Terms of Service

Last updated: ${\n new Date().toLocaleDateString()\n }

\n \n

1. Acceptance of Terms

By using the Anchor location feed service, you agree to these terms.

\n \n

2. Service Description

Anchor provides location-based social feeds for the AT Protocol network.

\n \n

3. Data Usage

We process publicly available check-in data from the AT Protocol network to provide location-based feeds.

\n \n

4. Privacy

See our Privacy Policy for information about data handling.

\n \n

5. Acceptable Use

You agree to use our service responsibly and in compliance with applicable laws.

\n \n

6. Limitation of Liability

Our service is provided \"as is\" without warranties. We limit our liability to the extent permitted by law.

\n \n

7. Changes to Terms

We may update these terms. Continued use constitutes acceptance of updated terms.

\n \n

8. Contact

Questions about these terms can be directed to our support channels.

\n \n \n `,\n { headers: { \"Content-Type\": \"text/html\" } },\n );\n });\n\n // Privacy Policy\n app.get(\"/privacy\", (_c) => {\n return new Response(\n `\n \n \n \n \n \n Privacy Policy - Anchor\n \n \n \n

Privacy Policy

Last updated: ${\n new Date().toLocaleDateString()\n }

\n \n

1. Information We Collect

We collect publicly available check-in data from the AT Protocol network and session information for authenticated users.

\n \n

2. How We Use Information

We use collected data to provide location-based social feeds and improve our service.

\n \n

3. Data Sharing

We do not sell or share personal data with third parties except as necessary to operate our service.

\n \n

4. Data Security

We implement appropriate security measures to protect user data.

\n \n

5. Data Retention

We retain data as necessary to provide our service and comply with legal obligations.

\n \n

6. Your Rights

You have rights regarding your personal data as provided by applicable privacy laws.

\n \n

7. Cookies and Sessions

We use encrypted session cookies to maintain user authentication.

\n \n

8. Contact Information

Questions about this privacy policy can be directed to our support channels.

\n \n \n `,\n { headers: { \"Content-Type\": \"text/html\" } },\n );\n });\n\n // Helper function to render checkin page with meta tags\n async function renderCheckinPage(c: any, checkinId: string) {\n // Fetch checkin data to populate meta tags\n let metaTitle = \"Anchor Check-in\";\n let metaDescription = \"View this check-in on Anchor\";\n let metaImage =\n \"https://res.cloudinary.com/dru3aznlk/image/upload/v1754747200/anchor-logo-transparent_nrw70y.png\";\n let metaImageType = \"image/png\";\n let checkinData = null; // Store for reuse in noscript\n\n // Parse checkinId into identifier and rkey\n const parts = checkinId.split(\"/\");\n if (parts.length === 2) {\n const [identifier, rkey] = parts;\n checkinData = await fetchCheckinData(identifier, rkey);\n }\n\n if (checkinData) {\n const checkin = checkinData;\n\n const authorName = checkin.author?.displayName ||\n checkin.author?.handle || \"Someone\";\n const locationName = checkin.address?.name ||\n checkin.address?.locality || \"a location\";\n\n // Build title from checkin text if available, otherwise use \"dropped anchor\" format\n if (checkin.text) {\n metaTitle = checkin.text;\n } else {\n metaTitle = `${authorName} dropped anchor at ${locationName}`;\n }\n\n // Build description from location info\n const locationParts = [\n checkin.address?.name,\n checkin.address?.locality,\n checkin.address?.region,\n checkin.address?.country,\n ].filter(Boolean);\n metaDescription = locationParts.length > 0\n ? `${authorName} at ${locationParts.join(\", \")}`\n : `Check-in by ${authorName}`;\n\n // Use checkin image if available\n if (checkin.image?.fullsizeUrl) {\n metaImage = checkin.image.fullsizeUrl;\n // Infer mime type from URL or use generic image type\n // AT Protocol blobs can be jpeg, png, or webp\n if (checkin.image.fullsizeUrl.includes(\"image/jpeg\")) {\n metaImageType = \"image/jpeg\";\n } else if (checkin.image.fullsizeUrl.includes(\"image/png\")) {\n metaImageType = \"image/png\";\n } else if (checkin.image.fullsizeUrl.includes(\"image/webp\")) {\n metaImageType = \"image/webp\";\n } else {\n metaImageType = \"image/jpeg\"; // Most common for photos\n }\n }\n }\n\n // Escape all meta tag content for safety\n const safeTitle = escapeHtml(metaTitle);\n const safeDescription = escapeHtml(metaDescription);\n\n // Build noscript content with checkin details\n let noscriptContent = `\n

${safeTitle}

`;\n\n // Add checkin details if available\n if (checkinData) {\n const checkin = checkinData;\n\n if (checkin.text) {\n noscriptContent += `\n

${\n escapeHtml(checkin.text)\n }

`;\n }\n\n if (checkin.image?.fullsizeUrl) {\n noscriptContent += `\n $\"${safeDescription}\"$ `;\n }\n\n noscriptContent += `\n

Location

`;\n\n if (checkin.address?.name) {\n noscriptContent += `\n

${\n escapeHtml(checkin.address.name)\n }

`;\n }\n\n const addressParts = [\n checkin.address?.street,\n checkin.address?.locality,\n checkin.address?.region,\n checkin.address?.country,\n ].filter(Boolean);\n\n if (addressParts.length > 0) {\n noscriptContent += `\n

${\n escapeHtml(addressParts.join(\", \"))\n }

`;\n }\n\n if (checkin.coordinates) {\n noscriptContent += `\n

📍 ${\n checkin.coordinates.latitude.toFixed(6)\n }, ${checkin.coordinates.longitude.toFixed(6)}

`;\n }\n\n noscriptContent += `\n

`;\n\n if (checkin.author) {\n noscriptContent += `\n

`;\n\n if (checkin.author.avatar) {\n noscriptContent += `\n $\"${\n$ `;\n }\n\n noscriptContent += `\n

${\n escapeHtml(\n checkin.author.displayName || checkin.author.handle,\n )\n }

@${\n escapeHtml(checkin.author.handle)\n }

`;\n }\n\n if (checkin.createdAt) {\n const date = new Date(checkin.createdAt);\n noscriptContent += `\n

${date.toLocaleDateString()} at ${date.toLocaleTimeString()}

`;\n }\n }\n\n noscriptContent += `\n

\n This page requires JavaScript for the full interactive experience. Please enable JavaScript in your browser.\n

\n ← View All Check-ins\n

`;\n\n return new Response(\n `\n \n \n \n \n ${safeTitle}\n\n \n \n \n \n \n \n \n \n \n\n \n \n \n \n \n \n\n \n \n \n \n \n \n \n \n \n

