\n \n \n \n",[18,90],"6ada1a26-3999-11f1-95a7-42b51c65c3df",["D",1776346651033],"\n",[18,96],"6ada179c-3999-11f1-95a7-42b51c65c3df",["D",1776346651033],[18,101],"pulls","branches",2,"forks","envVars",{"_97":26,"_234":26},"connections",{"_97":26,"_233":26},"unfilledCount","emptyCount",{"_34":194,"_13":18,"_76":115,"_44":-5,"_36":37,"_195":41,"_196":24,"_38":308,"_40":26,"_79":102,"_198":-5,"_81":30,"_199":-5,"_252":309,"_17":310},{"_34":222,"_13":101,"_76":100,"_44":115,"_36":37,"_195":41,"_196":24,"_38":305,"_40":26,"_79":102,"_198":-5,"_81":30,"_199":-5,"_252":306,"_17":307},{"_34":297,"_13":298,"_76":299,"_44":100,"_36":37,"_195":105,"_196":24,"_38":300,"_40":301,"_79":80,"_198":302,"_81":30,"_199":-5,"_252":303,"_17":304},{"_34":290,"_13":291,"_76":292,"_44":100,"_36":37,"_195":41,"_196":24,"_38":293,"_40":26,"_79":80,"_198":294,"_81":30,"_199":-5,"_252":295,"_17":296},{"_34":283,"_13":284,"_76":285,"_44":100,"_36":37,"_195":41,"_196":24,"_38":286,"_40":26,"_79":80,"_198":287,"_81":30,"_199":-5,"_252":288,"_17":289},{"_34":218,"_13":96,"_76":95,"_44":115,"_36":37,"_195":41,"_196":24,"_38":280,"_40":26,"_79":21,"_198":220,"_81":30,"_199":-5,"_252":281,"_17":282},{"_34":214,"_13":90,"_76":89,"_44":115,"_36":37,"_195":41,"_196":24,"_38":277,"_40":26,"_79":21,"_198":216,"_81":30,"_199":-5,"_252":278,"_17":279},{"_34":210,"_13":78,"_76":77,"_44":115,"_36":37,"_195":41,"_196":24,"_38":274,"_40":26,"_79":80,"_198":212,"_81":30,"_199":-5,"_252":275,"_17":276},{"_34":206,"_13":114,"_76":113,"_44":115,"_36":37,"_195":105,"_196":24,"_38":271,"_40":26,"_79":80,"_198":208,"_81":30,"_199":-5,"_252":272,"_17":273},{"_34":264,"_13":265,"_76":266,"_44":-5,"_36":37,"_195":41,"_196":24,"_38":267,"_40":26,"_79":21,"_198":268,"_81":30,"_199":-5,"_252":269,"_17":270},{"_34":255,"_13":256,"_76":257,"_44":-5,"_36":37,"_195":258,"_196":24,"_38":259,"_40":227,"_79":260,"_198":261,"_81":30,"_199":-5,"_252":262,"_17":263},{"_34":247,"_13":248,"_76":249,"_44":-5,"_36":37,"_195":227,"_196":24,"_38":250,"_40":26,"_79":80,"_198":251,"_81":30,"_199":-5,"_252":253,"_17":254},"72382a4c-3999-11f1-95a7-42b51c65c3df","moderation.ts","72382b0a-3999-11f1-95a7-42b51c65c3df",["D",1776346663413],"import { OpenAI } from \"https://esm.town/v/std/openai\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst openai = new OpenAI();\n\n/**\n * Run AI moderation on a single message by ID.\n * Updates the message row with score, reasoning, and status.\n */\nexport async function moderateMessage(messageId: number, text: string): Promise {\n try {\n const completion = await openai.chat.completions.create({\n model: \"gpt-4o-mini\",\n max_tokens: 300,\n messages: [\n {\n role: \"system\",\n content: `You are a content moderation assistant. Given a chat message, evaluate how safe it is.\nReturn JSON with exactly two fields:\n- \"score\": integer 0-100 (100 = perfectly safe, 0 = extremely harmful/vile)\n- \"reasoning\": a short sentence explaining the score\n\nOnly return valid JSON, nothing else. Example:\n{\"score\": 95, \"reasoning\": \"Friendly greeting with no harmful content.\"}`,\n },\n {\n role: \"user\",\n content: text,\n },\n ],\n });\n\n const raw = completion.choices[0]?.message?.content?.trim() ?? \"\";\n // Parse the JSON response\n const parsed = JSON.parse(raw);\n const score = Math.max(0, Math.min(100, Math.round(Number(parsed.score))));\n const reasoning = String(parsed.reasoning).slice(0, 500);\n\n await sqlite.execute({\n sql: \"UPDATE chat_messages SET score = ?, reasoning = ?, status = 'reviewed' WHERE id = ?\",\n args: [score, reasoning, messageId],\n });\n } catch (err) {\n console.error(`Moderation failed for message ${messageId}:`, err);\n // Mark as reviewed even on failure so it doesn't stay pending forever\n await sqlite.execute({\n sql: \"UPDATE chat_messages SET status = 'review_failed', reasoning = ? WHERE id = ?