[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_386":387,"_388":389},"routes/_app.x.$handle.$name",{"_102":101,"_32":50,"_111":92,"_27":112,"_13":14,"_113":-5,"_11":114,"_115":116,"_117":118,"_119":120,"_121":122,"_21":-5,"_123":-5,"_124":-5,"_125":25,"_126":127,"_128":64,"_129":-5,"_130":-5,"_131":132},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_48":49,"_32":50,"_37":51,"_52":-5,"_53":25,"_54":55,"_56":55,"_57":58,"_59":-5,"_18":60,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":25},"version",16,"changes",[19,20],"aiChatInfo","userId",{"_21":42,"_23":-7,"_24":25,"_26":25,"_27":43,"_29":43},{"_21":22,"_23":-7,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":21,"_35":36,"_37":38,"_39":14,"_40":41,"_24":25},"previous","deleted",false,"deletedHere","path","skills/code-reviewer/knowledge/review-checklist.md","latestPath","fileId","d3e2e382-6454-11f1-ba9b-1607ee4eb77e","name","review-checklist.md","fileType","content","# Review Checklist\n\nUse this as a reference during code review. Not every item applies to every diff — use judgment.\n\n## Correctness\n\n- [ ] Logic matches the stated intent (commit message, PR description)\n- [ ] Edge cases handled (empty arrays, null values, zero-length strings)\n- [ ] Error paths don't silently swallow exceptions\n- [ ] Async/await used correctly (no floating promises)\n- [ ] State mutations are intentional and visible\n- [ ] Database queries have appropriate WHERE clauses (no unbounded reads)\n- [ ] New dependencies are justified and from trusted sources\n\n## Security\n\n- [ ] No hardcoded secrets, API keys, or tokens\n- [ ] User input is validated/sanitized before use\n- [ ] SQL queries use parameterized values, not string concatenation\n- [ ] HTML output escapes user-provided content\n- [ ] File paths are validated (no path traversal via `..`)\n- [ ] Authentication/authorization checks present on new endpoints\n- [ ] CORS headers are intentionally permissive (if `*`, is that right?)\n- [ ] Error messages don't leak internal details to users\n\n## Performance\n\n- [ ] No N+1 query patterns (query in a loop)\n- [ ] Large datasets paginated or limited\n- [ ] Expensive operations not repeated unnecessarily\n- [ ] Caching used where appropriate (and invalidated correctly)\n\n## Style\n\n- [ ] Naming is consistent with the rest of the codebase\n- [ ] No dead code or commented-out blocks\n- [ ] Imports are organized (standard lib, external, internal)\n- [ ] TypeScript types are present (no unnecessary `any`)\n- [ ] Functions are reasonably sized (< 50 lines as a guideline)\n- [ ] Comments explain \"why,\" not \"what\"\n\n## Testing\n\n- [ ] New code has tests (or a justification for not testing)\n- [ ] Tests cover the happy path and at least one error case\n- [ ] Test names describe the expected behavior\n- [ ] No flaky test patterns (timing-dependent, order-dependent)\n","createdAt",["D",1781045092000],"branchVersion","branchId","040340e9-158b-4bbd-8f37-b747265ebd0a",{"_30":44,"_32":45,"_34":46,"_35":-5,"_37":47,"_39":14,"_40":41,"_24":25},"skills/code-reviewer/knowledge","4d2e6af0-559d-48a9-b078-6a468e77b933","knowledge","directory",["D",1781045092000],"id","874fb20a-7ec0-4476-989c-722361ea8c91","skills-library",["D",1781044539263],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Shareable agent skill