{`uAgents · ${title}`}

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_512":513,"_514":515},"routes/_app.x.$handle.$name",{"_101":100,"_32":46,"_110":91,"_27":54,"_13":14,"_111":-5,"_11":112,"_113":114,"_115":116,"_117":118,"_119":120,"_20":-5,"_121":-5,"_122":-5,"_123":25,"_124":125,"_126":60,"_127":-5,"_128":-5,"_129":130},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_44":45,"_32":46,"_39":47,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":72,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":25},"version",167,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":33,"_34":35,"_36":38,"_39":40,"_41":14,"_42":43,"_24":25},"previous",{"_30":31,"_32":33,"_34":35,"_36":37},"deleted",false,"deletedHere","path","backend/core/shared.ts","latestPath","fileId","f3b19520-6128-11f1-b286-1607ee4eb77e","name","shared.ts","fileType","script","content","// shared.ts — Constants, env access, and JSON response helpers. No deps.\n\n// ── Env ───────────────────────────────────────────────────────────────────────\n// Deno.env.set() is a no-op on Val Town — set vars in the UI sidebar only.\n\nexport function env(key: string, fallback = \"\"): string {\n return Deno.env.get(key) ?? fallback;\n}\n\nexport const APP_NAME = \"uAgents\";\n\n// ── JSON helpers ────────────────────────────────────────────────────────────────\n\nexport type JsonObject = Record;\n\nexport function jsonOk(data: JsonObject = {}, status = 200): Response {\n return Response.json({ ok: true, ...data }, { status });\n}\n\nexport function jsonError(message: string, status = 400): Response {\n return Response.json({ ok: false, error: message }, { status });\n}\n\n// ── Keys ──────────────────────────────────────────────────────────────────────\n\n/** Generate a URL-safe random hex token. */\nexport function randomSecret(bytes = 24): string {\n const buf = new Uint8Array(bytes);\n crypto.getRandomValues(buf);\n return Array.from(buf, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/** Mint a self-identifying API key: `utt__`. The customer\n * prefix lets auth resolve the owner from the key alone — no customer in the URL. */\nexport function mintKey(customer: string): string {\n return `utt_${customer}_${randomSecret(18)}`;\n}\n","// shared.ts — Constants, env access, and JSON response helpers. No deps.\n\n// ── Env ───────────────────────────────────────────────────────────────────────\n// Deno.env.set() is a no-op on Val Town — set vars in the UI sidebar only.\n\nexport function env(key: string, fallback = \"\"): string {\n return Deno.env.get(key) ?? fallback;\n}\n\nexport const APP_NAME = \"uAgents\";\n\n// ── JSON helpers ────────────────────────────────────────────────────────────────\n\nexport type JsonObject = Record;\n\n/** Narrow to a plain object — excludes `null` and arrays. The single source of\n * truth for this guard; both the body reader and OAuth parsing rely on it. */\nexport function isRecord(value: unknown): value is JsonObject {\n return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nexport function jsonOk(data: JsonObject = {}, status = 200): Response {\n return Response.json({ ok: true, ...data }, { status });\n}\n\nexport function jsonError(message: string, status = 400): Response {\n return Response.json({ ok: false, error: message }, { status });\n}\n\n// ── Keys ──────────────────────────────────────────────────────────────────────\n\n/** Generate a URL-safe random hex token. */\nexport function randomSecret(bytes = 24): string {\n const buf = new Uint8Array(bytes);\n crypto.getRandomValues(buf);\n return Array.from(buf, (b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\n/** Mint an API key: `utt__`. The customer is authoritative\n * from the URL (`/c//…`); the prefix is just a human-readable label so a\n * leaked key is traceable to its owner — it is never parsed for auth. */\nexport function mintKey(customer: string): string {\n return `utt_${customer}_${randomSecret(18)}`;\n}\n","createdAt",["D",1780927363284],"branchVersion","branchId","b9c38076-09b5-49a6-8d65-4b509f9cce50","id","30ca1bfe-8d0b-41cd-af05-40f09f5a31a1","uAgents",["D",1780696391552],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","279c3e70-f2b8-11ef-a073-37253b8bcbda","pinnedFileId","f3dc8b86-6128-11f1-854e-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","019e994f-fcc4-73e9-86ed-2d14fe9f5dfa","tursoName","30ca1bfe8d0b41cdaf0540f09f5a31a1","tursoHostname","30ca1bfe8d0b41cdaf0540f09f5a31a1-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789531852468],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_101":100,"_109":105},"org",{"_101":100,"_102":103,"_104":105,"_18":-5,"_106":107,"_108":25},"branch",{"_13":90,"_32":91,"_44":43,"_92":45,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":46,"_99":100},"isOwned",679,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","ttai","handle","displayName","Tough Tongue AI","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/4b8edab4-7879-48e2-f777-109aa5256800/square512?exp=1789592399&sig=1dc414a4638b48164235bd54d129ecb3e418f18c74d0d19a178062f66f7c1d35","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_44":45,"_32":46,"_39":507,"_48":-5,"_49":25,"_50":51,"_52":51,"_53":54,"_55":-5,"_18":56,"_57":58,"_59":60,"_61":-5,"_62":-5,"_63":64,"_65":66,"_67":68,"_69":70,"_71":508,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":509,"_85":510,"_87":511,"_89":25},"tree",[201,222,235,236,237,238,239],"files",[201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239],"counts",{"_191":64,"_192":163,"_193":64,"_194":195,"_196":197},"contents",[131,132,133,134,135,136,137],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_44":185,"_32":186,"_30":187,"_141":-5,"_42":43,"_41":188,"_143":60,"_39":189,"_13":64,"_34":178,"_36":-5,"_24":25,"_147":-5,"_27":190},{"_44":180,"_32":181,"_30":182,"_141":-5,"_42":43,"_41":163,"_143":60,"_39":183,"_13":64,"_34":178,"_36":-5,"_24":25,"_147":-5,"_27":184},{"_44":174,"_32":51,"_30":175,"_141":-5,"_42":43,"_41":176,"_143":25,"_39":177,"_13":64,"_34":178,"_36":-5,"_24":25,"_147":-5,"_27":179},{"_44":166,"_32":167,"_30":168,"_141":-5,"_42":43,"_41":169,"_143":25,"_39":170,"_13":171,"_34":20,"_36":172,"_24":25,"_147":-5,"_27":173},{"_44":158,"_32":159,"_30":160,"_141":-5,"_42":43,"_41":161,"_143":25,"_39":162,"_13":163,"_34":20,"_36":164,"_24":25,"_147":-5,"_27":165},{"_44":149,"_32":150,"_30":58,"_141":-5,"_42":43,"_41":151,"_143":25,"_39":152,"_13":153,"_34":154,"_36":155,"_24":25,"_147":156,"_27":157},{"_44":138,"_32":139,"_30":140,"_141":-5,"_42":43,"_41":142,"_143":25,"_39":144,"_13":145,"_34":20,"_36":146,"_24":25,"_147":-5,"_27":148},"7356c43c-13ac-46b4-a8ef-a76ebc76451f","val.yml","f3605d0e-6128-11f1-9354-1607ee4eb77e","parentId",87,"latest",["D",1780918461860],4,"# val.yml — metadata contract for this val. Not consumed by `vt` today; reserved\n# for a future repo wrapper over vt-cli (safer deploys, env checks, file typing).\nname: \"uAgents\"\norg: \"ttai\"\npublic: true # intended private; free-plan private-val limit forced public at create\n# Single HTTP service. Two surfaces:\n# /c// → customer functions (key auth; cname taken from the URL)\n# a function may or may not invoke an agent internally\n# /admin → Val Town OAuth-gated admin UI (beer.css)\n# Only index.http.ts is the HTTP val. Other files must avoid Val Town's reserved\n# filename infixes (http, cron, email, …) — e.g. core/api.ts, not core/http.ts.\nfiles:\n index.http.ts: http\n# Env vars this App reads. Set them in the Val Town UI sidebar — never in code.