[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_247":248,"_249":250},"routes/_app.x.$handle.$name",{"_101":100,"_32":46,"_110":91,"_27":111,"_13":14,"_112":-5,"_11":113,"_114":115,"_116":117,"_118":119,"_120":121,"_20":-5,"_122":-5,"_123":-5,"_124":25,"_125":126,"_127":60,"_128":-5,"_129":-5,"_130":131},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",123,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","frontend/root.tsx","latestPath","fileId","01a0931d-4f94-72bb-aad6-4a62535d9a45","name","root.tsx","fileType","script","content","/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"\")}\n \n \n \n \n TSHC Sovereign Forge\n

TSHC APP FOUNDRY MVP

\\${product.name}

\\${product.problem}

TARGET CUSTOMER

\\${product.customer}

MONETIZATION

\\${product.priceModel}

ACQUISITION

\\${product.acquisition}

COMMERCIAL SCORE

\\${product.score}/100

\\${product.verdict}

Generated and deployed by TSHC App Foundry.

\\`));\napp.onError((err) => Promise.reject(err));\nexport default app.fetch;`;\n}\n\napp.get(\"/\", (c) => c.html(Root()));\nfor (const path of [\"/apps\",\"/build\",\"/tools\",\"/pricing\",\"/account\",\"/admin-orders\",\"/resources\",\"/about\",\"/contact\",\"/privacy\",\"/terms\",\"/refunds\",\"/data-explorer\",\"/property-scanner\",\"/business-toolkit\"]) {\n app.get(path, (c) => c.html(Root()));\n}\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/source\", (c) => c.redirect(parseVal().links.self.val));\napp.get(\"/api/health\", (c) => c.json({ ok: true, service: \"TSHC Sovereign Forge\", version: 3, sdgFirst: true, paymentGateway: true, entitlementGate: true, deployBridge: true }));\n\napp.get(\"/api/session\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n return c.json({ ok: true, authenticated: !!session?.user, user: session?.user ? { username: session.user.username, type: session.user.type } : null });\n});\n\napp.get(\"/api/ideas\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user || session.user.username !== \"trinlahsovereignholdingscompl\") return c.json({ ok:false, error:\"Owner access required\" }, 401);\n const result = await sqlite.execute(\"SELECT * FROM app_ideas ORDER BY id DESC LIMIT 50\");\n return c.json({ ok: true, ideas: result.rows });\n});\n\napp.post(\"/api/ideas\", async (c) => {\n try {\n const body = await c.req.json();\n const requesterName = requiredText(body.requester_name, \"Your name\").slice(0,120);\n const requesterEmail = requiredText(body.requester_email, \"Your email\").slice(0,200);\n if (!/^\\S+@\\S+\\.\\S+$/.test(requesterEmail)) return c.json({ok:false,error:\"Valid email required\"},400);\n const name = requiredText(body.name, \"App name\");\n const customer = requiredText(body.customer, \"Customer\");\n const problem = requiredText(body.problem, \"Problem\");\n const priceModel = requiredText(body.price_model, \"Price model\");\n const acquisition = requiredText(body.acquisition, \"Acquisition route\");\n const sdgGoals = Array.isArray(body.sdg_goals) ? [...new Set(body.sdg_goals.map((x:any)=>Number(x)).filter((x:number)=>Number.isInteger(x)&&x>=1&&x<=17))].sort((a:number,b:number)=>a-b) : [];\n const s = scoreIdea(body);\n const result = await sqlite.execute({\n sql: `INSERT INTO app_ideas (requester_name, requester_email, sdg_goals, name, customer, problem, price_model, acquisition, pain, buyer, speed, recurring, distribution, defensibility, score, verdict, status)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'queued')`,\n args: [requesterName, requesterEmail, JSON.stringify(sdgGoals), name, customer, problem, priceModel, acquisition, s.pain, s.buyer, s.speed, s.recurring, s.distribution, s.defensibility, s.score, s.verdict],\n });\n const row = await sqlite.execute({ sql: \"SELECT * FROM app_ideas WHERE id = ?