\n\n \n \n\n \n \n \n `,\n {\n headers: { \"Content-Type\": \"text/html\" },\n },\n );\n }\n\n // Individual checkin pages - /checkins/:did/:rkey (new format)\n app.get(\"/checkins/:did/:rkey\", async (c) => {\n const did = c.req.param(\"did\");\n const rkey = c.req.param(\"rkey\");\n const checkinId = `${did}/${rkey}`;\n return await renderCheckinPage(c, checkinId);\n });\n\n // Legacy checkin URL format - /checkin/:identifier/:rkey (singular)\n // Used by mobile app and older links\n app.get(\"/checkin/:identifier/:rkey\", async (c) => {\n const identifier = c.req.param(\"identifier\");\n const rkey = c.req.param(\"rkey\");\n const checkinId = `${identifier}/${rkey}`;\n return await renderCheckinPage(c, checkinId);\n });\n\n // Mobile auth page - serves simple standalone HTML without ES modules\n // This is required because ASWebAuthenticationSession doesn't support ES module loading from external URLs\n app.get(\n \"/mobile-auth\",\n (_c) => serveFile(\"/frontend/mobile-auth-simple.html\", import.meta.url),\n );\n\n // Catch-all route for SPA\n app.get(\"*\", (_c) => serveFile(\"/frontend/index.html\", import.meta.url));\n\n return app;\n}\n",[],[228,390,397],{"_103":405,"_95":406,"_155":407,"_157":391,"_158":140,"_159":408,"_161":162,"_105":409,"_100":410,"_164":246,"_166":411,"_167":22,"_168":-5,"_169":412,"_98":413},"fbeb9e08-b7ef-11f0-93f0-0224a6c84d84","oauth.ts","d91ad444-8a6c-11f0-9b9b-0224a6c84d84",1431,["D",1762090179895],22,"/**\n * OAuth authentication routes using @tijs/atproto-oauth-hono package\n */\n\nimport { createATProtoOAuth } from \"jsr:@tijs/atproto-oauth-hono@^0.4.0\";\nimport type { ATProtoOAuthInstance } from \"jsr:@tijs/atproto-oauth-hono@^0.4.0\";\nimport { storage } from \"../oauth/storage-adapter.ts\";\n\nconst COOKIE_SECRET = Deno.env.get(\"COOKIE_SECRET\") ||\n \"anchor-default-secret-for-development-only\";\nconst BASE_URL = (Deno.env.get(\"ANCHOR_BASE_URL\") || \"https://dropanchor.app\")\n .replace(/\\/$/, \"\");\n\n// Create OAuth instance using the package\nconst oauth: ATProtoOAuthInstance = createATProtoOAuth({\n baseUrl: BASE_URL,\n cookieSecret: COOKIE_SECRET,\n mobileScheme: \"anchor-app://auth-callback\",\n appName: \"Anchor Location Feed\",\n logoUri: `${BASE_URL}/static/anchor-logo-transparent.png`,\n policyUri: `${BASE_URL}/privacy-policy`,\n sessionTtl: 60 * 60 * 24 * 30, // 30 days for mobile compatibility\n storage,\n});\n\n// Export what other parts of the app need\nexport const oauthRoutes = oauth.routes;\nexport const sessions = oauth.sessions;\nexport { oauth }; // Export full instance for auth helpers\n",[],[228,390,406],[228,390],{"_103":416,"_95":417,"_155":418,"_157":229,"_158":140,"_159":419,"_161":162,"_105":420,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":421,"_98":521},"73359ee8-754a-11f0-8437-0224a6c84d84","services","73359fc4-754a-11f0-8437-0224a6c84d84",450,["D",1754762306936],[422,431,440,449,458,467,476,485,494,503,512],{"_103":423,"_95":424,"_155":425,"_157":418,"_158":140,"_159":426,"_161":162,"_105":427,"_100":32,"_164":246,"_166":428,"_167":22,"_168":-5,"_169":429,"_98":430},"fbde0cb6-b7ef-11f0-8c5e-0224a6c84d84","auth.ts","fbde0d6a-b7ef-11f0-8c5e-0224a6c84d84",1430,["D",1762090179873],"import { oauth } from \"../routes/oauth.ts\";\nimport type { Context } from \"jsr:@hono/hono@4.9.6\";\nimport type { SessionInterface } from \"jsr:@tijs/hono-oauth-sessions@^0.5.0\";\n\n/**\n * Get authenticated user session from OAuth with automatic token refresh.\n *\n * This function extracts the user's DID from the iron session cookie and retrieves\n * the OAuth session from storage. The underlying oauth.sessions.getOAuthSession()\n * automatically refreshes expired tokens, so this function either returns a valid\n * session or null if the session cannot be restored (e.g., refresh failed, session\n * doesn't exist, or tokens were revoked).\n *\n * @param req - The HTTP request containing the session cookie\n * @returns OAuth session with valid tokens, or null if session is invalid/expired\n *\n * @example Usage in route handlers\n * ```typescript\n * const oauthSession = await getAuthSession(c.req.raw);\n * if (!oauthSession) {\n * return unauthorizedResponse(c);\n * }\n * ```\n */\nexport async function getAuthSession(\n req: Request,\n): Promise {\n try {\n // Extract session cookie\n const cookieHeader = req.headers.get(\"cookie\");\n if (!cookieHeader || !cookieHeader.includes(\"sid=\")) {\n return null;\n }\n\n const sessionCookie = cookieHeader\n .split(\";\")\n .find((c) => c.trim().startsWith(\"sid=\"))\n ?.split(\"=\")[1];\n\n if (!sessionCookie) {\n return null;\n }\n\n // Unseal session data to get DID - use the COOKIE_SECRET from env\n const { unsealData } = await import(\"npm:iron-session@8.0.4\");\n const COOKIE_SECRET = Deno.env.get(\"COOKIE_SECRET\");\n\n if (!COOKIE_SECRET) {\n console.error(\"COOKIE_SECRET environment variable not set\");\n return null;\n }\n\n const sessionData = await unsealData(decodeURIComponent(sessionCookie), {\n password: COOKIE_SECRET,\n });\n\n const userDid = (sessionData as any)?.did || (sessionData as any)?.userId ||\n (sessionData as any)?.sub;\n\n if (!userDid) {\n console.error(\"No DID found in session data:\", sessionData);\n return null;\n }\n\n // Get OAuth session using sessions manager\n // This automatically refreshes expired tokens via the underlying oauth-client-deno\n // restore() method which checks session.isExpired and calls refresh() if needed\n const oauthSession = await oauth.sessions.getOAuthSession(userDid);\n\n if (!oauthSession) {\n console.log(\n `OAuth session not found or refresh failed for DID: ${userDid}`,\n );\n return null;\n }\n\n return oauthSession;\n } catch (error) {\n console.error(\"Failed to get authenticated session:\", error);\n return null;\n }\n}\n\n/**\n * Returns a Set-Cookie header that clears the iron session cookie.\n *\n * Use this when the OAuth session is invalid/expired to ensure the user\n * is fully logged out and will be prompted to re-authenticate.\n *\n * @returns Set-Cookie header string to clear the sid cookie\n */\nexport function clearSessionCookie(): string {\n return \"sid=; Path=/; HttpOnly; SameSite=Lax; Secure; Max-Age=0\";\n}\n\n/**\n * Helper to return a consistent 401 response with cleared session cookie.\n *\n * Use this when getAuthSession() returns null to ensure the iron session\n * cookie is cleared and the user knows they need to re-authenticate.\n *\n * @param c - Hono context\n * @returns 401 Response with cleared cookie\n */\nexport function unauthorizedResponse(c: Context): Response {\n const response = c.json(\n {\n error: \"Authentication required\",\n message: \"Please log in again\",\n code: \"SESSION_EXPIRED\",\n },\n 401,\n );\n response.headers.set(\"Set-Cookie\", clearSessionCookie());\n return response;\n}\n",[],[228,417,424],{"_103":432,"_95":433,"_155":434,"_157":418,"_158":140,"_159":435,"_161":162,"_105":436,"_100":275,"_164":246,"_166":437,"_167":22,"_168":-5,"_169":438,"_98":439},"e6f284dc-8b3d-11f0-b62f-0224a6c84d84","category-service.ts","7f6208ca-7b51-11f0-a2a8-0224a6c84d84",1005,["D",1757175843225],"// Centralized category service with efficient metadata for different use cases\n// Consolidates PlaceCategorization logic with address resolution and search strategies\n\nimport {\n PlaceCategory,\n PlaceCategoryGroup,\n PlaceCategoryGroupInfo,\n} from \"../models/place-models.ts\";\n\n// Category metadata for efficient use case filtering\nexport interface CategoryMetadata {\n includeInDefaultSearch: boolean; // Include in default search queries (vs on-demand when user specifies)\n addressStrategy: \"venue\" | \"geographic\" | \"standard\"; // Address resolution: venue=skip geocoding, geographic=use Nominatim\n socialRelevance: boolean; // Check-in worthy places for social feeds\n}\n\n// Extended category definition with metadata\nexport interface CategoryDefinition {\n tag: string; // \"amenity\", \"leisure\", etc.\n value: string; // \"cafe\", \"restaurant\", etc.\n group: PlaceCategoryGroup;\n icon: string;\n metadata: CategoryMetadata;\n}\n\nexport class CategoryService {\n // Centralized category definitions with metadata\n private static readonly CATEGORY_DEFINITIONS: CategoryDefinition[] = [\n // === FOOD & DRINK ===\n {\n tag: \"amenity\",\n value: \"restaurant\",\n group: PlaceCategoryGroup.FOOD_AND_DRINK,\n icon: \"🍽️\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"amenity\",\n value: \"cafe\",\n group: PlaceCategoryGroup.FOOD_AND_DRINK,\n icon: \"☕\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"amenity\",\n value: \"bar\",\n group: PlaceCategoryGroup.FOOD_AND_DRINK,\n icon: \"🍺\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"amenity\",\n value: \"pub\",\n group: PlaceCategoryGroup.FOOD_AND_DRINK,\n icon: \"🍺\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"amenity\",\n value: \"fast_food\",\n group: PlaceCategoryGroup.FOOD_AND_DRINK,\n icon: \"🍽️\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"amenity\",\n value: \"ice_cream\",\n group: PlaceCategoryGroup.FOOD_AND_DRINK,\n icon: \"🍦\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"amenity\",\n value: \"biergarten\",\n group: PlaceCategoryGroup.FOOD_AND_DRINK,\n icon: \"🍻\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"amenity\",\n value: \"food_court\",\n group: PlaceCategoryGroup.FOOD_AND_DRINK,\n icon: \"🍽️\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"venue\",\n socialRelevance: false,\n },\n },\n {\n tag: \"shop\",\n value: \"bakery\",\n group: PlaceCategoryGroup.FOOD_AND_DRINK,\n icon: \"🥖\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"venue\",\n socialRelevance: false,\n },\n },\n {\n tag: \"shop\",\n value: \"wine\",\n group: PlaceCategoryGroup.FOOD_AND_DRINK,\n icon: \"🍷\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"venue\",\n socialRelevance: false,\n },\n },\n {\n tag: \"shop\",\n value: \"coffee\",\n group: PlaceCategoryGroup.FOOD_AND_DRINK,\n icon: \"☕\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"venue\",\n socialRelevance: false,\n },\n },\n {\n tag: \"shop\",\n value: \"supermarket\",\n group: PlaceCategoryGroup.FOOD_AND_DRINK,\n icon: \"🛒\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"shop\",\n value: \"convenience\",\n group: PlaceCategoryGroup.FOOD_AND_DRINK,\n icon: \"🛒\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n\n // === ENTERTAINMENT ===\n {\n tag: \"amenity\",\n value: \"cinema\",\n group: PlaceCategoryGroup.ENTERTAINMENT,\n icon: \"🎬\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"amenity\",\n value: \"theatre\",\n group: PlaceCategoryGroup.ENTERTAINMENT,\n icon: \"🎭\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"amenity\",\n value: \"nightclub\",\n group: PlaceCategoryGroup.ENTERTAINMENT,\n icon: \"💃\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"amenity\",\n value: \"casino\",\n group: PlaceCategoryGroup.ENTERTAINMENT,\n icon: \"🎰\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"venue\",\n socialRelevance: false,\n },\n },\n {\n tag: \"leisure\",\n value: \"bowling_alley\",\n group: PlaceCategoryGroup.ENTERTAINMENT,\n icon: \"🎳\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"leisure\",\n value: \"amusement_arcade\",\n group: PlaceCategoryGroup.ENTERTAINMENT,\n icon: \"🕹️\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"tourism\",\n value: \"theme_park\",\n group: PlaceCategoryGroup.ENTERTAINMENT,\n icon: \"🎢\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"geographic\",\n socialRelevance: true,\n },\n },\n\n // === SPORTS & FITNESS ===\n {\n tag: \"leisure\",\n value: \"fitness_centre\",\n group: PlaceCategoryGroup.SPORTS,\n icon: \"🏋️‍♂️\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"leisure\",\n value: \"sports_centre\",\n group: PlaceCategoryGroup.SPORTS,\n icon: \"🏋️‍♂️\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"leisure\",\n value: \"climbing\",\n group: PlaceCategoryGroup.SPORTS,\n icon: \"🧗‍♂️\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"leisure\",\n value: \"swimming_pool\",\n group: PlaceCategoryGroup.SPORTS,\n icon: \"🏊‍♂️\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"geographic\",\n socialRelevance: true,\n },\n },\n {\n tag: \"leisure\",\n value: \"golf_course\",\n group: PlaceCategoryGroup.SPORTS,\n icon: \"⛳\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"geographic\",\n socialRelevance: true,\n },\n },\n {\n tag: \"leisure\",\n value: \"stadium\",\n group: PlaceCategoryGroup.SPORTS,\n icon: \"🏟️\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"geographic\",\n socialRelevance: true,\n },\n },\n\n // === CULTURE & ATTRACTIONS ===\n {\n tag: \"tourism\",\n value: \"attraction\",\n group: PlaceCategoryGroup.ENTERTAINMENT,\n icon: \"📍\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"geographic\",\n socialRelevance: true,\n },\n },\n {\n tag: \"tourism\",\n value: \"museum\",\n group: PlaceCategoryGroup.CULTURE,\n icon: \"🏛️\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"tourism\",\n value: \"gallery\",\n group: PlaceCategoryGroup.CULTURE,\n icon: \"🎨\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"tourism\",\n value: \"zoo\",\n group: PlaceCategoryGroup.ENTERTAINMENT,\n icon: \"📍\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"geographic\",\n socialRelevance: true,\n },\n },\n {\n tag: \"tourism\",\n value: \"viewpoint\",\n group: PlaceCategoryGroup.ENTERTAINMENT,\n icon: \"🔭\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"geographic\",\n socialRelevance: true,\n },\n },\n\n // === NATURE & PARKS ===\n {\n tag: \"leisure\",\n value: \"park\",\n group: PlaceCategoryGroup.NATURE,\n icon: \"🌳\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"geographic\",\n socialRelevance: true,\n },\n },\n {\n tag: \"leisure\",\n value: \"playground\",\n group: PlaceCategoryGroup.NATURE,\n icon: \"🛝\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"geographic\",\n socialRelevance: true,\n },\n },\n {\n tag: \"leisure\",\n value: \"beach_resort\",\n group: PlaceCategoryGroup.NATURE,\n icon: \"🏖️\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"geographic\",\n socialRelevance: false,\n },\n },\n\n // === ACCOMMODATION ===\n {\n tag: \"tourism\",\n value: \"hotel\",\n group: PlaceCategoryGroup.ACCOMMODATION,\n icon: \"🏨\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"tourism\",\n value: \"hostel\",\n group: PlaceCategoryGroup.ACCOMMODATION,\n icon: \"🏠\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"venue\",\n socialRelevance: false,\n },\n },\n\n // === TRANSPORTATION ===\n {\n tag: \"amenity\",\n value: \"fuel\",\n group: PlaceCategoryGroup.TRANSPORTATION,\n icon: \"⛽\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n\n // === SHOPPING ===\n {\n tag: \"shop\",\n value: \"clothes\",\n group: PlaceCategoryGroup.SHOPPING,\n icon: \"👕\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"shop\",\n value: \"electronics\",\n group: PlaceCategoryGroup.SHOPPING,\n icon: \"📱\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"shop\",\n value: \"books\",\n group: PlaceCategoryGroup.CULTURE,\n icon: \"📚\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n\n // === SERVICES ===\n {\n tag: \"amenity\",\n value: \"bank\",\n group: PlaceCategoryGroup.SERVICES,\n icon: \"🏦\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"amenity\",\n value: \"library\",\n group: PlaceCategoryGroup.EDUCATION,\n icon: \"🏛️\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n\n // === EDUCATION ===\n {\n tag: \"amenity\",\n value: \"school\",\n group: PlaceCategoryGroup.EDUCATION,\n icon: \"🎓\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"amenity\",\n value: \"university\",\n group: PlaceCategoryGroup.EDUCATION,\n icon: \"🎓\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n\n // === HEALTH ===\n {\n tag: \"amenity\",\n value: \"hospital\",\n group: PlaceCategoryGroup.HEALTH,\n icon: \"🏥\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"venue\",\n socialRelevance: false,\n },\n },\n {\n tag: \"amenity\",\n value: \"pharmacy\",\n group: PlaceCategoryGroup.HEALTH,\n icon: \"💊\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"venue\",\n socialRelevance: false,\n },\n },\n\n // === ON-DEMAND CATEGORIES (not included in default search) ===\n // These provide proper categorization when places are found via user-specified searches,\n // but aren't included in default discovery queries (utility services, overly specific shops, etc.)\n\n // Additional amenities\n {\n tag: \"amenity\",\n value: \"atm\",\n group: PlaceCategoryGroup.SERVICES,\n icon: \"📍\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"standard\",\n socialRelevance: false,\n },\n },\n {\n tag: \"amenity\",\n value: \"toilets\",\n group: PlaceCategoryGroup.SERVICES,\n icon: \"📍\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"standard\",\n socialRelevance: false,\n },\n },\n {\n tag: \"amenity\",\n value: \"bench\",\n group: PlaceCategoryGroup.SERVICES,\n icon: \"📍\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"standard\",\n socialRelevance: false,\n },\n },\n\n // Additional shops\n {\n tag: \"shop\",\n value: \"shoes\",\n group: PlaceCategoryGroup.SHOPPING,\n icon: \"👟\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"venue\",\n socialRelevance: false,\n },\n },\n {\n tag: \"shop\",\n value: \"jewelry\",\n group: PlaceCategoryGroup.SHOPPING,\n icon: \"💍\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"venue\",\n socialRelevance: false,\n },\n },\n {\n tag: \"shop\",\n value: \"florist\",\n group: PlaceCategoryGroup.SHOPPING,\n icon: \"💐\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"venue\",\n socialRelevance: false,\n },\n },\n\n // Additional leisure\n {\n tag: \"leisure\",\n value: \"garden\",\n group: PlaceCategoryGroup.NATURE,\n icon: \"📍\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"geographic\",\n socialRelevance: false,\n },\n },\n {\n tag: \"leisure\",\n value: \"marina\",\n group: PlaceCategoryGroup.TRANSPORTATION,\n icon: \"📍\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"geographic\",\n socialRelevance: false,\n },\n },\n\n // Additional tourism\n {\n tag: \"tourism\",\n value: \"monument\",\n group: PlaceCategoryGroup.CULTURE,\n icon: \"📍\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"geographic\",\n socialRelevance: false,\n },\n },\n {\n tag: \"tourism\",\n value: \"memorial\",\n group: PlaceCategoryGroup.CULTURE,\n icon: \"📍\",\n metadata: {\n includeInDefaultSearch: false,\n addressStrategy: \"geographic\",\n socialRelevance: false,\n },\n },\n\n // === HEALTH ===\n {\n tag: \"amenity\",\n value: \"healthcare\",\n group: PlaceCategoryGroup.HEALTH,\n icon: \"🏥\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"healthcare\",\n value: \"physiotherapist\",\n group: PlaceCategoryGroup.HEALTH,\n icon: \"🏥\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"amenity\",\n value: \"doctors\",\n group: PlaceCategoryGroup.HEALTH,\n icon: \"👩‍⚕️\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n {\n tag: \"amenity\",\n value: \"dentist\",\n group: PlaceCategoryGroup.HEALTH,\n icon: \"🦷\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"venue\",\n socialRelevance: true,\n },\n },\n\n // === NATURE ===\n {\n tag: \"natural\",\n value: \"peak\",\n group: PlaceCategoryGroup.NATURE,\n icon: \"⛰️\",\n metadata: {\n includeInDefaultSearch: true,\n addressStrategy: \"geographic\",\n socialRelevance: true,\n },\n },\n ];\n\n // Category group definitions\n private static readonly CATEGORY_GROUPS: Record<\n PlaceCategoryGroup,\n PlaceCategoryGroupInfo\n > = {\n [PlaceCategoryGroup.FOOD_AND_DRINK]: {\n id: PlaceCategoryGroup.FOOD_AND_DRINK,\n name: \"Food & Drink\",\n icon: \"🍽️\",\n },\n [PlaceCategoryGroup.ENTERTAINMENT]: {\n id: PlaceCategoryGroup.ENTERTAINMENT,\n name: \"Entertainment\",\n icon: \"🎭\",\n },\n [PlaceCategoryGroup.SPORTS]: {\n id: PlaceCategoryGroup.SPORTS,\n name: \"Sports & Fitness\",\n icon: \"🏃‍♂️\",\n },\n [PlaceCategoryGroup.SHOPPING]: {\n id: PlaceCategoryGroup.SHOPPING,\n name: \"Shopping\",\n icon: \"🛍️\",\n },\n [PlaceCategoryGroup.ACCOMMODATION]: {\n id: PlaceCategoryGroup.ACCOMMODATION,\n name: \"Accommodation\",\n icon: \"🏨\",\n },\n [PlaceCategoryGroup.TRANSPORTATION]: {\n id: PlaceCategoryGroup.TRANSPORTATION,\n name: \"Transportation\",\n icon: \"🚌\",\n },\n [PlaceCategoryGroup.SERVICES]: {\n id: PlaceCategoryGroup.SERVICES,\n name: \"Services\",\n icon: \"🏛️\",\n },\n [PlaceCategoryGroup.NATURE]: {\n id: PlaceCategoryGroup.NATURE,\n name: \"Nature & Parks\",\n icon: \"🌳\",\n },\n [PlaceCategoryGroup.CULTURE]: {\n id: PlaceCategoryGroup.CULTURE,\n name: \"Culture\",\n icon: \"🎨\",\n },\n [PlaceCategoryGroup.HEALTH]: {\n id: PlaceCategoryGroup.HEALTH,\n name: \"Health\",\n icon: \"🏥\",\n },\n [PlaceCategoryGroup.EDUCATION]: {\n id: PlaceCategoryGroup.EDUCATION,\n name: \"Education\",\n icon: \"📚\",\n },\n };\n\n // === USE CASE SPECIFIC METHODS ===\n\n /**\n * Get categories for default Overpass API queries (when user doesn't specify categories)\n * Returns OSM tag format: [\"amenity=restaurant\", \"amenity=cafe\", ...]\n */\n static getDefaultSearchCategories(): string[] {\n return this.CATEGORY_DEFINITIONS\n .filter((def) => def.metadata.includeInDefaultSearch)\n .map((def) => `${def.tag}=${def.value}`)\n .sort();\n }\n\n /**\n * Check if a category value should use venue address strategy (skip expensive geocoding)\n * Used by OverpassService.isVenueWithGoodAddress()\n */\n static shouldUseVenueAddressStrategy(categoryValue: string): boolean {\n const definition = this.CATEGORY_DEFINITIONS.find((def) =>\n def.value === categoryValue\n );\n return definition?.metadata.addressStrategy === \"venue\" || false;\n }\n\n /**\n * Check if a category value should use geographic address strategy (use Nominatim)\n * Used by OverpassService.isGeographicArea()\n */\n static shouldUseGeographicAddressStrategy(categoryValue: string): boolean {\n const definition = this.CATEGORY_DEFINITIONS.find((def) =>\n def.value === categoryValue\n );\n return definition?.metadata.addressStrategy === \"geographic\" || false;\n }\n\n /**\n * Get socially relevant categories (check-in worthy places)\n * Returns OSM tag format for social feed prioritization\n */\n static getSociallyRelevantCategories(): string[] {\n return this.CATEGORY_DEFINITIONS\n .filter((def) => def.metadata.socialRelevance)\n .map((def) => `${def.tag}=${def.value}`)\n .sort();\n }\n\n // === BACKWARD COMPATIBILITY METHODS ===\n\n /**\n * Get all categories as OSM tag strings (backward compatibility)\n */\n static getAllCategories(): string[] {\n return this.CATEGORY_DEFINITIONS\n .map((def) => `${def.tag}=${def.value}`)\n .sort();\n }\n\n /**\n * Get prioritized categories (backward compatibility)\n * Maps to default search categories\n */\n static getPrioritizedCategories(): string[] {\n return this.getDefaultSearchCategories();\n }\n\n /**\n * Get category group for tag/value pair (backward compatibility)\n */\n static getCategoryGroup(\n tag: string,\n value: string,\n ): PlaceCategoryGroup | null {\n const definition = this.CATEGORY_DEFINITIONS.find((def) =>\n def.tag === tag && def.value === value\n );\n return definition?.group ?? null;\n }\n\n /**\n * Get icon for tag/value pair (backward compatibility)\n */\n static getIcon(tag: string, value: string): string {\n const definition = this.CATEGORY_DEFINITIONS.find((def) =>\n def.tag === tag && def.value === value\n );\n return definition?.icon ?? \"📍\";\n }\n\n /**\n * Get all category objects with IDs (backward compatibility)\n */\n static getAllCategoryObjects(): PlaceCategory[] {\n return this.CATEGORY_DEFINITIONS.map((def) => ({\n id: `${def.tag}_${def.value}`,\n name: this.formatCategoryName(def.value),\n icon: def.icon,\n group: def.group,\n osmTag: `${def.tag}=${def.value}`,\n })).sort((a, b) => a.name.localeCompare(b.name));\n }\n\n /**\n * Get category by ID (backward compatibility)\n */\n static getCategoryById(id: string): PlaceCategory | null {\n const underscoreIndex = id.indexOf(\"_\");\n if (underscoreIndex === -1) return null;\n\n const tag = id.substring(0, underscoreIndex);\n const value = id.substring(underscoreIndex + 1);\n if (!tag || !value) return null;\n\n // Validate that this is a real category\n const definition = this.CATEGORY_DEFINITIONS.find((def) =>\n def.tag === tag && def.value === value\n );\n if (!definition) return null;\n\n return {\n id,\n name: this.formatCategoryName(value),\n icon: definition.icon,\n group: definition.group,\n osmTag: `${tag}=${value}`,\n };\n }\n\n /**\n * Get category group info (backward compatibility)\n */\n static getCategoryGroupInfo(\n group: PlaceCategoryGroup,\n ): PlaceCategoryGroupInfo {\n return this.CATEGORY_GROUPS[group];\n }\n\n // === UTILITY METHODS ===\n\n /**\n * Format category value to display name\n */\n private static formatCategoryName(value: string): string {\n return value.split(\"_\").map((word) =>\n word.charAt(0).toUpperCase() + word.slice(1)\n ).join(\" \");\n }\n\n /**\n * Get detailed category information including metadata\n */\n static getCategoryDetails(\n tag: string,\n value: string,\n ): CategoryDefinition | null {\n return this.CATEGORY_DEFINITIONS.find((def) =>\n def.tag === tag && def.value === value\n ) ?? null;\n }\n\n /**\n * Get all category definitions (for admin/debugging)\n */\n static getAllCategoryDefinitions(): CategoryDefinition[] {\n return [...this.CATEGORY_DEFINITIONS];\n }\n}\n",[],[228,417,433],{"_103":441,"_95":442,"_155":443,"_157":418,"_158":140,"_159":444,"_161":162,"_105":445,"_100":32,"_164":246,"_166":446,"_167":22,"_168":-5,"_169":447,"_98":448},"4e82de44-a6aa-11f0-a43e-0224a6c84d84","checkin-migration-service.ts","4e82deee-a6aa-11f0-a43e-0224a6c84d84",1389,["D",1760191084023],"/**\n * Service for migrating user checkins to ensure they conform to the current lexicon\n * Specifically handles coordinate format migration from floats to strings (DAG-CBOR compliance)\n */\n\ninterface OAuthSession {\n did: string;\n pdsUrl: string;\n makeRequest: (\n method: string,\n url: string,\n options?: any,\n ) => Promise;\n}\n\ninterface CheckinRecord {\n uri: string;\n cid: string;\n value: {\n $type: string;\n text: string;\n createdAt: string;\n coordinates: {\n latitude: string | number;\n longitude: string | number;\n };\n addressRef: {\n uri: string;\n cid: string;\n };\n category?: string;\n categoryGroup?: string;\n categoryIcon?: string;\n image?: any;\n };\n}\n\n/**\n * Check if coordinates need migration (are numbers instead of strings)\n */\nfunction needsCoordinateMigration(record: CheckinRecord): boolean {\n const coords = record.value.coordinates;\n return typeof coords.latitude === \"number\" ||\n typeof coords.longitude === \"number\";\n}\n\n/**\n * Migrate a single checkin record to have string coordinates\n */\nasync function migrateCheckinRecord(\n record: CheckinRecord,\n oauthSession: OAuthSession,\n): Promise<{ success: boolean; error?: string }> {\n try {\n const rkey = record.uri.split(\"/\").pop();\n if (!rkey) {\n return { success: false, error: \"Could not extract rkey from URI\" };\n }\n\n // Create updated record with string coordinates\n const updatedValue = {\n ...record.value,\n coordinates: {\n latitude: String(record.value.coordinates.latitude),\n longitude: String(record.value.coordinates.longitude),\n },\n };\n\n // Update the record using putRecord (updates existing record)\n const response = await oauthSession.makeRequest(\n \"POST\",\n `${oauthSession.pdsUrl}/xrpc/com.atproto.repo.putRecord`,\n {\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n repo: oauthSession.did,\n collection: \"app.dropanchor.checkin\",\n rkey: rkey,\n record: updatedValue,\n }),\n },\n );\n\n if (!response.ok) {\n const errorText = await response.text();\n return {\n success: false,\n error: `PDS returned ${response.status}: ${errorText}`,\n };\n }\n\n return { success: true };\n } catch (error) {\n return {\n success: false,\n error: error instanceof Error ? error.message : String(error),\n };\n }\n}\n\n/**\n * Migrate all checkins for a user to ensure coordinates are strings\n * Returns count of migrated records\n */\nexport async function migrateUserCheckins(\n oauthSession: OAuthSession,\n): Promise<{ migrated: number; failed: number; errors: string[] }> {\n const result = {\n migrated: 0,\n failed: 0,\n errors: [] as string[],\n };\n\n try {\n // Fetch all checkins for the user\n const listResponse = await fetch(\n `${oauthSession.pdsUrl}/xrpc/com.atproto.repo.listRecords?repo=${oauthSession.did}&collection=app.dropanchor.checkin&limit=100`,\n );\n\n if (!listResponse.ok) {\n result.errors.push(\n `Failed to fetch checkins: ${listResponse.status}`,\n );\n return result;\n }\n\n const data = await listResponse.json();\n\n if (!data.records || data.records.length === 0) {\n console.log(`✅ No checkins to migrate for ${oauthSession.did}`);\n return result;\n }\n\n console.log(\n `🔍 Checking ${data.records.length} checkins for ${oauthSession.did}`,\n );\n\n // Find records that need migration\n const recordsToMigrate = data.records.filter((record: CheckinRecord) =>\n needsCoordinateMigration(record)\n );\n\n if (recordsToMigrate.length === 0) {\n console.log(\n `✅ All ${data.records.length} checkins already have valid coordinates for ${oauthSession.did}`,\n );\n return result;\n }\n\n console.log(\n `🔧 Migrating ${recordsToMigrate.length} checkins with invalid coordinates for ${oauthSession.did}`,\n );\n\n // Migrate each record\n for (const record of recordsToMigrate) {\n const rkey = record.uri.split(\"/\").pop();\n console.log(\n ` 📝 Migrating ${rkey}: lat=${record.value.coordinates.latitude} (${typeof record\n .value.coordinates\n .latitude}), lng=${record.value.coordinates.longitude} (${typeof record\n .value.coordinates.longitude})`,\n );\n\n const migrationResult = await migrateCheckinRecord(\n record,\n oauthSession,\n );\n\n if (migrationResult.success) {\n result.migrated++;\n console.log(` ✅ Migrated ${rkey}`);\n } else {\n result.failed++;\n const errorMsg = `Failed to migrate ${rkey}: ${migrationResult.error}`;\n result.errors.push(errorMsg);\n console.error(` ❌ ${errorMsg}`);\n }\n\n // Add small delay between migrations to avoid rate limits\n if (recordsToMigrate.length > 5) {\n await new Promise((resolve) => setTimeout(resolve, 100));\n }\n }\n\n if (result.migrated > 0) {\n console.log(\n `✅ Migration complete for ${oauthSession.did}: ${result.migrated} migrated, ${result.failed} failed`,\n );\n }\n\n return result;\n } catch (error) {\n const errorMsg = error instanceof Error ? error.message : String(error);\n result.errors.push(`Migration error: ${errorMsg}`);\n console.error(`❌ Migration error for ${oauthSession.did}:`, error);\n return result;\n }\n}\n\n/**\n * Run migration in background (don't block user login)\n */\nexport function migrateUserCheckinsInBackground(\n oauthSession: OAuthSession,\n): void {\n // Run migration without awaiting\n migrateUserCheckins(oauthSession)\n .then((result) => {\n if (result.migrated > 0 || result.failed > 0) {\n console.log(\n `🎉 Background migration completed for ${oauthSession.did}: ${result.migrated} migrated, ${result.failed} failed`,\n );\n }\n })\n .catch((error) => {\n console.error(\n `❌ Background migration failed for ${oauthSession.did}:`,\n error,\n );\n });\n}\n",[],[228,417,442],{"_103":450,"_95":451,"_155":452,"_157":418,"_158":140,"_159":453,"_161":162,"_105":454,"_100":120,"_164":246,"_166":455,"_167":22,"_168":-5,"_169":456,"_98":457},"3f006902-a031-11f0-aad4-0224a6c84d84","image-service.ts","97bf239a-a030-11f0-86a4-0224a6c84d84",1273,["D",1759479381884],"/**\n * Image validation and processing service for checkin attachments\n * Handles security validation, resizing, and compression\n */\n\n// Magic numbers for image format detection (security)\nconst IMAGE_SIGNATURES = {\n jpeg: [0xFF, 0xD8, 0xFF],\n png: [0x89, 0x50, 0x4E, 0x47, 0x0D, 0x0A, 0x1A, 0x0A],\n webp: [0x52, 0x49, 0x46, 0x46], // \"RIFF\" - need to check bytes 8-11 for \"WEBP\"\n gif: [0x47, 0x49, 0x46, 0x38], // \"GIF8\"\n};\n\n// Configuration\nconst MAX_UPLOAD_SIZE = 10 * 1024 * 1024; // 10MB hard limit\n\nexport interface ProcessedImage {\n thumb: Uint8Array;\n thumbMimeType: string;\n fullsize: Uint8Array;\n fullsizeMimeType: string;\n}\n\n/**\n * Validate image type by checking magic numbers (file headers)\n * More secure than trusting MIME type or extension\n */\nexport function validateImageType(\n data: Uint8Array,\n): { valid: boolean; type: string | null } {\n // Check JPEG\n if (\n data.length >= 3 &&\n data[0] === IMAGE_SIGNATURES.jpeg[0] &&\n data[1] === IMAGE_SIGNATURES.jpeg[1] &&\n data[2] === IMAGE_SIGNATURES.jpeg[2]\n ) {\n return { valid: true, type: \"image/jpeg\" };\n }\n\n // Check PNG\n if (data.length >= 8) {\n let isPng = true;\n for (let i = 0; i < IMAGE_SIGNATURES.png.length; i++) {\n if (data[i] !== IMAGE_SIGNATURES.png[i]) {\n isPng = false;\n break;\n }\n }\n if (isPng) return { valid: true, type: \"image/png\" };\n }\n\n // Check WebP (RIFF at start, WEBP at byte 8)\n if (data.length >= 12) {\n let isRiff = true;\n for (let i = 0; i < 4; i++) {\n if (data[i] !== IMAGE_SIGNATURES.webp[i]) {\n isRiff = false;\n break;\n }\n }\n if (\n isRiff &&\n data[8] === 0x57 && // W\n data[9] === 0x45 && // E\n data[10] === 0x42 && // B\n data[11] === 0x50 // P\n ) {\n return { valid: true, type: \"image/webp\" };\n }\n }\n\n // Check GIF\n if (data.length >= 6) {\n let isGif = true;\n for (let i = 0; i < 4; i++) {\n if (data[i] !== IMAGE_SIGNATURES.gif[i]) {\n isGif = false;\n break;\n }\n }\n if (isGif) return { valid: true, type: \"image/gif\" };\n }\n\n return { valid: false, type: null };\n}\n\n/**\n * Validate image file size\n */\nexport function validateImageSize(data: Uint8Array): boolean {\n return data.length <= MAX_UPLOAD_SIZE;\n}\n\n/**\n * Process image: resize to thumbnail and fullsize versions\n *\n * NOTE: Val Town doesn't support Canvas/ImageBitmap APIs, so we skip\n * server-side processing and rely on client-side compression.\n * Both thumb and fullsize use the original (client-compressed) image.\n */\nexport function processImage(\n imageData: Uint8Array,\n mimeType: string,\n): ProcessedImage {\n // Since Val Town doesn't support Canvas API, we use the same image for both\n // Client-side compression already handles resizing to <5MB\n // This is a temporary solution - for production, consider using a service\n // like Cloudflare Images or AWS Lambda with Sharp library\n\n return {\n thumb: imageData,\n thumbMimeType: mimeType,\n fullsize: imageData,\n fullsizeMimeType: mimeType,\n };\n}\n\n/**\n * Validate and process an image file\n * Returns processed image data or throws error\n */\nexport function validateAndProcessImage(\n imageData: Uint8Array,\n): ProcessedImage {\n // Validate size\n if (!validateImageSize(imageData)) {\n throw new Error(\"Image too large (max 10MB)\");\n }\n\n // Validate type via magic numbers\n const typeCheck = validateImageType(imageData);\n if (!typeCheck.valid || !typeCheck.type) {\n throw new Error(\n \"Invalid image file. Only JPEG, PNG, WebP, and GIF are supported.\",\n );\n }\n\n // Process image (no actual processing in Val Town - just return validated data)\n const processed = processImage(imageData, typeCheck.type);\n return processed;\n}\n",[],[228,417,451],{"_103":459,"_95":460,"_155":461,"_157":418,"_158":140,"_159":462,"_161":162,"_105":463,"_100":32,"_164":246,"_166":464,"_167":22,"_168":-5,"_169":465,"_98":466},"0b8aad4a-a14d-11f0-b097-0224a6c84d84","locationiq-provider.ts","0b8aadfe-a14d-11f0-b097-0224a6c84d84",1298,["D",1759601272630],"/**\n * LocationIQ provider wrapper\n * Implements PlaceProvider interface for LocationIQ Nearby API\n */\n\nimport type { PlaceProvider } from \"./places-provider.ts\";\nimport type { PlaceWithDistance } from \"../models/place-models.ts\";\nimport { LocationIQService } from \"./locationiq-service.ts\";\n\nexport class LocationIQProvider implements PlaceProvider {\n readonly name = \"locationiq\";\n private service: LocationIQService;\n\n constructor() {\n this.service = new LocationIQService();\n }\n\n async findNearbyPlacesWithDistance(\n coordinate: { latitude: number; longitude: number },\n radiusMeters: number,\n categories: string[],\n ): Promise {\n const places = await this.service.findNearbyPlaces(\n coordinate,\n radiusMeters,\n categories,\n );\n\n // Add distance calculation and formatting\n const placesWithDistance = places.map((place) => {\n const distanceMeters = this.calculateDistance(\n coordinate.latitude,\n coordinate.longitude,\n place.latitude,\n place.longitude,\n );\n\n return {\n ...place,\n distanceMeters,\n formattedDistance: this.formatDistance(distanceMeters),\n };\n });\n\n // Sort by distance (closest first)\n return placesWithDistance.sort((a, b) =>\n a.distanceMeters - b.distanceMeters\n );\n }\n\n /**\n * Calculate distance between two coordinates using Haversine formula\n * Returns distance in meters\n */\n private calculateDistance(\n lat1: number,\n lon1: number,\n lat2: number,\n lon2: number,\n ): number {\n const R = 6371000; // Earth's radius in meters\n const φ1 = lat1 * Math.PI / 180;\n const φ2 = lat2 * Math.PI / 180;\n const Δφ = (lat2 - lat1) * Math.PI / 180;\n const Δλ = (lon2 - lon1) * Math.PI / 180;\n\n const a = Math.sin(Δφ / 2) * Math.sin(Δφ / 2) +\n Math.cos(φ1) * Math.cos(φ2) *\n Math.sin(Δλ / 2) * Math.sin(Δλ / 2);\n const c = 2 * Math.atan2(Math.sqrt(a), Math.sqrt(1 - a));\n\n return R * c; // Distance in meters\n }\n\n /**\n * Format distance for display\n */\n private formatDistance(meters: number): string {\n if (meters < 1000) {\n return `${Math.round(meters)}m`;\n } else {\n return `${(meters / 1000).toFixed(1)}km`;\n }\n }\n}\n",[],[228,417,460],{"_103":468,"_95":469,"_155":470,"_157":418,"_158":140,"_159":471,"_161":162,"_105":472,"_100":120,"_164":246,"_166":473,"_167":22,"_168":-5,"_169":474,"_98":475},"0c261a9a-a153-11f0-abaa-0224a6c84d84","locationiq-service.ts","0bbb6dae-a14d-11f0-840f-0224a6c84d84",1306,["D",1759603850657],"/**\n * LocationIQ Nearby POI API service\n * https://docs.locationiq.com/reference/nearby-poi-api\n */\n\nimport type { CommunityAddressRecord, Place } from \"../models/place-models.ts\";\nimport { CategoryService } from \"./category-service.ts\";\n\ninterface LocationIQNearbyResult {\n place_id: number | string; // Can be number or string from API\n name?: string;\n display_name: string;\n lat: string;\n lon: string;\n class: string;\n type: string;\n address?: {\n road?: string;\n house_number?: string;\n city?: string;\n town?: string;\n village?: string;\n state?: string;\n country?: string;\n country_code?: string;\n postcode?: string;\n };\n extratags?: Record;\n distance?: number; // Distance in meters\n}\n\nexport class LocationIQService {\n private readonly apiKey: string;\n private readonly baseURL = \"https://us1.locationiq.com/v1\";\n private readonly cache: Map;\n private readonly cacheTTL = 24 * 60 * 60 * 1000; // 24 hours\n\n constructor() {\n const apiKey = Deno.env.get(\"LOCATION_IQ_TOKEN\");\n if (!apiKey) {\n throw new Error(\n \"LOCATION_IQ_TOKEN environment variable is required for LocationIQ provider\",\n );\n }\n this.apiKey = apiKey;\n this.cache = new Map();\n\n debugPrint(\"LocationIQ service initialized\");\n }\n\n async findNearbyPlaces(\n coordinate: { latitude: number; longitude: number },\n radiusMeters: number = 300,\n _categories: string[] = [], // Ignored - always use tag=all\n ): Promise {\n // Check cache with geo-tolerance (~100m = 0.001 degrees)\n const cacheKey = this.getCacheKey(coordinate, radiusMeters);\n const cached = this.cache.get(cacheKey);\n\n if (cached && (Date.now() - cached.timestamp) < this.cacheTTL) {\n debugPrint(`LocationIQ cache hit: ${cacheKey}`);\n return cached.data;\n }\n\n // Build API request\n const params = new URLSearchParams({\n key: this.apiKey,\n lat: coordinate.latitude.toString(),\n lon: coordinate.longitude.toString(),\n tag: \"all\", // Always return all POIs\n radius: Math.min(radiusMeters, 30000).toString(), // Max 30km per LocationIQ\n limit: \"50\", // Max results\n format: \"json\",\n });\n\n const url = `${this.baseURL}/nearby?${params}`;\n\n try {\n debugPrint(\n `LocationIQ API request: ${coordinate.latitude},${coordinate.longitude} radius=${radiusMeters}m`,\n );\n\n const response = await fetch(url);\n\n if (!response.ok) {\n if (response.status === 429) {\n throw new Error(\n \"LocationIQ rate limit exceeded - try again later or use provider=overpass\",\n );\n }\n if (response.status === 401) {\n throw new Error(\"LocationIQ API key invalid\");\n }\n throw new Error(\n `LocationIQ API error: ${response.status} ${response.statusText}`,\n );\n }\n\n const data: LocationIQNearbyResult[] = await response.json();\n debugPrint(`LocationIQ returned ${data.length} places`);\n\n const places = data.map((item) => this.parseLocationIQResult(item));\n\n // Cache results\n this.cache.set(cacheKey, { data: places, timestamp: Date.now() });\n\n return places;\n } catch (error) {\n console.error(\"LocationIQ API error:\", error);\n throw error;\n }\n }\n\n private parseLocationIQResult(item: LocationIQNearbyResult): Place {\n const latitude = parseFloat(item.lat);\n const longitude = parseFloat(item.lon);\n\n // Parse place_id to number (handles both string and number from API)\n const placeId = typeof item.place_id === \"string\"\n ? parseInt(item.place_id, 10)\n : item.place_id;\n\n // Extract name from display_name if name field is empty\n const name = item.name || item.display_name.split(\",\")[0]?.trim() ||\n \"Unknown Place\";\n\n // Parse address to CommunityAddressRecord format\n const address: CommunityAddressRecord = {\n $type: \"community.lexicon.location.address\",\n name: item.name,\n street: item.address?.road\n ? item.address.house_number\n ? `${item.address.house_number} ${item.address.road}`\n : item.address.road\n : undefined,\n locality: item.address?.city || item.address?.town ||\n item.address?.village,\n region: item.address?.state,\n country: item.address?.country_code?.toUpperCase(),\n postalCode: item.address?.postcode,\n };\n\n // Build OSM-compatible tags\n const tags: Record = {\n [item.class]: item.type,\n ...item.extratags,\n };\n\n // Get category and icon from CategoryService\n const categoryGroup = CategoryService.getCategoryGroup(\n item.class,\n item.type,\n );\n const icon = CategoryService.getIcon(item.class, item.type);\n\n return {\n id: `locationiq:${placeId}`,\n elementType: \"node\", // LocationIQ returns point data\n elementId: placeId, // Always a number for JSON compatibility\n name,\n latitude,\n longitude,\n tags,\n address,\n category: item.type,\n categoryGroup,\n icon,\n };\n }\n\n private getCacheKey(\n coordinate: { latitude: number; longitude: number },\n radius: number,\n ): string {\n // Round coordinates to ~100m precision (0.001 degrees)\n const lat = Math.round(coordinate.latitude * 1000) / 1000;\n const lng = Math.round(coordinate.longitude * 1000) / 1000;\n return `locationiq:${lat},${lng}:${radius}`;\n }\n}\n\nfunction debugPrint(message: string) {\n console.log(`[LocationIQ] ${message}`);\n}\n",[],[228,417,469],{"_103":477,"_95":478,"_155":479,"_157":418,"_158":140,"_159":480,"_161":162,"_105":481,"_100":349,"_164":246,"_166":482,"_167":22,"_168":-5,"_169":483,"_98":484},"209c9276-a5d9-11f0-bd9b-0224a6c84d84","nominatim-service.ts","7e7afcdc-7813-11f0-a1b1-0224a6c84d84",1349,["D",1760101242199],"// Nominatim reverse geocoding and search service for better locality resolution\n// Used for geographic areas (parks, beaches, etc.) that lack precise address data\n// Also provides search functionality for free-form place queries\n\nimport {\n CommunityAddressRecord,\n PlaceWithDistance,\n} from \"../models/place-models.ts\";\nimport { CategoryService } from \"./category-service.ts\";\n\nexport interface NominatimAddress {\n amenity?: string;\n leisure?: string;\n house_number?: string;\n road?: string;\n neighbourhood?: string;\n suburb?: string;\n city?: string;\n town?: string;\n village?: string;\n municipality?: string;\n county?: string;\n state?: string;\n country?: string;\n country_code?: string; // ISO 3166-1 alpha-2 code\n postcode?: string;\n}\n\nexport interface NominatimResponse {\n place_id?: number;\n licence?: string;\n osm_type?: string;\n osm_id?: number;\n lat?: string;\n lon?: string;\n display_name?: string;\n address?: NominatimAddress;\n boundingbox?: string[];\n}\n\nexport interface NominatimSearchResult {\n place_id: number;\n licence: string;\n osm_type: string;\n osm_id: number;\n lat: string;\n lon: string;\n display_name: string;\n class: string;\n type: string;\n importance?: number;\n address?: NominatimAddress;\n boundingbox?: string[];\n}\n\nexport interface NominatimServiceConfig {\n baseURL: string;\n userAgent: string;\n timeout: number;\n rateLimitDelay: number; // Nominatim requires 1 request per second max\n}\n\nexport class NominatimService {\n private readonly config: NominatimServiceConfig;\n private lastRequestTime = 0;\n\n private getBaseURL(): string {\n // Allow configurable Nominatim instance via environment variable\n return Deno.env.get(\"NOMINATIM_BASE_URL\") ||\n \"https://nominatim.geocoding.ai\";\n }\n\n constructor(config?: Partial) {\n // Defer environment variable access to avoid issues during testing\n const baseURL = config?.baseURL || this.getBaseURL();\n\n console.log(`🌐 NominatimService configured with baseURL: ${baseURL}`);\n\n this.config = {\n baseURL,\n userAgent:\n \"Anchor-AppView/1.0 (atproto check-in app; https://dropanchor.app)\",\n timeout: 15000, // 15 seconds (increased for reliability)\n rateLimitDelay: 1100, // 1.1 seconds between requests (slightly over 1/sec)\n ...config,\n };\n }\n\n /**\n * Reverse geocode coordinates to get address information\n */\n async reverseGeocode(\n coordinate: { latitude: number; longitude: number },\n ): Promise {\n await this.enforceRateLimit();\n\n const url = new URL(`${this.config.baseURL}/reverse`);\n url.searchParams.set(\"format\", \"json\");\n url.searchParams.set(\"lat\", coordinate.latitude.toString());\n url.searchParams.set(\"lon\", coordinate.longitude.toString());\n url.searchParams.set(\"zoom\", \"18\"); // High detail level\n url.searchParams.set(\"addressdetails\", \"1\");\n url.searchParams.set(\"email\", \"hello@dropanchor.app\"); // Required attribution\n\n try {\n const controller = new AbortController();\n const timeoutId = setTimeout(\n () => controller.abort(),\n this.config.timeout,\n );\n\n const response = await fetch(url.toString(), {\n signal: controller.signal,\n headers: {\n \"User-Agent\": this.config.userAgent,\n },\n });\n\n clearTimeout(timeoutId);\n\n if (!response.ok) {\n if (response.status === 429) {\n throw new Error(\"Rate limit exceeded\");\n }\n throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n }\n\n const data: NominatimResponse = await response.json();\n\n if (!data.address) {\n return null;\n }\n\n return this.parseNominatimAddress(data.address);\n } catch (error) {\n if (error instanceof DOMException && error.name === \"AbortError\") {\n throw new Error(\"Request timeout\");\n }\n throw error;\n }\n }\n\n /**\n * Convert Nominatim address format to our CommunityAddressRecord format\n */\n private parseNominatimAddress(\n address: NominatimAddress,\n ): CommunityAddressRecord {\n // Build street address from components\n let street: string | undefined;\n if (address.road) {\n street = address.house_number\n ? `${address.house_number} ${address.road}`\n : address.road;\n }\n\n // Smart locality selection using Nominatim's hierarchy\n // Priority: town > city > village > municipality > suburb\n const locality = address.town ||\n address.city ||\n address.village ||\n address.municipality ||\n address.suburb;\n\n // Region mapping (state/province)\n const region = address.state;\n\n // Use ISO country code (uppercase for standard format)\n const country = address.country_code?.toUpperCase();\n\n return {\n $type: \"community.lexicon.location.address\",\n name: address.amenity || address.leisure, // For named venues\n street,\n locality,\n region,\n country,\n postalCode: address.postcode,\n };\n }\n\n /**\n * Search for places by query with geographic bounds\n */\n async searchPlaces(\n query: string,\n center: { latitude: number; longitude: number },\n options?: {\n country?: string;\n limit?: number;\n radiusKm?: number;\n },\n ): Promise {\n await this.enforceRateLimit();\n\n const { country, limit = 10 } = options || {};\n\n // Use original query unchanged - rely on viewbox for geographic constraints\n console.log(`🎯 Using original query unchanged: \"${query}\"`);\n\n const url = new URL(`${this.config.baseURL}/search`);\n url.searchParams.set(\"format\", \"json\");\n url.searchParams.set(\"q\", query); // Use original query unchanged\n url.searchParams.set(\"addressdetails\", \"1\");\n url.searchParams.set(\"limit\", Math.min(limit, 25).toString());\n url.searchParams.set(\"email\", \"hello@dropanchor.app\");\n\n if (country) {\n url.searchParams.set(\"countrycodes\", country.toLowerCase());\n }\n\n // Add viewbox for location-specific search (4x4km as originally requested)\n const radiusKm = 2; // 2km radius = 4km x 4km box\n const latOffset = radiusKm / 111; // Rough km to degree conversion for lat\n const lngOffset = radiusKm /\n (111 * Math.cos(center.latitude * Math.PI / 180)); // Adjust for longitude\n\n const viewbox = [\n center.longitude - lngOffset, // left (min longitude)\n center.latitude + latOffset, // top (max latitude)\n center.longitude + lngOffset, // right (max longitude)\n center.latitude - latOffset, // bottom (min latitude)\n ].join(\",\");\n\n url.searchParams.set(\"viewbox\", viewbox);\n url.searchParams.set(\"bounded\", \"1\"); // Only return results within viewbox\n\n try {\n const controller = new AbortController();\n const timeoutId = setTimeout(\n () => {\n console.warn(\n `Nominatim search timeout after ${this.config.timeout}ms for query: \"${query}\"`,\n );\n controller.abort();\n },\n this.config.timeout,\n );\n\n console.log(\n `🌐 Nominatim search: \"${query}\" near ${center.latitude},${center.longitude}`,\n );\n const startTime = Date.now();\n\n const response = await fetch(url.toString(), {\n signal: controller.signal,\n headers: {\n \"User-Agent\": this.config.userAgent,\n },\n });\n\n clearTimeout(timeoutId);\n const responseTime = Date.now() - startTime;\n console.log(\n `📊 Nominatim response: ${response.status} (${responseTime}ms)`,\n );\n\n if (!response.ok) {\n if (response.status === 429) {\n throw new Error(\"Rate limit exceeded - try again in a few seconds\");\n }\n throw new Error(`HTTP ${response.status}: ${response.statusText}`);\n }\n\n const data: NominatimSearchResult[] = await response.json();\n\n // Convert to Place objects with distance\n const places = data\n .filter((result) => result.lat && result.lon) // Filter out results without coordinates\n .map((result): PlaceWithDistance => {\n const latitude = parseFloat(result.lat);\n const longitude = parseFloat(result.lon);\n const distanceMeters = this.calculateDistance(\n center.latitude,\n center.longitude,\n latitude,\n longitude,\n ) * 1000; // Convert km to meters\n\n // Generate a unique ID\n const id = `${result.osm_type}:${result.osm_id}`;\n\n // Extract name from display_name or use OSM tags\n const name = this.extractPlaceName(result);\n\n // Parse address from Nominatim address\n const address = result.address\n ? this.parseNominatimAddress(result.address)\n : {\n $type: \"community.lexicon.location.address\" as const,\n locality: this.extractLocalityFromDisplayName(\n result.display_name,\n ),\n };\n\n // Create proper tags from OSM class/type for CategoryService\n const tags = { [result.class]: result.type };\n\n // Use CategoryService for consistent category and icon assignment\n const _categoryGroup = CategoryService.getCategoryGroup(\n result.class,\n result.type,\n );\n const icon = CategoryService.getIcon(result.class, result.type);\n\n return {\n id,\n elementType: result.osm_type === \"node\"\n ? \"node\"\n : result.osm_type === \"way\"\n ? \"way\"\n : \"relation\",\n elementId: result.osm_id,\n name,\n latitude,\n longitude,\n tags,\n address,\n category: result.type,\n icon,\n distanceMeters,\n formattedDistance: this.formatDistance(distanceMeters),\n };\n })\n .sort((a, b) => a.distanceMeters - b.distanceMeters); // Sort by distance\n\n console.log(\n `✅ Nominatim search completed: ${places.length} places found`,\n );\n return places;\n } catch (error) {\n if (error instanceof DOMException && error.name === \"AbortError\") {\n console.error(\n `⏰ Nominatim search timeout for \"${query}\" after ${this.config.timeout}ms`,\n );\n throw new Error(\n `Search timeout after ${\n this.config.timeout / 1000\n } seconds - Nominatim may be slow, try again`,\n );\n }\n console.error(`❌ Nominatim search error for \"${query}\":`, error);\n throw error;\n }\n }\n\n /**\n * Extract a clean place name from Nominatim search result\n */\n private extractPlaceName(result: NominatimSearchResult): string {\n // For amenities and leisure facilities, the display name often starts with the venue name\n const parts = result.display_name.split(\",\");\n const firstPart = parts[0]?.trim();\n\n // If it looks like a venue name (not a generic address), use it\n if (firstPart && !firstPart.match(/^\\d+/)) { // Doesn't start with a number (street address)\n return firstPart;\n }\n\n // Fallback to class/type-based naming\n return this.getGenericNameForClassType(result.class, result.type);\n }\n\n /**\n * Extract locality from display_name when address details are missing\n */\n private extractLocalityFromDisplayName(\n displayName: string,\n ): string | undefined {\n const parts = displayName.split(\",\").map((p) => p.trim());\n // Usually locality is the second-to-last part before country\n if (parts.length >= 3) {\n return parts[parts.length - 2];\n }\n return undefined;\n }\n\n /**\n * Generate generic name for class/type when specific name is unavailable\n */\n private getGenericNameForClassType(\n osmClass: string,\n osmType: string,\n ): string {\n const nameMap: Record = {\n \"amenity:restaurant\": \"Restaurant\",\n \"amenity:cafe\": \"Cafe\",\n \"amenity:bar\": \"Bar\",\n \"amenity:pub\": \"Pub\",\n \"amenity:fast_food\": \"Fast Food\",\n \"amenity:bank\": \"Bank\",\n \"amenity:hospital\": \"Hospital\",\n \"amenity:pharmacy\": \"Pharmacy\",\n \"amenity:fuel\": \"Gas Station\",\n \"amenity:school\": \"School\",\n \"amenity:library\": \"Library\",\n \"tourism:attraction\": \"Attraction\",\n \"tourism:museum\": \"Museum\",\n \"tourism:hotel\": \"Hotel\",\n \"natural:peak\": \"Mountain Peak\",\n \"natural:beach\": \"Beach\",\n \"natural:forest\": \"Forest\",\n \"natural:lake\": \"Lake\",\n \"leisure:park\": \"Park\",\n \"leisure:sports_centre\": \"Sports Center\",\n };\n\n return nameMap[`${osmClass}:${osmType}`] ||\n `${\n osmType.charAt(0).toUpperCase() + osmType.slice(1).replace(/_/g, \" \")\n }`;\n }\n\n /**\n * Calculate distance between two coordinates in kilometers\n */\n private calculateDistance(\n lat1: number,\n lng1: number,\n lat2: number,\n lng2: number,\n ): number {\n const R = 6371; // Earth's radius in km\n const dLat = (lat2 - lat1) * Math.PI / 180;\n const dLng = (lng2 - lng1) * Math.PI / 180;\n const a = Math.sin(dLat / 2) * Math.sin(dLat / 2) +\n Math.cos(lat1 * Math.PI / 180) * Math.cos(lat2 * Math.PI / 180) *\n Math.sin(dLng / 2) * Math.sin(dLng / 2);\n const c = 2 * Math.atan2(Math.sqrt(a), Math.sqrt(1 - a));\n return R * c;\n }\n\n /**\n * Format distance for display\n */\n private formatDistance(meters: number): string {\n if (meters < 1000) {\n return `${Math.round(meters)}m`;\n } else {\n return `${(meters / 1000).toFixed(1)}km`;\n }\n }\n\n /**\n * Enforce rate limiting (1 request per second max for Nominatim)\n */\n private async enforceRateLimit(): Promise {\n const now = Date.now();\n const timeSinceLastRequest = now - this.lastRequestTime;\n\n if (timeSinceLastRequest < this.config.rateLimitDelay) {\n const delay = this.config.rateLimitDelay - timeSinceLastRequest;\n await new Promise((resolve) => setTimeout(resolve, delay));\n }\n\n this.lastRequestTime = Date.now();\n }\n}\n",[],[228,417,478],{"_103":486,"_95":487,"_155":488,"_157":418,"_158":140,"_159":489,"_161":162,"_105":490,"_100":32,"_164":246,"_166":491,"_167":22,"_168":-5,"_169":492,"_98":493},"0ba033cc-a14d-11f0-9fcf-0224a6c84d84","overpass-provider.ts","0ba03462-a14d-11f0-9fcf-0224a6c84d84",1301,["D",1759601272641],"/**\n * Overpass provider wrapper\n * Wraps existing OverpassService to implement PlaceProvider interface\n */\n\nimport type { PlaceProvider } from \"./places-provider.ts\";\nimport type { PlaceWithDistance } from \"../models/place-models.ts\";\nimport { OverpassService } from \"./overpass-service.ts\";\n\nexport class OverpassProvider implements PlaceProvider {\n readonly name = \"overpass\";\n private service: OverpassService;\n\n constructor() {\n this.service = new OverpassService();\n }\n\n async findNearbyPlacesWithDistance(\n coordinate: { latitude: number; longitude: number },\n radiusMeters: number,\n categories: string[],\n ): Promise {\n return await this.service.findNearbyPlacesWithDistance(\n coordinate,\n radiusMeters,\n categories,\n );\n }\n}\n",[],[228,417,487],{"_103":495,"_95":496,"_155":497,"_157":418,"_158":140,"_159":498,"_161":162,"_105":499,"_100":349,"_164":246,"_166":500,"_167":22,"_168":-5,"_169":501,"_98":502},"39121d48-a04e-11f0-8f18-0224a6c84d84","overpass-service.ts","7360f34a-754a-11f0-b6a9-0224a6c84d84",1293,["D",1759491827373],"// Overpass API service for querying OpenStreetMap data\n// TypeScript port of Swift OverpassService with address extraction\n\nimport {\n CommunityAddressRecord,\n OverpassElement,\n OverpassError,\n OverpassResponse,\n OverpassServiceConfig,\n Place,\n PlaceCategoryGroup,\n PlaceWithDistance,\n} from \"../models/place-models.ts\";\nimport { CategoryService } from \"./category-service.ts\";\nimport { NominatimService } from \"./nominatim-service.ts\";\n\ninterface CachedPlaces {\n places: Place[];\n coordinate: { latitude: number; longitude: number };\n radiusMeters: number;\n categories: string[];\n timestamp: Date;\n}\n\nexport class OverpassService {\n private readonly config: OverpassServiceConfig;\n private readonly placesCache = new Map();\n private readonly nominatimService: NominatimService;\n\n constructor(config?: Partial) {\n this.config = {\n baseURL: \"https://overpass.private.coffee/api/interpreter\",\n timeout: 10000, // 10 seconds\n userAgent:\n \"Anchor-AppView/1.0 (atproto check-in app; https://dropanchor.app)\",\n maxResults: 50,\n defaultRadius: 300, // meters\n cacheValidDuration: 5 * 60 * 1000, // 5 minutes\n locationToleranceMeters: 100,\n ...config,\n };\n this.nominatimService = new NominatimService();\n }\n\n /**\n * Find nearby places within a given radius\n */\n async findNearbyPlaces(\n coordinate: { latitude: number; longitude: number },\n radiusMeters: number = this.config.defaultRadius,\n categories: string[] = [],\n ): Promise {\n // Cleanup expired cache entries\n this.cleanupExpiredCache();\n\n // Create cache key\n const cacheKey = this.createCacheKey(coordinate, radiusMeters, categories);\n\n // Check cache\n const cached = this.placesCache.get(cacheKey);\n if (cached && this.isCacheValid(cached, coordinate)) {\n const cacheAge = Math.floor(\n (Date.now() - cached.timestamp.getTime()) / 1000,\n );\n console.log(\n `📍 Using cached places for location (${cached.places.length} places, age: ${cacheAge}s)`,\n );\n return cached.places;\n }\n\n console.log(\n `📍 Cache miss - fetching fresh places from Overpass API (key: ${cacheKey})`,\n );\n\n // Build Overpass query\n const query = this.buildOverpassQuery(coordinate, radiusMeters, categories);\n\n // Make request\n const request = this.buildRequest(query);\n\n try {\n const controller = new AbortController();\n const timeoutId = setTimeout(\n () => controller.abort(),\n this.config.timeout,\n );\n\n const response = await fetch(request, { signal: controller.signal });\n clearTimeout(timeoutId);\n\n if (!response.ok) {\n throw OverpassError.httpError(response.status);\n }\n\n const overpassResponse: OverpassResponse = await response.json();\n const rawPlaces = overpassResponse.elements\n .map((element) => this.parseElement(element))\n .filter((place): place is Place => place !== null);\n\n // Deduplicate places by their unique ID (elementType:elementId)\n const places = this.deduplicatePlaces(rawPlaces);\n\n // Cache the results (no enhancement during discovery for speed)\n const cachedPlaces: CachedPlaces = {\n places: places,\n coordinate,\n radiusMeters,\n categories: categories.length > 0\n ? categories\n : this.getDefaultCategories(),\n timestamp: new Date(),\n };\n this.placesCache.set(cacheKey, cachedPlaces);\n\n console.log(`📍 Cached ${places.length} places for location`);\n return places;\n } catch (error) {\n if (error instanceof DOMException && error.name === \"AbortError\") {\n throw new OverpassError(\"Request timeout\");\n }\n if (error instanceof TypeError) {\n throw OverpassError.networkError(error);\n }\n throw error;\n }\n }\n\n /**\n * Find nearby places with distance information, sorted by distance\n */\n async findNearbyPlacesWithDistance(\n coordinate: { latitude: number; longitude: number },\n radiusMeters: number = this.config.defaultRadius,\n categories: string[] = [],\n ): Promise {\n const places = await this.findNearbyPlaces(\n coordinate,\n radiusMeters,\n categories,\n );\n\n // Calculate distances and create PlaceWithDistance objects\n const placesWithDistance = places.map((place) => {\n const distanceMeters = this.calculateDistance(\n coordinate.latitude,\n coordinate.longitude,\n place.latitude,\n place.longitude,\n );\n\n return {\n ...place,\n distanceMeters,\n formattedDistance: this.formatDistance(distanceMeters),\n } as PlaceWithDistance;\n });\n\n // Sort by distance (closest first)\n return placesWithDistance.sort((a, b) =>\n a.distanceMeters - b.distanceMeters\n );\n }\n\n /**\n * Get enhanced address information for a specific place\n * Uses Nominatim for geographic areas, Overpass data for venues\n */\n async getEnhancedAddress(place: Place): Promise {\n // For geographic areas, always use Nominatim for better locality resolution\n if (this.isGeographicArea(place)) {\n try {\n console.log(`🌍 Using Nominatim for geographic area: ${place.name}`);\n const nominatimAddress = await this.nominatimService.reverseGeocode({\n latitude: place.latitude,\n longitude: place.longitude,\n });\n\n if (nominatimAddress) {\n return {\n ...nominatimAddress,\n name: place.name, // Keep the original place name\n };\n }\n } catch (error) {\n console.warn(\n `Nominatim failed for ${place.name}, falling back to OSM admin boundaries:`,\n error,\n );\n // Fall through to admin boundary fallback\n }\n }\n\n // Always enhance addresses that are missing critical country/region data\n // Even venues with \"good\" address data might be missing these fields\n const needsEnhancement = !place.address?.country || !place.address?.region;\n\n if (this.isVenueWithGoodAddress(place) && !needsEnhancement) {\n console.log(`✅ Using complete venue address for: ${place.name}`);\n return place.address;\n }\n\n // Enhance with administrative boundary data\n console.log(\n `🏛️ Enhancing address with admin boundaries for: ${place.name}`,\n );\n const adminData = await this.resolveAdministrativeBoundaries({\n latitude: place.latitude,\n longitude: place.longitude,\n });\n\n // Build final address with proper fallbacks\n const finalAddress: CommunityAddressRecord = {\n $type: \"community.lexicon.location.address\",\n name: place.name,\n };\n\n // Only include fields that have actual values\n const locality = place.address?.locality || adminData.locality;\n const region = place.address?.region || adminData.region;\n const country = place.address?.country || adminData.country;\n const street = place.address?.street;\n const postalCode = place.address?.postalCode;\n\n if (locality) finalAddress.locality = locality;\n if (region) finalAddress.region = region;\n if (country) finalAddress.country = country;\n if (street) finalAddress.street = street;\n if (postalCode) finalAddress.postalCode = postalCode;\n\n // Log what we resolved for debugging\n console.log(`📍 Final address for ${place.name}:`, {\n locality: locality || \"missing\",\n region: region || \"missing\",\n country: country || \"missing\",\n adminDataReceived: Object.keys(adminData).length > 0,\n });\n\n return finalAddress;\n }\n\n /**\n * Clear all cached places data\n */\n clearCache(): void {\n this.placesCache.clear();\n console.log(\"📍 Cleared all cached places\");\n }\n\n // MARK: - Private Methods\n\n /**\n * Check if a place is a venue with good address data that doesn't need expensive geocoding\n */\n private isVenueWithGoodAddress(place: Place): boolean {\n // Has direct address components (street address indicates a specific venue)\n if (place.address?.street && place.address?.locality) {\n return true;\n }\n\n // Check if this category type should use venue address strategy\n if (!place.category) return false;\n\n const shouldUseVenueStrategy = CategoryService\n .shouldUseVenueAddressStrategy(place.category);\n\n // Must have both venue category type AND some address data\n return !!(shouldUseVenueStrategy &&\n (place.address?.street || place.address?.locality));\n }\n\n /**\n * Check if a place is a geographic area that would benefit from Nominatim\n */\n private isGeographicArea(place: Place): boolean {\n if (!place.category) return false;\n\n return CategoryService.shouldUseGeographicAddressStrategy(place.category);\n }\n\n /**\n * Remove duplicate places based on their unique ID (elementType:elementId)\n * Keeps the first occurrence when duplicates are found\n */\n private deduplicatePlaces(places: Place[]): Place[] {\n const seenIds = new Set();\n const uniquePlaces: Place[] = [];\n\n for (const place of places) {\n if (!seenIds.has(place.id)) {\n seenIds.add(place.id);\n uniquePlaces.push(place);\n }\n }\n\n const duplicatesRemoved = places.length - uniquePlaces.length;\n if (duplicatesRemoved > 0) {\n console.log(`📍 Removed ${duplicatesRemoved} duplicate places`);\n }\n\n return uniquePlaces;\n }\n\n private createCacheKey(\n coordinate: { latitude: number; longitude: number },\n radiusMeters: number,\n categories: string[],\n ): string {\n // Round to 3 decimal places for ~100 meter precision\n const roundedLat = Math.round(coordinate.latitude * 1000) / 1000;\n const roundedLon = Math.round(coordinate.longitude * 1000) / 1000;\n\n const actualCategories = categories.length > 0\n ? categories\n : this.getDefaultCategories();\n const categoriesKey = actualCategories.sort().join(\",\");\n\n return `${roundedLat},${roundedLon},${radiusMeters},${categoriesKey}`;\n }\n\n private isCacheValid(\n cached: CachedPlaces,\n coordinate: { latitude: number; longitude: number },\n ): boolean {\n // Check time-based expiration\n const timeSinceCache = Date.now() - cached.timestamp.getTime();\n if (timeSinceCache > this.config.cacheValidDuration) {\n return false;\n }\n\n // Check location-based expiration\n const distance = this.calculateDistance(\n cached.coordinate.latitude,\n cached.coordinate.longitude,\n coordinate.latitude,\n coordinate.longitude,\n );\n return distance <= this.config.locationToleranceMeters;\n }\n\n private cleanupExpiredCache(): void {\n const now = Date.now();\n const keysToRemove: string[] = [];\n\n for (const [key, cached] of this.placesCache) {\n const timeSinceCache = now - cached.timestamp.getTime();\n if (timeSinceCache > this.config.cacheValidDuration) {\n keysToRemove.push(key);\n }\n }\n\n if (keysToRemove.length > 0) {\n for (const key of keysToRemove) {\n this.placesCache.delete(key);\n }\n console.log(`📍 Cleaned up ${keysToRemove.length} expired cache entries`);\n }\n }\n\n private getDefaultCategories(): string[] {\n return CategoryService.getDefaultSearchCategories();\n }\n\n private buildOverpassQuery(\n coordinate: { latitude: number; longitude: number },\n radiusMeters: number,\n categories: string[],\n ): string {\n const { latitude: lat, longitude: lon } = coordinate;\n\n const actualCategories = categories.length > 0\n ? categories\n : this.getDefaultCategories();\n\n // Build query parts for each category - nodes only for speed\n // Use compact union syntax without newlines\n const queryParts: string[] = [];\n for (const category of actualCategories) {\n queryParts.push(\n `node[${category}][\"name\"](around:${radiusMeters},${lat},${lon});`,\n );\n }\n\n // Ultra-compact query format\n const query = `[out:json][timeout:${\n Math.floor(this.config.timeout / 1000)\n }];(${queryParts.join(\"\")});out qt;`;\n\n return query;\n }\n\n private buildRequest(query: string): Request {\n const url = new URL(this.config.baseURL);\n\n const body = new URLSearchParams();\n body.append(\"data\", query);\n\n return new Request(url, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n \"User-Agent\": this.config.userAgent,\n },\n body,\n });\n }\n\n private parseElement(element: OverpassElement): Place | null {\n const elementType = element.type;\n const name = element.tags?.[\"name\"];\n\n if (!name || name.trim() === \"\") {\n return null;\n }\n\n // Handle coordinates - nodes only now\n if (element.lat === undefined || element.lon === undefined) {\n return null;\n }\n\n const latitude = element.lat;\n const longitude = element.lon;\n\n const tags = element.tags || {};\n\n // Extract address from OSM tags (same logic as Swift)\n const address = this.extractAddressFromTags(tags);\n\n // Determine category and group\n const { category, categoryGroup, icon } = this.extractCategoryInfo(tags);\n\n return {\n id: `${elementType}:${element.id}`,\n elementType: elementType as \"node\" | \"way\" | \"relation\",\n elementId: element.id,\n name,\n latitude,\n longitude,\n tags,\n address,\n category,\n categoryGroup,\n icon,\n };\n }\n\n /**\n * Extract address components from OSM tags with comprehensive field mapping\n */\n private extractAddressFromTags(\n tags: Record,\n ): CommunityAddressRecord {\n // Extract street address with full house number + street combination\n let street: string | undefined;\n if (tags[\"addr:street\"]) {\n if (tags[\"addr:housenumber\"]) {\n street = `${tags[\"addr:housenumber\"]} ${tags[\"addr:street\"]}`;\n } else {\n street = tags[\"addr:street\"];\n }\n }\n\n // Extract locality with comprehensive fallback chain\n const locality = tags[\"addr:city\"] ||\n tags[\"addr:locality\"] ||\n tags[\"place\"] ||\n tags[\"addr:municipality\"] ||\n tags[\"addr:town\"] ||\n tags[\"addr:village\"];\n\n // Extract region with comprehensive state/province/region mapping\n const region = tags[\"addr:state\"] ||\n tags[\"addr:region\"] ||\n tags[\"addr:province\"] ||\n tags[\"is_in:state\"] ||\n tags[\"is_in:state_code\"];\n\n // Extract country (OSM uses ISO 3166-1 alpha-2 codes)\n const country = tags[\"addr:country\"] ||\n tags[\"addr:country_code\"] ||\n tags[\"is_in:country\"] ||\n tags[\"is_in:country_code\"];\n\n // Extract postal code with various field name variants\n const postalCode = tags[\"addr:postcode\"] ||\n tags[\"addr:postal_code\"] ||\n tags[\"postal_code\"];\n\n return {\n $type: \"community.lexicon.location.address\",\n name: tags[\"name\"],\n street,\n locality,\n region,\n country,\n postalCode,\n };\n }\n\n /**\n * Enhance places that lack locality/country with administrative boundary data\n */\n private async enhancePlacesWithAdministrativeData(\n places: Place[],\n ): Promise {\n // Group places by missing data and coordinates for efficient batch processing\n const placesNeedingEnhancement = places.filter((place) =>\n !place.address?.locality || !place.address?.country\n );\n\n if (placesNeedingEnhancement.length === 0) {\n return places;\n }\n\n // For simplicity, we'll resolve administrative data for the first place\n // and apply it to all places in the same general area (this assumes\n // places are geographically close, which is true for our radius queries)\n const firstPlace = placesNeedingEnhancement[0];\n const adminData = await this.resolveAdministrativeBoundaries({\n latitude: firstPlace.latitude,\n longitude: firstPlace.longitude,\n });\n\n // Apply the administrative data to places that need it\n return places.map((place) => {\n if (!place.address?.locality || !place.address?.country) {\n return {\n ...place,\n address: {\n ...place.address,\n locality: place.address?.locality || adminData.locality,\n region: place.address?.region || adminData.region,\n country: place.address?.country || adminData.country,\n },\n };\n }\n return place;\n });\n }\n\n /**\n * Resolve administrative boundaries for places lacking direct address tags\n * This helps get locality/country for parks, monuments, and other POIs\n * Ultra-simplified version to avoid timeouts\n */\n private async resolveAdministrativeBoundaries(\n coordinate: { latitude: number; longitude: number },\n ): Promise<{ locality?: string; region?: string; country?: string }> {\n // Ultra-minimal query: only request essential admin levels (8, 4, 2)\n // Skip level 10 and 6 which add processing time\n // Use regex to filter admin levels server-side before returning data\n const query =\n `[out:json][timeout:10];is_in(${coordinate.latitude},${coordinate.longitude});area._[admin_level~\"^(2|4|8)$\"];out tags qt;`;\n\n try {\n const request = this.buildRequest(query);\n const controller = new AbortController();\n const timeoutId = setTimeout(() => controller.abort(), 10000);\n\n const response = await fetch(request, { signal: controller.signal });\n clearTimeout(timeoutId);\n\n if (!response.ok) {\n throw new Error(`HTTP ${response.status}`);\n }\n\n const overpassResponse: OverpassResponse = await response.json();\n const elements = overpassResponse.elements;\n\n let locality: string | undefined;\n let region: string | undefined;\n let country: string | undefined;\n\n // Simplified: only look at the admin levels we requested\n for (const element of elements) {\n const adminLevel = element.tags?.