[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_231":232,"_233":234},"routes/_app.x.$handle.$name",{"_16":17,"_20":21,"_85":67,"_86":87,"_65":-7,"_88":-5,"_13":89,"_90":91,"_11":92,"_93":94,"_95":96,"_97":-5,"_98":-5,"_99":-5,"_100":26,"_101":102,"_103":38,"_104":-5,"_105":-5,"_106":107},"routes/_app.x.$handle.$name.search.$(branch)",{"_11":12,"_13":14,"_15":-5,"_16":17},"files",[],"project",{"_18":19,"_20":21,"_22":23,"_24":-5,"_25":26,"_27":28,"_29":28,"_30":31,"_32":-5,"_33":34,"_35":36,"_37":38,"_39":-5,"_40":-5,"_41":42,"_43":44,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":50,"_51":50,"_52":53,"_54":53,"_55":53,"_56":50,"_57":50,"_58":59,"_60":61,"_62":63,"_64":26},"query","handle","thexcodes","id","45602bda-fa0c-48d3-b3e9-e96993e0a78f","name","backend-server","createdAt",["D",1783788075217],"deletedAt","legacyEnvVars",false,"privacy","public","httpPrivacy","description","Node.js-style backend HTTP server with API routes","imageUrl","userId","032b4362-ed8a-41d7-9bdb-fd3cfb8c6eea","pinnedFileId","5959ce58-7d47-11f1-a5a3-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019f520c-c057-750a-861a-9f089a0ab2d2","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_16":17,"_84":80},"org",{"_16":17,"_77":78,"_79":80,"_33":34,"_81":82,"_83":26},"branch",{"_65":66,"_20":67,"_18":68,"_69":19,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":21,"_76":17},"isOwned","version",13,"main","7c644b24-45ad-4e1a-885d-b7888c965e26","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","The xCodes","avatar","https://lh3.googleusercontent.com/a/ACg8ocKYQCn-hluLC3EWbFaLa9Mkmmxe9RkM3Rp9M7tT93yj0TGxeAA=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","path","","adoptOrgId",{"_18":19,"_20":21,"_22":227,"_24":-5,"_25":26,"_27":28,"_29":28,"_30":31,"_32":-5,"_33":34,"_35":36,"_37":38,"_39":-5,"_40":-5,"_41":42,"_43":44,"_45":-5,"_46":-5,"_47":-5,"_48":-5,"_49":50,"_51":50,"_52":53,"_54":53,"_55":53,"_56":50,"_57":50,"_58":228,"_60":229,"_62":230,"_64":26},"tree",[144,154],[144,145,146,147,148,149,150,151,152,153,154],"counts",{"_134":42,"_135":119,"_136":42,"_137":138,"_139":140},"contents",[108,109],"file","upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_18":127,"_20":128,"_112":129,"_113":-5,"_114":68,"_115":130,"_117":38,"_22":131,"_65":42,"_120":132,"_122":-5,"_124":26,"_125":-5,"_86":133},{"_18":110,"_20":111,"_112":36,"_113":-5,"_114":68,"_115":116,"_117":38,"_22":118,"_65":119,"_120":121,"_122":123,"_124":26,"_125":-5,"_86":126},"2afa6c51-07a9-412e-b6f7-51633a033b54","main.ts","fileId","parentId","branchId","branchVersion",12,"latest",["D",1784045750907],1,"fileType","http","content","// HTTP entry point — delegates to the modular server\nimport handleRequest from \"./server/index.ts\";\n\nexport default handleRequest;\n","deleted","label",[111],"3a93cfd0-5122-4ac9-a939-c91597f23dc8","server","d202a19e-cae8-40f1-ba91-fa34d3167581",3,["D",1784045675712],"directory",[128],"pulls","branches","forks","envVars",{"_141":42,"_143":42},"connections",{"_141":42,"_142":42},"count","unfilledCount","emptyCount",{"_18":127,"_20":128,"_112":129,"_113":-5,"_114":68,"_115":130,"_117":38,"_22":224,"_65":42,"_120":132,"_122":-5,"_124":26,"_125":-5,"_156":225,"_86":226},{"_18":220,"_20":219,"_112":214,"_113":129,"_114":68,"_115":130,"_117":38,"_22":221,"_65":42,"_120":132,"_122":-5,"_124":26,"_125":-5,"_156":222,"_86":223},{"_18":212,"_20":160,"_112":213,"_113":214,"_114":68,"_115":130,"_117":38,"_22":215,"_65":42,"_120":164,"_122":216,"_124":26,"_125":-5,"_156":217,"_86":218},{"_18":207,"_20":206,"_112":200,"_113":129,"_114":68,"_115":208,"_117":38,"_22":209,"_65":42,"_120":132,"_122