[0] as string) ?? \"?\";\n};\n\nconst asApplication = (r: any) => ({\n\tid: r[0],\n\tperson_id: r[1],\n\trole_id: r[2],\n\tstage: r[3],\n\towner: r[4],\n\tgrade: r[5],\n\tnotes: r[6],\n\tmeeting: r[7],\n\tlost_reason: r[8],\n\tstage_since: r[9],\n});\n\napp.get(\"/api/state\", async (c) => {\n\tconst [people, roles, applications, stageOwners, events, roleStages] = await sqlite.batch([\n\t\t\"SELECT id, name, email, notes, starred, source, source_detail, linkedin, github, website FROM ats_people ORDER BY name\",\n\t\t\"SELECT id, title, archived FROM ats_roles ORDER BY created_at\",\n\t\t\"SELECT id, person_id, role_id, stage, owner, grade, notes, meeting, lost_reason, stage_since FROM ats_applications ORDER BY updated_at DESC\",\n\t\t\"SELECT role_id, stage, owner FROM ats_stage_owners\",\n\t\t\"SELECT id, person_id, role_id, author, kind, body, created_at FROM ats_events ORDER BY id DESC\",\n\t\t\"SELECT role_id, position, name FROM ats_role_stages ORDER BY role_id, position\",\n\t]);\n\treturn c.json({\n\t\tpeople: people.rows.map(asPerson),\n\t\troles: roles.rows.map(asRole),\n\t\tapplications: applications.rows.map(asApplication),\n\t\tstage_owners: stageOwners.rows.map((r: any) => ({ role_id: r[0], stage: r[1], owner: r[2] })),\n\t\trole_stages: roleStages.rows.map((r: any) => ({ role_id: r[0], position: r[1], name: r[2] })),\n\t\tevents: events.rows.map((r: any) => ({\n\t\t\tid: r[0],\n\t\t\tperson_id: r[1],\n\t\t\trole_id: r[2],\n\t\t\tauthor: r[3],\n\t\t\tkind: r[4],\n\t\t\tbody: r[5],\n\t\t\tcreated_at: r[6],\n\t\t})),\n\t});\n});\n\napp.put(\"/api/stage-owners\", async (c) => {\n\tconst b = await c.req.json();\n\tconst roleId = Number(b.role_id);\n\tif (!roleId || !(await getRoleStages(roleId)).includes(b.stage)) return c.json({ error: \"bad input\" }, 400);\n\tif (b.owner !== \"\" && !PEOPLE.includes(b.owner)) return c.json({ error: \"bad owner\" }, 400);\n\tawait sqlite.execute({\n\t\tsql: \"INSERT INTO ats_stage_owners (role_id, stage, owner) VALUES (?, ?, ?) ON CONFLICT(role_id, stage) DO UPDATE SET owner = excluded.owner\",\n\t\targs: [roleId, b.stage, b.owner],\n\t});\n\treturn c.json({ ok: true });\n});\n\napp.post(\"/api/roles\", async (c) => {\n\tconst b = await c.req.json();\n\tif (!b.title?.trim()) return c.json({ error: \"title required\" }, 400);\n\tconst rs = await sqlite.execute({\n\t\tsql: \"INSERT INTO ats_roles (title) VALUES (?) RETURNING id\",\n\t\targs: [b.title.trim()],\n\t});\n\tconst roleId = rs.rows[0][0] as number;\n\tconst seed = Array.isArray(b.stages) && b.stages.length > 0 ? b.stages : DEFAULT_STAGES;\n\tawait setRoleStages(roleId, seed);\n\treturn c.json({ id: roleId }, 201);\n});\n\napp.put(\"/api/roles/:id/stages\", async (c) => {\n\tconst roleId = Number(c.req.param(\"id\"));\n\tconst b = await c.req.json();\n\tconst incoming: { name: string; was?: string }[] = Array.isArray(b.stages) ? b.stages : [];\n\tconst stages = incoming\n\t\t.map((s) => ({ name: String(s.name ?? \"\").trim(), was: s.was ? String(s.was) : undefined }))\n\t\t.filter((s) => s.name);\n\tif (stages.length === 0) return c.json({ error: \"a funnel needs at least one stage\" }, 400);\n\tconst lowered = stages.map((s) => s.name.toLowerCase());\n\tif (new Set(lowered).size !