\n \n \n \n\n",[],[170,234],"96a632f2-5ea6-11f1-9620-1607ee4eb77e",["D",1780420500980],[],[170,33],"dd36236c-5e9c-11f1-8f62-1607ee4eb77e","api.ts","e8672b46-5e97-11f1-a823-1607ee4eb77e","019e88ee-890a-72f8-a279-0d2bca618dcd",40,["D",1780416324362],"export interface Thread {\n id: string;\n session_id: string | null;\n title: string;\n last_cursor: string | null;\n created_at: string;\n}\n\nexport interface Message {\n id: number;\n thread_id: string;\n role: \"user\" | \"assistant\" | \"system\";\n // content varies by type:\n // text → plain text\n // tool_use → JSON string { name, input }\n // tool_result → JSON string { output, is_error? }\n // image → JSON string { id, name, mime } (served at /api/files/)\n // file → JSON string { id, name, mime } (download at /api/files/)\n // error → plain text (rendered red)\n type: \"text\" | \"tool_use\" | \"tool_result\" | \"error\" | \"image\" | \"file\";\n content: string;\n created_at: string;\n}\n\nexport interface FilePayload {\n id: string;\n name: string;\n mime: string;\n}\n\nexport interface Me {\n username: string;\n used: number;\n limit: number;\n remaining: number;\n}\n\n// Thrown when an /api/* call returns 401 — the caller should show the login screen.\nexport class UnauthorizedError extends Error {\n constructor() {\n super(\"unauthorized\");\n this.name = \"UnauthorizedError\";\n }\n}\n\n// Thrown when a send hits the demo limit (HTTP 429).\nexport class LimitError extends Error {\n remaining: number;\n constructor(message: string, remaining: number) {\n super(message);\n this.name = \"LimitError\";\n this.remaining = remaining;\n }\n}\n\nasync function json(res: Response): Promise {\n if (res.status === 401) throw new UnauthorizedError();\n if (!res.ok) throw new Error(`${res.status} ${res.statusText}`);\n return res.json() as Promise;\n}\n\nexport const api = {\n // Returns the logged-in user + usage. Throws UnauthorizedError when not logged in.\n me(): Promise {\n return fetch(\"/api/me\").then((r) => json(r));\n },\n listThreads(): Promise {\n return fetch(\"/api/threads\").then((r) => json(r));\n },\n createThread(): Promise {\n return fetch(\"/api/threads\", { method: \"POST\" }).then((r) => json(r));\n },\n getMessages(threadId: string, after: number): Promise {\n return fetch(`/api/threads/${threadId}/messages?after=${after}`).then((r) =>\n json(r)\n );\n },\n // Stays open the whole turn. Resolves { ok: true }; throws LimitError on HTTP 429.\n async send(threadId: string, text: string): Promise<{ ok: true }> {\n const res = await fetch(`/api/threads/${threadId}/messages`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ text }),\n });\n if (res.status === 401) throw new UnauthorizedError();\n if (res.status === 429) {\n const body = await res.json().catch(() => ({})) as {\n error?: string;\n remaining?: number;\n };\n throw new LimitError(\n body.error ?? \"You've reached the demo message limit.\",\n body.remaining ?? 0,\n );\n }\n if (!res.ok) throw new Error(`${res.status} ${res.statusText}`);\n return res.json() as Promise<{ ok: true }>;\n },\n async logout(): Promise {\n await fetch(\"/auth/logout\", { method: \"POST\" }).catch(() => {});\n },\n};\n\nexport const SOURCE_VAL_URL = \"https://www.val.town/x/templates/claude-managed-agents-ui\";\n",[],[170,255,247],"components","09d95c4a-5e9d-11f1-8bcb-1607ee4eb77e","UsageMeter.tsx","09d95d8a-5e9d-11f1-8bcb-1607ee4eb77e",60,["D",1780416399311],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport type { Me } from \"./api.ts\";\n\n// A small \"used / limit messages\" bar. Turns red once the limit is hit.\nexport function UsageMeter({ me }: { me: Me }) {\n const limit = Math.max(me.limit, 1);\n const pct = Math.min(100, Math.round((me.used / limit) * 100));\n const atLimit = me.remaining <= 0;\n return (\n