\", args: [Number(result.lastInsertRowid)] });\n return c.json({ ok: true, idea: row.rows[0] }, 201);\n } catch (err) {\n return c.json({ ok: false, error: err instanceof Error ? err.message : \"Invalid request\" }, 400);\n }\n});\n\napp.patch(\"/api/ideas/:id/status\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user || session.user.username !== \"trinlahsovereignholdingscompl\") return c.json({ ok:false, error:\"Owner access required\" }, 401);\n const id = Number(c.req.param(\"id\"));\n const body = await c.req.json();\n const allowed = new Set([\"queued\", \"validating\", \"building\", \"testing\", \"live\", \"paused\", \"rejected\"]);\n const status = String(body.status ?? \"\");\n if (!Number.isInteger(id) || !allowed.has(status)) return c.json({ ok: false, error: \"Invalid id or status\" }, 400);\n await sqlite.execute({ sql: \"UPDATE app_ideas SET status = ? WHERE id = ?\", args: [status, id] });\n const row = await sqlite.execute({ sql: \"SELECT * FROM app_ideas WHERE id = ?\", args: [id] });\n if (!row.rows[0]) return c.json({ ok: false, error: \"Not found\" }, 404);\n return c.json({ ok: true, idea: row.rows[0] });\n});\n\napp.get(\"/api/ideas/:id/brief\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user || session.user.username !== \"trinlahsovereignholdingscompl\") return c.json({ ok:false, error:\"Owner access required\" }, 401);\n const id = Number(c.req.param(\"id\"));\n const row = await sqlite.execute({ sql: \"SELECT * FROM app_ideas WHERE id = ?\", args: [id] });\n const idea: any = row.rows[0];\n if (!idea) return c.json({ ok: false, error: \"Not found\" }, 404);\n const brief = {\n product: idea.name,\n target_customer: idea.customer,\n problem: idea.problem,\n monetization: idea.price_model,\n acquisition: idea.acquisition,\n sdg_goals: (()=>{try{return JSON.parse(idea.sdg_goals||'[]')}catch{return []}})(),\n commercial_score: idea.score,\n verdict: idea.verdict,\n mvp: [\"Single clear core workflow\", \"Persistent data model\", \"Mobile-friendly UI\", \"Analytics-ready events\", \"Production health endpoint\"],\n launch_gate: idea.score >= 65 ? \"Proceed to validation/build\" : \"Run demand test before build\",\n };\n return c.json({ ok: true, brief });\n});\n\napp.post(\"/api/ideas/:id/deploy\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user || !session.accessToken || session.user.username !== \"trinlahsovereignholdingscompl\") return c.json({ ok: false, error: \"Owner sign-in required\", login: \"/auth/login\" }, 401);\n const id = Number(c.req.param(\"id\"));\n const row = await sqlite.execute({ sql: \"SELECT * FROM app_ideas WHERE id = ?\", args: [id] });\n const idea: any = row.rows[0];\n if (!idea) return c.json({ ok: false, error: \"Not found\" }, 404);\n if (idea.deployment_url) return c.json({ ok: true, idea, reused: true });\n\n const client = new ValTown({ bearerToken: session.accessToken });\n let createdVal: any = null;\n try {\n const name = slugify(idea.name, idea.id);\n createdVal = await client.vals.create({ name, privacy: \"public\", description: `MVP generated by TSHC App Foundry: ${idea.name}`.slice(0, 120) });\n const file = await client.vals.files.create(createdVal.id, { path: \"main.ts\", type: \"http\", content: generatedAppSource(idea) });\n const endpoint = file.links.endpoint;\n if (!endpoint) throw new Error(\"Val Town did not return a deployed endpoint\");\n await sqlite.execute({ sql: \"UPDATE app_ideas SET status = 'live', deployment_url = ?, deployment_val_id = ?, deployed_at = CURRENT_TIMESTAMP WHERE id = ?