[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_405":406,"_407":408},"routes/_app.x.$handle.$name",{"_102":101,"_32":44,"_111":89,"_27":112,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_20":-5,"_123":124,"_125":126,"_127":26,"_128":129,"_130":24,"_131":-5,"_132":-5,"_133":134},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":26,"_48":49,"_50":49,"_51":52,"_53":54,"_18":55,"_56":57,"_58":24,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":26},"version",74,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":26,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":36,"_37":38,"_39":14,"_40":41,"_23":26},"previous","deleted",true,"deletedHere",false,"path","verify3.ts","latestPath","fileId","a97d9472-5ea3-11f1-9d67-1607ee4eb77e","name","fileType","script","content","// Throwaway: prove a fresh agent surfaces an image WITHOUT being told where to\n// save (system-prompt drives /mnt/session/outputs/). Delete after.\nimport { addMessage, createThread, getMessages, getThread } from \"./backend/db.ts\";\nimport { ensureSession, runTurn } from \"./backend/agent.ts\";\nimport { getFileBytes } from \"./backend/files.ts\";\n\nconst id = crypto.randomUUID();\nawait createThread(id, \"verify3\", \"verify-user\");\nawait addMessage(id, \"user\", \"text\", \"chart\");\nconst thread = await getThread(id);\nconst sid = await ensureSession(thread);\nawait runTurn(id, sid, \"Make a simple bar chart of the values 3, 7, 2, 9 as a PNG and show it to me.\");\n\nconst rows = await getMessages(id, 0);\nconsole.log(\"ROWS\", JSON.stringify(rows.map((r: any) => ({ type: r.type, content: String(r.content).slice(0, 80) })), null, 2));\nconst img = rows.find((r: any) => r.type === \"image\");\nif (img) {\n const { id: fid } = JSON.parse((img as any).content);\n const bytes = await (await getFileBytes(fid)).arrayBuffer();\n console.log(\"IMAGE BYTES\", bytes.byteLength, \"id\", fid);\n} else {\n console.log(\"NO IMAGE ROW\");\n}\n","createdAt",["D",1780419244106],"branchVersion","branchId","f94618ba-5e96-11f1-a008-1607ee4eb77e","id","f93e0bca-5e96-11f1-a008-1607ee4eb77e","claude-managed-agents-ui",["D",1780413794401],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Interactive chat UI for a Claude Managed Agent","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/7bf29dd7-9190-4de2-045f-8245c9e11100/square512?exp=1789534799&sig=09a92b82815d40b1746bc08cf5b52c6bd0f7f20c4fd9efdc5dcbaac6597978e2","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","pinnedFileId","019e88ee-890a-72f8-a279-25160d2a5b36","pinPreview","pinMigrated","screenshotVersion","likeCount",1,"orgId","019aa807-52c2-709c-928b-2029bae9a558","tursoName","f93e0bca5e9611f1a0081607ee4eb77e","tursoHostname","f93e0bca5e9611f1a0081607ee4eb77e-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789495880338],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_102":101,"_110":106},"org",{"_102":101,"_103":104,"_105":106,"_18":-5,"_107":108,"_109":24},"branch",{"_13":88,"_32":89,"_42":41,"_90":43,"_91":92,"_93":94,"_95":49,"_96":97,"_98":64,"_99":44,"_100":101},"isOwned",121,"main","projectId","forkedBranchId","961078ea-f528-11ef-aa68-569c3dd06744","forkedBranchVersion",89,"forkedProjectPrivacy","forkedProjectId","96102714-f528-11ef-aa68-569c3dd06744","forkedProjectOrgId","projectName","userHandle","templates","handle","displayName","Templates","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/129cab32-3bd7-4c3e-f39b-f12900c76100/square512?exp=1789534799&sig=94d49ad984a50880ef894a3794e08842e7b9b626be771ff48da114d7d9a149ed","tier","business","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_42":43,"_32":44,"_37":400,"_46":-5,"_47":26,"_48":49,"_50":49,"_51":52,"_53":54,"_18":55,"_56":57,"_58":24,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":401,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":402,"_83":403,"_85":404,"_87":26},"tree",[194,199,217,218,219],"files",[194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219],"counts",{"_184":154,"_185":62,"_186":62,"_187":188,"_189":190},"contents",[145,146,147,148,149],"upstreamProject",{"_42":97,"_32":141,"_51":142,"_53":143,"_48":49,"_81":144},"upstreamBranch",{"_42":92,"_37":135,"_136":137,"_32":89,"_90":97,"_13":138,"_91":-5,"_93":-5,"_139":140,"_46":-5,"_87":26,"_48":49,"_100":101,"_63":64,"_99":141},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1740674013689],"updatedAt",["D",1785420707976],91,"lockfileKey","1785420708123-esm.town_v_templates_react-hono-starter@91-main","react-hono-starter","Starter template with client-side React & Hono server","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/64dc00cc-94d9-47dd-81b1-dde02610d900/square512?exp=1789534799&sig=2fe932419d898cd124d0961cab25a5a9c3bd76c8b30cb3b9e71257c7b34e60a2",{"_102":101,"_110":106},{"_42":178,"_32":179,"_30":180,"_151":-5,"_40":41,"_39":181,"_152":24,"_37":182,"_13":154,"_33":176,"_35":-5,"_23":26,"_155":-5,"_27":183},{"_42":172,"_32":173,"_30":174,"_151":-5,"_40":41,"_39":62,"_152":24,"_37":175,"_13":154,"_33":176,"_35":-5,"_23":26,"_155":-5,"_27":177},{"_42":165,"_32":166,"_30":167,"_151":-5,"_40":41,"_39":168,"_152":24,"_37":169,"_13":161,"_33":20,"_35":170,"_23":26,"_155":-5,"_27":171},{"_42":157,"_32":158,"_30":57,"_151":-5,"_40":41,"_39":159,"_152":26,"_37":160,"_13":161,"_33":162,"_35":163,"_23":26,"_155":44,"_27":164},{"_42":150,"_32":28,"_30":31,"_151":-5,"_40":41,"_39":14,"_152":26,"_37":153,"_13":154,"_33":34,"_35":36,"_23":26,"_155":-5,"_27":156},"a97d93a0-5ea3-11f1-9d67-1607ee4eb77e","parentId","latest",["D",1780419244106],0,"label",[28],"f1cac2f6-5e9c-11f1-ac44-1607ee4eb77e","index.ts",52,["D",1780416358953],4,"http","import { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { oauthMiddleware } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport { Hono } from \"npm:hono\";\nimport * as db from \"./backend/db.ts\";\nimport { MESSAGE_LIMIT, requireUser } from \"./backend/auth.ts\";\nimport { ensureSession, runTurn } from \"./backend/agent.ts\";\nimport { getFileBytes } from \"./backend/files.ts\";\n\nconst app = new Hono();\n\n// Static frontend (public). The /auth/* routes are injected by oauthMiddleware.\napp.get(\"/\", () => serveFile(\"/frontend/index.html\"));\napp.get(\"/frontend/**/*\", (c) => serveFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// Everything under /api/* requires a logged-in Val Town user.\napp.use(\"/api/*\", async (c, next) => {\n const user = await requireUser(c);\n if (!user) return c.json({ error: \"Log in with Val Town to continue.\" }, 401);\n c.set(\"user\", user);\n await next();\n});\n\n// Current user + usage against the per-user message limit.\napp.get(\"/api/me\", async (c) => {\n const user = c.get(\"user\") as { username: string; id: string };\n const used = await db.countUserMessages(user.id);\n return c.json({\n username: user.username,\n used,\n limit: MESSAGE_LIMIT,\n remaining: Math.max(0, MESSAGE_LIMIT - used),\n });\n});\n\n// Threads (scoped to the current user)\napp.get(\"/api/threads\", async (c) => {\n const user = c.get(\"user\") as { id: string };\n return c.json(await db.listThreadsForUser(user.id));\n});\napp.post(\"/api/threads\", async (c) => {\n const user = c.get(\"user\") as { id: string };\n const id = crypto.randomUUID();\n await db.createThread(id, \"New chat\", user.id);\n return c.json(await db.getThread(id));\n});\n\n// Serve a sandbox file the agent surfaced: bytes from blob, mime/name from the\n// matching message row. Images render inline; other files download.\napp.get(\"/api/files/:id\", async (c) => {\n const id = c.req.param(\"id\");\n const meta = await db.getFilePayload(id);\n if (!meta) return c.notFound();\n const res = await getFileBytes(id);\n const headers: Record = { \"Content-Type\": meta.mime };\n if (!meta.mime.startsWith(\"image/\")) {\n headers[\"Content-Disposition\"] = `attachment; filename=\"${meta.name}\"`;\n }\n return new Response(await res.arrayBuffer(), { headers });\n});\n\n// Poll for messages newer than the last row the client has seen (own threads only)\napp.get(\"/api/threads/:id/messages\", async (c) => {\n const user = c.get(\"user\") as { id: string };\n const thread = await db.getThread(c.req.param(\"id\"));\n if (!thread || thread.user_id !== user.id) return c.notFound();\n return c.json(await db.getMessages(thread.id, Number(c.req.query(\"after\") ?? 0)));\n});\n\n// One user turn. Enforce the per-user message limit FIRST, then: insert the user\n// row, ensure a session, and stream events into SQLite until idle. UI relies on polling.\napp.post(\"/api/threads/:id/messages\", async (c) => {\n const user = c.get(\"user\") as { id: string };\n const thread = await db.getThread(c.req.param(\"id\"));\n if (!thread || thread.user_id !