library","imageUrl","9319c175-2593-4f88-ba21-04f2ef7b1c28","pinnedFileId","576a3bb6-6454-11f1-8142-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019aa807-52c2-709c-928b-2029bae9a558","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_102":101,"_110":106},"org",{"_102":101,"_103":104,"_105":106,"_18":-5,"_107":108,"_109":64},"branch",{"_13":91,"_32":92,"_48":41,"_93":49,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":50,"_100":101},"isOwned",18,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","templates","handle","displayName","Templates","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/129cab32-3bd7-4c3e-f39b-f12900c76100/square512?exp=1789585199&sig=e0ad9b96a0e58967744de3785adb3e9a68085da5b0c135b58439da2ef923cdc0","tier","business","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_48":49,"_32":50,"_37":382,"_52":-5,"_53":25,"_54":55,"_56":55,"_57":58,"_59":-5,"_18":60,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":68,"_69":70,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":383,"_86":384,"_88":385,"_90":25},"tree",[199,205,207,209,223,224,225],"files",[199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225],"counts",{"_189":68,"_190":168,"_191":168,"_192":193,"_194":195},"contents",[133,134,135,136,137,138,139],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_48":183,"_32":184,"_30":185,"_143":-5,"_40":41,"_39":186,"_145":64,"_37":187,"_13":68,"_34":46,"_35":-5,"_24":25,"_149":-5,"_27":188},{"_48":177,"_32":178,"_30":179,"_143":-5,"_40":41,"_39":180,"_145":64,"_37":181,"_13":68,"_34":46,"_35":-5,"_24":25,"_149":-5,"_27":182},{"_48":171,"_32":172,"_30":173,"_143":-5,"_40":41,"_39":174,"_145":64,"_37":175,"_13":68,"_34":46,"_35":-5,"_24":25,"_149":-5,"_27":176},{"_48":165,"_32":166,"_30":167,"_143":-5,"_40":41,"_39":168,"_145":64,"_37":169,"_13":68,"_34":46,"_35":-5,"_24":25,"_149":-5,"_27":170},{"_48":158,"_32":159,"_30":160,"_143":-5,"_40":41,"_39":161,"_145":25,"_37":162,"_13":68,"_34":21,"_35":163,"_24":25,"_149":-5,"_27":164},{"_48":151,"_32":152,"_30":62,"_143":-5,"_40":41,"_39":153,"_145":64,"_37":154,"_13":68,"_34":155,"_35":156,"_24":25,"_149":-5,"_27":157},{"_48":140,"_32":141,"_30":142,"_143":-5,"_40":41,"_39":144,"_145":64,"_37":146,"_13":68,"_34":147,"_35":148,"_24":25,"_149":-5,"_27":150},"5f17aa0f-c817-4e73-8a6d-6b8780f20301","og.ts","6bf1ce32-6454-11f1-8f6c-1607ee4eb77e","parentId",6,"latest",["D",1781044917611],"script","// Open Graph / Twitter card image (1200×630), generated with satori (JSX→SVG)\n// + resvg-wasm (SVG→PNG). Served at GET /og.png. Light/blue theme to match the\n// Skill Library UI. Modeled on stevekrouse/agentfax's og.ts.\nimport satori from \"npm:satori@0.10.13\";\nimport { initWasm, Resvg } from \"npm:@resvg/resvg-wasm@2.6.2\";\nimport { SKILLS } from \"./lib/skills.ts\";\n\n// Static-weight TTFs (variable fonts crash satori's opentype.js).\nconst SANS_BOLD_TTF =\n \"https://raw.githubusercontent.com/google/fonts/main/ofl/ptsans/PT_Sans-Web-Bold.ttf\";\nconst SANS_REGULAR_TTF =\n \"https://raw.githubusercontent.com/google/fonts/main/ofl/ptsans/PT_Sans-Web-Regular.ttf\";\nconst RESVG_WASM_URL = \"https://unpkg.com/@resvg/resvg-wasm@2.6.2/index_bg.wasm\";\n\nlet fontsPromise: Promise<{ bold: ArrayBuffer; regular: ArrayBuffer }> | null = null;\nfunction loadFonts() {\n if (!fontsPromise) {\n const get = (url: string, label: string) =>\n fetch(url).then((r) => {\n if (!r.ok) throw new Error(`${label} font fetch failed: ${r.status}`);\n return r.arrayBuffer();\n });\n fontsPromise = Promise.all([\n get(SANS_BOLD_TTF, \"Bold\"),\n get(SANS_REGULAR_TTF, \"Regular\"),\n ]).then(([bold, regular]) => ({ bold, regular }));\n }\n return fontsPromise;\n}\n\nlet