\", args: [endpoint, createdVal.id, id] });\n const updated = await sqlite.execute({ sql: \"SELECT * FROM app_ideas WHERE id = ?\", args: [id] });\n return c.json({ ok: true, idea: updated.rows[0], deployment_url: endpoint }, 201);\n } catch (err) {\n if (createdVal?.id) { try { await client.vals.delete(createdVal.id); } catch (_) {} }\n return c.json({ ok: false, error: err instanceof Error ? err.message : \"Deployment failed\" }, 500);\n }\n});\n\napp.get(\"/api/sdg/:country\", async (c) => {\n const country = (c.req.param(\"country\") || \"USA\").toUpperCase();\n const indicators = [\n [\"SP.POV.DDAY\", \"SDG 1\", \"Poverty headcount at $3/day (PPP)\", \"%\"],\n [\"SH.STA.STNT.ZS\", \"SDG 2\", \"Child stunting\", \"%\"],\n [\"SP.DYN.LE00.IN\", \"SDG 3\", \"Life expectancy\", \"years\"],\n [\"SE.PRM.CMPT.ZS\", \"SDG 4\", \"Primary completion rate\", \"%\"],\n [\"SL.TLF.CACT.FE.ZS\", \"SDG 5\", \"Female labor force participation\", \"%\"],\n [\"SH.H2O.SMDW.ZS\", \"SDG 6\", \"Safely managed drinking water\", \"%\"],\n [\"EG.ELC.ACCS.ZS\", \"SDG 7\", \"Access to electricity\", \"%\"],\n [\"NY.GDP.PCAP.KD.ZG\", \"SDG 8\", \"GDP per capita growth\", \"%\"],\n [\"NV.IND.MANF.ZS\", \"SDG 9\", \"Manufacturing value added\", \"% GDP\"],\n [\"SI.POV.GINI\", \"SDG 10\", \"Gini index\", \"index\"],\n [\"EN.POP.SLUM.UR.ZS\", \"SDG 11\", \"Urban population in slums\", \"%\"],\n [\"EG.USE.COMM.FO.ZS\", \"SDG 12\", \"Fossil-fuel energy consumption\", \"% energy\"],\n [\"EN.ATM.CO2E.PC\", \"SDG 13\", \"CO2 emissions per capita\", \"t/person\"],\n [\"ER.MRN.PTMR.ZS\", \"SDG 14\", \"Marine protected areas\", \"% territorial waters\"],\n [\"ER.LND.PTLD.ZS\", \"SDG 15\", \"Terrestrial protected areas\", \"% land area\"],\n [\"VC.IHR.PSRC.P5\", \"SDG 16\", \"Intentional homicides\", \"per 100k\"],\n [\"NE.TRD.GNFS.ZS\", \"SDG 17\", \"Trade and global economic connectedness\", \"% GDP\"],\n ];\n let rows:any[]=[];\n try{\n const chunks=[] as string[][];\n for(let i=0;iString(x[0])));\n const sets=await Promise.all(chunks.map(async codes=>{\n try{\n const r=await fetch(`https://api.worldbank.org/v2/country/${country}/indicator/${codes.join(';')}?source=2&format=json&date=2018:2026&per_page=500`);\n const j:any=await r.json();\n return Array.isArray(j?.[1])?j[1]:[];\n }catch(_){return []}\n }));\n rows=sets.flat();\n }catch(_){}\n const out=indicators.map(([id,goal,label,unit])=>{\n const matches=rows.filter((x:any)=>String(x?.indicator?.id||'').toUpperCase()===String(id).toUpperCase()&&x?.value!==null).sort((a:any,b:any)=>Number(b.date)-Number(a.date));\n const row=matches[0];\n return {id,goal,label,unit,value:row?.value??null,year:row?.date??null};\n });\n return c.json({ ok: true, country, source: \"World Bank API\", indicators: out, methodology:\"Selected public indicators are mapped to all 17 SDGs as decision-support signals; they are not official UN SDG scores.\" });\n});\n\nconst stateFips:Record={AL:'01',AK:'02',AZ:'04',AR:'05',CA:'06',CO:'08',CT:'09',DE:'10',DC:'11',FL:'12',GA:'13',HI:'15',ID:'16',IL:'17',IN:'18',IA:'19',KS:'20',KY:'21',LA:'22',ME:'23',MD:'24',MA:'25',MI:'26',MN:'27',MS:'28',MO:'29',MT:'30',NE:'31',NV:'32',NH:'33',NJ:'34',NM:'35',NY:'36',NC:'37',ND:'38',OH:'39',OK:'40',OR:'41',PA:'42',RI:'44',SC:'45',SD:'46',TN:'47',TX:'48',UT:'49',VT:'50',VA:'51',WA:'53',WV:'54',WI:'55',WY:'56'};\nfunction n(v:any){const x=Number(v);return Number.isFinite(x)?x:0}\nfunction cap(v:number){return Math.max(0,Math.min(100,Math.round(v)))}\napp.get(\"/api/property-sources\", async (c) => {\n const country = String(c.req.query(\"country\") || \"USA\").toUpperCase();\n const state = String(c.req.query(\"state\") ?? ((country === 'USA' || country === 'US') ? \"VA\" : \"\")).toUpperCase();\n const county = String(c.req.query(\"county\") || \"\").trim();\n const q = country === 'USA' || country === 'US' ? (county ? `${county} County ${state}` : state) : (county ? `${county}, ${country}` : country);\n const enc = encodeURIComponent(q);\n if(country !