\n# required: App will not work without it | optional: has a safe default\nenv:\n ADMIN_USERS: required # comma-separated Val Town usernames allowed into /admin\n OPENAI_API_KEY: required # used by the LangChain agents (/c//)\n OAUTH_STATE_ENCRYPTION_KEY: recommended # AES key for the admin OAuth session cookie; `openssl rand -base64 32`\n","label",[139],"5cf74936-a08e-41cd-8a1c-1d66a381b736","index.http.ts",151,["D",1780926225893],7,"http","// index.http.ts — HTTP entry point, built on Hono. Two surfaces, one app:\n// /c// → customer functions (each customer is a mounted sub-app)\n// /admin → Val Town OAuth admin UI (gated to ADMIN_USERS)\n// A function may invoke an agent internally; the API doesn't distinguish.\n// This file is pure wiring; logic lives in backend/ and frontend/.\n\nimport { Hono } from \"npm:hono@^4\";\nimport { type AdminUc, getAdminUc, withValTownAuth } from \"./backend/core/auth.ts\";\nimport { buildAdminView, buildCallsView, saveAuthForm } from \"./backend/core/handlers.ts\";\nimport { toErrorResponse } from \"./backend/core/api.ts\";\nimport { mountCustomers } from \"./backend/customers/registry.ts\";\nimport { LOGO_MIME, LOGO_SVG } from \"./frontend/assets.ts\";\nimport { renderAdmin, renderDenied, renderLogin } from \"./frontend/admin.tsx\";\nimport { renderCalls } from \"./frontend/calls.tsx\";\n\nconst app = new Hono();\n\n// -----------------------------------------------------------------------------\n// public assets — SVG logo / favicon (no auth; browser-cached)\n// -----------------------------------------------------------------------------\nconst logoResponse = () =>\n new Response(LOGO_SVG, {\n headers: { \"content-type\": LOGO_MIME, \"cache-control\": \"public, max-age=604800\" },\n });\napp.get(\"/logo.svg\", logoResponse);\napp.get(\"/favicon.ico\", logoResponse);\n\n// -----------------------------------------------------------------------------\n// admin — OAuth gate to ADMIN_USERS, then three pages\n// -----------------------------------------------------------------------------\nconst admin = new Hono<{ Variables: { uc: AdminUc } }>();\n\nadmin.use(\"*\", async (c, next) => {\n const uc = await getAdminUc(c.req.raw);\n if (!uc.isAuthed) return c.html(renderLogin(), 401);\n if (!uc.isAdmin) return c.html(renderDenied(uc.username ?? \"\"), 403);\n c.set(\"uc\", uc);\n await next();\n});\n\nadmin.get(\"/\", async (c) => {\n const uc = c.get(\"uc\");\n const saved = c.req.query(\"saved\") === \"1\";\n const view = await buildAdminView(\n uc.username ?? \"\",\n uc.avatarUrl,\n new URL(c.req.url).origin,\n saved,\n );\n return c.html(renderAdmin(view));\n});\n\nadmin.get(\"/calls\", async (c) => {\n const uc = c.get(\"uc\");\n return c.html(renderCalls(await buildCallsView(uc.username ?? \"\", uc.avatarUrl)));\n});\n\nadmin.post(\"/auth\", async (c) => {\n await saveAuthForm(c.req.raw);\n return c.redirect(\"/admin?saved=1\", 303);\n});\n\n// -----------------------------------------------------------------------------\n// wiring — mount surfaces; one error boundary; JSON 404\n// -----------------------------------------------------------------------------\napp.get(\"/\", (c) => c.redirect(\"/admin\"));\napp.route(\"/admin\", admin);\nmountCustomers(app);\n\napp.onError((err) => {\n const res = toErrorResponse(err);\n if (res) return res;\n throw err; // unknown error → surface the full stack (Val Town best practice)\n});\napp.notFound((c) => c.json({ ok: false, error: `Not found: ${c.req.path}` }, 404));\n\nexport default withValTownAuth((req) => app.fetch(req));\n","uagents",[150],"24194f00-10cf-47fb-bd6a-e98987c1c4f6","deno.json","f353dd04-6128-11f1-ac3a-1607ee4eb77e",89,["D",1780918461984],1,"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/348900b8b79f4a434cab4c74b3bc8d4d2fa8ee74/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": false,\n \"types\": [\n \"https://www.val.town/types/valtown.d.ts\"\n ],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"fmt\": {\n \"lineWidth\": 100,\n \"exclude\": [\".vt\"]\n },\n \"lint\": {\n \"exclude\": [\".vt\"],\n \"rules\": {\n \"exclude\": [\n \"no-explicit-any\",\n \"no-external-import\",\n \"no-import-prefix\"\n ]\n }\n },\n \"node_modules_dir\": false,\n \"unstable\": [\"temporal\", \"worker-options\", \"sloppy-imports\", \"node-globals\"]\n}\n",[159],"5ad3f6c8-6ae8-4c31-8a82-86c012a7a686","README.md","f3e9fe92-6128-11f1-b4a4-1607ee4eb77e",160,["D",1780926782705],10,"# uAgents\n\nA single Val Town HTTP val ([Hono](https://hono.dev) router) that exposes small, per-customer\n**functions** behind a per-customer API key, plus a [beer.css](https://www.beercss.com/) admin UI to\nmanage those keys. A function is a plain request→response unit that **may or may not invoke an\nagent** (LangChain + OpenAI) internally. Deno-native, no build step. Deployed to the `ttai` org.