\",\n args: [`Moderation error: ${String(err).slice(0, 200)}`, messageId],\n });\n }\n}\n","children",[],[248],"fac811ec-3999-11f1-b8a9-42b51c65c3df","index.ts","019d9682-d98c-7069-848e-000931fa766a",6,["D",1776346892516],"http","import { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { blob } from \"https://esm.town/v/std/blob\";\nimport { Hono } from \"npm:hono\";\nimport { moderateMessage } from \"./moderation.ts\";\n\nconst app = new Hono();\n\n// ── Migration: add moderation columns (idempotent) ──────────────────\nawait sqlite.batch([\n { sql: \"ALTER TABLE chat_messages ADD COLUMN status TEXT NOT NULL DEFAULT 'pending'\" },\n { sql: \"ALTER TABLE chat_messages ADD COLUMN score INTEGER DEFAULT NULL\" },\n { sql: \"ALTER TABLE chat_messages ADD COLUMN reasoning TEXT DEFAULT NULL\" },\n // Back-fill existing rows so they don't stay \"pending\"\n { sql: \"UPDATE chat_messages SET status = 'reviewed' WHERE status = 'pending'\" },\n]).catch(() => {\n // columns already exist — that's fine\n});\n\n// Serve index.html at the root /\napp.get(\"/\", () => serveFile(\"/frontend/index.html\"));\n\n// Serve all /frontend files\napp.get(\"/frontend/**/*\", (c) => serveFile(c.req.path));\n\n// View source redirect\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// GET messages (last 100)\n// Pass ?username= so the API can show rejected messages only to their sender\napp.get(\"/api/messages\", async (c) => {\n const viewer = c.req.query(\"username\") ?? \"\";\n const result = await sqlite.execute(\n \"SELECT id, username, text, image_key, created_at, status, score, reasoning FROM chat_messages ORDER BY id ASC LIMIT 100\",\n );\n const SCORE_THRESHOLD = 50;\n const filtered = (result.rows as Record[]).filter((m) => {\n const score = m.score as number | null;\n const status = m.status as string;\n // Still pending or passed moderation → show to everyone\n if (status === \"pending\" || score === null || score >= SCORE_THRESHOLD) return true;\n // Rejected → only show to the sender\n return m.username === viewer;\n });\n return c.json(filtered);\n});\n\n// POST a new text message\napp.post(\"/api/messages\", async (c) => {\n const { username, text } = await c.req.json();\n if (!username?.trim() || !text?.trim()) {\n return c.json({ error: \"username and text required\" }, 400);\n }\n const trimmedText = text.trim();\n const res = await sqlite.execute({\n sql: \"INSERT INTO chat_messages (username, text, status) VALUES (?, ?, 'pending')\",\n args: [username.trim(), trimmedText],\n });\n const messageId = res.lastInsertRowid;\n\n // Fire-and-forget moderation (don't block the response)\n if (messageId != null) {\n moderateMessage(Number(messageId), trimmedText).catch(console.error);\n }\n\n return c.json({ ok: true });\n});\n\n// Generate a simple alphanumeric key (no special chars = no URL encoding headaches)\nfunction makeKey(): string {\n const chars = \"abcdefghijklmnopqrstuvwxyz0123456789\";\n let key = \"chatimg\";\n for (let i = 0; i < 16; i++) {\n key += chars[Math.floor(Math.random() * chars.length)];\n }\n return key;\n}\n\n// POST upload a photo → store in blob, insert message row\napp.post(\"/api/upload\", async (c) => {\n const form = await c.req.formData();\n const username = (form.get(\"username\") as string)?.trim();\n const file = form.get(\"photo\") as File | null;\n if (!username || !file) {\n return c.json({ error: \"username and photo required\" }, 400);\n }\n\n const key = makeKey();\n const arrayBuf = await file.arrayBuffer();\n // Store raw bytes plus content type as a JSON-wrapped base64 blob\n const base64 = btoa(\n new Uint8Array(arrayBuf).reduce((s, b) => s + String.fromCharCode(b), \"\"),\n );\n await blob.setJSON(key, { contentType: file.type || \"image/jpeg\", data: base64 });\n\n await sqlite.execute({\n sql: \"INSERT INTO chat_messages (username, text, image_key, status) VALUES (?, ?, ?, 'pending')\",\n args: [username, \"📷\", key],\n });\n\n // Photos get auto-approved (we can't easily moderate images yet)\n // Could moderate the \"📷\" text but it's not meaningful\n return c.json({ ok: true, key });\n});\n\n// GET serve an image from blob storage\napp.get(\"/api/images/:key\", async (c) => {\n const key = c.req.param(\"key\");\n // Only allow alphanumeric keys\n if (!