\n Demo usage\n \n {me.used} / {me.limit} messages\n \n

\n \n

\n );\n}\n",[],[170,255,257],"12679034-5e9d-11f1-8d56-1607ee4eb77e","Sidebar.tsx","126790de-5e9d-11f1-8d56-1607ee4eb77e",61,["D",1780416413672],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { type Me, SOURCE_VAL_URL, type Thread } from \"./api.ts\";\nimport { UsageMeter } from \"./UsageMeter.tsx\";\n\nexport function Sidebar(\n { me, threads, currentId, onOpen, onNewChat, onLogout }: {\n me: Me;\n threads: Thread[];\n currentId: string | null;\n onOpen: (id: string) => void;\n onNewChat: () => void;\n onLogout: () => void;\n },\n) {\n return (\n

\n {/* Brand + new chat */}\n

\n ✦\n

\n Claude Managed Agent\n

\n \n + New chat\n \n

\n\n {/* Threads */}\n

\n {threads.length === 0\n ? (\n

\n No conversations yet.\n

\n )\n : threads.map((t) => (\n onOpen(t.id)}\n class={`block w-full truncate rounded-lg px-3 py-2 text-left text-sm ${\n t.id === currentId\n ? \"bg-white font-medium text-neutral-900 shadow-sm\"\n : \"text-neutral-700 hover:bg-neutral-100\"\n }`}\n >\n {t.title || \"New chat\"}\n \n ))}\n

\n\n {/* Usage + demo context */}\n

\n \n

\n This is a demo —{\" \"}\n \n remix this val\n {\" \"}\n and add your own ANTHROPIC_API_KEY to keep chatting.\n

\n\n {/* Account */}\n

\n @\n {me.username}\n

\n \n Log out\n \n

\n\n \n View source\n \n

\n );\n}\n",[],[170,255,265],"911c7314-5ea6-11f1-9b86-1607ee4eb77e","Logo.tsx","911c73f0-5ea6-11f1-9b86-1607ee4eb77e",77,["D",1780420491720],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\n\n// Claude-inspired starburst mark. fill=currentColor, so callers set the color\n// with text-* (e.g. text-white on a coral tile). Mirrors /frontend/favicon.svg.\nexport function Logo({ className = \"h-6 w-6\" }: { className?: string }) {\n return (\n \n );\n}\n",[],[170,255,273],"07796012-5e9d-11f1-889f-1607ee4eb77e","LoginScreen.tsx","07796116-5e9d-11f1-889f-1607ee4eb77e",59,["D",1780416395336],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { SOURCE_VAL_URL } from \"./api.ts\";\n\n// Centered logged-out screen. The button links to the backend's /auth/login route.\nexport function LoginScreen() {\n return (\n

\n ✦\n

\n Claude Managed Agent\n

\n Chat with an autonomous Claude agent that can run tools, write code,\n and produce files.\n

\n \n Log in with Val Town\n \n \n View the source on Val Town\n \n

\n );\n}\n",[],[170,255,281],"fc6c89d8-5e9c-11f1-8d56-1607ee4eb77e","Composer.tsx","fc6c8ab4-5e9c-11f1-8d56-1607ee4eb77e",55,["D",1780416376801],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from \"https://esm.sh/react@18.2.0\";\n\n// Sticky message composer. Disabled (with a reason) when busy or limit-reached.\nexport function Composer(\n { onSend, busy, disabled, disabledReason }: {\n onSend: (text: string) => void;\n busy: boolean;\n disabled?: boolean;\n disabledReason?: string;\n },\n) {\n const [text, setText] = useState(\"\");\n\n function submit() {\n const t = text.trim();\n if (!t || busy || disabled) return;\n onSend(t);\n setText(\"\");\n }\n\n return (\n

\n {disabled && disabledReason && (\n

\n {disabledReason}\n

\n )}\n

\n setText((e.target as HTMLTextAreaElement).value)}\n onKeyDown={(e) => {\n if (e.key === \"Enter\" && !e.shiftKey) {\n e.preventDefault();\n submit();\n }\n }}\n />\n \n {busy ? \"…\" : \"Send\"}\n \n

