[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_353":354,"_355":356},"routes/_app.x.$handle.$name",{"_110":109,"_38":51,"_118":96,"_33":119,"_13":14,"_120":-5,"_11":121,"_122":123,"_124":125,"_126":127,"_128":129,"_26":-5,"_130":131,"_132":133,"_134":31,"_135":136,"_137":65,"_138":-5,"_139":-5,"_140":141},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_49":50,"_38":51,"_44":52,"_53":-5,"_54":31,"_55":56,"_57":56,"_58":59,"_60":61,"_19":62,"_63":37,"_64":65,"_66":-5,"_67":-5,"_68":69,"_70":71,"_72":73,"_74":75,"_76":77,"_78":-5,"_79":80,"_81":80,"_82":83,"_84":83,"_85":83,"_86":80,"_87":80,"_88":89,"_90":91,"_92":93,"_94":31},"version",58,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","7572b788-c65d-42f2-becf-d7052f6e13e3","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":29,"_30":31,"_32":31,"_33":34,"_35":34},"file",{"_36":37,"_38":34,"_39":40,"_41":43,"_44":45,"_46":14,"_47":48,"_30":31},"previous",{"_36":37,"_38":34,"_39":40,"_41":42},"deleted",false,"deletedHere","path","index.ts","latestPath","fileId","019f4d88-ebd3-7218-9092-185c08774ad1","name","fileType","http","content","import { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { Hono } from \"npm:hono\";\nimport {\n createListing,\n createResetToken,\n createSession,\n deleteListing,\n deleteSession,\n ensureTableAndSeed,\n getListing,\n getUserByEmail,\n getUserById,\n listListings,\n listUsers,\n consumeResetToken,\n countAdmins,\n createUser,\n setUserActive,\n stampLogin,\n updateListing,\n updateUserPassword,\n updateUserRole,\n validateListingInput,\n type Role,\n type User,\n} from \"./backend/db.ts\";\nimport {\n hashPassword,\n isEmail,\n newToken,\n normalizeEmail,\n requireRole,\n validatePasswordStrength,\n verifyPassword,\n} from \"./backend/auth.ts\";\nimport { autoCheckContact, extendedChecks, fetchPageText } from \"./backend/verify.ts\";\nimport { discoverByArea, filterNew } from \"./backend/discover.ts\";\n\nawait ensureTableAndSeed();\n\nconst app = new Hono();\n\napp.get(\"/\", () => serveFile(\"/frontend/index.html\"));\napp.get(\"/frontend/**/*\", (c) => serveFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ---------- Listings (public read; unsuitable entries filtered for non-staff) ----------\n\napp.get(\"/api/me\", async (c) => {\n const auth = c.req.header(\"authorization\") ?? \"\";\n const token = auth.startsWith(\"Bearer \") ? auth.slice(7) : \"\";\n const user = token ? await getSessionUserPublic(token) : null;\n return c.json({ user });\n});\nimport { getSessionUser as getSessionUserPublic } from \"./backend/db.ts\";\n\napp.get(\"/api/listings\", async (c) => {\n const user = await getCurrent(c);\n const all = await listListings();\n // Unsuitable Landlords are staff-only\n const visible = user ? all : all.filter((l) => l.housing_type !== \"Unsuitable Landlords\");\n return c.json(visible);\n});\n\n// CSV export (opens in Excel)\napp.get(\"/api/listings/export\", requireRole(\"viewer\"), async (c) => {\n const rows = await listListings();\n const headers = [\"id\", \"name\", \"location\", \"phone\", \"website\", \"website_label\", \"notes\", \"contact_updated\",\n \"housing_type\", \"unsuitable_note\", \"availability_notes\", \"last_contacted_date\", \"last_contacted_by\",\n \"created_at\", \"updated_at\"];\n const esc = (v: string) => `\"${String(v ?? \"\").replace(/\"/g, '\"\"')}\"`;\n const csv = [headers.join(\",\"), ...rows.map((r) => headers.map((h) => esc((r as any)[h])).join(\",\"))].join(\"\\r\\n\");\n return new Response(\"\\uFEFF\" + csv, {\n headers: {\n \"content-type\": \"text/csv; charset=utf-8\",\n \"content-disposition\": `attachment; filename=\"landlord-directory-${new Date().toISOString().slice(0, 10)}.csv\"`,\n },\n });\n});\n\n// ---------- Auth ----------\n\nasync function getCurrent(c: any): Promise {\n const auth = c.req.header(\"authorization\") ?? \"\";\n const token = auth.startsWith(\"Bearer \") ? auth.slice(7) : \"\";\n if (!token) return null;\n return await getSessionUserPublic(token);\n}\n\napp.post(\"/api/login\", async (c) => {\n const { email, password } = await c.req.json();\n const user = await getUserByEmail(normalizeEmail(email));\n if (!user || !user.active || !verifyPassword(String(password ?? \"\"), user.password_hash)) {\n return c.json({ error: \"Invalid email or password\" }, 401);\n }\n const token = newToken();\n await createSession(token, user.id);\n await stampLogin(user.id);\n const { password_hash, ...safe } = user;\n return c.json({ token, user: safe });\n});\n\napp.post(\"/api/logout\", async (c) => {\n const auth = c.req.header(\"authorization\") ?? \"\";\n const token = auth.startsWith(\"Bearer \") ? auth.slice(7) : \"\";\n if (token) await deleteSession(token);\n return c.json({ ok: true });\n});\n\n// ---------- Password reset ----------\n\napp.post(\"/api/forgot-password\", async (c) => {\n const { email } = await c.req.json();\n const user = await getUserByEmail(normalizeEmail(email));\n if (user && user.active) {\n const token = newToken();\n await createResetToken(token, user.id);\n const origin = new URL(c.req.url).origin;\n const link = `${origin}/reset?token=${token}`;\n await import(\"https://esm.town/v/std/email/index.ts\").then((m) =>\n m.send({\n to: user.email,\n subject: \"Landlord Directory — password reset\",\n text: `Hi ${user.first_name || \"there\"},\\n\\nReset your Landlord Directory password using this link (valid 1 hour):\\n\\n${link}\\n\\nIf you didn't request this, you can ignore this email.`,\n }),\n );\n }\n // Always say ok — don't reveal whether the email exists\n return c.json({ ok: true, message: \"If that email is registered, a reset link has been sent.\" });\n});\n\napp.post(\"/api/reset-password\", async (c) => {\n const { token, password } = await c.req.json();\n const userId = await consumeResetToken(String(token ?? \"\"));\n if (!userId) return c.json({ error: \"Invalid or expired reset link\" }, 400);\n const pwError = validatePasswordStrength(String(password ?? \"\"));\n if (pwError) return c.json({ error: pwError }, 400);\n await updateUserPassword(userId, hashPassword(String(password)));\n return c.json({ ok: true });\n});\n\n// ---------- User management (admin only) ----------\n\napp.get(\"/api/users\", requireRole(\"admin\"), (c) => c.json(listUsers()));\n\napp.post(\"/api/users\", requireRole(\"admin\"), async (c) => {\n const body = await c.req.json();\n const email = normalizeEmail(body.email);\n if (!isEmail(email)) return c.json({ error: \"Invalid email address\" }, 400);\n const pwError = validatePasswordStrength(String(body.password ?? \"\"));\n if (pwError) return c.json({ error: pwError }, 400);\n if (!(ROLES as readonly string[]).includes(body.role)) return c.json({ error: \"Invalid role\" }, 400);\n try {\n await createUser({\n email,\n password_hash: hashPassword(String(body.password)),\n first_name: String(body.first_name ?? \"\"),\n last_name: String(body.last_name ?? \"\"),\n role: body.role as Role,\n });\n } catch {\n return c.json({ error: \"A user with that email already exists\" }, 400);\n }\n return c.json({ ok: true });\n});\n\napp.put(\"/api/users/:id/role\", requireRole(\"admin\"), async (c) => {\n const id = Number(c.req.param(\"id\"));\n const { role } = await c.req.json();\n if (!(ROLES as readonly string[]).includes(role)) return c.json({ error: \"Invalid role\" }, 400);\n const me = c.get(\"user\") as User;\n if (me.id === id && role !== \"admin\") {\n return c.json({ error: \"You can't remove your own admin role\" }, 400);\n }\n await updateUserRole(id, role as Role);\n return c.json({ ok: true });\n});\n\napp.put(\"/api/users/:id/active\", requireRole(\"admin\"), async (c) => {\n const id = Number(c.req.param(\"id\"));\n const { active } = await c.req.json();\n const me = c.get(\"user\") as User;\n if (me.id === id && !active) return c.json({ error: \"You can't deactivate yourself\" }, 400);\n await setUserActive(id, Boolean(active));\n return c.json({ ok: true });\n});\n\napp.put(\"/api/users/:id/password\", requireRole(\"admin\"), async (c) => {\n const id = Number(c.req.param(\"id\"));\n const { password } = await c.req.json();\n const pwError = validatePasswordStrength(String(password ?? \"\"));\n if (pwError) return c.json({ error: pwError }, 400);\n await updateUserPassword(id, hashPassword(String(password)));\n return c.json({ ok: true });\n});\n\napp.put(\"/api/users/:id/renamed\", () => c_defaultRename());\n\nfunction c_defaultRename() { throw new Error(\"unused\"); }\napp.get(\"/api/__renamed\", () => c.json({ ok: true }));\n\n// ---------- Listings CRUD (editor or admin) ----------\n\napp.post(\"/api/listings\", requireRole(\"editor\"), async (c) => {\n const input = await c.req.json();\n const err = validateListingInput(input);\n if (err) return c.json({ error: err }, 400);\n await createListing(input);\n return c.json({ ok: true });\n});\n\napp.put(\"/api/listings/:id\", requireRole(\"editor\"), async (c) => {\n const id = Number(c.req.param(\"id\"));\n const existing = await getListing(id);\n if (!existing) return c.json({ error: \"Not found\" }, 404);\n const input = await c.req.json();\n const err = validateListingInput(input);\n if (err) return c.json({ error: err }, 400);\n await updateListing(id, input);\n return c.json({ ok: true });\n});\n\n// Flag an existing entry as unsuitable (editor only) — requires a note\napp.post(\"/api/listings/:id/flag-unsuitable\", requireRole(\"editor\"), async (c) => {\n const id = Number(c.req.param(\"id\"));\n const existing = await getListing(id);\n if (!existing) return c.json({ error: \"Not found\" }, 404);\n const { note } = await c.req.json();\n if (!String(note ?? \"\").trim()) return c.json({ error: \"A note explaining the issue is required\" }, 400);\n await updateListing(id, {\n ...existing,\n housing_type: \"Unsuitable Landlords\",\n unsuitable_note: String(note),\n });\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/listings/:id\", requireRole(\"editor\"), async (c) => {\n await deleteListing(Number(c.req.param(\"id\")));\n return c.json({ ok: true });\n});\n\n// ---------- Auto-verify (editor or admin) ----------\n\napp.post(\"/api/listings/:id/auto-verify\", requireRole(\"editor\"), async (c) => {\n const id = Number(c.req.param(\"id\"));\n const listing = await getListing(id);\n if (!listing) return c.json({ error: \"Not found\" }, 404);\n\n if (!listing.website) {\n return c.json({ verified: false, siteStatus: null, phoneFound: null, reason: \"no website listed\" });\n }\n\n const url = listing.website.startsWith(\"http\") ? listing.website : `https://${listing.website}`;\n const { text, status } = await fetchPageText(url);\n const today = new Date().toLocaleDateString(\"en-US\");\n\n if (text === null) {\n const contact_updated = `Auto-check failed ${today}`;\n await updateListing(id, { ...listing, contact_updated });\n return c.json({ verified: false, siteStatus: status, phoneFound: null, reason: status === null ? \"website unreachable\" : `site responded ${status} (not OK)`, contact_updated });\n }\n\n const check = autoCheckFromText(listing, text, status);\n const ext = extendedChecks(text);\n\n const phone = !listing.phone && check.foundPhone ? check.foundPhone : listing.phone;\n\n // Note FMR/HUD references on the listing\n const fmrNote = ext.fmrReferences.length\n ? `${listing.notes ? listing.notes + \" | \" : \"\"}Site references: ${ext.fmrReferences.join(\", \")} (found ${today})`\n : listing.notes;\n\n const contact_updated = check.verified ? today : `Auto-check failed ${today}`;\n await updateListing(id, { ...listing, phone, notes: fmrNote, contact_updated });\n\n return c.json({\n verified: check.verified,\n siteStatus: status,\n phoneFound: check.phoneFound,\n foundPhone: check.foundPhone,\n phone,\n isRentalSite: ext.isRentalSite,\n rentalSignals: ext.rentalSignals,\n fmrReferences: ext.fmrReferences,\n reason: check.reason,\n contact_updated,\n });\n});\n\nfunction autoCheckFromText(listing: any, text: string, status: number | null) {\n const digits = (s: string) => s.replace(/\\D/g, \"\");\n const phoneDigits = digits(String(listing.phone ?? \"\"));\n if (phoneDigits.length >= 7) {\n const phoneFound = digits(text).includes(phoneDigits);\n return {\n verified: phoneFound,\n phoneFound,\n foundPhone: null,\n reason: `site responded ${status}; phone ${phoneFound ? \"found\" : \"NOT found\"} on page`,\n };\n }\n const match = text.match(/(?:\\+?1[-.\\s]?)?\$?\\d{3}\$?[-.\\s]\\d{3}[-.\\s]\\d{4}/);\n return {\n verified: match !== null,\n phoneFound: match !== null,\n foundPhone: match ? match[0] : null,\n reason: match ? `site responded ${status}; phone found on page: ${match[0]}` : `site responded ${status}; no phone number found on page`,\n };\n}\n\n// ---------- AI discovery (editor or admin) ----------\n\napp.post(\"/api/discover-area\", requireRole(\"editor\"), async (c) => {\n const { area } = await c.req.json();\n if (!area || typeof area !== \"string\" || area.trim().length < 2) {\n return c.json({ error: \"Provide an area to search\" }, 400);\n }\n const existing = await listListings();\n const discovered = await discoverByArea(area.trim(), existing);\n const fresh = filterNew(discovered, existing);\n return c.json({ results: fresh, totalFound: discovered.length });\n});\n\n// Unwrap and rethrow Hono errors as the original error\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","import { parseVal, serveFile } from \"https://esm.town/v/std/utils/index.ts\";\nimport { Hono } from \"npm:hono\";\nimport {\n createListing,\n createResetToken,\n createSession,\n deleteListing,\n deleteSession,\n ensureTableAndSeed,\n getListing,\n getUserByEmail,\n getUserById,\n listListings,\n listUsers,\n consumeResetToken,\n countAdmins,\n createUser,\n setUserActive,\n stampLogin,\n updateListing,\n updateUserPassword,\n updateUserRole,\n validateListingInput,\n type Role,\n type User,\n} from \"./backend/db.ts\";\nimport {\n hashPassword,\n isEmail,\n newToken,\n normalizeEmail,\n requireRole,\n validatePasswordStrength,\n verifyPassword,\n} from \"./backend/auth.ts\";\nimport { autoCheckContact, extendedChecks, fetchPageText } from \"./backend/verify.ts\";\nimport { discoverByArea, filterNew } from \"./backend/discover.ts\";\n\nawait ensureTableAndSeed();\n\nconst app = new Hono();\n\napp.get(\"/\", () => serveFile(\"/frontend/index.html\"));\napp.get(\"/frontend/**/*\", (c) => serveFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\n\n// ---------- Listings (public read; unsuitable entries filtered for non-staff) ----------\n\napp.get(\"/api/me\", async (c) => {\n const user = await getCurrent(c);\n return c.json({ user });\n});\n\napp.get(\"/api/listings\", async (c) => {\n const user = await getCurrent(c);\n const all = await listListings();\n // Unsuitable Landlords are staff-only\n const visible = user ? all : all.filter((l) => l.housing_type !== \"Unsuitable Landlords\");\n return c.json(visible);\n});\n\n// CSV export (opens in Excel)\napp.get(\"/api/listings/export\", requireRole(\"viewer\"), async (c) => {\n const rows = await listListings();\n const headers = [\"id\", \"name\", \"location\", \"phone\", \"website\", \"website_label\", \"notes\", \"contact_updated\",\n \"housing_type\", \"unsuitable_note\", \"availability_notes\", \"last_contacted_date\", \"last_contacted_by\",\n \"created_at\", \"updated_at\"];\n const esc = (v: string) => `\"${String(v ?? \"\").replace(/\"/g, '\"\"')}\"`;\n const csv = [headers.join(\",\"), ...rows.map((r) => headers.map((h) => esc((r as any)[h])).join(\",\"))].join(\"\\r\\n\");\n return new Response(\"\\uFEFF\" + csv, {\n headers: {\n \"content-type\": \"text/csv; charset=utf-8\",\n \"content-disposition\": `attachment; filename=\"landlord-directory-${new Date().toISOString().slice(0, 10)}.csv\"`,\n },\n });\n});\n\n// ---------- Auth ----------\n\nasync function getCurrent(c: any): Promise {\n const auth = c.req.header(\"authorization\") ?? \"\";\n const token = auth.startsWith(\"Bearer \") ? auth.slice(7) : \"\";\n if (!token) return null;\n return await getSessionUserPublic(token);\n}\n\napp.post(\"/api/login\", async (c) => {\n const { email, password } = await c.req.json();\n const user = await getUserByEmail(normalizeEmail(email));\n if (!user || !user.active || !verifyPassword(String(password ?? \"\"), user.password_hash)) {\n return c.json({ error: \"Invalid email or password\" }, 401);\n }\n const token = newToken();\n await createSession(token, user.id);\n await stampLogin(user.id);\n const { password_hash, ...safe } = user;\n return c.json({ token, user: safe });\n});\n\napp.post(\"/api/logout\", async (c) => {\n const auth = c.req.header(\"authorization\") ?? \"\";\n const token = auth.startsWith(\"Bearer \") ? auth.slice(7) : \"\";\n if (token) await deleteSession(token);\n return c.json({ ok: true });\n});\n\n// ---------- Password reset ----------\n\napp.post(\"/api/forgot-password\", async (c) => {\n const { email } = await c.req.json();\n const user = await getUserByEmail(normalizeEmail(email));\n if (user && user.active) {\n const token = newToken();\n await createResetToken(token, user.id);\n const origin = new URL(c.req.url).origin;\n const link = `${origin}/reset?token=${token}`;\n await import(\"https://esm.town/v/std/email/index.ts\").then((m) =>\n m.send({\n to: user.email,\n subject: \"Landlord Directory — password reset\",\n text: `Hi ${user.first_name || \"there\"},\\n\\nReset your Landlord Directory password using this link (valid 1 hour):\\n\\n${link}\\n\\nIf you didn't request this, you can ignore this email.`,\n }),\n );\n }\n // Always say ok — don't reveal whether the email exists\n return c.json({ ok: true, message: \"If that email is registered, a reset link has been sent.\" });\n});\n\napp.post(\"/api/reset-password\", async (c) => {\n const { token, password } = await c.req.json();\n const userId = await consumeResetToken(String(token ?? \"\"));\n if (!userId) return c.json({ error: \"Invalid or expired reset link\" }, 400);\n const pwError = validatePasswordStrength(String(password ?? \"\"));\n if (pwError) return c.json({ error: pwError }, 400);\n await updateUserPassword(userId, hashPassword(String(password)));\n return c.json({ ok: true });\n});\n\n// ---------- User management (admin only) ----------\n\napp.get(\"/api/users\", requireRole(\"admin\"), (c) => c.json(listUsers()));\n\napp.post(\"/api/users\", requireRole(\"admin\"), async (c) => {\n const body = await c.req.json();\n const email = normalizeEmail(body.email);\n if (!isEmail(email)) return c.json({ error: \"Invalid email address\" }, 400);\n const pwError = validatePasswordStrength(String(body.password ?? \"\"));\n if (pwError) return c.json({ error: pwError }, 400);\n if (!