[\"admin_level\"];\n const name = element.tags?.[\"name\"];\n\n if (!name) continue;\n\n if (adminLevel === \"8\" && !locality) {\n locality = name;\n } else if (adminLevel === \"4\" && !region) {\n region = name;\n } else if (adminLevel === \"2\" && !country) {\n country = element.tags?.[\"ISO3166-1\"] ||\n element.tags?.[\"ISO3166-1:alpha2\"] ||\n element.tags?.[\"name:en\"] ||\n name;\n }\n\n // Early exit if we have everything\n if (locality && region && country) break;\n }\n\n console.log(\n `🏛️ Admin boundary result for ${coordinate.latitude},${coordinate.longitude}:`,\n {\n locality: locality || \"not found\",\n region: region || \"not found\",\n country: country || \"not found\",\n elementsFound: elements.length,\n },\n );\n\n return { locality, region, country };\n } catch (error) {\n console.error(\"Failed to resolve administrative boundaries:\", error);\n console.error(\"Query coordinate:\", coordinate);\n return {};\n }\n }\n\n /**\n * Extract category information from OSM tags\n */\n private extractCategoryInfo(tags: Record): {\n category?: string;\n categoryGroup?: PlaceCategoryGroup;\n icon: string;\n } {\n // Look for primary category tags in order of priority\n const primaryTags = [\"amenity\", \"leisure\", \"shop\", \"tourism\"];\n\n for (const tag of primaryTags) {\n const value = tags[tag];\n if (value) {\n const categoryGroup = CategoryService.getCategoryGroup(tag, value);\n const icon = CategoryService.getIcon(tag, value);\n\n return {\n category: value,\n categoryGroup: categoryGroup || undefined,\n icon,\n };\n }\n }\n\n return { icon: \"📍\" };\n }\n\n /**\n * Calculate distance between two coordinates using Haversine formula\n */\n private calculateDistance(\n lat1: number,\n lon1: number,\n lat2: number,\n lon2: number,\n ): number {\n const R = 6371000; // Earth's radius in meters\n const φ1 = lat1 * Math.PI / 180;\n const φ2 = lat2 * Math.PI / 180;\n const Δφ = (lat2 - lat1) * Math.PI / 180;\n const Δλ = (lon2 - lon1) * Math.PI / 180;\n\n const a = Math.sin(Δφ / 2) * Math.sin(Δφ / 2) +\n Math.cos(φ1) * Math.cos(φ2) *\n Math.sin(Δλ / 2) * Math.sin(Δλ / 2);\n const c = 2 * Math.atan2(Math.sqrt(a), Math.sqrt(1 - a));\n\n return R * c;\n }\n\n /**\n * Format distance for display\n */\n private formatDistance(meters: number): string {\n if (meters < 1000) {\n return `${Math.round(meters)}m`;\n } else {\n return `${(meters / 1000).toFixed(1)}km`;\n }\n }\n}\n",[],[228,417,496],{"_103":504,"_95":505,"_155":506,"_157":418,"_158":140,"_159":507,"_161":162,"_105":508,"_100":32,"_164":246,"_166":509,"_167":22,"_168":-5,"_169":510,"_98":511},"0b94d7fc-a14d-11f0-adde-0224a6c84d84","places-provider.ts","0b94d8b0-a14d-11f0-adde-0224a6c84d84",1300,["D",1759601272653],"/**\n * Provider abstraction for place discovery services\n * Allows pluggable backends (Overpass, LocationIQ, etc.)\n */\n\nimport type { PlaceWithDistance } from \"../models/place-models.ts\";\n\nexport interface PlaceProvider {\n /**\n * Provider name for identification\n */\n readonly name: string;\n\n /**\n * Find nearby places with distance calculation\n */\n findNearbyPlacesWithDistance(\n coordinate: { latitude: number; longitude: number },\n radiusMeters: number,\n categories: string[],\n ): Promise;\n}\n\nexport class PlaceProviderFactory {\n /**\n * Create a provider instance by name\n */\n static async create(providerName: string): Promise {\n switch (providerName.toLowerCase()) {\n case \"locationiq\": {\n const { LocationIQProvider } = await import(\"./locationiq-provider.ts\");\n return new LocationIQProvider();\n }\n case \"overpass\":\n default: {\n const { OverpassProvider } = await import(\"./overpass-provider.ts\");\n return new OverpassProvider();\n }\n }\n }\n\n /**\n * Get list of available provider names\n */\n static getAvailableProviders(): string[] {\n return [\"overpass\", \"locationiq\"];\n }\n}\n",[],[228,417,505],{"_103":513,"_95":514,"_155":515,"_157":418,"_158":140,"_159":516,"_161":162,"_105":517,"_100":120,"_164":246,"_166":518,"_167":22,"_168":-5,"_169":519,"_98":520},"8b40247c-a35d-11f0-a5b6-0224a6c84d84","user-stats-service.ts","f68cac06-a35c-11f0-a358-0224a6c84d84",1332,["D",1759828261189],"/**\n * User Statistics Service\n * Extracts user counts, handles, and PDS server information from OAuth sessions\n */\n\nimport { db } from \"../database/db.ts\";\nimport { ironSessionStorageTable } from \"../database/schema.ts\";\nimport { like } from \"https://esm.sh/drizzle-orm@0.44.5\";\n\nexport interface UserSession {\n did: string;\n handle: string;\n pdsUrl: string;\n createdAt: number;\n expiresAt?: number;\n isExpired: boolean;\n checkinCount?: number;\n}\n\nexport interface UserStats {\n totalUsers: number;\n activeUsers: number;\n expiredUsers: number;\n uniquePdsServers: number;\n usersByPds: Record;\n recentUsers: UserSession[];\n topPdsServers: Array<{ pdsUrl: string; userCount: number }>;\n totalCheckins: number;\n averageCheckinsPerUser: number;\n usersWithCheckins: number;\n topUsersByCheckins: Array<\n { did: string; handle: string; checkinCount: number }\n >;\n}\n\nexport interface StatsResponse {\n success: boolean;\n data?: UserStats;\n error?: string;\n timestamp: string;\n}\n\n/**\n * Extract session data from the database and parse it into a UserSession object\n */\nfunction parseSessionData(\n sessionKey: string,\n sessionValue: string,\n): UserSession | null {\n try {\n const sessionData = JSON.parse(sessionValue);\n const did = sessionKey.replace(\"session:\", \"\");\n\n return {\n did,\n handle: sessionData.handle || \"unknown\",\n pdsUrl: sessionData.pdsUrl || \"unknown\",\n createdAt: sessionData.createdAt || Date.now(),\n expiresAt: sessionData.expiresAt,\n isExpired: sessionData.expiresAt\n ? new Date() > new Date(sessionData.expiresAt)\n : false,\n };\n } catch (error) {\n console.error(`Failed to parse session data for ${sessionKey}:`, error);\n return null;\n }\n}\n\n/**\n * Get checkin count for a specific user from their PDS\n */\nasync function getUserCheckinCount(\n did: string,\n pdsUrl: string,\n): Promise {\n try {\n let cursor: string | undefined;\n let totalCount = 0;\n\n do {\n const listRecordsUrl = cursor\n ? `${pdsUrl}/xrpc/com.atproto.repo.listRecords?repo=${did}&collection=app.dropanchor.checkin&limit=100&cursor=${cursor}`\n : `${pdsUrl}/xrpc/com.atproto.repo.listRecords?repo=${did}&collection=app.dropanchor.checkin&limit=100`;\n\n const response = await fetch(listRecordsUrl);\n\n if (!response.ok) {\n if (response.status === 404) {\n // User has no checkins or collection doesn't exist\n return 0;\n }\n throw new Error(`Failed to fetch checkins: ${response.status}`);\n }\n\n const data = await response.json();\n totalCount += data.records?.length || 0;\n cursor = data.cursor;\n\n // Prevent infinite loops\n if (totalCount > 10000) {\n console.warn(\n `User ${did} has more than 10,000 checkins, capping count`,\n );\n break;\n }\n } while (cursor);\n\n return totalCount;\n } catch (error) {\n console.error(`Failed to get checkin count for user ${did}:`, error);\n return 0;\n }\n}\n\n/**\n * Get all OAuth sessions from the database\n */\nasync function getAllSessions(): Promise {\n try {\n const sessions = await db.select().from(ironSessionStorageTable)\n .where(like(ironSessionStorageTable.key, \"session:%\"));\n\n const userSessions: UserSession[] = [];\n\n for (const session of sessions) {\n const parsed = parseSessionData(session.key, session.value);\n if (parsed) {\n userSessions.push(parsed);\n }\n }\n\n return userSessions;\n } catch (error) {\n console.error(\"Failed to get sessions:\", error);\n throw error;\n }\n}\n\n/**\n * Generate comprehensive user statistics from session data\n */\nexport async function generateUserStats(): Promise {\n const sessions = await getAllSessions();\n\n // Filter active vs expired sessions\n const activeSessions = sessions.filter((s) => !s.isExpired);\n const expiredSessions = sessions.filter((s) => s.isExpired);\n\n // Get unique users (by DID)\n const uniqueSessions = sessions.filter((session, index, self) =>\n index === self.findIndex((s) => s.did === session.did)\n );\n\n // Group users by PDS server\n const usersByPds: Record = {};\n sessions.forEach((session) => {\n const pds = session.pdsUrl;\n usersByPds[pds] = (usersByPds[pds] || 0) + 1;\n });\n\n // Get top PDS servers by user count\n const topPdsServers = Object.entries(usersByPds)\n .map(([pdsUrl, userCount]) => ({ pdsUrl, userCount }))\n .sort((a, b) => b.userCount - a.userCount)\n .slice(0, 10); // Top 10 servers\n\n // Get most recent users (last 10 sessions by creation time)\n const recentUsers = sessions\n .sort((a, b) => b.createdAt - a.createdAt)\n .slice(0, 10);\n\n // Get checkin counts for each unique user\n console.log(\n `📊 Fetching checkin counts for ${uniqueSessions.length} users...`,\n );\n const usersWithCheckins = [];\n let totalCheckins = 0;\n\n for (const user of uniqueSessions) {\n try {\n const checkinCount = await getUserCheckinCount(user.did, user.pdsUrl);\n user.checkinCount = checkinCount;\n totalCheckins += checkinCount;\n\n if (checkinCount > 0) {\n usersWithCheckins.push({\n did: user.did,\n handle: user.handle,\n checkinCount,\n });\n }\n } catch (error) {\n console.error(`Failed to get checkin count for ${user.did}:`, error);\n user.checkinCount = 0;\n }\n\n // Add small delay to avoid overwhelming PDS servers\n await new Promise((resolve) => setTimeout(resolve, 100));\n }\n\n // Sort users by checkin count for top users list\n const topUsersByCheckins = usersWithCheckins\n .sort((a, b) => b.checkinCount - a.checkinCount)\n .slice(0, 10);\n\n const averageCheckinsPerUser = uniqueSessions.length > 0\n ? Math.round((totalCheckins / uniqueSessions.length) * 100) / 100\n : 0;\n\n return {\n totalUsers: uniqueSessions.length,\n activeUsers: activeSessions.length,\n expiredUsers: expiredSessions.length,\n uniquePdsServers: Object.keys(usersByPds).length,\n usersByPds,\n recentUsers,\n topPdsServers,\n totalCheckins,\n averageCheckinsPerUser,\n usersWithCheckins: usersWithCheckins.length,\n topUsersByCheckins,\n };\n}\n\n/**\n * Get user statistics as a JSON response\n */\nexport async function getStatsResponse(): Promise {\n try {\n const stats = await generateUserStats();\n\n return {\n success: true,\n data: stats,\n timestamp: new Date().toISOString(),\n };\n } catch (error) {\n console.error(\"Failed to generate user stats:\", error);\n\n return {\n success: false,\n error: error.message,\n timestamp: new Date().toISOString(),\n };\n }\n}\n\n/**\n * Export user data for analysis (returns all unique users with their info)\n */\nexport async function exportUserData(): Promise {\n const sessions = await getAllSessions();\n\n // Return unique users only (by DID), with most recent session data\n const uniqueUsers = new Map();\n\n sessions.forEach((session) => {\n const existing = uniqueUsers.get(session.did);\n if (!existing || session.createdAt > existing.createdAt) {\n uniqueUsers.set(session.did, session);\n }\n });\n\n return Array.from(uniqueUsers.values());\n}\n",[],[228,417,514],[228,417],{"_103":523,"_95":524,"_155":525,"_157":229,"_158":140,"_159":526,"_161":162,"_105":527,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":528,"_98":575},"d91d734a-7467-11f0-a72d-0224a6c84d84","utils","d91d75a2-7467-11f0-a72d-0224a6c84d84",293,["D",1754664982137],[529,538,547,556,565],{"_103":530,"_95":531,"_155":532,"_157":525,"_158":140,"_159":533,"_161":162,"_105":534,"_100":32,"_164":246,"_166":535,"_167":22,"_168":-5,"_169":536,"_98":537},"7937fac2-a6ad-11f0-aecd-0224a6c84d84","atproto-resolver.ts","7937fba8-a6ad-11f0-aecd-0224a6c84d84",1396,["D",1760192444085],"/**\n * AT Protocol resolution utilities\n * Handles PDS discovery, handle resolution, and profile fetching\n */\n\n/**\n * Resolve DID to PDS URL\n */\nexport async function resolvePdsUrl(did: string): Promise {\n try {\n // For bsky.social DIDs, use the main PDS\n if (did.includes(\"bsky.social\")) {\n return \"https://bsky.social\";\n }\n\n // For other DIDs, resolve from DID document\n const didResponse = await fetch(`https://plc.directory/${did}`);\n if (!didResponse.ok) {\n throw new Error(`Failed to resolve DID: ${didResponse.status}`);\n }\n\n const didDoc = await didResponse.json();\n const pdsEndpoint = didDoc.service?.find((s: any) =>\n s.id === \"#atproto_pds\" && s.type === \"AtprotoPersonalDataServer\"\n );\n\n return pdsEndpoint?.serviceEndpoint || null;\n } catch (error) {\n console.error(`Failed to resolve PDS for DID ${did}:`, error);\n return null;\n }\n}\n\n/**\n * Resolve handle to DID\n * Tries Slingshot resolver first, falls back to bsky.social\n */\nexport async function resolveHandleToDid(\n handle: string,\n): Promise {\n try {\n // Normalize handle (remove @ if present)\n const normalizedHandle = handle.startsWith(\"@\") ? handle.slice(1) : handle;\n\n // Try resolving via Slingshot resolver first\n try {\n const slingshotResponse = await fetch(\n `https://slingshot.microcosm.blue/api/v1/resolve-handle/${\n encodeURIComponent(normalizedHandle)\n }`,\n );\n if (slingshotResponse.ok) {\n const data = await slingshotResponse.json();\n if (data.did) {\n return data.did;\n }\n }\n } catch (slingshotError) {\n console.warn(\n \"Slingshot resolver failed, falling back to bsky.social:\",\n slingshotError,\n );\n }\n\n // Fallback to bsky.social resolver\n const response = await fetch(\n `https://bsky.social/xrpc/com.atproto.identity.resolveHandle?handle=${normalizedHandle}`,\n );\n if (response.ok) {\n const data = await response.json();\n return data.did || null;\n }\n\n return null;\n } catch (error) {\n console.error(\"Failed to resolve handle to DID:\", error);\n return null;\n }\n}\n\n/**\n * Resolve profile data from user's PDS\n * Returns handle, displayName, avatar, and description\n */\nexport async function resolveProfileFromPds(did: string): Promise<\n {\n handle?: string;\n displayName?: string;\n avatar?: string;\n description?: string;\n } | null\n> {\n try {\n const pdsUrl = await resolvePdsUrl(did);\n if (!pdsUrl) {\n return null;\n }\n\n // Fetch profile record from PDS\n const response = await fetch(\n `${pdsUrl}/xrpc/com.atproto.repo.getRecord?repo=${did}&collection=app.bsky.actor.profile&rkey=self`,\n );\n\n if (!response.ok) {\n return null;\n }\n\n const profileData = await response.json();\n const profile = profileData.value;\n\n // Also try to get the handle from the DID document\n let handle = did; // fallback to DID\n try {\n const didResponse = await fetch(`https://plc.directory/${did}`);\n if (didResponse.ok) {\n const didDoc = await didResponse.json();\n const handleAlias = didDoc.alsoKnownAs?.find((alias: string) =>\n alias.startsWith(\"at://\")\n );\n if (handleAlias) {\n handle = handleAlias.replace(\"at://\", \"\");\n }\n }\n } catch (error) {\n console.warn(\"Failed to resolve handle from DID:\", error);\n }\n\n // Handle avatar blob reference\n let avatarUrl: string | undefined;\n if (profile?.avatar) {\n if (typeof profile.avatar === \"string\") {\n // Already a URL\n avatarUrl = profile.avatar;\n } else if (profile.avatar.ref && typeof profile.avatar.ref === \"object\") {\n // It's a blob reference - construct the URL\n const blobRef = profile.avatar.ref.$link || profile.avatar.ref;\n if (blobRef) {\n avatarUrl =\n `${pdsUrl}/xrpc/com.atproto.sync.getBlob?did=${did}&cid=${blobRef}`;\n }\n }\n }\n\n return {\n handle,\n displayName: profile?.displayName,\n avatar: avatarUrl,\n description: profile?.description,\n };\n } catch (error) {\n console.error(\"Failed to resolve profile:\", error);\n return null;\n }\n}\n",[],[228,524,531],{"_103":539,"_95":540,"_155":541,"_157":525,"_158":140,"_159":542,"_161":162,"_105":543,"_100":32,"_164":246,"_166":544,"_167":22,"_168":-5,"_169":545,"_98":546},"794528f0-a6ad-11f0-bdb1-0224a6c84d84","auth-helpers.ts","794529a4-a6ad-11f0-bdb1-0224a6c84d84",1397,["D",1760192444084],"/**\n * Authentication helper utilities\n * Handles OAuth session extraction and validation\n */\n\nimport { sessions } from \"../routes/oauth.ts\";\n\nexport interface AuthResult {\n success: boolean;\n did?: string;\n oauthSession?: any;\n error?: string;\n}\n\n/**\n * Extract and validate authenticated user from request\n * Returns DID and OAuth session if authentication is successful\n */\nexport async function getAuthenticatedUserDid(\n req: Request,\n): Promise {\n try {\n // Extract session cookie (OAuth package uses \"sid\" as cookie name)\n const cookieHeader = req.headers.get(\"cookie\");\n if (!cookieHeader || !cookieHeader.includes(\"sid=\")) {\n return { success: false, error: \"Authentication required\" };\n }\n\n const sessionCookie = cookieHeader\n .split(\";\")\n .find((c) => c.trim().startsWith(\"sid=\"))\n ?.split(\"=\")[1];\n\n if (!sessionCookie) {\n console.error(\"No sid cookie found in:\", cookieHeader);\n return { success: false, error: \"Authentication required\" };\n }\n\n // Unseal session data\n const { unsealData } = await import(\"npm:iron-session@8.0.4\");\n const COOKIE_SECRET = Deno.env.get(\"COOKIE_SECRET\") ||\n \"anchor-default-secret-for-development-only\";\n\n const sessionData = await unsealData(decodeURIComponent(sessionCookie), {\n password: COOKIE_SECRET,\n });\n\n const userDid = (sessionData as any)?.did || (sessionData as any)?.userId ||\n (sessionData as any)?.sub;\n if (!userDid) {\n console.error(\"No DID in session data:\", sessionData);\n return { success: false, error: \"Authentication required\" };\n }\n\n // Get OAuth session using sessions manager (provides makeRequest and other methods)\n const oauthSession = await sessions.getOAuthSession(userDid);\n\n if (!oauthSession) {\n console.error(\"No OAuth session found for DID:\", userDid);\n return { success: false, error: \"OAuth session not found\" };\n }\n\n return { success: true, did: userDid, oauthSession };\n } catch (error) {\n console.error(\"Authentication error:\", error);\n return { success: false, error: \"Authentication failed\" };\n }\n}\n",[],[228,524,540],{"_103":548,"_95":549,"_155":550,"_157":525,"_158":140,"_159":551,"_161":162,"_105":552,"_100":32,"_164":246,"_166":553,"_167":22,"_168":-5,"_169":554,"_98":555},"792b88be-a6ad-11f0-8998-0224a6c84d84","checkin-validator.ts","792b8972-a6ad-11f0-8998-0224a6c84d84",1394,["D",1760192444083],"/**\n * Checkin record validation against app.dropanchor.checkin lexicon\n */\n\n/**\n * Validates a checkin record against the current lexicon schema\n * Returns true if valid, false otherwise with console warning\n */\nexport function validateCheckinRecord(record: any): boolean {\n if (!record.value) {\n console.warn(`⚠️ Invalid checkin ${record.uri}: missing value`);\n return false;\n }\n\n const value = record.value;\n\n // Check required fields according to app.dropanchor.checkin lexicon\n if (!value.text || typeof value.text !== \"string\") {\n console.warn(`⚠️ Invalid checkin ${record.uri}: missing or invalid text`);\n return false;\n }\n\n if (!value.createdAt || typeof value.createdAt !== \"string\") {\n console.warn(\n `⚠️ Invalid checkin ${record.uri}: missing or invalid createdAt`,\n );\n return false;\n }\n\n // Validate coordinates structure\n if (!value.coordinates || typeof value.coordinates !== \"object\") {\n console.warn(\n `⚠️ Invalid checkin ${record.uri}: missing or invalid coordinates object`,\n );\n return false;\n }\n\n // Coordinates must have both latitude and longitude\n // They should be strings (for DAG-CBOR compliance) that can be parsed as numbers\n const { latitude, longitude } = value.coordinates;\n\n if (!latitude || !longitude) {\n console.warn(\n `⚠️ Invalid checkin ${record.uri}: missing latitude or longitude`,\n );\n return false;\n }\n\n // Check if coordinates are valid numbers (whether string or number type)\n const lat = typeof latitude === \"string\" ? parseFloat(latitude) : latitude;\n const lng = typeof longitude === \"string\" ? parseFloat(longitude) : longitude;\n\n if (isNaN(lat) || isNaN(lng)) {\n console.warn(\n `⚠️ Invalid checkin ${record.uri}: coordinates are not valid numbers (lat: ${latitude}, lng: ${longitude})`,\n );\n return false;\n }\n\n // Validate coordinate ranges\n if (lat < -90 || lat > 90) {\n console.warn(\n `⚠️ Invalid checkin ${record.uri}: latitude out of range: ${lat}`,\n );\n return false;\n }\n\n if (lng < -180 || lng > 180) {\n console.warn(\n `⚠️ Invalid checkin ${record.uri}: longitude out of range: ${lng}`,\n );\n return false;\n }\n\n // Validate addressRef if present (required field)\n if (!value.addressRef || typeof value.addressRef !== \"object\") {\n console.warn(\n `⚠️ Invalid checkin ${record.uri}: missing or invalid addressRef`,\n );\n return false;\n }\n\n if (!value.addressRef.uri || !value.addressRef.cid) {\n console.warn(\n `⚠️ Invalid checkin ${record.uri}: addressRef missing uri or cid`,\n );\n return false;\n }\n\n // Optional fields validation (if present, must be correct type)\n if (value.category && typeof value.category !== \"string\") {\n console.warn(\n `⚠️ Invalid checkin ${record.uri}: category must be a string`,\n );\n return false;\n }\n\n if (value.categoryGroup && typeof value.categoryGroup !== \"string\") {\n console.warn(\n `⚠️ Invalid checkin ${record.uri}: categoryGroup must be a string`,\n );\n return false;\n }\n\n if (value.categoryIcon && typeof value.categoryIcon !== \"string\") {\n console.warn(\n `⚠️ Invalid checkin ${record.uri}: categoryIcon must be a string`,\n );\n return false;\n }\n\n if (value.image && typeof value.image !== \"object\") {\n console.warn(\n `⚠️ Invalid checkin ${record.uri}: image must be an object`,\n );\n return false;\n }\n\n return true;\n}\n",[],[228,524,549],{"_103":557,"_95":558,"_155":559,"_157":525,"_158":140,"_159":560,"_161":162,"_105":561,"_100":160,"_164":246,"_166":562,"_167":22,"_168":-5,"_169":563,"_98":564},"7f5aa44a-7b51-11f0-9f1d-0224a6c84d84","place-categorization.ts","7355891a-754a-11f0-aa51-0224a6c84d84",801,["D",1755425040692],"// deno-lint-ignore-file no-fallthrough\n// Place categorization system ported from Swift PlaceCategorization.swift\n// Provides OSM tag categorization, icons, and grouping for UI display\n\nimport {\n PlaceCategory,\n PlaceCategoryGroup,\n PlaceCategoryGroupInfo,\n} from \"../models/place-models.ts\";\n\nexport class PlaceCategorization {\n // MARK: - OpenStreetMap Category Definitions (from Swift)\n\n static readonly AMENITY_CATEGORIES = [\n // Food & Drink\n \"restaurant\",\n \"cafe\",\n \"bar\",\n \"pub\",\n \"fast_food\",\n \"food_court\",\n \"ice_cream\",\n \"biergarten\",\n\n // Education\n \"school\",\n \"university\",\n \"college\",\n \"library\",\n \"driving_school\",\n \"language_school\",\n \"music_school\",\n\n // Healthcare\n \"hospital\",\n \"clinic\",\n \"pharmacy\",\n \"dentist\",\n \"veterinary\",\n \"nursing_home\",\n\n // Entertainment & Culture\n \"cinema\",\n \"theatre\",\n \"nightclub\",\n \"casino\",\n \"arts_centre\",\n \"community_centre\",\n \"exhibition_centre\",\n \"music_venue\",\n\n // Transportation\n \"bus_station\",\n \"taxi\",\n \"ferry_terminal\",\n \"fuel\",\n \"charging_station\",\n \"car_wash\",\n \"parking\",\n \"bicycle_parking\",\n\n // Public Services\n \"townhall\",\n \"courthouse\",\n \"police\",\n \"fire_station\",\n \"post_office\",\n \"bank\",\n \"bureau_de_change\",\n \"atm\",\n\n // Facilities\n \"toilets\",\n \"drinking_water\",\n \"shower\",\n \"bench\",\n \"shelter\",\n \"waste_disposal\",\n \"recycling\",\n ];\n\n static readonly LEISURE_CATEGORIES = [\n // Sports & Fitness\n \"fitness_centre\",\n \"sports_centre\",\n \"sports_hall\",\n \"swimming_pool\",\n \"pitch\",\n \"track\",\n \"golf_course\",\n \"climbing\",\n \"horse_riding\",\n \"bowling_alley\",\n \"ice_rink\",\n \"stadium\",\n\n // Entertainment & Gaming\n \"amusement_arcade\",\n \"escape_game\",\n \"trampoline_park\",\n \"water_park\",\n \"dance\",\n \"adult_gaming_centre\",\n \"miniature_golf\",\n\n // Relaxation & Nature\n \"park\",\n \"beach_resort\",\n \"nature_reserve\",\n \"garden\",\n \"bird_hide\",\n \"wildlife_hide\",\n \"sauna\",\n \"picnic_site\",\n \"playground\",\n\n // Marine & Adventure\n \"marina\",\n \"slipway\",\n \"summer_camp\",\n \"high_ropes\",\n ];\n\n static readonly SHOP_CATEGORIES = [\n // Food & Beverage\n \"supermarket\",\n \"convenience\",\n \"bakery\",\n \"butcher\",\n \"greengrocer\",\n \"wine\",\n \"coffee\",\n \"deli\",\n \"confectionery\",\n \"cheese\",\n \"seafood\",\n \"spices\",\n \"tea\",\n\n // Clothing & Fashion\n \"clothes\",\n \"shoes\",\n \"jewelry\",\n \"tailor\",\n \"fabric\",\n \"fashion_accessories\",\n \"bag\",\n \"watches\",\n\n // Electronics & Technology\n \"electronics\",\n \"computer\",\n \"mobile_phone\",\n \"camera\",\n \"hifi\",\n \"video_games\",\n\n // Home & Lifestyle\n \"furniture\",\n \"appliance\",\n \"doityourself\",\n \"hardware\",\n \"paint\",\n \"lighting\",\n \"kitchen\",\n \"interior_decoration\",\n \"curtain\",\n \"florist\",\n \"garden_centre\",\n\n // Books & Media\n \"books\",\n \"stationery\",\n \"newsagent\",\n \"art\",\n \"music\",\n \"video\",\n\n // Health & Beauty\n \"cosmetics\",\n \"hairdresser\",\n \"beauty\",\n \"massage\",\n \"optician\",\n \"medical_supply\",\n\n // Sports & Outdoor\n \"sports\",\n \"outdoor\",\n \"bicycle\",\n \"fishing\",\n \"hunting\",\n \"ski\",\n\n // Vehicles\n \"car\",\n \"car_parts\",\n \"motorcycle\",\n \"tyres\",\n\n // Specialty & Services\n \"gift\",\n \"lottery\",\n \"pet\",\n \"tobacco\",\n \"trade\",\n \"travel_agency\",\n \"copyshop\",\n \"laundry\",\n \"dry_cleaning\",\n \"funeral_directors\",\n ];\n\n static readonly TOURISM_CATEGORIES = [\n // Accommodations\n \"hotel\",\n \"motel\",\n \"guest_house\",\n \"hostel\",\n \"chalet\",\n \"apartment\",\n \"camp_site\",\n \"caravan_site\",\n \"alpine_hut\",\n \"wilderness_hut\",\n\n // Attractions\n \"attraction\",\n \"museum\",\n \"gallery\",\n \"aquarium\",\n \"zoo\",\n \"theme_park\",\n \"viewpoint\",\n \"artwork\",\n\n // Services\n \"information\",\n \"picnic_site\",\n \"trail_riding_station\",\n ];\n\n // MARK: - Category Groups\n\n static readonly CATEGORY_GROUPS: Record<\n PlaceCategoryGroup,\n PlaceCategoryGroupInfo\n > = {\n [PlaceCategoryGroup.FOOD_AND_DRINK]: {\n id: PlaceCategoryGroup.FOOD_AND_DRINK,\n name: \"Food & Drink\",\n icon: \"🍽️\",\n },\n [PlaceCategoryGroup.ENTERTAINMENT]: {\n id: PlaceCategoryGroup.ENTERTAINMENT,\n name: \"Entertainment\",\n icon: \"🎭\",\n },\n [PlaceCategoryGroup.SPORTS]: {\n id: PlaceCategoryGroup.SPORTS,\n name: \"Sports & Fitness\",\n icon: \"🏃‍♂️\",\n },\n [PlaceCategoryGroup.SHOPPING]: {\n id: PlaceCategoryGroup.SHOPPING,\n name: \"Shopping\",\n icon: \"🛍️\",\n },\n [PlaceCategoryGroup.ACCOMMODATION]: {\n id: PlaceCategoryGroup.ACCOMMODATION,\n name: \"Accommodation\",\n icon: \"🏨\",\n },\n [PlaceCategoryGroup.TRANSPORTATION]: {\n id: PlaceCategoryGroup.TRANSPORTATION,\n name: \"Transportation\",\n icon: \"🚌\",\n },\n [PlaceCategoryGroup.SERVICES]: {\n id: PlaceCategoryGroup.SERVICES,\n name: \"Services\",\n icon: \"🏛️\",\n },\n [PlaceCategoryGroup.NATURE]: {\n id: PlaceCategoryGroup.NATURE,\n name: \"Nature & Parks\",\n icon: \"🌳\",\n },\n [PlaceCategoryGroup.CULTURE]: {\n id: PlaceCategoryGroup.CULTURE,\n name: \"Culture\",\n icon: \"🎨\",\n },\n [PlaceCategoryGroup.HEALTH]: {\n id: PlaceCategoryGroup.HEALTH,\n name: \"Health\",\n icon: \"🏥\",\n },\n [PlaceCategoryGroup.EDUCATION]: {\n id: PlaceCategoryGroup.EDUCATION,\n name: \"Education\",\n icon: \"📚\",\n },\n };\n\n // MARK: - Category Mapping Methods\n\n /**\n * Get category group for an OSM tag/value pair\n */\n static getCategoryGroup(\n tag: string,\n value: string,\n ): PlaceCategoryGroup | null {\n switch (tag) {\n case \"amenity\":\n switch (value) {\n case \"restaurant\":\n case \"cafe\":\n case \"bar\":\n case \"pub\":\n case \"fast_food\":\n case \"food_court\":\n case \"ice_cream\":\n case \"biergarten\":\n return PlaceCategoryGroup.FOOD_AND_DRINK;\n\n case \"cinema\":\n case \"theatre\":\n case \"nightclub\":\n case \"casino\":\n case \"arts_centre\":\n case \"community_centre\":\n case \"exhibition_centre\":\n case \"music_venue\":\n return PlaceCategoryGroup.ENTERTAINMENT;\n\n case \"hospital\":\n case \"clinic\":\n case \"pharmacy\":\n case \"dentist\":\n case \"veterinary\":\n case \"nursing_home\":\n return PlaceCategoryGroup.HEALTH;\n\n case \"school\":\n case \"university\":\n case \"college\":\n case \"library\":\n case \"driving_school\":\n case \"language_school\":\n case \"music_school\":\n return PlaceCategoryGroup.EDUCATION;\n\n case \"bus_station\":\n case \"taxi\":\n case \"ferry_terminal\":\n case \"fuel\":\n case \"charging_station\":\n case \"car_wash\":\n case \"parking\":\n case \"bicycle_parking\":\n return PlaceCategoryGroup.TRANSPORTATION;\n\n case \"townhall\":\n case \"courthouse\":\n case \"police\":\n case \"fire_station\":\n case \"post_office\":\n case \"bank\":\n case \"bureau_de_change\":\n case \"atm\":\n return PlaceCategoryGroup.SERVICES;\n\n default:\n return PlaceCategoryGroup.SERVICES;\n }\n\n case \"leisure\":\n switch (value) {\n case \"fitness_centre\":\n case \"sports_centre\":\n case \"sports_hall\":\n case \"swimming_pool\":\n case \"pitch\":\n case \"track\":\n case \"golf_course\":\n case \"climbing\":\n case \"horse_riding\":\n case \"bowling_alley\":\n case \"ice_rink\":\n case \"stadium\":\n return PlaceCategoryGroup.SPORTS;\n\n case \"amusement_arcade\":\n case \"escape_game\":\n case \"trampoline_park\":\n case \"water_park\":\n case \"dance\":\n case \"adult_gaming_centre\":\n case \"miniature_golf\":\n return PlaceCategoryGroup.ENTERTAINMENT;\n\n case \"park\":\n case \"beach_resort\":\n case \"nature_reserve\":\n case \"garden\":\n case \"bird_hide\":\n case \"wildlife_hide\":\n case \"picnic_site\":\n case \"playground\":\n return PlaceCategoryGroup.NATURE;\n\n default:\n return PlaceCategoryGroup.ENTERTAINMENT;\n }\n\n case \"shop\":\n switch (value) {\n case \"supermarket\":\n case \"convenience\":\n case \"bakery\":\n case \"butcher\":\n case \"greengrocer\":\n case \"wine\":\n case \"coffee\":\n case \"deli\":\n case \"confectionery\":\n case \"cheese\":\n case \"seafood\":\n case \"spices\":\n case \"tea\":\n return PlaceCategoryGroup.FOOD_AND_DRINK;\n\n case \"cosmetics\":\n case \"hairdresser\":\n case \"beauty\":\n case \"massage\":\n case \"optician\":\n case \"medical_supply\":\n return PlaceCategoryGroup.HEALTH;\n\n case \"books\":\n case \"stationery\":\n case \"newsagent\":\n case \"art\":\n case \"music\":\n case \"video\":\n return PlaceCategoryGroup.CULTURE;\n\n default:\n return PlaceCategoryGroup.SHOPPING;\n }\n\n case \"tourism\":\n switch (value) {\n case \"hotel\":\n case \"motel\":\n case \"guest_house\":\n case \"hostel\":\n case \"chalet\":\n case \"apartment\":\n case \"camp_site\":\n case \"caravan_site\":\n case \"alpine_hut\":\n case \"wilderness_hut\":\n return PlaceCategoryGroup.ACCOMMODATION;\n\n case \"museum\":\n case \"gallery\":\n case \"artwork\":\n return PlaceCategoryGroup.CULTURE;\n\n case \"attraction\":\n case \"aquarium\":\n case \"zoo\":\n case \"theme_park\":\n case \"viewpoint\":\n return PlaceCategoryGroup.ENTERTAINMENT;\n\n default:\n return PlaceCategoryGroup.SERVICES;\n }\n\n default:\n return null;\n }\n }\n\n /**\n * Get icon for an OSM tag/value pair\n */\n static getIcon(tag: string, value: string): string {\n const fullTag = `${tag}=${value}`;\n\n // Icon mapping (from Swift implementation)\n const iconMap: Record = {\n // Food & Drink\n \"amenity=restaurant\": \"🍽️\",\n \"amenity=fast_food\": \"🍽️\",\n \"amenity=cafe\": \"☕\",\n \"shop=coffee\": \"☕\",\n \"amenity=bar\": \"🍺\",\n \"amenity=pub\": \"🍺\",\n \"amenity=ice_cream\": \"🍦\",\n \"amenity=biergarten\": \"🍻\",\n \"shop=bakery\": \"🥖\",\n \"shop=wine\": \"🍷\",\n\n // Entertainment\n \"amenity=cinema\": \"🎬\",\n \"amenity=theatre\": \"🎭\",\n \"amenity=nightclub\": \"💃\",\n \"amenity=casino\": \"🎰\",\n \"leisure=bowling_alley\": \"🎳\",\n \"leisure=amusement_arcade\": \"🕹️\",\n \"tourism=theme_park\": \"🎢\",\n\n // Sports & Fitness\n \"leisure=fitness_centre\": \"🏋️‍♂️\",\n \"leisure=sports_centre\": \"🏋️‍♂️\",\n \"leisure=swimming_pool\": \"🏊‍♂️\",\n \"leisure=climbing\": \"🧗‍♂️\",\n \"leisure=golf_course\": \"⛳\",\n \"leisure=stadium\": \"🏟️\",\n \"leisure=ice_rink\": \"⛸️\",\n\n // Shopping\n \"shop=supermarket\": \"🛒\",\n \"shop=clothes\": \"👕\",\n \"shop=shoes\": \"👟\",\n \"shop=books\": \"📚\",\n \"shop=electronics\": \"📱\",\n \"shop=jewelry\": \"💍\",\n \"shop=florist\": \"💐\",\n\n // Accommodation\n \"tourism=hotel\": \"🏨\",\n \"tourism=hostel\": \"🏠\",\n \"tourism=camp_site\": \"🏕️\",\n\n // Transportation\n \"amenity=bus_station\": \"🚌\",\n \"amenity=fuel\": \"⛽\",\n \"amenity=parking\": \"🅿️\",\n \"amenity=bicycle_parking\": \"🚲\",\n\n // Culture & Education\n \"tourism=museum\": \"🏛️\",\n \"amenity=library\": \"🏛️\",\n \"tourism=gallery\": \"🎨\",\n \"amenity=school\": \"🎓\",\n \"amenity=university\": \"🎓\",\n\n // Health\n \"amenity=hospital\": \"🏥\",\n \"amenity=pharmacy\": \"💊\",\n \"amenity=dentist\": \"🦷\",\n\n // Nature\n \"leisure=park\": \"🌳\",\n \"leisure=beach_resort\": \"🏖️\",\n \"tourism=viewpoint\": \"🔭\",\n \"leisure=playground\": \"🛝\",\n\n // Services\n \"amenity=bank\": \"🏦\",\n \"amenity=post_office\": \"📮\",\n \"amenity=police\": \"👮‍♂️\",\n \"amenity=fire_station\": \"🚒\",\n };\n\n return iconMap[fullTag] || \"📍\";\n }\n\n /**\n * Get all available categories as OSM tag strings\n */\n static getAllCategories(): string[] {\n const categories: string[] = [];\n\n // Add all amenity categories\n categories.push(...this.AMENITY_CATEGORIES.map((cat) => `amenity=${cat}`));\n\n // Add all leisure categories\n categories.push(...this.LEISURE_CATEGORIES.map((cat) => `leisure=${cat}`));\n\n // Add all shop categories\n categories.push(...this.SHOP_CATEGORIES.map((cat) => `shop=${cat}`));\n\n // Add all tourism categories\n categories.push(...this.TOURISM_CATEGORIES.map((cat) => `tourism=${cat}`));\n\n return categories.sort();\n }\n\n /**\n * Get prioritized categories optimized for social check-ins\n * Focuses on places people want to share and experience (like Foursquare/Swarm)\n */\n static getPrioritizedCategories(): string[] {\n return [\n // Food & Drink (most popular check-ins)\n \"amenity=restaurant\",\n \"amenity=cafe\",\n \"amenity=bar\",\n \"amenity=pub\",\n \"amenity=fast_food\",\n \"amenity=ice_cream\",\n \"amenity=biergarten\",\n\n // Entertainment & Nightlife (social experiences)\n \"amenity=cinema\",\n \"amenity=theatre\",\n \"amenity=nightclub\",\n \"leisure=bowling_alley\",\n \"leisure=amusement_arcade\",\n\n // Attractions & Culture (destination spots)\n \"tourism=attraction\",\n \"tourism=museum\",\n \"tourism=gallery\",\n \"tourism=zoo\",\n \"tourism=theme_park\",\n \"tourism=viewpoint\",\n\n // Shopping (experience-worthy)\n \"shop=supermarket\",\n \"shop=convenience\",\n \"shop=clothes\",\n \"shop=electronics\",\n \"shop=books\",\n\n // Sports & Fitness (social activities)\n \"leisure=fitness_centre\",\n \"leisure=sports_centre\",\n \"leisure=climbing\",\n \"leisure=swimming_pool\",\n \"leisure=golf_course\",\n \"leisure=stadium\",\n\n // Recreation & Outdoors\n \"leisure=park\",\n \"leisure=playground\",\n \"leisure=beach_resort\",\n\n // Travel & Accommodation\n \"tourism=hotel\",\n \"tourism=hostel\",\n \"amenity=fuel\",\n\n // Essential Services (sometimes shared)\n \"amenity=bank\",\n \"amenity=library\",\n\n // Education (milestone check-ins)\n \"amenity=school\",\n \"amenity=university\",\n ];\n }\n\n /**\n * Create PlaceCategory object with unique ID\n */\n static createCategory(tag: string, value: string): PlaceCategory {\n const osmTag = `${tag}=${value}`;\n const id = `${tag}_${value}`;\n const group = this.getCategoryGroup(tag, value) ||\n PlaceCategoryGroup.SERVICES;\n const icon = this.getIcon(tag, value);\n\n // Capitalize value for display name\n const name = value.split(\"_\").map((word) =>\n word.charAt(0).toUpperCase() + word.slice(1)\n ).join(\" \");\n\n return {\n id,\n name,\n icon,\n group,\n osmTag,\n };\n }\n\n /**\n * Get all category objects with IDs\n */\n static getAllCategoryObjects(): PlaceCategory[] {\n const categories: PlaceCategory[] = [];\n\n // Process all tag types\n const tagTypes = [\n { tag: \"amenity\", values: this.AMENITY_CATEGORIES },\n { tag: \"leisure\", values: this.LEISURE_CATEGORIES },\n { tag: \"shop\", values: this.SHOP_CATEGORIES },\n { tag: \"tourism\", values: this.TOURISM_CATEGORIES },\n ];\n\n for (const { tag, values } of tagTypes) {\n for (const value of values) {\n categories.push(this.createCategory(tag, value));\n }\n }\n\n return categories.sort((a, b) => a.name.localeCompare(b.name));\n }\n\n /**\n * Get category by ID\n */\n static getCategoryById(id: string): PlaceCategory | null {\n // Parse the ID format\n const underscoreIndex = id.indexOf(\"_\");\n if (underscoreIndex === -1) return null;\n\n const tag = id.substring(0, underscoreIndex);\n const value = id.substring(underscoreIndex + 1);\n if (!tag || !value) return null;\n\n // Validate that this is a real category by checking if it exists in our defined categories\n const allCategories = this.getAllCategories();\n const osmTag = `${tag}=${value}`;\n if (!allCategories.includes(osmTag)) return null;\n\n return this.createCategory(tag, value);\n }\n}\n",[],[228,524,558],{"_103":566,"_95":567,"_155":568,"_157":525,"_158":140,"_159":569,"_161":162,"_105":570,"_100":571,"_164":246,"_166":572,"_167":22,"_168":-5,"_169":573,"_98":574},"900581b8-9c83-11f0-a563-0224a6c84d84","storage-provider.ts","d95dbeb4-7467-11f0-82e9-0224a6c84d84",1143,["D",1759074931886],8,"// Storage provider interface for profile data\n// Enables dependency injection and easy testing\n\nexport interface ProfileData {\n did: string;\n handle: string;\n displayName?: string;\n avatar?: string;\n description?: string;\n fetchedAt: string;\n updatedAt?: string;\n}\n\nexport interface StorageProvider {\n getProfile(did: string): Promise;\n setProfile(profile: ProfileData): Promise;\n getStaleProfiles(\n limit: number,\n staleThresholdHours: number,\n ): Promise;\n ensureTablesExist(): Promise;\n}\n\nexport class DrizzleStorageProvider implements StorageProvider {\n constructor(private db: any) {} // Drizzle db instance\n\n getProfile(_did: string): Promise {\n // PDS-only mode - no profile caching\n return Promise.resolve(null);\n }\n\n setProfile(_profile: ProfileData): Promise {\n // PDS-only mode - no profile caching\n return Promise.resolve();\n }\n\n getStaleProfiles(\n _limit: number,\n _staleThresholdHours: number,\n ): Promise {\n // PDS-only mode - no profile caching\n return Promise.resolve([]);\n }\n\n ensureTablesExist(): Promise {\n // PDS-only mode - no tables needed\n return Promise.resolve();\n }\n}\n\n// Legacy class for backward compatibility - DO NOT USE IN NEW CODE\nexport class SqliteStorageProvider implements StorageProvider {\n constructor(private sqlite: any) {\n console.warn(\n \"⚠️ SqliteStorageProvider is deprecated. Use DrizzleStorageProvider instead.\",\n );\n }\n\n async getProfile(did: string): Promise {\n const result = await this.sqlite.execute({\n sql: \"SELECT * FROM profile_cache WHERE did = ?\",\n args: [did],\n });\n\n if (result.rows && result.rows.length > 0) {\n const row = result.rows[0];\n return {\n did: row.did as string,\n handle: row.handle as string,\n displayName: row.display_name as string | undefined,\n avatar: row.avatar_url as string | undefined,\n description: row.description as string | undefined,\n fetchedAt: row.indexed_at as string,\n updatedAt: row.updated_at as string | undefined,\n };\n }\n\n return null;\n }\n\n async setProfile(profile: ProfileData): Promise {\n await this.sqlite.execute({\n sql: `INSERT OR REPLACE INTO profile_cache \n (did, handle, display_name, avatar_url, description, indexed_at, updated_at)\n VALUES (?, ?, ?, ?, ?, ?, ?)`,\n args: [\n profile.did,\n profile.handle,\n profile.displayName || null,\n profile.avatar || null,\n profile.description || null,\n profile.fetchedAt,\n profile.updatedAt || profile.fetchedAt,\n ],\n });\n }\n\n async getStaleProfiles(\n limit: number,\n staleThresholdHours: number,\n ): Promise {\n const staleThreshold = new Date();\n staleThreshold.setHours(staleThreshold.getHours() - staleThresholdHours);\n\n const result = await this.sqlite.execute({\n sql: `SELECT * FROM profile_cache \n WHERE indexed_at < ? \n ORDER BY indexed_at ASC \n LIMIT ?`,\n args: [staleThreshold.toISOString(), limit],\n });\n\n return (result.rows || []).map((row) => ({\n did: row.did as string,\n handle: row.handle as string,\n displayName: row.display_name as string | undefined,\n avatar: row.avatar_url as string | undefined,\n description: row.description as string | undefined,\n fetchedAt: row.indexed_at as string,\n updatedAt: row.updated_at as string | undefined,\n }));\n }\n\n async ensureTablesExist(): Promise {\n await this.sqlite.execute({\n sql: `CREATE TABLE IF NOT EXISTS profile_cache (\n did TEXT PRIMARY KEY,\n handle TEXT,\n display_name TEXT,\n avatar_url TEXT,\n description TEXT,\n followers_count INTEGER DEFAULT 0,\n following_count INTEGER DEFAULT 0,\n posts_count INTEGER DEFAULT 0,\n indexed_at TEXT DEFAULT CURRENT_TIMESTAMP,\n updated_at TEXT DEFAULT CURRENT_TIMESTAMP\n )`,\n args: [],\n });\n\n await this.sqlite.execute({\n sql:\n `CREATE INDEX IF NOT EXISTS idx_profiles_updated ON profile_cache(updated_at)`,\n args: [],\n });\n await this.sqlite.execute({\n sql:\n `CREATE INDEX IF NOT EXISTS idx_profiles_indexed ON profile_cache(indexed_at)`,\n args: [],\n });\n }\n}\n\nexport class InMemoryStorageProvider implements StorageProvider {\n private profiles: Map = new Map();\n\n getProfile(did: string): Promise {\n return Promise.resolve(this.profiles.get(did) || null);\n }\n\n setProfile(profile: ProfileData): Promise {\n this.profiles.set(profile.did, profile);\n return Promise.resolve();\n }\n\n getStaleProfiles(\n limit: number,\n staleThresholdHours: number,\n ): Promise {\n const staleThreshold = new Date();\n staleThreshold.setHours(staleThreshold.getHours() - staleThresholdHours);\n\n return Promise.resolve(\n Array.from(this.profiles.values())\n .filter((profile) => new Date(profile.fetchedAt) < staleThreshold)\n .sort((a, b) => a.fetchedAt.localeCompare(b.fetchedAt))\n .slice(0, limit),\n );\n }\n\n ensureTablesExist(): Promise {\n // No-op for in-memory storage\n return Promise.resolve();\n }\n\n clear(): void {\n this.profiles.clear();\n }\n}\n",[],[228,524,567],[228,524],[228],{"_103":578,"_95":579,"_155":580,"_157":-5,"_158":140,"_159":581,"_161":162,"_105":582,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":583,"_98":584},"5f612e0c-63aa-11f0-aea6-0224a6c84d84","coverage","5f612ec0-63aa-11f0-aea6-0224a6c84d84",172,["D",1752824384421],[],[579],{"_103":586,"_95":319,"_155":587,"_157":-5,"_158":140,"_159":275,"_161":162,"_105":588,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":589,"_98":608},"56a78f96-58b4-11f0-9210-f69ea79377d9","56a79054-58b4-11f0-9210-f69ea79377d9",["D",1751619201960],[590,599],{"_103":591,"_95":592,"_155":593,"_157":587,"_158":140,"_159":594,"_161":162,"_105":595,"_100":32,"_164":178,"_166":596,"_167":22,"_168":-5,"_169":597,"_98":598},"81564ea4-63a8-11f0-9118-0224a6c84d84","add-profile-cache.sql","81564f58-63a8-11f0-9118-0224a6c84d84",150,["D",1752823582398],"-- Migration: Add profile cache table for storing resolved AT Protocol profiles\n-- This enables efficient profile data serving without client-side resolution\n\n-- Profile cache table\nCREATE TABLE IF NOT EXISTS profile_cache_v1 (\n did TEXT PRIMARY KEY,\n handle TEXT NOT NULL,\n display_name TEXT,\n avatar TEXT,\n description TEXT,\n -- Metadata\n fetched_at TEXT NOT NULL,\n updated_at TEXT,\n -- Full profile data for future fields\n full_data JSON\n);\n\n-- Index for finding stale profiles that need refresh\nCREATE INDEX IF NOT EXISTS idx_profiles_updated ON profile_cache_v1(updated_at);\nCREATE INDEX IF NOT EXISTS idx_profiles_fetched ON profile_cache_v1(fetched_at);",[],[319,592],{"_103":600,"_95":601,"_155":602,"_157":587,"_158":140,"_159":603,"_161":162,"_105":604,"_100":275,"_164":178,"_166":605,"_167":22,"_168":-5,"_169":606,"_98":607},"fcffb10a-746d-11f0-b42b-0224a6c84d84","database-schema.sql","57f0a342-58b4-11f0-aaa5-f69ea79377d9",325,["D",1754667619327],"-- Anchor AppView Database Schema for Val Town SQLite\n-- Phase 1: Core Infrastructure\n\n-- Main checkins table\nCREATE TABLE IF NOT EXISTS checkins (\n id TEXT PRIMARY KEY, -- record rkey\n uri TEXT UNIQUE NOT NULL, -- full AT URI\n author_did TEXT NOT NULL, -- creator DID\n author_handle TEXT, -- cached handle for display\n text TEXT NOT NULL, -- checkin message\n created_at TEXT NOT NULL, -- ISO timestamp\n \n -- Extracted coordinates\n latitude REAL,\n longitude REAL,\n \n -- Address reference (strongref)\n address_ref_uri TEXT, -- URI to address record\n address_ref_cid TEXT, -- content hash for verification\n \n -- Cached resolved address data\n cached_address_name TEXT, -- venue name\n cached_address_street TEXT, -- street address\n cached_address_locality TEXT, -- city\n cached_address_region TEXT, -- state/province\n cached_address_country TEXT, -- country code\n cached_address_postal_code TEXT, -- postal code\n cached_address_full JSON, -- complete resolved address object\n \n -- Metadata\n address_resolved_at TEXT, -- when address was last resolved\n indexed_at TEXT DEFAULT CURRENT_TIMESTAMP\n);\n\n-- Address cache for efficiency\nCREATE TABLE IF NOT EXISTS address_cache (\n uri TEXT PRIMARY KEY, -- address record URI\n cid TEXT, -- content hash\n name TEXT,\n street TEXT,\n locality TEXT,\n region TEXT,\n country TEXT,\n postal_code TEXT,\n latitude REAL,\n longitude REAL,\n full_data JSON, -- complete address record\n resolved_at TEXT, -- when successfully fetched\n failed_at TEXT -- if resolution failed\n);\n\n-- Social graph for following feeds\nCREATE TABLE IF NOT EXISTS user_follows (\n follower_did TEXT NOT NULL,\n following_did TEXT NOT NULL,\n created_at TEXT,\n synced_at TEXT DEFAULT CURRENT_TIMESTAMP,\n PRIMARY KEY (follower_did, following_did)\n);\n\n-- Processing logs for monitoring\nCREATE TABLE IF NOT EXISTS processing_log (\n id INTEGER PRIMARY KEY,\n run_at TEXT NOT NULL,\n events_processed INTEGER DEFAULT 0,\n errors INTEGER DEFAULT 0,\n duration_ms INTEGER\n);\n\n-- OAuth session storage with DPoP key binding\nCREATE TABLE IF NOT EXISTS oauth_sessions (\n did TEXT PRIMARY KEY,\n handle TEXT NOT NULL,\n pds_url TEXT NOT NULL,\n access_token TEXT NOT NULL,\n refresh_token TEXT NOT NULL,\n dpop_private_key TEXT NOT NULL, -- JWK format\n dpop_public_key TEXT NOT NULL, -- JWK format\n created_at INTEGER NOT NULL,\n updated_at INTEGER NOT NULL\n);\n\n-- Performance indexes\nCREATE INDEX IF NOT EXISTS idx_checkins_created ON checkins(created_at DESC);\nCREATE INDEX IF NOT EXISTS idx_checkins_author ON checkins(author_did);\nCREATE INDEX IF NOT EXISTS idx_checkins_location ON checkins(latitude, longitude);\nCREATE INDEX IF NOT EXISTS idx_follows_follower ON user_follows(follower_did);\nCREATE INDEX IF NOT EXISTS idx_oauth_sessions_updated ON oauth_sessions(updated_at DESC);",[],[319,601],[319],{"_103":610,"_95":611,"_155":612,"_157":-5,"_158":140,"_159":613,"_161":162,"_105":614,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":615,"_98":616},"501fde80-9b03-11f0-9ac5-0224a6c84d84","debug-oauth-sessions","501fdf3e-9b03-11f0-9ac5-0224a6c84d84",1119,["D",1758909897987],[],[611],{"_103":618,"_95":619,"_155":620,"_157":-5,"_158":140,"_159":621,"_161":162,"_105":622,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":623,"_98":642},"56ec730e-58b4-11f0-8987-f69ea79377d9","docs","56ec73e0-58b4-11f0-8987-f69ea79377d9",5,["D",1751619202409],[624,633],{"_103":625,"_95":626,"_155":627,"_157":620,"_158":140,"_159":628,"_161":162,"_105":629,"_100":285,"_164":178,"_166":630,"_167":22,"_168":-5,"_169":631,"_98":632},"b9c727c8-a038-11f0-8cb0-0224a6c84d84","api-documentation.md","68ecf448-58be-11f0-ad79-f69ea79377d9",1278,["D",1759482594380],"# Anchor AppView API Documentation\n\nThe Anchor AppView provides a RESTful API for accessing location-based social\ncheck-ins from the AT Protocol network.\n\n## Base URL\n\n```\nhttps://dropanchor.app/api\n```\n\n**Note:** All API endpoints are now under the `/api/` namespace to separate them\nfrom frontend routes.\n\n## Authentication\n\n**Read Endpoints**: No authentication required (public feeds)\n\n**Write Endpoints**: Require OAuth authentication via:\n\n- **Web**: Secure cookies (Iron Session)\n- **Mobile**: Bearer token in `Authorization` header\n\nSee [Creating Check-ins](#7-create-check-in) for authenticated endpoint details.\n\n## Response Format\n\nAll responses are JSON with proper CORS headers enabled.\n\n### Success Response\n\n```json\n{\n \"checkins\": [...],\n \"cursor\": \"2025-07-04T10:00:00Z\"\n}\n```\n\n### Check-in Object\n\nEach check-in in the response includes full profile information and optional\nimage:\n\n```json\n{\n \"id\": \"3lbmo5gsjgv2f\",\n \"uri\": \"at://did:plc:wxex3wx5k4ctciupsv5m5stb/app.dropanchor.checkin/3lbmo5gsjgv2f\",\n \"author\": {\n \"did\": \"did:plc:wxex3wx5k4ctciupsv5m5stb\",\n \"handle\": \"tijs.social\",\n \"displayName\": \"Tijs\",\n \"avatar\": \"https://cdn.bsky.app/img/avatar/...\"\n },\n \"text\": \"Great coffee here!\",\n \"createdAt\": \"2025-07-04T10:00:00Z\",\n \"coordinates\": {\n \"latitude\": 37.7749,\n \"longitude\": -122.4194\n },\n \"address\": {\n \"name\": \"Blue Bottle Coffee\",\n \"street\": \"1 Ferry Building\",\n \"locality\": \"San Francisco\",\n \"region\": \"CA\",\n \"country\": \"US\",\n \"postalCode\": \"94111\"\n },\n \"image\": {\n \"thumbUrl\": \"https://pds.example.com/xrpc/com.atproto.sync.getBlob?did=...&cid=bafyrei...\",\n \"fullsizeUrl\": \"https://pds.example.com/xrpc/com.atproto.sync.getBlob?did=...&cid=bafyrei...\",\n \"alt\": \"Latte art at Blue Bottle\"\n }\n}\n```\n\n**Note**: The `image` field is optional and only present when a check-in has an\nattached photo.\n\n### Error Response\n\n```json\n{\n \"error\": \"Description of the error\"\n}\n```\n\n## Rate Limits\n\n- 1000 requests per hour per IP\n- Rate limit headers included in all responses\n\n## Endpoints\n\n### 1. Nearby Check-ins\n\nGet check-ins within a specified radius of coordinates using spatial queries.\n\n**Endpoint:** `GET /api/nearby`\n\n**Required Parameters:**\n\n- `lat`: Latitude (decimal degrees)\n- `lng`: Longitude (decimal degrees)\n\n**Optional Parameters:**\n\n- `radius`: Search radius in kilometers (default: 5, max: 50)\n- `limit`: Number of results (default: 50, max: 100)\n\n**Example Request:**\n\n```bash\ncurl \"https://dropanchor.app/api/nearby?lat=52.3676&lng=4.9041&radius=10&limit=20\"\n```\n\n**Example Response:**\n\n```json\n{\n \"checkins\": [\n {\n \"id\": \"record123\",\n \"uri\": \"at://did:plc:example123/app.dropanchor.checkin/record123\",\n \"author\": {\n \"did\": \"did:plc:example123\",\n \"handle\": \"alice.bsky.social\"\n },\n \"text\": \"Great spot for lunch!\",\n \"createdAt\": \"2025-07-04T10:15:00Z\",\n \"coordinates\": {\n \"latitude\": 52.3700,\n \"longitude\": 4.9000\n },\n \"address\": {\n \"name\": \"Restaurant Brown\",\n \"street\": \"Herengracht 456\",\n \"locality\": \"Amsterdam\",\n \"region\": \"North Holland\",\n \"country\": \"Netherlands\",\n \"postalCode\": \"1017 CA\"\n },\n \"distance\": 2.34\n }\n ],\n \"center\": {\n \"latitude\": 52.3676,\n \"longitude\": 4.9041\n },\n \"radius\": 10\n}\n```\n\n**Notes:**\n\n- Results are sorted by distance (closest first)\n- Distance is calculated using the Haversine formula\n- `distance` field is included in nearby results (in kilometers)\n\n### 3. User Check-ins\n\nGet all check-ins from a specific user.\n\n**Endpoint:** `GET /api/user`\n\n**Required Parameters:**\n\n- `did`: User's decentralized identifier\n\n**Optional Parameters:**\n\n- `limit`: Number of results (default: 50, max: 100)\n- `cursor`: ISO timestamp for pagination\n\n**Example Request:**\n\n```bash\ncurl \"https://dropanchor.app/api/user?did=did:plc:example123&limit=10\"\n```\n\n**Example Response:**\n\n```json\n{\n \"checkins\": [\n {\n \"id\": \"record123\",\n \"uri\": \"at://did:plc:example123/app.dropanchor.checkin/record123\",\n \"author\": {\n \"did\": \"did:plc:example123\",\n \"handle\": \"alice.bsky.social\"\n },\n \"text\": \"Love this place!\",\n \"createdAt\": \"2025-07-04T10:15:00Z\",\n \"coordinates\": {\n \"latitude\": 52.3676,\n \"longitude\": 4.9041\n },\n \"address\": {\n \"name\": \"Cafe Central\",\n \"street\": \"Damrak 123\",\n \"locality\": \"Amsterdam\",\n \"region\": \"North Holland\",\n \"country\": \"Netherlands\",\n \"postalCode\": \"1012 LP\"\n }\n }\n ],\n \"user\": {\n \"did\": \"did:plc:example123\"\n }\n}\n```\n\n### 4. Following Feed\n\nGet check-ins from users that the specified user follows on Bluesky.\n\n**Endpoint:** `GET /api/following`\n\n**Required Parameters:**\n\n- `user`: User's DID to get following feed for\n\n**Optional Parameters:**\n\n- `limit`: Number of results (default: 50, max: 100)\n- `cursor`: ISO timestamp for pagination\n\n**Example Request:**\n\n```bash\ncurl \"https://dropanchor.app/api/following?user=did:plc:example123&limit=10\"\n```\n\n**Example Response:**\n\n```json\n{\n \"checkins\": [\n {\n \"id\": \"record456\",\n \"uri\": \"at://did:plc:friend789/app.dropanchor.checkin/record456\",\n \"author\": {\n \"did\": \"did:plc:friend789\",\n \"handle\": \"bob.bsky.social\"\n },\n \"text\": \"Best pizza in town!\",\n \"createdAt\": \"2025-07-04T10:30:00Z\",\n \"coordinates\": {\n \"latitude\": 52.3600,\n \"longitude\": 4.8800\n },\n \"address\": {\n \"name\": \"Pizza Palace\",\n \"street\": \"Prinsengracht 789\",\n \"locality\": \"Amsterdam\",\n \"region\": \"North Holland\",\n \"country\": \"Netherlands\",\n \"postalCode\": \"1016 HT\"\n }\n }\n ],\n \"user\": {\n \"did\": \"did:plc:example123\"\n },\n \"cursor\": \"2025-07-04T10:30:00Z\"\n}\n```\n\n**Note:** Social graph data is synced daily from Bluesky. If no follows are\nfound, returns an empty array.\n\n### 5. Place Discovery\n\nSearch for nearby places using OpenStreetMap data via the Overpass API. This\nendpoint enables location-based place discovery for check-ins.\n\n**Endpoint:** `GET /api/places/nearby`\n\n**Required Parameters:**\n\n- `lat`: Latitude coordinate (-90 to 90)\n- `lng`: Longitude coordinate (-180 to 180)\n\n**Optional Parameters:**\n\n- `radius`: Search radius in meters (default: 300, max: 2000)\n- `categories`: Comma-separated list of OSM categories (e.g.,\n \"amenity=cafe,amenity=restaurant\")\n\n**Example Request:**\n\n```bash\ncurl \"https://dropanchor.app/api/places/nearby?lat=37.7749&lng=-122.4194&radius=500&categories=amenity%3Dcafe,amenity%3Drestaurant\"\n```\n\n**Example Response:**\n\n```json\n{\n \"places\": [\n {\n \"id\": \"node:2895323815\",\n \"elementType\": \"node\",\n \"elementId\": 2895323815,\n \"name\": \"Blue Bottle Coffee\",\n \"latitude\": 37.7749,\n \"longitude\": -122.4194,\n \"address\": {\n \"$type\": \"community.lexicon.location.address\",\n \"name\": \"Blue Bottle Coffee\",\n \"street\": \"315 Linden St\",\n \"locality\": \"San Francisco\",\n \"region\": \"CA\",\n \"country\": \"US\",\n \"postalCode\": \"94102\"\n },\n \"category\": \"cafe\",\n \"categoryGroup\": \"food_and_drink\",\n \"icon\": \"☕\",\n \"distanceMeters\": 45.8,\n \"formattedDistance\": \"46m\",\n \"tags\": {\n \"amenity\": \"cafe\",\n \"name\": \"Blue Bottle Coffee\",\n \"addr:street\": \"Linden St\",\n \"addr:housenumber\": \"315\",\n \"addr:city\": \"San Francisco\",\n \"addr:state\": \"CA\",\n \"addr:country\": \"US\",\n \"addr:postcode\": \"94102\"\n }\n }\n ],\n \"totalCount\": 23,\n \"searchRadius\": 500,\n \"categories\": [\"amenity=cafe\", \"amenity=restaurant\"],\n \"searchCoordinate\": {\n \"latitude\": 37.7749,\n \"longitude\": -122.4194\n }\n}\n```\n\n**Place Categories:**\n\nCommon category filters include:\n\n- **Food & Drink:** `amenity=restaurant`, `amenity=cafe`, `amenity=bar`,\n `shop=supermarket`\n- **Entertainment:** `amenity=cinema`, `tourism=attraction`, `leisure=park`\n- **Sports:** `leisure=fitness_centre`, `leisure=climbing`,\n `leisure=swimming_pool`\n- **Shopping:** `shop=clothes`, `shop=electronics`, `shop=books`\n- **Accommodation:** `tourism=hotel`, `tourism=hostel`\n- **Transportation:** `amenity=bus_station`, `amenity=fuel`\n\n**Notes:**\n\n- Results include complete address information extracted from OpenStreetMap data\n- Places are sorted by distance (closest first)\n- Address data follows the AT Protocol `community.lexicon.location.address`\n format\n- Results are cached for 5 minutes per location to improve performance\n- Uses Overpass API for real-time OpenStreetMap data\n\n### 6. Statistics\n\nGet AppView health metrics.\n\n**Endpoint:** `GET /api/stats`\n\n**Parameters:** None\n\n**Example Request:**\n\n```bash\ncurl \"https://dropanchor.app/api/stats\"\n```\n\n**Example Response:**\n\n```json\n{\n \"activeUsers\": 89,\n \"timestamp\": \"2025-07-04T10:45:00Z\"\n}\n```\n\n**Fields:**\n\n- `activeUsers`: Number of users with active OAuth sessions\n- `timestamp`: Current server timestamp\n\n**Note**: Statistics reflect active OAuth sessions, not total check-ins (which\nare stored in users' PDS servers).\n\n### 7. Create Check-in\n\nCreate a new check-in with optional image attachment.\n\n**Endpoint:** `POST /api/checkins`\n\n**Authentication Required**: Yes (OAuth via cookie or Bearer token)\n\n**Content-Type**:\n\n- `application/json` (without image)\n- `multipart/form-data` (with image)\n\n**Request Body (JSON)**:\n\n```json\n{\n \"place\": {\n \"latitude\": 37.7749,\n \"longitude\": -122.4194,\n \"name\": \"Blue Bottle Coffee\",\n \"address\": {\n \"$type\": \"community.lexicon.location.address\",\n \"name\": \"Blue Bottle Coffee\",\n \"street\": \"1 Ferry Building\",\n \"locality\": \"San Francisco\",\n \"region\": \"CA\",\n \"country\": \"US\",\n \"postalCode\": \"94111\"\n }\n },\n \"message\": \"Great coffee here!\"\n}\n```\n\n**Request Body (FormData with image)**:\n\n```typescript\nconst formData = new FormData();\nformData.append(\n \"place\",\n JSON.stringify({\n latitude: 37.7749,\n longitude: -122.4194,\n name: \"Blue Bottle Coffee\",\n address: {/* ... */},\n }),\n);\nformData.append(\"message\", \"Great coffee here!\");\nformData.append(\"image\", imageFile); // File object (JPEG, PNG, WebP, GIF)\nformData.append(\"imageAlt\", \"Latte art at Blue Bottle\");\n```\n\n**Image Requirements**:\n\n- **Formats**: JPEG, PNG, WebP, GIF\n- **Max Size**: 10MB (hard limit), <5MB recommended\n- **Validation**: Magic number detection (security)\n- **Privacy**: EXIF data stripped (including GPS)\n- **Processing**: Creates thumbnail (300KB max) and fullsize (2MB max) versions\n\n**Example Request (cURL with image)**:\n\n```bash\ncurl -X POST \"https://dropanchor.app/api/checkins\" \\\n -H \"Authorization: Bearer YOUR_SESSION_ID\" \\\n -F \"place={\\\"latitude\\\":37.7749,\\\"longitude\\\":-122.4194,\\\"name\\\":\\\"Blue Bottle Coffee\\\"}\" \\\n -F \"message=Great coffee here!\" \\\n -F \"image=@photo.jpg\" \\\n -F \"imageAlt=Latte art at Blue Bottle\"\n```\n\n**Example Request (Swift/iOS)**:\n\n```swift\nvar request = URLRequest(url: URL(string: \"https://dropanchor.app/api/checkins\")!)\nrequest.httpMethod = \"POST\"\nrequest.setValue(\"Bearer \\(sessionId)\", forHTTPHeaderField: \"Authorization\")\n\nlet boundary = UUID().uuidString\nrequest.setValue(\"multipart/form-data; boundary=\\(boundary)\", forHTTPHeaderField: \"Content-Type\")\n\nvar body = Data()\n// Add place JSON\nbody.append(\"--\\(boundary)\\r\\n\".data(using: .utf8)!)\nbody.append(\"Content-Disposition: form-data; name=\\\"place\\\"\\r\\n\\r\\n\".data(using: .utf8)!)\nbody.append(placeJSON.data(using: .utf8)!)\n\n// Add image\nbody.append(\"\\r\\n--\\(boundary)\\r\\n\".data(using: .utf8)!)\nbody.append(\"Content-Disposition: form-data; name=\\\"image\\\"; filename=\\\"photo.jpg\\\"\\r\\n\".data(using: .utf8)!)\nbody.append(\"Content-Type: image/jpeg\\r\\n\\r\\n\".data(using: .utf8)!)\nbody.append(imageData)\n\nbody.append(\"\\r\\n--\\(boundary)--\\r\\n\".data(using: .utf8)!)\nrequest.httpBody = body\n\nlet (data, _) = try await URLSession.shared.data(for: request)\n```\n\n**Success Response** (201 Created):\n\n```json\n{\n \"success\": true,\n \"checkin\": {\n \"id\": \"3lbmo5gsjgv2f\",\n \"uri\": \"at://did:plc:wxex3wx5k4ctciupsv5m5stb/app.dropanchor.checkin/3lbmo5gsjgv2f\",\n \"author\": {\n \"did\": \"did:plc:wxex3wx5k4ctciupsv5m5stb\",\n \"handle\": \"tijs.social\"\n },\n \"text\": \"Great coffee here!\",\n \"createdAt\": \"2025-07-04T10:00:00Z\",\n \"image\": {\n \"thumbUrl\": \"https://pds.example.com/xrpc/com.atproto.sync.getBlob?did=...&cid=...\",\n \"fullsizeUrl\": \"https://pds.example.com/xrpc/com.atproto.sync.getBlob?did=...&cid=...\",\n \"alt\": \"Latte art at Blue Bottle\"\n }\n }\n}\n```\n\n**Error Response** (400 Bad Request):\n\n```json\n{\n \"error\": \"Image too large (max 10MB)\"\n}\n```\n\n**Possible Errors**:\n\n- `401 Unauthorized`: Missing or invalid authentication\n- `400 Bad Request`: Invalid image format, size exceeded, or missing required\n fields\n- `500 Internal Server Error`: Failed to upload to PDS or create record\n\n### 8. Delete Check-in\n\nDelete a check-in (only the author can delete their own check-ins).\n\n**Endpoint:** `DELETE /api/checkins/:did/:rkey`\n\n**Authentication Required**: Yes (must be the check-in author)\n\n**Example Request**:\n\n```bash\ncurl -X DELETE \"https://dropanchor.app/api/checkins/did:plc:wxex3wx5k4ctciupsv5m5stb/3lbmo5gsjgv2f\" \\\n -H \"Authorization: Bearer YOUR_SESSION_ID\"\n```\n\n**Success Response** (200 OK):\n\n```json\n{\n \"success\": true\n}\n```\n\n**Error Responses**:\n\n- `401 Unauthorized`: Not authenticated or not the author\n- `404 Not Found`: Check-in doesn't exist\n- `500 Internal Server Error`: Failed to delete from PDS\n\n## Data Model\n\n### Checkin Object\n\n```typescript\ninterface Checkin {\n id: string; // Unique record identifier (rkey)\n uri: string; // Full AT Protocol URI\n author: {\n did: string; // User's decentralized identifier\n handle: string; // User's Bluesky handle\n displayName?: string; // User's display name\n avatar?: string; // User's avatar URL\n };\n text: string; // Check-in message/review\n createdAt: string; // ISO timestamp\n coordinates?: { // Optional location coordinates\n latitude: number;\n longitude: number;\n };\n address?: { // Optional resolved venue information\n name?: string; // Venue name\n street?: string; // Street address\n locality?: string; // City\n region?: string; // State/Province\n country?: string; // Country\n postalCode?: string; // Postal/ZIP code\n };\n image?: { // Optional image attachment\n thumbUrl: string; // Thumbnail URL (300KB max)\n fullsizeUrl: string; // Full-size URL (2MB max)\n alt?: string; // Alt text description\n };\n distance?: number; // Distance in km (only in nearby results)\n}\n```\n\n## Error Codes\n\n| Status Code | Description |\n| ----------- | ------------------------------------------- |\n| 200 | Success |\n| 201 | Created - Check-in successfully created |\n| 400 | Bad Request - Missing or invalid parameters |\n| 401 | Unauthorized - Authentication required |\n| 404 | Not Found - Resource doesn't exist |\n| 429 | Too Many Requests - Rate limit exceeded |\n| 500 | Internal Server Error |\n\n## Common Error Examples\n\n### Missing Required Parameters\n\n```json\n{\n \"error\": \"lat and lng parameters required\"\n}\n```\n\n### Invalid Coordinates\n\n```json\n{\n \"error\": \"Invalid latitude or longitude\"\n}\n```\n\n### Rate Limit Exceeded\n\n```json\n{\n \"error\": \"Rate limit exceeded. Try again later.\"\n}\n```\n\n## SDK Examples\n\n### JavaScript/TypeScript\n\n```typescript\nclass AnchorAPI {\n private baseURL = \"https://dropanchor.app/api\";\n\n async getNearbyCheckins(lat: number, lng: number, radius = 5, limit = 50) {\n const params = new URLSearchParams({\n lat: lat.toString(),\n lng: lng.toString(),\n radius: radius.toString(),\n limit: limit.toString(),\n });\n\n const response = await fetch(`${this.baseURL}/nearby?${params}`);\n return response.json();\n }\n\n async getUserCheckins(did: string, limit = 50, cursor?: string) {\n const params = new URLSearchParams({\n did,\n limit: limit.toString(),\n ...(cursor && { cursor }),\n });\n\n const response = await fetch(`${this.baseURL}/user?${params}`);\n return response.json();\n }\n\n async getFollowingFeed(userDid: string, limit = 50, cursor?: string) {\n const params = new URLSearchParams({\n user: userDid,\n limit: limit.toString(),\n ...(cursor && { cursor }),\n });\n\n const response = await fetch(`${this.baseURL}/following?${params}`);\n return response.json();\n }\n\n async getNearbyPlaces(\n lat: number,\n lng: number,\n radius = 300,\n categories?: string[],\n ) {\n const params = new URLSearchParams({\n lat: lat.toString(),\n lng: lng.toString(),\n radius: radius.toString(),\n ...(categories && { categories: categories.join(\",\") }),\n });\n\n const response = await fetch(`${this.baseURL}/places/nearby?${params}`);\n return response.json();\n }\n\n async getStats() {\n const response = await fetch(`${this.baseURL}/stats`);\n return response.json();\n }\n}\n```\n\n### Swift (iOS)\n\n```swift\nimport Foundation\n\nclass AnchorAPI {\n private let baseURL = \"https://dropanchor.app/api\"\n\n func getNearbyCheckins(lat: Double, lng: Double, radius: Double = 5, limit: Int = 50) async throws -> NearbyResponse {\n var components = URLComponents(string: \"\\(baseURL)/nearby\")!\n components.queryItems = [\n URLQueryItem(name: \"lat\", value: String(lat)),\n URLQueryItem(name: \"lng\", value: String(lng)),\n URLQueryItem(name: \"radius\", value: String(radius)),\n URLQueryItem(name: \"limit\", value: String(limit))\n ]\n \n let (data, _) = try await URLSession.shared.data(from: components.url!)\n return try JSONDecoder().decode(NearbyResponse.self, from: data)\n }\n}\n```\n\n## Best Practices\n\n### Performance\n\n- Use pagination with cursors for large datasets\n- Cache responses when appropriate\n- Use reasonable limits (avoid requesting more than needed)\n\n### Spatial Queries\n\n- Keep radius reasonable (< 50km) for good performance\n- Consider user's location accuracy when setting radius\n- Sort by distance when displaying nearby results\n\n### Social Features\n\n- Check if social graph data is available before using /following\n- Handle empty following lists gracefully\n- Consider showing nearby checkins when following feed is empty\n\n### Error Handling\n\n- Always check for error responses\n- Implement retry logic for temporary failures\n- Handle rate limits appropriately\n\n## Support\n\nFor API support and feature requests, please visit:\n\n- GitHub:\n [Anchor AppView Issues](https://github.com/your-org/anchor-appview/issues)\n- AT Protocol Documentation: [atproto.com](https://atproto.com)\n\n## Changelog\n\n### v1.1.0 (2025-10-03)\n\n- **Image Support**: Optional image attachments for check-ins\n - Thumbnail and fullsize versions\n - Privacy-first: EXIF data stripped including GPS\n - Magic number validation for security\n - Support for JPEG, PNG, WebP, GIF\n- **Delete Endpoint**: Users can delete their own check-ins\n- **OAuth Authentication**: Secure authentication for write operations\n- **PDS-Only Architecture**: All check-in data stored in users' PDS\n\n### v1.0.0 (2025-07-04)\n\n- Initial API release\n- Nearby, user, and following feeds\n- Statistics endpoint\n- Spatial queries with Haversine distance\n- AT Protocol integration\n",[],[619,626],{"_103":634,"_95":635,"_155":636,"_157":620,"_158":140,"_159":637,"_161":162,"_105":638,"_100":275,"_164":178,"_166":639,"_167":22,"_168":-5,"_169":640,"_98":641},"7a26b496-9ad2-11f0-af6e-0224a6c84d84","deployment-guide.md","5821a3d4-58b4-11f0-a9f0-f69ea79377d9",1073,["D",1758888923077],"# Anchor AppView Deployment Guide\n\n## Prerequisites\n\nEnsure you have the Val Town CLI installed:\n\n```bash\nnpm install -g @valtown/cli\n# or\nnpx @valtown/cli --help\n```\n\n## Functions Overview\n\nThis AppView consists of 3 main Val Town functions:\n\n1. **jetstreamPoller** - Cron job (5 minutes)\n2. **anchorAPI** - HTTP function\n3. **socialGraphSync** - Cron job (daily)\n\n## Quick Deployment with Val Town CLI\n\n### 1. Deploy All Functions\n\n```bash\n# Deploy the ingestion cron job\nvt create cron jetstreamPoller --file src/ingestion/jetstream-poller.ts --schedule \"*/5 * * * *\"\n\n# Deploy the HTTP API\nvt create http anchorAPI --file src/api/anchor-api.ts\n\n# Deploy the social sync cron job\nvt create cron socialGraphSync --file src/social/social-graph-sync.ts --schedule \"0 2 * * *\"\n```\n\n### 2. Verify Deployments\n\n```bash\n# List your functions\nvt list\n\n# Check function status\nvt status jetstreamPoller\nvt status anchorAPI\nvt status socialGraphSync\n```\n\n### 3. Test the API\n\n```bash\n# Get your API URL\nAPI_URL=$(vt url anchorAPI)\n\n# Test endpoints\ncurl \"$API_URL/stats\"\ncurl \"$API_URL/global?limit=5\"\n```\n\n## Alternative: Manual Deployment\n\nIf you prefer the web interface:\n\n### 1. No Database Setup Required\n\nTables are automatically created when functions first run.\n\n### 2. Create Functions via Web Interface\n\n- Go to [val.town](https://val.town)\n- Create new cron function: `jetstreamPoller`\n- Copy code from `src/ingestion/jetstream-poller.ts`\n- Set schedule: `*/5 * * * *`\n\n### 3. Repeat for Other Functions\n\n- HTTP function: `anchorAPI` from `src/api/anchor-api.ts`\n- Cron function: `socialGraphSync` from `src/social/social-graph-sync.ts`\n (schedule: `0 2 * * *`)\n\n## Environment Variables\n\nNo environment variables are required for the basic deployment. All\nauthentication uses public APIs.\n\n## Testing the Deployment\n\n### 1. Test Data Ingestion\n\nMonitor the `jetstreamPoller` logs to ensure it's receiving and processing\ncheck-in events.\n\n### 2. Test API Endpoints\n\nUse the provided test script or Val Town CLI:\n\n```bash\n# Using the test script (update BASE_URL first)\n./scripts/test-api.sh\n\n# Or using Val Town CLI\nAPI_URL=$(vt url anchorAPI)\ncurl \"$API_URL/global?limit=5\"\ncurl \"$API_URL/stats\"\ncurl \"$API_URL/nearby?lat=52.0705&lng=4.3007&radius=5\"\n```\n\n### 3. Monitor Processing Logs\n\nCheck the `processing_log_v1` table to monitor ingestion health and performance.\n\n## Scaling Considerations\n\n### Performance Optimization\n\n- Monitor SQLite performance as data grows\n- Consider implementing pagination for large result sets\n- Add query timeout handling for long-running spatial queries\n\n### Rate Limiting\n\n- The social graph sync includes built-in rate limiting\n- Jetstream poller has a 45-second collection window\n- API endpoints have built-in limits (max 100 results per query)\n\n### Error Handling\n\n- All functions include comprehensive error handling\n- Failed address resolutions are cached to avoid retry storms\n- Processing logs track errors for monitoring\n\n## Monitoring and Maintenance\n\n### Health Checks\n\n- Monitor the `/stats` endpoint for system health\n- Check processing logs for ingestion errors\n- Monitor SQLite database size and performance\n\n### Database Maintenance\n\n- Periodically clean up old processing logs\n- Monitor address cache hit rates\n- Consider archiving old check-ins if storage becomes an issue\n\n### Updates and Schema Changes\n\n- When changing database schema, increment table versions (e.g., `checkins_v1` →\n `checkins_v2`)\n- Test schema migrations carefully in development\n- Consider data migration scripts for breaking changes\n\n## Troubleshooting\n\n### Common Issues\n\n1. **Jetstream connection failures**: Check network connectivity and Jetstream\n service status\n2. **Address resolution errors**: Verify AT Protocol network accessibility\n3. **Social graph sync failures**: Check Bluesky API rate limits and status\n4. **SQLite performance**: Monitor query execution times and optimize indexes\n\n### Debugging\n\n- All functions include detailed logging\n- Use Val Town's built-in debugging tools\n- Monitor function execution times and memory usage\n\n## Security Considerations\n\n- All API endpoints include proper CORS headers\n- No sensitive data is logged or stored\n- Public APIs are used for all external integrations\n- Rate limiting prevents abuse of external services\n\n## Integration with Anchor Client\n\nThe deployed AppView provides these endpoints for the Anchor client:\n\n- **Nearby Feed**: Location-based spatial queries\n- **User Feed**: Personal check-in history\n- **Following Feed**: Social feed based on Bluesky follows\n- **Stats**: System health and metrics\n\nEach endpoint returns properly formatted JSON with consistent response\nstructures for easy client integration.\n",[],[619,635],[619],{"_103":644,"_95":645,"_155":646,"_157":-5,"_158":140,"_159":647,"_161":162,"_105":648,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":649,"_98":841},"c93143ea-7466-11f0-b31d-0224a6c84d84","frontend","c93144f8-7466-11f0-b31d-0224a6c84d84",256,["D",1754664525931],[650,773,781,798,814,823,832],{"_103":651,"_95":652,"_155":653,"_157":646,"_158":140,"_159":654,"_161":162,"_105":655,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":656,"_98":772},"c97cd5f8-7466-11f0-9cda-0224a6c84d84","components","c97cd6fc-7466-11f0-9cda-0224a6c84d84",259,["D",1754664526431],[657,666,676,686,696,706,716,726,735,745,754,763],{"_103":658,"_95":659,"_155":660,"_157":653,"_158":140,"_159":661,"_161":162,"_105":662,"_100":571,"_164":246,"_166":663,"_167":22,"_168":-5,"_169":664,"_98":665},"c113fbba-a131-11f0-8606-0224a6c84d84","About.tsx","7309096a-9ad3-11f0-85a1-0224a6c84d84",1295,["D",1759589551317],"/** @jsxImportSource https://esm.sh/react@19.1.0 */\n\ninterface AboutProps {\n onLogin: () => void;\n}\n\nexport function About({ onLogin }: AboutProps) {\n return (\n \n {/* Hero Section */}\n