\nPair with **uFns** for lightweight integration endpoints.\n\nTwo surfaces, one val:\n\n| Surface | Path | Auth |\n| --------- | --------------------------- | -------------------------------------- |\n| Functions | `GET\\|POST /c//` | Bearer key, verified for that `cname` |\n| Admin UI | `GET /admin` (`/` → it) | Val Town OAuth, gated to `ADMIN_USERS` |\n\n> This repo does **not** use `vtx`. Use the native `vt` CLI directly. Pushing cleanly is your\n> responsibility.\n\n---\n\n## Layout\n\n```\nuAgents/\n index.http.ts Hono root app: admin sub-app + customer sub-apps + /logo.svg\n val.yml name, files contract, env declarations\n deno.json Deno/Val Town compiler + lint config\n backend/\n core/ cross-cutting infrastructure\n shared.ts env(), JSON helpers, mintKey()\n api.ts ApiError, readJsonObject(), error mapping ← mini framework\n db.ts SQLite: customer_auth + call_log\n auth.ts OAuth admin gate + authenticate(req, cname)\n handlers.ts admin view assembly + key-config form save\n agents/ LLM capability — functions call into this\n types.ts Agent / AgentCtx / AgentResult contract\n runtime.ts LangChain ChatOpenAI wiring + runAgent()\n get-a-new-quote.ts the quote agent (structured output)\n customers/ one auth scope per customer; their functions live here\n types.ts Fn / FnCtx / Customer / CustomerSpec contracts\n define.ts defineCustomer() — a Hono sub-app per customer\n builtins.ts reusable functions (echo) customers can register\n registry.ts all customers + mountCustomers() ← register here\n jjs/index.ts customer: Jhaji (echo)\n ttai/\n index.ts customer: ToughTongue AI (echo, get-a-new-quote)\n get-a-new-quote.ts function that invokes the quote agent\n frontend/\n layout.tsx Shell: beer.css doc + top app bar (logo + brand + actions + user)\n shared.tsx doc(), UserBadge (navbar), logout, banner\n assets.ts inline SVG \"uA\" logo → served at /logo.svg (favicon + navbar)\n admin.tsx admin (Auth + Debug tabs) / login / denied\n debug.tsx Debug tab: live runner (URL + Authorization + curl + body)\n calls.tsx Recent calls page\n types.ts admin view models\n styles/ modular CSS layers (Next.js-style)\n tokens.ts design tokens + semantic M3 aliases (palette is runtime-generated)\n base.ts document layout + typography scale\n components.ts cards, key row, tabs, chips, table, debug box\n index.ts composes layers → GLOBAL_CSS\n```\n\n> File naming: only `index.http.ts` is the HTTP entry. Val Town infers a file's val-type from\n> reserved name infixes (`http`, `cron`, `email`, …), so the mini-framework lives in `core/api.ts`,\n> **not** `core/http.ts`.\n\n---\n\n## Auth model (per-customer key, cname in the URL)\n\nThe customer (`cname`) is the first path segment: `/c//`. Auth is scoped to that cname:\n\n- Send the key as `Authorization: Bearer ` (or `X-API-Key: `).\n- Each customer is a [Hono](https://hono.dev) sub-app mounted at `/c/`. Its middleware (bound to\n that `id`) calls `authenticate(req, cname)` — loads ``'s config and compares the bearer\n token to the stored key in constant time. Rejected when the customer is unconfigured/disabled\n (403) or the key is missing/wrong (401). The customer module \"owns\" its name + validation by\n construction. A second middleware records every call (success or denied) to the call log.\n- **Admin UI** is gated by Val Town OAuth — only usernames in `ADMIN_USERS` get in.