== lowered.length) return c.json({ error: \"stage names must be unique\" }, 400);\n\n\tconst current = await getRoleStages(roleId);\n\tif (current.length === 0) return c.json({ error: \"unknown role\" }, 404);\n\n\tfor (const s of stages) {\n\t\tif (!s.was || s.was === s.name) continue;\n\t\tawait sqlite.execute({\n\t\t\tsql: \"UPDATE ats_applications SET stage = ? WHERE role_id = ? AND stage = ?\",\n\t\t\targs: [s.name, roleId, s.was],\n\t\t});\n\t\tawait sqlite.execute({\n\t\t\tsql: \"UPDATE ats_stage_owners SET stage = ? WHERE role_id = ? AND stage = ?\",\n\t\t\targs: [s.name, roleId, s.was],\n\t\t});\n\t}\n\n\tconst kept = new Set(stages.map((s) => s.was ?? s.name));\n\tconst moves = (b.moves ?? {}) as Record;\n\tconst names = stages.map((s) => s.name);\n\tfor (const gone of current.filter((n) => !kept.has(n))) {\n\t\tconst target = names.includes(moves[gone]) ? moves[gone] : names[0];\n\t\tawait sqlite.execute({\n\t\t\tsql: \"UPDATE ats_applications SET stage = ? WHERE role_id = ? AND stage = ?\",\n\t\t\targs: [target, roleId, gone],\n\t\t});\n\t\tawait sqlite.execute({\n\t\t\tsql: \"DELETE FROM ats_stage_owners WHERE role_id = ? AND stage = ?\",\n\t\t\targs: [roleId, gone],\n\t\t});\n\t}\n\n\tawait setRoleStages(roleId, names);\n\treturn c.json({ ok: true, stages: names });\n});\n\napp.patch(\"/api/roles/:id\", async (c) => {\n\tconst b = await c.req.json();\n\tconst fields: string[] = [];\n\tconst args: unknown[] = [];\n\tif (typeof b.title === \"string\" && b.title.trim()) {\n\t\tfields.push(\"title = ?\");\n\t\targs.push(b.title.trim());\n\t}\n\tif (b.archived !== undefined) {\n\t\tfields.push(\"archived = ?\");\n\t\targs.push(b.archived ? 1 : 0);\n\t}\n\tif (fields.length === 0) return c.json({ error: \"no fields\" }, 400);\n\targs.push(Number(c.req.param(\"id\")));\n\tawait sqlite.execute({ sql: `UPDATE ats_roles SET ${fields.join(\", \")} WHERE id = ?`, args });\n\treturn c.json({ ok: true });\n});\n\nconst findOrCreatePerson = async (person: { name?: string; email?: string }) => {\n\tconst name = person.name?.trim() ?? \"\";\n\tconst email = person.email?.trim() ?? \"\";\n\tif (!name) return null;\n\tconst existing = await sqlite.execute({\n\t\tsql: \"SELECT id FROM ats_people WHERE (email != '' AND email = ?) OR lower(name) = lower(?) LIMIT 1\",\n\t\targs: [email, name],\n\t});\n\tif (existing.rows.length > 0) return existing.rows[0][0] as number;\n\tconst rs = await sqlite.execute({\n\t\tsql: \"INSERT INTO ats_people (name, email) VALUES (?, ?) RETURNING id\",\n\t\targs: [name, email],\n\t});\n\treturn rs.rows[0][0] as number;\n};\n\napp.post(\"/api/people\", async (c) => {\n\tconst b = await c.req.json();\n\tconst id = await findOrCreatePerson(b);\n\tif (id === null) return c.json({ error: \"name required\" }, 400);\n\treturn c.json({ id }, 201);\n});\n\n// People type \"sawyeraltman\" or \"linkedin.com/in/x\" as often as a full URL.\nconst normalizeLink = (kind: \"linkedin\" | \"github\" | \"website\", raw: string) => {\n\tconst value = raw.trim();\n\tif (!value) return \"\";\n\tif (/^https?:\\/\\//i.test(value)) return value;\n\tconst bare = value.replace(/^\\/+/, \"\");\n\tif (!value.includes(\".