== user.id) return c.notFound();\n\n const used = await db.countUserMessages(user.id);\n if (used >= MESSAGE_LIMIT) {\n return c.json(\n {\n error: `You've reached the ${MESSAGE_LIMIT}-message limit for this demo.`,\n remaining: 0,\n },\n 429,\n );\n }\n\n const { text } = await c.req.json();\n await db.addMessage(thread.id, \"user\", \"text\", text);\n if (thread.title === \"New chat\") await db.setTitle(thread.id, text.slice(0, 60));\n const sessionId = await ensureSession(thread);\n await runTurn(thread.id, sessionId, text);\n return c.json({ ok: true });\n});\n\n// Unwrap Hono errors so we get real stack traces instead of \"Internal Server Error\"\napp.onError((err) => Promise.reject(err));\n\nexport default oauthMiddleware(app.fetch);\n",[158],"b8f407a0-5e9a-11f1-af60-1607ee4eb77e","README.md","019e88ee-890a-72f8-a279-21928a58e16f",35,["D",1780415404602],"# Claude Managed Agent — Chat UI\n\nAn interactive chat UI for talking to a\n[Claude Managed Agent](https://platform.claude.com/docs/en/managed-agents/quickstart).\nEach thread is one stateful agent **session** — persistent history plus a\nsandbox with bash, file editing, and web tools. Hono (backend) + React\n(frontend), with Val Town SQLite for storage.\n\nWhere\n[`claude-managed-agents`](https://www.val.town/x/templates/claude-managed-agents)\nis a one-shot script, this is a multi-turn, multi-thread UI.\n\n## How it works\n\n- **A thread = one session.** The agent + environment are created **once**\n (lazily on first use) and their ids are cached in a `config` row — sessions\n pin to an agent version, so recreating them per request would be wrong. Each\n thread makes one session and reuses it for follow-up turns.\n- On a new user message the server inserts the user row, ensures the thread has\n a session, then **opens the event stream, sends the message, and writes each\n event to SQLite as it arrives** (`agent.message` → text, `agent.tool_use` →\n tool name, `session.error` → error), returning when the session goes idle.\n- The **frontend polls** `GET /api/threads/:id/messages?after=` about\n once a second and renders new rows in order. No SSE to the browser.\n- The built-in toolset runs in Anthropic's sandbox with\n `permission_policy: always_allow`, so tools just run — no approval prompts.\n- **Files the agent creates** (images, charts, PDFs) are surfaced after each\n turn. When the session goes idle, `backend/files.ts` lists the session's files\n via the Managed Agents Files API (`files.list({ scope_id })`), downloads any\n new ones (`files.download(id)`), stashes the bytes in `std/blob` (key\n `file_`), and writes a `messages` row for each — `type: \"image\"` for\n `image/*`, else `type: \"file\"`. The row's `content` is JSON\n `{ id, name, mime }`. The frontend renders images inline and other files as a\n `⬇ name` download link, both pointing at `GET /api/files/:id`, which streams\n the blob bytes with the right Content-Type.\n\n## Setup\n\nSet `ANTHROPIC_API_KEY` (from ).\nEverything else is created on the first message. Tweak the model or system\nprompt in `backend/agent.ts`.\n\n## Files\n\n- `index.ts` — Hono server + API routes\n- `backend/db.ts` — SQLite schema + helpers (`threads`, `messages`, `config`)\n- `backend/agent.ts` — Managed Agents: create-once config, per-thread session,\n per-turn streaming\n- `backend/files.ts` — surface sandbox files: Files API → `std/blob` →\n image/file message rows\n- `frontend/` — React chat UI (`App.tsx`, `Chat.tsx`, `api.ts`)\n\n## Backlog (not built yet)\n\n- **Stream reconnection.** The turn request stays open for the whole agent turn.\n If it dies before `session.status_idle`, reopen the stream and replay events\n for that `session_id` from the thread's `last_cursor` to resume writing to\n SQLite — session state is persisted server-side, so it's recoverable.\n- **Long turns** may exceed Val Town request limits → tied to the reconnection /\n background-execution work above.",[166],"f94df35a-5e96-11f1-a008-1607ee4eb77e","frontend","019e88ee-890a-72f8-a279-1cf939beedf1",["D",1780413794401],"directory",[173],"31cdaeaa-5e97-11f1-91e4-1607ee4eb77e","backend","d776a2ad-ff3e-4481-8dd0-5ebd71580eb6",2,["D",1780413889356],[179],"pulls","branches","forks","envVars",{"_191":62,"_193":154},"connections",{"_191":154,"_192":154},"count","unfilledCount","emptyCount",{"_42":178,"_32":179,"_30":180,"_151":-5,"_40":41,"_39":181,"_152":24,"_37":397,"_13":154,"_33":176,"_35":-5,"_23":26,"_155":-5,"_221":398,"_27":399},{"_42":388,"_32":389,"_30":390,"_151":180,"_40":41,"_39":391,"_152":26,"_37":392,"_13":393,"_33":34,"_35":394,"_23":26,"_155":-5,"_221":395,"_27":396},{"_42":380,"_32":381,"_30":382,"_151":180,"_40":41,"_39":383,"_152":24,"_37":384,"_13":154,"_33":34,"_35":385,"_23":26,"_155":-5,"_221":386,"_27":387},{"_42":371,"_32":372,"_30":373,"_151":180,"_40":41,"_39":374,"_152":26,"_37":375,"_13":376,"_33":34,"_35":377,"_23":26,"_155":-5,"_221":378,"_27":379},{"_42":363,"_32":364,"_30":365,"_151":180,"_40":41,"_39":366,"_152":24,"_37":367,"_13":181,"_33":34,"_35":368,"_23":26,"_155":-5,"_221":369,"_27":370},{"_42":172,"_32":173,"_30":174,"_151":-5,"_40":41,"_39":62,"_152":24,"_37":360,"_13":154,"_33":176,"_35":-5,"_23":26,"_155":-5,"_221":361,"_27":362},{"_42":356,"_32":261,"_30":255,"_151":174,"_40":41,"_39":62,"_152":24,"_37":357,"_13":154,"_33":176,"_35":-5,"_23":26,"_155":-5,"_221":358,"_27":359},{"_42":352,"_32":319,"_30":313,"_151":255,"_40":41,"_39":323,"_152":24,"_37":353,"_13":154,"_33":176,"_35":-5,"_23":26,"_155":-5,"_221":354,"_27":355},{"_42":344,"_32":345,"_30":346,"_151":313,"_40":41,"_39":347,"_152":24,"_37":348,"_13":154,"_33":34,"_35":349,"_23":26,"_155":-5,"_221":350,"_27":351},{"_42":336,"_32":337,"_30":338,"_151":313,"_40":41,"_39":339,"_152":24,"_37":340,"_13":154,"_33":34,"_35":341,"_23":26,"_155":-5,"_221":342,"_27":343},{"_42":328,"_32":329,"_30":330,"_151":313,"_40":41,"_39":331,"_152":26,"_37":332,"_13":154,"_33":34,"_35":333,"_23":26,"_155":-5,"_221":334,"_27":335},{"_42":320,"_32":321,"_30":322,"_151":313,"_40":41,"_39":323,"_152":26,"_37":324,"_13":154,"_33":34,"_35":325,"_23":26,"_155":-5,"_221":326,"_27":327},{"_42":310,"_32":311,"_30":312,"_151":313,"_40":41,"_39":314,"_152":24,"_37":315,"_13":154,"_33":34,"_35":316,"_23":26,"_155":-5,"_221":317,"_27":318},{"_42":302,"_32":303,"_30":304,"_151":255,"_40":41,"_39":305,"_152":26,"_37":306,"_13":181,"_33":34,"_35":307,"_23":26,"_155":-5,"_221":308,"_27":309},{"_42":294,"_32":295,"_30":296,"_151":255,"_40":41,"_39":297,"_152":24,"_37":298,"_13":181,"_33":34,"_35":299,"_23":26,"_155":-5,"_221":300,"_27":301},{"_42":286,"_32":287,"_30":288,"_151":255,"_40":41,"_39":289,"_152":26,"_37":290,"_13":154,"_33":34,"_35":291,"_23":26,"_155":-5,"_221":292,"_27":293},{"_42":278,"_32":279,"_30":280,"_151":255,"_40":41,"_39":281,"_152":26,"_37":282,"_13":154,"_33":34,"_35":283,"_23":26,"_155":-5,"_221":284,"_27":285},{"_42":270,"_32":271,"_30":272,"_151":255,"_40":41,"_39":273,"_152":26,"_37":274,"_13":154,"_33":34,"_35":275,"_23":26,"_155":-5,"_221":276,"_27":277},{"_42":262,"_32":263,"_30":264,"_151":255,"_40":41,"_39":265,"_152":24,"_37":266,"_13":154,"_33":34,"_35":267,"_23":26,"_155":-5,"_221":268,"_27":269},{"_42":252,"_32":253,"_30":254,"_151":255,"_40":41,"_39":256,"_152":24,"_37":257,"_13":181,"_33":34,"_35":258,"_23":26,"_155":-5,"_221":259,"_27":260},{"_42":245,"_32":246,"_30":247,"_151":174,"_40":41,"_39":62,"_152":26,"_37":248,"_13":154,"_33":20,"_35":249,"_23":26,"_155":-5,"_221":250,"_27":251},{"_42":237,"_32":238,"_30":239,"_151":174,"_40":41,"_39":240,"_152":26,"_37":241,"_13":181,"_33":20,"_35":242,"_23":26,"_155":-5,"_221":243,"_27":244},{"_42":230,"_32":231,"_30":232,"_151":174,"_40":41,"_39":62,"_152":24,"_37":233,"_13":154,"_33":34,"_35":234,"_23":26,"_155":-5,"_221":235,"_27":236},{"_42":165,"_32":166,"_30":167,"_151":-5,"_40":41,"_39":168,"_152":24,"_37":227,"_13":161,"_33":20,"_35":170,"_23":26,"_155":-5,"_221":228,"_27":229},{"_42":157,"_32":158,"_30":57,"_151":-5,"_40":41,"_39":159,"_152":26,"_37":224,"_13":161,"_33":162,"_35":163,"_23":26,"_155":44,"_221":225,"_27":226},{"_42":150,"_32":28,"_30":31,"_151":-5,"_40":41,"_39":14,"_152":26,"_37":220,"_13":154,"_33":34,"_35":36,"_23":26,"_155":-5,"_221":222,"_27":223},["D",1780419244106],"children",[],[28],["D",1780416358953],[],[158],["D",1780415404602],[],[166],"f94deee6-5e96-11f1-a008-1607ee4eb77e","index.tsx","019e88ee-890a-72f8-a279-1a31fa3e7e92",["D",1780413794401],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\nimport { App } from \"./components/App.tsx\";\n\nconst root = document.getElementById(\"root\");\nif (!root) {\n throw new Error(\"No root element found\");\n}\n\ncreateRoot(root).render();",[],[173,231],"e0db4678-5e9c-11f1-9ec8-1607ee4eb77e","index.html","019e88ee-890a-72f8-a279-15dc455934ab",42,["D",1780416330519],"\n\n \n \n \n Claude Managed Agent\n \n \n \n \n