/^[a-z0-9]+$/.test(key)) {\n return c.json({ error: \"invalid key\" }, 400);\n }\n try {\n const stored = await blob.getJSON(key) as { contentType: string; data: string };\n const bytes = Uint8Array.from(atob(stored.data), (ch) => ch.charCodeAt(0));\n return new Response(bytes, {\n headers: {\n \"Content-Type\": stored.contentType,\n \"Cache-Control\": \"public, max-age=31536000, immutable\",\n },\n });\n } catch {\n return c.json({ error: \"not found\" }, 404);\n }\n});\n\n// Unwrap and rethrow Hono errors as the original error\napp.onError((err) => Promise.reject(err));\n\n// HTTP vals expect an exported \"fetch handler\"\nexport default app.fetch;\n",[],[256],"6ada34a2-3999-11f1-95a7-42b51c65c3df","README.md","019d9682-d98c-7069-848d-fffd2eab5d44",["D",1776346651033],"# React + Hono Starter\n\nA minimal starter template for building client-side React apps with a Hono\nbackend on Val Town. Click **Remix** to get your own copy.\n\n**Want to build UI?** Start writing React components in\n[`frontend/components/`](/frontend/components/). Import them into `App.tsx` and\nyou're good to go. Styling is [Twind](https://twind.style/) — just use Tailwind\nutility classes, zero config.\n\n**Want to add an API?** Add routes in [`index.ts`](/index.ts) (there's a\ncommented-out example). Fetch them from your React components.\n\n## Architecture\n\n```mermaid\ngraph LR\n Browser -->|\"GET /\"| Hono[\"index.ts
(Hono server)\"]\n Hono -->|serves| HTML[\"index.html\"]\n HTML -->|loads| Entry[\"index.tsx\"]\n Entry -->|renders| App[\"App.tsx\"]\n App -->|renders| Counter[\"Counter.tsx\"]\n```\n\n## File structure\n\n```\nindex.ts ← Hono backend (serves frontend + API routes)\nfrontend/\n index.html ← HTML shell (loads Twind + React)\n index.tsx ← React entrypoint (mounts )\n favicon.svg ← App icon\n components/\n App.tsx ← Root component (layout + view source link)\n Counter.tsx ← Example component with state\n```\n\n## How it works\n\n1. **`index.ts`** is the HTTP entrypoint — a Hono server that serves the\n frontend and any API routes you add.\n2. **`frontend/index.html`** loads Twind and the React entrypoint.\n3. **`frontend/index.tsx`** mounts the React app.\n4. **`frontend/components/App.tsx`** is the root layout — add new components\n alongside it.\n5. **`frontend/components/Counter.tsx`** is an example stateful component —\n replace it with your own!\n\n## Next steps\n\n- Add API routes in `index.ts`\n- Add new components in `frontend/components/`\n- Add a SQLite database — see the\n [React Hono Example](https://www.val.town/x/stevekrouse/reactHonoExample) for\n a full-stack example with database, queries, and shared types",[],[265],["D",1776346930181],[],[18,114],["D",1776346651033],[],[18,78],["D",1776346651033],[],[18,90],["D",1776346651033],[],[18,96],"6ada0ebe-3999-11f1-95a7-42b51c65c3df","QROverlay.tsx","019d9682-d98c-7069-848d-e4b146756c2f",["D",1776346651033],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState, useEffect } from \"https://esm.sh/react@18.2.0\";\nimport QRCode from \"https://esm.sh/qrcode@1.5.4?bundle-deps\";\n\nexport function QROverlay({ visible }: { visible: boolean }) {\n const [dataUrl, setDataUrl] = useState(null);\n\n useEffect(() => {\n QRCode.toDataURL(window.location.href, { width: 256, margin: 2 })\n .then(setDataUrl)\n .catch(console.error);\n }, []);\n\n if (!visible || !dataUrl) return null;\n\n return (\n