== 'USA' && country !== 'US'){\n const sources=[\n {type:'Global',name:'Government Property / Surplus Search',url:`https://www.google.com/search?q=${enc}+government+surplus+property+auction`},\n {type:'Global',name:'Tax / Distressed Property Search',url:`https://www.google.com/search?q=${enc}+tax+delinquent+distressed+property+auction`},\n {type:'Global',name:'Bank / Receiver Property Search',url:`https://www.google.com/search?q=${enc}+bank+owned+receiver+property+sale`},\n {type:'Global',name:'Land / Development Authority Search',url:`https://www.google.com/search?q=${enc}+land+authority+property+sale`},\n ];\n const ids=[['SI.POV.GINI',10,'Reduced Inequalities','Gini index'],['NY.GDP.PCAP.KD.ZG',8,'Decent Work & Economic Growth','GDP per capita growth %'],['EG.ELC.ACCS.ZS',7,'Affordable & Clean Energy','Electricity access %'],['SP.DYN.LE00.IN',3,'Good Health & Well-being','Life expectancy'],['SE.PRM.CMPT.ZS',4,'Quality Education','Primary completion %']];\n const metrics=(await Promise.all(ids.map(async ([id,goal,label,unit])=>{try{const r=await fetch(`https://api.worldbank.org/v2/country/${country}/indicator/${id}?format=json&per_page=8`);const j:any=await r.json();const row=Array.isArray(j?.[1])?j[1].find((x:any)=>x?.value!==null):null;return row?{goal,label,value:row.value,unit,score:null,year:row.date}:null}catch(_){return null}}))).filter(Boolean);\n return c.json({ok:true,country,state,county,sources,sdg:{available:metrics.length>0,area:q,source:'World Bank API',metrics,overall:null,note:'International scans use public country indicators as context. No official UN or property valuation score is implied.'},note:'Global property discovery uses public search routes because auction and distressed-property systems vary by country and jurisdiction.'});\n }\n const sources = [\n { type: \"Federal\", name: \"GSA Real Property Disposal\", url: \"https://disposal.gsa.gov/s/\" },\n { type: \"Federal\", name: \"HUD Home Store\", url: \"https://www.hudhomestore.gov/\" },\n { type: \"Federal\", name: \"USDA Rural Development Properties\", url: \"https://properties.sc.egov.usda.gov/resales/public/home\" },\n { type: \"Federal\", name: \"Treasury Real Property Auctions\", url: \"https://www.treasury.gov/auctions/treasury/rp/\" },\n { type: \"Local\", name: \"Tax Sale / Delinquent Tax Search\", url: `https://www.google.com/search?q=${enc}+tax+sale+delinquent+property` },\n { type: \"Local\", name: \"Land Bank Search\", url: `https://www.google.com/search?q=${enc}+land+bank+properties` },\n { type: \"Local\", name: \"Sheriff / Foreclosure Sale Search\", url: `https://www.google.com/search?q=${enc}+sheriff+foreclosure+sale+property` },\n { type: \"Local\", name: \"County Surplus Property Search\", url: `https://www.google.com/search?q=${enc}+county+surplus+real+estate` },\n ];\n let sdg:any={available:false,area:q,source:'U.S. Census ACS 5-year',metrics:[],overall:null};\n try{\n const sf=stateFips[state];\n if(sf){\n let countyFips='';\n if(county){\n const csv=await (await fetch('https://raw.githubusercontent.com/kjhealy/fips-codes/master/state_and_county_fips_master.csv')).text();\n const lines=csv.split(/\\r?