\n \n \n \n\n",[],[173,238],"f94de36a-5e96-11f1-a008-1607ee4eb77e","favicon.svg","019e88ee-890a-72f8-a279-127b4bb2ba62",["D",1780413794401],"\n",[],[173,246],"dd36236c-5e9c-11f1-8f62-1607ee4eb77e","api.ts","e8672b46-5e97-11f1-a823-1607ee4eb77e","019e88ee-890a-72f8-a279-0d2bca618dcd",40,["D",1780416324362],"export interface Thread {\n id: string;\n session_id: string | null;\n title: string;\n last_cursor: string | null;\n created_at: string;\n}\n\nexport interface Message {\n id: number;\n thread_id: string;\n role: \"user\" | \"assistant\" | \"system\";\n // content varies by type:\n // text → plain text\n // tool_use → JSON string { name, input }\n // tool_result → JSON string { output, is_error? }\n // image → JSON string { id, name, mime } (served at /api/files/)\n // file → JSON string { id, name, mime } (download at /api/files/)\n // error → plain text (rendered red)\n type: \"text\" | \"tool_use\" | \"tool_result\" | \"error\" | \"image\" | \"file\";\n content: string;\n created_at: string;\n}\n\nexport interface FilePayload {\n id: string;\n name: string;\n mime: string;\n}\n\nexport interface Me {\n username: string;\n used: number;\n limit: number;\n remaining: number;\n}\n\n// Thrown when an /api/* call returns 401 — the caller should show the login screen.\nexport class UnauthorizedError extends Error {\n constructor() {\n super(\"unauthorized\");\n this.name = \"UnauthorizedError\";\n }\n}\n\n// Thrown when a send hits the demo limit (HTTP 429).\nexport class LimitError extends Error {\n remaining: number;\n constructor(message: string, remaining: number) {\n super(message);\n this.name = \"LimitError\";\n this.remaining = remaining;\n }\n}\n\nasync function json(res: Response): Promise {\n if (res.status === 401) throw new UnauthorizedError();\n if (!res.ok) throw new Error(`${res.status} ${res.statusText}`);\n return res.json() as Promise;\n}\n\nexport const api = {\n // Returns the logged-in user + usage. Throws UnauthorizedError when not logged in.\n me(): Promise {\n return fetch(\"/api/me\").then((r) => json(r));\n },\n listThreads(): Promise {\n return fetch(\"/api/threads\").then((r) => json(r));\n },\n createThread(): Promise {\n return fetch(\"/api/threads\", { method: \"POST\" }).then((r) => json(r));\n },\n getMessages(threadId: string, after: number): Promise {\n return fetch(`/api/threads/${threadId}/messages?after=${after}`).then((r) =>\n json(r)\n );\n },\n // Stays open the whole turn. Resolves { ok: true }; throws LimitError on HTTP 429.\n async send(threadId: string, text: string): Promise<{ ok: true }> {\n const res = await fetch(`/api/threads/${threadId}/messages`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ text }),\n });\n if (res.status === 401) throw new UnauthorizedError();\n if (res.status === 429) {\n const body = await res.json().catch(() => ({})) as {\n error?: string;\n remaining?: number;\n };\n throw new LimitError(\n body.error ?? \"You've reached the demo message limit.\",\n body.remaining ?? 0,\n );\n }\n if (!res.ok) throw new Error(`${res.status} ${res.statusText}`);\n return res.json() as Promise<{ ok: true }>;\n },\n async logout(): Promise {\n await fetch(\"/auth/logout\", { method: \"POST\" }).catch(() => {});\n },\n};\n\nexport const SOURCE_VAL_URL = \"https://www.val.town/x/templates/claude-managed-agents-ui\";\n",[],[173,261,253],"components","09d95c4a-5e9d-11f1-8bcb-1607ee4eb77e","UsageMeter.tsx","09d95d8a-5e9d-11f1-8bcb-1607ee4eb77e",60,["D",1780416399311],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport type { Me } from \"./api.ts\";\n\n// A small \"used / limit messages\" bar. Turns red once the limit is hit.\nexport function UsageMeter({ me }: { me: Me }) {\n const limit = Math.max(me.limit, 1);\n const pct = Math.min(100, Math.round((me.used / limit) * 100));\n const atLimit = me.remaining <= 0;\n return (\n