\n Press Enter to send · Shift+Enter for a new line\n

\n );\n}\n",[],[170,255,289],"017905c8-5e9d-11f1-8414-1607ee4eb77e","Chat.tsx","f078aca6-5e97-11f1-bd0e-1607ee4eb77e",57,["D",1780416385258],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport type { Message } from \"./api.ts\";\nimport { MessageList } from \"./messages/MessageList.tsx\";\nimport { Composer } from \"./Composer.tsx\";\n\n// The conversation pane: scrolling message list + sticky composer.\nexport function Chat(\n { messages, onSend, busy, sendDisabled, sendDisabledReason }: {\n messages: Message[];\n onSend: (text: string) => void;\n busy: boolean;\n sendDisabled?: boolean;\n sendDisabledReason?: string;\n },\n) {\n return (\n

\n {messages.length === 0\n ? (\n

\n ✦\n

\n Start the conversation\n

\n Send a message and your Claude Managed Agent will get to work.\n

\n )\n : }\n \n

\n );\n}\n",[],[170,255,297],"1f20bc6a-5e9d-11f1-854e-1607ee4eb77e","App.tsx","019e88ee-890a-72f8-a279-04f780b271a6",62,["D",1780416434997],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useEffect, useRef, useState } from \"https://esm.sh/react@18.2.0\";\nimport {\n api,\n LimitError,\n type Me,\n type Message,\n type Thread,\n UnauthorizedError,\n} from \"./api.ts\";\nimport { Chat } from \"./Chat.tsx\";\nimport { Sidebar } from \"./Sidebar.tsx\";\nimport { LoginScreen } from \"./LoginScreen.tsx\";\n\ntype Auth = \"loading\" | \"out\" | Me;\n\nexport function App() {\n const [auth, setAuth] = useState(\"loading\");\n const [threads, setThreads] = useState([]);\n const [currentId, setCurrentId] = useState(null);\n const [messages, setMessages] = useState([]);\n const [busy, setBusy] = useState(false);\n const [limitMsg, setLimitMsg] = useState(null);\n const cursorRef = useRef(0);\n\n // Any 401 anywhere drops us back to the login screen.\n function handleErr(e: unknown) {\n if (e instanceof UnauthorizedError) setAuth(\"out\");\n }\n\n async function refreshMe() {\n try {\n setAuth(await api.me());\n } catch (e) {\n if (e instanceof UnauthorizedError) setAuth(\"out\");\n }\n }\n\n async function refreshThreads() {\n try {\n setThreads(await api.listThreads());\n } catch (e) {\n handleErr(e);\n }\n }\n\n // On load: check auth, then load threads if logged in.\n useEffect(() => {\n (async () => {\n try {\n const me = await api.me();\n setAuth(me);\n await refreshThreads();\n } catch (e) {\n if (e instanceof UnauthorizedError) setAuth(\"out\");\n }\n })();\n }, []);\n\n function openThread(id: string) {\n setCurrentId(id);\n setMessages([]);\n setLimitMsg(null);\n cursorRef.current = 0;\n }\n\n async function newChat() {\n try {\n const t = await api.createThread();\n await refreshThreads();\n openThread(t.id);\n } catch (e) {\n handleErr(e);\n }\n }\n\n async function logout() {\n await api.logout();\n globalThis.location.reload();\n }\n\n // Poll the open thread for new messages (~1s), deduping optimistic id<0 rows.\n useEffect(() => {\n if (!currentId || typeof auth === \"string\") return;\n let alive = true;\n async function poll() {\n try {\n const rows = await api.getMessages(currentId!, cursorRef.current);\n if (!alive || rows.length === 0) return;\n cursorRef.current = rows[rows.length - 1].id;\n setMessages((prev) => [...prev.filter((m) => m.id >= 0), ...rows]);\n } catch (e) {\n handleErr(e);\n }\n }\n poll();\n const iv = setInterval(poll, 1000);\n return () => {\n alive = false;\n clearInterval(iv);\n };\n }, [currentId, auth]);\n\n async function send(text: string) {\n if (!currentId) return;\n const optimistic: Message = {\n id: -1,\n thread_id: currentId,\n role: \"user\",\n type: \"text\",\n content: text,\n created_at: new Date().toISOString(),\n };\n setMessages((prev) => [...prev, optimistic]);\n setBusy(true);\n try {\n await api.send(currentId, text);\n refreshMe();\n } catch (e) {\n if (e instanceof LimitError) {\n setLimitMsg(e.message);\n setMessages((prev) => prev.filter((m) => m.id >= 0));\n refreshMe();\n } else {\n handleErr(e);\n }\n } finally {\n setBusy(false);\n refreshThreads();\n }\n }\n\n if (auth === \"loading\") {\n return (\n