\n \n \n Anchor\n \n \n Your personal location logger, powered by the AT Protocol\n

\n\n {/* What is Anchor */}\n

\n \n What is Anchor?\n \n \n Anchor is a personal location logging app that stores your check-ins\n directly on{\" \"}\n your own Personal Data Server (PDS). Unlike\n traditional social networks, you own and control your data completely.\n

\n \n Share your favorite places with friends on Bluesky or any other social\n network when you want to, but your location history remains yours.\n

\n\n {/* Key Features */}\n

\n \n Key Features\n \n \n

\n Your Data, Your Server{\" \"}\n - Check-ins are stored on your personal AT Protocol server\n

\n Open Protocol{\" \"}\n - Built on the decentralized AT Protocol network\n

\n Social Integration{\" \"}\n - Connect with friends through Bluesky's social network\n

\n Rich Location Data{\" \"}\n - Detailed venue information and interactive maps\n

\n \n

\n\n {/* Privacy Notice */}\n \n \n 🔒 Privacy Notice\n \n \n Your location check-ins are stored unencrypted on your Personal Data\n Server and are publicly visible to anyone who knows how to query AT\n Protocol records. Only check in at locations you're comfortable\n sharing publicly.\n

\n \n\n {/* Download & Links */}\n

\n \n Get Started\n \n\n

\n \n 📱 iOS App\n \n \n Download the Anchor iOS app to start logging your locations:\n

\n {\n e.currentTarget.style.background = \"#0056b3\";\n }}\n onMouseLeave={(e) => {\n e.currentTarget.style.background = \"#007aff\";\n }}\n >\n 📥 TestFlight Beta\n \n {\n e.currentTarget.style.background = \"#e5e5ea\";\n }}\n onMouseLeave={(e) => {\n e.currentTarget.style.background = \"#f2f2f7\";\n }}\n >\n 📱 iOS Source Code\n \n

\n\n

\n \n 🌐 Web & API\n \n \n Explore the web interface and API source code:\n

\n {\n e.currentTarget.style.background = \"#e5e5ea\";\n }}\n onMouseLeave={(e) => {\n e.currentTarget.style.background = \"#f2f2f7\";\n }}\n >\n 💻 Web Source Code\n \n

\n\n {/* Sign In Button */}\n

\n {\n e.currentTarget.style.background = \"#0056b3\";\n e.currentTarget.style.transform = \"translateY(-2px)\";\n e.currentTarget.style.boxShadow =\n \"0 4px 12px rgba(0, 122, 255, 0.4)\";\n }}\n onMouseLeave={(e) => {\n e.currentTarget.style.background = \"#007aff\";\n e.currentTarget.style.transform = \"translateY(0)\";\n e.currentTarget.style.boxShadow =\n \"0 2px 8px rgba(0, 122, 255, 0.3)\";\n }}\n >\n Sign in with Bluesky to get started\n \n \n You'll need a Bluesky account to use Anchor\n

\n \n By using Anchor, you agree to our{\" \"}\n {\n e.currentTarget.style.textDecoration = \"underline\";\n }}\n onMouseLeave={(e) => {\n e.currentTarget.style.textDecoration = \"none\";\n }}\n >\n Privacy Policy\n \n