\n Demo usage\n \n {me.used} / {me.limit} messages\n \n

\n \n

\n );\n}\n",[],[173,261,263],"12679034-5e9d-11f1-8d56-1607ee4eb77e","Sidebar.tsx","126790de-5e9d-11f1-8d56-1607ee4eb77e",61,["D",1780416413672],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { type Me, SOURCE_VAL_URL, type Thread } from \"./api.ts\";\nimport { UsageMeter } from \"./UsageMeter.tsx\";\n\nexport function Sidebar(\n { me, threads, currentId, onOpen, onNewChat, onLogout }: {\n me: Me;\n threads: Thread[];\n currentId: string | null;\n onOpen: (id: string) => void;\n onNewChat: () => void;\n onLogout: () => void;\n },\n) {\n return (\n

\n {/* Brand + new chat */}\n

\n ✦\n

\n Claude Managed Agent\n

\n \n + New chat\n \n

\n\n {/* Threads */}\n

\n {threads.length === 0\n ? (\n

\n No conversations yet.\n

\n )\n : threads.map((t) => (\n onOpen(t.id)}\n class={`block w-full truncate rounded-lg px-3 py-2 text-left text-sm ${\n t.id === currentId\n ? \"bg-white font-medium text-neutral-900 shadow-sm\"\n : \"text-neutral-700 hover:bg-neutral-100\"\n }`}\n >\n {t.title || \"New chat\"}\n \n ))}\n

\n\n {/* Usage + demo context */}\n

\n \n

\n This is a demo —{\" \"}\n \n remix this val\n {\" \"}\n and add your own ANTHROPIC_API_KEY to keep chatting.\n

\n\n {/* Account */}\n

\n @\n {me.username}\n

\n \n Log out\n \n

\n\n \n View source\n \n

\n );\n}\n",[],[173,261,271],"07796012-5e9d-11f1-889f-1607ee4eb77e","LoginScreen.tsx","07796116-5e9d-11f1-889f-1607ee4eb77e",59,["D",1780416395336],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { SOURCE_VAL_URL } from \"./api.ts\";\n\n// Centered logged-out screen. The button links to the backend's /auth/login route.\nexport function LoginScreen() {\n return (\n