":-5,"_124":26,"_125":-5,"_156":210,"_86":211},{"_18":197,"_20":198,"_112":199,"_113":200,"_114":68,"_115":201,"_117":38,"_22":202,"_65":42,"_120":164,"_122":203,"_124":26,"_125":-5,"_156":204,"_86":205},{"_18":192,"_20":191,"_112":185,"_113":129,"_114":68,"_115":193,"_117":38,"_22":194,"_65":42,"_120":132,"_122":-5,"_124":26,"_125":-5,"_156":195,"_86":196},{"_18":182,"_20":183,"_112":184,"_113":185,"_114":68,"_115":186,"_117":38,"_22":187,"_65":42,"_120":164,"_122":188,"_124":26,"_125":-5,"_156":189,"_86":190},{"_18":177,"_20":176,"_112":171,"_113":129,"_114":68,"_115":178,"_117":38,"_22":179,"_65":42,"_120":132,"_122":-5,"_124":26,"_125":-5,"_156":180,"_86":181},{"_18":168,"_20":169,"_112":170,"_113":171,"_114":68,"_115":66,"_117":38,"_22":172,"_65":119,"_120":164,"_122":173,"_124":26,"_125":-5,"_156":174,"_86":175},{"_18":159,"_20":160,"_112":161,"_113":129,"_114":68,"_115":162,"_117":38,"_22":163,"_65":42,"_120":164,"_122":165,"_124":26,"_125":-5,"_156":166,"_86":167},{"_18":110,"_20":111,"_112":36,"_113":-5,"_114":68,"_115":116,"_117":38,"_22":155,"_65":119,"_120":121,"_122":123,"_124":26,"_125":-5,"_156":157,"_86":158},["D",1784045750907],"children",[],[111],"c923ae3c-ecc6-471f-ac5a-d57f30d148a8","index.ts","4314d584-7f9f-11f1-8378-1607ee4eb77e",8,["D",1784045742691],"script","// Server Entry Point\n// Receives the HTTP request, applies CORS, routes to the correct module\n\nimport { config } from \"./config/index.ts\";\nimport { matchTradeLockerRoute, handleInstrumentsSearch } from \"./routes/tradelocker.ts\";\n\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: {\n \"Content-Type\": \"application/json\",\n \"Access-Control-Allow-Origin\": config.server.cors.origin,\n \"Access-Control-Allow-Methods\": config.server.cors.methods,\n \"Access-Control-Allow-Headers\": config.server.cors.headers,\n },\n });\n}\n\nexport default async function handleRequest(req: Request): Promise {\n const url = new URL(req.url);\n const { pathname, searchParams } = url;\n const method = req.method;\n\n // ── CORS preflight ──────────────────────────────────\n if (method === \"OPTIONS\") {\n return new Response(null, {\n headers: {\n \"Access-Control-Allow-Origin\": config.server.cors.origin,\n \"Access-Control-Allow-Methods\": config.server.cors.methods,\n \"Access-Control-Allow-Headers\": config.server.cors.headers,\n },\n });\n }\n\n // ── Health check ────────────────────────────────────\n if (pathname === \"/\" && method === \"GET\") {\n return json({ status: \"ok\", message: \"Backend server is running!\" });\n }\n\n // ── TradeLocker routes ──────────────────────────────\n // Special case: instruments search needs the query param\n if (pathname === \"/api/tradelocker/instruments\" && method === \"GET\") {\n const search = searchParams.get(\"search\") ?? \"\";\n if (!search) {\n return json({ error: \"Missing 'search' query parameter\" }, 400);\n }\n return handleInstrumentsSearch(search);\n }\n\n // All other TradeLocker routes\n const route = matchTradeLockerRoute(pathname, method, () => req.json());\n if (route.matched && route.handler) {\n return route.handler();\n }\n\n // ── 404 ─────────────────────────────────────────────\n return json({ error: \"Route not found\" }, 404);\n}\n",[],[128,160],"13c96889-1d6a-4e10-9ed2-90c55f11cbea","tradelockerService.ts","432f1a52-7f9f-11f1-b522-1607ee4eb77e","2fb97a26-7f9f-11f1-9e36-1607ee4eb77e",["D",1784045782993],"// TradeLocker Service Layer\n// Handles all direct communication with the TradeLocker API\n\nimport axios from \"npm:axios\";\nimport { config } from \"../config/index.ts\";\n\nlet cachedToken: string | null = null;\nlet tokenExpiry: number = 0;\n\n// Axios instance with base URL pre-configured\nconst api = axios.create({\n baseURL: `${config.tradelocker.baseUrl}/${config.tradelocker.version}`,\n});\n\n/** Authenticate with TradeLocker and cache the JWT token */\nexport async function authenticate(): Promise {\n // Return cached token if still valid (expires in ~50 min)\n if (cachedToken && Date.now() < tokenExpiry) {\n return cachedToken;\n }\n\n const { email, password, server } = config.credentials;\n if (!email || !password || !server) {\n throw new Error(\"Missing TRADELOCKER_EMAIL, TRADELOCKER_PASSWORD, or TRADELOCKER_SERVER env vars\");\n }\n\n const res = await axios.post(\n `${config.tradelocker.authUrl}/realms/${server}/protocol/openid-connect/token`,\n new URLSearchParams({\n grant_type: \"password\",\n client_id: \"tradelocker\",\n username: email,\n password,\n }),\n { headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" } },\n );\n\n if (res.status !== 200) {\n throw new Error(`TradeLocker auth failed (${res.status})`);\n }\n\n const data = res.data;\n cachedToken = data.access_token;\n // Expire 5 min before actual expiry for safety\n tokenExpiry = Date.now() + (data.expires_in - 300) * 1000;\n return cachedToken!;\n}\n\n/** Helper: make an authenticated GET request to TradeLocker */\nasync function apiGet(path: string): Promise {\n const token = await authenticate();\n const res = await api.get(path, {\n headers: { Authorization: `Bearer ${token}` },\n });\n return res.data;\n}\n\n/** Helper: make an authenticated POST request to TradeLocker */\nasync function apiPost(path: string, body: Record): Promise {\n const token = await authenticate();\n const res = await api.post(path, body, {\n headers: {\n Authorization: `Bearer ${token}`,\n \"Content-Type\": \"application/json\",\n },\n });\n return res.data;\n}\n\n// ── Account ──────────────────────────────────────────────\n\n/** Get all accounts linked to the authenticated user */\nexport async function getAccounts(): Promise {\n return apiGet(\"/accounts\");\n}\n\n/** Get a specific account by ID */\nexport async function getAccount(accountId: string): Promise {\n return apiGet(`/accounts/${accountId}`);\n}\n\n// ── Positions ────────────────────────────────────────────\n\n/** Get open positions for an account */\nexport async function getPositions(accountId: string, accNum: number): Promise {\n return apiGet(`/accounts/${accountId}/accNums/${accNum}/positions`);\n}\n\n// ── Trades / History ─────────────────────────────────────\n\n/** Get trade history for an account */\nexport async function getTrades(accountId: string, accNum: number): Promise {\n return apiGet(`/accounts/${accountId}/accNums/${accNum}/trades`);\n}\n\n// ── Orders ───────────────────────────────────────────────\n\n/** Place a new market order */\nexport async function placeOrder(\n accountId: string,\n accNum: number,\n order: {\n instrumentId: number;\n quantity: number;\n side: \"BUY\" | \"SELL\";\n type: \"MARKET\" | \"LIMIT\" | \"STOP\";\n price?: number;\n stopLoss?: number;\n takeProfit?: number;\n },\n): Promise {\n return apiPost(`/accounts/${accountId}/accNums/${accNum}/orders`, order);\n}\n\n// ── Instruments ──────────────────────────────────────────\n\n/** Search for instruments (e.g. \"EURUSD\", \"BTCUSD\") */\nexport async function searchInstruments(query: string): Promise {\n return apiGet(`/instruments?search=${encodeURIComponent(query)}`);\n}\n",[],[128,176,169],"services","39b15ad9-984d-470d-9760-49ca6e586337",5,["D",1784045710185],[152],[128,176],"4d4ad303-2851-488d-bff5-9548805a2a44","tradelocker.ts","43196ab8-7f9f-11f1-bf73-1607ee4eb77e","2fcc5574-7f9f-11f1-abcd-1607ee4eb77e",9,["D",1784045742691],"// TradeLocker Route Definitions\n// Maps URL patterns + HTTP methods to controller functions\n\nimport {\n getAccounts,\n getAccount,\n getPositions,\n getTrades,\n placeOrder,\n searchInstruments,\n} from \"../controllers/tradelockerController.ts\";\n\nexport interface RouteResult {\n matched: boolean;\n handler?: () => Promise;\n}\n\n/**\n * Try to match a request against TradeLocker routes.