\\n/).slice(1);\n const hit=lines.find(line=>{const parts=line.split(',');const fips=String(parts[0]||'').replaceAll('\"','').padStart(5,'0');const name=String(parts[1]||'').replaceAll('\"','').toLowerCase();const st=String(parts[2]||'').replaceAll('\"','').trim().toUpperCase();return st===state&&fips.startsWith(sf)&&name.includes(county.toLowerCase())});\n if(hit) countyFips=String(hit.split(',')[0]||'').replaceAll('\"','').padStart(5,'0').slice(2);\n }\n const geoid=countyFips?`05000US${sf}${countyFips}`:`04000US${sf}`;\n const cr:any=await (await fetch(`https://api.censusreporter.org/1.0/data/show/latest?table_ids=B17001,B19013,B19083,B23025,B25003,B15003&geo_ids=${geoid}`)).json();\n const d=cr?.data?.[geoid];\n if(d){\n const e=(table:string,key:string)=>n(d?.[table]?.estimate?.[key]);\n const poverty=e('B17001','B17001002')/Math.max(1,e('B17001','B17001001'))*100;\n const unemployment=e('B23025','B23025005')/Math.max(1,e('B23025','B23025003'))*100;\n const ownership=e('B25003','B25003002')/Math.max(1,e('B25003','B25003001'))*100;\n const degree=(e('B15003','B15003022')+e('B15003','B15003023')+e('B15003','B15003024')+e('B15003','B15003025'))/Math.max(1,e('B15003','B15003001'))*100;\n const gini=e('B19083','B19083001'),income=e('B19013','B19013001');\n const metrics=[\n {goal:1,label:'No Poverty',value:poverty,unit:'% below poverty',score:cap(100-poverty*4.5)},\n {goal:4,label:'Quality Education',value:degree,unit:'% bachelor degree or higher',score:cap(degree*2.4)},\n {goal:8,label:'Decent Work & Economic Growth',value:unemployment,unit:'% unemployment',score:cap(100-unemployment*7)},\n {goal:10,label:'Reduced Inequalities',value:gini,unit:'Gini index (0–1)',score:cap((1-gini)*100)},\n {goal:11,label:'Sustainable Cities & Communities',value:ownership,unit:'% owner-occupied housing',score:cap(ownership*1.2)},\n {goal:17,label:'Partnerships / Economic Capacity',value:income,unit:'median household income',score:cap(income/1000)},\n ];\n sdg={available:true,area:cr?.geography?.[geoid]?.name||q,source:cr?.release?.name||'American Community Survey',metrics,overall:Math.round(metrics.reduce((a:any,m:any)=>a+m.score,0)/metrics.length),note:'Directional local SDG alignment score built from public socioeconomic indicators; it is not an official UN SDG score.'};\n }\n }\n }catch(e){sdg.error='Local SDG data unavailable for this scan.'}\n return c.json({ ok: true, state, county, sources, sdg, note: \"Property discovery plus local SDG context. Listing-level aggregation varies by jurisdiction and provider access.\" });\n});\n\napp.post(\"/api/purchase-intents\", async (c) => {\n try {\n const body = await c.req.json();\n const name = requiredText(body.name, \"Name\").slice(0, 120);\n const email = requiredText(body.email, \"Email\").slice(0, 200);\n if (!/^\\S+@\\S+\\.\\S+$/.test(email)) return c.json({ ok:false, error:\"Valid email required\" }, 400);\n const catalog:any = {\n \"Impact Pro\": { amount:79, billing:\"monthly\" },\n \"Property Intelligence\": { amount:149, billing:\"monthly\" },\n \"Forge Pro\": { amount:249, billing:\"monthly\" },\n \"Enterprise\": { amount:999, billing:\"monthly\" },\n \"SDG Validation Sprint\": { amount:500, billing:\"one-time\" },\n \"SDG MVP Build Sprint\": { amount:2500, billing:\"one-time\" },\n };\n const plan = String(body.plan || \"\");\n const item = catalog[plan];\n if (!item) return c.json({ ok:false, error:\"Unknown plan\" }, 400);\n const r = await sqlite.execute({ sql:\"INSERT INTO purchase_intents (name,email,plan,amount,billing,status) VALUES (?,?,?,?,?,'creating_paypal')\", args:[name,email,plan,item.amount,item.billing] });\n const