(ROLES as readonly string[]).includes(body.role)) return c.json({ error: \"Invalid role\" }, 400);\n try {\n await createUser({\n email,\n password_hash: hashPassword(String(body.password)),\n first_name: String(body.first_name ?? \"\"),\n last_name: String(body.last_name ?? \"\"),\n role: body.role as Role,\n });\n } catch {\n return c.json({ error: \"A user with that email already exists\" }, 400);\n }\n return c.json({ ok: true });\n});\n\napp.put(\"/api/users/:id/role\", requireRole(\"admin\"), async (c) => {\n const id = Number(c.req.param(\"id\"));\n const { role } = await c.req.json();\n if (!(ROLES as readonly string[]).includes(role)) return c.json({ error: \"Invalid role\" }, 400);\n const me = c.get(\"user\") as User;\n if (me.id === id && role !== \"admin\") {\n return c.json({ error: \"You can't remove your own admin role\" }, 400);\n }\n await updateUserRole(id, role as Role);\n return c.json({ ok: true });\n});\n\napp.put(\"/api/users/:id/active\", requireRole(\"admin\"), async (c) => {\n const id = Number(c.req.param(\"id\"));\n const { active } = await c.req.json();\n const me = c.get(\"user\") as User;\n if (me.id === id && !active) return c.json({ error: \"You can't deactivate yourself\" }, 400);\n await setUserActive(id, Boolean(active));\n return c.json({ ok: true });\n});\n\napp.put(\"/api/users/:id/password\", requireRole(\"admin\"), async (c) => {\n const id = Number(c.req.param(\"id\"));\n const { password } = await c.req.json();\n const pwError = validatePasswordStrength(String(password ?? \"\"));\n if (pwError) return c.json({ error: pwError }, 400);\n await updateUserPassword(id, hashPassword(String(password)));\n return c.json({ ok: true });\n});\n\napp.put(\"/api/users/:id/renamed\", () => c_defaultRename());\n\nfunction c_defaultRename() { throw new Error(\"unused\"); }\napp.get(\"/api/__renamed\", () => c.json({ ok: true }));\n\n// ---------- Listings CRUD (editor or admin) ----------\n\napp.post(\"/api/listings\", requireRole(\"editor\"), async (c) => {\n const input = await c.req.json();\n const err = validateListingInput(input);\n if (err) return c.json({ error: err }, 400);\n await createListing(input);\n return c.json({ ok: true });\n});\n\napp.put(\"/api/listings/:id\", requireRole(\"editor\"), async (c) => {\n const id = Number(c.req.param(\"id\"));\n const existing = await getListing(id);\n if (!existing) return c.json({ error: \"Not found\" }, 404);\n const input = await c.req.json();\n const err = validateListingInput(input);\n if (err) return c.json({ error: err }, 400);\n await updateListing(id, input);\n return c.json({ ok: true });\n});\n\n// Flag an existing entry as unsuitable (editor only) — requires a note\napp.post(\"/api/listings/:id/flag-unsuitable\", requireRole(\"editor\"), async (c) => {\n const id = Number(c.req.param(\"id\"));\n const existing = await getListing(id);\n if (!existing) return c.json({ error: \"Not found\" }, 404);\n const { note } = await c.req.json();\n if (!String(note ?? \"\").trim()) return c.json({ error: \"A note explaining the issue is required\" }, 400);\n await updateListing(id, {\n ...existing,\n housing_type: \"Unsuitable Landlords\",\n unsuitable_note: String(note),\n });\n return c.json({ ok: true });\n});\n\napp.delete(\"/api/listings/:id\", requireRole(\"editor\"), async (c) => {\n await deleteListing(Number(c.req.param(\"id\")));\n return c.json({ ok: true });\n});\n\n// ---------- Auto-verify (editor or admin) ----------\n\napp.post(\"/api/listings/:id/auto-verify\", requireRole(\"editor\"), async (c) => {\n const id = Number(c.req.param(\"id\"));\n const listing = await getListing(id);\n if (!listing) return c.json({ error: \"Not found\" }, 404);\n\n if (!listing.website) {\n return c.json({ verified: false, siteStatus: null, phoneFound: null, reason: \"no website listed\" });\n }\n\n const url = listing.website.startsWith(\"http\") ? listing.website : `https://${listing.website}`;\n const { text, status } = await fetchPageText(url);\n const today = new Date().toLocaleDateString(\"en-US\");\n\n if (text === null) {\n const contact_updated = `Auto-check failed ${today}`;\n await updateListing(id, { ...listing, contact_updated });\n return c.json({ verified: false, siteStatus: status, phoneFound: null, reason: status === null ? \"website unreachable\" : `site responded ${status} (not OK)`, contact_updated });\n }\n\n const check = autoCheckFromText(listing, text, status);\n const ext = extendedChecks(text);\n\n const phone = !listing.phone && check.foundPhone ? check.foundPhone : listing.phone;\n\n // Note FMR/HUD references on the listing\n const fmrNote = ext.fmrReferences.length\n ? `${listing.notes ? listing.notes + \" | \" : \"\"}Site references: ${ext.fmrReferences.join(\", \")} (found ${today})`\n : listing.notes;\n\n const contact_updated = check.verified ? today : `Auto-check failed ${today}`;\n await updateListing(id, { ...listing, phone, notes: fmrNote, contact_updated });\n\n return c.json({\n verified: check.verified,\n siteStatus: status,\n phoneFound: check.phoneFound,\n foundPhone: check.foundPhone,\n phone,\n isRentalSite: ext.isRentalSite,\n rentalSignals: ext.rentalSignals,\n fmrReferences: ext.fmrReferences,\n reason: check.reason,\n contact_updated,\n });\n});\n\nfunction autoCheckFromText(listing: any, text: string, status: number | null) {\n const digits = (s: string) => s.replace(/\\D/g, \"\");\n const phoneDigits = digits(String(listing.phone ?? \"\"));\n if (phoneDigits.length >= 7) {\n const phoneFound = digits(text).includes(phoneDigits);\n return {\n verified: phoneFound,\n phoneFound,\n foundPhone: null,\n reason: `site responded ${status}; phone ${phoneFound ? \"found\" : \"NOT found\"} on page`,\n };\n }\n const match = text.match(/(?:\\+?1[-.\\s]?)?\$?\\d{3}\$?[-.\\s]\\d{3}[-.\\s]\\d{4}/);\n return {\n verified: match !== null,\n phoneFound: match !== null,\n foundPhone: match ? match[0] : null,\n reason: match ? `site responded ${status}; phone found on page: ${match[0]}` : `site responded ${status}; no phone number found on page`,\n };\n}\n\n// ---------- AI discovery (editor or admin) ----------\n\napp.post(\"/api/discover-area\", requireRole(\"editor\"), async (c) => {\n const { area } = await c.req.json();\n if (!area || typeof area !== \"string\" || area.trim().length < 2) {\n return c.json({ error: \"Provide an area to search\" }, 400);\n }\n const existing = await listListings();\n const discovered = await discoverByArea(area.trim(), existing);\n const fresh = filterNew(discovered, existing);\n return c.json({ results: fresh, totalFound: discovered.length });\n});\n\n// Unwrap and rethrow Hono errors as the original error\napp.onError((err) => Promise.reject(err));\n\nexport default app.fetch;\n","createdAt",["D",1788624563668],"branchVersion","branchId","cb93a182-7d33-477a-951e-56f9a7b9bf82","id","6d79585e-4f87-4a0f-9f9e-e0782f6ee9c5","haven-housing-directory",["D",1783712246617],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Searchable rental directory for The Haven (Charlottesville)","imageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/64dc00cc-94d9-47dd-81b1-dde02610d900/square512?exp=1789592399&sig=9f2b8198a6bd290c0e4cd558a371acaf6bae0541324daebbd1636993bd403dce","a0bf3b31-15a5-4d5c-880e-4b1e22c9bc18","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f4d98-342f-73e3-90b3-c7f210ff5067","tursoName","6d79585e4f874a0f9f9ee0782f6ee9c5","tursoHostname","6d79585e4f874a0f9f9ee0782f6ee9c5-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789525245864],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_110":109,"_117":-5},"org",{"_110":109,"_111":112,"_113":-5,"_19":-5,"_114":115,"_116":65},"branch",{"_13":95,"_38":96,"_49":48,"_97":50,"_98":99,"_100":101,"_102":56,"_103":104,"_105":106,"_107":51,"_108":109},"isOwned",128,"main","projectId","forkedBranchId","961078ea-f528-11ef-aa68-569c3dd06744","forkedBranchVersion",89,"forkedProjectPrivacy","forkedProjectId","96102714-f528-11ef-aa68-569c3dd06744","forkedProjectOrgId","019aa807-52c2-709c-928b-2029bae9a558","projectName","userHandle","the_haven","handle","displayName","The Haven","avatar","tier","business","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_49":50,"_38":51,"_44":348,"_53":-5,"_54":31,"_55":56,"_57":56,"_58":59,"_60":61,"_19":62,"_63":37,"_64":65,"_66":-5,"_67":-5,"_68":69,"_70":71,"_72":73,"_74":75,"_76":349,"_78":-5,"_79":80,"_81":80,"_82":83,"_84":83,"_85":83,"_86":80,"_87":80,"_88":350,"_90":351,"_92":352,"_94":31},"tree",[202,209,218,219,220],"files",[202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220],"counts",{"_192":69,"_193":178,"_194":69,"_195":196,"_197":198},"contents",[153,154,155,156,157],"upstreamProject",{"_49":104,"_38":149,"_58":150,"_60":61,"_55":56,"_88":151},"upstreamBranch",{"_49":99,"_44":142,"_143":144,"_38":96,"_97":104,"_13":145,"_98":-5,"_100":-5,"_146":147,"_53":-5,"_94":31,"_55":56,"_108":148,"_70":106,"_107":149},"emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1740674013689],"updatedAt",["D",1785420707976],91,"lockfileKey","1785420708123-esm.town_v_templates_react-hono-starter@91-main","templates","react-hono-starter","Starter template with client-side React & Hono server",{"_110":148,"_117":152},"https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/129cab32-3bd7-4c3e-f39b-f12900c76100/square512?exp=1789592399&sig=e3667930a878fd5db49e47cce78fe270a8ba33317e34775a1ada2dd4a7c49d8d",{"_49":187,"_38":188,"_36":189,"_159":-5,"_47":48,"_46":170,"_160":65,"_44":190,"_13":69,"_39":185,"_41":-5,"_30":31,"_163":-5,"_33":191},{"_49":181,"_38":182,"_36":183,"_159":-5,"_47":48,"_46":178,"_160":65,"_44":184,"_13":69,"_39":185,"_41":-5,"_30":31,"_163":-5,"_33":186},{"_49":173,"_38":174,"_36":175,"_159":-5,"_47":48,"_46":176,"_160":65,"_44":177,"_13":178,"_39":26,"_41":179,"_30":31,"_163":-5,"_33":180},{"_49":165,"_38":166,"_36":167,"_159":-5,"_47":48,"_46":168,"_160":65,"_44":169,"_13":170,"_39":26,"_41":171,"_30":31,"_163":-5,"_33":172},{"_49":158,"_38":34,"_36":37,"_159":-5,"_47":48,"_46":14,"_160":31,"_44":161,"_13":162,"_39":40,"_41":43,"_30":31,"_163":51,"_33":164},"87fff4a0-8655-47cc-b950-5f7a1a79b33f","parentId","latest",["D",1788624563668],9,"label",[34],"f7550f94-d3cf-4a91-a523-4e6b6ce98e34","README.md","019f4d88-ebd3-7218-9092-1474528366c9",16,["D",1784738706111],2,"# Charlottesville Area Landlord Directory\n\nA searchable directory of rental properties, apartment complexes, and property\nmanagers, maintained by [The Haven](https://thehaven.org) to help clients find\nhousing. Replaces a manually-updated Excel spreadsheet.\n\n- **Browse**: anyone with the link can search, filter by area, and print.\n- **Edit**: staff sign in with a shared password (`ADMIN_PASSWORD` env var) to\n add, edit, delete, or mark a listing's contact info as verified today.\n\nData was imported from the \"Landlord Directory FY25\" spreadsheet in July 2026\nand lives in this val's SQLite database (`backend/db.ts`).\n\n## Automated Discovery\n\nA weekly cron job (`backend/cron.ts`, runs Mondays 9 AM UTC) uses OpenAI's web\nsearch to find new rental properties and property management companies in the\nCharlottesville area that aren't already in the directory. New finds are:\n\n1. Inserted into the database automatically.\n2. Tagged with \"AI-discovered — verify contact info\" in the notes field.\n3. Left for staff to review and verify contact details.\n\nThe discovery logic lives in `backend/discover.ts` and uses\n[`std/openai`](https://www.val.town/v/std/openai) with the Responses API,\nthe `web_search` tool, and structured outputs.\n",[166],"f616a46f-a562-4800-a934-50384a01d12c","AGENTS.md","d017a62a-85ec-11f1-ab6d-1607ee4eb77e",28,["D",1784739454441],1,"# Haven Landlord Directory — AGENTS.md\n\nSearchable rental property directory for The Haven (Charlottesville, VA nonprofit).\nReplaces a manually-maintained Excel spreadsheet. Staff can browse, search, and\nedit listings via a password-protected web UI.\n\n## File Map\n\n```\nindex.ts # HTTP entrypoint — Hono router, serves frontend + API\nbackend/\n db.ts # SQLite schema, CRUD functions, seed-on-first-run\n seed.ts # Initial 93 listings imported from FY25 spreadsheet\n discover.ts # AI discovery logic — OpenAI web_search + structured outputs\n cron.ts # Weekly interval — discovers new listings, inserts into DB\nfrontend/\n index.html # Static HTML shell (loads React bundle)\n index.tsx # React entrypoint\n types.ts # Listing / ListingInput TypeScript interfaces\n favicon.svg\n components/\n App.tsx # Root component — search, filter, auth state\n ListingsTable.tsx # Table view with search, area filter & sortable columns\n ListingForm.tsx # Add/edit form (staff only)\n```\n\n## Architecture\n\n- **Backend**: Hono router in `index.ts` — serves static frontend files and a\n REST API (`/api/listings` CRUD). Staff auth via `x-admin-password` header\n checked against `ADMIN_PASSWORD` env var.\n- **Database**: Project-scoped SQLite (`listings_v1` table) accessed via\n `std/sqlite/main.ts`. Seeded from `backend/seed.ts` on first run.\n- **Frontend**: React SPA bundled in-browser, components in `frontend/components/`.\n- **Automated discovery**: Weekly cron (`backend/cron.ts`) uses `std/openai`\n Responses API with `web_search` tool and structured outputs to find new\n rental properties. New entries are tagged \"AI-discovered — verify contact info\".\n\n## Env Vars\n\n- `ADMIN_PASSWORD` — shared password for staff edit access\n",[174],"e500cffe-1cb9-4041-9dd5-9f74efd2410a","frontend","019f4d88-ebd3-7218-9092-104a308a0db8",["D",1783712246617],"directory",[182],"83688e9c-c04c-4cea-8600-2b3d4f973f05","backend","102650c1-16df-4425-91f4-ad09aa6fdd92",["D",1783712386625],[188],"pulls","branches","forks","envVars",{"_199":178,"_201":69},"connections",{"_199":69,"_200":69},"count","unfilledCount","emptyCount",{"_49":187,"_38":188,"_36":189,"_159":-5,"_47":48,"_46":170,"_160":65,"_44":345,"_13":69,"_39":185,"_41":-5,"_30":31,"_163":-5,"_222":346,"_33":347},{"_49":337,"_38":338,"_36":339,"_159":189,"_47":48,"_46":340,"_160":65,"_44":341,"_13":69,"_39":236,"_41":342,"_30":31,"_163":-5,"_222":343,"_33":344},{"_49":328,"_38":329,"_36":330,"_159":189,"_47":48,"_46":331,"_160":31,"_44":332,"_13":178,"_39":333,"_41":334,"_30":31,"_163":-5,"_222":335,"_33":336},{"_49":320,"_38":321,"_36":322,"_159":189,"_47":48,"_46":323,"_160":31,"_44":324,"_13":250,"_39":236,"_41":325,"_30":31,"_163":-5,"_222":326,"_33":327},{"_49":312,"_38":313,"_36":314,"_159":189,"_47":48,"_46":315,"_160":65,"_44":316,"_13":170,"_39":236,"_41":317,"_30":31,"_163":-5,"_222":318,"_33":319},{"_49":305,"_38":306,"_36":307,"_159":189,"_47":48,"_46":170,"_160":65,"_44":308,"_13":69,"_39":236,"_41":309,"_30":31,"_163":-5,"_222":310,"_33":311},{"_49":296,"_38":297,"_36":298,"_159":189,"_47":48,"_46":299,"_160":65,"_44":300,"_13":301,"_39":236,"_41":302,"_30":31,"_163":-5,"_222":303,"_33":304},{"_49":181,"_38":182,"_36":183,"_159":-5,"_47":48,"_46":178,"_160":65,"_44":293,"_13":69,"_39":185,"_41":-5,"_30":31,"_163":-5,"_222":294,"_33":295},{"_49":289,"_38":271,"_36":265,"_159":183,"_47":48,"_46":178,"_160":65,"_44":290,"_13":69,"_39":185,"_41":-5,"_30":31,"_163":-5,"_222":291,"_33":292},{"_49":280,"_38":281,"_36":282,"_159":265,"_47":48,"_46":283,"_160":31,"_44":284,"_13":285,"_39":236,"_41":286,"_30":31,"_163":-5,"_222":287,"_33":288},{"_49":272,"_38":273,"_36":274,"_159":265,"_47":48,"_46":275,"_160":31,"_44":276,"_13":69,"_39":236,"_41":277,"_30":31,"_163":-5,"_222":278,"_33":279},{"_49":262,"_38":263,"_36":264,"_159":265,"_47":48,"_46":266,"_160":31,"_44":267,"_13":178,"_39":236,"_41":268,"_30":31,"_163":-5,"_222":269,"_33":270},{"_49":255,"_38":256,"_36":257,"_159":183,"_47":48,"_46":178,"_160":65,"_44":258,"_13":69,"_39":26,"_41":259,"_30":31,"_163":-5,"_222":260,"_33":261},{"_49":247,"_38":248,"_36":249,"_159":183,"_47":48,"_46":250,"_160":31,"_44":251,"_13":178,"_39":26,"_41":252,"_30":31,"_163":-5,"_222":253,"_33":254},{"_49":240,"_38":241,"_36":242,"_159":183,"_47":48,"_46":178,"_160":65,"_44":243,"_13":69,"_39":236,"_41":244,"_30":31,"_163":-5,"_222":245,"_33":246},{"_49":231,"_38":232,"_36":233,"_159":183,"_47":48,"_46":234,"_160":31,"_44":235,"_13":170,"_39":236,"_41":237,"_30":31,"_163":-5,"_222":238,"_33":239},{"_49":173,"_38":174,"_36":175,"_159":-5,"_47":48,"_46":176,"_160":65,"_44":228,"_13":178,"_39":26,"_41":179,"_30":31,"_163":-5,"_222":229,"_33":230},{"_49":165,"_38":166,"_36":167,"_159":-5,"_47":48,"_46":168,"_160":65,"_44":225,"_13":170,"_39":26,"_41":171,"_30":31,"_163":-5,"_222":226,"_33":227},{"_49":158,"_38":34,"_36":37,"_159":-5,"_47":48,"_46":14,"_160":31,"_44":221,"_13":162,"_39":40,"_41":43,"_30":31,"_163":51,"_222":223,"_33":224},["D",1788624563668],"children",[],[34],["D",1784738706111],[],[166],["D",1784739454441],[],[174],"f80cb724-9000-4344-830e-1bc506bed43d","types.ts","d290824a-7c97-11f1-a7f6-1607ee4eb77e",42,["D",1788374214706],"script","export interface Listing {\n id: number;\n location: string;\n name: string;\n phone: string;\n website: string;\n website_label: string;\n notes: string;\n contact_updated: string;\n created_at: string;\n updated_at: string;\n}\n\nexport type ListingInput = Omit;\n\nexport const emptyListing: ListingInput = {\n location: \"\",\n name: \"\",\n phone: \"\",\n website: \"\",\n website_label: \"\",\n notes: \"\",\n contact_updated: \"\",\n};\nexport interface DiscoveredListing {\n name: string;\n location: string;\n phone: string;\n website: string;\n notes: string;\n}",[],[182,232],"e59f18ed-e3f3-4ac7-8c1f-26dc148fb4f8","index.tsx","019f4d88-ebd3-7218-9092-0cf3304a67d4",["D",1783712246617],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { createRoot } from \"https://esm.sh/react-dom@18.2.0/client\";\nimport { App } from \"./components/App.tsx\";\n\nconst root = document.getElementById(\"root\");\nif (!root) {\n throw new Error(\"No root element found\");\n}\n\ncreateRoot(root).render();",[],[182,241],"0d5d47d0-16ea-464b-8e47-a5b76e805f6b","index.html","019f4d88-ebd3-7218-9092-0bf6e7622fee",10,["D",1783712763233],"\n\n \n \n \n Charlottesville Area Landlord Directory\n \n \n \n \n