\n\nKeys are minted in the admin UI (generated on first save, rotatable), stored in SQLite, and shown in\nthe UI so you can copy them. They carry a readable `utt__` prefix, but routing no\nlonger depends on the prefix — the URL's `cname` is authoritative.\n\n---\n\n## Customers & functions\n\nEverything served over the API is a **function** — a `Fn = (ctx) => Response`. Functions are\nregistered per customer and exposed at `/c//`. A function may invoke an agent or not; the\nAPI doesn't distinguish. A customer's `index.ts` declares its functions via\n`defineCustomer({ id, label, fns })`; the factory builds a Hono sub-app, wiring auth + call-logging\nmiddleware (bound to that `id`) and a route per function. Routing, methods, and errors are Hono's\njob — there is no hand-rolled path parsing.\n\nEach customer is a folder under `backend/customers/`. To add one:\n\n1. Copy `backend/customers/jjs/` to `backend/customers//` and edit the id + label.\n2. Register it in `backend/customers/registry.ts`.\n3. In the admin UI, generate + enable its key.\n\nCurrent functions:\n\n- **`echo`** (builtin, all customers) — reflects method, query, and body back to the caller.\n- **`get-a-new-quote`** (`ttai`) — invokes a LangChain + OpenAI agent that invents a fresh, original\n quote. Output is schema-constrained (`quote`, `author`, `theme`) via structured output. Optional\n JSON body `{ \"theme\": \"courage\" }`; otherwise a theme is picked for you.\n\n**Add a function** — drop a file in `backend/customers//` exporting an `Fn`, then add it to that\ncustomer's `fns` map. Reusable functions (like `echo`) live in `backend/customers/builtins.ts`.\n\n**Invoke an agent from a function** — see `customers/ttai/get-a-new-quote.ts`: it adapts the request\ninto an `AgentCtx` and calls `runAgent()`. The runtime (`agents/runtime.ts`) owns all LLM wiring, so\nagents stay declarative; add new agents under `backend/agents/`.\n\n---\n\n## Environment variables\n\nSet these in the **Val Town UI sidebar** — never in code (`Deno.env.set()` is a no-op on Val Town).\nOur own vars are read through `env()` in `backend/core/shared.ts`; declared in `val.yml`.\n`OAUTH_STATE_ENCRYPTION_KEY` is read directly by the Val Town OAuth middleware (`std/oauth`).\n\n| Var | Status | Used by | Purpose |\n| ---------------------------- | ----------- | --------------------------------- | ------------------------------------------------------------ |\n| `ADMIN_USERS` | required | `core/auth.ts` (`/admin`) | Comma-separated Val Town usernames allowed into the admin |\n| `OPENAI_API_KEY` | required | `agents/runtime.ts` | OpenAI key for the LangChain agents (agent-backed functions) |\n| `OAUTH_STATE_ENCRYPTION_KEY` | recommended | `std/oauth` via `withValTownAuth` | AES-GCM key material that encrypts the admin session cookie |\n\nNotes:\n\n- `ADMIN_USERS` example: `alice,bob`. Empty/unset ⇒ nobody can reach `/admin` (everyone is denied).\n- `OPENAI_API_KEY` only matters for agents. Unset ⇒ agent-backed functions return **503**; plain\n functions (e.g. `echo`) still work.\n- `OAUTH_STATE_ENCRYPTION_KEY` — if unset, the middleware auto-generates a key and stores it in Val\n Town blob storage per redirect URI. That works, but **set it explicitly** so admin sessions\n survive redeploys and work on self-hosted runtimes. Any high-entropy string works (it's SHA-256'd\n to a 256-bit AES key); generate one with:\n\n```bash\n# generate a 32-byte base64 key (macOS: append `| pbcopy` to copy it)\nopenssl rand -base64 32\n```\n\nThen paste the value into the val's **Environment Variables** sidebar as\n`OAUTH_STATE_ENCRYPTION_KEY`. `vt` does not manage env vars — they must be set in the Val Town UI.\n\n---\n\n## Local → Val Town with `vt`\n\nRun from **inside this directory** (`exp/vals/uAgents/`).\n\n```bash\nvt status # review what changed\nvt push # push (forceful — revert via the Val Town website if needed)\nvt browse # open the deployed val\n```\n\nFirst push of a brand-new val: `vt create uAgents .