orderId = Number(r.lastInsertRowid);\n const origin = new URL(c.req.url).origin;\n const gateway = await fetch(\"https://tshc-payments-gateway.floot.app/_api/paypal/create-order\", {\n method:\"POST\",\n headers:{\"Content-Type\":\"application/json\"},\n body:JSON.stringify({ plan, forgeOrderId:orderId, returnUrl:`${origin}/pricing?paypal=return`, cancelUrl:`${origin}/pricing?paypal=cancel` }),\n });\n const payment:any = await gateway.json();\n if (!gateway.ok || !payment.ok) {\n await sqlite.execute({ sql:\"UPDATE purchase_intents SET status='payment_error' WHERE id=?\", args:[orderId] });\n return c.json({ ok:false, error:payment.error || \"Unable to create PayPal checkout\" }, 502);\n }\n await sqlite.execute({ sql:\"UPDATE purchase_intents SET status='pending_paypal', paypal_order_id=?, paypal_mode=? WHERE id=?\", args:[payment.orderId,payment.mode,orderId] });\n return c.json({ ok:true, order_id:orderId, plan, amount:item.amount, billing:item.billing, status:\"pending_paypal\", paypal_order_id:payment.orderId, approval_url:payment.approvalUrl, paypal_mode:payment.mode }, 201);\n } catch (err) { return c.json({ ok:false, error:err instanceof Error?err.message:\"Invalid request\" }, 400); }\n});\n\napp.post(\"/api/paypal/capture\", async (c) => {\n try {\n const body = await c.req.json();\n const paypalOrderId = requiredText(body.orderId, \"PayPal order ID\").slice(0, 120);\n const gateway = await fetch(\"https://tshc-payments-gateway.floot.app/_api/paypal/capture-order\", {\n method:\"POST\",\n headers:{\"Content-Type\":\"application/json\"},\n body:JSON.stringify({ orderId:paypalOrderId }),\n });\n const paid:any = await gateway.json();\n if (!gateway.ok || !paid.ok || paid.status !== \"COMPLETED\") return c.json({ ok:false, error:paid.error || \"Payment was not completed\" }, 402);\n const order = await sqlite.execute({ sql:\"SELECT * FROM purchase_intents WHERE id=? AND paypal_order_id=?\", args:[paid.forgeOrderId,paypalOrderId] });\n const row:any = order.rows[0];\n if (!row) return c.json({ ok:false, error:\"Forge order does not match PayPal order\" }, 409);\n if (row.plan !== paid.plan || Number(row.amount).toFixed(2) !== Number(paid.amount).toFixed(2)) return c.json({ ok:false, error:\"Payment verification mismatch\" }, 409);\n let ent = await sqlite.execute({ sql:\"SELECT * FROM entitlements WHERE order_id=?\", args:[row.id] });\n if (!ent.rows[0]) {\n const accessKey = crypto.randomUUID().replaceAll(\"-\",\"\") + crypto.randomUUID().replaceAll(\"-\",\"\");\n const expiresAt = row.billing === 'monthly' ? new Date(Date.now()+30*24*60*60*1000).toISOString() : null;\n await sqlite.execute({ sql:\"INSERT INTO entitlements (order_id,email,plan,access_key,expires_at) VALUES (?,?,?,?,?)\", args:[row.id,row.email,row.plan,accessKey,expiresAt] });\n await sqlite.execute({ sql:\"UPDATE purchase_intents SET status='paid_active', paid_at=CURRENT_TIMESTAMP WHERE id=?\", args:[row.id] });\n ent = await sqlite.execute({ sql:\"SELECT * FROM entitlements WHERE order_id=?\", args:[row.id] });\n }\n const entitlement:any = ent.rows[0];\n return c.json({ ok:true, status:\"paid_active\", order_id:row.id, plan:row.plan, access_key:entitlement.access_key });\n } catch (err) { return c.json({ ok:false, error:err instanceof Error?err.message:\"Payment capture failed\" }, 400); }\n});\n\napp.get(\"/api/purchase-intents\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user || session.user.username !