\n \n \n \n\n",[],[182,248],"dcdea6f9-7810-432f-9ba2-4cc857d89a29","favicon.svg","019f4d88-ebd3-7218-9092-072314b1de7e",["D",1783712246617],"\n",[],[182,256],"b4516edb-6933-4440-a92c-f65477a17c41","ListingsTable.tsx","ded182a2-7c97-11f1-8c37-1607ee4eb77e","019f4d88-ebd3-7218-9092-021606bdd3ce",27,["D",1784739421499],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport type { Listing } from \"../types.ts\";\n\ntype SortKey = \"created_at\" | \"name\" | \"location\";\n\nfunction telHref(phone: string): string | null {\n const match = phone.match(/\$?\\d{3}\$?[-.\\s]?\\d{3}[-.\\s]?\\d{4}/);\n return match ? `tel:${match[0].replace(/\\D/g, \"\")}` : null;\n}\n\nfunction WebsiteCell({ listing }: { listing: Listing }) {\n if (listing.website) {\n const label = listing.website_label || new URL(listing.website).hostname;\n return (\n \n {label}\n \n );\n }\n if (listing.website_label) {\n // Legacy rows from the spreadsheet where only the link text survived:\n // link to a web search so the site is still one click away\n return (\n \n {listing.website_label}\n \n );\n }\n return null;\n}\n\nfunction SortHeader({\n label,\n sortKey,\n activeKey,\n sortDir,\n onSort,\n}: {\n label: string;\n sortKey: SortKey;\n activeKey: SortKey;\n sortDir: \"asc\" | \"desc\";\n onSort: (key: SortKey) => void;\n}) {\n const active = sortKey === activeKey;\n return (\n onSort(activeKey)}\n >\n {label}\n {active && {sortDir === \"asc\" ? \"↑\" : \"↓\"}}\n \n );\n}\n\ninterface Props {\n listings: Listing[];\n staff: boolean;\n sortKey: SortKey;\n sortDir: \"asc\" | \"desc\";\n onSort: (key: SortKey) => void;\n onEdit: (l: Listing) => void;\n onDelete: (l: Listing) => void;\n onMarkVerified: (l: Listing) => void;\n}\n\nexport function ListingsTable({\n listings,\n staff,\n sortKey,\n sortDir,\n onSort,\n onEdit,\n onDelete,\n onMarkVerified,\n}: Props) {\n return (\n \n \n \n \n \n \n \n \n \n \n {staff && }\n \n \n \n {listings.map((l) => (\n \n \n \n \n \n \n \n \n {staff && (\n \n )}\n \n ))}\n \n