wasmPromise: Promise | null = null;\nfunction ensureResvg(): Promise {\n if (!wasmPromise) {\n wasmPromise = fetch(RESVG_WASM_URL)\n .then((r) => {\n if (!r.ok) throw new Error(`resvg wasm fetch failed: ${r.status}`);\n return r.arrayBuffer();\n })\n .then((bytes) => initWasm(bytes));\n }\n return wasmPromise;\n}\n\nfunction pill(text: string) {\n return {\n type: \"div\",\n props: {\n style: {\n display: \"flex\",\n fontSize: 26,\n color: \"#404040\",\n background: \"#f5f5f5\",\n border: \"1px solid #e5e5e5\",\n borderRadius: \"999px\",\n padding: \"12px 28px\",\n },\n children: text,\n },\n };\n}\n\n// A stacked-cards \"library\" glyph as a satori SVG node (0–32 grid), scaled to `size`.\nfunction stackIcon(size: number) {\n return {\n type: \"svg\",\n props: {\n width: size,\n height: size,\n viewBox: \"0 0 32 32\",\n children: [\n { type: \"rect\", props: { x: 9, y: 3, width: 18, height: 22, rx: 3, fill: \"#bfdbfe\" } },\n { type: \"rect\", props: { x: 6, y: 6, width: 18, height: 22, rx: 3, fill: \"#60a5fa\" } },\n { type: \"rect\", props: { x: 3, y: 9, width: 18, height: 22, rx: 3, fill: \"#2563eb\" } },\n { type: \"rect\", props: { x: 6, y: 14, width: 12, height: 1.6, rx: 0.8, fill: \"#ffffff\" } },\n { type: \"rect\", props: { x: 6, y: 18, width: 9, height: 1.6, rx: 0.8, fill: \"#ffffff\" } },\n { type: \"rect\", props: { x: 6, y: 22, width: 11, height: 1.6, rx: 0.8, fill: \"#dbeafe\" } },\n ],\n },\n };\n}\n\nasync function renderSvg(): Promise {\n const { bold, regular } = await loadFonts();\n const count = SKILLS.length;\n const tree = {\n type: \"div\",\n props: {\n style: {\n width: \"1200px\",\n height: \"630px\",\n display: \"flex\",\n background: \"#fafafa\",\n padding: \"56px\",\n fontFamily: \"Sans\",\n },\n children: [\n {\n type: \"div\",\n props: {\n style: {\n flex: 1,\n display: \"flex\",\n flexDirection: \"row\",\n alignItems: \"center\",\n justifyContent: \"space-between\",\n padding: \"0 72px\",\n border: \"1px solid #e5e5e5\",\n borderRadius: \"28px\",\n background: \"#ffffff\",\n },\n children: [\n {\n type: \"div\",\n props: {\n style: { display: \"flex\", flexDirection: \"column\", maxWidth: \"640px\" },\n children: [\n {\n type: \"div\",\n props: {\n style: { display: \"flex\", fontSize: 28, fontWeight: 700, color: \"#2563eb\", letterSpacing: \"6px\" },\n children: \"SKILL LIBRARY\",\n },\n },\n {\n type: \"div\",\n props: {\n style: { display: \"flex\", fontSize: 104, fontWeight: 700, color: \"#171717\", letterSpacing: \"-3px\", marginTop: \"18px\" },\n children: \"Skill Library\",\n },\n },\n {\n type: \"div\",\n props: {\n style: { display: \"flex\", fontSize: 36, color: \"#525252\", lineHeight: 1.35, marginTop: \"20px\" },\n children: \"A shared library of reusable agent skills. Fork it and drop in your own.\",\n },\n },\n {\n type: \"div\",\n props: {\n style: { display: \"flex\", flexDirection: \"row\", gap: \"14px\", marginTop: \"34px\" },\n children: [pill(`${count} skill${count === 1 ? \"\" : \"s\"}`), pill(\"Built on Val Town\")],\n },\n },\n ],\n },\n },\n stackIcon(300),\n ],\n },\n },\n ],\n },\n };\n return await satori(tree as any, {\n width: 1200,\n height: 630,\n fonts: [\n { name: \"Sans\", data: bold, weight: 700, style: \"normal\" },\n { name: \"Sans\", data: regular, weight: 400, style: \"normal\" },\n ],\n });\n}\n\nexport async function renderOg(): Promise {\n try {\n const svg = await renderSvg();\n await ensureResvg();\n const png = new Resvg(svg).render().asPng();\n return new Response(png, {\n headers: { \"content-type\": \"image/png\", \"cache-control\": \"public, max-age=3600\" },\n });\n } catch (err) {\n const msg = err instanceof Error ? err.stack || err.message : String(err);\n return new Response(`OG render failed:\\n${msg}`, {\n status: 500,\n headers: { \"content-type\": \"text/plain\" },\n });\n }\n}\n","label",[141],"fc00783c-59fb-4da4-8802-0e58fafad58e","http.tsx",4,["D",1781044883172],"http","/** @jsxImportSource npm:hono@4/jsx */\n// Skill Library — thin HTTP orchestrator (generic, public template).