== \"trinlahsovereignholdingscompl\") return c.json({ ok:false, error:\"Owner sign in required\" }, 401);\n const r = await sqlite.execute(\"SELECT * FROM purchase_intents ORDER BY id DESC LIMIT 100\");\n return c.json({ ok:true, orders:r.rows });\n});\n\napp.post(\"/api/purchase-intents/:id/activate\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user || session.user.username !== \"trinlahsovereignholdingscompl\") return c.json({ ok:false, error:\"Owner sign in required\" }, 401);\n const id = Number(c.req.param(\"id\"));\n const order = await sqlite.execute({ sql:\"SELECT * FROM purchase_intents WHERE id = ?\", args:[id] });\n const row:any = order.rows[0];\n if (!row) return c.json({ ok:false, error:\"Order not found\" }, 404);\n let ent = await sqlite.execute({ sql:\"SELECT * FROM entitlements WHERE order_id = ?\", args:[id] });\n if (!ent.rows[0]) {\n const accessKey = crypto.randomUUID().replaceAll(\"-\",\"\") + crypto.randomUUID().replaceAll(\"-\",\"\");\n const expiresAt = row.billing === 'monthly' ? new Date(Date.now()+30*24*60*60*1000).toISOString() : null;\n await sqlite.execute({ sql:\"INSERT INTO entitlements (order_id,email,plan,access_key,expires_at) VALUES (?,?,?,?,?)\", args:[id,row.email,row.plan,accessKey,expiresAt] });\n await sqlite.execute({ sql:\"UPDATE purchase_intents SET status = 'paid_active' WHERE id = ?\", args:[id] });\n ent = await sqlite.execute({ sql:\"SELECT * FROM entitlements WHERE order_id = ?\", args:[id] });\n }\n return c.json({ ok:true, entitlement:ent.rows[0] });\n});\n\napp.post(\"/api/access/verify\", async (c) => {\n const body = await c.req.json().catch(()=>({}));\n const key = String(body.key||\"\").trim();\n if(!key) return c.json({ok:false,error:\"Access key required\"},400);\n const r = await sqlite.execute({ sql:\"SELECT plan, active, created_at, expires_at FROM entitlements WHERE access_key = ?\", args:[key] });\n const row:any = r.rows[0];\n if (!row || !row.active) return c.json({ ok:false, error:\"Invalid or inactive access key\" }, 404);\n if(row.expires_at && new Date(String(row.expires_at)).getTime(){\n const ent=await entitlementFromRequest(c.req.raw);\n if(!ent) return c.json({ok:false,error:\"Premium access required\"},401);\n return c.json({ok:true,...ent});\n});\napp.post(\"/api/contact\", async (c) => {\n try {\n const body = await c.req.json();\n const name = requiredText(body.name, \"Name\").slice(0,120);\n const email = requiredText(body.email, \"Email\").slice(0,200);\n if (!/^\\S+@\\S+\\.\\S+$/.test(email)) return c.json({ok:false,error:\"Valid email required\"},400);\n const organization = String(body.organization||\"\").trim().slice(0,160);\n const subject = requiredText(body.subject, \"Subject\").slice(0,160);\n const message = requiredText(body.message, \"Message\").slice(0,5000);\n const r = await sqlite.execute({sql:\"INSERT INTO contact_requests (name,email,organization,subject,message) VALUES (?,?,?,?,?)\",args:[name,email,organization,subject,message]});\n return c.json({ok:true,id:Number(r.lastInsertRowid),message:\"Request received. TSHC will review it.\"},201);\n } catch(err) { return c.json({ok:false,error:err instanceof Error?err.message:\"Invalid request\"},400); }\n});\napp.get(\"/api/contact\", async (c) => {\n const session = await getOAuthUserData(c.req.raw);\n if (!session?.user || session.user.username !== \"trinlahsovereignholdingscompl\") return c.json({ok:false,error:\"Owner access required\"},401);\n const r=await sqlite.execute(\"SELECT * FROM contact_requests ORDER BY id DESC LIMIT 100\");\n return c.json({ok:true,requests:r.rows});\n});\n\napp.onError((err) => Promise.reject(err));\nexport default oauthMiddleware(app.fetch);","label",[137],"471b5774-b9e9-4c92-80c4-9ae35b7ed57b","README.md","01a0931d-4f94-72bb-aad6-541ee31b495b",42,["D",1789177879936],1,"# TSHC Sovereign Forge\n\nMonetization-first digital product platform for TSHC.