\n $\"QR$ \n

\n );\n}\n",[],[18,101,284],"6ada063a-3999-11f1-95a7-42b51c65c3df","Counter.tsx","019d9682-d98c-7069-848d-e0cf276726f2",["D",1776346651033],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from \"https://esm.sh/react@18.2.0\";\n\nexport function Counter() {\n const [count, setCount] = useState(0);\n return (\n

\n Clicked\n setCount((c) => c + 1)}\n class=\"bg-blue-500 hover:bg-blue-600 text-white font-medium px-4 py-2 rounded-lg transition-colors cursor-pointer\"\n >\n {count}\n \n times\n

\n );\n}\n",[],[18,101,291],"113a0a0c-399a-11f1-b7d7-42b51c65c3df","App.tsx","019d9682-d98c-7069-848d-dc5f2b547c42",["D",1776346930181],5,"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState, useEffect, useRef } from \"https://esm.sh/react@18.2.0\";\nimport { QROverlay } from \"./QROverlay.tsx\";\nimport { playRandomBlip } from \"../sounds.ts\";\n\ntype Message = {\n id: number;\n username: string;\n text: string;\n image_key: string | null;\n created_at: string;\n status: string | null;\n score: number | null;\n reasoning: string | null;\n};\n\nexport function App() {\n const [messages, setMessages] = useState([]);\n const [text, setText] = useState(\"\");\n const [username, setUsername] = useState(() => localStorage.getItem(\"chat-username\") || \"\");\n const [joined, setJoined] = useState(() => !!localStorage.getItem(\"chat-username\"));\n const [showQR, setShowQR] = useState(true);\n const [uploading, setUploading] = useState(false);\n const fileRef = useRef(null);\n const prevCountRef = useRef(0);\n\n // Poll for messages every second\n useEffect(() => {\n if (!joined) return;\n const fetchMessages = () => {\n fetch(`/api/messages?username=${encodeURIComponent(username)}`)\n .then((r) => r.json())\n .then((data) => setMessages(data))\n .catch(console.error);\n };\n fetchMessages();\n const id = setInterval(fetchMessages, 1000);\n return () => clearInterval(id);\n }, [joined, username]);\n\n // Play a random blip when new messages arrive\n useEffect(() => {\n if (messages.length > prevCountRef.current && prevCountRef.current > 0) {\n playRandomBlip();\n }\n prevCountRef.current = messages.length;\n }, [messages.length]);\n\n // NOTE: Do NOT add auto-scroll here — it hijacks the user's scroll position\n // and makes it impossible to read older messages while new ones arrive.\n\n const handleJoin = (e: React.FormEvent) => {\n e.preventDefault();\n if (!username.trim()) return;\n localStorage.setItem(\"chat-username\", username.trim());\n setJoined(true);\n };\n\n const handleSend = async (e: React.FormEvent) => {\n e.preventDefault();\n if (!text.trim()) return;\n const msg = text.trim();\n setText(\"\");\n await fetch(\"/api/messages\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ username, text: msg }),\n });\n };\n\n const handlePhoto = async (e: React.ChangeEvent) => {\n const file = e.target.files?.[0];\n if (!file) return;\n setUploading(true);\n try {\n const form = new FormData();\n form.append(\"username\", username);\n form.append(\"photo\", file);\n await fetch(\"/api/upload\", { method: \"POST\", body: form });\n } catch (err) {\n console.error(\"Upload failed:\", err);\n } finally {\n setUploading(false);\n // Reset the file input so the same file can be re-selected\n if (fileRef.current) fileRef.current.value = \"\";\n }\n };\n\n if (!joined) {\n return (\n