`. To link an existing remote val, `vt clone` it\nto a temp dir and move its `.vt/` folder next to this code. After pushing, set the\n[environment variables](#environment-variables) in the Val Town UI.\n\n---\n\n## Try it\n\n```bash\n# 1. In /admin, generate + enable a key for \"ttai\", then:\nexport VT_TTAI_APP_TOKEN=\"generate-from-admin-ui\"\nexport VT_JJS_APP_TOKEN=\"generate-from-admin-ui\"\n\n# plain function (echo)\ncurl -X POST https://uagents.val.run/c/ttai/echo \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" \\\n -H \"Content-Type: application/json\" -d '{\"hi\":\"there\"}'\n\n# agent-backed function (fresh quote)\ncurl -X POST https://uagents.val.run/c/ttai/get-a-new-quote \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" \\\n -H \"Content-Type: application/json\" -d '{\"theme\":\"craftsmanship\"}'\n```\n\nNegative paths (auth + routing) — handy as a quick smoke test:\n\n```bash\nBASE=https://uagents.val.run\n\n# missing key → 401\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/echo\" -d '{}'\n\n# wrong key → 401\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/echo\" \\\n -H \"Authorization: Bearer nope\" -d '{}'\n\n# unknown customer → 404\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/nope/echo\" \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" -d '{}'\n\n# unknown function on a real customer → 404\ncurl -s -o /dev/null -w '%{http_code}\\n' -X POST \"$BASE/c/ttai/nope\" \\\n -H \"Authorization: Bearer $VT_TTAI_APP_TOKEN\" -d '{}'\n```\n",[167],"778fd8ad-492a-49a1-8f1c-acaf4a44ad0e","d658787c-633a-11f1-9b14-1607ee4eb77e",117,["D",1780923978042],"directory",[51],"6d14e6de-c8d3-45e7-ba6f-2ed984a1f71b","frontend","f2b2b82a-6128-11f1-9496-1607ee4eb77e",["D",1780696392346],[181],"157d3e42-b14b-4a4a-b3d1-13e8c95b8213","backend","f2d380b4-6128-11f1-b4a4-1607ee4eb77e",2,["D",1780696392550],[186],"pulls","branches","forks","envVars",{"_198":163,"_200":64},"connections",{"_198":64,"_199":64},"count","unfilledCount","emptyCount",{"_44":185,"_32":186,"_30":187,"_141":-5,"_42":43,"_41":188,"_143":60,"_39":504,"_13":64,"_34":178,"_36":-5,"_24":25,"_147":-5,"_241":505,"_27":506},{"_44":499,"_32":483,"_30":477,"_141":187,"_42":43,"_41":500,"_143":60,"_39":501,"_13":64,"_34":178,"_36":-5,"_24":25,"_147":-5,"_241":502,"_27":503},{"_44":492,"_32":401,"_30":493,"_141":477,"_42":43,"_41":494,"_143":25,"_39":495,"_13":163,"_34":35,"_36":496,"_24":25,"_147":-5,"_241":497,"_27":498},{"_44":484,"_32":485,"_30":486,"_141":477,"_42":43,"_41":487,"_143":25,"_39":488,"_13":188,"_34":35,"_36":489,"_24":25,"_147":-5,"_241":490,"_27":491},{"_44":475,"_32":257,"_30":476,"_141":477,"_42":43,"_41":478,"_143":25,"_39":479,"_13":163,"_34":35,"_36":480,"_24":25,"_147":-5,"_241":481,"_27":482},{"_44":470,"_32":437,"_30":433,"_141":187,"_42":43,"_41":471,"_143":60,"_39":472,"_13":64,"_34":178,"_36":-5,"_24":25,"_147":-5,"_241":473,"_27":474},{"_44":462,"_32":463,"_30":464,"_141":433,"_42":43,"_41":465,"_143":25,"_39":466,"_13":163,"_34":35,"_36":467,"_24":25,"_147":-5,"_241":468,"_27":469},{"_44":454,"_32":455,"_30":456,"_141":433,"_42":43,"_41":457,"_143":25,"_39":458,"_13":286,"_34":35,"_36":459,"_24":25,"_147":-5,"_241":460,"_27":461},{"_44":446,"_32":447,"_30":448,"_141":433,"_42":43,"_41":449,"_143":25,"_39":450,"_13":188,"_34":35,"_36":451,"_24":25,"_147":-5,"_241":452,"_27":453},{"_44":438,"_32":439,"_30":440,"_141":433,"_42":43,"_41":441,"_143":25,"_39":442,"_13":261,"_34":35,"_36":443,"_24":25,"_147":-5,"_241":444,"_27":445},{"_44":432,"_32":33,"_30":31,"_141":433,"_42":43,"_41":14,"_143":60,"_39":434,"_13":145,"_34":35,"_36":38,"_24":25,"_147":-5,"_241":435,"_27":436},{"_44":427,"_32":367,"_30":361,"_141":187,"_42":43,"_41":428,"_143":60,"_39":429,"_13":64,"_34":178,"_36":-5,"_24":25,"_147":-5,"_241":430,"_27":431},{"_44":422,"_32":421,"_30":415,"_141":361,"_42":43,"_41":423,"_143":60,"_39":424,"_13":64,"_34":178