\n\n## PayPal checkout integration\n\nThe production checkout routes are designed to use PayPal Orders v2 server-side. Add these encrypted environment variables before enabling live checkout:\n\n- `PAYPAL_CLIENT_ID`\n- `PAYPAL_CLIENT_SECRET`\n- `PAYPAL_MODE` = `sandbox` or `live` (defaults to `sandbox` until explicitly changed)\n\nThe app should never expose the client secret to the browser. Order creation and capture must remain server-side. If credentials are not present, the Forge falls back to the existing invoice/order-intake flow rather than pretending checkout succeeded.\n\n## Revenue flow\n\nPricing -> order intake -> PayPal checkout or invoice -> payment confirmation -> entitlement activation -> member access.\n\n## Owner controls\n\nOwner-only paid-order activation remains available for invoice/manual-payment workflows. Automatic entitlement activation should occur only after a verified PayPal capture.\n",[148],"e0643d78-2ef4-49ea-9f86-375bb21412e4","CHANGELOG.md","01a0931d-4f94-72bb-aad6-519736a08e1a",["D",1789174566710],"# Changelog\n\n## 2026-07-30 — Immutable asset caching\n\nFrontend files are now served at version-addressed URLs\n(`/__immutable/45/frontend/index.tsx`) with\n`Cache-Control: public, max-age=31536000, immutable`, so repeat visits load the\nwhole client graph from the browser cache — roughly 3× faster (~665ms → ~157ms\nmeasured). Publishing your val bumps its version, which changes every URL, so\ncaches invalidate automatically. Old-version URLs return 404 after a publish\n(like Next.js build assets); a reload picks up the new version.\n\nWhat changed in the template:\n\n- `frontend/index.html` → [`frontend/root.tsx`](/frontend/root.tsx): the HTML\n shell is now JSX and stamps asset URLs with `immutableFileUrl()`\n- [`index.ts`](/index.ts): serves `Root()` at `/`, and one\n `app.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path))` route\n serves all frontend files\n\n### Upgrading an existing remix\n\nYour copy of this template doesn't update automatically. Two options:\n\n**Minimal (most of the benefit):** point both routes at `serveImmutableFile` —\nyour existing bare URLs redirect into versioned space, the new route serves\nthem, and the whole module graph gets cached (costs one redirect per page view):\n\n```ts\nimport { serveImmutableFile } from \"https://esm.town/v/std/utils/index.ts\";\n\napp.get(\"/__immutable/*\", (c) => serveImmutableFile(c.req.path));\napp.get(\"/frontend/**/*\", (c) => serveImmutableFile(c.req.path)); // was serveFile\n```\n\n**Full upgrade (also removes the redirect):** three self-contained steps —\nno other files needed. Adjust the ``, favicon, and body of `Root()` to\nmatch your app's existing `index.html`, and stamp anything else your shell\nreferences directly (images, css) with `immutableFileUrl()`.\n\n1. Create `frontend/root.tsx`:\n\n```tsx\n/** @jsxImportSource npm:hono@4/jsx */\nimport { raw } from \"npm:hono@4/html\";\nimport { immutableFileUrl } from \"https://esm.town/v/std/utils/index.ts\";\n\n// The HTML shell for the app. It is never cached, so immutableFileUrl can stamp\n// the current val version into each asset URL — the browser caches those\n// immutably, and publishing the val changes the URLs, refetching exactly once.\nexport function Root() {\n return (\n <>\n {raw(\"<!DOCTYPE html>\")}\n <html lang=\"en\">\n <head>\n <meta charSet=\"UTF-8\" />\n <meta name=\"viewport\" content=\"width=device-width, initial-scale=1.0\" />\n <title>React Hono Val Town Starter\n

Diff · v123