\n ✦\n

\n Claude Managed Agent\n

\n Chat with an autonomous Claude agent that can run tools, write code,\n and produce files.\n

\n \n Log in with Val Town\n \n \n View the source on Val Town\n \n

\n );\n}\n",[],[173,261,279],"fc6c89d8-5e9c-11f1-8d56-1607ee4eb77e","Composer.tsx","fc6c8ab4-5e9c-11f1-8d56-1607ee4eb77e",55,["D",1780416376801],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from \"https://esm.sh/react@18.2.0\";\n\n// Sticky message composer. Disabled (with a reason) when busy or limit-reached.\nexport function Composer(\n { onSend, busy, disabled, disabledReason }: {\n onSend: (text: string) => void;\n busy: boolean;\n disabled?: boolean;\n disabledReason?: string;\n },\n) {\n const [text, setText] = useState(\"\");\n\n function submit() {\n const t = text.trim();\n if (!t || busy || disabled) return;\n onSend(t);\n setText(\"\");\n }\n\n return (\n

\n {disabled && disabledReason && (\n

\n {disabledReason}\n

\n )}\n

\n setText((e.target as HTMLTextAreaElement).value)}\n onKeyDown={(e) => {\n if (e.key === \"Enter\" && !e.shiftKey) {\n e.preventDefault();\n submit();\n }\n }}\n />\n \n {busy ? \"…\" : \"Send\"}\n \n

\n Press Enter to send · Shift+Enter for a new line\n

\n );\n}\n",[],[173,261,287],"017905c8-5e9d-11f1-8414-1607ee4eb77e","Chat.tsx","f078aca6-5e97-11f1-bd0e-1607ee4eb77e",57,["D",1780416385258],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport type { Message } from \"./api.ts\";\nimport { MessageList } from \"./messages/MessageList.tsx\";\nimport { Composer } from \"./Composer.tsx\";\n\n// The conversation pane: scrolling message list + sticky composer.\nexport function Chat(\n { messages, onSend, busy, sendDisabled, sendDisabledReason }: {\n messages: Message[];\n onSend: (text: string) => void;\n busy: boolean;\n sendDisabled?: boolean;\n sendDisabledReason?: string;\n },\n) {\n return (\n

\n {messages.length === 0\n ? (\n

\n ✦\n

\n Start the conversation\n

\n Send a message and your Claude Managed Agent will get to work.\n

\n )\n : }\n \n

\n );\n}\n",[],[173,261,295],"1f20bc6a-5e9d-11f1-854e-1607ee4eb77e","App.tsx","019e88ee-890a-72f8-a279-04f780b271a6",62,["D",1780416434997],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useEffect, useRef, useState } from \"https://esm.sh/react@18.2.0\";\nimport {\n api,\n LimitError,\n type Me,\n type Message,\n type Thread,\n UnauthorizedError,\n} from \"./api.ts\";\nimport { Chat } from \"./Chat.tsx\";\nimport { Sidebar } from \"./Sidebar.tsx\";\nimport { LoginScreen } from \"./LoginScreen.tsx\";\n\ntype Auth = \"loading\" | \"out\" | Me;\n\nexport function App() {\n const [auth, setAuth] = useState(\"loading\");\n const [threads, setThreads] = useState([]);\n const [currentId, setCurrentId] = useState(null);\n const [messages, setMessages] = useState([]);\n const [busy, setBusy] = useState(false);\n const [limitMsg, setLimitMsg] = useState(null);\n const cursorRef = useRef(0);\n\n // Any 401 anywhere drops us back to the login screen.\n function handleErr(e: unknown) {\n if (e instanceof UnauthorizedError) setAuth(\"out\");\n }\n\n async function refreshMe() {\n try {\n setAuth(await api.me());\n } catch (e) {\n if (e instanceof UnauthorizedError) setAuth(\"out\");\n }\n }\n\n async function refreshThreads() {\n try {\n setThreads(await api.listThreads());\n } catch (e) {\n handleErr(e);\n }\n }\n\n // On load: check auth, then load threads if logged in.\n useEffect(() => {\n (async () => {\n try {\n const me = await api.me();\n setAuth(me);\n await refreshThreads();\n } catch (e) {\n if (e instanceof UnauthorizedError) setAuth(\"out\");\n }\n })();\n }, []);\n\n function openThread(id: string) {\n setCurrentId(id);\n setMessages([]);\n setLimitMsg(null);\n cursorRef.current = 0;\n }\n\n async function newChat() {\n try {\n const t = await api.createThread();\n await refreshThreads();\n openThread(t.id);\n } catch (e) {\n handleErr(e);\n }\n }\n\n async function logout() {\n await api.logout();\n globalThis.location.reload();\n }\n\n // Poll the open thread for new messages (~1s), deduping optimistic id<0 rows.\n useEffect(() => {\n if (!currentId || typeof auth === \"string\") return;\n let alive = true;\n async function poll() {\n try {\n const rows = await api.getMessages(currentId!, cursorRef.current);\n if (!alive || rows.length === 0) return;\n cursorRef.current = rows[rows.length - 1].id;\n setMessages((prev) => [...prev.filter((m) => m.id >= 0), ...rows]);\n } catch (e) {\n handleErr(e);\n }\n }\n poll();\n const iv = setInterval(poll, 1000);\n return () => {\n alive = false;\n clearInterval(iv);\n };\n }, [currentId, auth]);\n\n async function send(text: string) {\n if (!currentId) return;\n const optimistic: Message = {\n id: -1,\n thread_id: currentId,\n role: \"user\",\n type: \"text\",\n content: text,\n created_at: new Date().toISOString(),\n };\n setMessages((prev) => [...prev, optimistic]);\n setBusy(true);\n try {\n await api.send(currentId, text);\n refreshMe();\n } catch (e) {\n if (e instanceof LimitError) {\n setLimitMsg(e.message);\n setMessages((prev) => prev.filter((m) => m.id >= 0));\n refreshMe();\n } else {\n handleErr(e);\n }\n } finally {\n setBusy(false);\n refreshThreads();\n }\n }\n\n if (auth === \"loading\") {\n return (\n

\n Loading…\n

\n );\n }\n if (auth === \"out\") return ;\n\n const me = auth;\n const atLimit = me.remaining <= 0;\n\n return (\n

\n \n

\n {currentId\n ? (\n \n )\n : (\n

\n ✦\n

\n Welcome, {me.username}\n

\n Select a conversation, or start a new chat to talk to your\n Claude Managed Agent.\n