,"_36":-5,"_24":25,"_147":-5,"_241":425,"_27":426},{"_44":413,"_32":326,"_30":414,"_141":415,"_42":43,"_41":416,"_143":25,"_39":417,"_13":261,"_34":35,"_36":418,"_24":25,"_147":-5,"_241":419,"_27":420},{"_44":408,"_32":100,"_30":394,"_141":361,"_42":43,"_41":409,"_143":60,"_39":410,"_13":64,"_34":178,"_36":-5,"_24":25,"_147":-5,"_241":411,"_27":412},{"_44":400,"_32":401,"_30":402,"_141":394,"_42":43,"_41":403,"_143":25,"_39":404,"_13":163,"_34":35,"_36":405,"_24":25,"_147":-5,"_241":406,"_27":407},{"_44":392,"_32":326,"_30":393,"_141":394,"_42":43,"_41":395,"_143":25,"_39":396,"_13":261,"_34":35,"_36":397,"_24":25,"_147":-5,"_241":398,"_27":399},{"_44":384,"_32":385,"_30":386,"_141":361,"_42":43,"_41":387,"_143":25,"_39":388,"_13":188,"_34":35,"_36":389,"_24":25,"_147":-5,"_241":390,"_27":391},{"_44":376,"_32":377,"_30":378,"_141":361,"_42":43,"_41":379,"_143":25,"_39":380,"_13":64,"_34":35,"_36":381,"_24":25,"_147":-5,"_241":382,"_27":383},{"_44":368,"_32":369,"_30":370,"_141":361,"_42":43,"_41":371,"_143":25,"_39":372,"_13":261,"_34":35,"_36":373,"_24":25,"_147":-5,"_241":374,"_27":375},{"_44":359,"_32":257,"_30":360,"_141":361,"_42":43,"_41":362,"_143":25,"_39":363,"_13":188,"_34":35,"_36":364,"_24":25,"_147":-5,"_241":365,"_27":366},{"_44":180,"_32":181,"_30":182,"_141":-5,"_42":43,"_41":163,"_143":60,"_39":356,"_13":64,"_34":178,"_36":-5,"_24":25,"_147":-5,"_241":357,"_27":358},{"_44":351,"_32":324,"_30":318,"_141":182,"_42":43,"_41":352,"_143":60,"_39":353,"_13":64,"_34":178,"_36":-5,"_24":25,"_147":-5,"_241":354,"_27":355},{"_44":342,"_32":343,"_30":344,"_141":318,"_42":43,"_41":345,"_143":25,"_39":346,"_13":347,"_34":35,"_36":348,"_24":25,"_147":-5,"_241":349,"_27":350},{"_44":333,"_32":334,"_30":335,"_141":318,"_42":43,"_41":336,"_143":25,"_39":337,"_13":338,"_34":35,"_36":339,"_24":25,"_147":-5,"_241":340,"_27":341},{"_44":325,"_32":326,"_30":327,"_141":318,"_42":43,"_41":328,"_143":60,"_39":329,"_13":64,"_34":35,"_36":330,"_24":25,"_147":-5,"_241":331,"_27":332},{"_44":315,"_32":316,"_30":317,"_141":318,"_42":43,"_41":319,"_143":25,"_39":320,"_13":145,"_34":35,"_36":321,"_24":25,"_147":-5,"_241":322,"_27":323},{"_44":306,"_32":307,"_30":308,"_141":182,"_42":43,"_41":309,"_143":25,"_39":310,"_13":311,"_34":35,"_36":312,"_24":25,"_147":-5,"_241":313,"_27":314},{"_44":298,"_32":299,"_30":300,"_141":182,"_42":43,"_41":301,"_143":60,"_39":302,"_13":188,"_34":35,"_36":303,"_24":25,"_147":-5,"_241":304,"_27":305},{"_44":290,"_32":291,"_30":292,"_141":182,"_42":43,"_41":293,"_143":25,"_39":294,"_13":163,"_34":35,"_36":295,"_24":25,"_147":-5,"_241":296,"_27":297},{"_44":281,"_32":282,"_30":283,"_141":182,"_42":43,"_41":284,"_143":25,"_39":285,"_13":286,"_34":35,"_36":287,"_24":25,"_147":-5,"_241":288,"_27":289},{"_44":273,"_32":274,"_30":275,"_141":182,"_42":43,"_41":276,"_143":25,"_39":277,"_13":153,"_34":35,"_36":278,"_24":25,"_147":-5,"_241":279,"_27":280},{"_44":265,"_32":266,"_30":267,"_141":182,"_42":43,"_41":268,"_143":25,"_39":269,"_13":261,"_34":35,"_36":270,"_24":25,"_147":-5,"_241":271,"_27":272},{"_44":256,"_32":257,"_30":258,"_141":182,"_42":43,"_41":259,"_143":25,"_39":260,"_13":261,"_34":35,"_36":262,"_24":25,"_147":-5,"_241":263,"_27":264},{"_44":174,"_32":51,"_30":175,"_141":-5,"_42":43,"_41":176,"_143":25,"_39":253,"_13":64,"_34":178,"_36":-5,"_24":25,"_147":-5,"_241":254,"_27":255},{"_44":166,"_32":167,"_30":168,"_141":-5,"_42":43,"_41":169,"_143":25,"_39":250,"_13":171,"_34":20,"_36":172,"_24":25,"_147":-5,"_241":251,"_27":252},{"_44":158,"_32":159,"_30":160,"_141":-5,"_42":43,"_41":161,"_143":25,"_39":247,"_13":163,"_34":20,"_36":164,"_24":25,"_147":-5,"_241":248,"_27":249},{"_44":149,"_32":150,"_30":58,"_141":-5,"_42":43,"_41":151,"_143":25,"_39":244,"_13":153,"_34":154,"_36":155,"_24":25,"_147":156,"_241":245,"_27":246},{"_44":138,"_32":139,"_30":140,"_141":-5,"_42":43,"_41":142,"_143":25,"_39":240,"_13":145,"_34":20,"_36":146,"_24":25,"_147":-5,"_241":242,"_27":243},["D",1780918461860],"children",[],[139],["D",1780926225893],[],[150],["D",1780918461984],[],[159],["D",1780926782705],[],[167],["D",1780923978042],[],[51],"e6c43e3f-a453-4a65-b1fb-325865833366","types.ts","f4109fca-6128-11f1-90f7-1607ee4eb77e",84,["D",1780918461680],3,"// types.ts — View models passed from backend handlers into the admin UI.