Phone	Website	Notes	Contact verified	Actions
{l.name \|\| (no name)}	{l.location}	\n {telHref(l.phone)\n ? {l.phone}\n : l.phone}\n	\n \n	{l.notes}	{l.contact_updated}	{l.created_at}	\n \n \n \n

\n );\n}\n",[],[182,271,263],"components","cf4e1a3f-5c2c-4a58-93e8-e2d4b99e7600","ListingForm.tsx","e7ba4d72-7c97-11f1-9fef-1607ee4eb77e",7,["D",1783712729449],"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useState } from \"https://esm.sh/react@18.2.0\";\nimport type { ListingInput } from \"../types.ts\";\n\ninterface Props {\n initial: ListingInput;\n title: string;\n onSave: (input: ListingInput) => Promise;\n onCancel: () => void;\n}\n\nconst inputClass = \"border border-gray-300 rounded px-2 py-1 w-full\";\n\nexport function ListingForm({ initial, title, onSave, onCancel }: Props) {\n const [form, setForm] = useState(initial);\n const [saving, setSaving] = useState(false);\n\n const field = (label: string, key: keyof ListingInput, placeholder = \"\") => (\n \n {label}\n setForm({ ...form, [key]: e.target.value })}\n />\n \n );\n\n return (\n {\n e.preventDefault();\n setSaving(true);\n try {\n await onSave(form);\n } finally {\n setSaving(false);\n }\n }}\n >\n

{title}

\n {field(\"Property / Landlord name\", \"name\")}\n {field(\"Location\", \"location\", \"e.g. Charlottesville, Albemarle\")}\n {field(\"Phone\", \"phone\")}\n {field(\"Website URL\", \"website\", \"https://…\")}\n {field(\"Website label (text to show)\", \"website_label\")}\n {field(\"Notes\", \"notes\", \"e.g. Apartment complex, shared kitchen\")}\n {field(\"Contact verified (date)\", \"contact_updated\", \"e.g. 7/10/2026\")}\n

\n \n {saving ? \"Saving…\" : \"Save\"}\n \n \n

\n \n );\n}\n",[],[182,271,273],"ce151eb8-37ed-4ec7-afc4-46d240c956ec","App.tsx","019f4d88-ebd3-7218-9091-fa024ee09187",49,["D",1788378866463],13,"/** @jsxImportSource https://esm.sh/react@18.2.0 */\nimport { useEffect, useMemo, useState } from \"https://esm.sh/react@18.2.0\";\nimport { emptyListing, type DiscoveredListing, type Listing, type ListingInput } from \"../types.ts\";\nimport { ListingForm } from \"./ListingForm.tsx\";\nimport { ListingsTable } from \"./ListingsTable.tsx\";\n\nconst AREAS = [\n \"Charlottesville\",\n \"Albemarle\",\n \"Louisa\",\n \"Greene\",\n \"Orange\",\n \"Nelson\",\n \"Fluvanna\",\n \"Culpeper\",\n \"Waynesboro\",\n];\n\nexport function App() {\n const [listings, setListings] = useState([]);\n const [loading, setLoading] = useState(true);\n const [query, setQuery] = useState(\"\");\n const [area, setArea] = useState(\"\");\n const [sortKey, setSortKey] = useState<\"created_at\" | \"name\" | \"location\">(\"created_at\");\n const [sortDir, setSortDir] = useState<\"asc\" | \"desc\">(\"desc\");\n const [password, setPassword] = useState(localStorage.getItem(\"staffPassword\") ?? \"\");\n const [editing, setEditing] = useState(null);\n const [areaResults, setAreaResults] = useState(null);\n const [searching, setSearching] = useState(false);\n const [added, setAdded] = useState>(new Set());\n\n const staff = password !== \"\";\n\n async function refresh() {\n const res = await fetch(\"/api/listings\");\n setListings(await res.json());\n setLoading(false);\n }\n useEffect(() => {\n refresh();\n }, []);\n\n const filtered = useMemo(() => {\n const q = query.trim().toLowerCase();\n const result = listings.filter((l) => {\n if (area && !l.location.toLowerCase().includes(area.toLowerCase())) return false;\n if (!q) return true;\n return [l.name, l.location, l.phone, l.notes, l.website_label, l.website]\n .join(\" \")\n .toLowerCase()\n .includes(q);\n });\n const dir = sortDir === \"asc\" ? 1 : -1;\n return result.sort((a, b) => {\n const av = (a[sortKey] || \"\").toString().toLowerCase();\n const bv = (b[sortKey] || \"\").toString().toLowerCase();\n if (av < bv) return -1 * dir;\n if (av > bv) return 1 * dir;\n return 0;\n });\n }, [listings, query, area, sortKey, sortDir]);\n\n function onSort(key: \"created_at\" | \"name\" | \"location\") {\n if (sortKey === key) {\n setSortDir((d) => d === \"asc\" ? \"desc\" : \"asc\");\n } else {\n setSortKey(key);\n setSortDir(key === \"created_at\" ? \"desc\" : \"asc\");\n }\n }\n\n async function signIn() {\n const attempt = prompt(\"Staff password:\");\n if (!attempt) return;\n const res = await fetch(\"/api/login\", {\n method: \"POST\",\n headers: { \"x-admin-password\": attempt },\n });\n if (res.ok) {\n localStorage.setItem(\"staffPassword\", attempt);\n setPassword(attempt);\n } else {\n alert(\"Wrong password\");\n }\n }\n\n function signOut() {\n localStorage.removeItem(\"staffPassword\");\n setPassword(\"\");\n setEditing(null);\n }\n\n async function apiWrite(method: string, path: string, body?: ListingInput) {\n const res = await fetch(path, {\n method,\n headers: { \"x-admin-password\": password, \"content-type\": \"application/json\" },\n body: body ? JSON.stringify(body) : undefined,\n });\n if (!res.ok) {\n alert(`Save failed (${res.status}). If you were signed in a while ago, sign in again.`);\n return false;\n }\n await refresh();\n return true;\n }\n\n async function save(input: ListingInput) {\n const ok = editing === \"new\"\n ? await apiWrite(\"POST\", \"/api/listings\", input)\n : await apiWrite(\"PUT\", `/api/listings/${(editing as Listing).id}`, input);\n if (ok) setEditing(null);\n }\n\n async function remove(l: Listing) {\n if (!confirm(`Delete \"${l.name || l.phone}\"?`)) return;\n await apiWrite(\"DELETE\", `/api/listings/${l.id}`);\n }\n\n async function searchArea() {\n if (!area) return;\n setSearching(true);\n try {\n const res = await fetch(\"/api/discover-area\", {\n method: \"POST\",\n headers: { \"x-admin-password\": password, \"content-type\": \"application/json\" },\n body: JSON.stringify({ area }),\n });\n if (!res.ok) {\n alert(`Area search failed (${res.status}). If you were signed in a while ago, sign in again.`);\n return;\n }\n const data = await res.json();\n setAdded(new Set());\n setAreaResults(data.results);\n if (data.results.length === 0) {\n alert(`No new listings found for ${area} — everything found is already in the directory.`);\n }\n } finally {\n setSearching(false);\n }\n }\n\n async function addDiscovered(d: DiscoveredListing) {\n const dateStr = new Date().toISOString().slice(0, 10);\n const ok = await apiWrite(\"POST\", \"/api/listings\", {\n location: d.location || area,\n name: d.name,\n phone: d.phone || \"\",\n website: d.website || \"\",\n website_label: d.website ? d.name : \"\",\n notes: d.notes\n ? `${d.notes} — AI-discovered ${dateStr}, verify contact info`\n : `AI-discovered ${dateStr}, verify contact info`,\n contact_updated: \"\",\n });\n if (ok) setAdded((s) => new Set(s).add(d.name));\n }\n\n async function markVerified(l: Listing) {\n if (!l.website) {\n const open = confirm(\"This listing has no website, so it can't be auto-checked. Verify it manually, then press OK to stamp today's date as verified.\");\n if (open) {\n const today = new Date().toLocaleDateString(\"en-US\");\n await apiWrite(\"PUT\", `/api/listings/${l.id}`, { ...l, contact_updated: today });\n }\n return;\n }\n setLoading(true);\n try {\n const res = await fetch(`/api/listings/${l.id}/auto-verify`, {\n method: \"POST\",\n headers: { \"x-admin-password\": password },\n });\n if (!res.ok) {\n alert(`Auto-check failed to run (${res.status}). If you were signed in a while ago, sign in again.`);\n return;\n }\n const result = await res.json();\n if (result.verified) {\n const msg = result.foundPhone\n ? `✓ Auto-check passed: ${result.reason}\\n\\nPhone number \"${result.phone}\" was added from the website and the listing is marked verified today.`\n : `✓ Auto-check passed: ${result.reason}\\n\\nListing is marked verified today.`;\n alert(msg);\n } else {\n const open = confirm(\n `✗ Auto-check failed: ${result.reason}\\n\\n` +\n \"Please verify this listing manually (check the site and phone number yourself).\\n\\n\" +\n \"Do you want to open the website now?\",\n );\n if (open) window.open(l.website, \"_blank\", \"noopener\");\n }\n } finally {\n setLoading(false);\n await refresh();\n }\n }\n\n return (\n