\n * Returns { matched: true, handler } on match, or { matched: false } if no route matches.\n */\nexport function matchTradeLockerRoute(\n pathname: string,\n method: string,\n getBody: () => Promise,\n): RouteResult {\n // GET /api/tradelocker/accounts\n if (pathname === \"/api/tradelocker/accounts\" && method === \"GET\") {\n return { matched: true, handler: () => getAccounts() };\n }\n\n // GET /api/tradelocker/accounts/:accountId\n let m = pathname.match(/^\\/api\\/tradelocker\\/accounts\\/([^/]+)$/);\n if (m && method === \"GET\") {\n return { matched: true, handler: () => getAccount({ accountId: m![1] }) };\n }\n\n // GET /api/tradelocker/accounts/:accountId/:accNum/positions\n m = pathname.match(/^\\/api\\/tradelocker\\/accounts\\/([^/]+)\\/([^/]+)\\/positions$/);\n if (m && method === \"GET\") {\n return { matched: true, handler: () => getPositions({ accountId: m![1], accNum: m![2] }) };\n }\n\n // GET /api/tradelocker/accounts/:accountId/:accNum/trades\n m = pathname.match(/^\\/api\\/tradelocker\\/accounts\\/([^/]+)\\/([^/]+)\\/trades$/);\n if (m && method === \"GET\") {\n return { matched: true, handler: () => getTrades({ accountId: m![1], accNum: m![2] }) };\n }\n\n // POST /api/tradelocker/accounts/:accountId/:accNum/orders\n m = pathname.match(/^\\/api\\/tradelocker\\/accounts\\/([^/]+)\\/([^/]+)\\/orders$/);\n if (m && method === \"POST\") {\n return {\n matched: true,\n handler: async () => {\n const body = await getBody();\n return placeOrder({ accountId: m![1], accNum: m![2] }, body);\n },\n };\n }\n\n // GET /api/tradelocker/instruments?search=EURUSD\n if (pathname === \"/api/tradelocker/instruments\" && method === \"GET\") {\n return { matched: false };\n }\n\n return { matched: false };\n}\n\n/** Handle the instruments search route (needs query param) */\nexport async function handleInstrumentsSearch(search: string): Promise {\n return searchInstruments(search);\n}\n",[],[128,191,183],"routes","ad1fc2f7-fb32-4729-b17d-b3b7e4b762e8",6,["D",1784045710182],[150],[128,191],"4de36252-d16a-4a72-9dcb-a5964b03d9ad","tradelockerController.ts","431fee60-7f9f-11f1-8bc9-1607ee4eb77e","2fb0edde-7f9f-11f1-8312-1607ee4eb77e",10,["D",1784045742695],"// TradeLocker Controller Layer\n// Receives parsed requests, calls the service, and returns HTTP responses\n\nimport * as service from \"../services/tradelockerService.ts\";\n\n/** JSON helper */\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"Content-Type\": \"application/json\" },\n });\n}\n\n/** Get all accounts */\nexport async function getAccounts(): Promise {\n try {\n const accounts = await service.getAccounts();\n return json({ accounts });\n } catch (err) {\n return json({ error: String(err.message ?? err) }, 500);\n }\n}\n\n/** Get a specific account */\nexport async function getAccount(params: { accountId: string }): Promise {\n try {\n const account = await service.getAccount(params.accountId);\n return json({ account });\n } catch (err) {\n return json({ error: String(err.message ?? err) }, 500);\n }\n}\n\n/** Get open positions */\nexport async function getPositions(params: { accountId: string; accNum: string }): Promise {\n try {\n const positions = await service.getPositions(params.accountId, Number(params.accNum));\n