\n \n + New chat\n \n

\n )}\n

\n );\n}\n",[],[173,261,303],"f0f4f93c-5e9c-11f1-b355-1607ee4eb77e","ToolMessage.tsx","f0f4fa18-5e9c-11f1-b355-1607ee4eb77e","81d77aa6-31d1-47ae-9d3c-2fb6ebc65671",51,["D",1780416357558],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from \"https://esm.sh/react@18.2.0\";\nimport type { Message } from \"../api.ts\";\n\n// Pretty-print whatever the content parses to; fall back to the raw string.\nfunction pretty(content: string): string {\n try {\n return JSON.stringify(JSON.parse(content), null, 2);\n } catch {\n return content;\n }\n}\n\n// Compact click-to-expand chip for tool_use / tool_result rows.\n// tool_use → 🔧 ▸ (parsed { name, input })\n// tool_result → 📤 result ▸ (parsed { output, is_error? }) — red when is_error.\nexport function ToolMessage({ m }: { m: Message }) {\n const [open, setOpen] = useState(false);\n\n let label: string;\n let icon: string;\n let isError = false;\n\n if (m.type === \"tool_use\") {\n icon = \"🔧\";\n let name = \"tool\";\n try {\n const parsed = JSON.parse(m.content) as { name?: string };\n if (parsed?.name) name = parsed.name;\n } catch { /* keep default */ }\n label = name;\n } else {\n // tool_result\n icon = \"📤\";\n label = \"result\";\n try {\n const parsed = JSON.parse(m.content) as { is_error?: boolean };\n isError = !!parsed?.is_error;\n } catch { /* keep default */ }\n }\n\n return (\n

\n setOpen((v) => !v)}\n class={`inline-flex items-center gap-1.5 rounded-full border px-3 py-1 text-xs font-medium ${\n isError\n ? \"border-red-200 bg-red-50 text-red-700 hover:bg-red-100\"\n : \"border-neutral-200 bg-neutral-100 text-neutral-700 hover:bg-neutral-200\"\n }`}\n >\n {icon}\n {label}\n \n ▸\n \n \n {open && (\n

\n            {pretty(m.content)}\n

\n )}\n

\n );\n}\n",[],[173,261,319,311],"messages","e4f11ba2-5e9c-11f1-9b38-1607ee4eb77e","TextMessage.tsx","e4f11c60-5e9c-11f1-9b38-1607ee4eb77e",45,["D",1780416337399],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport type { Message } from \"../api.ts\";\n\n// Plain text. User messages are right-aligned blue bubbles; assistant/system\n// text is a left-aligned neutral bubble. Whitespace is preserved (no markdown lib).\nexport function TextMessage({ m }: { m: Message }) {\n const isUser = m.role === \"user\";\n return (\n

\n \n {m.content}\n

\n \n );\n}\n",[],[173,261,319,321],"f7a23970-5e9c-11f1-9ec8-1607ee4eb77e","MessageList.tsx","f7a23a06-5e9c-11f1-9ec8-1607ee4eb77e",54,["D",1780416368758],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useEffect, useRef } from \"https://esm.sh/react@18.2.0\";\nimport type { Message } from \"../api.ts\";\nimport { TextMessage } from \"./TextMessage.tsx\";\nimport { ToolMessage } from \"./ToolMessage.tsx\";\nimport { ImageMessage } from \"./ImageMessage.tsx\";\nimport { FileMessage } from \"./FileMessage.tsx\";\n\n// Render one message row based on its type per the locked contract.\nfunction MessageRow({ m }: { m: Message }) {\n switch (m.type) {\n case \"tool_use\":\n case \"tool_result\":\n return ;\n case \"image\":\n return ;\n case \"file\":\n return ;\n case \"error\":\n return (\n

\n {m.content}\n

\n );\n case \"text\":\n default:\n return ;\n }\n}\n\nexport function MessageList({ messages }: { messages: Message[] }) {\n const endRef = useRef(null);\n\n useEffect(() => {\n endRef.current?.scrollIntoView({ behavior: \"smooth\" });\n }, [messages]);\n\n return (\n

\n {messages.map((m) => )}\n

\n );\n}\n",[],[173,261,319,329],"e797fc04-5e9c-11f1-84f0-1607ee4eb77e","ImageMessage.tsx","e797fcc2-5e9c-11f1-84f0-1607ee4eb77e",46,["D",1780416341853],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport type { FilePayload, Message } from \"../api.ts\";\n\n// An image the agent produced in its sandbox, rendered inline.\nexport function ImageMessage({ m }: { m: Message }) {\n let f: FilePayload;\n try {\n f = JSON.parse(m.content) as FilePayload;\n } catch {\n return

[unreadable image]

;\n }\n const url = `/api/files/${f.id}`;\n return (\n

\n \n {f.name}

\n \n

{f.name}

\n );\n}\n",[],[173,261,319,337],"eb8f3ed0-5e9c-11f1-8834-1607ee4eb77e","FileMessage.tsx","eb8f3f84-5e9c-11f1-8834-1607ee4eb77e",49,["D",1780416348504],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport type { FilePayload, Message } from \"../api.ts\";\n\n// A non-image file the agent produced — rendered as a download link.\nexport function FileMessage({ m }: { m: Message }) {\n let f: FilePayload;\n try {\n f = JSON.parse(m.content) as FilePayload;\n } catch {\n return

[unreadable file]