Charlottesville Area Landlord Directory

\n Rental properties, apartment complexes, and property managers — maintained by{\" \"}\n The Haven.\n

\n\n

\n setQuery(e.target.value)}\n />\n {\n setArea(e.target.value);\n setAreaResults(null);\n }}\n >\n \n {AREAS.map((a) => )}\n \n {staff && area && (\n \n {searching ? `Searching ${area}…` : `🔍 Search ${area}`}\n \n )}\n \n \n Export to Excel\n \n {filtered.length} of {listings.length} listings\n \n {staff\n ? (\n <>\n setEditing(\"new\")}\n className=\"bg-blue-700 text-white rounded px-3 py-1.5\"\n >\n + Add listing\n \n \n \n )\n : }\n

\n\n {areaResults !== null && (\n

\n AI search results: {area}{\" \"}\n ({areaResults.length} found)\n

\n \n

\n {areaResults.length === 0 && (\n

\n No new listings found — everything in this area may already be in the directory.\n

\n )}\n {areaResults.map((d) => {\n const isAdded = added.has(d.name);\n return (\n

\n {d.name} ({d.location})\n

{d.notes || \"No description\"}

\n {d.phone &&

{d.phone}

}\n

\n {d.website && (\n \n visit site\n \n )}\n addDiscovered(d)}\n disabled={isAdded}\n className={isAdded ? \"text-gray-400\" : \"text-green-700 hover:underline\"}\n >\n {isAdded ? \"added ✓\" : \"+ add\"}\n \n

\n );\n })}\n

\n )}\n\n {editing && (\n setEditing(null)}\n />\n )}\n\n {loading ?