\n \n );\n}\n",[],[645,652,659],{"_103":667,"_95":668,"_155":669,"_157":653,"_158":140,"_159":670,"_161":162,"_105":671,"_100":672,"_164":246,"_166":673,"_167":22,"_168":-5,"_169":674,"_98":675},"8a41712c-b7f1-11f0-957a-0224a6c84d84","App.tsx","ca0465e0-7466-11f0-b5b0-0224a6c84d84",1440,["D",1762090848286],66,"/** @jsxImportSource https://esm.sh/react@19.1.0 */\nimport React, {\n useEffect,\n useRef,\n useState,\n} from \"https://esm.sh/react@19.1.0\";\nimport { Header } from \"./Header.tsx\";\nimport { Feed } from \"./Feed.tsx\";\nimport { About } from \"./About.tsx\";\nimport { PrivacyPolicy } from \"./PrivacyPolicy.tsx\";\nimport { LoginForm } from \"./LoginForm.tsx\";\nimport { MobileAuth } from \"./MobileAuth.tsx\";\nimport { CheckinDetail } from \"./CheckinDetail.tsx\";\nimport { CheckinComposer } from \"./CheckinComposer.tsx\";\nimport { AuthState, CheckinData } from \"../types/index.ts\";\nimport { apiFetch } from \"../utils/api.ts\";\n\nexport function App() {\n // Check if we're on the mobile-auth route first, before any hooks\n let isMobileAuth = false;\n let isPrivacyPolicy = false;\n try {\n isMobileAuth = globalThis.location?.pathname === \"/mobile-auth\";\n isPrivacyPolicy = globalThis.location?.pathname === \"/privacy-policy\";\n } catch (error) {\n console.error(\"Error checking routes:\", error);\n isMobileAuth = false;\n isPrivacyPolicy = false;\n }\n\n // Check if we're on a checkin detail route\n let checkinMatch = null;\n let isCheckinDetail = false;\n let checkinId = null;\n let checkinDid = null;\n let checkinRkey = null;\n\n try {\n const pathname = globalThis.location?.pathname || \"\";\n\n // Try new REST-style URL first: /checkins/:did/:rkey\n const restMatch = pathname.match(/^\\/checkins\\/([^\\/]+)\\/([^\\/]+)$/);\n if (restMatch) {\n [, checkinDid, checkinRkey] = restMatch;\n isCheckinDetail = true;\n checkinId = `${checkinDid}/${checkinRkey}`; // For CheckinDetail component\n } else {\n // Fallback to legacy URL: /checkin/:id\n checkinMatch = pathname.match(/^\\/checkin\\/(.+)$/);\n isCheckinDetail = !!checkinMatch;\n checkinId = checkinMatch?.[1];\n }\n } catch (error) {\n console.error(\"Error parsing checkin route:\", error);\n isCheckinDetail = false;\n checkinId = null;\n }\n\n if (isMobileAuth) {\n return ;\n }\n\n if (isPrivacyPolicy) {\n return ;\n }\n\n if (isCheckinDetail && checkinId) {\n return ;\n }\n\n const [checkins, setCheckins] = useState([]);\n const [loading, setLoading] = useState(false);\n const [auth, setAuth] = useState({ isAuthenticated: false });\n const [error, setError] = useState(null);\n const [showLoginForm, setShowLoginForm] = useState(false);\n const [loginHandle, setLoginHandle] = useState(\"\");\n const [loginLoading, setLoginLoading] = useState(false);\n const [showUserDropdown, setShowUserDropdown] = useState(false);\n const userDropdownRef = useRef(null);\n const [showCheckinComposer, setShowCheckinComposer] = useState(false);\n\n // Inject proper CSS styles on mount\n useEffect(() => {\n const style = document.createElement(\"style\");\n style.textContent = `\n * {\n margin: 0;\n padding: 0;\n box-sizing: border-box;\n }\n \n body {\n font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', system-ui, sans-serif;\n line-height: 1.5;\n color: #1c1c1e;\n background: #f2f2f7;\n min-height: 100vh;\n }\n\n @keyframes spin {\n to { transform: rotate(360deg); }\n }\n\n /* Mobile responsive styles */\n @media (max-width: 768px) {\n body {\n font-size: 16px; /* Prevent iOS zoom on input focus */\n }\n }\n `;\n document.head.appendChild(style);\n return () => {\n if (style.parentNode) {\n document.head.removeChild(style);\n }\n };\n }, []);\n\n // Check authentication status on load\n // NOTE: Use regular fetch() here, not apiFetch(), to avoid redirect loops\n useEffect(() => {\n const checkAuth = async () => {\n try {\n const response = await fetch(\"/api/auth/session\");\n const data = await response.json();\n\n if (data.valid) {\n setAuth({\n isAuthenticated: true,\n userHandle: data.handle,\n userDid: data.did,\n userDisplayName: data.displayName,\n userAvatar: data.avatar,\n });\n }\n } catch (error) {\n console.error(\"Auth check failed:\", error);\n }\n };\n\n checkAuth();\n }, []);\n\n // Close user dropdown when clicking outside\n useEffect(() => {\n const handleClickOutside = (event: MouseEvent) => {\n if (\n userDropdownRef.current &&\n !userDropdownRef.current.contains(event.target as Node)\n ) {\n setShowUserDropdown(false);\n }\n };\n\n if (showUserDropdown) {\n document.addEventListener(\"click\", handleClickOutside);\n }\n\n return () => {\n document.removeEventListener(\"click\", handleClickOutside);\n };\n }, [showUserDropdown]);\n\n // Load feed data\n useEffect(() => {\n const loadFeed = async () => {\n setLoading(true);\n setError(null);\n\n try {\n // For timeline feed, require authentication\n if (!auth.isAuthenticated) {\n // Don't fetch data, show login prompt instead\n setCheckins([]);\n setLoading(false);\n return;\n }\n\n let url = \"\";\n if (auth.isAuthenticated) {\n url = `/api/checkins/${auth.userDid}`;\n }\n\n // If no valid URL, don't fetch\n if (!url) {\n setCheckins([]);\n setLoading(false);\n return;\n }\n\n const response = await apiFetch(url);\n if (!response.ok) {\n const errorText = await response.text();\n console.error(\"API error response:\", errorText);\n throw new Error(`Failed to fetch: ${response.status} - ${errorText}`);\n }\n\n let data;\n try {\n data = await response.json();\n } catch (jsonError) {\n console.error(\"Failed to parse JSON response:\", jsonError);\n throw new Error(\"Invalid response format from server\");\n }\n\n if (data && typeof data === \"object\") {\n setCheckins(data.checkins || []);\n } else {\n console.error(\"Unexpected response format:\", data);\n throw new Error(\"Unexpected response format from server\");\n }\n } catch (error) {\n console.error(\"Failed to load feed:\", error);\n setError(\n error instanceof Error ? error.message : \"Failed to load feed\",\n );\n setCheckins([]);\n } finally {\n setLoading(false);\n }\n };\n\n loadFeed();\n }, [auth.isAuthenticated, auth.userDid]);\n\n const handleLogin = () => {\n setShowLoginForm(true);\n };\n\n const handleSubmitLogin = (e: React.FormEvent) => {\n e.preventDefault();\n setLoginLoading(true);\n\n try {\n // Iron Session OAuth: direct redirect to /login with handle parameter\n globalThis.location.href = `/login?handle=${\n encodeURIComponent(loginHandle)\n }`;\n } catch (error) {\n console.error(\"Login failed:\", error);\n alert(\"Login failed. Please try again.\");\n setLoginLoading(false);\n }\n };\n\n const handleLogout = async () => {\n try {\n if (auth.userDid) {\n await apiFetch(\"/api/auth/logout\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ did: auth.userDid }),\n });\n }\n\n setAuth({ isAuthenticated: false });\n setShowUserDropdown(false);\n // Refresh page to clear any cached state\n globalThis.location.reload();\n } catch (error) {\n console.error(\"Logout failed:\", error);\n }\n };\n\n return (\n

\n \n\n \n {auth.isAuthenticated\n ? (\n \n )\n : }\n

\n\n \n\n {error && (\n \n Error: {error}\n \n )}\n\n {/* Floating Action Button (FAB) - only for authenticated users */}\n {auth.isAuthenticated && (\n setShowCheckinComposer(true)}\n style={{\n position: \"fixed\",\n bottom: globalThis.innerWidth <= 768 ? \"16px\" : \"24px\",\n right: globalThis.innerWidth <= 768 ? \"16px\" : \"24px\",\n width: globalThis.innerWidth <= 768 ? \"60px\" : \"56px\",\n height: globalThis.innerWidth <= 768 ? \"60px\" : \"56px\",\n borderRadius: globalThis.innerWidth <= 768 ? \"30px\" : \"28px\",\n background: \"#007aff\",\n border: \"none\",\n boxShadow: \"0 4px 12px rgba(0, 122, 255, 0.4)\",\n cursor: \"pointer\",\n display: \"flex\",\n alignItems: \"center\",\n justifyContent: \"center\",\n transition: \"all 0.2s ease\",\n zIndex: \"100\",\n }}\n onMouseEnter={(e) => {\n e.currentTarget.style.transform = \"scale(1.1)\";\n e.currentTarget.style.boxShadow =\n \"0 6px 16px rgba(0, 122, 255, 0.5)\";\n }}\n onMouseLeave={(e) => {\n e.currentTarget.style.transform = \"scale(1)\";\n e.currentTarget.style.boxShadow =\n \"0 4px 12px rgba(0, 122, 255, 0.4)\";\n }}\n title=\"Create check-in\"\n >\n \n \n \n \n \n )}\n\n {/* Check-in Composer Modal */}\n setShowCheckinComposer(false)}\n onSuccess={(checkinUrl) => {\n setShowCheckinComposer(false);\n // Redirect to checkin detail page\n globalThis.location.href = checkinUrl;\n }}\n />\n \n );\n}\n",[],[645,652,668],{"_103":677,"_95":678,"_155":679,"_157":653,"_158":140,"_159":680,"_161":162,"_105":681,"_100":682,"_164":246,"_166":683,"_167":22,"_168":-5,"_169":684,"_98":685},"148d6652-b7f1-11f0-a30a-0224a6c84d84","CheckinCard.tsx","2be117fc-7545-11f0-9d24-0224a6c84d84",1434,["D",1762090650768],14,"/** @jsxImportSource https://esm.sh/react@19.1.0 */\nimport { useState } from \"https://esm.sh/react@19.1.0\";\nimport { AuthState, CheckinData } from \"../types/index.ts\";\nimport { apiDelete } from \"../utils/api.ts\";\n\ninterface CheckinCardProps {\n checkin: CheckinData;\n auth: AuthState;\n onDelete?: (checkinId: string) => void;\n}\n\nexport function CheckinCard({ checkin, auth, onDelete }: CheckinCardProps) {\n const [isDeleting, setIsDeleting] = useState(false);\n\n const handleClick = () => {\n // Use DID-based URL for consistency with share URL\n globalThis.location.href = `/checkins/${checkin.author.did}/${checkin.id}`;\n };\n\n const handleDelete = async (e: React.MouseEvent) => {\n e.stopPropagation(); // Prevent card click\n\n if (!confirm(\"Are you sure you want to delete this check-in?\")) {\n return;\n }\n\n setIsDeleting(true);\n try {\n const response = await apiDelete(\n `/api/checkins/${checkin.author.did}/${checkin.id}`,\n );\n\n if (response.ok) {\n if (onDelete) {\n onDelete(checkin.id);\n } else {\n // Refresh the page if no callback provided\n globalThis.location.reload();\n }\n } else {\n const error = await response.json();\n alert(`Failed to delete check-in: ${error.error || \"Unknown error\"}`);\n }\n } catch (error) {\n console.error(\"Delete error:\", error);\n alert(\"Failed to delete check-in. Please try again.\");\n } finally {\n setIsDeleting(false);\n }\n };\n\n // Check if current user can delete this checkin\n const canDelete = auth.isAuthenticated && auth.userDid === checkin.author.did;\n\n return (\n {\n e.currentTarget.style.transform = \"translateY(-1px)\";\n e.currentTarget.style.boxShadow = \"0 4px 12px rgba(0,0,0,0.15)\";\n // Change arrow color on hover\n const arrow = e.currentTarget.querySelector(\n \"[data-arrow]\",\n ) as HTMLElement;\n if (arrow) arrow.style.color = \"#007aff\";\n }}\n onMouseLeave={(e) => {\n e.currentTarget.style.transform = \"translateY(0)\";\n e.currentTarget.style.boxShadow = \"0 1px 3px rgba(0,0,0,0.1)\";\n // Reset arrow color\n const arrow = e.currentTarget.querySelector(\n \"[data-arrow]\",\n ) as HTMLElement;\n if (arrow) arrow.style.color = \"#c7c7cc\";\n }}\n >\n \n {checkin.author.avatar\n ? (\n \n )\n : (\n \n {(checkin.author.displayName || checkin.author.handle)?.[0]\n ?.toUpperCase() || \"?\"}\n \n )}\n\n

\n \n {checkin.author.displayName || checkin.author.handle}\n

\n \n @{checkin.author.handle}\n \n \n\n \n \n {(() => {\n const date = new Date(checkin.createdAt);\n const now = new Date();\n const diffMs = now.getTime() - date.getTime();\n const diffSecs = Math.floor(diffMs / 1000);\n const diffMins = Math.floor(diffSecs / 60);\n const diffHours = Math.floor(diffMins / 60);\n const diffDays = Math.floor(diffHours / 24);\n\n if (diffSecs < 60) return \"now\";\n if (diffMins < 60) return diffMins + \"m\";\n if (diffHours < 24) return diffHours + \"h\";\n if (diffDays < 7) return diffDays + \"d\";\n return date.toLocaleDateString();\n })()}\n \n \n →\n \n \n \n\n

\n {checkin.text && (\n \n {checkin.text}\n

\n )}\n\n {checkin.image && (\n \n \n \n )}\n\n {(checkin.address || checkin.coordinates) && (\n \n 📍\n \n {checkin.address\n ? [\n checkin.address.name,\n checkin.address.locality,\n ].filter(Boolean).join(\", \")\n : checkin.coordinates\n ? `${checkin.coordinates.latitude.toFixed(4)}, ${\n checkin.coordinates.longitude.toFixed(4)\n }`\n : \"\"}\n \n \n )}\n\n {checkin.likesCount && checkin.likesCount > 0 && (\n \n \n \n \n {checkin.likesCount}\n \n )}\n \n\n {canDelete && (\n {\n if (!isDeleting) {\n e.currentTarget.style.background = \"#ffebee\";\n e.currentTarget.style.transform = \"scale(1.05)\";\n }\n }}\n onMouseLeave={(e) => {\n e.currentTarget.style.background = \"rgba(255, 255, 255, 0.95)\";\n e.currentTarget.style.transform = \"scale(1)\";\n }}\n title={isDeleting ? \"Deleting...\" : \"Delete check-in\"}\n >\n \n {isDeleting\n ? (\n // Loader icon (rotating circle)\n \n )\n : (\n // Trash icon (lucide-trash-2)\n <>\n \n \n \n \n \n \n )}\n \n \n )}\n \n );\n}\n",[],[645,652,678],{"_103":687,"_95":688,"_155":689,"_157":653,"_158":140,"_159":690,"_161":162,"_105":691,"_100":692,"_164":246,"_166":693,"_167":22,"_168":-5,"_169":694,"_98":695},"1494b7d6-b7f1-11f0-8f91-0224a6c84d84","CheckinComposer.tsx","557c9166-9e2d-11f0-988b-0224a6c84d84",1435,["D",1762090650777],18,"/** @jsxImportSource https://esm.sh/react@19.1.0 */\nimport { useState } from \"https://esm.sh/react@19.1.0\";\nimport imageCompression from \"https://esm.sh/browser-image-compression@2.0.2\";\nimport type { Place } from \"../types/index.ts\";\nimport { apiFetch } from \"../utils/api.ts\";\n\ninterface CheckinComposerProps {\n isOpen: boolean;\n onClose: () => void;\n onSuccess: (checkinUrl: string) => void;\n}\n\ntype Step = \"location\" | \"venue\" | \"compose\";\ntype VenueTab = \"nearby\" | \"search\";\n\nexport function CheckinComposer(\n { isOpen, onClose, onSuccess }: CheckinComposerProps,\n) {\n const [step, setStep] = useState(\"location\");\n const [venueTab, setVenueTab] = useState(\"nearby\");\n const [userLocation, setUserLocation] = useState<\n { lat: number; lng: number } | null\n >(null);\n const [locationError, setLocationError] = useState(null);\n const [loadingLocation, setLoadingLocation] = useState(false);\n\n const [venues, setVenues] = useState([]);\n const [loadingVenues, setLoadingVenues] = useState(false);\n const [venuesError, setVenuesError] = useState(null);\n const [searchQuery, setSearchQuery] = useState(\"\");\n\n const [selectedVenue, setSelectedVenue] = useState(null);\n const [checkinMessage, setCheckinMessage] = useState(\"\");\n const [submitting, setSubmitting] = useState(false);\n\n // Image state\n const [selectedImage, setSelectedImage] = useState(null);\n const [imagePreview, setImagePreview] = useState(null);\n const [imageAlt, setImageAlt] = useState(\"\");\n const [processingImage, setProcessingImage] = useState(false);\n\n if (!isOpen) return null;\n\n // Get user's browser location\n const requestLocation = async () => {\n setLoadingLocation(true);\n setLocationError(null);\n\n // Check if geolocation is available\n if (!navigator.geolocation) {\n setLocationError(\n \"Geolocation is not supported by your browser. Please use a modern browser or enter your location manually.\",\n );\n setLoadingLocation(false);\n return;\n }\n\n try {\n const position = await new Promise(\n (resolve, reject) => {\n navigator.geolocation.getCurrentPosition(resolve, reject, {\n enableHighAccuracy: true,\n timeout: 10000,\n maximumAge: 0,\n });\n },\n );\n\n const location = {\n lat: position.coords.latitude,\n lng: position.coords.longitude,\n };\n\n setUserLocation(location);\n setStep(\"venue\");\n\n // Automatically load nearby venues\n await loadNearbyVenues(location.lat, location.lng);\n } catch (error: any) {\n if (error.code === 1) {\n // Permission denied\n const isIOS = /iPad|iPhone|iPod/.test(navigator.userAgent);\n const isSafari = /^((?!chrome|android).)*safari/i.test(\n navigator.userAgent,\n );\n\n if (isIOS || isSafari) {\n setLocationError(\n \"Location access denied. On iOS/Safari, go to Settings > Safari > Location > Allow, then refresh and try again.\",\n );\n } else {\n setLocationError(\n \"Location access denied. Please allow location access in your browser settings and try again.\",\n );\n }\n } else if (error.code === 2) {\n setLocationError(\n \"Location unavailable. Make sure location services are enabled on your device.\",\n );\n } else if (error.code === 3) {\n setLocationError(\"Location request timed out. Please try again.\");\n } else {\n setLocationError(\"Failed to get location. Please try again.\");\n }\n } finally {\n setLoadingLocation(false);\n }\n };\n\n // Load nearby venues using Overpass API\n const loadNearbyVenues = async (lat: number, lng: number) => {\n setLoadingVenues(true);\n setVenuesError(null);\n\n try {\n const response = await fetch(\n `/api/places/nearby?lat=${lat}&lng=${lng}&radius=1000&limit=30`,\n );\n\n if (!response.ok) {\n throw new Error(\"Failed to load nearby venues\");\n }\n\n const data = await response.json();\n setVenues(data.places || []);\n\n if (data.places?.length === 0) {\n setVenuesError(\n \"No venues found nearby. Try searching by name instead.\",\n );\n }\n } catch (error) {\n console.error(\"Error loading nearby venues:\", error);\n setVenuesError(\n \"Nearby venues timed out. Please use search by name instead.\",\n );\n setVenueTab(\"search\"); // Auto-switch to search on timeout\n } finally {\n setLoadingVenues(false);\n }\n };\n\n // Search venues by name using Nominatim\n const searchVenuesByName = async () => {\n if (!searchQuery.trim() || !userLocation) return;\n\n setLoadingVenues(true);\n setVenuesError(null);\n\n try {\n const response = await fetch(\n `/api/places/search?q=${\n encodeURIComponent(searchQuery)\n }&lat=${userLocation.lat}&lng=${userLocation.lng}`,\n );\n\n if (!response.ok) {\n throw new Error(\"Failed to search venues\");\n }\n\n const data = await response.json();\n setVenues(data.places || []);\n\n if (data.places?.length === 0) {\n setVenuesError(\"No venues found. Try a different search term.\");\n }\n } catch (error) {\n console.error(\"Error searching venues:\", error);\n setVenuesError(\"Failed to search venues. Please try again.\");\n } finally {\n setLoadingVenues(false);\n }\n };\n\n // Handle image selection with client-side compression\n const handleImageSelect = async (e: React.ChangeEvent) => {\n const file = e.target.files?.[0];\n if (!file) return;\n\n // Check file type\n if (!file.type.startsWith(\"image/\")) {\n alert(\"Please select an image file\");\n return;\n }\n\n // Check file size (30MB max before compression)\n if (file.size > 30 * 1024 * 1024) {\n alert(\"Image too large. Please select an image under 30MB\");\n return;\n }\n\n setProcessingImage(true);\n\n try {\n // Always process images to fix orientation and strip location EXIF\n // Compress if large (>5MB), otherwise just fix orientation\n const processed = await processImageWithOrientation(file);\n setSelectedImage(processed);\n\n // Create preview from the processed image (with corrected orientation)\n const reader = new FileReader();\n reader.onload = (e) => {\n setImagePreview(e.target?.result as string);\n };\n reader.readAsDataURL(processed);\n } catch (error) {\n console.error(\"Image processing error:\", error);\n alert(\"Failed to process image\");\n } finally {\n setProcessingImage(false);\n }\n };\n\n // Read EXIF orientation from image file\n // Process image with browser-image-compression library\n // Handles EXIF orientation automatically and compresses if needed\n const processImageWithOrientation = async (file: File): Promise => {\n console.log(\n `📸 Processing image: ${file.name} (${file.size} bytes, ${file.type})`,\n );\n\n const options = {\n maxSizeMB: 5,\n maxWidthOrHeight: 2000,\n useWebWorker: true,\n // Library automatically handles EXIF orientation\n exifOrientation: undefined, // Let library detect automatically\n fileType: \"image/jpeg\",\n initialQuality: 0.9,\n };\n\n try {\n const compressedFile = await imageCompression(file, options);\n console.log(\n `✅ Image processed: ${compressedFile.size} bytes (${\n Math.round((compressedFile.size / file.size) * 100)\n }% of original)`,\n );\n return compressedFile;\n } catch (error) {\n console.error(\"Image compression error:\", error);\n throw new Error(\"Failed to process image\");\n }\n };\n\n // Remove selected image\n const removeImage = () => {\n setSelectedImage(null);\n setImagePreview(null);\n setImageAlt(\"\");\n };\n\n // Submit check-in\n const submitCheckin = async () => {\n if (!selectedVenue) return;\n\n setSubmitting(true);\n\n try {\n // Use FormData if image is present\n const formData = new FormData();\n formData.append(\"place\", JSON.stringify(selectedVenue));\n formData.append(\"message\", checkinMessage.trim());\n\n if (selectedImage) {\n formData.append(\"image\", selectedImage);\n if (imageAlt) {\n formData.append(\"imageAlt\", imageAlt);\n }\n }\n\n const response = await apiFetch(\"/api/checkins\", {\n method: \"POST\",\n credentials: \"include\",\n body: formData,\n });\n\n if (!response.ok) {\n const error = await response.json();\n throw new Error(error.error || \"Failed to create check-in\");\n }\n\n const result = await response.json();\n\n // Redirect to checkin detail page\n const checkinUrl = `/checkins/${result.checkinUri.split(\"/\")[2]}/${\n result.checkinUri.split(\"/\").pop()\n }`;\n onSuccess(checkinUrl);\n } catch (error: any) {\n alert(error.message || \"Failed to create check-in. Please try again.\");\n } finally {\n setSubmitting(false);\n }\n };\n\n return (\n {\n if (e.target === e.currentTarget && globalThis.innerWidth > 768) {\n onClose();\n }\n }}\n >\n \n {/* Header */}\n \n \n {step === \"location\" && \"Get Location\"}\n {step === \"venue\" && \"Choose Venue\"}\n {step === \"compose\" && \"Create Check-in\"}\n \n\n \n \n \n \n \n \n \n\n {/* Body */}\n \n {/* Step 1: Location */}\n {step === \"location\" && (\n \n \n \n \n \n \n \n\n

\n \n We need your location\n \n \n Allow location access to find nearby venues and create\n check-ins.\n

\n\n {locationError && (\n \n {locationError}\n \n )}\n\n \n {loadingLocation\n ? (\n <>\n \n Getting location...\n \n )\n : \"Allow Location Access\"}\n \n \n )}\n\n {/* Step 2: Venue Selection */}\n {step === \"venue\" && (\n \n {/* Segmented Control */}\n \n {\n setVenueTab(\"nearby\");\n if (userLocation && venues.length === 0) {\n loadNearbyVenues(userLocation.lat, userLocation.lng);\n }\n }}\n style={{\n flex: 1,\n padding: \"8px 16px\",\n border: \"none\",\n borderRadius: \"8px\",\n background: venueTab === \"nearby\" ? \"white\" : \"transparent\",\n color: venueTab === \"nearby\" ? \"#007aff\" : \"#8e8e93\",\n fontSize: \"15px\",\n fontWeight: venueTab === \"nearby\" ? \"600\" : \"500\",\n cursor: \"pointer\",\n transition: \"all 0.2s ease\",\n }}\n >\n Nearby\n \n setVenueTab(\"search\")}\n style={{\n flex: 1,\n padding: \"8px 16px\",\n border: \"none\",\n borderRadius: \"8px\",\n background: venueTab === \"search\" ? \"white\" : \"transparent\",\n color: venueTab === \"search\" ? \"#007aff\" : \"#8e8e93\",\n fontSize: \"15px\",\n fontWeight: venueTab === \"search\" ? \"600\" : \"500\",\n cursor: \"pointer\",\n transition: \"all 0.2s ease\",\n }}\n >\n Search\n \n \n\n {/* Search Input (only for search tab) */}\n {venueTab === \"search\" && (\n

\n \n \n \n \n \n \n setSearchQuery(e.target.value)}\n onKeyDown={(e) => {\n if (e.key === \"Enter\") {\n searchVenuesByName();\n }\n }}\n style={{\n flex: 1,\n border: \"none\",\n background: \"transparent\",\n outline: \"none\",\n fontSize: \"15px\",\n color: \"#1c1c1e\",\n }}\n />\n

\n \n Search\n \n \n )}\n\n {/* Loading State */}\n {loadingVenues && (\n \n \n \n {venueTab === \"nearby\"\n ? \"Finding nearby venues...\"\n : \"Searching...\"}\n \n \n )}\n\n {/* Error State */}\n {venuesError && !loadingVenues && (\n \n {venuesError}\n \n )}\n\n {/* Venues List */}\n {!loadingVenues && venues.length > 0 && (\n \n {venues.map((venue) => (\n {\n setSelectedVenue(venue);\n setStep(\"compose\");\n }}\n style={{\n background: \"white\",\n border: \"1px solid #e5e5ea\",\n borderRadius: \"12px\",\n padding: \"12px\",\n cursor: \"pointer\",\n textAlign: \"left\",\n transition: \"all 0.2s ease\",\n }}\n onMouseEnter={(e) => {\n e.currentTarget.style.background = \"#f8f9fa\";\n e.currentTarget.style.borderColor = \"#007aff\";\n }}\n onMouseLeave={(e) => {\n e.currentTarget.style.background = \"white\";\n e.currentTarget.style.borderColor = \"#e5e5ea\";\n }}\n >\n \n \n {venue.icon || \"📍\"}\n \n

\n \n {venue.name}\n

\n {venue.address?.locality && (\n \n {venue.address.locality}\n \n )}\n \n \n \n \n \n \n ))}\n \n )}\n \n )}\n\n {/* Step 3: Compose Check-in */}\n {step === \"compose\" && selectedVenue && (\n \n {/* Selected Venue Preview */}\n \n \n \n {selectedVenue.icon || \"📍\"}\n \n

\n \n {selectedVenue.name}\n

\n {selectedVenue.address && (\n \n {[\n selectedVenue.address.street,\n selectedVenue.address.locality,\n ].filter(Boolean).join(\", \")}\n \n )}\n \n {\n setSelectedVenue(null);\n setStep(\"venue\");\n }}\n style={{\n background: \"none\",\n border: \"none\",\n color: \"#007aff\",\n fontSize: \"14px\",\n fontWeight: \"500\",\n cursor: \"pointer\",\n }}\n >\n Change\n \n \n \n\n {/* Message Input */}\n

\n \n What's happening? (optional)\n \n setCheckinMessage(e.target.value)}\n placeholder=\"Share your thoughts...\"\n maxLength={280}\n style={{\n width: \"100%\",\n minHeight: \"120px\",\n padding: \"12px\",\n border: \"1px solid #e5e5ea\",\n borderRadius: \"10px\",\n fontSize: \"15px\",\n color: \"#1c1c1e\",\n fontFamily: \"inherit\",\n resize: \"vertical\",\n outline: \"none\",\n }}\n onFocus={(e) => {\n e.currentTarget.style.borderColor = \"#007aff\";\n }}\n onBlur={(e) => {\n e.currentTarget.style.borderColor = \"#e5e5ea\";\n }}\n />\n \n {checkinMessage.length}/280\n

\n \n\n {/* Image Attachment */}\n

\n \n Add a photo (optional)\n \n\n {!selectedImage && (\n

\n \n \n 📷\n {processingImage ? \"Processing...\" : \"Choose Photo\"}\n \n \n Max 30MB • JPEG, PNG, WebP, or GIF\n

\n )}\n\n {selectedImage && imagePreview && (\n \n

\n \n \n ×\n \n

\n setImageAlt(e.target.value)}\n placeholder=\"Describe this image (for accessibility)\"\n maxLength={200}\n style={{\n width: \"100%\",\n padding: \"8px 12px\",\n border: \"1px solid #e5e5ea\",\n borderRadius: \"8px\",\n fontSize: \"14px\",\n color: \"#1c1c1e\",\n fontFamily: \"inherit\",\n outline: \"none\",\n }}\n onFocus={(e) => {\n e.currentTarget.style.borderColor = \"#007aff\";\n }}\n onBlur={(e) => {\n e.currentTarget.style.borderColor = \"#e5e5ea\";\n }}\n />\n \n {imageAlt.length}/200\n

\n \n \n )}\n \n \n )}\n \n\n {/* Footer */}\n {step === \"compose\" && (\n \n {\n setSelectedVenue(null);\n setStep(\"venue\");\n }}\n style={{\n flex: 1,\n background: \"#f2f2f7\",\n color: \"#1c1c1e\",\n border: \"none\",\n borderRadius: \"10px\",\n padding: \"12px\",\n fontSize: \"16px\",\n fontWeight: \"600\",\n cursor: \"pointer\",\n }}\n >\n Back\n \n \n {submitting\n ? (\n <>\n \n Posting...\n \n )\n : \"Post Check-in\"}\n \n \n )}\n \n \n );\n}\n",[],[645,652,688],{"_103":697,"_95":698,"_155":699,"_157":653,"_158":140,"_159":700,"_161":162,"_105":701,"_100":702,"_164":246,"_166":703,"_167":22,"_168":-5,"_169":704,"_98":705},"8a1ce712-b7f1-11f0-a0d7-0224a6c84d84","CheckinDetail.tsx","49f1b3d6-77ad-11f0-8af8-0224a6c84d84",1439,["D",1762090848037],24,"/** @jsxImportSource https://esm.sh/react@19.1.0 */\nimport { useEffect, useRef, useState } from \"https://esm.sh/react@19.1.0\";\nimport { AuthState, CheckinData } from \"../types/index.ts\";\nimport { ImageLightbox } from \"./ImageLightbox.tsx\";\nimport { apiDelete, apiFetch } from \"../utils/api.ts\";\n\ninterface CheckinDetailProps {\n checkinId: string;\n auth?: AuthState; // Optional auth prop for when used in App context\n}\n\ninterface MapWidgetProps {\n latitude: number;\n longitude: number;\n venueName?: string;\n}\n\nfunction MapWidget({ latitude, longitude, venueName }: MapWidgetProps) {\n const mapRef = useRef(null);\n const mapInstanceRef = useRef(null);\n\n useEffect(() => {\n // Dynamically load Leaflet\n const loadLeaflet = async () => {\n if (mapInstanceRef.current || !mapRef.current) return;\n\n try {\n // Load Leaflet CSS\n const link = document.createElement(\"link\");\n link.rel = \"stylesheet\";\n link.href = \"https://unpkg.com/leaflet@1.9.4/dist/leaflet.css\";\n document.head.appendChild(link);\n\n // Load Leaflet JS\n const L = await import(\"https://esm.sh/leaflet@1.9.4\");\n\n // Create map\n const map = L.default.map(mapRef.current).setView(\n [latitude, longitude],\n 16,\n );\n\n // Add CartoDB Voyager tiles - clean and modern style\n L.default.tileLayer(\n \"https://{s}.basemaps.cartocdn.com/rastertiles/voyager/{z}/{x}/{y}{r}.png\",\n {\n attribution:\n '© OpenStreetMap contributors © CARTO',\n maxZoom: 20,\n subdomains: \"abcd\",\n },\n ).addTo(map);\n\n // Add marker\n const marker = L.default.marker([latitude, longitude]).addTo(map);\n\n if (venueName) {\n marker.bindPopup(venueName).openPopup();\n }\n\n mapInstanceRef.current = map;\n\n // Clean up on unmount\n return () => {\n if (mapInstanceRef.current) {\n mapInstanceRef.current.remove();\n mapInstanceRef.current = null;\n }\n };\n } catch (error) {\n console.error(\"Failed to load map:\", error);\n }\n };\n\n loadLeaflet();\n }, [latitude, longitude, venueName]);\n\n return (\n \n );\n}\n\nexport function CheckinDetail({ checkinId, auth }: CheckinDetailProps) {\n const [checkin, setCheckin] = useState(null);\n const [loading, setLoading] = useState(true);\n const [error, setError] = useState(null);\n const [lightboxOpen, setLightboxOpen] = useState(false);\n\n // Likes state\n const [likesCount, setLikesCount] = useState(0);\n const [isLiked, setIsLiked] = useState(false);\n const [likesLoading, setLikesLoading] = useState(false);\n const [likesError, setLikesError] = useState(null);\n\n // Local authentication state (fallback if not provided via props)\n const [localAuth, setLocalAuth] = useState({\n isAuthenticated: false,\n });\n\n // Inject proper CSS styles on mount\n useEffect(() => {\n const style = document.createElement(\"style\");\n style.textContent = `\n * {\n margin: 0;\n padding: 0;\n box-sizing: border-box;\n }\n\n body {\n font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', system-ui, sans-serif;\n line-height: 1.5;\n color: #1c1c1e;\n background: #f2f2f7;\n min-height: 100vh;\n }\n\n /* Heart icon styles */\n .heart-icon {\n transition: all 0.2s ease;\n cursor: pointer;\n }\n\n .heart-icon:hover {\n transform: scale(1.1);\n }\n\n .heart-icon.liked {\n color: #ff3b30;\n fill: #ff3b30;\n }\n\n .heart-icon:not(.liked) {\n color: #8e8e93;\n fill: none;\n }\n `;\n document.head.appendChild(style);\n return () => {\n if (style.parentNode) {\n document.head.removeChild(style);\n }\n };\n }, []);\n\n useEffect(() => {\n async function fetchCheckin() {\n try {\n setLoading(true);\n setError(null);\n\n // Check if checkinId is in new format (identifier/rkey) or legacy format\n let apiUrl = \"\";\n if (checkinId.includes(\"/\")) {\n // New format: identifier/rkey (identifier can be DID or handle)\n apiUrl = `/api/checkins/${checkinId}`;\n } else {\n // Legacy format: use old API endpoint\n apiUrl = `/api/checkin/${checkinId}`;\n }\n\n const response = await apiFetch(apiUrl);\n\n if (!response.ok) {\n if (response.status === 404) {\n setError(\"Checkin not found\");\n } else {\n setError(\"Failed to load checkin\");\n }\n return;\n }\n\n const data = await response.json();\n setCheckin(data.checkin);\n } catch (err) {\n setError(\"Failed to load checkin\");\n console.error(\"Failed to fetch checkin:\", err);\n } finally {\n setLoading(false);\n }\n }\n\n fetchCheckin();\n }, [checkinId]);\n\n // Check authentication status\n // NOTE: Use regular fetch() here, not apiFetch(), to avoid redirect loops\n useEffect(() => {\n const checkAuth = async () => {\n try {\n const response = await fetch(\"/api/auth/session\");\n const data = await response.json();\n\n if (data.valid) {\n setLocalAuth({\n isAuthenticated: true,\n userHandle: data.handle,\n userDid: data.did,\n userDisplayName: data.displayName,\n userAvatar: data.avatar,\n });\n }\n } catch (error) {\n console.error(\"Auth check failed:\", error);\n }\n };\n\n // Only check auth if not provided via props\n if (!auth) {\n checkAuth();\n }\n }, [auth]);\n\n // Get current auth state (from props or local)\n const currentAuth = auth || localAuth;\n\n // Fetch likes data for the checkin\n const fetchLikesData = async () => {\n if (!checkin || !checkinId.includes(\"/\")) return;\n\n try {\n setLikesLoading(true);\n setLikesError(null);\n\n // Parse checkin ID to get DID and rkey\n const [checkinDid, checkinRkey] = checkinId.split(\"/\");\n\n const response = await apiFetch(\n `/api/checkins/${checkinDid}/${checkinRkey}/likes`,\n );\n\n if (!response.ok) {\n throw new Error(`Failed to fetch likes: ${response.status}`);\n }\n\n const data = await response.json();\n\n setLikesCount(data.count || 0);\n\n // Check if current user has liked this checkin\n if (currentAuth.isAuthenticated && currentAuth.userDid) {\n const userLiked = data.likes?.some((like: any) =>\n like.author.did === currentAuth.userDid\n );\n setIsLiked(userLiked || false);\n }\n } catch (error) {\n console.error(\"Failed to fetch likes:\", error);\n setLikesError(\"Failed to load likes\");\n } finally {\n setLikesLoading(false);\n }\n };\n\n // Fetch likes data when checkin is loaded\n useEffect(() => {\n if (checkin && checkinId.includes(\"/\")) {\n fetchLikesData();\n }\n }, [checkin, checkinId, currentAuth.userDid]);\n\n // Handle like/unlike action\n const handleLike = async () => {\n // Should not be called if not authenticated (button is disabled)\n if (!currentAuth.isAuthenticated) {\n return;\n }\n\n if (!checkin || !checkinId.includes(\"/\")) return;\n\n try {\n setLikesLoading(true);\n setLikesError(null);\n\n const [checkinDid, checkinRkey] = checkinId.split(\"/\");\n\n if (isLiked) {\n // Unlike\n const response = await apiDelete(\n `/api/checkins/${checkinDid}/${checkinRkey}/likes`,\n );\n\n if (!response.ok) {\n throw new Error(`Failed to unlike: ${response.status}`);\n }\n\n setIsLiked(false);\n setLikesCount((prev) => Math.max(0, prev - 1));\n } else {\n // Like\n const response = await apiFetch(\n `/api/checkins/${checkinDid}/${checkinRkey}/likes`,\n {\n method: \"POST\",\n credentials: \"include\",\n },\n );\n\n if (!response.ok) {\n throw new Error(`Failed to like: ${response.status}`);\n }\n\n setIsLiked(true);\n setLikesCount((prev) => prev + 1);\n }\n } catch (error) {\n console.error(\"Failed to toggle like:\", error);\n setLikesError(\"Failed to update like\");\n } finally {\n setLikesLoading(false);\n }\n };\n\n if (loading) {\n return (\n \n Loading checkin...\n \n );\n }\n\n if (error || !checkin) {\n return (\n \n {error || \"Checkin not found\"}\n \n );\n }\n\n // Use DID-based URL for sharing (consistent, permanent identifier)\n const shareUrl =\n `${globalThis.location.origin}/checkins/${checkin.author.did}/${checkin.id}`;\n\n return (\n \n {/* Back button */}\n {\n // Always go to main feed for consistency\n globalThis.location.href = \"/\";\n }}\n style={{\n background: \"#f8f9fa\",\n border: \"1px solid #d1d1d6\",\n padding: \"8px 16px\",\n borderRadius: \"8px\",\n fontSize: \"14px\",\n color: \"#1c1c1e\",\n cursor: \"pointer\",\n marginBottom: \"20px\",\n fontWeight: \"500\",\n transition: \"all 0.1s ease-in-out\",\n }}\n onMouseEnter={(e) => {\n e.currentTarget.style.background = \"#e9ecef\";\n e.currentTarget.style.borderColor = \"#007aff\";\n e.currentTarget.style.color = \"#007aff\";\n }}\n onMouseLeave={(e) => {\n e.currentTarget.style.background = \"#f8f9fa\";\n e.currentTarget.style.borderColor = \"#d1d1d6\";\n e.currentTarget.style.color = \"#1c1c1e\";\n }}\n >\n ← Back to Feed\n \n\n {/* Main checkin card */}\n \n {/* Author header */}\n \n {checkin.author.avatar\n ? (\n \n )\n : (\n \n {(checkin.author.displayName || checkin.author.handle)?.[0]\n ?.toUpperCase() || \"?\"}\n \n )}\n\n

\n \n {checkin.author.displayName || checkin.author.handle}\n

\n \n @{checkin.author.handle}\n \n \n\n \n {new Date(checkin.createdAt).toLocaleDateString(undefined, {\n weekday: \"long\",\n year: \"numeric\",\n month: \"long\",\n day: \"numeric\",\n })}\n
\n {new Date(checkin.createdAt).toLocaleTimeString(undefined, {\n hour: \"numeric\",\n minute: \"2-digit\",\n })}\n \n \n\n {/* Checkin message */}\n {checkin.text && (\n \n {checkin.text}\n \n )}\n\n {/* Image */}\n {checkin.image && (\n setLightboxOpen(true)}\n role=\"button\"\n tabIndex={0}\n onKeyDown={(e) => {\n if (e.key === \"Enter\" || e.key === \" \") {\n setLightboxOpen(true);\n }\n }}\n >\n \n \n )}\n\n {/* Location info */}\n {(checkin.address || checkin.coordinates) && (\n \n \n 📍\n \n Location\n \n \n\n {checkin.address && (\n

\n {checkin.address.name && (\n \n {checkin.address.name}\n

\n )}\n \n {[\n checkin.address.street,\n checkin.address.locality,\n checkin.address.region,\n checkin.address.country,\n ].filter(Boolean).join(\", \")}\n \n \n )}\n\n {checkin.coordinates && (\n <>\n \n {checkin.coordinates.latitude.toFixed(6)},{\" \"}\n {checkin.coordinates.longitude.toFixed(6)}\n \n\n {/* Map widget */}\n \n \n )}\n \n )}\n\n {/* Likes section */}\n \n \n {\n if (currentAuth.isAuthenticated && !likesLoading) {\n e.currentTarget.style.background = \"#e9ecef\";\n }\n }}\n onMouseLeave={(e) => {\n e.currentTarget.style.background = \"none\";\n }}\n title={currentAuth.isAuthenticated\n ? (isLiked ? \"Unlike\" : \"Like\")\n : \"Sign in to like\"}\n >\n \n \n \n \n {likesCount}\n \n \n\n {likesError && (\n \n {likesError}\n \n )}\n \n\n {!currentAuth.isAuthenticated && (\n \n Sign in to like this checkin\n \n )}\n \n \n\n {/* Share section */}\n \n \n Share this checkin\n \n\n \n \n {\n try {\n await navigator.clipboard.writeText(shareUrl);\n alert(\"Link copied to clipboard!\");\n } catch (err) {\n console.error(\"Failed to copy to clipboard:\", err);\n alert(\"Failed to copy link. Please copy manually.\");\n }\n }}\n style={{\n background: \"#f8f9fa\",\n color: \"#007aff\",\n border: \"1px solid #007aff\",\n padding: \"6px 12px\",\n borderRadius: \"6px\",\n fontSize: \"14px\",\n cursor: \"pointer\",\n marginRight: \"4px\",\n }}\n >\n Copy\n \n {navigator.share && (\n {\n try {\n const shareText = `Dropped anchor at ${\n checkin.address?.name || \"a location\"\n } ${shareUrl}`;\n await navigator.share({\n text: shareText,\n });\n } catch (err) {\n console.log(\"Share cancelled or failed:\", err);\n }\n }}\n style={{\n background: \"#007aff\",\n color: \"white\",\n border: \"none\",\n padding: \"6px 12px\",\n borderRadius: \"6px\",\n fontSize: \"14px\",\n cursor: \"pointer\",\n }}\n >\n Share\n \n )}\n \n \n\n {/* Image Lightbox */}\n {checkin.image && (\n setLightboxOpen(false)}\n />\n )}\n \n );\n}\n",[],[645,652,698],{"_103":707,"_95":708,"_155":709,"_157":653,"_158":140,"_159":710,"_161":162,"_105":711,"_100":712,"_164":246,"_166":713,"_167":22,"_168":-5,"_169":714,"_98":715},"073e409a-9c92-11f0-b26e-0224a6c84d84","Feed.tsx","2bd5b920-7545-11f0-bd64-0224a6c84d84",1201,["D",1759081144748],9,"/** @jsxImportSource https://esm.sh/react@19.1.0 */\nimport { useEffect, useState } from \"https://esm.sh/react@19.1.0\";\nimport { AuthState, CheckinData } from \"../types/index.ts\";\nimport { CheckinCard } from \"./CheckinCard.tsx\";\n\ninterface FeedProps {\n checkins: CheckinData[];\n loading: boolean;\n auth: AuthState;\n onLogin: () => void;\n onCheckinsChange?: (checkins: CheckinData[]) => void;\n}\n\nexport function Feed(\n { checkins, loading, auth, onLogin, onCheckinsChange }: FeedProps,\n) {\n const [localCheckins, setLocalCheckins] = useState(checkins);\n\n // Update local checkins when props change\n useEffect(() => {\n setLocalCheckins(checkins);\n }, [checkins]);\n\n const handleDelete = (deletedCheckinId: string) => {\n const updatedCheckins = localCheckins.filter((c) =>\n c.id !== deletedCheckinId\n );\n setLocalCheckins(updatedCheckins);\n if (onCheckinsChange) {\n onCheckinsChange(updatedCheckins);\n }\n };\n return (\n <>\n {loading && (\n \n \n \n \n Loading check-ins...\n \n \n \n )}\n\n {localCheckins.length === 0 && !loading && (\n \n {/* Show login illustration when not authenticated */}\n {!auth.isAuthenticated\n ? (\n \n \n \n Sign in to see your check-ins\n \n \n Connect with your Bluesky account to see your check-ins.\n

\n {\n e.currentTarget.style.background = \"#0056b3\";\n e.currentTarget.style.transform = \"translateY(-1px)\";\n }}\n onMouseLeave={(e) => {\n e.currentTarget.style.background = \"#007aff\";\n e.currentTarget.style.transform = \"translateY(0)\";\n }}\n >\n Sign in with Bluesky\n \n \n )\n : (\n /* Show regular empty state for authenticated empty feeds */\n <>\n \n \n Your check-ins will appear here\n \n \n When you create check-ins with the Anchor app, they'll appear\n here.\n

\n \n )}\n \n )}\n\n {localCheckins.length > 0 && (\n

\n {localCheckins.map((checkin) => (\n \n ))}\n

\n )}\n \n );\n}\n",[],[645,652,708],{"_103":717,"_95":718,"_155":719,"_157":653,"_158":140,"_159":720,"_161":162,"_105":721,"_100":722,"_164":246,"_166":723,"_167":22,"_168":-5,"_169":724,"_98":725},"1641e498-9b02-11f0-9087-0224a6c84d84","Header.tsx","2bde1d72-7545-11f0-b19c-0224a6c84d84",1100,["D",1758909371329],6,"/** @jsxImportSource https://esm.sh/react@19.1.0 */\nimport { AuthState } from \"../types/index.ts\";\n\ninterface HeaderProps {\n auth: AuthState;\n onLogin: () => void;\n onLogout: () => void;\n showUserDropdown: boolean;\n setShowUserDropdown: (show: boolean) => void;\n}\n\nexport function Header({\n auth,\n onLogin,\n onLogout,\n showUserDropdown,\n setShowUserDropdown,\n}: HeaderProps) {\n return (\n \n \n \n \n \n\n \n {!auth.isAuthenticated\n ? (\n {\n e.currentTarget.style.background = \"#0056cc\";\n }}\n onMouseOut={(e) => {\n e.currentTarget.style.background = \"#007aff\";\n }}\n >\n Login\n \n )\n : (\n

\n setShowUserDropdown(!showUserDropdown)}\n style={{\n display: \"flex\",\n alignItems: \"center\",\n gap: \"10px\",\n background: \"white\",\n border: \"1px solid #e5e5ea\",\n borderRadius: \"24px\",\n padding: \"6px 16px 6px 6px\",\n cursor: \"pointer\",\n boxShadow: \"0 2px 8px rgba(0,0,0,0.08)\",\n fontSize: \"15px\",\n color: \"#1c1c1e\",\n transition: \"all 0.2s ease\",\n }}\n >\n {auth.userAvatar\n ? (\n \n )\n : (\n \n {(auth.userDisplayName || auth.userHandle)?.[0]\n ?.toUpperCase() || \"?\"}\n

\n )}\n \n {auth.userDisplayName || auth.userHandle}\n \n \n ▼\n \n \n\n {showUserDropdown && (\n \n {\n e.currentTarget.style.background = \"#f2f2f7\";\n }}\n onMouseOut={(e) => {\n e.currentTarget.style.background = \"none\";\n }}\n >\n Sign out\n \n \n )}\n \n )}\n \n \n \n );\n}\n",[],[645,652,718],{"_103":727,"_95":728,"_155":729,"_157":653,"_158":140,"_159":730,"_161":162,"_105":731,"_100":120,"_164":246,"_166":732,"_167":22,"_168":-5,"_169":733,"_98":734},"c5abe354-a032-11f0-9c9b-0224a6c84d84","ImageLightbox.tsx","97c4636e-a030-11f0-bbbe-0224a6c84d84",1275,["D",1759480037353],"/** @jsxImportSource https://esm.sh/react@19.1.0 */\nimport { useEffect } from \"https://esm.sh/react@19.1.0\";\n\ninterface ImageLightboxProps {\n isOpen: boolean;\n imageUrl: string;\n alt?: string;\n onClose: () => void;\n}\n\nexport function ImageLightbox(\n { isOpen, imageUrl, alt, onClose }: ImageLightboxProps,\n) {\n // Handle escape key to close\n useEffect(() => {\n if (!isOpen) return;\n\n const handleEscape = (e: KeyboardEvent) => {\n if (e.key === \"Escape\") {\n onClose();\n }\n };\n\n document.addEventListener(\"keydown\", handleEscape);\n // Prevent body scrolling when lightbox is open\n document.body.style.overflow = \"hidden\";\n\n return () => {\n document.removeEventListener(\"keydown\", handleEscape);\n document.body.style.overflow = \"\";\n };\n }, [isOpen, onClose]);\n\n if (!isOpen) return null;\n\n return (\n \n {/* Close button */}\n {\n e.currentTarget.style.background = \"rgba(255, 255, 255, 0.2)\";\n e.currentTarget.style.borderColor = \"rgba(255, 255, 255, 0.5)\";\n }}\n onMouseLeave={(e) => {\n e.currentTarget.style.background = \"rgba(255, 255, 255, 0.1)\";\n e.currentTarget.style.borderColor = \"rgba(255, 255, 255, 0.3)\";\n }}\n aria-label=\"Close image viewer\"\n >\n ×\n \n\n {/* Image container with space for alt text */}\n e.stopPropagation()}\n >\n {/* Image */}\n \n\n {/* Alt text (if provided) */}\n {alt && (\n \n {alt}\n \n )}\n \n\n {/* Instructions text */}\n \n Click anywhere or press ESC to close\n \n \n );\n}\n",[],[645,652,728],{"_103":736,"_95":737,"_155":738,"_157":653,"_158":140,"_159":739,"_161":162,"_105":740,"_100":741,"_164":246,"_166":742,"_167":22,"_168":-5,"_169":743,"_98":744},"161a0b94-9b02-11f0-9087-0224a6c84d84","LoginForm.tsx","2bd0f9a8-7545-11f0-8c6f-0224a6c84d84",1095,["D",1758909370982],3,"/** @jsxImportSource https://esm.sh/react@19.1.0 */\n\ninterface LoginFormProps {\n showLoginForm: boolean;\n setShowLoginForm: (show: boolean) => void;\n loginHandle: string;\n setLoginHandle: (handle: string) => void;\n loginLoading: boolean;\n onSubmitLogin: (e: any) => void;\n}\n\nexport function LoginForm({\n showLoginForm,\n setShowLoginForm,\n loginHandle,\n setLoginHandle,\n loginLoading,\n onSubmitLogin,\n}: LoginFormProps) {\n if (!showLoginForm) return null;\n\n return (\n {\n if (e.target === e.currentTarget) {\n setShowLoginForm(false);\n }\n }}\n >\n \n \n \n Sign in with Bluesky\n \n setShowLoginForm(false)}\n style={{\n background: \"none\",\n border: \"none\",\n fontSize: \"18px\",\n color: \"#8e8e93\",\n cursor: \"pointer\",\n padding: \"4px\",\n borderRadius: \"12px\",\n }}\n onMouseOver={(e) => {\n e.currentTarget.style.background = \"#f2f2f7\";\n }}\n onMouseOut={(e) => {\n e.currentTarget.style.background = \"none\";\n }}\n >\n ✕\n \n \n\n

\n \n Bluesky Handle\n \n setLoginHandle(e.target.value)}\n placeholder=\"your-handle.bsky.social\"\n required\n style={{\n width: \"100%\",\n fontSize: \"16px\",\n padding: \"12px 16px\",\n border: \"1px solid #e5e5ea\",\n borderRadius: \"8px\",\n background: \"white\",\n color: \"#1c1c1e\",\n outline: \"none\",\n }}\n onFocus={(e) => {\n e.currentTarget.style.borderColor = \"#007aff\";\n }}\n onBlur={(e) => {\n e.currentTarget.style.borderColor = \"#e5e5ea\";\n }}\n />\n \n Enter your Bluesky handle (e.g., alice.bsky.social)\n

\n\n \n setShowLoginForm(false)}\n style={{\n fontSize: \"16px\",\n fontWeight: \"500\",\n background: \"none\",\n color: \"#007aff\",\n border: \"none\",\n borderRadius: \"8px\",\n padding: \"10px 16px\",\n cursor: \"pointer\",\n }}\n onMouseOver={(e) => {\n e.currentTarget.style.background = \"#f0f8ff\";\n }}\n onMouseOut={(e) => {\n e.currentTarget.style.background = \"none\";\n }}\n >\n Cancel\n \n {\n if (!loginLoading) {\n e.currentTarget.style.background = \"#0056cc\";\n }\n }}\n onMouseOut={(e) => {\n if (!loginLoading) {\n e.currentTarget.style.background = \"#007aff\";\n }\n }}\n >\n {loginLoading ? \"Connecting...\" : \"Sign in\"}\n \n \n \n \n \n );\n}\n",[],[645,652,737],{"_103":746,"_95":747,"_155":748,"_157":653,"_158":140,"_159":749,"_161":162,"_105":750,"_100":285,"_164":246,"_166":751,"_167":22,"_168":-5,"_169":752,"_98":753},"1639b516-9b02-11f0-9dc4-0224a6c84d84","MobileAuth.tsx","35f7cfdc-75f5-11f0-bfd9-0224a6c84d84",1099,["D",1758909371189],"/** @jsxImportSource https://esm.sh/react@19.1.0 */\nimport React, { useEffect, useState } from \"https://esm.sh/react@19.1.0\";\n\nexport function MobileAuth() {\n const [handle, setHandle] = useState(\"\");\n const [loading, setLoading] = useState(false);\n const [error, setError] = useState(null);\n\n // Inject proper CSS styles for fonts and animations\n useEffect(() => {\n const style = document.createElement(\"style\");\n style.textContent = `\n * {\n margin: 0;\n padding: 0;\n box-sizing: border-box;\n }\n \n body {\n font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', system-ui, sans-serif;\n line-height: 1.5;\n color: #1c1c1e;\n }\n\n @keyframes spin {\n to { transform: rotate(360deg); }\n }\n `;\n document.head.appendChild(style);\n return () => {\n if (style.parentNode) {\n document.head.removeChild(style);\n }\n };\n }, []);\n\n // Generate PKCE parameters for secure OAuth flow\n const generatePKCE = async () => {\n // Generate code verifier (128 characters, URL-safe)\n const array = new Uint8Array(96);\n crypto.getRandomValues(array);\n const codeVerifier = btoa(String.fromCharCode(...array))\n .replace(/\\+/g, \"-\")\n .replace(/\\//g, \"_\")\n .replace(/=/g, \"\");\n\n // Generate code challenge (SHA256 hash of verifier)\n const encoder = new TextEncoder();\n const data = encoder.encode(codeVerifier);\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", data);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n const codeChallenge = btoa(String.fromCharCode(...hashArray))\n .replace(/\\+/g, \"-\")\n .replace(/\\//g, \"_\")\n .replace(/=/g, \"\");\n\n return { codeVerifier, codeChallenge };\n };\n\n const handleSubmit = async (e: React.FormEvent) => {\n e.preventDefault();\n\n if (!handle.trim()) {\n setError(\"Please enter your Bluesky handle\");\n return;\n }\n\n setError(null);\n setLoading(true);\n\n try {\n // Generate PKCE parameters for this OAuth flow\n const { codeVerifier, codeChallenge } = await generatePKCE();\n\n // Store code verifier for later use (in sessionStorage for this tab)\n sessionStorage.setItem(\"pkce_code_verifier\", codeVerifier);\n\n const response = await fetch(\"/api/auth/mobile-start\", {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n handle: handle.trim(),\n code_challenge: codeChallenge,\n }),\n });\n\n if (!response.ok) {\n throw new Error(\"Failed to start authentication\");\n }\n\n const data = await response.json();\n\n if (data.authUrl) {\n // Redirect to OAuth authorization\n globalThis.location.href = data.authUrl;\n } else {\n throw new Error(\"No authorization URL received\");\n }\n } catch (error) {\n console.error(\"Login failed:\", error);\n setError(\"Login failed. Please check your handle and try again.\");\n setLoading(false);\n }\n };\n\n return (\n \n \n \n \n \n\n \n Sign in to Anchor\n \n\n \n Connect with your Bluesky account\n

\n\n {error && (\n \n {error}\n \n )}\n\n

\n \n Bluesky Handle\n \n setHandle(e.target.value)}\n placeholder=\"alice.bsky.social\"\n autoComplete=\"username\"\n required\n style={{\n width: \"100%\",\n padding: \"16px\",\n border: \"2px solid #f2f2f7\",\n borderRadius: \"12px\",\n fontSize: \"16px\",\n background: \"#f9f9f9\",\n transition: \"all 0.2s ease\",\n boxSizing: \"border-box\",\n }}\n onFocus={(e) => {\n e.target.style.borderColor = \"#007aff\";\n e.target.style.background = \"white\";\n e.target.style.boxShadow = \"0 0 0 4px rgba(0, 122, 255, 0.1)\";\n }}\n onBlur={(e) => {\n e.target.style.borderColor = \"#f2f2f7\";\n e.target.style.background = \"#f9f9f9\";\n e.target.style.boxShadow = \"none\";\n }}\n />\n

\n\n {\n if (!loading) {\n e.currentTarget.style.background = \"#0056b3\";\n e.currentTarget.style.transform = \"translateY(-1px)\";\n }\n }}\n onMouseLeave={(e) => {\n if (!loading) {\n e.currentTarget.style.background = \"#007aff\";\n e.currentTarget.style.transform = \"translateY(0)\";\n }\n }}\n >\n {loading\n ? (\n <>\n \n Signing in...\n \n )\n : (\n \"Sign in with Bluesky\"\n )}\n \n \n\n \n Powered by AT Protocol\n \n \n \n );\n}\n",[],[645,652,747],{"_103":755,"_95":756,"_155":757,"_157":653,"_158":140,"_159":758,"_161":162,"_105":759,"_100":120,"_164":246,"_166":760,"_167":22,"_168":-5,"_169":761,"_98":762},"162a35be-9b02-11f0-af25-0224a6c84d84","MobileLogin.tsx","e5895b7e-83dc-11f0-95c9-0224a6c84d84",1097,["D",1758909371247],"/** @jsxImportSource https://esm.sh/react@19.1.0 */\nimport React, { useState } from \"https://esm.sh/react@19.1.0\";\n\ninterface MobileLoginProps {\n redirectUri: string;\n}\n\nexport function MobileLogin({ redirectUri }: MobileLoginProps) {\n const [handle, setHandle] = useState(\"\");\n const [loading, setLoading] = useState(false);\n const [error, setError] = useState(\"\");\n\n const handleSubmit = (e: React.FormEvent) => {\n e.preventDefault();\n\n if (!handle.trim()) {\n setError(\"Please enter your Bluesky handle\");\n return;\n }\n\n setLoading(true);\n setError(\"\");\n\n try {\n // Redirect to OAuth flow with handle and redirect_uri\n const params = new URLSearchParams({\n handle: handle.trim(),\n redirect_uri: redirectUri,\n });\n\n globalThis.location.href = `/mobile/login?${params.toString()}`;\n } catch (_err) {\n setError(\"Failed to connect. Please try again.\");\n setLoading(false);\n }\n };\n\n return (\n \n \n {/* Header with logo */}\n \n \n \n Sign in to Anchor\n \n \n Enter your Bluesky handle to continue\n