return json({ positions });\n } catch (err) {\n return json({ error: String(err.message ?? err) }, 500);\n }\n}\n\n/** Get trade history */\nexport async function getTrades(params: { accountId: string; accNum: string }): Promise {\n try {\n const trades = await service.getTrades(params.accountId, Number(params.accNum));\n return json({ trades });\n } catch (err) {\n return json({ error: String(err.message ?? err) }, 500);\n }\n}\n\n/** Place a new order */\nexport async function placeOrder(\n params: { accountId: string; accNum: string },\n body: any,\n): Promise {\n try {\n const { instrumentId, quantity, side, type, price, stopLoss, takeProfit } = body;\n if (!instrumentId || !quantity || !side || !type) {\n return json({ error: \"Missing required fields: instrumentId, quantity, side, type\" }, 400);\n }\n\n const result = await service.placeOrder(params.accountId, Number(params.accNum), {\n instrumentId,\n quantity,\n side,\n type,\n price,\n stopLoss,\n takeProfit,\n });\n return json({ result }, 201);\n } catch (err) {\n return json({ error: String(err.message ?? err) }, 500);\n }\n}\n\n/** Search instruments */\nexport async function searchInstruments(query: string): Promise {\n try {\n const instruments = await service.searchInstruments(query);\n return json({ instruments });\n } catch (err) {\n return json({ error: String(err.message ?? err) }, 500);\n }\n}\n",[],[128,206,198],"controllers","310b8ad6-6e6b-44a5-b3d5-b295fea65694",4,["D",1784045710166],[148],[128,206],"6c4e35da-25ae-43fc-96a1-42b03f75ca80","1b2db9c8-7f9f-11f1-b77f-1607ee4eb77e","f6729911-357c-4a44-b26c-58e6fe82c8b1",["D",1784045675712],"// Central configuration for the backend server\n// TradeLocker API base URLs and env-based credentials\n\nexport const config = {\n // TradeLocker API endpoints\n tradelocker: {\n // Production API base URL\n baseUrl: \"https://api.tradelocker.com\",\n // Auth endpoint (may differ per environment)\n authUrl: \"https://auth.tradelocker.com\",\n // API version\n version: \"v2\",\n },\n\n // Read credentials from Val Town env vars\n // 👉 Add TRADELOCKER_EMAIL here: https://www.val.town/x/thexcodes/backend-server/environment-variables?key=TRADELOCKER_EMAIL\n // 👉 Add TRADELOCKER_PASSWORD here: https://www.val.town/x/thexcodes/backend-server/environment-variables?key=TRADELOCKER_PASSWORD\n // 👉 Add TRADELOCKER_SERVER here: https://www.val.town/x/thexcodes/backend-server/environment-variables?key=TRADELOCKER_SERVER\n credentials: {\n email: Deno.env.get(\"TRADELOCKER_EMAIL\") ?? \"\",\n password: Deno.env.get(\"TRADELOCKER_PASSWORD\") ?? \"\",\n server: Deno.env.get(\"TRADELOCKER_SERVER\") ?? \"\",\n },\n\n // Server settings\n server: {\n port: 8000,\n cors: {\n origin: \"*\",\n methods: \"GET, POST, PUT, DELETE, OPTIONS\",\n headers: \"Content-Type, Authorization\",\n },\n },\n} as const;\n",[],[128,219,160],"config","c6fb18f2-53a8-4182-89ec-9530aced1b50",["D",1784045675712],[146],[128,219],["D",1784045675712],[145,147,149,151,153],[128],["D",1783788075217],{"_16":17,"_84":80},{"_16":17,"_77":78,"_79":80,"_33":34,"_81":82,"_83":26},{"_65":66,"_20":67,"_18":68,"_69":19,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":-5,"_75":21,"_76":17},"ctx",{"_58":-5,"_105":264,"_265":266,"_267":268,"_269":26,"_270":26,"_271":26,"_272":38,"_273":-5,"_274":-7,"_275":-7,"_276":42,"_277":26,"_278":26,"_279":-5,"_280":26,"_281":26,"_282":26,"_283":-5},"ENV",{"_235":236,"_237":238,"_239":67,"_240":241,"_242":243,"_244":245,"_246":247,"_248":249,"_250":251,"_252":253,"_254":255,"_256":257,"_258":259,"_260":261,"_262":263},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]