\n );\n }\n\n return (\n

\n {/* Header */}\n

💬 Chat

\n \n setShowQR(!showQR)}\n class=\"px-2 py-1 rounded bg-gray-100 hover:bg-gray-200 text-xs\"\n >\n {showQR ? \"Hide QR\" : \"Show QR\"}\n \n {username} · source\n \n

\n\n \n\n {/* Messages */}\n

\n {messages.length === 0 && (\n

No messages yet. Say hi! 👋

\n )}\n {messages.map((m) => {\n const isOwn = m.username === username;\n const isRejected = m.score !== null && m.score < 50;\n\n // Rejected message visible only to sender\n if (isRejected && isOwn) {\n return (\n

⚠️ Message not sent

{m.text}

{m.reasoning || \"This message was flagged by our content filter.\"}

\n );\n }\n\n return (\n

\n \n {!isOwn && (\n

{m.username}

\n )}\n {m.image_key\n ? $\"photo\"$ \n :

{m.text}

}\n

\n );\n })}\n

\n\n {/* Input */}\n

\n {/* Hidden file input for camera/gallery */}\n \n fileRef.current?.click()}\n disabled={uploading}\n class=\"w-10 h-10 flex items-center justify-center rounded-full bg-gray-100 hover:bg-gray-200 text-lg shrink-0 disabled:opacity-50\"\n title=\"Send a photo\"\n >\n {uploading ? \"⏳\" : \"📷\"}\n \n setText(e.target.value)}\n placeholder=\"Type a message...\"\n class=\"flex-1 border rounded-full px-4 py-2 outline-none focus:ring-2 focus:ring-blue-400 text-sm\"\n // NOTE: Do NOT add autoFocus here — it causes scroll/focus issues on mobile\n // and fights with the 1-second polling re-renders.\n />\n \n \n \n );\n}\n",[],[18,101,298],["D",1776346651033],[237,238,239],[18,101],["D",1776346651033],[236,240,241,242,243],[18],["D",1776345122900],["D",1789501263826],{"_11":12,"_166":84},{"_11":12,"_162":-5,"_83":84,"_31":82,"_163":164,"_165":30},{"_40":105,"_13":16,"_34":37,"_154":117,"_155":72,"_156":74,"_157":121,"_158":117,"_159":43,"_160":14,"_161":12},"ctx",{"_53":-5,"_186":349,"_350":351,"_352":353,"_354":30,"_355":30,"_356":30,"_357":24,"_358":-5,"_359":-7,"_360":-7,"_361":26,"_362":30,"_363":30,"_364":-5,"_365":30,"_366":30,"_367":30,"_368":-5},"ENV",{"_320":321,"_322":323,"_324":73,"_325":326,"_327":328,"_329":330,"_331":332,"_333":334,"_335":336,"_337":338,"_339":340,"_341":342,"_343":344,"_345":346,"_347":348},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · frontend