\")) {\n\t\tif (kind === \"github\") return `https://github.com/${bare}`;\n\t\tif (kind === \"linkedin\") return `https://linkedin.com/in/${bare.replace(/^in\\//, \"\")}`;\n\t}\n\treturn `https://${bare}`;\n};\n\napp.patch(\"/api/people/:id\", async (c) => {\n\tconst b = await c.req.json();\n\tconst id = Number(c.req.param(\"id\"));\n\tconst fields: string[] = [];\n\tconst args: unknown[] = [];\n\tfor (const key of [\"name\", \"email\", \"notes\", \"source_detail\"]) {\n\t\tif (typeof b[key] === \"string\") {\n\t\t\tfields.push(`${key} = ?`);\n\t\t\targs.push(b[key]);\n\t\t}\n\t}\n\tfor (const key of [\"linkedin\", \"github\", \"website\"] as const) {\n\t\tif (typeof b[key] === \"string\") {\n\t\t\tfields.push(`${key} = ?`);\n\t\t\targs.push(normalizeLink(key, b[key]));\n\t\t}\n\t}\n\tif (typeof b.source === \"string\") {\n\t\tif (b.source !== \"\" && !SOURCES.includes(b.source as any)) return c.json({ error: \"bad source\" }, 400);\n\t\tfields.push(\"source = ?\");\n\t\targs.push(b.source);\n\t}\n\tif (b.starred !== undefined) {\n\t\tfields.push(\"starred = ?\");\n\t\targs.push(b.starred ? 1 : 0);\n\t\tawait logEvent({ person_id: id, author: b.author, kind: \"system\", body: b.starred ? \"Starred\" : \"Unstarred\" });\n\t}\n\tif (fields.length === 0) return c.json({ error: \"no fields\" }, 400);\n\tfields.push(\"updated_at = datetime('now')\");\n\targs.push(id);\n\tawait sqlite.execute({ sql: `UPDATE ats_people SET ${fields.join(\", \")} WHERE id = ?`, args });\n\treturn c.json({ ok: true });\n});\n\napp.delete(\"/api/people/:id\", async (c) => {\n\tconst id = Number(c.req.param(\"id\"));\n\tawait sqlite.execute({ sql: \"DELETE FROM ats_applications WHERE person_id = ?\", args: [id] });\n\tawait sqlite.execute({ sql: \"DELETE FROM ats_events WHERE person_id = ?\", args: [id] });\n\tawait sqlite.execute({ sql: \"DELETE FROM ats_people WHERE id = ?\", args: [id] });\n\treturn c.json({ ok: true });\n});\n\napp.post(\"/api/applications\", async (c) => {\n\tconst b = await c.req.json();\n\tconst roleId = Number(b.role_id);\n\tif (!roleId) return c.json({ error: \"role_id required\" }, 400);\n\tlet personId = b.person_id ? Number(b.person_id) : null;\n\tif (!personId) personId = await findOrCreatePerson(b.person ?? {});\n\tif (!personId) return c.json({ error: \"person required\" }, 400);\n\tconst owner = PEOPLE.includes(b.owner) ? b.owner : \"\";\n\tconst roleStages = await getRoleStages(roleId);\n\tif (roleStages.length === 0) return c.json({ error: \"unknown role\" }, 404);\n\tconst stage = roleStages.includes(b.stage) ? b.stage : roleStages[0];\n\tconst grade = GRADES.includes(b.grade) ? b.grade : \"\";\n\tconst notes = typeof b.notes === \"string\" ? b.notes : \"\";\n\tconst lostReason = LOST_REASONS.includes(b.lost_reason) ? b.lost_reason : \"\";\n\ttry {\n\t\tawait sqlite.execute({\n\t\t\tsql: \"INSERT INTO ats_applications (person_id, role_id, stage, owner, grade, notes, lost_reason, stage_since) VALUES (?, ?, ?, ?, ?, ?, ?, datetime('now'))\",\n\t\t\targs: [personId, roleId, stage, owner, grade, notes, lostReason],\n\t\t});\n\t} catch {\n\t\treturn c.json({ error: \"already in this role\" }, 409);\n\t}\n\tconst title = await getRoleTitle(roleId);\n\tawait logEvent({\n\t\tperson_id: personId,\n\t\trole_id: roleId,\n\t\tauthor: b.author,\n\t\tkind: \"system\",\n\t\tbody: `Added to ${title} in ${stage}`,\n\t});\n\treturn c.json({ ok: true }, 201);\n});\n\napp.post(\"/api/events\", async (c) => {\n\tconst b = await c.req.json();\n\tconst personId = Number(b.person_id);\n\tconst body = typeof b.body === \"string\" ? b.body.trim() : \"\";\n\tif (!personId || !body) return c.json({ error: \"person_id and body required\" }, 400);\n\tawait logEvent({\n\t\tperson_id: personId,\n\t\trole_id: b.role_id ? Number(b.role_id) : null,\n\t\tauthor: b.author,\n\t\tkind: \"note\",\n\t\tbody,\n\t});\n\treturn c.json({ ok: true }, 201);\n});\n\napp.delete(\"/api/events/:id\", async (c) => {\n\tawait sqlite.execute({ sql: \"DELETE FROM ats_events WHERE id = ?\", args: [Number(c.req.param(\"id\"))] });\n\treturn c.json({ ok: true });\n});\n\nconst patchApplication = async (appId: number, b: any) => {\n\tconst before = await sqlite.execute({\n\t\tsql: \"SELECT person_id, role_id, stage, grade, meeting, lost_reason FROM ats_applications WHERE id = ?\",\n\t\targs: [appId],\n\t});\n\tif (before.rows.length === 0) return { status: 404, body: { error: \"not found\" } };\n\tconst prev = {\n\t\tperson_id: before.rows[0][0] as number,\n\t\trole_id: before.rows[0][1] as number,\n\t\tstage: (before.rows[0][2] as string) ?? \"\",\n\t\tgrade: (before.rows[0][3] as string) ?? \"\",\n\t\tmeeting: (before.rows[0][4] as string) ?? \"\",\n\t\tlost_reason: (before.rows[0][5] as string) ?? \"\",\n\t};\n\tconst fields: string[] = [];\n\tconst args: unknown[] = [];\n\tlet restartStageClock = false;\n\tif (b.stage !== undefined) {\n\t\tif (!(await getRoleStages(prev.role_id)).includes(b.stage)) return { status: 400, body: { error: \"bad stage\" } };\n\t\tfields.push(\"stage = ?\");\n\t\targs.push(b.stage);\n\t\tif (b.stage !== prev.stage) restartStageClock = true;\n\t}\n\tif (b.owner !== undefined) {\n\t\tif (b.owner !== \"\" && !PEOPLE.includes(b.owner)) return { status: 400, body: { error: \"bad owner\" } };\n\t\tfields.push(\"owner = ?\");\n\t\targs.push(b.owner);\n\t}\n\tif (b.grade !== undefined) {\n\t\tif (b.grade !== \"\" && !GRADES.includes(b.grade)) return { status: 400, body: { error: \"bad grade\" } };\n\t\tfields.push(\"grade = ?\");\n\t\targs.push(b.grade);\n\t}\n\tif (b.meeting !== undefined) {\n\t\tif (b.meeting !== \"\" && !MEETINGS.includes(b.meeting)) return { status: 400, body: { error: \"bad meeting\" } };\n\t\tfields.push(\"meeting = ?\");\n\t\targs.push(b.meeting);\n\t}\n\tif (b.lost_reason !== undefined) {\n\t\tif (b.lost_reason !== \"\" && !LOST_REASONS.includes(b.lost_reason)) {\n\t\t\treturn { status: 400, body: { error: \"bad lost_reason\" } };\n\t\t}\n\t\tfields.push(\"lost_reason = ?\");\n\t\targs.push(b.lost_reason);\n\t\t// Someone brought back into the funnel starts a fresh clock.\n\t\tif (b.lost_reason === \"\" && prev.lost_reason) restartStageClock = true;\n\t}\n\tif (typeof b.notes === \"string\") {\n\t\tfields.push(\"notes = ?\");\n\t\targs.push(b.notes);\n\t}\n\tif (fields.length === 0) return { status: 400, body: { error: \"no fields\" } };\n\tif (restartStageClock) fields.push(\"stage_since = datetime('now')\");\n\tfields.push(\"updated_at = datetime('now')\");\n\targs.push(appId);\n\tawait sqlite.execute({ sql: `UPDATE ats_applications SET ${fields.join(\", \")} WHERE id = ?`, args });\n\n\tconst title = await getRoleTitle(prev.role_id);\n\tconst changes: string[] = [];\n\tif (b.stage !== undefined && b.stage !