\n Loading…\n

\n );\n }\n if (auth === \"out\") return ;\n\n const me = auth;\n const atLimit = me.remaining <= 0;\n\n return (\n

\n \n

\n {currentId\n ? (\n \n )\n : (\n

\n ✦\n

\n Welcome, {me.username}\n

\n Select a conversation, or start a new chat to talk to your\n Claude Managed Agent.\n

\n \n + New chat\n \n

\n )}\n

\n );\n}\n",[],[170,255,305],"f0f4f93c-5e9c-11f1-b355-1607ee4eb77e","ToolMessage.tsx","f0f4fa18-5e9c-11f1-b355-1607ee4eb77e","81d77aa6-31d1-47ae-9d3c-2fb6ebc65671",51,["D",1780416357558],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from \"https://esm.sh/react@18.2.0\";\nimport type { Message } from \"../api.ts\";\n\n// Pretty-print whatever the content parses to; fall back to the raw string.\nfunction pretty(content: string): string {\n try {\n return JSON.stringify(JSON.parse(content), null, 2);\n } catch {\n return content;\n }\n}\n\n// Compact click-to-expand chip for tool_use / tool_result rows.\n// tool_use → 🔧 ▸ (parsed { name, input })\n// tool_result → 📤 result ▸ (parsed { output, is_error? }) — red when is_error.\nexport function ToolMessage({ m }: { m: Message }) {\n const [open, setOpen] = useState(false);\n\n let label: string;\n let icon: string;\n let isError = false;\n\n if (m.type === \"tool_use\") {\n icon = \"🔧\";\n let name = \"tool\";\n try {\n const parsed = JSON.parse(m.content) as { name?: string };\n if (parsed?.name) name = parsed.name;\n } catch { /* keep default */ }\n label = name;\n } else {\n // tool_result\n icon = \"📤\";\n label = \"result\";\n try {\n const parsed = JSON.parse(m.content) as { is_error?: boolean };\n isError = !!parsed?.is_error;\n } catch { /* keep default */ }\n }\n\n return (\n

\n setOpen((v) => !v)}\n class={`inline-flex items-center gap-1.5 rounded-full border px-3 py-1 text-xs font-medium ${\n isError\n ? \"border-red-200 bg-red-50 text-red-700 hover:bg-red-100\"\n : \"border-neutral-200 bg-neutral-100 text-neutral-700 hover:bg-neutral-200\"\n }`}\n >\n {icon}\n {label}\n \n ▸\n \n \n {open && (\n

\n            {pretty(m.content)}\n

\n )}\n

\n );\n}\n",[],[170,255,321,313],"messages","e4f11ba2-5e9c-11f1-9b38-1607ee4eb77e","TextMessage.tsx","e4f11c60-5e9c-11f1-9b38-1607ee4eb77e",45,["D",1780416337399],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport type { Message } from \"../api.ts\";\n\n// Plain text. User messages are right-aligned blue bubbles; assistant/system\n// text is a left-aligned neutral bubble. Whitespace is preserved (no markdown lib).\nexport function TextMessage({ m }: { m: Message }) {\n const isUser = m.role === \"user\";\n return (\n

\n \n {m.content}\n

\n \n );\n}\n",[],[170,255,321,323],"f7a23970-5e9c-11f1-9ec8-1607ee4eb77e","MessageList.tsx","f7a23a06-5e9c-11f1-9ec8-1607ee4eb77e",54,["D",1780416368758],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useEffect, useRef } from \"https://esm.sh/react@18.2.0\";\nimport type { Message } from \"../api.ts\";\nimport { TextMessage } from \"./TextMessage.tsx\";\nimport { ToolMessage } from \"./ToolMessage.tsx\";\nimport { ImageMessage } from \"./ImageMessage.tsx\";\nimport { FileMessage } from \"./FileMessage.tsx\";\n\n// Render one message row based on its type per the locked contract.\nfunction MessageRow({ m }: { m: Message }) {\n switch (m.type) {\n case \"tool_use\":\n case \"tool_result\":\n return ;\n case \"image\":\n return ;\n case \"file\":\n return ;\n case \"error\":\n return (\n