\n// Routes only; markup lives in components/, data + helpers in lib/skills.ts,\n// client JS in frontend/client.js. Fork this val to build your own library.\n// See README.md.\n\nimport { Hono } from \"npm:hono@4\";\nimport { marked } from \"npm:marked@15\";\nimport { readFile } from \"https://esm.town/v/std/utils@85-main/index.ts\";\nimport { parseVal } from \"https://esm.town/v/std/utils/index.ts\";\n\nimport {\n buildCopyPayload,\n esc,\n exampleAsset,\n findSkill,\n parseFrontmatter,\n readSkillFile,\n} from \"./lib/skills.ts\";\nimport { renderOg } from \"./og.ts\";\nimport { Layout } from \"./components/Layout.tsx\";\nimport { Home } from \"./components/Home.tsx\";\nimport { SkillDetail } from \"./components/SkillDetail.tsx\";\nimport { FileView } from \"./components/FileView.tsx\";\n\nconst app = new Hono();\napp.onError((err) => Promise.reject(err)); // full stack traces in logs\n\nconst origin = (c: { req: { url: string } }) => new URL(c.req.url).origin;\n\n// ── Public assets ────────────────────────────────────────────────────────────\n\napp.get(\"/client.js\", async () => {\n const js = await readFile(\"/frontend/client.js\", import.meta.url);\n return new Response(js, {\n headers: { \"content-type\": \"text/javascript; charset=utf-8\" },\n });\n});\n\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// Social card image (Open Graph / Twitter)\napp.get(\"/og.png\", () => renderOg());\n\n// ── Pages ────────────────────────────────────────────────────────────────────\n\napp.get(\"/\", (c) =>\n c.html(\n \n \n ,\n ));\n\napp.get(\"/skills/:slug\", async (c) => {\n const skill = findSkill(c.req.param(\"slug\"));\n if (!skill) return c.notFound();\n const rawMd = await readSkillFile(skill.slug, \"SKILL.md\");\n if (!rawMd) return c.notFound();\n const { body } = parseFrontmatter(rawMd);\n const html = await marked.parse(body);\n const payload = buildCopyPayload(skill, rawMd); // payload keeps frontmatter — that IS the skill format\n // Live preview = the skill's first assets/*.html (see lib/skills.ts).\n const examplePath = exampleAsset(skill);\n const exampleHtml = examplePath\n ? (await readSkillFile(skill.slug, examplePath)) ?? undefined\n : undefined;\n return c.html(\n \n \n ,\n );\n});\n\n// Standalone, embeddable render of a skill's live example asset. Same design\n// system, no surrounding app chrome.\napp.get(\"/skills/:slug/example\", async (c) => {\n const skill = findSkill(c.req.param(\"slug\"));\n const examplePath = skill && exampleAsset(skill);\n if (!skill || !examplePath) return c.notFound();\n const html = await readSkillFile(skill.slug, examplePath);\n if (html == null) return c.notFound();\n return c.html(\n \n \n ← {skill.name}\n \n

\n {skill.name} — examples\n

\n ,\n );\n});\n\napp.get(\"/skills/:slug/files/*\", async (c) => {\n const skill = findSkill(c.req.param(\"slug\"));\n if (!skill) return c.notFound();\n const path = c.req.path.replace(`/skills/${skill.slug}/files/`, \"\");\n if (!skill.files.includes(path)) return c.notFound();\n const content = await readSkillFile(skill.slug, path);\n if (content === null) return c.notFound();\n const isMarkdown = path.endsWith(\".md\");\n const rendered = isMarkdown\n ? await marked.parse(parseFrontmatter(content).body)\n : `