== prev.stage) changes.push(`Moved from ${prev.stage} to ${b.stage} in ${title}`);\n\tif (b.lost_reason !== undefined && b.lost_reason !== prev.lost_reason) {\n\t\tchanges.push(b.lost_reason ? `Out of funnel for ${title}: ${b.lost_reason}` : `Back in the funnel for ${title}`);\n\t}\n\tif (b.grade !== undefined && b.grade !== prev.grade) {\n\t\tchanges.push(b.grade ? `Graded ${b.grade} for ${title}` : `Cleared grade for ${title}`);\n\t}\n\tif (b.meeting !== undefined && b.meeting !== prev.meeting && b.meeting) changes.push(`Met ${b.meeting} for ${title}`);\n\tif (b.owner !== undefined && b.owner !== \"\") changes.push(`Assigned to ${b.owner} for ${title}`);\n\tfor (const body of changes) {\n\t\tawait logEvent({ person_id: prev.person_id, role_id: prev.role_id, author: b.author, kind: \"system\", body });\n\t}\n\treturn { status: 200, body: { ok: true } };\n};\n\napp.patch(\"/api/applications/:id\", async (c) => {\n\tconst result = await patchApplication(Number(c.req.param(\"id\")), await c.req.json());\n\treturn c.json(result.body, result.status as any);\n});\n\napp.post(\"/api/applications/bulk\", async (c) => {\n\tconst b = await c.req.json();\n\tconst ids = (Array.isArray(b.ids) ? b.ids : []).map(Number).filter((n: number) => Number.isFinite(n) && n > 0);\n\tif (ids.length === 0) return c.json({ error: \"ids required\" }, 400);\n\tconst patch: Record = { author: b.author };\n\tfor (const key of [\"stage\", \"lost_reason\", \"owner\", \"grade\"]) {\n\t\tif (b[key] !== undefined) patch[key] = b[key];\n\t}\n\tif (Object.keys(patch).length === 1) return c.json({ error: \"nothing to change\" }, 400);\n\tconst failed: number[] = [];\n\tlet changed = 0;\n\tfor (const id of ids) {\n\t\tconst result = await patchApplication(id, patch);\n\t\tif (result.status === 200) changed++;\n\t\telse failed.push(id);\n\t}\n\treturn c.json({ ok: true, changed, failed });\n});\n\napp.delete(\"/api/applications/:id\", async (c) => {\n\tawait sqlite.execute({\n\t\tsql: \"DELETE FROM ats_applications WHERE id = ?\",\n\t\targs: [Number(c.req.param(\"id\"))],\n\t});\n\treturn c.json({ ok: true });\n});\n\napp.get(\"/\", (c) =>\n\tc.html(`\n\n\n\n\nMini ATS\n\n\n\n

\n\t

Mini ATS

\n\t

\n\t\t\n\t\t

\n\t

Viewing as \n\t\t\n\t

\n\n

\n\n\n`));\n\nexport default app.fetch;\n",[134],"pulls","branches",1,"forks","envVars",{"_149":143,"_151":61},"connections",{"_149":61,"_150":61},"count","unfilledCount","emptyCount",{"_41":133,"_31":134,"_29":55,"_128":-5,"_39":40,"_38":135,"_129":24,"_36":158,"_13":137,"_32":138,"_34":139,"_23":24,"_131":-5,"_155":159,"_26":160},{"_41":127,"_31":27,"_29":30,"_128":-5,"_39":40,"_38":14,"_129":24,"_36":154,"_13":61,"_32":33,"_34":35,"_23":24,"_131":-5,"_155":156,"_26":157},["D",1785078635532],"children",[],[27],["D",1785070615873],[],[134],["D",1784991101203],{"_95":94,"_102":98},{"_95":94,"_96":-5,"_97":98,"_18":53,"_99":100,"_101":24},{"_13":84,"_31":85,"_41":40,"_86":42,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":43,"_93":94},"ctx",{"_77":-5,"_122":198,"_199":200,"_201":202,"_203":24,"_204":24,"_205":24,"_206":57,"_207":-5,"_208":-7,"_209":-7,"_210":61,"_211":24,"_212":24,"_213":-5,"_214":24,"_215":24,"_216":24,"_217":-5},"ENV",{"_169":170,"_171":172,"_173":85,"_174":175,"_176":177,"_178":179,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v18