\n\nexport interface CustomerView {\n id: string;\n label: string;\n fns: string[];\n secret: string;\n enabled: boolean;\n configured: boolean;\n updatedTs: string;\n}\n\nexport interface CallView {\n id: number;\n customer: string;\n fn: string;\n ok: boolean;\n ts: string;\n}\n\nexport interface AdminView {\n username: string;\n avatarUrl?: string;\n baseUrl: string;\n customers: CustomerView[];\n saved: boolean;\n}\n\nexport interface CallsView {\n username: string;\n avatarUrl?: string;\n calls: CallView[];\n}\n",[],[181,257],"2dc41bdc-8803-4b08-baab-e60f01a5f127","shared.tsx","fe520698-632d-11f1-aacf-1607ee4eb77e",165,["D",1780927362920],"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// shared.tsx — Render helpers + navbar/chrome shared across admin pages.\n\nimport { render } from \"https://esm.sh/preact-render-to-string@6.6.7?deps=preact@10.29.1\";\nimport type { VNode } from \"https://esm.sh/preact@10.29.1\";\n\n/** Serialize a Preact tree into a full HTML document string. */\nexport function doc(node: VNode): string {\n return \"\" + render(node);\n}\n\n/** SQLite `YYYY-MM-DD HH:MM:SS` (UTC) → ISO string for ``. */\nexport function isoUtc(ts: string): string {\n return ts.replace(\" \", \"T\") + \"Z\";\n}\n\n/** Signed-in user pill (avatar + name). Clicking reveals the sign-out popover —\n * toggled by USER_MENU_JS in the Shell. */\nexport function UserMenu({ username, avatarUrl }: { username: string; avatarUrl?: string }) {\n return (\n \n );\n}\n\n/** Signed-out affordance for the top app bar. */\nexport function LoginLink() {\n return (\n \n login\n Sign in\n \n );\n}\n\n/** Sign-out form button; `small` renders the compact variant for the user popover. */\nexport function LogoutButton({ small }: { small?: boolean }) {\n return (\n \n );\n}\n\n/** Inline confirmation shown after a successful key-config save. */\nexport function SavedBanner() {\n return (\n

\n check_circle Saved.\n

\n );\n}\n",[],[181,266],"3366be11-3c03-458d-a27e-0ef0e72ffa6b","layout.tsx","f3474b16-6128-11f1-b4a4-1607ee4eb77e",161,["D",1780926782713],"/** @jsxImportSource https://esm.sh/preact@10.29.1 */\n// layout.tsx — Shared beer.css (Material Design 3) document shell. The top app bar\n// is the app's persistent chrome: brand on the left; page actions, the signed-in\n// user, and sign-out on the right. Styling comes from the modular styles/ layer.\n\nimport type { ComponentChildren } from \"https://esm.sh/preact@10.29.1\";\nimport { GLOBAL_CSS } from \"./styles/index.ts\";\nimport { LOGO_SVG } from \"./assets.ts\";\nimport { LoginLink, UserMenu } from \"./shared.tsx\";\n\nconst BEER_CSS = \"https://cdn.jsdelivr.net/npm/beercss@4.0.21/dist/cdn/beer.min.css\";\nconst BEER_JS = \"https://cdn.jsdelivr.net/npm/beercss@4.0.21/dist/cdn/beer.min.js\";\nconst MDC_JS =\n \"https://cdn.jsdelivr.net/npm/material-dynamic-colors@1.1.2/dist/cdn/material-dynamic-colors.min.js\";\nconst ICONS =\n \"https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz,wght,FILL,GRAD@40,400,0,0\";\n\n/** Brand seed — beer.css generates the full M3 palette from this at runtime. */\nconst BRAND_SEED = \"#2E6BE6\";\n\nexport interface ShellUser {\n username: string;\n avatarUrl?: string;\n}\n\ninterface ShellProps {\n title: string;\n user?: ShellUser;\n navActions?: ComponentChildren;\n children: ComponentChildren;\n}\n\n/** Full HTML document: top app bar (brand + actions + user) and a page container. */\nexport function Shell({ title, user, navActions, children }: ShellProps) {\n return (\n \n \n \n \n {`uAgents · ${title}`}\n \n \n \n \n \n

Diff · v167