\n \n\n {/* Login form */}\n

\n \n \n Bluesky Handle\n \n setHandle(e.target.value)}\n placeholder=\"username.bsky.social or your.domain\"\n autoComplete=\"username\"\n autoCapitalize=\"none\"\n autoCorrect=\"off\"\n disabled={loading}\n style={{\n width: \"100%\",\n padding: \"12px 16px\",\n border: \"1px solid #e5e5ea\",\n borderRadius: \"12px\",\n fontSize: \"16px\",\n background: loading ? \"#f8f9fa\" : \"white\",\n color: \"#1c1c1e\",\n outline: \"none\",\n transition: \"border-color 0.2s ease\",\n }}\n onFocus={(e) => {\n e.target.style.borderColor = \"#007aff\";\n }}\n onBlur={(e) => {\n e.target.style.borderColor = \"#e5e5ea\";\n }}\n />\n \n\n {\n if (!loading && handle.trim()) {\n e.currentTarget.style.background = \"#0056cc\";\n }\n }}\n onMouseOut={(e) => {\n if (!loading && handle.trim()) {\n e.currentTarget.style.background = \"#007aff\";\n }\n }}\n >\n {loading && (\n \n )}\n {loading ? \"Connecting...\" : \"Continue with Bluesky\"}\n \n\n {error && (\n \n {error}\n \n )}\n \n\n {/* Security note */}\n \n \n \n 🔒\n \n \n Secure Authentication\n \n \n \n Your password will be entered securely on Bluesky's servers. Anchor\n never sees your password.\n

\n \n \n\n {/* CSS animation for spinner */}\n \n \n );\n}\n",[],[645,652,756],{"_103":764,"_95":765,"_155":766,"_157":653,"_158":140,"_159":767,"_161":162,"_105":768,"_100":160,"_164":246,"_166":769,"_167":22,"_168":-5,"_169":770,"_98":771},"c14c030c-a131-11f0-bb59-0224a6c84d84","PrivacyPolicy.tsx","7247f86e-9ad4-11f0-a5f5-0224a6c84d84",1297,["D",1759589551681],"/** @jsxImportSource https://esm.sh/react@19.1.0 */\n\nexport function PrivacyPolicy() {\n return (\n \n {/* Header */}\n

\n \n Privacy Policy\n \n \n Last updated: {new Date().toLocaleDateString(\"en-US\", {\n year: \"numeric\",\n month: \"long\",\n day: \"numeric\",\n })}\n

\n\n {/* Content */}\n

\n \n Overview\n \n

\n Anchor is a personal location logging application built on the\n decentralized AT Protocol network. All location check-ins are stored\n exclusively on your Personal Data Server (PDS), which you control.\n Anchor's servers do not store or cache your check-in data. This\n privacy policy explains how your data is handled within this\n decentralized architecture.\n

\n\n

\n \n Data Storage and Ownership\n \n

\n Your Data, Your Server:{\" \"}\n All location check-ins are stored exclusively on your Personal Data\n Server (PDS), which you control. Anchor's servers read your\n check-ins directly from your PDS when displaying feeds—we do not\n store or cache your location data.\n

\n Public Visibility:{\" \"}\n Location check-ins are stored unencrypted on your PDS and are\n publicly accessible to anyone who knows how to query AT Protocol\n records. This is by design of the AT Protocol's open architecture.\n

\n Data Portability:{\" \"}\n Since your data lives on your PDS, you can export, migrate, or\n delete it at any time through your PDS provider.\n

\n\n

\n \n What Information We Collect\n \n \n Information You Provide\n \n

\n Location coordinates when you create check-ins\n
Venue names and addresses
\n Optional text descriptions for your check-ins\n
\n Your Bluesky handle and profile information for authentication\n

\n\n \n Technical Information We Store\n \n

\n OAuth authentication sessions (encrypted and stored securely for\n login management)\n
\n Error logs for debugging purposes\n

\n What we don't store:{\" \"}\n We do not store your check-ins, location coordinates, venue\n information, or any other personal content on our servers. All of\n this data lives exclusively on your PDS.\n

\n\n

\n \n How We Use Your Information\n \n

\n To authenticate you via AT Protocol OAuth\n
\n To write check-ins directly to your PDS on your behalf\n
\n To read check-ins from your PDS and the PDS of users you follow\n
\n To resolve venue information via OpenStreetMap/Overpass API\n
\n To maintain and improve the Anchor service\n

\n\n

\n \n Third-Party Services\n \n

\n Anchor integrates with several third-party services to provide\n functionality:\n

\n AT Protocol Network:{\" \"}\n For decentralized data storage and social connectivity\n
\n Bluesky:{\" \"}\n For authentication and following relationships\n
\n OpenStreetMap/Overpass API:{\" \"}\n For venue search and location enrichment\n
\n Val Town:{\" \"}\n Our hosting platform for the web service\n

\n\n

\n \n Data Security\n \n

\n We implement appropriate security measures to protect OAuth\n sessions, which are encrypted using industry-standard methods. Since\n we do not store your location data, the security of your check-ins\n depends entirely on your chosen PDS provider's security practices.\n

\n Important:{\" \"}\n Location data stored on your PDS is not encrypted and is publicly\n accessible through the AT Protocol. Only check in at locations\n you're comfortable sharing publicly.\n

\n\n

\n \n Your Rights and Choices\n \n

\n Access:{\" \"}\n You can access all your data through your PDS\n
\n Deletion:{\" \"}\n You can delete check-ins through the Anchor app or directly on\n your PDS\n
\n Data Portability:{\" \"}\n You can export your data from your PDS at any time\n
\n Account Deletion:{\" \"}\n You can disconnect from Anchor by revoking OAuth access in your\n Bluesky settings\n

\n\n

\n \n Children's Privacy\n \n

\n Anchor is not intended for users under 13 years of age. We do not\n knowingly collect personal information from children under 13. If\n you become aware that a child has provided us with personal\n information, please contact us so we can take appropriate action.\n

\n\n

\n \n Changes to This Privacy Policy\n \n

\n We may update this privacy policy from time to time. We will notify\n users of any material changes by updating the \"Last updated\" date at\n the top of this policy. Continued use of Anchor after changes\n indicates acceptance of the updated policy.\n

\n\n

\n \n Contact Us\n \n

\n If you have questions about this privacy policy or Anchor's privacy\n practices, you can:\n

\n Open an issue on our{\" \"}\n \n GitHub repository\n \n
\n Contact us on Bluesky at{\" \"}\n \n @dropanchor.app\n \n

\n\n {/* Important Notice */}\n \n \n 🔒 Remember: Your Location Data Is Public\n \n \n By design of the AT Protocol, your location check-ins are stored\n unencrypted and are publicly accessible. This enables\n decentralization and data portability, but means anyone with\n technical knowledge can access your location history. Please only\n check in at locations you're comfortable sharing publicly.\n

\n\n {/* Back to App */}\n

\n {\n e.currentTarget.style.background = \"#0056b3\";\n }}\n onMouseLeave={(e) => {\n e.currentTarget.style.background = \"#007aff\";\n }}\n >\n ← Back to Anchor\n \n

\n \n \n );\n}\n",[],[645,652,765],[645,652],{"_103":774,"_95":775,"_155":776,"_157":646,"_158":140,"_159":777,"_161":162,"_105":778,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":779,"_98":780},"2bb5d8c6-7545-11f0-bee6-0224a6c84d84","hooks","2bb5d952-7545-11f0-bee6-0224a6c84d84",429,["D",1754760039494],[],[645,775],{"_103":782,"_95":783,"_155":784,"_157":646,"_158":140,"_159":785,"_161":162,"_105":786,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":787,"_98":797},"2b9e8ed2-7545-11f0-b19c-0224a6c84d84","types","2b9e8fa4-7545-11f0-b19c-0224a6c84d84",428,["D",1754760039342],[788],{"_103":789,"_95":790,"_155":791,"_157":784,"_158":140,"_159":792,"_161":162,"_105":793,"_100":722,"_164":246,"_166":794,"_167":22,"_168":-5,"_169":795,"_98":796},"24ec6b5e-a740-11f0-acfb-0224a6c84d84","index.ts","2bcdf0f0-7545-11f0-ba71-0224a6c84d84",1427,["D",1760255438745],"// Shared TypeScript types for the frontend\n\nexport interface CheckinData {\n id: string;\n uri: string;\n author: {\n did: string;\n handle: string;\n displayName?: string;\n avatar?: string;\n };\n text: string;\n createdAt: string;\n coordinates?: {\n latitude: number;\n longitude: number;\n };\n address?: {\n name?: string;\n street?: string;\n locality?: string;\n region?: string;\n country?: string;\n postalCode?: string;\n };\n image?: {\n thumbUrl: string;\n fullsizeUrl: string;\n alt?: string;\n };\n distance?: number;\n likesCount?: number;\n}\n\nexport interface AuthState {\n isAuthenticated: boolean;\n userHandle?: string;\n userDid?: string;\n userAvatar?: string;\n userDisplayName?: string;\n}\n\nexport interface Place {\n id: string;\n name: string;\n latitude: number;\n longitude: number;\n tags: Record;\n elementType?: \"node\" | \"way\" | \"relation\";\n elementId?: number;\n address?: {\n name?: string;\n street?: string;\n locality?: string;\n region?: string;\n country?: string;\n postalCode?: string;\n };\n category?: string;\n categoryGroup?: string;\n icon?: string;\n}\n",[],[645,783,790],[645,783],{"_103":799,"_95":524,"_155":800,"_157":646,"_158":140,"_159":801,"_161":162,"_105":802,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":803,"_98":813},"829db33e-7aae-11f0-9d49-0224a6c84d84","829db41a-7aae-11f0-9d49-0224a6c84d84",788,["D",1755355038265],[804],{"_103":805,"_95":806,"_155":807,"_157":800,"_158":140,"_159":808,"_161":162,"_105":809,"_100":120,"_164":246,"_166":810,"_167":22,"_168":-5,"_169":811,"_98":812},"8a1754dc-b7f1-11f0-81db-0224a6c84d84","api.ts","14bb1c14-b7f1-11f0-9f66-0224a6c84d84",1438,["D",1762090848011],"/**\n * Centralized API client with automatic 401 handling\n * When a 401 response is received, the session is cleared and the user is redirected to login\n */\n\n// Track if we're already redirecting to prevent loops\nlet isRedirecting = false;\n\n/**\n * Enhanced fetch that handles 401 responses automatically\n * Clears local session state and reloads the page to trigger login flow\n *\n * Note: Do NOT use this for the initial /api/auth/session check on page load,\n * as that needs to handle 401 gracefully without redirecting. Use regular fetch() for that.\n */\nexport async function apiFetch(\n url: string,\n options?: RequestInit,\n): Promise {\n const response = await fetch(url, options);\n\n // If we get a 401, the session has expired\n // But only redirect if this is NOT the initial session check AND we're not already redirecting\n if (\n response.status === 401 && !url.includes(\"/api/auth/session\") &&\n !isRedirecting\n ) {\n isRedirecting = true;\n console.warn(\"Session expired, redirecting to login\");\n\n // Clear any local session state\n try {\n // Trigger a page reload which will check session and show login\n globalThis.location.href = \"/\";\n } catch (error) {\n console.error(\"Failed to redirect after session expiry:\", error);\n isRedirecting = false;\n }\n\n // Return the response anyway for consistency\n return response;\n }\n\n return response;\n}\n\n/**\n * Helper for GET requests\n */\nexport function apiGet(url: string): Promise {\n return apiFetch(url);\n}\n\n/**\n * Helper for POST requests\n */\nexport function apiPost(\n url: string,\n body?: any,\n): Promise {\n return apiFetch(url, {\n method: \"POST\",\n headers: {\n \"Content-Type\": \"application/json\",\n },\n body: body ? JSON.stringify(body) : undefined,\n credentials: \"include\",\n });\n}\n\n/**\n * Helper for DELETE requests\n */\nexport function apiDelete(url: string): Promise {\n return apiFetch(url, {\n method: \"DELETE\",\n credentials: \"include\",\n });\n}\n",[],[645,524,806],[645,524],{"_103":815,"_95":816,"_155":817,"_157":646,"_158":140,"_159":818,"_161":162,"_105":819,"_100":571,"_164":178,"_166":820,"_167":22,"_168":-5,"_169":821,"_98":822},"97a26cac-bcb2-11f0-9c40-42dde27851f2","index.html","ca076f42-7466-11f0-b0f6-0224a6c84d84",1445,["D",1762613568260],"\n\n \n \n \n Anchor - Location-based Social Network\n \n \n \n \n \n \n \n \n

\n Loading...
\n \n

\n \n

JavaScript Required

\n This app requires JavaScript to run. Please enable JavaScript in your\n browser settings.\n

\n \n

\n \n \n\n",[],[645,816],{"_103":824,"_95":825,"_155":826,"_157":646,"_158":140,"_159":827,"_161":162,"_105":828,"_100":275,"_164":246,"_166":829,"_167":22,"_168":-5,"_169":830,"_98":831},"16004f74-9b02-11f0-a5ea-0224a6c84d84","index.tsx","ca00096e-7466-11f0-a509-0224a6c84d84",1092,["D",1758909370972],"/** @jsxImportSource https://esm.sh/react@19.1.0 */\nimport { createRoot } from \"https://esm.sh/react-dom@19.1.0/client\";\nimport { App } from \"./components/App.tsx\";\n\nconst root = createRoot(document.getElementById(\"root\")!);\nroot.render();\n",[],[645,825],{"_103":833,"_95":834,"_155":835,"_157":646,"_158":140,"_159":836,"_161":162,"_105":837,"_100":32,"_164":178,"_166":838,"_167":22,"_168":-5,"_169":839,"_98":840},"eca19ad4-bd93-11f0-a7a0-42dde27851f2","mobile-auth-simple.html","eca19b92-bd93-11f0-a7a0-42dde27851f2",1446,["D",1762710347629],"\n\n \n \n \n Anchor - Sign In\n \n \n \n