;\n }\n const url = `/api/files/${f.id}`;\n return (\n

\n \n ⬇\n {f.name}\n \n

\n );\n}\n",[],[173,261,319,345],"e4f1275a-5e9c-11f1-9b38-1607ee4eb77e",["D",1780416337399],[202,203,204,205,206],[173,261,319],"f94de068-5e96-11f1-a008-1607ee4eb77e",["D",1780413794401],[201,207,208,209,210,211,212,213],[173,261],["D",1780413794401],[200,214,215,216],[173],"67bf24d4-5e9d-11f1-b64f-1607ee4eb77e","files.ts","2d47e1f0-5e99-11f1-a841-1607ee4eb77e",67,["D",1780416556828],"import Anthropic from \"npm:@anthropic-ai/sdk@0.100.1\";\nimport { blob } from \"https://esm.town/v/std/blob\";\nimport { addMessage, getMessages } from \"./db.ts\";\n\n// Files the agent writes to /mnt/session/outputs/ are auto-captured by the\n// Managed Agents Files API, scoped to the session: `files.list({ scope_id })`\n// enumerates them ({ id, filename, mime_type, downloadable }) and\n// `files.download(id)` returns the bytes. (Files written elsewhere — e.g. /tmp —\n// are NOT surfaced; the agent is told to use /mnt/session/outputs/ in its system\n// prompt.) Val Town has no filesystem, so we copy each new file into std/blob.\nconst client = new Anthropic();\nconst BETA = \"managed-agents-2026-04-01\";\n\n// Content payload stored on image/file message rows. The frontend reads `id` to\n// build the /api/files/:id URL, plus `name`/`mime` for display + downloads.\nexport interface FilePayload {\n id: string;\n name: string;\n mime: string;\n}\n\nconst blobKey = (id: string) => `file_${id}`;\nconst sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));\n\n// Read the bytes we stashed in blob storage for a served file.\nexport const getFileBytes = (id: string) => blob.get(blobKey(id));\n\n// Ids already surfaced as image/file rows for this thread, so re-syncs (or a\n// follow-up turn in the same session) never duplicate a row.\nasync function surfacedIds(threadId: string): Promise> {\n const rows = await getMessages(threadId, 0);\n return new Set(\n rows\n .filter((m: any) => m.type === \"image\" || m.type === \"file\")\n .map((m: any) => {\n try {\n return (JSON.parse(m.content) as FilePayload).id;\n } catch {\n return \"\";\n }\n })\n .filter(Boolean),\n );\n}\n\n// After a turn, mirror any NEW session files into blob storage and write an\n// image/file row for each. There's a brief indexing lag (~1-5s) between idle and\n// outputs appearing, so poll a few times. Best-effort: never throws (runTurn\n// keeps the try/catch too) — a failed file sync must not drop the turn.\nexport async function syncSessionFiles(threadId: string, sessionId: string) {\n const seen = await surfacedIds(threadId);\n\n let fresh: any[] = [];\n for (let i = 0; i < 4; i++) {\n const res = await client.beta.files.list(\n { scope_id: sessionId, betas: [BETA] } as any,\n );\n fresh = (res.data as any[]).filter((f) =>\n f.downloadable !== false && !seen.has(f.id)\n );\n if (fresh.length) break;\n if (i < 3) await sleep(1500);\n }\n\n for (const f of fresh) {\n try {\n const dl = await client.beta.files.download(f.id, { betas: [BETA] } as any);\n const bytes = new Uint8Array(await (dl as any).arrayBuffer());\n if (!bytes.length) continue; // skip empties; a later sync can retry\n await blob.set(blobKey(f.id), bytes);\n const mime: string = f.mime_type ?? \"application/octet-stream\";\n const payload: FilePayload = { id: f.id, name: f.filename ?? f.id, mime };\n const type = mime.startsWith(\"image/\") ? \"image\" : \"file\";\n await addMessage(threadId, \"assistant\", type, JSON.stringify(payload));\n seen.add(f.id);\n } catch {\n // one bad file shouldn't block the rest, or the turn\n }\n }\n}\n",[],[179,364],"e7c2fb98-5e9c-11f1-94a9-1607ee4eb77e","db.ts","31cd7692-5e97-11f1-91e4-1607ee4eb77e",47,["D",1780416342125],3,"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// A thread = one Managed Agent session. Messages stream into SQLite; the\n// frontend polls for new rows. `config` caches the create-once agent + env ids.\nawait sqlite.batch([\n `CREATE TABLE IF NOT EXISTS config (key TEXT PRIMARY KEY, value TEXT)`,\n `CREATE TABLE IF NOT EXISTS threads (\n id TEXT PRIMARY KEY, session_id TEXT, title TEXT,\n last_cursor TEXT, created_at TEXT DEFAULT CURRENT_TIMESTAMP)`,\n `CREATE TABLE IF NOT EXISTS messages (\n id INTEGER PRIMARY KEY AUTOINCREMENT, thread_id TEXT,\n role TEXT, type TEXT, content TEXT, created_at TEXT DEFAULT CURRENT_TIMESTAMP)`,\n]);\n\n// Per-user ownership of threads. Idempotent: ignore \"duplicate column\" on re-run.\ntry {\n await sqlite.execute(`ALTER TABLE threads ADD COLUMN user_id TEXT`);\n} catch (_e) { /* column already exists */ }\n\nconst one = async (sql: string, args: unknown[] = []) =>\n (await sqlite.execute({ sql, args })).rows[0];\nconst all = async (sql: string, args: unknown[] = []) =>\n (await sqlite.execute({ sql, args })).rows;\n\nexport const getConfig = async (key: string) =>\n (await one(`SELECT value FROM config WHERE key = ?`, [key]))?.value as string | undefined;\nexport const setConfig = (key: string, value: string) =>\n sqlite.execute({ sql: `INSERT OR REPLACE INTO config VALUES (?, ?)`, args: [key, value] });\n\nexport const listThreads = () => all(`SELECT * FROM threads ORDER BY created_at DESC`);\nexport const listThreadsForUser = (userId: string) =>\n all(`SELECT * FROM threads WHERE user_id = ? ORDER BY created_at DESC`, [userId]);\nexport const getThread = (id: string) => one(`SELECT * FROM threads WHERE id = ?`, [id]);\nexport const createThread = (id: string, title: string, userId: string) =>\n sqlite.execute({\n sql: `INSERT INTO threads (id, title, user_id) VALUES (?, ?, ?)`,\n args: [id, title, userId],\n });\n\n// Count this user's user-role messages across all their threads (the rate-limit basis).\nexport const countUserMessages = async (userId: string) =>\n Number(\n (await one(\n `SELECT COUNT(*) AS n FROM messages m\n JOIN threads t ON m.thread_id = t.id\n WHERE t.user_id = ? AND m.role = 'user'`,\n [userId],\n ))?.n ?? 0,\n );\nexport const setTitle = (id: string, title: string) =>\n sqlite.execute({ sql: `UPDATE threads SET title = ? WHERE id = ?`, args: [title, id] });\nexport const setSession = (id: string, sessionId: string) =>\n sqlite.execute({ sql: `UPDATE threads SET session_id = ? WHERE id = ?`, args: [sessionId, id] });\nexport const setCursor = (id: string, cursor: string) =>\n sqlite.execute({ sql: `UPDATE threads SET last_cursor = ? WHERE id = ?`, args: [cursor, id] });\n\nexport const addMessage = (threadId: string, role: string, type: string, content: string) =>\n sqlite.execute({\n sql: `INSERT INTO messages (thread_id, role, type, content) VALUES (?, ?, ?, ?)`,\n args: [threadId, role, type, content],\n });\nexport const getMessages = (threadId: string, after: number) =>\n all(`SELECT * FROM messages WHERE thread_id = ? AND id > ? ORDER BY id`, [threadId, after]);\n\n// Look up the { id, name, mime } payload for a surfaced file row by its file id,\n// so the /api/files/:id route can serve the right Content-Type + filename.