\n {m.content}\n

\n );\n case \"text\":\n default:\n return ;\n }\n}\n\nexport function MessageList({ messages }: { messages: Message[] }) {\n const endRef = useRef(null);\n\n useEffect(() => {\n endRef.current?.scrollIntoView({ behavior: \"smooth\" });\n }, [messages]);\n\n return (\n

\n {messages.map((m) => )}\n

\n );\n}\n",[],[170,255,321,331],"e797fc04-5e9c-11f1-84f0-1607ee4eb77e","ImageMessage.tsx","e797fcc2-5e9c-11f1-84f0-1607ee4eb77e",46,["D",1780416341853],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport type { FilePayload, Message } from \"../api.ts\";\n\n// An image the agent produced in its sandbox, rendered inline.\nexport function ImageMessage({ m }: { m: Message }) {\n let f: FilePayload;\n try {\n f = JSON.parse(m.content) as FilePayload;\n } catch {\n return

[unreadable image]

;\n }\n const url = `/api/files/${f.id}`;\n return (\n

\n \n {f.name}

\n \n

{f.name}

\n );\n}\n",[],[170,255,321,339],"eb8f3ed0-5e9c-11f1-8834-1607ee4eb77e","FileMessage.tsx","eb8f3f84-5e9c-11f1-8834-1607ee4eb77e",49,["D",1780416348504],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport type { FilePayload, Message } from \"../api.ts\";\n\n// A non-image file the agent produced — rendered as a download link.\nexport function FileMessage({ m }: { m: Message }) {\n let f: FilePayload;\n try {\n f = JSON.parse(m.content) as FilePayload;\n } catch {\n return

[unreadable file]