\n \n\n

Sign in to Anchor

Connect with your Bluesky account

\n\n

\n\n \n \n\n",[],[645,834],[645],{"_103":843,"_95":844,"_155":845,"_157":-5,"_158":140,"_159":846,"_161":162,"_105":847,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":848,"_98":925},"96f6706c-a030-11f0-adb1-0224a6c84d84","lexicons","96f6713e-a030-11f0-adb1-0224a6c84d84",1252,["D",1759479100000],[849,892],{"_103":850,"_95":851,"_155":852,"_157":845,"_158":140,"_159":853,"_161":162,"_105":854,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":855,"_98":891},"971159d6-a030-11f0-86a4-0224a6c84d84","app","97115a80-a030-11f0-86a4-0224a6c84d84",1253,["D",1759479100177],[856],{"_103":857,"_95":858,"_155":859,"_157":852,"_158":140,"_159":860,"_161":162,"_105":861,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":862,"_98":890},"9745fd76-a030-11f0-ab81-0224a6c84d84","dropanchor","9745fe7a-a030-11f0-ab81-0224a6c84d84",1255,["D",1759479100523],[863,872,881],{"_103":864,"_95":865,"_155":866,"_157":859,"_158":140,"_159":867,"_161":162,"_105":868,"_100":120,"_164":178,"_166":869,"_167":22,"_168":-5,"_169":870,"_98":871},"829bc6f0-a2e0-11f0-91c7-0224a6c84d84","checkin.json","97a813d0-a030-11f0-b852-0224a6c84d84",1312,["D",1759774559601],"{\n \"lexicon\": 1,\n \"id\": \"app.dropanchor.checkin\",\n \"defs\": {\n \"main\": {\n \"type\": \"record\",\n \"description\": \"A location check-in record for the Anchor app\",\n \"key\": \"tid\",\n \"record\": {\n \"type\": \"object\",\n \"required\": [\"text\", \"createdAt\", \"addressRef\", \"coordinates\"],\n \"properties\": {\n \"text\": {\n \"type\": \"string\",\n \"maxLength\": 3000,\n \"description\": \"The check-in message or note\"\n },\n \"createdAt\": {\n \"type\": \"string\",\n \"format\": \"datetime\",\n \"description\": \"When the check-in was created\"\n },\n \"addressRef\": {\n \"type\": \"ref\",\n \"ref\": \"#strongRef\",\n \"description\": \"Reference to the address record\"\n },\n \"coordinates\": {\n \"type\": \"ref\",\n \"ref\": \"#geoCoordinates\",\n \"description\": \"Geographic coordinates of the check-in\"\n },\n \"category\": {\n \"type\": \"string\",\n \"maxLength\": 100,\n \"description\": \"Place category (e.g., cafe, restaurant)\"\n },\n \"categoryGroup\": {\n \"type\": \"string\",\n \"maxLength\": 100,\n \"description\": \"Category group for organization\"\n },\n \"categoryIcon\": {\n \"type\": \"string\",\n \"maxLength\": 10,\n \"description\": \"Emoji icon for the category\"\n },\n \"image\": {\n \"type\": \"ref\",\n \"ref\": \"#checkinImage\",\n \"description\": \"Optional image attachment for the check-in\"\n }\n }\n }\n },\n \"checkinImage\": {\n \"type\": \"object\",\n \"description\": \"Image attachment with thumbnail and full-size versions\",\n \"required\": [\"thumb\", \"fullsize\"],\n \"properties\": {\n \"thumb\": {\n \"type\": \"blob\",\n \"accept\": [\"image/jpeg\", \"image/png\", \"image/webp\"],\n \"maxSize\": 300000,\n \"description\": \"Thumbnail version (max 800px width, ~150-300KB)\"\n },\n \"fullsize\": {\n \"type\": \"blob\",\n \"accept\": [\"image/jpeg\", \"image/png\", \"image/webp\"],\n \"maxSize\": 2000000,\n \"description\": \"Full-size version (max 2000px width, ~1-2MB)\"\n },\n \"alt\": {\n \"type\": \"string\",\n \"maxLength\": 1000,\n \"description\": \"Alt text for accessibility\"\n }\n }\n },\n \"strongRef\": {\n \"type\": \"object\",\n \"description\": \"A strong reference to another record\",\n \"required\": [\"uri\", \"cid\"],\n \"properties\": {\n \"uri\": {\n \"type\": \"string\",\n \"format\": \"at-uri\",\n \"description\": \"AT Protocol URI of the referenced record\"\n },\n \"cid\": {\n \"type\": \"string\",\n \"format\": \"cid\",\n \"description\": \"Content identifier (CID) of the referenced record\"\n }\n }\n },\n \"geoCoordinates\": {\n \"type\": \"object\",\n \"description\": \"Geographic coordinates (WGS84). Stored as strings because DAG-CBOR doesn't support floats.\",\n \"required\": [\"latitude\", \"longitude\"],\n \"properties\": {\n \"latitude\": {\n \"type\": \"string\",\n \"description\": \"Latitude in decimal degrees (stored as string, range: -90 to 90)\"\n },\n \"longitude\": {\n \"type\": \"string\",\n \"description\": \"Longitude in decimal degrees (stored as string, range: -180 to 180)\"\n }\n }\n }\n }\n}\n",[],[844,851,858,865],{"_103":873,"_95":874,"_155":875,"_157":859,"_158":140,"_159":876,"_161":162,"_105":877,"_100":32,"_164":178,"_166":878,"_167":22,"_168":-5,"_169":879,"_98":880},"2040795a-a5d9-11f0-afef-0224a6c84d84","comment.json","204079f0-a5d9-11f0-afef-0224a6c84d84",1339,["D",1760101241521],"{\n \"lexicon\": 1,\n \"id\": \"app.dropanchor.comment\",\n \"defs\": {\n \"main\": {\n \"type\": \"record\",\n \"description\": \"A comment record for check-ins in the Anchor app\",\n \"key\": \"tid\",\n \"record\": {\n \"type\": \"object\",\n \"required\": [\n \"text\",\n \"createdAt\",\n \"checkinRef\"\n ],\n \"properties\": {\n \"text\": {\n \"type\": \"string\",\n \"maxLength\": 1000,\n \"description\": \"The comment text content\"\n },\n \"createdAt\": {\n \"type\": \"string\",\n \"format\": \"datetime\",\n \"description\": \"When the comment was created\"\n },\n \"checkinRef\": {\n \"type\": \"ref\",\n \"ref\": \"#strongRef\",\n \"description\": \"Reference to the check-in being commented on\"\n }\n }\n }\n },\n \"strongRef\": {\n \"type\": \"object\",\n \"description\": \"A strong reference to another record\",\n \"required\": [\n \"uri\",\n \"cid\"\n ],\n \"properties\": {\n \"uri\": {\n \"type\": \"string\",\n \"format\": \"at-uri\",\n \"description\": \"AT Protocol URI of the referenced record\"\n },\n \"cid\": {\n \"type\": \"string\",\n \"format\": \"cid\",\n \"description\": \"Content identifier (CID) of the referenced record\"\n }\n }\n }\n }\n}\n",[],[844,851,858,874],{"_103":882,"_95":883,"_155":884,"_157":859,"_158":140,"_159":885,"_161":162,"_105":886,"_100":32,"_164":178,"_166":887,"_167":22,"_168":-5,"_169":888,"_98":889},"20366406-a5d9-11f0-bffb-0224a6c84d84","like.json","203664a6-a5d9-11f0-bffb-0224a6c84d84",1338,["D",1760101241533],"{\n \"lexicon\": 1,\n \"id\": \"app.dropanchor.like\",\n \"defs\": {\n \"main\": {\n \"type\": \"record\",\n \"description\": \"A like record for check-ins in the Anchor app\",\n \"key\": \"tid\",\n \"record\": {\n \"type\": \"object\",\n \"required\": [\n \"createdAt\",\n \"checkinRef\"\n ],\n \"properties\": {\n \"createdAt\": {\n \"type\": \"string\",\n \"format\": \"datetime\",\n \"description\": \"When the like was created\"\n },\n \"checkinRef\": {\n \"type\": \"ref\",\n \"ref\": \"#strongRef\",\n \"description\": \"Reference to the check-in being liked\"\n }\n }\n }\n },\n \"strongRef\": {\n \"type\": \"object\",\n \"description\": \"A strong reference to another record\",\n \"required\": [\n \"uri\",\n \"cid\"\n ],\n \"properties\": {\n \"uri\": {\n \"type\": \"string\",\n \"format\": \"at-uri\",\n \"description\": \"AT Protocol URI of the referenced record\"\n },\n \"cid\": {\n \"type\": \"string\",\n \"format\": \"cid\",\n \"description\": \"Content identifier (CID) of the referenced record\"\n }\n }\n }\n }\n}\n",[],[844,851,858,883],[844,851,858],[844,851],{"_103":893,"_95":894,"_155":895,"_157":845,"_158":140,"_159":896,"_161":162,"_105":897,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":898,"_98":924},"972c24c8-a030-11f0-8e91-0224a6c84d84","community","972c257c-a030-11f0-8e91-0224a6c84d84",1254,["D",1759479100352],[899],{"_103":900,"_95":901,"_155":902,"_157":895,"_158":140,"_159":903,"_161":162,"_105":904,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":905,"_98":923},"9766b07a-a030-11f0-ab81-0224a6c84d84","lexicon","9766b142-a030-11f0-ab81-0224a6c84d84",1256,["D",1759479100738],[906],{"_103":907,"_95":908,"_155":909,"_157":902,"_158":140,"_159":910,"_161":162,"_105":911,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":912,"_98":922},"9787e1b4-a030-11f0-b852-0224a6c84d84","location","9787e272-a030-11f0-b852-0224a6c84d84",1257,["D",1759479100944],[913],{"_103":914,"_95":915,"_155":916,"_157":909,"_158":140,"_159":917,"_161":162,"_105":918,"_100":32,"_164":178,"_166":919,"_167":22,"_168":-5,"_169":920,"_98":921},"98222670-a030-11f0-9c61-0224a6c84d84","address.json","98222738-a030-11f0-9c61-0224a6c84d84",1271,["D",1759479101320],"{\n \"lexicon\": 1,\n \"id\": \"community.lexicon.location.address\",\n \"defs\": {\n \"main\": {\n \"type\": \"record\",\n \"description\": \"A structured postal address for a location\",\n \"key\": \"tid\",\n \"record\": {\n \"type\": \"object\",\n \"properties\": {\n \"$type\": {\n \"type\": \"string\",\n \"const\": \"community.lexicon.location.address\"\n },\n \"name\": {\n \"type\": \"string\",\n \"maxLength\": 500,\n \"description\": \"Name of the place or venue\"\n },\n \"street\": {\n \"type\": \"string\",\n \"maxLength\": 500,\n \"description\": \"Street address\"\n },\n \"locality\": {\n \"type\": \"string\",\n \"maxLength\": 200,\n \"description\": \"City or locality\"\n },\n \"region\": {\n \"type\": \"string\",\n \"maxLength\": 200,\n \"description\": \"State, province, or region\"\n },\n \"country\": {\n \"type\": \"string\",\n \"maxLength\": 100,\n \"description\": \"Country name or code\"\n },\n \"postalCode\": {\n \"type\": \"string\",\n \"maxLength\": 20,\n \"description\": \"Postal or ZIP code\"\n }\n }\n }\n }\n }\n}\n",[],[844,894,901,908,915],[844,894,901,908],[844,894,901],[844,894],[844],{"_103":927,"_95":928,"_155":929,"_157":-5,"_158":140,"_159":930,"_161":162,"_105":931,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":932,"_98":951},"5049ff12-9b03-11f0-a8a9-0224a6c84d84","scripts","5049ffee-9b03-11f0-a8a9-0224a6c84d84",1120,["D",1758909898262],[933,942],{"_103":934,"_95":935,"_155":936,"_157":929,"_158":140,"_159":937,"_161":162,"_105":938,"_100":120,"_164":246,"_166":939,"_167":22,"_168":-5,"_169":940,"_98":941},"887379d4-9b05-11f0-89c4-0224a6c84d84","debug-oauth-sessions.ts","506555a0-9b03-11f0-a8a9-0224a6c84d84",1136,["D",1758910851445],"/**\n * Debug script to check OAuth sessions in the database\n * This will help diagnose why the OAuth session lookup is failing\n */\n\nimport { db } from \"../backend/database/db.ts\";\nimport { ironSessionStorageTable } from \"../backend/database/schema.ts\";\nimport { eq, like } from \"https://esm.sh/drizzle-orm@0.44.5\";\n\n// The DID that's failing\nconst FAILING_DID = \"did:plc:aq7owa5y7ndc2hzjz37wy7ma\";\n\nexport default async function debugOAuthSessions() {\n try {\n console.log(\"🔍 Debugging OAuth sessions...\");\n\n // Check all OAuth sessions (now in iron_session_storage)\n console.log(\"\\n📊 All OAuth sessions:\");\n const allSessions = await db.select().from(ironSessionStorageTable)\n .where(like(ironSessionStorageTable.key, \"session:%\"));\n console.log(`Found ${allSessions.length} total sessions`);\n\n allSessions.forEach((session, i) => {\n try {\n const sessionData = JSON.parse(session.value);\n const did = session.key.replace(\"session:\", \"\");\n console.log(`Session ${i + 1}:`, {\n did,\n handle: sessionData.handle,\n createdAt: session.createdAt,\n tokenExpiresAt: sessionData.expiresAt,\n isExpired: sessionData.expiresAt\n ? new Date() > new Date(sessionData.expiresAt)\n : false,\n });\n } catch {\n console.log(\n `Session ${i + 1}: Invalid session data for ${session.key}`,\n );\n }\n });\n\n // Check for the specific failing DID\n console.log(`\\n🎯 Looking for session with DID: ${FAILING_DID}`);\n const targetSession = await db.select()\n .from(ironSessionStorageTable)\n .where(eq(ironSessionStorageTable.key, `session:${FAILING_DID}`))\n .limit(1);\n\n if (targetSession.length > 0) {\n try {\n const sessionData = JSON.parse(targetSession[0].value);\n const did = targetSession[0].key.replace(\"session:\", \"\");\n console.log(\"✅ Found session for failing DID:\", {\n did,\n handle: sessionData.handle,\n createdAt: targetSession[0].createdAt,\n tokenExpiresAt: sessionData.expiresAt,\n isExpired: sessionData.expiresAt\n ? new Date() > new Date(sessionData.expiresAt)\n : false,\n });\n } catch {\n console.log(\"❌ Invalid session data for failing DID\");\n }\n } else {\n console.log(\"❌ No session found for failing DID\");\n }\n\n // Test the OAuth sessions API directly\n console.log(\"\\n🧪 Testing OAuth sessions API...\");\n const { sessions } = await import(\"../backend/routes/oauth.ts\");\n\n try {\n const oauthSession = await sessions.getOAuthSession(FAILING_DID);\n if (oauthSession) {\n console.log(\"✅ OAuth sessions API found session:\", {\n did: oauthSession.did,\n handle: oauthSession.handle,\n pdsUrl: oauthSession.pdsUrl,\n });\n } else {\n console.log(\"❌ OAuth sessions API returned null for DID\");\n }\n } catch (error) {\n console.error(\"❌ OAuth sessions API error:\", error);\n }\n\n return new Response(\n JSON.stringify({\n success: true,\n totalSessions: allSessions.length,\n targetDid: FAILING_DID,\n hasTargetSession: targetSession.length > 0,\n }),\n {\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n } catch (error) {\n console.error(\"Debug script error:\", error);\n return new Response(\n JSON.stringify({\n success: false,\n error: error.message,\n }),\n {\n status: 500,\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n }\n}\n",[],[928,935],{"_103":943,"_95":944,"_155":945,"_157":929,"_158":140,"_159":946,"_161":162,"_105":947,"_100":32,"_164":246,"_166":948,"_167":22,"_168":-5,"_169":949,"_98":950},"f67df0e4-a35c-11f0-a303-0224a6c84d84","test-user-stats.ts","f67df1ca-a35c-11f0-a303-0224a6c84d84",1329,["D",1759828011616],"/**\n * Test script to verify the user stats functionality\n */\n\nimport {\n exportUserData,\n generateUserStats,\n} from \"../backend/services/user-stats-service.ts\";\n\nexport default async function testUserStats() {\n try {\n console.log(\"🧪 Testing User Stats Service...\");\n\n // Test generating user statistics\n console.log(\"\\n📊 Generating user statistics...\");\n const stats = await generateUserStats();\n\n console.log(\"✅ User Statistics Generated:\");\n console.log(` Total Users: ${stats.totalUsers}`);\n console.log(` Active Users: ${stats.activeUsers}`);\n console.log(` Expired Users: ${stats.expiredUsers}`);\n console.log(` Unique PDS Servers: ${stats.uniquePdsServers}`);\n\n console.log(\"\\n🏆 Top PDS Servers:\");\n stats.topPdsServers.forEach((server, i) => {\n console.log(` ${i + 1}. ${server.pdsUrl} (${server.userCount} users)`);\n });\n\n console.log(\"\\n👥 Recent Users:\");\n stats.recentUsers.slice(0, 5).forEach((user, i) => {\n console.log(` ${i + 1}. ${user.handle} (${user.did}) - ${user.pdsUrl}`);\n });\n\n // Test exporting user data\n console.log(\"\\n📋 Exporting user data...\");\n const users = await exportUserData();\n\n console.log(`✅ Exported ${users.length} unique users`);\n\n console.log(\"\\n🎯 Sample User Data:\");\n users.slice(0, 3).forEach((user, i) => {\n console.log(` ${i + 1}. DID: ${user.did}`);\n console.log(` Handle: ${user.handle}`);\n console.log(` PDS: ${user.pdsUrl}`);\n console.log(` Created: ${new Date(user.createdAt).toISOString()}`);\n console.log(` Expired: ${user.isExpired ? \"Yes\" : \"No\"}`);\n console.log(\"\");\n });\n\n return new Response(\n JSON.stringify({\n success: true,\n stats,\n exportedUsers: users.length,\n }),\n {\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n } catch (error) {\n console.error(\"❌ Test failed:\", error);\n return new Response(\n JSON.stringify({\n success: false,\n error: error.message,\n }),\n {\n status: 500,\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n }\n}\n",[],[928,944],[928],{"_103":953,"_95":954,"_155":955,"_157":-5,"_158":140,"_159":741,"_161":162,"_105":956,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":957,"_98":1096},"56be52d0-58b4-11f0-9210-f69ea79377d9","tests","56be5424-58b4-11f0-9210-f69ea79377d9",["D",1751619202108],[958,975,1018,1035],{"_103":959,"_95":960,"_155":961,"_157":955,"_158":140,"_159":962,"_161":162,"_105":963,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":964,"_98":974},"5769d894-58b4-11f0-a0a5-f69ea79377d9","fixtures","5769d952-58b4-11f0-a0a5-f69ea79377d9",10,["D",1751619203233],[965],{"_103":966,"_95":967,"_155":968,"_157":961,"_158":140,"_159":969,"_161":162,"_105":970,"_100":120,"_164":246,"_166":971,"_167":22,"_168":-5,"_169":972,"_98":973},"dabc4fea-5a7d-11f0-9153-f69ea79377d9","test-data.ts","58119f98-58b4-11f0-84ee-f69ea79377d9",64,["D",1751815703553],"// Test fixtures for Anchor AppView tests\n\nexport const mockCheckins = [\n {\n id: \"checkin1\",\n uri: \"at://did:plc:user1/app.dropanchor.checkin/checkin1\",\n author_did: \"did:plc:user1\",\n author_handle: \"alice.bsky.social\",\n text: \"Amazing coffee at this local spot! ☕️\",\n created_at: \"2024-07-04T10:30:00Z\",\n latitude: 40.7128,\n longitude: -74.0060,\n address_ref_uri:\n \"at://did:plc:venues/community.lexicon.location.address/cafe-joe\",\n address_ref_cid: \"bafyreic7...\",\n cached_address_name: \"Joe's Coffee Shop\",\n cached_address_street: \"123 Broadway\",\n cached_address_locality: \"New York\",\n cached_address_region: \"NY\",\n cached_address_country: \"US\",\n cached_address_postal_code: \"10001\",\n },\n {\n id: \"checkin2\",\n uri: \"at://did:plc:user2/app.dropanchor.checkin/checkin2\",\n author_did: \"did:plc:user2\",\n author_handle: \"bob.bsky.social\",\n text: \"Great lunch spot with outdoor seating 🌞\",\n created_at: \"2024-07-04T12:15:00Z\",\n latitude: 40.7589,\n longitude: -73.9851,\n address_ref_uri:\n \"at://did:plc:venues/community.lexicon.location.address/times-square-cafe\",\n address_ref_cid: \"bafyreie8...\",\n cached_address_name: \"Times Square Cafe\",\n cached_address_street: \"1500 Broadway\",\n cached_address_locality: \"New York\",\n cached_address_region: \"NY\",\n cached_address_country: \"US\",\n cached_address_postal_code: \"10036\",\n },\n {\n id: \"checkin3\",\n uri: \"at://did:plc:user3/app.dropanchor.checkin/checkin3\",\n author_did: \"did:plc:user3\",\n author_handle: \"charlie.bsky.social\",\n text: \"Perfect spot for remote work 💻\",\n created_at: \"2024-07-04T14:45:00Z\",\n latitude: 37.7749,\n longitude: -122.4194,\n address_ref_uri: null,\n address_ref_cid: null,\n cached_address_name: null,\n cached_address_street: null,\n cached_address_locality: \"San Francisco\",\n cached_address_region: \"CA\",\n cached_address_country: \"US\",\n cached_address_postal_code: \"94102\",\n },\n];\n\nexport const mockAddresses = [\n {\n uri: \"at://did:plc:venues/community.lexicon.location.address/cafe-joe\",\n cid: \"bafyreic7...\",\n name: \"Joe's Coffee Shop\",\n street: \"123 Broadway\",\n locality: \"New York\",\n region: \"NY\",\n country: \"US\",\n postal_code: \"10001\",\n latitude: 40.7128,\n longitude: -74.0060,\n full_data: {\n name: \"Joe's Coffee Shop\",\n street: \"123 Broadway\",\n locality: \"New York\",\n region: \"NY\",\n country: \"US\",\n postalCode: \"10001\",\n latitude: 40.7128,\n longitude: -74.0060,\n hours: {\n monday: \"7:00-19:00\",\n tuesday: \"7:00-19:00\",\n },\n amenities: [\"wifi\", \"outdoor_seating\", \"accepts_cards\"],\n },\n resolved_at: \"2024-07-04T09:00:00Z\",\n },\n {\n uri:\n \"at://did:plc:venues/community.lexicon.location.address/times-square-cafe\",\n cid: \"bafyreie8...\",\n name: \"Times Square Cafe\",\n street: \"1500 Broadway\",\n locality: \"New York\",\n region: \"NY\",\n country: \"US\",\n postal_code: \"10036\",\n latitude: 40.7589,\n longitude: -73.9851,\n full_data: {\n name: \"Times Square Cafe\",\n street: \"1500 Broadway\",\n locality: \"New York\",\n region: \"NY\",\n country: \"US\",\n postalCode: \"10036\",\n latitude: 40.7589,\n longitude: -73.9851,\n hours: {\n monday: \"6:00-22:00\",\n tuesday: \"6:00-22:00\",\n },\n amenities: [\"wifi\", \"outdoor_seating\", \"delivery\"],\n },\n resolved_at: \"2024-07-04T11:30:00Z\",\n },\n];\n\nexport const mockUsers = [\n {\n did: \"did:plc:user1\",\n handle: \"alice.bsky.social\",\n displayName: \"Alice Johnson\",\n avatar: \"https://example.com/avatar1.jpg\",\n },\n {\n did: \"did:plc:user2\",\n handle: \"bob.bsky.social\",\n displayName: \"Bob Smith\",\n avatar: \"https://example.com/avatar2.jpg\",\n },\n {\n did: \"did:plc:user3\",\n handle: \"charlie.bsky.social\",\n displayName: \"Charlie Brown\",\n avatar: \"https://example.com/avatar3.jpg\",\n },\n];\n\nexport const mockFollows = [\n {\n follower_did: \"did:plc:user1\",\n following_did: \"did:plc:user2\",\n created_at: \"2024-06-01T10:00:00Z\",\n synced_at: \"2024-07-04T08:00:00Z\",\n },\n {\n follower_did: \"did:plc:user1\",\n following_did: \"did:plc:user3\",\n created_at: \"2024-06-15T14:30:00Z\",\n synced_at: \"2024-07-04T08:00:00Z\",\n },\n {\n follower_did: \"did:plc:user2\",\n following_did: \"did:plc:user1\",\n created_at: \"2024-06-02T09:15:00Z\",\n synced_at: \"2024-07-04T08:00:00Z\",\n },\n];\n\nexport const mockJetstreamEvents = [\n {\n kind: \"commit\",\n commit: {\n repo: \"did:plc:user1\",\n collection: \"app.dropanchor.checkin\",\n operation: \"create\",\n rkey: \"checkin1\",\n record: {\n text: \"Amazing coffee at this local spot! ☕️\",\n createdAt: \"2024-07-04T10:30:00Z\",\n coordinates: {\n latitude: \"40.7128\",\n longitude: \"-74.0060\",\n },\n addressRef: {\n uri:\n \"at://did:plc:venues/community.lexicon.location.address/cafe-joe\",\n cid: \"bafyreic7...\",\n },\n },\n },\n },\n {\n kind: \"commit\",\n commit: {\n repo: \"did:plc:user2\",\n collection: \"app.dropanchor.checkin\",\n operation: \"create\",\n rkey: \"checkin2\",\n record: {\n text: \"Great lunch spot with outdoor seating 🌞\",\n createdAt: \"2024-07-04T12:15:00Z\",\n coordinates: {\n latitude: \"40.7589\",\n longitude: \"-73.9851\",\n },\n addressRef: {\n uri:\n \"at://did:plc:venues/community.lexicon.location.address/times-square-cafe\",\n cid: \"bafyreie8...\",\n },\n },\n },\n },\n];\n\nexport const mockProcessingLogs = [\n {\n id: 1,\n run_at: \"2024-07-04T10:00:00Z\",\n events_processed: 5,\n errors: 0,\n duration_ms: 1250,\n },\n {\n id: 2,\n run_at: \"2024-07-04T10:05:00Z\",\n events_processed: 3,\n errors: 1,\n duration_ms: 2100,\n },\n {\n id: 3,\n run_at: \"2024-07-04T10:10:00Z\",\n events_processed: 7,\n errors: 0,\n duration_ms: 980,\n },\n];\n\n// Coordinate pairs for testing spatial queries\nexport const testCoordinates = {\n newYork: { lat: 40.7128, lng: -74.0060 },\n sanFrancisco: { lat: 37.7749, lng: -122.4194 },\n london: { lat: 51.5074, lng: -0.1278 },\n tokyo: { lat: 35.6762, lng: 139.6503 },\n sydney: { lat: -33.8688, lng: 151.2093 },\n};\n\n// Helper function to create formatted checkin records\nexport function formatTestCheckin(rawCheckin: typeof mockCheckins[0]) {\n return {\n id: rawCheckin.id,\n uri: rawCheckin.uri,\n author: {\n did: rawCheckin.author_did,\n handle: rawCheckin.author_handle,\n },\n text: rawCheckin.text,\n createdAt: rawCheckin.created_at,\n coordinates: rawCheckin.latitude && rawCheckin.longitude\n ? {\n latitude: rawCheckin.latitude,\n longitude: rawCheckin.longitude,\n }\n : undefined,\n address: rawCheckin.cached_address_name\n ? {\n name: rawCheckin.cached_address_name,\n street: rawCheckin.cached_address_street,\n locality: rawCheckin.cached_address_locality,\n region: rawCheckin.cached_address_region,\n country: rawCheckin.cached_address_country,\n postalCode: rawCheckin.cached_address_postal_code,\n }\n : undefined,\n };\n}\n",[],[954,960,967],[954,960],{"_103":976,"_95":977,"_155":978,"_157":955,"_158":140,"_159":712,"_161":162,"_105":979,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":980,"_98":1017},"5753ebce-58b4-11f0-9040-f69ea79377d9","integration","5753ec82-58b4-11f0-9040-f69ea79377d9",["D",1751619203088],[981,990,999,1008],{"_103":982,"_95":983,"_155":984,"_157":978,"_158":140,"_159":985,"_161":162,"_105":986,"_100":621,"_164":246,"_166":987,"_167":22,"_168":-5,"_169":988,"_98":989},"919b3836-9ad2-11f0-8b15-0224a6c84d84","api.test.ts","580a4cb6-58b4-11f0-b945-f69ea79377d9",1078,["D",1758888962504],"import {\n assertEquals,\n assertExists,\n} from \"https://deno.land/std@0.208.0/assert/mod.ts\";\nimport {\n restore as _restore,\n stub as _stub,\n} from \"https://deno.land/std@0.208.0/testing/mock.ts\";\n\n// Mock SQLite for testing\nconst _mockDatabase = new Map();\n\nconst _mockSqlite = {\n execute(query: string, _params: any[] = []) {\n // Simple mock that returns test data based on query patterns\n if (query.includes(\"CREATE TABLE\")) {\n return [];\n }\n\n if (query.includes(\"SELECT COUNT(*) as count FROM checkins_v1\")) {\n return [{ count: 42 }];\n }\n\n if (query.includes(\"SELECT * FROM checkins_v1\")) {\n return [\n {\n id: \"test123\",\n uri: \"at://did:plc:test/app.dropanchor.checkin/test123\",\n author_did: \"did:plc:test\",\n author_handle: \"test.bsky.social\",\n text: \"Great coffee!\",\n created_at: \"2024-01-01T12:00:00Z\",\n latitude: 40.7128,\n longitude: -74.0060,\n cached_address_name: \"Test Cafe\",\n cached_address_street: \"123 Test St\",\n cached_address_locality: \"New York\",\n cached_address_region: \"NY\",\n cached_address_country: \"US\",\n cached_address_postal_code: \"10001\",\n },\n ];\n }\n\n if (query.includes(\"SELECT DISTINCT author_did FROM checkins_v1\")) {\n return [{ author_did: \"did:plc:test\" }];\n }\n\n return [];\n },\n};\n\n// Import the API handler (we'll need to mock the sqlite import)\n// For now, let's test the core functionality by creating a test version\n\nfunction createTestAPIHandler() {\n // Mock CORS headers type\n interface CorsHeaders extends Record {\n \"Access-Control-Allow-Origin\": string;\n \"Access-Control-Allow-Methods\": string;\n \"Access-Control-Allow-Headers\": string;\n \"Content-Type\": string;\n }\n\n const corsHeaders: CorsHeaders = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n \"Content-Type\": \"application/json\",\n };\n\n async function handleRequest(req: Request): Promise {\n const url = new URL(req.url);\n\n if (req.method === \"OPTIONS\") {\n return new Response(null, { headers: corsHeaders });\n }\n\n switch (url.pathname) {\n case \"/stats\":\n return new Response(\n JSON.stringify({\n totalCheckins: 42,\n totalUsers: 10,\n recentActivity: 5,\n timestamp: new Date().toISOString(),\n }),\n { headers: corsHeaders },\n );\n\n case \"/nearby\": {\n const lat = parseFloat(url.searchParams.get(\"lat\") || \"0\");\n const lng = parseFloat(url.searchParams.get(\"lng\") || \"0\");\n const radius = parseFloat(url.searchParams.get(\"radius\") || \"5\");\n\n if (\n isNaN(lat) || isNaN(lng) || url.searchParams.get(\"lat\") === null ||\n url.searchParams.get(\"lng\") === null\n ) {\n return new Response(\n JSON.stringify({ error: \"lat and lng parameters required\" }),\n {\n status: 400,\n headers: corsHeaders,\n },\n );\n }\n\n return new Response(\n JSON.stringify({\n checkins: await getMockNearbyCheckins(lat, lng, radius),\n center: { latitude: lat, longitude: lng },\n radius,\n }),\n { headers: corsHeaders },\n );\n }\n\n case \"/api/places/categories\": {\n // Import CategoryService to get real data\n const { CategoryService } = await import(\n \"../../backend/services/category-service.ts\"\n );\n\n const categories = CategoryService.getAllCategoryObjects();\n const defaultSearch = CategoryService.getDefaultSearchCategories();\n const sociallyRelevant = CategoryService\n .getSociallyRelevantCategories();\n\n return new Response(\n JSON.stringify({\n categories,\n defaultSearch,\n sociallyRelevant,\n metadata: {\n totalCategories: categories.length,\n defaultSearchCount: defaultSearch.length,\n sociallyRelevantCount: sociallyRelevant.length,\n },\n }),\n { headers: corsHeaders },\n );\n }\n\n default:\n return new Response(JSON.stringify({ error: \"Not Found\" }), {\n status: 404,\n headers: corsHeaders,\n });\n }\n }\n\n function getMockCheckins() {\n return [\n {\n id: \"test123\",\n uri: \"at://did:plc:test/app.dropanchor.checkin/test123\",\n author: {\n did: \"did:plc:test\",\n handle: \"test.bsky.social\",\n },\n text: \"Great coffee!\",\n createdAt: \"2024-01-01T12:00:00Z\",\n coordinates: {\n latitude: 40.7128,\n longitude: -74.0060,\n },\n address: {\n name: \"Test Cafe\",\n street: \"123 Test St\",\n locality: \"New York\",\n region: \"NY\",\n country: \"US\",\n postalCode: \"10001\",\n },\n },\n ];\n }\n\n async function getMockNearbyCheckins(\n lat: number,\n lng: number,\n radius: number,\n ) {\n // Simple distance check for test data\n const testLat = 40.7128;\n const testLng = -74.0060;\n const distance =\n Math.sqrt(Math.pow(lat - testLat, 2) + Math.pow(lng - testLng, 2)) * 111; // Rough km conversion\n\n if (distance <= radius) {\n const checkins = await getMockCheckins();\n return checkins.map((checkin) => ({\n ...checkin,\n distance: Math.round(distance * 100) / 100,\n }));\n }\n\n return [];\n }\n\n return handleRequest;\n}\n\nDeno.test(\"API Integration - OPTIONS request returns CORS headers\", async () => {\n const handler = await createTestAPIHandler();\n const req = new Request(\"http://localhost/stats\", { method: \"OPTIONS\" });\n const response = await handler(req);\n\n assertEquals(response.status, 200);\n assertEquals(response.headers.get(\"Access-Control-Allow-Origin\"), \"*\");\n});\n\nDeno.test(\"API Integration - /stats endpoint returns statistics\", async () => {\n const handler = await createTestAPIHandler();\n const req = new Request(\"http://localhost/stats\");\n const response = await handler(req);\n\n assertEquals(response.status, 200);\n\n const data = await response.json();\n assertEquals(data.totalCheckins, 42);\n assertEquals(data.totalUsers, 10);\n assertEquals(data.recentActivity, 5);\n assertExists(data.timestamp);\n});\n\nDeno.test(\"API Integration - /nearby endpoint requires lat/lng parameters\", async () => {\n const handler = await createTestAPIHandler();\n const req = new Request(\"http://localhost/nearby\");\n const response = await handler(req);\n\n assertEquals(response.status, 400);\n\n const data = await response.json();\n assertEquals(data.error, \"lat and lng parameters required\");\n});\n\nDeno.test(\"API Integration - /nearby endpoint returns nearby checkins\", async () => {\n const handler = await createTestAPIHandler();\n const req = new Request(\n \"http://localhost/nearby?lat=40.7128&lng=-74.0060&radius=5\",\n );\n const response = await handler(req);\n\n assertEquals(response.status, 200);\n\n const data = await response.json();\n assertExists(data.checkins);\n assertExists(data.center);\n assertEquals(data.center.latitude, 40.7128);\n assertEquals(data.center.longitude, -74.0060);\n assertEquals(data.radius, 5);\n\n if (data.checkins.length > 0) {\n assertExists(data.checkins[0].distance);\n }\n});\n\nDeno.test(\"API Integration - /nearby endpoint filters by distance\", async () => {\n const handler = await createTestAPIHandler();\n\n // Test far away coordinates\n const req = new Request(\"http://localhost/nearby?lat=0&lng=0&radius=5\");\n const response = await handler(req);\n\n assertEquals(response.status, 200);\n\n const data = await response.json();\n assertEquals(data.checkins.length, 0); // Should be empty due to distance\n});\n\nDeno.test(\"API Integration - /api/places/categories endpoint returns category data\", async () => {\n const handler = await createTestAPIHandler();\n const req = new Request(\"http://localhost/api/places/categories\");\n const response = await handler(req);\n\n assertEquals(response.status, 200);\n\n const data = await response.json();\n assertExists(data.categories);\n assertExists(data.defaultSearch);\n assertExists(data.sociallyRelevant);\n assertExists(data.metadata);\n\n // Verify structure\n assertEquals(Array.isArray(data.categories), true);\n assertEquals(Array.isArray(data.defaultSearch), true);\n assertEquals(Array.isArray(data.sociallyRelevant), true);\n assertEquals(typeof data.metadata.totalCategories, \"number\");\n assertEquals(typeof data.metadata.defaultSearchCount, \"number\");\n assertEquals(typeof data.metadata.sociallyRelevantCount, \"number\");\n\n // Verify data consistency\n assertEquals(data.metadata.totalCategories, data.categories.length);\n assertEquals(data.metadata.defaultSearchCount, data.defaultSearch.length);\n assertEquals(\n data.metadata.sociallyRelevantCount,\n data.sociallyRelevant.length,\n );\n\n // Verify category structure\n if (data.categories.length > 0) {\n const category = data.categories[0];\n assertExists(category.id);\n assertExists(category.name);\n assertExists(category.icon);\n assertExists(category.group);\n assertExists(category.osmTag);\n }\n});\n\nDeno.test(\"API Integration - unknown endpoint returns 404\", async () => {\n const handler = await createTestAPIHandler();\n const req = new Request(\"http://localhost/unknown\");\n const response = await handler(req);\n\n assertEquals(response.status, 404);\n\n const data = await response.json();\n assertEquals(data.error, \"Not Found\");\n});\n",[],[954,977,983],{"_103":991,"_95":992,"_155":993,"_157":978,"_158":140,"_159":994,"_161":162,"_105":995,"_100":621,"_164":246,"_166":996,"_167":22,"_168":-5,"_169":997,"_98":998},"08ee5dfe-a6af-11f0-8a24-0224a6c84d84","checkin-api.test.ts","1819616e-a026-11f0-af14-0224a6c84d84",1419,["D",1760193114768],"// Integration tests for checkin creation and deletion API endpoints\n// Tests full request/response cycles with mocked dependencies\n\nimport {\n assertEquals,\n assertExists,\n} from \"https://deno.land/std@0.208.0/assert/mod.ts\";\n\n// Mock OAuth session data\ninterface MockOAuthSession {\n did: string;\n handle: string;\n pdsUrl: string;\n accessToken: string;\n makeRequest: (\n method: string,\n url: string,\n options?: any,\n ) => Promise;\n}\n\n// Create a mock OAuth session for testing\nfunction _createMockOAuthSession(did: string): MockOAuthSession {\n return {\n did,\n handle: \"test.bsky.social\",\n pdsUrl: \"https://bsky.social\",\n accessToken: \"mock-access-token-12345\",\n makeRequest: (_method: string, url: string, options?: any) => {\n // Mock successful PDS responses\n if (url.includes(\"createRecord\")) {\n const body = JSON.parse(options?.body || \"{}\");\n\n // Generate mock AT URI based on collection\n const collection = body.collection;\n const rkey = \"3k2\" + Math.random().toString(36).substring(7);\n const uri = `at://${did}/${collection}/${rkey}`;\n const cid =\n \"bafyreicv3pecq6fuua22xcoguxep76otivb33nlaofzl76fpagczo5t5jm\";\n\n return Promise.resolve(\n new Response(JSON.stringify({ uri, cid }), {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n }),\n );\n }\n\n if (url.includes(\"getRecord\")) {\n // Mock checkin record with address ref\n return Promise.resolve(\n new Response(\n JSON.stringify({\n uri: `at://${did}/app.dropanchor.checkin/3k2test`,\n cid:\n \"bafyreicv3pecq6fuua22xcoguxep76otivb33nlaofzl76fpagczo5t5jm\",\n value: {\n $type: \"app.dropanchor.checkin\",\n text: \"Great coffee!\",\n createdAt: new Date().toISOString(),\n coordinates: { latitude: \"40.7128\", longitude: \"-74.0060\" },\n addressRef: {\n uri: `at://${did}/community.lexicon.location.address/3k2addr`,\n cid:\n \"bafyreicv3pecq6fuua22xcoguxep76otivb33nlaofzl76fpagczo5t5jm\",\n },\n },\n }),\n {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n },\n ),\n );\n }\n\n if (url.includes(\"deleteRecord\")) {\n // Mock successful deletion\n return Promise.resolve(new Response(null, { status: 200 }));\n }\n\n if (url.includes(\"uploadBlob\")) {\n // Mock successful blob upload\n const cid = \"bafkreiabcd1234567890abcdef\" +\n Math.random().toString(36).substring(7);\n return Promise.resolve(\n new Response(\n JSON.stringify({\n blob: {\n $type: \"blob\",\n ref: { $link: cid },\n mimeType: \"image/jpeg\",\n size: 12345,\n },\n }),\n {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n },\n ),\n );\n }\n\n // Default mock response\n return Promise.resolve(\n new Response(JSON.stringify({ error: \"Not implemented\" }), {\n status: 500,\n }),\n );\n },\n };\n}\n\n// Test helper: Create a mock request with authentication\nfunction createAuthenticatedRequest(\n url: string,\n options: RequestInit = {},\n authType: \"cookie\" | \"bearer\" = \"cookie\",\n): Request {\n const headers = new Headers(options.headers || {});\n\n if (authType === \"cookie\") {\n headers.set(\"Cookie\", \"session=mock-session-cookie\");\n } else {\n headers.set(\"Authorization\", \"Bearer mock-bearer-token-valid\");\n }\n\n return new Request(url, {\n ...options,\n headers,\n });\n}\n\nDeno.test(\"Checkin API - POST /api/checkins with valid data returns success\", async () => {\n const requestBody = {\n place: {\n name: \"Test Cafe\",\n latitude: 40.7128,\n longitude: -74.0060,\n tags: { amenity: \"cafe\" },\n },\n message: \"Great coffee!\",\n };\n\n const req = createAuthenticatedRequest(\"http://localhost/api/checkins\", {\n method: \"POST\",\n body: JSON.stringify(requestBody),\n headers: { \"Content-Type\": \"application/json\" },\n });\n\n // We can't easily test the actual createCheckin function here without full DI\n // But we can test the validation logic that happens before PDS calls\n\n // Verify request body is valid\n const body = await req.json();\n assertExists(body.place);\n assertEquals(body.place.name, \"Test Cafe\");\n assertEquals(body.place.latitude, 40.7128);\n assertEquals(body.place.longitude, -74.0060);\n});\n\nDeno.test(\"Checkin API - POST /api/checkins with string coordinates converts to numbers\", async () => {\n const requestBody = {\n place: {\n name: \"Test Cafe\",\n latitude: \"40.7128\", // String\n longitude: \"-74.0060\", // String\n tags: { amenity: \"cafe\" },\n },\n message: \"Great coffee!\",\n };\n\n const req = createAuthenticatedRequest(\"http://localhost/api/checkins\", {\n method: \"POST\",\n body: JSON.stringify(requestBody),\n headers: { \"Content-Type\": \"application/json\" },\n });\n\n const body = await req.json();\n // Validate that coordinates can be parsed\n const lat = typeof body.place.latitude === \"string\"\n ? parseFloat(body.place.latitude)\n : body.place.latitude;\n const lng = typeof body.place.longitude === \"string\"\n ? parseFloat(body.place.longitude)\n : body.place.longitude;\n\n assertEquals(typeof lat, \"number\");\n assertEquals(typeof lng, \"number\");\n assertEquals(lat, 40.7128);\n assertEquals(lng, -74.0060);\n});\n\nDeno.test(\"Checkin API - POST /api/checkins without authentication returns 401\", () => {\n const requestBody = {\n place: {\n name: \"Test Cafe\",\n latitude: 40.7128,\n longitude: -74.0060,\n tags: { amenity: \"cafe\" },\n },\n message: \"Great coffee!\",\n };\n\n const req = new Request(\"http://localhost/api/checkins\", {\n method: \"POST\",\n body: JSON.stringify(requestBody),\n headers: { \"Content-Type\": \"application/json\" },\n });\n\n // Without auth headers, should fail\n // (In real implementation, this would return 401)\n assertEquals(req.headers.get(\"Authorization\"), null);\n assertEquals(req.headers.get(\"Cookie\"), null);\n});\n\nDeno.test(\"Checkin API - POST /api/checkins with invalid coordinates returns 400\", async () => {\n const requestBody = {\n place: {\n name: \"Test Cafe\",\n latitude: 91, // Invalid: > 90\n longitude: -74.0060,\n tags: { amenity: \"cafe\" },\n },\n message: \"Great coffee!\",\n };\n\n const req = createAuthenticatedRequest(\"http://localhost/api/checkins\", {\n method: \"POST\",\n body: JSON.stringify(requestBody),\n headers: { \"Content-Type\": \"application/json\" },\n });\n\n const body = await req.json();\n const lat = body.place.latitude;\n\n // Validate coordinates are out of range\n assertEquals(Math.abs(lat) > 90, true);\n});\n\nDeno.test(\"Checkin API - POST /api/checkins without place.name returns 400\", async () => {\n const requestBody = {\n place: {\n // Missing name\n latitude: 40.7128,\n longitude: -74.0060,\n tags: { amenity: \"cafe\" },\n },\n message: \"Great coffee!\",\n };\n\n const req = createAuthenticatedRequest(\"http://localhost/api/checkins\", {\n method: \"POST\",\n body: JSON.stringify(requestBody),\n headers: { \"Content-Type\": \"application/json\" },\n });\n\n const body = await req.json();\n assertEquals(body.place.name, undefined);\n});\n\nDeno.test(\"Checkin API - POST /api/checkins without place returns 400\", async () => {\n const requestBody = {\n // Missing place entirely\n message: \"Great coffee!\",\n };\n\n const req = createAuthenticatedRequest(\"http://localhost/api/checkins\", {\n method: \"POST\",\n body: JSON.stringify(requestBody),\n headers: { \"Content-Type\": \"application/json\" },\n });\n\n const body = await req.json();\n assertEquals(body.place, undefined);\n});\n\nDeno.test(\"Checkin API - POST /api/checkins with NaN coordinates returns 400\", async () => {\n const requestBody = {\n place: {\n name: \"Test Cafe\",\n latitude: \"not-a-number\",\n longitude: -74.0060,\n tags: { amenity: \"cafe\" },\n },\n message: \"Great coffee!\",\n };\n\n const req = createAuthenticatedRequest(\"http://localhost/api/checkins\", {\n method: \"POST\",\n body: JSON.stringify(requestBody),\n headers: { \"Content-Type\": \"application/json\" },\n });\n\n const body = await req.json();\n const lat = parseFloat(body.place.latitude);\n assertEquals(isNaN(lat), true);\n});\n\nDeno.test(\"Checkin API - POST /api/checkins with boundary coordinates succeeds\", async () => {\n const requestBody = {\n place: {\n name: \"North Pole\",\n latitude: 90, // Boundary\n longitude: 0,\n tags: {},\n },\n message: \"At the top of the world!\",\n };\n\n const req = createAuthenticatedRequest(\"http://localhost/api/checkins\", {\n method: \"POST\",\n body: JSON.stringify(requestBody),\n headers: { \"Content-Type\": \"application/json\" },\n });\n\n const body = await req.json();\n assertEquals(body.place.latitude, 90);\n assertEquals(Math.abs(body.place.latitude) <= 90, true);\n});\n\nDeno.test(\"Checkin API - POST /api/checkins with optional message\", async () => {\n const requestBody = {\n place: {\n name: \"Test Cafe\",\n latitude: 40.7128,\n longitude: -74.0060,\n tags: { amenity: \"cafe\" },\n },\n // No message field\n };\n\n const req = createAuthenticatedRequest(\"http://localhost/api/checkins\", {\n method: \"POST\",\n body: JSON.stringify(requestBody),\n headers: { \"Content-Type\": \"application/json\" },\n });\n\n const body = await req.json();\n // Message should be optional\n assertEquals(body.message, undefined);\n});\n\nDeno.test(\"Checkin API - DELETE /api/checkins/:did/:rkey with valid auth succeeds\", () => {\n const did = \"did:plc:testuser123\";\n const rkey = \"3k2xyz123\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${did}/${rkey}`,\n { method: \"DELETE\" },\n );\n\n // Verify URL params can be extracted\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n\n assertEquals(pathParts[3], did);\n assertEquals(pathParts[4], rkey);\n});\n\nDeno.test(\"Checkin API - DELETE /api/checkins/:did/:rkey without auth returns 401\", () => {\n const did = \"did:plc:testuser123\";\n const rkey = \"3k2xyz123\";\n\n const req = new Request(\n `http://localhost/api/checkins/${did}/${rkey}`,\n { method: \"DELETE\" },\n );\n\n // No auth headers\n assertEquals(req.headers.get(\"Authorization\"), null);\n assertEquals(req.headers.get(\"Cookie\"), null);\n});\n\nDeno.test(\"Checkin API - DELETE /api/checkins/:did/:rkey with wrong user returns 403\", () => {\n const targetDid = \"did:plc:otheruser456\"; // Different from authenticated user\n const rkey = \"3k2xyz123\";\n\n const _req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${targetDid}/${rkey}`,\n { method: \"DELETE\" },\n );\n\n // Extract authenticated DID (would come from session) and target DID from URL\n const authenticatedDid: string = \"did:plc:testuser123\";\n const targetDidFromUrl: string = targetDid;\n\n // Verify ownership check would fail (using any to bypass TS literal type check)\n assertEquals((authenticatedDid as any) === (targetDidFromUrl as any), false);\n});\n\nDeno.test(\"Checkin API - DELETE /api/checkins/:did/:rkey with invalid DID format returns 400\", () => {\n const invalidDid = \"not-a-valid-did\";\n const rkey = \"3k2xyz123\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${invalidDid}/${rkey}`,\n { method: \"DELETE\" },\n );\n\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n const did = pathParts[3];\n\n // Verify DID format\n assertEquals(did.startsWith(\"did:\"), false);\n});\n\nDeno.test(\"Checkin API - DELETE /api/checkins/:did/:rkey with missing rkey returns 400\", () => {\n const did = \"did:plc:testuser123\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${did}/`, // Trailing slash, no rkey\n { method: \"DELETE\" },\n );\n\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n const rkey = pathParts[4];\n\n // Rkey should be empty or undefined\n assertEquals(!rkey || rkey === \"\", true);\n});\n\nDeno.test(\"Checkin API - DELETE /api/checkins/:did/:rkey with missing DID returns 400\", () => {\n const rkey = \"3k2xyz123\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins//${rkey}`, // Double slash, no DID\n { method: \"DELETE\" },\n );\n\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n const did = pathParts[3];\n\n // DID should be empty or undefined\n assertEquals(!did || did === \"\", true);\n});\n\nDeno.test(\"Checkin API - Authentication via Bearer token (mobile)\", () => {\n const req = new Request(\"http://localhost/api/checkins\", {\n method: \"POST\",\n headers: {\n \"Authorization\": \"Bearer mock-bearer-token-valid\",\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n place: {\n name: \"Test\",\n latitude: 0,\n longitude: 0,\n tags: {},\n },\n }),\n });\n\n const authHeader = req.headers.get(\"Authorization\");\n assertExists(authHeader);\n assertEquals(authHeader.startsWith(\"Bearer \"), true);\n});\n\nDeno.test(\"Checkin API - Authentication via Cookie (web)\", () => {\n const req = new Request(\"http://localhost/api/checkins\", {\n method: \"POST\",\n headers: {\n \"Cookie\": \"session=mock-session-cookie\",\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n place: {\n name: \"Test\",\n latitude: 0,\n longitude: 0,\n tags: {},\n },\n }),\n });\n\n const cookieHeader = req.headers.get(\"Cookie\");\n assertExists(cookieHeader);\n assertEquals(cookieHeader.includes(\"session=\"), true);\n});\n\nDeno.test(\"Checkin API - Bearer token takes precedence over cookie\", () => {\n const req = new Request(\"http://localhost/api/checkins\", {\n method: \"POST\",\n headers: {\n \"Authorization\": \"Bearer mock-bearer-token-valid\",\n \"Cookie\": \"session=mock-session-cookie\",\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n place: {\n name: \"Test\",\n latitude: 0,\n longitude: 0,\n tags: {},\n },\n }),\n });\n\n // Both present, bearer should be checked first\n assertEquals(req.headers.has(\"Authorization\"), true);\n assertEquals(req.headers.has(\"Cookie\"), true);\n});\n\nDeno.test(\"Checkin API - Response includes shareableId and shareableUrl\", () => {\n // Mock successful creation response structure\n const mockResponse = {\n success: true,\n checkinUri: \"at://did:plc:test/app.dropanchor.checkin/3k2xyz\",\n addressUri: \"at://did:plc:test/community.lexicon.location.address/3k2abc\",\n shareableId: \"3k2xyz\",\n shareableUrl: \"https://dropanchor.app/checkin/3k2xyz\",\n };\n\n assertExists(mockResponse.shareableId);\n assertExists(mockResponse.shareableUrl);\n assertEquals(\n mockResponse.shareableUrl.includes(mockResponse.shareableId),\n true,\n );\n assertEquals(\n mockResponse.shareableUrl.startsWith(\"https://dropanchor.app/checkin/\"),\n true,\n );\n});\n\nDeno.test(\"Checkin API - DELETE success response structure\", () => {\n // Mock successful deletion response structure\n const mockResponse = {\n success: true,\n };\n\n assertEquals(mockResponse.success, true);\n});\n\nDeno.test(\"Checkin API - CORS headers present on responses\", () => {\n const corsHeaders = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, DELETE, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Cookie, Authorization\",\n \"Content-Type\": \"application/json\",\n };\n\n // Verify CORS headers structure\n assertEquals(corsHeaders[\"Access-Control-Allow-Origin\"], \"*\");\n assertExists(corsHeaders[\"Access-Control-Allow-Methods\"]);\n assertEquals(\n corsHeaders[\"Access-Control-Allow-Methods\"].includes(\"POST\"),\n true,\n );\n assertEquals(\n corsHeaders[\"Access-Control-Allow-Methods\"].includes(\"DELETE\"),\n true,\n );\n});\n\nDeno.test(\"Checkin API - POST /api/checkins with image attachment via multipart/form-data\", () => {\n // Create a minimal JPEG image for testing\n const jpegData = new Uint8Array([\n 0xFF,\n 0xD8, // SOI\n 0xFF,\n 0xC0, // SOF0\n 0x00,\n 0x0B, // Length\n 0x08, // Precision\n 0x00,\n 0x10, // Height\n 0x00,\n 0x10, // Width\n 0x01, // Components\n 0x01, // Component ID\n 0x11, // Sampling\n 0x00, // Quantization\n 0xFF,\n 0xD9, // EOI\n ]);\n\n // Create FormData with place, message, and image\n const formData = new FormData();\n formData.append(\n \"place\",\n JSON.stringify({\n name: \"Test Cafe with Photo\",\n latitude: 40.7128,\n longitude: -74.0060,\n tags: { amenity: \"cafe\" },\n }),\n );\n formData.append(\"message\", \"Great coffee with a photo!\");\n formData.append(\n \"image\",\n new Blob([jpegData], { type: \"image/jpeg\" }),\n \"test.jpg\",\n );\n formData.append(\"imageAlt\", \"A nice cup of coffee\");\n\n const req = createAuthenticatedRequest(\"http://localhost/api/checkins\", {\n method: \"POST\",\n body: formData,\n });\n\n // Verify request has multipart form data content type\n const contentType = req.headers.get(\"Content-Type\");\n assertExists(contentType);\n assertEquals(contentType?.includes(\"multipart/form-data\"), true);\n});\n\n/**\n * CRITICAL TEST: Validate API response structure matches lexicon\n * This test caught the bug where image field was incorrectly structured\n */\nDeno.test(\"Checkin API - GET /api/checkins/:did/:rkey returns lexicon-compliant structure\", async () => {\n // Mock a checkin with all fields including image\n const mockCheckin = {\n uri: \"at://did:plc:test123/app.dropanchor.checkin/3k2abc\",\n cid: \"bafytest\",\n value: {\n $type: \"app.dropanchor.checkin\",\n text: \"Coffee with photo\",\n createdAt: \"2024-01-15T10:30:00Z\",\n coordinates: {\n latitude: \"52.0808\",\n longitude: \"4.3629\",\n },\n addressRef: {\n uri: \"at://did:plc:test123/community.lexicon.location.address/xyz\",\n cid: \"bafyaddr\",\n },\n category: \"cafe\",\n categoryGroup: \"food_and_drink\",\n categoryIcon: \"☕\",\n // IMPORTANT: Image structure according to lexicon\n image: {\n thumb: {\n $type: \"blob\",\n ref: { $link: \"bafythumb123\" },\n mimeType: \"image/jpeg\",\n size: 150000,\n },\n fullsize: {\n $type: \"blob\",\n ref: { $link: \"bafyfull456\" },\n mimeType: \"image/jpeg\",\n size: 1000000,\n },\n alt: \"A nice cup of coffee\",\n },\n },\n };\n\n // Mock fetch to return this checkin\n globalThis.fetch = ((_url: string | URL | Request) => {\n const url = _url.toString();\n if (url.includes(\"getRecord\") && url.includes(\"app.dropanchor.checkin\")) {\n return Promise.resolve(\n new Response(JSON.stringify(mockCheckin), {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n }),\n );\n }\n if (url.includes(\"plc.directory\")) {\n return Promise.resolve(\n new Response(\n JSON.stringify({\n service: [{\n id: \"#atproto_pds\",\n type: \"AtprotoPersonalDataServer\",\n serviceEndpoint: \"https://bsky.social\",\n }],\n }),\n { status: 200 },\n ),\n );\n }\n if (url.includes(\"xrpc/com.atproto.identity.resolveHandle\")) {\n return Promise.resolve(\n new Response(JSON.stringify({ did: \"did:plc:test123\" }), {\n status: 200,\n }),\n );\n }\n if (url.includes(\"app.bsky.actor.getProfile\")) {\n return Promise.resolve(\n new Response(\n JSON.stringify({\n handle: \"test.bsky.social\",\n displayName: \"Test User\",\n }),\n { status: 200 },\n ),\n );\n }\n return Promise.resolve(new Response(\"\", { status: 404 }));\n }) as typeof fetch;\n\n // Import and call the actual API handler\n const { getCheckinByDidAndRkey } = await import(\n \"../../backend/api/user-checkins.ts\"\n );\n\n const corsHeaders = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"GET, POST, DELETE, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type, Cookie, Authorization\",\n \"Content-Type\": \"application/json\",\n };\n\n const response = await getCheckinByDidAndRkey(\n \"did:plc:test123\",\n \"3k2abc\",\n corsHeaders,\n );\n\n assertEquals(response.status, 200);\n\n const data = await response.json();\n const checkin = data.checkin;\n\n // Validate basic structure\n assertExists(checkin);\n assertEquals(checkin.id, \"3k2abc\");\n assertEquals(checkin.text, \"Coffee with photo\");\n assertEquals(typeof checkin.coordinates.latitude, \"number\");\n assertEquals(typeof checkin.coordinates.longitude, \"number\");\n\n // CRITICAL: Validate image URLs are properly constructed\n assertExists(checkin.image, \"Image field should exist\");\n assertExists(checkin.image.thumbUrl, \"Image should have thumbUrl\");\n assertExists(checkin.image.fullsizeUrl, \"Image should have fullsizeUrl\");\n\n // Validate URLs are properly formatted\n assertEquals(\n checkin.image.thumbUrl.includes(\"/xrpc/com.atproto.sync.getBlob\"),\n true,\n \"thumbUrl should be a proper blob URL\",\n );\n assertEquals(\n checkin.image.thumbUrl.includes(\"did=did:plc:test123\"),\n true,\n \"thumbUrl should include DID\",\n );\n assertEquals(\n checkin.image.thumbUrl.includes(\"cid=bafythumb123\"),\n true,\n \"thumbUrl should include CID\",\n );\n\n assertEquals(\n checkin.image.fullsizeUrl.includes(\"/xrpc/com.atproto.sync.getBlob\"),\n true,\n \"fullsizeUrl should be a proper blob URL\",\n );\n assertEquals(\n checkin.image.fullsizeUrl.includes(\"cid=bafyfull456\"),\n true,\n \"fullsizeUrl should include CID\",\n );\n\n // Validate optional alt text\n assertEquals(checkin.image.alt, \"A nice cup of coffee\");\n\n // Validate category fields\n assertEquals(checkin.category, \"cafe\");\n assertEquals(checkin.categoryGroup, \"food_and_drink\");\n assertEquals(checkin.categoryIcon, \"☕\");\n});\n",[],[954,977,992],{"_103":1000,"_95":1001,"_155":1002,"_157":978,"_158":140,"_159":1003,"_161":162,"_105":1004,"_100":120,"_164":246,"_166":1005,"_167":22,"_168":-5,"_169":1006,"_98":1007},"0633f3e6-a67b-11f0-976a-0224a6c84d84","comments-api.test.ts","200da4ee-a5d9-11f0-af71-0224a6c84d84",1365,["D",1760170776361],"// Integration tests for comments API endpoints\n// Tests full request/response cycles with mocked dependencies\n\nimport {\n assertEquals,\n assertExists,\n} from \"https://deno.land/std@0.208.0/assert/mod.ts\";\n\n// Mock OAuth session data for testing\ninterface MockOAuthSession {\n did: string;\n handle: string;\n pdsUrl: string;\n accessToken: string;\n dpopPrivateKeyJWK?: any;\n dpopPublicKeyJWK?: any;\n makeRequest: (\n method: string,\n url: string,\n options?: any,\n ) => Promise;\n}\n\n// Create a mock OAuth session for testing\nfunction _createMockOAuthSession(did: string): MockOAuthSession {\n return {\n did,\n handle: \"testuser.bsky.social\",\n pdsUrl: \"https://test-pds.com\",\n accessToken: \"mock-access-token-12345\",\n dpopPrivateKeyJWK: {\n kty: \"EC\",\n crv: \"P-256\",\n x: \"test-x-value\",\n y: \"test-y-value\",\n d: \"test-d-value\",\n },\n dpopPublicKeyJWK: {\n kty: \"EC\",\n crv: \"P-256\",\n x: \"test-x-value\",\n y: \"test-y-value\",\n },\n makeRequest: (_method: string, url: string, _options?: any) => {\n // Mock successful PDS responses for comments\n if (url.includes(\"createRecord\") && url.includes(\"comment\")) {\n // const body = JSON.parse(options?.body || \"{}\");\n\n // Generate mock AT URI based on collection\n const rkey = \"comment\" + Math.random().toString(36).substring(7);\n const uri = `at://${did}/app.dropanchor.comment/${rkey}`;\n const cid =\n \"bafyreicv3pecq6fuua22xcoguxep76otivb33nlaofzl76fpagczo5t5jm\";\n\n return Promise.resolve(\n new Response(JSON.stringify({ uri, cid }), {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n }),\n );\n }\n\n if (url.includes(\"getRecord\") && url.includes(\"checkin\")) {\n // Mock checkin record for comment creation\n return Promise.resolve(\n new Response(\n JSON.stringify({\n uri: `at://${did}/app.dropanchor.checkin/testrkey`,\n cid:\n \"bafyreicv3pecq6fuua22xcoguxep76otivb33nlaofzl76fpagczo5t5jm\",\n value: {\n $type: \"app.dropanchor.checkin\",\n text: \"Test checkin\",\n createdAt: new Date().toISOString(),\n coordinates: { latitude: \"40.7128\", longitude: \"-74.0060\" },\n },\n }),\n {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n },\n ),\n );\n }\n\n if (url.includes(\"listRecords\") && url.includes(\"comment\")) {\n // Mock list of comments\n return Promise.resolve(\n new Response(\n JSON.stringify({\n records: [\n {\n uri: `at://${did}/app.dropanchor.comment/comment1`,\n value: {\n $type: \"app.dropanchor.comment\",\n text: \"Great checkin!\",\n createdAt: new Date().toISOString(),\n checkinRef: {\n uri: `at://${did}/app.dropanchor.checkin/testrkey`,\n cid:\n \"bafyreicv3pecq6fuua22xcoguxep76otivb33nlaofzl76fpagczo5t5jm\",\n },\n },\n },\n ],\n cursor: null,\n }),\n {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n },\n ),\n );\n }\n\n if (url.includes(\"deleteRecord\") && url.includes(\"comment\")) {\n // Mock successful deletion\n return Promise.resolve(new Response(null, { status: 200 }));\n }\n\n // Default mock response\n return Promise.resolve(\n new Response(JSON.stringify({ error: \"Not implemented\" }), {\n status: 500,\n }),\n );\n },\n };\n}\n\n// Test helper: Create a mock request with authentication\nfunction createAuthenticatedRequest(\n url: string,\n options: RequestInit = {},\n authType: \"cookie\" | \"bearer\" = \"cookie\",\n): Request {\n const headers = new Headers(options.headers || {});\n\n if (authType === \"cookie\") {\n headers.set(\"Cookie\", \"session=mock-session-cookie\");\n } else {\n headers.set(\"Authorization\", \"Bearer mock-bearer-token-valid\");\n }\n\n return new Request(url, {\n ...options,\n headers,\n });\n}\n\n// Test helper: Create a mock request without authentication\nfunction createUnauthenticatedRequest(\n url: string,\n options: RequestInit = {},\n): Request {\n return new Request(url, options);\n}\n\n// Test cases for comments API endpoints\nDeno.test(\"Comments API - GET /api/checkins/:did/:rkey/comments returns comments list\", () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${did}/${rkey}/comments`,\n { method: \"GET\" },\n );\n\n // Verify URL params can be extracted\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n\n assertEquals(pathParts[1], \"api\");\n assertEquals(pathParts[2], \"checkins\");\n assertEquals(pathParts[3], did);\n assertEquals(pathParts[4], rkey);\n assertEquals(pathParts[5], \"comments\");\n});\n\nDeno.test(\"Comments API - POST /api/checkins/:did/:rkey/comments creates comment\", () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${did}/${rkey}/comments`,\n {\n method: \"POST\",\n body: JSON.stringify({ text: \"Great checkin!\" }),\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n\n // Verify URL params can be extracted\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n\n assertEquals(pathParts[1], \"api\");\n assertEquals(pathParts[2], \"checkins\");\n assertEquals(pathParts[3], did);\n assertEquals(pathParts[4], rkey);\n assertEquals(pathParts[5], \"comments\");\n assertEquals(req.method, \"POST\");\n});\n\nDeno.test(\"Comments API - DELETE /api/checkins/:did/:rkey/comments removes comment\", () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${did}/${rkey}/comments`,\n {\n method: \"DELETE\",\n body: JSON.stringify({ commentRkey: \"testcomment\" }),\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n\n // Verify URL params can be extracted\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n\n assertEquals(pathParts[1], \"api\");\n assertEquals(pathParts[2], \"checkins\");\n assertEquals(pathParts[3], did);\n assertEquals(pathParts[4], rkey);\n assertEquals(pathParts[5], \"comments\");\n assertEquals(req.method, \"DELETE\");\n});\n\nDeno.test(\"Comments API - POST /api/checkins/:did/:rkey/comments without auth returns 401\", () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = createUnauthenticatedRequest(\n `http://localhost/api/checkins/${did}/${rkey}/comments`,\n {\n method: \"POST\",\n body: JSON.stringify({ text: \"Great checkin!\" }),\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n\n // No auth headers\n assertEquals(req.headers.get(\"Authorization\"), null);\n assertEquals(req.headers.get(\"Cookie\"), null);\n});\n\nDeno.test(\"Comments API - DELETE /api/checkins/:did/:rkey/comments without auth returns 401\", () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = createUnauthenticatedRequest(\n `http://localhost/api/checkins/${did}/${rkey}/comments`,\n {\n method: \"DELETE\",\n body: JSON.stringify({ commentRkey: \"testcomment\" }),\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n\n // No auth headers\n assertEquals(req.headers.get(\"Authorization\"), null);\n assertEquals(req.headers.get(\"Cookie\"), null);\n});\n\nDeno.test(\"Comments API - POST /api/checkins/:did/:rkey/comments with empty text returns 400\", async () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${did}/${rkey}/comments`,\n {\n method: \"POST\",\n body: JSON.stringify({ text: \"\" }), // Empty text\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n\n const body = await req.json();\n assertEquals(body.text, \"\");\n});\n\nDeno.test(\"Comments API - POST /api/checkins/:did/:rkey/comments with missing text returns 400\", async () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${did}/${rkey}/comments`,\n {\n method: \"POST\",\n body: JSON.stringify({}), // Missing text field\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n\n const body = await req.json();\n assertEquals(body.text, undefined);\n});\n\nDeno.test(\"Comments API - POST /api/checkins/:did/:rkey/comments with too long text returns 400\", async () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n // Create text longer than 1000 characters\n const longText = \"a\".repeat(1001);\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${did}/${rkey}/comments`,\n {\n method: \"POST\",\n body: JSON.stringify({ text: longText }),\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n\n const body = await req.json();\n assertEquals(body.text.length > 1000, true);\n});\n\nDeno.test(\"Comments API - GET /api/checkins/:did/:rkey/comments with invalid DID format returns 400\", () => {\n const invalidDid = \"not-a-valid-did\";\n const rkey = \"testrkey\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${invalidDid}/${rkey}/comments`,\n { method: \"GET\" },\n );\n\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n const did = pathParts[3];\n\n // Verify DID format\n assertEquals(did.startsWith(\"did:\"), false);\n});\n\nDeno.test(\"Comments API - GET /api/checkins/:did/:rkey/comments with missing rkey returns 400\", () => {\n const did = \"did:plc:testuser\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${did}//comments`, // Double slash, no rkey\n { method: \"GET\" },\n );\n\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n const rkey = pathParts[4];\n\n // Rkey should be empty or undefined\n assertEquals(!rkey || rkey === \"\", true);\n});\n\nDeno.test(\"Comments API - GET /api/checkins/:did/:rkey/comments with missing DID returns 400\", () => {\n const rkey = \"testrkey\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins//${rkey}/comments`, // Double slash, no DID\n { method: \"GET\" },\n );\n\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n const did = pathParts[3];\n\n // DID should be empty or undefined\n assertEquals(!did || did === \"\", true);\n});\n\nDeno.test(\"Comments API - Authentication via Bearer token (mobile)\", () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = new Request(\n `http://localhost/api/checkins/${did}/${rkey}/comments`,\n {\n method: \"POST\",\n headers: {\n \"Authorization\": \"Bearer mock-bearer-token-valid\",\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ text: \"Great checkin!\" }),\n },\n );\n\n const authHeader = req.headers.get(\"Authorization\");\n assertExists(authHeader);\n assertEquals(authHeader.startsWith(\"Bearer \"), true);\n});\n\nDeno.test(\"Comments API - Authentication via Cookie (web)\", () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = new Request(\n `http://localhost/api/checkins/${did}/${rkey}/comments`,\n {\n method: \"POST\",\n headers: {\n \"Cookie\": \"session=mock-session-cookie\",\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ text: \"Great checkin!\" }),\n },\n );\n\n const cookieHeader = req.headers.get(\"Cookie\");\n assertExists(cookieHeader);\n assertEquals(cookieHeader.includes(\"session=\"), true);\n});\n\nDeno.test(\"Comments API - CORS headers present on responses\", () => {\n // Test that CORS headers are properly set on responses\n // (In a real implementation, we'd test the actual response headers)\n\n assertEquals(true, true); // Placeholder assertion\n});\n\nDeno.test(\"Comments API - Response includes proper content type\", () => {\n // Test that responses include proper JSON content type\n // (In a real implementation, we'd test the actual response content type)\n\n assertEquals(true, true); // Placeholder assertion\n});\n\nDeno.test(\"Comments API - Error responses include proper status codes\", () => {\n // Test that error responses use appropriate HTTP status codes\n // (In a real implementation, we'd test the actual status codes)\n\n assertEquals(true, true); // Placeholder assertion\n});\n\nDeno.test(\"Comments API - Success responses include expected data structure\", () => {\n // Test that success responses include the expected data structure\n // (In a real implementation, we'd test the actual response structure)\n\n assertEquals(true, true); // Placeholder assertion\n});\n\nDeno.test(\"Comments API - Comments are sorted by creation time (newest first)\", () => {\n // Test that comments are properly sorted by creation time\n // (In a real implementation, we'd test the actual sorting)\n\n assertEquals(true, true); // Placeholder assertion\n});\n",[],[954,977,1001],{"_103":1009,"_95":1010,"_155":1011,"_157":978,"_158":140,"_159":1012,"_161":162,"_105":1013,"_100":120,"_164":246,"_166":1014,"_167":22,"_168":-5,"_169":1015,"_98":1016},"063a7810-a67b-11f0-94eb-0224a6c84d84","likes-api.test.ts","2019e84e-a5d9-11f0-8bea-0224a6c84d84",1366,["D",1760170776368],"// Integration tests for likes API endpoints\n// Tests full request/response cycles with mocked dependencies\n\nimport {\n assertEquals,\n assertExists,\n} from \"https://deno.land/std@0.208.0/assert/mod.ts\";\n\n// Mock OAuth session data for testing\ninterface MockOAuthSession {\n did: string;\n handle: string;\n pdsUrl: string;\n accessToken: string;\n dpopPrivateKeyJWK?: any;\n dpopPublicKeyJWK?: any;\n makeRequest: (\n method: string,\n url: string,\n options?: any,\n ) => Promise;\n}\n\n// Create a mock OAuth session for testing\nfunction _createMockOAuthSession(did: string): MockOAuthSession {\n return {\n did,\n handle: \"testuser.bsky.social\",\n pdsUrl: \"https://test-pds.com\",\n accessToken: \"mock-access-token-12345\",\n dpopPrivateKeyJWK: {\n kty: \"EC\",\n crv: \"P-256\",\n x: \"test-x-value\",\n y: \"test-y-value\",\n d: \"test-d-value\",\n },\n dpopPublicKeyJWK: {\n kty: \"EC\",\n crv: \"P-256\",\n x: \"test-x-value\",\n y: \"test-y-value\",\n },\n makeRequest: (_method: string, url: string, _options?: any) => {\n // Mock successful PDS responses for likes\n if (url.includes(\"createRecord\") && url.includes(\"like\")) {\n // const body = JSON.parse(options?.body || \"{}\");\n\n // Generate mock AT URI based on collection\n const rkey = \"like\" + Math.random().toString(36).substring(7);\n const uri = `at://${did}/app.dropanchor.like/${rkey}`;\n const cid =\n \"bafyreicv3pecq6fuua22xcoguxep76otivb33nlaofzl76fpagczo5t5jm\";\n\n return Promise.resolve(\n new Response(JSON.stringify({ uri, cid }), {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n }),\n );\n }\n\n if (url.includes(\"getRecord\") && url.includes(\"checkin\")) {\n // Mock checkin record for like creation\n return Promise.resolve(\n new Response(\n JSON.stringify({\n uri: `at://${did}/app.dropanchor.checkin/testrkey`,\n cid:\n \"bafyreicv3pecq6fuua22xcoguxep76otivb33nlaofzl76fpagczo5t5jm\",\n value: {\n $type: \"app.dropanchor.checkin\",\n text: \"Test checkin\",\n createdAt: new Date().toISOString(),\n coordinates: { latitude: \"40.7128\", longitude: \"-74.0060\" },\n },\n }),\n {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n },\n ),\n );\n }\n\n if (url.includes(\"listRecords\") && url.includes(\"like\")) {\n // Mock list of likes\n return Promise.resolve(\n new Response(\n JSON.stringify({\n records: [\n {\n uri: `at://${did}/app.dropanchor.like/like1`,\n value: {\n $type: \"app.dropanchor.like\",\n createdAt: new Date().toISOString(),\n checkinRef: {\n uri: `at://${did}/app.dropanchor.checkin/testrkey`,\n cid:\n \"bafyreicv3pecq6fuua22xcoguxep76otivb33nlaofzl76fpagczo5t5jm\",\n },\n },\n },\n ],\n cursor: null,\n }),\n {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n },\n ),\n );\n }\n\n if (url.includes(\"deleteRecord\") && url.includes(\"like\")) {\n // Mock successful deletion\n return Promise.resolve(new Response(null, { status: 200 }));\n }\n\n // Default mock response\n return Promise.resolve(\n new Response(JSON.stringify({ error: \"Not implemented\" }), {\n status: 500,\n }),\n );\n },\n };\n}\n\n// Test helper: Create a mock request with authentication\nfunction createAuthenticatedRequest(\n url: string,\n options: RequestInit = {},\n authType: \"cookie\" | \"bearer\" = \"cookie\",\n): Request {\n const headers = new Headers(options.headers || {});\n\n if (authType === \"cookie\") {\n headers.set(\"Cookie\", \"session=mock-session-cookie\");\n } else {\n headers.set(\"Authorization\", \"Bearer mock-bearer-token-valid\");\n }\n\n return new Request(url, {\n ...options,\n headers,\n });\n}\n\n// Test helper: Create a mock request without authentication\nfunction createUnauthenticatedRequest(\n url: string,\n options: RequestInit = {},\n): Request {\n return new Request(url, options);\n}\n\n// Test cases for likes API endpoints\nDeno.test(\"Likes API - GET /api/checkins/:did/:rkey/likes returns likes list\", () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${did}/${rkey}/likes`,\n { method: \"GET\" },\n );\n\n // Verify URL params can be extracted\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n\n assertEquals(pathParts[1], \"api\");\n assertEquals(pathParts[2], \"checkins\");\n assertEquals(pathParts[3], did);\n assertEquals(pathParts[4], rkey);\n assertEquals(pathParts[5], \"likes\");\n});\n\nDeno.test(\"Likes API - POST /api/checkins/:did/:rkey/likes creates like\", () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${did}/${rkey}/likes`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n\n // Verify URL params can be extracted\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n\n assertEquals(pathParts[1], \"api\");\n assertEquals(pathParts[2], \"checkins\");\n assertEquals(pathParts[3], did);\n assertEquals(pathParts[4], rkey);\n assertEquals(pathParts[5], \"likes\");\n assertEquals(req.method, \"POST\");\n});\n\nDeno.test(\"Likes API - DELETE /api/checkins/:did/:rkey/likes removes like\", () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${did}/${rkey}/likes`,\n {\n method: \"DELETE\",\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n\n // Verify URL params can be extracted\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n\n assertEquals(pathParts[1], \"api\");\n assertEquals(pathParts[2], \"checkins\");\n assertEquals(pathParts[3], did);\n assertEquals(pathParts[4], rkey);\n assertEquals(pathParts[5], \"likes\");\n assertEquals(req.method, \"DELETE\");\n});\n\nDeno.test(\"Likes API - POST /api/checkins/:did/:rkey/likes without auth returns 401\", () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = createUnauthenticatedRequest(\n `http://localhost/api/checkins/${did}/${rkey}/likes`,\n {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n\n // No auth headers\n assertEquals(req.headers.get(\"Authorization\"), null);\n assertEquals(req.headers.get(\"Cookie\"), null);\n});\n\nDeno.test(\"Likes API - DELETE /api/checkins/:did/:rkey/likes without auth returns 401\", () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = createUnauthenticatedRequest(\n `http://localhost/api/checkins/${did}/${rkey}/likes`,\n {\n method: \"DELETE\",\n headers: { \"Content-Type\": \"application/json\" },\n },\n );\n\n // No auth headers\n assertEquals(req.headers.get(\"Authorization\"), null);\n assertEquals(req.headers.get(\"Cookie\"), null);\n});\n\nDeno.test(\"Likes API - GET /api/checkins/:did/:rkey/likes with invalid DID format returns 400\", () => {\n const invalidDid = \"not-a-valid-did\";\n const rkey = \"testrkey\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${invalidDid}/${rkey}/likes`,\n { method: \"GET\" },\n );\n\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n const did = pathParts[3];\n\n // Verify DID format\n assertEquals(did.startsWith(\"did:\"), false);\n});\n\nDeno.test(\"Likes API - GET /api/checkins/:did/:rkey/likes with missing rkey returns 400\", () => {\n const did = \"did:plc:testuser\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins/${did}//likes`, // Double slash, no rkey\n { method: \"GET\" },\n );\n\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n const rkey = pathParts[4];\n\n // Rkey should be empty or undefined\n assertEquals(!rkey || rkey === \"\", true);\n});\n\nDeno.test(\"Likes API - GET /api/checkins/:did/:rkey/likes with missing DID returns 400\", () => {\n const rkey = \"testrkey\";\n\n const req = createAuthenticatedRequest(\n `http://localhost/api/checkins//${rkey}/likes`, // Double slash, no DID\n { method: \"GET\" },\n );\n\n const url = new URL(req.url);\n const pathParts = url.pathname.split(\"/\");\n const did = pathParts[3];\n\n // DID should be empty or undefined\n assertEquals(!did || did === \"\", true);\n});\n\nDeno.test(\"Likes API - Authentication via Bearer token (mobile)\", () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = new Request(\n `http://localhost/api/checkins/${did}/${rkey}/likes`,\n {\n method: \"POST\",\n headers: {\n \"Authorization\": \"Bearer mock-bearer-token-valid\",\n \"Content-Type\": \"application/json\",\n },\n },\n );\n\n const authHeader = req.headers.get(\"Authorization\");\n assertExists(authHeader);\n assertEquals(authHeader.startsWith(\"Bearer \"), true);\n});\n\nDeno.test(\"Likes API - Authentication via Cookie (web)\", () => {\n const did = \"did:plc:testuser\";\n const rkey = \"testrkey\";\n\n const req = new Request(\n `http://localhost/api/checkins/${did}/${rkey}/likes`,\n {\n method: \"POST\",\n headers: {\n \"Cookie\": \"session=mock-session-cookie\",\n \"Content-Type\": \"application/json\",\n },\n },\n );\n\n const cookieHeader = req.headers.get(\"Cookie\");\n assertExists(cookieHeader);\n assertEquals(cookieHeader.includes(\"session=\"), true);\n});\n\nDeno.test(\"Likes API - CORS headers present on responses\", () => {\n // Test that CORS headers are properly set on responses\n // (In a real implementation, we'd test the actual response headers)\n\n assertEquals(true, true); // Placeholder assertion\n});\n\nDeno.test(\"Likes API - Response includes proper content type\", () => {\n // Test that responses include proper JSON content type\n // (In a real implementation, we'd test the actual response content type)\n\n assertEquals(true, true); // Placeholder assertion\n});\n\nDeno.test(\"Likes API - Error responses include proper status codes\", () => {\n // Test that error responses use appropriate HTTP status codes\n // (In a real implementation, we'd test the actual status codes)\n\n assertEquals(true, true); // Placeholder assertion\n});\n\nDeno.test(\"Likes API - Success responses include expected data structure\", () => {\n // Test that success responses include the expected data structure\n // (In a real implementation, we'd test the actual response structure)\n\n assertEquals(true, true); // Placeholder assertion\n});\n",[],[954,977,1010],[954,977],{"_103":1019,"_95":1020,"_155":1021,"_157":955,"_158":140,"_159":1022,"_161":162,"_105":1023,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":1024,"_98":1034},"813eebba-63a8-11f0-b4c9-0224a6c84d84","mocks","813eec96-63a8-11f0-b4c9-0224a6c84d84",149,["D",1752823582243],[1025],{"_103":1026,"_95":1027,"_155":1028,"_157":1021,"_158":140,"_159":1029,"_161":162,"_105":1030,"_100":275,"_164":246,"_166":1031,"_167":22,"_168":-5,"_169":1032,"_98":1033},"2f153e74-6930-11f0-be5b-0224a6c84d84","sqlite-mock.ts","815bf85e-63a8-11f0-a6d7-0224a6c84d84",185,["D",1753431611765],"// Mock SQLite implementation for testing\n// Provides in-memory database functionality without requiring Val Town authentication\n\nexport class MockSQLite {\n private tables: Map = new Map();\n private schemas: Map = new Map();\n\n execute(query: string, params?: any[]): Promise<{ rows?: any[] }> {\n const normalizedQuery = query.trim().toLowerCase();\n\n // Handle CREATE TABLE\n if (normalizedQuery.startsWith(\"create table\")) {\n const tableName = this.extractTableName(query);\n if (tableName) {\n this.tables.set(tableName, []);\n this.schemas.set(tableName, query);\n }\n return Promise.resolve({ rows: [] });\n }\n\n // Handle CREATE INDEX\n if (normalizedQuery.startsWith(\"create index\")) {\n return Promise.resolve({ rows: [] });\n }\n\n // Handle INSERT\n if (normalizedQuery.startsWith(\"insert\")) {\n const tableName = this.extractTableNameFromInsert(query);\n if (tableName && params) {\n const table = this.tables.get(tableName) || [];\n const columns = this.extractColumnsFromInsert(query);\n const row: any = {};\n\n columns.forEach((col, index) => {\n row[col] = params[index];\n });\n\n table.push(row);\n this.tables.set(tableName, table);\n }\n return Promise.resolve({ rows: [] });\n }\n\n // Handle SELECT\n if (normalizedQuery.startsWith(\"select\")) {\n const tableName = this.extractTableNameFromSelect(query);\n if (tableName) {\n let table = this.tables.get(tableName) || [];\n\n // Apply WHERE clause if present\n if (normalizedQuery.includes(\"where\") && params) {\n table = this.applyWhereClause(table, query, params);\n }\n\n // Apply ORDER BY if present\n if (normalizedQuery.includes(\"order by\")) {\n table = this.applyOrderBy(table, query);\n }\n\n // Apply LIMIT if present\n if (normalizedQuery.includes(\"limit\")) {\n table = this.applyLimit(table, query, params);\n }\n\n return Promise.resolve({ rows: table });\n }\n return Promise.resolve({ rows: [] });\n }\n\n // Handle COUNT queries\n if (normalizedQuery.includes(\"count(*)\")) {\n const tableName = this.extractTableNameFromSelect(query);\n if (tableName) {\n const table = this.tables.get(tableName) || [];\n return Promise.resolve({ rows: [{ count: table.length }] });\n }\n return Promise.resolve({ rows: [{ count: 0 }] });\n }\n\n // Handle DELETE\n if (normalizedQuery.startsWith(\"delete\")) {\n const tableName = this.extractTableNameFromDelete(query);\n if (tableName) {\n this.tables.set(tableName, []);\n }\n return Promise.resolve({ rows: [] });\n }\n\n // Handle UPDATE\n if (normalizedQuery.startsWith(\"update\")) {\n const tableName = this.extractTableNameFromUpdate(query);\n if (tableName && params) {\n const table = this.tables.get(tableName) || [];\n // Simple UPDATE implementation - update all rows for testing\n table.forEach((row) => {\n if (query.includes(\"SET author_handle =\")) {\n row.author_handle = params[0];\n }\n });\n this.tables.set(tableName, table);\n }\n return Promise.resolve({ rows: [] });\n }\n\n return Promise.resolve({ rows: [] });\n }\n\n private extractTableName(query: string): string | null {\n const match = query.match(/create table if not exists\\s+(\\w+)/i);\n return match ? match[1] : null;\n }\n\n private extractTableNameFromInsert(query: string): string | null {\n const match = query.match(/insert (?:or ignore )?into\\s+(\\w+)/i);\n return match ? match[1] : null;\n }\n\n private extractTableNameFromSelect(query: string): string | null {\n const match = query.match(/from\\s+(\\w+)/i);\n return match ? match[1] : null;\n }\n\n private extractTableNameFromDelete(query: string): string | null {\n const match = query.match(/delete from\\s+(\\w+)/i);\n return match ? match[1] : null;\n }\n\n private extractTableNameFromUpdate(query: string): string | null {\n const match = query.match(/update\\s+(\\w+)/i);\n return match ? match[1] : null;\n }\n\n private extractColumnsFromInsert(query: string): string[] {\n const match = query.match(/\$([^)]+)\$/);\n if (match) {\n return match[1].split(\",\").map((col) => col.trim());\n }\n return [];\n }\n\n private applyWhereClause(table: any[], query: string, params: any[]): any[] {\n const normalizedQuery = query.toLowerCase();\n\n if (normalizedQuery.includes(\"where did =\")) {\n const did = params[0];\n return table.filter((row) => row.did === did);\n }\n\n if (normalizedQuery.includes(\"where author_did =\")) {\n const did = params[0];\n return table.filter((row) => row.author_did === did);\n }\n\n if (normalizedQuery.includes(\"where id =\")) {\n const id = params[0];\n return table.filter((row) => row.id === id);\n }\n\n if (normalizedQuery.includes(\"where fetched_at <\")) {\n const threshold = params[0];\n return table.filter((row) => row.fetched_at < threshold);\n }\n\n return table;\n }\n\n private applyOrderBy(table: any[], query: string): any[] {\n const normalizedQuery = query.toLowerCase();\n\n if (normalizedQuery.includes(\"order by created_at desc\")) {\n return [...table].sort((a, b) =>\n (b.created_at || \"\").localeCompare(a.created_at || \"\")\n );\n }\n\n if (normalizedQuery.includes(\"order by fetched_at asc\")) {\n return [...table].sort((a, b) =>\n (a.fetched_at || \"\").localeCompare(b.fetched_at || \"\")\n );\n }\n\n return table;\n }\n\n private applyLimit(table: any[], query: string, params?: any[]): any[] {\n const match = query.match(/limit\\s+(\\d+|\\?)/i);\n if (match) {\n const limit = match[1] === \"?\"\n ? params?.[params.length - 1]\n : parseInt(match[1]);\n return table.slice(0, limit);\n }\n return table;\n }\n\n // Helper method to clear all data\n clear() {\n this.tables.clear();\n this.schemas.clear();\n }\n}\n\n// Export singleton instance\nexport const mockSqlite = new MockSQLite();\n",[],[954,1020,1027],[954,1020],{"_103":1036,"_95":1037,"_155":1038,"_157":955,"_158":140,"_159":571,"_161":162,"_105":1039,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":1040,"_98":1095},"573c83c6-58b4-11f0-a3e4-f69ea79377d9","unit","573c8484-58b4-11f0-a3e4-f69ea79377d9",["D",1751619202935],[1041,1050,1059,1068,1077,1086],{"_103":1042,"_95":1043,"_155":1044,"_157":1038,"_158":140,"_159":1045,"_161":162,"_105":1046,"_100":32,"_164":246,"_166":1047,"_167":22,"_168":-5,"_169":1048,"_98":1049},"7f4a7980-7b51-11f0-a247-0224a6c84d84","category-service.test.ts","7f4a7a3e-7b51-11f0-a247-0224a6c84d84",800,["D",1755425040621],"// Test suite for CategoryService\n// Tests centralized category system with metadata and use-case functions\n\nimport {\n assertEquals,\n assertExists,\n} from \"https://deno.land/std@0.208.0/assert/mod.ts\";\nimport { CategoryService } from \"../../backend/services/category-service.ts\";\nimport { PlaceCategoryGroup } from \"../../backend/models/place-models.ts\";\n\nDeno.test(\"CategoryService - Use case specific methods\", () => {\n // Default search categories (when user doesn't specify)\n const defaultSearch = CategoryService.getDefaultSearchCategories();\n assertEquals(defaultSearch.includes(\"amenity=restaurant\"), true);\n assertEquals(defaultSearch.includes(\"amenity=cafe\"), true);\n assertEquals(defaultSearch.includes(\"leisure=fitness_centre\"), true);\n assertEquals(defaultSearch.includes(\"amenity=toilets\"), false); // Should not include on-demand categories\n\n // Socially relevant categories\n const social = CategoryService.getSociallyRelevantCategories();\n assertEquals(social.includes(\"amenity=restaurant\"), true);\n assertEquals(social.includes(\"tourism=attraction\"), true);\n assertEquals(social.includes(\"amenity=hospital\"), false); // Not socially relevant\n\n console.log(\n `Default search: ${defaultSearch.length}, Social: ${social.length}`,\n );\n});\n\nDeno.test(\"CategoryService - Address strategy methods\", () => {\n // Venue address strategy (skip expensive geocoding)\n assertEquals(\n CategoryService.shouldUseVenueAddressStrategy(\"restaurant\"),\n true,\n );\n assertEquals(CategoryService.shouldUseVenueAddressStrategy(\"cafe\"), true);\n assertEquals(CategoryService.shouldUseVenueAddressStrategy(\"bank\"), true);\n assertEquals(CategoryService.shouldUseVenueAddressStrategy(\"park\"), false);\n assertEquals(CategoryService.shouldUseVenueAddressStrategy(\"unknown\"), false);\n\n // Geographic address strategy (use Nominatim)\n assertEquals(\n CategoryService.shouldUseGeographicAddressStrategy(\"park\"),\n true,\n );\n assertEquals(\n CategoryService.shouldUseGeographicAddressStrategy(\"playground\"),\n true,\n );\n assertEquals(\n CategoryService.shouldUseGeographicAddressStrategy(\"attraction\"),\n true,\n );\n assertEquals(\n CategoryService.shouldUseGeographicAddressStrategy(\"restaurant\"),\n false,\n );\n assertEquals(\n CategoryService.shouldUseGeographicAddressStrategy(\"unknown\"),\n false,\n );\n});\n\nDeno.test(\"CategoryService - Backward compatibility\", () => {\n // Should maintain all existing PlaceCategorization methods\n const allCategories = CategoryService.getAllCategories();\n const prioritized = CategoryService.getPrioritizedCategories();\n\n assertEquals(allCategories.length > 40, true);\n assertEquals(prioritized.length > 20, true);\n assertEquals(prioritized.length < allCategories.length, true);\n\n // Category group mapping\n assertEquals(\n CategoryService.getCategoryGroup(\"amenity\", \"cafe\"),\n PlaceCategoryGroup.FOOD_AND_DRINK,\n );\n assertEquals(\n CategoryService.getCategoryGroup(\"leisure\", \"fitness_centre\"),\n PlaceCategoryGroup.SPORTS,\n );\n assertEquals(CategoryService.getCategoryGroup(\"unknown\", \"value\"), null);\n\n // Icon mapping\n assertEquals(CategoryService.getIcon(\"amenity\", \"cafe\"), \"☕\");\n assertEquals(CategoryService.getIcon(\"amenity\", \"restaurant\"), \"🍽️\");\n assertEquals(CategoryService.getIcon(\"unknown\", \"value\"), \"📍\");\n\n // Category objects\n const objects = CategoryService.getAllCategoryObjects();\n assertEquals(objects.length, allCategories.length);\n\n const cafeCategory = objects.find((obj) => obj.id === \"amenity_cafe\");\n assertExists(cafeCategory);\n assertEquals(cafeCategory.name, \"Cafe\");\n assertEquals(cafeCategory.icon, \"☕\");\n assertEquals(cafeCategory.group, PlaceCategoryGroup.FOOD_AND_DRINK);\n\n // Category by ID\n const cafeById = CategoryService.getCategoryById(\"amenity_cafe\");\n assertExists(cafeById);\n assertEquals(cafeById.id, \"amenity_cafe\");\n assertEquals(cafeById.name, \"Cafe\");\n\n assertEquals(CategoryService.getCategoryById(\"invalid\"), null);\n assertEquals(CategoryService.getCategoryById(\"\"), null);\n});\n\nDeno.test(\"CategoryService - Category definitions integrity\", () => {\n const definitions = CategoryService.getAllCategoryDefinitions();\n\n // Should have reasonable number of categories\n assertEquals(definitions.length > 40, true);\n assertEquals(definitions.length < 200, true);\n\n for (const def of definitions) {\n // Required fields\n assertExists(def.tag);\n assertExists(def.value);\n assertExists(def.group);\n assertExists(def.icon);\n assertExists(def.metadata);\n\n // Metadata validation\n assertEquals(typeof def.metadata.includeInDefaultSearch, \"boolean\");\n assertEquals(\n [\"venue\", \"geographic\", \"standard\"].includes(\n def.metadata.addressStrategy,\n ),\n true,\n );\n assertEquals(typeof def.metadata.socialRelevance, \"boolean\");\n\n // Tag/value format validation\n assertEquals(def.tag.length > 0, true);\n assertEquals(def.value.length > 0, true);\n assertEquals(def.icon.length > 0, true);\n\n // Group should be valid enum value\n assertEquals(Object.values(PlaceCategoryGroup).includes(def.group), true);\n }\n});\n\nDeno.test(\"CategoryService - Search inclusion distribution\", () => {\n const definitions = CategoryService.getAllCategoryDefinitions();\n\n const includedCount =\n definitions.filter((def) => def.metadata.includeInDefaultSearch).length;\n const excludedCount =\n definitions.filter((def) => !def.metadata.includeInDefaultSearch).length;\n\n // Should have reasonable distribution\n assertEquals(\n includedCount > 15,\n true,\n \"Should have substantial default search categories\",\n );\n assertEquals(includedCount < 50, true, \"Default search should be focused\");\n assertEquals(\n excludedCount > 5,\n true,\n \"Should have some on-demand categories\",\n );\n\n console.log(\n `Search inclusion - Included: ${includedCount}, Excluded: ${excludedCount}`,\n );\n});\n\nDeno.test(\"CategoryService - Address strategy distribution\", () => {\n const definitions = CategoryService.getAllCategoryDefinitions();\n\n const venueCount =\n definitions.filter((def) => def.metadata.addressStrategy === \"venue\")\n .length;\n const geographicCount =\n definitions.filter((def) => def.metadata.addressStrategy === \"geographic\")\n .length;\n const standardCount =\n definitions.filter((def) => def.metadata.addressStrategy === \"standard\")\n .length;\n\n // Should have reasonable distribution\n assertEquals(\n venueCount > 10,\n true,\n \"Should have substantial venue categories\",\n );\n assertEquals(geographicCount > 5, true, \"Should have geographic categories\");\n\n console.log(\n `Address strategy distribution - Venue: ${venueCount}, Geographic: ${geographicCount}, Standard: ${standardCount}`,\n );\n});\n\nDeno.test(\"CategoryService - Social relevance validation\", () => {\n const definitions = CategoryService.getAllCategoryDefinitions();\n\n const socialCount =\n definitions.filter((def) => def.metadata.socialRelevance).length;\n const nonSocialCount =\n definitions.filter((def) => !def.metadata.socialRelevance).length;\n\n // Should have focused social categories\n assertEquals(\n socialCount > 15,\n true,\n \"Should have substantial social categories\",\n );\n assertEquals(socialCount < 45, true, \"Social categories should be focused\");\n assertEquals(nonSocialCount > 5, true, \"Should have non-social categories\");\n\n // Default search categories should mostly be social\n const defaultSearchSocial =\n definitions.filter((def) =>\n def.metadata.includeInDefaultSearch && def.metadata.socialRelevance\n ).length;\n const defaultSearchTotal =\n definitions.filter((def) => def.metadata.includeInDefaultSearch).length;\n\n assertEquals(\n defaultSearchSocial / defaultSearchTotal > 0.7,\n true,\n \"Most default search categories should be social\",\n );\n\n console.log(\n `Social relevance - Social: ${socialCount}, Non-social: ${nonSocialCount}, Default search social ratio: ${\n Math.round(defaultSearchSocial / defaultSearchTotal * 100)\n }%`,\n );\n});\n",[],[954,1037,1043],{"_103":1051,"_95":1052,"_155":1053,"_157":1038,"_158":140,"_159":1054,"_161":162,"_105":1055,"_100":32,"_164":246,"_166":1056,"_167":22,"_168":-5,"_169":1057,"_98":1058},"97b80164-a030-11f0-a70b-0224a6c84d84","image-service.test.ts","97b80240-a030-11f0-a70b-0224a6c84d84",1260,["D",1759479101269],"import { assertEquals } from \"https://deno.land/std@0.208.0/assert/mod.ts\";\nimport {\n ProcessedImage,\n validateAndProcessImage,\n validateImageType,\n} from \"../../backend/services/image-service.ts\";\n\nDeno.test(\"Image Service - validateImageType\", async (t) => {\n await t.step(\"should validate JPEG magic numbers\", () => {\n const jpegData = new Uint8Array([0xFF, 0xD8, 0xFF, 0xE0, 0x00, 0x10]);\n const result = validateImageType(jpegData);\n assertEquals(result.valid, true);\n assertEquals(result.type, \"image/jpeg\");\n });\n\n await t.step(\"should validate PNG magic numbers\", () => {\n const pngData = new Uint8Array([\n 0x89,\n 0x50,\n 0x4E,\n 0x47,\n 0x0D,\n 0x0A,\n 0x1A,\n 0x0A,\n ]);\n const result = validateImageType(pngData);\n assertEquals(result.valid, true);\n assertEquals(result.type, \"image/png\");\n });\n\n await t.step(\"should validate WebP magic numbers\", () => {\n const webpData = new Uint8Array([\n 0x52,\n 0x49,\n 0x46,\n 0x46,\n 0x00,\n 0x00,\n 0x00,\n 0x00,\n 0x57,\n 0x45,\n 0x42,\n 0x50,\n ]);\n const result = validateImageType(webpData);\n assertEquals(result.valid, true);\n assertEquals(result.type, \"image/webp\");\n });\n\n await t.step(\"should validate GIF magic numbers (GIF87a)\", () => {\n const gifData = new Uint8Array([0x47, 0x49, 0x46, 0x38, 0x37, 0x61]);\n const result = validateImageType(gifData);\n assertEquals(result.valid, true);\n assertEquals(result.type, \"image/gif\");\n });\n\n await t.step(\"should validate GIF magic numbers (GIF89a)\", () => {\n const gifData = new Uint8Array([0x47, 0x49, 0x46, 0x38, 0x39, 0x61]);\n const result = validateImageType(gifData);\n assertEquals(result.valid, true);\n assertEquals(result.type, \"image/gif\");\n });\n\n await t.step(\"should reject invalid image data\", () => {\n const invalidData = new Uint8Array([0x00, 0x00, 0x00, 0x00]);\n const result = validateImageType(invalidData);\n assertEquals(result.valid, false);\n assertEquals(result.type, null);\n });\n\n await t.step(\"should reject empty data\", () => {\n const emptyData = new Uint8Array([]);\n const result = validateImageType(emptyData);\n assertEquals(result.valid, false);\n assertEquals(result.type, null);\n });\n});\n\nDeno.test(\"Image Service - validateAndProcessImage\", async (t) => {\n // Helper to create minimal valid JPEG\n const createMinimalJpeg = (): Uint8Array => {\n // Minimal JPEG: SOI marker (FFD8) + SOF0 marker + EOI marker (FFD9)\n return new Uint8Array([\n 0xFF,\n 0xD8, // SOI\n 0xFF,\n 0xC0, // SOF0\n 0x00,\n 0x0B, // Length\n 0x08, // Precision\n 0x00,\n 0x10, // Height\n 0x00,\n 0x10, // Width\n 0x01, // Components\n 0x01, // Component ID\n 0x11, // Sampling\n 0x00, // Quantization\n 0xFF,\n 0xD9, // EOI\n ]);\n };\n\n await t.step(\"should reject image exceeding max size\", async () => {\n // Create data > 10MB (hard limit)\n const largeData = new Uint8Array(11 * 1024 * 1024);\n largeData[0] = 0xFF;\n largeData[1] = 0xD8;\n largeData[2] = 0xFF;\n\n try {\n await validateAndProcessImage(largeData);\n throw new Error(\"Should have thrown\");\n } catch (error) {\n assertEquals(\n (error as Error).message,\n \"Image too large (max 10MB)\",\n );\n }\n });\n\n await t.step(\"should reject non-image data\", async () => {\n const invalidData = new Uint8Array([0x00, 0x00, 0x00, 0x00]);\n\n try {\n await validateAndProcessImage(invalidData);\n throw new Error(\"Should have thrown\");\n } catch (error) {\n assertEquals(\n (error as Error).message,\n \"Invalid image file. Only JPEG, PNG, WebP, and GIF are supported.\",\n );\n }\n });\n\n await t.step(\"should accept valid JPEG within size limit\", async () => {\n const validJpeg = createMinimalJpeg();\n\n // This will fail in test environment due to lack of Canvas API\n // but we can verify it gets past validation\n try {\n await validateAndProcessImage(validJpeg);\n } catch (error) {\n // Expected to fail due to Canvas API not available in Deno test environment\n // But should fail at processing stage, not validation\n const msg = (error as Error).message;\n assertEquals(\n msg.includes(\"Image too large\") || msg.includes(\"Invalid image file\"),\n false,\n );\n }\n });\n});\n\nDeno.test(\"Image Service - processImage output structure\", async (t) => {\n await t.step(\n \"should produce correct ProcessedImage structure (type test)\",\n () => {\n // This is a compile-time type check more than runtime\n // Verify the interface shape is correct\n const mockResult: ProcessedImage = {\n thumb: new Uint8Array([1, 2, 3]),\n thumbMimeType: \"image/jpeg\",\n fullsize: new Uint8Array([4, 5, 6]),\n fullsizeMimeType: \"image/jpeg\",\n };\n\n assertEquals(mockResult.thumb.length, 3);\n assertEquals(mockResult.thumbMimeType, \"image/jpeg\");\n assertEquals(mockResult.fullsize.length, 3);\n assertEquals(mockResult.fullsizeMimeType, \"image/jpeg\");\n },\n );\n});\n",[],[954,1037,1052],{"_103":1060,"_95":1061,"_155":1062,"_157":1038,"_158":140,"_159":1063,"_161":162,"_105":1064,"_100":120,"_164":246,"_166":1065,"_167":22,"_168":-5,"_169":1066,"_98":1067},"2f3a344a-6930-11f0-a02f-0224a6c84d84","jetstream-retry.test.ts","36c04f34-692f-11f0-96f3-0224a6c84d84",188,["D",1753431612008],"import { assertEquals } from \"https://deno.land/std@0.208.0/assert/mod.ts\";\n\nDeno.test(\"Jetstream Retry Logic\", async (t) => {\n await t.step(\"should retry connection on failure\", async () => {\n let attemptCount = 0;\n const maxRetries = 3;\n\n // Simulate connection attempts with retry logic\n for (let attempt = 1; attempt <= maxRetries; attempt++) {\n try {\n attemptCount++;\n // Simulate failure on first 2 attempts\n if (attempt < 3) {\n throw new Error(\"WebSocket connection failed\");\n }\n // Success on 3rd attempt\n break;\n } catch (_error) {\n if (attempt < maxRetries) {\n // Exponential backoff simulation\n const backoffMs = Math.pow(2, attempt - 1) * 100; // Using 100ms base for test\n await new Promise((resolve) => setTimeout(resolve, backoffMs));\n }\n }\n }\n\n assertEquals(attemptCount, 3, \"Should have attempted 3 times\");\n });\n\n await t.step(\"should use exponential backoff\", async () => {\n const delays: number[] = [];\n const startTime = Date.now();\n\n for (let attempt = 1; attempt <= 3; attempt++) {\n if (attempt > 1) {\n delays.push(Date.now() - startTime);\n }\n const backoffMs = Math.pow(2, attempt - 1) * 100;\n await new Promise((resolve) => setTimeout(resolve, backoffMs));\n }\n\n // Check that delays follow exponential pattern (100ms, 200ms, 400ms)\n assertEquals(delays.length, 2);\n // Allow some tolerance for timing\n assertEquals(\n delays[0] >= 90 && delays[0] <= 110,\n true,\n \"First delay should be ~100ms\",\n );\n assertEquals(\n delays[1] >= 290 && delays[1] <= 310,\n true,\n \"Second delay should be ~300ms total\",\n );\n });\n});\n",[],[954,1037,1061],{"_103":1069,"_95":1070,"_155":1071,"_157":1038,"_158":140,"_159":1072,"_161":162,"_105":1073,"_100":275,"_164":246,"_166":1074,"_167":22,"_168":-5,"_169":1075,"_98":1076},"206fff36-a5d9-11f0-bf63-0224a6c84d84","locationiq-service.test.ts","0b9015be-a14d-11f0-b20b-0224a6c84d84",1344,["D",1760101241886],"/**\n * Unit tests for LocationIQ service\n */\n\nimport { assertEquals } from \"https://deno.land/std@0.224.0/assert/mod.ts\";\n\n// Mock the Deno.env.get function to avoid permission issues\nconst originalEnvGet = Deno.env.get;\nDeno.env.get = (key: string) => {\n if (key === \"LOCATION_IQ_TOKEN\") {\n return \"test-token-for-unit-tests\";\n }\n if (key === \"NOMINATIM_BASE_URL\") {\n return \"https://nominatim.geocoding.ai\";\n }\n return originalEnvGet(key);\n};\n\n// Restore original env.get function after all tests\nglobalThis.addEventListener(\"unload\", () => {\n Deno.env.get = originalEnvGet;\n});\n\nimport { LocationIQService } from \"../../backend/services/locationiq-service.ts\";\n\nDeno.test(\"LocationIQ Service - should generate cache keys with geo-tolerance\", () => {\n // This test verifies the caching behavior by checking that similar coordinates\n // produce the same cache key (within ~100m tolerance)\n\n // Verify the service can be instantiated with a token (set in beforeAll)\n const service = new LocationIQService();\n assertEquals(typeof service, \"object\");\n});\n\nimport { LocationIQProvider } from \"../../backend/services/locationiq-provider.ts\";\n\nDeno.test(\"LocationIQ Provider - should implement PlaceProvider interface\", () => {\n // Fake token is set in beforeAll hook\n const provider = new LocationIQProvider();\n assertEquals(provider.name, \"locationiq\");\n assertEquals(typeof provider.findNearbyPlacesWithDistance, \"function\");\n});\n\nDeno.test(\"LocationIQ Provider - should calculate distance correctly\", () => {\n // Fake token is set in beforeAll hook\n const provider = new LocationIQProvider();\n\n // Test with mock data to verify distance calculation works\n // (We can't test the actual API without making real requests)\n assertEquals(typeof provider, \"object\");\n});\n\nimport { PlaceProviderFactory } from \"../../backend/services/places-provider.ts\";\n\nDeno.test(\"PlaceProviderFactory - should create Overpass provider by default\", async () => {\n const provider = await PlaceProviderFactory.create(\"overpass\");\n assertEquals(provider.name, \"overpass\");\n});\n\nDeno.test(\"PlaceProviderFactory - should create LocationIQ provider when specified\", async () => {\n // Fake token is set in beforeAll hook\n const provider = await PlaceProviderFactory.create(\"locationiq\");\n assertEquals(provider.name, \"locationiq\");\n});\n\nDeno.test(\"PlaceProviderFactory - should default to Overpass for unknown providers\", async () => {\n const provider = await PlaceProviderFactory.create(\"unknown\");\n assertEquals(provider.name, \"overpass\");\n});\n\nDeno.test(\"PlaceProviderFactory - should list available providers\", () => {\n const providers = PlaceProviderFactory.getAvailableProviders();\n assertEquals(providers.includes(\"overpass\"), true);\n assertEquals(providers.includes(\"locationiq\"), true);\n});\n",[],[954,1037,1070],{"_103":1078,"_95":1079,"_155":1080,"_157":1038,"_158":140,"_159":1081,"_161":162,"_105":1082,"_100":741,"_164":246,"_166":1083,"_167":22,"_168":-5,"_169":1084,"_98":1085},"207e6652-a5d9-11f0-afef-0224a6c84d84","nominatim-search.test.ts","c6bcf2d8-8b1a-11f0-b597-0224a6c84d84",1346,["D",1760101241922],"// Test suite for Nominatim search functionality\n// Tests the new places search endpoint and Nominatim service\n\nimport {\n assertEquals,\n assertExists,\n} from \"https://deno.land/std@0.208.0/assert/mod.ts\";\n\n// Mock the Deno.env.get function to avoid permission issues\nconst originalEnvGet = Deno.env.get;\nDeno.env.get = (key: string) => {\n if (key === \"NOMINATIM_BASE_URL\") {\n return \"https://nominatim.geocoding.ai\";\n }\n return originalEnvGet(key);\n};\n\n// Restore original env.get function after all tests\nglobalThis.addEventListener(\"unload\", () => {\n Deno.env.get = originalEnvGet;\n});\n\n// Import after mocking is set up\nimport { NominatimService } from \"../../backend/services/nominatim-service.ts\";\n\nDeno.test(\"NominatimService - Constructor with default config\", () => {\n const service = new NominatimService();\n assertExists(service);\n});\n\nDeno.test(\"NominatimService - Constructor with custom config\", () => {\n const service = new NominatimService({\n baseURL: \"https://custom-nominatim.example.com\",\n timeout: 5000,\n });\n assertExists(service);\n});\n\n// Mock Nominatim API response for testing\nconst mockNominatimResponse = [\n {\n place_id: 12345,\n licence:\n \"Data © OpenStreetMap contributors, ODbL 1.0. https://www.openstreetmap.org/copyright\",\n osm_type: \"node\",\n osm_id: 987654321,\n lat: \"52.080178\",\n lon: \"4.3578971\",\n display_name: \"Test Cafe, Test Street, Test City, Netherlands\",\n class: \"amenity\",\n type: \"cafe\",\n importance: 0.6,\n address: {\n amenity: \"Test Cafe\",\n road: \"Test Street\",\n city: \"Test City\",\n country: \"Netherlands\",\n postcode: \"1234AB\",\n },\n },\n {\n place_id: 67890,\n licence:\n \"Data © OpenStreetMap contributors, ODbL 1.0. https://www.openstreetmap.org/copyright\",\n osm_type: \"way\",\n osm_id: 123456789,\n lat: \"52.081000\",\n lon: \"4.358000\",\n display_name: \"Test Mountain, Netherlands\",\n class: \"natural\",\n type: \"peak\",\n importance: 0.4,\n },\n];\n\n// Mock fetch function for testing\nconst originalFetch = globalThis.fetch;\nfunction mockFetch(url: string, options?: RequestInit): Promise {\n if (url.includes(\"/search\")) {\n return Promise.resolve(\n new Response(JSON.stringify(mockNominatimResponse), {\n status: 200,\n headers: { \"Content-Type\": \"application/json\" },\n }),\n );\n }\n return originalFetch(url, options);\n}\n\nDeno.test(\"NominatimService - searchPlaces with valid query\", async () => {\n // Mock fetch for this test\n globalThis.fetch = mockFetch;\n\n try {\n const service = new NominatimService();\n const results = await service.searchPlaces(\n \"cafe\",\n { latitude: 52.080178, longitude: 4.3578971 },\n { limit: 10 },\n );\n\n assertEquals(results.length, 2);\n\n // Check first result (cafe)\n const cafe = results.find((r) => r.category === \"cafe\");\n assertExists(cafe);\n assertEquals(cafe.name, \"Test Cafe\");\n assertEquals(cafe.icon, \"☕\");\n assertEquals(cafe.elementType, \"node\");\n assertExists(cafe.distanceMeters);\n assertExists(cafe.formattedDistance);\n\n // Check second result (mountain)\n const mountain = results.find((r) => r.category === \"peak\");\n assertExists(mountain);\n assertEquals(mountain.name, \"Test Mountain\");\n assertEquals(mountain.icon, \"⛰️\"); // Mountain icon from CategoryService\n assertEquals(mountain.elementType, \"way\");\n } finally {\n // Restore original fetch\n globalThis.fetch = originalFetch;\n }\n});\n\nDeno.test(\"NominatimService - searchPlaces with country filter\", async () => {\n globalThis.fetch = mockFetch;\n\n try {\n const service = new NominatimService();\n const results = await service.searchPlaces(\n \"restaurant\",\n { latitude: 52.080178, longitude: 4.3578971 },\n { country: \"NL\", limit: 5 },\n );\n\n // Should still get results (mocked)\n assertExists(results);\n assertEquals(Array.isArray(results), true);\n } finally {\n globalThis.fetch = originalFetch;\n }\n});\n\n// Test URL parameter parsing logic (without calling the full API)\nDeno.test(\"Search query validation\", () => {\n // Test basic query validation\n const validQuery = \"cafe near me\";\n assertEquals(validQuery.trim() !