Loading…

: (\n \n )}\n\n \n

\n );\n}\n",[],[182,271,281],"ae887443-2e14-4b3e-9163-23d32458cece",["D",1783712246617],[211,212,213],[182,271],["D",1783712246617],[210,214,215,216,217],[182],"8ee023df-381b-4b36-b003-192319b90de3","verify.ts","dbb2adce-a6fb-11f1-8620-1607ee4eb77e",56,["D",1788624351394],4,"import type { Listing } from \"./db.ts\";\n\nexport interface AutoCheckResult {\n verified: boolean; // true only if site reachable AND phone found\n siteStatus: number | null; // HTTP status, null if request failed / no site\n phoneFound: boolean | null; // null = couldn't check (no site or no phone)\n foundPhone: string | null; // phone number discovered on the page (when listing had none)\n reason: string; // human-readable summary for the UI\n}\n\nfunction digits(s: string): string {\n return s.replace(/\\D/g, \"\");\n}\n\n/** Find a US-style phone number in raw page text, formatted like 434-555-1234. */\nfunction findPhoneOnPage(text: string): string | null {\n const match = text.match(/(?:\\+?1[-.\\s]?)?\$?\\d{3}\$?[-.\\s]\\d{3}[-.\\s]\\d{4}/);\n return match ? match[0] : null;\n}\n\n/** Fetch a listing's homepage (only) and return its text, capped at ~500 KB. */\nexport async function fetchPageText(url: string): Promise<{ text: string | null; status: number | null }> {\n let res: Response;\n try {\n res = await fetch(url, {\n redirect: \"follow\",\n signal: AbortSignal.timeout(10_000),\n headers: { \"user-agent\": \"Mozilla/5.0 (compatible; HavenDirectoryCheck/1.0)\" },\n });\n } catch {\n return { text: null, status: null };\n }\n\n if (!res.ok) return { text: null, status: res.status };\n\n try {\n const reader = res.body?.getReader();\n let text = \"\";\n if (reader) {\n const decoder = new TextDecoder();\n while (text.length < 500_000) {\n const { done, value } = await reader.read();\n if (done) break;\n text += decoder.decode(value, { stream: true });\n }\n reader.cancel().catch(() => {});\n } else {\n text = await res.text();\n }\n // Strip tags so numbers inside markup attributes don't skew matching\n return { text: text.replace(/<[^>]*>/g, \" \"), status: res.status };\n } catch {\n return { text: null, status: res.status };\n }\n}\n\n/**\n * Auto-verify a listing's contact info: fetch the homepage (only), confirm it\n * responds OK, then:\n * - if the listing has a phone number, confirm it appears on the page\n * (compared digits-only, so formatting differences don't matter)\n * - if the listing has NO phone number, look for one on the page and return it\n * so the caller can fill it in\n */\nexport async function autoCheckContact(listing: Listing): Promise {\n if (!listing.website) {\n return {\n verified: false,\n siteStatus: null,\n phoneFound: null,\n foundPhone: null,\n reason: \"no website listed\",\n };\n }\n\n const url = listing.website.startsWith(\"http\") ? listing.website : `https://${listing.website}`;\n const { text, status } = await fetchPageText(url);\n\n if (text === null) {\n return {\n verified: false,\n siteStatus: status,\n phoneFound: null,\n foundPhone: null,\n reason: status === null\n ? \"website unreachable\"\n : `site responded ${status} (not OK)`,\n };\n }\n\n const phoneDigits = digits(listing.phone);\n if (phoneDigits.length >= 7) {\n const phoneFound = digits(text).includes(phoneDigits);\n return {\n verified: phoneFound,\n siteStatus: status,\n phoneFound,\n foundPhone: null,\n reason: phoneFound\n ? `site responded ${status}; phone found on page`\n : `site responded ${status}; phone NOT found on page`,\n };\n }\n\n // No usable phone in the directory — try to pull one off the page\n const found = findPhoneOnPage(text);\n return {\n verified: found !== null,\n siteStatus: status,\n phoneFound: found !== null,\n foundPhone: found,\n reason: found\n ? `site responded ${status}; phone found on page: ${found}`\n : `site responded ${status}; no phone number found on page`,\n };\n}\n\n// ---------- Extended checks: rental-site detection & FMR/HUD references ----------\n\nconst RENTAL_KEYWORDS = [\n \"rent\", \"rental\", \"apartment\", \"lease\", \"tenant\", \"housing\", \"property\",\n \"unit\", \"vacancy\", \"landlord\", \"residency\", \"for rent\", \"available now\",\n];\n\nconst FMR_KEYWORDS = [\n \"fair market rent\", \"fmr\", \"hud guidelines\", \"housing choice voucher\",\n \"section 8\", \"hud.org\", \"hud.gov\",\n];\n\nfunction countKeywords(text: string, keywords: string[]): string[] {\n const lower = text.toLowerCase();\n return keywords.filter((k) => lower.includes(k));\n}\n\nexport interface ExtendedCheck {\n isRentalSite: boolean;\n rentalSignals: string[];\n fmrReferences: string[];\n}\n\n/**\n * Analyze already-fetched page text for:\n * - whether it looks like a rental/property site\n * - any references to Fair Market Rent / HUD guidelines\n */\nexport function extendedChecks(pageText: string): ExtendedCheck {\n const rentalSignals = countKeywords(pageText, RENTAL_KEYWORDS);\n const fmrReferences = countKeywords(pageText, FMR_KEYWORDS);\n return {\n isRentalSite: rentalSignals.length >= 2,\n rentalSignals,\n fmrReferences,\n };\n}\n",[],[188,297],"b5fa7834-3e4a-4260-a261-7e1c83d58b2d","seed.ts","1b60461e-7c97-11f1-9075-1607ee4eb77e",["D",1783712386625],"// Initial data imported from The Haven's \"Landlord Directory FY25\" Google Sheet\n// (Properties and Property Mgt Companies List tab), July 2026.\n// website: real URL when the sheet had one; websiteLabel: hyperlink text whose\n// URL wasn't recoverable from the export; notes: descriptor text from the sheet.\n\nexport interface SeedListing {\n location: string;\n name: string;\n phone: string;\n website?: string;\n websiteLabel?: string;\n notes?: string;\n}\n\nexport const seedListings: SeedListing[] = [\n { location: \"Albemarle\", name: \"1st Dominon Realty - Various Properties\", phone: \"434-531-6688\", website: \"https://1stdominionrealty.com\" },\n { location: \"Albemarle\", name: \"Access Properties - Various Properties\", phone: \"(434) 296-7227\", websiteLabel: \"Explore Our Properties - Access Properties LLC\" },\n { location: \"Charlottesville/Albemarle\", name: \"Ally Properties - Various Properties\", phone: \"434-207-6557\", website: \"https://www.yourallypm.com\" },\n { location: \"Albemarle\", name: \"Wilton Farm Apartments\", phone: \"434-295-7368\", websiteLabel: \"Wilton Farm Apartments\" },\n { location: \"Albemarle\", name: \"Rio Hill Apartments\", phone: \"434-974-6377\", websiteLabel: \"Rio Hill Apartments\" },\n { location: \"Albemarle\", name: \"Spark Charlottesville\", phone: \"434-973-6432\", websiteLabel: \"Spark Charlottesville Apartments\" },\n { location: \"Albemarle\", name: \"Barracks West Apartments\", phone: \"434-542-8052\", websiteLabel: \"Barracks West\" },\n { location: \"Albemarle\", name: \"Braden Property Management - Various Properties\", phone: \"434-973-3003\", websiteLabel: \"Braden Property Management\" },\n { location: \"Charlottesville\", name: \"Carratt Apartments\", phone: \"434-979-7307\", websiteLabel: \"Carratt Apartments - Charlottesville\" },\n { location: \"Albemarle\", name: \"Cobalt Ridge\", phone: \"434-973-3620\", websiteLabel: \"Cobalt Ridge\" },\n { location: \"Charlottesville\", name: \"Carlton View Apartments\", phone: \"434-422-2110\", websiteLabel: \"Carlton Views\" },\n { location: \"Charlottesville\", name: \"Greenstone on 5th\", phone: \"434-295-3094\", websiteLabel: \"Greenstone on 5th Apartments | Community Housing Partners\" },\n { location: \"Orange\", name: \"Spicers Mill Apartments\", phone: \"540-672-3250\", websiteLabel: \"Community Housing Partners\" },\n { location: \"Charlottesville\", name: \"Community Service Housing - Various Properties\", phone: \"434-978-2007\", websiteLabel: \"Community Services Housing, Inc\" },\n { location: \"Charlottesville City, Albemarle County, Scottsville and Nelson County\", name: \"Various Properties (Piedmont Housing Alliance)\", phone: \"\", websiteLabel: \"Our Communities - Piedmont Housing Alliance\", notes: \"View website for contact information\" },\n { location: \"Charlottesville\", name: \"Spruce Street Group Home\", phone: \"434-971-2525\", websiteLabel: \"Community Services Housing, Inc\" },\n { location: \"Louisa\", name: \"Waverly Place\", phone: \"540-603-2477\", websiteLabel: \"Waverly Place - Louisa\" },\n { location: \"Charlottesville\", name: \"D.M. Rothwell - Various Properties\", phone: \"434-977-7676\", websiteLabel: \"D.M. Rothwell, Inc\" },\n { location: \"Charlottesville, Crozet and Lexington\", name: \"BMC Property Management - Various Properties\", phone: \"434-977-6400\", websiteLabel: \"BMC Property Management\" },\n { location: \"Charlottesville City/Albemarle County\", name: \"BlueSky Property Management - Various Properties\", phone: \"434-295-4663\", websiteLabel: \"BlueSky Property Management\" },\n { location: \"Charlottesville, Albemarle and Harrisonburg\", name: \"Barclay Place, Tarleton Square, WestGate Apartments, Solomon Court Apartments, Charlottesville Towers, Residence at 218 and Park Apartments (Harrisonburg)\", phone: \"434-296-4141\", website: \"https://www.gemc.com/residential.cfm\" },\n { location: \"Louisa\", name: \"Pine Ridge Apartments\", phone: \"540-967-9657\", notes: \"Website unavailable\" },\n { location: \"Albemarle\", name: \"Timberland Park Apartments\", phone: \"434-956-4784\", websiteLabel: \"Timberland Park | Apartments in Charlottesville, VA\" },\n { location: \"Nelson\", name: \"Lovingston Ridge Apartments\", phone: \"(434) 263-7724\", notes: \"Website unavailable\" },\n { location: \"Charlottesville and Albemarle\", name: \"Godfrey Property Management - Various Properties\", phone: \"434-979-8155\", websiteLabel: \"Godfrey Property Management\" },\n { location: \"Charlottesville\", name: \"Ephphatha Village Apartments\", phone: \"434-202-2265\", websiteLabel: \"Ephphatha Village Apartments | Community Housing Partners\" },\n { location: \"Albemarle\", name: \"Southwood\", phone: \"434-293-9066\", websiteLabel: \"Southwood Community | Find your Home\" },\n { location: \"Albemarle\", name: \"Hearthwood Apartments\", phone: \"434-260-1903\", websiteLabel: \"Hearthwood Apartments\" },\n { location: \"Louisa\", name: \"Club Hill Apartments\", phone: \"540-967-0965\", notes: \"Website unavailable\" },\n { location: \"Culpeper\", name: \"JHP Rental Properties - Various Properties\", phone: \"540-967-2641\", websiteLabel: \"Rental\" },\n { location: \"Orange\", name: \"Round Hill Meadows\", phone: \"540-672-4827\", websiteLabel: \"Round Hill Meadows\" },\n { location: \"Charlottesville and Albemarle\", name: \"Knight Realty and Investments - Various Properties\", phone: \"(434) 981-3919\", notes: \"Website unavailable\" },\n { location: \"Albemarle\", name: \"Berkshire and Barter Court Apts.\", phone: \"434-270-7771\", websiteLabel: \"Berkshire and Barter Court Apartments\" },\n { location: \"Albemarle\", name: \"The Meadows Apartments\", phone: \"434-328-5268\", website: \"https://www.themeadows-online.com/\" },\n { location: \"Greene\", name: \"Lily Ridge Apartments\", phone: \"(434) 939-9197\", websiteLabel: \"Lily Ridge\" },\n { location: \"Louisa\", name: \"Lloyd's Real Estate - Various Properties\", phone: \"540-967-0168\", websiteLabel: \"Lloyd's Real Estate\" },\n { location: \"Charlottesville\", name: \"MSC - Various Properties\", phone: \"434-423-5400\", websiteLabel: \"MSC UVA\" },\n { location: \"Charlottesville\", name: \"Midway Manor\", phone: \"434-971-6770\", website: \"https://midwaymanorapts.com/\" },\n { location: \"Charlottesville, Albemarle, Amherst and Orange\", name: \"Montague Miller and Co. - Various Properties\", phone: \"434-973-5393\", website: \"https://www.montaguemiller.com/results/?property_category=5&cidonly=1\" },\n { location: \"Charlottesville\", name: \"Nest Realty - Various Properties\", phone: \"434-566-0121\", websiteLabel: \"Nest Realty\" },\n { location: \"Charlottesville\", name: \"New House Company\", phone: \"434-978-7900\", websiteLabel: \"The New House Company\" },\n { location: \"Albemarle\", name: \"Brookdale Apartments\", phone: \"434-282-4986\", website: \"https://www.brookdalecville.com/\" },\n { location: \"Albemarle\", name: \"Treesdale Apartments\", phone: \"434-971-7368\", websiteLabel: \"Treesdale Apartments\" },\n { location: \"Various in Virginia\", name: \"Ruckersville Mobile Home Community\", phone: \"434-760-1994\", websiteLabel: \"Roseland Communities\" },\n { location: \"\", name: \"\", phone: \"434-465-8461\" },\n { location: \"Charlottesville\", name: \"\", phone: \"434-326-4786\", notes: \"Apartment Complex\" },\n { location: \"Charlottesville\", name: \"Mews on Little High\", phone: \"434-286-3792\", notes: \"Complex\" },\n { location: \"Albemarle\", name: \"Private units in Eagle's Landing\", phone: \"434-234-3813\", notes: \"Shared\" },\n { location: \"Albemarle\", name: \"Various Properties\", phone: \"434-971-1600 x295\", notes: \"Various\" },\n { location: \"Charlottesville\", name: \"The Gleason\", phone: \"434-202-1852\", notes: \"Agent\" },\n { location: \"\", name: \"University Forum\", phone: \"434-971-1600\" },\n { location: \"Charlottesville\", name: \"Various Properties\", phone: \"434-989-2121\", notes: \"Various\" },\n { location: \"\", name: \"Various Properties\", phone: \"434-951-5155\" },\n { location: \"Charlottesville\", name: \"\", phone: \"434-760-0659\" },\n { location: \"Charlottesville\", name: \"Cavalier Court Apartments\", phone: \"434-979-7307\", notes: \"Apartment Complex\" },\n { location: \"Charlottesville\", name: \"Shamrock Gardens Apartments\", phone: \"434-979-7307\", notes: \"Apartment Complex\" },\n { location: \"Charlottesville\", name: \"\", phone: \"434-979-7307\" },\n { location: \"\", name: \"\", phone: \"434-529-0471\" },\n { location: \"\", name: \"\", phone: \"757-617-3158\" },\n { location: \"Greene\", name: \"Jack Russell Apartments\", phone: \"540-948-3916\" },\n { location: \"Greene\", name: \"Skyline Apartments\", phone: \"540-948-3916\" },\n { location: \"Fluvanna\", name: \"Various Properties\", phone: \"434-245-0894\" },\n { location: \"Lake Monticello\", name: \"Various Properties\", phone: \"434-589-4507\" },\n { location: \"\", name: \"\", phone: \"434-326-2460\" },\n { location: \"Orange\", name: \"Meadow Run Apartments\", phone: \"540-832-5350\", notes: \"Complex\" },\n { location: \"Albemarle\", name: \"Turtle Creek Condos\", phone: \"434-295-4663\" },\n { location: \"Charlottesville\", name: \"Grand Marc\", phone: \"434-293-5358\", notes: \"Apartment Building\" },\n { location: \"Charlottesville/Albemarle County\", name: \"Wade Property Management - Various Properties\", phone: \"434-973-3294\", websiteLabel: \"Wade Rentals in Charlottesville, VA\" },\n { location: \"Charlottesville\", name: \"100 West South Street\", phone: \"434-971-8860\", notes: \"Apartment with shared kitchen\" },\n { location: \"Charlottesville\", name: \"Camden Plaza\", phone: \"434-971-8860\" },\n { location: \"Charlottesville\", name: \"Comyn Hall\", phone: \"434-971-8860\", notes: \"Apartment in House\" },\n { location: \"Charlottesville\", name: \"\", phone: \"434-971-8860\", notes: \"House with apartments\" },\n { location: \"Albemarle\", name: \"Arbor Crest\", phone: \"855-901-1116\" },\n { location: \"Orange\", name: \"Bellview Senior Apartments\", phone: \"(540) 661-3300\" },\n { location: \"Waynesboro\", name: \"Brandon Ladd Apartments\", phone: \"540-949-5000\" },\n { location: \"Albemarle\", name: \"Carriage Hill\", phone: \"434-971-8439\" },\n { location: \"Charlottesville\", name: \"Cavalier Crossing\", phone: \"434-363-9889\" },\n { location: \"Charlottesville\", name: \"Claremont at Carriage Hill\", phone: \"434-989-1559\" },\n { location: \"\", name: \"Eagle's Landing\", phone: \"434-984-5808\" },\n { location: \"Louisa/Gordonsville\", name: \"Eastgate Apartments\", phone: \"540-832-5837\" },\n { location: \"Albemarle\", name: \"Eastham Village\", phone: \"434-977-2650\" },\n { location: \"Charlottesville City/Albemarle County\", name: \"Various Properties (MSC)\", phone: \"434-423-5400\", websiteLabel: \"MSC UVA\" },\n { location: \"Louisa\", name: \"Epworth Manor Apartments\", phone: \"540-967-1696\", website: \"https://epworthmanorapartments.com\" },\n { location: \"Albemarle\", name: \"Fountain Court\", phone: \"434-977-2650\", websiteLabel: \"Fountain Court Apartments\" },\n { location: \"Charlottesville\", name: \"Ivy Gardens\", phone: \"434-220-6650\", websiteLabel: \"Ivy Garden Apartments\" },\n { location: \"Charlottesville\", name: \"Jeffersonian Apartments\", phone: \"434-977-3070 or 833-698-1081\", website: \"https://www.thejeffersonianapts.com\" },\n { location: \"Albemarle\", name: \"Mallside Forest Apartments\", phone: \"434-424-0371\", websiteLabel: \"Security Properties\" },\n { location: \"Albemarle\", name: \"North Woods at the Four Seasons\", phone: \"434-688-4966\", website: \"https://www.livewithnorthwoods.com\" },\n { location: \"Albemarle\", name: \"Park View at South Pantops\", phone: \"434-923-0200\", website: \"https://southpantops.enterpriseresidential.org\" },\n { location: \"Charlottesville\", name: \"The Crossings and Fourth and Preston\", phone: \"434-227-4251\", websiteLabel: \"Communities We Serve | SupportWorks Housing\" },\n { location: \"Charlottesville\", name: \"The Flats @ West Village\", phone: \"844-236-1118\", website: \"https://www.flatsatwestvillage.com\" },\n { location: \"Albemarle\", name: \"University Heights Apartments\", phone: \"434-326-1337\", website: \"https://www.uheights.net\" },\n { location: \"Albemarle\", name: \"Woodlands of Charlottesville\", phone: \"434-421-3191\", website: \"https://www.woodlandsofcharlottesville.com\" },\n];\n",[],[188,306],"f61c88ac-411d-4d7b-9982-d3ae52196919","discover.ts","8dc14ce0-85ec-11f1-a849-1607ee4eb77e",39,["D",1788374185326],"import { ValTownOpenAI } from \"https://esm.town/v/std/openai/main.ts\";\nimport type { Listing } from \"./db.ts\";\n\nexport interface DiscoveredListing {\n name: string;\n location: string;\n phone: string;\n website: string;\n notes: string;\n}\n\n/**\n * Build the system instructions that tell the model what we're looking for\n * and what's already in the directory so it doesn't duplicate.\n */\nfunction buildInstructions(existing: Listing[]): string {\n const names = existing\n .filter((l) => l.name.trim())\n .map((l) => `- ${l.name} (${l.location})`)\n .join(\"\\n\");\n\n const phones = existing\n .filter((l) => l.phone.trim())\n .map((l) => l.phone)\n .join(\", \");\n\n return `You are a housing researcher for The Haven, a nonprofit in Charlottesville, Virginia that helps clients find rental housing.\n\nYour job: search the web for rental properties, apartment complexes, and property management companies in the Charlottesville, VA region and nearby counties that are NOT already in our directory.\n\nTarget areas: Charlottesville, Albemarle County, Crozet, Louisa, Gordonsville, Orange, Greene, Fluvanna, Lake Monticello, Nelson, Lovingston, Waynesboro, Staunton, Culpeper, Ruckersville, Scottsville, and Harrisonburg.\n\nFor each new property or company you find, provide:\n- name: The name of the apartment complex or property management company\n- location: The city or county area (e.g. \"Charlottesville\", \"Albemarle\", \"Louisa\")\n- phone: A phone number with area code (e.g. \"434-555-1234\"). Use empty string if you can't find one.\n- website: The full URL (e.g. \"https://example.com\"). Use empty string if you can't find one.\n- notes: A brief description (e.g. \"Apartment complex\", \"Property management company\", \"Senior housing\"). Use empty string if nothing notable.\n\nRules:\n1. Only include properties you actually found via web search — do not make things up.\n2. CRITICAL — Do not return any property that is already in our directory. This includes near-matches:\n - \"The Flats @ West Village\" and \"The Flats at West Village\" are the SAME property\n - \"Carlton View Apartments\" and \"Carlton Views Apartments\" are the SAME property\n - \"Montague Miller & Co.\" and \"Montague Miller and Co.\" are the SAME company\n - Punctuation differences (@ vs at, & vs and), plural vs singular, and minor word variations are NOT different properties\n - When in doubt, skip it — it's better to miss one than to create a duplicate\n3. Do NOT include any property whose phone number matches an existing listing (compare digits only).\n4. Aim for 5-15 genuinely new listings. If you can't find that many new ones, return fewer — quality over quantity.\n5. Skip national listing sites (Zillow, Apartments.com, Trulia, etc.) — we want the actual property or management company.\n\nEXISTING LISTINGS (do not duplicate any of these, including near-matches):\n${names}\n\nEXISTING PHONE NUMBERS: ${phones}`;\n}\n\nconst SCHEMA = {\n type: \"object\",\n properties: {\n new_listings: {\n type: \"array\",\n items: {\n type: \"object\",\n properties: {\n name: { type: \"string\" },\n location: { type: \"string\" },\n phone: { type: \"string\" },\n website: { type: \"string\" },\n notes: { type: \"string\" },\n },\n required: [\"name\", \"location\", \"phone\", \"website\", \"notes\"],\n additionalProperties: false,\n },\n },\n },\n required: [\"new_listings\"],\n additionalProperties: false,\n} as const;\n\n/**\n * Calls OpenAI with web_search + structured outputs to discover new rental\n * listings not already in the directory.\n */\nexport async function discoverNewListings(\n existing: Listing[],\n): Promise {\n const openai = new ValTownOpenAI({});\n\n const response = await openai.responses.create({\n model: \"gpt-5.4-nano\",\n tools: [{ type: \"web_search\" }],\n instructions: buildInstructions(existing),\n input:\n \"Search the web for apartment complexes and property management companies in the Charlottesville, Virginia area that accept rentals. Find ones NOT already in our existing list above. Return up to 15 new listings.\",\n text: {\n format: {\n type: \"json_schema\",\n name: \"new_rental_listings\",\n schema: SCHEMA,\n },\n },\n });\n\n const parsed = JSON.parse(response.output_text) as {\n new_listings: DiscoveredListing[];\n };\n\n return parsed.new_listings;\n}\n\n/**\n * Deduplicate discovered listings against existing ones by name (case-insensitive)\n * or phone number. Also removes entries with empty names.\n */\nexport function filterNew(\n discovered: DiscoveredListing[],\n existing: Listing[],\n): DiscoveredListing[] {\n const existingNames = new Set(\n existing.map((l) => l.name.trim().toLowerCase()).filter(Boolean),\n );\n const existingPhones = new Set(\n existing.map((l) => l.phone.replace(/\\D/g, \"\")).filter(Boolean),\n );\n\n return discovered.filter((d) => {\n if (!d.name.trim()) return false;\n if (existingNames.has(d.name.trim().toLowerCase())) return false;\n const phoneDigits = d.phone.replace(/\\D/g, \"\");\n if (phoneDigits && existingPhones.has(phoneDigits)) return false;\n return true;\n });\n}\n/**\n * Area-scoped discovery for staff: search the web for rental properties in ONE\n * specific area, returning up to 10 candidates (not inserted — staff pick).\n */\nexport async function discoverByArea(\n area: string,\n existing: Listing[],\n): Promise {\n const openai = new ValTownOpenAI({});\n\n const response = await openai.responses.create({\n model: \"gpt-5.4-nano\",\n tools: [{ type: \"web_search\" }],\n instructions: `You are a housing researcher for The Haven, a nonprofit in Charlottesville, Virginia that helps clients find rental housing.\n\nYour job: search the web for apartment complexes, rental properties, and property management companies in ONE area: ${area} (in or near Charlottesville, VA).\n\nFor each property or company you find, provide:\n- name: The name of the apartment complex or property management company\n- location: \"${area}\" (or the most specific locality within it)\n- phone: A phone number with area code. Use empty string if you can't find one.\n- website: The full URL of the property or company site. Use empty string if you can't find one.\n- notes: A brief description (e.g. \"Apartment complex\", \"Property management company\", \"Senior housing\", \"3BR units starting $1,200/mo\"). Use empty string if nothing notable.\n\nRules:\n1. Only include properties you actually found via web search — do not make things up.\n2. CRITICAL — Do not return any property that is already in our directory. This includes near-matches:\n - Punctuation differences (@ vs at, & vs and), plural vs singular, and minor word variations are NOT different properties\n - When in doubt, skip it — it's better to miss one than to create a duplicate\n3. Skip national listing sites (Zillow, Apartments.com, Trulia, etc.) — we want the actual property or management company site.\n4. Return AT MOST 10 listings — quality over quantity. If the area is small, return fewer.\n\nEXISTING LISTINGS (do not duplicate any of these):\n${existing.filter((l) => l.name.trim()).map((l) => `- ${l.name} (${l.location})`).join(\"\\n\")}`,\n input: `Search the web for apartment complexes and rental property management companies in ${area}, Virginia. Return up to 10 that are NOT already in the existing list above.`,\n text: {\n format: {\n type: \"json_schema\",\n name: \"area_rental_listings\",\n schema: SCHEMA,\n },\n },\n });\n\n const parsed = JSON.parse(response.output_text) as {\n new_listings: DiscoveredListing[];\n };\n return parsed.new_listings.slice(0, 10);\n}",[],[188,313],"84cab270-799c-4a22-a5d0-ea3a71895595","db.ts","2c1523d0-7c97-11f1-83ac-1607ee4eb77e",53,["D",1788624252592],"import { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst TABLE = \"listings_v1\";\nconst USERS = \"users_v1\";\nconst SESSIONS = \"sessions_v1\";\nconst RESETS = \"password_resets_v1\";\n\nexport const HOUSING_TYPES = [\n \"Rentals\",\n \"Agencies\",\n \"Private Landlords\",\n \"Transitional Housing\",\n \"Assisted Living\",\n \"Unsuitable Landlords\",\n] as const;\nexport type HousingType = (typeof HOUSING_TYPES)[number];\n\nexport const AREAS = [\n \"Charlottesville\",\n \"Albemarle\",\n \"Louisa\",\n \"Greene\",\n \"Nelson\",\n \"Fluvanna\",\n] as const;\n\nexport const ROLES = [\"admin\", \"editor\", \"viewer\"] as const;\nexport type Role = (typeof ROLES)[number];\n\nexport interface Listing {\n id: number;\n location: string;\n name: string;\n phone: string;\n website: string;\n website_label: string;\n notes: string;\n contact_updated: string;\n housing_type: string;\n unsuitable_note: string;\n availability_notes: string;\n last_contacted_date: string;\n last_contacted_by: string;\n created_at: string;\n updated_at: string;\n}\n\nexport type ListingInput = Omit;\n\nconst LISTING_COLS =\n \"id, location, name, phone, website, website_label, notes, contact_updated, housing_type, unsuitable_note, availability_notes, last_contacted_date, last_contacted_by, created_at, updated_at\";\n\nexport async function ensureTableAndSeed() {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${TABLE} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n location TEXT NOT NULL DEFAULT '',\n name TEXT NOT NULL DEFAULT '',\n phone TEXT NOT NULL DEFAULT '',\n website TEXT NOT NULL DEFAULT '',\n website_label TEXT NOT NULL DEFAULT '',\n notes TEXT NOT NULL DEFAULT '',\n contact_updated TEXT NOT NULL DEFAULT '',\n housing_type TEXT NOT NULL DEFAULT 'Rentals',\n unsuitable_note TEXT NOT NULL DEFAULT '',\n availability_notes TEXT NOT NULL DEFAULT '',\n last_contacted_date TEXT NOT NULL DEFAULT '',\n last_contacted_by TEXT NOT NULL DEFAULT '',\n created_at TEXT NOT NULL DEFAULT (date('now')),\n updated_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`);\n\n // Add columns if the table already existed without them\n const cols = [\"housing_type\", \"unsuitable_note\", \"availability_notes\", \"last_contacted_date\", \"last_contacted_by\"];\n for (const col of cols) {\n try {\n await sqlite.execute(`ALTER TABLE ${TABLE} ADD COLUMN ${col} TEXT NOT NULL DEFAULT ''`);\n } catch {\n // column already exists\n }\n }\n\n // One-time cleanup: staff asked to clear old data — they will re-upload with housing types\n const meta = await sqlite.execute(`CREATE TABLE IF NOT EXISTS meta_v1 (key TEXT PRIMARY KEY, value TEXT)`);\n void meta;\n const done = await sqlite.execute({ sql: `SELECT value FROM meta_v1 WHERE key = 'old_data_cleared'` });\n if (done.rows.length === 0) {\n await sqlite.execute({ sql: `DELETE FROM ${TABLE}` });\n await sqlite.execute({ sql: `INSERT INTO meta_v1 (key, value) VALUES ('old_data_cleared', datetime('now'))` });\n }\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${USERS} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n email TEXT NOT NULL UNIQUE,\n password_hash TEXT NOT NULL,\n first_name TEXT NOT NULL DEFAULT '',\n last_name TEXT NOT NULL DEFAULT '',\n role TEXT NOT NULL DEFAULT 'viewer',\n active INTEGER NOT NULL DEFAULT 1,\n created_at TEXT NOT NULL DEFAULT (datetime('now')),\n last_login TEXT NOT NULL DEFAULT ''\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${SESSIONS} (\n token TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n created_at TEXT NOT NULL DEFAULT (datetime('now'))\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS ${RESETS} (\n token TEXT PRIMARY KEY,\n user_id INTEGER NOT NULL,\n expires_at TEXT NOT NULL,\n used INTEGER NOT NULL DEFAULT 0\n )`);\n}\n\n// ---------- Listings ----------\n\nexport async function listListings(): Promise {\n const result = await sqlite.execute(\n `SELECT ${LISTING_COLS} FROM ${TABLE} ORDER BY housing_type, CASE WHEN name = '' THEN 1 ELSE 0 END, name COLLATE NOCASE`,\n );\n return result.rows as unknown as Listing[];\n}\n\nexport function validateListingInput(input: any): string | null {\n if (input.housing_type && !(HOUSING_TYPES as readonly string[]).includes(input.housing_type)) {\n return `Invalid housing type: ${input.housing_type}`;\n }\n if (input.location && !(AREAS as readonly string[]).includes(input.location)) {\n return `Invalid area — must be one of: ${AREAS.join(\", \")}`;\n }\n if (input.housing_type === \"Unsuitable Landlords\" && !String(input.unsuitable_note ?? \"\").trim()) {\n return \"Unsuitable Landlords entries require a note explaining the issue\";\n }\n return null;\n}\n\nexport async function createListing(input: ListingInput): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ${TABLE} (location, name, phone, website, website_label, notes, contact_updated, housing_type, unsuitable_note, availability_notes, last_contacted_date, last_contacted_by)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n input.location ?? \"\", input.name ?? \"\", input.phone ?? \"\", input.website ?? \"\",\n input.website_label ?? \"\", input.notes ?? \"\", input.contact_updated ?? \"\",\n input.housing_type ?? \"Rentals\", input.unsuitable_note ?? \"\",\n input.availability_notes ?? \"\", input.last_contacted_date ?? \"\", input.last_contacted_by ?? \"\",\n ],\n });\n}\n\nexport async function getListing(id: number): Promise {\n const result = await sqlite.execute({ sql: `SELECT ${LISTING_COLS} FROM ${TABLE} WHERE id = ?`, args: [id] });\n return (result.rows[0] as Listing) ?? null;\n}\n\nexport async function updateListing(id: number, input: ListingInput): Promise {\n await sqlite.execute({\n sql: `UPDATE ${TABLE}\n SET location = ?, name = ?, phone = ?, website = ?, website_label = ?, notes = ?, contact_updated = ?,\n housing_type = ?, unsuitable_note = ?, availability_notes = ?, last_contacted_date = ?, last_contacted_by = ?,\n updated_at = datetime('now')\n WHERE id = ?`,\n args: [\n input.location ?? \"\", input.name ?? \"\", input.phone ?? \"\", input.website ?? \"\",\n input.website_label ?? \"\", input.notes ?? \"\", input.contact_updated ?? \"\",\n input.housing_type ?? \"Rentals\", input.unsuitable_note ?? \"\",\n input.availability_notes ?? \"\", input.last_contacted_date ?? \"\", input.last_contacted_by ?? \"\",\n id,\n ],\n });\n}\n\nexport async function deleteListing(id: number): Promise {\n await sqlite.execute({ sql: `DELETE FROM ${TABLE} WHERE id = ?`, args: [id] });\n}\n\n// ---------- Users / auth ----------\n\nexport interface User {\n id: number;\n email: string;\n first_name: string;\n last_name: string;\n role: Role;\n active: number;\n created_at: string;\n last_login: string;\n}\n\nconst USER_COLS = \"id, email, password_hash, first_name, last_name, role, active, created_at, last_login\";\n\nexport async function getUserByEmail(email: string): Promise<(User & { password_hash: string }) | null> {\n const r = await sqlite.execute({ sql: `SELECT ${USER_COLS} FROM ${USERS} WHERE email = ? COLLATE NOCASE`, args: [email.trim()] });\n return (r.rows[0] as any) ?? null;\n}\n\nexport async function getUserById(id: number): Promise {\n const r = await sqlite.execute({ sql: `SELECT id, email, first_name, last_name, role, active, created_at, last_login FROM ${USERS} WHERE id = ?`, args: [id] });\n return (r.rows[0] as User) ?? null;\n}\n\nexport async function listUsers(): Promise {\n const r = await sqlite.execute(`SELECT id, email, first_name, last_name, role, active, created_at, last_login FROM ${USERS} ORDER BY email COLLATE NOCASE`);\n return r.rows as unknown as User[];\n}\n\nexport async function createUser(u: { email: string; password_hash: string; first_name: string; last_name: string; role: Role }): Promise {\n await sqlite.execute({\n sql: `INSERT INTO ${USERS} (email, password_hash, first_name, last_name, role) VALUES (?, ?, ?, ?, ?)`,\n args: [u.email.trim(), u.password_hash, u.first_name, u.last_name, u.role],\n });\n}\n\nexport async function updateUserPassword(id: number, password_hash: string): Promise {\n await sqlite.execute({ sql: `UPDATE ${USERS} SET password_hash = ? WHERE id = ?`, args: [password_hash, id] });\n}\n\nexport async function updateUserRole(id: number, role: Role): Promise {\n await sqlite.execute({ sql: `UPDATE ${USERS} SET role = ? WHERE id = ?`, args: [role, id] });\n}\n\nexport async function setUserActive(id: number, active: boolean): Promise {\n await sqlite.execute({ sql: `UPDATE ${USERS} SET active = ? WHERE id = ?`, args: [active ? 1 : 0, id] });\n}\n\nexport async function stampLogin(id: number): Promise {\n await sqlite.execute({ sql: `UPDATE ${USERS} SET last_login = datetime('now') WHERE id = ?`, args: [id] });\n}\n\nexport async function countAdmins(): Promise {\n const r = await sqlite.execute(`SELECT COUNT(*) AS n FROM ${USERS} WHERE role = 'admin' AND active = 1`);\n return Number((r.rows[0] as any).n);\n}\n\n// ---------- Sessions ----------\n\nexport async function createSession(token: string, userId: number): Promise {\n await sqlite.execute({ sql: `INSERT INTO ${SESSIONS} (token, user_id) VALUES (?, ?)`, args: [token, userId] });\n}\n\nexport async function getSessionUser(token: string): Promise {\n const r = await sqlite.execute({\n sql: `SELECT u.id, u.email, u.first_name, u.last_name, u.role, u.active, u.created_at, u.last_login\n FROM ${SESSIONS} s JOIN ${USERS} u ON u.id = s.user_id WHERE s.token = ?`,\n args: [token],\n });\n const user = r.rows[0] as User | undefined;\n return user && user.active ? user : null;\n}\n\nexport async function deleteSession(token: string): Promise {\n await sqlite.execute({ sql: `DELETE FROM ${SESSIONS} WHERE token = ?`, args: [token] });\n}\n\n// ---------- Password resets ----------\n\nexport async function createResetToken(token: string, userId: number): Promise {\n await sqlite.execute({ sql: `DELETE FROM ${RESETS} WHERE user_id = ?`, args: [userId] });\n const expires = new Date(Date.now() + 60 * 60 * 1000).toISOString();\n await sqlite.execute({ sql: `INSERT INTO ${RESETS} (token, user_id, expires_at) VALUES (?, ?, ?)`, args: [token, userId, expires] });\n}\n\nexport async function consumeResetToken(token: string): Promise {\n const r = await sqlite.execute({ sql: `SELECT user_id, expires_at, used FROM ${RESETS} WHERE token = ?`, args: [token] });\n const row = r.rows[0] as any;\n if (!row || row.used) return null;\n if (new Date(row.expires_at) < new Date()) return null;\n await sqlite.execute({ sql: `UPDATE ${RESETS} SET used = 1 WHERE token = ?`, args: [token] });\n return row.user_id as number;\n}\n",[],[188,321],"3dd8122b-7e63-4674-b9a9-3631245813fc","cron.ts","9124a6e8-85ec-11f1-9db7-1607ee4eb77e",15,["D",1784738659416],"interval","import {\n ensureTableAndSeed,\n listListings,\n createListing,\n} from \"./db.ts\";\nimport { discoverNewListings, filterNew } from \"./discover.ts\";\n\n/**\n * Weekly cron job: uses OpenAI web search to discover new rental properties\n * and property management companies in the Charlottesville, VA area that aren't\n * already in the directory. New finds are inserted into the database with a\n * \"AI-discovered — verify contact info\" note so staff can review them.\n */\nexport default async function (interval: Interval) {\n await ensureTableAndSeed();\n\n const existing = await listListings();\n console.log(`Existing listings: ${existing.length}`);\n\n console.log(\"Searching the web for new rental listings...\");\n const discovered = await discoverNewListings(existing);\n console.log(`AI returned ${discovered.length} candidate listings`);\n\n const fresh = filterNew(discovered, existing);\n console.log(\n `After dedup: ${fresh.length} new listings to add`,\n );\n\n if (fresh.length === 0) {\n console.log(\"No new listings found this run.\");\n return;\n }\n\n const today = new Date().toISOString().slice(0, 10);\n let added = 0;\n for (const l of fresh) {\n await createListing({\n location: l.location,\n name: l.name,\n phone: l.phone,\n website: l.website,\n website_label: l.website ? l.name : \"\",\n notes: l.notes\n ? `${l.notes} — AI-discovered ${today}, verify contact info`\n : `AI-discovered ${today}, verify contact info`,\n contact_updated: \"\",\n });\n added++;\n console.log(` + ${l.name} (${l.location}) — ${l.phone}`);\n }\n\n console.log(`Done. Added ${added} new listings.`);\n}\n",[],[188,329],"f97307e7-6b4a-4014-93e9-e61c39e8d6de","auth.ts","903158a6-a943-11f1-97c0-1607ee4eb77e",54,["D",1788624307201],"import { scryptSync, randomBytes, timingSafeEqual } from \"node:crypto\";\nimport { getSessionUser, type Role, type User } from \"./db.ts\";\n\n// ---------- Password hashing ----------\n\nexport function hashPassword(password: string): string {\n const salt = randomBytes(16).toString(\"hex\");\n const hash = scryptSync(password, salt, 64).toString(\"hex\");\n return `${salt}:${hash}`;\n}\n\nexport function verifyPassword(password: string, stored: string): boolean {\n const [salt, hash] = stored.split(\":\");\n if (!salt || !hash) return false;\n const candidate = scryptSync(password, salt, 64);\n const expected = Buffer.from(hash, \"hex\");\n return candidate.length === expected.length && timingSafeEqual(candidate, expected);\n}\n\n// ---------- Password policy ----------\n// At least 12 chars, upper + lower case, one special character\n\nexport function validatePasswordStrength(pw: string): string | null {\n if (pw.length < 12) return \"Password must be at least 12 characters long\";\n if (!/[a-z]/.test(pw)) return \"Password must contain a lowercase letter\";\n if (!/[A-Z]/.test(pw)) return \"Password must contain an uppercase letter\";\n if (!/[^A-Za-z0-9]/.test(pw)) return \"Password must contain a special character\";\n return null;\n}\n\n// ---------- Sessions & roles ----------\n\nexport function newToken(): string {\n return randomBytes(32).toString(\"hex\");\n}\n\nexport function normalizeEmail(email: unknown): string {\n return String(email ?? \"\").trim().toLowerCase();\n}\n\nexport function isEmail(email: string): boolean {\n return /^[^\\s@]+@[^\\s@]+\\.[^\\s@]+$/.test(email);\n}\n\nconst RANK: Record = { viewer: 1, editor: 2, admin: 3 };\n\nexport async function currentUser(c: any): Promise {\n const auth = c.req.header(\"authorization\") ?? \"\";\n const token = auth.startsWith(\"Bearer \") ? auth.slice(7) : \"\";\n if (!token) return null;\n return await getSessionUser(token);\n}\n\n/** Middleware: user must be signed in with role >= minRole. Sets c.set(\"user\"). */\nexport function requireRole(minRole: Role) {\n return async (c: any, next: () => Promise) => {\n const user = await currentUser(c);\n if (!user) return c.json({ error: \"Sign in required\" }, 401);\n if (RANK[user.role] < RANK[minRole]) return c.json({ error: `Requires ${minRole} access` }, 403);\n c.set(\"user\", user);\n await next();\n };\n}\n",[],[188,338],["D",1783712386625],[203,204,205,206,207,208],[188],["D",1783712246617],["D",1789525245864],{"_110":109,"_117":-5},{"_110":109,"_111":112,"_113":-5,"_19":-5,"_114":115,"_116":65},{"_13":95,"_38":96,"_49":48,"_97":50,"_98":99,"_100":101,"_102":56,"_103":104,"_105":106,"_107":51,"_108":109},"ctx",{"_88":-5,"_139":386,"_387":388,"_389":390,"_391":31,"_392":31,"_393":31,"_394":65,"_395":-5,"_396":-7,"_397":-7,"_398":69,"_399":31,"_400":31,"_401":-5,"_402":31,"_403":31,"_404":31,"_405":-5},"ENV",{"_357":358,"_359":360,"_361":96,"_362":363,"_364":365,"_366":367,"_368":369,"_370":371,"_372":373,"_374":375,"_376":377,"_378":379,"_380":381,"_382":383,"_384":385},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v58