;\n }\n const url = `/api/files/${f.id}`;\n return (\n

\n \n ⬇\n {f.name}\n \n

\n );\n}\n",[],[170,255,321,347],"e4f1275a-5e9c-11f1-9b38-1607ee4eb77e",["D",1780416337399],[200,201,202,203,204],[170,255,321],"f94de068-5e96-11f1-a008-1607ee4eb77e",["D",1780413794401],[199,205,206,207,208,209,210,211,212],[170,255],["D",1780413794401],[198,213,214,215],[170],"67bf24d4-5e9d-11f1-b64f-1607ee4eb77e","files.ts","2d47e1f0-5e99-11f1-a841-1607ee4eb77e",67,["D",1780416556828],"import Anthropic from \"npm:@anthropic-ai/sdk@0.100.1\";\nimport { blob } from \"https://esm.town/v/std/blob\";\nimport { addMessage, getMessages } from \"./db.ts\";\n\n// Files the agent writes to /mnt/session/outputs/ are auto-captured by the\n// Managed Agents Files API, scoped to the session: `files.list({ scope_id })`\n// enumerates them ({ id, filename, mime_type, downloadable }) and\n// `files.download(id)` returns the bytes. (Files written elsewhere — e.g. /tmp —\n// are NOT surfaced; the agent is told to use /mnt/session/outputs/ in its system\n// prompt.) Val Town has no filesystem, so we copy each new file into std/blob.\nconst client = new Anthropic();\nconst BETA = \"managed-agents-2026-04-01\";\n\n// Content payload stored on image/file message rows. The frontend reads `id` to\n// build the /api/files/:id URL, plus `name`/`mime` for display + downloads.\nexport interface FilePayload {\n id: string;\n name: string;\n mime: string;\n}\n\nconst blobKey = (id: string) => `file_${id}`;\nconst sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));\n\n// Read the bytes we stashed in blob storage for a served file.\nexport const getFileBytes = (id: string) => blob.get(blobKey(id));\n\n// Ids already surfaced as image/file rows for this thread, so re-syncs (or a\n// follow-up turn in the same session) never duplicate a row.\nasync function surfacedIds(threadId: string): Promise> {\n const rows = await getMessages(threadId, 0);\n return new Set(\n rows\n .filter((m: any) => m.type === \"image\" || m.type === \"file\")\n .map((m: any) => {\n try {\n return (JSON.parse(m.content) as FilePayload).id;\n } catch {\n return \"\";\n }\n })\n .filter(Boolean),\n );\n}\n\n// After a turn, mirror any NEW session files into blob storage and write an\n// image/file row for each. There's a brief indexing lag (~1-5s) between idle and\n// outputs appearing, so poll a few times. Best-effort: never throws (runTurn\n// keeps the try/catch too) — a failed file sync must not drop the turn.\nexport async function syncSessionFiles(threadId: string, sessionId: string) {\n const seen = await surfacedIds(threadId);\n\n let fresh: any[] = [];\n for (let i = 0; i < 4; i++) {\n const res = await client.beta.files.list(\n { scope_id: sessionId, betas: [BETA] } as any,\n );\n fresh = (res.data as any[]).filter((f) =>\n f.downloadable !== false && !seen.has(f.id)\n );\n if (fresh.length) break;\n if (i < 3) await sleep(1500);\n }\n\n for (const f of fresh) {\n try {\n const dl = await client.beta.files.download(f.id, { betas: [BETA] } as any);\n const bytes = new Uint8Array(await (dl as any).arrayBuffer());\n if (!bytes.length) continue; // skip empties; a later sync can retry\n await blob.set(blobKey(f.id), bytes);\n const mime: string = f.mime_type ?? \"application/octet-stream\";\n const payload: FilePayload = { id: f.id, name: f.filename ?? f.id, mime };\n const type = mime.startsWith(\"image/\") ? \"image\" : \"file\";\n await addMessage(threadId, \"assistant\", type, JSON.stringify(payload));\n seen.add(f.id);\n } catch {\n // one bad file shouldn't block the rest, or the turn\n }\n }\n}\n",[],[177,366],"e7c2fb98-5e9c-11f1-94a9-1607ee4eb77e","db.ts","31cd7692-5e97-11f1-91e4-1607ee4eb77e",47,["D",1780416342125],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\n// A thread = one Managed Agent session. Messages stream into SQLite; the\n// frontend polls for new rows. `config` caches the create-once agent + env ids.\nawait sqlite.batch([\n `CREATE TABLE IF NOT EXISTS config (key TEXT PRIMARY KEY, value TEXT)`,\n `CREATE TABLE IF NOT EXISTS threads (\n id TEXT PRIMARY KEY, session_id TEXT, title TEXT,\n last_cursor TEXT, created_at TEXT DEFAULT CURRENT_TIMESTAMP)`,\n `CREATE TABLE IF NOT EXISTS messages (\n id INTEGER PRIMARY KEY AUTOINCREMENT, thread_id TEXT,\n role TEXT, type TEXT, content TEXT, created_at TEXT DEFAULT CURRENT_TIMESTAMP)`,\n]);\n\n// Per-user ownership of threads. Idempotent: ignore \"duplicate column\" on re-run.