== \"\", true);\n\n const emptyQuery = \"\";\n assertEquals(emptyQuery.trim() === \"\", true);\n\n const whitespaceQuery = \" \";\n assertEquals(whitespaceQuery.trim() === \"\", true);\n});\n\nDeno.test(\"Coordinate validation\", () => {\n // Test coordinate range validation\n const validLat = 52.080178;\n const validLng = 4.3578971;\n assertEquals(validLat >= -90 && validLat <= 90, true);\n assertEquals(validLng >= -180 && validLng <= 180, true);\n\n const invalidLat = 91;\n const invalidLng = 181;\n assertEquals(invalidLat >= -90 && invalidLat <= 90, false);\n assertEquals(invalidLng >= -180 && invalidLng <= 180, false);\n});\n\nDeno.test(\"Limit parameter validation\", () => {\n // Test limit parameter handling\n const maxLimit = 25;\n\n const userLimit = 15;\n const actualLimit = Math.min(userLimit, maxLimit);\n assertEquals(actualLimit, 15);\n\n const tooLargeLimit = 50;\n const clampedLimit = Math.min(tooLargeLimit, maxLimit);\n assertEquals(clampedLimit, 25);\n});\n\nDeno.test(\"NominatimService - icon mapping for various OSM types\", () => {\n const service = new NominatimService();\n\n // Test icon mapping through reflection (accessing private method)\n // Note: This tests the logic but can't directly access private methods\n // The icon mapping is tested indirectly through searchPlaces results\n assertEquals(typeof service, \"object\");\n});\n\nDeno.test(\"NominatimService - distance calculation\", () => {\n const service = new NominatimService();\n\n // Test distance formatting indirectly by checking that results have formatted distances\n // Direct testing of private methods isn't possible, but we can verify the output format\n assertEquals(typeof service, \"object\");\n});\n\nDeno.test(\"NominatimService - place name extraction\", () => {\n const service = new NominatimService();\n\n // Test name extraction logic indirectly through searchPlaces\n // The extractPlaceName method is private but its results are visible in the public API\n assertEquals(typeof service, \"object\");\n});\n",[],[954,1037,1079],{"_103":1087,"_95":1088,"_155":1089,"_157":1038,"_158":140,"_159":1090,"_161":162,"_105":1091,"_100":32,"_164":246,"_166":1092,"_167":22,"_168":-5,"_169":1093,"_98":1094},"7f44fd02-7b51-11f0-9b24-0224a6c84d84","place-categorization-comprehensive.test.ts","7f44fdca-7b51-11f0-9b24-0224a6c84d84",799,["D",1755425040614],"// Comprehensive test suite for PlaceCategorization\n// Tests system integrity across all 175+ categories efficiently\n\nimport {\n assertEquals,\n assertExists,\n} from \"https://deno.land/std@0.208.0/assert/mod.ts\";\nimport { PlaceCategorization } from \"../../backend/utils/place-categorization.ts\";\nimport { PlaceCategoryGroup } from \"../../backend/models/place-models.ts\";\n\nDeno.test(\"PlaceCategorization - System integrity validation\", () => {\n const allCategories = PlaceCategorization.getAllCategories();\n const allObjects = PlaceCategorization.getAllCategoryObjects();\n const prioritizedCategories = PlaceCategorization.getPrioritizedCategories();\n\n // Basic counts validation\n assertEquals(\n allCategories.length,\n allObjects.length,\n \"Category count mismatch between getAllCategories() and getAllCategoryObjects()\",\n );\n assertEquals(\n allCategories.length > 170,\n true,\n \"Should have reasonable number of categories (170+)\",\n );\n assertEquals(\n prioritizedCategories.length > 30 && prioritizedCategories.length < 50,\n true,\n \"Prioritized categories should be focused subset\",\n );\n\n // All categories should be properly formatted OSM tags\n for (const category of allCategories) {\n assertEquals(\n category.includes(\"=\"),\n true,\n `Category ${category} should contain '=' for OSM tag format`,\n );\n assertEquals(\n category.split(\"=\").length,\n 2,\n `Category ${category} should have exactly one '=' separator`,\n );\n }\n\n // All prioritized categories should exist in main categories\n const allCategoriesSet = new Set(allCategories);\n for (const prioritized of prioritizedCategories) {\n assertEquals(\n allCategoriesSet.has(prioritized),\n true,\n `Prioritized category ${prioritized} not found in all categories`,\n );\n }\n\n // Categories should be sorted\n const sortedCategories = [...allCategories].sort();\n assertEquals(\n allCategories,\n sortedCategories,\n \"Categories should be sorted alphabetically\",\n );\n});\n\nDeno.test(\"PlaceCategorization - Category object structure validation\", () => {\n const allObjects = PlaceCategorization.getAllCategoryObjects();\n\n for (const categoryObj of allObjects) {\n // Required fields\n assertExists(categoryObj.id, `Category object missing id`);\n assertExists(\n categoryObj.name,\n `Category object ${categoryObj.id} missing name`,\n );\n assertExists(\n categoryObj.icon,\n `Category object ${categoryObj.id} missing icon`,\n );\n assertExists(\n categoryObj.group,\n `Category object ${categoryObj.id} missing group`,\n );\n assertExists(\n categoryObj.osmTag,\n `Category object ${categoryObj.id} missing osmTag`,\n );\n\n // ID format validation (should be tag_value, may have multiple underscores in value)\n assertEquals(\n categoryObj.id.includes(\"_\"),\n true,\n `Category ID ${categoryObj.id} should contain underscore`,\n );\n assertEquals(\n categoryObj.id.split(\"_\").length >= 2,\n true,\n `Category ID ${categoryObj.id} should have at least one underscore`,\n );\n\n // OSM tag format validation\n assertEquals(\n categoryObj.osmTag.includes(\"=\"),\n true,\n `OSM tag ${categoryObj.osmTag} should contain '='`,\n );\n assertEquals(\n categoryObj.osmTag.split(\"=\").length,\n 2,\n `OSM tag ${categoryObj.osmTag} should have exactly one '='`,\n );\n\n // ID should match OSM tag structure (first part before underscore = tag, rest = value)\n const underscoreIndex = categoryObj.id.indexOf(\"_\");\n const idTag = categoryObj.id.substring(0, underscoreIndex);\n const idValue = categoryObj.id.substring(underscoreIndex + 1);\n const [osmTag, osmValue] = categoryObj.osmTag.split(\"=\");\n assertEquals(\n idTag,\n osmTag,\n `ID tag ${idTag} should match OSM tag ${osmTag}`,\n );\n assertEquals(\n idValue,\n osmValue,\n `ID value ${idValue} should match OSM value ${osmValue}`,\n );\n\n // Group should be valid enum value\n assertEquals(\n Object.values(PlaceCategoryGroup).includes(categoryObj.group),\n true,\n `Invalid category group: ${categoryObj.group}`,\n );\n\n // Name should be properly formatted (Title Case)\n assertEquals(\n categoryObj.name.length > 0,\n true,\n `Category name should not be empty for ${categoryObj.id}`,\n );\n assertEquals(\n categoryObj.name[0].toUpperCase(),\n categoryObj.name[0],\n `Category name should start with capital letter: ${categoryObj.name}`,\n );\n }\n});\n\nDeno.test(\"PlaceCategorization - Category group mapping validation\", () => {\n const allObjects = PlaceCategorization.getAllCategoryObjects();\n\n // Group all categories by their tag type\n const categoriesByTag: Record = {};\n for (const obj of allObjects) {\n const [tag] = obj.osmTag.split(\"=\");\n if (!categoriesByTag[tag]) categoriesByTag[tag] = [];\n categoriesByTag[tag].push(obj);\n }\n\n // Validate each major tag type has proper group coverage\n const expectedTags = [\"amenity\", \"leisure\", \"shop\", \"tourism\"];\n for (const tag of expectedTags) {\n assertEquals(\n categoriesByTag[tag]?.length > 0,\n true,\n `Should have categories for ${tag} tag`,\n );\n\n // Each tag type should map to multiple different groups (not all the same)\n const groups = new Set(categoriesByTag[tag].map((c) => c.group));\n assertEquals(\n groups.size > 1,\n true,\n `Tag ${tag} should map to multiple category groups, found: ${\n Array.from(groups)\n }`,\n );\n }\n\n // Food & Drink should be well represented\n const foodAndDrinkCategories = allObjects.filter((obj) =>\n obj.group === PlaceCategoryGroup.FOOD_AND_DRINK\n );\n assertEquals(\n foodAndDrinkCategories.length > 10,\n true,\n \"Should have substantial Food & Drink category coverage\",\n );\n\n // Shopping should be well represented\n const shoppingCategories = allObjects.filter((obj) =>\n obj.group === PlaceCategoryGroup.SHOPPING\n );\n assertEquals(\n shoppingCategories.length > 10,\n true,\n \"Should have substantial Shopping category coverage\",\n );\n});\n\nDeno.test(\"PlaceCategorization - Icon mapping validation\", () => {\n const allObjects = PlaceCategorization.getAllCategoryObjects();\n\n let specificIconCount = 0;\n let defaultIconCount = 0;\n\n for (const obj of allObjects) {\n // Icon should be valid emoji or default\n assertEquals(\n obj.icon.length > 0,\n true,\n `Icon should not be empty for ${obj.id}`,\n );\n\n if (obj.icon === \"📍\") {\n defaultIconCount++;\n } else {\n specificIconCount++;\n // Specific icons should be actual emoji characters (may be multi-codepoint)\n assertEquals(\n obj.icon.length <= 10,\n true,\n `Icon should be reasonable emoji length, got: ${obj.icon} (${obj.icon.length} chars) for ${obj.id}`,\n );\n }\n }\n\n // At least some categories should have specific icons (not all defaults)\n assertEquals(\n specificIconCount > 20,\n true,\n `Should have substantial number of specific icons, found ${specificIconCount}`,\n );\n\n console.log(\n `Icon coverage: ${specificIconCount} specific, ${defaultIconCount} default (${\n Math.round(specificIconCount / allObjects.length * 100)\n }% specific)`,\n );\n});\n\nDeno.test(\"PlaceCategorization - getCategoryGroup method validation\", () => {\n // Test a representative sample of each tag type\n const testCases = [\n {\n tag: \"amenity\",\n value: \"restaurant\",\n expectedGroup: PlaceCategoryGroup.FOOD_AND_DRINK,\n },\n {\n tag: \"amenity\",\n value: \"hospital\",\n expectedGroup: PlaceCategoryGroup.HEALTH,\n },\n {\n tag: \"amenity\",\n value: \"bank\",\n expectedGroup: PlaceCategoryGroup.SERVICES,\n },\n {\n tag: \"leisure\",\n value: \"fitness_centre\",\n expectedGroup: PlaceCategoryGroup.SPORTS,\n },\n { tag: \"leisure\", value: \"park\", expectedGroup: PlaceCategoryGroup.NATURE },\n {\n tag: \"shop\",\n value: \"supermarket\",\n expectedGroup: PlaceCategoryGroup.FOOD_AND_DRINK,\n },\n {\n tag: \"shop\",\n value: \"clothes\",\n expectedGroup: PlaceCategoryGroup.SHOPPING,\n },\n {\n tag: \"tourism\",\n value: \"hotel\",\n expectedGroup: PlaceCategoryGroup.ACCOMMODATION,\n },\n {\n tag: \"tourism\",\n value: \"museum\",\n expectedGroup: PlaceCategoryGroup.CULTURE,\n },\n ];\n\n for (const { tag, value, expectedGroup } of testCases) {\n const result = PlaceCategorization.getCategoryGroup(tag, value);\n assertEquals(\n result,\n expectedGroup,\n `getCategoryGroup(${tag}, ${value}) should return ${expectedGroup}`,\n );\n }\n\n // Test unknown tag/value combinations\n assertEquals(PlaceCategorization.getCategoryGroup(\"unknown\", \"value\"), null);\n assertEquals(\n PlaceCategorization.getCategoryGroup(\"amenity\", \"unknown_value\"),\n PlaceCategoryGroup.SERVICES,\n ); // fallback\n});\n\nDeno.test(\"PlaceCategorization - getCategoryById validation\", () => {\n // Test valid IDs\n const cafeCategory = PlaceCategorization.getCategoryById(\"amenity_cafe\");\n assertExists(cafeCategory);\n assertEquals(cafeCategory.id, \"amenity_cafe\");\n assertEquals(cafeCategory.osmTag, \"amenity=cafe\");\n assertEquals(cafeCategory.group, PlaceCategoryGroup.FOOD_AND_DRINK);\n\n // Test invalid IDs\n assertEquals(PlaceCategorization.getCategoryById(\"invalid\"), null);\n assertEquals(\n PlaceCategorization.getCategoryById(\"invalid_format_too_many_parts\"),\n null,\n );\n assertEquals(PlaceCategorization.getCategoryById(\"\"), null);\n});\n\nDeno.test(\"PlaceCategorization - Social check-in focus validation\", () => {\n const prioritized = PlaceCategorization.getPrioritizedCategories();\n\n // Prioritized should focus on social/experience categories\n const socialCategories = [\n \"amenity=restaurant\",\n \"amenity=cafe\",\n \"amenity=bar\",\n \"amenity=cinema\",\n \"tourism=attraction\",\n \"tourism=museum\",\n \"leisure=fitness_centre\",\n ];\n\n for (const category of socialCategories) {\n assertEquals(\n prioritized.includes(category),\n true,\n `Prioritized should include social category: ${category}`,\n );\n }\n\n // Should NOT prioritize utility categories (unless essential)\n const utilityCategories = [\n \"amenity=toilets\",\n \"amenity=waste_disposal\",\n \"amenity=recycling\",\n ];\n\n for (const category of utilityCategories) {\n assertEquals(\n prioritized.includes(category),\n false,\n `Prioritized should NOT include utility category: ${category}`,\n );\n }\n});\n",[],[954,1037,1088],[954,1037],[954],{"_103":1098,"_95":783,"_155":1099,"_157":-5,"_158":140,"_159":1100,"_161":162,"_105":1101,"_100":32,"_164":165,"_166":-5,"_167":22,"_168":-5,"_169":1102,"_98":1112},"f66fe6f0-8676-11f0-9b7d-0224a6c84d84","f66fe7a4-8676-11f0-9b7d-0224a6c84d84",919,["D",1756650594721],[1103],{"_103":1104,"_95":1105,"_155":1106,"_157":1099,"_158":140,"_159":1107,"_161":162,"_105":1108,"_100":32,"_164":246,"_166":1109,"_167":22,"_168":-5,"_169":1110,"_98":1111},"f68ee6c2-8676-11f0-9d49-0224a6c84d84","valtown-fallback.d.ts","f68ee762-8676-11f0-9d49-0224a6c84d84",920,["D",1756650594924],"/**\n * Fallback types for Val Town services when external types are unavailable\n * Used as backup when https://www.val.town/types/valtown.d.ts is unavailable\n */\n\ndeclare module \"https://esm.town/v/std/sqlite2\" {\n export interface SQLiteExecuteResult {\n columns: string[];\n rows: any[][];\n }\n\n export interface SQLite {\n execute(\n options: { sql: string; args?: any[] },\n ): Promise;\n }\n\n export const sqlite: SQLite;\n}\n\ndeclare module \"https://esm.town/v/std/blob\" {\n export interface Blob {\n get(key: string): Promise;\n set(key: string, value: any): Promise;\n delete(key: string): Promise;\n }\n\n export const blob: Blob;\n}\n\ndeclare module \"https://esm.town/v/std/utils*\" {\n export function serveFile(path: string, base: string): Promise;\n}\n",[],[783,1105],[783],{"_103":1114,"_95":1115,"_155":1116,"_157":-5,"_158":140,"_159":1117,"_161":162,"_105":1118,"_100":275,"_164":178,"_166":1119,"_167":22,"_168":-5,"_169":1120,"_98":1121},"81bdc5b8-8c00-11f0-980e-0224a6c84d84",".gitignore","582a8904-58b4-11f0-acd5-f69ea79377d9",1047,["D",1757259425297],"# AnchorPDS .gitignore\n# Practical gitignore for Deno + Val Town + SQLite project\n\n# === Environment & Secrets ===\n.env\n.env.*\n!.env.example\n*.key\n*.pem\nconfig/secrets.json\n\n# === Deno ===\n# Deno cache and lock files (Val Town doesn't support import maps or lock files)\n.deno/\ndeno.lock\n\n# === Val Town ===\n# Val Town CLI cache and temp files\n.valtown/\n.vt/\nvaltown-cache/\n\n# === Database ===\n# Local SQLite databases (Val Town uses hosted SQLite)\n*.db\n*.sqlite\n*.sqlite3\ndata/\ndb/\n\n# === Testing & Coverage ===\ncoverage/\ntest-results/\n.coverage\n*.lcov\n*.log\n\n# === Development ===\n# IDE and editor files\n.vscode/\n.idea/\n*.swp\n*.swo\n*~\n.DS_Store\nThumbs.db\n\n# === Temporary Files ===\ntmp/\ntemp/\n*.tmp\n*.temp\n\n# === Logs ===\nlogs/\n*.log\nnpm-debug.log*\nyarn-debug.log*\nyarn-error.log*\n\n# === Node.js (if any tooling uses it) ===\nnode_modules/\nnpm-debug.log\nyarn-error.log\npackage-lock.json\nyarn.lock\n\n# === Build artifacts ===\ndist/\nbuild/\nout/\n\n# === Backup files ===\n*.bak\n*.backup\n*.orig\n\n# === OS Generated ===\n.DS_Store\n.DS_Store?\n._*\n.Spotlight-V100\n.Trashes\nehthumbs.db\nThumbs.db\n\n# === Documentation builds ===\ndocs/build/\nsite/\n\n# === Val Town deployment artifacts ===\n.val/\ndeployment-logs/\n\n# === LLM Conntext ===\nLLMDocs/",[],[1115],{"_103":1123,"_95":1124,"_155":1125,"_157":-5,"_158":140,"_159":1126,"_161":162,"_105":1127,"_100":32,"_164":178,"_166":1128,"_167":22,"_168":-5,"_169":1129,"_98":1130},"58443494-58b4-11f0-9539-f69ea79377d9",".vtignore","58443566-58b4-11f0-9539-f69ea79377d9",30,["D",1751619204666],".git\n.vscode\n.cursorrules\n.DS_Store\nnode_modules\nvendor\nLLMDocs",[],[1124],{"_103":1132,"_95":1133,"_155":1134,"_157":-5,"_158":140,"_159":1135,"_161":162,"_105":1136,"_100":1137,"_164":178,"_166":1138,"_167":22,"_168":-5,"_169":1139,"_98":1140},"23a51d14-a6ae-11f0-85eb-0224a6c84d84","CLAUDE.md","5847d28e-58b4-11f0-a0a5-f69ea79377d9",1406,["D",1760192730086],26,"# CLAUDE.md\n\nThis file provides guidance to Claude Code (claude.ai/code) when working with\ncode in this repository.\n\n## Project Overview\n\nAnchor AppView is a location-based social feed generator built on AT Protocol.\nThe system uses a **PDS-only architecture** where all checkin data is read\ndirectly from users' Personal Data Servers, with minimal local storage used only\nfor OAuth session management.\n\n## Architecture\n\n### Core Design Pattern: PDS-Only Architecture\n\n**Critical architectural constraint**: This system does NOT store checkin data\nlocally. All checkins are:\n\n1. Created directly in users' PDS via AT Protocol\n `com.atproto.repo.createRecord`\n2. Read on-demand from PDS via `com.atproto.repo.getRecord` and\n `com.atproto.repo.listRecords`\n3. Never cached or persisted in local database\n\n**Exception for Likes and Comments**: While checkins remain PDS-only, likes and\ncomments use a **hybrid architecture** with local indexing for performance:\n\n- Like/comment records are stored in users' PDS (fully decentralized)\n- A local index (`checkin_interactions` and `checkin_counts` tables) tracks\n interactions for efficient discovery and counting\n- Index is updated when likes/comments are created/deleted through this AppView\n- Trade-off: External likes/comments (created directly via PDS) won't appear\n until indexed\n- Future: Background sync process could crawl for external interactions\n\nLocal database storage:\n\n- `iron_session_storage`: OAuth session management\n- `checkin_interactions`: Index of likes/comments for efficient queries\n- `checkin_counts`: Aggregated counts per checkin for performance\n\n### Entry Point\n\n- **Main file**: `main.tsx` (deployed to Val Town with\n `// @val-town anchordashboard` comment)\n- **Base URL**: `https://dropanchor.app` (configurable via `ANCHOR_BASE_URL`)\n- **Framework**: Hono web server serving unified API, OAuth, and React frontend\n- **Runtime**: Deno on Val Town platform\n\n### Key Components\n\n**OAuth Authentication** (`backend/routes/oauth.ts`, `backend/oauth/`):\n\n- Uses custom package `jsr:@tijs/atproto-oauth-hono@^0.3.0`\n- Provides web and mobile (iOS) authentication flows\n- Mobile: Custom URL scheme `anchor-app://auth-callback`\n- Session storage via Drizzle ORM with SQLite\n- Automatic token refresh and DPoP handling built into OAuth sessions\n\n**Checkin API** (`backend/api/checkins.ts`):\n\n- Creates checkins via AT Protocol `createRecord` with immediate PDS writes\n- Two-record pattern: address record + checkin record with StrongRef\n- Optional image attachments uploaded as blobs to user's PDS\n- Image validation via magic numbers, EXIF stripping for privacy\n- Address enhancement via Overpass API (OpenStreetMap)\n- Authentication via Bearer tokens (mobile) or cookies (web)\n- Supports both JSON and multipart/form-data (for images)\n\n**Feed API** (`backend/api/anchor-api.ts`):\n\n- Reads checkins directly from users' PDS\n- Spatial queries, user feeds, following feeds\n- No local database reads for checkin data\n\n**Likes and Comments API** (`backend/api/likes.ts`, `backend/api/comments.ts`):\n\n- Creates likes/comments via AT Protocol `createRecord` in user's PDS\n- Updates local index for efficient discovery\n- Authentication via OAuth session with automatic token refresh\n- Uses OAuth session's `makeRequest()` for all PDS communication\n- REST endpoints: `/api/checkins/:did/:rkey/likes` and\n `/api/checkins/:did/:rkey/comments`\n\n**Database Layer** (`backend/database/`):\n\n- Drizzle ORM with `sqlite-proxy` adapter\n- Schema: `backend/database/schema.ts` (OAuth sessions + interaction indexes)\n- Migrations: `backend/database/migrations.ts`\n\n## Development Commands\n\n### Testing\n\n```bash\n# Run all tests (unit + integration)\ndeno task test\n# or\n./scripts/test.sh\n\n# Run only unit tests\ndeno task test:unit\n\n# Run only integration tests\ndeno task test:integration\n\n# Watch mode for TDD\ndeno task test:watch\n```\n\n### Code Quality\n\n```bash\n# Format, lint, type check, and test\ndeno task quality\n\n# Quality check without type checking (faster)\ndeno task quality-no-check\n\n# Individual checks\ndeno fmt # Format code\ndeno lint # Lint code\ndeno check --allow-import # Type check\n```\n\n### Deployment\n\n```bash\n# Deploy to Val Town (runs quality checks first)\ndeno task deploy\n\n# Manual deployment\nvt push\n```\n\n## Val Town Platform Guidelines\n\n### SQLite Usage\n\n**CRITICAL**: Always use `sqlite2`, not the deprecated `sqlite` module.\n\n```typescript\n// ✅ CORRECT\nimport { sqlite } from \"https://esm.town/v/std/sqlite2\";\n\nconst result = await sqlite.execute({\n sql: \"SELECT * FROM users WHERE id = ?\",\n args: [userId],\n});\n\n// ❌ WRONG - old deprecated module\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nawait sqlite.execute(\"SELECT * FROM users\", [userId]);\n```\n\n### Drizzle ORM with sqlite-proxy\n\nThis project uses Drizzle ORM with the `sqlite-proxy` adapter to wrap Val Town's\nsqlite2:\n\n```typescript\n// See backend/database/db.ts for the adapter implementation\nexport const db = drizzle(\n async (sql, params) => {\n const result = await sqlite.execute({ sql, args: params || [] });\n return { rows: result.rows };\n },\n { schema },\n);\n```\n\nWhen adding new tables:\n\n1. Define schema in `backend/database/schema.ts` using Drizzle syntax\n2. Create migration SQL in `backend/database/migrations.ts`\n3. Tables auto-create on startup via `initializeTables()` in main.tsx\n\n### Environment Variables\n\nNever hardcode secrets:\n\n```typescript\nconst secret = Deno.env.get(\"COOKIE_SECRET\");\nconst baseUrl = Deno.env.get(\"ANCHOR_BASE_URL\") || \"https://dropanchor.app\";\n```\n\n### External Dependencies\n\n- Use `https://esm.sh` for npm packages\n- Use `jsr:` for JSR packages (Hono, atproto-oauth-hono)\n- Use `https://esm.town/v/std/` for Val Town utilities\n\n## OAuth Authentication Flow\n\n### Package: @tijs/atproto-oauth-hono\n\nThe OAuth system uses a custom package that handles:\n\n- PKCE flow with automatic PDS discovery\n- DPoP (Demonstrating Proof of Possession) tokens\n- Token refresh logic\n- Mobile and web authentication modes\n- Session storage via Drizzle adapter\n\n### Usage Pattern\n\n```typescript\nimport { createATProtoOAuth } from \"jsr:@tijs/atproto-oauth-hono@^0.3.0\";\n\nconst oauth = createATProtoOAuth({\n baseUrl: BASE_URL,\n cookieSecret: COOKIE_SECRET,\n mobileScheme: \"anchor-app://auth-callback\",\n sessionTtl: 60 * 60 * 24 * 30, // 30 days\n storage, // DrizzleStorage instance\n});\n\n// Export for use in other modules\nexport const oauthRoutes = oauth.routes; // Hono routes\nexport const sessions = oauth.sessions; // Session management API\n```\n\n### Making Authenticated Requests\n\nOAuth sessions provide automatic token refresh and DPoP handling:\n\n```typescript\nconst oauthSession = await sessions.getOAuthSession(did);\nif (!oauthSession) {\n return { error: \"No session\" };\n}\n\n// makeRequest handles token refresh and DPoP automatically\nconst response = await oauthSession.makeRequest(\n \"POST\",\n `${oauthSession.pdsUrl}/xrpc/com.atproto.repo.createRecord`,\n {\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ repo: did, collection: \"...\", record: {...} })\n }\n);\n```\n\nNever manually construct Authorization headers - always use\n`oauthSession.makeRequest()`.\n\n## AT Protocol Integration\n\n### Record Types\n\n**Checkin record** (`app.dropanchor.checkin`):\n\n```typescript\n{\n $type: \"app.dropanchor.checkin\",\n text: string,\n createdAt: string, // ISO8601\n addressRef: StrongRef, // Reference to address record\n coordinates: { latitude: number, longitude: number },\n category?: string,\n categoryGroup?: string,\n categoryIcon?: string\n}\n```\n\n**Address record** (`community.lexicon.location.address`):\n\n```typescript\n{\n $type: \"community.lexicon.location.address\",\n name?: string,\n street?: string,\n locality?: string,\n region?: string,\n country?: string,\n postalCode?: string\n}\n```\n\n**Like record** (`app.dropanchor.like`):\n\n```typescript\n{\n $type: \"app.dropanchor.like\",\n createdAt: string, // ISO8601\n checkinRef: StrongRef // Reference to the liked checkin\n}\n```\n\n**Comment record** (`app.dropanchor.comment`):\n\n```typescript\n{\n $type: \"app.dropanchor.comment\",\n text: string, // Max 1000 characters\n createdAt: string, // ISO8601\n checkinRef: StrongRef // Reference to the commented checkin\n}\n```\n\n### StrongRef Pattern\n\nCheckins reference addresses via StrongRefs (CID + URI):\n\n```typescript\naddressRef: {\n uri: \"at://did:plc:abc123/community.lexicon.location.address/3k2...\",\n cid: \"bafyreicv3pecq6fuua22xcoguxep76otivb33nlaofzl76fpagczo5t5jm\"\n}\n```\n\nThis ensures data integrity via content-addressing.\n\n## API Endpoints\n\n### Checkin Lifecycle (REST-style)\n\n```\nPOST /api/checkins Create checkin\nGET /api/checkins/:did Get all checkins for user\nGET /api/checkins/:did/:rkey Get specific checkin\nDELETE /api/checkins/:did/:rkey Delete checkin\n```\n\n### Likes and Comments (REST-style)\n\n```\nGET /api/checkins/:did/:rkey/likes Get likes for checkin\nPOST /api/checkins/:did/:rkey/likes Like a checkin (requires auth)\nDELETE /api/checkins/:did/:rkey/likes Unlike a checkin (requires auth)\n\nGET /api/checkins/:did/:rkey/comments Get comments for checkin\nPOST /api/checkins/:did/:rkey/comments Comment on checkin (requires auth)\nDELETE /api/checkins/:did/:rkey/comments Delete comment (requires auth)\n```\n\n### Feed Queries\n\n```\nGET /api/nearby?lat=52.0&lng=4.3&radius=5&limit=50 Spatial query\nGET /api/user?did=did:plc:abc123&limit=50 User's checkins\nGET /api/following?user=did:plc:abc123&limit=50 Following feed\n```\n\n### OAuth & Auth\n\n```\nGET /login Initiate OAuth (web)\nGET /oauth/callback OAuth redirect handler\nPOST /api/checkins Create checkin (requires auth)\nGET /api/auth/session Session validation\nPOST /api/auth/logout Session cleanup\n```\n\n### System\n\n```\nGET /api/stats System health metrics\nGET /api/places/nearby OpenStreetMap POI search via Overpass\nGET /api/places/categories Category system for mobile apps\n```\n\n## Testing Strategy\n\nThe project has comprehensive test coverage with two categories:\n\n**Unit tests** (`tests/unit/`):\n\n- Test individual functions in isolation\n- Mock external dependencies (AT Protocol, Overpass API, OAuth)\n- Focus on business logic correctness\n\n**Integration tests** (`tests/integration/`):\n\n- Test full request/response cycles\n- Mock Val Town services (sqlite, blob storage) but test real code paths\n- Validate API contract and error handling\n\nKey testing patterns:\n\n- Use `assertAlmostEquals` for floating-point coordinate calculations\n- Mock OAuth sessions for authenticated endpoint tests\n- Test both success and error cases\n- Validate TypeScript types with proper inference\n\n## Common Development Tasks\n\n### Adding a New API Endpoint\n\n1. Add route to `main.tsx`:\n\n```typescript\napp.get(\"/api/newfeature\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n```\n\n2. Handle in `backend/api/anchor-api.ts` or create new handler file\n\n3. Add integration test in `tests/integration/api.test.ts`\n\n### Modifying OAuth Configuration\n\nOAuth is configured in `backend/routes/oauth.ts`:\n\n```typescript\nconst oauth = createATProtoOAuth({\n baseUrl: BASE_URL, // Public base URL\n cookieSecret: COOKIE_SECRET, // Session encryption\n mobileScheme: \"anchor-app://auth-callback\",\n sessionTtl: 60 * 60 * 24 * 30, // 30 days\n storage, // Drizzle storage adapter\n});\n```\n\nNever modify the package's internal logic - all customization via config.\n\n### Working with AT Protocol Records\n\nAlways use OAuth sessions for PDS requests:\n\n```typescript\n// ✅ CORRECT - automatic token refresh and DPoP\nconst oauthSession = await sessions.getOAuthSession(did);\nconst response = await oauthSession.makeRequest(\n \"POST\",\n `${oauthSession.pdsUrl}/xrpc/com.atproto.repo.createRecord`,\n { headers: {...}, body: JSON.stringify({...}) }\n);\n\n// ❌ WRONG - manual token handling breaks DPoP and refresh logic\nconst response = await fetch(`${pdsUrl}/xrpc/...`, {\n headers: { \"Authorization\": `Bearer ${accessToken}` }\n});\n```\n\n## Mobile Integration (iOS)\n\nThe system supports iOS app integration via WebView OAuth flow:\n\n### Authentication Flow\n\n1. iOS app opens WebView to\n `https://dropanchor.app/login?handle=user.bsky.social`\n2. User completes OAuth in WebView\n3. Success page triggers `anchor-app://auth-callback` with session data\n4. iOS app extracts session and closes WebView\n\n### Session Data Format\n\n```\nanchor-app://auth-callback?\n access_token=...\n &refresh_token=...\n &did=...\n &handle=...\n &session_id=...\n &pds_url=...\n &avatar=...\n &display_name=...\n```\n\n### iOS Requirements\n\n- Register `anchor-app` URL scheme in Info.plist\n- Set WebView User-Agent to \"AnchorApp\" for detection\n- Use Bearer token authentication: `Authorization: Bearer {session_id}`\n- Store tokens securely in iOS Keychain\n\n## Debugging\n\n### OAuth Session Issues\n\n```bash\n# Run debug script to inspect OAuth sessions\ndeno run --allow-net scripts/debug-oauth-sessions.ts\n```\n\nOr check via API endpoint:\n\n```\nGET https://dropanchor.app/api/debug/oauth-sessions\n```\n\n### PDS Communication\n\nAll PDS requests go through OAuth session's `makeRequest()`. Enable logging:\n\n```typescript\nconsole.log(\"PDS request:\", {\n method,\n url,\n pdsUrl: oauthSession.pdsUrl,\n did: oauthSession.did,\n});\n```\n\n### Val Town Deployment Issues\n\nIf deployment fails:\n\n1. Check Val Town CLI is authenticated: `vt whoami`\n2. Verify deno.json tasks work locally: `deno task quality`\n3. Check Val Town dashboard for runtime errors\n4. Verify environment variables are set correctly\n\n## Important Technical Constraints\n\n### Data Storage Philosophy\n\n**DO NOT create local database tables for checkin data.** The PDS-only\narchitecture is intentional:\n\n- Checkins live in users' PDS (decentralized, user-controlled)\n- AppView reads on-demand (no sync lag, no stale data)\n- Only OAuth sessions stored locally (for authentication)\n\nIf you need to cache data, use Val Town blob storage with TTL, not SQLite.\n\n### AT Protocol Compliance\n\nAlways follow AT Protocol patterns:\n\n- Use `com.atproto.repo.*` XRPC methods for record operations\n- Respect StrongRef pattern for references between records\n- Include proper `$type` fields in all records\n- Use ISO8601 timestamps with `Z` suffix\n\n### Security\n\n- No API keys or secrets in code - only `Deno.env.get()`\n- OAuth sessions are encrypted with Iron Session\n- Mobile sessions use sealed tokens (not raw JWTs)\n- CORS headers on all public API endpoints\n\n## Project History & Context\n\nOriginally designed as a traditional AppView with background ingestion and local\ndatabase caching. Now migrated to **PDS-only architecture** where:\n\n- No background crawlers or ingestion workers\n- No local checkin tables (`checkins_v1`, `address_cache_v1`, etc. removed)\n- Direct PDS reads provide fresh data with user control\n\nComments and variable names may reference old architecture - these are safe to\nupdate.\n\n- to deploy new updates use `deno task deploy`\n- code files should never be more than 500 lines, once you hit this size you\n know it's time to break up your file in smaller modules\n",[],[1133],{"_103":1142,"_95":1143,"_155":1144,"_157":-5,"_158":140,"_159":1145,"_161":162,"_105":1146,"_100":330,"_164":178,"_166":1147,"_167":22,"_168":-5,"_169":1148,"_98":1149},"8296666a-a2e0-11f0-8590-0224a6c84d84","README.md","5836c7aa-58b4-11f0-a9f0-f69ea79377d9",1311,["D",1759774559565],"# Anchor AppView\n\n[![ko-fi](https://ko-fi.com/img/githubbutton_sm.svg)](https://ko-fi.com/tijsteulings)\n\nA complete location-based social feed generator and web interface built on the\nAT Protocol for decentralized social networking. Provides both API endpoints for\nmobile clients and a web interface for viewing and sharing check-ins.\n\n## 🏗️ Architecture\n\n**PDS-Only Architecture**: This system does NOT store checkin data locally. All\ncheckins are:\n\n- Created directly in users' PDS via AT Protocol `com.atproto.repo.createRecord`\n- Read on-demand from PDS via `com.atproto.repo.getRecord` and\n `com.atproto.repo.listRecords`\n- Never cached or persisted in local database (only OAuth sessions stored\n locally)\n\nThe system consists of 4 main components:\n\n- **Check-in Creation** - Direct writes to user PDS with optional image\n attachments\n- **API** - RESTful APIs for nearby, user, and following feeds (reads from PDS)\n- **Web Interface** - React-based web frontend for viewing feeds and shareable\n checkin detail pages with image lightbox\n- **OAuth** - Secure authentication with automatic token refresh and DPoP\n handling\n\n## 📁 Project Structure\n\n```\nbackend/\n├── oauth/ # OAuth authentication and session management\n│ └── storage.ts # Drizzle storage adapter for OAuth sessions\n├── routes/ # Hono route handlers\n│ └── oauth.ts # OAuth configuration and endpoints\n├── api/ # HTTP API endpoints\n│ ├── anchor-api.ts # Main feed API (reads from PDS)\n│ └── checkins.ts # Check-in creation API with image upload\n├── services/ # Business logic services\n│ ├── image-service.ts # Image validation (magic numbers) and processing\n│ └── overpass-service.ts # Address enrichment via OpenStreetMap\n└── database/ # Database layer (OAuth sessions only)\n ├── db.ts # Drizzle ORM setup with sqlite-proxy\n ├── schema.ts # Database schema (iron_session_storage)\n └── migrations.ts # Table creation and migrations\n\nfrontend/\n├── main.tsx # Entry point and routing\n├── components/ # React components\n│ ├── CheckinComposer.tsx # Create checkin with image picker\n│ ├── CheckinCard.tsx # Feed card with square thumbnail\n│ ├── CheckinDetail.tsx # Detail view with full-size image and map\n│ ├── ImageLightbox.tsx # Full-screen image viewer with alt text\n│ └── Layout.tsx # App layout and navigation\n└── types/\n └── index.ts # TypeScript type definitions\n\nlexicons/ # AT Protocol lexicon definitions\n├── app/dropanchor/\n│ └── checkin.json # Checkin record schema with image support\n└── community/lexicon/location/\n └── address.json # Address record schema\n\ndocs/\n├── api-documentation.md # Complete API reference for client development\n└── deployment-guide.md # Deployment instructions\n\nscripts/\n├── test.sh # Run complete test suite\n└── debug-oauth-sessions.ts # Debug OAuth session status\n\ntests/\n├── unit/ # Unit tests for individual functions\n│ ├── image-service.test.ts # Image validation with magic numbers\n│ ├── lexicon-validation.test.ts # Lexicon structure validation\n│ └── spatial.test.ts\n├── integration/ # Integration tests for API endpoints\n│ ├── api.test.ts # Feed APIs\n│ └── checkin-api.test.ts # Checkin creation with image upload\n└── fixtures/ # Test data and fixtures\n └── test-data.ts\n```\n\n## 🚀 Quick Start\n\n### Deployment\n\n```bash\ndeno task deploy # Runs quality checks and pushes to Val Town\n```\n\n> **Note**: No manual database setup required! Tables are created automatically\n> when functions first run.\n\n## 🔌 API Endpoints\n\n**Base URL**: `https://dropanchor.app`\n\n### Feed APIs\n\n#### Nearby Checkins\n\n```http\nGET https://dropanchor.app/api/nearby?lat=52.0705&lng=4.3007&radius=5&limit=50\n```\n\nSpatial query for check-ins within specified radius (km).\n\n#### User Checkins\n\n```http\nGET https://dropanchor.app/api/user?did=did:plc:abc123&limit=50\n```\n\nAll check-ins from a specific user.\n\n#### Following Feed\n\n```http\nGET https://dropanchor.app/api/following?user=did:plc:abc123&limit=50&cursor=2025-06-29T15:00:00Z\n```\n\nCheck-ins from people the specified user follows on Bluesky.\n\n### Individual Checkin\n\n#### Checkin Detail API\n\n```http\nGET https://dropanchor.app/api/checkin/{rkey}\n```\n\nIndividual checkin data by record key for detail views and sharing.\n\n### System APIs\n\n#### Statistics\n\n```http\nGET https://dropanchor.app/api/stats\n```\n\nAppView health metrics and processing statistics.\n\n## 🌐 Web Interface\n\n### Public Web Pages\n\n#### Feed Interface\n\n```\nhttps://dropanchor.app/\n```\n\nWeb interface showing user feeds and check-ins.\n\n#### Shareable Checkin Details\n\n```\nhttps://dropanchor.app/checkin/{rkey}\n```\n\nIndividual checkin detail page with interactive map, optimized for sharing on\nsocial media with Open Graph meta tags.\n\n## 📚 API Documentation\n\nFor complete API documentation including examples, data models, and SDK code\nsamples, see:\n\n**[📖 API Documentation](docs/api-documentation.md)**\n\n## 📊 Data Architecture\n\n**PDS-Only Design**: No local checkin storage. All checkin data lives in users'\nPersonal Data Servers.\n\n**Local Storage**: Only `iron_session_storage` table for OAuth session\nmanagement (encrypted with Iron Session).\n\n**AT Protocol Records**:\n\n- `app.dropanchor.checkin` - Checkin with optional image attachment\n- `community.lexicon.location.address` - Address details (referenced via\n StrongRef)\n\n**Image Storage**: Blobs uploaded to user's PDS via\n`com.atproto.repo.uploadBlob`, retrieved via `com.atproto.sync.getBlob`.\n\n## 🌟 Key Features\n\n### Backend Features\n\n- **PDS-First Architecture**: All checkin data stored in users' PDS\n (decentralized, user-controlled)\n- **OAuth Authentication**: Secure authentication with automatic token refresh\n and DPoP handling via `@tijs/atproto-oauth-hono`\n- **Image Attachments**: Optional image uploads with:\n - Security validation via magic number detection (not just MIME types)\n - Client-side compression to <5MB target (server enforces <10MB hard limit)\n - Privacy-first: EXIF data stripped including GPS coordinates\n - EXIF orientation handling for correct photo display\n - Thumbnail (300KB) and fullsize (2MB) versions\n - Support for JPEG, PNG, WebP, GIF formats\n- **Address Enrichment**: OpenStreetMap integration via Overpass API\n- **Spatial Queries**: Nearby check-ins using Haversine distance calculations\n- **Mobile-Ready APIs**: FormData multipart uploads, Bearer token authentication\n\n### Web Interface Features\n\n- **Feed Views**: Browse feeds with author profiles, timestamps, and square\n thumbnails\n- **Image Composer**: Image picker with client-side compression and alt text\n support\n- **Image Lightbox**: Full-screen image viewer with alt text display\n (Bluesky-style)\n- **Shareable Checkin Pages**: Individual checkin detail pages with interactive\n maps and full-size images\n- **Interactive Maps**: OpenStreetMap integration via Leaflet with CartoDB tiles\n- **Social Sharing**: Optimized sharing with Web Share API and copy\n functionality\n- **Responsive Design**: Mobile-friendly interface using system fonts\n- **Open Graph Tags**: Rich social media previews for shared checkin URLs\n- **Delete Support**: Users can delete their own check-ins\n\n## 🔧 Development\n\n### Testing\n\nThe project includes comprehensive tests for all components (142 tests):\n\n**Unit Tests**:\n\n- `image-service.test.ts` - Image validation with magic number detection\n- `lexicon-validation.test.ts` - Lexicon structure and backward compatibility\n- `spatial.test.ts` - Spatial distance calculations\n\n**Integration Tests**:\n\n- `checkin-api.test.ts` - Checkin creation with image upload (multipart form\n data)\n- `api.test.ts` - Feed APIs and PDS integration\n\n```bash\n# Run all tests\ndeno task test\n# or\n./scripts/test.sh\n\n# Run specific test suites\ndeno task test:unit # Unit tests only\ndeno task test:integration # Integration tests only\n\n# Watch mode for TDD\ndeno task test:watch\n\n# Quality checks (format, lint, type check, test)\ndeno task quality\n```\n\n### Val Town Best Practices\n\n- Use TypeScript for all functions\n- **Import SQLite**: `import { sqlite } from \"https://esm.town/v/std/sqlite2\"`\n - ⚠️ **IMPORTANT**: Always use `sqlite2`, not `sqlite` (deprecated)\n - Use object format: `await sqlite.execute({ sql: \"...\", args: [...] })`\n- Use `https://esm.sh` for npm packages, `jsr:` for JSR packages\n- Never hardcode secrets - use `Deno.env.get('keyname')`\n- Let errors bubble up with full context rather than catching and logging\n\n### Data Storage Strategy\n\n- **PDS-First**: All checkin data lives in users' Personal Data Servers\n- **SQLite**: Only OAuth session storage (`iron_session_storage`)\n- **Drizzle ORM**: sqlite-proxy adapter for Val Town sqlite2\n- **AT Protocol**: `com.atproto.repo.createRecord` for writes,\n `com.atproto.repo.getRecord`/`listRecords` for reads\n- **Image Blobs**: Uploaded to user's PDS via `uploadBlob`, served via `getBlob`\n\n## 📈 Monitoring\n\n- Monitor `/api/stats` endpoint for system health\n- Use `scripts/debug-oauth-sessions.ts` to inspect OAuth session status\n- Val Town dashboard for runtime errors and logs\n- Check environment variables are set correctly\n\n## 🔒 Security\n\n- **OAuth Security**: Iron Session encryption, DPoP tokens, automatic token\n refresh\n- **Image Security**: Magic number validation (not just MIME types), 10MB hard\n limit\n- **Privacy**: EXIF data stripped from all images (including GPS coordinates)\n- **CORS**: Proper CORS headers on all API endpoints\n- **Authentication**: Bearer tokens (mobile) or secure cookies (web)\n- **No Secrets in Code**: All credentials via `Deno.env.get()`\n\n## 🌐 AT Protocol Integration\n\nThe AppView is fully compatible with the AT Protocol ecosystem:\n\n- **Lexicon Definitions**: `app.dropanchor.checkin` and\n `community.lexicon.location.address`\n- **PDS Integration**: Direct reads/writes to user PDS (no local caching)\n- **OAuth Client**: Uses `@tijs/atproto-oauth-hono` with PKCE flow and DPoP\n- **DID Resolution**: PLC directory and personal PDS servers\n- **StrongRef Pattern**: Address records referenced via CID-based StrongRefs\n- **Blob Storage**: Images stored as AT Protocol blobs in user's PDS\n\n## ☕ Support Development\n\nIf you find this project useful and would like to support its development, you\ncan [buy me a coffee on Ko-fi](https://ko-fi.com/tijsteulings).\n\n## 📄 License\n\nThis implementation is part of the Anchor project for location-based social\nnetworking on the AT Protocol.\n",[],[1143],{"_103":1151,"_95":1152,"_155":1153,"_157":-5,"_158":140,"_159":1154,"_161":162,"_105":1155,"_100":32,"_164":178,"_166":1156,"_167":22,"_168":-5,"_169":1157,"_98":1158},"2bcab1de-bcb1-11f0-9e38-42dde27851f2","SESSION_VALIDATION_PLAN.md","2bcab2c4-bcb1-11f0-9e38-42dde27851f2",1442,["D",1762612957824],"# iOS Session Validation Implementation Plan\n\n## Current State (After Phase 1)\n\n### ✅ Completed - Backend (anchor-appview)\n\n- Updated `@tijs/atproto-oauth-hono` from 0.3.1 to 0.4.0\n- Created `backend/services/auth.ts` with kipclip-style auth helpers:\n - `getAuthSession(req)` - Cookie-based authentication with automatic token\n refresh\n - `clearSessionCookie()` - Generate cookie clear header\n - `unauthorizedResponse(c)` - Consistent 401 response\n- Updated `createCheckin()` and `deleteCheckin()` to use new helpers\n- Removed old `authenticateUser()` function\n\n### ✅ Completed - Web Frontend\n\n- Created `frontend/utils/api.ts` with automatic 401 handling\n- All authenticated requests use `apiFetch()` wrapper\n- Automatic redirect to login on session expiry\n- No more confusing \"Authentication required\" errors\n- All 97 tests passing\n\n### ❌ Current Issue - iOS App\n\n- **iOS app is temporarily broken** - cannot authenticate with current backend\n- Old Bearer token flow removed from backend\n- iOS needs to be updated to use new session validation pattern\n\n## Phase 2: iOS App Session Validation\n\n### Overview\n\nImplement proper session validation in the iOS app following the kipclip\npattern, adapted for native iOS architecture.\n\n### Backend Preparation (Already Complete)\n\n- `/api/auth/session` endpoint exists (provided by atproto-oauth-hono)\n- Automatically refreshes expired tokens via `oauth.sessions.getOAuthSession()`\n- Returns session data:\n `{ valid, did, handle, displayName, avatar, accessToken, refreshToken, expiresAt }`\n- Supports both cookie (web) and Bearer token (mobile) authentication\n\n### iOS Implementation Steps\n\n#### Step 1: Update Auth Service for Session Validation\n\n**File**: `AnchorKit/Sources/AnchorKit/Services/AnchorAuthService.swift`\n\n**Changes**:\n\n1. Implement real `validateSession()` that calls `/api/auth/session` endpoint\n2. Add `validateSessionWithBackend()` method for explicit validation\n3. Parse response and update credentials with new token data\n4. Handle 401 responses as session expired\n\n**Example Implementation**:\n\n```swift\npublic func validateSession(_ credentials: AuthCredentials) async throws -> AuthCredentials {\n let url = URL(string: \"https://dropanchor.app/api/auth/session\")!\n var request = URLRequest(url: url)\n request.setValue(\"Bearer \\(credentials.sessionId ?? \"\")\", forHTTPHeaderField: \"Authorization\")\n\n let (data, response) = try await URLSession.shared.data(for: request)\n\n guard let httpResponse = response as? HTTPURLResponse else {\n throw AnchorAuthError.invalidResponse\n }\n\n if httpResponse.statusCode == 401 {\n throw AnchorAuthError.sessionExpired\n }\n\n let sessionData = try JSONDecoder().decode(SessionResponse.self, from: data)\n\n if !sessionData.valid {\n throw AnchorAuthError.sessionExpired\n }\n\n // Update credentials with new expiration\n var updatedCredentials = credentials\n updatedCredentials.expiresAt = Date(timeIntervalSince1970: sessionData.expiresAt)\n return updatedCredentials\n}\n```\n\n#### Step 2: Update AuthStore Lifecycle Validation\n\n**File**: `AnchorKit/Sources/AnchorKit/Stores/AuthStore.swift`\n\n**Changes**:\n\n1. `validateSessionOnAppLaunch()`:\n - Call backend validation using updated `AnchorAuthService`\n - If validation fails → attempt token refresh\n - If refresh fails → sign out user and clear credentials\n - Update authentication state\n\n2. `validateSessionOnAppResume()`:\n - Call lightweight session validation\n - Handle expired sessions gracefully\n - Update UI state to show login prompt\n\n**Example Implementation**:\n\n```swift\npublic func validateSessionOnAppLaunch() async {\n guard let credentials = _credentials else { return }\n\n do {\n let validatedCredentials = try await authService.validateSession(credentials)\n _credentials = validatedCredentials\n await credentialsStorage.save(validatedCredentials)\n } catch {\n // Validation failed, try refresh\n do {\n try await refreshSession()\n } catch {\n // Refresh failed, sign out\n await signOut()\n }\n }\n}\n```\n\n#### Step 3: Add Pre-Operation Validation in CheckInStore\n\n**File**: `AnchorKit/Sources/AnchorKit/Stores/CheckInStore.swift`\n\n**Changes**:\n\n1. Add `requireValidSession()` helper method\n2. Call before creating checkin\n3. Throw clear `SessionExpiredError` if validation fails\n4. UI layer catches this and shows \"Sign in again\" prompt\n\n**Example Implementation**:\n\n```swift\nprivate func requireValidSession() async throws {\n guard let credentials = try await authStore.getValidCredentials() else {\n throw CheckInError.sessionExpired\n }\n}\n\npublic func createCheckin(...) async throws {\n try await requireValidSession()\n // ... rest of checkin creation logic\n}\n```\n\n#### Step 4: Improve UI Error Handling\n\n**File**: `AnchorMobile/Views/CheckInComposeView.swift`\n\n**Changes**:\n\n1. Catch `SessionExpiredError` specifically\n2. Show alert: \"Your session has expired. Please sign in again.\"\n3. Provide \"Sign In\" button that navigates to SettingsView\n4. Clear any in-progress checkin data\n\n**Example Implementation**:\n\n```swift\n.alert(\"Session Expired\", isPresented: $showSessionExpiredAlert) {\n Button(\"Sign In\") {\n // Navigate to settings for re-authentication\n selectedTab = .settings\n }\n Button(\"Cancel\", role: .cancel) { }\n} message: {\n Text(\"Your session has expired. Please sign in again to continue.\")\n}\n```\n\n#### Step 5: Update SettingsView Session Status\n\n**File**: `AnchorMobile/Views/SettingsView.swift`\n\n**Changes**:\n\n1. Display actual session validity (not just `isAuthenticated`)\n2. Show expiration time if available\n3. Add visual indicator for expired sessions\n4. Make re-authentication easy with clear CTA\n\n#### Step 6: Add Centralized 401 Response Handling (Optional)\n\n**File**: `AnchorKit/Services/Auth/IronSessionAPIClient.swift`\n\n**Changes**:\n\n1. Detect 401 responses in API client\n2. Automatically clear credentials on persistent 401s\n3. Update AuthStore state to trigger login UI\n4. Prevent cascading authentication errors\n\n### Testing Strategy\n\n#### Unit Tests\n\n- Mock `/api/auth/session` endpoint responses\n- Test `validateSession()` with valid/expired/invalid responses\n- Test `validateSessionOnAppLaunch()` with various session states\n- Test pre-operation validation in CheckInStore\n- Test error handling flows\n\n#### Integration Tests\n\n1. **Expired Session on Launch**:\n - Launch app with expired session in Keychain\n - Verify session validation is attempted\n - Verify user is signed out if validation fails\n\n2. **Expired Session During Use**:\n - App in use, session expires in background\n - User attempts to create checkin\n - Verify clear error message and re-auth prompt\n\n3. **Token Refresh Success**:\n - Session near expiry\n - Validation triggers automatic refresh\n - User continues without interruption\n\n4. **Token Refresh Failure**:\n - Session expired and refresh tokens invalid\n - User is signed out gracefully\n - Clear path to re-authenticate\n\n### Models & Types Needed\n\n```swift\n// Session response from /api/auth/session\nstruct SessionResponse: Codable {\n let valid: Bool\n let did: String?\n let handle: String?\n let displayName: String?\n let avatar: String?\n let accessToken: String?\n let refreshToken: String?\n let expiresAt: TimeInterval?\n}\n\n// New error types\nenum SessionError: Error {\n case expired\n case invalid\n case networkFailure\n case refreshFailed\n}\n\nenum CheckInError: Error {\n case sessionExpired\n case invalidData\n case networkFailure\n}\n```\n\n### Expected Behavior After Implementation\n\n#### Scenario 1: App Launch with Expired Session\n\n1. App loads credentials from Keychain\n2. Calls `/api/auth/session` to validate\n3. Backend returns 401 (session expired)\n4. App clears credentials from Keychain\n5. Shows login screen\n6. ✅ No confusing error messages\n\n#### Scenario 2: Creating Checkin with Expired Session\n\n1. User fills out checkin form\n2. Taps \"Drop Anchor\"\n3. Pre-operation validation detects expired session\n4. Shows \"Session expired - please sign in again\" alert\n5. User taps \"Sign In\" button\n6. Navigates to Settings view for re-authentication\n7. ✅ Clear recovery path\n\n#### Scenario 3: Session Expires While App in Background\n\n1. App goes to background\n2. Session expires (30 days later)\n3. User brings app to foreground\n4. `validateSessionOnAppResume()` detects expiration\n5. Signs out user, shows login screen\n6. ✅ Proactive session management\n\n### Success Criteria\n\n✅ App validates session on launch and resume using backend endpoint ✅ Expired\nsessions detected before user attempts actions ✅ Clear \"Sign in again\"\nmessaging when session expires ✅ No confusing \"Authentication required\" errors\n✅ Consistent auth state across the app ✅ Smooth re-authentication flow ✅\nBackend and iOS app fully aligned with kipclip pattern\n\n### Files to Modify (Summary)\n\n**AnchorKit (Business Logic)**:\n\n- `Services/AnchorAuthService.swift` - Real session validation\n- `Stores/AuthStore.swift` - Lifecycle validation\n- `Stores/CheckInStore.swift` - Pre-operation validation\n- `Services/Auth/IronSessionAPIClient.swift` - Centralized 401 handling\n (optional)\n\n**AnchorMobile (UI Layer)**:\n\n- `Views/CheckInComposeView.swift` - Error handling\n- `Views/SettingsView.swift` - Session status display\n- `Views/Authentication/*` - Re-auth flow improvements\n\n**Tests**:\n\n- `AnchorKit/Tests/Services/AnchorAuthServiceTests.swift`\n- `AnchorKit/Tests/Stores/AuthStoreTests.swift`\n- `AnchorKit/Tests/Stores/CheckInStoreTests.swift`\n\n## Notes\n\n- iOS app currently broken until Phase 2 implementation\n- Web app fully functional with new auth flow\n- Backend ready for iOS - `/api/auth/session` endpoint works\n- Pattern matches kipclip-appview (adapted for iOS native)\n- No backward compatibility needed - clean slate for new pattern\n\n## Timeline Estimate\n\n- Step 1 (Auth Service): ~2 hours\n- Step 2 (AuthStore): ~2 hours\n- Step 3 (CheckInStore): ~1 hour\n- Step 4 (UI Error Handling): ~2 hours\n- Step 5 (Settings View): ~1 hour\n- Step 6 (Optional 401 handling): ~1 hour\n- Testing: ~3 hours\n\n**Total**: ~12 hours of development work\n\n## References\n\n- kipclip-appview auth pattern:\n `/Users/tijs/projects/atproto/kipclip.com/kipclip-appview/backend/services/auth.ts`\n- Anchor web frontend:\n `/Users/tijs/projects/atproto/anchor-appview/frontend/utils/api.ts`\n- Current iOS implementation:\n `/Users/tijs/projects/atproto/Anchor/Anchor/AnchorKit/`\n",[],[1152],{"_103":1160,"_95":1161,"_155":1162,"_157":-5,"_158":140,"_159":1163,"_161":162,"_105":1164,"_100":1165,"_164":178,"_166":1166,"_167":22,"_168":-5,"_169":1167,"_98":1168},"7a088cbe-9ad2-11f0-83a7-0224a6c84d84","deno.json","5815fb42-58b4-11f0-aaa5-f69ea79377d9",1070,["D",1758888922877],25,"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"./types/valtown-fallback.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"lint\": {\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\",\n \"no-import-prefix\"\n ]\n }\n },\n \"include\": [\n \"backend/\",\n \"frontend/\",\n \"tests/\"\n ],\n \"node_modules_dir\": false,\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true,\n \"unstable-sloppy-imports\": true\n },\n \"tasks\": {\n \"test\": \"deno test --allow-all tests/\",\n \"test:unit\": \"deno test --allow-all tests/unit/\",\n \"test:integration\": \"deno test --allow-all tests/integration/\",\n \"test:watch\": \"deno test --allow-all --watch tests/\",\n \"quality\": \"deno fmt && deno lint && deno check --allow-import && deno test --allow-all tests/\",\n \"quality-no-check\": \"deno fmt && deno lint && deno test --allow-all tests/\",\n \"deploy\": \"deno task quality && vt push\"\n }\n}\n",[],[1161],{"_103":1170,"_95":1171,"_155":1172,"_157":-5,"_158":140,"_159":1173,"_161":162,"_105":1174,"_100":275,"_164":178,"_166":1175,"_167":22,"_168":-5,"_169":1176,"_98":1177},"20a378a2-a5d9-11f0-8a10-0224a6c84d84","deno.test.json","8190950a-63a8-11f0-a6d7-0224a6c84d84",1350,["D",1760101242209],"{\n \"test\": {\n \"include\": [\n \"tests/**/*.test.ts\"\n ],\n \"exclude\": [\n \"node_modules\",\n \"dist\"\n ]\n },\n \"permissions\": {\n \"net\": true,\n \"read\": true,\n \"write\": true,\n \"env\": true,\n \"import\": true\n }\n}\n",[],[1171],{"_103":1179,"_95":1180,"_155":1181,"_157":-5,"_158":140,"_159":1182,"_161":162,"_105":1183,"_100":1184,"_164":1185,"_166":1186,"_167":22,"_168":858,"_169":1187,"_98":1188},"4e890904-a6aa-11f0-a997-0224a6c84d84","main.tsx","db7d92c8-58ab-11f0-bdec-f69ea79377d9",1390,["D",1760191084048],114,"http","// @val-town anchordashboard\n// Main HTTP entry point for Anchor AppView - organized route groups\nimport { Hono } from \"jsr:@hono/hono@4.9.6\";\nimport { initializeTables } from \"./backend/database/db.ts\";\nimport { oauthRoutes } from \"./backend/routes/oauth.ts\";\nimport { createFrontendRoutes } from \"./backend/routes/frontend.ts\";\nimport anchorApiHandler from \"./backend/api/anchor-api.ts\";\nimport { createCheckin, deleteCheckin } from \"./backend/api/checkins.ts\";\n\nconst app = new Hono();\n\n// Initialize database on startup\nawait initializeTables();\n\n// Mount OAuth routes FIRST - provides /login, /oauth/callback, /api/auth/session, etc.\napp.route(\"/\", oauthRoutes);\n\n// Mount API routes (before catch-all frontend routes)\napp.get(\"/api/nearby\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\n// REST-style checkin endpoints\n// GET /api/checkins/:did - Get all checkins for a user\napp.get(\"/api/checkins/:did\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\n// GET /api/checkins/:did/:rkey - Get a specific checkin\napp.get(\"/api/checkins/:did/:rkey\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\n// POST /api/checkins - Create a new checkin\napp.post(\"/api/checkins\", async (c) => {\n return await createCheckin(c);\n});\n\n// DELETE /api/checkins/:did/:rkey - Delete a specific checkin\napp.delete(\"/api/checkins/:did/:rkey\", async (c) => {\n return await deleteCheckin(c);\n});\n\n// Likes and comments endpoints - handled by anchor-api\n// Routes: /api/checkins/:did/:rkey/likes and /api/checkins/:did/:rkey/comments\napp.get(\"/api/checkins/:did/:rkey/likes\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\napp.post(\"/api/checkins/:did/:rkey/likes\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\napp.delete(\"/api/checkins/:did/:rkey/likes\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\napp.get(\"/api/checkins/:did/:rkey/comments\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\napp.post(\"/api/checkins/:did/:rkey/comments\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\napp.delete(\"/api/checkins/:did/:rkey/comments\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\n// Checkin migration endpoint - fixes coordinate format for legacy checkins\napp.post(\"/api/migrate-checkins\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\n// Note: /api/auth/session endpoint is provided by the OAuth package (oauthRoutes)\n\n// Legacy /api/user endpoints for backward compatibility\napp.get(\"/api/user/:identifier\", (c) => {\n // Redirect to new REST endpoint\n const identifier = c.req.param(\"identifier\");\n const newUrl = new URL(c.req.url);\n newUrl.pathname = `/api/checkins/${identifier}`;\n return Response.redirect(newUrl.toString(), 301);\n});\n\napp.get(\"/api/user\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\napp.get(\"/api/following\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\napp.get(\"/api/stats\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\napp.get(\"/api/places/nearby\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\napp.get(\"/api/places/search\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\napp.get(\"/api/places/categories\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\n// Legacy /api/checkin/* endpoint for backward compatibility\napp.get(\"/api/checkin/*\", async (c) => {\n return await anchorApiHandler(c.req.raw);\n});\n\n// Serve lexicon definitions\napp.get(\"/.well-known/atproto-lexicons\", async (c) => {\n try {\n const checkinLexicon = await Deno.readTextFile(\n \"./lexicons/app/dropanchor/checkin.json\",\n );\n const addressLexicon = await Deno.readTextFile(\n \"./lexicons/community/lexicon/location/address.json\",\n );\n\n return c.json({\n \"app.dropanchor.checkin\": JSON.parse(checkinLexicon),\n \"community.lexicon.location.address\": JSON.parse(addressLexicon),\n });\n } catch (_error) {\n return c.json({ error: \"Failed to load lexicons\" }, 500);\n }\n});\n\n// Debug endpoint for OAuth sessions\napp.get(\"/api/debug/oauth-sessions\", async (c) => {\n try {\n const { db } = await import(\"./backend/database/db.ts\");\n const { ironSessionStorageTable } = await import(\n \"./backend/database/schema.ts\"\n );\n const { like } = await import(\"https://esm.sh/drizzle-orm@0.44.5\");\n\n const FAILING_DID = \"did:plc:aq7owa5y7ndc2hzjz37wy7ma\";\n\n // Check all OAuth sessions (now stored in iron_session_storage with session: prefix)\n const allSessions = await db.select().from(ironSessionStorageTable)\n .where(like(ironSessionStorageTable.key, \"session:%\"));\n\n // Check for the specific failing DID\n const targetSessionKey = `session:${FAILING_DID}`;\n const targetSession = await db.select()\n .from(ironSessionStorageTable)\n .where(like(ironSessionStorageTable.key, targetSessionKey))\n .limit(1);\n\n // Test the OAuth sessions API directly\n const { sessions } = await import(\"./backend/routes/oauth.ts\");\n let apiResult = null;\n try {\n const oauthSession = await sessions.getOAuthSession(FAILING_DID);\n apiResult = oauthSession\n ? {\n found: true,\n did: oauthSession.did,\n handle: oauthSession.handle,\n pdsUrl: oauthSession.pdsUrl,\n }\n : { found: false };\n\n // Also try getStoredOAuthData to see raw session data\n const storedData = await sessions.getStoredOAuthData(FAILING_DID);\n apiResult.storedData = storedData\n ? {\n found: true,\n did: storedData.did,\n handle: storedData.handle,\n hasTokens: !!(storedData.accessToken && storedData.refreshToken),\n }\n : { found: false };\n } catch (error) {\n apiResult = { error: error.message };\n }\n\n return c.json({\n success: true,\n totalSessions: allSessions.length,\n targetDid: FAILING_DID,\n hasTargetSession: targetSession.length > 0,\n targetSessionDetails: targetSession.length > 0\n ? {\n key: targetSession[0].key,\n createdAt: targetSession[0].createdAt,\n expiresAt: targetSession[0].expiresAt,\n isExpired: targetSession[0].expiresAt\n ? new Date() > new Date(targetSession[0].expiresAt)\n : false,\n }\n : null,\n apiTest: apiResult,\n allSessions: allSessions.map((s) => ({\n key: s.key,\n createdAt: s.createdAt,\n expiresAt: s.expiresAt,\n isExpired: s.expiresAt ? new Date() > new Date(s.expiresAt) : false,\n })),\n });\n } catch (error) {\n return c.json({\n success: false,\n error: error.message,\n }, 500);\n }\n});\n\n// No admin routes mounted - PDS-only architecture\n// No cron/ingestion routes mounted - PDS-only architecture\n\n// Mount frontend routes LAST (contains catch-all route)\napp.route(\"/\", createFrontendRoutes());\n\nexport default app.fetch;\n// Force Val Town cache refresh for oauth-client-deno@1.0.2 DPoP fix\n",[],[1180],{"_103":1190,"_95":1191,"_155":1192,"_157":-5,"_158":140,"_159":1193,"_161":162,"_105":1194,"_100":32,"_164":178,"_166":1195,"_167":22,"_168":-5,"_169":1196,"_98":1197},"ca2a5502-7466-11f0-a509-0224a6c84d84","opinionated-val-town.md","ca2a55fc-7466-11f0-a509-0224a6c84d84",273,["D",1754664527495],"# Val Town Development Guide\n\nYou are an advanced assistant that helps programmers code on Val Town.\n\n## Core Guidelines\n\n- Ask clarifying questions when requirements are ambiguous\n- Plan large refactors or big features before you start coding\n- Provide complete, functional solutions rather than skeleton implementations\n- Test your logic against edge cases before presenting the final solution\n- Ensure all code follows Val Town's specific platform requirements\n- Always prefer small, single purpose, single responsibility components over\n large files that do many things\n- If a section of code is getting too complex, consider refactoring it into\n subcomponents\n- **Frontend = React, Backend = Hono, Database = Drizzle** - This is the way\n- **Write testable code** - Use dependency injection, follow SOLID principles,\n mock external services, write fakes instead of testing dependencies\n\n## Code Standards\n\n- Generate code in TypeScript or TSX\n- Add appropriate TypeScript types and interfaces for all data structures\n- Prefer official SDKs or libraries than writing API calls directly\n- Ask the user to supply API or library documentation if you are at all unsure\n about it\n- **Never bake in secrets into the code** - always use environment variables\n- Include comments explaining complex logic (avoid commenting obvious\n operations)\n- Follow modern ES6+ conventions and functional programming practices if\n possible\n- **Every function must be testable** - Accept dependencies as parameters,\n return predictable outputs\n- **Write tests alongside code** - Place `.test.ts` files next to the code they\n test\n\n## Project Structure\n\n### Project Organization\n\nWhen organizing a Val Town project, consider separating deployable code from\nlocal resources:\n\n```text\n├── your-project-name/ # Deployable directory (what Val Town will see)\n│ ├── backend/\n│ │ ├── database/\n│ │ │ ├── schema.ts # All table definitions, relations, and types\n│ │ │ ├── db.ts # Database connection and Drizzle instance \n│ │ │ ├── migrations.ts # Schema migration logic\n│ │ │ └── queries.ts # Reusable query functions\n│ │ ├── routes/ # Route modules\n│ │ │ ├── [route].ts\n│ │ │ └── static.ts # Static file serving\n│ │ └── index.ts # Main entry point\n│ ├── frontend/\n│ │ ├── components/\n│ │ │ ├── App.tsx\n│ │ │ └── [Component].tsx\n│ │ ├── index.html # Minimal HTML bootstrap file\n│ │ ├── index.tsx # React entry point with createRoot\n│ │ └── style.css # Global styles (prefer Tailwind classes)\n│ ├── shared/\n│ │ └── utils.ts # Shared types and functions\n│ └── deno.json # Deno configuration (MUST be in the deployed directory)\n├── resources/ # Local-only resources (images, assets)\n├── docs/ # Local-only documentation\n├── README.md # Project documentation\n└── AGENTS.md # AI assistant instructions\n```\n\n**Key Points:**\n\n- Only the contents of your main project directory will be deployed to Val Town\n- The `deno.json` file MUST be inside the deployment directory\n- Keep non-deployable resources outside the deployment directory\n\n### Deno Configuration\n\nPlace your `deno.json` in the deployable directory:\n\n```json\n{\n \"tasks\": {\n \"quality\": \"deno fmt && deno lint --fix && deno check **/*.ts **/*.tsx && deno test\",\n \"deploy\": \"deno task quality && vt push\",\n \"check\": \"deno check **/*.ts **/*.tsx\",\n \"test\": \"deno test\",\n \"fmt\": \"deno fmt\",\n \"lint\": \"deno lint --fix\"\n }\n}\n```\n\n## Frontend Architecture\n\n**Always use React** for Val Town frontends. Here's the opinionated approach:\n\n### Frontend Core Principles\n\n- **HTML is just a bootstrap file** - Keep it minimal, only load React\n- **No HTML fallbacks** - JavaScript is required, period\n- **Single Page Application** - Let React handle all rendering\n- **TypeScript everywhere** - Use `.tsx` files for all components\n- **Tailwind for styling** - Use the CDN version:\n ``\n\n### React Configuration\n\n- **Use latest versions** - Import React without version constraints\n- **JSX pragma required** - Start every `.tsx` file with\n `/** @jsxImportSource https://esm.sh/react */`\n- **No build step** - Import directly from ESM URLs\n- **Client-side only** - No SSR, inject initial data if needed\n\n## Backend Architecture\n\n### Hono Framework\n\n- Main entry point should be `backend/index.ts`\n- Export with `export default app.fetch`\n- Do NOT use Hono's serveStatic middleware\n- Use Val Town's `serveFile` utility for static assets\n- Re-throw errors in error handler for full stack traces\n\n### API Design\n\n- Create RESTful routes for CRUD operations\n- Use TypeScript interfaces for request/response types\n- Bootstrap initial data by reading and modifying HTML\n- Let errors bubble up with full context\n\n## Database with Drizzle ORM\n\nVal Town uses Turso (SQLite) under the hood. Use Drizzle ORM for type safety.\n\n### Key Concepts\n\n- **Schema-first approach** - Define all tables in `schema.ts`\n- **Single database instance** - Create one connection in `db.ts`\n- **Type-safe queries** - Use Drizzle's query builder\n- **Migrations** - Track schema changes with versioned migrations\n\n### Database Best Practices\n\n- Use singular table names (e.g., `user` not `users`)\n- Define relations for efficient querying\n- Add indexes** on foreign keys and frequently queried columns\n- Use transactions** for multi-table operations\n- Handle SQLite limitations - No complex ALTER TABLE\n- Limited ALTER TABLE support\n- Change table names instead of altering\n- Always run migrations before queries\n\n### Common Patterns\n\n- **Simple CRUD**: Use Drizzle's select, insert, update, delete\n- **Relations**: Use `db.query` for nested data\n- **Complex joins**: Use select with join methods\n- **Raw SQL**: Use `db.run(sql`)`` when needed\n\n## Testing Strategy\n\n### Testing Core Principles\n\n- Write tests first or ensure code is testable\n- Place test files next to code: `user.ts` → `user.test.ts`\n- Mock all external dependencies\n- Test behavior, not implementation\n\n### Writing Testable Code\n\n```typescript\n// BAD: Hard to test\nexport async function getUser(id: string) {\n const user = await db.select().from(userTable).where(eq(userTable.id, id));\n return user[0];\n}\n\n// GOOD: Testable with dependency injection\nexport async function getUser(id: string, dbProvider = db) {\n const user = await dbProvider.select().from(userTable).where(\n eq(userTable.id, id),\n );\n return user[0];\n}\n```\n\n### SOLID Principles\n\n1. **Single Responsibility** - Each function does one thing\n2. **Open/Closed** - Use composition over modification\n3. **Liskov Substitution** - Interfaces should be substitutable\n4. **Interface Segregation** - Small, focused interfaces\n5. **Dependency Inversion** - Depend on abstractions\n\n### Running Tests\n\n```bash\ndeno test # Run all tests\ndeno test user.test.ts # Run specific test\ndeno task quality # Includes tests in quality check\n```\n\n## TypeScript Configuration\n\n### Type Checking\n\n- Use `deno check` before deployment\n- Add explicit types for function parameters and returns\n- Define interfaces for all data structures\n- External libraries from esm.sh include types automatically\n\n### TypesSript Best Practices\n\n- Leverage TypeScript's strict mode\n- Type API responses for client-side safety\n- Use type-only imports: `import type { SomeType }`\n- Ignore Bun-specific errors if they appear\n\n## Dependency Management\n\n### Import Strategy\n\n- **Use latest versions** - No version pinning needed\n- **Import from esm.sh**: `https://esm.sh/package`\n- **Trust CDN resolution** - esm.sh handles compatibility\n- **Central deps file** - Use `deps.ts` for complex projects\n\n### Common Imports\n\n```typescript\n// React (with pragma)\n/** @jsxImportSource https://esm.sh/react */\nimport React from \"https://esm.sh/react\";\n\n// Drizzle ORM\nimport { drizzle } from \"https://esm.sh/drizzle-orm/libsql\";\n\n// Hono\nimport { Hono } from \"https://esm.sh/hono\";\n```\n\n## Development Workflow\n\n### Task Commands\n\n1. **During development**: `deno task check` - Catch type errors\n2. **Before committing**: `deno task quality` - Format, lint, type check, test\n3. **To deploy**: `deno task deploy` - Quality checks then deploy\n\n### Deployment Process\n\n```bash\ndeno task deploy # Runs quality checks first\n```\n\n- Fix any issues before deployment succeeds\n- Environment variables managed in Val Town interface\n- Only deployment directory contents are uploaded\n\n## Val Town APIs\n\n### Triggers\n\n1. **HTTP Trigger** - Web APIs and endpoints\n2. **Cron Triggers** - Scheduled tasks (1 min minimum on pro)\n3. **Email Triggers** - Process incoming emails\n\n### Standard Libraries\n\n- **Blob Storage**: `import { blob } from \"https://esm.town/v/std/blob\"`\n- **SQLite**: Use Drizzle ORM instead of raw SQL\n- **OpenAI**: `import { OpenAI } from \"https://esm.town/v/std/openai\"`\n- **Email**: `import { email } from \"https://esm.town/v/std/email\"`\n\n### Utility Functions\n\n### Importing Utilities\n\nAlways import utilities with version pins to avoid breaking changes:\n\n```ts\nimport {\n readFile,\n serveFile,\n} from \"https://esm.town/v/std/utils@85-main/index.ts\";\n```\n\n### Available Utilities\n\n**serveFile** - Serve project files with proper content types\n\nFor example, in Hono:\n\n```ts\n// serve all files in frontend/ and shared/\napp.get(\"/frontend/*\", (c) => serveFile(c.req.path, import.meta.url));\napp.get(\"/shared/*\", (c) => serveFile(c.req.path, import.meta.url));\n```\n\n**readFile** - Read files from within the project:\n\n```ts\n// Read a file from the project\nconst fileContent = await readFile(\"/frontend/index.html\", import.meta.url);\n```\n\n**listFiles** - List all files in the project\n\n```ts\nconst files = await listFiles(import.meta.url);\n```\n\n## Platform Specifics\n\n### Important Limitations\n\n- **Redirects**: Use\n `new Response(null, { status: 302, headers: { Location: \"/path\" }})`\n- **No binary files** - Text files only\n- **No Deno KV** - Use SQLite instead\n- **No browser APIs** - No alert(), prompt(), confirm()\n- **Automatic CORS** - Don't import CORS middleware\n\n## Common Gotchas\n\n### Environment\n\n- Val Town runs on Deno, not Node.js\n- Shared code can't use Deno-specific APIs\n- Use esm.sh for browser/server compatibility\n\n### Hono Issues\n\n- NEVER import serveStatic middleware\n- NEVER import CORS middleware\n- Use Val Town's utilities instead\n- **ALWAYS import Val Town utilities directly** - Never create placeholder\n functions for `serveFile`, `blob`, `email`, etc. Import them from\n `https://esm.town/v/std/utils/index.ts` or their respective standard library\n modules from the start\n\n## Migration Strategy\n\n### Principles\n\n- Track migration history in dedicated table\n- Make migrations idempotent\n- Control with environment variables\n- Test thoroughly before deployment\n\n### Best Practices\n\n- Plan schema changes carefully\n- Consider performance impact\n- Backup before destructive changes\n- Remember SQLite limitations\n- Use emojis/unicode instead of images\n- Let errors bubble up with context\n- Prefer APIs without keys (e.g., open-meteo for weather)\n- Add error debugging script:\n ``\n- **Never create placeholder functions** for Val Town utilities - always import\n the real ones directly, even during development\n",[],[1191],"files",[152,171,183,190,197,206,215,226,233,240,250,260,269,279,289,298,307,317,324,334,343,354,361,371,378,388,395,404,415,422,431,440,449,458,467,476,485,494,503,512,522,529,538,547,556,565,577,585,590,599,609,617,624,633,643,650,657,666,676,686,696,706,716,726,735,745,754,763,773,781,788,798,804,814,823,832,842,849,856,863,872,881,892,899,906,913,926,933,942,952,958,965,975,981,990,999,1008,1018,1025,1035,1041,1050,1059,1068,1077,1086,1097,1103,1113,1122,1131,1141,1150,1159,1169,1178,1189],"counts",{"_1202":32,"_1203":120,"_1204":32,"_1205":1206},"pulls","branches","forks","envVars",{"_1207":712,"_1208":32},"count","emptyCount","contents",[],{"_103":270,"_158":140,"_155":272,"_95":271,"_166":276,"_164":246,"_100":275,"_157":236,"_105":1212,"_159":273,"_168":-5,"_98":1213},["D",1760192444461],[228,235,271],"upstreamProject","upstreamBranch","emptyEnvVars","isNew","flags",[],"routes/_app.x.$handle.$name.branch.$branch.history_.$",{"_93":94,"_95":96,"_97":43,"_98":99,"_101":1222,"_178":1227,"_1230":1231,"_1244":1245,"_1250":-7,"_1251":32,"_1252":22},{"_103":104,"_95":96,"_105":1223,"_107":-5,"_108":22,"_109":110,"_111":112,"_113":114,"_14":115,"_116":-5,"_117":22,"_118":-5,"_119":120,"_16":121,"_122":123,"_124":123,"_125":126,"_127":126,"_128":126,"_129":123,"_130":123,"_23":1224,"_134":1225,"_137":1226,"_149":22},["D",1751615559344],{"_93":94,"_132":133},{"_93":94,"_136":133,"_14":115},{"_100":139,"_95":43,"_103":140,"_141":104,"_142":-5,"_143":-5,"_144":-5,"_145":-5,"_146":-5,"_147":96,"_148":94},{"_103":270,"_95":271,"_155":272,"_157":236,"_158":140,"_159":273,"_161":162,"_105":1228,"_100":275,"_164":246,"_166":276,"_167":22,"_168":-5,"_98":1229},["D",1760192444461],[228,235,271],"history",[1232,1234,1239],{"_103":270,"_158":140,"_155":272,"_95":271,"_166":276,"_164":246,"_100":275,"_157":236,"_105":1233,"_159":273,"_168":-5},["D",1760192444461],{"_103":1235,"_158":140,"_155":272,"_95":271,"_166":1236,"_164":246,"_100":120,"_157":236,"_105":1237,"_159":1238,"_168":-5},"81ee4af0-a5e9-11f0-882f-0224a6c84d84","// Comments API endpoints for checkin interactions\n// Handles comment creation, retrieval, and deletion for check-ins\n\nimport { resolvePdsUrl, resolveProfileFromPds } from \"./anchor-api.ts\";\nimport { db } from \"../database/db.ts\";\nimport {\n CheckinCountInsert,\n checkinCountsTable,\n CheckinInteractionInsert,\n checkinInteractionsTable,\n} from \"../database/schema.ts\";\nimport { and, desc, eq, sql } from \"https://esm.sh/drizzle-orm@0.44.5\";\n\n// Interface for comment records\ninterface CommentRecord {\n uri: string;\n cid: string;\n value: {\n $type: string;\n text: string;\n createdAt: string;\n checkinRef: {\n uri: string;\n cid: string;\n };\n };\n}\n\n// Interface for API response format\ninterface CommentResponse {\n uri: string;\n author: {\n did: string;\n handle: string;\n displayName?: string;\n avatar?: string;\n };\n text: string;\n createdAt: string;\n}\n\n// Create a comment for a checkin\nexport async function createComment(\n checkinDid: string,\n checkinRkey: string,\n authorDid: string,\n commentText: string,\n oauthSession: any, // OAuthSession from @tijs/atproto-oauth-hono\n): Promise<{ uri: string; cid: string }> {\n try {\n // Validate comment text\n if (!commentText || commentText.trim().length === 0) {\n throw new Error(\"Comment text is required\");\n }\n\n if (commentText.length > 1000) {\n throw new Error(\"Comment text must be 1000 characters or less\");\n }\n\n const pdsUrl = oauthSession.pdsUrl;\n\n // First, get the checkin record to create a proper reference\n const checkinResponse = await fetch(\n `${pdsUrl}/xrpc/com.atproto.repo.getRecord?repo=${checkinDid}&collection=app.dropanchor.checkin&rkey=${checkinRkey}`,\n );\n\n if (!checkinResponse.ok) {\n throw new Error(`Checkin not found: ${checkinResponse.status}`);\n }\n\n const checkinData = await checkinResponse.json();\n\n // Create the comment record\n const commentRecord = {\n $type: \"app.dropanchor.comment\",\n text: commentText.trim(),\n createdAt: new Date().toISOString(),\n checkinRef: {\n uri: `at://${checkinDid}/app.dropanchor.checkin/${checkinRkey}`,\n cid: checkinData.cid,\n },\n };\n\n // Create the comment record in the commenter's PDS using OAuth session's makeRequest\n // This automatically handles token refresh and DPoP\n const createResponse = await oauthSession.makeRequest(\n \"POST\",\n `${pdsUrl}/xrpc/com.atproto.repo.createRecord`,\n {\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n repo: authorDid, // Store in the commenter's PDS\n collection: \"app.dropanchor.comment\",\n record: commentRecord,\n }),\n },\n );\n\n if (!createResponse.ok) {\n const errorData = await createResponse.json();\n throw new Error(\n `Failed to create comment: ${createResponse.status} - ${\n errorData.message || \"Unknown error\"\n }`,\n );\n }\n\n const result = await createResponse.json();\n\n // Store interaction in index for efficient discovery\n try {\n const checkinAtUri =\n `at://${checkinDid}/app.dropanchor.checkin/${checkinRkey}`;\n\n // Insert or replace interaction record\n const interactionData: CheckinInteractionInsert = {\n checkinDid,\n checkinRkey,\n checkinUri: checkinAtUri,\n authorDid,\n interactionType: \"comment\",\n interactionUri: result.uri,\n interactionRkey: result.uri.split(\"/\").pop() || \"\",\n interactionCid: result.cid,\n commentText: commentText.trim(),\n createdAt: new Date().toISOString(),\n updatedAt: new Date().toISOString(),\n };\n\n await db.insert(checkinInteractionsTable)\n .values(interactionData)\n .onConflictDoUpdate({\n target: [\n checkinInteractionsTable.checkinDid,\n checkinInteractionsTable.checkinRkey,\n checkinInteractionsTable.authorDid,\n checkinInteractionsTable.interactionType,\n ],\n set: {\n interactionUri: result.uri,\n interactionCid: result.cid,\n commentText: commentText.trim(),\n updatedAt: new Date().toISOString(),\n },\n });\n\n // Update or insert count record\n const existingCount = await db.select()\n .from(checkinCountsTable)\n .where(and(\n eq(checkinCountsTable.checkinDid, checkinDid),\n eq(checkinCountsTable.checkinRkey, checkinRkey),\n ))\n .limit(1);\n\n if (existingCount.length > 0) {\n // Update existing count\n await db.update(checkinCountsTable)\n .set({\n commentsCount: sql`${checkinCountsTable.commentsCount} + 1`,\n lastCommentAt: new Date().toISOString(),\n updatedAt: new Date().toISOString(),\n })\n .where(and(\n eq(checkinCountsTable.checkinDid, checkinDid),\n eq(checkinCountsTable.checkinRkey, checkinRkey),\n ));\n } else {\n // Insert new count record\n const countData: CheckinCountInsert = {\n checkinDid,\n checkinRkey,\n checkinUri: checkinAtUri,\n likesCount: 0,\n commentsCount: 1,\n lastCommentAt: new Date().toISOString(),\n updatedAt: new Date().toISOString(),\n };\n\n await db.insert(checkinCountsTable).values(countData);\n }\n } catch (indexError) {\n // Log index error but don't fail the comment creation\n console.warn(\"Failed to update comment index:\", indexError);\n }\n\n return result;\n } catch (error) {\n console.error(\"Create comment error:\", error);\n throw error;\n }\n}\n\n// Get all comments for a checkin using efficient index-based discovery\nexport async function getCommentsForCheckin(\n checkinDid: string,\n checkinRkey: string,\n corsHeaders: Record,\n): Promise {\n try {\n // const checkinAtUri =\n // `at://${checkinDid}/app.dropanchor.checkin/${checkinRkey}`;\n\n // Use index to efficiently find all comments for this checkin\n const indexComments = await db.select()\n .from(checkinInteractionsTable)\n .where(and(\n eq(checkinInteractionsTable.checkinDid, checkinDid),\n eq(checkinInteractionsTable.checkinRkey, checkinRkey),\n eq(checkinInteractionsTable.interactionType, \"comment\"),\n ))\n .orderBy(desc(checkinInteractionsTable.createdAt));\n\n if (indexComments.length === 0) {\n // No comments found in index, return empty result\n return new Response(\n JSON.stringify({\n comments: [],\n count: 0,\n }),\n {\n headers: corsHeaders,\n },\n );\n }\n\n const allComments: CommentResponse[] = [];\n\n // Fetch actual comment records from PDS instances using index data\n for (const indexComment of indexComments) {\n try {\n // Get the commenter's PDS URL\n const commenterPdsUrl = await resolvePdsUrl(indexComment.authorDid);\n if (!commenterPdsUrl) continue;\n\n // Fetch the actual comment record from the commenter's PDS\n const recordResponse = await fetch(\n `${commenterPdsUrl}/xrpc/com.atproto.repo.getRecord?repo=${indexComment.authorDid}&collection=app.dropanchor.comment&rkey=${indexComment.interactionRkey}`,\n );\n\n if (!recordResponse.ok) {\n console.warn(\n `Failed to fetch comment record ${indexComment.interactionUri}: ${recordResponse.status}`,\n );\n continue;\n }\n\n const recordData = await recordResponse.json();\n\n // Get fresh profile data for the commenter\n const profileData = await resolveProfileFromPds(indexComment.authorDid);\n\n const commentResponse: CommentResponse = {\n uri: recordData.uri,\n author: {\n did: indexComment.authorDid,\n handle: profileData?.handle || indexComment.authorDid,\n displayName: profileData?.displayName,\n avatar: profileData?.avatar,\n },\n text: recordData.value.text,\n createdAt: recordData.value.createdAt,\n };\n\n allComments.push(commentResponse);\n } catch (error) {\n console.warn(\n `Failed to fetch comment ${indexComment.interactionUri}:`,\n error,\n );\n // Continue to next comment\n }\n }\n\n // Get total count from index (more efficient than counting array)\n const countResult = await db.select({ count: sql`COUNT(*)` })\n .from(checkinInteractionsTable)\n .where(and(\n eq(checkinInteractionsTable.checkinDid, checkinDid),\n eq(checkinInteractionsTable.checkinRkey, checkinRkey),\n eq(checkinInteractionsTable.interactionType, \"comment\"),\n ));\n\n return new Response(\n JSON.stringify({\n comments: allComments,\n count: countResult[0]?.count || allComments.length,\n }),\n {\n headers: corsHeaders,\n },\n );\n } catch (error) {\n console.error(\"Get comments error:\", error);\n return new Response(JSON.stringify({ error: \"Internal server error\" }), {\n status: 500,\n headers: corsHeaders,\n });\n }\n}\n\n// Remove a comment from a checkin\nexport async function removeComment(\n checkinDid: string,\n checkinRkey: string,\n commentRkey: string,\n authorDid: string, // The person who created the comment (the commenter)\n oauthSession: any, // OAuthSession from @tijs/atproto-oauth-hono\n): Promise {\n try {\n const pdsUrl = oauthSession.pdsUrl;\n\n // Verify that the comment exists and belongs to the authenticated user\n const commentResponse = await fetch(\n `${pdsUrl}/xrpc/com.atproto.repo.getRecord?repo=${authorDid}&collection=app.dropanchor.comment&rkey=${commentRkey}`,\n );\n\n if (!commentResponse.ok) {\n throw new Error(\"Comment not found\");\n }\n\n const commentData = await commentResponse.json();\n\n // Verify that this comment references the specified checkin\n const checkinAtUri =\n `at://${checkinDid}/app.dropanchor.checkin/${checkinRkey}`;\n if (commentData.value.checkinRef?.uri !== checkinAtUri) {\n throw new Error(\"Comment does not reference the specified checkin\");\n }\n\n // Delete the comment record from the commenter's PDS using OAuth session's makeRequest\n // This automatically handles token refresh and DPoP\n const deleteResponse = await oauthSession.makeRequest(\n \"POST\",\n `${pdsUrl}/xrpc/com.atproto.repo.deleteRecord`,\n {\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n repo: authorDid, // Delete from the commenter's PDS\n collection: \"app.dropanchor.comment\",\n rkey: commentRkey,\n }),\n },\n );\n\n if (!deleteResponse.ok) {\n const errorData = await deleteResponse.json();\n throw new Error(\n `Failed to delete comment: ${deleteResponse.status} - ${\n errorData.message || \"Unknown error\"\n }`,\n );\n }\n\n // Remove interaction from index\n try {\n await db.delete(checkinInteractionsTable)\n .where(and(\n eq(checkinInteractionsTable.checkinDid, checkinDid),\n eq(checkinInteractionsTable.checkinRkey, checkinRkey),\n eq(checkinInteractionsTable.authorDid, authorDid),\n eq(checkinInteractionsTable.interactionType, \"comment\"),\n ));\n\n // Update count record\n const existingCount = await db.select()\n .from(checkinCountsTable)\n .where(and(\n eq(checkinCountsTable.checkinDid, checkinDid),\n eq(checkinCountsTable.checkinRkey, checkinRkey),\n ))\n .limit(1);\n\n if (existingCount.length > 0) {\n await db.update(checkinCountsTable)\n .set({\n commentsCount: sql`MAX(0, ${checkinCountsTable.commentsCount} - 1)`,\n updatedAt: new Date().toISOString(),\n })\n .where(and(\n eq(checkinCountsTable.checkinDid, checkinDid),\n eq(checkinCountsTable.checkinRkey, checkinRkey),\n ));\n }\n } catch (indexError) {\n // Log index error but don't fail the comment deletion\n console.warn(\"Failed to update comment index on removal:\", indexError);\n }\n } catch (error) {\n console.error(\"Remove comment error:\", error);\n throw error;\n }\n}\n",["D",1760108277415],1357,{"_103":1240,"_158":140,"_155":272,"_95":271,"_166":1241,"_164":246,"_100":32,"_157":236,"_105":1242,"_159":1243,"_168":-5},"202a53a0-a5d9-11f0-9d58-0224a6c84d84","// Comments API endpoints for checkin interactions\n// Handles comment creation, retrieval, and deletion for check-ins\n\nimport { resolvePdsUrl, resolveProfileFromPds } from \"./anchor-api.ts\";\nimport { db } from \"../database/db.ts\";\nimport {\n CheckinCountInsert,\n checkinCountsTable,\n CheckinInteractionInsert,\n checkinInteractionsTable,\n} from \"../database/schema.ts\";\nimport { and, desc, eq, sql } from \"https://esm.sh/drizzle-orm@0.44.5\";\n\n// Interface for comment records\ninterface CommentRecord {\n uri: string;\n cid: string;\n value: {\n $type: string;\n text: string;\n createdAt: string;\n checkinRef: {\n uri: string;\n cid: string;\n };\n };\n}\n\n// Interface for API response format\ninterface CommentResponse {\n uri: string;\n author: {\n did: string;\n handle: string;\n displayName?: string;\n avatar?: string;\n };\n text: string;\n createdAt: string;\n}\n\n// Create a comment for a checkin\nexport async function createComment(\n checkinDid: string,\n checkinRkey: string,\n authorDid: string,\n commentText: string,\n pdsUrl: string,\n accessToken: string,\n dpopPrivateKey?: any,\n dpopPublicKey?: any,\n): Promise<{ uri: string; cid: string }> {\n try {\n // Validate comment text\n if (!commentText || commentText.trim().length === 0) {\n throw new Error(\"Comment text is required\");\n }\n\n if (commentText.length > 1000) {\n throw new Error(\"Comment text must be 1000 characters or less\");\n }\n\n // First, get the checkin record to create a proper reference\n const checkinResponse = await fetch(\n `${pdsUrl}/xrpc/com.atproto.repo.getRecord?repo=${checkinDid}&collection=app.dropanchor.checkin&rkey=${checkinRkey}`,\n );\n\n if (!checkinResponse.ok) {\n throw new Error(`Checkin not found: ${checkinResponse.status}`);\n }\n\n const checkinData = await checkinResponse.json();\n\n // Create the comment record\n const commentRecord = {\n $type: \"app.dropanchor.comment\",\n text: commentText.trim(),\n createdAt: new Date().toISOString(),\n checkinRef: {\n uri: `at://${checkinDid}/app.dropanchor.checkin/${checkinRkey}`,\n cid: checkinData.cid,\n },\n };\n\n // Create headers for authenticated request\n const headers: Record = {\n \"Content-Type\": \"application/json\",\n \"Authorization\": `Bearer ${accessToken}`,\n };\n\n // Add DPoP proof if keys are provided\n if (dpopPrivateKey && dpopPublicKey) {\n const dpopProof = await createDpopProof(\n \"POST\",\n `${pdsUrl}/xrpc/com.atproto.repo.createRecord`,\n accessToken,\n dpopPrivateKey,\n dpopPublicKey,\n );\n headers[\"DPoP\"] = dpopProof;\n }\n\n // Create the comment record in the commenter's PDS (authorDid is the person creating the comment)\n const createResponse = await fetch(\n `${pdsUrl}/xrpc/com.atproto.repo.createRecord`,\n {\n method: \"POST\",\n headers,\n body: JSON.stringify({\n repo: authorDid, // Store in the commenter's PDS\n collection: \"app.dropanchor.comment\",\n record: commentRecord,\n }),\n },\n );\n\n if (!createResponse.ok) {\n const errorData = await createResponse.json();\n throw new Error(\n `Failed to create comment: ${createResponse.status} - ${\n errorData.message || \"Unknown error\"\n }`,\n );\n }\n\n const result = await createResponse.json();\n\n // Store interaction in index for efficient discovery\n try {\n const checkinAtUri =\n `at://${checkinDid}/app.dropanchor.checkin/${checkinRkey}`;\n\n // Insert or replace interaction record\n const interactionData: CheckinInteractionInsert = {\n checkinDid,\n checkinRkey,\n checkinUri: checkinAtUri,\n authorDid,\n interactionType: \"comment\",\n interactionUri: result.uri,\n interactionRkey: result.uri.split(\"/\").pop() || \"\",\n interactionCid: result.cid,\n commentText: commentText.trim(),\n createdAt: new Date().toISOString(),\n updatedAt: new Date().toISOString(),\n };\n\n await db.insert(checkinInteractionsTable)\n .values(interactionData)\n .onConflictDoUpdate({\n target: [\n checkinInteractionsTable.checkinDid,\n checkinInteractionsTable.checkinRkey,\n checkinInteractionsTable.authorDid,\n checkinInteractionsTable.interactionType,\n ],\n set: {\n interactionUri: result.uri,\n interactionCid: result.cid,\n commentText: commentText.trim(),\n updatedAt: new Date().toISOString(),\n },\n });\n\n // Update or insert count record\n const existingCount = await db.select()\n .from(checkinCountsTable)\n .where(and(\n eq(checkinCountsTable.checkinDid, checkinDid),\n eq(checkinCountsTable.checkinRkey, checkinRkey),\n ))\n .limit(1);\n\n if (existingCount.length > 0) {\n // Update existing count\n await db.update(checkinCountsTable)\n .set({\n commentsCount: sql`${checkinCountsTable.commentsCount} + 1`,\n lastCommentAt: new Date().toISOString(),\n updatedAt: new Date().toISOString(),\n })\n .where(and(\n eq(checkinCountsTable.checkinDid, checkinDid),\n eq(checkinCountsTable.checkinRkey, checkinRkey),\n ));\n } else {\n // Insert new count record\n const countData: CheckinCountInsert = {\n checkinDid,\n checkinRkey,\n checkinUri: checkinAtUri,\n likesCount: 0,\n commentsCount: 1,\n lastCommentAt: new Date().toISOString(),\n updatedAt: new Date().toISOString(),\n };\n\n await db.insert(checkinCountsTable).values(countData);\n }\n } catch (indexError) {\n // Log index error but don't fail the comment creation\n console.warn(\"Failed to update comment index:\", indexError);\n }\n\n return result;\n } catch (error) {\n console.error(\"Create comment error:\", error);\n throw error;\n }\n}\n\n// Get all comments for a checkin using efficient index-based discovery\nexport async function getCommentsForCheckin(\n checkinDid: string,\n checkinRkey: string,\n corsHeaders: Record,\n): Promise {\n try {\n // const checkinAtUri =\n // `at://${checkinDid}/app.dropanchor.checkin/${checkinRkey}`;\n\n // Use index to efficiently find all comments for this checkin\n const indexComments = await db.select()\n .from(checkinInteractionsTable)\n .where(and(\n eq(checkinInteractionsTable.checkinDid, checkinDid),\n eq(checkinInteractionsTable.checkinRkey, checkinRkey),\n eq(checkinInteractionsTable.interactionType, \"comment\"),\n ))\n .orderBy(desc(checkinInteractionsTable.createdAt));\n\n if (indexComments.length === 0) {\n // No comments found in index, return empty result\n return new Response(\n JSON.stringify({\n comments: [],\n count: 0,\n }),\n {\n headers: corsHeaders,\n },\n );\n }\n\n const allComments: CommentResponse[] = [];\n\n // Fetch actual comment records from PDS instances using index data\n for (const indexComment of indexComments) {\n try {\n // Get the commenter's PDS URL\n const commenterPdsUrl = await resolvePdsUrl(indexComment.authorDid);\n if (!commenterPdsUrl) continue;\n\n // Fetch the actual comment record from the commenter's PDS\n const recordResponse = await fetch(\n `${commenterPdsUrl}/xrpc/com.atproto.repo.getRecord?repo=${indexComment.authorDid}&collection=app.dropanchor.comment&rkey=${indexComment.interactionRkey}`,\n );\n\n if (!recordResponse.ok) {\n console.warn(\n `Failed to fetch comment record ${indexComment.interactionUri}: ${recordResponse.status}`,\n );\n continue;\n }\n\n const recordData = await recordResponse.json();\n\n // Get fresh profile data for the commenter\n const profileData = await resolveProfileFromPds(indexComment.authorDid);\n\n const commentResponse: CommentResponse = {\n uri: recordData.uri,\n author: {\n did: indexComment.authorDid,\n handle: profileData?.handle || indexComment.authorDid,\n displayName: profileData?.displayName,\n avatar: profileData?.avatar,\n },\n text: recordData.value.text,\n createdAt: recordData.value.createdAt,\n };\n\n allComments.push(commentResponse);\n } catch (error) {\n console.warn(\n `Failed to fetch comment ${indexComment.interactionUri}:`,\n error,\n );\n // Continue to next comment\n }\n }\n\n // Get total count from index (more efficient than counting array)\n const countResult = await db.select({ count: sql`COUNT(*)` })\n .from(checkinInteractionsTable)\n .where(and(\n eq(checkinInteractionsTable.checkinDid, checkinDid),\n eq(checkinInteractionsTable.checkinRkey, checkinRkey),\n eq(checkinInteractionsTable.interactionType, \"comment\"),\n ));\n\n return new Response(\n JSON.stringify({\n comments: allComments,\n count: countResult[0]?.count || allComments.length,\n }),\n {\n headers: corsHeaders,\n },\n );\n } catch (error) {\n console.error(\"Get comments error:\", error);\n return new Response(JSON.stringify({ error: \"Internal server error\" }), {\n status: 500,\n headers: corsHeaders,\n });\n }\n}\n\n// Remove a comment from a checkin\nexport async function removeComment(\n checkinDid: string,\n checkinRkey: string,\n commentRkey: string,\n authorDid: string, // The person who created the comment (the commenter)\n pdsUrl: string, // PDS URL of the commenter\n accessToken: string,\n dpopPrivateKey?: any,\n dpopPublicKey?: any,\n): Promise {\n try {\n // Verify that the comment exists and belongs to the authenticated user\n const commentResponse = await fetch(\n `${pdsUrl}/xrpc/com.atproto.repo.getRecord?repo=${authorDid}&collection=app.dropanchor.comment&rkey=${commentRkey}`,\n );\n\n if (!commentResponse.ok) {\n throw new Error(\"Comment not found\");\n }\n\n const commentData = await commentResponse.json();\n\n // Verify that this comment references the specified checkin\n const checkinAtUri =\n `at://${checkinDid}/app.dropanchor.checkin/${checkinRkey}`;\n if (commentData.value.checkinRef?.uri !== checkinAtUri) {\n throw new Error(\"Comment does not reference the specified checkin\");\n }\n\n // Create headers for authenticated request\n const headers: Record = {\n \"Content-Type\": \"application/json\",\n \"Authorization\": `Bearer ${accessToken}`,\n };\n\n // Add DPoP proof if keys are provided\n if (dpopPrivateKey && dpopPublicKey) {\n const dpopProof = await createDpopProof(\n \"POST\",\n `${pdsUrl}/xrpc/com.atproto.repo.deleteRecord`,\n accessToken,\n dpopPrivateKey,\n dpopPublicKey,\n );\n headers[\"DPoP\"] = dpopProof;\n }\n\n // Delete the comment record from the commenter's PDS\n const deleteResponse = await fetch(\n `${pdsUrl}/xrpc/com.atproto.repo.deleteRecord`,\n {\n method: \"POST\",\n headers,\n body: JSON.stringify({\n repo: authorDid, // Delete from the commenter's PDS\n collection: \"app.dropanchor.comment\",\n rkey: commentRkey,\n }),\n },\n );\n\n if (!deleteResponse.ok) {\n const errorData = await deleteResponse.json();\n throw new Error(\n `Failed to delete comment: ${deleteResponse.status} - ${\n errorData.message || \"Unknown error\"\n }`,\n );\n }\n\n // Remove interaction from index\n try {\n await db.delete(checkinInteractionsTable)\n .where(and(\n eq(checkinInteractionsTable.checkinDid, checkinDid),\n eq(checkinInteractionsTable.checkinRkey, checkinRkey),\n eq(checkinInteractionsTable.authorDid, authorDid),\n eq(checkinInteractionsTable.interactionType, \"comment\"),\n ));\n\n // Update count record\n const existingCount = await db.select()\n .from(checkinCountsTable)\n .where(and(\n eq(checkinCountsTable.checkinDid, checkinDid),\n eq(checkinCountsTable.checkinRkey, checkinRkey),\n ))\n .limit(1);\n\n if (existingCount.length > 0) {\n await db.update(checkinCountsTable)\n .set({\n commentsCount: sql`MAX(0, ${checkinCountsTable.commentsCount} - 1)`,\n updatedAt: new Date().toISOString(),\n })\n .where(and(\n eq(checkinCountsTable.checkinDid, checkinDid),\n eq(checkinCountsTable.checkinRkey, checkinRkey),\n ));\n }\n } catch (indexError) {\n // Log index error but don't fail the comment deletion\n console.warn(\"Failed to update comment index on removal:\", indexError);\n }\n } catch (error) {\n console.error(\"Remove comment error:\", error);\n throw error;\n }\n}\n\n// Helper function to create DPoP proof (simplified version)\nasync function createDpopProof(\n method: string,\n url: string,\n accessToken: string,\n privateKey: any,\n publicKey: any,\n): Promise {\n try {\n const { SignJWT, calculateJwkThumbprint } = await import(\n \"https://esm.sh/jose@5.4.0\"\n );\n\n // Calculate JWK thumbprint\n const jkt = await calculateJwkThumbprint(publicKey, \"sha256\");\n\n // Calculate access token hash\n const encoder = new TextEncoder();\n const tokenBytes = encoder.encode(accessToken);\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", tokenBytes);\n const hashArray = new Uint8Array(hashBuffer);\n const ath = btoa(String.fromCharCode(...hashArray))\n .replace(/\\+/g, \"-\")\n .replace(/\\//g, \"_\")\n .replace(/=/g, \"\");\n\n // Create DPoP proof\n const now = Math.floor(Date.now() / 1000);\n return await new SignJWT({\n htm: method,\n htu: url,\n jkt: jkt,\n ath: ath,\n iat: now,\n jti: crypto.randomUUID(),\n })\n .setProtectedHeader({\n alg: \"ES256\",\n typ: \"dpop+jwt\",\n jwk: publicKey,\n })\n .sign(\n await crypto.subtle.importKey(\n \"jwk\",\n privateKey,\n { name: \"ECDSA\", namedCurve: \"P-256\" },\n false,\n [\"sign\"],\n ),\n );\n } catch (error) {\n console.error(\"DPoP proof creation failed:\", error);\n throw error;\n }\n}\n",["D",1760101241271],1336,"versions",[1246,1248,1249],{"_178":1232,"_1247":1234},"previous",{"_178":1234,"_1247":1239},{"_178":1239,"_1247":-5},"versionNumber","page","hasNext","actionData","errors"]

tijs

location-feed-generator

History for comments.ts