\nexport const getFilePayload = async (fileId: string) => {\n const row = await one(\n `SELECT content FROM messages WHERE type IN ('image', 'file')\n AND content LIKE ? ORDER BY id DESC LIMIT 1`,\n [`%${fileId}%`],\n );\n return row ? JSON.parse(row.content as string) as { id: string; name: string; mime: string } : null;\n};\n",[],[179,372],"dfa1bae4-5e9c-11f1-ae30-1607ee4eb77e","auth.ts","dfa1bb84-5e9c-11f1-ae30-1607ee4eb77e",41,["D",1780416328492],"import { getOAuthUserData } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport type { Context } from \"npm:hono\";\nimport * as db from \"./db.ts\";\n\n// Per-user cap on user-role messages, counted globally across all the user's threads.\nexport const MESSAGE_LIMIT = 50;\n\nexport type User = { id: string; username: string };\n\n// Resolve the current Val Town user from the request's OAuth session, or null\n// if unauthenticated. We key threads/usage on a stable id (username).\nexport async function requireUser(c: Context): Promise {\n const session = await getOAuthUserData(c.req.raw);\n const u = session?.user;\n if (!u) return null;\n const username = u.username as string;\n return { id: String(u.id ?? username), username };\n}\n\n// How many user-role messages this user has sent (across all their threads).\nexport const countUsage = (userId: string) => db.countUserMessages(userId);\n",[],[179,381],"a2e78f6e-5ea3-11f1-9571-1607ee4eb77e","agent.ts","df88de02-5e97-11f1-a3de-1607ee4eb77e",73,["D",1780419233081],7,"import Anthropic from \"npm:@anthropic-ai/sdk@0.100.1\";\nimport {\n addMessage,\n getConfig,\n setConfig,\n setCursor,\n setSession,\n} from \"./db.ts\";\nimport { syncSessionFiles } from \"./files.ts\";\n\nconst client = new Anthropic();\nconst MODEL = \"claude-sonnet-4-6\"; // cheap + fast for a demo; swap to claude-opus-4-8 for the strongest\nconst SYSTEM =\n \"You are a helpful coding assistant working in a sandbox. Use your tools (bash, file editing, web) to actually do the work, then briefly summarize what you did. \" +\n \"When you produce a file the user should see or download (an image, chart, document, dataset, etc.), save it under /mnt/session/outputs/ — only files written there are surfaced back to the user.\";\n\n// Flatten an agent.tool_result's content blocks into a single string (the UI\n// shows this verbatim). Text blocks join with newlines; anything else is JSON.\nfunction toolResultOutput(content: unknown): string {\n if (typeof content === \"string\") return content;\n if (Array.isArray(content)) {\n return content\n .map((b: any) =>\n b?.type === \"text\" && typeof b.text === \"string\" ? b.text : JSON.stringify(b)\n )\n .join(\"\\n\");\n }\n return content == null ? \"\" : JSON.stringify(content);\n}\n\n// Create the agent + environment ONCE and cache their ids. Agents are versioned\n// configs and sessions pin to a version, so recreating them per request is wrong.\nexport async function ensureConfig() {\n const agentId = await getConfig(\"agent_id\");\n const envId = await getConfig(\"environment_id\");\n if (agentId && envId) return { agentId, envId };\n\n const agent = await client.beta.agents.create({\n name: \"Managed Agent Demo\",\n model: MODEL,\n system: SYSTEM,\n // Built-in toolset runs in Anthropic's sandbox; always_allow = run without prompting.\n tools: [{\n type: \"agent_toolset_20260401\",\n default_config: { permission_policy: { type: \"always_allow\" } },\n }],\n });\n const environment = await client.beta.environments.create({\n name: \"demo-env\",\n config: { type: \"cloud\", networking: { type: \"unrestricted\" } },\n });\n await setConfig(\"agent_id\", agent.id);\n await setConfig(\"environment_id\", environment.id);\n return { agentId: agent.id, envId: environment.id };\n}\n\n// Each thread gets one session, created lazily and reused for follow-up turns.\nexport async function ensureSession(thread: any) {\n if (thread.session_id) return thread.session_id as string;\n const { agentId, envId } = await ensureConfig();\n const session = await client.beta.sessions.create({\n agent: agentId,\n environment_id: envId,\n title: thread.title,\n });\n await setSession(thread.id, session.id);\n return session.id;\n}\n\n// One turn: open the stream, send the message, then persist each event to SQLite\n// until the session goes idle. The frontend polls those rows as they land.\nexport async function runTurn(\n threadId: string,\n sessionId: string,\n text: string,\n) {\n const stream = await client.beta.sessions.events.stream(sessionId);\n await client.beta.sessions.events.send(sessionId, {\n events: [{ type: \"user.message\", content: [{ type: \"text\", text }] }],\n });\n for await (const event of stream) {\n const e = event as any;\n if (e.id) await setCursor(threadId, e.id);\n if (event.type === \"agent.message\") {\n for (const block of e.content) {\n if (block.type === \"text\") {\n await addMessage(threadId, \"assistant\", \"text\", block.text);\n }\n }\n } else if (event.type === \"agent.tool_use\") {\n await addMessage(\n threadId,\n \"assistant\",\n \"tool_use\",\n JSON.stringify({ name: e.name, input: e.input }),\n );\n } else if (event.type === \"agent.tool_result\") {\n // e.content is an array of blocks ([{type:\"text\",text},...]); e.is_error\n // flags a failed call. Store {output:string, is_error} per the row contract.\n await addMessage(\n threadId,\n \"assistant\",\n \"tool_result\",\n JSON.stringify({\n output: toolResultOutput(e.content),\n is_error: !!e.is_error,\n }),\n );\n } else if (event.type === \"session.error\") {\n await addMessage(\n threadId,\n \"system\",\n \"error\",\n e.error?.message ?? \"session error\",\n );\n break;\n } else if (event.type === \"session.status_idle\") {\n break;\n }\n }\n // Surface any files the agent created in its sandbox this turn (images render\n // inline; other downloadables become links). Best-effort: never fail the turn.\n try {\n await syncSessionFiles(threadId, sessionId);\n } catch (_e) { /* ignore */ }\n}\n",[],[179,389],["D",1780413889356],[195,196,197,198],[179],["D",1780413794401],["D",1789495880338],{"_102":101,"_110":106},{"_102":101,"_103":104,"_105":106,"_18":-5,"_107":108,"_109":24},{"_13":88,"_32":89,"_42":41,"_90":43,"_91":92,"_93":94,"_95":49,"_96":97,"_98":64,"_99":44,"_100":101},"ctx",{"_81":-5,"_132":438,"_439":440,"_441":442,"_443":26,"_444":26,"_445":26,"_446":24,"_447":-5,"_448":-7,"_449":-7,"_450":154,"_451":26,"_452":26,"_453":-5,"_454":26,"_455":26,"_456":26,"_457":-5},"ENV",{"_409":410,"_411":412,"_413":89,"_414":415,"_416":417,"_418":419,"_420":421,"_422":423,"_424":425,"_426":427,"_428":429,"_430":431,"_432":433,"_434":435,"_436":437},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v74