\ntry {\n await sqlite.execute(`ALTER TABLE threads ADD COLUMN user_id TEXT`);\n} catch (_e) { /* column already exists */ }\n\nconst one = async (sql: string, args: unknown[] = []) =>\n (await sqlite.execute({ sql, args })).rows[0];\nconst all = async (sql: string, args: unknown[] = []) =>\n (await sqlite.execute({ sql, args })).rows;\n\nexport const getConfig = async (key: string) =>\n (await one(`SELECT value FROM config WHERE key = ?`, [key]))?.value as string | undefined;\nexport const setConfig = (key: string, value: string) =>\n sqlite.execute({ sql: `INSERT OR REPLACE INTO config VALUES (?, ?)`, args: [key, value] });\n\nexport const listThreads = () => all(`SELECT * FROM threads ORDER BY created_at DESC`);\nexport const listThreadsForUser = (userId: string) =>\n all(`SELECT * FROM threads WHERE user_id = ? ORDER BY created_at DESC`, [userId]);\nexport const getThread = (id: string) => one(`SELECT * FROM threads WHERE id = ?`, [id]);\nexport const createThread = (id: string, title: string, userId: string) =>\n sqlite.execute({\n sql: `INSERT INTO threads (id, title, user_id) VALUES (?, ?, ?)`,\n args: [id, title, userId],\n });\n\n// Count this user's user-role messages across all their threads (the rate-limit basis).\nexport const countUserMessages = async (userId: string) =>\n Number(\n (await one(\n `SELECT COUNT(*) AS n FROM messages m\n JOIN threads t ON m.thread_id = t.id\n WHERE t.user_id = ? AND m.role = 'user'`,\n [userId],\n ))?.n ?? 0,\n );\nexport const setTitle = (id: string, title: string) =>\n sqlite.execute({ sql: `UPDATE threads SET title = ? WHERE id = ?`, args: [title, id] });\nexport const setSession = (id: string, sessionId: string) =>\n sqlite.execute({ sql: `UPDATE threads SET session_id = ? WHERE id = ?`, args: [sessionId, id] });\nexport const setCursor = (id: string, cursor: string) =>\n sqlite.execute({ sql: `UPDATE threads SET last_cursor = ? WHERE id = ?`, args: [cursor, id] });\n\nexport const addMessage = (threadId: string, role: string, type: string, content: string) =>\n sqlite.execute({\n sql: `INSERT INTO messages (thread_id, role, type, content) VALUES (?, ?, ?, ?)`,\n args: [threadId, role, type, content],\n });\nexport const getMessages = (threadId: string, after: number) =>\n all(`SELECT * FROM messages WHERE thread_id = ? AND id > ? ORDER BY id`, [threadId, after]);\n\n// Look up the { id, name, mime } payload for a surfaced file row by its file id,\n// so the /api/files/:id route can serve the right Content-Type + filename.\nexport const getFilePayload = async (fileId: string) => {\n const row = await one(\n `SELECT content FROM messages WHERE type IN ('image', 'file')\n AND content LIKE ? ORDER BY id DESC LIMIT 1`,\n [`%${fileId}%`],\n );\n return row ? JSON.parse(row.content as string) as { id: string; name: string; mime: string } : null;\n};\n",[],[177,374],"dfa1bae4-5e9c-11f1-ae30-1607ee4eb77e","auth.ts","dfa1bb84-5e9c-11f1-ae30-1607ee4eb77e",41,["D",1780416328492],"import { getOAuthUserData } from \"https://esm.town/v/std/oauth/middleware.ts\";\nimport type { Context } from \"npm:hono\";\nimport * as db from \"./db.ts\";\n\n// Per-user cap on user-role messages, counted globally across all the user's threads.\nexport const MESSAGE_LIMIT = 50;\n\nexport type User = { id: string; username: string };\n\n// Resolve the current Val Town user from the request's OAuth session, or null\n// if unauthenticated. We key threads/usage on a stable id (username).\nexport async function requireUser(c: Context): Promise {\n const session = await getOAuthUserData(c.req.raw);\n const u = session?.user;\n if (!u) return null;\n const username = u.username as string;\n return { id: String(u.id ?? username), username };\n}\n\n// How many user-role messages this user has sent (across all their threads).\nexport const countUsage = (userId: string) => db.countUserMessages(userId);\n",[],[177,382],"a2e78f6e-5ea3-11f1-9571-1607ee4eb77e","agent.ts","df88de02-5e97-11f1-a3de-1607ee4eb77e",73,["D",1780419233081],7,"import Anthropic from \"npm:@anthropic-ai/sdk@0.100.1\";\nimport {\n addMessage,\n getConfig,\n setConfig,\n setCursor,\n setSession,\n} from \"./db.ts\";\nimport { syncSessionFiles } from \"./files.ts\";\n\nconst client = new Anthropic();\nconst MODEL = \"claude-sonnet-4-6\"; // cheap + fast for a demo; swap to claude-opus-4-8 for the strongest\nconst SYSTEM =\n \"You are a helpful coding assistant working in a sandbox. Use your tools (bash, file editing, web) to actually do the work, then briefly summarize what you did. \" +\n \"When you produce a file the user should see or download (an image, chart, document, dataset, etc.), save it under /mnt/session/outputs/ — only files written there are surfaced back to the user.