${esc(content)}

`;\n return c.html(\n \n \n ,\n );\n});\n\nexport default app.fetch;\n",[152],"9cfc8c6c-e72a-4822-b62c-606f2a944917","README.md","bf2513ca-6454-11f1-9006-1607ee4eb77e",12,["D",1781045057203],"# Skill Library (template)\n\nA forkable directory of reusable **agent skills**. Each skill is a folder of\nMarkdown and code; the app renders every skill's `SKILL.md` and gives you a\none-click **Copy skill** button that puts a ready-to-run payload on your\nclipboard.\n\n🔗 **Live:** https://dcm31--92861134610211f1a0c51607ee4eb77e.web.val.run\n\n## Getting started\n\nThe intended way to manage this library is with an agent — let it add, edit, and\ndeploy skills for you. You don't need to touch the file tree by hand.\n\n1. **Remix this val** to get your own copy.\n2. **Connect your coding agent** with the Val Town plugin, which bundles the\n Val Town MCP server and platform skills. It works with Claude Code, Codex,\n and Cursor:\n\n ```sh\n npx plugins add val-town/plugins\n ```\n\n See the [plugin guide](https://docs.val.town/guides/prompting/plugin/) for\n per-agent install commands.\n3. **Ask it to add a skill.** For example:\n\n > Add a skill called `pr-summarizer` to my skills val that reads a GitHub PR\n > diff and writes a release note. Put the prompt in `SKILL.md` and a fetch\n > script in `scripts/`.\n\n The agent reads the existing skills for the pattern, creates\n `skills//` with the right files, registers it in the `SKILLS` manifest,\n and deploys — all in place.\n\nPrefer not to set up a local agent? Open this val on val.town and talk to\n**Townie** in the sidebar instead. Same workflow, in the browser.\n\nYou can also just edit a skill by hand — every file opens in the Val Town editor,\ne.g. [`skills/hello-world/SKILL.md`](https://www.val.town/x/dcm31/skills/code/skills/hello-world/SKILL.md).\nA skill's body is plain Markdown, so tweaking wording or fixing a typo is a\ntwo-second edit that deploys on save.\n\n## How a skill is structured\n\nA skill is a folder under `skills//` following the standard Agent-Skills\nlayout, so it stays valid and discoverable by agents reading it outside this app:\n\n```\nskills//\n SKILL.md # entry point — what the skill does and the flow to follow\n scripts/ # runnable code the agent writes locally\n knowledge/ # reference docs the agent reads for context\n assets/ # optional HTML fragment, shown as a live example\n```\n\nOnly `SKILL.md` is required. Each skill is also listed in the `SKILLS` array in\n`lib/skills.ts` (`slug`, `name`, `description`, `category`, and its `files`),\nwhich drives the home grid, the sidebar file tree, and the copy payload — your\nagent keeps this in sync for you.\n\n## Live examples\n\nA skill can ship a live preview — a working UI rendered right on its page, so you\ncan see what the skill produces instead of just reading about it.\n\nTo add one, drop an HTML fragment in the skill's `assets/` folder (e.g.\n`assets/showcase.html`) and list it in the manifest's `files`. That's it — the\napp renders the first `assets/*.html` it finds as an **Examples** panel on the\nskill page, and also serves it standalone (and embeddable in an iframe) at\n`/skills//example`.\n\nThe fragment is just HTML; it can pull in CSS or a `\n \n

Diff · v16