\";\n\n// Flatten an agent.tool_result's content blocks into a single string (the UI\n// shows this verbatim). Text blocks join with newlines; anything else is JSON.\nfunction toolResultOutput(content: unknown): string {\n if (typeof content === \"string\") return content;\n if (Array.isArray(content)) {\n return content\n .map((b: any) =>\n b?.type === \"text\" && typeof b.text === \"string\" ? b.text : JSON.stringify(b)\n )\n .join(\"\\n\");\n }\n return content == null ? \"\" : JSON.stringify(content);\n}\n\n// Create the agent + environment ONCE and cache their ids. Agents are versioned\n// configs and sessions pin to a version, so recreating them per request is wrong.\nexport async function ensureConfig() {\n const agentId = await getConfig(\"agent_id\");\n const envId = await getConfig(\"environment_id\");\n if (agentId && envId) return { agentId, envId };\n\n const agent = await client.beta.agents.create({\n name: \"Managed Agent Demo\",\n model: MODEL,\n system: SYSTEM,\n // Built-in toolset runs in Anthropic's sandbox; always_allow = run without prompting.\n tools: [{\n type: \"agent_toolset_20260401\",\n default_config: { permission_policy: { type: \"always_allow\" } },\n }],\n });\n const environment = await client.beta.environments.create({\n name: \"demo-env\",\n config: { type: \"cloud\", networking: { type: \"unrestricted\" } },\n });\n await setConfig(\"agent_id\", agent.id);\n await setConfig(\"environment_id\", environment.id);\n return { agentId: agent.id, envId: environment.id };\n}\n\n// Each thread gets one session, created lazily and reused for follow-up turns.\nexport async function ensureSession(thread: any) {\n if (thread.session_id) return thread.session_id as string;\n const { agentId, envId } = await ensureConfig();\n const session = await client.beta.sessions.create({\n agent: agentId,\n environment_id: envId,\n title: thread.title,\n });\n await setSession(thread.id, session.id);\n return session.id;\n}\n\n// One turn: open the stream, send the message, then persist each event to SQLite\n// until the session goes idle. The frontend polls those rows as they land.\nexport async function runTurn(\n threadId: string,\n sessionId: string,\n text: string,\n) {\n const stream = await client.beta.sessions.events.stream(sessionId);\n await client.beta.sessions.events.send(sessionId, {\n events: [{ type: \"user.message\", content: [{ type: \"text\", text }] }],\n });\n for await (const event of stream) {\n const e = event as any;\n if (e.id) await setCursor(threadId, e.id);\n if (event.type === \"agent.message\") {\n for (const block of e.content) {\n if (block.type === \"text\") {\n await addMessage(threadId, \"assistant\", \"text\", block.text);\n }\n }\n } else if (event.type === \"agent.tool_use\") {\n await addMessage(\n threadId,\n \"assistant\",\n \"tool_use\",\n JSON.stringify({ name: e.name, input: e.input }),\n );\n } else if (event.type === \"agent.tool_result\") {\n // e.content is an array of blocks ([{type:\"text\",text},...]); e.is_error\n // flags a failed call. Store {output:string, is_error} per the row contract.\n await addMessage(\n threadId,\n \"assistant\",\n \"tool_result\",\n JSON.stringify({\n output: toolResultOutput(e.content),\n is_error: !!e.is_error,\n }),\n );\n } else if (event.type === \"session.error\") {\n await addMessage(\n threadId,\n \"system\",\n \"error\",\n e.error?.message ?? \"session error\",\n );\n break;\n } else if (event.type === \"session.status_idle\") {\n break;\n }\n }\n // Surface any files the agent created in its sandbox this turn (images render\n // inline; other downloadables become links). Best-effort: never fail the turn.\n try {\n await syncSessionFiles(threadId, sessionId);\n } catch (_e) { /* ignore */ }\n}\n",[],[177,390],["D",1780413889356],[193,194,195,196],[177],["D",1780413794401],["D",1789495880338],{"_104":103,"_112":108},{"_104":103,"_105":106,"_107":108,"_18":-5,"_109":110,"_111":60},{"_13":90,"_32":91,"_43":42,"_92":44,"_93":94,"_95":96,"_97":50,"_98":99,"_100":66,"_101":45,"_102":103},"ctx",{"_83":-5,"_134":439,"_440":441,"_442":443,"_444":25,"_445":25,"_446":25,"_447":60,"_448":-5,"_449":-7,"_450":-7,"_451":173,"_452":25,"_453":25,"_454":-5,"_455":25,"_456":25,"_457":25,"_458":-5},"ENV",{"_410":411,"_412":413,"_414":91,"_415":416,"_417":418,"_419":420,"_421":422,"_423":424,"_425":426,"_427":428,"_429":430,"_431":432,"_433":434,"_435":436,"_437":438},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v78